Hello, Everyone!

SeungYong Lee
Written by SeungYong Lee on
Hello, Everyone!

๐Ÿ’ก ๋ณธ ๊ฒŒ์‹œ๋ฌผ์œผ๋กœ H4cker.kr๊ฐ€ ์–ด๋–ค ๊ณณ์ธ์ง€, ๋ธ”๋กœ๊ทธ์˜ ์ฃผ์ธ์ด ์–ด๋–ค ์‚ฌ๋žŒ์ธ์ง€ ์†Œ๊ฐœํ•˜๋Š” ๋‚ด์šฉ์„ ๋‹ค๋ฃน๋‹ˆ๋‹ค.

๋…์ž ์—ฌ๋Ÿฌ๋ถ„, ์•ˆ๋…•ํ•˜์„ธ์š”!

H4cker.kr์€ ์ œ๊ฐ€ ๊ด€์‹ฌ์„ ๊ฐ–๊ณ  ๋ถ„์„ํ•œ ๋‹ค์–‘ํ•œ ๋ณด์•ˆ ์‚ฌ๋ก€์™€ ๊ธฐ์ˆ ์  ์ฃผ์ œ๋“ค์„ ๋‹ค๋ฃจ๋ฉฐ, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ์˜ ์„ธ๊ณ„๋ฅผ ํƒ๊ตฌํ•ด ๋‚˜๊ฐ€๋Š” ๊ณต๊ฐ„์ž…๋‹ˆ๋‹ค. ์ด ๋ธ”๋กœ๊ทธ๋ฅผ ํ†ตํ•ด ์‹ค๋ฌด ๊ฒฝํ—˜์—์„œ ์–ป์€ ์ธ์‚ฌ์ดํŠธ์™€ ํฅ๋ฏธ๋กœ์šด ๊ธฐ์ˆ ๋“ค์„ ๊ณต์œ ํ•˜๊ณ , ์ €๋งŒ์˜ ์ด์•ผ๊ธฐ๋ฅผ ๋…์ž ์—ฌ๋Ÿฌ๋ถ„๊ณผ ๋‚˜๋ˆ„๊ณ ์ž ํ•ฉ๋‹ˆ๋‹ค.

์ €๋Š” ๋””์ง€ํ„ธ ํ™˜๊ฒฝ์—์„œ ๋ฐœ์ƒํ•˜๋Š” ๋ณด์•ˆ ์ด์Šˆ์— ๊นŠ์€ ๊ด€์‹ฌ์„ ๊ฐ€์ง€๊ณ  ์žˆ์œผ๋ฉฐ, ์ด๋ฅผ ์ง์ ‘ ๋ถ„์„ํ•˜๊ณ  ํƒ๊ตฌํ•˜๋Š” ๋ฐ์— ํฐ ์ฆ๊ฑฐ์›€์„ ๋А๋‚๋‹ˆ๋‹ค. 2022๋…„ 9์›” 27์ผ๋ถ€ํ„ฐ ๋Œ€ํ•œ๋ฏผ๊ตญ์˜ ๋ณด์•ˆ ๊ธฐ์—… (์ฃผ) ์Šคํ‹ธ๋ฆฌ์–ธ(Stealien)์˜ AppSuit ํŒ€์—์„œ ์„ ์ž„ ์—ฐ๊ตฌ์›์œผ๋กœ ์žฌ์งํ•˜๋ฉฐ, ์•ˆ๋“œ๋กœ์ด๋“œ ๋ณด์•ˆ ์†”๋ฃจ์…˜์ธ AppSuit Premium์˜ ์œ ์ง€๋ณด์ˆ˜ ๋ฐ ๊ณ ๋„ํ™” ์—ฐ๊ตฌ๋ฅผ ๋‹ด๋‹นํ–ˆ์Šต๋‹ˆ๋‹ค. ์ดํ›„ 2025๋…„ 1์›” 1์ผ๋ถ€ํ„ฐ๋Š” Red Team ์†Œ์†์œผ๋กœ ์ „ํ™˜๋˜์–ด, ๊ณต๊ฒฉ์ž ๊ด€์ ์—์„œ์˜ ๋ณด์•ˆ ์—ฐ๊ตฌ์™€ ์˜คํŽœ์‹œ๋ธŒ ์‹œํ๋ฆฌํ‹ฐ(Offensive Security) ์—…๋ฌด๋ฅผ ์ˆ˜ํ–‰ํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

