ํ”„๋ฆฌ๋‹ค(Frida) Memory Dump

๊ฐœ์š” ํ”„๋ฆฌ๋‹ค ํ”„๋ ˆ์ž„์›Œํฌ๋ฅผ ํ†ตํ•ด ์‚ฌ์šฉํ•˜๋Š” ๋คํ”„๋„๊ตฌ๋กœ Windows ๋˜๋Š” Linux ํ™˜๊ฒฝ์—์„œ ๋ชจ๋‘ ์ง„ํ–‰์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ๋งŒ์•ฝ ๋‹จ๋ง ๋‚ด๋ถ€์˜ ์•ฑ์— ์‚ฌ์šฉ์ž์˜ ๋ฏผ๊ฐํ•œ ์ •๋ณด(ID,PWD) ๊ฐ™์€๊ฒŒ ์ž…๋ ฅ๋˜์–ด ์žˆ์„๊ฒฝ์šฐ Memory ์•ˆ์— ์ €์žฅ์ด๋˜๋Š”๋ฐ ์•”ํ˜ธํ™” ์ฒ˜๋ฆฌ๊ฐ€ ๋˜์–ด ์žˆ์ง€ ์•Š์•„ ๋ฏผ๊ฐ์ •๋ณด๊ฐ€ ๊ทธ๋Œ€๋กœ ์œ ์ถœ๋  ์ˆ˜ ์žˆ๋Š” ๊ฒฝ์šฐ๊ฐ€ ์กด์žฌํ•ฉ๋‹ˆ๋‹ค. Memory๋ฅผ Dump ์‹œํ‚ฌ์ˆ˜ ์žˆ๋Š” ์ฝ”๋“œ๋ฅผ ์‹คํ–‰์‹œํ‚ค๊ธฐ ์œ„ํ•ด์„  Python ๋ฒ„์ „์— ๋งž๊ฒŒ๋” ์‚ฌ์šฉํ•ด์•ผ ์—๋Ÿฌ์ฒ˜๋ฆฌ๊ฐ€ ๋‚˜ํƒ€๋‚˜์ง€ ์•Š๊ณ  ์„ฑ๊ณต์ ์œผ๋กœ ์ˆ˜ํ–‰ํ•  ์ˆ˜ ์žˆ๊ฒŒ ๋ฉ๋‹ˆ๋‹ค. ํ•˜๋‹จ์˜ ๋งํฌ์—์„œ fridump3 ์ฝ”๋“œ๋ฅผ ๋‹ค์šด๋กœ๋“œํ•ฉ๋‹ˆ๋‹ค. https://github.com/rootbsd/fridump3 rootbsd/fridump3 A universal memory dumper using Frida for Python 3 ..
MOBILE
1