{"id":476474,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:51","modified_gmt":"2023-09-05T11:12:51","slug":"crlf-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ar\/wiki\/crlf-injection\/","title":{"rendered":"\u062d\u0642\u0646 Crlf"},"content":{"rendered":"<p>\u064a\u0639\u062f CRLF \u062d\u0642\u0646\u060c \u0648\u0647\u0648 \u0627\u062e\u062a\u0635\u0627\u0631 \u0644\u0640 Carriage Return Line Feed Injection\u060c \u0634\u0643\u0644\u0627\u064b \u0645\u0646 \u0623\u0634\u0643\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0648\u064a\u0628. \u0627\u0644\u062d\u0642\u0646 \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u062a\u0642\u0646\u064a\u0629 \u062d\u0642\u0646 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u062a\u0636\u0645\u0646 \u0627\u062e\u062a\u0631\u0627\u0642 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0641\u064a \u062a\u0637\u0628\u064a\u0642 \u0623\u0648 \u0645\u0648\u0642\u0639 \u0648\u064a\u0628. \u064a\u0624\u062b\u0631 \u0647\u0630\u0627 \u0627\u0644\u062d\u0642\u0646 \u0628\u0634\u0643\u0644 \u0623\u0633\u0627\u0633\u064a \u0639\u0644\u0649 \u0631\u0624\u0648\u0633 HTTP \u0648\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u0629 \u0645\u062b\u0644 \u062a\u0642\u0633\u064a\u0645 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP \u0648\u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u0646\u0635\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 (XSS) \u0648\u0627\u0644\u0645\u0632\u064a\u062f.<\/p>\n<h2>\u0627\u0644\u0623\u0635\u0644 \u0648\u0627\u0644\u062e\u0644\u0641\u064a\u0629 \u0627\u0644\u062a\u0627\u0631\u064a\u062e\u064a\u0629 \u0644\u062d\u0642\u0646 CRLF<\/h2>\n<p>\u0645\u0635\u0637\u0644\u062d &quot;CRLF \u062d\u0642\u0646&quot; \u0642\u062f\u064a\u0645 \u0642\u062f\u0645 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 HTTP \u0646\u0641\u0633\u0647\u060c \u062d\u064a\u062b \u064a\u0639\u0648\u062f \u062a\u0627\u0631\u064a\u062e\u0647 \u0625\u0644\u0649 \u0627\u0644\u0623\u064a\u0627\u0645 \u0627\u0644\u0623\u0648\u0644\u0649 \u0644\u0644\u0625\u0646\u062a\u0631\u0646\u062a. \u064a\u062a\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0633\u0644\u0633\u0644 CRLF (\u0627\u0644\u0645\u0645\u062b\u0644 \u0628\u0640 rn) \u0644\u0644\u0625\u0634\u0627\u0631\u0629 \u0625\u0644\u0649 \u0633\u0637\u0631 \u062c\u062f\u064a\u062f (\u0646\u0647\u0627\u064a\u0629 \u0627\u0644\u0633\u0637\u0631) \u0641\u064a \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0644\u063a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u0629. \u0648\u0647\u0630\u0627 \u0645\u0634\u062a\u0642 \u0645\u0646 \u0648\u0642\u062a \u0627\u0644\u0622\u0644\u0627\u062a \u0627\u0644\u0643\u0627\u062a\u0628\u0629 \u062d\u064a\u062b \u064a\u0642\u0648\u0645 &quot;\u0625\u0631\u062c\u0627\u0639 \u0627\u0644\u0646\u0642\u0644&quot; (CR) \u0628\u0625\u0639\u0627\u062f\u0629 \u062a\u0639\u064a\u064a\u0646 \u0645\u0648\u0636\u0639 \u0627\u0644\u062c\u0647\u0627\u0632 \u0625\u0644\u0649 \u0628\u062f\u0627\u064a\u0629 \u0627\u0644\u0633\u0637\u0631\u060c \u0628\u064a\u0646\u0645\u0627 \u064a\u0642\u0648\u0645 &quot;\u062a\u063a\u0630\u064a\u0629 \u0627\u0644\u062e\u0637&quot; (LF) \u0628\u0646\u0642\u0644\u0647 \u0625\u0644\u0649 \u0623\u0633\u0641\u0644 \u0627\u0644\u0633\u0637\u0631.