HackTricks ๊ฐ€์น˜ ๋ฐ FAQ

Tip

AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:HackTricks Training AWS Red Team Expert (ARTE)
GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training GCP Red Team Expert (GRTE) Azure ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks ์ง€์›ํ•˜๊ธฐ

HackTricks Values

Tip

๋‹ค์Œ์€ HackTricks ํ”„๋กœ์ ํŠธ์˜ ๊ฐ€์น˜์ž…๋‹ˆ๋‹ค:

  • ๋ชจ๋“  ์ธํ„ฐ๋„ท ์‚ฌ์šฉ์ž์—๊ฒŒ ๋ฌด๋ฃŒ๋กœ ๊ต์œก์šฉ hacking ์ž์›์— ์ ‘๊ทผํ•  ์ˆ˜ ์žˆ๊ฒŒ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค.
  • Hacking์€ ํ•™์Šต์— ๊ด€ํ•œ ๊ฒƒ์ด๋ฉฐ, ํ•™์Šต์€ ๊ฐ€๋Šฅํ•œ ํ•œ ๋ฌด๋ฃŒ์—ฌ์•ผ ํ•ฉ๋‹ˆ๋‹ค.
  • ์ด ์ฑ…์˜ ๋ชฉ์ ์€ ํฌ๊ด„์ ์ธ ๊ต์œก ์ž๋ฃŒ๋กœ์„œ ๊ธฐ๋Šฅํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค.
  • STORE ์ปค๋ฎค๋‹ˆํ‹ฐ๊ฐ€ ๋ฐœํ‘œํ•œ ๋ฉ‹์ง„ hacking ๊ธฐ์ˆ ๋“ค์„ ์ €์žฅํ•˜๊ณ  ORIGINAL AUTHORS์—๊ฒŒ ๋ชจ๋“  credits๋ฅผ ๋Œ๋ฆฝ๋‹ˆ๋‹ค.
  • We donโ€™t want the credit from other people, ์šฐ๋ฆฌ๋Š” ๋‹จ์ง€ ๋ชจ๋‘๋ฅผ ์œ„ํ•ด ๋ฉ‹์ง„ ํŠธ๋ฆญ์„ ์ €์žฅํ•ด๋‘๊ณ  ์‹ถ์Šต๋‹ˆ๋‹ค.
  • ๋˜ํ•œ HackTricks์— ์šฐ๋ฆฌ์˜ ์—ฐ๊ตฌ๋„ ๊ฒŒ์žฌํ•ฉ๋‹ˆ๋‹ค.
  • ๊ฒฝ์šฐ์— ๋”ฐ๋ผ ๊ธฐ์ˆ ์˜ ์ค‘์š”ํ•œ ๋ถ€๋ถ„์„ HackTricks์— ์š”์•ฝ๋งŒ ๊ฒŒ์žฌํ•˜๊ณ  ๋” ์ž์„ธํ•œ ๋‚ด์šฉ์„ ์œ„ํ•ด ๋…์ž๊ฐ€ ์›๋ฌธ ๊ฒŒ์‹œ๋ฌผ์„ ๋ฐฉ๋ฌธํ•˜๋„๋ก ๊ถŒ์žฅํ•  ๊ฒƒ์ž…๋‹ˆ๋‹ค.
  • ORGANIZE ์ฑ…์— ์žˆ๋Š” ๋ชจ๋“  hacking ๊ธฐ๋ฒ•์„ ์ •๋ฆฌํ•˜์—ฌ MORE ACCESSIBLE ํ•˜๊ฒŒ ๋งŒ๋“ญ๋‹ˆ๋‹ค.
  • HackTricks ํŒ€์€ ์‚ฌ๋žŒ๋“ค์ด ๋” ๋นจ๋ฆฌ ๋ฐฐ์šธ ์ˆ˜ ์žˆ๋„๋ก ์ฝ˜ํ…์ธ ๋ฅผ ์ •๋ฆฌํ•˜๋Š” ๋ฐ๋งŒ ์ˆ˜์ฒœ ์‹œ๊ฐ„ ์ด์ƒ์„ ๋ฌด๋ฃŒ๋กœ ๋ฐ”์ณค์Šต๋‹ˆ๋‹ค.

