{"id":476474,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:51","modified_gmt":"2023-09-05T11:12:51","slug":"crlf-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/crlf-injection\/","title":{"rendered":"Crlf \uc8fc\uc785"},"content":{"rendered":"<p>Carriage Return Line Feed \uc8fc\uc785\uc758 \uc57d\uc5b4\uc778 CRLF \uc8fc\uc785\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\uc548\uc5d0 \ub300\ud55c \ucde8\uc57d\uc810\uc758 \ud55c \ud615\ud0dc\uc785\ub2c8\ub2e4. \uc8fc\uc785\uc740 CRLF \uc2dc\ud000\uc2a4\ub97c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774\ub098 \uc6f9 \uc0ac\uc774\ud2b8\uc5d0 \uce68\ud22c\uc2dc\ud0a4\ub294 \ucf54\ub4dc \uc8fc\uc785 \uae30\uc220\uc785\ub2c8\ub2e4. \uc774 \uc8fc\uc785\uc740 \uc8fc\ub85c HTTP \ud5e4\ub354\uc5d0 \uc601\ud5a5\uc744 \ubbf8\uce58\uba70 HTTP \uc751\ub2f5 \ubd84\ud560, XSS(\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305) \ub4f1\uacfc \uac19\uc740 \ub2e4\uc591\ud55c \uc704\ud611\uc73c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>CRLF \uc8fc\uc0ac\uc758 \uc720\ub798\uc640 \uc5ed\uc0ac\uc801 \ubc30\uacbd<\/h2>\n<p>&#039;CRLF \uc8fc\uc785&#039;\uc774\ub77c\ub294 \uc6a9\uc5b4\ub294 HTTP \ud504\ub85c\ud1a0\ucf5c \uc790\uccb4\ub9cc\ud07c \uc624\ub798\ub418\uc5c8\uc73c\uba70 \uc778\ud130\ub137 \ucd08\ucc3d\uae30\ubd80\ud130 \uc720\ub798\ub418\uc5c8\uc2b5\ub2c8\ub2e4. CRLF \uc2dc\ud000\uc2a4(rn\uc73c\ub85c \ud45c\uc2dc\ub428)\ub294 \ub9ce\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \uc5b8\uc5b4\uc5d0\uc11c \uac1c\ud589(\uc904 \ub05d)\uc744 \ub098\ud0c0\ub0b4\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc774\ub294 &#039;\uce90\ub9ac\uc9c0 \ub9ac\ud134&#039;(CR)\uc774 \uc7a5\uce58\uc758 \uc704\uce58\ub97c \uc904\uc758 \uc2dc\uc791 \ubd80\ubd84\uc73c\ub85c \uc7ac\uc124\uc815\ud558\uace0 &#039;\ub77c\uc778 \ud53c\ub4dc&#039;(LF)\uac00 \uc7a5\uce58\ub97c \ud55c \uc904 \uc544\ub798\ub85c \uc774\ub3d9\uc2dc\ud0a4\ub294 \ud0c0\uc790\uae30 \uc2dc\ub300\uc5d0\uc11c \ud30c\uc0dd\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc624\uc6a9 \ub610\ub294 &quot;\uc8fc\uc785&quot;\uc5d0 \ub300\ud55c \uccab \uc5b8\uae09\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \ub354\uc6b1 \ubcf5\uc7a1\ud574\uc9c0\uace0 \ubcf4\uc548\uc5d0 \ub300\ud55c \uc774\ud574\uac00 \ubc1c\uc804\ud558\uae30 \uc2dc\uc791\ud55c 1990\ub144\ub300 \ud6c4\ubc18\uacfc 2000\ub144\ub300 \ucd08\ubc18\uc73c\ub85c \uac70\uc2ac\ub7ec \uc62c\ub77c\uac11\ub2c8\ub2e4.<\/p>\n<h2>CRLF \uc8fc\uc785\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc54c\uc544\ubcf4\uae30<\/h2>\n<p>CRLF \uc8fc\uc785\uc740 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc0f \uc11c\ubc84\uc5d0\uc11c \ub370\uc774\ud130\uac00 \ucc98\ub9ac\ub418\ub294 \ubc29\uc2dd\uc744 \ud65c\uc6a9\ud558\uae30 \uc704\ud574 CRLF \uc2dc\ud000\uc2a4\ub97c \uc870\uc791\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uacf5\uaca9\uc790\ub294 \uc608\uc0c1\uce58 \ubabb\ud55c CRLF \uc2dc\ud000\uc2a4\ub97c \uc8fc\uc785\ud558\uc5ec \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ub370\uc774\ud130 \ud750\ub984\uc744 \uc870\uc791\ud558\uc5ec \ubcf4\uc548 \uce68\ud574\ub97c \uc77c\uc73c\ud0ac \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc77c\ubc18\uc801\uc778 CRLF \uc8fc\uc785 \uacf5\uaca9\uc5d0\ub294 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uc0ac\uc6a9\uc790 \uc785\ub825 \ud544\ub4dc\uc5d0 