{"id":476474,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:51","modified_gmt":"2023-09-05T11:12:51","slug":"crlf-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ir\/wiki\/crlf-injection\/","title":{"rendered":"\u062a\u0632\u0631\u06cc\u0642 Crlf"},"content":{"rendered":"<p>CRLF Injection\u060c \u0645\u062e\u0641\u0641 Carriage Return Line Feed Injection\u060c \u0646\u0648\u0639\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0627\u0645\u0646\u06cc\u062a \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0627\u0633\u062a. \u062a\u0632\u0631\u06cc\u0642 \u06cc\u06a9 \u062a\u06a9\u0646\u06cc\u06a9 \u062a\u0632\u0631\u06cc\u0642 \u06a9\u062f \u0627\u0633\u062a \u06a9\u0647 \u0634\u0627\u0645\u0644 \u0646\u0641\u0648\u0630 \u062a\u0648\u0627\u0644\u06cc \u0647\u0627\u06cc CRLF \u0628\u0647 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u06cc\u0627 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062a\u0632\u0631\u06cc\u0642 \u062f\u0631 \u062f\u0631\u062c\u0647 \u0627\u0648\u0644 \u0647\u062f\u0631\u0647\u0627\u06cc HTTP \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u0648 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u06cc \u0645\u0627\u0646\u0646\u062f \u062a\u0642\u0633\u06cc\u0645 \u067e\u0627\u0633\u062e HTTP\u060c \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc (XSS) \u0648 \u063a\u06cc\u0631\u0647 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.<\/p>\n<h2>\u0645\u0646\u0634\u0627\u0621 \u0648 \u067e\u06cc\u0634\u06cc\u0646\u0647 \u062a\u0627\u0631\u06cc\u062e\u06cc \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>\u0627\u0635\u0637\u0644\u0627\u062d &quot;\u062a\u0632\u0631\u06cc\u0642 CRLF&quot; \u0628\u0647 \u0642\u062f\u0645\u062a \u062e\u0648\u062f \u067e\u0631\u0648\u062a\u06a9\u0644 HTTP \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u0631\u0648\u0632\u0647\u0627\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0646\u0634\u0627\u062a \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u062f\u0646\u0628\u0627\u0644\u0647 CRLF (\u0628\u0647 \u0635\u0648\u0631\u062a rn \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f) \u0628\u0631\u0627\u06cc \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0646 \u062e\u0637 \u062c\u062f\u06cc\u062f (\u067e\u0627\u06cc\u0627\u0646 \u062e\u0637) \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0632\u0628\u0627\u0646 \u0647\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0646\u0648\u06cc\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f. \u0627\u06cc\u0646 \u0628\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0632 \u0632\u0645\u0627\u0646 \u0645\u0627\u0634\u06cc\u0646\u200c\u0647\u0627\u06cc \u062a\u062d\u0631\u06cc\u0631 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u0646 &quot;Carriage Return&quot; (CR) \u0645\u0648\u0642\u0639\u06cc\u062a \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0647 \u0627\u0628\u062a\u062f\u0627\u06cc \u06cc\u06a9 \u062e\u0637 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0631\u062f\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 &quot;Line Feed&quot; (LF) \u0622\u0646 \u0631\u0627 \u06cc\u06a9 \u062e\u0637 \u0628\u0647 \u067e\u0627\u06cc\u06cc\u0646 \u0645\u06cc \u0628\u0631\u062f.<\/p>\n<p>\u0627\u0648\u0644\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u0628\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0627\u062f\u0631\u0633\u062a \u06cc\u0627 &quot;\u062a\u0632\u0631\u06cc\u0642&quot; \u0622\u0646 \u0628\u0647 \u0627\u0648\u0627\u062e\u0631 \u062f\u0647\u0647 1990 \u0648 \u0627\u0648\u0627\u06cc\u0644 \u062f\u0647\u0647 2000 \u0628\u0631\u0645\u06cc \u06af\u0631\u062f\u062f\u060c \u0632\u06cc\u0631\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u062a\u0631 \u0634\u062f\u0646\u062f \u0648 \u062f\u0631\u06a9 \u0627\u0645\u0646\u06cc\u062a \u0634\u0631\u0648\u0639 \u0628\u0647 \u062a\u06a9\u0627\u0645\u0644 \u06a9\u0631\u062f.