[B! xss] bobbyjam99ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

bobbyjam99 id:bobbyjam99

xssã«é–¢ã™ã‚‹bobbyjam99ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

XSSã‚’é˜²ãæ–°ã—ã„XSS-Protectionãƒ˜ãƒƒãƒ€ - ASnoKaze blog
evalã¨reportOnlyã«ã¤ã„ã¦è¿½è¨˜ã—ã¾ã—ãŸ (2016/10/10) 2016/10/20 ä»•æ§˜åã¯ä»¥ä¸‹ã®é€šã‚Šã«ãªã‚Šã¾ã—ãŸã€‚Anti-XSS Response-Time Uniqueness Requirement ã¾ãŸã€ãƒ˜ãƒƒãƒ€åã¯ã€XSS-Protectionãƒ˜ãƒƒãƒ€ã§ã¯ãªãã€ARTURãƒ˜ãƒƒãƒ€ã¨ãªã£ã¦ãŠã‚Šã¾ã™ãŒã€ã¾ãŸå¤‰æ›´ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ Googleã®èª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€CSPã«ã‚ˆã‚‹XSSã®é˜²æ¢ã¯ç¾å®Ÿçš„ã«ãƒ‡ãƒ—ãƒã‚¤ã®æ¬ é™¥ã«ã‚ˆã‚ŠXSSã®é˜²æ¢åŠ¹æžœãŒãªã„ã“ã¨ã‚’ç¤ºã—ã¦ã„ã¾ã™ã€‚èª¿æŸ»ã¯ã€ŒCSP Is Dead, Long Live CSP!ã€ã¨ã—ã¦ACMã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã§ç™ºè¡¨ã•ã‚Œã€ãƒšãƒ¼ãƒ‘ãƒ¼ã‚‚é–²è¦§ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 9æœˆã«è¡Œã‚ã‚ŒãŸW3C TPAC 2016ã®WebAppSecã®ãƒŸãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã§è°è«–ã•ã‚Œã€Googleã®Mike Westæ°ã‚ˆã‚Šæ–°ã—ãXSS Protectionã¨ã„ã†ä»•æ§˜ãŒææ¡ˆã•ã‚Œã¦
bobbyjam99 2016/10/09
security

xss
ãƒªãƒ³ã‚¯
XSS (Cross Site Scripting) Cheat Sheet
XSS (Cross Site Scripting) Cheat Sheet Esp: for filter evasion By RSnake Note from the author: XSS is Cross Site Scripting. If you don't know how XSS (Cross Site Scripting) works, this page probably won't help you. This page is for people who already understand the basics of XSS attacks but want a deep understanding of the nuances regarding filter evasion. This page will also not show you how to
bobbyjam99 2010/05/17
security

cheatsheet

xss
ãƒªãƒ³ã‚¯
IIS 7.5 è¯¦ç»†é”™è¯¯ - 404.0 - Not Found
é”™è¯¯æ‘˜è¦ HTTP é”™è¯¯ 404.0 - Not Found æ‚¨è¦æ‰¾çš„èµ„æºå·²è¢«åˆ é™¤ã€å·²æ›´åæˆ–æš‚æ—¶ä¸å¯ç”¨ã€‚
bobbyjam99 2009/12/15
2ch

