hahwul / assets.hahwul.com

assets for www.hahwul.com

Asset of hahwul.com

Assets

Blog Comments

https://github.com/hahwul/asset-of-hahwul.com/discussions/categories/comments

API

Payloads

• https://assets.hahwul.com/xss-payloadbox.json
• https://assets.hahwul.com/xss-payloadbox.txt
• https://assets.hahwul.com/xss-portswigger.json
• https://assets.hahwul.com/xss-portswigger.txt

Nuclei templates

• https://assets.hahwul.com/nuclei-latest.json (latest release nuclei-templates)

Wordlsits

• wl-assetnote-params.txt (metadata json)
• wl-b-headers.txt (metadata json)
• wl-cts-100.txt (metadata json)
• wl-cts-1000.txt (metadata json)
• wl-cts-10000.txt (metadata json)
• wl-cts-100000.txt (metadata json)
• wl-eventhandler.txt (metadata json)
• wl-headers.txt (metadata json)
• wl-params.txt (metadata json)

assets.hahwul.com's Issues

2020/11/14/docker-scratch-image-from-a-security-perspective/

Docker scratch image from a Security perspective

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/11/14/docker-scratch-image-from-a-security-perspective/

2021/07/18/penetration-testing-ide-farady/

Faraday - Penetration testing IDE!

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/07/18/penetration-testing-ide-farady/

2021/07/15/zap-oast/

ZAP OAST 미리 구경하기 (for OOB)

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/07/15/zap-oast/

2018/05/30/KakaoLinkshare/

Javascript를 이용하여 간단하게 카카오톡 공유(카카오링크) 적용하기

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2018/05/30/KakaoLinkshare/

2019/01/19/docker-optimization-and-cleanup-script/

Docker Optimization and cleanup script(도커 최적화 하기)

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/01/19/docker-optimization-and-cleanup-script/

2020/08/08/jekyll-utterances/

Jekyll에 Utterances 댓글 적용하기

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/08/08/jekyll-utterances/

2018/08/02/install-kakaotalk-on-ubuntu-18.04/

우분투 18.04 에서 카카오톡 설치하기(Install kakaotalk on ubuntu 18.04)

Security engineer, Developer and H4cker

https://www.hahwul.com/2018/08/02/install-kakaotalk-on-ubuntu-18.04/

2021/05/20/the-reverse-tabnabbing-has-weakened-more/

The reverse tabnabbing has weakened more

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/05/20/the-reverse-tabnabbing-has-weakened-more/

2020/09/23/alice-bob-carol/

앨리스(Alice)와 밥(Bob) 그리고 캐롤(Carol), 이름의 의미는?

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/09/23/alice-bob-carol/

2020/09/23/amass-go-deep-in-the-sea-with-free-apis/

Amass, go deep in the sea with free APIs

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/09/23/amass-go-deep-in-the-sea-with-free-apis/

2019/12/04/two-easy-ways-to-get-list-of-scopes-from-hackerone/

Two easy ways to get a list of scopes from a hackerone

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/12/04/two-easy-ways-to-get-list-of-scopes-from-hackerone/

2020/07/03/one-custom-certificate-using-all-tools/

One custom certificate, Using all tools and your devices (for bug bounty/pentesting)

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/07/03/one-custom-certificate-using-all-tools/

2019/05/17/send-gmail-using-rails-actionmailer/

Send Gmail using Rails ActionMailer Class (ActionMailer를 이용하여 Gmail 전송하기)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2019/05/17/send-gmail-using-rails-actionmailer/

images

2021/06/23/pdf-password-crack/

PDF 파일 Password Crack

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/06/23/pdf-password-crack/

/2021/08/06/owasp-zap-oast/

Golang의 nil과 interface nil의 재미있는 특징

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/08/09/do-you-know-about-golang-nil/

2020/08/12/collection-of-vulnerable-web-docker-images/

Docker images and running commands of vulnerable web

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/08/12/collection-of-vulnerable-web-docker-images/

2019/07/08/xss-payload-for-escaping-string-in/

XSS payload for escaping the string in JavaScript

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/07/08/xss-payload-for-escaping-string-in/

images

2019/04/04/how-to-set-proxy-on-macos-and-add-cert/

MacOS에서 Proxy 설정하기(How to set proxy on MacOS for ZAP, Burp)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2019/04/04/how-to-set-proxy-on-macos-and-add-cert/

2021/02/23/how-to-emun-cipher-suite-of-website-only-use-openssl/

Openssl만 사용하여 웹 사이트에서 지원하는 SSL cipher suite 파악하기

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/02/23/how-to-emun-cipher-suite-of-website-only-use-openssl/

2020/01/18/samesite-lax/

SameSite=Lax가 Default로? SameSite Cookie에 대해 정확하게 알아보기

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/01/18/samesite-lax/

2018/08/12/attack-json-csrf-with-swfactionscript/

Attack a JSON CSRF with SWF(ActionScript를 이용한 JSON CSRF 공격코드 구현)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2018/08/12/attack-json-csrf-with-swfactionscript/

2020/05/04/how-to-use-dalfoxs-fun-options/

How to use DalFox's Fun Options (if found notify , custom grepping)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/05/04/how-to-use-dalfoxs-fun-options/

2021/01/06/how-to-applying-intellij-theme-in-zap/

How to applying IntelliJ theme in ZAP

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/01/06/how-to-applying-intellij-theme-in-zap/

2019/10/11/bypass-referer-check-logic-for-csrf/

Bypass referer check logic for CSRF

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/10/11/bypass-referer-check-logic-for-csrf/