<\/p>\n<h2>\u0634\u06cc\u0631\u062c\u0647 \u0639\u0645\u06cc\u0642 \u062f\u0631 \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>CRLF Injection \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u062a\u0648\u0627\u0644\u06cc CRLF \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u062d\u0648\u0647 \u067e\u0631\u062f\u0627\u0632\u0634 \u062f\u0627\u062f\u0647 \u0647\u0627 \u062a\u0648\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u0648 \u0633\u0631\u0648\u0631\u0647\u0627 \u0627\u0633\u062a. \u0628\u0627 \u062a\u0632\u0631\u06cc\u0642 \u062f\u0646\u0628\u0627\u0644\u0647\u200c\u0647\u0627\u06cc CRLF \u063a\u06cc\u0631\u0645\u0646\u062a\u0638\u0631\u0647\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062c\u0631\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f \u0648 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0642\u0636 \u0627\u0645\u0646\u06cc\u062a \u0634\u0648\u062f.<\/p>\n<p>\u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0639\u0645\u0648\u0644\u06cc CRLF Injection \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0627\u0645\u0644 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u062f\u0646\u0628\u0627\u0644\u0647 CRLF \u0628\u0647 \u0641\u06cc\u0644\u062f \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u062f\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0628\u0627\u0634\u062f \u062a\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u062f\u0647\u062f \u062a\u0627 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u062e\u0637 \u062c\u062f\u06cc\u062f\u06cc \u0634\u0631\u0648\u0639 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0647\u062f\u0631\u0647\u0627\u06cc HTTP\u060c \u06a9\u0647 \u0628\u062e\u0634\u06cc \u0636\u0631\u0648\u0631\u06cc \u0627\u0632 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0647\u0633\u062a\u0646\u062f\u060c \u062a\u0632\u0631\u06cc\u0642 CRLF \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062a\u0642\u0633\u06cc\u0645 \u067e\u0627\u0633\u062e HTTP \u0634\u0648\u062f\u060c \u062c\u0627\u06cc\u06cc \u06a9\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u062e\u0631\u0628 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0633\u0631\u0648\u0631 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u062f\u0647\u062f \u062a\u0627 \u067e\u0627\u0633\u062e\u200c\u0647\u0627\u06cc HTTP \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627\u0641\u062a\u0647 \u0631\u0627 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f \u0648 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0634\u0648\u062f.<\/p>\n<h2>\u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u062f\u0627\u062e\u0644\u06cc \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>\u06cc\u06a9 \u062a\u0632\u0631\u06cc\u0642 CRLF \u0628\u0627 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u062f\u0646\u0628\u0627\u0644\u0647\u200c\u0647\u0627\u06cc CRLF \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0627 \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f \u062a\u0627 \u0627\u06cc\u0646 \u062a\u0632\u0631\u06cc\u0642 \u0647\u0627 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u06cc\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644 \u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc \u062a\u0634\u062e\u06cc\u0635 \u062f\u0647\u062f.<\/p>\n<p>\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u062f\u0631 \u0645\u0648\u0631\u062f \u062a\u0642\u0633\u06cc\u0645 \u067e\u0627\u0633\u062e HTTP\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0631\u0634\u062a\u0647\u200c\u0627\u06cc \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u062f \u06a9\u0647 \u0634\u0627\u0645\u0644 \u062f\u0646\u0628\u0627\u0644\u0647\u200c\u0647\u0627\u06cc CRLF \u0648 \u0628\u0647 \u062f\u0646\u0628\u0627\u0644 \u0622\u0646 \u0633\u0631\u0635\u0641\u062d\u0647\u200c\u0647\u0627 \u06cc\u0627 \u0645\u062d\u062a\u0648\u0627\u06cc HTTP \u0627\u0636\u0627\u0641\u06cc \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0628\u0627\u0639\u062b \u0645\u06cc \u0634\u0648\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u06a9\u0647 \u0633\u0631\u0635\u0641\u062d\u0647 \u0647\u0627 \u0628\u0647 \u067e\u0627\u06cc\u0627\u0646 \u0631\u0633\u06cc\u062f\u0647 \u0627\u0646\u062f \u0648 \u0647\u062f\u0631\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0634\u0631\u0648\u0639 \u0634\u062f\u0647 \u0627\u0646\u062f\u060c \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0633\u0631\u0635\u0641\u062d\u0647 \u0647\u0627\u06cc \u067e\u0627\u0633\u062e \u067e\u0627\u0633\u062e HTTP \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u062f.