qazbnm456/awesome-web-security🐶 엄선된 웹 보안 자료 및 리소스 목록.
# Awesome Web Security [](https://github.com/sindresorhus/awesome)
[<img src="https://upload.wikimedia.org/wikipedia/commons/6/61/HTML5_logo_and_wordmark.svg" align="right" width="70">](https://www.w3.org/TR/html5/)
> 🐶 웹 보안 자료 및 리소스의 엄선된 목록.
말할 필요도 없이, 대부분의 웹사이트는 다양한 유형의 버그로 인해 결국 취약점으로 이어질 수 있습니다. 왜 이런 일이 자주 발생할까요? 잘못된 설정, 엔지니어의 보안 기술 부족 등 여러 요인이 관련될 수 있습니다. 이에 대응하기 위해 최첨단 침투 기술을 학습하기 위한 웹 보안 자료 및 리소스의 엄선된 목록을 제공하며, 먼저 이 글 "[So you want to be a web security researcher?](https://portswigger.net/blog/so-you-want-to-be-a-web-security-researcher)"를 읽어보시기를 적극 권장합니다.
*기여하기 전에 [기여 가이드라인](https://github.com/qazbnm456/awesome-web-security/blob/master/CONTRIBUTING.md)을 읽어주세요.*
---
<p align="center"><b>🌈 침투 기술을 강화하고 싶으신가요?</b><br>일부 <a href="https://github.com/apsdehal/awesome-ctf" target="_blank">awesome-ctf</a>를 플레이하는 것을 추천합니다.</p>
---
이 멋진 목록이 마음에 드시고 지원하고 싶으시다면, 제 [Patreon](https://www.patreon.com/boik) 페이지를 확인해보세요 :)<br>또한, 제 [repos](https://github.com/qazbnm456) 🐾를 확인하거나 [X (구 트위터)](https://x.com/boik_su)에서 *안녕*이라고 인사하는 것을 잊지 마세요!
---
### 🤖 AI 어시스턴트를 사용 중이신가요?
이 목록은 Claude Code Skill로도 제공되므로 AI 에이전트가 런타임에 이를 쿼리할 수 있습니다 — 오래된 스냅샷 없이, 항상 `master`의 최신 `data/index.json`을 읽습니다.
**설치** (원 라이너, 권장):```bash
npx skills add qazbnm456/awesome-web-security -a claude-code -g -y
```
또는 [Claude Code](https://claude.com/claude-code) 내에서는 플러그인 마켓플레이스를 사용하세요:```text
/plugin marketplace add qazbnm456/awesome-web-security
/plugin install awesome-web-security
```
For [Codex](https://github.com/openai/codex)는 `-a claude-code` → `-a codex`로 바꿉니다.
그런 다음 웹 보안 관련 질문을 하면 XSS, SQLi, SSRF, JWT, OAuth, 정찰, WAF 우회, 역직렬화, SAML, CTF Write-up 등 주제에 대해 스킬이 활성화됩니다. 전체 트리거 목록은 [`skills/awesome-web-security/SKILL.md`](https://github.com/qazbnm456/awesome-web-security/blob/master/skills/awesome-web-security/SKILL.md)에서 확인하세요.
## 목차
- [요약](#digests)
- [포럼](#forums)
- [소개](#intro)
- [XSS](#xss---cross-site-scripting)
- [프로토타입 오염](#prototype-pollution)
- [CSV 인젝션](#csv-injection)
- [SQL 인젝션](#sql-injection)
- [명령어 인젝션](#command-injection)
- [ORM 인젝션](#orm-injection)
- [FTP 인젝션](#ftp-injection)
- [XXE](#xxe---xml-external-entity)
- [CSRF](#csrf---cross-site-request-forgery)
- [클릭재킹](#clickjacking)
- [SSRF](#ssrf---server-side-request-forgery)
- [웹 캐시 포이즈닝](#web-cache-poisoning)
- [상대 경로 덮어쓰기](#relative-path-overwrite)
- [오픈 리다이렉트](#open-redirect)
- [SAML](#saml)
- [업로드](#upload)
- [Rails](#rails)
- [AngularJS](#angularjs)
- [ReactJS](#reactjs)
- [SSL/TLS](#ssltls)
- [웹메일](#webmail)
- [NFS](#nfs)
- [AWS](#aws)
- [Azure](#azure)
- [핑거프린트](#fingerprint)
- [서브도메인 열거](#sub-domain-enumeration)
- [암호](#crypto)
- [웹 셸](#web-shell)
- [OSINT](#osint)
- [DNS 리바인딩](#dns-rebinding)
- [역직렬화](#deserialization)
- [OAuth](#oauth)
- [JWT](#jwt)
- [우회 기법](#evasions)
- [XXE](#evasions-xxe)
- [CSP](#evasions-csp)
- [WAF](#evasions-waf)
- [JSMVC](#evasions-jsmvc)
- [인증](#evasions-authentication)
