[B! Injection] Kenji_sã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Kenji_s id:Kenji_s

Injectionã«é–¢ã™ã‚‹Kenji_sã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (62)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä¾‹ãˆã°ã“ã‚“ãªSSI - nknskn ãƒã‚¿ç½®ãå ´
æ¦‚è¦ è³‡ç”Ÿå ‚ã®åä¼šç¤¾ã€Œã‚¤ãƒ—ã‚µã€ãŒé‹å–¶ã™ã‚‹ã€Œã‚¤ãƒ—ã‚µå…¬å¼ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚·ãƒ§ãƒƒãƒ—ã€ã«ã¦ã€SSIã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã‚‹æƒ…å ±æ¼ãˆã„ãŒç™ºç”Ÿã—ãŸã“ã¨ã‚’å—ã‘ã¦ã€æ”¹ã‚ã¦ã€ŒSSIã€ãŠã‚ˆã³ã€ŒSSIã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã®æ¦‚è¦ã€å½±éŸ¿ã€ãŠã‚ˆã³ãã®å¯¾ç–ã‚’èª¿æŸ»ãƒ»ç¢ºèªã—ãŸï¼Ž ã“ã“ã§ã¯ãã®èª¿æŸ»ãƒ»ç¢ºèªå†…å®¹ã‚’è¨˜è¼‰ã—ã¦ã„ã‚‹ï¼Ž èƒŒæ™¯ 2016å¹´12æœˆ2æ—¥ã€è³‡ç”Ÿå ‚ã®åä¼šç¤¾ã€Œã‚¤ãƒ—ã‚µã€ãŒé‹å–¶ã™ã‚‹ã€Œã‚¤ãƒ—ã‚µå…¬å¼ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚·ãƒ§ãƒƒãƒ—ã€ã«ã¦æƒ…å ±æ¼ãˆã„ãŒç™ºç”Ÿã—ãŸã¨ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒã‚ã£ãŸï¼Ž éšæ‹“ ã“ã®æ™‚ç‚¹ã«ãŠã„ã¦ãƒªãƒªãƒ¼ã‚¹PDFï¼ˆéšæ‹“ï¼‰ã§ã¯ã€ŒåŽŸå› ã®è§£æ˜Žã¨å†ç™ºé˜²æ¢ã«å‘ã‘ç¤¾å¤–ã®æœ‰è˜è€…ã‚’äº¤ãˆãŸèª¿æŸ»ã‚’å¼•ãç¶šãè¡Œã„ï¼ˆä»¥ä¸‹çœç•¥ï¼‰ã€ã¨ã‚ã‚Šã€ã¯ã£ãã‚Šã—ãŸåŽŸå› ã¯è§£æ˜Žã§ãã¦ã„ãªã‹ã£ãŸãŒã€2017å¹´1æœˆ31æ—¥ã€ç¶šå ±ã¨ã—ã¦ä»¥ä¸‹ã®æƒ…å ±ãŒå ±é“ã•ã‚ŒãŸï¼Ž éšæ‹“ (å…¬å¼PDF)æ ªå¼ä¼šç¤¾ã‚¤ãƒ—ã‚µå…¬å¼ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚·ãƒ§ãƒƒãƒ—ã¸ã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ (éšæ‹“) èª¿æŸ»å ±å‘Šæ›¸ã‚’ç¢ºèªã—ãŸã¨ã“ã‚ã€SSIã€ãŠã‚ˆ
Kenji_s 2017/02/06
SSI

Injection

Security
ãƒªãƒ³ã‚¯
GitHub Enterprise SQL Injection
BeforeGitHub Enterprise is the on-premises version of GitHub.com that you can deploy a whole GitHub service in your private network for businesses. You can get 45-days free trial and download the VM from enterprise.github.com. After you deployed, you will see like bellow: Now, I have all the GitHub environment in a VM. Itâ€™s interesting, so I decided to look deeper into VM :P EnvironmentThe beginni
Kenji_s 2017/01/09
GitHub

Vulnerability

SQL

Injection

Rails
ãƒªãƒ³ã‚¯
Security Advisory - Security - Zend Framework
Kenji_s 2016/12/21
Zend Framework

