[B! ssrf] shoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sho id:sho

ssrfã«é–¢ã™ã‚‹shoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSRFå¯¾ç–ã¨ã—ã¦Amazonã‹ã‚‰ç™ºè¡¨ã•ã‚ŒãŸIMDSv2ã®åŠ¹æžœã¨é™ç•Œ
ã‚µãƒžãƒª Capital Oneã‹ã‚‰ã®SSRFæ”»æ’ƒã«ã‚ˆã‚‹å¤§è¦æ¨¡ãªæƒ…å ±æ¼ãˆã„ç‰ã‚’ã†ã‘ã¦ã€Amazonã¯ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã™ã‚‹ä¿è·ç–ã¨ã—ã¦Instance Metadata Service (IMDSv2) ã‚’ç™ºè¡¨ã—ãŸã€‚æœ¬ç¨¿ã§ã¯ã€IMDSv2ãŒç”Ÿã¾ã‚ŒãŸèƒŒæ™¯ã€ä½¿ã„æ–¹ã€åŠ¹æžœã€é™ç•Œã‚’èª¬æ˜Žã—ãŸä¸Šã§ã€SSRFå¯¾ç–ã«ãŠã‘ã‚‹IMDSv2ã®ä½ç½®ã¥ã‘ã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹ã€‚ SSRFã¨ã¯ SSRFã¯ã€ä¸‹å›³ã®ã‚ˆã†ã«ã€Œå¤–éƒ¨ã‹ã‚‰ç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã€ã«å¯¾ã—ã¦ã€å…¬é–‹ã‚µãƒ¼ãƒãƒ¼ãªã©ã‚’è¸ã¿å°ã¨ã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ”»æ’ƒæ–¹æ³•ã§ã™ã€‚SSRF(Server Side Request Forgery)ã®è©³ç´°ã«ã¤ã„ã¦ã¯éŽåŽ»è¨˜äº‹ã€ŒSSRF(Server Side Request Forgery)å¾¹åº•å…¥é–€ã€ã‚’å‚ç…§ãã ã•ã„ã€‚ æœ€çµ‚çš„ãªæ”»æ’ƒç›®æ¨™ã¯å¤šæ§˜ã§ã™ãŒã€è¿‘å¹´å•é¡Œã«ãªã£ã¦ã„ã‚‹ã®ãŒã€ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãƒ»ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’å–å¾—ã™ã‚‹
sho 2019/12/09
ã‚„ã£ã±å¼•ãç¶šãGopherã¯ä½¿ãˆã‚‹ã®ã‹ã€‚ã“ã‚Œã¯AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã§ã¯ãªã„ã¨ã„ã†èªè˜ãªã‚“ã ã‚ã†ãªã€‚

security

ssrf

amazon

gopher
ãƒªãƒ³ã‚¯
Add defense in depth against open firewalls, reverse proxies, and SSRF vulnerabilities with enhancements to the EC2 Instance Metadata Service | Amazon Web Services
AWS Security Blog Add defense in depth against open firewalls, reverse proxies, and SSRF vulnerabilities with enhancements to the EC2 Instance Metadata Service July 27, 2021: Weâ€™ve updated the link to the 2019 re:Invent session on this topic. Since it first launched over 10 years ago, the Amazon EC2 Instance Metadata Service (IMDS) has helped customers build secure and scala ble applications. The I
sho 2019/11/20
security

ssrf

aws
ãƒªãƒ³ã‚¯
SSRFåŸºç¤Ž
OWASP Night 2019-09-18 / OWASP Japan
sho 2019/09/19
ã†ãˆã‡ã‡ã€‚ã‚¿ã‚¤ãƒˆãƒ«è©æ¬ºã w ç›¸å¤‰ã‚ã‚‰ãšè‰¯ãæ°—ã¥ããªãã€‚

