[B! security] heitattaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

heitatta id:heitatta

securityã«é–¢ã™ã‚‹heitattaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

HBGaryäº‹ä»¶ã®é¡›æœ« - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯æ¥½ã—ã„ã‹ãï¼Ÿ Part 1
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ãƒ³ãƒ€ãƒ¼ã® HBGaryãŒå…ˆæ—¥ Anonymousã«ã‚ˆã£ã¦ãƒãƒƒã‚¯ã•ã‚Œè©±é¡Œã«ãªã£ãŸã€‚HBGaryã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã§ã‚ã‚‹ Greg HoglundãŒãƒ•ã‚¡ã‚¦ãƒ³ãƒ€ãƒ¼ã§ã‚ã‚‹ã€‚å½¼ã¯é•·å¹´ rootkit.comã‚’é‹å–¶ã—ã¦ã„ã‚‹ã»ã‹ã€Exploiting Softwareã‚„ rootkitsãªã©ã®ã™ã°ã‚‰ã—ã„æ›¸ç±ã‚‚æ›¸ã„ã¦ãŠã‚Šã€ã“ã®æ¥ç•Œã§ã¯ã‹ãªã‚Šã®æœ‰åäººã ã€‚ ã“ã®äº‹ä»¶ã¯ä¸€ä½“ã©ã®ã‚ˆã†ã«ã—ã¦èµ·ããŸã®ã‹ã€‚ãã£ã‹ã‘ã¯ã€HBGary Federalã¨ã„ã†ä¼šç¤¾ãŒ Anonymousã«ã¤ã„ã¦èª¿æŸ»ã—ãŸçµæžœã‚’å…¬è¡¨ã—ã‚ˆã†ã¨ã—ãŸã“ã¨ã«å¯¾ã™ã‚‹ã€Anonymousã®å ±å¾©æ”»æ’ƒã¨ã„ã†ã“ã¨ã®ã‚ˆã†ã ã€‚(Anonymousã«ã¤ã„ã¦ã¯ã“ã¡ã‚‰ã®è§£èª¬ãŒè©³ã—ã„ã€‚) ã•ã¦ã€ã“ã®äº‹ä»¶ã«ã¤ã„ã¦ã®è©³ç´°ãŒ Anonymousã«ã‚ˆã£ã¦æ˜Žã‚‰ã‹ã«ã•ã‚ŒãŸã‚ˆã†ãªã®ã ãŒã€ãã®çµŒç·¯ãŒéžå¸¸ã«ãŠã‚‚ã—ã‚ã„ã€‚ Anonymous speaks: the inside s
heitatta 2011/02/18
ã“ã‚Œã¯ã„ã„æ•™æ

security
ãƒªãƒ³ã‚¯
1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜
æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã—ãã†ãª X- ãªHTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãã‚Œä»¥å¤–ã«ã‚‚ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ X-XSS-Protection 0:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’ç„¡åŠ¹ã«ã™ã‚‹ã€‚ 1:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã“ã¨ã§ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãŒXSSã®è¢«å®³ã«ã‚ã†å¯èƒ½æ€§ãŒä½Žæ¸›ã™ã‚‹ãŒã€ã¾ã‚Œã«èª¤æ¤œçŸ¥ã™ã‚‹ã“ã¨ã§ç”»é¢ã®è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã€‚IE8+ã€Safariã€Chrome(å¤šåˆ†) ã§æœ‰åŠ¹ã€‚IEã§ã¯ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†æŒ‡å®šã‚‚å¯èƒ½ã€‚ 2008/7/2 - IE8 Security Part IV: The XSS FilterBug 27312 â€“ [XSSAuditor] Add support for header X-XSS-Protection X-Content-Ty
heitatta 2011/01/13
çŸ¥ã‚‰ãªã‹ã£ãŸã®ã§ã€ãƒ¡ãƒ¢ã€‚ã¤ãƒ¼ã‹ã€ã‚ã„ã‹ã‚ã‚‰ãš IE ã¯é…·ã„ãªã€‚

web

security
ãƒªãƒ³ã‚¯
Arc injection / Return to Libc
Arc injection / Return to libc Why? Stack overflows require an executable stack, and securer systems can use a non-executable stack. We need to get around this... Also, if the buffer isn't big enough for shell code, this provides a different opportunity. Requirements Libc: standard C library that contains useful functions such as printf(), execl(), and system(). Vulnerable program, for example: v
heitatta 2008/03/11
security

Cè¨€èªž

programming
ãƒªãƒ³ã‚¯
SecTools.Org Top Network Security Tools
SecTools.Org: Top 125 Network Security Tools For more than a decade, the Nmap Project has been catalog uing the network security community's favorite tools. In 2011 this site became much more dynamic, offering ratings, reviews, searching, sorting, and a new tool suggestion form. This site allows open source and commercial tools on any platform, except those tools that we maintain (such as the Nmap
heitatta 2006/06/23
security

tool
ãƒªãƒ³ã‚¯
http://oedipus.rubyforge.org/index.html
Oedipus has been taken off-line. If you have any questions, apart from the following: Why was Oedipus taken off-line? Will Oedipus be placed back on-line? Can you open up a covert cvs account just for me? Is your penis large enough? V-1-A-G-R-A Then please direct all requests to 800m800m [at] gmail [dot] com Word out, 800m800m
heitatta 2006/04/18
Ruby ã§æ›¸ã‹ã‚ŒãŸ web penetration test tool

ruby

security

web
ãƒªãƒ³ã‚¯
1