https://blog.mingon.dev/tags/blind-sqli/Recent content in Blind SQLi on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 21 May 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-data-exfiltration/Thu, 21 May 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-data-exfiltration/OAST 채널을 확장해, 조회한 비밀번호를 DNS 요청의 서브도메인에 실어 Burp Collaborator로 직접 빼내는 Out-of-band 데이터 유출 풀이 (Oracle)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-interaction/Thu, 21 May 2026 17:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-interaction/응답 내용·오류·시간 어떤 인밴드 신호도 없는 환경에서, DB가 외부로 DNS 조회를 수행하도록 유도해 취약점을 확인하는 OAST(Out-of-band) 기법 풀이 (Oracle)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays-and-information-retrieval/Thu, 21 May 2026 16:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays-and-information-retrieval/조건이 참일 때만 지연을 거는 CASE 구문으로, 응답 시간의 변화를 신호로 삼아 비밀번호를 비트 단위로 추출하는 Time-Based Blind SQL Injection 풀이 (PostgreSQL)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays/Thu, 21 May 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays/응답 내용 차이도 오류도 없는 환경에서, 지연 함수(pg_sleep)를 삽입해 응답 시간으로 취약점을 확인하는 Time-Based Blind SQL Injection 풀이 (PostgreSQL)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-conditional-errors/Thu, 21 May 2026 13:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-conditional-errors/응답 차이가 전혀 없고 오류 발생 여부만 관측 가능한 환경에서, CASE 문으로 조건에 따라 오류를 강제 유발해 비밀번호를 비트 단위로 추출하는 Error-Based Blind SQL Injection 풀이 (Oracle)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-conditional-responses/Thu, 21 May 2026 11:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-conditional-responses/쿼리 결과나 오류가 노출되지 않는 환경에서, 조건의 참·거짓에 따라 달라지는 응답(Welcome back 메시지)을 신호로 삼아 비밀번호를 비트 단위로 추출하는 Boolean-Based Blind SQL Injection 풀이