๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ
๐Ÿ”’์ •๋ณด๋ณด์•ˆ/๋ฆฌ๋ฒ„์‹ฑ

๋ฆฌ๋ฒ„์‹ฑ - ๋ฆฌ๋ฒ„์Šค ์ฝ”์–ด(ReverseCore)

by Janger 2022. 9. 16.
728x90
๋ฐ˜์‘ํ˜•

https://reversecore.com/18?category=216978 

 

PE(Portable Executable) File Format (1) - PE Header

Introduction Windows ์šด์˜์ฒด์ œ์˜ PE(Portable Executable) File Format ์— ๋Œ€ํ•ด์„œ ์•„์ฃผ ์ƒ์„ธํžˆ ๊ณต๋ถ€ํ•ด ๋ณด๋„๋ก ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค. PE format ์„ ๊ณต๋ถ€ํ•˜๋ฉด์„œ Windows ์šด์˜์ฒด์ œ์˜ ๊ฐ€์žฅ ํ•ต์‹ฌ์ ์ธ ๋ถ€๋ถ„์ธ Process, Memory, D..

reversecore.com

 

๋ฆฌ๋ฒ„์‹ฑ ํ•ต์‹ฌ ์›๋ฆฌ ์ €์ž๋ถ„์ด ์šด์˜ํ•˜์‹œ๋Š” ๋ธ”๋กœ๊ทธ์ธ๋ฐ ์šด์˜์ฒด์ œ์˜ ๊ตฌ์กฐ ์›๋ฆฌ(PE)์™€ DLL Injection, API Hooking๊ณผ ๊ฐ™์€ ์ž์„ธํ•œ ํ•ดํ‚น ๊ธฐ๋ฒ•์˜ ์›๋ฆฌ๋„ ์ž˜ ์„ค๋ช…์ด ๋˜์–ด์žˆ๋‹ค. 

728x90
๋ฐ˜์‘ํ˜•

'๐Ÿ”’์ •๋ณด๋ณด์•ˆ > ๋ฆฌ๋ฒ„์‹ฑ' ์นดํ…Œ๊ณ ๋ฆฌ์˜ ๋‹ค๋ฅธ ๊ธ€

๋ฆฌ๋ฒ„์‹ฑ - go ์–ธ์–ด .exe ํŒŒ์ผ main ํ•จ์ˆ˜ ๋ฐ print ํ•จ์ˆ˜ ์ฐพ๊ธฐ  (0) 2024.03.07
๋ฆฌ๋ฒ„์‹ฑ - Bush hid the facts, ์œˆ๋„์šฐ XP ๋ฉ”๋ชจ์žฅ ๋ฒ„๊ทธ  (0) 2023.07.12
๋ฆฌ๋ฒ„์‹ฑ - ์˜จ๋ผ์ธ ์†Œ์Šค ์ฝ”๋“œ์—์„œ ์–ด์…ˆ๋ธ”๋ฆฌ ์ฝ”๋“œ๋กœ ๋ณ€ํ™˜(godbolt.org)  (0) 2023.04.17
๋ฆฌ๋ฒ„์‹ฑ - ๋ฐ”์ด๋„ˆ๋ฆฌ์— ์„ค์ •๋œ ๋ณดํ˜ธ ๊ธฐ๋ฒ• ํ™•์ธ(checksec)  (0) 2023.03.26
๋ฆฌ๋ฒ„์‹ฑ - ์œˆ๋„์šฐ ์‰˜์ฝ”๋“œ ์‹คํ–‰ C์–ธ์–ด ์†Œ์Šค  (0) 2023.03.23

๊ด€๋ จ๊ธ€

ํ‹ฐ์Šคํ† ๋ฆฌํˆด๋ฐ”