search
    Security expand_more
    Security chevron_right

    Offensive & defensive security insights.

    Blockchain
    Web3 and smart contract vulnerabilities.
    Cloud Security
    Infrastructure and network defense.
    Cryptography
    Encryption algorithms and principles.
    Forensics
    Digital investigation and analysis.
    Governance Risk and Compliance
    Policies, standards, and risk management.
    Hack the Box
    Offensive security practice and writeups.
    Identity and Access Management
    IAM architectures and principles.
    Mobile Security
    Securing iOS and Android applications.
    Network Security
    Protecting network infrastructure.
    Payment Card Industry Data Security Standard
    PCI DSS compliance.
    Security Operations
    Monitoring and incident response.
    Threat Intelligence
    Analyzing cyber threats.
    Vulnerabilities
    Common security flaws and mitigations.
    Web Security
    Securing web applications and APIs.
    Open Source Intelligence (OSINT)
    Open Source Intelligence (OSINT)
    Technical Deep Dive into OSINT and Dual-Perspective Strategies
    Learn more chevron_right
    Engineering expand_more
    Engineering chevron_right

    Scalable systems & modern engineering.

    Algorithms & Data Structures
    Core computer science concepts.
    Database Systems
    SQL, NoSQL, and data modeling.
    DevOps & Automation
    CI/CD and infrastructure code.
    Programming Fundamentals
    Language syntax and best practices.
    SysOps & Infrastructure
    System administration and scaling.
    System Design & Architecture
    Designing scalable applications.
    UI/UX & Frontend Foundations
    Advanced CSS animations and modern frontend principles.
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Learn more chevron_right
    AI & ML expand_more
    AI & ML chevron_right

    Generative AI & LLM architectures.

    AI Agents & Automation
    Multi-agent systems, orchestration, and AI-driven development workflows.
    GenAI
    Generative models and applications.
    Machine Learning
    Data processing and predictive models.
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Learn more chevron_right
    Career expand_more
    Career chevron_right

    Interview tips & career strategies.

    Certificates
    Professional certifications and study guides.
    Interview
    Preparation and technical interviews.
    Post-Interview
    Next steps and negotiations.
    Automating OSCP Reports
    Automating OSCP Reports
    Automating OSCP and Penetration Testing Reports
    Learn more chevron_right
    Personal expand_more
    Personal chevron_right

    Identity, philosophy & personal growth.

    Identity
    Personal reflections and identity.
    Life Information
    Useful tips and life hacks.
    Philosophy
    Thoughts and philosophical discussions.
    The world of hacker
    The world of hacker
    요즘에는 배워야 할 것들이 너무 많아서 압박감을 느낄 정도이다보니 이런 글을 쓰게 되었다. 나의 시간은 제한적인데 무엇을 배워야할지, 어디에 시간을...
    Learn more chevron_right
    Tools expand_more
    Tools chevron_right

    Hand-picked toolkits & tech tutorials.

    Exploitation
    Tools for offensive security.
    Reconnaissance
    Information gathering tools.
    Operating System
    OS-level tools and utilities.
    Jekyll
    Static site generation.
    Forensics Tools
    Digital forensics utilities.
    ELK
    Elasticsearch, Logstash, and Kibana.
    Waybackurls
    Waybackurls
    Waybackurls: Discovering Forgotten Paths for Reconnaissance
    Learn more chevron_right
    AI & ML

    Security Considerations for AI Agents AI 에이전트를 위한 보안 고려사항

    Security Considerations for AI Agents AI 에이전트를 위한 보안 고려사항 적대적 시스템에 대해 수년간 생각해온 보안 엔지니어로서, 저는 대부분의 개발자와는 다르게 AI 에이전트 보안에 접근합니다. 위협은 실재하고, 공격 표면은 새롭고, 잘못될 경우의 결과는 심각할 수......

    Read article 기사 읽기 arrow_forward
    Security Considerations for AI Agents

    Latest

    Security

    File Upload Feature Penetration Test How to prevent and mitigate file upload vulnerabilities

    When a file upload feature is present, you should check the following items. Fundamentally, from a developer’s perspective, a whitelist... 파일 업로드 기능이 있을때에는 다음과 같은 것들을 확인해보면 됩니다. 기본적으로 개발자 입장에서는 white-list or allowlist approach가 이상적입니다. Checklist 파일 확장자......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Dissecting HTTP Headers 웹 펜테스팅: HTTP 헤더 분석

    Web Penetration Testing: Dissecting HTTP Headers 웹 펜테스팅: HTTP 헤더 분석 HTTP 헤더는 웹 통신에서 클라이언트와 서버가 서로에게 보내는 메타데이터입니다. 이들은 단순히 정보 교환을 넘어, 웹......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Cookie & Seession Security 4. CSRF(Cross-Site Request Forgery)

    Differences Between Cookies and Sessions 쿠키와 세션의 차이 Cookies 쿠키는 클라이언트의 로컬 저장소에 key-value 쌍의 형태로 저장되는 작은 데이터입니다. 주로 웹 애플리케이션에서 사용자를 식별하거나 상태......

    Hyoeun Choi Hyoeun Choi ·
    Security

    OWASP Top 10 - 2021 A10:Server-Side Request Forgery (SSRF) (New)

    2021 Top 10 Web Application Security Risks 2021 Top 10 Web Application Security Risks A1:Broken Access Control (was A5) Description 접근 통제(Access Control)는 사용자가 의도된 권한 범위......

    Hyoeun Choi Hyoeun Choi ·
    Security

    OWASP Top 10 - 2017 2017 Top 10 Web Application Security Risks

    2017 Top 10 Web Application Security Risks A1:Injection 2017 Top 10 Web Application Security Risks A1:Injection Description 인젝션(Injection) 취약점은 SQL, NoSQL, OS, LDAP 인젝션 등 다양한 형태로 나타나며,......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Injection Attacks Beyond SQL and XXS 4. LDAP Injection: The Corporate Directory’s Weakness

    1. Command Injection: The Shell is the Limit 1. Command Injection: The Shell is the Limit Command Injection은 우리가 마주할 수 있는 가장 치명적인 취약점 중 하나입니다. 성공......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Server-Side Request Forgery (SSRF) SSRF (서버 측 요청 위조): 서버가 공격자의 프록시가 될 때

    Server-Side Request Forgery (SSRF): When Your Server Becomes an Attacker’s Proxy SSRF (서버 측 요청 위조): 서버가 공격자의 프록시가 될 때 서론 SSRF (Server-Side Request Forgery)는 공격자가 서버 측 애플리케이션으로 하여금......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Cross-Site Request Forgery (CSRF) References

    The Cross-Site Request Forgery (CSRF) Attack The Cross-Site Request Forgery (CSRF) Attack 웹 애플리케이션 보안에서 가장 교묘하고 위험한 공격 중 하나인 크로스-사이트 요청 위조(Cross-Site Request Forgery,......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Cross-Site Scripting Attack (XXS) References

    The Cross-Site Scripting Attack The Cross-Site Scripting Attack 웹 애플리케이션 보안에서 가장 흔하고 위험한 취약점 중 하나인 크로스-사이트 스크립팅(Cross-Site Scripting, XSS) 공격에 대해 알아보겠습니다.......

    Hyoeun Choi Hyoeun Choi ·