search
    Security expand_more
    Security chevron_right

    Offensive & defensive security insights.

    Blockchain
    Web3 and smart contract vulnerabilities.
    Cloud Security
    Infrastructure and network defense.
    Cryptography
    Encryption algorithms and principles.
    Forensics
    Digital investigation and analysis.
    Governance Risk and Compliance
    Policies, standards, and risk management.
    Hack the Box
    Offensive security practice and writeups.
    Identity and Access Management
    IAM architectures and principles.
    Mobile Security
    Securing iOS and Android applications.
    Network Security
    Protecting network infrastructure.
    Payment Card Industry Data Security Standard
    PCI DSS compliance.
    Security Operations
    Monitoring and incident response.
    Threat Intelligence
    Analyzing cyber threats.
    Vulnerabilities
    Common security flaws and mitigations.
    Web Security
    Securing web applications and APIs.
    Open Source Intelligence (OSINT)
    Open Source Intelligence (OSINT)
    Technical Deep Dive into OSINT and Dual-Perspective Strategies
    Learn more chevron_right
    Engineering expand_more
    Engineering chevron_right

    Scalable systems & modern engineering.

    Algorithms & Data Structures
    Core computer science concepts.
    Database Systems
    SQL, NoSQL, and data modeling.
    DevOps & Automation
    CI/CD and infrastructure code.
    Programming Fundamentals
    Language syntax and best practices.
    SysOps & Infrastructure
    System administration and scaling.
    System Design & Architecture
    Designing scalable applications.
    UI/UX & Frontend Foundations
    Advanced CSS animations and modern frontend principles.
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Frontend & UI/UX Terminology: The Visual Language of the Web
    Learn more chevron_right
    AI & ML expand_more
    AI & ML chevron_right

    Generative AI & LLM architectures.

    AI Agents & Automation
    Multi-agent systems, orchestration, and AI-driven development workflows.
    GenAI
    Generative models and applications.
    Machine Learning
    Data processing and predictive models.
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Security Considerations for AI Agents
    Learn more chevron_right
    Career expand_more
    Career chevron_right

    Interview tips & career strategies.

    Certificates
    Professional certifications and study guides.
    Interview
    Preparation and technical interviews.
    Post-Interview
    Next steps and negotiations.
    Automating OSCP Reports
    Automating OSCP Reports
    Automating OSCP and Penetration Testing Reports
    Learn more chevron_right
    Personal expand_more
    Personal chevron_right

    Identity, philosophy & personal growth.

    Identity
    Personal reflections and identity.
    Life Information
    Useful tips and life hacks.
    Philosophy
    Thoughts and philosophical discussions.
    The world of hacker
    The world of hacker
    요즘에는 배워야 할 것들이 너무 많아서 압박감을 느낄 정도이다보니 이런 글을 쓰게 되었다. 나의 시간은 제한적인데 무엇을 배워야할지, 어디에 시간을...
    Learn more chevron_right
    Tools expand_more
    Tools chevron_right

    Hand-picked toolkits & tech tutorials.

    Exploitation
    Tools for offensive security.
    Reconnaissance
    Information gathering tools.
    Operating System
    OS-level tools and utilities.
    Jekyll
    Static site generation.
    Forensics Tools
    Digital forensics utilities.
    ELK
    Elasticsearch, Logstash, and Kibana.
    Waybackurls
    Waybackurls
    Waybackurls: Discovering Forgotten Paths for Reconnaissance
    Learn more chevron_right
    AI & ML

    Security Considerations for AI Agents AI 에이전트를 위한 보안 고려사항

    Security Considerations for AI Agents AI 에이전트를 위한 보안 고려사항 적대적 시스템에 대해 수년간 생각해온 보안 엔지니어로서, 저는 대부분의 개발자와는 다르게 AI 에이전트 보안에 접근합니다. 위협은 실재하고, 공격 표면은 새롭고, 잘못될 경우의 결과는 심각할 수......

    Read article 기사 읽기 arrow_forward
    Security Considerations for AI Agents

    Latest

    Security

    OWASP Top 10 Mobile- 2024 M10: 불충분한 암호화 (Insufficient Cryptography)

    OWASP Mobile Top 10 - 2024 OWASP 모바일 Top 10 - 2024 2024년 OWASP 모바일 Top 10은 2016년 목록에서 일부 카테고리를 통합하고 새로운 항목을 추가하여 Android......

    Hyoeun Choi Hyoeun Choi ·
    Security

    OWASP Top 10 Mobile- 2017 M10: 불필요한 기능 (Extraneous Functionality)

    Hidden Dangers of Mobile Security: A Complete Guide to the Top 10 Risks M1: Improper Platform Usage 모바일 보안의 숨겨진 위험: Top 10 리스크 완벽 가이드 M1: 부적절한 플랫폼 사용 (Improper Platform Usage) Threat Agents (위협 행위자)......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Binary Protection Binary Protection

    우리 손안의 전쟁터: 모바일 바이너리 보호 기술과 우회 전략 모바일 환경의 핵심 보호 기술 모바일 앱은 운영체제의 특성과 실행 환경 때문에 PC와는 다른, 더욱 교묘한 보호 기술을 사용합니다. 1.......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Frida 결론

    1. Advanced Frida Scripting: Controlling App Internals and Data Extraction 1. Frida 스크립팅 심화: 앱 내부 제어 및 데이터 추출 Frida의 핵심은 JavaScript로 작성된 스크립트를 통해 런타임에 앱의 동작을 제어하는......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Obfuscation Why Do Developers Hide Their Code? (The Purpose of Obfuscation)

    A Smokescreen in the Code: Obfuscation and the Art of Lifting the Veil Why Do Developers Hide Their Code? (The Purpose of Obfuscation) Understanding our “enemy” is fundamental. The reasons developers apply obfuscation......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Bypass pinning by repackaging - Android SSL Pinning 우회 완전 정복: 패키지 리패키징부터 자동화 도구까지

    Mastering SSL Pinning Bypass: From Package Repackaging to Automated Tools SSL Pinning 우회 완전 정복: 패키지 리패키징부터 자동화 도구까지 모바일 앱 모의 해킹 시 가장 먼저 마주치는 장애물 중 하나는......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Certificate Pinning Implementation

    What is Certificate Pinning? Certificate Pinning이란? Certificate Pinning은 클라이언트 애플리케이션에서 특정 서버 인증서(또는 관련 데이터를) “고정”하여 해당 인증서만 신뢰하는 방식입니다. 이를 통해 네트워크 통신......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Rooting & Jailbreak 시스템의 자물쇠를 부수는 기술: 루팅과 탈옥의 모든 것

    The Art of Breaking System Locks: Everything About Rooting and Jailbreaking 시스템의 자물쇠를 부수는 기술: 루팅과 탈옥의 모든 것 스마트폰을 구매했을 때, 당신은 정말 그 기기의 완전한 주인일까요? 제조사와 운영체제 개발자는......

    Hyoeun Choi Hyoeun Choi ·
    Security

    Android Key Store & iOS Keychain Fort Knox on Your Phone: Understanding & Pentesting Android KeyStore and iOS Keychain

    Fort Knox on Your Phone: Understanding & Pentesting Android KeyStore and iOS Keychain Fort Knox on Your Phone: Understanding & Pentesting Android KeyStore and iOS Keychain 모바일 앱의 보안에서 가장 중요한 과제 중......

    Hyoeun Choi Hyoeun Choi ·