Hi๐Ÿ‘‹๐Ÿผ Iโ€™m HAHWUL.

Offensive Security Engineer, Rubyist/Crystalist/Gopher and H4cker

Posts - Page 20 of 86

Ruby์™€ Google Indexing API๋ฅผ ์ด์šฉํ•˜์—ฌ ์ž๋™์œผ๋กœ ์‹ ๊ทœURL ๋“ฑ๋กํ•˜๊ธฐ

  • 4 min read

์ œ๊ฐ€ ๋ธ”๋กœ๊ทธ ๊ธ€์„ ์ž‘์„ฑํ•˜๊ณ  commit - push ์‹œ ๋งŽ์€ ์ž‘์—…๋“ค์ด ์ผ์–ด๋‚ฉ๋‹ˆ๋‹ค. ๋Œ€ํ‘œ์ ์ธ ๊ฒƒ๋“ค์„ ์ด์•ผ๊ธฐ ๋“œ๋ฆฌ๋ฉด, Jekyll build ๋ฐ deploy ๊ณผ์ •์ด ์ง„ํ–‰๋˜๊ณ  ์ด๋ฏธ์ง€ ์ค‘ compress๊ฐ€ ํ•„์š”ํ•œ ์ด๋ฏธ์ง€๋Š” compress ์ฒ˜๋ฆฌํ•˜์—ฌ ์šฉ๋Ÿ‰์„ ์ค„์ด๊ณ , notify ๋“ฑ ์—ฌ๋Ÿฌ๊ฐ€์ง€ ๊ณผ์ •๋“ค์ด github action์— ๋…น์•„์žˆ์Šต๋‹ˆ๋‹ค.

Read More

[Faraday#2] Dispatcher๋ฅผ ์ด์šฉํ•œ Scanning CI

  • 2 min read

์ด๋ฒˆ ์ฃผ๋ง์—๋Š” ํ‹ˆํ‹ˆํžˆ Faraday ๊ด€๋ จํ•ด์„œ ๊ณ„์† ํ…Œ์ŠคํŠธํ•ด๋ณด๊ณ  ์žˆ์—ˆ์Šต๋‹ˆ๋‹ค. ๊ทธ ์ค‘ faraday_agent_dispatcher ๋ผ๋Š” ๊ธฐ๋Šฅ์ด ๋ˆˆ์— ๋“ค์–ด์™”๋Š”๋ฐ์š”, ์ด ๊ธฐ๋Šฅ์€ faraday ์„œ๋ฒ„์— ์—ฌ๋Ÿฌ agent ๋ถ™์—ฌ์„œ ๋ฏธ๋ฆฌ ์ง€์ • ํ•ด๋‘” ํฌ๋งท ๊ทธ๋ฆฌ๊ณ  ์‚ฌ์šฉ์ž๊ฐ€ ์ „๋‹ฌํ•ด์ค€ ๋ฐ์ดํ„ฐ ๋”ฐ๋ผ ์Šค์บ๋‹์„ ์ง„ํ–‰ํ•˜๊ณ  ๊ฒฐ๊ณผ๋ฅผ faraday์— ๋ฐ˜์˜ํ•˜๋Š” ๊ธฐ๋Šฅ์ž…๋‹ˆ๋‹ค.

Read More

[Faraday#1] Penetration testing IDE!

  • 4 min read

ํ˜น์‹œ faraday๋ผ๊ณ  ๋“ค์–ด๋ณด์…จ๋‚˜์š”? pentesting ๊ด€๋ จํ•ด์„œ ์กฐ๊ธˆ ์ฐพ์•„๋ณด๋‹ค ๋ณด๋ฉด ํ•œ๋ฒˆ ์ฏค์€ ๋“ค์–ด๋ณผ ์ˆ˜ ์žˆ๋Š” framework๋กœ ์ € ๋˜ํ•œ ์˜ˆ์ „๋ถ€ํ„ฐ ๊ด€์‹ฌ์ด ์žˆ๊ธด ํ–ˆ์ง€๋งŒ, ์‹ค์ œ๋กœ ์‚ฌ์šฉํ•ด๋ณผ ์ผ์ด ์—†์–ด์„œ ๋ธ”๋กœ๊ทธ์—๋„ ์†Œ๊ฐœํ•ด๋“œ๋ฆฐ ์ ์ด ์—†์—ˆ๋„ค์š”. (๋ณดํ†ต ์ „ pentest ์‹œ msf + documents ๋„๊ตฌ๋ฉด ์ถฉ๋ถ„ํ•˜๋‹ค ๋Š๊ผˆ์–ด์„œโ€ฆ )