- [트릭](#tricks)
- [CSRF](#tricks-csrf)
- [클릭재킹](#tricks-clickjacking)
- [원격 코드 실행](#tricks-rce)
- [XSS](#tricks-xss)
- [SQL 인젝션](#tricks-sql-injection)
- [NoSQL 인젝션](#tricks-nosql-injection)
- [FTP 인젝션](#tricks-ftp-injection)
- [XXE](#tricks-xxe)
- [SSRF](#tricks-ssrf)
- [웹 캐시 포이즈닝](#tricks-web-cache-poisoning)
- [헤더 인젝션](#tricks-header-injection)
- [URL](#tricks-url)
- [역직렬화](#tricks-deserialization)
- [OAuth](#tricks-oauth)
- [기타](#tricks-others)
- [브라우저 익스플로잇](#browser-exploitation)
- [PoC](#pocs)
- [데이터베이스](#pocs-database)
- [치트시트](#cheetsheets)
- [도구](#tools)
- [감사](#tools-auditing)
- [명령어 인젝션](#tools-command-injection)
- [정찰](#tools-reconnaissance)
- [OSINT](#tools-osint)
- [서브도메인 열거](#tools-sub-domain-enumeration)
- [코드 생성](#tools-code-generating)
- [퍼징](#tools-fuzzing)
- [스캐닝](#tools-scanning)
- [침투 테스트](#tools-penetration-testing)
- [공격](#tools-offensive)
- [XSS](#tools-xss)
- [SQL 인젝션](#tools-sql-injection)
- [템플릿 인젝션](#tools-template-injection)
- [XXE](#tools-xxe)
- [CSRF](#tools-csrf)
- [SSRF](#tools-ssrf)
- [유출](#tools-leaking)
- [탐지](#tools-detecting)
- [방지](#tools-preventing)
- [프록시](#tools-proxy)
- [웹 셸](#tools-webshell)
- [디스어셈블러](#tools-disassembler)
- [디컴파일러](#tools-decompiler)
- [DNS 리바인딩](#tools-dns-rebinding)
- [기타](#tools-others)
- [소셜 엔지니어링 데이터베이스](#social-engineering-database)
- [블로그](#blogs)
- [트위터 사용자](#twitter-users)
- [실습](#practices)
- [애플리케이션](#practices-application)
- [AWS](#practices-aws)
- [XSS](#practices-xss)
- [ModSecurity / OWASP ModSecurity Core Rule Set](#practices-modsecurity)
- [커뮤니티](#community)
- [기타](#miscellaneous)
## 요약
- [CTF Field Guide](https://trailofbits.github.io/ctf/) - [Trail of Bits](https://www.trailofbits.com/) 작성.
- [Hacker101](https://www.hacker101.com/) - [hackerone](https://www.hackerone.com/start-hacking) 작성.
- [Infosec Newbie](https://www.sneakymonkey.net/2017/04/23/infosec-newbie/) - [Mark Robinson](https://www.sneakymonkey.net/) 작성.
- [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings/) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
- [The Daily Swig - Web security digest](https://portswigger.net/daily-swig) - [PortSwigger](https://portswigger.net/) 작성.
- [The Magic of Learning](https://bitvijays.github.io/) - [@bitvijays](https://bitvijays.github.io/aboutme.html) 작성.
- [Web Application Security Zone by Netsparker](https://www.netsparker.com/blog/web-security/) - [Netsparker](https://www.netsparker.com/) 작성.
- [tl;dr sec](https://tldrsec.com/) - 최고의 보안 도구, 블로그 게시물, 보안 연구의 주간 요약.
## 포럼
- [Dark Reading](https://www.darkreading.com/Default.asp) - 정보 보안 커뮤니티 연결.
- [HackDig](http://en.hackdig.com/) - 해커를 위한 고품질 웹 보안 기사 발굴.
- [Phrack Magazine](http://www.phrack.org/) - 해커에 의해 해커를 위해 작성된 전자 잡지.
- [Security Weekly](https://securityweekly.com/) - 보안 팟캐스트 네트워크.
- [The Hacker News](https://thehackernews.com/) - 진지한 보안.
- [The Register](http://www.theregister.co.uk/) - IT 세계를 비판적으로 다룸.
