{"id":4089,"date":"2021-09-30T13:14:56","date_gmt":"2021-09-30T13:14:56","guid":{"rendered":"https:\/\/www.irandnn.ir\/mag\/?p=4089"},"modified":"2022-09-21T15:16:35","modified_gmt":"2022-09-21T15:16:35","slug":"open-redirect-vulnerability","status":"publish","type":"post","link":"https:\/\/www.irandnn.ir\/mag\/open-redirect-vulnerability\/","title":{"rendered":"\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u0686\u06cc\u0633\u062a\u061f"},"content":{"rendered":"<span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647:<\/span> <span class=\"rt-time\"> 8<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span><p>Redirect \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0628\u062f\u06cc\u0644 \u0634\u0648\u062f\u061f \u0628\u0647 \u0648\u0627\u0633\u0637\u0647 \u0648\u062c\u0648\u062f Open Redirect \u0686\u0647 \u0627\u062a\u0641\u0627\u0642\u0627\u062a\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u062e \u0628\u062f\u0647\u062f\u061f \u0628\u0627 \u0645\u0627 \u0647\u0645\u0631\u0627\u0647 \u0628\u0627\u0634\u06cc\u062f \u062a\u0627 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u0622\u0634\u0646\u0627 \u0634\u0648\u06cc\u0645.<\/p>\n<h2><strong>\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06cc\u0627 \u0628\u0627\u06af Open Redirect \u0686\u06cc\u0633\u062a\u061f<\/strong><\/h2>\n<p>\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u0634\u0627\u06cc\u062f \u0628\u0639\u0636\u0627\u064b\u060c \u0627\u0632 \u0646\u0638\u0631 \u0635\u0627\u062d\u0628\u0627\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u062a\u0647\u062f\u06cc\u062f \u0628\u0632\u0631\u06af\u06cc \u0628\u0647 \u0634\u0645\u0627\u0631 \u0646\u0631\u0648\u062f\u060c \u0627\u0645\u0627 \u0648\u062c\u0648\u062f \u0622\u0646 \u0645\u06cc\u062a\u0648\u0627\u0646\u062f \u0645\u0648\u062c\u0628 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062a\u062e\u0631\u06cc\u0628\u060c \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u062f\u06cc\u06af\u0631 \u0628\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0646\u0648\u0634\u062a\u0627\u0631\u060c \u0628\u0647 \u0634\u0631\u062d \u06a9\u0627\u0645\u0644 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect\u060c \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u062d\u0645\u0644\u0647\u060c \u062a\u0634\u062e\u06cc\u0635 \u0648 \u0627\u0645\u0646 \u0633\u0627\u0632\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631\u0627\u06cc \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.<\/p>\n<p>\u0627\u0645\u0627 \u067e\u06cc\u0634 \u0627\u0632 \u067e\u0631\u062f\u0627\u062e\u062a\u0646 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062a\u0627 \u0628\u0627 \u0639\u0645\u0644 Redirection \u00a0\u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631\u060c \u0622\u0634\u0646\u0627 \u0628\u0627\u0634\u06cc\u0645. \u067e\u0633 \u0645\u062e\u062a\u0635\u0631\u0627 \u0628\u0647 \u0634\u0631\u062d \u0639\u0645\u0644\u06a9\u0631\u062f \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631 \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u06cc\u200c\u067e\u0631\u062f\u0627\u0632\u06cc\u0645.<\/p>\n<h3><strong>\u0639\u0645\u0644\u06a9\u0631\u062f <\/strong><strong>Redirection<\/strong><\/h3>\n<p>\u0627\u06cc\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f \u0632\u0645\u0627\u0646\u06cc \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u200c\u0633\u0627\u06cc\u062a\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631 \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc \u06a9\u0646\u062f. \u0628\u0647 \u0627\u06cc\u0646 \u0639\u0645\u0644\u060c\u00a0 <strong>Redirection<\/strong> \u06af\u0641\u062a\u0647 \u0648 \u0645\u0639\u0646\u06cc \u0641\u0627\u0631\u0633\u06cc \u0622\u0646 \u0628\u0647 \u0635\u0648\u0631\u062a &#8220;\u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631&#8221; \u062a\u0644\u0641\u0638 \u0645\u06cc \u0634\u0648\u062f\u061b \u0627\u0645\u0627 \u062f\u0631 \u06af\u0641\u062a\u0627\u0631 \u0639\u0627\u0645\u06cc\u0627\u0646\u0647 \u060c \u0628\u06cc\u0634\u062a\u0631 \u0628\u0627 \u0647\u0645\u0627\u0646 \u0648\u0627\u0698\u0647 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u0628\u0647 \u0627\u06cc\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<p>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f\u060c \u062f\u0644\u0627\u06cc\u0644 \u0645\u062e\u062a\u0644\u0641\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f. \u0645\u062b\u0644\u0627:<\/p>\n<ul>\n<li>\u06cc\u06a9 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0641\u0631\u0648\u0634\u06af\u0627\u0647\u06cc\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u062f \u0631\u0627 \u0628\u0631\u0627\u06cc \u067e\u0631\u062f\u0627\u062e\u062a \u0648\u062c\u0647 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u060c \u0628\u0647 \u06cc\u06a9 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0628\u0627\u0646\u06a9\u06cc \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/li>\n<li>\u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u062e\u0634 \u0645\u0646\u0627\u0628\u0639 \u062f\u0631 \u0627\u0646\u062a\u0647\u0627\u06cc \u06cc\u06a9 \u0645\u0637\u0644\u0628\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0633\u0627\u06cc\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0645\u0646\u0628\u0639 \u0647\u0645\u0627\u0646 \u0645\u0637\u0644\u0628\u060c \u0627\u0631\u062c\u0627\u0639 \u0645\u06cc \u062f\u0647\u062f.<\/li>\n<li>\u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0634\u0628\u06a9\u0647 \u0627\u062c\u062a\u0645\u0627\u0639\u06cc\u060c \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u062f\u0631 \u0645\u0637\u0627\u0644\u0628\u06cc \u06a9\u0647 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631 \u067e\u06cc\u0648\u0646\u062f \u062f\u0647\u0646\u062f.