Read More

Github default branch ๋ณ€๊ฒฝํ•˜๊ธฐ (master to main)

  • 1 min read

์˜ค๋Š˜ ๋„๊ตฌ๋งŒ๋“ค ๋–„ ์“ธ ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ๋ฅผ ๋งŒ๋“ค์–ด๋‘๋ ค๊ณ  github repository๋ฅผ ์ถ”๊ฐ€ํ•˜๋ ค ํ–ˆ๋”๋‹ˆ ์•„๋ž˜์™€ ๊ฐ™์€ ๋ฉ”์‹œ์ง€๊ฐ€ ๋ฐœ์ƒํ–ˆ์Šต๋‹ˆ๋‹ค.

Read More

k8s livenessProbe๋ฅผ ์ด์šฉํ•œ self-healing

  • 1 min read

Kubernetes์˜ self-healing

k8s๋Š” ์ž์ฒด์ ์œผ๋กœ self-healing์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ์‹œ์Šคํ…œ์ด ์˜ํ–ฅ๋ฐ›์„ ๋•Œ ๋งˆ๋‹ค pod, container ๋‹จ์œ„๋กœ ์ƒํƒœ๋ฅผ ๊ฐ์ง€ํ•˜๊ณ , ๋น„์ •์ƒ์ ์ธ ๊ฒฝ์šฐ ์ž์ฒด์ ์œผ๋กœ ๊ต์ฒดํ•˜์—ฌ ์ตœ๋Œ€ํ•œ ์•ˆ์ •์ ์ธ ์„œ๋น„์Šค๋ฅผ ์œ ์ง€ํ•  ์ˆ˜ ์žˆ๋„๋ก ๋„์™€์ค๋‹ˆ๋‹ค.

Read More

ffmpeg๋ฅผ ์ด์šฉํ•˜์—ฌ macos์—์„œ ๋™์˜์ƒ์„ gif๋กœ ๋ณ€ํ™˜ํ•˜๊ธฐ (transcoding)

  • 1 min read

์ €๋Š” ํšŒ์‚ฌ ๋˜๋Š” ๊ฐœ์ธ์ ์œผ๋กœ๋„ PoC์— ์˜์ƒ์„ ์ž์ฃผ ํ™œ์šฉํ•˜๋Š” ํŽธ์ž…๋‹ˆ๋‹ค. ๋ณดํ†ต QuickTime ์œผ๋กœ ํ™”๋ฉด์„ ์บก์ณํ•œ ํ›„ ๋ฐ”๋กœ ์‚ฌ์šฉํ•˜๊ฑฐ๋‚˜ ํŽธ์ง‘ ๋„๊ตฌ๋ฅผ ํ†ตํ•ด ์†์„ ๋ณด๊ณ  ์‚ฌ์šฉํ•˜๊ฒŒ ๋˜๋Š”๋ฐ์š”. github issue ๊ฐ™์ด ๋™์˜์ƒ ํŒŒ์ผ ํ™•์žฅ์ž ์—…๋กœ๋“œ๊ฐ€ ์•ˆ๋˜๋Š” ์„œ๋น„์Šค์—์„œ๋Š” ์˜์ƒ ํŒŒ์ผ์„ ๋ฐ”๋กœ ์‚ฌ์šฉํ•  ์ˆ˜๊ฐ€ ์—†์–ด gif๋กœ ๋ณ€ํ™˜ํ•˜์—ฌ ์‚ฌ์šฉํ•˜๊ณค ํ•ฉ๋‹ˆ๋‹ค.