HackTricks faq

Tip

  • ์ด๋Ÿฌํ•œ ์ž๋ฃŒ๋“ค์„ ์ œ๊ณตํ•ด ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค. ์–ด๋–ป๊ฒŒ ๊ฐ์‚ฌ ์ธ์‚ฌ๋ฅผ ๋“œ๋ฆด ์ˆ˜ ์žˆ๋‚˜์š”?

์ด ๋ชจ๋“  ์ž๋ฃŒ๋ฅผ ์ •๋ฆฌํ•ด ์ฃผ์‹  HackTricks ํŒ€์—๊ฒŒ ๊ณต๊ฐœ์ ์œผ๋กœ ๊ฐ์‚ฌํ•˜๋ ค๋ฉด ํŠธ์œ—์—์„œ @hacktricks_live๋ฅผ ์–ธ๊ธ‰ํ•ด ์ฃผ์„ธ์š”.
ํŠนํžˆ ๊ฐ์‚ฌํ•˜์‹œ๋ฉด ์—ฌ๊ธฐ์—์„œ ํ”„๋กœ์ ํŠธ๋ฅผ ํ›„์›ํ•˜์‹ค ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
๊ทธ๋ฆฌ๊ณ  Github ํ”„๋กœ์ ํŠธ์— ๋ณ„(star)์„ ์ฃผ๋Š” ๊ฒƒ์„ ์žŠ์ง€ ๋งˆ์„ธ์š”! (์•„๋ž˜์—์„œ ๋งํฌ๋ฅผ ํ™•์ธํ•˜์„ธ์š”).

Tip

  • ํ”„๋กœ์ ํŠธ์— ์–ด๋–ป๊ฒŒ ๊ธฐ์—ฌํ•  ์ˆ˜ ์žˆ๋‚˜์š”?

์ฑ…์—์„œ ์ฐพ์€ ์ƒˆ๋กœ์šด ํŒ๊ณผ ํŠธ๋ฆญ์„ ์ปค๋ฎค๋‹ˆํ‹ฐ์— ๊ณต์œ ํ•˜๊ฑฐ๋‚˜ ๋ฒ„๊ทธ๋ฅผ ์ˆ˜์ •ํ•˜๋ ค๋ฉด ํ•ด๋‹น Github ํŽ˜์ด์ง€์— Pull Request๋ฅผ ๋ณด๋‚ด์„ธ์š”:

Github ํ”„๋กœ์ ํŠธ์— ๋ณ„(star) ์ฃผ๋Š” ๊ฒƒ์„ ์žŠ์ง€ ๋งˆ์„ธ์š”!

Tip

  • HackTricks์˜ ์ผ๋ถ€ ์ฝ˜ํ…์ธ ๋ฅผ ๋ณต์‚ฌํ•˜์—ฌ ๋‚ด ๋ธ”๋กœ๊ทธ์— ์˜ฌ๋ ค๋„ ๋˜๋‚˜์š”?

๋„ค, ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ ์ฝ˜ํ…์ธ ๋ฅผ ๊ฐ€์ ธ์˜จ ํŠน์ • ๋งํฌ(๋“ค)๋ฅผ ๋ฐ˜๋“œ์‹œ ๋ช…์‹œํ•˜์„ธ์š”.

Tip

  • HackTricks์˜ ํŽ˜์ด์ง€๋ฅผ ์–ด๋–ป๊ฒŒ ์ฐธ๊ณ  ํ‘œ๊ธฐํ•˜๋‚˜์š”?

์ •๋ณด๋ฅผ ๊ฐ€์ ธ์˜จ ํŽ˜์ด์ง€์˜ ๋งํฌ๊ฐ€ ํ‘œ์‹œ๋˜์–ด ์žˆ์œผ๋ฉด ๊ทธ๊ฒƒ๋งŒ์œผ๋กœ ์ถฉ๋ถ„ํ•ฉ๋‹ˆ๋‹ค.
BibTeX๊ฐ€ ํ•„์š”ํ•˜๋‹ค๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์ด ์‚ฌ์šฉํ•˜์‹ค ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค:

@misc{hacktricks-bibtexing,
author = {"HackTricks Team" or the Authors name of the specific page/trick},
title = {Title of the Specific Page},
year = {Year of Last Update (check it at the end of the page)},
url = {\url{https://book.hacktricks.wiki/specific-page}},
}

Warning

  • Can I copy all HackTricks in my blog?

