1<!DOCTYPE html> 2<html lang="ko" class="night view-more-support progress-bar-support page-cover-support altcover-support alt1 show-comments gh-top hide-sidebar hide-blog-info sidebar-left sidebar-first theme-color deptheffect"> 3 <head> 4
4<script type="text/javascript">if (!window.T) { window.T = {} } 5window.T.config = {"TOP_SSL_URL":"https://www.tistory.com","PREVIEW":false,"ROLE":"guest","PREV_PAGE":"","NEXT_PAGE":"","BLOG":{"id":3085610,"name":"universe-blog","title":"Universe blog","isDormancy":false,"nickName":"Universe7202","status":"open","profileStatus":"normal"},"NEED_COMMENT_LOGIN":true,"COMMENT_LOGIN_CONFIRM_MESSAGE":"ì´ ë¸ë¡ê·¸ë ë¡ê·¸ì¸í ì¬ì©ììê²ë§ ëê¸ ìì±ì íì©íìµëë¤. ì§ê¸ ë¡ê·¸ì¸íìê² ìµëê¹?","LOGIN_URL":"https://www.tistory.com/auth/login/?redirectUrl=https://lactea.kr/","DEFAULT_URL":"https://lactea.kr","USER":{"name":null,"homepage":null,"id":0,"profileImage":null},"SUBSCRIPTION":{"status":"none","isConnected":false,"isPending":false,"isWait":false,"isProcessing":false,"isNone":true},"IS_LOGIN":false,"HAS_BLOG":false,"IS_SUPPORT":false,"IS_SCRAPABLE":false,"TOP_URL":"http://www.tistory.com","JOIN_URL":"https://www.tistory.com/member/join","PHASE":"prod","ROLE_GROUP":"visitor"}; 6window.T.entryInfo = null; 7window.appInfo = {"domain":"tistory.com","topUrl":"https://www.tistory.com","loginUrl":"https://www.tistory.com/auth/login","logoutUrl":"https://www.tistory.com/auth/logout"}; 8window.initData = {}; 9 10window.TistoryBlog = { 11 basePath: "", 12 url: "https://lactea.kr", 13 tistoryUrl: "https://universe-blog.tistory.com", 14 manageUrl: "https://universe-blog.tistory.com/manage", 15 token: "T85OP6vNpwItW1WINF/Zp7K5DngM6XJOsZ3C+Ayvyir5mJEZITdNSb3hwTSzDZ/h" 16}; 17var servicePath = ""; 18var blogURL = "";</script>
18 19 20 21 22 23 <!-- BusinessLicenseInfo - START --> 24 25 <link href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/plugin/BusinessLicenseInfo/style.css" rel="stylesheet" type="text/css"/> 26 27
27<script>function switchFold(entryId) { 28 var businessLayer = document.getElementById("businessInfoLayer_" + entryId); 29 30 if (businessLayer) { 31 if (businessLayer.className.indexOf("unfold_license") > 0) { 32 businessLayer.className = "business_license_layer"; 33 } else { 34 businessLayer.className = "business_license_layer unfold_license"; 35 } 36 } 37} 38</script>
38 39 40 41 <!-- BusinessLicenseInfo - END --> 42 <!-- DaumShow - START --> 43 <style type="text/css">#daumSearchBox { 44 height: 21px; 45 background-image: url(//i1.daumcdn.net/imgsrc.search/search_all/show/tistory/plugin/bg_search2_2.gif); 46 margin: 5px auto; 47 padding: 0; 48} 49 50#daumSearchBox input { 51 background: none; 52 margin: 0; 53 padding: 0; 54 border: 0; 55} 56 57#daumSearchBox #daumLogo { 58 width: 34px; 59 height: 21px; 60 float: left; 61 margin-right: 5px; 62 background-image: url(//i1.daumcdn.net/img-media/tistory/img/bg_search1_2_2010ci.gif); 63} 64 65#daumSearchBox #show_q { 66 background-color: transparent; 67 border: none; 68 font: 12px Gulim, Sans-serif; 69 color: #555; 70 margin-top: 4px; 71 margin-right: 15px; 72 float: left; 73} 74 75#daumSearchBox #show_btn { 76 background-image: url(//i1.daumcdn.net/imgsrc.search/search_all/show/tistory/plugin/bt_search_2.gif); 77 width: 37px; 78 height: 21px; 79 float: left; 80 margin: 0; 81 cursor: pointer; 82 text-indent: -1000em; 83} 84</style> 85 86 <!-- DaumShow - END --> 87 88 <!-- GoogleAnalytics - START -->
vendor: 66 bytes, lines 88-89
88 89 <script src="https://www.googletagmanager.com/gtag/js?id=
89G-9NQ0W46WZD
vendor: 26 bytes, line 89
89" async="async"></script>
90<script>
vendor: 126 bytes, lines 90-93
90window.dataLayer = window.dataLayer || []; 91function gtag(){dataLayer.push(arguments);} 92gtag('js', new Date()); 93gtag('config','
93G-9NQ0W46WZD
vendor: 166 bytes, lines 93-97
93', { 94 cookie_domain: 'universe-blog.tistory.com', 95 cookie_flags: 'max-age=0;domain=.tistory.com', 96 cookie_expires: 7 * 24 * 60 * 60 // 7 days, in seconds 97});
97</script>
97 98 99 <!-- GoogleAnalytics - END --> 100 101 <!-- MetaTag - START --> 102 <meta name="ë¤ì´ë² ì¹ ë§ì¤í° ë구" content="<meta name="Robots" content="index,follow">"/> 103<meta name="ë¤ì´ë² ë¡ë´í´ ê²ì¦" content="<meta name="Yeti" content="index,follow">"/> 104<meta name="êµ¬ê¸ ë´" content="<meta name="Googlebot" content="index,follow">"/> 105<meta name="êµ¬ê¸ ì´ë¯¸ì§ ë´" content="<meta name="googlebot-image" content="index,follow">"/> 106<meta name="ë¤ì ë´" content="<meta name="Daumoa" content="index,follow">"/> 107 <!-- MetaTag - END --> 108 109<!-- System - START --> 110 111<!-- System - END --> 112 113 <!-- GoogleSearchConsole - START --> 114 115<!-- BEGIN GOOGLE_SITE_VERIFICATION --> 116<meta name="google-site-verification" content="broe8ArOBmX2vtJZ7PCa3ZyJJo1Xo97IwH9j-zLiQbw"/> 117<!-- END GOOGLE_SITE_VERIFICATION --> 118 119 <!-- GoogleSearchConsole - END --> 120 121 <!-- TistoryProfileLayer - START --> 122 <link href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/plugin/TistoryProfileLayer/style.css" rel="stylesheet" type="text/css"/>
123<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/plugin/TistoryProfileLayer/script.js"></script>
123 124 125 <!-- TistoryProfileLayer - END --> 126 127 128 <meta http-equiv="X-UA-Compatible" content="IE=Edge"> 129<meta name="format-detection" content="telephone=no">
130<script src="//t1.daumcdn.net/tistory_admin/lib/jquery/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"></script>
vendor: 1 bytes, line 130
130
131<script type="text/javascript" src="//t1.kakaocdn.net/tiara/js/v1/tiara-1.2.0.min.js"></script>
131<meta name="referrer" content="always"/> 132<meta name="google-adsense-platform-account" content="ca-host-pub-9691043933427338"/> 133<meta name="google-adsense-platform-domain" content="tistory.com"/> 134<meta name="description" content="i love security"/> 135 136 <!-- BEGIN OPENGRAPH --> 137 <meta property="og:type" content="website"/> 138<meta property="og:url" content="https://lactea.kr"/> 139<meta property="og:site_name" content="Universe blog"/> 140<meta property="og:title" content="Universe blog"/> 141<meta property="og:description" content="i love security"/> 142<meta property="og:image" content="https://img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Ftistory1.daumcdn.net%2Ftistory%2F3085610%2Fattach%2F0f893d6589334a90b770b9f65beb42a9"/> 143<meta property="og:article:author" content="'Universe7202'"/> 144 <!-- END OPENGRAPH --> 145 146 <!-- BEGIN TWITTERCARD --> 147 <meta name="twitter:card" content="summary_large_image"/> 148<meta name="twitter:site" content="@TISTORY"/> 149<meta name="twitter:title" content="Universe blog"/> 150<meta name="twitter:description" content="i love security"/> 151<meta property="twitter:image" content="https://img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Ftistory1.daumcdn.net%2Ftistory%2F3085610%2Fattach%2F0f893d6589334a90b770b9f65beb42a9"/> 152 <!-- END TWITTERCARD -->
153<script type="module" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/pc/dist/index.js" defer=""></script>
vendor: 1 bytes, line 153
153
154<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/pc/dist/index-legacy.js" defer="" nomodule="true"></script>
vendor: 1 bytes, line 154
154
155<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/pc/dist/polyfills-legacy.js" defer="" nomodule="true"></script>
155 156<link rel="icon" sizes="any" href="https://t1.daumcdn.net/tistory_admin/favicon/tistory_favicon_32x32.ico"/> 157<link rel="icon" type="image/svg+xml" href="https://t1.daumcdn.net/tistory_admin/top_v2/bi-tistory-favicon.svg"/> 158<link rel="apple-touch-icon" href="https://t1.daumcdn.net/tistory_admin/top_v2/tistory-apple-touch-favicon.png"/> 159<link rel="stylesheet" type="text/css" href="https://t1.daumcdn.net/tistory_admin/www/style/font.css"/> 160<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/content.css"/> 161<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/pc/dist/index.css"/> 162<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/uselessPMargin.css"/>
163<script type="text/javascript">(function() { 164 var tjQuery = jQuery.noConflict(true); 165 window.tjQuery = tjQuery; 166 window.orgjQuery = window.jQuery; window.jQuery = tjQuery; 167 window.jQuery = window.orgjQuery; delete window.orgjQuery; 168})()</script>
vendor: 1 bytes, line 168
168
169<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/script/base.js"></script>
vendor: 1 bytes, line 169
169
170<script type="text/javascript" src="//developers.kakao.com/sdk/js/kakao.min.js"></script>
170 171 172 173<!-- Google tag (gtag.js) -->
vendor: 64 bytes, lines 173-174
173 174<script async src="https://www.googletagmanager.com/gtag/js?id=
174G-9NQ0W46WZD
vendor: 12 bytes, line 174
174"></script>
175<script> 176
vendor: 134 bytes, lines 176-180
176window.dataLayer = window.dataLayer || []; 177 function gtag(){dataLayer.push(arguments);} 178 gtag('js', new Date()); 179 180 gtag('config', '
180G-9NQ0W46WZD
vendor: 4 bytes, line 180
180');
181</script>
vendor: 1 bytes, line 181
181
182<script src="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.4.2/tocbot.min.js"></script>
182 183<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tocbot/4.4.2/tocbot.css">
184<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1431972397228530" 185 crossorigin="anonymous"></script>
