'2011/10/07'에 해당되는 글 15건

  1. 2011.10.07 WebGoat-General : Http Splitting
  2. 2011.10.07 2011-10-06
  3. 2011.10.07 2011-10-05
  4. 2011.10.07 2011-10-04
  5. 2011.10.07 2011-10-03
  6. 2011.10.07 2011-10-02
  7. 2011.10.07 2011-10-01
  8. 2011.10.07 2011-09-30
  9. 2011.10.07 2011-09-29
  10. 2011.10.07 2011-09-28
download download HTTP 요청을 조작하여 수행을 하면 됩니다.

CR(%0d) : Carriage Return
LF(%0a) : Line Feed
을 활용하여 공격을 합니다.


더보기



방법1 .
http://yehg.net/encoding/
사이트에 접속하여 위에 코드처럼 Response 헤더를 작성합니다. 쿠키값을 보여주겠습니다.


- encodeURIComponent 버튼을 눌러 줍니다.
  내용이 인코딩 된것을 확인 할 수 있습니다.
 


-인코딩된 코드에 엔터 부분이 LF(%0A)로 표시 됩니다
-LF앞에 CR(%0D)를 입력하여 줍니다.  이렇게 해주면 ko-KR부분은 값 뒷부분은 헤더 정보로 인식하게 됩니다.
-CR코드를 쉽게 입력하기 위해서 아래의 항목을 선택합니다.



방법 2. 
다양한 방법과 툴이 만능 개발툴 UltraEdit로 코드를 바꿔보겠습니다.
울트라 에디터로 해당 내용을 작성합니다. 글을 모두 선택후에 
아래 그림처럼 HTML URL Encode 버튼을 누르변 CR코드까지 한번에 변환이 됩니다.





- 완료된 코드를 복사하여 WebGoat 화면에 INPUT 박스에 입력하고 버튼을 눌러 봅니다.

-Response 값이 공격자에 의해 변경되어 세션아이디가 나옵니다.


Stage 2: Cache Poisoning:
Victim의 캐쉬를 감염시키겠습니다.

Last-Modified: Mon, 27 Oct 2090 14:50:18 GMT  <--해당 라인을 추가 합니다.

더보기



-Congratulations. You have successfully completed this lesson.
이 표시되면 정상적으로 적용이 된것입니다.

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:41
download download
A7Soft.ExamXML.PRO.v5.15.Incl.Keygen-NGEN
Araxis.Merge.Professional.v2011.4074-BEAN
Corel.VideoStudio.Pro.X4.v14.1.0.150.Multilingual.Incl.Keymaker-CORE
EarMaster.School.v5.0.0.634SW.Incl.Keygen-BEAN
ElectraSoft.32bit.Convert.It.v11.09.01.Regged-WaLMaRT
ElectraSoft.32bit.Email.Broadcaster.v11.09.01.Regged-WaLMaRT
ElectraSoft.32bit.Fax.v11.09.01.Regged-WaLMaRT
ElectraSoft.32bit.FTP.v11.09.01.Regged-WaLMaRT
ElectraSoft.32bit.Internet.Fax.v11.09.01.Regged-WaLMaRT
ElectraSoft.32bit.Web.Browser.v11.09.01.Regged-WaLMaRT
ElectraSoft.FaxAmatic.v11.09.01.Regged-WaLMaRT
ElectraSoft.FaxMail.for.Windows.v11.09.01.Regged-WaLMaRT
ElectraSoft.FaxMail.Network.for.Windows.v11.09.01.Regged-WaLMaRT
ElectraSoft.First.Alert.Service.Monitor.v11.09.01.Regged-WaLMaRT
ElectraSoft.Master.Keystroke.Logger.Pro.v11.09.01.Regged-WaLMaRT
ElectraSoft.Mouse.Button.Control.v11.09.01.Regged-WaLMaRT
ElectraSoft.Multi.Clipboard.v11.09.01.Regged-WaLMaRT
ElectraSoft.Pcx-Dcx.Fax.Viewer.v11.09.01.Regged-WaLMaRT
ElectraSoft.Speed.Dial.v11.09.01.Regged-WaLMaRT
ITOO_FOREST_PACK_PRO_V3.6.2_FOR_3DSMAX-XFORCE
Jaksta.Streaming.Media.Recorder.v4.3.2.Multilingual.Incl.Keygen.and.Patch-MESMERiZE
MOTIVA_COLIMO_V1.2_READNFO-XFORCE
PreSonus.Studio.One.Pro.v1.6.5-UNION
Stone.File.Undelete.1.2.156-BEAN
Stone.Screen.Recorder.v1.2.168-BEAN
THINKBOX_FROST_V1.1.2.44769_FOR_3DSMAX_2012-XFORCE
WiFi.Sharing.Manager.v2.0.0.0.Keygen-NGEN
Yamicsoft.Windows.7.Manager.v3.0.0.Incl.Keymaker-CORE
Yamicsoft.Windows.7.Manager.v3.0.0.x64.Incl.Keymaker-CORE

