๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ
  • Tried. Failed. Logged.
728x90

์ „์ฒด ๊ธ€748

CVE-2025-56383 — Notepad++ DLL Hijacking CVE-2025-56383 — Notepad++ DLL Hijacking2025๋…„ 9์›” 26์ผ GitHub ์‚ฌ์šฉ์ž zer0t0๊ฐ€ PoC๋ฅผ ๊ณต๊ฐœํ•˜๋ฉฐ CVE๊ฐ€ ๋“ฑ์žฌ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ ๋“ฑ์žฌ 5์ผ ํ›„ ์—ฌ๋Ÿฌ ๋‹น์‚ฌ์ž๋“ค์ด ์ด์˜๋ฅผ ์ œ๊ธฐํ–ˆ๋Š”๋ฐ, ํ•ด๋‹น ์ทจ์•ฝ์ ์ด ์ž„์˜ ๊ถŒํ•œ ์—†๋Š” ์‚ฌ์šฉ์ž๊ฐ€ ์“ฐ๊ธฐ ์ ‘๊ทผํ•  ์ˆ˜ ์žˆ๋Š” ๋””๋ ‰ํ† ๋ฆฌ์— ์ œํ’ˆ์„ ์„ค์น˜ํ•  ๋•Œ๋งŒ ๋ฐœ์ƒํ•œ๋‹ค๋Š” ์ด์œ ์ž…๋‹ˆ๋‹ค. https://www.levelblue.com/blogs/spiderlabs-blog/notepad-dll-hijacking-cve-2025-56383-cvss-8-4-or-cvss-0-0/Notepad++ ๊ฐœ๋ฐœ์ž Don Ho๋Š” "CVE-2025-56383์€ NVD์—์„œ ๋ณธ ๊ฐ€์žฅ ํ™ฉ๋‹นํ•œ ๋“ฑ์žฌ ์ค‘ ํ•˜๋‚˜"๋ผ๋ฉฐ, Notepad++์™€ ํ”Œ๋Ÿฌ๊ทธ์ธ์€ ๊ธฐ๋ณธ์ ์œผ๋กœ ๋ณดํ˜ธ๋œ Program.. 2026. 4. 10.
NGINX - ๋ฆฌ๋ฒ„์Šค ํ”„๋ก์‹œ ์„ค์ • Nginx ๋ฆฌ๋ฒ„์Šค ํ”„๋ก์‹œ ๊ฐ„๋‹จ ์š”์•ฝ1. ์„ค์น˜ bashsudo apt updatesudo apt install nginx2. ์„ค์ • ํŒŒ์ผ ์ƒ์„ฑ bashsudo nano /etc/nginx/sites-available/example.com3. ๊ธฐ๋ณธ ์„ค์ • ์˜ˆ์‹œ nginxserver { listen 80; server_name example.com www.example.com; location / { proxy_pass http://localhost:3000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-.. 2025. 11. 20.
๋งฅ๋ถ High Sierra(๊ตฌ๋ฒ„์ „ OS) "๋ณต๊ตฌ ์„œ๋ฒ„์— ์—ฐ๊ฒฐํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค" ํ•ด๊ฒฐ โ€ป์ฝ๊ธฐ ์ „์— ์ž ๊น ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ์„ ํ™•์ธ ํ•˜๋Š” ๊ฒƒ์„ ๊ถŒ์žฅโ€ป์™€์ดํŒŒ์ด ๋“ฑ ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ์ด ์ •์ƒ์ธ์ง€ ํ™•์ธํ•˜๋Š” ๊ฒƒ์ด ์ข‹๋‹ค. ์œ ํ‹ธ๋ฆฌํ‹ฐ์—์„œ ํ„ฐ๋ฏธ๋„์„ ์—ฐ ๋‹ค์Œ ping 8.8.8.8 ํ˜น์€ curl http://www.apple.com/library/test/success.html ์„ ์ž…๋ ฅํ•ด์„œ ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ์ด ์ž˜๋˜๋Š”์ง€ ์šฐ์„  ํ™•์ธ ์ถœ์ฒ˜: https://www.youtube.com/watch?v=ouNQS36dIBw 1. Window > Installer Log 2. Installer Log์—์„œ OSISSoftwareUpdateController: Failed... URL ์ฃผ์†Œ ๋ณต์‚ฌ 3. ์œ ํ‹ธ๋ฆฌํ‹ฐ > ํ„ฐ๋ฏธ๋„ ์—ด๊ธฐ 4. ํ„ฐ๋ฏธ๋„์— ๋‹ค์Œ ๋ช…๋ น์–ด ์ž…๋ ฅ(์ฃผ์˜ https๋ฅผ http๋กœ ์ˆ˜์ •) nvram IASUCatalogURL="ht.. 2025. 11. 16.
