{"id":478956,"date":"2023-08-09T09:40:56","date_gmt":"2023-08-09T09:40:56","guid":{"rendered":""},"modified":"2023-09-05T11:17:54","modified_gmt":"2023-09-05T11:17:54","slug":"session-fixation-attack","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/session-fixation-attack\/","title":{"rendered":"\uc138\uc158 \uace0\uc815 \uacf5\uaca9"},"content":{"rendered":"<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158, \ud2b9\ud788 \uc138\uc158 \uad00\ub9ac \uba54\ucee4\ub2c8\uc998\uc5d0 \uc758\uc874\ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ub300\uc0c1\uc73c\ub85c \ud558\ub294 \ubcf4\uc548 \ucde8\uc57d\uc810\uc785\ub2c8\ub2e4. \uc774\ub294 \uc0ac\uc6a9\uc790\uc758 \uac1c\uc778 \uc815\ubcf4 \ubc0f \ubbfc\uac10\ud55c \uc815\ubcf4\uc5d0 \ub300\ud55c \uc2ec\uac01\ud55c \uc704\ud611\uc73c\ub85c \uac04\uc8fc\ub429\ub2c8\ub2e4. \uacf5\uaca9\uc790\ub294 \uc774 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud558\uc5ec \uc0ac\uc6a9\uc790\uc758 \uc138\uc158 ID\ub97c \uc54c\ub824\uc9c4 \uac12\uc73c\ub85c \uc124\uc815\ud558\uc5ec \uc0ac\uc6a9\uc790\uc758 \uc138\uc158\uc744 \ud558\uc774\uc7ac\ud0b9\ud558\uace0, \ubb34\ub2e8 \uc561\uc138\uc2a4 \uad8c\ud55c\uc744 \uc5bb\uace0, \uc7a0\uc7ac\uc801\uc73c\ub85c \ud53c\ud574\uc790\ub97c \ub300\uc2e0\ud558\uc5ec \uc545\uc758\uc801\uc778 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc758 \uae30\uc6d0\uacfc \ucd5c\ucd08 \uc5b8\uae09\uc758 \uc5ed\uc0ac<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc758 \uac1c\ub150\uc740 2000\ub144\ub300 \ucd08\ubc18\uc5d0 \ucc98\uc74c\uc73c\ub85c \ud655\uc778\ub418\uace0 \ub17c\uc758\ub418\uc5c8\uc2b5\ub2c8\ub2e4. 2002\ub144 \uc774\uc2a4\ub77c\uc5d8 \ubcf4\uc548 \uc5f0\uad6c\uc6d0\uc778 Amit Klein\uc740 Black Hat Briefings \ucee8\ud37c\ub7f0\uc2a4\uc5d0\uc11c \uc774 \uc6a9\uc5b4\ub97c \ub9cc\ub4e4\uc5b4 \uacf5\uaca9 \uae30\uc220\uc744 \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4. \uadf8\ub294 \uacf5\uaca9\uc790\uac00 \uc138\uc158 ID\ub97c \uc870\uc791\ud558\uc5ec \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ubcf4\uc548\uc744 \uc190\uc0c1\uc2dc\ud0ac \uc218 \uc788\ub294 \ubc29\ubc95\uc744 \uc2dc\uc5f0\ud588\uc2b5\ub2c8\ub2e4. \uadf8 \uc774\ud6c4\ub85c \uc774 \uacf5\uaca9\uc740 \uc6f9 \uac1c\ubc1c\uc790\uc640 \ubcf4\uc548 \uc804\ubb38\uac00 \ubaa8\ub450\uc5d0\uac8c \uc911\uc694\ud55c \uad00\uc2ec\uc0ac\ub85c \ub0a8\uc544 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \uc815\ubcf4\uc785\ub2c8\ub2e4. \uc138\uc158 \uace0\uc815 \uacf5\uaca9 \uc8fc\uc81c \ud655\uc7a5.<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uc138\uc158 \uad00\ub9ac \ud504\ub85c\uc138\uc2a4\ub97c \uc545\uc6a9\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc73c\ub85c \uc0ac\uc6a9\uc790\uac00 \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \ub85c\uadf8\uc778\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc740 \uace0\uc720\ud55c \uc138\uc158 ID\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774 ID\ub294 \uc0ac\uc774\ud2b8\ub97c \ubc29\ubb38\ud558\ub294 \ub3d9\uc548 \uc0ac\uc6a9\uc790\uc758 \uc138\uc158\uc744 \uc2dd\ubcc4\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc138\uc158 ID\ub294 \ucfe0\ud0a4\ub098 URL\uc5d0 \uc800\uc7a5\ub418\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc73c\uba70 \uc138\uc158 \uc0c1\ud0dc\ub97c \uc720\uc9c0\ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\uc790 \ube0c\ub77c\uc6b0\uc800\uc640 \uc6f9 \uc11c\ubc84 \uac04\uc5d0 \uc804\ub2ec\ub429\ub2c8\ub2e4.<\/p>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0\uc11c \uacf5\uaca9\uc790\ub294 \uacf5\uaca9\uc790\uac00 \uc81c\uc5b4\ud558\ub294 \ubbf8\ub9ac \uacb0\uc815\ub41c \uc138\uc158 ID\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud53c\ud574\uc790\ub97c \uc18d\uc785\ub2c8\ub2e4. \uc774\ub97c \ub2ec\uc131\ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\ub418\ub294 \uba87 \uac00\uc9c0 \ubc29\ubc95\uc774 \uc788\uc2b5\ub2c8\ub2e4:<\/p>\n<ol>\n<li>\n<p><strong>\ucd08\uae30\ud654\ub418\uc9c0 \uc54a\uc740 \uc138\uc158<\/strong>: \uacf5\uaca9\uc790\ub294 \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\ud560 \ub54c\uae4c\uc9c0 \uc0ac\uc6a9\uc790\uc758 \uc138\uc158 ID\ub97c \ucd08\uae30\ud654\ud558\uc9c0 \ubabb\ud558\ub294 \ucde8\uc57d\ud55c \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc811\uc18d\ud569\ub2c8\ub2e4. \uacf5\uaca9\uc790\ub294 \uc0ac\uc774\ud2b8\uc5d0\uc11c \uc790\uc2e0\uc758 \uc138\uc158 ID\ub97c \ud68d\ub4dd\ud55c \ud6c4 \ud53c\ud574\uc790\uac00 \uc81c\uacf5\ub41c \uc138\uc158 ID\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub85c\uadf8\uc778\ud558\ub3c4\ub85d \uc720\ub3c4\ud558\uc5ec \ubb38\uc81c\ub97c \ud574\uacb0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud53c\ud574\uc790\uc758 \uc138\uc158\uc744 \uacf5\uaca9\uc790\uc758 \ud1b5\uc81c\ub85c \uc804\ud658\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 ID \uc608\uce21<\/strong>: \uacf5\uaca9\uc790\ub294 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\uc11c \uc0dd\uc131\ub41c \uc138\uc158 ID\ub97c \ucd94\uce21\ud558\uac70\ub098 \uc608\uce21\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc608\uce21 \uac00\ub2a5\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc138\uc158 ID\ub97c \uc0dd\uc131\ud558\ub294 \uacbd\uc6b0 \uacf5\uaca9\uc790\ub294 \ubbf8\ub9ac \uc138\uc158 ID\ub97c \ub9cc\ub4e4\uc5b4 \ud53c\ud574\uc790\uc5d0\uac8c \uac15\uc81c\ub85c \uc801\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 ID \uc81c\uacf5<\/strong>: \uacf5\uaca9\uc790\ub294 \uc720\ud6a8\ud55c \uc138\uc158 ID\uac00 \ud3ec\ud568\ub41c \ub9c1\ud06c\ub97c \ud53c\ud574\uc790\uc5d0\uac8c \ubcf4\ub0bc \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud53c\ud574\uc790\uac00 \ub9c1\ud06c\ub97c \ud074\ub9ad\ud558\uba74 \uc138\uc158\uc774 \uc81c\uacf5\ub41c ID\ub85c \uace0\uc815\ub418\uc5b4 \uacf5\uaca9\uc790\uac00 \uc774\ub97c \uc81c\uc5b4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc758 \ub0b4\ubd80 \uad6c\uc870. \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc774 \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd.<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ub2e4\uc74c \ub2e8\uacc4\uac00 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc138\uc158 ID \uc5bb\uae30<\/strong>: \uacf5\uaca9\uc790\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc811\uc18d\ud558\uac70\ub098 \uc138\uc158 ID \uc0dd\uc131 \uacfc\uc815\uc744 \uc608\uce21\ud558\uc5ec \uc720\ud6a8\ud55c \uc138\uc158 ID\ub97c \ud68d\ub4dd\ud55c\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 ID \uacf5\uc720<\/strong>: \uacf5\uaca9\uc790\ub294 \ud68d\ub4dd\ud55c \uc138\uc158 ID\ub97c \ud53c\ud574\uc790\uc640 \uacf5\uc720\ud558\uc5ec \uc774\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub300\uc0c1 \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \ub85c\uadf8\uc778\ud558\ub3c4\ub85d \uc720\ub3c4\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud53c\ud574\uc790\uac00 \ub85c\uadf8\uc778\ud568<\/strong>: \ud53c\ud574\uc790\ub294 \uacf5\uaca9\uc790\uac00 \uc81c\uacf5\ud55c \uc138\uc158 ID\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc790\uc2e0\ub3c4 \ubaa8\ub974\uac8c \ub85c\uadf8\uc778\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 \ud558\uc774\uc7ac\ud0b9<\/strong>: \ud53c\ud574\uc790\uc758 \uc138\uc158\uc774 \uacf5\uaca9\uc790\uac00 \uc81c\uacf5\ud55c ID\ub85c \uace0\uc815\ub418\uba74 \uacf5\uaca9\uc790\ub294 \uc138\uc158\uc744 \uc7a5\uc545\ud558\uace0 \ud53c\ud574\uc790\ub97c \ub300\uc2e0\ud558\uc5ec \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc758 \uc8fc\uc694 \ud2b9\uc9d5\uc744 \ubd84\uc11d\ud569\ub2c8\ub2e4.<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc740 \uac15\ub825\ud55c \uc704\ud611\uc774 \ub418\ub294 \uba87 \uac00\uc9c0 \uc8fc\uc694 \uae30\ub2a5\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc740\ubc00\ud55c \ucc29\ucde8<\/strong>: \uacf5\uaca9\uc790\uac00 \ud53c\ud574\uc790\uc758 \uc790\uaca9 \uc99d\uba85\uc744 \ubb34\ucc28\ubcc4 \ub300\uc785\ud558\uac70\ub098 \uc801\uadf9\uc801\uc73c\ub85c \uac00\ub85c\ucc4c \ud544\uc694\uac00 \uc5c6\uae30 \ub54c\ubb38\uc5d0 \uacf5\uaca9\uc740 \uc0c1\ub300\uc801\uc73c\ub85c \uc740\ubc00\ud558\uace0 \ud0d0\uc9c0\ud558\uae30 \uc5b4\ub824\uc6b8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc900\ube44 \ubc0f \uc0ac\ud68c \uacf5\ud559<\/strong>: \uacf5\uaca9\uc774 \uc131\uacf5\uc801\uc73c\ub85c \uc2e4\ud589\ub418\uae30 \uc704\ud574\uc11c\ub294 \uc0ac\ud68c \uacf5\ud559\uc744 \ud65c\uc6a9\ud558\uc5ec \ud53c\ud574\uc790\uac00 \uc81c\uacf5\ub41c \uc138\uc158 ID\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc18d\uc774\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 \uad00\ub9ac \ucde8\uc57d\uc810<\/strong>: \uc774 \uacf5\uaca9\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc138\uc158 \uad00\ub9ac\ub97c \ucc98\ub9ac\ud558\ub294 \ubc29\uc2dd\uc758 \ucde8\uc57d\uc810\uc744 \uac15\uc870\ud558\uace0 \uc548\uc804\ud55c \uc138\uc158 \ucc98\ub9ac \uba54\ucee4\ub2c8\uc998\uc758 \ud544\uc694\uc131\uc744 \uac15\uc870\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc778\uc99d \uc6b0\ud68c<\/strong>: \uacf5\uaca9\uc790\ub294 \uc138\uc158\uc744 \uc54c\ub824\uc9c4 \uac12\uc73c\ub85c \uace0\uc815\ud568\uc73c\ub85c\uc368 \uc77c\ubc18\uc801\uc778 \uc778\uc99d \ud504\ub85c\uc138\uc2a4\ub97c \uc6b0\ud68c\ud558\uc5ec \ubb34\ub2e8 \uc561\uc138\uc2a4\ub97c \uc5bb\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc5b4\ub5a4 \uc720\ud615\uc758 \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc774 \uc874\uc7ac\ud558\ub294\uc9c0 \uc791\uc131\ud558\uc2ed\uc2dc\uc624. \ud45c\uc640 \ubaa9\ub85d\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc791\uc131\ud558\uc138\uc694.<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc740 \ub2e4\uc591\ud55c \uae30\uc900\uc5d0 \ub530\ub77c \ubd84\ub958\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h3>\uacf5\uaca9 \uc804\ub7b5 \uae30\ubc18:<\/h3>\n<ol>\n<li>\uc0ac\uc804 \ub85c\uadf8\uc778 \uace0\uc815: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uac00 \ub85c\uadf8\uc778\ud558\uae30 \uc804\uc5d0 \uc138\uc158 ID\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n<li>\ub85c\uadf8\uc778 \ud6c4 \uace0\uc815: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uac00 \ub85c\uadf8\uc778\ud55c \ud6c4 \uc138\uc158 ID\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h3>\uc138\uc158 ID \uc18c\uc2a4 \uae30\uc900:<\/h3>\n<ol>\n<li>\uc608\uce21 \uac00\ub2a5\ud55c \uc138\uc158 ID: \uacf5\uaca9\uc790\ub294 \uc54c\uace0\ub9ac\uc998\uc774\ub098 \ud328\ud134\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc138\uc158 ID\ub97c \uc608\uce21\ud569\ub2c8\ub2e4.<\/li>\n<li>\ub3c4\ub09c\ub2f9\ud55c \uc138\uc158 ID: \uacf5\uaca9\uc790\ub294 \ub2e4\ub978 \uc0ac\uc6a9\uc790\ub098 \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc138\uc158 ID\ub97c \ud6d4\uce69\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h3>\ub300\uc0c1 \uc138\uc158 \uae30\uc900:<\/h3>\n<ol>\n<li>\uc0ac\uc6a9\uc790 \uc138\uc158 \uace0\uc815: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uc758 \uacc4\uc815\uc744 \uc81c\uc5b4\ud558\uae30 \uc704\ud574 \ud53c\ud574\uc790\uc758 \uc138\uc158\uc744 \uc218\uc815\ud569\ub2c8\ub2e4.<\/li>\n<li>\uad00\ub9ac\uc790 \uc138\uc158 \uace0\uc815: \uacf5\uaca9\uc790\ub294 \uc0c1\uc2b9\ub41c \uad8c\ud55c\uc744 \uc5bb\uae30 \uc704\ud574 \uad00\ub9ac\uc790 \uc138\uc158\uc744 \ud45c\uc801\uc73c\ub85c \uc0bc\uc2b5\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>Session fixation \uacf5\uaca9\uc758 \ud65c\uc6a9\ubc29\ubc95\uacfc \uc774\uc5d0 \ub530\ub978 \ubb38\uc81c\uc810 \ubc0f \ud574\uacb0\ubc29\ubc95\uc744 \uc18c\uac1c\ud569\ub2c8\ub2e4.<\/h2>\n<h3>\uc545\uc6a9 \uc2dc\ub098\ub9ac\uc624:<\/h3>\n<ol>\n<li><strong>\ub370\uc774\ud130 \ub3c4\ub09c<\/strong>: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uc758 \uacc4\uc815\uc5d0\uc11c \ubbfc\uac10\ud55c \uc815\ubcf4\ub97c \ud6d4\uce60 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<li><strong>\uc2b9\uc778\ub418\uc9c0 \uc54a\uc740 \uc811\uadfc<\/strong>: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uc758 \uacc4\uc815\uc5d0 \ubb34\ub2e8\uc73c\ub85c \uc811\uadfc\ud558\uc5ec \uc774\ub97c \uc0ac\uce6d\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\uacc4\uc815 \uc870\uc791<\/strong>: \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uc758 \uacc4\uc815 \uc124\uc815\uc744 \uc870\uc791\ud558\uac70\ub098 \ud53c\ud574\uc790\ub97c \ub300\uc2e0\ud558\uc5ec \uc545\uc758\uc801\uc778 \ud589\uc704\ub97c \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h3>\ubb38\uc81c \ubc0f \ud574\uacb0 \ubc29\ubc95:<\/h3>\n<ol>\n<li>\n<p><strong>\uc138\uc158 ID \uc0dd\uc131\uc774 \ubd80\uc871\ud568<\/strong>: \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc740 \uacf5\uaca9\uc790\uac00 ID\ub97c \uc608\uce21\ud558\uac70\ub098 \ubb34\ucc28\ubcc4 \ub300\uc785\ud558\ub294 \uac83\uc744 \ubc29\uc9c0\ud558\uae30 \uc704\ud574 \uac15\ub825\ud558\uace0 \uc608\uce21\ud560 \uc218 \uc5c6\ub294 \uc138\uc158 ID \uc0dd\uc131 \uba54\ucee4\ub2c8\uc998\uc744 \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc548\uc804\ud55c \uc138\uc158 \uad00\ub9ac<\/strong>: \ub85c\uadf8\uc778 \uc2dc \uc138\uc158 ID \uc7ac\uc0dd\uc131\uacfc \uac19\uc740 \ubcf4\uc548 \uc138\uc158 \uad00\ub9ac \ubc29\uc2dd\uc744 \uad6c\ud604\ud558\uba74 \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc744 \ub9c9\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc0ac\uc6a9\uc790 \uc778\uc2dd<\/strong>: \uc7a0\uc7ac\uc801\uc778 \uc704\ud611\uacfc \ubcf4\uc548 \uac80\uc0c9\uc758 \uc911\uc694\uc131\uc5d0 \ub300\ud574 \uc0ac\uc6a9\uc790\uc5d0\uac8c \uad50\uc721\ud558\uba74 \uc0ac\ud68c \uacf5\ud559 \uacf5\uaca9\uc758 \uc131\uacf5\ub960\uc744 \uc904\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\uc8fc\uc694 \ud2b9\uc9d5 \ubc0f \uae30\ud0c0 \uc720\uc0ac\ud55c \uc6a9\uc5b4\uc640\uc758 \ube44\uad50\ub97c \ud45c\uc640 \ubaa9\ub85d \ud615\ud0dc\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/h2>\n<table>\n<thead>\n<tr>\n<th>\ud2b9\uc131<\/th>\n<th>\uc138\uc158 \uace0\uc815 \uacf5\uaca9<\/th>\n<th>\uc138\uc158 \ud558\uc774\uc7ac\ud0b9<\/th>\n<th>XSS(\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\uacf5\uaca9 \uc720\ud615<\/td>\n<td>\ud53c\ud574\uc790\uc758 \uc54c\ub824\uc9c4 \uc138\uc158 ID\ub97c \uc218\uc815\ud558\uae30 \uc704\ud574 \uc138\uc158 \uad00\ub9ac\ub97c \uc545\uc6a9\ud569\ub2c8\ub2e4.<\/td>\n<td>\uae30\uc874 \uc138\uc158 ID\ub97c \uc801\uadf9\uc801\uc73c\ub85c \uac00\ub85c\ucc44\uc11c \ud6d4\uce69\ub2c8\ub2e4.<\/td>\n<td>\uc138\uc158\uc744 \uc190\uc0c1\uc2dc\ud0a4\uae30 \uc704\ud574 \uc6f9\ud398\uc774\uc9c0\uc5d0 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0bd\uc785\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\uacf5\uaca9 \ubca1\ud130<\/td>\n<td>\ud53c\ud574\uc790\uc5d0\uac8c \ubbf8\ub9ac \uc815\ud574\uc9c4 \uc138\uc158 ID\ub97c \ubcf4\ub0c5\ub2c8\ub2e4.<\/td>\n<td>\uc138\uc158 ID\ub97c \ucea1\ucc98\ud558\uae30 \uc704\ud574 \ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d\uc744 \ub3c4\uccad\ud569\ub2c8\ub2e4.