Read More

ZAP OAST ๋ฏธ๋ฆฌ ๊ตฌ๊ฒฝํ•˜๊ธฐ (for OOB)

  • 2 min read

ZAP developers์— ์ปจํ…์ธ  ํ•˜๋‚˜๊ฐ€ ๊ณต์œ ๋˜์—ˆ๋Š”๋ฐ์š” ๋ฐ”๋กœ OAST์— ๋Œ€ํ•œ ๋‚ด์šฉ์ด์˜€์Šต๋‹ˆ๋‹ค. OAST๋Š” ์ด๋ฒˆ์— ZAP core team(akshath)์—์„œ ์‹ ๊ทœ๋กœ ๊ฐœ๋ฐœ์ค‘์ธ AddOn์ž…๋‹ˆ๋‹ค. ๊ธฐ์กด zap callback ๊ธฐ๋Šฅ์— burp suite์˜ collaborator ์™€ ๊ฐ™์ด out-of-band๋ฅผ ์‰ฝ๊ฒŒ ํ…Œ์ŠคํŠธํ•  ์ˆ˜ ์žˆ๋„๋ก ์ง€์›ํ•ด์ฃผ๋Š” AddOn์ž…๋‹ˆ๋‹ค.

Read More

Go์—์„œ ์ž๋™์œผ๋กœ ํ…Œ์ŠคํŠธ ์ฝ”๋“œ ์ƒ์„ฑํ•˜๊ธฐ(with gotests)

  • 3 min read

์ €๋Š” ํ…Œ์ŠคํŠธ ์ฝ”๋“œ๋ฅผ ๋งŽ์ด ์ž‘์„ฑํ•˜์ง„ ์•Š์Šต๋‹ˆ๋‹ค. ์•„๋ฌด๋ž˜๋„ ๋ณธ์—…์ด ๋ณด์•ˆ ์—”์ง€๋‹ˆ์–ด๋ง์ด๋‹ค ๋ณด๋‹ˆ ํ˜„์—… ๊ฐœ๋ฐœ์ž์ฒ˜๋Ÿผ ๊ผผ๊ผผํ•˜๊ฒŒ ํ…Œ์ŠคํŠธ ์ฝ”๋“œ๋ฅผ ์ž‘์„ฑํ•˜๊ณ  ์กฐ๊ธˆ ๋” ๋‚˜์•„๊ฐ€ TDD(Test-Driven Development)๋ฅผ ์‹ ๊ฒฝ์“ฐ๋ฉด์„œ ๊ฐœ๋ฐœํ•  ์ˆ˜ ์žˆ๋Š” ์—ฌ์œ ๊ฐ€ ์žˆ๋Š” ๊ฒƒ๋„ ์•„๋‹ˆ๊ตฌ์š”.

Read More

rvm is not a function ์—๋Ÿฌ ํ•ด๊ฒฐํ•˜๊ธฐ

  • ~1 min read

Problem

์ €๋Š” ๋ณดํ†ต ๊ธ€์„ ์ž‘์„ฑํ•  ๋–„ ๋งฅ๋ถ์—์„œ ์ง„ํ–‰ํ•ฉ๋‹ˆ๋‹ค. ๊ทธ๋ž˜์„œ ํ™ˆ ์„œ๋ฒ„์—์„œ๋Š” ์ง์ ‘ ๊ธ€์„ ์ž‘์„ฑํ•  ์ผ์ด ๋ณ„๋กœ ์—†์—ˆ๋Š”๋ฐ, ๋””์ž์ธ ์ข€ ์ˆ˜์ •ํ•˜๊ธฐ ์œ„ํ•ด์„œ ์„œ๋ฒ„์—์„œ ์ง์ ‘ ์ž‘์—…ํ•˜๋‹ค ๋ณด๋‹ˆ jekyll serve ์‹œ ruby ๋ฒ„์ „ ๊ด€๋ จ ์—๋Ÿฌ๊ฐ€ ์žˆ์—ˆ์Šต๋‹ˆ๋‹ค. ์š”์•ฝํ•˜๋ฉด github pages gem์€ 2.x ๋ฒ„์ „๋งŒ ์ง€์›ํ•˜๋Š”๋ฐ, ์‹œ์Šคํ…œ ๋ฒ„์ „์ด 3.x ๋ฒ„์ „์ด๋ผ์„œ ๋ฐœ์ƒํ•œ ๋ฌธ์ œ์˜€๊ณ , ์ด๋ฅผ rvm๋กœ ์ฒ˜๋ฆฌํ•˜๊ณ ์ž rvm use๋ฅผ ์‚ฌ์šฉํ–ˆ๋”๋‹ˆ ์•„๋ž˜์™€ ๊ฐ™์€ ์—๋Ÿฌ๊ฐ€ ๋ฐœ์ƒํ–ˆ์—‡์Šต๋‹ˆ๋‹ค.

Read More