{"id":477438,"date":"2023-08-09T09:14:50","date_gmt":"2023-08-09T09:14:50","guid":{"rendered":""},"modified":"2023-09-05T11:14:42","modified_gmt":"2023-09-05T11:14:42","slug":"heap-spray","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/heap-spray\/","title":{"rendered":"\ud799 \uc2a4\ud504\ub808\uc774"},"content":{"rendered":"<p>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uacf5\uaca9\uc758 \uc77c\ubd80\ub85c \uc784\uc758 \ucf54\ub4dc \uc2e4\ud589\uc744 \uc6a9\uc774\ud558\uac8c \ud558\uae30 \uc704\ud574 \ud574\ucee4\uac00 \uc0ac\uc6a9\ud558\ub294 \uae30\uc220\uc785\ub2c8\ub2e4. \uc774\ub294 \uc545\uc131 \ud398\uc774\ub85c\ub4dc\uac00 \ud3ec\ud568\ub41c \uc218\ub9ce\uc740 &quot;\ud799&quot; \ub370\uc774\ud130 \uad6c\uc870\ub97c \ud560\ub2f9\ud558\uc5ec \uc791\ub3d9\ud558\ubbc0\ub85c \uc608\ub97c \ub4e4\uc5b4 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c \ucde8\uc57d\uc810\uc73c\ub85c \uc778\ud574 \uacf5\uaca9\uc790\uc758 \ucf54\ub4dc\uac00 \uc2e4\ud589\ub420 \ud655\ub960\uc774 \ub192\uc544\uc9d1\ub2c8\ub2e4.<\/p>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774\uc758 \ud0c4\uc0dd\uacfc \uccab \ubc88\uc9f8 \uc5b8\uae09<\/h2>\n<p>\uc775\uc2a4\ud50c\ub85c\uc787 \uae30\uc220\uc778 \ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc778\ud130\ub137\uc774 \ub110\ub9ac \ubcf4\uae09\ub418\uace0 \uc0ac\uc774\ubc84 \ubcf4\uc548\uc774 \uc624\ub298\ub0a0\ub9cc\ud07c \uac15\ub825\ud558\uc9c0 \uc54a\uc558\ub358 1990\ub144\ub300 \ud6c4\ubc18\uacfc 2000\ub144\ub300 \ucd08\ubc18\uc5d0 \ubfcc\ub9ac\ub97c \ub450\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uccab \ubc88\uc9f8 \uc8fc\uc694 \uc5b8\uae09\uc740 \uc774 \uae30\uc220\uc5d0 \ub300\ud55c \ud3ec\uad04\uc801\uc778 \uc124\uba85\uacfc \uc608\ub97c \uc81c\uacf5\ud55c \uc724\ub9ac\uc801 \ud574\ucee4\uc774\uc790 \uc0ac\uc774\ubc84 \ubcf4\uc548 \uc804\ubb38\uac00\uc778 SkyLined\uc758 \uc791\uc5c5\uc5d0\uc11c\uc600\uc2b5\ub2c8\ub2e4. SkyLined\uc758 \ud1b5\ucc30\ub825\uc740 \uc704\ud611 \ubca1\ud130\ub85c\uc11c \ud799 \uc2a4\ud504\ub808\uc774\uc758 \uc2ec\uac01\uc131\uc744 \uc124\uba85\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub418\uc5c8\uc73c\uba70, \uc774\ub294 \uadf8 \uc601\ud5a5\uc744 \uc644\ud654\ud558\uae30 \uc704\ud55c \ub178\ub825\uc744 \uc99d\uac00\uc2dc\ud0a4\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774: \uc2ec\uce35 \uc870\uc0ac<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\uc5d0\ub294 \ub3d9\uc801 \uba54\ubaa8\ub9ac \ud560\ub2f9\uc5d0 \uc0ac\uc6a9\ub418\ub294 \ucef4\ud4e8\ud130 \uba54\ubaa8\ub9ac \uc601\uc5ed\uc778 \ud799\uc744 &quot;NOP \uc2ac\ub808\ub4dc&quot; \ub610\ub294 &quot;NOP \uc2ac\ub77c\uc774\ub4dc&quot;\ub77c\uace0\ub3c4 \ud558\ub294 \ud2b9\uc815 \ubc14\uc774\ud2b8 \uc2dc\ud000\uc2a4\uac00 \ud3ec\ud568\ub41c \ub370\uc774\ud130 \ub369\uc5b4\ub9ac\ub85c \ucc44\uc6b0\ub294 \uc791\uc5c5\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c \uc258\ucf54\ub4dc\uc778 \uc775\uc2a4\ud50c\ub85c\uc787\uc758 \uc2e4\uc81c \ud398\uc774\ub85c\ub4dc\ub294 \uc774 \uc2dc\ud000\uc2a4\uc758 \ub05d\uc5d0 \ubc30\uce58\ub429\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ubc30\uc5f4\uc740 \ucde8\uc57d\uc810\uc774 \uba85\ub839 \ud3ec\uc778\ud130 \uc81c\uc5b4\ub97c \ud5c8\uc6a9\ud558\ub294 \uacbd\uc6b0 \uae30\ubcf8\uc801\uc73c\ub85c \uc2e4\ud589 \ud750\ub984\uc744 \ud398\uc774\ub85c\ub4dc\ub85c &quot;\uc548\ub0b4&quot;\ud569\ub2c8\ub2e4.