{"id":26833507,"url":"https://github.com/mr-won/ntp_zero-origin_timestamp_dos","last_synced_at":"2025-03-30T15:29:10.229Z","repository":{"id":282703185,"uuid":"949403410","full_name":"mr-won/NTP_zero-origin_timestamp_DOS","owner":"mr-won","description":"NTP zero-origin timestamp Denial-of-Service NTP 제로 타임스탬프 서비스 거부","archived":false,"fork":false,"pushed_at":"2025-03-16T11:42:27.000Z","size":5,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-18T02:27:12.648Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mr-won.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-03-16T11:38:52.000Z","updated_at":"2025-03-16T14:50:52.000Z","dependencies_parsed_at":"2025-03-18T02:27:16.021Z","dependency_job_id":null,"html_url":"https://github.com/mr-won/NTP_zero-origin_timestamp_DOS","commit_stats":null,"previous_names":["chihyeonwon/ntp_zero-origin_timestamp_dos","mr-won/ntp_zero-origin_timestamp_dos"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mr-won%2FNTP_zero-origin_timestamp_DOS","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mr-won%2FNTP_zero-origin_timestamp_DOS/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mr-won%2FNTP_zero-origin_timestamp_DOS/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mr-won%2FNTP_zero-origin_timestamp_DOS/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mr-won","download_url":"https://codeload.github.com/mr-won/NTP_zero-origin_timestamp_DOS/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246337993,"owners_count":20761303,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-03-30T15:29:09.679Z","updated_at":"2025-03-30T15:29:10.220Z","avatar_url":"https://github.com/mr-won.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# NTP_zero-origin_timestamp_DOS\nCVE-2018-7185, CVE-2018-7184에 등재된 NTP zero-origin timestamp denial of service 공격에 대한 분석 보고서 입니다.\n```\n작성자 : IGLOO Corp, Won Chi Hyun\n작성일 : 2025.03.16 \n```  \n## 1. 개요 NTP zero-origin timestamp Denial-of-Service NTP 제로 타임스탬프 서비스 거부\n\nntpd는 인터넷 표준시간 서버 또는 로컬 기준 시간을 통해 시스템의 시간 정보를 동기화하는 운영시스템 데몬이다.\nntpd는 많은 주요 운영 시스템, 라우터 및 인프라 장치와 함께 제공된다.\n\n## 2. ntpd에 서비스 거부 취약점이 존재, 이 취약점은 서버에서 timestamp를 처리하는 과정에서 발생하게 된다.   \n취약점 코드는 poc 코드에서 타임 스탬프를 업데이트 하기 전에 불량 패킷을 삭제한다.   \n이 점을 이용해 공격자는 연관된 데이터를 재설정하고 패킷 내용을 설정하는 zero-origin 타임 스탬프를 대량으로 전송,\n서비스 거부를 일으킬 수 있게 된다.\nntp 요청 페이로드에서 timestamp 값이 0인 특징이 있다.\n## 3. 조작된 ntp 요청을 보내 취약점을 발생시킬 수 있으므로 Delete\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmr-won%2Fntp_zero-origin_timestamp_dos","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmr-won%2Fntp_zero-origin_timestamp_dos","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmr-won%2Fntp_zero-origin_timestamp_dos/lists"}