https://blog.mingon.dev/tags/http-method/Recent content in HTTP Method on 보안 연구 노트Hugo -- gohugo.ioko-KRSat, 04 Jul 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---method-based-access-control-can-be-circumvented/Sat, 04 Jul 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/access-control/write-up-portswigger---method-based-access-control-can-be-circumvented/POST에만 걸린 권한 검사를 OPTIONS 메서드로 우회해 자신의 계정을 관리자로 승격시키는 풀이https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-where-token-validation-depends-on-request-method/Tue, 23 Jun 2026 12:00:00 +0900https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-where-token-validation-depends-on-request-method/POST 요청에만 적용되는 CSRF 토큰 검증을 GET 메서드로 전환해 우회하고 img 태그 한 줄로 이메일을 변경하는 풀이