{"id":6925,"date":"2014-11-10T07:47:23","date_gmt":"2014-11-09T22:47:23","guid":{"rendered":"http:\/\/apollo89.com\/wordpress\/?p=6925"},"modified":"2014-11-10T23:34:36","modified_gmt":"2014-11-10T14:34:36","slug":"hack-the-packet-2014-%ec%98%88%ec%84%a02014-htp_prequal","status":"publish","type":"post","link":"https:\/\/apollo89.com\/wordpress\/?p=6925","title":{"rendered":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal)"},"content":{"rendered":"

 
\nHack The Packet 2014 \uc608\uc120(2014 HTP_prequal)<\/p>\n

\uc62c\ud574\ub3c4 30\ub9cc\uc6d0 \uc815\ub3c4 \ud558\ub294 POC \ud2f0\ucf13\uc744 \ub178\ub9ac\uace0 HTP\uc5d0 \ub3c4\uc804\ud588\ub2e4..<\/p>\n

\ud558\uc9c0\ub9cc \uc548\ud0c0\uae5d\uac8c 9\uc704\ub85c \ubcf8\uc120\uc9c4\ucd9c\ub9cc \ud558\uace0 5\uc704\uad8c\ub0b4 \uc9c4\uc785\uc740 \uc2e4\ud328\ud588\ub2e4..\u3160\u3160<\/p>\n

\uadf8\ub798\ub3c4 \ubb38\uc81c\ub97c \ud480\uc5c8\ub358 \ud6c4\uae30\ub97c \uc801\uc5b4\ubcf4\uace0\uc790 \ud55c\ub2e4..<\/p>\n

PCAP \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc(Google Drive<\/a>)
\nZip \ud30c\uc77c \uc554\ud638 : 2o14H@CKTH2P@cK2T<\/p>\n

L1-K : \uc5d8\ub9ac\uc2a4\ub294 \uc790\uc2e0\uc758 \uacf5\uc720\ud3f4\ub354\ub97c \uc774\uc6a9\ud558\uc5ec \ubd80\ud558\uc9c1\uc6d0\uc778 \ubc25\uc5d0\uac8c \ube44\ubc00\uc790\ub8cc\ub97c \ub0a8\uacbc\ub2e4!.\r\n\"\uc774\ubbf8\uc9c0 \ud30c\uc77c\uc744 \ubcf4\uace0 \ub4e3\uace0 \ud574\ub3c5\ud560\uac83!\"\r\nL1-E : Alies leave a Secret Message using SMB for assistant bob.\r\n\"Look and listen image file and decipher that\"\r\nHint : use ear \r\n\r\n\r\nL2-K : NFS \uc11c\ubc84\uac00 \uce68\ud574\uc0ac\uace0\ub97c \ub2f9\ud588\ub2e4. \ud574\ucee4\uac00 \uc0ac\uc6a9\ud55c public key \uc774\ub984\uc744 \ucc3e\uc544\ub77c.\r\nL2-E : NFS server got compromised, Find out name of hacker\u2019s public key!\r\n\r\n\r\nL3-K : \uc545\uc131\uc571\uc774 \uc124\uce58\ub41c \ud734\ub300\ud3f0\uc758 \uae30\uc885\uc740?\r\nL3-E : What is a model of cell phone which is installed malicious application?\r\n\r\n\r\nM1-K : \uacf5\uaca9\uc790\uac00 SQL Injection \uacf5\uaca9\uc744 \ud1b5\ud574 \uc54c\uc544\ub0b8 4\ubc88\uc9f8 \ud544\ub4dc\uba85\uc774 \ubb34\uc5c7\uc778\uc9c0 \ucc3e\uc544\ub77c!