±Û º¸ ±â
|
Á¦¸ñ
| º¸Áõº¸ÇèÁõ±ÇÀÇ Á¦Ãâ |
À̸§
| °ü¸®ÀÚ |
À̸ÞÀÏ
| oory.kr@gmail.com
|
³»¿ë
| °¡¾Ð·ù, °¡Ã³ºÐ »ç°Ç¿¡¼ ÁÖ·Î »ç¿ëµÇ´Â Áõ±ÇÀ¸·Î¼ ÀÏÁ¤¾×ÀǺ¸Áõ·á¸¦ º¸Áõº¸Çèȸ»ç¿¡ ³³ºÎÇÑ ÈÄ °æ¸Åº¸Áõº¸ÇèÁõ±ÇÀ» ¹ß±Þ¹Þ¾Æ ¸Å¼ö½Åûº¸ÁõÀ¸·Î Á¦ÃâÇÒ ¼ö ÀÖµµ·Ï ÇÏ´Â ±ÔÁ¤À¸·Î, ÀÔÂûÀÚµéÀÇ Çö±Ý¼ÒÁö·Î ÀÎÇÑ À§Çè¹æÁö ¹× °Å¾×ÀÇ Çö±ÝÀ» ÁغñÇÏÁö ¾Ê°í¼µµ ¼Õ½±°Ô ÀÔÂû¿¡ Âü°¡ÇÒ ¼ö ÀÖµµ·Ï ÇÏ´Â ¹æ¹ýÀ̸ç, ÀÔÂûÀÚÀÇ ¼±Åÿ¡ µû¶ó ¸Å¼ö½ÅûÀÇ º¸ÁõÀ¸·Î Çö±Ý ¶Ç´Â °æ¸Åº¸Áõº¸ÇèÁõ±ÇÀ» ÀÚÀ¯·Ó°Ô È°¿ëÇÒ ¼ö ÀÖµµ·Ï Çϱâ À§ÇÏ¿© »õ·ÎÀÌ ÀÔÂûÀýÂ÷¿¡ µµÀÔÇÑ ±ÔÁ¤ÀÔ´Ï´Ù. ¸Å¼ö½ÅûÀÇ º¸ÁõÀ¸·Î º¸ÇèÁõ±ÇÀ» Á¦ÃâÇÑ ¸Å¼öÀÎÀÌ ¸Å°¢´ë±Ý³³ºÎ±âÇѱîÁö ¸Å°¢´ë±ÝÀ» ³³ºÎÇÏÁö ¾ÊÀ» °æ¿ì¿¡´Â °æ¸Åº¸Áõº¸ÇèÁõ±ÇÀ» ¹ß±ÞÇÑ º¸Áõº¸Çèȸ»ç¿¡¼ ¸Å¼öÀÎ ´ë½Å ¸Å¼öº¸Áõ±ÝÀ» ³³ºÎÇÏ°Ô ÇÏ¿© ¹è´ç½Ã ¹è´çÀç´Ü¿¡ Æ÷ÇÔÇÏ¿© ¹è´çÇÏ°Ô µË´Ï´Ù.
