๋ฆฌ์–ผ์›”๋“œ (Real world)

์—ฌ์ž์นœ๊ตฌ ํ•ดํ‚น ์‹œ๋„ํ•œ ์ค‘๊ตญ์ธ ํ•ด์ปค๋“ค ๋šœ๊นŒํŒฌ ์ฐ

2020. 11. 27. 02:22

์—ฌ์ž์นœ๊ตฌ๊ฐ€ ๋ธ”๋กœ๊ทธ ์ธ๋„ค์ผํ•˜๋ผ๊ณ  ๋ณด๋‚ด์ค€ ์‚ฌ์ง„ใ…Žใ…Ž ๐Ÿ’•

 

์‚ฌ๊ฑด ๊ฐœ์š” ๐Ÿ‘ฝ

์—ฌ์ž์นœ๊ตฌ ํ•ธ๋“œํฐ์œผ๋กœ ์˜จ ๋ฌธ์ž ๋ฉ”์‹œ์ง€

  ์–ด๋Š๋‚  ์—ฌ์ž์นœ๊ตฌ๋ž‘ ๊ฐ™์ด ์žˆ๋‹ค๊ฐ€ ์—ฌ์ž์นœ๊ตฌ ํ•ธ๋“œํฐ์œผ๋กœ ๋ฌธ์ž๋ฉ”์‹œ์ง€๊ฐ€ ์ฐฉ์‹ ๋˜์—ˆ๋‹ค. ์ •ํ™•ํžˆ๋Š” ๊ธฐ์–ต์ด ๋‚˜์งˆ ์•Š๋Š”๋ฐ, ์—ฌ์ž์นœ๊ตฌ๊ฐ€ ํด๋ฆญํ•ด๋ณด๊ณ  ๋‚˜์„œ '์ด ํŽ˜์ด์ง€๋Š” ์œ„ํ—˜ํ•ฉ๋‹ˆ๋‹ค'๋ผ๋Š” ๋ฉ”์‹œ์ง€๊ฐ€ ๋–ด๋‹ค๊ณ  ์•Œ๋ ค์ค˜์„œ ํ”ผ์‹ฑ ์‚ฌ์ดํŠธ๊ฒ ๋‹ค๊ณ  ์ถ”์ธกํ–ˆ๋‹ค. ๊ทธ๋ƒฅ ํ˜ธ๊ธฐ์‹ฌ์— ์ € URL์„ ๋ถ„์„ํ•ด๋ณด๊ธฐ ์‹œ์ž‘ํ–ˆ๋‹ค.

 

URL ๋ถ„์„ ๐Ÿคบ

 ๋ฌธ์ž์— ์ฒจ๋ถ€๋œ URL์— curl์„ ํ†ตํ•ด HTTP Request๋ฅผ ๋ณด๋ƒˆ๋”๋‹ˆ ์•„๋ž˜์™€ ๊ฐ™์€ Response๊ฐ€ ๋„์ฐฉํ–ˆ๋‹ค. 

โžœ  ~ curl -lvvv http://reurl.kr/464D5677VB                                                             
*   Trying 210.180.118.169...
* TCP_NODELAY set
* Connected to reurl.kr (210.180.118.169) port 80 (#0)
> GET /464D5677VB HTTP/1.1
> Host: reurl.kr
> User-Agent: curl/7.58.0
> Accept: */*
> 

< HTTP/1.1 404 Not Found
< Date: Sat, 28 Nov 2020 09:07:19 GMT
< Server: Apache
< Set-Cookie: PHPSESSID=mbhqnjtudsbdgg6104mfkp2hv7; expires=Sat, 28-Nov-2020 21:07:19 GMT; path=/
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Content-Length: 1432
< Content-Type: text/html;charset=utf-8
< 
<!DOCTYPE html>

<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1.0" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="format-detection" content="telephone=no, address=no, email=no" />
<meta content="ํ‚ค์›Œ๋“œ๊ด‘๊ณ , ๋ฐ”์ด๋Ÿด๋งˆ์ผ€ํŒ…" name="Keyword" />

<script>alert('์ ‘๊ทผ ๊ฑฐ๋ถ€ ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.');location.href='http://reurl.kr/';</script><script>location.href='http://qkuygbienb.duckdns.org/?lktrljhsnc';</script>
<!--
<iframe id="iframe" frameborder="0" style="overflow:hidden;overflow-x:hidden;overflow-y:hidden;height:100%;width:100%;position:absolute;top:0px;left:0px;right:0px;bottom:0px" height="100%" width="100%" src="http://qkuygbienb.duckdns.org/?lktrljhsnc">
</iframe>
-->