<a name="intro"></a>
## 소개
<a name="xss"></a>
### XSS - 크로스 사이트 스크립팅
- [C.XSS Guide](https://excess-xss.com/) - [@JakobKallin](https://github.com/JakobKallin)과 [Irene Lobo Valbuena](https://www.linkedin.com/in/irenelobovalbuena/) 작성.
- [Cross-Site Scripting – Application Security – Google](https://www.google.com/intl/sw/about/appsecurity/learning/xss/) - [Google](https://www.google.com/) 작성.
- [H5SC](https://github.com/cure53/H5SC) - [@cure53](https://github.com/cure53) 작성.
- [THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS](http://www.paulosyibelo.com/2018/06/the-big-bad-wolf-xss-and-maintaining.html) - [Paulos Yibelo](http://www.paulosyibelo.com/) 작성.
- [AwesomeXSS](https://github.com/s0md3v/AwesomeXSS) - [@s0md3v](https://github.com/s0md3v) 작성.
- [XSS.png](https://github.com/LucaBongiorni/XSS.png) - @jackmasa 작성.
- [PayloadsAllTheThings - XSS Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XSS%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
- [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) - [@payloadbox](https://github.com/payloadbox) 작성.
- [Laravel Content Security Policy: Complete Implementation Guide](https://blog.shakiltech.com/laravel-content-security-policy-guide/) - Laravel에서 Content Security Policy를 구현하는 실전 가이드 (nonce 수명주기, Vite 및 Livewire 통합, 위반 보고, 사전 시행 체크리스트 포함) - [@itxshakil](https://github.com/itxshakil) 작성.
<a name="prototype-pollution"></a>
### 프로토타입 오염
- [Prototype pollution attack in NodeJS application](https://github.com/HoLyVieR/prototype-pollution-nsec18/blob/master/paper/JavaScript_prototype_pollution_attack_in_NodeJS.pdf) - [@HoLyVieR](https://github.com/HoLyVieR) 작성.
- [Real-world JS - 1](https://blog.p6.is/Real-World-JS-1/) - [@po6ix](https://twitter.com/po6ix) 작성.
- [Exploiting prototype pollution – RCE in Kibana (CVE-2019-7609)](https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019-7609/) - [@securitymb](https://twitter.com/securitymb) 작성.
<a name="csv-injection"></a>
### CSV 인젝션
- [CSV Injection -> Meterpreter on Pornhub](https://news.webamooz.com/wp-content/uploads/bot/offsecmag/147.pdf) - [Andy](https://blog.zsec.uk/) 작성.
- [The Absurdly Underestimated Dangers of CSV Injection](http://georgemauer.net/2017/10/07/csv-injection.html) - [George Mauer](http://georgemauer.net/) 작성.
- [PayloadsAllTheThings - CSV Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="sql-injection"></a>
### SQL 인젝션
- [SQL Injection Cheat Sheet](https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/) - [@netsparker](https://twitter.com/netsparker) 작성.
- [SQL Injection Pocket Reference](https://websec.ca/kb/sql_injection) - [@LightOS](https://twitter.com/LightOS) 작성.
- [SQL Injection Wiki](https://sqlwiki.netspi.com/) - [NETSPI](https://www.netspi.com/) 작성.
- [PayloadsAllTheThings - SQL Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SQL%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
- [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list) - [@payloadbox](https://github.com/payloadbox) 작성.
<a name="command-injection"></a>
### 명령어 인젝션
- [Potential command injection in resolv.rb](https://github.com/ruby/ruby/pull/1777) - [@drigg3r](https://github.com/drigg3r) 작성.
- [PayloadsAllTheThings - Command Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
- [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list) - [@payloadbox](https://github.com/payloadbox) 작성.
<a name="orm-injection"></a>
### ORM 인젝션
- [HQL : Hyperinsane Query Language (or how to access the whole SQL API within a HQL injection ?)](https://www.synacktiv.com/ressources/hql2sql_sstic_2015_en.pdf) - [@_m0bius](https://twitter.com/_m0bius) 작성.
- [HQL for pentesters](http://blog.h3xstream.com/2014/02/hql-for-pentesters.html) - [@h3xstream](https://twitter.com/h3xstream/) 작성.
- [ORM Injection](https://www.slideshare.net/simone.onofri/orm-injection) - [Simone Onofri](https://onofri.org/) 작성.
- [ORM2Pwn: Exploiting injections in Hibernate ORM](https://www.slideshare.net/0ang3el/orm2pwn-exploiting-injections-in-hibernate-orm) - [Mikhail Egorov](https://0ang3el.blogspot.tw/) 작성.