\r\nM1-E : Find what is the field name of the fourth was investigated attacker through the attack of SQL Injection\r\nHint : having\r\nKey format : Tablename-Columnname\r\n\r\n\r\nM2-K : \uaf2c\ube44\ub294 10\/09 21\uc2dc\uacbd \uac1c\uc778 \uc0ac\uc9c4\uc790\ub8cc\ub97c \ud3b8\uc9d1\ud558\uae30 \uc704\ud574 USB\ub97c \uc774\uc6a9\ud558\uc5ec \uc0ac\uc9c4 \ud3b8\uc9d1 \uc791\uc5c5\uc744 \ud558\uc600\ub2e4.\r\n\uba87\uc77c \ub4a4 \uac1c\uc778 \uc0ac\uc9c4\uc774 SNS\uc744 \ud1b5\ud574 \ub3cc\uc544\ub2e4\ub2c8\ub294 \uac83\uc744 \ud655\uc778\ud558\uc600\ub2e4. \uc774\uc804 \uae30\uc5b5\uc744 \ub418\uc9da\uc5b4 \ubcfc \ub54c \uadf8\ub0a0 \uc9d1\uc5d0 \uc788\ub358 \uc0ac\ub78c\uc740 \ub3d9\uc0dd\ubfd0\uc774\uc5c8\ub2e4.\r\n\ub9cc\uc57d \ub3d9\uc0dd\uc774 USB\ub85c \uc0ac\uc9c4 \uc790\ub8cc\ub97c \ubcf5\uc0ac\ud55c\uac8c \ub9de\ub2e4\uba74 \ub178\ud2b8\ubd81\uacfc \uc5f0\uacb0\ud55c \ub3d9\uc0dd\uc758 USB \uc81c\ud488\uba85\uc740? (&&\uc0ac\uc774\uac12 \ubaa8\ub450 \uc785\ub825)\r\n(\ub178\ud2b8\ubd81 O\/S\ub294 \uc708\ub3c4\uc6b07 Ultimate K \ubc84\uc804\uc774\uba70 \uc708\ub3c4\uc6b0\ub97c 10\/06 \uc0c8\ub85c \uc124\uce58\ud55c \uc0c1\ud0dc\uc600\ub2e4. )\r\nM2-E: ggobi edited photos using the usb .(10\/09 21 hour after) \r\nggobi's photo was leaked through SNS a few days later. \r\ni was suspected the brother. \r\nggobi remembered that brother is in house that day. \r\nUSB product name of brother ? \r\n(Laptop O\/S ver: window 7 Ultimate K) \r\nhint : between & and & \r\n\r\n\r\nM3-K : \ub8f0\uc774 \uacf5\uc720\ud55c \ud074\ub77c\uc6b0\ub4dc \uacc4\uc815\uc73c\ub85c \uc811\uc18d\ud55c \uac00\ub974\ubbf8\ub294 \uc2e0\uc774 \ub098\uc11c \uc774\uac83\uc800\uac83 \ub2e4\uc6b4\uc744 \ubc1b\ub294\ub2e4.\r\n\ub2e4\uc6b4\uc744 \ub2e4 \ubc1b\uc740 \ud6c4 \ucef4\ud4e8\ud130\uac00 \uac10\uc5fc\ub418\uc5c8\ub2e4\ub294 \uc0ac\uc2e4\uc744 \uc54c\uac8c \ub418\uc5c8\ub2e4. \r\nM3-E : Garumi logged on cloud as Rul\u2019s ID and downloaded something. \r\nAfter downloading, she realized that her computer is infected with a virus. \r\nhint: zip file \r\nkey format : md5(filename) \r\n\r\n\r\nH1-K : \uc6a9\uc790\ub294 BOF \ubb38\uc81c\ub97c \ud480\ub2e4\uac00 \ub9ac\ud134 \uac12\uc744 \uacc4\uc0b0\ud558\uae30 \uadc0\ucc2e\uc544\uc11c BF\ub97c \ud558\uae30\ub85c \ud588\ub2e4! \r\n\uadf8\ub7f0\ub370 \uc6b4\uc601\uc9c4 \uce21\uc5d0\uc11c \uc5f0\ub77d\uc774 \uc624\ub354\ub2c8 \uc790\uafb8 \ud328\ud0b7 \ub9ce\uc774 \uc3d8\uba74 \ud0c8\ub77d\uc2dc\ud0a8\ub2e4\uace0 \ud588\ub2e4.. \r\n\ub2e4\ud589\ud788\ub3c4 \uacf5\uaca9\uc5d0 \uc131\uacf5\uc744 \ud588\ub294\uc9c0 \ubc14\uc778\ub4dc\uc258 \ud3ec\ud2b8\uac00 \uc5f4\ub838\ub2e4!! BUT, \uba85\ub839\uc5b4\uac00 \uc548\uba39\ud78c\ub2e4 \u3160.