185 186<!-- Version 11.5.3 --> 187<meta charset="utf-8"> 188<meta name="viewport" content="width=device-width,height=device-height,initial-scale=1,minimum-scale=1,maximum-scale=1"> 189<meta http-equiv="X-UA-Compatible" content="IE=Edge"> 190<title>Universe blog</title> 191<link rel="alternate" type="application/rss+xml" title="Universe blog" href="https://universe-blog.tistory.com/rss"> 192<link rel="preconnect" href="https://cdn.jsdelivr.net"> 193<link rel="dns-prefetch" href="https://cdn.jsdelivr.net"> 194<link rel="preconnect" href="https://fonts.gstatic.com"> 195<link rel="dns-prefetch" href="https://fonts.gstatic.com"> 196<link rel="preconnect" href="https://fonts.googleapis.com"> 197<link rel="dns-prefetch" href="https://fonts.googleapis.com"> 198 199 200<link rel="preconnect" href="https://tistory1.daumcdn.net/tistory/3085610/skin/"> 201<link rel="dns-prefetch" href="https://tistory1.daumcdn.net/tistory/3085610/skin/"> 202 203<link rel="preconnect" href="https://img1.daumcdn.net"> 204<link rel="dns-prefetch" href="https://img1.daumcdn.net"> 205<link rel="preconnect" href="https://t1.daumcdn.net"> 206<link rel="dns-prefetch" href="https://t1.daumcdn.net"> 207<link rel="preconnect" href="//developers.kakao.com"> 208<link rel="dns-prefetch" href="//developers.kakao.com"> 209<link rel="preload" as="script" href="https://t1.daumcdn.net/tistory_admin/lib/jquery/jquery-3.2.1.min.js"> 210<link rel="preload" as="script" href="https://t1.daumcdn.net/tistory_admin/lib/lightbox/js/lightbox-plus-jquery.min.js"> 211<link rel="preload" as="script" href="//developers.kakao.com/sdk/js/kakao.min.js"> 212 213 214<link rel="preload" as="script" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_polyfills.js"> 215<link rel="preload" as="script" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script.js"> 216<link rel="preload" as="script" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_sidebar.js"> 217<link rel="preload" as="script" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_appearance.js"> 218<link rel="preload" as="style" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/style_base.css"> 219<link rel="preload" as="style" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/style_common.css"> 220<link rel="preload" as="style" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/style_sidebar.css"> 221 222 223<link rel="preload" as="style" href="https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700&
223family=Noto+Sans+SC:wght@400;700&family=Noto+Sans+TC:wght@400;700&display=swap"> 224<link rel="preload" as="font" type="font/woff2" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/resources/font_icon.woff2" crossorigin> 225<link rel="preload" as="font" type="font/woff2" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/font/font_sans_400.woff2" crossorigin> 226<link rel="preload" as="font" type="font/woff2" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/font/font_sans_700.woff2" crossorigin>
227<script src="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_polyfills.js"></script>
227 228
229<script>let 230$themeColor="transparent",$themeColorOrig=$themeColor.toLowerCase(),$date=new Date();if(document.querySelectorAll("html.dynamic").length>0){const $html=document.getElementsByTagName("html")[0];if($date.getHours()<6||$date.getHours()>18){$html.classList.add("night");} 231else if($date.getHours()==6||$date.getHours()==7||$date.getHours()==17||$date.getHours()==18){$html.classList.add("dawn");} 232else{$html.classList.add("day");};};if($themeColor.toLowerCase()=="transparent"){if(document.querySelectorAll("html.day:not(.sysui)").length>0){$themeColor="#f4f4f4";} 233else if(document.querySelectorAll("html.dawn").length>0){$themeColor="#d9d0c3";} 234else if(document.querySelectorAll("html.night").length>0){$themeColor="#0e0e0e";};if(document.querySelectorAll("html:not(.sysui)").length>0){let theme=document.createElement("meta");theme.name="theme-color";theme.content=$themeColor;document.head.appendChild(theme);};} 235else{let theme=document.createElement("meta");theme.name="theme-color";theme.content=$themeColor;document.head.appendChild(theme);};</script>
235 236 237<link rel="stylesheet" href="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/style_base.css"> 238 239<link rel="stylesheet" href="https://tistory1.daumcdn.net/tistory/3085610/skin/style.css?_version_=1679819021"> 240<style> 241 242 243.toc-absolute { 244 position: absolute; 245 margin-top: 365px; 246} 247 248.toc-title { 249 position: absolute; 250 margin-top: 335px; 251} 252 253.toc-fixed { 254 position: fixed; 255 top: 165px; 256} 257 258.toc-title-fixed { 259 position: fixed; 260 top: -200px; 261} 262 263.toc, .toc-title { 264 right: calc((100% - 850px) / 2 - 500px); 265 width: 250px; 266 padding: 10px; 267 box-sizing: border-box; 268} 269 270.toc-list { 271 margin-top: 10px !important; 272 font-size: 0.9em; 273} 274 275.toc > .toc-list li { 276 margin-bottom: 10px; 277} 278 279.toc > .toc-list li:last-child { 280 margin-bottom: 0; 281} 282 283.toc > .toc-list li a { 284 text-decoration: none; 285} 286#article{ 287 color: white; 288} 289.page-limit-width{max-width:728px!important}@media(max-width:calc(728px + 800px)){html.no-gpu body#tt-body-page .recommendation{display:none!important}html.gpu body#tt-body-page .recommendation{opacity:0!important}}@media(min-width:1100px){html:not(.fixed-sidebar) .page-limit-width{width:728px;max-width:970px!important}}@media(min-width:1380px){html.fixed-sidebar .page-limit-width{width:728px;max-width:970px!important}} 290 291</style> 292 293 294 295 <style type="text/css">.another_category { 296 border: 1px solid #E5E5E5; 297 padding: 10px 10px 5px; 298 margin: 10px 0; 299 clear: both; 300} 301 302.another_category h4 { 303 font-size: 12px !important; 304 margin: 0 !important; 305 border-bottom: 1px solid #E5E5E5 !important; 306 padding: 2px 0 6px !important; 307} 308 309.another_category h4 a { 310 font-weight: bold !important; 311} 312 313.another_category table { 314 table-layout: fixed; 315 border-collapse: collapse; 316 width: 100% !important; 317 margin-top: 10px !important; 318} 319 320* html .another_category table { 321 width: auto !important; 322} 323 324*:first-child + html .another_category table { 325 width: auto !important; 326} 327 328.another_category th, .another_category td { 329 padding: 0 0 4px !important; 330} 331 332.another_category th { 333 text-align: left; 334 font-size: 12px !important; 335 font-weight: normal; 336 word-break: break-all; 337 overflow: hidden; 338 line-height: 1.5; 339} 340 341.another_category td { 342 text-align: right; 343 width: 80px; 344 font-size: 11px; 345} 346 347.another_category th a { 348 font-weight: normal; 349 text-decoration: none; 350 border: none !important; 351} 352 353.another_category th a.current { 354 font-weight: bold; 355 text-decoration: none !important; 356 border-bottom: 1px solid !important; 357} 358 359.another_category th span { 360 font-weight: normal; 361 text-decoration: none; 362 font: 10px Tahoma, Sans-serif; 363 border: none !important; 364} 365 366.another_category_color_gray, .another_category_color_gray h4 { 367 border-color: #E5E5E5 !important; 368} 369 370.another_category_color_gray * { 371 color: #909090 !important; 372} 373 374.another_category_color_gray th a.current { 375 border-color: #909090 !important; 376} 377 378.another_category_color_gray h4, .another_category_color_gray h4 a { 379 color: #737373 !important; 380} 381 382.another_category_color_red, .another_category_color_red h4 { 383 border-color: #F6D4D3 !important; 384} 385 386.another_category_color_red * { 387 color: #E86869 !important; 388} 389 390.another_category_color_red th a.current { 391 border-color: #E86869 !important; 392} 393 394.another_category_color_red h4, .another_category_color_red h4 a { 395 color: #ED0908 !important; 396} 397 398.another_category_color_green, .another_category_color_green h4 { 399 border-color: #CCE7C8 !important; 400} 401 402.another_category_color_green * { 403 color: #64C05B !important; 404} 405 406.another_category_color_green th a.current { 407 border-color: #64C05B !important; 408} 409 410.another_category_color_green h4, .another_category_color_green h4 a { 411 color: #3EA731 !important; 412} 413 414.another_category_color_blue, .another_category_color_blue h4 { 415 border-color: #C8DAF2 !important; 416} 417 418.another_category_color_blue * { 419 color: #477FD6 !important; 420} 421 422.another_category_color_blue th a.current { 423 border-color: #477FD6 !important; 424} 425 426.another_category_color_blue h4, .another_category_color_blue h4 a { 427 color: #1960CA !important; 428} 429 430.another_category_color_violet, .another_category_color_violet h4 { 431 border-color: #E1CEEC !important; 432} 433 434.another_category_color_violet * { 435 color: #9D64C5 !important; 436} 437 438.another_category_color_violet th a.current { 439 border-color: #9D64C5 !important; 440} 441 442.another_category_color_violet h4, .another_category_color_violet h4 a { 443 color: #7E2CB5 !important; 444} 445</style> 446 447 448 <link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/revenue.css"/> 449<link rel="canonical" href="https://lactea.kr"/> 450 451<!-- BEGIN STRUCTURED_DATA -->
452<script type="application/ld+json"> 453 {"@context":"http://schema.org","@type":"WebSite","url":"/","potentialAction":{"@type":"SearchAction","target":"/search/{search_term_string}","query-input":"required name=search_term_string"}} 454</script>
454 455<!-- END STRUCTURED_DATA --> 456<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/dialog.css"/> 457<link rel="stylesheet" type="text/css" href="//t1.daumcdn.net/tistory_admin/www/style/top/font.css"/> 458<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/postBtn.css"/> 459<link rel="stylesheet" type="text/css" href="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/style/tistory.css"/>
460<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/script/common.js"></script>
