[B! Shibuya.xss] Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Itisango id:Itisango

Shibuya.xssã«é–¢ã™ã‚‹Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Shibuya.xss ã§è©±ã—ã¦ãã¾ã—ãŸ - nothing but trouble
ã™ã”ã„é¢ç™½ã‹ã£ãŸã€‚ä¼šã„ãŸã‹ã£ãŸäººã«ã‚‚æ²¢å±±ä¼šãˆãŸã—ã€‚ é©å½“ãªæ„Ÿã˜ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ãŒã€ãã“ãã“åå¿œãŒã‚ã£ã¦å¬‰ã—ã‹ã£ãŸã€‚ [Shibuya.xss] ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°ãƒã‚¿äºŒæœ¬ View more PowerPoint from send_
Itisango 2012/04/08
shibuya.xss

javascript

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

event

slide

ã‚¹ãƒ©ã‚¤ãƒ‰

2012å¹´
ãƒªãƒ³ã‚¯
Shibuya.XSSã¾ã¨ã‚
ONETOPIã€Œmixiã€ @mixi_1topi ãƒŸã‚¯ã‚·ã‚£ç¤¾ã®ã‚³ãƒ©ãƒœãƒ«ãƒ¼ãƒ ã§æœ¬æ—¥ Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ #shibuyaxss ã¨ã„ã†é–‹ç™ºè€…å‘ã‘ã®ã‚¤ãƒ™ãƒ³ãƒˆãŒé–‹å‚¬ã•ã‚Œã‚‹ã‚ˆã†ã§ã™ã€‚æ—¢ã«å‹Ÿé›†ã¯ã€†åˆ‡ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒ ï¼šShibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ http://t.co/c4aJhtND #1tp 2012-04-04 16:31:18
Itisango 2012/04/08
shibuya.xss

xss

security

togetter

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

event

ã¾ã¨ã‚

Twitter

2012å¹´
ãƒªãƒ³ã‚¯
Shibuya.XSSã‚„ã£ã¦ã¾ã—ãŸ - ãªã‚“ã‹:ã‹ã‚“ãŒãˆã¦-6
åƒ•ã¯æ ªå¼ä¼šç¤¾ãƒŸã‚¯ã‚·ã‚£ã§ã€ã‚¤ãƒ™ãƒ³ãƒˆã®ãŠæ‰‹ä¼ã„çš„ãªã“ã¨ã‚‚ã‹ã‚‰ã‚“ã ã‚Šã—ã¦ã‚‹ç®¡ç†è·ãªã‚“ã§ã™ãŒã€Shibuya Perl Mongersãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#16ã¨ã‹ã€ã‚¤ãƒ™ãƒ³ãƒˆã®ä¼šå ´æä¾›ã§Shibuya.pmã‚’ãŠæ‰‹ä¼ã„ã—ãŸã“ã¨ãŒã‚ã‚Šã€‚ãã‚“ãªã”ç¸ã‚‚ã‚ã£ã¦ã€ãã®ã¨ãä»•åˆ‡ã£ã¦ãã ã•ã£ãŸtakesakoã•ã‚“ã‹ã‚‰ã€ ã€Œã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã•ã‚“ã¨ã€ä»Šåº¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢ä¿‚ã§Shibuya.XSSã£ã¦ã®è€ƒãˆã¦ã‚‹ã‚“ã§ã™ã‚ˆã€ ã¨ã„ã†ãŠè©±ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ã“ã‚Œã¯é¢ç™½ãã†â€¦ ã¡ãªã¿ã«Perl Mongersã£ã¦ã„ã†åå‰ã§perlè¨€èªžã«ã‹ã‚‰ã‚ã¦é›†ã¾ã£ãŸã‚Šè©±ã—ãŸã‚ŠéŠã‚“ã ã‚Šã¿ãŸã„ãªã‚°ãƒ«ãƒ¼ãƒ—ãŒä¸–ç•Œä¸ã«ã‚ã£ã¦ã€Shibuya Perl Mongersã£ã¦ã®ã¯ãã®ã²ã¨ã¤ã§ã€ã¡ãªã¿ã«ãŸã¶ã‚“ãã‚“ãªã€Œä¿ºãŸã¡ã‚·ãƒ–ãƒ¤ã ãœ!ã€ã£ã¦ã®ã¯ãªãã¦ãƒã‚¿è¦ç´ ã‚‚ã‚ã£ã¦ã€‚ ã§ã€Perl Mongersã‚’ç•¥ã—ã¦pmãªã‚“ã§ã™ãŒã€pmã£ã¦ã®ã¯Perlè¨€èªžã§æ‹¡å¼µãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’æ›¸ã
Itisango 2012/04/08
shibuya.xss