์ €๋Š” ๊ถŒํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๋ชจ๋“  ์ฝ˜ํ…์ธ ๋Š” ์ด๋ฏธ ๊ณต์‹ HackTricks ์ฑ…์—์„œ ๋ฌด๋ฃŒ๋กœ ๊ณต๊ฐœ๋˜์–ด ์žˆ๊ธฐ ๋•Œ๋ฌธ์— ๋ˆ„๊ตฌ์—๊ฒŒ๋„ ๋„์›€์ด ๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

๋งŒ์•ฝ ์‚ฌ๋ผ์งˆ๊นŒ ๊ฑฑ์ •๋œ๋‹ค๋ฉด, Github์—์„œ ํฌํฌํ•˜๊ฑฐ๋‚˜ ๋‹ค์šด๋กœ๋“œํ•˜์„ธ์š”. ์•ž์„œ ๋งํ–ˆ๋“ฏ ์ด๋ฏธ ๋ฌด๋ฃŒ์ž…๋‹ˆ๋‹ค.

Warning

  • Why do you have sponsors? Are HackTricks books for commercial purposes?

์ฒซ ๋ฒˆ์งธ HackTricks ๊ฐ€์น˜๋Š” ์ „ ์„ธ๊ณ„ ๋ชจ๋‘์—๊ฒŒ ๋ฌด๋ฃŒ๋กœ ํ•ดํ‚น ๊ต์œก ์ž๋ฃŒ๋ฅผ ์ œ๊ณตํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค. HackTricks ํŒ€์€ ์ด ์ฝ˜ํ…์ธ ๋ฅผ ์ œ๊ณตํ•˜๊ธฐ ์œ„ํ•ด ์ˆ˜์ฒœ ์‹œ๊ฐ„์„ ๋ฐ”์ณค์œผ๋ฉฐ, ๋‹ค์‹œ ๋งํ•˜์ง€๋งŒ ๋ฌด๋ฃŒ๋กœ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค.

HackTricks ์ฑ…์ด ์ƒ์—…์  ๋ชฉ์ ์œผ๋กœ ๋งŒ๋“ค์–ด์กŒ๋‹ค๊ณ  ์ƒ๊ฐํ•˜์‹ ๋‹ค๋ฉด, ์™„์ „ํžˆ ํ‹€๋ ธ์Šต๋‹ˆ๋‹ค.

์šฐ๋ฆฌ์—๊ฒ ์Šคํฐ์„œ๊ฐ€ ์žˆ๋Š” ์ด์œ ๋Š” ๋ชจ๋“  ์ฝ˜ํ…์ธ ๊ฐ€ ๋ฌด๋ฃŒ์ด๋”๋ผ๋„ ์ปค๋ฎค๋‹ˆํ‹ฐ๊ฐ€ ์›ํ•œ๋‹ค๋ฉด ์šฐ๋ฆฌ์˜ ์ž‘์—…์„ ๊ฐ์‚ฌํžˆ ์—ฌ๊ธธ ์ˆ˜ ์žˆ๋Š” ์„ ํƒ์ง€๋ฅผ ์ œ๊ณตํ•˜๊ณ  ์‹ถ๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ๋”ฐ๋ผ์„œ ์‚ฌ๋žŒ๋“ค์—๊ฒŒ Github sponsors๋ฅผ ํ†ตํ•œ ํ›„์› ์˜ต์…˜์„ ์ œ๊ณตํ•˜๊ณ , ๊ด€๋ จ ์‚ฌ์ด๋ฒ„๋ณด์•ˆ ํšŒ์‚ฌ๋“ค์ด HackTricks๋ฅผ ์Šคํฐ์„œํ•˜๋„๋ก ํ•˜๋ฉฐ ์ฑ… ๋‚ด์— ๊ด‘๊ณ ๋ฅผ ๊ฒŒ์žฌํ•ฉ๋‹ˆ๋‹ค. ์ด ๊ด‘๊ณ ๋“ค์€ ํ•ญ์ƒ ๋ˆˆ์— ๋„๋˜, ๋ˆ„๊ตฐ๊ฐ€ ์ฝ˜ํ…์ธ ์— ์ง‘์ค‘ํ•  ๋•Œ ํ•™์Šต์„ ๋ฐฉํ•ดํ•˜์ง€ ์•Š๋„๋ก ๋ฐฐ์น˜๋ฉ๋‹ˆ๋‹ค.