Vulnerability

Injection

Mail
ãƒªãƒ³ã‚¯
Potential SQL injections vulnerabilities in Stack Overflow PHP questions
Potential SQL injections vulnerabilities in Stack Overflow PHP questions Latest SQL injection vulnerabilities in PHP questions (Click on the date to open the question)
Kenji_s 2016/12/07
SQL

Injection
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ã¯èª°ã®ã›ã„? ï¿½PHPã€MySQLã€Joomla! ã®è²¬ä»»ã‚„ã„ã‹ã«
11. ã‚³ãƒ¼ãƒ‰ã®å·®åˆ†ã‹ã‚‰ diff -r -u joomla-3.4.5/libraries/joomla/session/session.php joomla-3.4.6/libraries/joomla/session/session.php --- joomla-3.4.5/libraries/joomla/session/session.php 2015-10-21 17:48:16.000000000 +0900 +++ joomla-3.4.6/libraries/joomla/session/session.php 2015-12-14 14:42:12.000000000 +0900 - - // Check for clients browser - if (in_array('fix_browser', $this->_security) && isset($_SERV
Kenji_s 2016/08/27
Joomla!

PHP

Vulnerability

Injection

MySQL
ãƒªãƒ³ã‚¯
AWS WAFã‚’ãƒã‚¤ãƒ‘ã‚¹ã—ã¦SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’ã—ã¦ã¿ã‚‹ - Soon Lazy
æœ€è¿‘ã¯AWS WAFã‚’è§¦ã£ã¦ã„ã¾ã™ã€‚ã“ã†ã„ã†é˜²å¾¡ãƒ„ãƒ¼ãƒ«ã¯ã€ã‚„ã¯ã‚Šæ”»æ’ƒã‚’ã©ã‚Œãã‚‰ã„é˜²ã„ã§ãã‚Œã‚‹ã‹æ°—ã«ãªã‚Šã¾ã™ã€‚AWS WAFã®å ´åˆã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ç³»ã®è„†å¼±æ€§ã‚’æŽ¢ã£ã¦ãã‚Œã‚‹sql mapã‚’ã‹ã‘ãŸã¨ã“ã‚ã€æ”»æ’ƒã‚’ãƒ–ãƒãƒƒã‚¯ã—ã¦ãã‚ŒãŸã¨ã„ã†è¨˜äº‹ãŒã‚ã‚Šã¾ã™ã€‚ è¨˜äº‹ã‚’èªã‚“ã ã‚Šè‡ªåˆ†ã§ã¡ã‚‡ã£ã¨è©¦ã—ãŸã‚Šã—ã¦ã€ã¡ã‚ƒã‚“ã¨SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’é˜²ã„ã§ãã‚Œã‚‹ã‚“ã ãƒ¼ã¨æ€ã£ã¦ã„ã¾ã—ãŸã€‚ãŒã€ã¤ã„å…ˆæ—¥WAFã‚’ãƒã‚¤ãƒ‘ã‚¹ã—ã¦SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’ã™ã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ãŒã‚ã‚‹ã“ã¨ã‚’çŸ¥ã‚Šã¾ã—ãŸã€‚ä¾‹ãˆã°OWASPã®ã“ã®ãƒšãƒ¼ã‚¸ã«ã¯ã€ãã†ã„ã†ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ãŒã„ãã¤ã‹ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã†ãªã‚‹ã¨æ°—ã«ãªã‚‹ã®ã¯ã€AWS WAFã«å¯¾ã—ã¦WAFãƒã‚¤ãƒ‘ã‚¹ã®ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’ä½¿ã†ã¨ã©ã†ãªã‚‹ã‹ã§ã™ã€‚ã¨ã„ã†ã‚ã‘ã§ã€å®Ÿéš›ã«è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ å˜ç´”ã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã—ã¦ã¿ã‚‹ ã¾ãšã¯ã€AWS WAFãŒãªã„ã¨ãã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒã§ãã‚‹ã“ã¨ã€ã¾ãŸã€AWS
Kenji_s 2016/05/18
AWS

