๐Ÿ† ๋นก๊ณตํŒŸ ์ „ํŠธ๋ž™ ์ƒ์‹œ ๋ชจ์ง‘ ์ „ํ™˜ - ์›ํ•˜๋Š” ๋•Œ์— ์‹œ์ž‘ํ•˜์„ธ์š”! ๐Ÿ†

๐Ÿ† ๋นก๊ณตํŒŸ ์ „ํŠธ๋ž™ ์ƒ์‹œ ๋ชจ์ง‘ ์ „ํ™˜ ๐Ÿ†

๋นก๊ณตํŒŸ์ด ๊ธฐ์กด์˜ ๊ธฐ์ˆ˜ ๋ชจ์ง‘์ œ์—์„œ ์ƒ์‹œ ๋ชจ์ง‘์œผ๋กœ ์ „ํ™˜ํ•˜์˜€์Šต๋‹ˆ๋‹ค! ์ด์ œ ์–ธ์ œ๋“  ์„ฑ์žฅํ•˜๊ณ  ์‹ถ์„ ๋•Œ ์‹œ์ž‘ํ•˜์„ธ์š”!

KakaoTalk_20260402_161754448.png

๐Ÿ”œ ๋“ฑ๋ก ์ ˆ์ฐจ

KakaoTalk_20260413_144450799.png
KakaoTalk_20260413_144450799_01.png
KakaoTalk_20260413_144450799_02.png
KakaoTalk_20260413_144450799_03.png
KakaoTalk_20260413_144450799_04.png
KakaoTalk_20260413_144450799_05.png
KakaoTalk_20260413_144450799_06.png
KakaoTalk_20260413_144450799_07.png

๋นก๊ณตํŒŸ ์ „์šฉ LMS(TAS) ์‚ฌ์ดํŠธ ๋ฐฉ๋ฌธ ํ›„ ํšŒ์›๊ฐ€์ž…
์ž๊ธฐ์†Œ๊ฐœ์„œ ์ž‘์„ฑ
์„œ์•ฝ์„œ ์ œ์ถœ ํ›„ ์Šน์ธ ๋Œ€๊ธฐ
์›ํ•˜๋Š” ํŠธ๋ž™ ์„ ํƒ ํ›„ ๊ฒฐ์ œ
์ด๋ฒˆ ์ฃผ ๊ฒฐ์ œ ์™„๋ฃŒ โ†’ ๋‹ค์Œ ์ฃผ ๋ฐ”๋กœ 1์ฃผ์ฐจ ์‹œ์ž‘

๐Ÿ—‚ ํŠธ๋ž™ ๊ตฌ์„ฑ ํ•œ๋ˆˆ์— ๋ณด๊ธฐ

๐ŸŒฑ ์ž…๋ฌธยท๊ธฐ๋ณธ๊ธฐ ํŠธ๋ž™ (์ฒ˜์Œ ์‹œ์ž‘ํ•˜๋Š” ๋ถ„๊ป˜)

  • ์›น ํ•ดํ‚น
    ์›น์˜ ๋™์ž‘ ์›๋ฆฌ ์ดํ•ด + ์›น ์ทจ์•ฝ์  ๋ฐ ๋ณดํ˜ธ๊ธฐ๋ฒ• ํ•™์Šต + 1-day๊ธฐ๋ฐ˜ ์ทจ์•ฝ์  ๋ถ„์„
  • ์‹œ์Šคํ…œ ํ•ดํ‚น
    ๋ฉ”๋ชจ๋ฆฌ / ๋ฐ์ดํ„ฐ / ์–ด์…ˆ๋ธ”๋ฆฌ ํ•™์Šต + ์‹œ์Šคํ…œ ์ทจ์•ฝ์  ๋ฐ ๋ณดํ˜ธ๊ธฐ๋ฒ• ํ•™์Šต+ ์ทจ์•ฝ์  ๋ถ„์„ ์ž๋™ํ™” ๊ธฐ์ˆ  ํผ์ €
  • ๋ฆฌ๋ฒ„์Šค ์—”์ง€๋‹ˆ์–ด๋ง
    ๋ฐ”์ด๋„ˆ๋ฆฌ ๋ถ„์„ ๋ฐฉ๋ฒ•๋ก  ๋ฐ ์Šคํ‚ฌ + ์Šคํƒ ๋ฐ ์–ด์…ˆ๋ธ”๋ฆฌ ํ•™์Šต + ๋ฆฌ๋ฒ„์‹ฑ์˜ CTF์  ์ ‘๊ทผ

๐Ÿ”ฐ ๋ฐฉ์–ดํŽธ ์ „๋ฌธ ํŠธ๋ž™ (๋ถ„์„ & ๋Œ€์‘)

