| = ! 관리방어 공간 41-50 |
| = |
| = \TableOfContents0 |
| = |
| = !! level 41 |
| = |
| = + 풀이 방법 |
| = # __ufsdump__ 명령 사용 백업 |
| = # __ufsrestore__ 명령 사용 복구 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = # ufsdump 0ufv /data_bak/data.dump /data |
| = DUMP: 32 KB 레코드를 쓰는 중 |
| = DUMP: /dev/md/rdsk/d0을(를) 덤프하는 중 (test:/data) /data_bak/data.dump(으)로. |
| = DUMP: 매핑 (패스 I) [정규 파일] |
| = DUMP: 매핑 (패스 II) [디렉토리] |
| = DUMP: 6498 블록 (3.17MB)이 예상됩니다. |
| = DUMP: 덤프 중 (패스 III) [디렉토리] |
| = DUMP: 덤프 중 (패스 IV) [정규 파일] |
| = DUMP: 마지막 덤프 볼륨 쓰기 완료 |
| = DUMP: 확인 패스를 시작합니다 |
| = DUMP: 볼륨 1의 6462 블록 (3.16MB) 4888 KB/sec |
| = DUMP: 덤프 완료 |
| = # ufsrestore -xvf /data_bak/data.dump ./data/test.data |
| = Verify volume and initialize maps |
| = Media block size is 126 |
| = Extract directories from tape |
| = Initialize symbol table. |
| = Dump date: Fri Aug 08 11:27:04 2003 |
| = Dumped from: the epoch |
| = Level 0 dump of a partial file system on mdsol:/data |
| = Label: none |
| = Extract directories from tape |
| = Initialize symbol table. |
| = Make node ./data |
| = Extract new leaves. |
| = Check pointing the restore |
| = extract file ./data/test.data |
| = # |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>blackdumpbackup</font> |
| = |
| = !! level 42 |
| = |
| = + 풀이 방법 |
| = # AddType 사용 inc 파일 내용 유출 방지 |
| = # 패스워드 변경후 아파치 재실행 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = # vi /usr/local/apache/conf/httpd.conf |
| = |
| = // 중간 생략 |
| = ## |
| = ## httpd.conf -- Apache HTTP server configuration file |
| = #And for PHP 4.x, use: |
| = # |
| = AddType application/x-httpd-php .php .php3 .php4 .phtml .inc // 추가 부분 |
| = AddType application/x-httpd-php-source .phps |
| = |
| = AddType application/x-tar .tgz |
| = |
| = "/usr/local/apache/conf/httpd.conf" 922 lines, 30919 characters written |
| = # |
| = # cd /usr/local/apache/htdocs |
| = # ls |
| = connect.inc |
| = # vi connect.inc |
| = |
| = <? php |
| = |
| = &mysql_host = "100.100.100.100"; |
| = &mysql_name = "sqlserver"; |
| = &mysql_user = "test"; |
| = &mysql_passwd = "opop"; // 수정 부분 |
| = |
| = $connect = mysql_connect(&mysql_host, &mysql_user, &mysql_passwd) or die("SQL "); |
| = |
| = $mysql_select_db(&mysql_name, $connect) or die("select db error"); |
| = |
| = ?> |
| = ~ |
| = "connect.inc" 13 lines, 276 characters written |
| = # ps |
| = PID TTY TIME CMD |
| = 28118 pts/22 0:00 bash |
| = 28124 pts/22 5:24 mysqld |
| = 28223 pts/22 0:00 ps |
| = 28197 pts/22 0:00 httpd |
| = # kill -1 28197 |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>patchvirus</font> |
| = |
| = !! level 43 |
| = |
| = + 풀이 방법 |
| = # httpd.conf 파일 수정 IncludesNOEXEC 옵션 사용 |
| = # /etc/default/passwd 파일 수정 |
| = # /etc/opt/ipf/ipf.conf 파일 수정 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = # vi /usr/local/apache/conf/httpd.conf |
| = |
| = // 중간 생략 |
| = # |
| = # This should be changed to whatever you set DocumentRoot to. |
| = # |
| = <Directory "/usr/local/apache/htdocs"> |
| = |
| = # |
| = # This may also be "None", "All", or any combination of "Indexes", |
| = # "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews". |
| = # |
| = # Note that "MultiViews" must be named *explicitly* --- "Options All" |
| = # doesn't give it to you. |
| = # |
| = Options IncludesNOEXEC // 수정 부분 |
| = |
| = "/usr/local/apache/conf/httpd.conf" 831 lines, 27497 characters written |
| = # ps |
| = PID TTY TIME CMD |
