https://blog.mingon.dev/tags/time-based/Recent content in Time-Based on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 21 May 2026 16:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays-and-information-retrieval/Thu, 21 May 2026 16:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays-and-information-retrieval/조건이 참일 때만 지연을 거는 CASE 구문으로, 응답 시간의 변화를 신호로 삼아 비밀번호를 비트 단위로 추출하는 Time-Based Blind SQL Injection 풀이 (PostgreSQL)https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays/Thu, 21 May 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/sql-injection/write-up-portswigger---blind-sql-injection-with-time-delays/응답 내용 차이도 오류도 없는 환경에서, 지연 함수(pg_sleep)를 삽입해 응답 시간으로 취약점을 확인하는 Time-Based Blind SQL Injection 풀이 (PostgreSQL)