SQL

Injection

WAF
ãƒªãƒ³ã‚¯
ã€Œã‚±ãƒ¼ã‚¿ã‚¤ã‚ãƒƒãƒˆ for Movable Typeã€ã®OSã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ä¿®æ£ | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
æ›´æ–°: 2016å¹´4æœˆ27æ—¥11æ™‚5åˆ†é ƒ Movable Typeã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€Œã‚±ãƒ¼ã‚¿ã‚¤ã‚ãƒƒãƒˆ for Movable Typeã€ã«OSã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ãŒã‚ã£ãŸã¨ã„ã†è©±ãŒå‡ºã¦ãŠã‚Šã€J-WAVEã®64ä¸‡ä»¶ã®å€‹äººæƒ…å ±æµå‡ºã¯ã“ã‚ŒãŒåŽŸå› ã ã£ãŸã¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ J-WAVEã§ã‚‚64ä¸‡ä»¶ã®å€‹äººæƒ…å ±æµå‡ºã®å¯èƒ½æ€§ã€åŽŸå› ã‚½ãƒ•ãƒˆã®åˆ©ç”¨è€…ã¯è‡³æ€¥ãƒ‘ãƒƒãƒé©ç”¨ã‚’ (itpro.nikkeibp.co.jp)ã€Œã‚±ãƒ¼ã‚¿ã‚¤ã‚ãƒƒãƒˆ for Movable Typeã€ã«OSã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€åˆ©ç”¨è€…ã¯ä¿®æ£ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¸ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’ã€ã™ã§ã«J-WAVEã¸ã®æ”»æ’ƒã§æ‚ªç”¨ (internet.watch.impress.co.jp)ã‚±ãƒ¼ã‚¿ã‚¤ã‚ãƒƒãƒˆ for Movable Type ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ (d.hatena.ne.jp)é…å¸ƒå…ƒã®ã‚¢ã‚¤ãƒ‡ã‚¢ãƒžãƒ³ã‚ºã‹ã‚‰ã¯ã€4æœˆ22æ—¥ã«ã¾ãšã€Œç·Šæ€¥ãƒ‘ãƒƒãƒãƒ•ã‚¡ã‚¤
Kenji_s 2016/04/26
Vulnerability

Security

Injection
ãƒªãƒ³ã‚¯
SQL Injection Cheat Sheet
MySQLã¨PHPã«ã¤ã„ã¦ To clarify some issues; PHPï¼MySQLã®çµ„ã¿åˆã‚ã›ã§ã¯ã€è¤‡æ–‡ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ãªã„ã€‚Javaã¯è¤‡æ–‡ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ãªã„ï¼ˆORACLEã«ã¤ã„ã¦ã¯ç¢ºå®Ÿã ãŒã€ä»–ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«é–¢ã—ã¦ã¯ç¢ºå®šã§ã¯ãªã„ï¼‰ã€‚é€šå¸¸ã€MySQLã¯è¤‡æ–‡ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—é€šå¸¸ã¯ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ¬ã‚¤ãƒ¤ãƒ¼å´ã®è¨å®šã®ãŸã‚ã€PHPï¼MySQLã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯2ç•ªç›®ã®ã‚¯ã‚¨ãƒªã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ããªã„ã€‚MySQLã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯è¤‡æ–‡ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã¨æ€ã‚ã‚Œã‚‹ãŒã€ç¢ºä¿¡ã¯ãªã„ã€‚èª°ã‹è§£æ˜Žã—ã¦ã»ã—ã„ã€‚ è¤‡æ–‡ã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ã‚µãƒ³ãƒ—ãƒ« ID: 10;DROP members -- SELECT * FROM products WHERE id = 10; DROP members-- ã“ã‚Œã¯ã€é€šå¸¸ã®ã‚¯ã‚¨ãƒªã‚’å®Ÿè¡Œã—ãŸå¾Œã§DROP membersã¨ã„ã†SQLæ–‡ãŒå®Ÿè¡Œã•ã‚Œã‚‹ã€‚
Kenji_s 2016/04/18
SQL