<\/p>\n<h2>\u0648\u06cc\u0698\u06af\u06cc \u0647\u0627\u06cc \u06a9\u0644\u06cc\u062f\u06cc \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>\u0648\u06cc\u0698\u06af\u06cc \u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u062d\u0645\u0644\u0647 \u062a\u0632\u0631\u06cc\u0642 CRLF \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:<\/p>\n<ol>\n<li>\n<p>\u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u062a\u0648\u0627\u0644\u06cc \u0647\u0627\u06cc CRLF: \u0648\u06cc\u0698\u06af\u06cc \u0627\u0648\u0644\u06cc\u0647 \u062a\u0632\u0631\u06cc\u0642 CRLF \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\u0646 \u063a\u06cc\u0631\u0645\u0646\u062a\u0638\u0631\u0647 \u062f\u0646\u0628\u0627\u0644\u0647 \u0647\u0627\u06cc CRLF \u0628\u0647 \u0641\u06cc\u0644\u062f\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u06cc\u0627 \u0647\u062f\u0631\u0647\u0627\u06cc HTTP \u0627\u0633\u062a.<\/p>\n<\/li>\n<li>\n<p>\u062a\u0623\u062b\u06cc\u0631 \u0628\u0631 \u062c\u0631\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647: \u062a\u0648\u0627\u0644\u06cc \u0647\u0627\u06cc CRLF \u062a\u0632\u0631\u06cc\u0642 \u0634\u062f\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u062c\u0631\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f \u0648 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0634\u0648\u0646\u062f.<\/p>\n<\/li>\n<li>\n<p>\u062f\u0627\u0645\u0646\u0647 \u0646\u0641\u0648\u0630: \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0646\u0647 \u062a\u0646\u0647\u0627 \u0628\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u06cc \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u062a\u0632\u0631\u06cc\u0642 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0644\u06a9\u0647 \u0628\u0631 \u0633\u0627\u06cc\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0647\u0645\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u067e\u0627\u06cc\u06cc\u0646 \u062f\u0633\u062a \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0646\u06cc\u0632 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0627\u0646\u0648\u0627\u0639 \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>\u062f\u0648 \u0646\u0648\u0639 \u0627\u0635\u0644\u06cc \u062a\u0632\u0631\u06cc\u0642 CRLF \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f:<\/p>\n<ol>\n<li>\n<p><strong>\u062a\u0642\u0633\u06cc\u0645 \u067e\u0627\u0633\u062e HTTP<\/strong>: \u0627\u06cc\u0646 \u0631\u0627\u06cc\u062c \u062a\u0631\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u062f\u0646\u0628\u0627\u0644\u0647 \u0647\u0627\u06cc CRLF \u0628\u0647 \u0633\u0631\u0628\u0631\u06af \u0647\u0627\u06cc HTTP \u062a\u0632\u0631\u06cc\u0642 \u0645\u06cc \u0634\u0648\u0646\u062f \u062a\u0627 \u067e\u0627\u0633\u062e HTTP \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06cc\u0627 \u062a\u0642\u0633\u06cc\u0645 \u06a9\u0646\u0646\u062f.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u0632\u0631\u06cc\u0642 \u0644\u0627\u06af<\/strong>: \u062f\u0631 \u0627\u06cc\u0646 \u0646\u0648\u0639 \u062a\u0632\u0631\u06cc\u0642 \u0628\u0647 \u0644\u0627\u06af \u0641\u0627\u06cc\u0644 \u0647\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc \u0634\u0648\u062f. \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u062c\u0639\u0644 \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u06af\u0632\u0627\u0631\u0634 \u06cc\u0627 \u062f\u0631\u062c \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u062e\u0631\u0628 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u060c \u0645\u0634\u06a9\u0644\u0627\u062a \u0648 \u0631\u0627\u0647 \u062d\u0644 \u0647\u0627 \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 CRLF<\/h2>\n<p>\u062a\u0632\u0631\u06cc\u0642\u200c\u0647\u0627\u06cc CRLF \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0647 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0631\u0628\u0648\u062f\u0646 \u062c\u0644\u0633\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u060c \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0648 \u0641\u0631\u06cc\u0628 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628.<\/p>\n<p>\u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u062a\u0632\u0631\u06cc\u0642 CRLF \u0634\u0627\u0645\u0644 \u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc \u0648 \u067e\u0627\u06a9\u0633\u0627\u0632\u06cc \u0627\u0633\u062a. \u0628\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0646\u0648\u0627\u0639 \u06a9\u0627\u0631\u0627\u06a9\u062a\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u062f\u0631 \u0641\u06cc\u0644\u062f\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0634\u0648\u0646\u062f \u0648 \u0628\u0631\u0631\u0633\u06cc \u0633\u0631\u0635\u0641\u062d\u0647\u200c\u0647\u0627\u06cc HTTP \u0628\u0631\u0627\u06cc \u062f\u0646\u0628\u0627\u0644\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u0646\u062a\u0638\u0631\u0647 CRLF\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062a\u0632\u0631\u06cc\u0642\u200c\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc CRLF \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n<h2>\u0645\u0642\u0627\u06cc\u0633\u0647 \u0628\u0627 \u0627\u0635\u0637\u0644\u0627\u062d\u0627\u062a \u0645\u0634\u0627\u0628\u0647<\/h2>\n<p>\u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 CRLF Injection \u062f\u0631 \u062f\u0631\u062c\u0647 \u0627\u0648\u0644 \u0628\u0627 \u062a\u0648\u0627\u0644\u06cc \u0647\u0627\u06cc CRLF \u0646\u0641\u0648\u0630 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0633\u0627\u06cc\u0631 \u062d\u0645\u0644\u0627\u062a \u062a\u0632\u0631\u06cc\u0642\u06cc \u0645\u0631\u062a\u0628\u0637 \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:<\/p>\n<ol>\n<li>\n<p><strong>\u062a\u0632\u0631\u06cc\u0642 SQL<\/strong>: \u0627\u06cc\u0646 \u0634\u0627\u0645\u0644 \u062a\u0632\u0631\u06cc\u0642 \u06a9\u062f SQL \u0645\u062e\u0631\u0628 \u0628\u0647 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632\u060c \u062e\u0631\u0627\u0628\u06cc \u062f\u0627\u062f\u0647 \u06cc\u0627 \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc (XSS)<\/strong>: \u0627\u06cc\u0646 \u0646\u0648\u0639 \u062d\u0645\u0644\u0647 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0647 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u062a\u0632\u0631\u06cc\u0642 \u0645\u06cc \u06a9\u0646\u062f \u0648 \u0633\u067e\u0633 \u062a\u0648\u0633\u0637 \u0645\u0631\u0648\u0631\u06af\u0631 \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646<\/strong>: \u0627\u06cc\u0646 \u06cc\u06a9 \u0631\u0648\u0634 \u062d\u0645\u0644\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0648\u0631\u0648\u062f\u06cc \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0634\u0648\u06cc\u062f \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.<\/p>\n<\/li>\n<\/ol>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>\u062a\u0632\u0631\u06cc\u0642 CRLF<\/th>\n<th>\u062a\u0632\u0631\u06cc\u0642 SQL<\/th>\n<th>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc<\/th>\n<th>\u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0647\u062f\u0641 \u0627\u0635\u0644\u06cc<\/td>\n<td>\u0647\u062f\u0631\u0647\u0627\u06cc HTTP \u0648 \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631<\/td>\n<td>\u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647<\/td>\n<td>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u0633\u0645\u062a \u0645\u0634\u062a\u0631\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a<\/td>\n<td>\u067e\u0648\u0633\u062a\u0647 \u0641\u0631\u0645\u0627\u0646 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0628\u0631\u0646\u0627\u0645\u0647<\/td>\n<\/tr>\n<tr>\n<td>\u062c\u0644\u0648\u06af\u06cc\u0631\u06cc<\/td>\n<td>\u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc \u0648 \u067e\u0627\u06a9\u0633\u0627\u0632\u06cc<\/td>\n<td>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0639\u0628\u0627\u0631\u0627\u062a \u0622\u0645\u0627\u062f\u0647 \u06cc\u0627 \u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u06cc \u0634\u062f\u0647<\/td>\n<td>\u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc\u060c \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u062e\u0631\u0648\u062c\u06cc\u060c \u06a9\u0648\u06a9\u06cc \u0647\u0627\u06cc \u0641\u0642\u0637 HTTP<\/td>\n<td>\u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 API \u0647\u0627\u06cc \u0627\u0645\u0646<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0686\u0634\u0645 \u0627\u0646\u062f\u0627\u0632\u0647\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc \u0647\u0627\u06cc \u0622\u06cc\u0646\u062f\u0647<\/h2>\n<p>\u062f\u0631 \u0622\u06cc\u0646\u062f\u0647\u060c \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u062a\u06a9\u0627 \u0628\u0647 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0648 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0627\u06cc\u062f \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u062a\u0632\u0631\u06cc\u0642 CRLF \u0631\u0627 \u0628\u0647\u0628\u0648\u062f \u0628\u062e\u0634\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0627\u0646\u062a\u0638\u0627\u0631 \u0645\u06cc \u0631\u0648\u062f \u0634\u06cc\u0648\u0647 \u0647\u0627\u06cc \u06a9\u062f\u06af\u0630\u0627\u0631\u06cc \u0627\u06cc\u0645\u0646 \u0648 \u0622\u0645\u0648\u0632\u0634 \u062f\u0631 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0627\u062a \u062a\u0632\u0631\u06cc\u0642\u06cc \u062f\u0631 \u062c\u0627\u0645\u0639\u0647 \u062a\u0648\u0633\u0639\u0647 \u0631\u0627\u06cc\u062c \u062a\u0631 \u0634\u0648\u062f \u0648 \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0631\u0627 \u06a9\u0627\u0647\u0634 \u062f\u0647\u062f.<\/p>\n<h2>CRLF \u062a\u0632\u0631\u06cc\u0642 \u0648 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u067e\u0631\u0648\u06a9\u0633\u06cc<\/h2>\n<p>\u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u067e\u0631\u0627\u06a9\u0633\u06cc\u060c \u0645\u0627\u0646\u0646\u062f \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 OneProxy\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u062f\u0631 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a CRLF Injection \u0646\u0642\u0634 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f. \u0628\u0627 \u0628\u0631\u0631\u0633\u06cc \u062f\u0642\u06cc\u0642 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u0648 \u062e\u0631\u0648\u062c\u06cc \u0628\u0631\u0627\u06cc \u0627\u0644\u06af\u0648\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9\u060c \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u067e\u0631\u0648\u06a9\u0633\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u062a\u0632\u0631\u06cc\u0642 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0646\u062f. \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u067e\u0631\u0648\u06a9\u0633\u06cc \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u0642\u0628\u0644 \u0627\u0632 \u0627\u0631\u0633\u0627\u0644 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u067e\u0627\u06a9\u0633\u0627\u0632\u06cc \u06a9\u0646\u0646\u062f \u0648 \u06cc\u06a9 \u0644\u0627\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0636\u0627\u0641\u06cc \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u0646\u062f.