第11åã¬ã¸ã§ããâ â ãã¦ã£ã¸ã§ããã®ã»ãã¥ãªãã£ ç¦æ£®å¤§å 2007-11-14
第11åã¬ã¸ã§ããâ â ãã¦ã£ã¸ã§ããã®ã»ãã¥ãªãã£ ç¦æ£®å¤§å 2007-11-14
å æ¥ãtwitterä¸ã®ç¯è¡äºåã«ãã20æ³ã®éå¹´ã鮿ãããããã§ããããªããã¾ãã«ãã誤èªé®æã§ã¯ãªãã£ãã®ãæ°ã«ãªãã¨ããã§ããããã§ãtwitterãããªããã¾ãæç¨¿ãã©ã®ç¨åº¦å¯¾çãã¦ãããã調ã¹ã¦ã¿ããã¨ã«ãã¾ãããtwitterã®å®å ¨æ§ã確èªãããã¨ãç®çã¨ããããããtwitterã宿½ãã¦ãã対çãç¥ããã¨ã«ãããçæ§ã®Webãµã¤ããå®å ¨ã«ããåèã«ãã¦ããã ããã°ã¨æãã¾ãã ä»å調ã¹ãããªããã¾ãæç¨¿ãã®ææ³ã¯ä¸è¨ã®éãã§ãã ã¯ãã¹ãµã¤ãã»ãªã¯ã¨ã¹ãã»ãã©ã¼ã¸ã§ãª(CSRF) ã¯ãã¹ãµã¤ãã¹ã¯ãªããã£ã³ã°ï¼XSSï¼ HTTPãããã¼ã¤ã³ã¸ã§ã¯ã·ã§ã³ ã¯ãªãã¯ã¸ã£ããã³ã° DNSãªãã¤ã³ãã£ã³ã° ã¯ããã¼ã¢ã³ã¹ã¿ã¼ãã° ãã®ãã¡ãä¸ã®5ã¤ã®è§£èª¬ã¯æç¨¿ãâ誤èªé®æâãé²ãWebã»ãã¥ãªãã£å¼·åè¡ããæå¾ã®ã¯ããã¼ã¢ã³ã¹ã¿ã¼ãã°ã«ã¤ãã¦ã¯ãéå»ã®ã¨ã³ããªãã¯ããã¼ã¢ã³ã¹ã¿ã¼
å æ¥ã®ã¨ã³ããªãå¦çéå§å¾ã®ä¾å¤å¦çã§ã¯ããµãã¿ã¤ãºããæå¹ãªå ´åããããã¯ãç´ æã®æ¶åä¸è¶³ãç§ã®è¡¨ç¾ã®æªççãããä¸é¨ã§èª¤è§£ãæãã¦ãã¾ã£ãããã§ç³ã訳ããã¾ãããã¢ããã¼ããå¤ãã¦ããµãã¿ã¤ãºã«ã¤ãã¦ããä¸åº¦èãã¦ã¿ããã¨æãã¾ããçµè«ããè¨ãã°ãæªããµãã¿ã¤ãºã¯ãã£ã¦ãããè¯ããµãã¿ã¤ãºãã¯ãªãã¨èãã¾ããããããªãããç¶æ³ã«ãã£ã¦ã¯å¦¥åã®ç£ç©ã¨ãã¦ãµãã¿ã¤ãºã使ããã¨ã¯ãããå¾ãã¨èãã¾ãã æ¬ç¨¿ã§ç¨ããããµãã¿ã¤ãºãã®å®ç¾© ãµãã¿ã¤ãºã¨ããç¨èªã¯ãæ´å²çã«é½åã®è¯ãããã«ä½¿ããã¦ããæ´å²ããããããããã¦ãããæ¤ç´¢ãã¦è¦ãã¨ãæ¬å½ã«å¤æ§ãªä½¿ããæ¹ããã¦ããã¨æãã¾ããããã®æ§åã¯ã髿¨æµ©å æ°ã®ããã°è¨äºãããµãã¿ã¤ãºãã¨ããè¨èã¯ããæ»ãã§ãããããã伺ãã¾ãã ããã§ã¯ãè°è«ã®é½åä¸ã以ä¸ããµãã¿ã¤ãºã®å®ç¾©ã¨ãã¦ç¨ãããã¨ã«ãã¾ãã ãµãã¿ã¤ãºã¨ã¯ã 主ã«ã»ãã¥ãªãã£ä¸ã®ç®çã§
æ±äº¬ã©ã¼ã¡ã³ã·ã§ã¼2011 ããã¦ã¼ã¼ã¼ï¼ã¿ãªããããã«ã¡ã¯ãnakamura ã§ãã 仿¥ã¯ããã°ã©ãã ã£ãããµã¼ã管çè ã ã£ããï¼ãããã¯ãã®ä¸¡æ¹ã ã£ããï¼ããæ¹ã«ãå§ãããããµã¤ãã¨ãã¼ã«ãããã¤ããç´¹ä»ãã¾ããç´°ããèå¼±æ§ã®ãã§ãã¯çã©ããã¦ãæéãæãããã®ãå¤ãã§ãããä»åãç´¹ä»ãããã¼ã«ããã¾ã使ãã¨ãã®è¾ºãã ãã¶å¹çããã§ããã¨æãã¾ããï¼ WEB ã¢ããªã±ã¼ã·ã§ã³é¢é£ XSS Me XSS Me :: Add-ons for Firefox XSS ã®ãã¹ããããç¨åº¦èªååãã¦ããã Firefox ã®ã¢ããªã³ã§ããæ®å¿µãªãã Firefox3.0.* ç³»ã®é ã«éçºãæ¢ã¾ã£ã¦ãã¾ã£ã¦ããããã§ãããåã®ç°å¢ã§ã¯ install.rdf ã®æ¸ãæãã§åé¡ãªãåä½ãã¦ãã¾ããï¼Windows7 64bit + Firefox7.0.1ï¼ SQL Inject Me SQL I
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}