Lee-GyuHyeok

I study security and share my knowledge.

Toggle menu

📂 전체 글 수 135 개
Write Up
- bwapp (86)
- THM (7)
- HTB (3)
vulnerability
- Web-vuln (22)
- system-vuln (3)
- Other-Vuln (2)
- Android (5)
Tools
- Tools (5)
Other-Knowledge
- Other-Knowledge (1)

bwapp

(bWAPP)CSRF (Transfer Amount) 2024.05.23 #bwapp #bee box #bwapp #CSRF #OWASP TOP 10 #OWASP

(bWAPP)CSRF (Change secret) 2024.05.23 #bwapp #bee box #bwapp #CSRF #OWASP TOP 10 #OWASP

(bWAPP)CSRF (Change Password) 2024.05.23 #bwapp #bee box #bwapp #CSRF #OWASP TOP 10 #OWASP

(bWAPP)XML External Entity Attacks (XXE) 2024.05.20 #bwapp #bee box #bwapp #LFI #OWASP TOP 10 #OWASP

(bWAPP)Server Side Request Forgery (SSRF) 2024.05.20 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #ssrf

(bWAPP)SQLiteManager Local File Inclusion 2024.05.20 #bwapp #bee box #bwapp #LFI #OWASP TOP 10 #OWASP

(bWAPP)Restrict Folder Access 2024.05.20 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #Restrict Folder Access

(bWAPP)Restrict Device Access 2024.05.20 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #Restrict Device Access

(bWAPP)Remote & Local File Inclusion (RFI/LFI) 2024.05.20 #bwapp #bee box #bwapp #LFI #OWASP TOP 10 #OWASP

(bWAPP)Host Header Attack (Cache Poisoning) 2024.05.16 #bwapp #bee box #bwapp #Host Header Attack #OWASP TOP 10 #OWASP

(bWAPP)Directory Traversal - Files 2024.05.16 #bwapp #bee box #bwapp #Directory Traversal #OWASP TOP 10 #OWASP #Path Traversal

(bWAPP)Directory Traversal - Directories 2024.05.16 #bwapp #bee box #bwapp #Directory Traversal #OWASP TOP 10 #OWASP #Path Traversal

(bWAPP)Text Files (Accounts) 2024.05.13 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #Text Files

(bWAPP)POODLE Vulnerability 2024.05.13 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP #spoofing

(bWAPP)Host Header Attack (Reset Poisoning) 2024.05.13 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP #spoofing

(bWAPP)Heartbleed Vulnerability 2024.05.13 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP #spoofing

(bWAPP)HTML5 Web Storage (Secret) 2024.05.13 #bwapp #bee box #bwapp #HTML5 Web Storage #OWASP TOP 10 #OWASP #XSS

(bWAPP)Clear Text HTTP (Credentials) 2024.05.13 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP #spoofing

(bWAPP)Base64 Encoding (Secret) 2024.05.13 #bwapp #base64 #bee box #bwapp #OWASP TOP 10 #OWASP #sensitive data exposure #session

(bWAPP)Robots File 2024.05.12 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP

(bWAPP)Old, Backup & Unreferenced Files 2024.05.12 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP

(bWAPP)Man-in-the-Middle Attack (SMTP) 2024.05.12 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP

(bWAPP)Man-in-the-Middle Attack (HTTP) 2024.05.12 #bwapp #bee box #bwapp #mitm #OWASP TOP 10 #OWASP

(bWAPP)Local Privilege Escalation (sendpage) 2024.05.12 #bwapp #bee box #bwapp #Local Privilege Escalation #OWASP TOP 10 #OWASP

(bWAPP)Insecure WebDAV Configuration 2024.05.12 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #WebDAV

(bWAPP)Insecure SNMP Configuration 2024.05.12 #bwapp #bee box #bwapp #OWASP TOP 10 #OWASP #SNMP

(bWAPP)Insecure FTP Configuration 2024.05.12 #bwapp #bee box #bwapp #FTP #OWASP TOP 10 #OWASP

