Lee-GyuHyeok

I study security and share my knowledge.

Recent posts

PermX - WriteUP

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://app.hackthebox.com/machines/PermX ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Editorial ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ vHOST ํƒ์ƒ‰์œผ๋กœ lmsํ•˜์œ„๋„๋ฉ”์ธ ์‹๋ณ„ Chamilo lms CVE ์‹๋ณ„ ๋ฐ ํŒŒ์ผ ์—…๋กœ๋“œ ์ทจ์•ฝ์ ์„ ํ†ตํ•ด ...

HA Joker CTF

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://tryhackme.com/r/room/jokerctf ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Dreaming ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ ์ •๋ณด ์ˆ˜์ง‘ ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ถ€๋ฅดํŠธ ํฌ์‹ฑ์œผ๋กœ /app ๊ฒฝ๋กœ ํ™•๋ณด pluck CMS 4.7.13 ์˜ CVE๊ฐ€ ์กด์žฌ ์›น์‰˜...

Dreaming - WriteUP

ํ•ด๋‹น ๋ฌธ์ œ๋Š” https://tryhackme.com/r/room/dreaming ์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Dreaming ์‹œ์Šคํ…œ ๋ชจ์˜ ์นจํˆฌ ์ˆ˜ํ–‰ ๋‚ด์šฉ ์ •๋ณด ์ˆ˜์ง‘ ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ถ€๋ฅดํŠธ ํฌ์‹ฑ์œผ๋กœ /app ๊ฒฝ๋กœ ํ™•๋ณด pluck CMS 4.7.13 ์˜ CVE๊ฐ€ ์กด์žฌ ์›น์‰˜...

pspy64

pspy ๋ž€ ๋ฌด์—‡์ธ๊ฐ€? ๋ฆฌ๋ˆ…์Šค ์‹œ์Šคํ…œ์—์„œ ์‹คํ–‰ ์ค‘์ธ ํ”„๋กœ์„ธ์Šค๋ฅผ ์‹ค์‹œ๊ฐ„ ๋ชจ๋‹ˆํ„ฐ๋ง ๋ฐ ์ƒˆ๋กœ์šด ํ”„๋กœ์„ธ์Šค๋ฅผ ๊ฐ์ง€ํ•˜๋Š” ๋„๊ตฌ๋กœ์„œ, root๊ถŒํ•œ ์—†์ด ์‚ฌ์šฉ์ด ๊ฐ€๋Šฅํ•˜๋ฉฐ, ์‹œ์Šคํ…œ์˜ ๋ชจ๋“  ํ”„๋กœ์„ธ์Šค๋ฅผ ์ถ”์ ํ•  ์ˆ˜ ์žˆ๋‹ค. cron์„ ์‚ฌ์šฉํ•˜์ง€ ์•Š์•„๋„ cron ๊ณผ ์œ ์‚ฌํ•œ ๋ฐ˜๋ณต๋œ ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•˜๋Š” ํ”„๋กœ์„ธ...

ffuf

ffuf ๋ž€ ๋ฌด์—‡์ธ๊ฐ€? ffuf๋Š” Go๋กœ ์ž‘์„ฑ๋œ ๋น ๋ฅธ ์›น ํผ์ €๋กœ, ์ผ๋ฐ˜์ ์ธ ๋””๋ ‰ํ† ๋ฆฌ ๊ฒ€์ƒ‰, ๊ฐ€์ƒ ํ˜ธ์ŠคํŠธ ๊ฒ€์ƒ‰(DNS ๋ ˆ์ฝ”๋“œ ์—†์Œ), ํ•˜์œ„๋„๋ฉ”์ธ ๊ฒ€์ƒ‰, GET ๋ฐ POST ๋งค๊ฐœ๋ณ€์ˆ˜ ํผ์ง•์„ ํ—ˆ์šฉํ•œ๋‹ค. ๊ธฐ๋ณธ์ ์ธ ์‚ฌ์šฉ ๋ฐฉ๋ฒ• ffuf -u http://example.com/FU...