ไธบๆ‚จๆŽจ่ ๅ‹ฅ็ƒŽๆ˜†่ฟๅฅฃ ็Œž็Œ็‹ฒๅ’Œๅทดๅ›พ้ฒ ้Žถๆ ญ็…ถ้ๅฝ› ้พ˜้ฃ็ฅliu ้’้“•้’†ๆถฒ ๅžฌ้ฃๅฉ‚็•ฏ้–ๅ—™ๅญฉ ็พด็Š‡้ฑปๆ€Žไนˆ่ฏป ๅ„žๅพๅฑพๆ€Žไนˆ่ฏป ่ตฑไนงไธฑๆ€Žไนˆ่ฏป ไบผไบผไบผๆ€Žไนˆ่ฏป ๅฅฐ็ฝ่ฑณๆ€Žไนˆ่ฏป ไผ–่Žปๆ’ๆ€Žไนˆ่ฏป

๊ฐ€์ƒ ๋จธ์‹ ์—์„œ ๊ด€๋ฆฌ ID๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์•ก์„ธ์Šค ํ† ํฐ ํš๋“ Managed identities for Azure resources Microsoft Learn

ํด๋ ˆ์ž„์—๋„ ํ‘œ์‹œ๋ฉ๋‹ˆ๋‹ค. ์ด ์˜ˆ์ œ์—์„œ๋Š” ์•ฑ ID URIhttps://management.azure.com/๊ฐ€ ์žˆ๋Š” Azure Resource Manager์— ์•ก์„ธ์Šคํ•˜๊ธฐ ์œ„ํ•ด ํ† ํฐ์„ ์š”์ฒญํ•ฉ๋‹ˆ๋‹ค. Metadata ๊ด€๋ฆฌ ID์— ํ•„์š”ํ•œ HTTP ์š”์ฒญ ํ—ค๋” ํ•„๋“œ์ž…๋‹ˆ๋‹ค. ์ด ์ •๋ณด๋Š” SSRF(์„œ๋ฒ„ ์ชฝ ์š”์ฒญ ์œ„์กฐ) ๊ณต๊ฒฉ์— ๋Œ€ํ•œ ์™„ํ™”๋กœ ์‚ฌ์šฉ๋ฉ๋‹ˆ๋‹ค. ์ด ๊ฐ’์€ ๋ชจ๋‘ ์†Œ๋ฌธ์ž์—์„œ true ๋กœ ์„ค์ •ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. object_id (์„ ...
learn.microsoft.com

Adobe ๋ณด์•ˆ ๊ฒŒ์‹œํŒ

SSRF(์„œ๋ฒ„์ธก ์š”์ฒญ ์œ„์กฐ) ( CWE-918) ์ž„์˜ ์ฝ”๋“œ ์‹คํ–‰ ์ค‘์š” 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2026-76193 ๋ฉ”๋ชจ2026๋…„ 8์›” 11์ผ๋ถ€ํ„ฐ Adobe๋Š” ๋ฆด๋ฆฌ์Šค์— ์‹œ์Šคํ…œ ์ „๋ฐ˜์˜ ์ˆ˜์ • ์‚ฌํ•ญ์ด ํฌํ•จ๋œ ๊ฒฝ์šฐ, ๋™์ผํ•œ ์‹ฌ๊ฐ๋„ ๋“ฑ๊ธ‰๊ณผ CWE ๋ฒ”์ฃผ๋ฅผ ๊ฐ€์ง„ ๋‚ด๋ถ€์ ์œผ๋กœ ๋ฐœ๊ฒฌ๋œ ์ทจ์•ฝ์ ์— ๋Œ€ํ•ด ๋‹จ์ผ CVE ์‹๋ณ„์ž๋ฅผ ํ• ๋‹นํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์‰ฝ๊ณ  ๋น ...