460 461 462 463 </head> 464 <body id="tt-body-index"> 465 466 467 468 469<div id="measuring" hidden> 470<div class="measuring"><div></div></div> 471</div> 472<div id="gpu-support" hidden> 473<div class="gpu-support sidebar-support"></div> 474<div class="gpu-support blog-info-support"></div> 475</div> 476<nav class="scrollbar-support" id="global-navigation"> 477<div class="notice-go-to-index" hidden> 478<span class="icon">ì´ ììì ë르면 첫 íì´ì§ë¡ ì´ë</span> 479</div> 480<div class="gnb-inner"> 481<a class="go-to-index no-text" href="https://lactea.kr/" role="button" aria-hidden="false">Universe blog ë¸ë¡ê·¸ì 첫 íì´ì§ë¡ ì´ë</a> 482<div class="go-to-index-visual" aria-hidden="true"> 483<div class="gnb-title"> 484<p aria-hidden="true">Universe blog</p> 485 486</div> 487</div> 488<div class="gnb-left"> 489<ul class="fc-list"> 490<li><button class="fc-icon fc-appearance fc-button open-sidebar" data-func="open-sidebar">ì¬ì´ëë° ì´ê¸°</button></li> 491</ul> 492</div> 493<div class="gnb-center"> 494<div class="gnb-title"> 495<a class="gnb-blog-link no-text fc-button" href="javascript:" data-func="go-to-top" role="button">íì´ì§ 맨 ìë¡ ì¬ë¼ê°ê¸°</a> 496<p aria-hidden="true">Universe blog</p> 497<span aria-hidden="true">i love security</span> 498 499</div> 500</div> 501<div class="gnb-right"> 502<button class="no-text fc-button fc-appearance blogger-toggle" data-func="open-blog-info">Universe7202 ë¸ë¡ê·¸ ì ë³´ 보기</button> 503<div class="gnb-blogger-icon" data-style="background-image:url(//img1.daumcdn.net/thumb/R150x0/?scode=mtistory2&fname=https://tistory1.daumcdn.net/tistory/3085610/attach/0f893d6589334a90b770b9f65beb42a9)" aria-hidden="true"></div> 504</div> 505</div> 506</nav> 507<main class="scrollbar-support" id="wrap" aria-hidden="false"> 508 509<h1 class="visuallyhidden" aria-hidden="true">Universe blog</h1> 510<div> 511 512 513 514 515 516 517<section class="index-item-slider index-fullscreen-slider cover-item for-gallery"> 518<ul class="fc-list"> 519 520<li style="display:none" aria-hidden="true"> 521<a class="slider-link no-text" href="/entry/%EB%B0%B0%EA%B2%BD-%EC%9D%B4%EB%AF%B8%EC%A7%80" role="button">Universe Blog</a> 522<div class="slider-visual" aria-hidden="true"> 523 524<div class="slider-image" data-style="background-image:url(//img1.daumcdn.net/thumb/R48x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FxEUFT%2Fbtrb6uqdl4Z%2FAAAAAAAAAAAAAAAAAAAAAAgYEsUnEoA_RXNLe0Qn1XX624CrCRmqvs89ifU7Nkr4%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DPPnSTBcSOhMhSMeFF5JrB0Q%252FIhw%253D)"> 525<div class="small-slider-image" data-style="background-image:url(//img1.daumcdn.net/thumb/R1024x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FxEUFT%2Fbtrb6uqdl4Z%2FAAAAAAAAAAAAAAAAAAAAAAgYEsUnEoA_RXNLe0Qn1XX624CrCRmqvs89ifU7Nkr4%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DPPnSTBcSOhMhSMeFF5JrB0Q%252FIhw%253D)"></div> 526<div class="medium-slider-image" data-style="background-image:url(//img1.daumcdn.net/thumb/R1280x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FxEUFT%2Fbtrb6uqdl4Z%2FAAAAAAAAAAAAAAAAAAAAAAgYEsUnEoA_RXNLe0Qn1XX624CrCRmqvs89ifU7Nkr4%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DPPnSTBcSOhMhSMeFF5JrB0Q%252FIhw%253D)"></div> 527<div class="large-slider-image" data-style="background-image:url(//img1.daumcdn.net/thumb/R1920x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FxEUFT%2Fbtrb6uqdl4Z%2FAAAAAAAAAAAAAAAAAAAAAAgYEsUnEoA_RXNLe0Qn1XX624CrCRmqvs89ifU7Nkr4%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DPPnSTBcSOhMhSMeFF5JrB0Q%252FIhw%253D)"></div> 528<div class="exlarge-slider-image" data-style="background-image:url(//img1.daumcdn.net/thumb/R2560x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FxEUFT%2Fbtrb6uqdl4Z%2FAAAAAAAAAAAAAAAAAAAAAAgYEsUnEoA_RXNLe0Qn1XX624CrCRmqvs89ifU7Nkr4%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DPPnSTBcSOhMhSMeFF5JrB0Q%252FIhw%253D)"></div> 529</div> 530 531<div class="slider-title"><h2>Universe Blog</h2></div> 532</div> 533</li> 534 535</ul> 536<button class="prev-slide fc-icon fc-appearance">ì´ì ì¬ë¼ì´ë</button>
537<button class="next-slide fc-icon fc-appearance">ë¤ì ì¬ë¼ì´ë</button> 538</section> 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561<section class="cover-item for-gallery"> 562<div class="page-stroke"></div> 563<h2 class="cover-title">ð About me</h2> 564<div class="fc-index-width for-cover-item gallery small"> 565<ul class="index-width-support fc-list"> 566 567<li class="index-item article-item"> 568<div class="index-item-wrap"> 569<a class="no-text index-item-link" href="https://twilight-princess-750.notion.site/Who-am-I-047259a12251420a95244c0472f64535" role="button">About Me</a> 570<div class="index-item-visual" hidden> 571<div class="index-item-text"> 572<h2>About Me</h2> 573 574<div class="index-item-summary"></div> 575</div> 576<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Ftistory2.daumcdn.net%2Ftistory%2F3085610%2FskinCover%2F597634d12d694bebb4346bcb9f8fa11e);background-position:50% 50%;background-size:cover"></div> 577</div> 578</div> 579</li> 580 581<li class="index-item article-item"> 582<div class="index-item-wrap"> 583<a class="no-text index-item-link" href="https://github.com/Universe1122" role="button">My Github Profile</a> 584<div class="index-item-visual" hidden> 585<div class="index-item-text"> 586<h2>My Github Profile</h2> 587 588<div class="index-item-summary"></div> 589</div> 590<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Ftistory4.daumcdn.net%2Ftistory%2F3085610%2FskinCover%2Fcba1f0f8a63a4095a744a228b4c8952d);background-position:50% 50%;background-size:cover"></div> 591</div> 592</div> 593</li> 594 595<li class="index-item article-item"> 596<div class="index-item-wrap"> 597<a class="no-text index-item-link" href="https://lactea.kr/entry/2022%EB%85%84-%EB%A7%88%EC%A7%80%EB%A7%89-%EB%82%A0%EC%9D%84-%EC%A0%95%EB%A6%AC%ED%95%98%EB%A9%B0" role="button">2022ë ë§ì§ë§ ë ì ì 리íë©°</a> 598<div class="index-item-visual" hidden> 599<div class="index-item-text"> 600<h2>2022ë ë§ì§ë§ ë ì ì 리íë©°</h2> 601 602<div class="index-item-summary"></div> 603</div> 604<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fgithub.com%2Fkaniwari%2Fspace%2Fblob%2F11.5.3%2Fimg%2Fcover%2F3.jpg%3Fraw%3Dtrue);background-position:50% 50%;background-size:cover"></div> 605</div> 606</div> 607</li> 608 609<li class="index-item article-item"> 610<div class="index-item-wrap"> 611<a class="no-text index-item-link" href="https://lactea.kr/entry/%EC%88%98%EC%83%81-%EC%A0%9C-3%ED%9A%8C-KOSPO-%EC%9B%B9%EC%84%9C%EB%B9%84%EC%8A%A4-%EC%A0%95%EB%B3%B4%EB%B3%B4%EC%95%88-%EA%B2%BD%EC%A7%84%EB%8C%80%ED%9A%8C-%EC%B5%9C%EC%9A%B0%EC%88%98%EC%83%81" role="button">[ìì] - ì 3í KOSPO ì¹ìë¹ì¤ ì ë³´ë³´ì ê²½ì§ëí ìµì°ìì</a> 612<div class="index-item-visual" hidden> 613<div class="index-item-text"> 614<h2>[ìì] - ì 3í KOSPO ì¹ìë¹ì¤ ì ë³´ë³´ì ê²½ì§ëí ìµì°ìì</h2> 615 616<div class="index-item-summary"></div> 617</div> 618<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fgithub.com%2Fkaniwari%2Fspace%2Fblob%2F11.5.3%2Fimg%2Fcover%2F4.jpg%3Fraw%3Dtrue);background-position:50% 50%;background-size:cover"></div> 619</div> 620</div> 621</li> 622 623<li class="index-item article-item"> 624<div class="index-item-wrap"> 625<a class="no-text index-item-link" href="https://lactea.kr/entry/2021%EB%85%84%EC%9D%84-%EC%A0%95%EB%A6%AC%ED%95%98%EB%A9%B0" role="button">2021ë ì ì 리íë©°..</a> 626<div class="index-item-visual" hidden> 627<div class="index-item-text"> 628<h2>2021ë ì ì 리íë©°..</h2> 629 630<div class="index-item-summary"></div> 631</div> 632<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fgithub.com%2Fkaniwari%2Fspace%2Fblob%2F11.5.3%2Fimg%2Fcover%2F5.jpg%3Fraw%3Dtrue);background-position:50% 50%;background-size:cover"></div> 633</div> 634</div> 635</li> 636 637</ul> 638</div> 639</section> 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661<section class="cover-item for-card-type"> 662<div class="page-stroke"></div> 663<h2 class="cover-title">âï¸ Recent Article</h2> 664<div class="fc-index-width for-cover-item card-type"> 665<ul class="index-width-support fc-list"> 666 667<li class="index-item article-item"> 668<div class="index-item-wrap"> 669<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D-%EC%9D%BC%EA%B8%B0-JWK%EB%A5%BC-%EC%BA%90%EC%8B%9C%EC%97%90-%EC%A0%80%EC%9E%A5%ED%95%98%EC%97%AC-%EA%B4%80%EB%A6%AC%ED%95%A0-%EA%B2%BD%EC%9A%B0-%EC%96%B4%EB%96%BB%EA%B2%8C-%EB%90%A0%EA%B9%8C-with-CVE-2025-59936" role="button">[ë¶ì ì¼ê¸°] JWK를 ìºìì ì ì¥íì¬ ê´ë¦¬í ê²½ì° ì´ë»ê² ë ê¹ with CVE-2025-59936</a> 670<div class="index-item-visual" hidden> 671<div class="index-item-text"> 672<h2>[ë¶ì ì¼ê¸°] JWK를 ìºìì ì ì¥íì¬ ê´ë¦¬í ê²½ì° ì´ë»ê² ë ê¹ with CVE-2025-59936</h2> 673 674<span class="digit">2025.09.30</span> 675 676<div class="index-item-summary">1. ìë¡ ì¼ë§ì ì npm 모ë ì¤ìì ì¬ë¯¸ìë ì·¨ì½ì ì´ ê³µê° ëì길ë ë¶ìì ì§ííìë¤. `get-jwks` 모ëì ì ë¬ ë°ì JWT를 verify í기 ìí´, iss íëì ìë ìë²ë¡ fetchí ê²°ê³¼(JWK)를 ìºìì ì ì¥íë 모ëì´ë¤. ì´ë¡ ì¸í´, ìí©ì ë§ë ëì¼í JWKì ëí´ ë¤ì ìì²í íì ìì´ ìºìë ì ë³´ë¡ verify íê² ëë¤.https://github.com/nearform/get-jwks GitHub - nearform/get-jwks: Fetch utils for JWKS keysFetch utils for JWKS keys. Contribute to nearform/get-jwks development by creating an account on GitHub.github.c..</div> 677</div> 678<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FbwZxmG%2FbtsQ109X2LU%2FAAAAAAAAAAAAAAAAAAAAAE_El5SnpERZ7CH4XSkRpQvK6CHxK89v6JLwYaXw59Ot%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DMvfDYMNPuA0r3Dg%252BUJkRRhz%252FID0%253D);background-position:50% 50%;background-size:cover"></div> 679</div> 680</div> 681</li> 682 683<li class="index-item article-item"> 684<div class="index-item-wrap"> 685<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D-%EC%9D%BC%EA%B8%B0-docs-%EC%A0%95%EB%8F%85%EC%9C%BC%EB%A1%9C-Grav-CMS%EC%97%90%EC%84%9C-RCE-%EC%B7%A8%EC%95%BD%EC%A0%90-%EC%B0%BE%EC%9D%80-%EC%8D%B0" role="button">[ë¶ì ì¼ê¸°] docs ì ë ì¼ë¡ Grav CMSìì RCE ì·¨ì½ì ì°¾ì ì°</a> 686<div class="index-item-visual" hidden> 687<div class="index-item-text"> 688<h2>[ë¶ì ì¼ê¸°] docs ì ë ì¼ë¡ Grav CMSìì RCE ì·¨ì½ì ì°¾ì ì°</h2> 689 690<span class="digit">2024.01.12</span> 691 692<div class="index-item-summary">1. Grav CMS Grav CMSë phpë¡ ê°ë°ë CMS ì ëë¤. Grav is a Fast, Simple, and Flexible, file-based Web-platform. GitHub - getgrav/grav: Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS powered by PHP, Markdown, Twig, and Symfony - GitHub - getgrav/grav: Modern, Crazy Fast, Ri..</div> 693</div> 694<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FbKQn6R%2FbtsDniBJczW%2FAAAAAAAAAAAAAAAAAAAAAElEXRurndmgoPOFlVdrnQBGJEwkBl55QJXe8yEaiP8i%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3Db1i%252B1NDhFGf%252FzqXAP1RsYYnzwUk%253D);background-position:50% 50%;background-size:cover"></div> 695</div> 696</div> 697</li> 698 699<li class="index-item article-item"> 700<div class="index-item-wrap"> 701<a class="no-text index-item-link" href="/entry/synology-nas%EC%97%90%EC%84%9C-gluetun-docker%EB%A5%BC-%EC%9D%B4%EC%9A%A9
