[B! security] H1ROã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

H1RO id:H1RO

securityã«é–¢ã™ã‚‹H1ROã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç¬¬ï¼•ï¼™ï¼•å·ã‚³ãƒ©ãƒ ï¼šã€Œç§ãŸã¡ã¯ãªãœãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä»˜ãï½šï½‰ï½ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ¡ãƒ¼ãƒ«æ·»ä»˜ã™ã‚‹ã®ã‹ã€ | ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯ç ”ç©¶ä¼š
ç¬¬ï¼•ï¼™ï¼•å·ã‚³ãƒ©ãƒ ï¼šä¸ŠåŽŸ å“²å¤ªéƒŽ å‰¯ä¼šé•·ï¼ˆç«‹å‘½é¤¨å¤§å¦ã€€æƒ…å ±ç†å·¥å¦éƒ¨ã€€æ•™æŽˆï¼‰ é¡Œï¼šã€Œç§ãŸã¡ã¯ãªãœãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä»˜ãï½šï½‰ï½ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ¡ãƒ¼ãƒ«æ·»ä»˜ã™ã‚‹ã®ã‹ã€ çš†ã•ã‚“ã®çµ„ç¹”ã§ã‚‚ã€é‡è¦ãªæƒ…å ±ã‚’å«ã‚€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ¡ãƒ¼ãƒ«ã§å¤–éƒ¨ã«é€ä»˜ã™ã‚‹éš›ã«ã€ãã®æ¼æ´©é˜²æ¢ç‰ã®ãŸã‚ã€ä½•ã‚‰ã‹ã®ãƒ«ãƒ¼ãƒ«ã‚’è¨ã‘ã¦ãŠã‚‰ã‚Œã‚‹ã¨ã“ã‚ãŒå¤šã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ãã®ä¸ã§éžå¸¸ã«ã‚ˆãè¦‹ã‹ã‘ã‚‹æ–¹å¼ã«ã€ã“ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚ â‘ æ·»ä»˜ã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚ã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã£ã¦æš—å·åŒ–ï½šï½‰ï½ãƒ•ã‚¡ã‚¤ãƒ«ã«ã™ã‚‹ã€‚ â‘¡ãã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ¡ãƒ¼ãƒ«æ·»ä»˜ã—ã¦é€ä¿¡ã™ã‚‹ã€‚ â‘¢ç¶šã„ã¦ãã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãƒ¡ãƒ¼ãƒ«é€ä¿¡ã™ã‚‹ã€‚ ç§ãŒè¦‹èžãã™ã‚‹é™ã‚Šã€å¤šãã®æ—¥æœ¬ä¼æ¥ã‚„çµ„ç¹”ãŒã“ã®ã‚ˆã†ãªãƒ•ã‚¡ã‚¤ãƒ«é€ä¿¡æ³•ã‚’ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ç–ã¨ä¿¡ã˜ã¦ã€å†…è¦ã§ç¾©å‹™ã¥ã‘ãŸã‚Šã€è‡ªå‹•åŒ–ã‚·ã‚¹ãƒ†ãƒ ã‚’å°Žå…¥ã—ãŸã‚Šã—ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã“ã®ç¨®ã®ãƒ¡ãƒ¼ãƒ«ã€å°‘ã—è€ƒãˆã‚‹ã ã‘ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦³ç‚¹ã‹ã‚‰ã¯åŠ¹æžœãŒãªã„ã“ã¨ã¯æ˜Žã‚‰ã‹ã§ã™ã€‚åŒä¸€çµŒè·¯ã§ãƒ•ã‚¡ã‚¤ãƒ«ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é€
H1RO 2019/12/22
â€œã„ãšã‚Œã«ã›ã‚ˆã€ï¼°ï¼°ï¼¡ï¼°æ–¹å¼ã§ã¯ã»ã¨ã‚“ã©ãƒªã‚¹ã‚¯ãŒè»½æ¸›ã•ã‚Œã¦ãŠã‚‰ãšã€ç”Ÿç”£æ€§ä½Žä¸‹ã ã‘ãŒèµ·ãã¦ã„ã‚‹ã“ã¨ã¯ã‚‚ã†å°‘ã—èªçŸ¥ãŒåºƒãŒã£ã¦ã‚‚è‰¯ã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™â€