<\/td>\n<td>\uc138\uc158 \ub370\uc774\ud130\ub97c \ucea1\ucc98\ud558\uae30 \uc704\ud574 \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0bd\uc785\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\ud45c\uc801<\/td>\n<td>\uc138\uc158 \uad00\ub9ac\uac00 \ucde8\uc57d\ud55c \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158.<\/td>\n<td>\uc548\uc804\ud558\uc9c0 \uc54a\uc740 \uc138\uc158 \ucc98\ub9ac \uae30\ub2a5\uc744 \uac16\ucd98 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158.<\/td>\n<td>\ubcf4\uc548\ub418\uc9c0 \uc54a\uc740 \uc785\ub825 \ud544\ub4dc\uac00 \uc788\ub294 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158.<\/td>\n<\/tr>\n<tr>\n<td>\uce68\ud574 \ubc29\ubc95<\/td>\n<td>\ud53c\ud574\uc790\ub97c \uc18d\uc5ec \uacf5\uaca9\uc790\uc758 \uc138\uc158 ID\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \ud558\ub294 \uc0ac\ud68c \uacf5\ud559\uc785\ub2c8\ub2e4.<\/td>\n<td>\ud65c\uc131 \uc138\uc158 ID\ub97c \ucea1\ucc98\ud558\uae30 \uc704\ud55c \uc218\ub3d9 \ub3c4\uccad.<\/td>\n<td>\uc138\uc158 \ub370\uc774\ud130\ub97c \ucea1\ucc98\ud558\uae30 \uc704\ud574 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0bd\uc785\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0 \ub300\ud55c \ubbf8\ub798 \uc804\ub9dd\uacfc \uae30\uc220.<\/h2>\n<p>\uacf5\uaca9\uc790\uc640 \ubc29\uc5b4\uc790 \uac04\uc758 \uc804\ud22c\ub294 \uacc4\uc18d\ud574\uc11c \uc9c4\ud654\ud558\uc5ec \uc138\uc158 \ubcf4\uc548\uc774 \ubc1c\uc804\ud560 \uac83\uc785\ub2c8\ub2e4. \ubbf8\ub798\uc758 \uad00\uc810\uacfc \uae30\uc220\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc0dd\uccb4\uc778\uc99d<\/strong>: \uc9c0\ubb38, \uc5bc\uad74 \uc778\uc2dd \ub4f1 \uc0dd\uccb4 \uc778\uc99d \ubc29\uc2dd\uc744 \ud1b5\ud569\ud558\uba74 \uc138\uc158 \ubcf4\uc548\uc744 \uac15\ud654\ud558\uace0 \uc9d1\ucc29 \uacf5\uaca9 \uc704\ud5d8\uc744 \uc904\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud589\ub3d9 \ubd84\uc11d<\/strong>: \ud589\ub3d9 \ubd84\uc11d\uc744 \ud65c\uc6a9\ud558\uc5ec \ube44\uc815\uc0c1\uc801\uc778 \uc138\uc158 \ub3d9\uc791\uc744 \uac10\uc9c0\ud558\uba74 \uc7a0\uc7ac\uc801\uc778 \uc9d1\ucc29 \uacf5\uaca9 \ubc0f \uae30\ud0c0 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud65c\ub3d9\uc744 \uc2dd\ubcc4\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud1a0\ud070 \uae30\ubc18 \uc138\uc158<\/strong>: \ud1a0\ud070 \uae30\ubc18 \uc138\uc158\uc744 \uad6c\ud604\ud558\uba74 \uae30\uc874 \uc138\uc158 ID\uc5d0 \ub300\ud55c \uc758\uc874\ub3c4\ub97c \uc904\uc5ec \ubcf4\uc548\uc744 \uac15\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ub2e4\ub2e8\uacc4 \uc778\uc99d(MFA)<\/strong>: \uc911\uc694\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 MFA\ub97c \uc801\uc6a9\ud558\uba74 \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0 \ub300\ud55c \ucd94\uac00 \ubcf4\ud638 \uacc4\uce35\uc744 \ucd94\uac00\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud558\uac70\ub098 \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uacfc \uc5f0\uad00\uc2dc\ud0a4\ub294 \ubc29\ubc95.