\u3160 \r\n\uc0b4\ud3b4\ubcf4\ub2c8 \ubc14\uc778\ub4dc\uc258 \uc258\ucf54\ub4dc\ub97c \uc81c\ub300\ub85c \ub9cc\ub4e4\uc9c0 \ubabb\ud588\uc5c8\ub2e4!! \uc258\ucf54\ub4dc\ub294 \uac04\ub2e8\ud788 \uc218\uc815\ud588\uc73c\ub098.. \r\n\ub2e4\uc2dc BF\ub97c \ud560 \uc218\ub3c4 \uc5c6\uace0.. \uc815\ud655\ud55c \ub9ac\ud134 \uac12 \uacc4\uc0b0\ud558\uae30\ub3c4 \uadc0\ucc2e\uace0.. \uc6a9\uc790\ub97c \uc704\ud574\uc11c \uc815\ud655\ud55c \uc8fc\uc18c\ub97c \ucc3e\uc544\uc8fc\uc138\uc694!\r\nH1-E : Yongja is very lazy, but like CTF. So, he decided to use BF to solve BOF chall. \r\nSome hours later, he got shell from chall server (bindshell). \r\nBut he did mistake, lost the shell connection! He can\u2019t do BF anymore(was warned by OP). \r\nFind correct return address in the exploit packet! \r\nkey format : 0xXXXXXX(Little endian) \r\n\r\n\r\nH2-k : Apache Struts\uae30\ubc18\uc73c\ub85c \uc6b4\uc601\ub418\ub294 \uc0ac\uc774\ud2b8\uac00 \uba39\ud1b5\uc774 \ub418\uc5c8\ub2e4. \r\n\uc6d0\uc778\uc774 \ub418\ub294 \ucde8\uc57d\uc810(CVE)\ub294 \ubb34\uc5c7\uc774\uace0 \uacf5\uaca9\uc790\uac00 \ubcc0\uacbd\ud558\ub824\ub294 \uc0ac\uc774\ud2b8\ub294 \uc5b4\ub514\uc778\uac00?(\ud398\uc774\ub85c\ub4dc \uac12)\r\nH2-E: Yongja\u2019s website that based on Apache Struts got melong! \r\nPlease let us know what is the CVE(used vuln) and where is the site to change bad guy want? \r\n\r\n\r\nH3-K : \uc545\uc131\ucf54\ub4dc\uc5d0 \uac10\uc5fc\ub41c \uc6a9\uc740 \ubd84\uc11d \uc804\ubb38\uac00 \ud30c\ub4dc\ub780\uc5d0\uac8c \ub3c4\uc6c0\uc744 \uc694\uccad\ud588\ub2e4!\r\n\uac10\uc5fc\ub41c \uc545\uc131\ucf54\ub4dc\uc5d0 \uc774\ub984\uc744 \ucc3e\uc544\ub77c!\r\nH3-E : YongGAL who was infected by Malware, asked for help from padran, \r\nan analytical expert. Search for the name of the infected Malware \r\nHINT : IFRAME \r\nkey format : MalwareSIte_attackerID \r\n<\/pre>\n
\uc62c\ud574\ub3c4 \uc5ed\uc2dc 9\ubb38\uc81c.. Low 2\ubb38\uc81c Medium 3\ubb38\uc81c High 3\ubb38\uc81c\uc529 \ub098\uc654\ub2e4.<\/p>\n
\uc81c\uacf5\ub41c pcap \ud30c\uc77c\uc758 \ud06c\uae30\ub294 \uc57d 250M \uc815\ub3c4..
\n\ud558\uc9c0\ub9cc \uc774 \ud30c\uc77c\uc744 \uc77d\uc5b4\uc11c \ud544\ud130\uac78\uace0 TCP follow \ub4f1 \ubd84\uc11d\ud558\ub294\ub370 \ub85c\ub529 \uc2dc\uac04\uc774 \uc0c1\ub2f9\ud788 \uac78\ub838\ub2e4..