<a name="ftp-injection"></a>
### FTP 인젝션
- [Advisory: Java/Python FTP Injections Allow for Firewall Bypass](http://blog.blindspotsecurity.com/2017/02/advisory-javapython-ftp-injections.html) - [Timothy Morgan](https://plus.google.com/105917618099766831589) 작성.
- [SMTP over XXE − how to send emails using Java's XML parser](https://shiftordie.de/blog/2017/02/18/smtp-over-xxe/) - [Alexander Klink](https://shiftordie.de/) 작성.
<a name="xxe"></a>
### XXE - XML 외부 엔티티
- [XXE](https://phonexicum.github.io/infosec/xxe.html) - [@phonexicum](https://twitter.com/phonexicum) 작성.
- [PayloadsAllTheThings - XXE Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XXE%20Injection) - 여러 기여자가 작성함.
- [XML external entity (XXE) injection](https://portswigger.net/web-security/xxe) - [portswigger](https://portswigger.net/) 작성.
- [XML Schema, DTD, and Entity Attacks](https://www.vsecurity.com/download/publications/XMLDTDEntityAttacks.pdf) - [Timothy D. Morgan](https://twitter.com/ecbftw) 및 Omar Al Ibrahim 작성.
- [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list) - [@payloadbox](https://github.com/payloadbox) 작성.
<a name="csrf"></a>
### CSRF - 사이트 간 요청 위조
- [Wiping Out CSRF](https://medium.com/@jrozner/wiping-out-csrf-ded97ae7e83f) - [@jrozner](https://medium.com/@jrozner) 작성.
- [PayloadsAllTheThings - CSRF Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="clickjacking"></a>
### 클릭재킹
- [Clickjacking](https://www.imperva.com/learn/application-security/clickjacking/) - [Imperva](https://www.imperva.com/) 작성.
- [X-Frame-Options: All about Clickjacking?](https://github.com/cure53/Publications/blob/master/xfo-clickjacking.pdf?raw=true) - [Mario Heiderich](http://www.slideshare.net/x00mario) 작성.
<a name="ssrf"></a>
### SSRF - 서버 측 요청 위조
- [SSRF bible. Cheatsheet](https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYXBcdLUedXGb9njTNIJXa3u9akHM/edit) - [Wallarm](https://wallarm.com/) 작성.
- [PayloadsAllTheThings - Server-Side Request Forgery](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="web-cache-poisoning"></a>
### 웹 캐시 포이즈닝
- [Practical Web Cache Poisoning](https://portswigger.net/blog/practical-web-cache-poisoning) - [@albinowax](https://twitter.com/albinowax) 작성.
- [PayloadsAllTheThings - Web Cache Deception](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Web%20Cache%20Deception) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="relative-path-overwrite"></a>
### 상대 경로 덮어쓰기
- [Large-scale analysis of style injection by relative path overwrite](https://blog.acolyer.org/2018/05/28/large-scale-analysis-of-style-injection-by-relative-path-overwrite/) - [The Morning Paper](https://blog.acolyer.org/) 작성.
- [MBSD Technical Whitepaper - A few RPO exploitation techniques](https://www.mbsd.jp/Whitepaper/rpo.pdf) - [Mitsui Bussan Secure Directions, Inc.](https://www.mbsd.jp/) 작성.
<a name="open-redirect"></a>
### 오픈 리다이렉트
- [Open Redirect Vulnerability](https://s0cket7.com/open-redirect-vulnerability/) - [s0cket7](https://s0cket7.com/) 작성.
- [PayloadsAllTheThings - Open Redirect](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Open%20Redirect) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
- [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list) - [@payloadbox](https://github.com/payloadbox) 작성.
<a name="saml"></a>
### SAML (보안 어설션 마크업 언어)
- [How to Hunt Bugs in SAML; a Methodology - Part I](https://epi052.gitlab.io/notes-to-self/blog/2019-03-07-how-to-test-saml-a-methodology/) - [epi](https://epi052.gitlab.io/notes-to-self/) 작성.
- [How to Hunt Bugs in SAML; a Methodology - Part II](https://epi052.gitlab.io/notes-to-self/blog/2019-03-13-how-to-test-saml-a-methodology-part-two/) - [epi](https://epi052.gitlab.io/notes-to-self/) 작성.
- [How to Hunt Bugs in SAML; a Methodology - Part III](https://epi052.gitlab.io/notes-to-self/blog/2019-03-16-how-to-test-saml-a-methodology-part-three/) - [epi](https://epi052.gitlab.io/notes-to-self/) 작성.