<\/h2>\n<p>\ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc0ac\uc6a9\uc790\uc640 \uc6f9 \uc11c\ubc84 \uc0ac\uc774\uc758 \uc911\uac1c\uc790 \uc5ed\ud560\uc744 \ud558\uba70 \uc0ac\uc6a9\uc790\ub97c \ub300\uc2e0\ud558\uc5ec \uc694\uccad\uacfc \uc751\ub2f5\uc744 \uc804\ub2ec\ud569\ub2c8\ub2e4. \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uac1c\uc778 \uc815\ubcf4 \ubcf4\ud638 \ubc0f \ubcf4\uc548\uc744 \uac15\ud654\ud560 \uc218 \uc788\uc9c0\ub9cc \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uacfc \uc5f0\uad00\ub420 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\uc870\uc791\uc694\uccad<\/strong>: \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud558\ub294 \uacf5\uaca9\uc790\ub294 \ud53c\ud574\uc790\uc758 \uc694\uccad\uc744 \uac00\ub85c\ucc44\uc11c \uc870\uc791\ud558\uc5ec \ubbf8\ub9ac \uacb0\uc815\ub41c \uc138\uc158 ID\ub97c \ud1b5\uc2e0\uc5d0 \uc0bd\uc785\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc138\uc158 \uc5f0\uc7a5<\/strong>: \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc138\uc158 \uc218\uba85\uc744 \uc5f0\uc7a5\ud558\uc5ec \uacf5\uaca9\uc790\uac00 \uace0\uc815 \uc138\uc158\uc5d0 \ub300\ud55c \uc81c\uc5b4\ub97c \ub354 \uc27d\uac8c \uc720\uc9c0\ud560 \uc218 \uc788\ub3c4\ub85d \ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>IP \uc2a4\ud478\ud551<\/strong>: \uacf5\uaca9\uc790\ub294 \uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc744 \uc2e4\ud589\ud558\ub294 \ub3d9\uc548 \uc790\uc2e0\uc758 \uc2e0\uc6d0\uc744 \uc228\uae30\uae30 \uc704\ud574 IP \uc2a4\ud478\ud551 \uae30\ub2a5\uc774 \uc788\ub294 \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<p>\uc774\ub7ec\ud55c \uc704\ud5d8\uc744 \uc644\ud654\ud558\uae30 \uc704\ud574 OneProxy\uc640 \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84 \uc81c\uacf5\uc5c5\uccb4\ub294 \uac15\ub825\ud55c \ubcf4\uc548 \uc870\uce58\ub97c \uad6c\ud604\ud558\uace0 \uc2dc\uc2a4\ud15c\uc744 \uc815\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud558\uc5ec \uc545\uc758\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \uc11c\ube44\uc2a4\uac00 \uc624\uc6a9\ub418\ub294 \uac83\uc744 \ubc29\uc9c0\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<p>\uc138\uc158 \uace0\uc815 \uacf5\uaca9\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \ub9ac\uc18c\uc2a4\ub97c \ucc38\uc870\ud558\uc138\uc694.<\/p>\n<ol>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/Session_Fixation\" target=\"_new\" rel=\"noopener nofollow\">OWASP \uc138\uc158 \uace0\uc815<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/vulnerabilities\/web\/session-fixation-vulnerability\" target=\"_new\" rel=\"noopener nofollow\">\uc138\uc158 \uace0\uc815 \ucde8\uc57d\uc810<\/a><\/li>\n<li><a href=\"https:\/\/www.youtube.com\/watch?v=tqzJqjClI1g\" target=\"_new\" rel=\"noopener nofollow\">\uc544\ubbf8\ud2b8 \ud074\ub77c\uc778 \u2013 \ub0b4 \uc778\uc0dd\uc744 \ub9dd\uce5c \ucfe0\ud0a4(Black Hat 2002)<\/a><\/li>\n<\/ol>","protected":false},"featured_media":478957,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478956","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Session Fixation Attack: A Comprehensive Overview<\/mark>","faq_items":[{"question":"What is a Session fixation attack?","answer":"<p>Session fixation attack is a security vulnerability targeting web applications, where attackers manipulate the session ID to gain unauthorized access and control over a user's session.