[B! xss][security] defiantã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

defiant id:defiant

xssã¨securityã«é–¢ã™ã‚‹defiantã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (26)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

XSSå†å…¥é–€
4. å…¸åž‹çš„ãªXSSã‚µãƒ³ãƒ—ãƒ«ã«å¯¾ã™ã‚‹ã€Œç´ æœ´ãªç–‘å•ã€ â€¢ ã‚¯ãƒƒã‚ãƒ¼ã®å€¤ãŒã‚¢ãƒ©ãƒ¼ãƒˆã§è¡¨ç¤ºã•ã‚Œã¦ã‚‚ã€ç‰¹ã«å±é™ºæ€§ã¯ãªã„ã‚ˆ ã†ãªæ°—ãŒã™ã‚‹ â€¢ ã‚¯ãƒƒã‚ãƒ¼ã®å€¤ã¯ãƒ–ãƒ©ã‚¦ã‚¶ã®ã‚¢ãƒ‰ã‚ªãƒ³ãªã©ã§ã‚‚è¡¨ç¤ºã§ãã‚‹ã‚ˆã â€¢ ä»»æ„ã®JavaScriptãŒå®Ÿè¡Œã•ã‚Œã‚‹ã¨è¨€ã£ã¦ã‚‚ã€ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ä½œ ã‚Œã°ä»»æ„ã®JavaScriptãŒæ›¸ã‘ã‚‹ã—ã€è¦‹ãŸäººã®ãƒ–ãƒ©ã‚¦ã‚¶ã§å®Ÿè¡Œ ã•ã‚Œã‚‹ã‚ˆãâ€¦ Copyright Â© 2013 HASH Consulting Corp. 4 5. ãã‚‚ãã‚‚ã®ç–‘å•ï¼šJavaScriptã¯å±é™ºã‹? â€¢ å®Ÿã¯ã€JavaScriptã®å®Ÿè¡Œè‡ªä½“ã¯å±é™ºã§ã¯ãªã„ â€¢ Webã¯ã€æœªçŸ¥ã®ï¼ˆã²ã‚‡ã£ã¨ã™ã‚‹ã¨æ‚ªæ„ã®ã‚ã‚‹?ï¼‰ã‚µã‚¤ãƒˆã‚’è¨ªå•ã— ã¦ã‚‚ã€Œæ‚ªã„ã“ã¨ã€ãŒèµ·ããªã„ã‚ˆã†ã«è¨è¨ˆã•ã‚Œã¦ã„ã‚‹ â€¢ JavaScriptã®ã€Œã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã€ã«ã‚ˆã‚‹ä¿è· â€“ JavaScriptã‹ã‚‰ãƒãƒ¼ã‚«ãƒ«ãƒ•ã‚¡ã‚¤ãƒ«ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ â€“ JavaScriptã‹ã‚‰ã‚¯ãƒªãƒƒãƒ—
defiant 2013/08/27
security

