https://blog.mingon.dev/tags/response-timing/Recent content in Response Timing on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 09 Jul 2026 09:00:00 +0900https://blog.mingon.dev/write-up/portswigger/authentication/write-up-portswigger---username-enumeration-via-response-timing/Thu, 09 Jul 2026 09:00:00 +0900https://blog.mingon.dev/write-up/portswigger/authentication/write-up-portswigger---username-enumeration-via-response-timing/IP 차단을 X-Forwarded-For로 우회하고, 유효 계정에서만 길어지는 응답 시간(TTFB)으로 username을 열거한 뒤 비밀번호를 브루트포스하는 Authentication 풀이