helpx.adobe.com

์ •์„ฑ์šฑ Security Consultant

์•ˆ๋…•ํ•˜์„ธ์š”, ๋ณด์•ˆ ์—ฐ๊ตฌ์›์œผ๋กœ ํ™œ๋™ํ•˜๊ณ  ์žˆ๋Š” ์ •์„ฑ์šฑ์ž…๋‹ˆ๋‹ค. ํ˜„์žฌ ์›น/๋ชจ๋ฐ”์ผ ๋ชจ์˜ํ•ดํ‚น๊ณผ ๋ ˆ๋“œํŒ€ ์—…๋ฌด์— ์ง‘์ค‘ํ•˜๊ณ  ์žˆ์œผ๋ฉฐ, ํ•ญ์ƒ ์ƒˆ๋กœ์šด ์ทจ์•ฝ์ ์„ ํƒ์ƒ‰ํ•˜๊ณ  ๋ณด์•ˆ์˜ ๊ฒฝ๊ณ„๋ฅผ ๋„“ํ˜€๊ฐ€๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

idont.kr

โฏ@hoya6798๐Ÿฆ‚โฐ์žฌํ…Œํฌ..._็›ธๅ…ณ่ฝฏไปถ

๋ฐฐ์ •์—ฐ ํฌํŠธํด๋ฆฌ์˜ค

฿›๏ฟฝ๏ธSecurityโš™๏ธBackend฿–๏ฟฝ๏ธFrontendโ˜๏ธInfra & DevOps฿—๏ฟฝ๏ธDatabase฿ค๏ฟฝAI & Data฿“๏ฟฝMessage Queue฿”๏ฟฝTools & Testing ฿›๏ฟฝ๏ธSecurity SQL Injection์ƒ๊ธ‰XSS (Stored/Reflected)์ƒ๊ธ‰CSRF / SSRF / SSTI์ค‘๊ธ‰OWASP Top 10์ƒ๊ธ‰Burp Suite์ƒ๊ธ‰OWASP ZAP์ค‘๊ธ‰๋ชจ๋ฐ”์ผ ์•ฑ ์ทจ์•ฝ์  ๋ถ„์„์ค‘๊ธ‰ ฿‘๏ฟฝ ํƒœ๊ทธ๋ฅผ ํด๋ฆญํ•˜๋ฉด ์ƒ์„ธ ์„ค๋ช…์ด ํ‘œ...

jungyeon.cloud

๊น€ํƒœ์ค‘ Security Engineer Portfolio

Education & Activities ํ•™๋ ฅ ยท ๊ต์œก ยท ํ™œ๋™ ๊ตฌ๋ฆ„ ร— KT Cloud DEEP DIVE ์ •๋ณด๋ณดํ˜ธ ์ „๋ฌธ๊ฐ€ ๊ณผ์ • 2025.07 - 2026.02 ์‹ค๋ฌด ์ค‘์‹ฌ ์ •๋ณด๋ณดํ˜ธ ๊ต์œก ๊ณผ์ • ์ทจ์•ฝ์  ๋ถ„์„, ๋ฆฌ๋ฒ„์‹ฑ, ๋ณด์•ˆ ์ž๋™ํ™” ํ”„๋กœ์ ํŠธ ๊ธฐ๋ฐ˜ ์‹ค๋ฌดํ˜• ๊ต์œก ์ˆ˜ํ–‰ 4๊ฐœ ๋ณด์•ˆ ํ”„๋กœ์ ํŠธ ํŒ€ ๋ฆฌ๋” ์ˆ˜ํ–‰ ยท ์šฐ์ˆ˜ ์ˆ˜๋ฃŒ์ƒ ยท ์ตœ์ข… ํ”„๋กœ์ ํŠธ ์šฐ์ˆ˜ํŒ€ PL ์„ธ์ข…๋Œ€ํ•™๊ต ์ •๋ณด๋ณดํ˜ธํ•™๊ณผ 2017.02 - 202...