<\/p>\n<p>\u064a\u0639\u0648\u062f \u0623\u0648\u0644 \u0630\u0643\u0631 \u0644\u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647 \u0623\u0648 &quot;\u062d\u0642\u0646\u0647&quot; \u0625\u0644\u0649 \u0623\u0648\u0627\u062e\u0631 \u0627\u0644\u062a\u0633\u0639\u064a\u0646\u064a\u0627\u062a \u0648\u0623\u0648\u0627\u0626\u0644 \u0627\u0644\u0639\u0642\u062f \u0627\u0644\u0623\u0648\u0644 \u0645\u0646 \u0627\u0644\u0642\u0631\u0646 \u0627\u0644\u062d\u0627\u062f\u064a \u0648\u0627\u0644\u0639\u0634\u0631\u064a\u0646\u060c \u062d\u064a\u062b \u0623\u0635\u0628\u062d\u062a \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 \u0623\u0643\u062b\u0631 \u062a\u0639\u0642\u064a\u062f\u064b\u0627 \u0648\u0628\u062f\u0623 \u0641\u0647\u0645 \u0627\u0644\u0623\u0645\u0646 \u0641\u064a \u0627\u0644\u062a\u0637\u0648\u0631.<\/p>\n<h2>\u0627\u0644\u063a\u0648\u0635 \u0627\u0644\u0639\u0645\u064a\u0642 \u0641\u064a \u062d\u0642\u0646 CRLF<\/h2>\n<p>\u064a\u0639\u062f \u062d\u0642\u0646 CRLF \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0645\u0639\u0627\u0644\u062c\u0629 \u0644\u062a\u0633\u0644\u0633\u0644 CRLF \u0644\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0643\u064a\u0641\u064a\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0628\u0648\u0627\u0633\u0637\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 \u0648\u0627\u0644\u062e\u0648\u0627\u062f\u0645. \u0648\u0645\u0646 \u062e\u0644\u0627\u0644 \u062d\u0642\u0646 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u063a\u064a\u0631 \u0645\u062a\u0648\u0642\u0639\u0629\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639 \u062a\u062f\u0641\u0642 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u0627\u0646\u062a\u0647\u0627\u0643\u0627\u062a \u0623\u0645\u0646\u064a\u0629.<\/p>\n<p>\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062a\u0636\u0645\u0646 \u0647\u062c\u0648\u0645 \u062d\u0642\u0646 CRLF \u0627\u0644\u0646\u0645\u0648\u0630\u062c\u064a \u0625\u0636\u0627\u0641\u0629 \u062a\u0633\u0644\u0633\u0644 CRLF \u0625\u0644\u0649 \u062d\u0642\u0644 \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 \u0648\u064a\u0628 \u0644\u062e\u062f\u0627\u0639 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0644\u064a\u0639\u062a\u0642\u062f \u0623\u0646 \u0633\u0637\u0631\u064b\u0627 \u062c\u062f\u064a\u062f\u064b\u0627 \u0642\u062f \u0628\u062f\u0623. \u0641\u064a \u0631\u0624\u0648\u0633 HTTP\u060c \u0648\u0627\u0644\u062a\u064a \u062a\u0639\u062f \u062c\u0632\u0621\u064b\u0627 \u0623\u0633\u0627\u0633\u064a\u064b\u0627 \u0645\u0646 \u0627\u0644\u0627\u062a\u0635\u0627\u0644 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a\u060c \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u062d\u0642\u0646 CRLF \u0625\u0644\u0649 \u062a\u0642\u0633\u064a\u0645 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP\u060c \u062d\u064a\u062b \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0636\u0627\u0631 \u062e\u062f\u0627\u0639 \u0627\u0644\u062e\u0627\u062f\u0645 \u0644\u0625\u0631\u0633\u0627\u0644 \u0627\u0633\u062a\u062c\u0627\u0628\u0627\u062a HTTP \u0645\u0639\u062f\u0644\u0629\u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062b\u063a\u0631\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0645\u062d\u062a\u0645\u0644\u0629.<\/p>\n<h2>\u0627\u0644\u0622\u0644\u064a\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0644\u062d\u0642\u0646 CRLF<\/h2>\n<p>\u064a\u0639\u0645\u0644 \u062d\u0642\u0646 CRLF \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u062f\u062e\u0627\u0644 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0641\u064a \u062a\u062f\u0641\u0642 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u062a\u0648\u0642\u0639 \u0644\u0644\u062a\u0637\u0628\u064a\u0642. \u0648\u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0642\u064a\u0627\u0645 \u0628\u0630\u0644\u0643\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0644\u0644\u062a\u0639\u0631\u0641 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062d\u0642\u0646 \u0643\u0623\u0648\u0627\u0645\u0631 \u0623\u0648 \u062a\u0648\u062c\u064a\u0647\u0627\u062a \u0645\u0634\u0631\u0648\u0639\u0629.