- [PayloadsAllTheThings - SAML Injection](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SAML%20Injection) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="upload"></a>
### 업로드
- [File Upload Restrictions Bypass](https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf) - [Haboob Team](https://www.exploit-db.com/author/?a=9381) 작성.
- [PayloadsAllTheThings - Upload Insecure Files](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files) - [@swisskyrepo](https://github.com/swisskyrepo) 작성.
<a name="rails"></a>
### Rails
- [Rails Security - First part](https://hackmd.io/s/SkuTVw5O-) - [@qazbnm456](https://github.com/qazbnm456) 작성.
- [Official Rails Security Guide](http://guides.rubyonrails.org/security.html) - [Rails team](https://rubyonrails.org/) 작성.
- [Rails SQL Injection](https://rails-sqli.org) - [@presidentbeef](https://github.com/presidentbeef) 작성.
- [Zen Rails Security Checklist](https://github.com/brunofacca/zen-rails-security-checklist) - [@brunofacca](https://github.com/brunofacca) 작성.
<a name="angularjs"></a>
### AngularJS
- [DOM based Angular sandbox escapes](http://blog.portswigger.net/2017/05/dom-based-angularjs-sandbox-escapes.html) - [@garethheyes](https://twitter.com/garethheyes) 작성.
- [XSS without HTML: Client-Side Template Injection with AngularJS](http://blog.portswigger.net/2016/01/xss-without-html-client-side-template.html) - [Gareth Heyes](https://www.blogger.com/profile/10856178524811553475) 작성.
<a name="reactjs"></a>
### ReactJS
- [XSS via a spoofed React element](http://danlec.com/blog/xss-via-a-spoofed-react-element) - [Daniel LeCheminant](http://danlec.com/) 작성.
<a name="ssl-tls"></a>
### SSL/TLS
- [SSL & TLS Penetration Testing](https://www.aptive.co.uk/blog/tls-ssl-security-testing/) - [APTIVE](https://www.aptive.co.uk/) 작성.
- [Practical introduction to SSL/TLS](https://github.com/Hakky54/mutual-tls-ssl) - [@Hakky54](https://github.com/Hakky54) 작성.
<a name="webmail"></a>
### 웹메일
- [Why mail() is dangerous in PHP](https://blog.ripstech.com/2017/why-mail-is-dangerous-in-php/) - [Robin Peraglie](https://www.ripstech.com/) 작성.
<a name="nfs"></a>
### NFS
- [NFS | PENETRATION TESTING ACADEMY](https://pentestacademy.wordpress.com/2017/09/20/nfs/?t=1&cn=ZmxleGlibGVfcmVjc18y&refsrc=email&iid=b34422ce15164e99a193fea0ccc7a02f&uid=1959680352&nid=244+289476616) - [PENETRATION ACADEMY](https://pentestacademy.wordpress.com/) 작성.
<a name="aws"></a>
### AWS
- [PENETRATION TESTING AWS STORAGE: KICKING THE S3 BUCKET](https://rhinosecuritylabs.com/penetration-testing/penetration-testing-aws-storage/) - Dwight Hohnstein ([Rhino Security Labs](https://rhinosecuritylabs.com/)) 작성.
- [AWS PENETRATION TESTING PART 1. S3 BUCKETS](https://www.virtuesecurity.com/aws-penetration-testing-part-1-s3-buckets/) - [VirtueSecurity](https://www.virtuesecurity.com/) 작성.
- [AWS PENETRATION TESTING PART 2. S3, IAM, EC2](https://www.virtuesecurity.com/aws-penetration-testing-part-2-s3-iam-ec2/) - [VirtueSecurity](https://www.virtuesecurity.com/) 작성.
- [Misadventures in AWS](https://labs.f-secure.com/blog/misadventures-in-aws) - Christian Demko 작성.
<a name="azure"></a>
### Azure
- [Cloud Security Risks (Part 1): Azure CSV Injection Vulnerability](https://rhinosecuritylabs.com/azure/cloud-security-risks-part-1-azure-csv-injection-vulnerability/) - [@spengietz](https://twitter.com/spengietz) 작성.
- [Common Azure Security Vulnerabilities and Misconfigurations](https://rhinosecuritylabs.com/cloud-security/common-azure-security-vulnerabilities/) - [@rhinobenjamin](https://twitter.com/rhinobenjamin) 작성.
<a name="fingerprint"></a>
### 핑거프린트
<a name="sub-domain-enumeration"></a>
### 서브도메인 열거
- [A penetration tester’s guide to sub-domain enumeration](https://blog.appsecco.com/a-penetration-testers-guide-to-sub-domain-enumeration-7d842d5570f6) - [Bharath](https://blog.appsecco.com/@yamakira_) 작성.