CRLF \uc2dc\ud000\uc2a4\ub97c \ucd94\uac00\ud558\uc5ec \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc0c8 \uc904\uc774 \uc2dc\uc791\ub418\uc5c8\ub2e4\uace0 \uc0dd\uac01\ud558\ub3c4\ub85d \uc18d\uc774\ub294 \uac83\uc774 \ud3ec\ud568\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc778\ud130\ub137 \ud1b5\uc2e0\uc758 \ud544\uc218 \ubd80\ubd84\uc778 HTTP \ud5e4\ub354\uc5d0\uc11c CRLF \uc8fc\uc785\uc73c\ub85c \uc778\ud574 HTTP \uc751\ub2f5 \ubd84\ud560\uc774 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc989, \uc545\uc758\uc801\uc778 \uacf5\uaca9\uc790\uac00 \uc11c\ubc84\ub97c \uc18d\uc5ec \ubcc0\uacbd\ub41c HTTP \uc751\ub2f5\uc744 \ubcf4\ub0b4\ub3c4\ub85d \ud568\uc73c\ub85c\uc368 \uc7a0\uc7ac\uc801\uc778 \ucde8\uc57d\uc810\uc744 \ucd08\ub798\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>CRLF \uc8fc\uc785\uc758 \ub0b4\ubd80 \uba54\ucee4\ub2c8\uc998<\/h2>\n<p>CRLF \uc8fc\uc785\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uc608\uc0c1 \ub370\uc774\ud130 \uc2a4\ud2b8\ub9bc\uc5d0 CRLF \uc2dc\ud000\uc2a4\ub97c \uc0bd\uc785\ud558\uc5ec \uc791\ub3d9\ud569\ub2c8\ub2e4. \uadf8\ub807\uac8c \ud568\uc73c\ub85c\uc368 \uacf5\uaca9\uc790\ub294 \uc774\ub7ec\ud55c \uc8fc\uc785\uc744 \ud569\ubc95\uc801\uc778 \uba85\ub839\uc774\ub098 \uc9c0\uc2dc\uc5b4\ub85c \uc778\uc2dd\ud558\ub3c4\ub85d \uc2dc\uc2a4\ud15c\uc744 \uc870\uc791\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc608\ub97c \ub4e4\uc5b4, HTTP \uc751\ub2f5 \ubd84\ud560\uc758 \uacbd\uc6b0 \uacf5\uaca9\uc790\ub294 CRLF \uc2dc\ud000\uc2a4\uc640 \ucd94\uac00 HTTP \ud5e4\ub354 \ub610\ub294 \ucf58\ud150\uce20\uac00 \ud3ec\ud568\ub41c \ubb38\uc790\uc5f4\uc744 \uc785\ub825\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub85c \uc778\ud574 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc740 \ud5e4\ub354\uac00 \ub05d\ub0ac\uace0 \uc0c8 \ud5e4\ub354\uac00 \uc2dc\uc791\ub418\uc5c8\ub2e4\uace0 \uc0dd\uac01\ud558\uac8c \ub418\uc5b4 \uacf5\uaca9\uc790\uac00 HTTP \uc751\ub2f5\uc758 \uc751\ub2f5 \ud5e4\ub354\ub97c \uc81c\uc5b4\ud560 \uc218 \uc788\uac8c \ub429\ub2c8\ub2e4.<\/p>\n<h2>CRLF \uc8fc\uc785\uc758 \uc8fc\uc694 \ud2b9\uc9d5<\/h2>\n<p>CRLF \uc8fc\uc785 \uacf5\uaca9\uc758 \uc8fc\uc694 \ud2b9\uc9d5\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p>CRLF \uc2dc\ud000\uc2a4 \uc870\uc791: CRLF \uc8fc\uc785\uc758 \uc8fc\uc694 \uae30\ub2a5\uc740 \uc0ac\uc6a9\uc790 \uc785\ub825 \ud544\ub4dc \ub610\ub294 HTTP \ud5e4\ub354\uc5d0 CRLF \uc2dc\ud000\uc2a4\uac00 \uc608\uae30\uce58 \uc54a\uac8c \ucd94\uac00\ub41c\ub2e4\ub294 \uac83\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p>\ub370\uc774\ud130 \ud750\ub984\uc5d0 \ub300\ud55c \uc601\ud5a5: \uc8fc\uc785\ub41c CRLF \uc2dc\ud000\uc2a4\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ub370\uc774\ud130 \ud750\ub984\uc744 \uc870\uc791\ud558\uc5ec \uc7a0\uc7ac\uc801\uc778 \ucde8\uc57d\uc810\uc744 \ucd08\ub798\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p>\uc601\ud5a5 \ubc94\uc704: \ucde8\uc57d\uc810\uc740 \uc8fc\uc785\uc774 \ubc1c\uc0dd\ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\ubfd0\ub9cc \uc544\ub2c8\ub77c \ub3d9\uc77c\ud55c \ub370\uc774\ud130 \ub2e4\uc6b4\uc2a4\ud2b8\ub9bc\uc744 \ucc98\ub9ac\ud558\ub294 \ub2e4\ub978 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\ub3c4 \uc601\ud5a5\uc744 \ubbf8\uce69\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>CRLF \uc8fc\uc0ac\uc758 \uc885\ub958<\/h2>\n<p>CRLF \uc8fc\uc0ac\uc5d0\ub294 \ub450 \uac00\uc9c0 \uc8fc\uc694 \uc720\ud615\uc774 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>HTTP \uc751\ub2f5 \ubd84\ud560<\/strong>: \uc774\ub294 HTTP \uc751\ub2f5\uc744 \uc870\uc791\ud558\uac70\ub098 \ubd84\ud560\ud558\uae30 \uc704\ud574 CRLF \uc2dc\ud000\uc2a4\uac00 HTTP \ud5e4\ub354\uc5d0 \uc0bd\uc785\ub418\ub294 \uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \uc720\ud615\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ub85c\uadf8 \uc8fc\uc785<\/strong>: \ub85c\uadf8 \ud30c\uc77c\uc5d0 \uc778\uc81d\uc158\uc744 \ud558\ub294 \ubc29\uc2dd\uc774\ub2e4. \uacf5\uaca9\uc790\ub294 \ub85c\uadf8 \ud56d\ubaa9\uc744 \uc704\uc870\ud558\uac70\ub098 \uc545\uc131 \ucf58\ud150\uce20\ub97c \uc0bd\uc785\ud558\uc5ec \uc774\ub97c \uc545\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>CRLF \uc8fc\uc785\uc758 \uc751\uc6a9, \ubb38\uc81c\uc810 \ubc0f \uc194\ub8e8\uc158<\/h2>\n<p>CRLF \uc8fc\uc785\uc740 \uc0ac\uc6a9\uc790 \uc138\uc158 \ud558\uc774\uc7ac\ud0b9, \uc0ac\uc6a9\uc790 \ub370\uc774\ud130 \ub3c4\uc6a9, \uc0ac\uc6a9\uc790\ub97c \uc18d\uc5ec \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud558\ub294 \ub4f1 \ub2e4\uc591\ud55c \ubc29\ubc95\uc73c\ub85c \uc545\uc758\uc801\uc73c\ub85c \uc0ac\uc6a9\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>CRLF \uc8fc\uc785 \uacf5\uaca9\uc744 \ubc29\uc9c0\ud558\ub824\uba74 \uc785\ub825 \uac80\uc99d \ubc0f \uc0ad\uc81c\uac00 \ud544\uc694\ud569\ub2c8\ub2e4. \uc0ac\uc6a9\uc790 \uc785\ub825 \ud544\ub4dc\uc5d0 \ud5c8\uc6a9\ub420 \uc218 \uc788\ub294 \ubb38\uc790 \uc720\ud615\uc744 \uc81c\ud55c\ud558\uace0 HTTP \ud5e4\ub354\uc5d0\uc11c \uc608\uc0c1\uce58 \ubabb\ud55c CRLF \uc2dc\ud000\uc2a4\ub97c \uac80\uc0ac\ud558\uba74 \uc7a0\uc7ac\uc801\uc778 CRLF \uc8fc\uc785\uc744 \ubc29\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uc720\uc0ac \uc6a9\uc5b4\uc640\uc758 \ube44\uad50<\/h2>\n<p>CRLF \uc8fc\uc785\uc740 \uc8fc\ub85c CRLF \uc2dc\ud000\uc2a4 \uce68\ud22c\ub97c \ucc98\ub9ac\ud558\uc9c0\ub9cc \ub2e4\ub978 \uad00\ub828 \uc8fc\uc785 \uacf5\uaca9\uc5d0\ub294 \ub2e4\uc74c\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>SQL \uc8fc\uc785<\/strong>: \uc5ec\uae30\uc5d0\ub294 \uc545\uc131 SQL \ucf54\ub4dc\ub97c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc8fc\uc785\ud558\uc5ec \uc7a0\uc7ac\uc801\uc73c\ub85c \ubb34\ub2e8 \uc561\uc138\uc2a4, \ub370\uc774\ud130 \uc190\uc0c1 \ub610\ub294 \ub370\uc774\ud130 \ub3c4\ub09c\uc744 \ucd08\ub798\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>XSS(\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305)<\/strong>: \uc774 \uc720\ud615\uc758 \uacf5\uaca9\uc740 \uc2e0\ub8b0\ud560 \uc218 \uc788\ub294 \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \uc545\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0bd\uc785\ud55c \ub2e4\uc74c \ud53c\ud574\uc790\uc758 \ube0c\ub77c\uc6b0\uc800\uc5d0\uc11c \uc2e4\ud589\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uba85\ub839 \uc8fc\uc785<\/strong>: \uacf5\uaca9\uc790\uac00 \uc784\uc758\uc758 \uba85\ub839 \uc2e4\ud589\uc744 \ub2ec\uc131\ud558\uae30 \uc704\ud574 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \uc785\ub825\ub418\ub294 \ub51c \ub370\uc774\ud130\ub97c \ubcc0\uacbd\ud558\ub294 \uacf5\uaca9 \ubc29\ubc95\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>CRLF \uc8fc\uc785<\/th>\n<th>SQL \uc8fc\uc785<\/th>\n<th>\uad50\ucc28 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305<\/th>\n<th>\uba85\ub839 \uc8fc\uc785<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\uc8fc\uc694 \ud0c0\uac9f<\/td>\n<td>HTTP \ud5e4\ub354 \ubc0f \uc0ac\uc6a9\uc790 \uc785\ub825<\/td>\n<td>\ub370\uc774\ud130\ubca0\uc774\uc2a4 \ucffc\ub9ac<\/td>\n<td>\uc6f9\uc0ac\uc774\ud2b8\uc758 \ud074\ub77c\uc774\uc5b8\ud2b8\uce21 \uc2a4\ud06c\ub9bd\ud2b8<\/td>\n<td>\uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ud638\uc2a4\ud2b8 \uba85\ub839 \uc178<\/td>\n<\/tr>\n<tr>\n<td>\ubc29\uc9c0<\/td>\n<td>\uc785\ub825 \uac80\uc99d \ubc0f \uc815\ub9ac<\/td>\n<td>\uc900\ube44\ub41c \ubb38 \ub610\ub294 \ub9e4\uac1c\ubcc0\uc218\ud654\ub41c \ucffc\ub9ac \uc0ac\uc6a9<\/td>\n<td>\uc785\ub825 \uac80\uc99d, \ucd9c\ub825 \uc778\ucf54\ub529, HTTP \uc804\uc6a9 \ucfe0\ud0a4<\/td>\n<td>\uc785\ub825 \uac80\uc99d, \uc548\uc804\ud55c API \uc0ac\uc6a9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\ubbf8\ub798 \uc804\ub9dd\uacfc \uae30\uc220<\/h2>\n<p>\uc55e\uc73c\ub85c\ub294 \uc790\ub3d9\ud654\ub41c \ubcf4\uc548 \ub3c4\uad6c\uc640 AI \uae30\ubc18 \ucde8\uc57d\uc131 \ud0d0\uc9c0 \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud55c \uc758\uc874\ub3c4\uac00 \ub192\uc544\uc9d0\uc5d0 \ub530\ub77c CRLF \uc8fc\uc785 \uacf5\uaca9\uc758 \ud0d0\uc9c0 \ubc0f \uc608\ubc29\uc774 \ud5a5\uc0c1\ub420 \uac83\uc785\ub2c8\ub2e4. \ub610\ud55c \ubcf4\uc548 \ucf54\ub529 \uad00\ud589\uacfc \uc8fc\uc785 \uacf5\uaca9\uc5d0 \ub300\ud55c \uad50\uc721\uc774 \uac1c\ubc1c \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c \ub354\uc6b1 \ub110\ub9ac \ubcf4\uae09\ub418\uc5b4 \uc774\ub7ec\ud55c \uc704\ud5d8\uc744 \ub354\uc6b1 \uc644\ud654\ud560 \uac83\uc73c\ub85c \uc608\uc0c1\ub429\ub2c8\ub2e4.<\/p>\n<h2>CRLF \uc8fc\uc785 \ubc0f \ud504\ub85d\uc2dc \uc11c\ubc84<\/h2>\n<p>OneProxy\uc5d0\uc11c \uc81c\uacf5\ud558\ub294 \uac83\uacfc \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 CRLF \uc8fc\uc785 \uacf5\uaca9\uc744 \ubc29\uc9c0\ud558\ub294 \uc5ed\ud560\uc744 \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ud328\ud134\uc774 \uc788\ub294\uc9c0 \ub4e4\uc5b4\uc624\uace0 \ub098\uac00\ub294 \ub370\uc774\ud130\ub97c \uba74\ubc00\ud788 \uc870\uc0ac\ud568\uc73c\ub85c\uc368 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc7a0\uc7ac\uc801\uc778 \uc8fc\uc785 \uc2dc\ub3c4\ub97c \uc2dd\ubcc4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uace0\uae09 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \ub370\uc774\ud130\ub97c \ub300\uc0c1 \uc11c\ubc84\ub85c \uc804\ub2ec\ud558\uae30 \uc804\uc5d0 \ub370\uc774\ud130\ub97c \uc0ad\uc81c\ud558\uc5ec \ucd94\uac00 \ubcf4\uc548 \uacc4\uce35\uc744 \ucd94\uac00\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<p>CRLF \uc8fc\uc785\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \ub9ac\uc18c\uc2a4\ub97c \ucc38\uc870\ud558\uc138\uc694.