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:40
download download
Core.FTP.Pro.v2.2.1695.Incl.Keymaker-CORE
Gammadyne.Corporation.Centurion.Setup.v22.0.Cracked-F4CG
Jump.Games.Real.Steel.HD.v1.0.17.Multilanguage.ANDROiD-rGPDA
LinkCollector.v3.7.7.0.Cracked-F4CG
Mortimer.Beckett.and.the.Crimson.Thief.Premium.Edition.v1.0.0.0-TE
Mouse.Speed.Switcher.v2.0.3.Incl.Keygen-NOY
SQLyog.Ultimate.v9.3.0.0.Bilingual.Regged-CORE
Super.Flexible.File.Synchronizer.Pro.v5.55.Incl.Keymaker-CORE
Vegas.Penny.Slots.Pack.2.v1.0.Cracked-F4CG

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:40
download download
Angry.Birds.Rio.v1.3.2.iPhone.iPod.Touch.iPad-ARBiTRAGEPDA
ASSIMILATE_SCRATCH_V6.0.696_MACOSX-XFORCE
ASSIMILATE_SCRATCH_V6.0.696_X64-XFORCE
Bad.monkee.Giana.Sisters.HD.v1.5.1.iPad-Lz0PDA
Be-Rad.Entertainment.Lame.Castle.v1.42.ANDROiD-rGPDA
Chronos.iClipboard.v3.0.6.Incl.Keymaker-CORE
DI-O-MATIC_CHARACTER_PACK_V1.5_VIP_EDITION_FOR_3DS_MAX-XFORCE
FILEminimizer.Suite.v7.0.0.235.Multilingual.Incl.Keymaker-CORE
Gameloft.Asphalt.6.Adrenaline.HD.v1.4.6.iPad-Lz0PDA
Glary.Utilities.Pro.v2.38.0.1288.Regged-F4CG
Hybrid.L.v1.35.0.3-LAXiTY
Navicat.for.MySQL.Enterprise.v10.0.5.Incl.Keymaker-CORE
Navicat.for.Oracle.Enterprise.v10.0.5.Incl.Keymaker-CORE
Navicat.for.PostgreSQL.Enterprise.v10.0.5.Incl.Keymaker-CORE
Navicat.for.SQL.Server.v10.0.5.Incl.Keymaker-CORE
Navicat.for.SQLite.Enterprise.v10.0.5.Incl.Keymaker-CORE
Navicat.Premium.Enterprise.v10.0.5.Incl.Keymaker-CORE
PLANETSIDE_TERRAGEN_V2.3_MACOSX-XFORCE
PLANETSIDE_TERRAGEN_V2.3_WIN32-XFORCE
PLANETSIDE_TERRAGEN_V2.3_WIN64-XFORCE
Registry.Winner.v6.3.9.29.Multilingual.Keymaker.Only-CORE
Robots.and.Pencils.Inc.World.Explorer.for.Minecraft.v1.0.0.ANDROiD-rGPDA
Rovio.Mobile.Ltd.Angry.Birds.Rio.HD.v1.3.2.iPad-Lz0PDA
SpeedCommander.v14.00.6600.Bilingual.Incl.Keygen-MESMERiZE
SpeedCommander.v14.00.6600.Bilingual.x64.Incl.Keygen-MESMERiZE