<\/p>\n<p>\u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0641\u064a \u062d\u0627\u0644\u0629 \u062a\u0642\u0633\u064a\u0645 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP\u060c \u0642\u062f \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0625\u062f\u062e\u0627\u0644 \u0633\u0644\u0633\u0644\u0629 \u062a\u062a\u0636\u0645\u0646 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0645\u062a\u0628\u0648\u0639\u0629 \u0628\u0631\u0624\u0648\u0633 \u0623\u0648 \u0645\u062d\u062a\u0648\u0649 HTTP \u0625\u0636\u0627\u0641\u064a. \u0648\u0647\u0630\u0627 \u064a\u062c\u0639\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0642\u062f \u0623\u0646 \u0627\u0644\u0631\u0624\u0648\u0633 \u0642\u062f \u0627\u0646\u062a\u0647\u062a \u0648\u0628\u062f\u0623\u062a \u0631\u0624\u0648\u0633 \u062c\u062f\u064a\u062f\u0629\u060c \u0645\u0645\u0627 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0631\u0624\u0648\u0633 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP.<\/p>\n<h2>\u0627\u0644\u0645\u064a\u0632\u0627\u062a \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u062d\u0642\u0646 CRLF<\/h2>\n<p>\u062a\u0634\u0645\u0644 \u0627\u0644\u062e\u0635\u0627\u0626\u0635 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u0647\u062c\u0648\u0645 \u062d\u0642\u0646 CRLF \u0645\u0627 \u064a\u0644\u064a:<\/p>\n<ol>\n<li>\n<p>\u0645\u0639\u0627\u0644\u062c\u0629 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF: \u0627\u0644\u0645\u064a\u0632\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0644\u062d\u0642\u0646 CRLF \u0647\u064a \u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u063a\u064a\u0631 \u0627\u0644\u0645\u062a\u0648\u0642\u0639\u0629 \u0644\u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0641\u064a \u062d\u0642\u0648\u0644 \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0623\u0648 \u0631\u0624\u0648\u0633 HTTP.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0639\u0644\u0649 \u062a\u062f\u0641\u0642 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a: \u064a\u0645\u0643\u0646 \u0644\u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0627\u0644\u0645\u062d\u0642\u0648\u0646\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u062a\u062f\u0641\u0642 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062b\u063a\u0631\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0645\u062d\u062a\u0645\u0644\u0629.<\/p>\n<\/li>\n<li>\n<p>\u0646\u0637\u0627\u0642 \u0627\u0644\u062a\u0623\u062b\u064a\u0631: \u0644\u0627 \u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0630\u064a \u064a\u062d\u062f\u062b \u0641\u064a\u0647 \u0627\u0644\u062d\u0642\u0646 \u0641\u062d\u0633\u0628\u060c \u0628\u0644 \u062a\u0624\u062b\u0631 \u0623\u064a\u0636\u064b\u0627 \u0639\u0644\u0649 \u0623\u064a \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0623\u062e\u0631\u0649 \u062a\u0639\u0627\u0644\u062c \u0646\u0641\u0633 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0627\u062a\u062c\u0627\u0647 \u0645\u062c\u0631\u0649 \u0627\u0644\u0646\u0647\u0631.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0623\u0646\u0648\u0627\u0639 \u062d\u0642\u0646 CRLF<\/h2>\n<p>\u0647\u0646\u0627\u0643 \u0646\u0648\u0639\u0627\u0646 \u0631\u0626\u064a\u0633\u064a\u0627\u0646 \u0645\u0646 \u062d\u0642\u0646 CRLF:<\/p>\n<ol>\n<li>\n<p><strong>\u062a\u0642\u0633\u064a\u0645 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP<\/strong>: \u0647\u0630\u0627 \u0647\u0648 \u0627\u0644\u0646\u0648\u0639 \u0627\u0644\u0623\u0643\u062b\u0631 \u0634\u064a\u0648\u0639\u064b\u0627\u060c \u062d\u064a\u062b \u064a\u062a\u0645 \u0625\u062f\u062e\u0627\u0644 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0641\u064a \u0631\u0624\u0648\u0633 HTTP \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP \u0623\u0648 \u062a\u0642\u0633\u064a\u0645\u0647\u0627.