[B! security][Server] moritataã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

moritata id:moritata

securityã¨Serverã«é–¢ã™ã‚‹moritataã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

C#ã‚µãƒ¼ãƒãƒ¼ã‚’ãªãœLinuxã§å‹•ã‹ã™ã®ã‹ - tech.guitarrapc.cÃ³m
C#ã¯æ§˜ã€…ãªç”¨é€”ã«åˆ©ç”¨ã§ãã‚‹è¨€èªžã§ã™ãŒã€.NETã«ãªã£ã¦ã‹ã‚‰ã¯ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã¨ã—ã¦ã¯Linuxã§å‹•ã‹ã™ã®ãŒè‡ªç„¶ãªé¸æŠžè‚¢ã«ãªã£ã¦ã„ã¾ã™ã€‚ãªãœLinuxã§å‹•ã‹ã™ã®ã‹ç†ç”±ã‚’ã„ãã¤ã‹æŒ™ã’ã¦ã¿ã¾ã™ã€‚ ã‚‚ã—ã‹ã™ã‚‹ã¨ C#ã¯Windowså‘ã‘ã«é–‹ç™ºã•ã‚ŒãŸè¨€èªžã€.NET Framework (.NET Coreã§ã¯ãªã„ã‚‚ã®)ã®ã“ã‚ã¯Windowsã§ã—ã‹å‹•ä½œã—ãªã‹ã£ãŸã¨ã„ã†å°è±¡ãŒæ®‹ã£ã¦ã„ã‚‹æ–¹ã‚‚ã„ã‚‹ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã“ã®è¨˜äº‹ã¯ã€2020å¹´ã«.NETã¨ã—ã¦ãƒ–ãƒ©ãƒ³ãƒ‰ãŒçµ±ä¸€ã•ã‚Œã¦ã‹ã‚‰ã¯ã€Windowså°‚ç”¨ã§ã¯ãªããªã‚ŠLinuxã§å‹•ã‹ã™ã“ã¨ãŒå¦¥å½“ã«ãªã£ã¦ã„ã‚‹ç†ç”±ã‚’ãªã‚‹ã¹ãåˆ†ã‹ã‚Šã‚„ã™ãè§£èª¬ã™ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ã¦ã„ã¾ã™ã€‚ ã¯ã˜ã‚ã« 1. ã‚³ã‚¹ãƒˆ 2. ã‚³ãƒ³ãƒ†ãƒŠ 3. ã‚¨ã‚³ã‚·ã‚¹ãƒ†ãƒ 4. ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒ»å®‰å®šæ€§ 5. ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ 6. ãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒˆ WindowsãŒå¥½ã¾ã—ã„ã‚±ãƒ¼ã‚¹ ã¾ã¨ã‚ ã¯ã˜ã‚ã« .NET Cor
moritata 2025/09/28
linux

ã‚µãƒ¼ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ„ãƒ¼ãƒ«

tech

é‹ç”¨

windows

security

ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹

server
ãƒªãƒ³ã‚¯
NGINX Introduces Native Support for ACME ProtocolÂ â€“ NGINX Community Blog
We are very excited to announce the preview release of ACME support in NGINX. The implementation introduces a new module ngx_http_acme_module that provides built-in directives for requesting, installing, and renewing certificates directly from NGINX configuration. The ACME support leverages our NGINX-Rust SDKÂ and is available as a Rust-based dynamic moduleÂ for both NGINX Open Source users as well
moritata 2025/08/14
nginx

server

blog

security

ã‚µãƒ¼ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

acme

ssl
ãƒªãƒ³ã‚¯
ALPACA Attack
Paper Q&A How to ALPN/SNI Updates! News A big reevaluation of TLS libraries, TLS application servers, and a new internet scan by Jannik HÃ¶lling is now available in the Updates section! ALPACA will be presented at Black Hat USA 2021, USENIX Security Symposium 2021, and Real Word Crypto Symposium 2022! Recommended articles: Ars Technica (Dan Goodin), Golem (Hanno BÃ¶ck; German) Introduction TLS is an
moritata 2021/06/10
application