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:39
download download
4Media.DVD.Ripper.Ultimate.v6.7.0.0913.Incl.Keygen-Lz0
4Media.iPhone.Max.Platinum.v4.2.4.0729.Incl.Keygen-Lz0
4Media.iPod.Max.Platinum.v4.2.4.0729.Incl.Keygen-Lz0
4Media.PDF.to.EPUB.Converter.v1.0.4.0124.Incl.Keygen-Lz0
4Media.PDF.to.PowerPoint.Converter.v1.0.2.0907.Incl.Keygen-Lz0
4Media.Video.Converter.Ultimate.v6.7.0.0913.Incl.Keygen-Lz0
AMS.Software.Photo.Effects.Studio.v2.95-BEAN
Ashampoo.HDD.Control.2.v2.08.Multilingual.Keygen.and.Patch.Only-BRD
Ashampoo.WinOptimizer.8.v8.13.Multilingual.Keygen.and.Patch.Only-BRD
Davis.Business.Systems.BS1.General.Ledger.v2011.3-Lz0
DVD.Ranger.v3.7.0.1.Multilingual.WinALL.Cracked-BRD
Foryoursoft.Messenger.Detect.v3.91.WinALL.Incl.Keygen.and.Patch-BRD
Gug.Soft.3D.Gugle.Pro.X.v6.9.Incl.Keygen-Lz0
In.Search.of.the.Lost.Temple.v1.0.0.1-TE
Joboshare.DVD.Audio.Ripper.v3.1.9.0926.Incl.Keygen-Lz0
Joboshare.DVD.Copy.v3.1.5.0930.Incl.Keygen-Lz0
Joboshare.DVD.Creator.v3.1.5.0930.Incl.Keygen-Lz0
Joboshare.DVD.Ripper.Platinum.v3.1.8.0920.Incl.Keygen-Lz0
Joboshare.iPhone.Rip.v3.1.5.0929.Incl.Keygen-Lz0
Joboshare.iPod.Rip.v3.1.5.0930.Incl.Keygen-Lz0
Keepers.of.Dryandra.v1.0.ALL.ACCESS.CHEAT-SiMPLiFY
Keepers.of.Dryandra.v1.0.Cracked-F4CG
MOTIVA_COLIMO_V1.2-XFORCE
Mystery.Trackers.Raincliff.v1.0.0.8-TE
NetSarang.Xmanager.Enterprise.v4.0.0183.Incl.Keymaker-CORE
Plexim.Plecs.Standalone.v3.2.2.for.Linux.x64-BEAN
Plexim.Plecs.Standalone.v3.2.2.for.Linux-BEAN
Plexim.Plecs.Standalone.v3.2.2.for.Windows.x64-BEAN
Plexim.Plecs.Standalone.v3.2.2.for.Windows-BEAN
PowerSurge.Publishing.iWisdom.v2.3.3.Incl.Keygen.MACOSX-Lz0
PowerSurge.Publishing.iWisdom.v2.3.3.Incl.Keygen-Lz0
Pretty.Good.Solitaire.v13.1.0-PH
RoGaSoft.RGS.Fotokalender.v1.1.German-HERiTAGE
RoGaSoft.RGS.Rechnungstermine.v1.4.1.German.Incl.Keygen-HERiTAGE
SolveigMM.Video.Splitter.v2.5.1109.29.Cracked-REViSE
VidaOne.Diet.and.Fitness.v3.8.7.Incl.Keygen-HERiTAGE
Vistanita.iDeduper.v2.3.0.Incl.Keygen-REViSE

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:39
download download
Dolphin.Integration.SoC.GDS.v6.8.1-Lz0
Geomatica.2012.x64.LINUX-RECOiL
Geomatica.2012.x64-RECOiL
Intuit.Quickbooks.Enterprise.Solutions.Accountant.Edition.v12.0.Incl.Keygen-Lz0
JPEG.Imager.2.5.1.407-BEAN
LittleLite.Software.Iside.v3.1.5212.Cracked-ErES
Macroplant.Phone.to.PC.v4.0.4.0.Incl.Keygen-Lz0
Magic.DVD.Copier.v6.0.0-LAXiTY
Magic.DVD.Ripper.v6.0.0-LAXiTY
PIXOLOGIC_ZBRUSH_V4.0R2_MACOSX-XFORCE
Pointwise.v16.04R4.464-Lz0
Pointwise.v16.04R4.x64-Lz0
Pointwise.v16.04R4-Lz0
Saving.Private.Sheep.v1.0.ALL.ACCESS.CHEAT-SiMPLiFY
Spirits.of.Mystery.Amber.Maiden.v1.0.Cracked-F4CG
Tipard.iPhone.Video.Converter.v6.1.22-LAXiTY
WinCHM.v4.21.WinALL.Cracked-YPOGEiOS

