ํฌ์ŠคํŒ… ์ธ๋„ค์ผ ์ด๋ฏธ์ง€

War Games/Lord of SQLInjection

[LOS] Level1: gremlin

Lord Of SQLInjection LOS์‹œ์ž‘! ์ €๊ธฐ enter to the dungeon ํด๋ฆญํ•˜๋ฉด ์ฒ˜์Œ์ด๋ฉด join, or loginํ•ฉ์‹œ๋‹ค ์šฐ์„  ์ฒซ๋ฒˆ์งธ ๋‹จ๊ณ„์ธ gremlin๋‹จ๊ณ„์— ๋“ค์–ด๊ฐ€๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์€ ํŽ˜์ด์ง€๊ฐ€ ๋œน๋‹ˆ๋‹ค.

2019.12.30 ๊ฒŒ์‹œ๋จ

 ํฌ์ŠคํŒ… ์ธ๋„ค์ผ ์ด๋ฏธ์ง€

War Games/ํ•ด์ปค์Šค์ฟจ LOB

[ํ•ด์ปค์Šค์ฟจ LOB] Level2: gremlin >> cobolt

Level 2. Gremlin >> Cobolt Theme: Basic BufferOverFlow (smaller buffer) ๋“ค์–ด๊ฐ‘์‹œ๋‹ค. id: gremlin pw: hello bof world ๊ธฐ๋ณธ bash2์ž…๋ ฅ ํ›„, ls -l๋กœ ๋””๋ ‰ํ† ๋ฆฌ๋ฅผ ํ™•์ธํ•ด์ฃผ๋ฉด [gremlin@localhost gremlin]$ bash2 [gremlin@localhost gremlin]$ ls -l total 20 -rwsr-sr-x 1 cobolt cobolt 11970 Feb 26 2010 cobolt -rw-r--r-- 1 gremlin gremlin 291 Mar 29 2010 cobolt.c cobolt.cํŒŒ์ผ์„ ์—ด์–ด๋ณด๋ฉด [gremlin@localhost gremlin]$ nl cobolt.c 1 /* 2 The ..

2019.09.24 ๊ฒŒ์‹œ๋จ

 ํฌ์ŠคํŒ… ์ธ๋„ค์ผ ์ด๋ฏธ์ง€

War Games/ํ•ด์ปค์Šค์ฟจ LOB

[ํ•ด์ปค์Šค์ฟจ LOB] Level1: gate >> gremlin

Level 1. Gate >> Gremlin Theme: Basic BufferOverFlow LOB์— ์˜ค์‹  ์—ฌ๋Ÿฌ๋ถ„๋“ค ํ™˜์˜ํ•ฉ๋‹ˆ๋‹ค! ์šฐ์„  ๋“ค์–ด๊ฐ€์ค์‹œ๋‹ค. id: gate pw: gate ์•„ ์ผ๋‹จ ์ฒซ ๋ฌธ์ œ์ธ ๋งŒํผ, ์šฐ๋ฆฌ๊ฐ€ ์ด ๋ฌธ์ œ๋ฅผ ์™œ ํ’€๊ณ ์žˆ์œผ๋ฉฐ, ์–ด๋–ป๊ฒŒ ํ•˜๋ฉด ์ด ๋ฌธ์ œ๋ฅผ ํ’€ ์ˆ˜ ์žˆ๋Š” ๊ฒƒ์ธ์ง€ ํƒ๊ตฌํ•ด๋ด…์‹œ๋‹ค. ์ผ๋‹จ ํฌ๋„ˆ๋ธ” ๋ฌธ์ œ๋“ค์˜ ๊ธฐ๋ณธ์€ ๊ด€๋ฆฌ์ž์˜ ๊ถŒํ•œ์„ ํƒˆ์ทจํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค. ๊ทธ๋Ÿฐ ๋’ค ์ •์ƒ์ ์œผ๋กœ๋Š” ์ ‘๊ทผํ•  ์ˆ˜ ์—†๋Š” ๊ณณ๋“ค์„ ์ ‘๊ทผํ•œ๋‹ค๋Š” ๊ฒƒ์ด ๊ธฐ๋ณธ์ ์ธ ์‹œ์Šคํ…œ ํ•ดํ‚น์˜ ๊ฐœ๋…์ด๊ณ ์š”. ๊ทธ๋ž˜์„œ ๋˜‘๊ฐ™์ด LOB์˜ ๋ชจ๋“  ๋ฌธ์ œ๋“ค๋„ ์ƒ์œ„ ๊ถŒํ•œ์„ ํš๋“ํ•˜์—ฌ ๋‹ค์Œ ๋‹จ๊ณ„์˜ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์•Œ์•„๋‚ด๋Š” ๊ฒƒ์ด ๋ชฉ์ ์ž…๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋ฉด LOB ๋ฌธ์ œ์˜ ํ๋ฆ„์€ ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค. 1. ํ”„๋กœ๊ทธ๋žจ์ƒ์˜ ์ทจ์•ฝ์ ์„ ๋ฐœ๊ฒฌํ•ฉ๋‹ˆ๋‹ค. 2. ์ทจ์•ฝ์ ์„ ๊ธฐ๋ฐ˜์œผ๋กœ ๊ณต๊ฒฉ ์‹œ๋‚˜๋ฆฌ์˜ค๋ฅผ ์ž‘์„ฑํ•ฉ๋‹ˆ๋‹ค. 3...

2019.09.18 ๊ฒŒ์‹œ๋จ