security

xss
ãƒªãƒ³ã‚¯
ï¼»æ°—ã«ãªã‚‹ï¼½JSONPã®å®ˆã‚Šæ–¹
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ JSONPã ã£ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ°—ã«ã—ã¦ã»ã—ã„ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ä»Šå›žã¯ã€JSONPã‚’ä½¿ç”¨ã™ã‚‹å ´åˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ã‚‡ã†ã€‚ JSONPã¨ã¯ã€JSON with Paddingã®åç§°ãŒç¤ºã—ã¦ã„ã‚‹ã¨ãŠã‚Šã€JSONå½¢å¼ã®ãƒ‡ãƒ¼ã‚¿ã«ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯é–¢æ•°ã®å‘¼ã³å‡ºã—ã®ãŸã‚ã®ã‚³ãƒ¼ãƒ‰ã‚’ä»˜åŠ ã™ã‚‹ã“ã¨ã§ã€ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ãƒ‡ãƒ¼ã‚¿ã®å—ã‘æ¸¡ã—ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿å½¢å¼ã§ã™ã€‚JavaScriptã‹ã‚‰ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã®ãƒ‡ãƒ¼ã‚¿ãŒç°¡å˜ã«æ‰±ãˆã‚‹ã“ã¨ãªã©ã‚’ç†ç”±ã«ã€å¤šæ•°ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§APIã®ä¸€éƒ¨ã¨ã—ã¦JSONPå½¢å¼ã§ãƒ‡ãƒ¼ã‚¿ã®æä¾›ãŒè¡Œã‚ã‚Œã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ãªä¾‹ã‚’è¦‹
bobbyjam99 2009/11/19
jsonp

ajax

javascript

security

xss
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2009/09/04/20090903rubyonrails-xss-vulnerability-claims-twitter-basecamp-and-my-confidence/
bobbyjam99 2009/09/14
ruby on rails

twitter

security

xss
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹11ã®è„†å¼±æ€§ã®å¸¸è˜ã¨å¯¾ç–
Webã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹11ã®è„†å¼±æ€§ã®å¸¸è˜ã¨å¯¾ç–ï¼šWebã‚¢ãƒ—ãƒªã®å¸¸è˜ã‚’JSPã¨Strutsã§èº«ã«ã¤ã‘ã‚‹ï¼ˆ11ï¼‰ï¼ˆ1/4 ãƒšãƒ¼ã‚¸ï¼‰ æœ¬é€£è¼‰ã¯ã€JSPï¼ã‚µãƒ¼ãƒ–ãƒ¬ãƒƒãƒˆï¼‹Strutsã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã‚’é€šã˜ã¦ã€Javaè¨€èªžä»¥å¤–ï¼ˆPHPã‚„ASP.NETã€Ruby on Railsãªã©ï¼‰ã®é–‹ç™ºã«ã‚‚é€šç”¨ã™ã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¨èˆ¬ã®åºƒã„çŸ¥è˜ãƒ»å¸¸è˜ã‚’èº«ã«ä»˜ã‘ã‚‹ãŸã‚ã®é€£è¼‰ã§ã™ ã€2013å¹´2æœˆ25æ—¥ã€‘ç·¨é›†éƒ¨ã‚ˆã‚Šã€ãŠã‚ã³ã¨è¨‚æ£ã®ãŠçŸ¥ã‚‰ã› æœ¬ç¨¿ã«ãŠã„ã¦èªè€…ã®çš†ã•ã¾ã‚ˆã‚Šå¤šæ•°ã®ã”æŒ‡æ‘˜ã‚’ã„ãŸã ãã¾ã—ã¦ã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ç·¨é›†éƒ¨ã§ã‚ã‚‰ãŸã‚ã¦èª¿ã¹ãŸçµæžœã€é–“é•ã„ã‚’æŠŠæ¡ã—ã€ã‚ã‚‰ãŸã‚ã¦ä¿®æ£ç‰ˆã‚’æŽ²è¼‰ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ã“ã®åº¦ã¯ã€é•·æœŸã«ã‚ãŸã‚Šèª¤ã£ãŸå†…å®¹ã‚’æŽ²è¼‰ã—ãŸã®ã§ã€èªè€…ã®çš†ã•ã¾ã«å¤šå¤§ãªã”è¿·æƒ‘ã‚’ãŠæŽ›ã‘ã—ãŸã—ãŸç‚¹ã‚’ãŠã‚ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚ é€šå¸¸ã€è¨˜äº‹ã«é–“é•ã„ãŒã‚ã£ãŸå ´åˆã«ã¯ã€ç†è€…ç¢ºèªå¾Œã«ä¿®æ£ç‰ˆã‚’æŽ²è¼‰ã™ã‚‹ã®ã§ã™ãŒã€ä»Šå›žã®å ´
bobbyjam99 2009/09/02
*ã¾ã¨ã‚