<\/li>\n<\/ul>\n<h4><strong>\u0627\u06cc\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f\u060c \u0686\u06af\u0648\u0646\u0647 \u0631\u062e \u0645\u06cc \u062f\u0647\u062f\u061f<\/strong><\/h4>\n<p>\u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f \u062f\u0631 \u06cc\u06a9 \u0642\u0633\u0645\u062a \u0627\u0632 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a example.com\u060c \u062f\u06a9\u0645\u0647 \u0627\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0634\u0645\u0627 \u0631\u0627 \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a example2.com \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u067e\u0633 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0648\u06cc \u062f\u06a9\u0645\u0647 \u06a9\u0644\u06cc\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 URL \u0632\u06cc\u0631 \u0628\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u0648\u0645 \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc \u0634\u0648\u062f:<\/p>\n<pre>https:\/\/example.com\/index.php?redirect_to=https:\/\/example2.com<\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0627 \u0645\u062a\u062f GET \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a example.com \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 redirect_to \u062f\u0631 \u0622\u0646\u060c \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0645\u0642\u0635\u062f \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0647 \u0633\u0645\u062a \u0686\u0647 \u0633\u0627\u0645\u0627\u0646\u0647 \u0627\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.<\/p>\n<p>\u0628\u0639\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u06cc\u06a9 \u067e\u0627\u0633\u062e (Response) \u0627\u0632 \u0633\u0631\u0648\u0631 example.com \u0628\u0631\u0627\u06cc \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631 \u0645\u06cc\u200c\u06af\u0631\u062f\u062f \u06a9\u0647 \u06a9\u062f \u0648\u0636\u0639\u06cc\u062a (status code) \u0622\u0646\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u06a9\u062f \u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u0645\u06cc \u0628\u0627\u0634\u062f. \u067e\u0627\u0633\u062e \u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646\u060c \u0628\u0627 \u06a9\u062f \u0647\u0627\u06cc \u0648\u0636\u0639\u06cc\u062a\u06cc 301\u060c 302\u060c 303\u060c 307 \u06cc\u0627 308 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n<p>\u062f\u0631 \u0645\u0631\u062d\u0644\u0647 \u0622\u062e\u0631\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0627 \u0647\u062f\u0631 Location \u062f\u0631 \u067e\u0627\u0633\u062e \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647\u060c \u06a9\u0647 \u0645\u0642\u062f\u0627\u0631 \u0622\u0646 \u0628\u0631\u0627\u0628\u0631 \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 redirect_to \u0645\u06cc \u0628\u0627\u0634\u062f\u060c \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0645\u0630\u06a9\u0648\u0631 \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-4124 \" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-1-1-300x192.jpg\" alt=\"\" width=\"835\" height=\"534\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-1-1-300x192.jpg 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-1-1-768x491.jpg 768w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-1-1.jpg 898w\" sizes=\"(max-width: 835px) 100vw, 835px\" \/><\/p>\n<h3><strong>\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <\/strong><strong>Open Redirect<\/strong><\/h3>\n<p><strong>\u00a0\u00a0\u00a0 <\/strong>\u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631\u060c \u0628\u0647 \u062e\u0648\u062f\u06cc \u062e\u0648\u062f \u06cc\u06a9 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0631\u0627\u06cc \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0647\u0627\u060c \u062d\u0633\u0627\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u0645\u0627 \u0632\u0645\u0627\u0646\u06cc \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u06a9\u0646\u062a\u0631\u0644 \u0646\u0634\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u062f\u0686\u0627\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u06cc\u0627 <strong>\u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0622\u0632\u0627\u062f<\/strong> \u0645\u06cc\u200c\u0634\u0648\u062f. \u0645\u062b\u0644\u0627 \u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f\u060c \u0648\u0628\u200c\u0633\u0627\u06cc\u062a example.com \u060c \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 redirect_to\u060c \u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f:<\/p>\n<pre>https:\/\/example.com\/index.php?redirect_to=<strong>https:\/\/example2.com<\/strong><\/pre>\n<p>\u062d\u0627\u0644 \u0686\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0645\u06cc\u200c\u0627\u0641\u062a\u062f \u0627\u06af\u0631 \u0646\u0641\u0648\u0630\u06af\u0631\u060c url \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0645\u0627\u0646\u0646\u062f url \u0632\u06cc\u0631 \u062a\u063a\u06cc\u06cc\u0631 \u0628\u062f\u0647\u062f:<\/p>\n<pre>https:\/\/example.com\/index.php?redirect_to=<strong>https:\/\/attacker.com<\/strong><\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0686\u0646\u0627\u0646\u0686\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a example.com\u060c \u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u062f\u0631\u0633\u062a\u06cc \u0631\u0648\u06cc \u067e\u0627\u0631\u0627\u0645\u062a\u0631 redirect_to \u0627\u0646\u062c\u0627\u0645 \u0646\u062f\u0627\u062f\u0647 \u0628\u0627\u0634\u062f \u06cc\u0627 \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u062f\u0631\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u062a\u0639\u06cc\u06cc\u0646 \u0646\u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u062f\u060c \u06a9\u0627\u0631\u0628\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u06cc\u0646 \u0644\u06cc\u0646\u06a9 \u0648\u0627\u0631\u062f \u0633\u0627\u06cc\u062a \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06cc\u06a9 \u0642\u062f\u0645 \u0627\u0632 \u0633\u0646\u0627\u0631\u06cc\u0648 \u062d\u0645\u0644\u0627\u062a \u062f\u06cc\u06af\u0631 \u0628\u0627\u0634\u062f.