<script>
</script>
</html>
<!--
๋งŒ์•ฝ ์—๋Ÿฌ ํŽ˜์ด์ง€์˜ ๊ธธ์ด๊ฐ€ 513 ๋ฐ”์ดํŠธ๋ณด๋‹ค ์ž‘๋‹ค๋ฉด,
์ธํ„ฐ๋„ท ์ต์Šคํ”Œ๋กœ๋Ÿฌ๋Š” ์ด ํŽ˜์ด์ง€๊ฐ€ ์ถœ๋ ฅํ•˜๋Š” ์—๋Ÿฌ ํŽ˜์ด์ง€๋ฅผ ์ถœ๋ ฅํ•˜์ง€ ์•Š๊ณ 
์ž์ฒด์ ์œผ๋กœ ์ œ๊ณตํ•˜๋Š” 'HTTP ์˜ค๋ฅ˜ ๋ฉ”์‹œ์ง€' ํ™”๋ฉด์„ ์ถœ๋ ฅํ•  ๊ฒƒ์ด๋‹ค.
๋งŒ์•ฝ ์—๋Ÿฌ ํŽ˜์ด์ง€์˜ ๊ธธ์ด๊ฐ€ 513 ๋ฐ”์ดํŠธ๋ณด๋‹ค ์ž‘์€๋ฐ
์—๋Ÿฌ ํŽ˜์ด์ง€์˜ ๋‚ด์šฉ์ด ์ธํ„ฐ๋„ท ์ต์Šคํ”Œ๋กœ๋Ÿฌ์—์„œ๋„ ์˜ฌ๋ฐ”๋ฅด๊ฒŒ ์ถœ๋ ฅ๋˜๊ธธ ์›ํ•œ๋‹ค๋ฉด,
์‘๋‹ต ๊ฒฐ๊ณผ์— ์ด ์ฃผ์„๊ณผ ๊ฐ™์€ ๋‚ด์šฉ์„ ํฌํ•จ์‹œ์ผœ์„œ
์—๋Ÿฌ ํŽ˜์ด์ง€์˜ ๊ธธ์ด๊ฐ€ 513 ๋ฐ”์ดํŠธ ์ด์ƒ์ด ๋˜๋„๋ก ํ•ด ์ฃผ์–ด์•ผ ํ•œ๋‹ค.
์ฐธ๊ณ ๋กœ ์ด ์ฃผ์„์€ 456๋ฐ”์ดํŠธ์ด๋‹ค.
-->
* Connection #0 to host reurl.kr left intact

reurl.kr ์„ ํ†ตํ•ด ํ•ด์ปค๊ฐ€ ์ง€์ •ํ•ด๋‘” URL๋กœ ํฌ์›Œ๋”ฉํ•˜๋Š” ํ–‰์œ„๋ฅผ ํƒ์ง€ํ•  ์ˆ˜ ์žˆ์—ˆ์œผ๋ฉฐ, ํ•ด๋‹น URL์€ qkuygbienb.duckdns.org/?lktrljhsn ์ด์—ˆ๋‹ค.

 

๋ณธ๊ฒฉ์ ์ธ Phishing ์‚ฌ์ดํŠธ ๋ถ„์„ ๐Ÿคฟ

 ์‚ฌ์‹ค ๊ณ ๋ฐฑํ•  ๊ฒƒ์ด ํ•˜๋‚˜ ์žˆ๋Š”๋ฐ, ์‚ฌ๊ฑด์ด ๋ฐœ์ƒํ–ˆ๋˜ ๋‚ ์€ ์ง€๋‚œ ํ™”์š”์ผ(2020.11.24.)์ด์—ˆ๊ณ  ํ˜„์žฌ ๋ธ”๋กœ๊ทธ์— ์ œ๋Œ€๋กœ ํฌ์ŠคํŒ…ํ•˜๋Š” ๋‚ ์€ ํ† ์š”์ผ(2020.11.28.)์ด๋‹ค. ๊ทธ๋™์•ˆ ํ”ผ์‹ฑ ์‚ฌ์ดํŠธ๊ฐ€ ๋‚ ๋ผ๊ฐ„ ๋“ฏ ํ•˜๋‹ค. ๊ทธ๋ž˜์„œ ๋˜ฅ ๋ˆ„๋‹ค๊ฐ€ ๋Š๊ธด ๊ฒƒ์ฒ˜๋Ÿผ ์•ˆํƒ€๊น๊ฒŒ ๋ธ”๋กœ๊ทธ ํฌ์ŠคํŒ…๋„ ์—ฌ๊ธฐ์„œ ๋งˆ์น  ์ˆ˜ ๋ฐ–์— ์—†๊ฒŒ ๋˜์—ˆ๋‹ค.