  • ๋””์ง€ํ„ธ ํฌ๋ Œ์‹
    ๋””์ง€ํ„ธ ํฌ๋ Œ์‹ ๋ฐ ์นจํ•ด์‚ฌ๊ณ  ๋Œ€์‘ + ์ฆ๊ฑฐ ๋ณด์กด ๋ฐ ์ˆ˜์ง‘ ์ ˆ์ฐจ ํ•™์Šต + ์šด์˜์ฒด์ œ(OS) ๋ฐ ์•„ํ‹ฐํŒฉํŠธ + ์•ˆํ‹ฐ & ๋ฉ”๋ชจ๋ฆฌ ํฌ๋ Œ์‹ ํ•™์Šต
  • ์•…์„ฑ์ฝ”๋“œ ๋ถ„์„
    ์•…์„ฑ์ฝ”๋“œ ๋ถ„์„ ๋„๊ตฌ ์‚ฌ์šฉ๋ฒ• ํ•™์Šต + ์‹ค์ œ ์•…์„ฑ์ฝ”๋“œ ๋ถ„์„ ๋ฐฉ๋ฒ•๋ก  ํ•™์Šต + ๋ฆฌ๋ฒ„์‹ฑ ๊ธฐ์ดˆ ๋ฐ CTF์  ์ ‘๊ทผ ํ•™์Šต

๐Ÿ’ฅ ์‹ฌํ™” ์ „๋ฌธ ํŠธ๋ž™ (๋ฒ•ยทํ•˜๋“œ์›จ์–ด)

  • ๊ฐœ์ธ์ •๋ณด ๋ณดํ˜ธ
    ๊ฐœ์ธ์ •๋ณด ์œ ์ถœ ์‚ฌ๋ก€ ๋ฐ ๋ฒ•์  ์Ÿ์ ์— ๋Œ€ํ•œ ์‹ค๋ฌด ๊ธฐ๋ฐ˜ ๋Œ€์‘ + ๊ฐœ์ธ์ •๋ณด๋ณดํ˜ธ๋ฒ• ๊ธฐ๋ฐ˜ ์ฒ˜๋ฆฌ๋ฐฉ์นจ, ๋™์˜์„œ ๋“ฑ ๊ด€๋ จ ๋ฌธ์„œ ์ž‘์„ฑ
  • ํ•˜๋“œ์›จ์–ด ํ•ดํ‚น
    ํ•˜๋“œ์›จ์–ด ๊ตฌ์กฐ์™€ ์ž„๋ฒ ๋””๋“œ ์ทจ์•ฝ์  ๋ถ„์„ ๊ธฐ์ดˆ ํ•™์Šต + ํŽŒ์›จ์–ด ๋ฐ ์ปดํ“จํ„ฐ ๊ตฌ์กฐ ๊ธฐ์ดˆ ํ•™์Šต + ๋ฆฌ์–ผ์›”๋“œ IoT ์ทจ์•ฝ์  ๋ถ„์„์„ ๊ฒฝํ—˜

๐Ÿ’ฏ ๊ณต๊ฒฉํŽธ ๊ณ ๊ธ‰ ์Šคํ‚ฌ ํŠธ๋ž™ (์‹ค์ „ ๋ฒ„๊ทธํ—ŒํŒ… & ์นจํˆฌ)

  • ์›น ๋ฒ„๊ทธํ—ŒํŒ…
    ๋ฆฌ์–ผ์›”๋“œ ์ทจ์•ฝ์  ๋ฐœ์ƒ์˜ ์ดํ•ด + 0-Day ์ฑŒ๋ฆฐ์ง€ + ๋ฒ„๊ทธ๋ฐ”์šดํ‹ฐ ์ œ๋„ ๊ธฐ๋ฐ˜ ์œค๋ฆฌ์  ํ•ดํ‚น ํ•™์Šต
  • ์‹œ์Šคํ…œ ๋ฒ„๊ทธํ—ŒํŒ…
    ๋ฆฌ์–ผ์›”๋“œ ์ทจ์•ฝ์ ๋ถ„์„ ๋ฐฉ๋ฒ•๋ก  ํ•™์Šต + fuzzer ์ œ์ž‘ + 0-Day ์ฑŒ๋ฆฐ์ง€
  • ๋ ˆ๋“œํŒ€
    ๊ณต๊ฒฉ์ž ๊ด€์  ์ธํ”„๋ผ ์นจํˆฌ + ๊ณต๊ฒฉ ์ธํ”„๋ผ ๊ตฌ์ถ• + ๋ ˆ๋“œํŒ€ ์ž‘์ „ ์ˆ˜ํ–‰ ๋ฐฉ๋ฒ•๋ก  ํ•™์Šต ๋ฐ ์‹ค์Šต

