https://blog.mingon.dev/tags/blind-os-command-injection/Recent content in Blind OS Command Injection on 보안 연구 노트Hugo -- gohugo.ioko-KRFri, 02 Oct 2026 21:10:00 +0900https://blog.mingon.dev/playbook/os-command-injection/Fri, 02 Oct 2026 21:10:00 +0900https://blog.mingon.dev/playbook/os-command-injection/OS Command Injection 진단에서 입력 위치와 응답 출력·시간 지연·파일·OOB 통신을 대조하고 다음 확인을 선택하기 위한 Playbookhttps://blog.mingon.dev/lab/portswigger-os-command-injection/Thu, 01 Oct 2026 20:30:00 +0900https://blog.mingon.dev/lab/portswigger-os-command-injection/사용자 입력이 셸 명령으로 해석되는 조건과 응답 출력·시간 지연·파일 리다이렉션·OOB 통신으로 실행을 확인하는 방법을 5개 실습으로 정리한 자료https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-out-of-band-data-exfiltration/Wed, 30 Sep 2026 21:00:00 +0900https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-out-of-band-data-exfiltration/whoami 출력을 DNS 이름에 포함하고 Collaborator에서 실행 사용자 이름을 확인하는 Blind OS Command Injection 풀이https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-out-of-band-interaction/Tue, 29 Sep 2026 20:40:00 +0900https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-out-of-band-interaction/비동기로 처리되는 피드백 명령에서 DNS 조회를 발생시키고 Burp Collaborator로 확인하는 Blind OS Command Injection 풀이https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-output-redirection/Sat, 26 Sep 2026 15:20:00 +0900https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-output-redirection/명령 출력을 웹에서 읽을 수 있는 파일에 저장하고 이미지 조회 기능으로 결과를 읽는 Blind OS Command Injection 풀이https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-time-delays/Thu, 24 Sep 2026 21:10:00 +0900https://blog.mingon.dev/write-up/portswigger/os-command-injection/blind-os-command-injection-with-time-delays/피드백 email 입력에 sleep을 삽입하고 10초의 응답 지연으로 명령 실행을 확인하는 Blind OS Command Injection 풀이