\n\ub300\ud68c\uc2dc\uac04\uc740 \ub2e8 2\uc2dc\uac04…
\n\ub530\ub77c\uc11c \ube60\ub978\ubd84\uc11d\uc744 \uc704\ud574 \ud328\ud0b7\uc744 \uc758\ubbf8\uc788\ub294 \ub2e8\uc704\ub85c \ucabc\uac1c\uc11c \ubd84\uc11d\ud588\uc5b4\uc57c \ud588\ub294\ub370 \ud558\ub294 \uc544\uc26c\uc6c0\uc774 \ub9ce\uc774 \ub0a8\uc558\ub2e4.<\/p>\n
\uac00\uc7a5 \uba3c\uc800 \ud47c \ubb38\uc81c\ub294 H2 \ubb38\uc81c..<\/p>\n
\uc608\uc804\uc5d0 Apache Struts \ucde8\uc57d\uc810 \uad00\ub828 \uc0ac\uace0 \ub300\uc751\uc744 \ud55c\ubc88 \ud588\ub358 \ud130\ub77c \uae30\uc5b5\uc774 \ub0ac\ub2e4..<\/p>\n
\uba3c\uc800 http \ud544\ud130\ub97c \uac78\uc5c8\ub354\ub2c8 \ud55c\ucc38…
\n\uadf8\ub798\uc11c \ub2e4\uc2dc \ubcf4\ud1b5 Struts\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \ud655\uc7a5\uc790\uc778 .action\uc744 \ud544\ud130\ub97c \uac78\uc5c8\ub2e4..
\n\"2014_HTP_prequal1\"<\/p>\n
.action\uad00\ub828 \ud328\ud0b7\uc774 3\uac1c \uc788\ub294\ub370 \ud558\ub098\ub294 \uc815\uc0c1\uc801\uc778 request,
\n\ub450\ubc88\uc9f8\ub294 test \ub9c8\uc9c0\ub9c9\uc774 base64\ub85c \uc778\ucf54\ub529\ub41c \uac83\uc73c\ub85c \uacf5\uaca9\uc73c\ub85c \uc758\uc2ec\ub418\ub294 \ud328\ud0b7\uc774\uc600\ub2e4..
\n\uadf8\ub7f0\ub370 \uc774\uc0c1\ud55c\uac8c request \ub9cc \uc788\uace0 response \uac00 \uc5c6\ub2e4..\u3160
\n\"2014_HTP_prequal2\"<\/p>\n
\/struts2-blank\/example\/HelloWorld.action?Class.classLoader.resources.dirContext.docBase=aHR0cDovL3d3dy5oYWNrdGhlcGFja2V0LmNvbS9Lb3JlYW5fVGhhbmtzZ2l2aW5nX0RheS8oXk9eKS8oXk9eKS8v\r\n<\/pre>\n
payload \ubd80\ubd84\uc778 base64\ub97c \ub514\ucf54\ub529\ud574\ubcf4\ub2c8
\n\"2014_HTP_prequal3\"<\/p>\n
\uc815\ub2f5\uc740 http:\/\/www.hackthepacket.com\/Korean_Thanksgiving_Day\/(^O^)\/(^O^)\/\/<\/p>\n
\ub450\ubc88\uc9f8\ub85c \ud47c \ubb38\uc81c\ub294 M1 \ubb38\uc81c sql Injection \ubb38\uc81c\ub2e4..<\/p>\n
\ud78c\ud2b8\uac00 having \uc73c\ub85c \uc8fc\uc5b4\uc838\uc11c having\uc73c\ub85c \ud544\ud130\ub97c\u314b
\n\"2014_HTP_prequal4\"<\/p>\n
\uc774\ub807\uac8c \uacf5\uaca9\uc2dc\ub3c4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc5c8\ub2e4..
\n\uadf8\ub7f0\ub370 \uc5ec\uae30\ub3c4 \uc5ed\uc2dc request \ub9cc \uc788\uace0 response \uac00 \uc5c6\ub2e4..
\n\"2014_HTP_prequal5\"<\/p>\n
\uadf8\ub7f0\ub370 \ud14c\uc774\ube14\uba85\uc774 \ud655\uc778\uc774 \uc548\ub418\uc11c \ub2e4\uc2dc IP \uae30\uc900\uc73c\ub85c \ud544\ud130\ub97c..