2020/12/04/why-i-use-zap/

Why I Use ZAP

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/12/04/why-i-use-zap/

2021/03/23/phoenix-4-fixed-bug-in-session-entropy-page/

[Phoenix #4] Fixed bug in session entropy page

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/03/23/phoenix-4-fixed-bug-in-session-entropy-page/

2018/07/04/sqlmap-tamper-script-waf-logic-bypass/

SQLMap Tamper Script를 이용한 WAF&Protection Logic Bypass

Security engineer, Developer and H4cker

https://www.hahwul.com/2018/07/04/sqlmap-tamper-script-waf-logic-bypass/

images

2021/08/14/jekyll-to-hugo/

Jekyll에서 Hugo로 이사가기 (Migration log)

jekyll… 제가 예전에는 rubyist(ruby 사용자) 였습니다. 그러다가 2018~19년 쯤에 gopher(golang 사용자)가 되었고 이후부턴 만들고 있는 대다수의 도구는 golang 기반으로 만듭니다.
golang을 사용해도 ruby 자체를 오래 써왔던지라, 그래도 조금이나마 편하려고 j

https://www.hahwul.com/2021/08/14/jekyll-to-hugo/

2020/11/12/jekyll-githubpage-build-speed-up/

Github page(Jekyll) build speed up!

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/11/12/jekyll-githubpage-build-speed-up/

images

2020/08/01/blogger-to-github-page/

Google Blogger에서 Github.io까지

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/08/01/blogger-to-github-page/

2020/12/03/multicloud-with-security-perspective/

멀티 클라우드, 보안적 관점에서 바라보기

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/12/03/multicloud-with-security-perspective/

Images

2016/08/23/web-hacking-burp-suites-hotkeys-and/

[WEB HACKING] Burp Suite's hotkeys and Edit hotkey

Security engineer, Developer and H4cker

https://www.hahwul.com/2016/08/23/web-hacking-burp-suites-hotkeys-and/

2021/08/14/html-to-markdown-in-cli/

Html to Markdown in Cli

어제 Hugo로 이사로 이사를 마무리하면서 못했던 작업을 하나 진행한게 있습니다. 바로 기존 jekyll 부터 유지해오던 blogger로 부터 넘어온 잔해, html 포스트들인데요. 물론 페이지 랜딩에는 전혀 지장이 없지만, html 파일 자체가 유지보수가 어렵다보니 글을 수정하기 까다롭다는 단점이 있었습니다.
이참에 다수의 html 파일을 markdown으로 변환하

https://www.hahwul.com/2021/08/14/html-to-markdown-in-cli/

2019/11/18/how-to-fix-xcrun-error-after-macos-update/

Mac 업그레이드 후 개발 관련 도구 에러(xcrun: error: invalid active developer path) 해결방법(xcode-select --install)

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/11/18/how-to-fix-xcrun-error-after-macos-update/

2019/08/12/http-smuggling-attack-re-born/

HTTP Desync Attack 에 대해 알아보자(HTTP Smuggling attack re-born, +My case)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2019/08/12/http-smuggling-attack-re-born/

2020/12/21/security-considerations-for-browser-extensions/

Security considerations for browser extensions

Security engineer, Developer and H4cker

https://www.hahwul.com/2020/12/21/security-considerations-for-browser-extensions/

2020/08/22/scanspider-and-active-scan-multiple-targets-in-zap/

Scanning multiple targets in ZAP

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/08/22/scanspider-and-active-scan-multiple-targets-in-zap/

2021/08/15/hugo-archetypes/

Hugo Archetypes을 이용한 글 Template 사용하기

Hugo에서는 content management를 위해 archetypes 라는 template file을 제공하고 있습니다. 이는 hugo new 로 새로운 글을 만들 때 자동으로 글에 필요한 정보를 작성해주며, 종류에 따라서 커스텀하게 작성할 수 있도록 제공해주는 기능입니다.
이를 잘 활용한다면 글 쓰는 시간에 필요한 불필요한 작업이

https://www.hahwul.com/2021/08/15/hugo-archetypes/

2020/08/08/atom-setting-for-jekyllgithubio-page/

Atom setting for jekyll(github.io page)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/08/08/atom-setting-for-jekyllgithubio-page/

2021/01/05/burp-customizer-change-your-burpsuite-theme/

Burp Customizer! Change your burpsuite theme

Security engineer, Developer and H4cker

https://www.hahwul.com/2021/01/05/burp-customizer-change-your-burpsuite-theme/

2020/11/03/building-a-zap-monitoring-environment/

Building a ZAP Monitoring Environment (Grafana + InfluxDB + Statsd)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2020/11/03/building-a-zap-monitoring-environment/

2019/10/19/find-subdomain-takeover-with-amass-and-subjack/

Find Subdomain Takeover with Amass + SubJack

Security engineer, Developer and H4cker

https://www.hahwul.com/2019/10/19/find-subdomain-takeover-with-amass-and-subjack/

images

2018/10/22/extract-ipa-file-ios/

iOS App IPA 파일 추출하기(ipainstaller, jailbreak)

Security engineer, Bugbounty hunter, Developer and... H4cker

https://www.hahwul.com/2018/10/22/extract-ipa-file-ios/

2018/03/19/0x0cl-xss-no-slash-no-blank/

0x0c(^L)를 이용한 XSS 우회 기법(no slash, no blank)

Security engineer, Developer and H4cker

https://www.hahwul.com/2018/03/19/0x0cl-xss-no-slash-no-blank/