- [The Art of Subdomain Enumeration](https://blog.sweepatic.com/art-of-subdomain-enumeration/) - [Patrik Hudak](https://blog.sweepatic.com/author/patrik/) 작성.
<a name="crypto"></a>
### 암호
- [Applied Crypto Hardening](https://bettercrypto.org/) - [The bettercrypto.org Team](https://bettercrypto.org/) 작성.
- [What is a Side-Channel Attack ?](https://www.csoonline.com/article/3388647/what-is-a-side-channel-attack-how-these-end-runs-around-encryption-put-everyone-at-risk.html) - [J.M Porup](https://www.csoonline.com/author/J.M.-Porup/) 작성.
<a name="web-shell"></a>
### 웹 셸
- [Hacking with JSP Shells](https://blog.netspi.com/hacking-with-jsp-shells/) - [@_nullbind](https://twitter.com/_nullbind) 작성.
- [Hunting for Web Shells](https://www.tenable.com/blog/hunting-for-web-shells) - [Jacob Baines](https://www.tenable.com/profile/jacob-baines) 작성.
<a name="osint"></a>
### OSINT- [OSINT 기술로 암호화폐 채굴기 해킹하기](https://medium.com/@s3yfullah/hacking-cryptocurrency-miners-with-osint-techniques-677bbb3e0157) - 작성: [@s3yfullah](https://medium.com/@s3yfullah).
- [OSINT x UCCU 오픈소스 인텔리전스 워크숍](https://www.slideshare.net/miaoski/osint-x-uccu-workshop-on-open-source-intelligence) - 작성: [Philippe Lin](https://www.slideshare.net/miaoski).
- [102 다크웹 OSINT 스타일 심층 분석 Kirby Plessas](https://www.youtube.com/watch?v=fzd3zkAI_o4) - 발표: [@kirbstr](https://twitter.com/kirbstr).
- [누구의 이메일이든 찾는 가장 완벽한 가이드](https://www.blurbiz.io/blog/the-most-complete-guide-to-finding-anyones-email) - 작성: [Timur Daudpota](https://www.blurbiz.io/).
<a name="dns-rebinding"></a>
### DNS 리바인딩
- [DNS 리바인딩으로 인터넷에서 사설 네트워크 공격하기](https://medium.com/@brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325) - 작성: [@brannondorsey](https://medium.com/@brannondorsey).
- [인터넷에서 가정용 라우터 해킹하기](https://medium.com/@radekk/hackers-can-get-access-to-your-home-router-1ddadd12a7a7) - 작성: [@radekk](https://medium.com/@radekk).
<a name="deserialization"></a>
### 역직렬화
- [WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, 그리고 당신의 애플리케이션의 공통점은? 이 취약점입니다.](https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/) - 작성: [@breenmachine](https://twitter.com/breenmachine).
- [.NET Roulette: Telerik UI에서 안전하지 않은 역직렬화 익스플로잇](https://www.youtube.com/watch?v=--6PiuvBGAU) - 작성: [@noperator](https://twitter.com/noperator).
- [.NET 역직렬화 공격하기](https://www.youtube.com/watch?v=eDfGpu3iE4Q) - 작성: [@pwntester](https://twitter.com/pwntester).
- [DotNetNuke 쿠키 역직렬화 익스플로잇 방법](https://pentest-tools.com/blog/exploit-dotnetnuke-cookie-deserialization/) - 작성: [CRISTIAN CORNEA](https://pentest-tools.com/blog/author/pentest-cristian/).
- [LIFERAY CVE-2020-7961 익스플로잇 방법: POC로의 빠른 여정](https://www.synacktiv.com/en/publications/how-to-exploit-liferay-cve-2020-7961-quick-journey-to-poc.html) - 작성: [@synacktiv](https://twitter.com/synacktiv).
<a name="oauth"></a>
### OAuth
- [OAuth 2.0에 무슨 일이 일어나고 있나? 그리고 인증에 사용해서는 안 되는 이유.](https://medium.com/securing/what-is-going-on-with-oauth-2-0-and-why-you-should-not-use-it-for-authentication-5f47597b2611) - 작성: [@damianrusinek](https://medium.com/@damianrusinek).
- [OAuth 2.0 및 OpenID Connect 소개](https://pragmaticwebsecurity.com/courses/introduction-oauth-oidc.html) - 작성: [@PhilippeDeRyck](https://twitter.com/PhilippeDeRyck).