\n\"2014_HTP_prequal6\"<\/p>\n
\uadf8\ub9ac\uace0 \uacf5\uaca9 Request \ud6c4 500 \uc5d0\ub7ec\uac00 \ub09c response \uac00 \uc788\uc5b4 TCP follow Stream \uc744 \ud574\ubcf4\ub2c8..
\n\"2014_HTP_prequal7\"<\/p>\n
\uc21c\uc11c\ub300\ub85c bbs.idx, bbs.tId, bbs.tName, bbs.tMail \uc73c\ub85c
\n4\ubc88\uc9f8 \ud544\ub4dc\uba85\uc740 bbs.tMail \uc774\ub2e4..<\/p>\n
\uc774 \ubb38\uc81c \ud480 \ub54c \uc11c\ubc84\uac00 \ub2e4\uc6b4\uc774 \ub418\uc11c Key\uc778\uc99d\uc744 \uc81c\ub300\ub85c \ubabb\ud558\uace0 \ucc1c\ucc1c\ud558\uac8c \ub118\uc5b4\uac14\ub2e4..
\n\uac8c\ub2e4\uac00 bbs-tMail \uc73c\ub85c \uc778\uc99d\uc744 \ud574\uc57c \ub418\ub294\ub370 \uc798\ubabb\ubd10\uc11c..
\nbbs.tMail\uc640 bbs_tMail \uc73c\ub85c \ub123\uc5b4 \uacc4\uc18d \ud2c0\ub9ac\ub2e4\uac00 \ud55c\ucc38 \uc788\ub2e4\uac00 \uc778\uc99d\uc5d0 \uc131\uacf5\ud588\ub2e4…\u3160\u3160<\/p>\n
\uc815\ub2f5\uc740 bbs-tMail<\/p>\n
\uc138\ubc88\uc9f8\ub85c \ud47c \ubb38\uc81c\ub294 L3 \ubb38\uc81c\ub2e4.<\/p>\n
\uc545\uc131\uc571\uc774\ub2c8\uae4c \uc548\ub4dc\ub85c\uc774\ub4dc \uae30\uc885 \uc911 \ud558\ub098\uc774\uc9c0 \uc54a\uc744\uae4c \uc2f6\uc5c8\ub2e4.<\/p>\n
\uc77c\ub2e8 user-agent\ub97c Android \ub85c \ud544\ud130\ud574 \ubcf4\uc558\ub2e4.
\n\"2014_HTP_prequal8\"<\/p>\n
\ud544\ud130\ub9c1 \ud558\uc790\ub9c8\uc790 param \uc5d0 \ub5a1 \ud558\ub2c8 \ubcf4\uc778\ub2e4..<\/p>\n
\uadf8\ub798\ub3c4 \ub2e4\uc2dc \ud655\uc778
\n\"2014_HTP_prequal9\"<\/p>\n
\uc815\ub2f5\uc740 : SHV-E210S<\/p>\n
\ub124\ubc88\uc9f8\ub85c H3 \ubb38\uc81c\ub97c \ud480\uc5c8\ub2e4..<\/p>\n
\uc774\ubc88\uc5d0\ub3c4 \ud78c\ud2b8\ub85c IFRAME \uc774 \uc788\uc5b4\uc11c \ud544\ud130~
\n\"2014_HTP_prequal10\"<\/p>\n
TCP follow stream \uc744 \ud574\ubcf4\ub2c8 \uc544\ub798\ubd80\ubd84\uc5d0 IFRAME \uac00 \ubcf4\uc548\ub2e4..
\n\"2014_HTP_prequal11\"<\/p>\n
\ud574\ub2f9 \ud328\ud0b7\uc758 \ucfe0\ud0a4\uac12\uc5d0\uc11c user_id \uac12\ub3c4 \ud655\uc778.
\n\"2014_HTP_prequal12\"<\/p>\n
\uc815\ub2f5\uc740 http:\/\/h_@ckGALI.H^T^P.com_GALIGALI<\/p>\n
\uadf8\ub9ac\uace0 \ub9c8\uc9c0\ub9c9\uc73c\ub85c M3\ubc88 \ubb38\uc81c\ub85c<\/p>\n
\uba3c\uc800 ndrive \uc73c\ub85c \ud544\ud130 \ud588\ub2e4.
