February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
144
1
부
정찰
거쳐 데이터베이스 유형을 결정할 수 있다.
유명한
NoSQL
데이터베이스인 몽고
DB
의 예를 들어보자. 몽고
DB
에서는 생성되는 각 문서
에 대해
_
id
필드를 생성하는 것이 디폴트다.
_
id
키는 충돌이 적은 해싱 알고리즘
5
을 사용해
생성되며 길이가
12
인
16
진수 호환 문자열을 사용한다. 게다가 몽고
DB
가 사용하는 알고리즘
은 오픈 소스 문서 (
https
://
oreil
.
ly
/
UdX
_
v
)에 나와 있다.
문서에 따르면 다음과 같은 사실을 알 수 있다.
●
id
를 생성하는 클래스는
ObjectId
이다.
●
id
는 정확히
12
바이트다.
●
처음
4
바이트는 유닉스 시간
Unix
epoch
의 초 (유닉스 타임스탬프 )를 나타낸다.
●
그 다음
5
바이트는 랜덤이다.
●
마지막
3
바이트는 무작위 값으로 시작하는 카운터이다.
ObjectId
의 예는
507f1f77bcf86cd799439011
과 같다.
또한
ObjectId
명세는
getTimestamp
()
같은 헬퍼 메서드 목록으로 이어지지만 우리는 서버
보다는 클라이언트의 트래픽과 데이터를 분석할 것이므로 헬퍼 메서드는 우리에게 노출되지
않을 가능성이 높다. 그보다는 몽고
DB
의 기본 키 구조를 참고하여
HTTP
트래픽을 조사하기
때문에 비슷하게 생긴
12
바이트 페이로드를 분석하는 것이 낫다.
다음과 같은 요청을 통해 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.