<a name="jwt"></a>
### JWT
- [하드코딩된 비밀, 검증되지 않은 토큰 및 기타 일반적인 JWT 실수](https://r2c.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/) - 작성: [@ermil0v](https://twitter.com/ermil0v).
## 우회 기법
<a name="evasions-xxe"></a>
### XXE
- [다른 인코딩을 사용한 OOB XXE 수정 우회](https://twitter.com/SpiderSec/status/1191375472690528256) - 작성: [@SpiderSec](https://twitter.com/SpiderSec).
<a name="evasions-csp"></a>
### CSP
- [CSP: 반사형 XSS로 form-action 우회하기](https://labs.detectify.com/2016/04/04/csp-bypassing-form-action-with-reflected-xss/) - 작성: [Detectify Labs](https://labs.detectify.com/).
- [트위터 XSS + CSP 우회](http://www.paulosyibelo.com/2017/05/twitter-xss-csp-bypass.html) - 작성: [Paulos Yibelo](http://www.paulosyibelo.com/).
- [깔끔하게 CSP 우회하기](https://lab.wallarm.com/how-to-trick-csp-in-letting-you-run-whatever-you-want-73cb5ff428aa) - 작성: [Wallarm](https://wallarm.com/).
- [DOM 기반 댕글링 마크업으로 CSP 회피](https://portswigger.net/blog/evading-csp-with-dom-based-dangling-markup) - 작성: [portswigger](https://portswigger.net/).
- [GitHub의 CSP 여정](https://githubengineering.com/githubs-csp-journey/) - 작성: [@ptoomey3](https://github.com/ptoomey3).
- [GitHub의 CSP 이후 여정](https://githubengineering.com/githubs-post-csp-journey/) - 작성: [@ptoomey3](https://github.com/ptoomey3).
- [동적 모듈 가져오기에 대한 보호 조치?](https://github.com/w3c/webappsec-csp/issues/243) - 작성: [@shhnjk](https://twitter.com/@shhnjk).
<a name="evasions-waf"></a>
### WAF
- [Airbnb – JSON 인코딩, XSS 필터, WAF, CSP 및 감사기 우회가 여덟 가지 취약점으로 이어질 때](https://buer.haus/2017/03/08/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-vulnerabilities/) - 작성: [@Brett Buerhaus](https://twitter.com/bbuerhaus).
- [많은 WAF/NGWAF에서 libinjection 우회 방법](https://medium.com/@d0znpp/how-to-bypass-libinjection-in-many-waf-ngwaf-1e2513453c0f) - 작성: [@d0znpp](https://medium.com/@d0znpp).
- [웹 애플리케이션 방화벽(WAF) 우회 기법](https://medium.com/secjuice/waf-evasion-techniques-718026d693d8) - 작성: [@secjuice](https://twitter.com/secjuice).
- [웹 애플리케이션 방화벽(WAF) 우회 기법 #2](https://medium.com/secjuice/web-application-firewall-waf-evasion-techniques-2-125995f3e7b0) - 작성: [@secjuice](https://twitter.com/secjuice).
<a name="evasions-jsmvc"></a>
### JSMVC
- [JavaScript MVC 및 템플릿 프레임워크](http://www.slideshare.net/x00mario/jsmvcomfg-to-sternly-look-at-javascript-mvc-and-templating-frameworks) - 작성: [Mario Heiderich](http://www.slideshare.net/x00mario).
<a name="evasions-authentication"></a>
### 인증
- [Trend Micro Threat Discovery Appliance - 세션 생성 인증 우회 (CVE-2016-8584)](http://blog.malerisch.net/2017/04/trend-micro-threat-discovery-appliance-session-generation-authentication-bypass-cve-2016-8584.html) - 작성: [@malerisch](https://twitter.com/malerisch) 및 [@steventseeley](https://twitter.com/steventseeley).
## 트릭
<a name="tricks-csrf"></a>
### CSRF
- [Flash와 리디렉션을 사용한 JSON 엔드포인트 CSRF 익스플로잇](https://blog.appsecco.com/exploiting-csrf-on-json-endpoints-with-flash-and-redirects-681d4ad6b31b) - 작성: [@riyazwalikar](https://blog.appsecco.com/@riyazwalikar).
- [CSRF 보호 우회를 위한 깔끔한 트릭](https://zhuanlan.zhihu.com/p/32716181) - 작성: [Twosecurity](https://twosecurity.io/).
- [CSS 주입으로 CSRF 토큰 탈취 (iFrames 없이)](https://github.com/dxa4481/cssInjection) - 작성: [@dxa4481](https://github.com/dxa4481).