Injection
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³
(Last Updated On: )ä¸€æ–‡å—ã§ã‚‚æ„å‘³ãŒã‚ã‚‹æ–‡å—ãŒã‚ã‚‹ã¨ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒãŒå¯èƒ½ãªå ´åˆãŒå¤šã„ã§ã™ã€‚æ£è¦è¡¨ç¾ã‚‚ä¾‹å¤–ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ æ£è¦è¡¨ç¾ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨ã¯ æ£è¦è¡¨ç¾ã«å¯¾ã™ã‚‹æ”»æ’ƒã«ã¯ReDoSæ”»æ’ƒï¼ˆæ¤œç´¢å¯¾è±¡ã®æ–‡å—åˆ—ã‚’ä½¿ã£ã¦æ”»æ’ƒï¼‰ãŒã‚ã‚Šã¾ã™ãŒã€æ£è¦è¡¨ç¾è‡ªä½“ã‚’ä½¿ã£ã¦ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒãŒå¯èƒ½ã§ã™ã€‚ãƒŒãƒ«æ–‡å—ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨çµ„ã¿åˆã‚ã›ã¦æ”»æ’ƒã‚‚å¯èƒ½ã§ã™ã€‚ æ£è¦è¡¨ç¾ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã§æ”»æ’ƒå¯èƒ½ãªãƒ‘ã‚¿ãƒ¼ãƒ³ã¯æ£è¦è¡¨ç¾ã®ä¸€éƒ¨ãŒå¤‰æ›´å¯èƒ½ã§ã€æ¤œç´¢å¯èƒ½ãªæ–‡å—åˆ—ã‚’åˆ¶é™ã—ã¦ã„ã‚‹å ´åˆã§ã™ã€‚ æ£è¦è¡¨ç¾ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ ä»¥ä¸‹ã®ã‚ˆã†ãªãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ 14:14:15 bob[14] Login from IP 10.10.10.123 14:14:30 tom[14] Login from IP 10.10.20.234 14:15:27 bob[34] Update passwor
Kenji_s 2016/03/18
RegExp

Injection

Security
ãƒªãƒ³ã‚¯
TweepieãŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã§æƒ…å ±æµå‡º: ç‹¬æˆ¿ã®ä¸
Tweepieã¨ã„ã†SNSã¸æŠ•ç¨¿ã™ã‚‹ã“ã¨ã§å ±é…¬ã‚’ã‚‚ã‚‰ãˆã‚‹ã¨ã„ã†ãŠå°é£ã„ç¨¼ãŽã‚µã‚¤ãƒˆãŒä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ï¼ˆSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ï¼‰ã«ã‚ˆã‚Šãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæµå‡ºã—ã¦ã„ãŸã¨ç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ Tweepie.-SNSã§ãŠå°é£ã„ç¨¼ãŽ- https://twps.jp/ https://twps.jp/tweepie_info20160308.pdf https://docs.google.com/viewer?url=https://twps.jp/tweepie_info20160308.pdf â– æƒ…å ±æ¼ãˆã„ãŒç™ºè¦šã—ãŸçµŒç·¯ 2016 å¹´3 æœˆ4 æ—¥ã«è¦å¯Ÿã‹ã‚‰ã®é€£çµ¡ã«ã‚ˆã£ã¦ã€Tweepie ã§ä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚¢ ãƒ‰ãƒ¬ã‚¹ã¨ãƒã‚°ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒç¬¬ä¸‰è€…ã«ã‚ˆã‚‹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚Šçªƒå–ã•ã‚ŒãŸäº‹å®ŸãŒ ç™ºè¦šè‡´ã—ã¾ã—ãŸã€‚ ãã®äº‹å®Ÿç™ºè¦šã®çµŒç·¯ã¨è‡´ã—ã¾ã—ã¦ã¯ã€ä»–ã®ã‚µã‚¤ãƒˆã¸ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã—ãŸçŠ¯äººã®PC ã‚’è¦å¯ŸãŒç¢ºèªã—
Kenji_s 2016/03/09
SQL

Injection
ãƒªãƒ³ã‚¯
GitHub - stripe-archive/safesql: Static analysis tool for Golang that protects against SQL injections
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Kenji_s 2016/03/04
SQL

