Lee-GyuHyeok

I study security and share my knowledge.

Recent posts

(bWAPP)Cross-Origin Resource Sharing (AJAX)

์ทจ์•ฝ์  ์„ค๋ช… ํ•ด๋‹น ์‹œ๋‚˜๋ฆฌ์˜ค์—์„œ๋Š” SOP ์ •์ฑ…์„ ์™„ํ™”ํ•˜๊ธฐ ์œ„ํ•ด ์‚ฌ์šฉ๋˜๋Š” CORS ์ ์šฉ์ด ์ž˜ ๋˜์–ด์žˆ๋Š”์ง€ ํ™•์ธํ•˜๋Š” ์‹œ๋‚˜๋ฆฌ์˜ค์ด๋‹ค. SOP๋ž€ ์„œ๋กœ ๋‹ค๋ฅธ ์ถœ์ฒ˜ ์ฆ‰ ๋‹ค๋ฅธ ๋„๋ฉ”์ธ์—์„œ์˜ ๊ณต๊ฒฉ์„ ๋ฐฉ์ง€ํ•˜๊ธฐ ์œ„ํ•œ ์›น ๋ธŒ๋ผ์šฐ์ € ๋ณด์•ˆ ๋ฉ”์ปค๋‹ˆ์ฆ˜์ด๋ฉฐ, ๋‹ค๋ฅธ ๋„๋ฉ”์ธ์˜ ๊ฒฝ์šฐ ์ ‘๊ทผ์„ ํ—ˆ์šฉํ•˜์ง€ ์•Š๋Š”๋‹ค. ์ด ๋•Œ ...

(bWAPP)Arbitrary File Access (Samba)

์ทจ์•ฝ์  ์„ค๋ช… samba๋Š” ๋ฆฌ๋ˆ…์Šค ํ˜น์€ ์œˆ๋„์šฐ ์‹œ์Šคํ…œ์—์„œ ํŒŒ์ผ ๋ฐ ํ”„๋ฆฐํ„ฐ ๊ณต์œ ๋ฅผ ์œ„ํ•œ ํ”„๋กœ๊ทธ๋žจ์ด๋‹ค. ์ด ๋•Œ samba ์„œ๋น„์Šค์— ๋Œ€ํ•œ ์ž˜๋ชป๋œ ๋ณด์•ˆ์„ค์ •์œผ๋กœ ์„œ๋ฒ„์— ์กด์žฌํ•˜๋Š” ํŒŒ์—˜ ๋Œ€ํ•œ ์ ‘๊ทผ์ด ๊ฐ€๋Šฅํ•˜๋‹ค๊ณ  ํ•œ๋‹ค. samba ์„œ๋น„์Šค๊ฐ€ ๋™์ž‘์ค‘์ธ ๊ฑฐ ๊ฐ™์œผ๋ฉฐ, ์ž„์˜์˜ ํŒŒ์ผ์— ๋Œ€ํ•œ ์ฝ...

Insecure direct object references (IDOR)

ํ•ด๋‹น ์ทจ์•ฝ์ ์€ ๋ฌด์—‡์ธ๊ฐ€? IDOR์€ ๊ฐ„์ ‘ ๊ฐœ์ฒด ์ฐธ์กฐ๋ฅผ ๋‚˜ํƒ€๋‚ด๋ฉฐ, ์–ดํ”Œ๋ฆฌ์ผ€์ด์…˜์„ ์‚ฌ์šฉํ•˜๋Š” ์‚ฌ์šฉ์ž๊ฐ€ ์ง์ ‘ ์ž…๋ ฅํ•˜๋Š” ๊ฐ’์„ ๊ธฐ๋ฐ˜์œผ๋กœ ํŠน์ • ๊ฐœ์ฒด์— ๋Œ€ํ•œ ์ง์ ‘์ ์ธ ์ ‘๊ทผ์„ ์ œ๊ณตํ•  ๋•Œ ๋ฐœ์ƒํ•˜๋Š” ์ทจ์•ฝ์ ์œผ๋กœ, ์‚ฌ์šฉ์ž๊ฐ€ ์ผ๋ฐ˜์ ์œผ๋กœ ์ ‘๊ทผํ•  ์ˆ˜ ์—†๋Š” ๋‹ค๋ฅธ ์‚ฌ์šฉ์ž์˜ ๋ฐ์ดํ„ฐ๋‚˜ ๊ฐœ์ฒด๋ฅผ accessํ•  ์ˆ˜ ...

(bWAPP)Insecure DOR - Insecure DOR (Order Tickets)

์–ด๋– ํ•œ ํ‹ฐ์ผ“์„ ํŒ๋งคํ•˜๋Š” ๊ธฐ๋Šฅ์ด ๊ตฌํ˜„๋˜์–ด ์žˆ๋‹ค. ํ‹ฐ์ผ“ ๊ตฌ๋งค์— ๋Œ€ํ•œ ๊ฐœ์ˆ˜ ์ œํ•œ์€ ์—†์œผ๋ฉฐ, ํ•œ์žฅ๋‹น 15์œ ๋ฃŒ์— ํŒ๋งค๋˜๊ณ  ์žˆ๋‹ค. ๊ตฌ๋งค์‹œ ์ฆ‰์‹œ ๊ตฌ๋งค๊ฐ€ ๋˜๋ฉฐ, 15 ์œ ๋ฃŒ๊ฐ€ ์ž๋™์œผ๋กœ ๋น ์กŒ๋‹ค๊ณ  ๋˜์–ด ์žˆ๋‹ค. ticket_quantity=1&ticket_price=15...