셸쇼크
리눅스 환경 변수에 빈 함수를 넣으면 그 뒤에 오는 코드는 무조석 실행되는 버그를 이용한 공격
취약점 점검 구문:
$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
활용:
User-Agent 부분을 Acctacker ip로 리버스 커넥션하게 요청
Subjects:
IT_2024_STUDY
Primary tabs
1 cards submitted by brad.kim on Sunday, February 25th, 2024.
2024년 자격증 취득 공부
Subjects:
Bookmark to learn: Login to use bookmarks.
Edit this flashcard deck ...
Bookmark to learn: Login to use bookmarks.
Add to collection ... add IT_2024_STUDY to your collections:
Help using Flashcards ...just like in real life ;)
- Try the tutorial for interactive instructions.
- Look at the card, do you know this one? Click to flip the card and check yourself.
- Mark card Right or Wrong, this card will be removed from the deck and your score kept.
- At any point you can Shuffle, Reveal cards and more via Deck controls.
- Continue to reveal the wrong cards until you have correctly answered the entire deck. Good job!
- Via the Actions button you can Shuffle, Unshuffle, Flip all Cards, Reset score, etc.
- Come back soon, we'll keep your score.“Repetition is the mother of all learning.”
- Signed in users can Create, Edit, Import, Export decks and more!.
Bookmark to learn: Login to use bookmarks.
Share via these services ...
Email this deck: Email this deck »
# Right & # Wrong of #