| = 28412 pts/22 0:00 ps |
| = 28395 pts/22 0:00 httpd |
| = 28392 pts/22 0:00 bash |
| = 28400 pts/22 0:00 ipmon |
| = # kill -1 28395 |
| = # |
| = # vi /etc/default/passwd |
| = #ident "@(#)passwd.dfl 1.3 92/07/14 SMI" |
| = |
| = MAXWEEKS=8 |
| = MINWEEKS=0 |
| = WARNWEEKS=1 |
| = PASSLENGTH=8 |
| = ~ |
| = "/etc/default/passwd" 6 lines, 90 characters written |
| = # |
| = # vi /etc/opt/ipf/ipf.conf |
| = # |
| = # The following routes should be configured, if not already: |
| = # |
| = // 중간 생략 |
| = |
| = block in quick from 200.200.200.1/32 to any // 추가 부분 |
| = "/etc/opt/ipf/ipf.conf" 29 lines, 937 characters written |
| = # |
| = # ps |
| = PID TTY TIME CMD |
| = 28395 pts/22 0:00 httpd |
| = 28392 pts/22 0:00 bash |
| = 28400 pts/22 0:00 ipmon |
| = 28442 pts/22 0:00 ps |
| = # kill -1 28400 |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>gonextlevel</font> |
| = |
| = !! level 44 |
| = |
| = + 풀이 방법 |
| = # 라우터 실제 풀이 참조 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = switch# conf t |
| = Enter configuration commands, one per line. |
| = switch(config)# no ip igmp snooping |
| = switch(config)# exit |
| = switch# write |
| = %SYS-5-CONFIG_I: Configured from console by console |
| = Building configuration... |
| = [OK] |
| = switch# exit |
| = exit from router |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>thefirstconsul</font> |
| = |
| = !! level 45 |
| = |
| = + 풀이 방법 |
| = # 라우터 설정 문제 실제 풀이 참조 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = Router# show user |
| = Line User Host(s) Idle Location |
| = *130 vty 0 idle 00:00:00 211.241.82.54 |
| = 131 vty 1 idle 03:01:06 5.5.5.5 |
| = Router# clear line 131 // 유저 접속 끊기 |
| = Router# conf t |
| = Enter configuration commands, one per line. |
| = Router(config)# line vty 0 4 // 유저 명수 세팅 |
| = Router(config-line)# transport input none |
| = Router(config-line)# exit |
| = Router(config)# line con 0 // 콘솔 환경 설정 |
| = Router(config-line)# login local |
| = Router(config-line)# exec-timeout 2 |
| = Router(config-line)# exit |
| = Router(config)# exit |
| = Router# write |
| = %SYS-5-CONFIG_I: Configured from console by console |
| = Building configuration... |
| = [OK] |
| = ============= |
| = Router# exit |
| = exit from router |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>haveaweakpoint</font> |
| = |
| = !! level 46 |
| = |
| = + 풀이 방법 |
| = # 라우터 설정 문제 실제 풀이 참조 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = Router# copy tftp flash |
| = **** NOTICE **** |
| = Flash load helper v1.0 |
| = This process will accept the copy options and then terminate |
| = the current system image to use the ROM based image for the copy. |
| = Routing functionality will not be available during that time. |
| = If you are logged in via telnet, this connection will terminate. |
| = Users with console access can see the results of the copy operation. |
| = |
| = ---- ******** ---- |
| = Proceed? [confirm][Enter] // 엔터 한번.. |
| = |
| = System flash directory: |
| = File Length Name/status |
| = 1 4305884 c2500-i-l.112-18 |
| = [4305948 bytes used, 4082660 available, 8388608 total] |
| = Address or name of remote host ? 10.1.1.1 10.1.1.1 // 10.1.1.1 주소 입력.. |
| = Source file name? newIOS.update newIOS.update // newIOS.update 파일명 입력 |
| = Destination file name [newIOS.update]? [Enter] // 엔터 한번 |
| = |
| = Accessing file 'newIOS.update' on 10.1.1.1... |
| = |
