https://blog.mingon.dev/write-up/portswigger/information-disclosure/Recent content in Information Disclosure on 보안 연구 노트Hugo -- gohugo.ioko-KRWed, 29 Jul 2026 22:00:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-in-version-control-history/Wed, 29 Jul 2026 22:00:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-in-version-control-history/공개된 .git의 loose object를 zlib으로 직접 순회해 이전 커밋의 관리자 비밀번호를 복구하는 Information Disclosure 풀이https://blog.mingon.dev/write-up/portswigger/information-disclosure/authentication-bypass-via-information-disclosure/Sat, 25 Jul 2026 16:40:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/authentication-bypass-via-information-disclosure/TRACE 응답에서 내부 인증 헤더를 찾고 클라이언트가 보낸 로컬 IP 값을 신뢰하는 관리자 접근 제어를 우회하는 Information Disclosure 풀이https://blog.mingon.dev/write-up/portswigger/information-disclosure/source-code-disclosure-via-backup-files/Wed, 22 Jul 2026 21:10:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/source-code-disclosure-via-backup-files/공개된 backup 디렉터리에서 Java 백업 파일을 내려받아 하드코딩된 PostgreSQL 비밀번호를 식별하는 Information Disclosure 풀이https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-on-debug-page/Sat, 18 Jul 2026 14:20:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-on-debug-page/HTML 주석에서 숨겨진 phpinfo 디버그 페이지를 찾고 환경 변수 SECRET_KEY를 식별하는 Information Disclosure 풀이https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-in-error-messages/Wed, 15 Jul 2026 20:30:00 +0900https://blog.mingon.dev/write-up/portswigger/information-disclosure/information-disclosure-in-error-messages/productId에 예상하지 않은 문자열을 전달해 상세 오류를 유도하고 Apache Struts 2 버전을 식별하는 Information Disclosure 풀이