목록분류 전체보기 (137)

13 Security Lab

Windows 서비스 바이너리 디버깅하려면?

윈도우즈 서비스 프로그램 디버깅하는 방법에 대해서 요약한다. Windows 서비스 프로그램은 Windows 실행파일은 맞지만 실행되는 방식이 exe, dll과는 조금 다르다. 서비스 바이너리를 디버깅 할 때 어떻게 다른지 알아보고, 디버깅하는지 요약해본다. Windows 서비스 ? 리눅스의 데몬과 그 개념이 유사하며, 백그라운드로 실행되는 프로세스이다. 지속적으로 백그라운드에서 실행시킬 프로그램을 윈도우즈 세션으로 실행시킬 수 있다. 서비스는 컴퓨터가 부팅될 때 자동으로 실행되고, 잠시 멈추거나 재시작 할수있다. 또 유저 인터페이스에는 나타나지 않는다. 보통 서비스들은 svchost.exe를 통하여 DLL로 메모리에 로드되어 실행된다. EXE 형태로 독립적인 프로세스로 동작하는 서비스와, 다른 DLL서비..
Computer Security/Analysis 2021. 2. 22. 14:52
Deep Dive into Dark Web Research using Tor Crawler

What is Dark Web Tor Crawler Dark Web Tor Crawler is a classifier and search engine that collects and classifies unknown information by crawling inside sites targeting hidden onion links and removing fog from gray space. In the deep web or dark web, it is not easy to judge the attributes of a site because information is generally hidden. The purpose is to determine the nature of Tor websites by ..
Computer Science/Projects 2021. 2. 21. 01:09
Learn about TF-IDF

What is TF-IDF ? TF-IDF (Term Frequency-Inverse Document Frequency) is a weight used in information retrieval and text mining, and is a statistical value indicating how important a word is in a specific document when there is a document group consisting of multiple documents. TF (term frequency) is a value that indicates how often a specific word appears in a document, and the higher this value,..
Computer Security/Security Articles 2021. 2. 20. 20:51
Learn about Tor Project

In this article we covers tor project and deep web, dark web also called as tor web. Because of the name "Tor" comes to mind first, Marvel's character "Thor", I think it will be easier to understand to call it Tor Project or Tor Broweser or Tor Network. What is Tor ? Tor means The Onion Router, which is the name of the project. Tor Project is a non-rofit organization that conducts research and d..
Computer Security/Security Articles 2021. 2. 17. 12:35
Office Open XML - Paragraph Class - Element Type

Structure brief of OOXML To understand OOXML, in many features structure of OOXML "Paragraph", "Element","Run" Things the below picture shows Hierarchical structure of that. Office Open XML - Paragraph Class - Element Type
Computer Science/Windows Externals 2019. 5. 12. 16:16
[Error] IDA Pro "Please refer to the manual to find appropriate actions"

IDA Pro toast error message like "Please refer to the manual to find appropriate actions" that can be confuced meaning of error. Problem? I got this error when i modified some IDA pro stack value It shows followed by error message "positive SP value has been found". But not this time In conclusion, I fixed this problem by modifying call parameter type. before the function call, it pushed twice. ..
Computer Security/Security Articles 2019. 5. 12. 15:57
[Command] Install Cuckoo Sandbox on Windows 10

1234567891011121314151617181920212223242526# 1.Enable WSL via powershell (Run as Admin.) >> Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux # 2. Install Ubuntu from Microsoft Store # 3. Run bash in Windows CMD and install:$ sudo apt update$ sudo apt upgrade$ sudo apt-get install lamp-server^ $ sudo apt-get install mongodb $ sudo service apache2 start$ sudo se..
Computer Security/Security Articles 2018. 10. 9. 23:30
[Error] Install Cuckoo Sandbox & troubleshoot

pip install cuckoo then, I got this. Error Message: (ValueError: jpeg is required unless explicitly disabled using --disable-jpeg, aborting) 12345678910111213141516171819202122232425262728293031323334353637 writing manifest file 'Pillow.egg-info/SOURCES.txt' copying PIL/OleFileIO-README.md -> build/lib.linux-x86_64-2.7/PIL running build_ext Traceback (most recent call last): File "", line 1, in ..
Computer Security/Security Articles 2018. 10. 9. 22:45
[번역] OFFICE OPEN XML OVERVIEW (White Paper)

[ECMA] OFFICE OPEN XML OVERVIEW https://www.ecma-international.org/news/TC45_current_work/OpenXML%20White%20Paper.pdf ECMA TC45 TOM NGO (NEXTPAGE), EDITOR - Overview 의 내용이 생각보다 많아 이를 다시 요약하는 것으로 정리 1. INTRODUCTION Office Open XML (OpenXML) 은 워드 프로세싱 문서(Word), 프레젠테이션,(Power Point) 스프레드시트(엑셀) 에 대한 공개 표준(Open Standard) 입니다. 이 공개 표준을 통해서 여러 플랫폼의 여러 어플리케이션에서 자유롭게 구현 할 수 있습니다. 이 Publication은 상업적 사용을 위..
Computer Security/Security Articles 2018. 10. 6. 00:20
Office Open XML & Security

1. IntroductionAfter CFB(Compound File Binary) Format, MS released new office file format now we already familiar.It is Ofiice Open XML format and it extension added "x" the following the former extension like "docx" It applied first at Microsoft Office 2007 Day after day APT attack is increased using MS office 대부분의 공격은 Office에 삽입 된 Macro 를 통해서 이루어지는 것으로 보임상위 버전의 Office에서는 보안경고가 뜨고 동의하면 매크로가 실행보..
Computer Security/Security Articles 2018. 9. 26. 13:33
Prev 1 2 3 4 5 ··· 14 Next