\n\"2014_HTP_prequal13\"<\/p>\n
\ubcc4\ub2e4\ub978 \uac83\uc774 \ubcf4\uc774\uc9c0 \uc54a\uc544 \uc77c\ub2e8 ip.src \uc73c\ub85c \ub2e4\uc2dc \ud544\ud130\ub9c1 \ud574\uc11c \uc18d\ub3c4\ub97c \ube60\ub974\uac8c \ud558\uae30 \uc704\ud574 display \ub41c \ud328\ud0b7\ub9cc \ub2e4\ub978 \uc774\ub984\uc73c\ub85c \uc800\uc7a5\uc744 \ud574\ub450\uc5c8\ub2e4.<\/p>\n
\uadf8\ub9ac\uace0 \ud78c\ud2b8\ub85c zip file \uc774\ub77c\uace0 \ud588\ub2e4. \uadf8\ub798\uc11c http.response.code \uc73c\ub85c \ub2e4\uc2dc \ud544\ud130\ub97c \ud574\ubcf4\uc558\ub2e4.
\n\"2014_HTP_prequal14\"<\/p>\n
\uadf8\uc911\uc5d0 zip \uc73c\ub85c \ubcf4\uc774\ub294 HTTP\/1.1 206 Partial Content  (application\/zip) \ub97c \ud655\uc778\ud574\ubcf4\ub2c8..
\n\"2014_HTP_prequal15\"<\/p>\n
Adobe Photoshop CS2_kor.zip \uc774\ub2e4..<\/p>\n
\ud574\ub2f9 \ud30c\uc77c\uc744 \ucd94\ucd9c\ud574\uc11c \uc555\ucd95\uc744 \ud478\ub2c8 \ubc31\uc2e0\ud504\ub85c\uadf8\ub7a8\uc774 \uc545\uc131\ucf54\ub4dc\ub85c \uc7a1\uc544 \uac80\uc5ed\uc18c\uc5d0 \ub123\ub294\ub2e4..^^;
\n\uc124\ub9c8 \uc9c4\uc9dc \uc545\uc131\ucf54\ub4dc\uc778\uac00?<\/p>\n
\uadf8\ub798\uc11c \uc77c\ub2e8 \ud30c\uc77c\uba85\uc73c\ub85c md5() \uc744 \ud574\ubcf4\ub2c8..
\n\"2014_HTP_prequal16\"<\/p>\n
\ubaa8\ub450 \ub2e4 \uc778\uc99d\uc774 \uc548\ub41c\ub2e4..<\/p>\n
\uc124\ub9c8~ \ud558\uba74\uc11c \uac80\uc5ed\uc18c\uc5d0 \uc788\ub294 \ubc14\uc774\ub7ec\uc2a4 \ud30c\uc77c\uc758 md5()\ub97c \ud574\uc11c \uc778\uc99d\ud558\ub2c8 \uc131\uacf5!
\n\"2014_HTP_prequal17\"<\/p>\n
\uc815\ub2f5\uc740 5a1c10ee87fc3085865d07415240e090<\/p>\n
\uc774\ub807\uac8c \ucd1d 5\ubb38\uc81c\ub97c \ud480\uc5b4 1100 \uc810\uc73c\ub85c \uc608\uc120 9\ub4f1\uc73c\ub85c \ud1b5\uacfc.