<\/p>"},{"question":"How did Session fixation attack originate?","answer":"<p>The Session fixation attack was first identified and discussed in the early 2000s. It was coined by Amit Klein, an Israeli security researcher, during a Black Hat Briefings conference in 2002.<\/p>"},{"question":"How does a Session fixation attack work?","answer":"<p>In a Session fixation attack, the attacker tricks the victim into using a pre-determined session ID provided by the attacker. Once the victim logs in using the fixed session ID, the attacker gains control over the user's session.<\/p>"},{"question":"What are the key features of a Session fixation attack?","answer":"<p>The Session fixation attack is stealthy, relying on social engineering. It exposes vulnerabilities in session management, bypasses authentication, and enables unauthorized access.<\/p>"},{"question":"What types of Session fixation attacks exist?","answer":"<p>Session fixation attacks can be classified based on the attack strategy (pre-login and post-login), the source of the session ID (predictable or stolen), and the target session (user or administrator).<\/p>"},{"question":"What are some ways to prevent Session fixation attacks?","answer":"<p>To prevent Session fixation attacks, web applications should implement secure session management, use strong and unpredictable session ID generation mechanisms, and educate users about potential threats.<\/p>"},{"question":"How does Session fixation compare to other similar threats like Session Hijacking and Cross-Site Scripting (XSS)?","answer":"<p>Session fixation focuses on fixing a session ID, while session hijacking actively steals an existing session ID. Cross-Site Scripting (XSS) injects malicious scripts into websites to compromise sessions.<\/p>"},{"question":"What are the future perspectives and technologies related to Session fixation attacks?","answer":"<p>The future may see advancements in session security through biometric authentication, behavioral analytics, token-based sessions, and wider adoption of multi-factor authentication (MFA).<\/p>"},{"question":"How can proxy servers be associated with Session fixation attacks?","answer":"<p>Proxy servers, acting as intermediaries, can potentially be used to manipulate requests, prolong sessions, or enable IP spoofing, which could aid attackers in executing Session fixation attacks.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/478956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/478956\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/478957"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=478956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}