<\/p>\n<h2>\u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637\u0647<\/h2>\n<p>\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u062a\u0632\u0631\u06cc\u0642 CRLF \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0632\u06cc\u0631 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/CRLF_Injection\" target=\"_new\" rel=\"noopener nofollow\">OWASP CRLF Injection<\/a><\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Securing_your_site\/Http_splitting\" target=\"_new\" rel=\"noopener nofollow\">\u0627\u0633\u0646\u0627\u062f \u0648\u0628 MDN: \u062a\u0642\u0633\u06cc\u0645 \u067e\u0627\u0633\u062e HTTP<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/websitesecurity\/crlf-injection\/\" target=\"_new\" rel=\"noopener nofollow\">\u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628: \u062a\u0632\u0631\u06cc\u0642 CRLF<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/93.html\" target=\"_new\" rel=\"noopener nofollow\">CWE \u2013 CWE-93: \u062e\u0646\u062b\u06cc \u0633\u0627\u0632\u06cc \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u062a\u0648\u0627\u0644\u06cc \u0647\u0627\u06cc CRLF<\/a><\/li>\n<\/ul>","protected":false},"featured_media":476475,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476474","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CRLF Injection<\/mark>","faq_items":[{"question":"What is a CRLF Injection?","answer":"<p>A CRLF Injection is a type of security vulnerability where an attacker infiltrates Carriage Return Line Feed (CRLF) sequences into a web application. This infiltration primarily affects HTTP headers and can lead to various threats such as HTTP Response Splitting and Cross-Site Scripting.<\/p>"},{"question":"When was CRLF Injection first discovered?","answer":"<p>The term 'CRLF Injection' originated from the early days of the internet, as old as the HTTP protocol itself. Its misuse, or \"injection,\" started being recognized as a threat to web application security in the late 1990s and early 2000s.<\/p>"},{"question":"How does a CRLF Injection work?","answer":"<p>A CRLF Injection works by inserting CRLF sequences into an application's expected data stream. By doing this, the attacker can manipulate the system into recognizing these injections as legitimate commands or directives. This can lead to manipulated data flow and potential security vulnerabilities.<\/p>"},{"question":"What are the types of CRLF Injection?","answer":"<p>The two main types of CRLF injections are HTTP Response Splitting, where CRLF sequences are injected into HTTP headers to manipulate the HTTP response, and Log Injection, where the injection is made into log files, potentially forging log entries or inserting malicious content.<\/p>"},{"question":"How can we prevent CRLF Injection attacks?","answer":"<p>CRLF injection attacks can be prevented by implementing input validation and sanitization. This involves limiting the types of characters that can be accepted in user input fields and inspecting HTTP headers for unexpected CRLF sequences.<\/p>"},{"question":"How does CRLF Injection compare with other similar attacks?","answer":"<p>CRLF Injection involves infiltrating CRLF sequences, primarily affecting HTTP headers and user inputs. SQL Injection involves the injection of malicious SQL code, targeting database queries. Cross-Site Scripting involves the injection of malicious scripts into trusted websites, affecting client-side scripts. Command Injection is where an attacker alters dill data inputs to an application to achieve arbitrary command execution, targeting the application's host command shell.<\/p>"},{"question":"How are proxy servers related to CRLF Injection?","answer":"<p>Proxy servers, like OneProxy, can help prevent CRLF Injection attacks. They scrutinize incoming and outgoing data for suspicious patterns, identifying potential injection attempts. Some advanced proxy servers can also sanitize the data before forwarding it to the target server, adding an extra layer of security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki\/476474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki\/476474\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/media\/476475"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/media?parent=476474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}