 

ใ…ˆใ……ใ…ˆใ……

 

 ์ด์ œ๋ถ€ํ„ฐ๋Š” ๊ธฐ์–ต์— ์˜์กดํ•ด์„œ ์ž‘์„ฑํ•ด๋ณด๊ฒ ๋‹ค. ํ•ด๋‹น ์‚ฌ์ดํŠธ์—์„œ๋Š” navigator๋ฅผ ํ†ตํ•ด OS, ๋ชจ๋ฐ”์ผ ์—ฌ๋ถ€๋ฅผ ํ™•์ธํ•˜๊ณ  ์ด์— ๋งž๋Š” ์‚ฌ์ดํŠธ๋กœ ๊ฐ•์ œ ์ด๋™์‹œํ‚จ๋‹ค. ์ตœ์ข…์ ์œผ๋กœ ์ด๋™๋˜๋Š” ์‚ฌ์ดํŠธ๋Š” ๋„ค์ด๋ฒ„์˜ ๋กœ๊ทธ์ธ ์ฐฝ์„ ๋ฒ ๋‚€ ๊ฐ€์งœ ๋กœ๊ทธ์ธ์ฐฝ์ด์—ˆ๋‹ค. ๋‹น์—ฐํžˆ ๋„ค์ด๋ฒ„๋กœ ๋ฐ์ดํ„ฐ๊ฐ€ ์ „์†ก๋ ๋ฆฌ ๋งŒ๋ฌดํ•˜๊ณ , ์ž…๋ ฅ๋œ ์ •๋ณด๋Š” ๊ณง๋ฐ”๋กœ ์„œ๋ฒ„์— ์ €์žฅ๋˜๋Š” ๋“ฏ ๋ณด์˜€๋‹ค.

 

 

์ค‘๊ตญ์ธ ํ•ด์ปค๋“ค ๊ณต๊ฒฉ ๐Ÿ˜ˆ

 ๋„ท์ƒ์—์„œ ์ค‘๊ตญ์ธ๋“ค์„ ๊ณต๊ฒฉํ•  ๋•Œ ์ž์ฃผ ์‚ฌ์šฉํ•˜๋Š” ๊ฒƒ์ด ๋ฐ”๋กœ '์ค‘๊ตญ์ธ ๋ถ€์  ๋Œ“๊ธ€'์ด๋‹ค. ์ค‘๊ตญ์˜ ์ธํ„ฐ๋„ท ๊ฒ€์—ด ์‹œ์Šคํ…œ์„ ์ด์šฉํ•œ ๊ณต๊ฒฉ์ด๋‹ค. ์•„๋ž˜ ๊ธ€์„ ์ฐธ๊ณ ํ•ด๋ณด๋ฉด ์–ด๋–ค ํ˜•์‹์ธ์ง€ ์•Œ ์ˆ˜ ์žˆ์„ ๊ฒƒ์ด๋‹ค.

 

www.inven.co.kr/board/lol/4625/2300564

 

๋ฆฌ๊ทธ์˜ค๋ธŒ๋ ˆ์ „๋“œ ์ธ๋ฒค : ์œ ์šฉํ•œ ์ค‘๊ตญ์–ด ๋ชจ์Œ - LoL/e์Šคํฌ์ธ  ์ด์•ผ๊ธฐ ๊ฒŒ์‹œํŒ

์ตœ๊ทผ ๋ฐฉ๋ฌธํ•œ ๊ฒŒ์‹œํŒ ์ด์ „ ๋‹ค์Œ

www.inven.co.kr

๊ฐ€์งœ ๋กœ๊ทธ์ธ ์ฐฝ์— ์œ„์˜ ์ค‘๊ตญ์–ด ๋ฌธ์žฅ๋“ค์„ ํ•œ๋•€ํ•œ๋•€ ์ž…๋ ฅํ•˜๊ณ  ์—ฌ๋Ÿฌ๋ฒˆ ์ „์†ก์‹œ์ผฐ๋‹ค. ๊ทธ ํ•ด์ปค๋“ค์ด ์–ด๋–ป๊ฒŒ ๋  ์ง€๋Š” ๋ชจ๋ฅด๊ฒ ์ง€๋งŒ ๋”ฐ๋”ํ•œ ์ฒ˜๋ฒŒ์„ ๋ฐ›๊ฒŒ ๋˜์—ˆ์œผ๋ฉด ์ข‹๊ฒ ๋‹ค ^______^