search
    Security expand_more
    Security chevron_right

    Offensive & defensive security insights.

    Blockchain
    Web3 and smart contract vulnerabilities.
    Cloud Security
    Infrastructure and network defense.
    Cryptography
    Encryption algorithms and principles.
    Forensics
    Digital investigation and analysis.
    Governance Risk and Compliance
    Policies, standards, and risk management.
    Hack the Box
    Offensive security practice and writeups.
    Identity and Access Management
    IAM architectures and principles.
    Mobile Security
    Securing iOS and Android applications.
    Network Security
    Protecting network infrastructure.
    Payment Card Industry Data Security Standard
    PCI DSS compliance.
    Security Operations
    Monitoring and incident response.
    Threat Intelligence
    Analyzing cyber threats.
    Vulnerabilities
    Common security flaws and mitigations.
    Web Security
    Securing web applications and APIs.
    Mobile Deep Links - Attack Surface and Pentesting Guide
    Mobile Deep Links - Attack Surface and Pentesting Guide
    Mobile Deep Links: From Concept to Attack Surface
    Learn more chevron_right
    Engineering expand_more
    Engineering chevron_right

    Scalable systems & modern engineering.

    Algorithms & Data Structures
    Core computer science concepts.
    Cloud & DevOps
    CI/CD and infrastructure code.
    Database Systems
    SQL, NoSQL, and data modeling.
    Programming Fundamentals
    Language syntax and best practices.
    SysOps & Infrastructure
    System administration and scaling.
    System Design & Architecture
    Designing scalable applications.
    UI/UX & Frontend Foundations
    Advanced CSS animations and modern frontend principles.
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Learn more chevron_right
    AI & ML expand_more
    AI & ML chevron_right

    Generative AI & LLM architectures.

    AI Agents & Automation
    Multi-agent systems, orchestration, and AI-driven development workflows.
    GenAI
    Generative models and applications.
    Machine Learning
    Data processing and predictive models.
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Learn more chevron_right
    Career expand_more
    Career chevron_right

    Interview tips & career strategies.

    Certificates
    Professional certifications and study guides.
    Interview
    Preparation and technical interviews.
    Post-Interview
    Next steps and negotiations.
    Automating OSCP Reports
    Automating OSCP Reports
    Automating OSCP and Penetration Testing Reports
    Learn more chevron_right
    Personal expand_more
    Personal chevron_right

    Identity, philosophy & personal growth.

    Identity
    Personal reflections and identity.
    Life Information
    Useful tips and life hacks.
    Philosophy
    Thoughts and philosophical discussions.
    Career Roadmap & Reflection 2026
    Career Roadmap & Reflection 2026
    Series Introduction I have always lived by reflecting, planning, and taking action toward my future. In a rapidly changing technology...
    Learn more chevron_right
    Tools expand_more
    Tools chevron_right

    Hand-picked toolkits & tech tutorials.

    Exploitation
    Tools for offensive security.
    Reconnaissance
    Information gathering tools.
    Operating System
    OS-level tools and utilities.
    Jekyll
    Static site generation.
    Forensics Tools
    Digital forensics utilities.
    ELK
    Elasticsearch, Logstash, and Kibana.
    Waybackurls
    Waybackurls
    Waybackurls: Discovering Forgotten Paths for Reconnaissance
    Learn more chevron_right
    Personal

    Career Roadmap & Reflection 2026 시리즈 소개

    Series Introduction I have always lived by reflecting, planning, and taking action toward my future. In a rapidly changing technology ecosystem, my thoughts and directions continuously evolve as I encounter... 시리즈 소개 나는 항상 앞으로 무엇을 해야 할지 고민하고 계획하며 행동해 왔다. 급변하는 기술 생태계 속에서 나 역시 새로운 정보에 따라 끊임없이 변화하기에, 지금 이 시점의 생각과 방향성을 체계적인 문서로......

    Read article 기사 읽기 arrow_forward
    Career Roadmap & Reflection 2026

    Latest

    Security

    Web Shells and Reverse Shells Web Shells and Reverse Shells

    1. Web Shells: The Master Key to the Web Server 2. Reverse Shells: Bypassing Firewalls with a Connection in Reverse What is a Reverse Shell? A reverse shell is a......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Secure Code Review Secure Code Review: JavaScript와 Node.js 환경에서 공격자의 시선으로 코드 읽기

    Secure Code Review: Reading Code Through an Attacker’s Eyes in JavaScript and Node.js Secure Code Review: JavaScript와 Node.js 환경에서 공격자의 시선으로 코드 읽기 일반적인 코드 리뷰가 기능의 정확성과 코드의 품질에 초점을 맞춘다면, 보안......

    Hyoeun Choi Hyoeun Choi ·
    Security

    HTTP Status Codes HTTP Status Codes

    HTTP Status Codes HTTP 상태 코드 분석 HTTP 상태 코드는 웹 서버가 클라이언트의 요청에 대해 어떤 응답을 반환했는지 알려주는 세 자리 숫자입니다. 일반적인......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Browser Extension Penetration Test 브라우저 확장 프로그램 보안

    Browser Extension Security 브라우저 확장 프로그램 보안 브라우저 확장 프로그램(Browser Extension)은 웹 브라우저의 기능을 확장하고 사용자 경험을 향상시키는 강력한 도구입니다. 광고 차단부터 생산성......

    Hyoeun Choi Hyoeun Choi ·
    Security

    JWT Penetration Test JWT 핵심 취약점 분석 및 공격 시나리오

    Analyzing Core JWT Vulnerabilities and Attack Scenarios JWT 핵심 취약점 분석 및 공격 시나리오 JWT(JSON Web Token)는 현대적인 인증 방식에서 널리 사용되지만, 그 유연함은 양날의 검과 같습니다.......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Simple Object Access Protocol (SOAP) 1. SOAP의 기본 개념

    1. Basic Concepts of SOAP 1. SOAP의 기본 개념 SOAP은 그 이름과 달리 그리 간단하지 않은 프로토콜입니다. 특정 플랫폼이나 언어에 종속되지 않고, 주로 HTTP, SMTP,......

    Hyoeun Choi Hyoeun Choi ·
    Security

    File Upload Feature Penetration Test Checklist

    When a file upload feature is present, you should check the following items. Fundamentally, from a developer’s perspective, a whitelist... 파일 업로드 기능이 있을때에는 다음과 같은 것들을 확인해보면 됩니다. 기본적으로 개발자 입장에서는 white-list or allowlist approach가 이상적입니다. Checklist 파일 확장자......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Dissecting HTTP Headers 웹 펜테스팅: HTTP 헤더 심층 분석

    Analyzing HTTP Headers in Web Penetration Testing 웹 펜테스팅: HTTP 헤더 심층 분석 웹 펜테스팅을 수행할 때, HTTP 헤더는 클라이언트와 서버 간 통신의 중추 역할을 합니다. 보안......

    Hyoeun Choi Hyoeun Choi ·
    Security

    OWASP Top 10 Mobile- 2024 OWASP 모바일 Top 10 - 2024: 핵심 가이드

    OWASP Mobile Top 10 Risks: 2024 Edition OWASP 모바일 Top 10 - 2024: 핵심 가이드 2024년 OWASP 모바일 Top 10은 2016년 목록에서 일부 카테고리를 통합하고 새로운 항목을......

    Hyoeun Choi Hyoeun Choi ·