HackTricks๋Š” ๋‹ค๋ฅธ ๋งŽ์€ ์ฝ˜ํ…์ธ ๋ณด๋‹ค ํ›จ์”ฌ ์ ์€ ์–‘์˜ ๋ธ”๋กœ๊ทธ๋“ค์ฒ˜๋Ÿผ ์„ฑ๊ฐ€์‹  ๊ด‘๊ณ ๋กœ ๊ฐ€๋“ ์ฐจ ์žˆ์ง€ ์•Š์Šต๋‹ˆ๋‹ค. HackTricks๋Š” ์ƒ์—…์  ๋ชฉ์ ์„ ์œ„ํ•ด ๋งŒ๋“ค์–ด์ง€์ง€ ์•Š์•˜์Šต๋‹ˆ๋‹ค.

Caution

  • What should I do if some HackTricks page is based on my blog post but it isnโ€™t referenced?

์ •๋ง ์ฃ„์†กํ•ฉ๋‹ˆ๋‹ค. ์ด๋Ÿฐ ์ผ์ด ์žˆ์–ด์„œ๋Š” ์•ˆ ๋ฉ๋‹ˆ๋‹ค. Github ์ด์Šˆ, Twitter, Discord ๋“ฑ์œผ๋กœ ํ•ด๋‹น HackTricks ํŽ˜์ด์ง€์˜ ๋งํฌ์™€ ์—ฌ๋Ÿฌ๋ถ„ ๋ธ”๋กœ๊ทธ์˜ ๋งํฌ๋ฅผ ์•Œ๋ ค์ฃผ์‹œ๋ฉด ํ™•์ธ ํ›„ ๊ฐ€๋Šฅํ•œ ๋นจ๋ฆฌ ์ถœ์ฒ˜๋ฅผ ์ถ”๊ฐ€ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

Caution

  • What should I do if there is content from my blog in HackTricks and I donโ€™t want it there?

HackTricks์— ์—ฌ๋Ÿฌ๋ถ„์˜ ํŽ˜์ด์ง€ ๋งํฌ๊ฐ€ ํฌํ•จ๋˜์–ด ์žˆ์œผ๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์€ ์ด์ ์ด ์žˆ์Šต๋‹ˆ๋‹ค:

  • ์—ฌ๋Ÿฌ๋ถ„์˜ SEO๊ฐ€ ํ–ฅ์ƒ๋ฉ๋‹ˆ๋‹ค
  • ํ•ด๋‹น ์ฝ˜ํ…์ธ ๊ฐ€ 15๊ฐœ ์ด์ƒ์˜ ์–ธ์–ด๋กœ ๋ฒˆ์—ญ๋˜์–ด ๋” ๋งŽ์€ ์‚ฌ๋žŒ์ด ์ ‘๊ทผํ•  ์ˆ˜ ์žˆ๊ฒŒ ๋ฉ๋‹ˆ๋‹ค
  • HackTricks๋Š” ์‚ฌ๋žŒ๋“ค์—๊ฒŒ ์—ฌ๋Ÿฌ๋ถ„์˜ ํŽ˜์ด์ง€๋ฅผ ํ™•์ธํ•˜๋„๋ก ์žฅ๋ คํ•ฉ๋‹ˆ๋‹ค (์ผ๋ถ€ ํŽ˜์ด์ง€ ์†Œ์œ ์ž๋“ค์€ ์ž์‹ ์˜ ํŽ˜์ด์ง€๊ฐ€ HackTricks์— ํฌํ•จ๋œ ์ดํ›„ ๋ฐฉ๋ฌธ์ž๊ฐ€ ๋Š˜์—ˆ๋‹ค๊ณ  ์•Œ๋ ค์™”์Šต๋‹ˆ๋‹ค)