xss
ãƒªãƒ³ã‚¯
IPAã‹ã‚‰ã€ŽDOM Based XSSã€ã«é–¢ã™ã‚‹ãƒ¬ãƒãƒ¼ãƒˆå‡ºã¾ã—ãŸ
DOM Based XSSã«é–¢ã—ã¦ã¯ã€IPAã€Œå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã€ã§ã‚‚ã€æ‹™è‘—ã§ã‚‚ã”ãç°¡å˜ã«ã—ã‹è§¦ã‚Œã¦ãŠã‚‰ãšã€ã¾ã¨ã¾ã£ãŸè§£èª¬ãŒè¦æœ›ã•ã‚Œã¦ã„ã¾ã—ãŸãŒã€æœ¬æ—¥ï¼ˆ2013å¹´1æœˆ29æ—¥ï¼‰ã«IPAã‹ã‚‰ã€ŒIPA ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ã‚¦ã‚©ãƒƒãƒã€ŽDOM Based XSSã€ã«é–¢ã™ã‚‹ãƒ¬ãƒãƒ¼ãƒˆã€ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ åŒå†Šåã®ç›®æ¬¡ã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ ã¯ã˜ã‚ã« 1. DOM Based XSSã®æ¦‚è¦ 2. IPAã«å ±å‘Šã•ã‚ŒãŸDOM Based XSSã®è„†å¼±æ€§ 3. DOM Based XSSã®äº‹ä¾‹ 4. DOM Based XSSã®å¯¾ç–æ–¹æ³• ã‚³ãƒ©ãƒ ãŠã‚ã‚Šã« IPAã®ãƒ¬ãƒãƒ¼ãƒˆã¨è¨€ã†ã“ã¨ã§ã€DOM based XSSã®å±Šå‡ºã®çŠ¶æ³ã‚‚èª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã«ã‚°ãƒ©ãƒ•ã‚’å¼•ç”¨ã—ã¾ã™ã€‚ ä¸€è¦‹ã—ã¦ã€Œæ€¥å¢—ã€ã—ã¦ã„ã‚‹ã“ã¨ã¨ã€æ˜¨å¹´ã®10æœˆã‹ã‚‰12æœˆã®3ãƒ¶æœˆã§92ä»¶ã‚‚å±Šå‡ºãŒã‚ã£ãŸã¨ã„ã†ã“ã¨ã§ã€å¯¾ç–ãŒæ€¥å‹™ã¨ãªã£ã¦ã„ã‚‹çŠ¶æ³ãŒè¦‹ã¦å–ã‚Œã¾ã™ã€‚ã“ã‚Œã¯ã€ã“
defiant 2013/01/29
security

xss
ãƒªãƒ³ã‚¯
ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¢ãƒ€ãƒ—ã‚·ãƒ§ãƒ³ãŒãªãã¦ã‚‚ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ•ã‚£ã‚¯ã‚»ã‚¤ã‚·ãƒ§ãƒ³æ”»æ’ƒã¯å¯èƒ½
å¤§åž£ï¼ˆ@yohgakiï¼‰ã•ã‚“ã¨ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¢ãƒ€ãƒ—ã‚·ãƒ§ãƒ³è„†å¼±æ€§ãŒã€Œé‡å¤§ãªè„…å¨ã€ã‹å¦ã‹ã§è«–äº‰ã‚’ç¶šã‘ã¦ã„ã¾ã™ã€‚ å¤§åž£ã•ã‚“:ç¬¬25å›žã€€PHPã®ã‚¢ã‚ãƒ¬ã‚¹è…± â”€â”€ ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†å¾³ä¸¸:PHPã®Session Adoptionã¯é‡å¤§ãªè„…å¨ã§ã¯ãªã„å¤§åž£ã•ã‚“:PHPã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¢ãƒ€ãƒ—ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã¯ä¿®æ£ã—ã¦å½“ç„¶ã®è„†å¼±æ€§è°è«–ãŒã‹ã¿åˆã‚ãªã„ã®ã§ã€twitterã§ã€Œãƒ–ãƒã‚°èªã¿ã¾ã—ãŸã€‚ã‚µãƒ³ãƒ—ãƒ«ã‚‚å‹•ã‹ã—ã¾ã—ãŸã€‚å•é¡Œã¯åˆ†ã‹ã‚‹ã®ã§ã™ãŒã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¢ãƒ€ãƒ—ã‚·ãƒ§ãƒ³ãŒãªã„PHPã ã¨ã€ä½•ãŒæ”¹å–„ã•ã‚Œã‚‹ã®ã‹ãŒåˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚æ•™ãˆã¦ä¸‹ã•ã„ã€ã¨ãƒ„ã‚¤ãƒ¼ãƒˆã—ãŸã¨ã“ã‚ã€å¤§åž£ã•ã‚“ãŒãƒ–ãƒã‚°ã§è¿”ä¿¡ä¸‹ã•ã„ã¾ã—ãŸã€‚ å¤§åž£ã•ã‚“:Â ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¢ãƒ€ãƒ—ã‚·ãƒ§ãƒ³è„†å¼±æ€§ãŒãªã„ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†ãŒå¿…è¦ãªç†ç”±ã“ã‚Œã‚’èªã‚“ã§ã‹ã¿åˆã‚ãªã„ç†ç”±ãŒåˆ†ã‹ã‚Šã¾ã—ãŸã€‚å¤§åž£ã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ä»¥ä¸‹å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã®æœ«å°¾ã‚’å¼•ç”¨ã—ã¾ã™ã€‚ è„±ç·šã—ã¾ã—ãŸãŒã€ä½•ãŒæ”¹å–„ã•ã‚Œã‚‹ã®ã‹ï¼Ÿçµè«–ã¯ ãƒã‚°ã‚¤ãƒ³æ™‚ã«
defiant 2012/12/11
security