<\/p>\n<\/li>\n<li>\n<p><strong>\u062d\u0642\u0646 \u0627\u0644\u0633\u062c\u0644<\/strong>: \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u0646\u0648\u0639 \u064a\u062a\u0645 \u0627\u0644\u062d\u0642\u0646 \u0641\u064a \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0633\u062c\u0644. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0632\u0648\u064a\u0631 \u0625\u062f\u062e\u0627\u0644\u0627\u062a \u0627\u0644\u0633\u062c\u0644 \u0623\u0648 \u0625\u062f\u0631\u0627\u062c \u0645\u062d\u062a\u0648\u0649 \u0636\u0627\u0631.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0644\u0645\u0634\u0627\u0643\u0644 \u0648\u0627\u0644\u062d\u0644\u0648\u0644 \u0644\u062d\u0642\u0646 CRLF<\/h2>\n<p>\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062d\u0642\u0646 CRLF \u0628\u0634\u0643\u0644 \u0636\u0627\u0631 \u0628\u0639\u062f\u0629 \u0637\u0631\u0642\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u062e\u062a\u0637\u0627\u0641 \u062c\u0644\u0633\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u060c \u0648\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u060c \u0648\u062e\u062f\u0627\u0639 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0644\u062a\u0646\u0641\u064a\u0630 \u0646\u0635\u0648\u0635 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629.<\/p>\n<p>\u064a\u062a\u0636\u0645\u0646 \u0645\u0646\u0639 \u0647\u062c\u0645\u0627\u062a \u062d\u0642\u0646 CRLF \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0648\u0627\u0644\u062a\u0639\u0642\u064a\u0645. \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u062d\u062f\u064a\u062f \u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u0623\u062d\u0631\u0641 \u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0642\u0628\u0648\u0644\u0647\u0627 \u0641\u064a \u062d\u0642\u0648\u0644 \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u0641\u062d\u0635 \u0631\u0624\u0648\u0633 HTTP \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u063a\u064a\u0631 \u0627\u0644\u0645\u062a\u0648\u0642\u0639\u0629\u060c \u064a\u0645\u0643\u0646\u0643 \u0645\u0646\u0639 \u0639\u0645\u0644\u064a\u0627\u062a \u062d\u0642\u0646 CRLF \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629.<\/p>\n<h2>\u0645\u0642\u0627\u0631\u0646\u0627\u062a \u0645\u0639 \u0645\u0635\u0637\u0644\u062d\u0627\u062a \u0645\u0645\u0627\u062b\u0644\u0629<\/h2>\n<p>\u0641\u064a \u062d\u064a\u0646 \u0623\u0646 \u062d\u0642\u0646 CRLF \u064a\u062a\u0639\u0627\u0645\u0644 \u0641\u064a \u0627\u0644\u0645\u0642\u0627\u0645 \u0627\u0644\u0623\u0648\u0644 \u0645\u0639 \u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF \u0627\u0644\u0645\u062a\u0633\u0644\u0644\u0629\u060c \u0641\u0625\u0646 \u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062d\u0642\u0646 \u0627\u0644\u0623\u062e\u0631\u0649 \u0630\u0627\u062a \u0627\u0644\u0635\u0644\u0629 \u062a\u0634\u0645\u0644:<\/p>\n<ol>\n<li>\n<p><strong>\u062d\u0642\u0646 SQL<\/strong>: \u064a\u062a\u0636\u0645\u0646 \u0630\u0644\u0643 \u062d\u0642\u0646 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 SQL \u0636\u0627\u0631\u0629 \u0641\u064a \u0623\u062d\u062f \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a\u060c \u0645\u0645\u0627 \u0642\u062f \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u0627\u0644\u0648\u0635\u0648\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647 \u0623\u0648 \u062a\u0644\u0641 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0623\u0648 \u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u0646\u0635\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 (XSS)<\/strong>: \u064a\u0642\u0648\u0645 \u0647\u0630\u0627 \u0627\u0644\u0646\u0648\u0639 \u0645\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0625\u062f\u062e\u0627\u0644 \u0646\u0635\u0648\u0635 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0625\u0644\u0649 \u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u0648\u064a\u0628 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629\u060c \u0648\u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630\u0647\u0627 \u0628\u0639\u062f \u0630\u0644\u0643 \u0628\u0648\u0627\u0633\u0637\u0629 \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0636\u062d\u064a\u0629.<\/p>\n<\/li>\n<li>\n<p><strong>\u062d\u0642\u0646 \u0627\u0644\u0623\u0648\u0627\u0645\u0631<\/strong>: \u0647\u0630\u0647 \u0637\u0631\u064a\u0642\u0629 \u0647\u062c\u0648\u0645 \u064a\u0642\u0648\u0645 \u0641\u064a\u0647\u0627 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u063a\u064a\u064a\u0631 \u0645\u062f\u062e\u0644\u0627\u062a \u0628\u064a\u0627\u0646\u0627\u062a dill \u0625\u0644\u0649 \u062a\u0637\u0628\u064a\u0642 \u0644\u062a\u062d\u0642\u064a\u0642 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.<\/p>\n<\/li>\n<\/ol>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>\u062d\u0642\u0646 CRLF<\/th>\n<th>\u062d\u0642\u0646 SQL<\/th>\n<th>\u0639\u0628\u0631 \u0645\u0648\u0642\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u0629<\/th>\n<th>\u062d\u0642\u0646 \u0627\u0644\u0623\u0648\u0627\u0645\u0631<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0627\u0644\u0647\u062f\u0641 \u0627\u0644\u0631\u0626\u064a\u0633\u064a<\/td>\n<td>\u0631\u0624\u0648\u0633 HTTP \u0648\u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645<\/td>\n<td>\u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a<\/td>\n<td>\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0645\u0646 \u062c\u0627\u0646\u0628 \u0627\u0644\u0639\u0645\u064a\u0644 \u0644\u0645\u0648\u0642\u0639 \u0627\u0644\u0648\u064a\u0628<\/td>\n<td>\u063a\u0644\u0627\u0641 \u0627\u0644\u0623\u0645\u0631 \u0627\u0644\u0645\u0636\u064a\u0641 \u0644\u0644\u062a\u0637\u0628\u064a\u0642<\/td>\n<\/tr>\n<tr>\n<td>\u0648\u0642\u0627\u064a\u0629<\/td>\n<td>\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0648\u0627\u0644\u062a\u0639\u0642\u064a\u0645<\/td>\n<td>\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0639\u062f\u0629 \u0623\u0648 \u0627\u0644\u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a \u0630\u0627\u062a \u0627\u0644\u0645\u0639\u0644\u0645\u0627\u062a<\/td>\n<td>\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0625\u062f\u062e\u0627\u0644\u060c \u0648\u062a\u0631\u0645\u064a\u0632 \u0627\u0644\u0625\u062e\u0631\u0627\u062c\u060c \u0648\u0645\u0644\u0641\u0627\u062a \u062a\u0639\u0631\u064a\u0641 \u0627\u0644\u0627\u0631\u062a\u0628\u0627\u0637 HTTP \u0641\u0642\u0637<\/td>\n<td>\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0625\u062f\u062e\u0627\u0644\u060c \u0648\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0648\u0627\u062c\u0647\u0627\u062a \u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0622\u0645\u0646\u0629<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0648\u062c\u0647\u0627\u062a \u0627\u0644\u0646\u0638\u0631 \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u064a\u0629 \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a<\/h2>\n<p>\u0641\u064a \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u060c \u0645\u0646 \u0627\u0644\u0645\u0641\u062a\u0631\u0636 \u0623\u0646 \u064a\u0624\u062f\u064a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0645\u062a\u0632\u0627\u064a\u062f \u0639\u0644\u0649 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0622\u0644\u064a\u0629 \u0648\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a \u0625\u0644\u0649 \u062a\u062d\u0633\u064a\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 \u0647\u062c\u0645\u0627\u062a \u062d\u0642\u0646 CRLF \u0648\u0627\u0644\u0648\u0642\u0627\u064a\u0629 \u0645\u0646\u0647\u0627. \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u0630\u0644\u0643\u060c \u0645\u0646 \u0627\u0644\u0645\u062a\u0648\u0642\u0639 \u0623\u0646 \u062a\u0635\u0628\u062d \u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0627\u0644\u062a\u0631\u0645\u064a\u0632 \u0627\u0644\u0622\u0645\u0646 \u0648\u0627\u0644\u062a\u0639\u0644\u064a\u0645 \u062d\u0648\u0644 \u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062d\u0642\u0646 \u0623\u0643\u062b\u0631 \u0627\u0646\u062a\u0634\u0627\u0631\u064b\u0627 \u0641\u064a \u0645\u062c\u062a\u0645\u0639 \u0627\u0644\u062a\u0637\u0648\u064a\u0631\u060c \u0645\u0645\u0627 \u064a\u0632\u064a\u062f \u0645\u0646 \u062a\u062e\u0641\u064a\u0641 \u0647\u0630\u0647 \u0627\u0644\u0645\u062e\u0627\u0637\u0631.<\/p>\n<h2>\u062d\u0642\u0646 CRLF \u0648\u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629<\/h2>\n<p>\u064a\u0645\u0643\u0646 \u0644\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629\u060c \u0645\u062b\u0644 \u062a\u0644\u0643 \u0627\u0644\u062a\u064a \u064a\u0648\u0641\u0631\u0647\u0627 OneProxy\u060c \u0623\u0646 \u062a\u0644\u0639\u0628 \u062f\u0648\u0631\u064b\u0627 \u0641\u064a \u0645\u0646\u0639 \u0647\u062c\u0645\u0627\u062a CRLF \u062d\u0642\u0646. \u0645\u0646 \u062e\u0644\u0627\u0644 \u0641\u062d\u0635 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0648\u0627\u0631\u062f\u0629 \u0648\u0627\u0644\u0635\u0627\u062f\u0631\u0629 \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u0627\u0644\u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644 \u062a\u062d\u062f\u064a\u062f \u0645\u062d\u0627\u0648\u0644\u0627\u062a \u0627\u0644\u062d\u0642\u0646 \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0642\u062f \u062a\u0642\u0648\u0645 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629 \u0623\u064a\u0636\u064b\u0627 \u0628\u062a\u0637\u0647\u064a\u0631 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0642\u0628\u0644 \u0625\u0639\u0627\u062f\u0629 \u062a\u0648\u062c\u064a\u0647\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u0647\u062f\u0641\u060c \u0645\u0645\u0627 \u064a\u0636\u064a\u0641 \u0637\u0628\u0642\u0629 \u0625\u0636\u0627\u0641\u064a\u0629 \u0645\u0646 \u0627\u0644\u0623\u0645\u0627\u0646.<\/p>\n<h2>\u0631\u0648\u0627\u0628\u0637 \u0630\u0627\u062a \u0639\u0644\u0627\u0642\u0629<\/h2>\n<p>\u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0623\u0643\u062b\u0631 \u062a\u0641\u0635\u064a\u0644\u0627\u064b \u062d\u0648\u0644 \u062d\u0642\u0646 CRLF\u060c \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0627\u0631\u062f \u0627\u0644\u062a\u0627\u0644\u064a\u0629:<\/p>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/CRLF_Injection\" target=\"_new\" rel=\"noopener nofollow\">\u062d\u0642\u0646 OWASP CRLF<\/a><\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Securing_your_site\/Http_splitting\" target=\"_new\" rel=\"noopener nofollow\">MDN Web Docs: \u062a\u0642\u0633\u064a\u0645 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 