<\/p>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uba54\ubaa8\ub9ac \ubc84\uadf8(\uc77c\ubc18\uc801\uc73c\ub85c \ubc84\ud37c \uc624\ubc84\ud50c\ub85c \ub610\ub294 use-after-free \ucde8\uc57d\uc810)\uac00 \uc788\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ud504\ub85c\uadf8\ub7a8\uc5d0 \ub300\ud55c \uacf5\uaca9\uc5d0 \uc8fc\ub85c \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ubc84\uadf8\ub85c \uc778\ud574 \uacf5\uaca9\uc790\ub294 \uba54\ubaa8\ub9ac \uc8fc\uc18c\ub97c \ub36e\uc5b4\uc4f8 \uc218 \uc788\uc73c\uba70, \uc774\ub97c \uc815\ud655\ud558\uac8c \uc870\uc791\ud558\uba74 \ud799\uc744 \uc9c1\uc811 \uc2e4\ud589\ud558\ub294 \ub370 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc774\ub97c \uc704\ud574 \ud799\uc744 &quot;\uc900\ube44&quot;\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub418\ubbc0\ub85c \ub9ac\ub514\ub809\uc158\ub41c \uc2e4\ud589\uc774 \uacf5\uaca9\uc790\uc758 \ud398\uc774\ub85c\ub4dc\uc5d0 \ub3c4\ub2ec\ud560 \uac00\ub2a5\uc131\uc774 \ub192\uc544\uc9d1\ub2c8\ub2e4.<\/p>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774 \uc791\ub3d9 \ubc29\uc2dd: \uae30\uc220 \ubd84\uc11d<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc6d0\ud558\ub294 \ubc14\uc774\ud2b8 \uc2dc\ud000\uc2a4\uc758 \ubcf5\uc0ac\ubcf8\uc73c\ub85c \ud799 \uacf5\uac04\uc744 \uac00\ub4dd \ucc44\uc6b0\ub294 \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud569\ub2c8\ub2e4. \uc808\ucc28\uc758 \ub2e8\uc21c\ud654\ub41c \uc21c\uc11c\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc6f9 \ud658\uacbd\uc5d0\uc11c JavaScript\ub97c \ud1b5\ud574 \uc2e4\ud589\ub418\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc2b5\ub2c8\ub2e4.<\/li>\n<li>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uacf5\uaca9\uc790\uc758 \ub370\uc774\ud130\uac00 \ud3ec\ud568\ub41c \uc5ec\ub7ec \uba54\ubaa8\ub9ac \ube14\ub85d\uc73c\ub85c \ud799\uc744 \ucc44\uc6c1\ub2c8\ub2e4.<\/li>\n<li>\uc2a4\ud504\ub808\uc774\ub41c \ub370\uc774\ud130\ub294 \uc775\uc2a4\ud50c\ub85c\uc787\uc758 \ud398\uc774\ub85c\ub4dc\ub85c \uc774\uc5b4\uc9c0\ub294 NOP \uc2ac\ub808\ub4dc\ub85c \uad6c\uc131\ub429\ub2c8\ub2e4.<\/li>\n<li>\uc545\uc6a9 \uac00\ub2a5\ud55c \ubc84\uadf8\uac00 \uc788\ub294 \uacbd\uc6b0 \uc2e4\ud589\uc774 \uc784\uc758\uc758 \uba54\ubaa8\ub9ac \uc8fc\uc18c\ub85c \ub9ac\ub514\ub809\uc158\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<li>\ubd84\uc0b0\ub41c \ub370\uc774\ud130\uac00 \ub110\ub9ac \uc874\uc7ac\ud55c\ub2e4\ub294 \uc810\uc744 \uace0\ub824\ud558\uba74 \uc774\ub7ec\ud55c \ub9ac\ub514\ub809\uc158\uc774 \uacf5\uaca9\uc790\uc758 \ud398\uc774\ub85c\ub4dc\ub85c \uc774\uc5b4\uc9c8 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4.