| = Loading newIOS.update .from 10.1.1.1 (via Ethernet0): ! [OK] // 엔터 한번.. |
| = |
| = Erase flash device before writing? [confirm][Enter] // 엔터 한번.. |
| = |
| = |
| = Flash contains files. Are you sure you want to erase? [confirm][Enter] // 엔터 한번.. |
| = |
| = |
| = |
| = |
| = Copy 'newIOS.update' from server |
| = as 'newIOS.update' into Flash WITH erase? [Enter] // 엔터 한번.. |
| = |
| = |
| = FLH: newIOS.update from 10.1.1.1 to flash ... |
| = |
| = System flash directory: |
| = File Length Name/status |
| = 1 4305884 c2500-i-l.112-18 |
| = [4305948 bytes used, 4082660 available, 8388608 total] |
| = Accessing file 'newIOS.update' on 10.1.1.1... |
| = Loading newIOS.update from 10.1.1.1 (via Ethernet0): ! [OK] // 엔터 한번.. |
| = |
| = |
| = |
| = |
| = Erasing device... eeeeeeeeeeeeeeeeeeeeeeeeeeeeee...erased |
| = |
| = |
| = |
| = |
| = |
| = |
| = Loading newIOS.update from 10.1.1.1 (via Ethernet0): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! |
| = [OK - 7524464/8388608 bytes] |
| = |
| = |
| = |
| = Verifying checksum... OK (0x26FB) |
| = |
| = Flash copy took 0:03:46 [hh:mm:ss] |
| = |
| = FLH: Re-booting system after download |
| = |
| = F3: 7416580+107852+570760 at 0x3000060 |
| = |
| = |
| = Restricted Rights Legend |
| = |
| = |
| = |
| = Use, duplication, or disclosure by the Government is |
| = subject to restrictions as set forth in subparagraph |
| = (c) of the Commercial Computer Software - Restricted |
| = Rights clause at FAR sec. 52.227-19 and subparagraph |
| = (c) (1) (ii) of the Rights in Technical Data and Computer |
| = Software clause at DFARS sec. 252.227-7013. |
| = |
| = cisco Systems, Inc. |
| = 170 West Tasman Drive |
| = San Jose, California 95134-1706 |
| = |
| = Cisco Internetwork Operating System Software |
| = IOS (tm) 2500 Software (C2500-I-L), Version 12.3, RELEASE SOFTWARE (fc1) |
| = Copyright (c) 1986-2000 by cisco Systems, Inc. |
| = Image text-base: 0x0303D3A0, data-base: 0x00001000 |
| = |
| = cisco 2500 (68030) processor (revision N) with 6144K/2048K bytes of memory. |
| = Processor board ID 19492718, with hardware revision 00000000 |
| = Bridging software. |
| = X.25 software, Version 3.0.0. |
| = 1 Ethernet/IEEE 802.3 interface(s) |
| = 2 Serial network interface(s) |
| = 32K bytes of non-volatile configuration memory. |
| = 8192K bytes of processor board System flash (Read ONLY) |
| = |
| = |
| = |
| = Press RETURN to get started! |
| = |
| = |
| = Cisco Internetwork Operating System Software |
| = IOS (tm) 2500 Software (C2500-I-L), Version 12.3, RELEASE SOFTWARE (fc1) |
| = Copyright (c) 1986-2000 by cisco Systems, Inc. |
| = 00:00:45: INK-5-CHANGED: Interface Serial0, changed state to administratively down |
| = 00:00:45: INK-3-UPDOWN: Interface Ethernet0, changed state to up |
| = 00:00:45: INK-5-CHANGED: Interface Serial1, changed state to administratively down |
| = 00:00:46: INEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down |
| = 00:00:46: INEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up |
| = 00:00:46: INEPROTO-5-UPDOWN: Line protocol on Interface Serial1, changed state to down |
| = Router# conf t |
| = Enter configuration commands, one per line. |
| = Router(config)# line vty 0 4 |
| = Router(config-line)# password DoNotTouch |
| = Router(config)# enable secret AuthOnly |
| = Router(config)# exit |
| = Router# write |
| = %SYS-5-CONFIG_I: Configured from console by console |
| = Building configuration... |
| = [OK] |
