DOCSEARCHbyAlgolia
Submit Docs

naaamgi's Technical Notes

website·Indexed 30 days ago

https://naaamgi.github.io/my-docusaurus-page/

A collection of technical learning materials and write-ups covering cybersecurity, cloud infrastructure, and programming. Topics include AWS (IAM, VPC, Route 53, CloudFront), Docker, Linux firewall and permission management, Python for LLM and RAG (LangChain), web security (SQL Injection, HTTP headers), and penetration testing tools like Burp Suite, Frida, and JADX.

Tokens
229.8K
Snippets
1K
Records
1.6K
Agent score
75%

What's inside naaamgi

  1. Overview of Linux Firewall Tools

    Different Linux distributions use different firewall management tools, though most are front-ends for the underlying iptables (Netfilter) framework.

    • Debian/Ubuntu: Uses UFW (Uncomplicated Firewall), known for simple syntax and beginner-friendliness.
    • CentOS/RHEL: Uses firewalld, which features Zone-based management and dynamic rule updates without requiring service restarts.
    • Common: iptables is the low-level, powerful, but complex tool used across most distributions.

  2. Overview of HoaxShell

    HoaxShell is a penetration testing tool designed to create stealthy reverse shell sessions on Windows targets using HTTP/S traffic. It generates PowerShell payloads that mimic standard web traffic to evade security solutions (AV/EDR). Key features include randomizing session IDs and HTTP headers, support for constrained PowerShell environments, and integration with tunneling services like Ngrok.

  3. Overview of essential OSINT tools for asset collection

    For initial asset collection and attack surface mapping, the following five tools are recommended based on their specialization:

    • theHarvester: Scrapes search engines and APIs for emails, employee names, and subdomains. Used for preparing spear-phishing or credential stuffing attacks.
    • Amass: Specializes in DNS infrastructure tracking, subdomain brute-forcing, and asset mapping using API integration and ASN data.
    • Shodan: A global port scanning search engine used to find exposed ports, OS versions, and banner information for legacy server discovery.
    • Censys: Focuses on certificate chains and fingerprinting to identify hidden servers and administrator pages.
    • Maltego: A graph-based visualization tool used to map relationships between disparate OSINT data points to design final attack paths.

  4. Overview of Logger++ for Burp Suite

    Logger++ is a Burp Suite extension that aggregates traffic from all tools (Proxy, Repeater, Intruder, Scanner, etc.) into a single log. Unlike the default HTTP history, it supports complex multi-filtering using regular expressions (Regex) and logical operators (AND, OR) to precisely locate specific parameters or sensitive information.

  5. Overview of SSH Dynamic Port Forwarding

    Dynamic Port Forwarding creates a SOCKS proxy server on a specified local port. Unlike local or remote port forwarding (which are 1:1 mappings), dynamic forwarding allows an application to route traffic to various destinations dynamically through the SSH tunnel. This is particularly useful when needing to access multiple hosts in a remote network (e.g., a /24 subnet) without setting up individual tunnels for every single IP and port.

  6. Overview of Firewalld architecture and operation

    Firewalld is a packet-filtering firewall based on the Netfilter kernel module. It is designed to replace iptables by providing dynamic firewall management (allowing rule changes without restarting the service) and a Zone-based security policy system. It operates as a daemon that receives configurations via the firewall-cmd CLI and translates them into iptables rules, which are then processed by the Netfilter kernel module.
    graph LR
    A[firewall-cmd<br/>명령어] --> B[firewalld<br/>데몬]
    B --> C[iptables<br/>명령어]
    C --> D[Netfilter<br/>커널 모듈]
    D --> E[패킷 필터링<br/>실제 처리]

  7. Overview of Burp Suite Autorize

    Autorize is a Burp Suite extension used to automate the verification of authorization controls. It works by intercepting requests made by a user and re-sending them in the background using a pre-configured session cookie (e.g., an administrator's cookie). By comparing the server's response to the original request and the manipulated request, it helps identify Broken Access Control vulnerabilities such as Insecure Direct Object References (IDOR) and Privilege Escalation.

  8. Overview of Amazon RDS managed service

    Amazon RDS (Relational Database Service) is a managed service that handles the operational burden of database management.

    AWS Responsibilities: Hardware provisioning, DB installation, patching, backups, failover, and infrastructure management. User Responsibilities: Schema design, query optimization, and application logic.

    Supported Engines:

    • Commercial: Oracle, Microsoft SQL Server, IBM DB2
    • Open Source: MySQL, MariaDB, PostgreSQL
    • Cloud-Native: Amazon Aurora (MySQL/PostgreSQL compatible)

  9. Overview of Stored Procedures

    A Stored Procedure is a set of pre-written SQL statements stored in the database that can be called for execution.

    Advantages:

    • Performance: Faster execution as they are stored in a compiled state.
    • Reduced Network Traffic: Multiple SQL statements are sent as a single call.
    • Reusability: Logic can be called from multiple locations.
    • Security: Provides a layer of abstraction, preventing direct table access.
    • Maintainability: Business logic is centralized in one place.

    Disadvantages:

    • Difficult to debug.
    • DBMS dependent (low portability).
    • Complex logic may be better handled at the application level.

  10. Overview of common Kali Linux security tools

    Kali Linux provides a suite of tools for different security testing phases:

    • Nmap: Port scanning and service detection
    • SQLMap: Automated SQL Injection
    • Metasploit: Exploit framework
    • Burp Suite: Web proxy and vulnerability scanning
    • Wireshark: Packet analysis
    • John the Ripper: Password cracking
    • Hydra: Brute-force attacks

  11. Overview of AWS Global Network and Content Delivery Services

    AWS provides several services to optimize global service delivery, focusing on traffic routing, content caching, and API management:

    • Amazon Route 53: A managed DNS service for domain registration, DNS record management, and traffic routing using various policies (Simple, Weighted, Geolocation, Latency, Failover).
    • Amazon CloudFront: A Content Delivery Network (CDN) that caches content at 450+ edge locations. It supports Origin Access Control (OAC), Signed URLs/Cookies, and cache invalidation.
    • Amazon API Gateway: A proxy service for managing API traffic (REST, HTTP, WebSocket). It provides rate limiting (throttling), response caching, and integration with Lambda, ECS, and EC2.
    • AWS Global Accelerator: Optimizes network performance using Anycast IP addresses to provide a fixed entry point and the fastest path over the AWS global network (Layer 4 TCP/UDP).

  12. Overview of Slow HTTP DoS Attacks

    Slow HTTP attacks are efficient Denial of Service (DoS) techniques that paralyze web servers using minimal resources and bandwidth. Unlike traditional DDoS attacks, they use a small number of connections to exhaust server resources by keeping connections open for as long as possible, making them difficult to detect as they mimic legitimate traffic.

    There are three primary types of Slow HTTP attacks:

    1. Slow HTTP Header DoS (Slowloris): Targets the HTTP header by manipulating CRLF sequences to prevent the server from recognizing the end of the header.
    2. Slow HTTP POST DoS (RUDY): Targets POST data by manipulating the Content-Length header to send large amounts of data very slowly in small fragments.
    3. Slow HTTP Read DoS: Targets the response reception by reducing the TCP window size and data processing rate to slow down the reception of data.