์‹œ์Šคํ…œ ๋ณด์•ˆ ๋ฐ ๋ชจ์˜ ์นจํˆฌ ๋„๊ตฌ ๊ฐœ๋ฐœ์— ๊ฐ•ํ•œ ๊ด€์‹ฌ์„ ๊ฐ€์ง€๊ณ  ์žˆ์œผ๋ฉฐ, ์‹œ์Šคํ…œ, ์›น, ๋ฆฌ๋ฒ„์Šค ์—”์ง€๋‹ˆ์–ด๋ง, ์•”ํ˜ธํ•™ ๋“ฑ ๋‹ค์–‘ํ•œ ๋ถ„์•ผ์— ๊ฑธ์ณ ์ „๋ฌธ์„ฑ์„ ํ™•์žฅํ•ด ๋‚˜๊ฐ€๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ํŠนํžˆ 0-day ์ทจ์•ฝ์  ๋ฐœ๊ตด๊ณผ 1-day ์ทจ์•ฝ์  ๋ถ„์„์— ๊นŠ์€ ์—ด์ •์„ ๊ฐ€์ง€๊ณ  ์—ฐ๊ตฌ๋ฅผ ์ด์–ด๊ฐ€๋ฉฐ, ๋ฒ„๊ทธ ํ—Œํ„ฐ(Bug Hunter)๋กœ์„œ๋„ ํ™œ๋™ํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

๋˜ํ•œ, ํ•ดํ‚นยท๋ณด์•ˆ ๋Œ€ํšŒ์ธ CTF(Capture The Flag)์— ์ง€์†์ ์œผ๋กœ ์ฐธ๊ฐ€ํ•˜๋ฉฐ ์ƒˆ๋กœ์šด ๋„์ „๊ณผ ๋ฐฐ์›€์„ ์ฆ๊ธฐ๊ณ  ์žˆ์œผ๋ฉฐ, ์ด๋Ÿฌํ•œ ๊ฒฝํ—˜์„ ๋ฐ”ํƒ•์œผ๋กœ ๋” ๋‚˜์€ ๋ณด์•ˆ ์ „๋ฌธ๊ฐ€๋กœ ์„ฑ์žฅํ•˜๊ณ ์ž ๋…ธ๋ ฅํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

์•ž์œผ๋กœ ์ด ๋ธ”๋กœ๊ทธ๋ฅผ ํ†ตํ•ด ์ œ๊ฐ€ ๊ฒฝํ—˜ํ•œ ์ด์•ผ๊ธฐ์™€ ๊ธฐ์ˆ ์  ์ธ์‚ฌ์ดํŠธ๋“ค์„ ๋‹ค์–‘ํ•˜๊ฒŒ ์†Œ๊ฐœ๋“œ๋ฆด ์˜ˆ์ •์ด๋‹ˆ ๋งŽ์€ ๊ด€์‹ฌ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค.

๊ธ€์„ ์ฝ์–ด ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

SeungYong Lee

SeungYong Lee

I'm Seungyong Lee. I joined the AppSuit team at Stealien, a cybersecurity company based in South Korea, on September 27, 2022, where I conducted Android security research. As of January 1, 2025, I became a member of the Red Team, working alongside talented hackers to embrace challenging missions, including APT simulations and 0-day/1-day vulnerability research and development.

This blog is a space where I share my hands-on experiences and explore the fascinating technologies Iโ€™ve encountered. Join me in navigating the ever-evolving world of cybersecurity and innovation.

Comments

comments powered by Disqus