(bWAPP)Denial-of-Service (XML Bomb) 2024.05.09 #bwapp #bee box #bwapp #DoS #OWASP TOP 10 #OWASP #session #xss

(bWAPP)Denial-of-Service (Slow HTTP DoS) 2024.05.09 #bwapp #bee box #bwapp #DoS #OWASP TOP 10 #OWASP #session #xss

(bWAPP)Denial-of-Service (SSL-Exhaustion) 2024.05.09 #bwapp #bee box #bwapp #DoS #OWASP TOP 10 #OWASP #session #xss

(bWAPP)Denial-of-Service (Large Chunk Size) 2024.05.08 #bwapp #bee box #bwapp #DoS #OWASP TOP 10 #OWASP #session #xss

(bWAPP)Cross-Site Tracing (XST) 2024.05.07 #bwapp #bee box #bwapp #cross-site tracing #OWASP TOP 10 #OWASP #session #xss #xst

(bWAPP)Cross-Origin Resource Sharing (AJAX) 2024.05.06 #bwapp #bee box #bwapp #cors #OWASP TOP 10 #OWASP #samba #session #sop

(bWAPP)Arbitrary File Access (Samba) 2024.05.05 #bwapp #bee box #bwapp #IDOR #Misconfiguration #OWASP TOP 10 #OWASP #samba #session

(bWAPP)Insecure DOR - Insecure DOR (Reset Secret) 2024.05.01 #bwapp #Access Contorol #bee box #bwapp #IDOR #Insecure DOR #OWASP TOP 10 #OWASP #session

(bWAPP)Insecure DOR - Insecure DOR (Order Tickets) 2024.04.12 #bwapp #Access Contorol #bee box #bwapp #IDOR #Insecure DOR #OWASP TOP 10 #OWASP #session

(bWAPP)Insecure DOR - Insecure DOR (Change Secret) 2024.04.12 #bwapp #Access Contorol #bee box #bwapp #IDOR #Insecure DOR #OWASP TOP 10 #OWASP #session

(bWAPP)phpMyAdmin BBCode Tag XSS 2024.04.06 #bwapp #bee box #bwapp #CVE-2010-4480 #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Stored (User-Agent) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Stored (Cookies) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Stored (Change secret) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Stored (Blog) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)SQLiteManager XSS 2024.04.06 #bwapp #bee box #bwapp #CVE-2012-5105 #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Reflected (User-Agent) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Reflected (Referer) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Reflected (PHP_SELF) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (Login Form) 2024.04.06 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (HREF) 2024.04.04 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (Eval) 2024.04.03 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (Custom Header) 2024.04.03 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (Back Button) 2024.04.02 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (JSON) 2024.03.27 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (AJAX/JSON) 2024.03.27 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (AJAX/XML) 2024.03.25 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (POST) 2024.03.25 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)XSS - Reflected (GET) 2024.03.25 #bwapp #bee box #bwapp #dom xss #OWASP TOP 10 #OWASP #reflected xss #reflected #stored xss #stored #xss

(bWAPP)Broken Auth. - CAPTCHA Bypassing 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Broken Auth. - Weak Passwords 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Session Mgmt. - Strong Sessions 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Session Mgmt. - Session ID in URL 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Broken Auth. - Password Attacks 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Broken Auth. - Logout Management 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Session Mgmt. - Cookies (Secure) 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Session Mgmt. - Cookies (HTTPOnly) 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Broken Auth. - Insecure Login Forms 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)Session Mgmt. - Administrative Portals 2024.03.25 #bwapp #auth #bee box #broken auth #bwapp #OWASP TOP 10 #OWASP #session mgmt #session

(bWAPP)XML/XPath Injection (Search) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql #xml injection #xpath injection

(bWAPP)XML/XPath Injection (Login Form) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql #xml injection #xpath injection