701%ED%95%98%EC%97%AC-twitch-1080p-%EC%9E%90%EB%8F%99-%EB%85%B9%ED%99%94-%EC%84%9C%EB%B2%84-%EB%A7%8C%EB%93%A4%EA%B8%B0" role="button">synology nasìì gluetun docker를 ì´ì©íì¬ twitch 1080p ìë ë ¹í ìë² ë§ë¤ê¸°</a> 702<div class="index-item-visual" hidden> 703<div class="index-item-text"> 704<h2>synology nasìì gluetun docker를 ì´ì©íì¬ twitch 1080p ìë ë ¹í ìë² ë§ë¤ê¸°</h2> 705 706<span class="digit">2023.11.10</span> 707 708<div class="index-item-summary">1. ê°ì ëªë ì 'ê·¸' ì¬ê±´ì¼ë¡ ì¸í´ twitch 1080p ê° ë§íê³ ë¤ì보기 ëí ë³¼ ì ìê² ëìë¤. íìë `streamlink`를 ì´ì©íì¬ ë ¹í를 ì íê³ ììì§ë§, ì´ëìê° 1080pê° ë§íê² ëë©´ì ë°©ë²ì ì°¾ë¤ê° gluetun docker를 ì íê² ëìë¤. 2. íê²½ ì¸í ë¤ìê³¼ ê°ì ì¬ì ì¸í ì´ íìíë¤. synology nasì ssh ì ì ì¤ì docker ë° docker-compose ì¤ì¹ proton vpn íìê°ì íì ê°ì í ìë ë§í¬ìì 3ë²ê¹ì§ ì§íí기 https://young-cow.tistory.com/95 ììì ë¤ì´ë¡ë ë°ì openvpn config íì¼, openvpn id ë° pw íì¸ twitch API key ë°ê¸ (ìë 4ë²ìì ì¤ëª ) 3. gluetu..</div> 709</div> 710<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FDUFfj%2Fbtsz5jc1A19%2FAAAAAAAAAAAAAAAAAAAAALcdoRxhrixIbsOi7Vc6_uHCZctV5Y5pavIa-PkornoS%2Fimg.jpg%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DLGyYB%252FkPZ4U3gvIqKQi9xRrmVSc%253D);background-position:50% 50%;background-size:cover"></div> 711</div> 712</div> 713</li> 714 715<li class="index-item article-item"> 716<div class="index-item-wrap"> 717<a class="no-text index-item-link" href="/entry/WACon2023-CTF-Write-up" role="button">WACon2023 CTF Write up</a> 718<div class="index-item-visual" hidden> 719<div class="index-item-text"> 720<h2>WACon2023 CTF Write up</h2> 721 722<span class="digit">2023.09.03</span> 723 724<div class="index-item-summary">주ë³ì ìë ì¬ëë¤ì´ë ì´ 4ëª ì´ì WACon2023 CTFì ì°¸ê°íìµëë¤. ê²°ê³¼ë 15ë±ì¼ë¡ ë§ë¬´ë¦¬ íë¤ì. 1. [web] mosaic 문ì ì½ëë ë¤ìê³¼ ê°ìµëë¤. ì´ ë¬¸ì ì 컨ì ì ì´ë¯¸ì§ ì ë¡ë ê´ë ¨ 기ë¥ì ì ê³µí©ëë¤. from flask import Flask, render_template, request, redirect, url_for, session, g, send_from_directory import mimetypes import requests import imageio import os import sqlite3 import hashlib import re from shutil import copyfile, rmtree import numpy as np app = Flask(__na..</div> 725</div> 726<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FLJgnA%2FbtssVTyzNWw%2FAAAAAAAAAAAAAAAAAAAAANOZ9kZczrgc6HIpqho60r4wUUctxoZKXUOD6RAImv86%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D8k0GJkc67x837BKb8ZeNGPRLups%253D);background-position:50% 50%;background-size:cover"></div> 727</div> 728</div> 729</li> 730 731<li class="index-item article-item"> 732<div class="index-item-wrap"> 733<a class="no-text index-item-link" href="/entry/ctf-%EB%AC%B8%EC%A0%9C%EB%A5%BC-%ED%86%B5%ED%95%B4-CSP-bypass-%EC%A0%95%EB%A6%AC%ED%95%98%EA%B8%B0" role="button">ctf 문ì 를 íµí´ CSP bypass ì 리í기</a> 734<div class="index-item-visual" hidden> 735<div class="index-item-text"> 736<h2>ctf 문ì 를 íµí´ CSP bypass ì 리í기</h2> 737 738<span class="digit">2023.03.13</span> 739 740<div class="index-item-summary">1. ì ë¡ë 기ë¥ì íì©í bypass ìë²ì ë¤ìê³¼ ê°ì´ CSPê° ì ì©ëì´ ìë¤ê³ ê°ì í´ ë´ ìë¤. `script-src` ì§ìììë `self` ì ëë¤í `nonce` ê°ì´ ì¤ì ëì´ ììµëë¤. ì¦, `` ì ê°ì payloadë `nonce` ê°ì´ ì기 ë문ì ì¤íì´ ëì§ ììµëë¤.</div> 741</div> 742<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FGQDQf%2Fbtr3HTclKoB%2FAAAAAAAAAAAAAAAAAAAAAH9FvdqFf0x6ZO7WDM0SglYlWGpsEnfhsXCRmD7EOr_g%2Fimg.jpg%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DQkC9skS0yLlwXy8XpkluvDRK6yQ%253D);background-position:50% 50%;background-size:cover"></div> 743</div> 744</div> 745</li> 746 747<li class="index-item article-item"> 748<div class="index-item-wrap"> 749<a class="no-text index-item-link" href="/entry/hacktm-ctf-2023-writeup" role="button">hacktm ctf 2023 writeup</a> 750<div class="index-item-visual" hidden> 751<div class="index-item-text"> 752<h2>hacktm ctf 2023 writeup</h2> 753 754<span class="digit">2023.02.21</span> 755 756<div class="index-item-summary">1. [web] Blog cookie ê°ì `unserialize()` íê³ ìë¤. ì´ë¥¼ íì©íì¬ ì·¨ì½í í´ë ì¤ë¥¼ ì°¾ë¤ ë³´ë, `Profile` í´ëì¤ê° ëì ë¤ì´ìë¤. `file_get_contents()` í¨ìê° `$this->
756picture_path` ë§´ë² ë³ì ê°ì íµí´ íì¼ì ì½ì¼ë ¤ê³ íë¤. ì¦, `Profile` í´ëì¤ì `picture_path` ë§´ë² ë³ì를 ì´ì©íì¬ flag ê°ì ì½ì¼ë©´ 문ì 를 í´ê²°í ì ìë¤. O:4:"User":2:{s:7:"profile";O:7:"Profile":2:{s:8:"username";s:8:"universe";s:12:"picture_path";s:46:"/02d92f5f-a58c-42b1-98c7-746bbda7abe9/flag.txt";}s:5:"post..</div> 757</div> 758<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FpJqp4%2Fbtr0dl4LCDe%2FAAAAAAAAAAAAAAAAAAAAAJkeaFPhs3uIO33NE-TOSyQf2G2FXEKv4vsNubXTGz2J%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D62IfqgekU3Cp2PPWKXFlJNVeAGU%253D);background-position:50% 50%;background-size:cover"></div> 759</div> 760</div> 761</li> 762 763<li class="index-item article-item"> 764<div class="index-item-wrap"> 765<a class="no-text index-item-link" href="/entry/lactf-2023-writeup" role="button">lactf 2023 writeup</a> 766<div class="index-item-visual" hidden> 767<div class="index-item-text"> 768<h2>lactf 2023 writeup</h2> 769 770<span class="digit">2023.02.14</span> 771 772<div class="index-item-summary">1. [pwn] gatekeep ì´ ë¬¸ì ë ë¨ì bof를 íµí´ ë¤ë¥¸ ë³ìì ê°ì ë³ì¡°ìì¼ flag를 íëíë 문ì ì´ë¤. `lactf{sCr3am1nG_cRy1Ng_tHr0w1ng_uP}` 2. [pwn] bot ì´ ë¬¸ì ì cì½ëë ë¤ìê³¼ ê°ë¤. #include #include #include #include int main(void) { setbuf(stdout, NULL); char input[64]; volatile int give_flag = 0; puts("hi, how can i help?"); gets(input); if (strcmp(input, "give me the flag") == 0) { puts("lol no"); } else if (strcmp(input, "please give ..</div> 773</div> 774<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fcr2KbD%2FbtrZchIIL4R%2FAAAAAAAAAAAAAAAAAAAAADyEODCB_JxbzDlPZG28JP9gXqeoRR6gKKe8ZRYMvr68%2Fimg.gif%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3Dwfvn%252Bl3RL7nly8BddUdX1tgPATQ%253D);background-position:50% 50%;background-size:cover"></div> 775</div> 776</div> 777</li> 778 779<li class="index-item article-item"> 780<div class="index-item-wrap"> 781<a class="no-text index-item-link" href="/entry/Dicectf-2023-writeup" role="button">Dicectf 2023 writeup</a> 782<div class="index-item-visual" hidden> 783<div class="index-item-text"> 784<h2>Dicectf 2023 writeup</h2> 785 786<span class="digit">2023.02.08</span> 787 788<div class="index-item-summary">ëí ë¹ì¼ë ì¹ í문ì ë°ì 못 íìì§ë§, ì´í writeupì ë³´ê³ ì 리íê³ ì íë¤. 1. recursive-csp í´ë¹ 문ì ë GET íë¼ë¯¸í°ë¡ ì ë¬í ê°ì ê·¸ëë¡ ì¶ë ¥íì¬ XSS ê° ê°ë¥íë¤. íì§ë§, ì´ ê°ì ìí¸í íì¬ csp ì ì± ì ë¤ì´ê°ê² ëë¤.</div> 789</div> 790<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fcm42CU%2FbtrYzqzMGuB%2FAAAAAAAAAAAAAAAAAAAAAEHLr7BuJAKzoFMDwucM3xy5YrkjRPTYlD9UzM9_Bzyy%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DOgcSHu2S7ijDWO8ca8gxJuz2Ie0%253D);background-position:50% 50%;background-size:cover"></div> 791</div> 792</div> 793</li> 794 795<li class="index-item article-item"> 796<div class="index-item-wrap"> 797<a class="no-text index-item-link" href="/entry/SSRF-bypass-using-DNS-Rebinding" role="button">SSRF bypass using DNS Rebinding</a> 798<div class="index-item-visual" hidden> 799<div class="index-item-text"> 800<h2>SSRF bypass using DNS Rebinding</h2> 801 802<span class="digit">2023.01.04</span> 803 804<div class="index-item-summary">1. ë¤ì´ê°ê¸°ì ìì ì¼ë°ì ì¼ë¡ SSRF 공격ì ë§ê¸° ìí´ ê°ë°ìë¤ì ë¤ìê³¼ ê°ì ë¡ì§ì 구íí©ëë¤. ì°¨ë¨í IP ë²ì ëë©ì¸ ì´ë¦ íì¸ (ì´ìí 문ìì´ë¡ ì°ííë 공격..) DNS를 ì´ì©í IP íì¸ ì ê³¼ì ì íµê³¼íê² ëë©´ ì¬ì©ìê° ì ë ¥í URLë¡ ì ìíê² ë©ëë¤. ì´ë¬í ìí©ì ê°ë¨í ì½ëë¡ ëíë´ë©´ ë¤ìê³¼ ê°ìµëë¤. const dns = require("dns/promises"); const axios = require("axios"); async function request(url){ const check_domain_name = is_domain_name(url); const check_dns = await dns.resolve4(url); const check_ip = is_blacklis..</div> 805</div> 806<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2F2k24Z%2FbtrVptTq45c%2FAAAAAAAAAAAAAAAAAAAAANFLmakwGtX15ayjUtzPxYKyH7z1V6qgkI5rZtMe0FAi%2Fimg.jpg%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D%252B6nPX5MPCb%252BAJIKw9bI9MZaGVe8%253D);background-position:50% 50%;background-size:cover"></div> 807</div> 808</div> 809</li> 810 811<li class="index-item article-item"> 812<div class="index-item-wrap"> 813<a class="no-text index-item-link" href="/entry/2022%EB%85%84-%EB%A7%88%EC%A7%80%EB%A7%89-%EB%82%A0%EC%9D%84-%EC%A0%95%EB%A6%AC%ED%95%98%EB%A9%B0" role="button">2022ë ë§ì§ë§ ë ì ì 리íë©°</a> 814<div class="index-item-visual" hidden> 815<div class="index-item-text"> 816<h2>2022ë ë§ì§ë§ ë ì ì 리íë©°</h2> 817 818<span class="digit">2022.12.31</span> 819 820<div class="index-item-summary">2022ë ëë í¬ê³ ìì ì¬ê±´ë¤ì´ ë§ì í´ìëê±° ê°ìµëë¤. ì´ë¤ ì¼ë¤ì´ ììê³ , ë¤ì í´ìë ì´ë¤ 목í를 ì¸ì¸ì§ 기ë¡íê³ ì í©ëë¤. ë²ê·¸ ë°ì´í° ìë 목íìë CVE ë°ê¸ì ìí´, ì¬í´ wordpress plugin ì·¨ì½ì ë°êµ´ì ììíìµëë¤. ì½ë ë¶ìí ê²°ê³¼ ë¤ìì ì·¨ì½ì ì ì°¾ì 10ê°(?) ì ëì CVE를 ë°ê¸ ë°ììµëë¤. (ìì§ í¨ì¹ ëì§ ìì íë¬ê·¸ì¸ ë문ì,,) CVE-2022-29452 CVE-2022-34154 CVE-2022-34648 CVE-2022-34656 CVE-2022-36285 CVE-2022-36343 CVE-2022-27858 ìëë patchstackìì wordpress plugin 1ìë¬ ì·¨ì½ì ì ë³´ ì
820ì 1ì í ê²°ê³¼ ì ëë¤. ë¤ì´ë² ë²ê·¸ë°ì´í°ì ì°¸ê°íì¬ ìµì¢ 4ë±ì..</div> 821</div> 822<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fcdpdoe%2FbtrU1oSXqLa%2FAAAAAAAAAAAAAAAAAAAAAAhPvRBsahrXqCHNNq9DgzQGqvVVOb6uKeLLihkg8-80%2Fimg.jpg%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D8efQ9dcTlIwvGm0OQzV2FYRbqs8%253D);background-position:50% 50%;background-size:cover"></div> 823</div> 824</div> 825</li> 826 827<li class="index-item article-item"> 828<div class="index-item-wrap"> 829<a class="no-text index-item-link" href="/entry/nodejs-unicode" role="button">nodejs unicode</a> 830<div class="index-item-visual" hidden> 831<div class="index-item-text"> 832<h2>nodejs unicode</h2> 833 834<span class="digit">2022.10.06</span> 835 836<div class="index-item-summary">1. Intro 기본ì ì¸ ASCII ë²ì를 ë²ì´ë ì ì¸ê³ ì¸ì´ë¥¼ ííí기 ìí´ unicode를 ë§ì´ ì¬ì©í©ëë¤. ì´ë¡ ì¸í´ ASCIIë¡ ííì´ ë¶ê°ë¥ íë 문ì를 unicodeë¡ ííì´ ê°ë¥í´ì¡ìµëë¤. ì´ë¡ ì¸í´ ììì¹ ëª»í ë²ê·¸ê° ë°ìí곤 í©ëë¤. ì´ì ëí´ ì¤ëª íê³ ì í©ëë¤. 2. Compare unicode ì¬ì©ìë unicode를 íµí´ ë¤ìí 문ì를 ì ë ¥í ì ììµëë¤. ìë²ë ì¬ì©ìê° ì ë ¥í ê°ì ì²ë¦¬íë ê³¼ì ì ê±°ì¹ê² ì£ . ì를ë¤ì´, ì¬ì©ìê° unicode ⪠를 ì ë ¥íë¤ê³ ê°ì í©ìë¤. ì´ ê°ê³¼ ASCII ìì ì문ì k ì ë¹êµíë©´ ë¹ì°í `false`ê° ì¶ë ¥ ëê² ì£ . "âª" == "k" false íì§ë§, unicode âªë¥¼ toLowerCase() í¨ì를 ì´ì©íì¬ ì문ìë¡ ë°ê¾¼ ë¤, ASC..</div> 837</div> 838<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FrYVH1%2FbtrNTgt6rzJ%2FAAAAAAAAAAAAAAAAAAAAALbaXIPqHwNo4DPOfVCliv0vSw4CplLnlzQioP8g3ntN%2Fimg.gif%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DKOiHoQzAl4%252Fy73H4VGlboCVS0W4%253D);background-position:50% 50%;background-size:cover"></div> 839</div> 840</div> 841</li> 842 843<li class="index-item article-item"> 844<div class="index-item-wrap"> 845<a class="no-text index-item-link" href="/entry/android-macos-m2-android-virtual-device-emulator-%EA%B2%80%EC%9D%80-%ED%99%94%EB%A9%B4-%ED%95%B4%EA%B2%B0-%EB%B0%A9%EB%B2%95" role="button">[android] - macos m2 android virtual device (emulator) ê²ì íë©´ í´ê²° ë°©ë²</a> 846<div class="index-item-visual" hidden> 847<div class="index-item-text"> 848<h2>[android] - macos m2 android virtual device (emulator) ê²ì íë©´ í´ê²° ë°©ë²</h2> 849 850<span class="digit">2022.09.20</span> 851 852<div class="index-item-summary">1. Intro ì ë macos m2 를 ì¬ì©íê³ ììµëë¤. ìëë¡ì´ë ì±ì ë¶ìí ì¼ì´ ìì´ android studio를 ì¤ì¹íì¬ AVD를 ì¤ì¹íìµëë¤. íì§ë§, AVDìì ê²ì íë©´ë§ ì¶ë ¥ëì´ ë¬¸ì 를 겪ììµëë¤. 