DOM-Based on 보안 연구 노트https://blog.mingon.dev/tags/dom-based/Recent content in DOM-Based on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 04 Jun 2026 09:00:00 +0900[Write-up] PortSwigger - Stored DOM XSShttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---stored-dom-xss/Thu, 04 Jun 2026 09:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---stored-dom-xss/댓글 데이터를 innerHTML에 삽입하기 전 replace로 첫 꺾쇠만 치환하는 불완전한 이스케이프를 우회하는 Stored DOM XSS 풀이[Write-up] PortSwigger - Reflected DOM XSShttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---reflected-dom-xss/Wed, 03 Jun 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---reflected-dom-xss/서버가 JSON에 반사한 검색어를 클라이언트가 eval로 처리하는 흐름에서 역슬래시 이스케이프 누락을 이용하는 Reflected DOM XSS 풀이[Write-up] PortSwigger - DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encodedhttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded/Wed, 03 Jun 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded/HTML 인코딩된 검색어가 ng-app 범위에 삽입되는 환경에서 AngularJS 표현식과 Function 생성자로 alert를 실행하는 DOM XSS 풀이[Write-up] PortSwigger - DOM XSS in document.write sink using source location.search inside a select elementhttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-document.write-sink-using-source-location.search-inside-a-select-element/Wed, 03 Jun 2026 12:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-document.write-sink-using-source-location.search-inside-a-select-element/storeId 파라미터가 document.write를 통해 select 내부 option으로 삽입되는 컨텍스트를 탈출하는 DOM XSS 풀이[Write-up] PortSwigger - DOM XSS in jQuery selector sink using a hashchange eventhttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-jquery-selector-sink-using-a-hashchange-event/Tue, 02 Jun 2026 12:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-jquery-selector-sink-using-a-hashchange-event/location.hash가 jQuery 선택자에 전달되는 DOM XSS를 iframe의 hashchange 이벤트로 자동 트리거하는 풀이[Write-up] PortSwigger - DOM XSS in jQuery anchor href attribute sink using location.search sourcehttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-jquery-anchor-href-attribute-sink-using-location.search-source/Tue, 02 Jun 2026 09:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-jquery-anchor-href-attribute-sink-using-location.search-source/returnPath 파라미터가 jQuery attr 함수로 링크의 href에 대입되는 흐름에서 javascript URL을 주입하는 DOM XSS 풀이[Write-up] PortSwigger - DOM XSS in innerHTML sink using source location.searchhttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-innerhtml-sink-using-source-location.search/Mon, 01 Jun 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-innerhtml-sink-using-source-location.search/검색어가 location.search에서 innerHTML sink로 전달되는 흐름에서 img의 onerror 이벤트를 이용해 스크립트를 실행하는 DOM XSS 풀이[Write-up] PortSwigger - DOM XSS in document.write sink using source location.searchhttps://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-document.write-sink-using-source-location.search/Mon, 01 Jun 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-document.write-sink-using-source-location.search/location.search에서 가져온 검색어가 document.write로 img 속성에 삽입되는 흐름을 이용해 이벤트 핸들러를 주입하는 DOM XSS 풀이[Review] KakaoTalk 1-click account hijacking 분석 (CVE-2023-51219)https://blog.mingon.dev/review/review-kakaotalk-1-click-account-hijacking-%EB%B6%84%EC%84%9D-cve-2023-51219/Wed, 25 Feb 2026 15:50:55 +0900https://blog.mingon.dev/review/review-kakaotalk-1-click-account-hijacking-%EB%B6%84%EC%84%9D-cve-2023-51219/기본적인 안드로이드 컴포넌트 권한 설정과 웹 프로토콜의 검증 누락이 어떻게 거대한 익스플로잇 체인을 형성하는지 분석[Analysis] InnerHTML과 Script 태그 분석https://blog.mingon.dev/analysis/analysis-innerhtml%EA%B3%BC-script-%ED%83%9C%EA%B7%B8-%EB%B6%84%EC%84%9D/Thu, 16 Oct 2025 01:39:26 +0900https://blog.mingon.dev/analysis/analysis-innerhtml%EA%B3%BC-script-%ED%83%9C%EA%B7%B8-%EB%B6%84%EC%84%9D/<code>&lt;script&gt;</code> 태그의 실행 과정과 브라우저의 스크립트 처리 메커니즘을 분석