security

web

xss

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
http://openmya.hacker.jp/hasegawa/public/20071107/s6/h6.html?file=data.txt
bobbyjam99 2007/11/09
security

utf-7

xss

unicode
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ãƒãƒƒãƒ‰ãƒŽã‚¦ãƒã‚¦ã€ãã—ã¦ã‚°ãƒƒãƒ‰ãƒ©ãƒƒãƒ‘ãƒ¼ã®é–¢ä¿‚
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ãƒãƒƒãƒ‰ãƒŽã‚¦ãƒã‚¦ã€ãã—ã¦ã‚°ãƒƒãƒ‰ãƒ©ãƒƒãƒ‘ãƒ¼ã®é–¢ä¿‚ by é‡‘åºŠ ---------------------------------- ã¯ã˜ã‚ã« ---------------------------------- ç†è€…ã¯ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ã§ã‚ã‚‹ã¨åŒæ™‚ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã«ã‚‚èˆˆå‘³ãŒã‚ã‚‹ã€‚è‡ªèº«ãŒSeaSurfers MLã¨ã„ã†ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ãƒ†ãƒ¼ãƒžã¨ã—ãŸãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã‚’ä¸»å‚¬ã—ã¦ãŠã‚Šã€ã¾ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã«å¤šãã®çŸ¥äººã€å‹äººãŒã„ã‚‹ã€‚ã—ã‹ã—å½¼ã‚‰ã¨ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦æ„è¦‹ã‚’äº¤æ›ã™ã‚‹ã¨ã€é•å’Œæ„Ÿã‚’ãŠã¼ãˆã‚‹ã“ã¨ãŒå¤šã„ã€‚ å½¼ã‚‰ã¯è„†å¼±æ€§ã®åŽŸç†ã«ã¤ã„ã¦ã¨ã¦ã‚‚è©³ã—ã„ã®ã ãŒã€ä»¥ä¸‹ã®ã‚ˆã†ãªä¼šè©±ãŒé »ç¹ã«ç™ºç”Ÿã™ã‚‹ã®ã§ã‚ã‚‹ã€‚ ã€Œâ€¦ã¤ã¾ã‚ŠåŽŸç†çš„ã«è€ƒãˆã¦ã€ã“ã®ã‚ˆã†ã«ã™ã‚Œã°XSSã¯ç™ºç”Ÿã—ãªã„ã‚“ã ã‚ˆã€ ã€Œãª
bobbyjam99 2007/05/17
security