Injection

GoLang
ãƒªãƒ³ã‚¯
Rails SQL Injection Examples
Overview The Ruby on Rails web framework provides a library called ActiveRecord which provides an abstraction for accessing databases. This page lists many query methods and options in ActiveRecord which do not sanitize raw SQL arguments and are not intended to be called with unsafe user input. Careless use of these methods can open up code to SQL Injection exploits. The examples here do not inclu
Kenji_s 2016/02/26
Rails

Injection

SQL
ãƒªãƒ³ã‚¯
ActiveRecordã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãƒ‘ã‚¿ãƒ¼ãƒ³
(Last Updated On: 2018å¹´10æœˆ7æ—¥)Railsã§å¤šç”¨ã•ã‚Œã¦ã„ã‚‹ActiveRecordã®ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ç°¡å˜ã«ç´¹ä»‹ã—ã¾ã™ã€‚å‡ºå…¸ã¯rails-sqli.orgãªã®ã§ã‚ˆã‚Šè©³ã—ã„è§£èª¬ã¯ã“ã¡ã‚‰ã§ç¢ºèªã—ã¦ãã ã•ã„ã€‚ç‰¹ã«æ°—ã‚’ã¤ã‘ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨æ€ã‚ã‚Œã‚‹ç‰©ã®ã¿ã‚’ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¾ã—ãŸã€‚ Exists?ãƒ¡ã‚½ãƒƒãƒ‰ User.exists? params[:user] params[:user]ãªã©ã®ä½¿ã„æ–¹ã¯å±é™ºã§ã™ã€‚Railsã¯PHPãªã©ã¨åŒæ§˜ã«user[]ã¨ã„ã†ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ã§é…åˆ—åŒ–ã—ã¾ã™ã€‚ ?user[]=1 ãŒå…¥åŠ›ã®å ´åˆã€ SELECT 1 AS one FROM "users" WHERE (1) LIMIT 1 ã¨ãªã‚Šä¸æ£ãªã‚¯ã‚¨ãƒªãŒå®Ÿè¡Œã•ã‚Œã¾ã™ã€‚ Calculateãƒ¡ã‚½ãƒƒãƒ‰ Calculateãƒ¡ã‚½ãƒƒãƒ‰ã¯SQLã®é›†ç´„é–¢æ•°ã‚’å®Ÿè¡Œã™ã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ã§ã™ã€‚averageã€calcula
Kenji_s 2016/02/26
Rails

SQL

Injection
ãƒªãƒ³ã‚¯
https://www.blackhat.com/presentations/bh-europe-04/bh-eu-04-litchfield.pdf?platform=hootsuite
Kenji_s 2016/01/29
SQL

Injection

Oracle
ãƒªãƒ³ã‚¯
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã®æ¥µæ„ã¯SQLæ–‡ã‚’çµ„ã¿ç«‹ã¦ãªã„ã“ã¨ã«ã‚ã‚Š
CodeZineç·¨é›†éƒ¨ã§ã¯ã€ç¾å ´ã§æ´»èºã™ã‚‹ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚’ã‚¹ã‚¿ãƒ¼ã«ã™ã‚‹ãŸã‚ã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€ŒDevelopers Summitã€ã‚„ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ç”Ÿãã–ã¾ã‚’ãƒ–ãƒ¼ã‚¹ãƒˆã™ã‚‹ãŸã‚ã®ã‚¤ãƒ™ãƒ³ãƒˆã€ŒDevelopers Boostã€ãªã©ã€ã•ã¾ã–ã¾ãªã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã‚’ä¼ç”»ãƒ»é‹å–¶ã—ã¦ã„ã¾ã™ã€‚
Kenji_s 2016/01/29
SQL