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-4125 \" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-2-1-300x191.jpg\" alt=\"\" width=\"820\" height=\"522\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-2-1-300x191.jpg 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-2-1-768x490.jpg 768w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/mesal-2-1.jpg 1000w\" sizes=\"(max-width: 820px) 100vw, 820px\" \/><\/p>\n<p>\u0634\u0627\u06cc\u062f \u0627\u06cc\u0646 \u0633\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc\u200c\u062a\u0627\u0646 \u067e\u06cc\u0634 \u0628\u06cc\u0627\u06cc\u062f \u06a9\u0647\u060c \u0686\u06af\u0648\u0646\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0645\u062a\u0648\u062c\u0647 \u0627\u0646\u062a\u0647\u0627\u06cc \u0644\u06cc\u0646\u06a9 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u061f<\/p>\n<p>\u06cc\u06a9\u06cc \u0627\u0632 \u062f\u0644\u0627\u06cc\u0644 \u0622\u0646 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0642\u0631\u0628\u0627\u0646\u06cc \u0631\u0627 \u0628\u0627 \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u0627\u062a\u06cc \u0645\u0627\u0646\u0646\u062f \u062e\u0648\u0627\u0646\u062f\u0646 \u06cc\u06a9 \u0645\u0637\u0644\u0628 \u0641\u0648\u0631\u06cc \u0648 \u062c\u0630\u0627\u0628\u060c \u0628\u0631\u0646\u062f\u0647 \u0634\u062f\u0646 \u06cc\u06a9 \u062c\u0627\u06cc\u0632\u0647\u200c\u06cc \u0628\u0632\u0631\u06af \u0648 \u062d\u0642\u0647 \u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0622\u0646\u060c \u0647\u06cc\u062c\u0627\u0646 \u0632\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0627\u0648 \u0631\u0627 \u062f\u0631 \u0627\u0636\u0637\u0631\u0627\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n<p>\u062f\u0644\u06cc\u0644 \u0628\u0639\u062f\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0686\u0646\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637\u06cc\u060c \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u062f\u0642\u062a \u0642\u0631\u0628\u0627\u0646\u06cc\u060c \u0628\u0647 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 \u062f\u0631 \u0644\u06cc\u0646\u06a9 \u0645\u062f\u0646\u0638\u0631 \u0627\u0633\u062a. \u0648\u0644\u06cc \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0633\u0627\u0628 \u0627\u06cc\u0646 \u06af\u0648\u0646\u0647 \u0644\u06cc\u0646\u06a9\u200c\u0647\u0627\u060c \u0628\u0647 \u0635\u0648\u0631\u062a \u0633\u0627\u062f\u0647 \u0641\u0631\u0633\u062a\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0646\u0641\u0648\u0630\u06af\u0631 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u062a\u0648\u062c\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0631\u0627 \u0633\u0645\u062a \u062f\u0627\u0645\u0646\u0647\u200c\u06cc \u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062c\u0644\u0628 \u06a9\u0646\u062f \u062a\u0627 \u0648\u06cc \u0646\u062a\u0648\u0627\u0646\u062f \u0644\u06cc\u0646\u06a9 \u0633\u0627\u06cc\u062a \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0628\u06cc\u0646\u062f\u060c \u0622\u062f\u0631\u0633 \u0633\u0627\u06cc\u062a \u0645\u062e\u0631\u0628 \u0631\u0627 Url encode \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n<pre>https:\/\/example.com\/%69%6e%64%65%78%2e%70%68%70%3f%72%65%64%69%72%65%63%74%5f%74%6f%3d%68%74%74%70%73%3a%2f%2f%61%74%74%61%63%6b%65%72%2e%63%6f%6d<\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u0628\u0647 \u062c\u0632 \u062f\u0627\u0645\u0646\u0647 \u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0686\u06cc\u0632 \u062f\u06cc\u06af\u0631\u06cc \u0631\u0627 \u0645\u062a\u0648\u062c\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<h4><strong>\u0645\u062b\u0627\u0644 \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 <\/strong><strong>Open Redirect<\/strong><\/h4>\n<p>\u06cc\u06a9 \u0645\u062b\u0627\u0644 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647 semrush \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u062f\u0631 1 \u0641\u0648\u0631\u06cc\u0647 2018 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0628\u0627\u06af \u0628\u0627\u0646\u062a\u06cc hacker one\u060c \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u062a\u0633\u062a \u0646\u0641\u0648\u0630\u060c \u06af\u0632\u0627\u0631\u0634 \u0634\u062f. \u0627\u06cc\u0646 \u0633\u0627\u0645\u0627\u0646\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 \u0647\u0627\u06cc \u0645\u0639\u0631\u0648\u0641 \u0648 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0645\u0628\u062d\u062b \u0633\u0626\u0648(SEO) \u06cc\u0627 \u0628\u0647\u06cc\u0646\u0647 \u0633\u0627\u0632\u06cc \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0628\u0631\u0627\u06cc \u0645\u0648\u062a\u0648\u0631 \u062c\u0633\u062a\u062c\u0648 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n<p><img decoding=\"async\" class=\"wp-image-4096 alignright\" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review-300x115.png\" alt=\"\" width=\"326\" height=\"124\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review-300x115.png 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review-1024x394.png 1024w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review-768x295.png 768w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review-1536x591.png 1536w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/semrush_review.png 1560w\" sizes=\"(max-width: 326px) 100vw, 326px\" \/><\/p>\n<p>\u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 \u062f\u0647\u0646\u062f\u0647\u060c \u0627\u0632 \u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 poc (\u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645) \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0648\u062f:<\/p>\n<pre>https:\/\/www.semrush.com\/redirect?url=http:\/\/bing.com<\/pre>\n<p>\u06a9\u0647 \u0628\u0627 \u0627\u06cc\u0646 \u0644\u06cc\u0646\u06a9\u060c \u0641\u0631\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0644\u06cc\u0646\u06a9 \u0633\u0627\u06cc\u062a semrush \u0648\u0627\u0631\u062f \u0633\u0627\u06cc\u062a bing\u0645\u06cc\u200c\u0634\u062f.