<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hardcoded Credentials on 보안 연구 노트</title><link>https://blog.mingon.dev/tags/hardcoded-credentials/</link><description>Recent content in Hardcoded Credentials on 보안 연구 노트</description><generator>Hugo -- gohugo.io</generator><language>ko-KR</language><lastBuildDate>Wed, 22 Jul 2026 21:10:00 +0900</lastBuildDate><atom:link href="https://blog.mingon.dev/tags/hardcoded-credentials/index.xml" rel="self" type="application/rss+xml"/><item><title>[Write-up] PortSwigger - Source code disclosure via backup files</title><link>https://blog.mingon.dev/write-up/portswigger/information-disclosure/source-code-disclosure-via-backup-files/</link><pubDate>Wed, 22 Jul 2026 21:10:00 +0900</pubDate><guid>https://blog.mingon.dev/write-up/portswigger/information-disclosure/source-code-disclosure-via-backup-files/</guid><description>공개된 backup 디렉터리에서 Java 백업 파일을 내려받아 하드코딩된 PostgreSQL 비밀번호를 식별하는 Information Disclosure 풀이</description></item></channel></rss>