Injection
ãƒªãƒ³ã‚¯
CVE-2015-8562 - è„†å¼±æ€§èª¿æŸ»ãƒ¬ãƒãƒ¼ãƒˆ | SBãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ (SBT)
Joomla! ã®è„†å¼±æ€§ã¨ã—ã¦å ±å‘Šã•ã‚ŒãŸã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œå¯èƒ½ãªè„†å¼±æ€§ï¼ˆCVE-2015-8562ï¼‰ã«é–¢ã™ã‚‹èª¿æŸ»ãƒ¬ãƒãƒ¼ãƒˆ æ¦‚è¦ Joomla! ã«ã€ãƒªãƒ¢ãƒ¼ãƒˆã‚ˆã‚Šä»»æ„ã®ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œå¯èƒ½ã§ã‚ã‚‹ã¨å ±å‘Šã•ã‚ŒãŸè„†å¼±æ€§ï¼ˆCVE-2015-8562ï¼‰ã®æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®è„†å¼±æ€§ã¯ã€Joomla! ã«ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰å…¥åŠ›ã•ã‚Œã‚‹ PHP ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®æ¤œè¨¼å‡¦ç†ã«æ¬ é™¥ãŒã‚ã‚Šã€PHP ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’è¡Œã†ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ã“ã®ãŸã‚ã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã® PHP ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒå¯èƒ½ã¨ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ å½“åˆï¼ˆ2015å¹´12æœˆ15æ—¥ï¼‰ã€Joomla! ã®å…¬å¼ã‚µã‚¤ãƒˆã§ã¯Joomla! ã®è„†å¼±æ€§ã¨ã—ã¦ã“ã®è„†å¼±æ€§ã®ä¿®æ£ç‰ˆã§ã‚ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 3.4.6 ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ãã®å¾Œã€2015å¹´12æœˆ21æ—¥ã«ã€ã“ã®è„†å¼±æ€§ã®æ ¹æœ¬çš„ãªåŽŸå› ã¯ã€PHP ã®è„†å¼±æ€§ï¼ˆCVE-2015-6835ï¼‰ã§
Kenji_s 2015/12/27
ã€ŒPHP ã«ã‚ˆã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ‡ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºå‡¦ç†ã«ãŠã„ã¦ã€è§£æ”¾å¾Œã®ãƒ¡ãƒ¢ãƒªå‚ç…§ãŒèµ·ã“ã‚‹ã¨ã„ã†å•é¡Œã€

PHP

Injection

Vulnerability
ãƒªãƒ³ã‚¯
Practical PHP Object Injection
Practical PHP Object Injection Practical PHP Object Injection $(whoami) Brendan Jamieson (@hyprwired) ï‚§ Wellington based consultant for Insomnia Security ï‚§ Infosec ï‚§ Linux ï‚§ Python ï‚§ CTF (@hamiltr0n_ctf) ï‚§ Apparently 16/12/2015 Practical PHP Object Injection Talk Overview 1. Theory Objects 101 PHP Serialization 101 Magic Methods + Autoloading PHP Object Injection 101 2. Bug Hunting Finding PHP Obj
Kenji_s 2015/12/22
PHP

Injection

Security
ãƒªãƒ³ã‚¯
Joomla!ã®ã€Œã‚¼ãƒãƒ‡ã‚¤ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œè„†å¼±æ€§ã€ã¯PHPã®æ—¢çŸ¥ã®è„†å¼±æ€§ãŒåŽŸå›
Joomla!ã«ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œè„†å¼±æ€§(CVE-2015-8562)ãŒã‚ã‚Šã€ãƒ‘ãƒƒãƒå…¬é–‹å‰ã‹ã‚‰æ”»æ’ƒãŒè¦³æ¸¬ã•ã‚Œã¦ã„ãŸã¨è©±é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ Joomlaã«æ·±åˆ»ãªè„†å¼±æ€§ã€ãƒ‘ãƒƒãƒå…¬é–‹2æ—¥å‰ã‹ã‚‰æ”»æ’ƒæ¨ªè¡Œ ã€ŒJoomla!ã€ã«å†ã³æ·±åˆ»ãªè„†å¼±æ€§ã€3.4.6ã¸ã®é€Ÿã‚„ã‹ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’æŽ¨å¥¨ ãƒ‘ãƒƒãƒå…¬é–‹ã®å‰ã«æ”»æ’ƒãŒå§‹ã¾ã‚‹çŠ¶æ…‹ã‚’ã€Œã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã€ã¨è¨€ã„ã¾ã™ãŒã€ãã‚Œã§ã¯ã€ã“ã®è„†å¼±æ€§ã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¯ã©ã‚“ãªã‚‚ã®ã ã‚ã†ã‹ã¨æ€ã„ã€èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ çµè«–ã‹ã‚‰è¨€ãˆã°ã€ã“ã®å•é¡Œã¯Joomla!å´ã«é‡å¤§ãªè„†å¼±æ€§ã¯ãªãã€PHPã®æ—¢çŸ¥ã®è„†å¼±æ€§(CVE-2015-6835)ãŒåŽŸå› ã§ã—ãŸã®ã§å ±å‘Šã—ã¾ã™ã€‚ exploitã‚’èª¿ã¹ã¦ã¿ã‚‹ æ—¢ã«ã“ã®å•é¡Œã®exploitã¯å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ãŒã€æ‚ªã„åãŒçœŸä¼¼ã™ã‚‹ã¨ã„ã‘ãªã„ã®ã§URLç‰ã¯å‰²æ„›ã—ã¾ã™ã€‚ä»¥ä¸‹ã®ãƒšãƒ¼ã‚¸ã§ã¯æ”»æ’ƒã®åŽŸç†ãŒèª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ã€‚ Vulnerability Details: Joomla! Re
Kenji_s 2015/12/18
ã“ã‚Œã¯ã™ã”ã„!

