February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
163
9
장
웹 애플리케이션 해킹 개요
웹 애플리케이션 해킹 개요
CHAPTER
9
1
부에서 배운 정찰 기술을 바탕으로
2
부에서는 웹 애플리케이션의 취약점을 이용하는 익스플
로잇을 배운다. 여기서는 해커의 입장에 서는 법을 배운다.
2
부 전체에 걸쳐
1
부에서 예로 든
mega
-
bank
.
com
이라는 가상의 웹 애플리케이션을 공격한다.
매우 일반적이며 오늘날의 웹 애플리케이션에 많이 적용되는 익스플로잇을 폭넓게 사용한다.
1
부 ‘정찰’에서 배운 기술과 기법을 응용한다면
2
부에서 습득한 기술을 다른 곳에 쉽게 응용할
수 있다.
2
부를 마칠 때는 익스플로잇할 수 있는 애플리케이션의 버그를 찾는 데 필요한 정찰 기술과 그
러한 보안 버그를 이용하는 페이로드를 구축하고 배치하는 데 필요한 공격적인 해킹 기술을 모
두 갖게 될 것이다.
9.1
해커의 마음가짐
해커로서 성공하려면 객관적으로 측정할 수 있는 기술과 지식뿐만 아니라 해커의 마음가짐도
꼭 필요하다.
소프트웨어 엔지니어의 생산성을 측정할 때는 가치 있는 기능을 구현하거나 기존 코드베이
스를 향상시켰는지 측정한다. 소프트웨어 엔지니어는 ‘나는 오늘
x
와
y
기능을 추가했으므로
164
2
부
공격
보람이 있었다’고 말할 수 있다. 또는 ‘
a
와
b
기능의 성능을
10
% 향상시켰다’고 말할 수도 있
다. 전통적인 업종에 비해 다소 어렵기는 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.