๊ทธ๋Ÿฌ๋‚˜ ๊ทธ๋ž˜๋„ HackTricks์—์„œ ์—ฌ๋Ÿฌ๋ถ„ ๋ธ”๋กœ๊ทธ์˜ ์ฝ˜ํ…์ธ ๋ฅผ ์ œ๊ฑฐํ•˜๊ธธ ์›ํ•˜์‹œ๋ฉด ์•Œ๋ ค์ฃผ์„ธ์š”. ์ €ํฌ๋Š” ํ™•์‹คํžˆ ์—ฌ๋Ÿฌ๋ถ„ ๋ธ”๋กœ๊ทธ๋กœ์˜ ๋ชจ๋“  ๋งํฌ๋ฅผ ์ œ๊ฑฐํ•˜๊ณ  ํ•ด๋‹น ๊ธฐ๋ฐ˜์˜ ๋ชจ๋“  ์ฝ˜ํ…์ธ ๋ฅผ ์‚ญ์ œํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

Caution

  • What should I do if I find copy-pasted content in HackTricks?

์šฐ๋ฆฌ๋Š” ํ•ญ์ƒ ์›์ €์ž์—๊ฒŒ ๋ชจ๋“  ํฌ๋ ˆ๋”ง์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ๋งŒ์•ฝ ์› ์ถœ์ฒ˜ ์—†์ด ๋ณต์‚ฌ-๋ถ™์—ฌ๋„ฃ๊ธฐ๋œ ์ฝ˜ํ…์ธ ๊ฐ€ ์žˆ๋Š” ํŽ˜์ด์ง€๋ฅผ ๋ฐœ๊ฒฌํ•˜์‹œ๋ฉด ์•Œ๋ ค์ฃผ์„ธ์š”. ๊ทธ๋Ÿฌ๋ฉด ์ €ํฌ๋Š” ํ•ด๋‹น ๋‚ด์šฉ์„ ์‚ญ์ œํ•˜๊ฑฐ๋‚˜, ํ…์ŠคํŠธ ์•ž์— ์ถœ์ฒ˜ ๋งํฌ๋ฅผ ์ถ”๊ฐ€ํ•˜๊ฑฐ๋‚˜, ์ถœ์ฒ˜ ๋งํฌ๋ฅผ ๋„ฃ์–ด ์žฌ์ž‘์„ฑํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

๋ผ์ด์„ ์Šค

Copyright ยฉ All rights reserved unless otherwise specified.

License Summary:

  • Attribution: You are free to:
  • Share โ€” copy and redistribute the material in any medium or format.
  • Adapt โ€” remix, transform, and build upon the material.

์ถ”๊ฐ€ ์กฐ๊ฑด:

  • Third-Party Content: ์ด ๋ธ”๋กœ๊ทธ/์ฑ…์˜ ์ผ๋ถ€๋Š” ๋‹ค๋ฅธ ๋ธ”๋กœ๊ทธ๋‚˜ ์ถœํŒ๋ฌผ์˜ ๋ฐœ์ทŒ๋ฌธ๊ณผ ๊ฐ™์€ ์ œ3์ž ์ถœ์ฒ˜์˜ ์ฝ˜ํ…์ธ ๋ฅผ ํฌํ•จํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋Ÿฌํ•œ ์ฝ˜ํ…์ธ ์˜ ์‚ฌ์šฉ์€ ๊ณต์ • ์‚ฌ์šฉ ์›์น™์— ๋”ฐ๋ฅด๊ฑฐ๋‚˜ ํ•ด๋‹น ์ €์ž‘๊ถŒ ๋ณด์œ ์ž๋กœ๋ถ€ํ„ฐ ๋ช…์‹œ์  ํ—ˆ๊ฐ€๋ฅผ ๋ฐ›์•„ ์ด๋ฃจ์–ด์ง‘๋‹ˆ๋‹ค. ์ œ3์ž ์ฝ˜ํ…์ธ ์˜ ํŠน์ • ๋ผ์ด์„ ์Šค ์ •๋ณด๋Š” ์› ์ถœ์ฒ˜๋ฅผ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค.
  • Authorship: HackTricks๊ฐ€ ์ž‘์„ฑํ•œ ์›๋ณธ ์ฝ˜ํ…์ธ ๋Š” ์ด ๋ผ์ด์„ ์Šค์˜ ์กฐ๊ฑด ์ ์šฉ์„ ๋ฐ›์Šต๋‹ˆ๋‹ค. ๊ณต์œ ํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•  ๋•Œ ์ €์ž๋ฅผ ํ‘œ๊ธฐํ•˜๋Š” ๊ฒƒ์„ ๊ถŒ์žฅํ•ฉ๋‹ˆ๋‹ค.

