{"id":9210,"date":"2025-07-06T09:01:14","date_gmt":"2025-07-06T00:01:14","guid":{"rendered":"https:\/\/blog.agentsoft.co.kr\/index.php\/2025\/07\/06\/9210\/"},"modified":"2025-07-06T09:01:14","modified_gmt":"2025-07-06T00:01:14","slug":"%ed%8a%b9%ec%a0%95-%ec%82%ac%ec%9d%b4%ed%8a%b8-%ea%b3%b5%ea%b0%9c%ec%a0%95%eb%b3%b4-%ec%88%98%ec%a7%91-%eb%a6%ac%ed%8f%ac%ed%8a%b8a","status":"publish","type":"post","link":"https:\/\/blog.agentsoft.co.kr\/index.php\/2025\/07\/06\/9210\/","title":{"rendered":"\ud2b9\uc815 \uc0ac\uc774\ud2b8 \uacf5\uac1c\uc815\ubcf4 \uc218\uc9d1 \ub9ac\ud3ec\ud2b8[A+]"},"content":{"rendered":"

<\/p>\n

\ubaa9\ucc28<\/strong><\/p>\n

1. \ud0c0\uae43 \ub3c4\uba54\uc778 \uc9c0\uc815<\/p>\n

2. \ud0c0\uae43 \ub3c4\uba54\uc778\uc758 \uacf5\uac1c\ub41c \uc815\ubcf4 \uc218\uc9d1 \uc808\ucc28 \ubc0f \uc218\uc9d1\ub41c Data
\n 1) nslookup \uc744 \ud1b5\ud55c IP \uc218\uc9d1
\n 2) dnsmap\uc744 \ud1b5\ud55c \uc11c\ube0c\ub3c4\uba54\uc778 \ud655\uc778
\n 3) nmap\uc744 \uc774\uc6a9\ud55c \ud3ec\ud2b8\uc2a4\uce94, OS\uc815\ubcf4 \ud655\uc778
\n 4) shodan\uc744 \ud1b5\ud55c \uae30\ud0c0 \ucde8\uc57d\uc810 \uac80\uc0c9
\n 5) \uae30\ud0c0 \uc815\ubcf4 \uc218\uc9d1 \uacfc\uc815\uc5d0\uc11c \uc5bb\uc740 Data
\n 6) maltego\ub97c \ud1b5\ud574 \uc218\uc9d1\ub41c \ucde8\uc57d\uc810 \uc815\ub9ac
\n 7) \ud574\ub2f9 \uc6f9\uc0ac\uc774\ud2b8 \ubc29\ubb38<\/p>\n

3. Information \/ Intelligence
\n1)\t Information \uc815\ub9ac
\n2)\t Intelligence \uc815\ub9ac<\/p>\n

4. \ucde8\uc57d\uc810 \uc870\uce58 \ubc29\uc548
\n 1) \ub514\ub809\ud130\ub9ac \ub9ac\uc2a4\ud305 \ucde8\uc57d\uc810 \uc870\uce58
\n 2) CVE-2019-0220 \ub4f1 \ud2b9\uc815 \ubc84\uc804\uc5d0\uc11c \ub098\ud0c0\ub098\ub294 \ucde8\uc57d\uc810 \uc870\uce58\ubc29\uc548
\n 3) \ud3ec\ud2b8\uc2a4\uce94 \uacb0\uacfc \ub2e4\uc218\uc758 Well-known \ud3ec\ud2b8 \ub178\ucd9c \ucde8\uc57d\uc810 \uc870\uce58\ubc29\uc548
\n 4) \uadf8 \uc678\uc5d0 \ud604 \ub9ac\ud3ec\ud2b8\uc5d0 \ud30c\uc545\ub418\uc9c0 \uc54a\uc740 \ucde8\uc57d\uc810 \ubd84\uc11d\/\uc870\uce58\ubc29\uc548<\/p>\n

\ubcf8\ubb38\ub0b4\uc6a9<\/strong><\/p>\n

1. \ud0c0\uae43 \ub3c4\uba54\uc778 \uc9c0\uc815
\n – \uad6c\uae00 \uac80\uc0c9 \uc635\uc158 \uc124\uc815\uc744 \ud1b5\ud55c \ub514\ub809\ud130\ub9ac \ub9ac\uc2a4\ud305 \ucde8\uc57d\uc810\uc744 \uac00\uc9c4 \uc11c\ubc84 \ud655\uc778
\n – \uac80\uc0c9 \ud0a4\uc6cc\ub4dc : intitle:index of name size
\n – \ucde8\uc57d\ud558\uac8c \uc6b4\uc601\ub418\ub294 \uc11c\ubc84\uc5d0\ub294 \uacf5\uaca9 \ud45c\uc801\uc774 \ub420 \ub9cc\ud55c \uc790\ub8cc\uac00 \uc874\uc7ac\ud560 \uac83\uc73c\ub85c \ud310\ub2e8\ud558\uc5ec \uc120\uc815
\n * google hacking DB\ub97c \ucc38\uace0\ud568<\/p>\n

