๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ
  • Tried. Failed. Logged.
728x90

๐Ÿ”’์ •๋ณด๋ณด์•ˆ/์‚ฌํšŒ๊ณตํ•™1

์‚ฌํšŒ๊ณตํ•™ - PDF + HTA ์•…์„ฑ ํŒŒ์ผ payload.hta /copy ๋ช…๋ น์–ด๋กœ ๋ณ‘ํ•ฉ (Windows CMD) Windows์˜ copy /b ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉํ•ด ์ด์ง„(Binary) ๋ฐฉ์‹์œผ๋กœ ํŒŒ์ผ ๊ฒฐํ•ฉcopy /b doc.pdf + payload.hta final.pdf ์‹คํ–‰ ์œ ๋„ ๋ฐฉ์‹ ํ™•์žฅ์ž ์ˆจ๊น€ + Windows ์‹คํ–‰ ์šฐ์„ ์ˆœ์œ„๋ฅผ ์ด์šฉํŒŒ์ผ ์ด๋ฆ„์„ ์˜ˆ: document.pdf.hta ๋˜๋Š” document.pdf[space].hta๋กœ ๋งŒ๋“ค๊ณ ํ™•์žฅ์ž ์ˆจ๊ธฐ๊ธฐ๋ฅผ ํ†ตํ•ด ์‚ฌ์šฉ์ž ๋ˆˆ์—๋Š” .pdf์ฒ˜๋Ÿผ ๋ณด์ž„์‚ฌ์šฉ์ž๊ฐ€ ํด๋ฆญํ•˜๋ฉด mshta.exe๊ฐ€ ์‹คํ–‰๋จ 2025. 5. 6.
728x90

ํ‹ฐ์Šคํ† ๋ฆฌํˆด๋ฐ”