security

ãƒ¡ãƒ¼ãƒ«
ãƒªãƒ³ã‚¯
æµ·å¤–ã‹ã‚‰DDoSæ”»æ’ƒã—ã¦ãã‚‹ã‚«ãƒ¡ãƒ©ã‚’ã‚·ãƒ£ãƒƒãƒˆãƒ€ã‚¦ãƒ³ã—ã¦ã—ã¾ã†ã®ã¯ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãªã®ã‹?è‡ªé¦–ã—ã¦ã¿ãŸãŒè¿”ç”ãŒãªã„!ãã—ã¦æ³¥æ²¼ã®DDoSã¸
æµ·å¤–ã‹ã‚‰DDoSæ”»æ’ƒã—ã¦ãã‚‹ã‚«ãƒ¡ãƒ©ã‚’ã‚·ãƒ£ãƒƒãƒˆãƒ€ã‚¦ãƒ³ã—ã¦ã—ã¾ã†ã®ã¯ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãªã®ã‹?è‡ªé¦–ã—ã¦ã¿ãŸãŒè¿”ç”ãŒãªã„!ãã—ã¦æ³¥æ²¼ã®DDoSã¸ é¡›æœ«ã‚’è¨˜éŒ²ã—ãŸé›‘å¤šãªãƒã‚°ã«ãªã£ã¦ã„ã‚‹ã®ã§æ•´ç†ã•ã‚Œã¦ã„ãªã„éƒ¨åˆ†ãŒå¤šã€…ã‚ã‚Šã¾ã™. 2ä¸‡æ–‡å—ã‚’è¶…ãˆã¦ã„ã‚‹ã®ã§æ°—åˆã‚’å…¥ã‚Œã¦èªã‚€ã‹é©å½“ã«èªã¿é£›ã°ã—ã¦ãã ã•ã„. ã“ã‚Œã§ã‚‚ä¸è¦ãªèª¿æŸ»ãƒ‡ãƒ¼ã‚¿ã‚’çœã„ãŸã‚Šã—ã¦ã‚¹ãƒªãƒ åŒ–ã—ãŸã®ã§ã™ãŒè¶…å·¨å¤§åŒ–ã—ã¦ã—ã¾ã„ã¾ã—ãŸ. 2018-11-07ã‹ã‚‰è‡ªå®…ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®èª¿åãŒæ‚ªã™ãŽã‚‹ è‡ªå®…ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãŒæ»ã‚“ã§ã„ã¾ã—ãŸ. J:COMã®å›žç·šç¾åœ¨98%ãƒ‘ã‚±ãƒƒãƒˆãƒã‚¹ã™ã‚‹ã¨ã„ã†çŠ¶æ…‹ã«ãªã£ã¦ã„ã¾ã™ pic.twitter.com/Vfe0O3p5j2 â€” ã‚¨ãƒŒãƒ¦ãƒ« (@ncaq) 2018å¹´11æœˆ7æ—¥ ä»Šæ—¥ã®ç§ 14æ™‚ ã‚µãƒ¼ãƒãŒè½ã¡ã¦ã„ã‚‹ã“ã¨ãŒé€šçŸ¥ã•ã‚Œã‚‹,ã‚µãƒ¼ãƒã«DHCPãŒã‚¢ãƒ‰ãƒ¬ã‚¹æŒ¯ã£ã¦ãã‚Œã¦ãªã„ 15æ™‚ ucomãŒã¤ã„ã«æ»ã‚“ã ã‹ã¨æ€ã„jcomã«ç§»è¡Œã™ã‚‹ 1
H1RO 2018/11/18
security