jamongsecu.com

โฏ@hoya6798๐Ÿฆ‚โฐ์žฌํ…Œํฌ..._็Œœๆ‚จๅ…ณๆณจ

ํ•ด์ปค๊ฐ€ ๋˜๊ณ ์‹ถ๋‹ค

์ด ์ทจ์•ฝ์ ์„ ์ด์šฉํ•œ ๊ณต๊ฒฉ (์˜ˆ: Spectre, Meltdown) ์„ ์†Œํ”„ํŠธ์›จ์–ด ๊ธฐ๋ฐ˜์˜ ๋ฐฉ์–ด ๋กœ์ง์œผ๋กœ ๋ง‰๋Š” ๊ฒƒ์—๋Š” ํ•œ๊ณ„๊ฐ€ ์žˆ์—ˆ์Šต๋‹ˆ๋‹ค. ๋”ฐ๋ผ์„œ ํ˜„๋Œ€ ํ”„๋กœ์„ธ์„œ๋Š” ๋‹จ์ˆœํžˆ ์ฝ”๋“œ๋ฅผ ์‹คํ–‰ํ•˜๋Š” ์ˆ˜... POC ์ถœ์ฒ˜ GitHub - bl4ckarch/ssrf_to_rce_sau: A simple python script that exploits, Service side request forgery on the request-basket 1.2.1 version then Unauith Command ...

blog.cbum.org

์•Œ์“ธ๊ฐœ์žก ํ”„๋ ˆ์Šค ๋ฐฐ์›€์˜ ์ฆ๊ฑฐ์›€, ๋‚˜๋ˆ”์˜ ๊ฐ€์น˜๋ฅผ ์‹ค์ฒœํ•˜๋Š” DevLog

๋‚˜๋ˆ”์˜ ๊ฐ€์น˜๋ฅผ ์‹ค์ฒœํ•˜๋Š” DevLog ์ปจํ…์ธ ๋กœ ๊ฑด๋„ˆ๋›ฐ๊ธฐ์•Œ์“ธ๊ฐœ์žก ํ”„๋ ˆ์Šค๋ฐฐ์›€์˜ ์ฆ๊ฑฐ์›€, ๋‚˜๋ˆ”์˜ ๊ฐ€์น˜๋ฅผ ์‹ค์ฒœํ•˜๋Š” DevLog ๊ฒ€์ƒ‰๊ฒ€์ƒ‰ ๋ฉ”๋‰ด ์Šคํ”„๋ง๋ถ€ํŠธ์ž๋ฐ”์ธํ”„๋ผquarkusIT ์†Œ์‹๊ฐœ๋ฐœ๋„๊ตฌAtuin ์…ธ ํžˆ์Šคํ† ๋ฆฌ ์™„์ „ ์ •๋ณต: Ctrl-R ๊ฒ€์ƒ‰๋ถ€ํ„ฐ ๊ธฐ๊ธฐ ๊ฐ„ ๋™๊ธฐํ™”๊นŒ์ง€2026-07-252026-07-25์ž‘์„ฑ์ž: ์•Œ์“ธ๊ฐœ์žกAtuin ์…ธ ํžˆ์Šคํ† ๋ฆฌ๋กœ ๋ช…๋ น์–ด๋ฅผ SQLite์— ์ €์žฅํ•˜๊ณ ...

dev-post.com

์ด์ฝ”๋“œํŒ€ ๊ตฌ๋…ํ˜• ํ’€์Šคํƒ ๊ฐœ๋ฐœํŒ€ ยท ๋ฐ”์ด๋ธŒ์ฝ”๋”ฉ ๋ณด์•ˆ์ ๊ฒ€

์ด์ฝ”๋“œ(ECODE) โ€” PMยท๊ฐœ๋ฐœ์žยท๋””์ž์ด๋„ˆ ํ•œ ํŒ€์ด 30์ผ ๋‹จ์œ„ ๋ฌด์ œํ•œ ์š”์ฒญ์„ ์ฒ˜๋ฆฌํ•˜๋Š” ๊ตฌ๋…ํ˜• ํ’€์Šคํƒ ๊ฐœ๋ฐœํŒ€. CursorยทClaude Codeยทv0ยทLovable๋กœ ๋งŒ๋“  ์ฝ”๋“œ์˜ ๋ฐ”์ด๋ธŒ์ฝ”๋”ฉ ๋ณด์•ˆ์ ๊ฒ€์„ โ‚ฉ200,000๋ถ€ํ„ฐ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด์ฝ”๋“œ ... SSRF ์ทจ์•ฝ ์ฝ”๋“œ ์œ„์น˜ + ๊ถŒ์žฅ ์ˆ˜์ •์•ˆ ์˜์กด์„ฑ ์•Œ๋ ค์ง„ CVE ยท ์œ„๋ณ€์กฐ ํŒจํ‚ค์ง€ ยท lock ๋ฌด๊ฒฐ์„ฑ ์—…๊ทธ๋ ˆ์ด๋“œ ๋งคํŠธ๋ฆญ์Šค ๋น„์ฆˆ๋‹ˆ์Šค...