๋ฉด์ œ ์‚ฌํ•ญ:

  • Commercial Use: ์ด ์ฝ˜ํ…์ธ ์˜ ์ƒ์—…์  ์‚ฌ์šฉ์— ๊ด€ํ•œ ๋ฌธ์˜๋Š” ์—ฐ๋ฝํ•ด ์ฃผ์‹œ๊ธฐ ๋ฐ”๋ž๋‹ˆ๋‹ค.

์ด ๋ผ์ด์„ ์Šค๋Š” ์ฝ˜ํ…์ธ ์™€ ๊ด€๋ จ๋œ ์ƒํ‘œ๋‚˜ ๋ธŒ๋žœ๋”ฉ ๊ถŒ๋ฆฌ๋ฅผ ๋ถ€์—ฌํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ์ด ๋ธ”๋กœ๊ทธ/์ฑ…์— ํ‘œ์‹œ๋œ ๋ชจ๋“  ์ƒํ‘œ์™€ ๋ธŒ๋žœ๋”ฉ์€ ๊ฐ ๊ถŒ๋ฆฌ์ž์˜ ์†Œ์œ ์ž…๋‹ˆ๋‹ค.

HackTricks์— ์ ‘๊ทผํ•˜๊ฑฐ๋‚˜ ์‚ฌ์šฉํ•˜๋Š” ๊ฒฝ์šฐ, ์ด ๋ผ์ด์„ ์Šค ์กฐ๊ฑด์„ ์ค€์ˆ˜ํ•˜๋Š” ๋ฐ ๋™์˜ํ•˜๋Š” ๊ฒƒ์œผ๋กœ ๊ฐ„์ฃผ๋ฉ๋‹ˆ๋‹ค. ์ด ์กฐ๊ฑด์— ๋™์˜ํ•˜์ง€ ์•Š์œผ๋ฉด ์ด ์›น์‚ฌ์ดํŠธ์— ์ ‘๊ทผํ•˜์ง€ ๋งˆ์‹ญ์‹œ์˜ค.

๋ฉด์ฑ…์‚ฌํ•ญ

Caution

๋ณธ ์ฑ… โ€™HackTricksโ€™๋Š” ๊ต์œก์  ๋ฐ ์ •๋ณด ์ œ๊ณต ๋ชฉ์ ์„ ์œ„ํ•œ ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์ด ์ฑ… ๋‚ด์˜ ๋‚ด์šฉ์€ โ€˜์žˆ๋Š” ๊ทธ๋Œ€๋กœโ€™ ์ œ๊ณต๋˜๋ฉฐ, ์ €์ž์™€ ์ถœํŒ์‚ฌ๋Š” ์ด ์ฑ…์— ํฌํ•จ๋œ ์ •๋ณด, ์ œํ’ˆ, ์„œ๋น„์Šค ๋˜๋Š” ๊ด€๋ จ ๊ทธ๋ž˜ํ”ฝ์˜ ์™„์ „์„ฑ, ์ •ํ™•์„ฑ, ์‹ ๋ขฐ์„ฑ, ์ ํ•ฉ์„ฑ ๋˜๋Š” ๊ฐ€์šฉ์„ฑ์— ๋Œ€ํ•ด ๋ช…์‹œ์ ์ด๋“  ๋ฌต์‹œ์ ์ด๋“  ์–ด๋– ํ•œ ์ง„์ˆ ์ด๋‚˜ ๋ณด์ฆ๋„ ํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๋”ฐ๋ผ์„œ ์ด๋Ÿฌํ•œ ์ •๋ณด์— ์˜์กดํ•˜๋Š” ๊ฒƒ์€ ์ „์ ์œผ๋กœ ๋ณธ์ธ์˜ ์ฑ…์ž„์ž…๋‹ˆ๋‹ค.