<\/p>\n<p>\u0628\u0639\u062f \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 semrush \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u060c \u06cc\u06a9 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u062f\u06cc\u06af\u0631\u060c \u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 poc\u060c \u0645\u0628\u0646\u06cc \u0628\u0631 \u0628\u0627\u06cc\u067e\u0633 \u0634\u062f\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u0627\u0631\u0627\u0626\u0647 \u0646\u0645\u0648\u062f:<\/p>\n<pre style=\"text-align: left;\">https:\/\/www.semrush.com\/redirect?url=https%3A%2F%2Fwww.google.com%2F\r\nhttps:\/\/www.semrush.com\/redirect?url=https:\/\/www%2Egoogle%2Ecom\r\nhttps:\/\/www.semrush.com\/redirect?url=https:\/\/www%252Egoogle%252Ecom\r\nhttps:\/\/www.semrush.com\/redirect?url=http:\/\/%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D<\/pre>\n<p>\u062f\u0631 \u0648\u0627\u0642\u0639\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0644\u06cc\u0646\u06a9 \u0645\u062f \u0646\u0638\u0631 \u0628\u0647 \u062d\u0627\u0644\u062a Url Encode \u0634\u062f\u0647 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u062a\u0648\u0633\u0637 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u060c \u0645\u0648\u0631\u062f \u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u06af\u0631\u0641\u062a \u0648 \u062a\u0627\u06cc\u06cc\u062f \u0645\u06cc\u200c\u0634\u062f.<\/p>\n<h3><strong>\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <\/strong><strong>Open Redirection(DOM based)<\/strong><\/h3>\n<p>\u062d\u0627\u0644\u062a \u062f\u06cc\u06af\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0632\u0645\u0627\u0646\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc\u200c\u0627\u0641\u062a\u062f \u06a9\u0647\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0648\u0633\u06cc\u0644\u0647\u200c\u200c\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a DOM \u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f. DOM \u06cc\u06a9 API \u0645\u062e\u0635\u0648\u0635 \u0645\u062d\u062a\u0648\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u0628\u0647 \u0633\u0627\u0632\u0646\u062f\u06af\u0627\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0628\u0647 \u0648\u0627\u0633\u0637\u0647\u200c\u06cc \u0622\u0646\u060c \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0627\u0634\u06cc\u0627\u0621 \u06cc\u0627 \u0635\u0641\u062a\u200c\u0647\u0627\u06cc(Attributes) \u0622\u0646 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f.<\/p>\n<p>\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0627\u0632 \u06a9\u062f \u0632\u06cc\u0631 \u0628\u0631\u0627\u06cc \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u06a9\u0631\u062f\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n<pre>&lt;a href='<a href=\"https:\/\/aca31fba1fb8cd75808a3050001300a7.web-security-academy.net\/post?postId=3\" target=\"_blank\" rel=\"noopener\">#<\/a>' onclick='returnUrl = \/url=(https?:\\\/\\\/.+)\/.exec(location); if(returnUrl)location.href = returnUrl[1];else location.href = \"\/\"'&gt;Back to Blog&lt;\/a&gt;<\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u062a\u0648\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0645\u0642\u0635\u062f \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646\u060c \u0628\u0647 \u0648\u0633\u06cc\u0644\u0647 \u06cc \u067e\u0627\u0631\u0627\u0645\u062a\u0631 url \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u200c\u0634\u0648\u062f. \u067e\u0633 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u0627\u0632 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u062f\u060c \u0622\u062f\u0631\u0633 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0647 \u0648\u062c\u0648\u062f \u0645\u06cc\u200c\u0622\u0648\u0631\u062f:<\/p>\n<pre>https:\/\/vulnerable.com\/posts?postid=3&amp;url=https:\/\/attacker.com<\/pre>\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0634\u062f\u0646 \u0645\u0631\u0648\u0631\u06af\u0631 \u0646\u0641\u0648\u0630\u06af\u0631\u060c \u0648\u06cc \u0645\u062a\u0648\u062c\u0647 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af \u062f\u0631 \u0633\u0627\u06cc\u062a \u0645\u06cc\u200c\u0634\u0648\u062f. \u067e\u0633 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0645\u062e\u062a\u0644\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<h4><strong>\u0645\u062b\u0627\u0644 \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 <\/strong><strong>Open Redirect (DOM Based)<\/strong><\/h4>\n<p><strong> <img decoding=\"async\" class=\"wp-image-4122 size-medium alignright\" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/nordvpn-2-300x218.jpg\" alt=\"\" width=\"300\" height=\"218\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/nordvpn-2-300x218.jpg 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/nordvpn-2.jpg 646w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/strong><\/p>\n<p>\u0645\u062b\u0627\u0644\u06cc \u0627\u0632 \u062d\u0627\u0644\u062a Dom Based \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc NordVPN \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u062f\u0631 7 \u062f\u0633\u0627\u0645\u0628\u0631 2019\u060c \u062f\u0631 Hacker One \u06af\u0632\u0627\u0631\u0634 \u0634\u062f. \u06a9\u0627\u0631\u0634\u0646\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 \u062f\u0647\u0646\u062f\u0647\u200c\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u062b\u0628\u0627\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0631\u0627\u0626\u0647 \u0646\u0645\u0648\u062f:<\/p>\n<pre>https:\/\/support.nordvpn.com\/#\/path\/\/\/google.com<\/pre>\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646\u060c \u0648\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u06a9\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0634\u062e\u0635 \u06a9\u0631\u062f:<\/p>\n<pre>&lt;script&gt;\r\nif (window.location.href.indexOf('#\/path') !== -1)\r\n{ console.log(\"document.URL\", document.URL) window.location.href = document.URL.slice(window.location.href.indexOf('#\/path') + 6); }\r\n&lt;\/script&gt;<\/pre>\n<h3><strong>\u062a\u0631\u06a9\u06cc\u0628 <\/strong><strong>Open Redirect<\/strong><strong> \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u062f\u06cc\u06af\u0631<\/strong><\/h3>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0642\u0633\u0645\u062a\u060c \u0628\u0647 \u0631\u0648\u0634 \u0647\u0627\u06cc\u06cc \u0645\u06cc\u200c\u067e\u0631\u062f\u0627\u0632\u06cc\u0645 \u06a9\u0647 \u0686\u06af\u0648\u0646\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631 \u0628\u0647 \u0648\u062c\u0648\u062f \u0628\u06cc\u0627\u06cc\u062f \u06cc\u0627 \u0627\u06cc\u0646 \u06a9\u0647 \u062e\u0648\u062f \u0639\u0627\u0645\u0644 \u0628\u0647 \u0648\u062c\u0648\u062f \u0622\u0645\u062f\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631 \u0628\u0627\u0634\u062f:<\/p>\n<h4><strong>Open Redirect<\/strong><strong> \u0627\u0632 \u0637\u0631\u06cc\u0642 <\/strong><strong>XSS<\/strong><\/h4>\n<p>\u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u062a\u0648\u062c\u0647 \u0648\u062c\u0648\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <a href=\"https:\/\/www.irandnn.ir\/mag\/what-is-a-cross-site-scripting-or-xss-attacks\/\">XSS<\/a> \u0627\u0632 \u0646\u0648\u0639 stored \u062f\u0631 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0645\u06cc\u200c\u0634\u0648\u062f. \u062d\u0627\u0644 \u0627\u0648 \u0645\u06cc\u200c\u062f\u0627\u0646\u062f \u06a9\u0647 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u0645\u062a\u0641\u0627\u0648\u062a\u06cc \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u062f\u0627\u0631\u062f. \u0627\u0648 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0631\u0627 \u0648\u0627\u0631\u062f \u0633\u0627\u06cc\u062a \u0645\u062e\u0631\u0628 \u062e\u0648\u062f \u06a9\u0646\u062f\u060c \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0627\u06cc \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u06a9\u0631\u062f\u0646 \u0627\u0648 \u0628\u0647 \u0633\u0627\u06cc\u062a \u062e\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u0648 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631\u060c \u06a9\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062a\u0632\u0631\u06cc\u0642 \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n<pre>&lt;img src=x onmouseover=window.location=\u201d<a href=\"http:\/\/malicious.site\" target=\"_blank\" rel=\"noopener\">http:\/\/malicious.site<\/a>\u201d width=\u201d2000\u201d height=\u201d2000\u201d &gt;<\/pre>\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u062c\u0631\u0627 \u0634\u062f\u0646 \u06a9\u062f \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u062f\u0631 \u06cc\u06a9 \u0635\u0641\u062d\u0647\u060c \u06cc\u06a9 \u062a\u0635\u0648\u06cc\u0631 \u0628\u0632\u0631\u06af \u0635\u0641\u062d\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc\u062f\u0647\u062f \u06a9\u0647 \u062f\u0631 \u0645\u0631\u062d\u0644\u0647 \u0628\u0639\u062f\u060c \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646\u06a9\u0647 \u0646\u0634\u0627\u0646\u06af\u0631 \u0645\u0627\u0648\u0633 \u06a9\u0627\u0631\u0628\u0631\u060c \u0628\u0631 \u0631\u0648\u06cc \u062a\u0635\u0648\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f\u060c \u0635\u0641\u062a onmouseover\u060c \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u062f \u0641\u0639\u0627\u0644 \u0648 \u0628\u0627 \u062f\u0633\u062a\u0648\u0631 window.location \u060c \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0648\u0627\u0631\u062f \u0633\u0627\u06cc\u062a \u0645\u062e\u0631\u0628 \u0645\u06cc\u200c\u0646\u0645\u0627\u06cc\u062f.<\/p>\n<h4><strong>Open Redirect<\/strong><strong> \u0627\u0632 \u0637\u0631\u06cc\u0642 <\/strong><strong>Host header injection<\/strong><\/h4>\n<p>\u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0632\u0645\u0627\u0646\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc\u200c\u0627\u0641\u062a\u062f \u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u200c\u0648\u0628 \u0645\u062f\u0646\u0638\u0631\u060c \u062f\u0686\u0627\u0631 \u062d\u0627\u0644\u062a\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06ccHost Header Injection \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u0648 \u0632\u0645\u0627\u0646\u06cc\u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631\u060c \u0647\u062f\u0631 Host \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u062f\u0627\u0645\u0646\u0647 \u06cc \u062f\u06cc\u06af\u0631 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u067e\u0627\u0633\u062e \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0631\u0627 \u0628\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0627\u0632\u0645\u06cc\u06af\u0631\u062f\u0627\u0646\u062f \u0648 \u0645\u0631\u0648\u0631\u06af\u0631 \u0648\u0627\u0631\u062f \u062f\u0627\u0645\u0646\u0647\u200c\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<h4><strong>SSRF<\/strong><strong> \u0628\u0647 \u06a9\u0645\u06a9 <\/strong><strong>Open Redirect<\/strong><\/h4>\n<p>\u0646\u0641\u0648\u0630\u06af\u0631 \u0642\u0635\u062f \u0627\u0646\u062c\u0627\u0645 \u06cc\u06a9 \u062d\u0645\u0644\u0647\u200c\u06cc SSRF \u060c \u0628\u0631 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u062f. \u0627\u0648 \u067e\u0633 \u0627\u0632 \u0686\u0646\u062f \u0628\u0627\u0631 \u0622\u0632\u0645\u0648\u0646 \u0648 \u062e\u0637\u0627 \u0645\u062a\u0648\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0627 \u062a\u062f\u0627\u0628\u06cc\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc \u0627\u0648 \u0631\u0627 \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0648 \u0641\u06cc\u0644\u062a\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u0648 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0633\u0627\u06cc\u062a\u060c \u0645\u062a\u0648\u062c\u0647 \u0648\u062c\u0648\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect\u060c \u062f\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062a\u063a\u06cc\u06cc\u0631 \u0635\u0641\u062d\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f:<\/p>\n<pre>\/news\/nextpage?path=\/news\/page_id=3<\/pre>\n<p>\u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0645\u0642\u062f\u0627\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 path \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u060c \u067e\u0627\u0633\u062e \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0622\u0645\u062f\u0647 \u0648 \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0647 \u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631\u06cc \u0648\u0627\u0631\u062f \u0645\u06cc\u200c\u0634\u062f. \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0645\u0642\u0627\u062f\u06cc\u0631 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u060c \u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0635\u0641\u062d\u0647\u200c\u06cc \u0627\u062f\u0645\u06cc\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0646\u0645\u0627\u06cc\u062f.<\/p>\n<pre>\/news\/nextpage?path=\/http:\/\/192.168.0. 