DDoS
ãƒªãƒ³ã‚¯
ç†è§£ã—ã¦ã‚‹ã¤ã‚‚ã‚Šã® SSL/TLS ã§ã‚‚ã€ã‚‚ã£ã¨ç†è§£ã—ãŸã‚‰é¢ç™½ã‹ã£ãŸè©± Â· ã‘ã‚“ã”ã®ãŠå±‹æ•·
apache ã‚„ nginx ã®è¨å®šã‚’ã—ãŸã“ã¨ãŒã‚ã‚Œã°ä»¥ä¸‹ã®æ§˜ãªè¡Œã‚’è¦‹ãŸã“ã¨ãŒã‚ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚(â€» ä¸‹è¨˜ã¯ nginx ã®è¨å®šã€‚apache ã®å ´åˆã¯ SSLCipherSuite ã§ã™ã€‚) ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ã“ã‚ŒãŒæš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’æŒ‡å®šã—ã¦ã„ã‚‹ç®‡æ‰€ã§ã™ã€‚ãã—ã¦ã“ã®éƒ¨åˆ†ã€ã‚ã‘ã®ã‚ã‹ã‚‰ãªã„æ–‡å—åˆ—ã®ç¾…åˆ—ãªã®ã§ã™ã”ãå–ã£ã¤ãã«ããã¦ä½•ã‚’æŒ‡å®šã—ãŸã‚‰ã„ã„ã‹ã‚ã‹ã‚‰ãªã„ã®ã§ã€ã‚³ãƒ”ãƒšã—ã¦ã—ã¾ã†äººã‚‚å¤šã„ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã‹ãã„ã†ç§ã‚‚æ•°å¹´å‰ã«è¶£å‘³ã§ TLS å¯¾å¿œã® Web ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ãŸæ™‚ã¯ã‚³ãƒ”ãƒšã§æ¸ˆã¾ã›ã¦ã„ã¾ã—ãŸã€‚ã“ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãª OpenSSL ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦å¯¾å¿œã—ã¦ã„ã‚‹ä¸€è¦§ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ openssl ciphers -v AES128-SH
H1RO 2018/04/15
ssl

security

PC

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
Wiresharkã§å…¬è¡†ç„¡ç·šLANã®ãƒ¤ãƒã•ã‚’ç¢ºèªã—ã¦ã¿ãŸ
ç§ï¼ˆ@honeniqï¼‰ã®å€‹äººãƒ–ãƒã‚°ã§ã™ã€‚æ—¥ã€…ã®ç”Ÿæ´»ã®ä¸ã§æ„Ÿã˜ãŸè«¸ã€…ã®ã“ã¨ã‹ã‚‰ã€ äººã•ã¾ã«ãŠè¦‹ã›ã§ãã‚‹ã‚ˆã†ãªä¸Šæ¾„ã¿éƒ¨åˆ†ã‚’æŠ½å‡ºã—ã¦æŠ•ç¨¿ã—ã¦ã„ã¾ã™ã€‚ å‰ç½®ã ã“ã“æ•°å¹´ã®æºå¸¯ã‚ãƒ£ãƒªã‚¢ã‚„ã‚³ãƒ³ãƒ“ãƒ‹æ¥ç•Œã®é ‘å¼µã‚Šã§ã€ç”ºä¸ã«å…¬è¡†ç„¡ç·šLANã®APãŒæº¢ã‚Œã¦ã„ã¾ã™ãŒã€ã‚ã‚Œã£ã¦å®‰å…¨ãªã‚“ã§ã—ã‚‡ã†ã‹ï¼Ÿç›—è´ã•ã‚Œã‚‹çš„ãªè¦³ç‚¹ã§ã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç„¡ã—ã®ãƒŽãƒ¼ã‚¬ãƒ¼ãƒ‰APã¯è«–å¤–ã¨ã—ã¦ã‚‚ã€ å¥‘ç´„è€…ã«ã ã‘WPAã‚ãƒ¼ã‚’æ•™ãˆã‚‹((ã‘ã©ã€åˆ©ç”¨è€…ãŒå¤šã™ãŽã¦å…¬é–‹ã—ã¦ã„ã‚‹ã‚‚åŒç„¶ã®))ã‚¿ã‚¤ãƒ— APã«ã¯ã‚ãƒ¼ç„¡ã—ã§å…¥ã‚‹ã“ã¨ãŒã§ãã€Webã‚¢ã‚¯ã‚»ã‚¹ã‚’ã™ã‚‹ã¨èªè¨¼ãƒšãƒ¼ã‚¸ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã‚¿ã‚¤ãƒ— ã‚ˆãè¦‹ã‹ã‘ã‚‹ã“ã®2ã‚¿ã‚¤ãƒ—ã‚‚ã‚„ãƒ¤ãƒãã†ã€‚ è©¦ã—ã¦ã¿ã‚‹å‰ã®èªè˜ ç„¡ç·šã§ã‚ã‚‹ä»¥ä¸Šã¯ã€è‡ªåˆ†ãŒé£›ã°ã—ãŸé›»æ³¢ã¯èª°ã§ã‚‚å‚å—ã§ãã‚‹ã€‚ã˜ã‚ƒã‚æš—å·åŒ–ã—ã¦ä¸èº«ãŒåˆ†ã‹ã‚‰ãªã„ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€ã£ã¦ãªã‚‹ã‘ã©ã€1ã¤ç›®ã®ã‚¿ã‚¤ãƒ—ã¿ãŸã„ã«ä¸ç‰¹å®šå¤šæ•°ã®äººãŒåŒã˜WPAã‚ãƒ¼ã‚’çŸ¥ã£ã¦ã„ã‚‹å ´åˆã€æš—å·åŒ–ã—ã¦ã‚‚ã‚ã‚“ã¾ã‚Šæ„å‘³ãª
H1RO 2018/04/15
wireshark

