https://blog.mingon.dev/tags/oast/Recent content in OAST on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 21 May 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-data-exfiltration/Thu, 21 May 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-data-exfiltration/OAST 채널을 확장해, 조회한 비밀번호를 DNS 요청의 서브도메인에 실어 Burp Collaborator로 직접 빼내는 Out-of-band 데이터 유출 풀이 (Oracle)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-interaction/Thu, 21 May 2026 17:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-out-of-band-interaction/응답 내용·오류·시간 어떤 인밴드 신호도 없는 환경에서, DB가 외부로 DNS 조회를 수행하도록 유도해 취약점을 확인하는 OAST(Out-of-band) 기법 풀이 (Oracle)