| = ============= |
| = Router# exit |
| = exit from router |
| = # finish |
| = success |
| = }}} |
| = |
| = > pass = <font color=red>astrongpoint</font> |
| = |
| = !! level 47 |
| = |
| = + 풀이 방법 |
| = # http://httpd.apache.org/docs-2.0/ko/mod/mod_rewrite.html |
| = # http://httpd.apache.org/docs-2.0/ko/misc/rewriteguide.html |
| = |
| = - 실제 풀이 |
| + {{{ |
| + # vi httpd.conf |
| = |
| - > pass = <font color=red>..</font> |
| + RewriteEngine On |
| + RewriteLogLevel 9 |
| + RewriteLog /usr/local/apache/logs/rewrite.log |
| + RewriteRule /sbin|/bin|/etc|httpd\.conf|access_log|error_log - [F] |
| = |
| + ~ |
| + ~ |
| + "httpd.conf" 934 lines, 31155 characters written |
| + # ps |
| + PID TTY TIME CMD |
| + 26000 pts/64 0:00 ps |
| + 25958 pts/64 0:00 httpd |
| + 25955 pts/64 0:00 bash |
| + # kill -1 25958 |
| + # |
| + # finish |
| + }}} |
| + |
| + > pass = <font color=red>apacherewriteok</font> |
| + |
| = !! level 48 |
| = |
| = + 풀이 방법 |
| = # 라우터 설정 문제 실제 풀이 참조 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = Router# conf t |
| = Enter configuration commands, one per line. |
| = Router(config)# interface null0 |
| = Router(config-if)# no ip unreachables |
| = Router(config-if)# exit |
| = Router(config)# ip route 61.144.253.3 255.255.255.255 null0 |
| = Router(config)# ip route 202.104.111.0 255.255.255.0 null0 |
| = Router(config)# exit |
| = Router# write |
| = %SYS-5-CONFIG_I: Configured from console by console |
| = Building configuration... |
| = [OK] |
| = Router# exit |
| = exit from router |
| = # finish |
| = success |
| = }}} |
| = |
| = > pass = <font color=red>blackholeisblack</font> |
| = |
| = !! level 49 |
| = |
| = + 풀이 방법 |
| = # mysql 설정 문제.. |
| = # 풀이 과정 참조 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = # vi /etc/my.cnf |
| = |
| = [mysqld] |
| = user=btevdocd |
| = datadir=/www/database/mysql |
| = socket=/www/database/mysql/mysql.sock |
| = skip-innodb |
| = skip-networking // 네트워크에서의 접근 제어 |
| = |
| = [mysql.server] |
| = user=btevdocd |
| = basedir=/www/database |
| = |
| = [client] |
| = user=btevdocd |
| = socket=/www/database/mysql/mysql.sock |
| = |
| = [safe_mysqld] |
| = err-log=/var/log/mysqld.log |
| = pid-file=/var/run/mysqld/mysqld.pid |
| = ~ |
| = ~ |
| = "my.cnf" 19 lines, 316 characters written |
| = # |
| = # mysqladmin drop test -p // test 디비 삭제.. |
| = Dropping the database is potentially a very bad thing to do. |
| = Any data stored in the database will be destroyed. |
| = |
| = Do you really want to drop the 'test' database [y/N] |
| = y |
| = Database "test" dropped |
| = # mysql -u root -p |
| = mysql>update user set Password=password('akdlsql') where user="root"; // 루트 패스워드 변경 |
| = Query OK, 1 row affected (0.02 sec) |
| = mysql>delete from user where user="evil"; // evil 사용자 삭제 |
| = Query OK, 1 row affected (0.05 sec) |
| = mysql>delete from db where db="test"; // 데이타 베이스 정보 테이블에서 test필드 삭제 |
| = Query OK, 1 row affected (0.05 sec) |
| = mysql>flush privileges // 변경사항 적용 |
| = Query OK, 1 row affected (0.05 sec) |
| = mysql>quit |
| = }}} |
| = |
| = > pass = <font color=red>mysqlsetupok</font> |
| = |
| = !! level 50 |
| = |
| = + 풀이 방법 |
| = # /etc/cron.d/cron.allow 파일 생성 유저 추가 |
| = |
| = - 실제 풀이 |
| = {{{ |
| = # vi cron.allow |
| = |
| = dump_admin |
| = ~ |
| = ~ |
| = "cron.allow" 1 line, 11 characters written |
| = # |
| = # finish |
| = }}} |
| = |
| = > pass = <font color=red>cronallowok</font> |