์•…์„ฑ์ฝ”๋“œ - ๋“œ๋กญํผ ๊ตฌํ˜„(์‹คํ–‰ ํŒŒ์ผ ํ•ฉ์น˜๊ธฐ) โ€ป ์•…์„ฑ์ฝ”๋“œ ์ž‘๋™ ์›๋ฆฌ์— ๋Œ€ํ•ด์„œ ์ดํ•ดํ•˜๊ธฐ ์œ„ํ•œ ๋ชฉ์ ์œผ๋กœ๋งŒ ์‚ฌ์šฉํ•ด ์ฃผ์„ธ์š”. main.c#include #include #include "a_exe.h"#include "b_exe.h"// ์ด ๋ถ€๋ถ„์€ ์‹ค์ œ A.exe์™€ B.exe์˜ ๋ฐ”์ดํŠธ ๋ฐฐ์—ด๋กœ ๊ต์ฒดํ•ด์•ผ ํ•จextern unsigned char a_exe[];extern unsigned int a_exe_len;extern unsigned char b_exe[];extern unsigned int b_exe_len;// ํŒŒ์ผ๋กœ ์ €์žฅํ•˜๋Š” ํ•จ์ˆ˜void drop_file(const char *filename, const unsigned char *data, unsigned int len) { HANDLE hFile = CreateFileA(filename, G.. 2025. 11. 4.
NAS - ์‹œ๋†€๋กœ์ง€ ๋‚˜์Šค HTTP/HTTPS ํฌํŠธ ๊ด€๋ จ SSL ์ธ์ฆ์„œ ๋ฐœ๊ธ‰ ์ดํ›„ TLS/SSL ํ†ต์‹ ์„ ํ•˜๊ธฐ ์œ„ํ•ด์„œ๋Š” 5001๋ฒˆ ํฌํŠธ๋กœ ์ ‘๊ทผํ•ด์•ผ ํ•จHTTPHTTPS50005001 ์˜ˆ) http://mynas:5000 -> https://mynas:5001 2025. 10. 5.
์•„ํŒŒ์น˜ - ํด๋ผ์šฐ๋“œ ํ”Œ๋ ˆ์–ด ์•„์ดํ”ผ๋งŒ ์ ‘๊ทผ ํ—ˆ์šฉ(.htaccess) nano /var/www/html/.htaccess deny from allallow from 173.245.48.0/20allow from 103.21.244.0/22allow from 103.22.200.0/22allow from 103.31.4.0/22allow from 141.101.64.0/18allow from 108.162.192.0/18allow from 190.93.240.0/20allow from 188.114.96.0/20allow from 197.234.240.0/22allow from 198.41.128.0/17allow from 162.158.0.0/15allow from 104.16.0.0/13allow from 104.24.0.0/14allow from 172.64.0.0/1.. 2025. 8. 27.
