blog.harold.kim

Yet another developer's blog made in PHP.

Posts

2019-May-31: Ridibooks multiple vulnerabilities bughunting bugbounty pentest
2019-May-21: Harekaze CTF 2019 Writeup ctf writeup harekaze 2019 web
2019-Jan-17: GNUBoard5 RCE & MySQL Credential Leak bughunting pentest KVE writeup gnuboard
2018-Nov-29: BCTF2018 babyweb Writeup ctf writeup babyweb bctf2018 web postgre fastjson
2018-Sep-28: 1000USD from KISA Bug Bounty bughunting pentest KVE bugbounty
2018-Sep-16: TrendMicro CTF 2018 Writeup ctf writeup trendmicro 2018 rev crypto
2018-Sep-03: TokyoWesterns CTF 2018 Writeup ctf writeup exploit xss
2018-Apr-28: ASISCTF 2018 Moehost Solution writeup asisctf pentest exploit ctf
2018-Apr-28: ASISCTF 2018 Gameshop Solution writeup asisctf web exploit ctf
2018-Mar-26: VolgaCTF 2018 Lazy Admin writeup ctf writeup exploit xss
2018-Mar-23: notes on qemu-system development qemu notes
2018-Mar-04: Welcome to my blog notice blog dev

Gists

2019-Sep-10: 2019 Cyber Operations Challenge Finals Pistol Exploit Markdown Python CSS
2019-Aug-16: Install MobSF Framework on CentOS 7 (with Headless Dynamic Analysis) Shell
2019-Jun-15: Docker runner for CTF Python Nginx
2019-May-19: Harekaze CTF 2019 WEB Writeup (Yokosuka Hackers) Markdown
2019-Jan-27: CodeGate 2019: Rich Project exploit Python
2019-Jan-16: KVE-2018-0441, KVE-2018-0449 RCE PoC (Windows Only) JavaScript Text PHP
2018-Feb-13: iptime WOL in python Python
2018-Jan-26: Blind SQLi 2018: Utilizing SQL standard to create payloads Markdown
2017-Nov-03: Lotto Exploit PHP Python
2017-Nov-03: familiar (485pt) XXE + SSRF Python
2017-Oct-29: iptables configuration for connections between irssiproxy and irccloud Shell
2017-Jul-02: SecuInside 2017: Mathboy7 (415pt) Markdown
2017-Apr-16: Migrating old php files to newer versions Python
2017-Mar-31: How to convert HTTPS Certificates for RDP auth (using Caddy) PowerShell Python
2016-Sep-12: ASIS CTF 2016 Finals: pentest (298pt) Markdown Python
2016-May-05: MySQL Query class for php5/php7, made for personal use PHP
2015-Jul-27: jff3 2015: web_mbm2 exploit Python
2015-Jul-01: pip update all packages Python
2015-Feb-11: IP ban and check for fake IPs PHP
2015-Feb-11: Install newest version of ARM nginx on Raspberry Pi Shell
2015-Feb-07: Detect software-based Virtual Machine in VB6 Visual Basic
2015-Feb-07: Wipe the empty disk space on Linux Shell
2015-Feb-07: Change WLAN MAC address randomly in OSX Python
2015-Feb-07: MacPorts Yosemite PHP+nginx Installation Markdown Nginx XML Property List
2015-Feb-07: cloudflare auto ddns + memory flush PHP