๐Ÿ’ก ๋นก๊ณตํŒŸ์€ ์ด๋Ÿฐ ๊ณณ์ž…๋‹ˆ๋‹ค

๋‹จ์ผ ์ปค๋ฆฌํ˜๋Ÿผ์ด ์•„๋‹Œ ๋‹ค์ค‘ ํŠธ๋ž™ ์šด์˜
์ด๋ก  โ†’ ์‹ค์Šต โ†’ ์‹ค๋ฌด ๊ธฐ์ค€๊นŒ์ง€ ์ด์–ด์ง€๋Š” ๊ตฌ์กฐํ™”๋œ ํ•™์Šต
ํ•ดํ‚น ์ž…๋ฌธ์ž๋ถ€ํ„ฐ ์‹ค๋ฌด ์ง€ํ–ฅ ์ค‘๊ธ‰์ž๊นŒ์ง€, ๋‹จ๊ณ„์— ๋งž๋Š” ํŠธ๋ž™ ์„ ํƒ ๊ฐ€๋Šฅ
์ˆ˜๋ฃŒ ํ›„์—๋„ ํ˜ผ์ž ์„ฑ์žฅํ•  ์ˆ˜ ์žˆ๋Š” ์ƒํƒœ๋กœ ๋งŒ๋“œ๋Š” ๊ฒƒ์ด ๋ชฉํ‘œ

โœ” ์‹ค๋ฌด ์ตœ์ „์„  ๋ฉ˜ํ† ์ง„

์•ˆ๋žฉ, Theori, KISA, ๋ฐฉ์‚ฐ Big 3 ์ถœ์‹  ํ˜„์ง ์ „๋ฌธ๊ฐ€
ํ•ดํ‚น๋Œ€ํšŒยท๋ฒ„๊ทธ๋ฐ”์šดํ‹ฐยทํ•™ํšŒ ํฌํ•จ 100ํšŒ ์ด์ƒ ์ˆ˜์ƒยท๋ฐœํ‘œ
๊ต์žฌ์—๋Š” ์—†๋Š” ์‹ค์ „ ์ด๋ก 

โœ” ๊ฒฐ๊ณผ๋กœ ์ฆ๋ช…๋œ ํŠธ๋ž™

libxml / WinRAR / Gnuboard / tcpreplay ์ทจ์•ฝ์  ๋ฐœ๊ฒฌ ๋ฐ CVE ๋ฐœ๊ธ‰
2025 Pwn2Own ์ˆ˜์ƒ
๋ฐฐ๋‹ฌ์˜ ๋ฏผ์กฑ ๋ฒ„๊ทธ๋ฐ”์šดํ‹ฐ
๋””์ง€ํ„ธ ํฌ๋ Œ์‹ ์ฑŒ๋ฆฐ์ง€ ์ˆ˜์ƒ, ํ•œ๊ตญ์ •๋ณด๋ณดํ˜ธํ•™ํšŒ ์šฐ์ˆ˜ ๋…ผ๋ฌธ์ƒ
BoB ํ•ฉ๊ฒฉ ๋ฐ Top 10
Nexon, Bithumb, ์šฐ๋ฆฌ์€ํ–‰, AhnLab, KISA, ํ•œ์ „ ๋“ฑ ์ทจ์—…

๐ŸŽฏ ๊ณ ๋ฏผ๋ง๊ณ  ๋ฐ”๋กœ ์‹œ์ž‘ํ•˜์„ธ์š”!

์‹ค์ „์—์„œ ๋ฐ”๋กœ ์“ธ ์ˆ˜ ์žˆ๋Š” ์Šคํ‚ฌ์„ ์›ํ•˜๋Š” ๋ถ„
ํฌํŠธํด๋ฆฌ์˜ค์— ์‹ค์ œ ์„ฑ๊ณผ๋ฅผ ๋„ฃ๊ณ  ์‹ถ์€ ๋ถ„
0-Day ๋ฐœ๊ตด, CVE ๋“ฑ๋ก์— ๋„์ „ํ•˜๊ณ  ์‹ถ์€ ๋ถ„
๋ณด์•ˆ ์ทจ์—…ยท์ด์ง์—์„œ ํ™•์‹คํ•œ ๋ฌด๊ธฐ๊ฐ€ ํ•„์š”ํ•œ ๋ถ„
์ง€์‹์€ ์žˆ๋Š”๋ฐ ์ฒด๊ณ„๊ฐ€ ์—†์–ด ๋ถˆ์•ˆํ•œ ๋ถ„
ํ•ดํ‚นยท๋ณด์•ˆ์ด ์™„์ „ ์ฒ˜์Œ์ธ๋ฐ ์ œ๋Œ€๋กœ ์‹œ์ž‘ํ•˜๊ณ  ์‹ถ์€ ๋ถ„

๐Ÿ“ฉ ๋ฌธ์˜ & ๋“ฑ๋ก

๐ŸŒ ํ™ˆํŽ˜์ด์ง€: https://h4c.biz/p4c

๐Ÿ“ธ ์ธ์Šคํƒ€๊ทธ๋žจ: https://www.instagram.com/b4c_p4c

โœ๏ธ ๋ธ”๋กœ๊ทธ: https://blog.naver.com/b4c_p4c

๐Ÿ’ฌ ์นด์นด์˜ค ์˜คํ”ˆ์ฑ„ํŒ…: https://open.kakao.com/o/sUQnofYf

์ž‘์„ฑ์ž ์ •๋ณด