๋ฆฌ๋ˆ…์Šค - ssh ๋กœ๊ทธ์ธ ํšŸ์ˆ˜ ์ดˆ๊ณผ IP ์ฐจ๋‹จ(fail2ban) fail2ban ํŒจํ‚ค์ง€ ์„ค์น˜sudo apt updatesudo apt install fail2ban -y ์„ค์ • ํŒŒ์ผ ์ˆ˜์ •(โ€ปjail.conf๋Š” ๋ฐฑ์—…์šฉ, ์‹ค์ œ ์„ค์ •์€ jail.local)sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local fail2ban ์„ค์ • sudo nano /etc/fail2ban/jail.local [sshd]enabled = trueport = sshfilter = sshdlogpath = /var/log/auth.logmaxretry = 3bantime = 48hfindtime = 10m maxretry: ํ—ˆ์šฉํ•  ์ตœ๋Œ€ ๋กœ๊ทธ์ธ ์‹คํŒจ ํšŸ์ˆ˜bantime: ์ฐจ๋‹จ ์‹œ๊ฐ„(100 = 100์ดˆ, 10m = 10๋ถ„, 1h = 1์‹œ๊ฐ„)findtime.. 2025. 8. 20.
ํด๋ผ์šฐ๋“œ ํ”Œ๋ ˆ์–ด ์„ค์ • ํ›„ 522 ์—๋Ÿฌ ๋ฐœ์ƒ ์›์ธ ์›น ์„œ๋ฒ„์— SSL ์ธ์ฆ์„ ์ง€์›ํ•˜์ง€ ์•Š๋Š” ๊ฒฝ์šฐ(HTTP/80๋งŒ ์šด์šฉ ์ค‘์ธ ๊ฒฝ์šฐ) ์›น ์„œ๋ฒ„์™€ ํด๋ผ์šฐ๋“œ ํ”Œ๋ ˆ์–ด ์„œ๋กœ๊ฐ„ ์˜ค๋ฅ˜๊ฐ€ ์ƒ๊ธฐ๊ฒŒ ๋จ ํ•ด๊ฒฐ) SSL/TLS ์•”ํ˜ธํ™” > ํ˜„์žฌ ์•”ํ˜ธํ™” ๋ชจ๋“œ๊ฐ€ "๊ฐ€๋ณ€"์ด์–ด์•ผ ํ•จ 2025. 8. 18.
Flipper Zero - ํ‚ค์  (keygen.co) https://keygen.co/ keygenkeygen generates working, high-quality 3D-printable models of keys based on given parameters. Select a key type to get started. Please wait... keygen generates working, high-quality 3D-printable models of keys based on given parameters. To generate a key,keygen.co 2025. 8. 17.
java.security.cert.certpathvalidatorexception trust anchor for certification ์—๋Ÿฌ ISRG Root X1 ํ˜น์€ ISRG Root X2 .pem ํŒŒ์ผ ์„ค์น˜https://letsencrypt.org/certificates/ Chains of TrustThis page describes all of the current and relevant historical Certification Authorities operated by Let’s Encrypt. Note that a CA is most correctly thought of as a key and a name: any given CA may be represented by multiple certificates which all contailetsencrypt.org์ถœ์ฒ˜: https://github.com/TeamNewPipe/Ne.. 2025. 8. 13.
๋ชจ๋“  ์ธ์ฝ”๋”ฉ ๋””์ฝ”๋”ฉ ๋ฌธ์ž ํ™•์ธ ์‚ฌ์ดํŠธ(dencode.com) https://dencode.com/ DenCode | Encoding & Decoding Online ToolsEncoding and Decoding site. e.g. HTML Escape / URL Encoding / Base64 / MD5 / SHA-1 / CRC32 / and many other String, Number, DateTime, Color, Hash formats!dencode.com 2025. 8. 5.
๋ธ”๋ž™๋ฒ ๋ฆฌ - bar ์„ค์น˜ ๊ด€๋ จ ๋งํฌ BAR ํŒŒ์ผ ์„ค์น˜ ํ”„๋กœ๊ทธ๋žจhttps://github.com/xsacha/Sachesi GitHub - xsacha/Sachesi: Firmware, extractor, searcher and installer for Blackberry 10Firmware, extractor, searcher and installer for Blackberry 10 - xsacha/Sachesigithub.com ํ„ฐ๋ฏธ๋„ ์•ฑ(term-48) ์•„์นด์ด๋ธŒ ์ฃผ์†Œhttps://archive.org/details/term-48_bb10 2025. 7. 30.
728x90

ํ‹ฐ์Šคํ† ๋ฆฌํˆด๋ฐ”