6:8080\/admin<\/pre>\n<p>\u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u0628\u0639\u062f \u0627\u0632 \u0641\u0631\u0633\u062a\u0627\u062f\u0647 \u0634\u062f\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u060c \u0635\u0641\u062d\u0647\u200c\u06cc \u0627\u062f\u0645\u06cc\u0646 \u0628\u0631 \u0631\u0648\u06cc \u0645\u0631\u0648\u0631\u06af\u0631 \u0646\u0641\u0648\u0630\u06af\u0631\u060c \u0638\u0627\u0647\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<h3><strong>\u0646\u062d\u0648\u0647 \u062a\u0634\u062e\u06cc\u0635 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <\/strong><strong>Open Redirect<\/strong><\/h3>\n<p>\u0627\u0628\u0632\u0627\u0631 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0639\u0645\u0644 \u067e\u0631\u0648\u06a9\u0633\u06cc \u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627(Requests) \u0648 \u067e\u0627\u0633\u062e\u200c\u0647\u0627 (Responses) \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f\u060c \u0628\u0631\u0627\u06cc \u0622\u0646\u0627\u0644\u06cc\u0632 \u0648 \u06a9\u0634\u0641 \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0628\u0647 \u0645\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0645\u0627\u0646\u0646\u062f:<\/p>\n<ul>\n<li><strong>Burp Suite<\/strong><\/li>\n<li><strong>Fiddler<\/strong><\/li>\n<li><strong>Post Man<\/strong><\/li>\n<li><strong>\u0648 \u0627\u0628\u0632\u0627\u0631 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631<\/strong><\/li>\n<\/ul>\n<p>\u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u06a9\u0647 \u067e\u0633 \u0627\u0632 \u067e\u0631\u0648\u06a9\u0633\u06cc \u06cc\u0627 \u062a\u0648\u0646\u0644 \u0634\u062f\u0646 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0645\u0631\u0648\u0631\u06af\u0631 \u0648 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u062a\u0648\u0633\u0637 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u0648\u062c\u0628 \u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0634\u062f\u0647 \u0627\u0646\u062f \u0648 \u067e\u0627\u0633\u062e \u0647\u0627\u06cc \u0622\u0646\u0647\u0627\u060c \u06a9\u062f \u0648\u0636\u0639\u06cc\u062a\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u06cc\u0639\u0646\u06cc 301\u060c302\u060c307\u0648&#8230; \u062f\u0627\u0631\u0646\u062f \u0631\u0627 \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u06cc\u0645.<\/p>\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0645\u0642\u062f\u0627\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646\u060c \u062f\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0628\u0627 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631 \u062a\u063a\u06cc\u06cc\u0631 \u0628\u062f\u0647\u06cc\u0645 \u0648 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0646 \u0622\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u0645\u0627 \u0628\u0648\u0627\u0633\u0637\u0647\u200c\u06cc \u067e\u0627\u0633\u062e \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647\u060c \u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0628\u062f\u0647\u062f\u060c \u0645\u062a\u0648\u062c\u0647 \u0648\u062c\u0648\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0648\u0628\u200e\u0633\u0627\u06cc\u062a \u0645\u062f\u0646\u0638\u0631 \u0645\u06cc\u200c\u0634\u0648\u06cc\u0645.<\/p>\n<h3><strong>\u0633\u0646\u0627\u0631\u06cc\u0648 \u062d\u0645\u0644\u0627\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0628\u0627\u06af <\/strong><strong>Open Redirect<\/strong><\/h3>\n<p>\u062a\u0627 \u0627\u06cc\u0646\u062c\u0627\u06cc \u0645\u0637\u0644\u0628\u060c \u0628\u0627 \u0634\u06cc\u0648\u0647 \u0647\u0627\u06cc \u0628\u0648\u062c\u0648\u062f \u0622\u0645\u062f\u0646\u060c \u0634\u06cc\u0648\u0647 \u062d\u0645\u0644\u0647 \u0648 \u0631\u0648\u0634 \u06a9\u0634\u0641 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0622\u0634\u0646\u0627 \u0634\u062f\u06cc\u0645. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0633\u0646\u0627\u0631\u06cc\u0648 \u062d\u0645\u0644\u0627\u062a\u06cc \u0645\u06cc\u200c\u067e\u0631\u062f\u0627\u0632\u06cc\u0645 \u06a9\u0647 \u0628\u0647 \u0645\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u06cc\u06a9 \u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u062f\u0631 \u0645\u0639\u0631\u0636 \u0686\u0647 \u062e\u0637\u0631\u0627\u062a\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f:<\/p>\n<h4><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0647\u200c\u06cc <\/strong><strong>Phishing<\/strong><\/h4>\n<p>\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u062a\u0642\u0631\u06cc\u0628\u0627 \u062f\u0631 \u0628\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0645\u0639\u0631\u0648\u0641 \u062a\u0631 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a \u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631\u060c \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u06cc \u0645\u0634\u0627\u0628\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u0645\u06cc\u200c\u0633\u0627\u0632\u062f. \u0633\u067e\u0633 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0627\u0632 \u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u062a\u0627 \u0642\u0631\u0628\u0627\u0646\u06cc \u0631\u0627 \u0628\u0647 \u200c\u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062e\u0648\u062f \u0647\u062f\u0627\u06cc\u062a \u06a9\u0646\u062f. \u0642\u0631\u0628\u0627\u0646\u06cc \u0628\u0627 \u062f\u06cc\u062f\u0646 \u062f\u0627\u0645\u0646\u0647 \u0633\u0627\u06cc\u062a \u0627\u0635\u0644\u06cc \u0641\u0631\u06cc\u0628 \u0645\u06cc\u062e\u0648\u0631\u062f \u0648 \u0648\u0627\u0631\u062f \u0633\u0627\u06cc\u062a \u062c\u0639\u0644\u06cc \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646\u06a9\u0647 \u0633\u0627\u06cc\u062a \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u0634\u0627\u0628\u0647 \u0633\u0627\u06cc\u062a \u0627\u0635\u0644\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0642\u0631\u0628\u0627\u0646\u06cc \u0645\u062a\u0648\u062c\u0647 \u0648\u0631\u0648\u062f \u062e\u0648\u062f \u0628\u0647 \u0633\u0627\u06cc\u062a \u062c\u0639\u0644\u06cc \u0646\u0634\u062f\u0647 \u0648 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062d\u062a\u06cc \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u0646\u06cc\u0632\u060c \u0648\u0627\u0631\u062f \u06a9\u0646\u062f. \u0627\u0644\u0628\u062a\u0647 \u062d\u0645\u0644\u0647 Phishing\u060c \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0627\u0631\u062f \u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<h4><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0647 \u06cc <\/strong><strong>XSS<\/strong><\/h4>\n<p>\u0646\u0641\u0648\u0630\u06af\u0631 \u067e\u0633 \u0627\u0632 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect \u062f\u0631 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0645\u0639\u062a\u0628\u0631\u060c \u06a9\u0627\u0631\u0628\u0631 \u0642\u0631\u0628\u0627\u0646\u06cc \u0631\u0627 \u0628\u0647 \u0628\u0647\u0627\u0646\u0647\u200c\u06cc \u062e\u0648\u0627\u0646\u062f\u0646 \u06cc\u06a9 \u0645\u0637\u0644\u0628 \u062f\u0631 \u0622\u0646 \u0633\u0627\u06cc\u062a\u060c \u062a\u0631\u063a\u06cc\u0628 \u0628\u0647 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0641\u0631\u0633\u062a\u0627\u062f\u0647 \u0634\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0642\u0631\u0628\u0627\u0646\u06cc \u067e\u0633 \u0627\u0632 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628\u060c \u0648\u0627\u0631\u062f \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u06cc\u06af\u0631 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <a href=\"https:\/\/www.irandnn.ir\/mag\/what-is-a-cross-site-scripting-or-xss-attacks\/\">XSS<\/a> \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<h4><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0647\u200c\u06cc <\/strong><strong>CSRF<\/strong><\/h4>\n<p>\u0646\u0641\u0648\u0630\u06af\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <a href=\"https:\/\/www.irandnn.ir\/mag\/what-is-a-csrf-vulnerability\/\">CSRF<\/a> \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0633\u067e\u0633 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0627\u0632 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u0627\u06cc \u0628\u0627\u06af Open Redirect \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u0648 \u0628\u0631\u0627\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u0645\u06cc\u0641\u0631\u0633\u062a\u062f. \u06a9\u0627\u0631\u0628\u0631 \u0642\u0631\u0628\u0627\u0646\u06cc\u060c \u0628\u0627 \u062f\u06cc\u062f\u0646 \u062f\u0627\u0645\u0646\u0647\u200c\u06cc \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0645\u0639\u062a\u0628\u0631\u060c \u0641\u0631\u06cc\u0628 \u0645\u06cc\u200c\u062e\u0648\u0631\u062f \u0648 \u0628\u0631 \u0631\u0648\u06cc \u0644\u06cc\u0646\u06a9 \u06a9\u0644\u06cc\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062c\u0639\u0644\u06cc \u0627\u0632 \u0633\u0645\u062a \u0645\u0631\u0648\u0631\u06af\u0631 \u0648\u06cc\u060c \u0628\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u0627\u06cc \u0628\u0627\u06af CSRF \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n<p>\u0627\u0644\u0628\u062a\u0647 \u0645\u062f\u200c\u0646\u0638\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0628\u0627\u06af \u0641\u0642\u0637 \u0628\u0647 \u0645\u0648\u0627\u0631\u062f \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u062e\u0644\u0627\u0635\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0628\u0644\u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u062e\u0644\u0627\u0642\u06cc\u062a \u0648 \u0634\u0631\u0627\u06cc\u0637\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u062f\u0627\u0631\u062f\u060c \u0645\u06cc\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0631\u0648\u0634 \u0647\u0627 \u0648 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0628\u0647\u0631\u0647 \u0628\u0628\u0631\u062f.<\/p>\n<h3><strong>\u0631\u0627\u0647 \u0647\u0627\u06cc \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 <\/strong><strong>Open Redirect<\/strong><\/h3>\n<p>\u0628\u0631\u0627\u06cc \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0634\u0645\u0627 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0627\u06cc\u0645\u0646 \u0628\u0627\u0634\u062f\u060c \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a \u062a\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0645\u0648\u0631\u062f \u0646\u0638\u0631\u062a\u0627\u0646 \u0631\u0627 \u0628\u0627 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0645\u0646\u0637\u0628\u0642 \u06a9\u0646\u06cc\u062f.<\/p>\n<ul>\n<li>\u0627\u06af\u0631 \u0627\u0632 \u0639\u0645\u0644 \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u0634\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0627\u0632 \u0622\u062f\u0631\u0633 url \u0645\u0642\u0635\u062f\u060c \u062f\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u06a9\u0646\u06cc\u062f.<\/li>\n<li>\u062d\u062a\u06cc \u0627\u0644\u0627\u0645\u06a9\u0627\u0646 \u0627\u0632 \u0646\u0627\u0645 \u06a9\u0648\u062a\u0627\u0647\u060c ID \u06cc\u0627 \u062a\u0648\u06a9\u0646 \u0627\u06cc \u0628\u0631\u0627\u06cc \u0645\u0642\u0635\u062f \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u0647\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f\u060c \u06a9\u0647 \u062f\u0631 \u0633\u0645\u062a \u0633\u0631\u0648\u0631 \u0628\u0647 \u0622\u062f\u0631\u0633 \u0645\u0642\u0635\u062f \u0645\u0646\u0637\u0628\u0642 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/li>\n<li>\u0627\u06af\u0631 \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u06cc\u062f\u060c \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u06cc\u062f \u06a9\u0647 \u0645\u0642\u0627\u062f\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0632 \u0633\u0645\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u0627\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0645\u0639\u062a\u0628\u0631\u060c \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648 \u062f\u0631 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627\u0634\u0646\u062f.<\/li>\n<li>\u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0628\u0627 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \u0627\u0632 \u0645\u0642\u0635\u062f \u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0628\u0631\u0627\u06cc \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a\u060c \u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u06a9\u0646\u06cc\u062f. \u062f\u0642\u062a \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0631\u0648\u06cc\u06a9\u0631\u062f \u0628\u0627\u06cc\u062f \u0628\u0631 \u0627\u0633\u0627\u0633 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \u0645\u062c\u0627\u0632(allow-list) \u0628\u0627\u0634\u062f \u0648 \u0646\u0647 \u06cc\u06a9 \u0628\u0644\u0627\u06a9 \u0644\u06cc\u0633\u062a(block list).