2. How to solve ì íê²½ììë ë¤ìê³¼ ê°ì AVD를 ì¤ì¹íì¬ í´ê²°íìµëë¤. 1. Pixel 4를 ì íí©ëë¤. 2. ìë ì¬ì§ìì íëì ë°ì¤ë¥¼ ì íí©ëë¤. Release Name : S API Level: 31 Target: Android 12.0 3. ì¤ì¹ë¥¼ ìë£íê³ ì¤ííë©´, ìë ì¬ì§ì²ë¼ ì±ê³µì ì¼ë¡ AVDê° ì¤íë ê²ì ë³¼ ì ììµëë¤. 4. ì¤íì´ ìëê±°ë, ìì ì ì¤íì´ ëìì§ë§ ë¤ì ì¤ííì ë ê²ì íë©´ì´ ì¶ë ¥ëë¤ë©´, Cold Boot Now를 ì ííë©´ í´ê²°ë©ëë¤.</div> 853</div> 854<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FbhaEkv%2FbtrMDAANyGr%2FAAAAAAAAAAAAAAAAAAAAAAnHfxIFo7un9E702RYgpUayi3YDYgf921Kk2GIwZd8Q%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DEYp68V%252FmZWNZPKLxvRD5MDvqUtA%253D);background-position:50% 50%;background-size:cover"></div> 855</div> 856</div> 857</li> 858 859<li class="index-item article-item"> 860<div class="index-item-wrap"> 861<a class="no-text index-item-link" href="/entry/%EC%88%98%EC%83%81-%EC%A0%9C-3%ED%9A%8C-KOSPO-%EC%9B%B9%EC%84%9C%EB%B9%84%EC%8A%A4-%EC%A0%95%EB%B3%B4%EB%B3%B4%EC%95%88-%EA%B2%BD%EC%A7%84%EB%8C%80%ED%9A%8C-%EC%B5%9C%EC%9A%B0%EC%88%98%EC%83%81" role="button">[ìì] - ì 3í KOSPO ì¹ìë¹ì¤ ì ë³´ë³´ì ê²½ì§ëí ìµì°ìì</a> 862<div class="index-item-visual" hidden> 863<div class="index-item-text"> 864<h2>[ìì] - ì 3í KOSPO ì¹ìë¹ì¤ ì ë³´ë³´ì ê²½ì§ëí ìµì°ìì</h2> 865 866<span class="digit">2022.09.16</span> 867 868<div class="index-item-summary">ê·¸í ë¡ ì¹ ëª¨ìí´í¹ ëíìì ìì íë³´ê³ ì¶ì´, ì 1íë¶í° 매ë ì°¸ê°íìµëë¤. ì 1íìë ììê¶ì 못ë¤ìê³ , ì 2íìë 3ì ì°¨ì´ë¡ ì¥ë ¤ìì ë쳤ìµëë¤. íì§ë§ ì¬í´ ì 3íë ì§ì§ ë§ì§ë§ì´ë¼ê³ ìê°íë©´ì íìë¤ì 모ì§íìµëë¤. ê°ì¸ì ì¸ ì¼ë¡ ì°¸ê°ë¥¼ 못í ë» íì§ë§, ì¹êµ¬ì ëìì¼ë¡ ëíì ìí ì ìììµëë¤. 그결과,, ìµì°ìì(2ì) ì´ë¼ë ì¢ì ê²°ê
868³¼ë¥¼ ì»ììµëë¤. ì ë§ ê·¸í ë¡ ë°ë¬ë ììì íê² ëììµëë¤. ëê¹ì§ ìµì ì ë¤í íìë¶ë¤ì´ ìì기ì, ê·¸ë¦¬ê³ ì¬í´ ë§ì§ë§ì ëíì íì¼ë¡ ì°¸ê°íì¬ ì¢ì ìì íê² ëì´ ì ë§ ì¢ììµëë¤.</div> 869</div> 870<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FcFEfLD%2FbtrMjcAYen5%2FAAAAAAAAAAAAAAAAAAAAAA-Ijijc42XTjJkehj3wgxf58DiFgHOsled0CGVafGkq%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D2BldaPEqnsFalFv%252Fh%252FkTEMKDyhU%253D);background-position:50% 50%;background-size:cover"></div> 871</div> 872</div> 873</li> 874 875<li class="index-item article-item"> 876<div class="index-item-wrap"> 877<a class="no-text index-item-link" href="/entry/Spring-boot-HandlerMethodArgumentResolver" role="button">Spring boot HandlerMethodArgumentResolver</a> 878<div class="index-item-visual" hidden> 879<div class="index-item-text"> 880<h2>Spring boot HandlerMethodArgumentResolver</h2> 881 882<span class="digit">2022.09.07</span> 883 884<div class="index-item-summary">https://starkying.tistory.com/entry/Spring-MVC-%E2%80%94-HandlerMethodArgumentResolver-%EC%82%AC%EC%9A%A9%ED%95%98%EA%B8%B0</div> 885</div> 886<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FnrVh8%2FbtrLD8TfRfi%2FAAAAAAAAAAAAAAAAAAAAAAWOUIsRXAfypgcJ8LeUXM3YpVA6GWmLMQLOe-6F6nAK%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DzKIhTABJ060Gtfv2f6uECzf0uG4%253D);background-position:50% 50%;background-size:cover"></div> 887</div> 888</div> 889</li> 890 891<li class="index-item article-item"> 892<div class="index-item-wrap"> 893<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D%EC%9D%BC%EA%B8%B0-php-switch-case" role="button">[ë¶ìì¼ê¸°] - php switch case</a> 894<div class="index-item-visual" hidden> 895<div class="index-item-text"> 896<h2>[ë¶ìì¼ê¸°] - php switch case</h2> 897 898<span class="digit">2022.09.06</span> 899 900<div class="index-item-summary">1. Intro ì¼ë§ì cake CTF 2022 ëíê° ììëë°, ì¼ ë문ì 주ë§ìë ì¬ê³ ì¶ì´ì ì°¸ê°ë ìíë¤ì,,, ìí¼ ì´í writeupì ë´¤ëë° ì 기í´ì 기ë¡íê³ ì í©ëë¤. 2. switch case if else êµ¬ë¬¸ì´ ì§ì ë¶í ì¬ëë¤ì´ switch case 구문ì ì¢ìíëë¼êµ¬ì. ìëì²ë¼ switch case êµ¬ë¬¸ì´ ìë¤ê³ ê°ì í´ ë´ ìë¤. POSTë°©ìì¼ë¡ `user` ì 보를 ë°ê³ ì´ë¥¼ jsonì¼ë¡ íì±íê³ ììµëë¤. ì´í if 문ì¼ë¡ ì ë ¥ ê°ì ê²ì¦íê³ ììµëë¤. ìµì¢ ì ì¼ë¡ë `user->name` ë³ìì ê°ì´ admin ì´ì´ì¼ íì§ë§, if문ìì admin 문ìì´ì íí°ë§ íê³ ììµëë¤. ì´ë»ê² íë©´ ì´ë¥¼ bypass í ì ììê¹ì? ì ëµì switch case 구문ì ììµëë¤. ê³µì d..</div> 901</div> 902<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FqMbtq%2FbtrLqV7OTCk%2FAAAAAAAAAAAAAAAAAAAAAH4zAWbSpmF3WqkhFLuRDeNgYPY--sGc1FCZ7DC0yim5%2Fimg.webp%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DFQS21I%252BK%252Fuwp2F3CbBNIT1CaY%252Bo%253D);background-position:50% 50%;background-size:cover"></div> 903</div> 904</div> 905</li> 906 907<li class="index-item article-item"> 908<div class="index-item-wrap"> 909<a class="no-text index-item-link" href="/entry/DiceCTF-2022-writeup" role="button">DiceCTF 2022 writeup</a> 910<div class="index-item-visual" hidden> 911<div class="index-item-text"> 912<h2>DiceCTF 2022 writeup</h2> 913 914<span class="digit">2022.07.25</span> 915 916<div class="index-item-summary">0. Intro TeamH4Cì ê°ì íì¬ ì²ìì¼ë¡ ì°¸ê°í CTF ëí ì ëë¤. ì ë ì¹ë§ íìëë°,, ë¤ë¥¸ ë¶ë¤ì´ ì¹ ì¸ì ë¶ì¼ë ë§ì´ íì´ì 19ë±ì¼ë¡ ë§ë¬´ë¦¬ ëìë¤ì. ì¹ ë¬¸ì ë ì¬ì´ 문ì 를 ì ì¸íê³ , íì´ë¥¼ ìì±íë ¤ê³ í©ëë¤. 1. web / point ì´ ë¬¸ì ë golang ì¼ë¡ ìì±ë web 문ì ì ëë¤. go ì¸ì´ì ëí´ ì§ìì´ ìì§ë§, ì´ë² 기í를 íµí´ íì´ë³´ë ¤ê³ íìµëë¤. POST ë°©ìì¼ë¡ ì ì¡íë©´, bodyì í¹ì 문ìì´ì´ ìëì§ë¥¼ ê²ì¦íê³ ììµëë¤. ìë ì½ëììë 2ë²ì§¸ if 문ìì `what_point` ì `\` 를 íí°ë§ íê³ ìë¤ì. ì´í, `json.Unmarshal()` í¨ì를 íµí´ body ê°ì json parsing íê³ ììµëë¤. json paring ê²°ê³¼ë `what..</div> 917</div> 918<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FrKf
918Xg%2FbtrIdYdPbFF%2FAAAAAAAAAAAAAAAAAAAAAHTUdpY2AZVwlShh3haeTDOYE3F_0MOAV6M805mkNKO5%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DAKwUR%252FDZo%252FF%252BcEulRYy%252B55lpkuc%253D);background-position:50% 50%;background-size:cover"></div> 919</div> 920</div> 921</li> 922 923<li class="index-item article-item"> 924<div class="index-item-wrap"> 925<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D-%EC%9D%BC%EA%B8%B0-EJS-Server-Side-Template-Injection-to-RCE-CVE-2022-29078" role="button">[ë¶ì ì¼ê¸°] - EJS, Server Side Template Injection to RCE (CVE-2022-29078)</a> 926<div class="index-item-visual" hidden> 927<div class="index-item-text"> 928<h2>[ë¶ì ì¼ê¸°] - EJS, Server Side Template Injection to RCE (CVE-2022-29078)</h2> 929 930<span class="digit">2022.07.21</span> 931 932<div class="index-item-summary">ðª Intro 2022ë 4ìë¬ì nodejs ì 모ëì¸ EJSìì RCE ì·¨ì½ì ì´ ë°ê²¬ëììµëë¤. 맨 ìë Reference ì ìë ë§í¬ë¥¼ ì°¸ê³ íì¬ ì´ë»ê² EJSìì RCEê° ê°ë¥íì§ë¥¼ ë¶ìí´ ë´¤ìµëë¤. ì·¨ì½í EJS ë²ì ì `3.1.6` ì´í ë²ì ì ëë¤. í´ë¹ ì·¨ì½ì ì `3.1.7`ìì í¨ì¹ ëììµëë¤. ð¡Analysis íê²½ ì¸í ì ìí´ ìëì ê°ì ëª ë ¹ì´ë¡ ì·¨ì½í EJS ë²ì ì ì¤ì¹í´ ì¤ëë¤. npm install [email protected] ì´í ê°ë¨í ì½ë를 ìì±íì¬ ìë²ë¥¼ ììí´ ì¤ëë¤. // index.js const express = require("express"); const app = express(); app.set("view engine", "ejs") app.get("/", (req, ..</div> 933</div> 934<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fbv5CvU%2FbtrHPcKP14i%2FAAAAAAAAAAAAAAAAAAAAAOHuT_C8luI7nNwjGoJbqhhzspv8N00B28_iYNpFui0E%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DM5rSXMRjT4f5ROPZ4PVnkA%252BSeU4%253D);background-position:50% 50%;background-size:cover"></div> 935</div> 936</div> 937</li> 938 939<li class="index-item article-item"> 940<div class="index-item-wrap"> 941<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D-%EC%9D%BC%EA%B8%B0-Microsoft-Teams-Cross-Site-Scripting-XSS-Bypass-CSP-CVE-2021%E2%80%9324114" role="button">[ë¶ì ì¼ê¸°] - Microsoft Teams - Cross Site Scripting (XSS) Bypass CSP (CVE-2021â24114)</a> 942<div class="index-item-visual" hidden> 943<div class="index-item-text"> 944<h2>[ë¶ì ì¼ê¸°] - Microsoft Teams - Cross Site Scripting (XSS) Bypass CSP (CVE-2021â24114)</h2> 945 946<span class="digit">2022.07.19</span> 947 948<div class="index-item-summary">í´ë¹ ë´ì©ì ìë ì¬ì´í¸ë¥¼ íµí´ ì´ë»ê² ì·¨ì½ì ì ì°¾ìëì§ë¥¼ ë¶ìíë ê¸ ì ëë¤. Microsoft Teams â Cross Site Scripting (XSS) Bypass CSP During my early stages of employment at Gais Cyber Security in 2021, my manager had reached out to me over the phone and said with⦠medium.com Microsoft Teams ìì ì¤í°ì»¤ë¥¼ ë³´ë´ë 기ë¥ì´ ììµëë¤. (íìë í´ë¹ 기ë¥ì ì°¾ìë´¤ëë°, ì ë° ê¸°ë¥ì´ ìë³´ì´ëë¼êµ¬ì,,) ì¤í°ì»¤ 기ë¥ì íµí´ ë©ìì§ë¥¼ ì ì¡íë©´, ìë ì¬ì§ì²ë¼ PO
948ST ë°©ìì¼ë¡ bodyì ë°ì´í°ë¥¼ ë£ì´ ì ì¡í©ëë¤. ì´ë content ë¼ë keyì..</div> 949</div> 950<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FbPDzo0%2FbtrHDcSKjxS%2FAAAAAAAAAAAAAAAAAAAAAGNBB8ca0qvBMbmRK5FNRqyAAvH1eY5f52KKIxxb6Z_T%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DHV4IoGFxwPBfgA%252FiC46xJqyMObY%253D);background-position:50% 50%;background-size:cover"></div> 951</div> 952</div> 953</li> 954 955<li class="index-item article-item"> 956<div class="index-item-wrap"> 957<a class="no-text index-item-link" href="/entry/Nodejs-querystring-%ED%95%A8%EC%88%98-%EB%B6%84%EC%84%9D" role="button">Node.js querystring í¨ì ë¶ìê³¼ bug ì¤ëª </a> 958<div class="index-item-visual" hidden> 959<div class="index-item-text"> 960<h2>Node.js querystring í¨ì ë¶ìê³¼ bug ì¤ëª </h2> 961 962<span class="digit">2022.07.09</span> 963 964<div class="index-item-summary">ðª Intro ìë Line 2021 CTF ì¹ ë¬¸ì 를 íë¤ê° 기ë¡íê³ ì¶ì´ ìì±íë ¤ê³ í©ëë¤. ë°ë¡ Node.js ìì built-in 모ëì¸ `querystring` ì ëë¤. íì¬ë deprecated ë 모ëì ëë¤. ð¡ About querystring module Node.js ê³µì 문ìì ì¤ëª ë `querystring`ì ëí ì¤ëª ì ë¤ìê³¼ ê°ìµëë¤. 기본ì¼ë¡ URLì query stringì íì±íëë° ì¬ì©ë©ëë¤. ì¬ì©ë°©ë²ì ê³µì문ìì ë¤ìê³¼ ê°ì´ ì¤ëª íê³ ììµëë¤. `parse()` í¨ìì 첫ë²ì§¸ ì¸ìì URLì query string ê°ì ë겨ì¤ì¼ íë©°, ëë¨¸ì§ ì¸ìë¤ì 기본 ê°ì¼ë¡ ì¤ì ë©ëë¤. ì를ë¤ì´, ìë ì¬ì§ì²ë¼ `parse()` í¨ìì 첫ë²ì§¸ ì¸ìì foo=1&abc=2 ë¼ë ê°ì..</div> 965</div> 966<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FASj9Y%2FbtrGRjkoEFU%2FAAAAAAAAAAAAAAAAAAAAAFy-12DM3X2XJki0OiT15_B6TRcLNRv-UU7PHPJ-T87r%2Fimg.jpg%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DnGLruTL1z5rz%252F1tZAi0Wb753Di8%253D);background-position:50% 50%;background-size:cover"></div> 967</div> 968</div> 969</li> 970 971<li class="index-item article-item"> 972<div class="index-item-wrap"> 973<a class="no-text index-item-link" href="/entry/WACon-2022-yetanotherbabyweb" role="button">[WACon 2022] yet_another_baby_web</a> 974<div class="index-item-visual" hidden> 975<div class="index-item-text"> 976<h2>[WACon 2022] yet_another_baby_web</h2> 977 978<span class="digit">2022.06.28</span> 979 980<div class="index-item-summary">ðª Intro ì¹ 2ë²ì§¸ 문ì ì ëë¤. ì´ ë¬¸ì ìì poc ì½ëì íí¸ë¥¼ ë³´ê³ ì 보를 ì°¾ì ë¤ íê² ëìëë°ì. ì´ ë¬¸ì 를 í기 ìí´ìë `session upload progress` ì ëí´ ìê³ ìì´ì¼ í©ëë¤. ð¡ Analysis - ì½ë ë¶ì POST ë°©ìì¼ë¡ url ë°ì´í°ë¥¼ ë기면 curl ëª ë ¹ì´ë¥¼ ì¤íí©ëë¤. ì´ë url ê°ì ì¬ë¬ë²ì íí°ë§ì ê±°ì¹ê² ëì£ . curl ì¤í í ì¶ë ¥ ê°ìë 본ì¸ì UUID ê°ì´ í¬í¨ëì´ ìì´ì¼ ì¶ë ¥ ê°ì ë³¼ ì ììµëë¤.