ecodeteam.kr

๊น€ํƒœ์˜ ยท Portfolio

๋ฐฑ์—”๋“œ์—์„œ ์ถœ๋ฐœํ•ด ์ธ๊ณต์ง€๋Šฅยท์›นยท์•ฑยท๋””์ž์ธ๊นŒ์ง€ ํ˜ผ์ž ์™„์„ฑํ•˜๋Š” ํ’€์Šคํƒ ์—”์ง€๋‹ˆ์–ด ๊น€ํƒœ์˜์˜ ํฌํŠธํด๋ฆฌ์˜ค. ์ฒซ B2B 10์–ต ๋งค์ถœ, ๋น„์ „ AI ํŒŒ์ดํ”„๋ผ์ธ 1์ธ ์žฌ๊ตฌ์ถ•, ์ถœ์‹œ 3๊ฐœ์›” MAU 3,000. ... Path TraversalยทSSRFยทJWTยทCORS ์ฝ”๋“œ ๋ ˆ๋ฒจ ๋ฐฉ์–ด ยท ๊ฐ€์ค‘์น˜ ์•”ํ˜ธํ™” ยท ๋กœ๊ทธ ๊ฐ์‚ฌยท์ •๊ธฐ ์ทจ์•ฝ์  ์ ๊ฒ€ ๋ชจ๋‹ˆํ„ฐ๋ง ยท ๋ณต๊ตฌ GPU ์‚ฌ์šฉ๋ฅ ยท์˜จ๋„ยท์ „๋ ฅ ์ถ”์  ยท ๋ฐฑ์—…...

mimismundo.com

DataShieldOps DNS ๋ณด์•ˆ ยท DDoS ๋ฐฉ์–ด WAF ์ „๋ฌธ ์‚ฌ์ด๋ฒ„ ์†”๋ฃจ์…˜

DataShieldOps๋Š” DNS ๋ณด์•ˆ, DDoS ๋ฐฉ์–ด, WAF๋ฅผ ํ•˜๋‚˜์˜ ํ”Œ๋žซํผ์œผ๋กœ ์ œ๊ณตํ•˜๋Š” ๊ธฐ์—… ์ „๋ฌธ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ์„œ๋น„์Šค. ๊ณต๊ฒฉ ํƒ์ง€ 3์ดˆ ์ด๋‚ด, 99.99% ๊ฐ€์šฉ์„ฑ SLA ๋ณด์žฅ. ์ง€๊ธˆ ๋ฌด๋ฃŒ ๋ณด์•ˆ ์ง„๋‹จ์„ ์‹ ์ฒญํ•˜์„ธ์š”. ... ๋„คํŠธ์›Œํฌ ๋ฐฉํ™”๋ฒฝ์€ HTTP ํŠธ๋ž˜ํ”ฝ ๋‚ด๋ถ€๋ฅผ ๋“ค์—ฌ๋‹ค๋ณด์ง€ ๋ชปํ•ฉ๋‹ˆ๋‹ค. DataShieldOps WAF๋Š” OWASP Top 10 ์ทจ์•ฝ์ ์„ ํฌํ•จํ•œ ๋ชจ๋“  ์›น ๊ณต๊ฒฉ์„ HTTP/HTTPS ...

datashieldops.com
ๆฒกๆœ‰ๆ›ดๅคš็ป“ๆžœไบ†~