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:38
download download
ACDSee.Pro.v5.0.110.Fixed.Keymaker.Only-CORE
ActiveState.Komodo.IDE.v6.1.3.66534.for.Linux.x64-BEAN
ActiveState.Komodo.IDE.v6.1.3.66534.for.Linux-BEAN
ActiveState.Komodo.IDE.v6.1.3.66534.for.Windows.Incl.Keygen-BEAN
Adobe.Flash.Media.Gateway.v4.5.Linux.x64.Incl.Keymaker-CORE
Adobe.Flash.Media.Gateway.v4.5.x64.Incl.Keymaker-CORE
Adobe.Flash.Media.Server.v4.5.Incl.Keymaker-CORE
Adobe.Flash.Media.Server.v4.5.Linux.x64.Incl.Keymaker-CORE
Adobe.Flash.Media.Server.v4.5.x64.Incl.Keymaker-CORE
ASSIMILATE_SCRATCH_V6.0_MACOSX-XFORCE
ASSIMILATE_SCRATCH_V6.0_X64-XFORCE
Automobile.Tracker.v6.5-Lz0
Bigasoft.Audio.Converter.v3.5.2.4281.Incl.Keymaker-BLiZZARD
Bigasoft.BlackBerry.Video.Converter.v3.5.4.4287.Incl.Keymaker-BLiZZARD
Bigasoft.DVD.Ripper.v1.7.10.4274.Incl.Keymaker-BLiZZARD
Bigasoft.FLV.Converter.v3.5.4.4287.Incl.Keymaker-BLiZZARD
Bigasoft.iPad.Video.Converter.v3.5.2.4281.Incl.Keymaker-BLiZZARD
Bigasoft.iPod.Transfer.v1.6.5.4279.Incl.Keymaker-BLiZZARD
Bigasoft.M4A.Converter.v3.5.4.4287.Incl.Keymaker-BLiZZARD
Bigasoft.RealPlayer.Converter.v3.5.2.4281.Incl.Keymaker-BLiZZARD
Bigasoft.Total.Video.Converter.v3.5.4.4287.Incl.Keymaker-BLiZZARD
Cockos.REAPER.v4.10.Incl.Keyfilemaker.And.Patch-CORE
Cockos.REAPER.v4.10.x64.Incl.Keyfilemaker.And.Patch-CORE
Flyhoward.Ltd.SDF.Viewer.v1.5.9.Incl.Keygen-Lz0
Love.Story.2.The.Beach.Cottage.v1.0.0.8-TE
Nikon.Capture.NX.v2.2.8.Update.Only-BEAN
Scientific.Toolworks.Understand.v2.6.584.Incl.Keygen.X64-Lz0
Scientific.Toolworks.Understand.v2.6.584.Incl.Keygen-Lz0
Scientific.Toolworks.Understand.v2.6.584.LINUX64-Lz0
Scientific.Toolworks.Understand.v2.6.584.LINUX-Lz0
Scientific.Toolworks.Understand.v2.6.584.MACOSX-Lz0
Scientific.Toolworks.Understand.v2.6.584.SOLARIS-Lz0
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_GCC34-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_GCC41-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_GCC44-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_X64_GCC34-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_X64_GCC41-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_X64_GCC42-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_X64_GCC43-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_LINUX_X64_GCC44-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_MACOSX_X86_64-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_WIN32_VC8-XFORCE
SIDEFX_HOUDINI_MASTER_V11.1.67_WIN64-XFORCE
Sticky.Password.v5.0.5.241-iNViSiBLE
SynaptiCAD.Product.Suite.v16.04d.LINUX-Lz0
SynaptiCAD.Product.Suite.v16.04d.LIXUX-Lz0
Veronisoft.Get.Ip.And.Host.v1.3.20-BEAN

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:38
download download
AI.Roboform.Enterprise.v7.5.1.0-TE
ALikeT.Software.Registry.Winner.v6.3.9.29.Incl.Keygen.and.Patch-Lz0
Corel.WinDVD.Pro.v11.0.Multilingual.Incl.Keymaker-CORE
Heroes.of.Hellas.3.Athens.v1.0.0.2011.09.22-TE
Nuclear.Coffee.Recover.Keys.Enterprise.v5.0.2.58.Multilang-BEAN
PhotoLine.v16.53.Multilingual.Incl.Keymaker-CORE
Primeworks.Data.Port.Wizard.v2.3.633.57.Incl.Keygen-Lz0
Reasonable.NoClone.2011.Enterprise.v5.1.13.0.Incl.Keygen-Lz0
Simple.Add-ons.v1.0.for.Archicad.x64-ENGiNE
Simple.Add-ons.v1.0.for.Archicad.x86-ENGiNE
VPStudio.StandAlone.v11.02.C8.x86-ENGiNE