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

Wi-Fi

security
ãƒªãƒ³ã‚¯
Wiresharkã§SSLé€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ãŒä¸–é–“ã‚’è³‘ã‚ã›ã¦ã„ã¾ã™ãŒã€è‰²ã€…ã¨ä¹—ã‚Šé…ã‚Œã¦ã—ã¾ã£ãŸæ„ŸãŒã‚ã‚‹ã®ã§ã€ã‚†ã‚‹ã‚†ã‚‹ã¨è½ã¡ç©‚æ‹¾ã„ã‚’ã—ã‚ˆã†ã‹ã¨æ€ã„ã¾ã™ã€‚ Heartbleedã§ç§˜å¯†éµã‚’æ‰‹ã«å…¥ã‚ŒãŸã‚‰SSLé€šä¿¡ã®ä¸èº«å…¨éƒ¨è¦‹ãˆã¡ã‚ƒã†ã˜ã‚ƒã‚“!! ã¨ã„ã†äº‹æ…‹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ãªã‚“ã¨ãªãç†è«–çš„ã«ãã†ã ã‚ã†ãªã¨åˆ†ã‹ã‚‹ã‚‚ã®ã®ã‚¤ãƒžã‚¤ãƒå…·ä½“çš„ãªæ‰‹é †ãŒåˆ†ã‹ã‚‰ãªã„ã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¨ã—ã¦ã€æ‰‹å…ƒã«ã‚µãƒ¼ãƒã®ç§˜å¯†éµã¨ã€SSLé€šä¿¡ã‚’ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸpcapãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ãã«ã€Wiresharkã§ã©ã‚“ãªæ„Ÿã˜ã§SSLé€šä¿¡ã‚’ã€Œã»ã©ãã€ã®ã‹â€¦â€¦ã¨ã„ã†å…·ä½“çš„ãªæ‰‹é †ã‚’ã€ãƒãƒžã‚Šæ‰€ã‚’å«ã‚ã¦ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã‹ã€ç§è‡ªèº«ãŒãƒãƒžã£ãŸã®ã§è‡ªåˆ†ç”¨ãƒ¡ãƒ¢ã§ã™ãªã€‚ãªãŠã“ã®æ–‡æ›¸ã§ã¯"SSL"ã¨ã ã‘è¨˜è¿°ã—ã€TLSã¯ç„¡è¦–ã—ã¦ã„ã¾ã™ã€‚ å‰ææ¡ä»¶ ã¨ã‚Šã‚ãˆãšä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã®æ¤œè¨¼ç’°å¢ƒã§è©¦ã—ã¾ã—ãŸã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ èª¬æ˜Ž ãƒ›ã‚¹ãƒˆO
H1RO 2018/04/15
wireshark

security

PC

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

Wi-Fi
ãƒªãƒ³ã‚¯
1