February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
119
4
장
서브도메인 찾기
{ subdomain: 'ftp', ip: '12.31.222.212' },
{ subdomain: 'forum', ip: '14.15.78.136' }
4.6
딕셔너리 공격
가능한 모든 서브도메인에 대해 시도하는 브루트 포스 공격 대신
딕셔너리 공격
dictionary
attack
을 시
도한다면 속도를 훨씬 높일 수 있다. 잠재적 서브도메인의 배열을 가지고 시도한다는 점에서
딕셔너리 공격은 브루트 포스 공격과 비슷하지만 무작위로 생성하는 것이 아니라 공통적인 서
브도메인의 목록으로부터 만든다는 점에서 차이가 있다.
딕셔너리 공격의 장점은 속도가 매우 빠르다는 것이다. 매우 유별나고 비표준적인 서브도메인
이 아니라면 딕셔너리 공격으로 찾아낼 수 있다.
유명한 오픈 소스
DNS
스캐너인
dnscan
에는 인터넷에서 가장 많이 사용되는 서브도메인 목
록이 포함돼 있다. 이 목록은
86
,
000
건의
DNS
존 레코드로부터 얻은 수백만 개의 서브도메인
을 가지고 작성한 것이다.
dnscan
의 서브도메인 스캔 데이터에 따르면 가장 많이 사용되는
25
가지 서브도메인은 다음과 같다.
www
mail
ftp
localhost
webmail
smtp
pop
ns1
webdisk
ns2
cpanel
whm
autodiscover
autoconfig
m
imap
test
120
1
부
정찰
ns
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.