security

ssrf

gopher
ãƒªãƒ³ã‚¯
SSRFæ”»æ’ƒã«ã‚ˆã‚‹Capital Oneã®å€‹äººæƒ…å ±æµå‡ºã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2019å¹´7æœˆ29æ—¥ã€ç±³é‡‘èžå¤§æ‰‹ Capital Oneã¯ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚Š1å„„äººã‚’è¶…ãˆã‚‹å€‹äººæƒ…å ±ãŒæµå‡ºã—ãŸã¨ç™ºè¡¨ã—ã¾ã—ãŸã€‚WAFã®è¨å®šãƒŸã‚¹ã«èµ·å› ã—ã¦ã€Server Side Request Forgeryï¼ˆSSRFï¼‰æ”»æ’ƒã‚’è¨±ã—ãŸã“ã¨ã«ã‚ˆã‚Šæƒ…å ±ã‚’ç›—ã¾ã‚ŒãŸã¨è¦‹ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ Capital Oneã«ã‚ˆã‚‹å…¬å¼ç™ºè¡¨ Information on the Capital One Cyber Incidentï¼ˆç±³å›½å‘ã‘ï¼‰ Information on the Capital One Cyber Incidentï¼ˆã‚«ãƒŠãƒ€å‘ã‘ï¼‰ Frequently Asked Questions ï¼ˆï¼‘ï¼‰å½±éŸ¿ç¯„å›² å½±éŸ¿ãŒåŠã‚“ã äººæ•°ã®å†…è¨³ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ ç±³å›½ ç´„1å„„äºº ã‚«ãƒŠãƒ€ ç´„600ä¸‡äºº ç™ºè¡¨æ™‚ç‚¹ã§Capital Oneã¯æµå‡ºã—ãŸæƒ…å ±ãŒå¤–éƒ¨ã¸å‡ºå›žã‚‹ã“ã¨ã‚„ã€è©æ¬ºã¸ã®ä½¿ç”¨ã¯ç¢ºèªã—ã¦ã„ãªã„ã€‚
sho 2019/08/06
SSRFã‚’ä½¿ã£ãŸçŠ¯ç½ªã‚’èª¬æ˜Žã™ã‚‹ã®ã«è‰¯ã„äº‹ä¾‹ã€‚ãã‚‚ãã‚‚ã“ã®çŠ¯äººã€ãšã„ã¶ã‚“è„‡ãŒç”˜ã„ãªãã€‚OSINTã®è§£èª¬ã¨ã—ã¦ã‚‚è‰¯ã•ãã†ã€‚

security

ssrf
ãƒªãƒ³ã‚¯
å¾³ä¸¸æµ©ã®æ—¥è¨˜: SSRF(Server Side Request Forgery)å¾¹åº•å…¥é–€
SSRF(Server Side Request Forgery)ã¨ã„ã†è„†å¼±æ€§ãªã„ã—æ”»æ’ƒæ‰‹æ³•ãŒæœ€è¿‘æ³¨ç›®ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã¯ã€ã“ã“3ãƒ¶æœˆã«SSRFã«ã¤ã„ã¦è¨€åŠã•ã‚ŒãŸè¨˜äº‹ã§ã™ã€‚ EC2ä¸Šã®AWS CLIã§ä½¿ã‚ã‚Œã¦ã„ã‚‹169.254ã«ã¤ã„ã¦ SSRFè„†å¼±æ€§ã‚’åˆ©ç”¨ã—ãŸGCE/GKEã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã¸ã®æ”»æ’ƒä¾‹ SSRFã‚’åˆ©ç”¨ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¹—ã£å–ã‚Š ã€ŒCODE BLUE 2018ã€å‚åŠ ãƒ¬ãƒãƒ¼ãƒˆï¼ˆå²©é–“ç·¨ï¼‰ ã“ã®ã€Œç©ºå‰ã®SSRFãƒ–ãƒ¼ãƒ ã€ã«ä¾¿ä¹—ã—ã¦ã€SSRFã¨ã„ã†æ”»æ’ƒæ‰‹æ³•ãŠã‚ˆã³è„†å¼±æ€§ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ SSRFæ”»æ’ƒã¨ã¯ SSRFæ”»æ’ƒã¨ã¯ã€æ”»æ’ƒè€…ã‹ã‚‰ç›´æŽ¥åˆ°é”ã§ããªã„ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®ä¸€ç¨®ã§ã™ã€‚ä¸‹å›³ã«SSRFæ”»æ’ƒã®æ§˜åã‚’ç¤ºã—ã¾ã™ã€‚ æ”»æ’ƒè€…ã‹ã‚‰ã¯ã€å…¬é–‹ã‚µãƒ¼ãƒãƒ¼ï¼ˆ203.0.113.2ï¼‰ã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ãŒã€å†…éƒ¨ã®ã‚µãƒ¼ãƒãƒ¼ï¼ˆ192.168.0.5ï¼‰ã¯ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã§éš”é›¢ã•ã‚Œã¦ã„ã‚‹ãŸã‚å¤–éƒ¨ã‹ã‚‰ç›´æŽ¥
sho 2018/12/05
security

ssrf
ãƒªãƒ³ã‚¯
SSRFã‚’åˆ©ç”¨ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¹—ã£å–ã‚Š
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
sho 2018/10/23
ã“ã‚Œã¯é¢ç™½ã„ãªãã€‚

security

ssrf

cybozu
ãƒªãƒ³ã‚¯
1