</div> 981</div> 982<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FbBm9lD%2FbtrF0tHp97P%2FAAAAAAAAAAAAAAAAAAAAALXcJH2q7QFlNGfvjZ0mkHKqDrR2hUxaFIvxi-62jWa0%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DIVlK0zwUwfckLa3a8j9zcmLPNL0%253D);background-position:50% 50%;background-size:cover"></div> 983</div> 984</div> 985</li> 986 987<li class="index-item article-item"> 988<div class="index-item-wrap"> 989<a class="no-text index-item-link" href="/entry/WACon-2022-ppower-write-up" role="button">[WACon 2022] ppower write up</a> 990<div class="index-item-visual" hidden> 991<div class="index-item-text"> 992<h2>[WACon 2022] ppower write up</h2> 993 994<span class="digit">2022.06.28</span> 995 996<div class="index-item-summary">ðª Intro ì¹ 3ë²ì§¸ 문ì ppower ì ëë¤. ì´ ë¬¸ì ë `prototype pollution` ì íµí RCE를 íë 문ì ì ëë¤. ð¡ Analysis - ì½ë ë¶ì /answer íì´ì§ë¡ GET ë°©ìì ë°ì´í°ë¥¼ ì ë¬í ì ììµëë¤. ì´ë `req.query` ì ì ì¥ëì¬ `merge()` í¨ì를 íµí´ `r` ë³ìì ì ì¥ëëë°, `merge()` í¨ìë ì´ë í ê²ì¦ìì´ merge íê³ ììµëë¤. ì íì ì¸ prototype pollution 공격ì ì·¨ì½í ì½ë ì ëë¤. ëí, 53ë²ì§¸ ì¤ìì `config.flagForEveryone` ê°ì´ 무조건 falseê° ìëì´ì¼ í©ëë¤. ê·¸ëì¼ `sendFlag()` í¨ìê° ì¤íëì£ . `sendFlag()` í¨ì를 ë³´ë©´, 25ë²ì§¸ ì¤ìì `childProces..</div> 997</div> 998<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2F5Rdnd%2FbtrFUimJkVm%2FAAAAAAAAAAAAAAAAAAAAANRbFjunnbGhhW8qQ8LCgSxB8_BTOSwAxna9sbEOG768%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DHX4aGdgjwuClJ1GaS0Dq%252FeSWKf8%253D);background-position:50% 50%;background-size:cover"></div> 999</div> 1000</div> 1001</li> 1002 1003<li class="index-item article-item"> 1004<div class="index-item-wrap"> 1005<a class="no-text index-item-link" href="/entry/WACon-2022-Kunc%C9%9Blan-write-up" role="button">[WACon 2022] KuncÉlan write up</a> 1006<div class="index-item-visual" hidden> 1007<div class="index-item-text"> 1008<h2>[WACon 2022] KuncÉlan write up</h2> 1009 1010<span class="digit">2022.06.27</span> 1011 1012<div class="index-item-summary">ðª Intro 20ëª ì´ë í¼ ì¹ ì²«ë²ì§¸ 문ì ì ëë¤. ë¬¼ë¡ íë¤ê° í¬ê¸°íê³ , ëí ëë ì´í íí¸ì ì¹êµ¬ì ëìì¼ë¡ í´ê²°íìµëë¤. í´ë¹ 문ì 를 í기 ìí Keywordë ë¤ìê³¼ ê°ìµëë¤. `LFI` `hash length extension attack` `SSRF` `SQLI` ð¡ Analysis - íë©´ íë¦ ë¬¸ì ì¬ì´í¸ì ì ìíë©´ ë¡ê·¸ì¸ íì´ì§ë¡ ì´ë ë©ëë¤. ë¡ê·¸ì¸ í "fun" ì´ë¼ë íì´ì§ë¡ ì´ëíë©´ ìë ì¬ì§ì²ë¼ SSRF ëëì´ ëë íì´ì§ê° ì¶ë ¥ë©ëë¤. input íê·¸ì ê°ì ì ë ¥íë©´, í´ë¹ 기ë¥ì ë¡ì»¬ììë§ ëìíë ê²ì ì ì ììµëë¤. ì½ëê° ìë ìíìì ì°íí기ìë íë¤ê¸° ë문ì, ë¤ë¥¸ ë°©ë²ì ì°¾ìì¼ í©ëë¤. ð¡ Exploit - LF
1012I ì íì´ì§ìë LFI ì·¨ì½ì ì´ ì¡´ì¬í©ëë¤. f..</div> 1013</div> 1014<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FFG1tS%2FbtrFShHbPtS%2FAAAAAAAAAAAAAAAAAAAAAFFLkIqaOtt_m5imC4tynoqwjr_pL-W7nWLLRMg3MJht%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DUyqkQNSSbnT5Ki4Ss8Wyyku2%252BmM%253D);background-position:50% 50%;background-size:cover"></div> 1015</div> 1016</div> 1017</li> 1018 1019<li class="index-item article-item"> 1020<div class="index-item-wrap"> 1021<a class="no-text index-item-link" href="/entry/%EC%B2%98%EC%9D%8C%EC%9C%BC%EB%A1%9C-CVE-%EB%B0%9C%EA%B8%89-%EB%B0%9B%EC%9D%80ssul-CVE-2022-29452" role="button">ì²ìì¼ë¡ CVE ë°ê¸ ë°ì.ssul [CVE-2022-29452]</a> 1022<div class="index-item-visual" hidden> 1023<div class="index-item-text"> 1024<h2>ì²ìì¼ë¡ CVE ë°ê¸ ë°ì.ssul [CVE-2022-29452]</h2> 1025 1026<span class="digit">2022.05.28</span> 1027 1028<div class="index-item-summary">Intro ìë ê¹ì§ë êµë´ ë²ê·¸ ë°ì´í° íë¡ê·¸ë¨ì ì°¸ê°íì¬ ì·¨ì½ì ì ì ë³´íê³ í¬ìê¸ì ë°ììµëë¤. ì¬í´ì 목íë CVE 를 ë°ê¸ ë°ë ê²ì´ìëë°ì. ì´ë»ê² ì°¾ê² ëìëì§ ê°ë¨íê² ìì±íê³ ì í©ëë¤. CVE를 ë°ê¸í´ì£¼ë 기ê´ì ì°¾ë¤ë³´ë wordpress ì wordpress pluginìì ì·¨ì½ì ì ì°¾ê² ëë©´, ì í´ì§ 기ê´ì ì ë³´íì¬ CVE ë°ê¸ì í´ì¤ ì ìë¤ë ì 보를 ì»ììµëë¤. ì ë Patchstack 기ì ì wordpress plugin ì·¨ì½ì ì ì°¾ì ì ë³´íìëë°ì. ì 보를 íë¤ë³´ë 1ìë¬ìë ì¬ë¬ê°ì ì·¨ì½ì ì ì°¾ì ì ë³´íê² ëììµëë¤. ì´ì´ ì¢ê²ë, Patchstackì ë¬ë§ë¤ ìì를 ë§¤ê¸°ê² ëëë° 1ë±ì ì°¨ì§ íìµëë¤. í¬ìê¸ ê¸°ë를 íì§ ìê³ CVE 목ì ì¼ë¡ ì ë³´íëë°, 1ë±ì´ë¼ í¬ìê¸ë 주..</div> 1029</div> 1030<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FT9VUh%2FbtrDkmkOmr1%2FAAAAAAAAAAAAAAAAAAAAAB6eHYlFVzXsPjjMMa5ITnOHDg1W8tBqR1XWRXjj36Y8%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DxMpuCxFNrQZv8NKhpWrmz%252BrlnkQ%253D);background-position:50% 50%;background-size:cover"></div> 1031</div> 1032</div> 1033</li> 1034 1035<li class="index-item article-item"> 1036<div class="index-item-wrap"> 1037<a class="no-text index-item-link" href="/entry/%EB%B6%84%EC%84%9D-%EC%9D%BC%EA%B8%B0-file-upload-%EC%B7%A8%EC%95%BD%EC%A0%90" role="button">ë¶ì ì¼ê¸° - file upload ì·¨ì½ì </a> 1038<div class="index-item-visual" hidden> 1039<div class="index-item-text"> 1040<h2>ë¶ì ì¼ê¸° - file upload ì·¨ì½ì </h2> 1041 1042<span class="digit">2022.05.12</span> 1043 1044<div class="index-item-summary">ðª Intro ì·¨ì½ì ë° CVE íëì ìí´ ë¶ìíê³ ìë íë¡ì í¸ê° ììµëë¤. file upload를 íµí webshell íë ê³¼ì ì ì 리íê³ ì í©ëë¤. ð¡ Analysis ë¶ìíë ¤ë ì¹ ì¬ì´í¸ìë ì ë¡ë 기ë¥ì´ ì¡´ì¬ í©ëë¤. ë¤ë§ ico, webp, svg íì¥ìë§ ì ë¡ë í ì ììµëë¤. ê·¸ë°ë° ìë ì½ë를 ë³´ë©´ì ì문ì ì´ ì기ëë¼êµ¬ì. ë³´íµ íì¼ ì ë¡ë ê´ë ¨ 기ë¥ì ë§ë¤ ë, íì¥ì ê²ì¦ì .(dot) ì 기ì¤ì¼ë¡ 문ìì´ì ëëì´ ë§¨ ë§ì§ë§ ê°ì íì¥ìë¡ íë¨ í©ëë¤. ì´ë ê² ì¶ì¶ë íì¥ìë¡ ì ë¡ë í íì¼ì íí°ë§ íê² ëì£ . íì§ë§, ì ì½ëë `strpos()` í¨ì를 ì¬ì©íì¬ ì ë¡ë íì¼ì íì¥ì를 ê²ì¬íê³ ììµëë¤. ì´ í¨ìë 문ìì´ì ìì¹ë¥¼ int ë¡ ë¦¬í´í©ëë¤. ì를 ë¤ë©´, ìëì ..</div> 1045</div> 1046<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fbo3X0N%2FbtrBZ3zmeWH%2FAAAAAAAAAAAAAAAAAAAAAAjej5OYWiNQVQ5zjNIUo0iDZLHO7y5aiLlPcP1PDo9m%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DcuIViDtsesFoPezeP3zPTmTYjJc%253D);background-position:50% 50%;background-size:cover"></div> 1047</div> 1048</div> 1049</li> 1050 1051<li class="index-item article-item"> 1052<div class="index-item-wrap"> 1053<a class="no-text index-item-link" href="/entry/NBB-2330" role="button">NBB-2330</a> 1054<div class="index-item-visual" hidden> 1055<div class="index-item-text"> 1056<h2>NBB-2330</h2> 1057 1058<span class="digit">2022.04.21</span> 1059 1060<div class="index-item-summary">ð Timeline 2022-03-14: Reported vulnerability. 2022-03-14: Checked report. 2022-03-16: Verified a vulnerability and reported to dev department. 2022-04-21: Fixed a Vulnerability. Comming soon.</div> 1061</div> 1062<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FunqaP%2FbtrGYzz8GqZ%2FAAAAAAAAAAAAAAAAAAAAAO9HERC3aWYAPlchcG3CN5ILEMWIodcbxmCNXKAYIUfB%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3Do7Kovu%252BWrzhZXxR3npZVThjVL%252BI%253D);background-position:50% 50%;background-size:cover"></div> 1063</div> 1064</div> 1065</li> 1066 1067<li class="index-item article-item"> 1068<div class="index-item-wrap"> 1069<a class="no-text index-item-link" href="/entry/NBB-2301" role="button">NBB-2301</a> 1070<div class="index-item-visual" hidden> 1071<div class="index-item-text"> 1072<h2>NBB-2301</h2> 1073 1074<span class="digit">2022.04.21</span> 1075 1076<div class="index-item-summary">ð Timeline 2022-02-21: Reported vulnerability. 2022-02-22: Checked report. 2022-02-22: Verified a vulnerability and reported to dev department. 2022-04-13: Fixed a Vulnerability. Comming soon.</div> 1077</div> 1078<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FcfJbiY%2FbtrGWz8ts4G%2FAAAAAAAAAAAAAAAAAAAAAF66Kex22LFPiyN8BhRThLhIzpPSffyYeQgSIsAarrOk%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3Dn%252FQcX1%252F7%252B7XoumZgdyF6TKFENTc%253D);background-position:50% 50%;background-size:cover"></div> 1079</div> 1080</div> 1081</li> 1082 1083<li class="index-item article-item"> 1084<div class="index-item-wrap"> 1085<a class="no-text index-item-link" href="/entry/NBB-2238" role="button">NBB-2238</a> 1086<div class="index-item-visual" hidden> 1087<div class="index-item-text"> 1088<h2>NBB-2238</h2> 1089 1090<span class="digit">2022.04.21</span> 1091 1092<div class="index-item-summary">ð Timeline 2022-01-06: Reported vulnerability. 2022-01-06: Checked report. 2022-01-06: Verified a vulnerability and reported to dev department. 2022-02-23: Fixed a Vulnerability. 2022-03-22: Bounty time.</div> 1093</div> 1094<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FXF2VG%2FbtrGYAeKAIB%2FAAAAAAAAAAAAAAAAAAAAAJN_-kYX49SE9itLC5Qb9L2sw5ZwCa28NEnJ7NP8opCT%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DH%252FH%252FqiH1UTXBrPoCzWH3uSGb0lw%253D);background-position:50% 50%;background-size:cover"></div> 1095</div> 1096</div> 1097</li> 1098 1099<li class="index-item article-item"> 1100<div class="index-item-wrap"> 1101<a class="no-text index-item-link" href="/entry/NBB-2217" role="button">NBB-2217</a> 1102<div class="index-item-visual" hidden> 1103<div class="index-item-text"> 1104<h2>NBB-2217</h2> 1105 1106<span class="digit">2022.04.21</span> 1107 1108<div class="index-item-summary">ð Timeline 2021-12-21: Reported vulnerability. 2021-12-22: Checked report. 2021-12-22: Verified a vulnerability and reported to dev department. 2022-01-12: Fixed a Vulnerability. 2022-02-08: Bounty time.</div> 1109</div> 1110<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fc14Z3x%2FbtrGZL1oH3n%2FAAAAAAAAAAAAAAAAAAAAAI4UIEBhQzo8aA63ccRCv8z3FIk-jwpnT2ABBz35PcsO%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D%252B1sl8HM0dR232tWJMUN6UKKf3Nc%253D);background-position:50% 50%;background-size:cover"></div> 1111</div> 1112</div> 1113</li> 1114 1115<li class="index-item article-item"> 1116<div class="index-item-wrap"> 1117<a class="no-text index-item-link" href="/entry/NBB-1810" role="button">NBB-1810</a> 1118<div class="index-item-visual" hidden> 1119<div class="index-item-text"> 1120<h2>NBB-1810</h2> 1121 1122<span class="digit">2022.04.21</span> 1123 1124<div class="index-item-summary">ð Timeline 2021-04-09: Reported vulnerability. 2021-04-12: Checked report. 2021-04-12: Verified vulnerability and reported to dev department. 2021-05-17: Fixed Vulnerability.