security

ATND

2012å¹´
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 é–‹å‚¬ã—ã¾ã—ãŸã€‚ - è‘‰ã£ã±æ—¥è¨˜
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1ã‚’é–‹å‚¬ã—ã¾ã—ãŸã€‚ å‚åŠ ã—ã¦é ‚ã„ãŸã¿ãªã•ã‚“ã€ç™ºè¡¨ã—ã¦ãã ã•ã£ãŸã¿ãªã•ã‚“ã€ãã—ã¦ä¼šå ´ã‚’å¿«ããŠè²¸ã—ãã ã•ã£ãŸã†ãˆã«ãƒ“ãƒ¼ãƒ«ã¨ãƒ”ã‚¶ã¾ã§ã”ç”¨æ„ãã ã•ã£ãŸmixiã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ç§ã®ç™ºè¡¨ã—ãŸè³‡æ–™ã‚’ç½®ã„ã¦ãŠãã¾ã™ã€‚ MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š æ¬¡å›žäºˆå®šã¯ã¾ã£ãŸãæœªå®šã§ã™ãŒã€ã‚‚ã—é–‹å‚¬ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã—ãŸã‚‰ã¾ãŸã¿ãªã•ã‚“ã®ã”å‚åŠ ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚
Itisango 2012/04/06
Shibuya.xss

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

hasegawayosuke

JavaScript
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
Itisango 2012/04/06
shibuya.xss

DOM

javascript

api

xss

security

jquery

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTML5

web
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 ã«è¡Œã£ã¦ããŸ - ã™ãŽã‚ƒãƒ¼ã‚“ãƒ¡ãƒ¢
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 : ATND å¤§äººæ°—ã‚¤ãƒ™ãƒ³ãƒˆã«ä½•æ•…ã‹3ç•ªç›®ã§ç”³ã—è¾¼ã‚€ã“ã¨ãŒå‡ºæ¥ã¦ã„ãŸã®ã§è¡Œã£ã¦ããŸã€‚ã¡ã‚‡ã£ã¨æ›¸ãã‚ã‘ã«ã¯ã„ã‹ãªã„ã‚ˆã†ãªè©±ã‚„æ€–ã„è©±ã‚‚ã‚ã£ãŸã‚Šã—ã¦æ¥½ã—ã‹ã£ãŸã€‚ã¨ã‚Šã‚ãˆãšTwitterã§ã®å‘Ÿãã ã‘ãƒ¡ãƒ¢ä»£ã‚ã‚Šã«æ®‹ã—ã¦ãŠãã€‚ #shibuyaxss ã‚ã‚¿ãƒ¼ @ æ ªå¼ä¼šç¤¾ãƒŸã‚¯ã‚·ã‚£(mixi, Inc.)ãªã† URL 2012-04-04 18:59:31 via ãƒã‚±ã‚¿ãƒƒãƒï¼ˆloctouchï¼‰ MAP ã€ŒãƒŸã‚¯ã‚·ã‚£ã€ã‚·ãƒ¼ãƒ«ã‚’æ‰‹ã«å…¥ã‚ŒãŸ! URL 2012-04-04 18:59:32 via ãƒã‚±ã‚¿ãƒƒãƒï¼ˆloctouchï¼‰ è‡ªé‡ã›ãšã«ãƒ”ã‚¶ã¨ãƒ“ãƒ¼ãƒ«å§‹ã‚ã¦ã‚‹ #shibuyaxss 2012-04-04 19:04:33 via Twitter for iPhone XSSã«ã‚ˆã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç›—ã¿å¯¾ç–ä¾‹ï¼š ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å…¥åŠ›ã•ã›ã‚‹ã‚ˆã†ãªã¨ã“ã‚ã¯"login.exampl
Itisango 2012/04/05
"[twitter][2012å¹´]ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å…¥åŠ›ã•ã›ã‚‹ã‚ˆã†ãªã¨ã“ã‚ã¯"login.example.com"ã®ã‚ˆã†ã«ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ã—ã¦ãŠãã€ä»–ã«ä½™è¨ˆãªæ©Ÿèƒ½ã‚’ã¤ã‘ãªã„ã‚ˆã†ã«ã™ã‚‹ #shibuyaxss"

shibuya.xss

xss

security

DOM

ATND
ãƒªãƒ³ã‚¯
1