<\/li>\n<li>\uadf8\ub7f0 \ub2e4\uc74c \ud398\uc774\ub85c\ub4dc\uac00 \uc2e4\ud589\ub418\uc5b4 \uacf5\uaca9\uc790\uc5d0\uac8c \uc6d0\ud558\ub294 \uacb0\uacfc(\uc885\uc885 \uc2dc\uc2a4\ud15c \uc6d0\uaca9 \uc81c\uc5b4)\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774\uc758 \uc8fc\uc694 \ud2b9\uc9d5<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\uc758 \ud2b9\uc9d5\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li><strong>\uacf5\uaca9 \uc131\uacf5\ub960 \uc99d\uac00:<\/strong> \ud799 \uc2a4\ud504\ub808\uc774\ub294 \uba54\ubaa8\ub9ac \uc190\uc0c1 \ucde8\uc57d\uc810\uc744 \uc131\uacf5\uc801\uc73c\ub85c \uc545\uc6a9\ud560 \uac00\ub2a5\uc131\uc744 \ub192\uc785\ub2c8\ub2e4.<\/li>\n<li><strong>\uae30\uc5b5 \uc870\uc791:<\/strong> \uc784\uc758\uc758 \ucf54\ub4dc \uc2e4\ud589\uc744 \uc6a9\uc774\ud558\uac8c \ud558\uae30 \uc704\ud574 \ud504\ub85c\uc138\uc2a4 \uba54\ubaa8\ub9ac\uc758 \uc0c1\ud0dc\ub97c \uc870\uc791\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c \uc545\uc6a9 \uac00\ub2a5:<\/strong> \ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc6f9 \ube0c\ub77c\uc6b0\uc800\ub098 \uc11c\ubc84 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub4f1 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0 \ubc30\ud3ec\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<li><strong>\uc885\uc885 \ub2e4\ub978 \uacf5\uaca9\uacfc \uacb0\ud569\ub429\ub2c8\ub2e4:<\/strong> \ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uc6d0\ud558\ub294 \ubaa9\uc801\uc744 \ub2ec\uc131\ud558\uae30 \uc704\ud574 \ub2e4\ub978 \ucde8\uc57d\uc810 \uacf5\uaca9\uacfc \ud568\uaed8 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774\uc758 \uc885\ub958<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774 \uae30\uc220\uc740 \ud65c\uc6a9 \ud658\uacbd\uacfc \ud398\uc774\ub85c\ub4dc \uc804\ub2ec \ud2b9\uc131\uc5d0 \ub530\ub77c \ubd84\ub958\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th>\uc720\ud615<\/th>\n<th>\uc124\uba85<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>JavaScript \ud799 \uc2a4\ud504\ub808\uc774<\/td>\n<td>\uc6f9 \uae30\ubc18 \uacf5\uaca9\uc5d0 \uc0ac\uc6a9\ub418\ub294 JavaScript\ub294 \uc545\uc131 \ud398\uc774\ub85c\ub4dc\ub85c \ud799\uc744 \ucc44\uc6b0\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\ud50c\ub798\uc2dc \ud799 \uc2a4\ud504\ub808\uc774<\/td>\n<td>\uc77c\ubc18\uc801\uc73c\ub85c \uc6f9 \ud658\uacbd\uc5d0\uc11c Adobe Flash\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc2a4\ud504\ub808\uc774\ub97c \uc218\ud589\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\uc790\ubc14 \ud799 \uc2a4\ud504\ub808\uc774<\/td>\n<td>\uc6f9 \uae30\ubc18 \uacf5\uaca9\uc758 \ub610 \ub2e4\ub978 \ubc29\ubc95\uc778 \uc2a4\ud504\ub808\uc774\uc5d0 Java \uc560\ud50c\ub9bf\uc744 \ud65c\uc6a9\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\uc815\ubc00 \ud799 \uc2a4\ud504\ub808\uc774<\/td>\n<td>\ud799\uc758 \ud2b9\uc815 \uac1c\uccb4\ub97c \ub300\uc0c1\uc73c\ub85c \ud558\uba70 use-after-free \uacf5\uaca9\uc5d0 \uc720\uc6a9\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\ud799 \uc2a4\ud504\ub808\uc774\uc758 \uc751\uc6a9, \uacfc\uc81c \ubc0f \uc194\ub8e8\uc158<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\ub294 \uc8fc\ub85c \uc0ac\uc774\ubc84 \uc138\uacc4\uc758 \uacf5\uaca9\uc790\uac00 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc774\ub294 \uc815\uad50\ud55c \uc545\uc131\ucf54\ub4dc\ub97c \uc0dd\uc131\ud558\uace0 \uc9c0\ub2a5\ud615 \uc9c0\uc18d \uc704\ud611(APT)\uc744 \uc218\ud589\ud558\ub294 \ub370 \ub110\ub9ac \uc0ac\uc6a9\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ubcf4\uc548 \uad00\uc810\uc5d0\uc11c \ud799 \uc2a4\ud504\ub808\uc774\uc758 \uc8fc\uc694 \uacfc\uc81c\ub294 \ud0d0\uc9c0 \ubc0f \uc608\ubc29\uc785\ub2c8\ub2e4. \uae30\uc874\uc758 \uc11c\uba85 \uae30\ubc18 \ubcf4\uc548 \uc194\ub8e8\uc158\uc740 \ub3d9\uc801 \ud2b9\uc131\uc73c\ub85c \uc778\ud574 \ud799 \uc2a4\ud504\ub808\uc774 \uacf5\uaca9\uc744 \uc2dd\ubcc4\ud558\ub294 \ub370 \uc5b4\ub824\uc6c0\uc744 \uacaa\uc2b5\ub2c8\ub2e4. \ub530\ub77c\uc11c \ucd5c\uc2e0 \uc194\ub8e8\uc158\uc740 \ub3d9\uc791 \uae30\ubc18 \ud0d0\uc9c0\uc640 ASLR(Address Space Layout Randomization) \ubc0f DEP(Data Execution Prevention)\uc640 \uac19\uc740 \uc545\uc6a9 \uc644\ud654 \uae30\uc220\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4.<\/p>\n<h2>\ube44\uad50 \ubc0f \ud2b9\uc131<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774\ub97c \uc2a4\ud0dd \ud53c\ubc84\ud305 \ubc0f ROP(\ubc18\ud658 \uc9c0\ud5a5 \ud504\ub85c\uadf8\ub798\ubc0d)\uc640 \uac19\uc740 \ub2e4\ub978 \uc720\uc0ac\ud55c \uae30\uc220\uacfc \ube44\uad50\ud560 \ub54c \ud799 \uc2a4\ud504\ub808\uc774\ub294 \ub2e8\uc21c\uc131\uacfc \ub192\uc740 \uc131\uacf5\ub960\uc774 \ub450\ub4dc\ub7ec\uc9d1\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uac01 \uae30\uc220\uc5d0\ub294 \uace0\uc720\ud55c \ud2b9\uc131\uacfc \uc0ac\uc6a9 \uc0ac\ub840\uac00 \uc788\uc9c0\ub9cc \ubaa8\ub450 \uba54\ubaa8\ub9ac \uc190\uc0c1 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\uc5ec \uc784\uc758 \ucf54\ub4dc\ub97c \uc2e4\ud589\ud558\ub294 \uae30\uc220\uc785\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th>\uae30\uc220<\/th>\n<th>\ud615\uc9c8<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\ud799 \uc2a4\ud504\ub808\uc774<\/td>\n<td>\ub2e8\uc21c\ud558\uba70 \uba54\ubaa8\ub9ac \uc190\uc0c1 \uacf5\uaca9\uc758 \uc131\uacf5\ub960\uc744 \ub192\uc774\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\uc2a4\ud0dd \ud53c\ubc84\ud305<\/td>\n<td>\ubcf5\uc7a1\ud558\uba70 \uc2a4\ud0dd \ud3ec\uc778\ud130\ub97c \ub2e4\ub978 \uc704\uce58\ub85c \ub9ac\ub514\ub809\uc158\ud558\uba70 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c \uacf5\uaca9\uc5d0 \uc790\uc8fc \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>ROP<\/td>\n<td>\ubcf5\uc7a1\ud558\uba70 \uba54\ubaa8\ub9ac\uc758 \uae30\uc874 \ucf54\ub4dc \uc870\uac01(\u201c\uac00\uc82f\u201d)\uc744 \ud65c\uc6a9\ud558\uc5ec \ud2b9\uc815 \uc545\uc6a9 \uc644\ud654\ub97c \uc6b0\ud68c\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\ubbf8\ub798 \uc804\ub9dd\uacfc \uae30\uc220<\/h2>\n<p>\uba54\ubaa8\ub9ac \ubb34\uc791\uc704\ud654 \ubc0f \uc2e4\ud589 \ubc29\uc9c0 \uae30\uc220\uc758 \uad6c\ud604\uc73c\ub85c \uc778\ud574 \ud799 \uc2a4\ud504\ub808\uc774\uc758 \ud6a8\uc728\uc131\uc740 \uc2dc\uac04\uc774 \uc9c0\ub0a8\uc5d0 \ub530\ub77c \uac10\uc18c\ud588\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \uacf5\uaca9\uc790\ub294 \uc774\ub7ec\ud55c \ubcf4\ud638 \uae30\ub2a5\uc744 \uc6b0\ud68c\ud558\uae30 \uc704\ud574 \ub354\uc6b1 \uc815\uad50\ud558\uace0 \uc815\ubc00\ud55c \ud799 \uc2a4\ud504\ub808\uc774 \uae30\uc220\uc744 \uac1c\ubc1c\ud558\uba74\uc11c \uacc4\uc18d\ud574\uc11c \ubc29\ubc95\uc744 \ubc1c\uc804\uc2dc\ud0a4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, JIT(Just-In-Time) \uc2a4\ud504\ub808\uc774\ub294 \uba54\ubaa8\ub9ac\uc5d0\uc11c JIT \ucef4\ud30c\uc77c \ucf54\ub4dc\ub97c \uc870\uc791\ud558\uc5ec DEP\ub97c \uc6b0\ud68c\ud558\uae30 \uc704\ud574 \uac1c\ubc1c\ub41c \uae30\uc220\uc774\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\ud504\ub85d\uc2dc \uc11c\ubc84 \ubc0f \ud799 \uc2a4\ud504\ub808\uc774<\/h2>\n<p>\ud799 \uc2a4\ud504\ub808\uc774 \uacf5\uaca9\uc758 \ub9e5\ub77d\uc5d0\uc11c \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \ud65c\uc6a9\ud558\uc5ec \uacf5\uaca9\uc758 \ucd9c\ucc98\ub97c \uc228\uae38 \uc218 \uc788\uc73c\ubbc0\ub85c \uc870\uc0ac\uc790\uac00 \uacf5\uaca9\uc758 \ucd9c\ucc98\ub97c \ucd94\uc801\ud558\uae30\uac00 \ub354 \uc5b4\ub824\uc6cc\uc9d1\ub2c8\ub2e4. \ubc18\uba74, \ubcf4\uc548 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \ubc29\uc5b4 \uacc4\uce35 \uc5ed\ud560\uc744 \ud558\uc5ec \uc54c\ub824\uc9c4 \uc545\uc131 \ud2b8\ub798\ud53d\uc744 \ucc28\ub2e8\ud558\uac70\ub098 \ud074\ub77c\uc774\uc5b8\ud2b8 \uc2dc\uc2a4\ud15c\uc774 \uc7a0\uc7ac\uc801\uc73c\ub85c \uc720\ud574\ud55c \ucf58\ud150\uce20\uc5d0 \uc9c1\uc811 \ub178\ucd9c\ub418\uc9c0 \uc54a\ub3c4\ub85d \uaca9\ub9ac\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.corelan.be\/index.php\/2011\/12\/31\/exploit-writing-tutorial-part-11-heap-spraying-demystified\/\" target=\"_new\" rel=\"noopener nofollow\">\ud799 \uc2a4\ud504\ub808\uc774 \uae30\ubcf8 \uc0ac\ud56d<\/a><\/li>\n<li><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2020\/03\/09\/understanding-exploit-mitigations\/\" target=\"_new\" rel=\"noopener nofollow\">\uc545\uc6a9 \uc644\ud654 \uc774\ud574<\/a><\/li>\n<li><a href=\"https:\/\/www.usenix.org\/system\/files\/login\/articles\/105484-Stearns.pdf\" target=\"_new\" rel=\"noopener nofollow\">\uba54\ubaa8\ub9ac \uc190\uc0c1 \uacf5\uaca9 \ubc0f \ubc29\uc5b4<\/a><\/li>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/Heap_spraying\" target=\"_new\" rel=\"noopener nofollow\">\ud799 \uc2a4\ud504\ub808\uc774\uc758 OWASP<\/a><\/li>\n<\/ul>","protected":false},"featured_media":468527,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477438","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Heap Spray: A Comprehensive Exploration<\/mark>","faq_items":[{"question":"What is Heap Spray?","answer":"<p>Heap Spray is an exploit technique used by hackers to increase the chances of executing arbitrary code in a software program. This is done by populating a large section of memory with malicious code, typically to exploit software vulnerabilities like buffer overflows or use-after-free errors.