(bWAPP)SQL Injection - Blind - Time-Based (SQLMap) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Stored (XML) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Stored (User-Agent) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Stored (SQLite) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection (SQLite) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection POST/Search 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection (Login Form/User) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection (Login Form/Hero) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Blind (SQLite) (SQLMap) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection (AJAX/JSON/jQuery) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Stored (Blog) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection - Blind - Boolean-Based (Python Code) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)Drupal SQL Injection (Drupageddon) 2024.03.24 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)SQL Injection GET/Select 2024.03.23 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)PHP Code Injection 2024.03.22 #bwapp #bee box #bwapp #injection #OWASP TOP 10 #OWASP #php code injection #php injection #php

(bWAPP)SQL Injection GET/Search 2024.03.21 #bwapp #bee box #bwapp #GET #injection #OWASP TOP 10 #OWASP #sql injection #sql

(bWAPP)Command Injection 2024.03.21 #bwapp #bee box #bwapp #command injection #os injection #OWASP TOP 10 #OWASP

Back to top ↑

Web-vuln

언어별 취약 시스템 명령어 2024.08.30 #Web-vuln #cmd #system #web Vulnability

PHP strcmp() Vulnability 2024.08.30 #Web-vuln #function #php #strcmp #web Vulnability

PHP Type Juggling Magic Hash 2024.08.30 #Web-vuln #Magic Hash #php #Type Juggling #web Vulnability

PHP Functuion (mysql_real_escape_string OR Magic Quotes) Bypass 2024.08.30 #Web-vuln #function #magic quotes #php #web Vulnability

Content Security Policy(CSP) Bypass 2024.08.30 #Web-vuln #Content Security Policy #csp #web Vulnability #xss

Deserialize_Vulnability for Python_Pickle 2024.08.29 #Web-vuln #Deserialize Vulnability #Deserialize #Pickle #python

401&403(Access Control) Bypass 2024.08.22 #Web-vuln #403 bypass #access control #Forbidden

ZIP Slip Vulnerability 2024.08.22 #Web-vuln #web vulnerability #web #ZIP Slip Vulnerability #ZIP Slip #zip

Encoding Obfuscation 2024.05.31 #Web-vuln #Encoding Obfuscation #Encoding #web vulnerability #web

Servcer Side Requests Forgery (SSRF) 2024.05.24 #Web-vuln #injection #Servcer Side Requests Forgery #SSRF #web vulnerability #web

SMTP Injection(Email injection) 2024.05.24 #Web-vuln #Email injection #injection #SMTP Injection #web vulnerability #web

File Inclusion (LFI/RFI) 2024.05.24 #Web-vuln #File Inclusion #injection #LFI #RFI #web vulnerability #web

prototype pollution 2024.05.20 #Web-vuln #injection #prototype pollution #prototype #web vulnerability #web

Server Side Template Injection (SSTI) 2024.05.17 #Web-vuln #injection #Server Side Template Injection #SSTI #web vulnerability #web

Command Injection (OS Injection) 2024.05.17 #Web-vuln #Command Injection #injection #OS Injection #web vulnerability #web

Path Traversal 2024.05.13 #Web-vuln #injection #Path Traversal #web vulnerability #web

Cross-site Tracing (XST) 2024.05.08 #Web-vuln #Cross-site Tracing #web vulnerability #web #XSS #XST

Insecure direct object references (IDOR) 2024.05.02 #Web-vuln #IDOR #Insecure direct object references #log #web vulnerability #web

Log Injection 2024.03.25 #Web-vuln #injection #Log Injection #log #web vulnerability #web

Authorization Header Bypass 2024.03.25 #Web-vuln #Authorization Header Bypass #Authorization #Header bypass #web vulnerability #web

Log Poisoning 2024.03.17 #Web-vuln #LFI #log injection #log poisoning #RCE

Open redirect (redirect for PHP header() vulnerability) 2024.03.15 #Web-vuln #function #open redirect #php #redirect