\n\"htp_2014\"<\/p>\n
\ub9ac\ubdf0\ud558\uba74\uc11c \ubcf4\ub2c8,
\n\uc544\uc608 \ubabb\ubcf8 \ubb38\uc81c\uc911\uc5d0 \uc26c\uc6b4\uac83\ub3c4 \uc788\uc5c8\uace0,
\n\uba87\uba87 \ubb38\uc81c\ub294 \uac70\uc758 \ub2e4 \ucc3e\uc558\ub294\ub370 \uc9d1\uc911\ub825\uc774 \ubd80\uc871\ud574\uc838 \ubabb\ubcf4\uace0 \uc9c0\ub098\uce5c \ubb38\uc81c\ub3c4 \uc788\uc5c8\ub2e4.<\/p>\n
\uac1c\uc778\uc801\uc73c\ub85c\ub294 \ud328\ud0b7 \ud544\ud130\ub9c1\uc5d0 \uc2dc\uac04\uc744 \uc880 \uc808\uc57d\ud558\uace0,
\n\uc6b4\uc601 \uc11c\ubc84\ub2e4\uc6b4\uc73c\ub85c \ud5c8\ub465\ub300\uc9c0\ub9cc \uc54a\uc558\uc73c\uba74,
\n\uba87 \ubb38\uc81c \ub354 \ud480 \uc218 \uc788\uc5c8\uc744\ud150\ub370…
\n\uc870\uae08 \uc544\uc26c\uc6e0\ub2e4.<\/p>\n
\ud558\uc9c0\ub9cc \uc815\ub9d0 \uc544\uc26c\uc6b4\uac83\uc740 \uac1c\uc778\uc801\uc778 \uc77c\uc815\uc73c\ub85c \ubcf8\uc120\uc5d0\ub294 \ucc38\uc11d\ud558\uc9c0 \ubabb\ud588\ub2e4\ub294..\u3160\u3160<\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
  Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) \uc62c\ud574\ub3c4 30\ub9cc\uc6d0 \uc815\ub3c4 \ud558\ub294 POC \ud2f0\ucf13\uc744 \ub178\ub9ac\uace0 HTP\uc5d0 \ub3c4\uc804\ud588\ub2e4.. \ud558\uc9c0\ub9cc \uc548\ud0c0\uae5d\uac8c 9\uc704\ub85c \ubcf8\uc120\uc9c4\ucd9c\ub9cc \ud558\uace0 5\uc704\uad8c\ub0b4 \uc9c4\uc785\uc740 \uc2e4\ud328\ud588\ub2e4..\u3160\u3160 \uadf8\ub798\ub3c4 \ubb38\uc81c\ub97c \ud480\uc5c8\ub358 \ud6c4\uae30\ub97c \uc801\uc5b4\ubcf4\uace0\uc790 \ud55c\ub2e4.. PCAP \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc(Google Drive) Zip \ud30c\uc77c \uc554\ud638 : 2o14H@CKTH2P@cK2T L1-K … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1177,703],"tags":[1249,1248,1250],"class_list":["post-6925","post","type-post","status-publish","format-standard","hentry","category-ctf","category-securityhacking","tag-hackthepacket","tag-htp","tag-poc"],"yoast_head":"\nHack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/apollo89.com\/wordpress\/?p=6925\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com\" \/>\n<meta property=\"og:description\" content=\"  Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) \uc62c\ud574\ub3c4 30\ub9cc\uc6d0 \uc815\ub3c4 \ud558\ub294 POC \ud2f0\ucf13\uc744 \ub178\ub9ac\uace0 HTP\uc5d0 \ub3c4\uc804\ud588\ub2e4.. \ud558\uc9c0\ub9cc \uc548\ud0c0\uae5d\uac8c 9\uc704\ub85c \ubcf8\uc120\uc9c4\ucd9c\ub9cc \ud558\uace0 5\uc704\uad8c\ub0b4 \uc9c4\uc785\uc740 \uc2e4\ud328\ud588\ub2e4..\u3160\u3160 \uadf8\ub798\ub3c4 \ubb38\uc81c\ub97c \ud480\uc5c8\ub358 \ud6c4\uae30\ub97c \uc801\uc5b4\ubcf4\uace0\uc790 \ud55c\ub2e4.. PCAP \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc(Google Drive) Zip \ud30c\uc77c \uc554\ud638 : 2o14H@CKTH2P@cK2T L1-K … Continue reading →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/apollo89.com\/wordpress\/?p=6925\" \/>\n<meta property=\"og:site_name\" content=\"Apollo89.com\" \/>\n<meta property=\"article:published_time\" content=\"2014-11-09T22:47:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-11-10T14:34:36+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1-1024x116.png\" \/>\n<meta name=\"author\" content=\"apollo89\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\uae00\uc4f4\uc774\" \/>\n\t<meta name=\"twitter:data1\" content=\"apollo89\" \/>\n\t<meta name=\"twitter:label2\" content=\"\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04\" \/>\n\t<meta name=\"twitter:data2\" content=\"2\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925\"},\"author\":{\"name\":\"apollo89\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"headline\":\"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal)\",\"datePublished\":\"2014-11-09T22:47:23+00:00\",\"dateModified\":\"2014-11-10T14:34:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925\"},\"wordCount\":135,\"commentCount\":2,\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/11\\\/2014_HTP_prequal1-1024x116.png\",\"keywords\":[\"hackthepacket\",\"htp\",\"poc\"],\"articleSection\":[\"CTF\",\"Security\\\/Hacking\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925\",\"name\":\"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/11\\\/2014_HTP_prequal1-1024x116.png\",\"datePublished\":\"2014-11-09T22:47:23+00:00\",\"dateModified\":\"2014-11-10T14:34:36+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#primaryimage\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