</div> 1125</div> 1126<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2Fc7JcK5%2FbtrGYy2ktKK%2FAAAAAAAAAAAAAAAAAAAAALdqnWqqIjq7vqg_dd7yhtXD9G0Yrj0WowUR54r7vVqc%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3DVmyeJuhZyRP7IIT%252F7%252BNaoUAJBws%253D);background-position:50% 50%;background-size:cover"></div> 1127</div> 1128</div> 1129</li> 1130 1131<li class="index-item article-item"> 1132<div class="index-item-wrap"> 1133<a class="no-text index-item-link" href="/entry/KVE-2021-1414" role="button">KVE-2021-1414</a> 1134<div class="index-item-visual" hidden> 1135<div class="index-item-text"> 1136<h2>KVE-2021-1414</h2> 1137 1138<span class="digit">2022.04.21</span> 1139 1140<div class="index-item-summary">ð Timeline 2021-11-10: Reported vulnerability. 2021-11-10: Checked report. 2021-11-10: Verified vulnerability and forword to manufacturer. 2021-12-06: Bounty time.</div> 1141</div> 1142<div class="index-item-thumbnail" data-style="background-image:url(//img1.daumcdn.net/thumb/R800x0/?scode=mtistory2&fname=https%3A%2F%2Fblog.kakaocdn.net%2Fdna%2FWvbQF%2FbtrGYyHZcpr%2FAAAAAAAAAAAAAAAAAAAAALlHSyJ5jPOU478hs_7POtwG1fHP-I8YWm9m0u3ASce6%2Fimg.png%3Fcredential%3DyqXZFxpELC7KVnFOS48ylbz2pIh7yKj8%26expires%3D1793458799%26allow_ip%3D%26allow_referer%3D%26signature%3D1Y8cbbLBFFq5Ph1960T%252FRRywTMQ%253D);background-position:50% 50%;background-size:cover"></div> 1143</div> 1144</div> 1145</li> 1146 1147</ul> 1148</div> 1149</section> 1150 1151 1152 1153</div> 1154 1155<section> 1156 1157 1158<div class="fc-index-width card-type"> 1159<div class="index-width-support"> 1160 1161 1162 1163 1164</div> 1165</div> 1166 1167</section> 1168</main> 1169 1170<aside class="sidebar-area"> 1171<div class="sidebar-scrollbar" hidden> 1172<div class="sidebar-scrollbar-inner"></div> 1173</div> 1174<div class="sidebar-inner"> 1175<section class="sidebar-title"> 1176<h3 class="visuallyhidden-content">ì ë³´</h3> 1177<a class="no-text sidebar-title-link" href="https://lactea.kr/" role="button">Universe blog ë¸ë¡ê·¸ì 첫 íì´ì§ë¡ ì´ë</a> 1178<div class="sidebar-title-inner" aria-hidden="true"> 1179<div class="sidebar-avatar" data-style="background-image:url(//img1.daumcdn.net/thumb/R240x0/?scode=mtistory2&fname=https://tistory1.daumcdn.net/tistory/3085610/attach/0f893d6589334a90b770b9f65beb42a9)"></div> 1180<p>Universe blog</p> 1181</div> 1182</section> 1183<div class="sidebar-contents"> 1184<div class="sub-navigation" id="sidebar" aria-hidden="true"> 1185<button class="fc-appearance fc-icon fc-button close-sidebar" data-func="close-sidebar">ì¬ì´ëë° ë«ê¸°</button> 1186<ul class="fc-list sidebar-func-list"> 1187<li class="sidebar-go-to-index-inner" style="display:none" aria-hidden="true"><a class="fc-icon sidebar-go-to-index" href="https://lactea.kr/" role="button">Universe blogì 첫 íì´ì§ë¡ ì´ë</a></li> 1188</ul> 1189<div class="sidebar">
1190<button class="fc-appearance fc-button no-text transparent" data-func="close-sidebar" style="display:none" aria-hidden="true">ì¬ì´ëë° ë«ê¸°</button> 1191 1192<!-- ê²ì --> 1193<section class="module search-module icon empty"> 1194<h3>ê²ì</h3> 1195 1196<form> 1197<input class="fc-appearance search-field" type="search" name="search" value="" onkeypress="if(event.keyCode==13){try { 1198 window.location.href = '/search' + '/' + looseURIEncode(document.getElementsByName('search')[0].value); 1199 document.getElementsByName('search')[0].value = ''; 1200 return false; 1201} catch (e) {}}" aria-label="ê²ìì´ ì ë ¥" autocomplete="off" required> 1202<button class="fc-appearance fc-icon search-button" onclick="try { 1203 window.location.href = '/search' + '/' + looseURIEncode(document.getElementsByName('search')[0].value); 1204 document.getElementsByName('search')[0].value = ''; 1205 return false; 1206} catch (e) {}" class="submit" disabled>ê²ì</button> 1207</form> 1208 1209</section> 1210 1211<!-- ë©ë´ --> 1212<section class="module menu-module"> 1213<h3>ë©ë´</h3> 1214<ul> 1215 <li class="t_menu_home first"><a href="/" target="">í</a></li> 1216 <li class="t_menu_tag"><a href="/tag" target="">íê·¸</a></li> 1217 <li class="t_menu_guestbook"><a href="/guestbook" target="">ë°©ëª ë¡</a></li> 1218 <li class="t_menu_link_1 last"><a href="https://github.com/Universe1122" target="_black">Github</a></li> 1219</ul> 1220</section> 1221 1222<!-- ì¹´í ê³ ë¦¬ --> 1223<section class="module category-module close-sub-category"> 1224<h3>ì¹´í ê³ ë¦¬</h3> 1225<ul class="tt_category"><li class=""><a href="/category" class="link_tit"> ë¶ë¥ ì 체보기 <span class="c_cnt">(209)</span> </a> 1226 <ul class="category_list"><li class=""><a href="/category/%F0%9F%92%B0Bug%20Bounty" class="link_item"> ð°Bug Bounty <span class="c_cnt">(13)</span> </a></li> 1227<li class=""><a href="/category/%F0%9F%94%92Security" class="link_item"> ðSecurity <span class="c_cnt">(43)</span> </a></li> 1228<li class=""><a href="/category/%F0%9F%9A%A9CTF" class="link_item"> ð©CTF <span class="c_cnt">(110)</span> </a></li> 1229<li class=""><a href="/category/Code" class="link_item"> Code <span class="c_cnt">(11)</span> </a></li> 1230<li class=""><a href="/category/Free%20Board" class="link_item"> Free Board <span class="c_cnt">(3)</span> </a></li> 1231<li class=""><a href="/category/Develop" class="link_item"> Develop <span class="c_cnt">(4)</span> </a></li> 1232<li class=""><a href="/category/IT%20news" class="link_item"> IT news <span class="c_cnt">(8)</span> </a></li> 1233<li class=""><a href="/category/ETC" class="link_item"> ETC <span class="c_cnt">(5)</span> </a></li> 1234<li class=""><a href="/category/BaekJoon" class="link_item"> BaekJoon <span class="c_cnt">(10)</span> </a></li> 1235</ul> 1236</li> 1237</ul> 1238 1239</section> 1240 1241<!-- ìµê·¼ ê¸ --> 1242<section class="module recent-module general-module-type"> 1243<h3>ìµê·¼ ê¸</h3> 1244<ul> 1245 1246</ul> 1247</section> 1248 1249<!-- ì¸ê¸° ê¸ --> 1250<section class="module famous-module general-module-type"> 1251<h3>ì¸ê¸° ê¸</h3> 1252<ul> 1253 1254</ul> 1255</section> 1256 1257<!-- ìµê·¼ ëê¸ --> 1258<section class="module recent-comments-module"> 1259<h3>ëê¸</h3> 1260<ul> 1261 1262</ul> 1263</section> 1264 1265<!-- ê³µì§ì¬í --> 1266 1267<section class="module notice-module"> 1268<h3>ê³µì§ì¬í</h3> 1269<ul> 1270 1271<li> 1272<a class="icon" href="/notice/81" role="button" aria-label="ê³µì§: Site map">ê³µì§ - Site map</a> 1273</li> 1274 1275 1276</ul> 1277</section> 1278 1279 1280<!-- ìì¹´ì´ë¸ --> 1281<section class="module archive-module"> 1282<h3>ìì¹´ì´ë¸</h3> 1283<ul> 1284 1285</ul> 1286</section> 1287 1288<!-- íê·¸ --> 1289<section class="module tags-module"> 1290<h3>íê·¸</h3> 1291<ul> 1292 1293<li> 1294<a class="icon cloud4" href="/tag/CSP" role="button" aria-label="CSP íê·¸">CSP</a> 1295</li> 1296 1297<li> 1298<a class="icon cloud3" href="/tag/Write%20Up" role="button" aria-label="Write Up íê·¸">Write Up</a> 1299</li> 1300 1301<li> 1302<a class="icon cloud1" href="/tag/ctf" role="button" aria-label="ctf íê·¸">ctf</a> 1303</li> 1304 1305<li> 1306<a class="icon cloud4" href="/tag/PWN" role="button" aria-label="PWN íê·¸">PWN</a> 1307</li> 1308 1309<li> 1310<a class="icon cloud3" href="/tag/writeup" role="button" aria-label="writeup íê·¸">writeup</a> 1311</li> 1312 1313<li> 1314<a class="icon cloud3" href="/tag/wargame" role="button" aria-label="wargame íê·¸">wargame</a> 1315</li> 1316 1317<li> 1318<a class="icon cloud2" href="/tag/pwnable.xyz" role="button" aria-label="pwnable.xyz íê·¸">pwnable.xyz</a> 1319</li> 1320 1321<li> 1322<a class="icon cloud3" href="/tag/pwnable" role="button" aria-label="pwnable íê·¸">pwnable</a> 1323</li> 1324 1325 1326</ul> 1327</section> 1328 1329<!-- ëì ì¸ë¶ ë§í¬ --> 1330<section class="module link-module"> 1331<h3>ëì ì¸ë¶ ë§í¬</h3> 1332<ul> 1333 1334<li> 1335<a class="icon" href="http://jmoon.co.kr" target="_blank" role="button" aria-label="jmoon ë§í¬">jmoon</a> 1336</li> 1337 1338<li> 1339<a class="icon" href="http://pororiri.tistory.com" target="_blank" role="button" aria-label="pororiri ë§í¬">pororiri</a> 1340</li> 1341 1342<li> 1343<a class="icon" href="http://blog.limelee.xyz" target="_blank" role="button" aria-label="limelee ë§í¬">limelee</a> 1344</li> 1345 1346<li> 1347<a class="icon" href="https://foo-511.tistory.com/" target="_blank" role="button" aria-label="본본 ë§í¬">본본</a> 1348</li> 1349 1350<li> 1351<a class="icon" href="https://www.floodnut.com/" target="_blank" role="button" aria-label="floodnut ë§í¬">floodnut</a> 1352</li> 1353 1354<li> 1355<a class="icon" href="https://velog.io/@swimming" target="_blank" role="button" aria-label="swimming ë§í¬">swimming</a> 1356</li> 1357 1358<li> 1359<a class="icon" href="https://blog.jujuwon.dev/" target="_blank" role="button" aria-label="jujuwon ë§í¬">jujuwon</a> 1360</li> 1361 1362<li> 1363<a class="icon" href="http://velog.io/@blatter95" target="_blank" role="button" aria-label="blatter95 ë§í¬">blatter95</a> 1364</li> 1365 1366<li> 1367<a class="icon" href="https://velog.io/@sani" target="_blank" role="button" aria-label="sani ë§í¬">sani</a> 1368</li> 1369 1370<li> 1371<a class="icon" href="https://velog.io/@1mn" target="_blank" role="button" aria-label="1mn ë§í¬">1mn</a> 1372</li> 1373 1374<li> 1375<a class="icon" href="https://h0pp1.github.io/" target="_blank" role="button" aria-label="hoppi ë§í¬">hoppi</a> 1376</li> 1377 1378</ul> 1379</section> 1380 1381</div> 1382</div> 1383<div class="sub-navigation" id="blog-info" hidden> 1384<button class="fc-appearance fc-icon fc-button close-blog-info" data-func="close-blog-info">ë¸ë¡ê·¸ ì ë³´ ë«ê¸°</button> 1385<div class="sidebar">