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:37
download download
Adobe.Presenter.v7.0.7.Incl.Keymaker-CORE
Aoao.Video.Watermark.Pro.v2.4-LAXiTY
Ashampoo.HDD.Control.2.v2.08-TE
Ashampoo.Snap.5.v5.00-TE
Echoes.of.the.Past.The.Citadels.of.Time.Collectors.Edition.v1.0.4596.0-TE
Limit.Point.AddMovie.v1.9.9.Incl.Keymaker-CORE
Limit.Point.AddPDF.v1.0.7.Incl.Keymaker-CORE
Limit.Point.Chalaut.v1.0.4.Incl.Keymaker-CORE
Limit.Point.Droffett.v1.0.9.Incl.Keymaker-CORE
Limit.Point.DropDownloadURL.v1.0.5.Incl.Keymaker-CORE
Limit.Point.Miana.v1.2.1.Incl.Keymaker-CORE
Limit.Point.MovieDek.v1.0.11.Incl.Keymaker-CORE
Limit.Point.Scaxion.v1.0.6.Incl.Keymaker-CORE
Limit.Point.TransformPicture.v1.1.3.Incl.Keymaker-CORE
Limit.Point.Xiafunge.v1.0.8.Incl.Keymaker-CORE
Military.Life.Tank.Simulator.v1.0.Cracked-F4CG
Native.Instruments.Traktor.Pro.2.v2.1.1.MAC.OSX-UNION
Pearl.Mountain.Picture.CollageIt.Pro.v1.5.0.Incl.Keygen-BEAN
SharedPlan.Pro.v6.3.0.423.for.Windows-BEAN
SharpPlus.Sqlite.Developer.v3.8.6.502-BEAN

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim
취미/0Day Info2011.10.07 10:37
download download
Adobe.Premiere.Elements.v10.0.Multilingual.Incl.Keymaker-CORE
Adobe.Premiere.Elements.v10.0.Multilingual.x64.Incl.Keymaker-CORE
Arcen.Games.A.Valley.Without.Wind.v0.5.0.0.BETA.Incl.Keygen.GAME-Lz0
AudioRealism.Bass.Line.Pro.v1.1.6.MAC.OSX-UNION
AudioRealism.Bass.Line.Pro.v1.1.6-UNION
AudioRealism.Bass.Line.v2.5.2.MAC.OSX-UNION
AudioRealism.Bass.Line.v2.5.2-UNION
AudioRealism.Drum.Machine.v1.2.1.MAC.OSX-UNION
AudioRealism.Drum.Machine.v1.2.1-UNION
Dassault.Systemes.3DVIA.Composer.V6R2012.HF3.v6.8.3.1695.X64-Lz0
Dassault.Systemes.3DVIA.Composer.V6R2012.HF3.v6.8.3.1695-Lz0
DataResolve.Technologies.InDefend.Internet.Security.v3.6.2.Incl.Keygen-Lz0
DataResolve.Technologies.InDefend.Internet.Security.v3.6.2.Incl.Keynen-Lz0
DNR.Collaborative.MixControl.Pro.v1.5r2.MAC.OSX-UNION
DNR.Collaborative.MixControl.Pro.v1.5r2-UNION
DriveWorks.Solo.v8.3.0.241.464-Lz0
DriveWorks.Solo.v8.3.0.241.X64-Lz0
DriveWorks.Solo.v8.3.0.241-Lz0
FastStone.Capture.v7.0.Incl.Keymaker-CORE
HiHiSoft.YouTubeGet.v5.9.6-WaLMaRT
MLSviewer_v1.923_Incl_Keygen-DIGERATI
Perspective.Software.Blue.Iris.v2.58.05.Incl.Keymaker-CORE
PIXOLOGIC_ZBRUSH_V4.0R2-XFORCE

저작자 표시
신고
download download download
Posted by [lying dragon] Ed Kim

티스토리 툴바