https://blog.mingon.dev/tags/forced-browsing/Recent content in Forced Browsing on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 02 Jul 2026 12:00:00 +0900https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---unprotected-admin-functionality-with-unpredictable-url/Thu, 02 Jul 2026 12:00:00 +0900https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---unprotected-admin-functionality-with-unpredictable-url/예측 불가능한 관리자 패널 경로를 클라이언트 자바스크립트 소스에서 찾아내 접근하는 Access Control 풀이https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---unprotected-admin-functionality/Thu, 02 Jul 2026 09:00:00 +0900https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---unprotected-admin-functionality/robots.txt에 노출된 관리자 패널 경로로 직접 접근해 사용자를 삭제하는 기본 Access Control 풀이