<\/p>"},{"question":"What is the history of Heap Spray?","answer":"<p>Heap spraying has its origins in the late 1990s and early 2000s. It was first prominently mentioned by the cybersecurity expert SkyLined, who provided comprehensive descriptions and examples of the technique.<\/p>"},{"question":"How does Heap Spray work?","answer":"<p>Heap spray works by filling a region of a computer's memory (the heap) with multiple blocks of memory containing the attacker's data. This increases the likelihood that a vulnerability will lead to the execution of the attacker's payload.<\/p>"},{"question":"What are the key features of Heap Spray?","answer":"<p>Heap spray's key features include increasing the success rate of attacks, manipulating memory, being exploitable in various environments, and often being paired with other exploits.<\/p>"},{"question":"What types of Heap Spray exist?","answer":"<p>Heap spray techniques vary based on the exploitation environment and the nature of the payload delivery. They include JavaScript Heap Spray, Flash Heap Spray, Java Heap Spray, and Precision Heap Spray.<\/p>"},{"question":"How is Heap Spray used and what problems does it present?","answer":"<p>Heap spraying is primarily used by attackers to exploit software vulnerabilities. The main challenge from a security perspective is its detection and prevention. Modern solutions rely on behavior-based detection and exploit mitigation techniques like Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP).<\/p>"},{"question":"How does Heap Spray compare to other similar techniques?","answer":"<p>Compared to techniques like stack pivoting and return-oriented programming (ROP), heap spraying stands out for its simplicity and high success rate. However, all these techniques aim to exploit memory corruption vulnerabilities to execute arbitrary code.<\/p>"},{"question":"What is the future of Heap Spray?","answer":"<p>The effectiveness of heap spray is being reduced over time with the implementation of memory randomization and execution prevention techniques. However, attackers continue to evolve their methods, creating more sophisticated heap spray techniques to bypass these protections.<\/p>"},{"question":"What is the relationship between proxy servers and Heap Spray?","answer":"<p>Proxy servers can be used in the context of a heap spray attack to mask the origin of the attack, making it harder for investigators to trace it back. On the other hand, secure proxy servers can also serve as a layer of defense, blocking known malicious traffic or isolating client systems from potentially harmful content.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/477438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/477438\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/468527"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=477438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}