<\/p>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/CRLF_Injection\" target=\"_new\" rel=\"noopener nofollow\">OWASP CRLF \uc8fc\uc785<\/a><\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Securing_your_site\/Http_splitting\" target=\"_new\" rel=\"noopener nofollow\">MDN \uc6f9 \ubb38\uc11c: HTTP \uc751\ub2f5 \ubd84\ud560<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/websitesecurity\/crlf-injection\/\" target=\"_new\" rel=\"noopener nofollow\">\uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\uc548 \uac00\uc774\ub4dc: CRLF \uc8fc\uc785<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/93.html\" target=\"_new\" rel=\"noopener nofollow\">CWE \u2013 CWE-93: CRLF \uc2dc\ud000\uc2a4\uc758 \ubd80\uc801\uc808\ud55c \uc911\ud654<\/a><\/li>\n<\/ul>","protected":false},"featured_media":476475,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476474","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CRLF Injection<\/mark>","faq_items":[{"question":"What is a CRLF Injection?","answer":"<p>A CRLF Injection is a type of security vulnerability where an attacker infiltrates Carriage Return Line Feed (CRLF) sequences into a web application. This infiltration primarily affects HTTP headers and can lead to various threats such as HTTP Response Splitting and Cross-Site Scripting.<\/p>"},{"question":"When was CRLF Injection first discovered?","answer":"<p>The term 'CRLF Injection' originated from the early days of the internet, as old as the HTTP protocol itself. Its misuse, or \"injection,\" started being recognized as a threat to web application security in the late 1990s and early 2000s.<\/p>"},{"question":"How does a CRLF Injection work?","answer":"<p>A CRLF Injection works by inserting CRLF sequences into an application's expected data stream. By doing this, the attacker can manipulate the system into recognizing these injections as legitimate commands or directives. This can lead to manipulated data flow and potential security vulnerabilities.<\/p>"},{"question":"What are the types of CRLF Injection?","answer":"<p>The two main types of CRLF injections are HTTP Response Splitting, where CRLF sequences are injected into HTTP headers to manipulate the HTTP response, and Log Injection, where the injection is made into log files, potentially forging log entries or inserting malicious content.<\/p>"},{"question":"How can we prevent CRLF Injection attacks?","answer":"<p>CRLF injection attacks can be prevented by implementing input validation and sanitization. This involves limiting the types of characters that can be accepted in user input fields and inspecting HTTP headers for unexpected CRLF sequences.<\/p>"},{"question":"How does CRLF Injection compare with other similar attacks?","answer":"<p>CRLF Injection involves infiltrating CRLF sequences, primarily affecting HTTP headers and user inputs. SQL Injection involves the injection of malicious SQL code, targeting database queries. Cross-Site Scripting involves the injection of malicious scripts into trusted websites, affecting client-side scripts. Command Injection is where an attacker alters dill data inputs to an application to achieve arbitrary command execution, targeting the application's host command shell.<\/p>"},{"question":"How are proxy servers related to CRLF Injection?","answer":"<p>Proxy servers, like OneProxy, can help prevent CRLF Injection attacks. They scrutinize incoming and outgoing data for suspicious patterns, identifying potential injection attempts. Some advanced proxy servers can also sanitize the data before forwarding it to the target server, adding an extra layer of security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476474\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/476475"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=476474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}