|
http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=24451 [º¹»ç]
Linux ȯ°æ¿¡¼ ROP¸¦ ¼º°øÇÑÈÄ
À©µµ¿ì¿¡ °©Àڱ⠰ü½ÉÀÌ »ý°Ü¼ ROP¹®¼¸¦ ã¾Æº¸°íÀÖ½À´Ï´Ù.
º¸È£±â¹ýÀº DEP / aslr ÀÌ·¸°Ô 2°³Àε¥
Á¦°¡ »ý°¢ÇÑ ¹æ¹ýÀÌ
aslrÀÌÀû¿ëµÇÁö¾ÊÀº ¸ðµâÀ» ãÀºÈÄ
±× ¸ðµâ¾È¿¡¼ ROP¿¡ °ø°Ý¿¡ ÇÊ¿äÇÑ °¡Á¬µéÀ» ã´Â°Ì´Ï´Ù!! (ÀÌ·¸°Ô »ý°¢ÇÑÀÌÀ¯°¡.. ¿ì¼± aslrÀÌ Àû¿ëµÇ¾îÀÖÁö¾ÊÀ¸´Ï±ñ °¡Á¬À» ã¾Æµµ ÁÖ¼Ò°¡ÀÏÁ¤ÇÏÁö¾ÊÀ»±î¾Æ?~ÇØ¼...)
±×¸®°í ±× ãÀº °¡Á¬µé·Î exploit! ÇØ¾ßÇϴµ¥ ROP¿¡´ëÇÑ Áö½ÄÀÌ ºÎÁ·Çؼ Áö±Ý ÀÌ»óÅ¿¡¼ ¸îÀϵ¿¾È Á¦ÀÚ¸®°ÉÀ½ÀÔ´Ï´Ù.....¤Ì¤Ì¤Ì¤Ì
À©µµ¿ì ROP²À ¼º°øÇϰí½ÍÀºµ¥ ¹®¼¸¦ ãÀ»¼ö°¡¾ø³×¿ä ( Çϳª ã±ä ã¾ÒÁö¸¸ Á¦°¡ ¸Ó¸®°¡¾ÈÁÁ¾Æ¼ ÀÌÇØÇϱⰡ ³Ê¹«¾î·Æ½À´Ï´Ù.¤Ì¤Ì)
ÁÁÀº ÀÚ·áÀÖÀ¸¸é ¾Ë·ÁÁֽø鰨»çÇϰڽÀ´Ï´Ù!
ºÏ¸¶Å© |
Hit : 9191 Date : 2012/09/14 02:54
|