<\/li>\n<\/ul>\n<p><strong>\u062c\u0645\u0639 \u0628\u0646\u062f\u06cc<\/strong><\/p>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0646\u0648\u0634\u062a\u0627\u0631 \u0633\u0639\u06cc \u0634\u062f \u062a\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Open Redirect\u060c \u0634\u06cc\u0648\u0647 \u06cc \u06a9\u0634\u0641 \u060c \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u062d\u0645\u0644\u0647 \u0648 \u0645\u062a\u062f \u0647\u0627\u06cc \u0627\u0645\u0646 \u0633\u0627\u0632\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0622\u0646\u060c \u0622\u0634\u0646\u0627 \u0628\u0634\u0648\u06cc\u0645. \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u06cc\u062f\u06cc\u0645\u060c \u0627\u06af\u0631 \u0686\u0647 \u0628\u0639\u0636\u0627\u064b\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u06cc\u06a9 \u0628\u0627\u06af \u0628\u0627 \u0631\u06cc\u0633\u06a9 \u067e\u0627\u06cc\u06cc\u0646 \u0634\u0645\u0631\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0645\u0627 \u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0622\u0646\u060c \u062a\u062f\u0628\u06cc\u0631\u06cc \u062f\u06cc\u062f\u0647 \u0646\u0634\u0648\u062f\u060c \u062f\u0631\u06a9\u0646\u0627\u0631 \u062d\u0645\u0644\u0627\u062a \u062f\u06cc\u06af\u0631 \u06cc\u0627 \u06af\u0627\u0647\u0627\u064b \u0628\u0647 \u062a\u0646\u0647\u0627\u06cc\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u062e\u0631\u06cc\u0628 \u0647\u0627\u06cc \u062c\u0628\u0631\u0627\u0646 \u0646\u0627\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f. \u067e\u0633 \u0647\u06cc\u0686 \u0648\u0642\u062a \u0648\u062c\u0648\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062d\u062a\u06cc \u0628\u0627 \u0633\u0637\u062d \u067e\u0627\u06cc\u06cc\u0646\u060c \u0646\u0628\u0627\u06cc\u062f \u0628\u06cc \u062a\u0627\u062b\u06cc\u0631 \u0628\u0647 \u0634\u0645\u0627\u0631 \u0628\u0631\u0648\u062f.<\/p>\n","protected":false},"excerpt":{"rendered":"<p><span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647:<\/span> <span class=\"rt-time\"> 8<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span>\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc  Open Redirect\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u062a\u062d\u062a\u200c\u0648\u0628 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u0634\u0627\u06cc\u062f \u0628\u0639\u0636\u0627\u064b\u060c \u0627\u0632 \u0646\u0638\u0631 \u0635\u0627\u062d\u0628\u0627\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u062a\u0647\u062f\u06cc\u062f \u0628\u0632\u0631\u06af\u06cc \u0628\u0647 \u0634\u0645\u0627\u0631 \u0646\u0631\u0648\u062f\u060c \u0627\u0645\u0627 \u0648\u062c\u0648\u062f \u0622\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0648\u062c\u0628 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062a\u062e\u0631\u06cc\u0628\u060c \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u062f\u06cc\u06af\u0631 \u0634\u0648\u062f. <\/p>\n","protected":false},"author":5,"featured_media":4118,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75],"tags":[76],"better_featured_image":{"id":4118,"alt_text":"","caption":"","description":"","media_type":"image","media_details":{"width":1000,"height":700,"file":"2021\/09\/shakhes-1-1.jpg","sizes":{"medium":{"file":"shakhes-1-1-300x210.jpg","width":300,"height":210,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-300x210.jpg"},"thumbnail":{"file":"shakhes-1-1-150x150.jpg","width":150,"height":150,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-150x150.jpg"},"medium_large":{"file":"shakhes-1-1-768x538.jpg","width":768,"height":538,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-768x538.jpg"},"publisher-tb1":{"file":"shakhes-1-1-86x64.jpg","width":86,"height":64,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-86x64.jpg"},"publisher-sm":{"file":"shakhes-1-1-210x136.jpg","width":210,"height":136,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-210x136.jpg"},"publisher-mg2":{"file":"shakhes-1-1-279x220.jpg","width":279,"height":220,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-279x220.jpg"},"publisher-md":{"file":"shakhes-1-1-357x210.jpg","width":357,"height":210,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-357x210.jpg"},"publisher-lg":{"file":"shakhes-1-1-750x430.jpg","width":750,"height":430,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-750x430.jpg"},"publisher-full":{"file":"shakhes-1-1-1000x580.jpg","width":1000,"height":580,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-1000x580.jpg"},"publisher-tall-sm":{"file":"shakhes-1-1-180x217.jpg","width":180,"height":217,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-180x217.jpg"},"publisher-tall-lg":{"file":"shakhes-1-1-267x322.jpg","width":267,"height":322,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-267x322.jpg"},"publisher-tall-big":{"file":"shakhes-1-1-368x445.jpg","width":368,"height":445,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1-368x445.jpg"}},"image_meta":{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"1","keywords":[]}},"post":4089,"source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1.jpg"},"fimg_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/09\/shakhes-1-1.jpg","_links":{"self":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4089"}],"collection":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/comments?post=4089"}],"version-history":[{"count":24,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4089\/revisions"}],"predecessor-version":[{"id":6041,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4089\/revisions\/6041"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/media\/4118"}],"wp:attachment":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/media?parent=4089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/categories?post=4089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/tags?post=4089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}