- [CSRF를 위한 Java RNG 크래킹 - Javax Faces와 CSRF 토큰 무작위성의 중요성](https://blog.securityevaluators.com/cracking-javas-rng-for-csrf-ea9cacd231d2) - 작성: [@rramgattie](https://blog.securityevaluators.com/@rramgattie).
- [HttpOnly여도 CSRF가 가능하다… 물론 CORS로!](https://medium.com/@_graphx/if-httponly-you-could-still-csrf-of-cors-you-can-5d7ee2c7443) - 작성: [@GraphX](https://twitter.com/GraphX).
<a name="tricks-clickjacking"></a>
### 클릭재킹
- [Google에서 14981.7달러 상당의 클릭재킹](https://medium.com/@raushanraj_65039/google-clickjacking-6a04132b918a) - 작성: [@raushanraj_65039](https://medium.com/@raushanraj_65039).
<a name="tricks-rce"></a>
### 원격 코드 실행
- [DRUPAL 7.X SERVICES MODULE UNSERIALIZE()를 통한 RCE](https://www.ambionics.io/blog/drupal-services-module-rce) - 작성: [Ambionics Security](https://www.ambionics.io/).
- [Node.js 역직렬화 버그를 익스플로잇하여 원격 코드 실행](https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/) - 작성: [OpSecX](https://opsecx.com/index.php/author/ajinabraham/).
- [GitHub Enterprise 원격 코드 실행](https://bounty.github.com/researchers/iblue.html) - 작성: [@iblue](https://github.com/iblue).
- [GitHub Enterprise에서 4가지 취약점을 연쇄적으로 연결하여 SSRF 실행 체인에서 RCE까지!](http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html) - 작성: [Orange](http://blog.orange.tw/).
- [math.js에서 원격 코드 실행 취약점을 익스플로잇한 방법](https://capacitorset.github.io/mathjs/) - 작성: [@capacitorset](https://github.com/capacitorset).
- [3만6천 달러 Google App Engine RCE](https://sites.google.com/site/testsitehacking/-36k-google-app-engine-rce) - 작성: [Ezequiel Pereira](https://sites.google.com/site/testsitehacking/).
- [Poor RichFaces](https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html) - 작성: [CODE WHITE](https://www.code-white.com/).
- [Facebook 서버에서의 원격 코드 실행](https://blog.scrt.ch/2018/08/24/remote-code-execution-on-a-facebook-server/) - 작성: [@blaklis_](https://twitter.com/blaklis_).
- [Evil Teacher: Moodle에서의 코드 인젝션](https://blog.ripstech.com/2018/moodle-remote-code-execution/) - 작성: [RIPS Technologies](https://www.ripstech.com/).
- [WebLogic RCE (CVE-2019-2725) 디버그 일기](https://paper.seebug.org/910/) - 작성: Badcode@Knownsec 404 Team.
- [WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, 그리고 당신의 애플리케이션의 공통점은? 이 취약점입니다.](https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/) - 작성: [@breenmachine](https://twitter.com/@breenmachine).
- [CVE-2019-1306: ARE YOU MY INDEX?](https://www.thezdi.com/blog/2019/10/23/cve-2019-1306-are-you-my-index) - 작성: [@yu5k3](https://twitter.com/yu5k3).
<a name="tricks-xss"></a>
### XSS
- [DOM을 신뢰하지 마라: 스크립트 가젯을 통한 XSS 완화 우회](https://www.blackhat.com/docs/us-17/thursday/us-17-Lekies-Dont-Trust-The-DOM-Bypassing-XSS-Mitigations-Via-Script-Gadgets.pdf) - 작성: [Sebastian Lekies](https://twitter.com/slekies), [Krzysztof Kotowicz](https://twitter.com/kkotowicz), [Eduardo Vela](https://twitter.com/sirdarckcat).
- [공격자의 관점에서 본 ECMAScript 6 - 프레임워크, 샌드박스 및 그 외 모든 것 깨기](http://www.slideshare.net/x00mario/es6-en) - 작성: [Mario Heiderich](http://www.slideshare.net/x00mario).
- [5,000달러 Google Maps XSS를 찾은 방법 (Protobuf 조작으로)](https://medium.com/@marin_m/how-i-found-a-5-000-google-maps-xss-by-fiddling-with-protobuf-963ee0d9caff#.u50nrzhas) - 작성: [@marin_m](https://medium.com/@marin_m).
- [쿼리 매개변수 재정렬로 인해 리디렉션 페이지가 안전하지 않은 URL을 렌더링함](https://hackerone.com/reports/293689) - 작성: [kenziy](https://hackerone.com/kenziy).
---
[Read more](https://github.com/qazbnm456/awesome-web-security)