์ €์ž์™€ ์ถœํŒ์‚ฌ๋Š” ์ด ์ฑ…์˜ ์‚ฌ์šฉ๊ณผ ๊ด€๋ จํ•˜์—ฌ ๋ฐœ์ƒํ•˜๋Š” ๋ฐ์ดํ„ฐ ์†์‹ค ๋˜๋Š” ์ด์ต ์†์‹ค์„ ํฌํ•จํ•˜๋˜ ์ด์— ๊ตญํ•œ๋˜์ง€ ์•Š๋Š” ๊ฐ„์ ‘์ ์ด๊ฑฐ๋‚˜ ๊ฒฐ๊ณผ์ ์ธ ์†ํ•ด ๋˜๋Š” ์–ด๋– ํ•œ ์†ํ•ด์— ๋Œ€ํ•ด์„œ๋„ ์ฑ…์ž„์„ ์ง€์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

๋˜ํ•œ, ์ด ์ฑ…์— ์„ค๋ช…๋œ ๊ธฐ๋ฒ•๊ณผ ํŒ์€ ๊ต์œก์ ์ด๊ณ  ์ •๋ณด ์ œ๊ณต ๋ชฉ์ ์„ ์œ„ํ•œ ๊ฒƒ์ด๋ฉฐ ๋ถˆ๋ฒ•์ ์ด๊ฑฐ๋‚˜ ์•…์˜์ ์ธ ํ™œ๋™์— ์‚ฌ์šฉ๋˜์–ด์„œ๋Š” ์•ˆ ๋ฉ๋‹ˆ๋‹ค. ์ €์ž์™€ ์ถœํŒ์‚ฌ๋Š” ์–ด๋– ํ•œ ๋ถˆ๋ฒ•์  ๋˜๋Š” ๋น„์œค๋ฆฌ์  ํ™œ๋™๋„ ์šฉ์ธํ•˜๊ฑฐ๋‚˜ ์ง€์ง€ํ•˜์ง€ ์•Š์œผ๋ฉฐ, ์ด ์ฑ…์— ํฌํ•จ๋œ ์ •๋ณด๋ฅผ ์‚ฌ์šฉํ•˜๋Š” ๊ฒƒ์€ ์‚ฌ์šฉ์ž์˜ ์œ„ํ—˜๊ณผ ์žฌ๋Ÿ‰์— ๋”ฐ๋ฆ…๋‹ˆ๋‹ค.

์‚ฌ์šฉ์ž๋Š” ์ด ์ฑ…์— ํฌํ•จ๋œ ์ •๋ณด๋ฅผ ๋ฐ”ํƒ•์œผ๋กœ ์ทจํ•œ ๋ชจ๋“  ํ–‰๋™์— ๋Œ€ํ•ด ๋‹จ๋…์œผ๋กœ ์ฑ…์ž„์„ ์ง€๋ฉฐ, ๊ธฐ๋ฒ•์ด๋‚˜ ํŒ์„ ๊ตฌํ˜„ํ•˜๋ ค ํ•  ๋•Œ๋Š” ํ•ญ์ƒ ์ „๋ฌธ๊ฐ€์˜ ์กฐ์–ธ๊ณผ ๋„์›€์„ ๊ตฌํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

์ด ์ฑ…์„ ์‚ฌ์šฉํ•จ์œผ๋กœ์จ ์‚ฌ์šฉ์ž๋Š” ์ €์ž์™€ ์ถœํŒ์ž๋ฅผ ์ด ์ฑ… ๋˜๋Š” ๊ทธ์— ํฌํ•จ๋œ ์ •๋ณด์˜ ์‚ฌ์šฉ์œผ๋กœ ์ธํ•ด ๋ฐœ์ƒํ•  ์ˆ˜ ์žˆ๋Š” ๋ชจ๋“  ์†ํ•ด, ์†์‹ค ๋˜๋Š” ํ”ผํ•ด์— ๋Œ€ํ•ด ๋ฉด์ฑ…ํ•˜๋Š” ๋ฐ ๋™์˜ํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค.

Tip

AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:HackTricks Training AWS Red Team Expert (ARTE)
GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training GCP Red Team Expert (GRTE) Azure ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks ์ง€์›ํ•˜๊ธฐ