HTTP<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/websitesecurity\/crlf-injection\/\" target=\"_new\" rel=\"noopener nofollow\">\u062f\u0644\u064a\u0644 \u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628: \u062d\u0642\u0646 CRLF<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/93.html\" target=\"_new\" rel=\"noopener nofollow\">CWE \u2013 CWE-93: \u062a\u062d\u064a\u064a\u062f \u063a\u064a\u0631 \u0635\u062d\u064a\u062d \u0644\u062a\u0633\u0644\u0633\u0644\u0627\u062a CRLF<\/a><\/li>\n<\/ul>","protected":false},"featured_media":476475,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476474","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CRLF Injection<\/mark>","faq_items":[{"question":"What is a CRLF Injection?","answer":"<p>A CRLF Injection is a type of security vulnerability where an attacker infiltrates Carriage Return Line Feed (CRLF) sequences into a web application. This infiltration primarily affects HTTP headers and can lead to various threats such as HTTP Response Splitting and Cross-Site Scripting.<\/p>"},{"question":"When was CRLF Injection first discovered?","answer":"<p>The term 'CRLF Injection' originated from the early days of the internet, as old as the HTTP protocol itself. Its misuse, or \"injection,\" started being recognized as a threat to web application security in the late 1990s and early 2000s.<\/p>"},{"question":"How does a CRLF Injection work?","answer":"<p>A CRLF Injection works by inserting CRLF sequences into an application's expected data stream. By doing this, the attacker can manipulate the system into recognizing these injections as legitimate commands or directives. This can lead to manipulated data flow and potential security vulnerabilities.<\/p>"},{"question":"What are the types of CRLF Injection?","answer":"<p>The two main types of CRLF injections are HTTP Response Splitting, where CRLF sequences are injected into HTTP headers to manipulate the HTTP response, and Log Injection, where the injection is made into log files, potentially forging log entries or inserting malicious content.<\/p>"},{"question":"How can we prevent CRLF Injection attacks?","answer":"<p>CRLF injection attacks can be prevented by implementing input validation and sanitization. This involves limiting the types of characters that can be accepted in user input fields and inspecting HTTP headers for unexpected CRLF sequences.<\/p>"},{"question":"How does CRLF Injection compare with other similar attacks?","answer":"<p>CRLF Injection involves infiltrating CRLF sequences, primarily affecting HTTP headers and user inputs. SQL Injection involves the injection of malicious SQL code, targeting database queries. Cross-Site Scripting involves the injection of malicious scripts into trusted websites, affecting client-side scripts. Command Injection is where an attacker alters dill data inputs to an application to achieve arbitrary command execution, targeting the application's host command shell.<\/p>"},{"question":"How are proxy servers related to CRLF Injection?","answer":"<p>Proxy servers, like OneProxy, can help prevent CRLF Injection attacks. They scrutinize incoming and outgoing data for suspicious patterns, identifying potential injection attempts. Some advanced proxy servers can also sanitize the data before forwarding it to the target server, adding an extra layer of security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/476474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/476474\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media\/476475"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media?parent=476474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}