February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
59
2
장
웹 애플리케이션 정찰 개요
웹 애플리케이션 정찰 개요
CHAPTER
2
일반적으로 웹 애플리케이션 정찰은 웹 애플리케이션을 해킹하기에 앞서 이뤄지는 탐색적 데
이터 수집 단계다. 웹 애플리케이션 정찰은 해커, 침투 테스터, 버그 바운티 헌터가 행하는 것
이 일반적이다. 하지만 악의적 행위자가 웹 애플리케이션의 약점을 찾기 전에 보안 엔지니어가
먼저 발견해서 패치하는 것이 효과적이다. 정찰 기술 자체는 크게 중요하지 않지만 해킹 공격
지식과 방어에 대한 보안 엔지니어링 경험을 결합하면 가치가 높아진다.
2.1
정보 수집
정찰이 해킹을 시도하기 전에 애플리케이션에 대한 깊은 이해를 구축하는 것임을 앞에서 설명
했다. 또한 우리는 정찰이 해커의 도구 가운데 중요한 부분임을 알고 있다. 그러나 지금까지 정
찰에 대해 우리가 알고 있는 지식은 여기까지다. 정찰이 중요한 이유를 기술적인 관점에서 좀
더 알아보자.
WARNING
_
3
장부터 소개하는 여러 가지 정찰 기법은 애플리케이션을 매핑하는 데 유용하지만 여러분의
IP
가 식별되어 애플리케이션 사용이 금지되거나 법적 문제를 초래할 수 있다. 정찰 기법 대부분은 자신의 소
유 또는 서면으로 허가를 얻은 애플리케이션에 대해서만 수행해야 한다.
60
1
부
정찰
정찰은 여러 가지 방법으로 수행할 수 있다. 때로는 웹 애플리케이션을 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.