server

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚µãƒ¼ãƒ

æš—å·

scp

crypt
ãƒªãƒ³ã‚¯
å¾³ä¸¸æµ©ã®æ—¥è¨˜: SSRF(Server Side Request Forgery)å¾¹åº•å…¥é–€
SSRF(Server Side Request Forgery)ã¨ã„ã†è„†å¼±æ€§ãªã„ã—æ”»æ’ƒæ‰‹æ³•ãŒæœ€è¿‘æ³¨ç›®ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã¯ã€ã“ã“3ãƒ¶æœˆã«SSRFã«ã¤ã„ã¦è¨€åŠã•ã‚ŒãŸè¨˜äº‹ã§ã™ã€‚ EC2ä¸Šã®AWS CLIã§ä½¿ã‚ã‚Œã¦ã„ã‚‹169.254ã«ã¤ã„ã¦ SSRFè„†å¼±æ€§ã‚’åˆ©ç”¨ã—ãŸGCE/GKEã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã¸ã®æ”»æ’ƒä¾‹ SSRFã‚’åˆ©ç”¨ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¹—ã£å–ã‚Š ã€ŒCODE BLUE 2018ã€å‚åŠ ãƒ¬ãƒãƒ¼ãƒˆï¼ˆå²©é–“ç·¨ï¼‰ ã“ã®ã€Œç©ºå‰ã®SSRFãƒ–ãƒ¼ãƒ ã€ã«ä¾¿ä¹—ã—ã¦ã€SSRFã¨ã„ã†æ”»æ’ƒæ‰‹æ³•ãŠã‚ˆã³è„†å¼±æ€§ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ SSRFæ”»æ’ƒã¨ã¯ SSRFæ”»æ’ƒã¨ã¯ã€æ”»æ’ƒè€…ã‹ã‚‰ç›´æŽ¥åˆ°é”ã§ããªã„ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®ä¸€ç¨®ã§ã™ã€‚ä¸‹å›³ã«SSRFæ”»æ’ƒã®æ§˜åã‚’ç¤ºã—ã¾ã™ã€‚ æ”»æ’ƒè€…ã‹ã‚‰ã¯ã€å…¬é–‹ã‚µãƒ¼ãƒãƒ¼ï¼ˆ203.0.113.2ï¼‰ã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ãŒã€å†…éƒ¨ã®ã‚µãƒ¼ãƒãƒ¼ï¼ˆ192.168.0.5ï¼‰ã¯ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã§éš”é›¢ã•ã‚Œã¦ã„ã‚‹ãŸã‚å¤–éƒ¨ã‹ã‚‰ç›´æŽ¥
moritata 2018/12/06
ã‚µãƒ¼ãƒ

php

server

security
ãƒªãƒ³ã‚¯
Apache ã®è„†å¼±æ€§å¯¾ç–ï¼šApache Killer å¯¾ç– | ç©ºæ¨¡æ§˜
Apache Killer ãŒå±é™ºãã†ãªã®ã§å¯¾ç–ã‚’å®Ÿæ–½ã—ãŸã€‚ â—Apache Killer ã¨ã¯ GET ã‚‚ã—ãã¯ HEAD ãƒ¡ã‚½ãƒƒãƒ‰ã§ã€å¤šæ•°ã®RangeæŒ‡å®šã‚’å«ã‚€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹ã“ã¨ã§ã€ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã‚·ã‚¹ãƒ†ãƒ ã®ãƒ¡ãƒ¢ãƒªã¨CPUã‚’æ¶ˆè²»ã•ã›ã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ 8æœˆ20æ—¥ã«å…¬é–‹ã•ã‚ŒãŸApacheã®è„†å¼±æ€§ï¼ˆè‹±èªžï¼‰ã‚’ã¤ã„ãŸã‚‚ã®ã§ã€ç¾åœ¨ãƒ‘ãƒƒãƒã¯ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ãªã„ï¼ˆä½†ã—ã€8æœˆ25æ—¥æ™‚ç‚¹ã§ Apache é–‹ç™ºãƒãƒ¼ãƒ ãŒã€48æ™‚é–“ä»¥å†…ã«ãƒ‘ãƒƒãƒã‚’ãƒªãƒªãƒ¼ã‚¹ã™ã‚‹ã¨ç™ºè¡¨ã—ã¦ã„ã‚‹ï¼‰ã€‚ â—æ”»æ’ƒã‚’å—ã‘ã‚‹ã¨å…·ä½“çš„ã«ã©ã†ãªã‚‹ã‹ ä»®æƒ³ OS ã§ç«‹ã¦ãŸã‚µãƒ¼ãƒã«æ”»æ’ƒã‚’è¡Œã„ã€ã©ã†ã„ã†äº‹è±¡ãŒç™ºç”Ÿã™ã‚‹ã‹å®Ÿé¨“ã—ã¦ã¿ãŸ #ã€€Ubuntu Â 10.0.4 LTS #ã€€Apache 2.2.14 æ”»æ’ƒãƒ‘ã‚±ãƒƒãƒˆã¯ä»¥ä¸‹ã®ç”»åƒã®é€šã‚Šã€Range ãƒ˜ãƒƒãƒ€ãƒ¼ã«è¤‡æ•°ã®æŒ‡å®šã‚’è¡Œã†ã¨ã„ã†å˜ç´”ãªã‚‚ã®ã€‚å°šã€æ”»æ’ƒã‚³ãƒ¼ãƒ‰ã‚’è¦‹ã‚‹ã¨ perl ã® fork ã‚’åˆ©ç”¨ã—ã¦ä¸¦è¡Œã§è¤‡æ•°ã®
moritata 2011/08/30
Apache

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

Server

ApacheKiller

å¯¾ç–
ãƒªãƒ³ã‚¯
1