PHP

Vulnerability

Injection

MySQL

UTF-8
ãƒªãƒ³ã‚¯
PHPã«ãŠã‘ã‚‹HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¯ã¾ã ã—ã¶ã¨ãç”Ÿãæ®‹ã‚‹
ã“ã®è¨˜äº‹ã¯PHPã‚¢ãƒ‰ãƒ™ãƒ³ãƒˆã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼2015ã®3æ—¥ç›®ã®è¨˜äº‹ã§ã™ ã€‚ MBSDå¯ºç”°ã•ã‚“ã®è¨˜äº‹ã€ŒLWSã¨HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã§ã¯ã€PHPã®headeré–¢æ•°ã«é–¢é€£ã—ã¦ã€PHPå´ã®HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã‚’å›žé¿ã™ã‚‹æ‰‹æ³•ã¨ã€ãã‚Œã«å¯¾ã™ã‚‹PHPå´ã®å¯¾å¿œã«ã¤ã„ã¦æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€å¯ºç”°ã•ã‚“ã®è¨˜äº‹ã‚’å—ã‘ã¦ã€ç¾åœ¨ã§ã‚‚HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒãŒå¯èƒ½ãªPHPç’°å¢ƒãŒæ®‹ã£ã¦ã„ã‚‹ã‹ã‚’æ¤œè¨¼ã—ã¾ã™ã€‚ HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨ã¯ ä»¥ä¸‹ã®æ§˜ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ <?php header('Location: ' . $_GET['url']); ã‚ªãƒ¼ãƒ—ãƒ³ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ã‚¿è„†å¼±æ€§ãŒã‚ã‚Šã¾ã™ãŒã€ãã‚Œã¯æ°—ã«ã—ãªã„ã¨ã—ã¦ã€PHP5.1.1ã¾ã§ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ä»¥ä¸‹ã®æ§˜ãªæ”»æ’ƒãŒå¯èƒ½ã§ã—ãŸã€‚ http://example.jp/header.php?url=http://example
Kenji_s 2015/12/03
ã€ŒPHPã®æœ€æ–°ã®ãƒ‘ãƒƒãƒãŒã‚ãŸã£ã¦ã„ã‚‹å ´åˆã§ã‚‚ã€HTTPãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒã§ãã‚‹ã‚µãƒ¼ãƒãƒ¼ã¯ã¾ã å˜åœ¨ã™ã‚‹ã€

PHP

HTTP

Injection

Internet Explorer

Vulnerability
ãƒªãƒ³ã‚¯
ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€‘å¾³ä¸¸å…ˆç”Ÿã«æ€’ã‚‰ã‚Œãªã„ã€å‹•çš„SQLã®å®‰å…¨ãªçµ„ã¿ç«‹ã¦æ–¹
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ãƒ»ãƒ»ãƒ»é§†é€ã—ã¦ã‚„ã‚‹ï¼ï¼ ã“ã®ä¸–ã‹ã‚‰ãƒ»ãƒ»ãƒ»ä¸€åŒ¹æ®‹ã‚‰ãšï¼ï¼ (PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2015) Read less
Kenji_s 2015/10/08
SQL

Security

Injection
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