{"id":4125,"date":"2021-12-14T21:08:27","date_gmt":"2021-12-14T12:08:27","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4125"},"modified":"2021-12-18T20:22:20","modified_gmt":"2021-12-18T11:22:20","slug":"ddos","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4125","title":{"rendered":"DDOS \ub300\uc751 \uc77c\uc9c0"},"content":{"rendered":"<h1>DDOS \ub300\uc751 \uc77c\uc9c0<\/h1>\n<h2>\ud604\uc0c1<\/h2>\n<p>\uc77c\ub2e8\uc704 \uc218\ucc9c\uac1c \uc544\uc774\ud53c\ub97c \uc774\uc6a9\ud574 DDOS \uacf5\uaca9\uc744 \ud558\uace0 \uc788\ub2e4.<br \/>\n\uc2ec\uc9c0\uc5b4 \ub9e4\uc77c\ub9e4\uc77c \uc0c8\ub85c\uc6b4 \uc218\ucc9c\uac1c \uc544\uc774\ud53c\uac00 \uc774\uc6a9\ub418\uace0 \uc788\ub2e4.<\/p>\n<p>user-agent \ub294 \uc548\ub4dc\ub85c\uc774\ub4dc WebView \uc774\ub2e4.<\/p>\n<h2>\ub300\uc751 1\ucc28<\/h2>\n<p>DDOS \ud558\ub294 \uc560\ub4e4\uc740 \uc2a4\ud06c\ub9bd\ud2b8\ub3c4 \uc2e4\ud589 \uc54a\ud560\uac70\uace0 \ucfe0\ud0a4\uc800\uc7a5\ub3c4 \uc54a\ud560\uac70\ub2e4.<br \/>\n<code>cce=y<\/code> \uc694\uc815\ub3c4\ub85c \ucfe0\ud0a4 \ubc15\uc544\ub123\uace0 \ucfe0\ud0a4\uccb4\ud06c\ub85c \ub05d\ub0b4\uc790.<\/p>\n<p>\ud558\uc9c0\ub9cc \uc2e4\ud328.<\/p>\n<pre><code class=\"language-asp\">if (Request.Cookies(&quot;cce&quot;) = &quot;&quot;) then\n    %&gt;\n&lt;!DOCTYPE html&gt;\n&lt;html lang=&quot;ko&quot;&gt;\n&lt;head&gt;\n    &lt;meta charset=&quot;utf-8&quot; \/&gt;\n    &lt;title&gt;\ub098\uc758 \uc1fc\ud551\ubab0&lt;\/title&gt;\n&lt;\/head&gt;\n&lt;body&gt;\n    &lt;script&gt;\n    if (navigator.cookieEnabled == true) {\n        var d = new Date();\n        d.setDate(d.getDate() + 30);\n        document.cookie = &quot;cce=Y; path=\/; expires=&quot; + d.toGMTString() + &quot;;&quot;;\n        setTimeout(function() {\n            document.location.reload();\n        }, 200);\n    } else {\n        document.write(&#039;\ud604\uc7ac \uc0ac\uc6a9 \uc911\uc778 \ube0c\ub77c\uc6b0\uc800\ub294 \ucfe0\ud0a4\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uac70\ub098, \ud574\ub2f9 \uae30\ub2a5\uc774 \ud65c\uc131\ud654\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.&lt;br \/&gt;&#039;);\n        document.write(&#039;\ubcf4\ub2e4 \uc790\uc138\ud55c \uc0ac\ud56d\uc740 &lt;a href=&quot;\/cscenter\/&quot;&gt;\uace0\uac1d\uc13c\ud130&lt;\/a&gt;\ub85c \ubb38\uc758\uc8fc\uc2dc\uae30 \ubc14\ub9bd\ub2c8\ub2e4.&#039;);\n    }\n    &lt;\/script&gt;\n    &lt;noscript&gt;\n        \ud604\uc7ac \uc0ac\uc6a9 \uc911\uc778 \ube0c\ub77c\uc6b0\uc800\ub294 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uac70\ub098, \ud574\ub2f9 \uae30\ub2a5\uc774 \ud65c\uc131\ud654\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.&lt;br \/&gt;\n        \ubcf4\ub2e4 \uc790\uc138\ud55c \uc0ac\ud56d\uc740 &lt;a href=&quot;\/cscenter\/&quot;&gt;\uace0\uac1d\uc13c\ud130&lt;\/a&gt;\ub85c \ubb38\uc758\uc8fc\uc2dc\uae30 \ubc14\ub9bd\ub2c8\ub2e4.