Back to top ↑

THM

HA Joker CTF 2024.08.07 #THM #HA Joker CTF #Pentesting #Pentest #THM #TryHackMe

Dreaming - WriteUP 2024.07.11 #THM #Dreaming #Pentesting #Pentest #THM #TryHackMe

UltraTech - WriteUP 2024.04.09 #THM #Pentesting #Pentest #THM #TryHackMe

Boiler CTF - WriteUP 2024.04.05 #THM #Pentesting #Pentest #THM #TryHackMe

Dogcat - WriteUP 2024.04.03 #THM #access.log #apache #container #LFI #log poisoning #Pentesting #Pentest #php #THM #TryHackMe

Anonymous - WriteUP 2024.03.28 #THM #cron #ftp #Pentesting #Pentest #Privilege elevation #smb #THM #TryHackMe #write up

Archangel - WriteUP 2024.03.01 #THM #cron #LFI #log injection #log poisoning #path #Pentesting #Pentest #RCE #THM #TryHackMe

Back to top ↑

Tools

pspy64 2024.07.11 #Tools #attacks #ffuf #password #pentest tool #pentest #shadow #tools #tool

ffuf 2024.07.10 #Tools #attacks #ffuf #password #pentest tool #pentest #shadow #tools #tool

unshadow 2024.03.23 #Tools #attacks #password #pentest tool #pentest #shadow #tools #tool #unshadow

keepass2john 2024.03.23 #Tools #attacks #keepass2john #password #pentest tool #pentest #tools #tool #wordlist

Cewl 2024.03.23 #Tools #attacks #password #pentest tool #pentest #tools #tool #wordlist

Back to top ↑

Android

Root Detection and Bypass 2024.06.02 #Android #android #application #app #drozer #insecurebankv2 #mobile #Root Detection and Bypass

Vulnerable Activity Components 2024.06.01 #Android #android #application #app #drozer #insecurebankv2 #mobile #Vulnerable Activity Components

Local Encryption issues 2024.05.20 #Android #android #application #app #drozer #insecurebankv2 #Local Encryption issues #mobile

Weak Authorization mechanism 2024.05.13 #Android #android #application #app #drozer #insecurebankv2 #mobile #Weak Authorization mechanism

Flawed Broadcast Receivers 2024.05.09 #Android #android #application #app #drozer #Flawed Broadcast Receivers #insecurebankv2 #mobile

Back to top ↑

system-vuln

바인드 쉘[Bind Shell], 리버스 쉘[Reverse Shell] 2024.08.30 #system-vuln #Bind Shell #pwnable #Reverse Shell #shell #systemhacking

Frame Pointer Overflow [FPO], SFP Overflow, SFPO 2024.08.30 #system-vuln #FPO #Frame Pointer Overflow #SFP Overflow #SFPO #systemhacking

Return-Oriented-Programming - ROP [x86-32bit] 2024.06.14 #system-vuln #pwnable #pwn #Return Oriented Programming #rop #systemhacking

Back to top ↑

HTB

LinkVortex - WriteUP 2024.12.26 #HTB #LinkVortex

PermX - WriteUP 2024.08.09 #HTB #PermX

Editorial - WriteUP 2024.07.03 #HTB #gitpython #git #HackTheBox #HTB #Pentesting #Pentest #RCE #SSRF

Back to top ↑

Other-Vuln

Privilege Escalation Using LXD_LXC Group Assignment 2024.06.14 #Other-Vuln #lxc #LXD_LXC Group Assignment #lxd #Privilege Escalation

Ruby-regular-expression(newline)[\n] 2024.06.14 #Other-Vuln #\n #newline #regular expression #Ruby

Back to top ↑

Other-Knowledge

vi편집기에서 자동 줄 맞춤 2024.08.30 #Other-Knowledge #vim #vi

Back to top ↑

Lee-GyuHyeok

Category

bwapp

Web-vuln

THM

Tools

Android

system-vuln

HTB

Other-Vuln

Other-Knowledge