- 1:제1장 - 소개
- 1.1:저자 소개
- 1.2:열정
- 1.3:환경
- 1.4:목표 설정
- 1.5:퍼징
- 1.6:끈기와 운
- 1.7:소셜 미디어
- 1.8:기초
- 1.9:요약
- 2:2장 - 괄호 없이 JavaScript 사용하기
- 2.1:괄호 없이 함수 호출하기
- 2.2:괄호 없이 인수를 사용하여 함수 호출하기
- 2.3:Throw 구문
- 2.4:태그된 템플릿
- 2.5:Has 인스턴스 심볼
- 2.6:요약
- 3:3장 - 퍼징
- 3.1:진실
- 3.2:자바스크립트 URL들 퍼징
- 3.3:HTTP URL 퍼징
- 3.4:HTML 퍼징
- 3.5:알려진 동작 퍼징
- 3.6:퍼징 이스케이프
- 3.7:요약
- 4:제4장 - 해커를 위한 DOM
- 4.1:Where’s my window?
- 4.2:HTML 이벤트의 범위
- 4.3:DOM 클러버링
- 4.4:요약
- 5:제5장 - 브라우저 취약점 Exploits
- 5.1:Introduction
- 5.2:Firefox의 교차 출처 URL 처리 오류
- 5.3:사파리의 크로스 오리진 호스트 이름 할당
- 5.4:인터넷 익스플로러 전체 SOP 우회
- 5.5:Chrome 부분 SOP 정보 유출
- 5.6:Safari 전체 SOP 우회
- 5.7:Opera SOP 우회
- 5.8:요약
- 6:6장 - 프로토타입 오염
- 6.1:소개
- 6.2:클라이언트 사이드 프로토타입 오염
- 6.3:서버 측 프로토타입 오염
- 6.4:요약
- 7:7장 - 비알파벳 숫자 자바스크립트
- 7.1:비알파벳 숫자 자바스크립트 작성하기
- 7.2:괄호 없이 비알파
- 7.3:6자 벽
- 7.4:무한과 그 이상
- 7.5:요약
- 8:제팔장 - XSS
- 8.1:스크립트 닫기
- 8.2:스크립트 내부의 주석
- 8.3:SVG 스크립트 내의 HTML 엔티티
- 8.4:닫는 스크립트가 없는 스크립트
- 8.5:창 이름 페이로드
- 8.6:할당 가능한 프로토콜
- 8.7:소스 맵을 사용한 핑백 생성
- 8.8:새로운 리디렉션 싱크
- 8.9:자바스크립트 주석
- 8.10:새로운 줄
- 8.11:공백 문자
- 8.12:동적 임포트
- 8.13:XML에서의 XHTML 네임스페이스
- 8.14:SVG 업로드
- 8.15:SVG use 요소
- 8.16:HTML 엔티티
- 8.17:이벤트
- 8.18:히든 인풋에서의 XSS
- 8.19:팝오버
- 8.20:요약
- 9:감사의 글
- 1:제1장 - 소개
해커를 위한 JavaScript (한국어판)
해커처럼 생각하기
JavaScript에서 흥미로운 동작과 결함을 찾는 방법을 배우세요. 이 책을 읽으면 JavaScript 해킹과 XSS 페이로드 생성에 대한 최신 기술을 발견할 수 있습니다. +[]()! 문자들만을 사용하여 JavaScript를 구성하는 방법도 포함되어 있습니다. DOM 클러버링에 대해 들어본 적이 없으신가요? 이 책에는 모든 세부 정보가 담겨 있습니다.
This book is a translation into Korean of JavaScript for hackers which was originally written in English
Minimum price
$20.00
$35.00
You pay
$35.00Authors earn
$28.00PDF
EPUB
WEB
About
About the Book
해커가 브라우저와 자바스크립트에서 결함을 찾는 방법에 대해 궁금해 본 적이 있습니까? 이 책은 그 사고 과정을 공유하고 여러분이 직접 결함을 찾을 수 있는 도구를 제공합니다. 자바스크립트 해킹의 기초를 공유한 다음, 괄호를 사용하지 않는 자바스크립트 페이로드를 구성하는 방법을 설명합니다.
- 퍼징(fuzzing)을 통해 결함을 찾는 방법과 몇 초 만에 수백만 개의 문자를 빠르게 퍼징하는 방법을 보여줍니다.
- DOM을 해킹하고 싶으신가요? 이 책이 도와드립니다.
- 저자가 발견한 다양한 브라우저 SOP 우회에 대해 자세히 읽어보세요.
- 클라이언트 사이드 프로토타입 오염에 대해 잘 모르시겠다고요? 이 책이 딱입니다!
- 최신 최고의 XSS 기술을 배우고 싶으신가요? 이 책을 사야 합니다.
Feedback
This book is a translation into Korean of JavaScript for hackers which was originally written in English
Author
About the Authors
Gareth Heyes
PortSwigger researcher Gareth Heyes is probably best known for his work escaping JavaScript sandboxes, and creating super-elegant XSS vectors. When he's not co-authoring books (like the recent title, Web Application Obfuscation), Gareth is a father to two wonderful girls and husband to an amazing wife, as well as an ardent fan of Liverpool FC.
In his daily life at PortSwigger, Gareth can often be found creating new XSS vectors, researching new techniques to attack web applications, and preparing to speak at conferences around the globe. A recent highlight was his presentation "XSS Magic Tricks" at OWASP Allstars Amsterdam, 2019. He's also the author of PortSwigger's XSS Cheat Sheet. In his spare time he loves writing new BApp extensions (he's the creator of both Hackvertor and Taborator).
Episode 255
An Interview with Gareth Heyes
TranslateAI
Leanpub now has a TranslateAI service which uses AI to translate their book from English into up to 31 languages, or from one of those 31 languages into English. We also have a GlobalAuthor bundle which uses TranslateAI to translate English-language books into either 8 or 31 languages.
Leanpub exists to serve our authors. We want to help you reach as many readers as possible, in their preferred language. So, just as Leanpub automates the process of publishing a PDF and EPUB ebook, we've now automated the process of translating those books!
Contents
Table of Contents
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $14 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.