\n    &lt;\/noscript&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;\n    &lt;%\n    Response.Status = &quot;239 Check browser&quot;\n    response.end\nend if<\/code><\/pre>\n<h2>\ub300\uc751 2\ucc28<\/h2>\n<p>\uc2a4\ud06c\ub9bd\ud2b8 \uc2e4\ud589\uc744 \uc808\ub300 \ud560\uc218 \uc5c6\uc744\uac74\ub370&#8230;<br \/>\n\uc0ac\ub78c\uc774 \ub208\uc73c\ub85c \ubcf4\uace0 \ucfe0\ud0a4\ub97c \ubcf5\uc0ac\ud574\uc11c \uac19\uc774 \ubcf4\ub0b4\ub098?<br \/>\n\ucfe0\ud0a4\ub97c \uc554\ud638\ud654\ud558\uace0 \uc544\uc774\ud53c\ub2f9 1\uc2dc\uac04\uc758 \uc720\ud6a8\uae30\uac04\ub9cc \uc124\uc815\ud574\uc11c \ubcf4\ub0b4\ubcf4\uc790.<\/p>\n<p>\uc2e4\ud328.<\/p>\n<h2>\ub300\uc751 3\ucc28<\/h2>\n<p>\ubb50\uc9c0?<br \/>\n\uc218\ucc9c\uac1c\uc758 \uc544\uc774\ud53c\ub97c \uc774\uc6a9\ud558\uace0 \uc788\ub294\ub370&#8230;<br \/>\n\uc544\uc774\ud53c+\ud604\uc7ac\uc2dc\uac04 \uc870\ud569\uc73c\ub85c \ud55c\uc2dc\uac04\uc9dc\ub9ac \uc778\uc99d\ud0a4\ub97c \ubc1c\uae09\ud574\uc8fc\uace0 \uc788\ub294\ub370&#8230;<br \/>\n\uc774\uac78 \uc0ac\ub78c\uc774 \ub208\uc73c\ub85c \ubcf4\uace0 \ubcf5\uc0ac\ud574\uc11c \ubd99\uc5ec\ub123\ub294\uac74 \ubd88\uac00\ub2a5\ud55c\ub370&#8230;<\/p>\n<p>\uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud558\uace0 \uc788\uad6c\ub098!!!<\/p>\n<p>\uadf8\ub807\ub2e4\uba74 \uc0ac\uc6a9\uc790 \ud578\ub4dc\ud3f0\uc5d0 DDOS \uc571\uc744 \ubc31\uadf8\ub77c\uc6b4\ub4dc WebView \ub85c \uc2e4\ud589\ud558\uace0 \uc788\uc9c0 \uc54a\uc744\uae4c?<\/p>\n<p>\uc2a4\ud06c\ub9bd\ud2b8\uc5d0 <code>document.hidden<\/code> \uc744 \uccb4\ud06c\ud558\ub294 \ub85c\uc9c1\uc744 \ub123\uc5b4\ubcf4\uc790.<\/p>\n<p>\uc2e4\ud328.<\/p>\n<h2>\ub300\uc751 4\ucc28<\/h2>\n<p>\ubb50\uc9c0?<br \/>\n<code>document.hidden<\/code> \uc740 ReadOnly \uc778\ub370&#8230;<br \/>\nDDOS \ub97c ForeGround \ub85c \uc2e4\ud589\ud55c\ub2e4\uace0???<\/p>\n<p>\uc790\uae30 \uc7a5\ube44(or AWS \uc7a5\ube44) \ub97c \uc774\uc6a9\ud558\uace0 \uc788\uad6c\ub098.<\/p>\n<p>\uc704\uc5d0\uc11c \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud55c\ub2e4\ub294\uac8c \ud655\uc778\ub418\uc5c8\uace0&#8230;<br \/>\n\uadf8\ub807\ub2e4\uba74 \ub0b4\uac00 \uc791\uc131\ud55c \ucf54\ub4dc\ub97c \uc2e4\ud589\uc2dc\ucf1c \uc900\ub2e4\ub294\uac74\ub370&#8230;<\/p>\n<p>\uc694\ub188\ub4e4\uc774 \uc2e4\ud589\ud558\uace0 \uc788\ub294 \ube0c\ub77c\uc6b0\uc800\uc758 \ud2b9\uc131\uc744 \ud30c\uc545\ud574 \ubcf4\uc790.<\/p>\n<pre><code class=\"language-javascript\">try {\n    var url = &#039;\/common\/addlog.js?w=1&#039;;\n    url = url + &#039;&amp;h=&#039; + ((typeof document.hidden === &quot;undefined&quot;) ? &#039;X&#039; : (document.hidden ? &#039;Y&#039; : &#039;N&#039;));\n    url = url + &#039;&amp;k=&#039; + ((typeof document.webkitHidden === &quot;undefined&quot;) ? &#039;X&#039; : (document.webkitHidden ? &#039;Y&#039; : &#039;N&#039;));\n    url = url + &#039;&amp;x=&#039; + window.innerWidth;\n    url = url + &#039;&amp;y=&#039; + window.innerHeight;\n\n    $.ajax({url:url});\n} catch (error) {\n    console.error(error);\n}<\/code><\/pre>\n<p>\uc5b4???