\u25b2 BigZami\ub77c\ub294 \uc0ac\uc774\ud2b8\uc758 \ub514\ub809\ud130\ub9ac \ub9ac\uc2a4\ud305 \ucde8\uc57d\uc810\uc774 \ub178\ucd9c\ub41c \ubaa8\uc2b5<\/p>\n

\u25b2 \ud074\ub9ad\ud574\ubcf4\uba74 \uc9c1\uc6d0\uc73c\ub85c \ud310\ub41c\ub418\ub294 \uc0ac\ub78c\uc758 \uc774\ub984\uacfc \uc9c1\ubb34 \uad00\ub828 \uc5c5\uccb4 \ub4f1\uc774 \ub178\ucd9c\ub418\uc5b4 \uc788\uc74c<\/p>\n

\u25b2 Parent Directory\ub85c\uc758 \uc774\ub3d9 \uac00\ub2a5, Apache \ubc84\uc804 \ubc0f \uc0ac\uc6a9 Port \ubc88\ud638 \ub178\ucd9c<\/p>\n

2. \ud0c0\uae43 \ub3c4\uba54\uc778\uc758 \uacf5\uac1c\ub41c \uc815\ubcf4 \uc218\uc9d1 \uc808\ucc28 \ubc0f \uc218\uc9d1\ub41c Data
\n 1) nslookup \uc744 \ud1b5\ud55c IP \uc218\uc9d1
\n \u25b2 nslookup \uc2e4\ud589 \uacb0\uacfc 13.209.33.85\ub77c\ub294 IP\uc8fc\uc18c\ub97c \uc5bb\uc5b4 \ud0c0\uae43\uc73c\ub85c \uc9c0\uc815\ud560 \uc218 \uc788\uc74c
\n 2) dnsmap\uc744 \ud1b5\ud55c \uc11c\ube0c\ub3c4\uba54\uc778 \ud655\uc778
\n \u25b2 dnsmap \uc2e4\ud589 \uacb0\uacfc mail.bigzami.com, mi.bigzami.com, www.bigzami.com \uc138\uac00\uc9c0 \uc11c\ube0c\ub3c4\uba54\uc778\uc744 \uc5bb\uc5b4\ub0bc \uc218 \uc788\uc74c
\n 3) nmap\uc744 \uc774\uc6a9\ud55c \ud3ec\ud2b8\uc2a4\uce94, OS\uc815\ubcf4 \ud655\uc778
\n \u25b2 nmap \uc2e4\ud589 \uacb0\uacfc 21, 22, 80, 443 \ub4f1\uc758 \ud3ec\ud2b8\uac00 \uc2a4\uce90\ub2dd \ub428, \uc11c\ubc84 \ubc84\uc804 \ub178\ucd9c<\/p>\n

\ucd9c\ucc98 : \ud574\ud53c\ucea0\ud37c\uc2a4<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\ubaa9\ucc28 1. \ud0c0\uae43 \ub3c4\uba54\uc778 \uc9c0\uc815 2. \ud0c0\uae43 \ub3c4\uba54\uc778\uc758 \uacf5\uac1c\ub41c \uc815\ubcf4 \uc218\uc9d1 \uc808\ucc28 \ubc0f \uc218\uc9d1\ub41c Data 1) nslookup \uc744 \ud1b5\ud55c IP \uc218\uc9d1 2) dnsmap\uc744 \ud1b5\ud55c \uc11c\ube0c\ub3c4\uba54\uc778 \ud655\uc778 3) nmap\uc744 \uc774\uc6a9\ud55c \ud3ec\ud2b8\uc2a4\uce94, OS\uc815\ubcf4 \ud655\uc778 4) shodan\uc744 \ud1b5\ud55c \uae30\ud0c0 \ucde8\uc57d\uc810 \uac80\uc0c9 5) \uae30\ud0c0 \uc815\ubcf4 \uc218\uc9d1 \uacfc\uc815\uc5d0\uc11c \uc5bb\uc740 Data 6) maltego\ub97c \ud1b5\ud574 \uc218\uc9d1\ub41c \ucde8\uc57d\uc810 \uc815\ub9ac 7) \ud574\ub2f9 \uc6f9\uc0ac\uc774\ud2b8 \ubc29\ubb38 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[14439,14441,14438,14434,14440,8097,14435,14436,8795,14437],"class_list":["post-9210","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-dnsmap","tag-maltego","tag-nslookup","tag-osint","tag-shodan","tag-8097","tag-14435","tag-14436","tag-8795","tag-14437"],"_links":{"self":[{"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/posts\/9210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/comments?post=9210"}],"version-history":[{"count":0,"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/posts\/9210\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/media?parent=9210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/categories?post=9210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.agentsoft.co.kr\/index.php\/wp-json\/wp\/v2\/tags?post=9210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}