1386<button class="fc-appearance fc-button no-text transparent" data-func="close-blog-info" hidden>ë¸ë¡ê·¸ ì ë³´ ë«ê¸°</button> 1387<section class="module info-module"> 1388<h3>ì ë³´</h3> 1389<a class="info-module-button no-text" href="https://lactea.kr/" role="button">Universe7202ì Universe blog</a> 1390<div class="align-center" aria-hidden="true"> 1391<div class="info-module-icon" data-style="background-image:url(//img1.daumcdn.net/thumb/R240x0/?scode=mtistory2&fname=https://tistory1.daumcdn.net/tistory/3085610/attach/0f893d6589334a90b770b9f65beb42a9)"></div> 1392<div class="info-module-text"> 1393<p>Universe blog</p> 1394<span>Universe7202</span> 1395</div> 1396</div> 1397</section> 1398 1399<!-- ë¸ë¡ê·¸ 구ë í기 --> 1400<section class="module subscribe-module"> 1401<h3>ë¸ë¡ê·¸ 구ë í기</h3> 1402<ul> 1403<li class="enable-subscription"> 1404<a class="icon mdl-subsc-on-tistory fc-subscribe btn_subscription" href="javascript:" role="button"><span class="txt_state">구ë í기</span></a> 1405</li> 1406 1407<li> 1408<a class="icon mdl-subsc-on-feed" href="https://universe-blog.tistory.com/rss" target="_blank" role="button">RSS í¼ë</a> 1409</li> 1410</ul> 1411</section> 1412 1413<!-- 방문ì --> 1414<section class="module visitor-module" role="text" aria-label="ì´ ë¸ë¡ê·¸ë ì´ ëª ì´ ë°©ë¬¸íê³ , ì´ì ë ëª , ì¤ëì ëª ì´ ë°©ë¬¸íìµëë¤."> 1415<h3>방문ì</h3> 1416<ul> 1417<li class="visitor-emphasis"> 1418<span class="visitor-lable">ì ì²´ 방문ì</span> <span class="visitor-count digit"></span> 1419</li> 1420<li> 1421<span class="visitor-lable">ì¤ë</span> <span class="visitor-count digit"></span> 1422</li> 1423<li> 1424<span class="visitor-lable">ì´ì </span> <span class="visitor-count digit"></span> 1425</li> 1426</ul> 1427</section> 1428 1429<!-- í°ì¤í 리 ë¡ê·¸ì¸ ì ë³´ --> 1430<section class="module tistory-account"> 1431<h3>í°ì¤í 리</h3> 1432<div class="inner_header_layer"> 1433<ul class="list_toolbar"> 1434<li> 1435<a class="icon" href="https://www.tistory.com" role="button">í°ì¤í 리 í</a> 1436</li> 1437<li> 1438<a class="icon manage-button" href="https://universe-blog.tistory.com/manage" role="button">ì´ ë¸ë¡ê·¸ ê´ë¦¬í기</a> 1439</li> 1440<li> 1441<a class="icon newpost-button" href="https://universe-blog.tistory.com/manage/newpost" role="button">ê¸ì°ê¸°</a> 1442</li> 1443</ul> 1444</div> 1445</section> 1446 1447</div> 1448</div> 1449</div> 1450</div> 1451</aside> 1452<footer class="scrollbar-support bottom" id="footer" aria-hidden="false"> 1453<div class="ft-left"> 1454<button class="fc-icon fc-circle fc-appearance fc-button fc-subscribe ft-subscribe btn_subscription">Universe blog ë¸ë¡ê·¸ <span class="txt_state">구ë í기</span></button> 1455</div> 1456<address class="ft-center"> 1457<span lang="en" class="tistory-address"><a class="fade-link" href="https://www.tistory.com" target="_blank">Powered by Tistory / Daum.</a></span> 1458<span class="copyright">© Universe7202.</span> 1459<span lang="en"><a class="fade-link" href="https://fraccinospace.tistory.com" target="_blank">Designed by Fraccino.</a></span> 1460</address> 1461<div class="ft-right"> 1462<button class="fc-icon fc-circle fc-appearance fc-button ft-go-to-top" data-func="go-to-top">íì´ì§ 맨 ìë¡ ì¬ë¼ê°ê¸°</button> 1463</div> 1464</footer> 1465 1466
1467<script> 1468setTimeout(function(){ 1469 if ($("#article") && $("#article").length === 1) { 1470 function convertCharToTag(originalString, targetChar, openingTag, closingTag) { 1471 var resultString = originalString, 1472 i = -1, 1473 even = true; 1474 while ((i = originalString.indexOf(targetChar, i + 1)) >= 0) { 1475 if (even) resultString = resultString.replace(targetChar, openingTag); 1476 else resultString = resultString.replace(targetChar, closingTag); 1477 even = !even; 1478 } 1479 return resultString; 1480 } 1481 1482 for(let h=1; h<=6; h++){ 1483 for(let i=0; i<$(`#article > h${h}`).length; i++){ 1484 var htmlStr = $(`#article > h${h}`)[i].innerHTML; 1485 var converted = convertCharToTag(htmlStr, "`", "<code>", "</code>"); 1486 $(`#article > h${h}`)[i].innerHTML = converted; 1487 } 1488 } 1489 console.log($(`#article > p`).length); 1490 for(let i=0; i<$(`#article > p`).length; i++){ 1491 var htmlStr = $(`#article > p`)[i].innerHTML; 1492 var converted = convertCharToTag(htmlStr, "`", "<code>", "</code>"); 1493 // console.log(converted); 1494 $(`#article > p`)[i].innerHTML = converted; 1495 } 1496} 1497}, 1000) 1498 1499// if ($(".post-item")) { 1500// function convertCharToTag(originalString, targetChar, openingTag, closingTag) { 1501// var resultString = originalString, 1502// i = -1, 1503// even = true; 1504// while ((i = originalString.indexOf(targetChar, i + 1)) >= 0) { 1505// if (even) resultString = resultString.replace(targetChar, openingTag); 1506// else resultString = resultString.replace(targetChar, closingTag); 1507// even = !even; 1508// } 1509// return resultString; 1510// } 1511// var postItems = $(".post-item"); 1512// $(postItems).each(function(index, item) { 1513// var htmlStr = $(item).find(".excerpt").html(); 1514// var converted = convertCharToTag(htmlStr, "`", "<code>", "</code>"); 1515// $(item).find(".excerpt").html($.parseHTML(converted)); 1516// }); 1517// } 1518</script>
vendor: 1 bytes, line 1518
1518
1519<script>let 1520imagesURL="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/",title="Universe blog",blogLink="https://lactea.kr/",manageLink="https://universe-blog.tistory.com/manage",fcver="",fcverCheck="?fcver=2530",fixedSidebar="true",limitedWidth="true",articleWidth=parseInt("728"),expandedImgWidth=parseInt("1100"),trademark="undefined",dawnTrademark="undefined",nightTrademark="undefined",coverTrademark="undefined",jacketColor="transparent",jacketImage="undefined",dayPageColor="#647788",dayColor="#349aff",dawnPageColor="#59656d",dawnColor="#2284d9",nightPageColor="#748a96",nightColor="#74d5ff",altCover="https://tistory2.daumcdn.net/tistory/3085610/skinSetting/b2d81febb1274f8eb3a45934149564e0",secondAltCover="https://tistory4.daumcdn.net/tistory/3085610/skinSetting/0c0d51b3f1b14914842a1101803403bf",thirdAltCover="undefined",fourthAltCover="undefined",dayKeyword="",dawnKeyword="",nightKeyword="",pageCoverKeyword="",fullscreenPageCoverKeyword="",disabledPageCoverKeyword="",altCoverKeyword="",secondCoverKeyword="",thirdCoverKeyword="",fourthCoverKeyword="",smallGalleryKeyword="",galleryKeyword="",largeGalleryKeyword="",posterTypeKeyword="",cardTypeKeyword="",textTypeKeyword="",hiddenTextKeyword="",showTextKeyword="",serifKeyword="",sanSerifKeyword="",tabSize=parseInt("4"),sidebarButtonColor="transparent",sidebarDawnButtonColor="transparent",sidebarNightButtonColor="transparent",sidebarHoverColor="transparent",sidebarDawnHoverColor="transparent",sidebarNightHoverColor="transparent",sidebarColor="transparent",sidebarDawnColor="transparent",sidebarNightColor="transparent",sidebarImage="undefined",sidebarDawnImage="undefined",sidebarNightImage="undefined",sidebarImgPosition="50% 50%",sidebarImgSize="cover",sidebarImgRepeat="no-repeat",sidebarTrademark="undefined",sidebarDawnTrademark="undefined",sidebarNightTrademark="undefined",naverID="undefined",slideInterval=1000*(Number("5")+1)</script>
vendor: 1 bytes, line 1520
1520
1521<script defer src="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script.js"></script>
vendor: 1 bytes, line 1521
1521
1522<script defer src="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_sidebar.js"></script>
vendor: 1 bytes, line 1522
1522
1523<script defer src="https://cdn.jsdelivr.net/gh/kaniwari/[email protected]/build/script_appearance.js"></script>
vendor: 1 bytes, line 1523
1523
1524<script src="https://cdn.jsdelivr.net/gh/hi098123/tistory2/dist/tistory2.min.js"></script>
vendor: 1 bytes, line 1524
1524
1525<script> 1526 var content = document.querySelector('#article') 1527 var headings = content.querySelectorAll('h1, h2, h3, h4, h5, h6, h7') 1528 var headingMap = {} 1529 1530 Array.prototype.forEach.call(headings, function (heading) { 1531 var id = heading.id ? heading.id : heading.textContent.trim().toLowerCase() 1532 .split(' ').join('-').replace(/[\!\@\#\$\%\^\&\*\(\):]/ig, '') 1533 headingMap[id] = !isNaN(headingMap[id]) ? ++headingMap[id] : 0 1534 if (headingMap[id]) { 1535 heading.id = id + '-' + headingMap[id] 1536 } else { 1537 heading.id = id 1538 } 1539 }) 1540 1541 tocbot.init({ 1542 tocSelector: '.toc', 1543 contentSelector: '#article', 1544 headingSelector:'h1, h2, h3, h4', 1545 hasInnerContainers: false, 1546 ignoreSelector: '.another-category' 1547 }); 1548 1549 $(document).ready(function(){ 1550 $('.toc').addClass('toc-absolute'); 1551 var toc_top = $('.toc').offset().top - 165; 1552 $(window).scroll(function() { 1553 if ($(this).scrollTop() >= toc_top) { 1554 $('.toc-title').addClass("toc-title-fixed"); 1555 $('.toc').addClass('toc-fixed'); 1556 $('.toc').removeClass('toc-absolute'); 1557 } else { 1558 $('.toc-title').removeClass("toc-title-fixed"); 1559 $('.toc').addClass('toc-absolute'); 1560 $('.toc').removeClass('toc-fixed'); 1561 } 1562 }); 1563 }); 1564</script>
1564 1565<div class="#menubar menu_toolbar "> 1566 <h2 class="screen_out">í°ì¤í 리í´ë°</h2> 1567<div class="btn_tool"><button class="btn_menu_toolbar btn_subscription #subscribe" data-blog-id="3085610" data-url="https://universe-blog.tistory.com" data-device="web_pc"><strong class="txt_tool_id">Universe blog</strong><em class="txt_state">구ë í기</em><span class="img_common_tistory ico_check_type1"></span></button></div></div> 1568<div class="#menubar menu_toolbar "></div> 1569<div class="layer_tooltip"> 1570 <div class="inner_layer_tooltip"> 1571 <p class="desc_g"></p> 1572 </div> 1573</div> 1574<div id="editEntry" style="position:absolute;width:1px;height:1px;left:-100px;top:-100px"></div> 1575 1576 1577 <!-- DragSearchHandler - START -->
1578<script src="//search1.daumcdn.net/search/statics/common/js/fe/search-library-workspace/drag-search/1.0.2/main.js"></script>
1578 1579 1580<!-- DragSearchHandler - END --> 1581 1582 1583 <div style="margin:0; padding:0; border:none; background:none; float:none; clear:none; z-index:0"></div>
1584<script type="text/javascript" src="https://edge.daumcdn.net/tistory/tistory-admin/userblog/userblog-542bd84ce37260cece1e68a465e3c63534629c86/static/script/common.js"></script>
1584 1585 1586 1587
1587<script>window.tiara = {"svcDomain":"user.tistory.com","section":"ë¸ë¡ê·¸","trackPage":"ë¸ë¡ê·¸í_보기","page":"ë¸ë¡ê·¸í","key":"3085610","customProps":{"userId":"0","blogId":"3085610","entryId":"null","role":"guest","trackPage":"ë¸ë¡ê·¸í_보기","filterTarget":false},"entry":null,"kakaoAppKey":"3e6ddd834b023f24221217e370daed18","appUserId":"null","thirdProvideAgree":null}</script>
vendor: 1 bytes, line 1587
1587
1588<script type="module" src="https://edge.daumcdn.net/tistory/tistory-admin/frontend/tiara/v1.0.8/index.js"></script>
vendor: 1 bytes, line 1588
1588
1589<script src="https://edge.daumcdn.net/tistory/tistory-admin/frontend/tiara/v1.0.8/polyfills-legacy.js" nomodule="true" defer="true"></script>
vendor: 1 bytes, line 1589
1589
1590<script src="https://edge.daumcdn.net/tistory/tistory-admin/frontend/tiara/v1.0.8/index-legacy.js" nomodule="true" defer="true"></script>
1590 1591 1592 </body> 1593</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.