|
À̸§
| ªÀº´ä±Û³»¿ë
| ½Ã°£
|
fuyroljg | 1
¨ä
| 14/05/13 12:37:14 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:40 |
d2MxWXpKMW8= | 1
¨ä
| 14/05/13 13:03:40 |
fuyroljg | ${100303+99318}
¨ä
| 14/05/13 13:03:48 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:48 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:51 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:51 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:51 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:52 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:52 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:53 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:55 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:55 |
${99960+99172} | 1
¨ä
| 14/05/13 13:03:56 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:56 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:56 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:57 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:58 |
fuyroljg | 1
¨ä
| 14/05/13 13:03:58 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:02 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:02 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:03 |
fuyroljg | response.write(9884663*9176910)
¨ä
| 14/05/13 13:04:14 |
fuyroljg |
SomeCustomInjectedHeader:injected_by_wvs
¨ä
| 14/05/13 13:04:15 |
fuyroljg | '+response.write(9884663*9176910)+'
¨ä
| 14/05/13 13:04:15 |
fuyroljg | "+response.write(9884663*9176910)+"
¨ä
| 14/05/13 13:04:16 |
fuyroljg |
SomeCustomInjectedHeader:injected_by_wvs
¨ä
| 14/05/13 13:04:16 |
fuyroljg |
SomeCustomInjectedHeader:injected_by_wvs
¨ä
| 14/05/13 13:04:16 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:16 |
fuyroljg | Array
¨ä
| 14/05/13 13:04:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:17 |
fuyroljg | '"()
¨ä
| 14/05/13 13:04:17 |
fuyroljg | )
¨ä
| 14/05/13 13:04:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:17 |
fuyroljg | !(()&&!|*|*|
¨ä
| 14/05/13 13:04:18 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:18 |
fuyroljg | ^(#$!@#$)(()))******
¨ä
| 14/05/13 13:04:18 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:19 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:19 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:20 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:20 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:27 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:27 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:28 |
fuyroljg | http://some-inexistent-website.acu/some_inexistent_file_with_long_name?%00.jpg
¨ä
| 14/05/13 13:04:28 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:28 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:29 |
fuyroljg | 1some_inexistent_file_with_long_name%00.jpg
¨ä
| 14/05/13 13:04:29 |
fuyroljg | http://testasp.vulnweb.com/t/fit.txt?%00.jpg
¨ä
| 14/05/13 13:04:30 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:30 |
fuyroljg | testasp.vulnweb.com
¨ä
| 14/05/13 13:04:30 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:31 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:31 |
Array | 1
¨ä
| 14/05/13 13:04:32 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:32 |
'"() | 1
¨ä
| 14/05/13 13:04:32 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:33 |
response.write(90776 | 1
¨ä
| 14/05/13 13:04:37 |
SomeCustomInjecte | 1
¨ä
| 14/05/13 13:04:38 |
'+response.write(907 | 1
¨ä
| 14/05/13 13:04:38 |
SomeCustomInjected | 1
¨ä
| 14/05/13 13:04:39 |
"+response.write(907 | 1
¨ä
| 14/05/13 13:04:39 |
SomeCustomInjected | 1
¨ä
| 14/05/13 13:04:39 |
) | 1
¨ä
| 14/05/13 13:04:41 |
!(()&&!|*|*| | 1
¨ä
| 14/05/13 13:04:41 |
^(#$!@#$)(()))****** | 1
¨ä
| 14/05/13 13:04:42 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:47 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:48 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:48 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:48 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:49 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:49 |
fuyroljg | 1
¨ä
| 14/05/13 13:04:49 |
http://some-inexiste | 1
¨ä
| 14/05/13 13:04:59 |
1some_inexistent_fil | 1
¨ä
| 14/05/13 13:05:00 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:00 |
http://testasp.vulnw | 1
¨ä
| 14/05/13 13:05:00 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:01 |
testasp.vulnweb.com | 1
¨ä
| 14/05/13 13:05:01 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:01 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:01 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:02 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:02 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:02 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:03 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:04 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:11 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:11 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:12 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:12 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:13 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:14 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:14 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:14 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:15 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:15 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:15 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:16 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:17 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:18 |
fuyroljg |
¨ä
| 14/05/13 13:05:18 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:18 |
fuyroljg | 268435455
¨ä
| 14/05/13 13:05:19 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:19 |
fuyroljg | ãh
¨ä
| 14/05/13 13:05:19 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:20 |
fuyroljg | ..À¯
¨ä
| 14/05/13 13:05:20 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:20 |
fuyroljg | 1e309
¨ä
| 14/05/13 13:05:21 |
fuyroljg | 1
¨ä
| 14/05/13 13:05:21 |
fuyroljg | '"\'\");|]*{
< |