Security Information and Event Management (SIEM)
What is Security Information and Event Management (SIEM)? Security Information and Event Management (SIEM) is an integrated security monitoring platform that gathers and analyzes the vast amount o...
Hyoeun's Wiki
IDS & IPS
What is an Intrusion Detection System (IDS)? An Intrusion Detection System (IDS), as its name suggests, is a device that detects malicious activities or policy violations—in other words, intrusion...
MITRE ATT&CK
MITRE ATT&CK Framework: Understanding Cyber Threats and Defense Strategies What is MITRE ATT&CK? MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a globally acc...
Web Shells and Reverse Shells
1. Web Shells: The Master Key to the Web Server What is a Web Shell? A web shell is a malicious script file uploaded to a web server by an attacker to enable remote administration. It can be writ...
Secure Code Review
Secure Code Review: Reading Code Through an Attacker’s Eyes in JavaScript and Node.js While a typical code review focuses on functional correctness and code quality, a Secure Code Review goes a st...
Web hacking
Index checks /robots.txt /sitemap.xml /crossdomain.xml /clientaccesspolicy.xml /.well-known/ Check also comments in the main and secondary pages. 300 Error 301 Moved Permanently ...
Browser Extension Penetration Test
Browser Extension Security Browser Extensions are powerful tools that extend the functionality of web browsers and enhance the user experience. From ad blockers to productivity tools and developer...
JWT Penetration Test
Core JWT Vulnerability Analysis and Attack Scenarios The majority of successful JWT attacks begin with a single objective: bypassing the server’s signature verification logic. If the signature can...
Simple Object Access Protocol (SOAP)
1. Basic Concepts of SOAP Contrary to its name, SOAP (Simple Object Access Protocol) is not a simple protocol. It is platform and language independent, offering flexibility to operate over various...
File Upload Feature Penetration Test
When a file upload feature is present, you should check the following items. Fundamentally, from a developer’s perspective, a whitelist or allowlist approach is ideal. Checklist Check the...