xss

web
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - é§„ç›®ãªæŠ€è¡“æ–‡æ›¸ã®è¦‹åˆ†ã‘æ–¹ ãã®1
â– é§„ç›®ãªæŠ€è¡“æ–‡æ›¸ã®è¦‹åˆ†ã‘æ–¹ ãã®1 ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®ãƒ›ãƒƒãƒ†ãƒ³ãƒˆãƒªã‚’è¦‹ã¦ã„ãŸã¨ã“ã‚ã€300ã‚’è¶…ãˆã‚‹ãƒ¦ãƒ¼ã‚¶ã«ç™»éŒ²ã•ã‚ŒãŸä»¥ä¸‹ã®è¨˜äº‹ãŒã‚ã£ãŸã€‚ ä»Šå¤œåˆ†ã‹ã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–, ä¸Šé‡Žå®£, @IT, 2006å¹´11æœˆ2æ—¥ ã¾ãŸä¸Šé‡Žå®£ã‹ã€‚é¡”è¦‹çŸ¥ã‚Šãªã®ã§ã‚ºãƒãƒªã„ãã“ã¨ã«ã™ã‚‹ã€‚ ã—ã‹ã—ã€ãã®å¯¾ç–ã¯ã¾ã æœ¬å½“ã«ç†è§£ã•ã‚Œã¦ã„ãªã„ã‚ˆã†ã«æ€ãˆã‚‹ã€‚ ã¸ãˆã€‚ çµ‚ã‚ã‚Šã®æ–¹ã‚’è¦‹ã¦ã¿ã‚‹ã¨ã€ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å¯¾ç– å…¥åŠ›å€¤ã®SQLã®ç‰¹æ®Šæ–‡å—ã‚’é©åˆ‡ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ— å…¥åŠ›å€¤ï¼ãƒ—ãƒã‚°ãƒ©ãƒ ï¼ˆãƒ—ãƒã‚»ã‚¹ï¼‰ã«å¤–éƒ¨ã‹ã‚‰å…¥ã£ã¦ãã‚‹ã‚‚ã® ã‚·ãƒ•ãƒˆJISã®å ´åˆã«ã¯1ãƒã‚¤ãƒˆæ–‡å—ã‚’æ•´ç† SQLã®è¨˜è¿°ã‚’ãªãã™ãŸã‚ã«O/Rï¼ˆObject/Relationalï¼‰ãƒžãƒƒãƒ”ãƒ³ã‚°ã‚’æ´»ç”¨ æ”»æ’ƒè€…ã«å½¹ç«‹ã¤æƒ…å ±ã‚’ä¸Žãˆãªã„ãŸã‚ã«ã€ä¸è¦ãªã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ï¼ˆãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒå‡ºåŠ›ã™ã‚‹ã‚¨ãƒ©ãƒ¼ãªã©ï¼‰ã®è¡¨ç¤ºã‚’æŠ‘æ¢ å¯¾ç–ã«ã€Œæº–å‚™ã•ã‚ŒãŸæ–‡ã€(prepared statement)
bobbyjam99 2006/11/07
ãŸãŸããŸãŸã

security

xss
ãƒªãƒ³ã‚¯
WebAppSec - WebAppSec Wiki - XSSã®å®Ÿä¾‹
data ã‚¹ã‚ãƒ¼ãƒžã‚’ä½¿ã£ãŸã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å®Ÿè¡Œ â€ data ã‚¹ã‚ãƒ¼ãƒžã¯ã€ç”»åƒã‚„IFRAMEãªã©ã®ãƒ‡ãƒ¼ã‚¿ã‚’HTMLä¸ã«åŸ‹ã‚è¾¼ã‚“ã§ä½¿ç”¨ã™ã‚‹ãŸã‚ã®æ–¹æ³•ã§ã€RFC2397ã§å®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚è¤‡æ•°ã®Webãƒ¡ãƒ¼ãƒ«ã«ã¦ã“ã‚Œã‚’ä½¿ç”¨ã—ã¦ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å®Ÿè¡ŒãŒå¯èƒ½ãªè„†å¼±æ€§ãŒã‚ã‚Šã¾ã—ãŸã€‚ <iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgiZGF0YToiK2RvY3VtZW50LmNvb2tpZSk7PC9zY3JpcHQ+'></iframe> <img src='data:text/html;base64,PHNjcmlwdD5hbGVydCgiZGF0YToiK2RvY3VtZW50LmNvb2tpZSk7PC9zY3JpcHQ+'> å¤šãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ã€http ã‚‚ã—ãã¯ https ã‚¹ã‚ãƒ¼ãƒžã®URIã®ã¿ã‚’å…¥åŠ›å€¤ã¨ã—ã¦è¨±å¯ã™ã‚Œã°ååˆ†ã ã¨
bobbyjam99 2006/11/07
å®Ÿéš›ã«ä½¿ç”¨ã™ã‚‹ã¨ãã«å‚è€ƒã«

xss

security

web
ãƒªãƒ³ã‚¯
1