old

안드로이드 앱 취약점 진단 환경구성

#anaconda 설치 후 py2 환경 구성 - conda create -n py2 python=2.7 - conda activate py2 #도구 설치 - nox - apktool - dex2jar - adb - jd-gui - jadx - drozer(경로설정 참고 : https://guleum-zone.tistory.com/152) - frida(https://byounghee.tistory.com/165?category=826239) # shell 연결 - 실제 기기와 USB 연결 (https://kibua20.tistory.com/165) - 에뮬레이터 연결 시 adb connect 127.0.0.1:62001 adb -e shell

[자료] 리눅스 포렌식 cheat sheet

[자료] 파일전송 팁들

[자료] red team toolkit

https://github.com/shr3ddersec/Shr3dKit?fbclid=IwAR3En-BOzHyPgCTFBScKVd1qHxqA4DbHNzRLQF5x7DNsqCKaDD5x8jb9ZKs

[Tool] 레지스트리 자동분석 도구

https://medium.com/dfir-dudes/regipy-automating-registry-forensics-with-python-b170a1e2b474?fbclid=IwAR0dyOd-yU4ecq5l8mnXU2_QDrGRLeGm667Hcvi10sniWIh0G6Ra1ECcZs0

[자료] Win10 ActivitiesCache.db, AMCACHE

[자료] OWASP Top 10: Real-World Examples

https://medium.com/@cxosmo/owasp-top-10-real-world-examples-part-1-a540c4ea2df5?fbclid=IwAR1rE1NJMLJ34Oie4wXTrWKM-Aq_ImcJ10qdVHkWfw0PtLmmQAfo7GH7h5A https://medium.com/@cxosmo/owasp-top-10-real-world-examples-part-2-3cdb3bebc976?fbclid=IwAR0YNI18t_wFwc3eLxCN6RFKQbRE_KSOO0kThBD3wtOORiMZwmY1rFllzFU When it comes to web application testing, there’s arguably no better reference guide than the OWASP ..

[자료] A guide for windows penetration testing

https://www.roguesecurity.in/2018/12/02/a-guide-for-windows-penetration-testing/?fbclid=IwAR2-8hXuiD8wDTTo_TGiNy9EhDm67hVzBtRO0e8f6st93VVW5U-x2Nv_8Ao Windows penetration testing is one of the grey area where many beginner penetration testers struggles with. It is irony that most of us use windows for our day-to-day tasks but when it comes to penetration testing, we are more comfortable with Linu..

[Tool] 와이어샤크 플러그인

https://github.com/pentesteracademy/patoolkit?fbclid=IwAR1Jn1pIb8LgqcHHc1YsRNG2lBcRpzwS3v7fJ5BoWjEv-N2nOVHBJngBcPg PA Toolkit (Pentester Academy Wireshark Toolkit)PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol dissector to the macro analyzer and threat hunter. PA Toolkit contains plugins (both dissectors and..

[자료] opensource lectures

https://github.com/onlurking/awesome-infosec?fbclid=IwAR3YNlN9NWZfoaG92EPZgwXYIvwyRGhEG_N73JEznmqkmHXr_afIeAhfnpc A curated list of awesome information security resources, inspired by the awesome-* trend on GitHub.Those resources and tools are intended only for cybersecurity professional and educational use in a controlled environment.Table of ContentsMassive Online Open CoursesAcademic CoursesL..