/11\\\/2014_HTP_prequal1.png\",\"contentUrl\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/11\\\/2014_HTP_prequal1.png\",\"width\":1136,\"height\":129},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6925#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\\\/\\\/apollo89.com\\\/wordpress\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/\",\"name\":\"Apollo89.com\",\"description\":\"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\",\"name\":\"apollo89\",\"description\":\"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/apollo89.com\/wordpress\/?p=6925","og_locale":"ko_KR","og_type":"article","og_title":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com","og_description":"  Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) \uc62c\ud574\ub3c4 30\ub9cc\uc6d0 \uc815\ub3c4 \ud558\ub294 POC \ud2f0\ucf13\uc744 \ub178\ub9ac\uace0 HTP\uc5d0 \ub3c4\uc804\ud588\ub2e4.. \ud558\uc9c0\ub9cc \uc548\ud0c0\uae5d\uac8c 9\uc704\ub85c \ubcf8\uc120\uc9c4\ucd9c\ub9cc \ud558\uace0 5\uc704\uad8c\ub0b4 \uc9c4\uc785\uc740 \uc2e4\ud328\ud588\ub2e4..\u3160\u3160 \uadf8\ub798\ub3c4 \ubb38\uc81c\ub97c \ud480\uc5c8\ub358 \ud6c4\uae30\ub97c \uc801\uc5b4\ubcf4\uace0\uc790 \ud55c\ub2e4.. PCAP \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc(Google Drive) Zip \ud30c\uc77c \uc554\ud638 : 2o14H@CKTH2P@cK2T L1-K … Continue reading →","og_url":"https:\/\/apollo89.com\/wordpress\/?p=6925","og_site_name":"Apollo89.com","article_published_time":"2014-11-09T22:47:23+00:00","article_modified_time":"2014-11-10T14:34:36+00:00","og_image":[{"url":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1-1024x116.png","type":"","width":"","height":""}],"author":"apollo89","twitter_card":"summary_large_image","twitter_misc":{"\uae00\uc4f4\uc774":"apollo89","\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04":"2\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#article","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925"},"author":{"name":"apollo89","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"headline":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal)","datePublished":"2014-11-09T22:47:23+00:00","dateModified":"2014-11-10T14:34:36+00:00","mainEntityOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925"},"wordCount":135,"commentCount":2,"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1-1024x116.png","keywords":["hackthepacket","htp","poc"],"articleSection":["CTF","Security\/Hacking"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/apollo89.com\/wordpress\/?p=6925#respond"]}]},{"@type":"WebPage","@id":"https:\/\/apollo89.com\/wordpress\/?p=6925","url":"https:\/\/apollo89.com\/wordpress\/?p=6925","name":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal) - Apollo89.com","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#primaryimage"},"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1-1024x116.png","datePublished":"2014-11-09T22:47:23+00:00","dateModified":"2014-11-10T14:34:36+00:00","author":{"@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"breadcrumb":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/apollo89.com\/wordpress\/?p=6925"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#primaryimage","url":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1.png","contentUrl":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/11\/2014_HTP_prequal1.png","width":1136,"height":129},{"@type":"BreadcrumbList","@id":"https:\/\/apollo89.com\/wordpress\/?p=6925#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/apollo89.com\/wordpress"},{"@type":"ListItem","position":2,"name":"Hack The Packet 2014 \uc608\uc120(2014 HTP_prequal)"}]},{"@type":"WebSite","@id":"https:\/\/apollo89.com\/wordpress\/#website","url":"https:\/\/apollo89.com\/wordpress\/","name":"Apollo89.com","description":"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/apollo89.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Person","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82","name":"apollo89","description":"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.","url":"https:\/\/apollo89.com\/wordpress\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6925"}],"version-history":[{"count":0,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6925\/revisions"}],"wp:attachment":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}