<br \/>\n\ud654\uba74 \uc0ac\uc774\uc988\uac00 300X150 \uc774\ub124???<br \/>\n\uc774 \uc0ac\uc774\uc988 \uac00\uc9c0\uace0 \uc0ac\ub78c\uc774 \uc811\uc18d\ud560 \uc77c\uc740 \uc5c6\uc744\uac74\ub370???<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.skyer9.pe.kr\/wordpress\/wp-content\/uploads\/2021\/12\/20211217-01.png\" alt=\"\" \/><\/p>\n<p>\ud654\uba74 \uc0ac\uc774\uc988\ub85c \ub9c9\uc544\ubcf4\uc790.<\/p>\n<p>\uc131\uacf5.<\/p>\n<p>\uc624\ud6c4 5\uc2dc\ub97c \uae30\uc810\uc73c\ub85c \uae30\uc801\uc774 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4.<br \/>\n\uc62c\ub808~~~<\/p>\n<p>(\ud0a4\ubc14\ub098 \ucea1\uccd0\ub97c \uc790\uc138\ud788 \ubcf4\uba74 \ub124\uc774\ubc84\uc571 or \uce74\uce74\uc624\uc571\uc744 \uc774\uc6a9\ud55c \uc811\uc18d\uc744 \uc81c\uc678\ud558\uace0 DDOS \uacf5\uaca9\ub4e4\uc774 \uc0ac\ub77c\uc9c4\uac8c \ubcf4\uc785\ub2c8\ub2e4.)<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.skyer9.pe.kr\/wordpress\/wp-content\/uploads\/2021\/12\/2021-12-17-04.png\" alt=\"\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>DDOS \ub300\uc751 \uc77c\uc9c0 \ud604\uc0c1 \uc77c\ub2e8\uc704 \uc218\ucc9c\uac1c \uc544\uc774\ud53c\ub97c \uc774\uc6a9\ud574 DDOS \uacf5\uaca9\uc744 \ud558\uace0 \uc788\ub2e4. \uc2ec\uc9c0\uc5b4 \ub9e4\uc77c\ub9e4\uc77c \uc0c8\ub85c\uc6b4 \uc218\ucc9c\uac1c \uc544\uc774\ud53c\uac00 \uc774\uc6a9\ub418\uace0 \uc788\ub2e4. user-agent \ub294 \uc548\ub4dc\ub85c\uc774\ub4dc WebView \uc774\ub2e4. \ub300\uc751 1\ucc28 DDOS \ud558\ub294 \uc560\ub4e4\uc740 \uc2a4\ud06c\ub9bd\ud2b8\ub3c4 \uc2e4\ud589 \uc54a\ud560\uac70\uace0 \ucfe0\ud0a4\uc800\uc7a5\ub3c4 \uc54a\ud560\uac70\ub2e4. cce=y \uc694\uc815\ub3c4\ub85c \ucfe0\ud0a4 \ubc15\uc544\ub123\uace0 \ucfe0\ud0a4\uccb4\ud06c\ub85c \ub05d\ub0b4\uc790. \ud558\uc9c0\ub9cc \uc2e4\ud328. if (Request.Cookies(&quot;cce&quot;) = &quot;&quot;) then %&gt; &lt;!DOCTYPE html&gt; &lt;html lang=&quot;ko&quot;&gt; &lt;head&gt; &lt;meta charset=&quot;utf-8&quot;\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=4125\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-4125","post","type-post","status-publish","format-standard","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4125"}],"version-history":[{"count":5,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4125\/revisions"}],"predecessor-version":[{"id":4171,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4125\/revisions\/4171"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4125"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}