xss
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†è©¦é¨“å•é¡Œã«å¦ã¶JavaScriptã®XSSå¯¾ç–
æŒ‡æ‘˜äº‹é …Aä¸ã®(a)ã¯ã€ä»–ã‚’è¦‹ãªãã¦ã‚‚ã€Œã‚»ã‚ãƒ¥ã‚¢ã€å±žæ€§ã ã¨åˆ†ã‹ã‚Šã¾ã™ãã€‚å¾³ä¸¸æœ¬ï¼ˆä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ï¼‰ã§ã¯ã€4.8.2ã‚¯ãƒƒã‚ãƒ¼ã®ã‚»ã‚ãƒ¥ã‚¢å±žæ€§ä¸å‚™(P209)ã«èª¬æ˜ŽãŒã‚ã‚Šã¾ã™ã€‚ æŒ‡æ‘˜äº‹é …Bã¯ã€ã“ã“ã ã‘èªã‚€ã¨ã€XSSã®ã‚ˆã†ã§ã‚‚ã‚ã‚Šã€ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ã‚ˆã†ã§ã‚‚ã‚ã‚Šã¾ã™ãŒã€æ¤œæŸ»ãƒã‚°ã‹ã‚‰XSSã§ã‚ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ï¼ˆä¸‹å›³ã¯IPAã‹ã‚‰ã®å¼•ç”¨ï¼‰ã€‚XSSã¯ã€å¾³ä¸¸æœ¬4.3.1ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆåŸºæœ¬ç·¨ï¼‰ã¨4.3.2ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆç™ºå±•ç·¨ï¼‰ã«ã¦èª¬æ˜Žã—ã¦ã„ã¾ã™ã€‚ ã“ã“ã¾ã§ã¯ã€ã”ãåŸºæœ¬çš„ãªå•é¡Œã§ã™ãŒã€å•é¡Œæ–‡P6ã«å‡ºã¦ãã‚‹ä»¥ä¸‹ã®éƒ¨åˆ†ã¯ã€å°‘ã—ã ã‘ã²ãã£ã¦ã¾ã™ãã€‚ ã“ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã¯ã€åˆ©ç”¨è€…ãŒå…¥åŠ›ã—ãŸæ–‡å—åˆ—ã‚’ãƒ€ã‚¤ã‚¢ãƒã‚°ã«è¡¨ç¤ºã™ã‚‹ãŸã‚ã«ã€å—ã‘å–ã£ãŸãƒ‘ãƒ©ãƒ¡ã‚¿ã®å€¤ã‚’ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«åŸ‹ã‚è¾¼ã¿ã€å‹•çš„ã«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ç”Ÿæˆã™ã‚‹ã€‚å›³4ã®( Â c Â Â )è¡Œç›®ã§ã¯
defiant 2012/04/16
security

xss
ãƒªãƒ³ã‚¯
XHR XSS ã®è©±ï¼Ž - ã»ã‚€ã‚‰ã¡ã‚ƒã»ã‚€ã»ã‚€
æ¦‚è¦ CORS ãŒã€Œå¹¾ã¤ã‹ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®å…ˆè¡Œå®Ÿè£…ã€ã®çŠ¶æ³ã‹ã‚‰ã€Œå¤ã„ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œãªã„æ©Ÿèƒ½ã€ã«å¤‰ã‚ã‚Šã¤ã¤ã‚ã‚‹é ƒåˆã„ãªã®ã§ï¼ŒXHR2 ãŒ XSS ã®èµ·ç‚¹ã«ãªã‚Šã¾ã™ã‚ˆã£ã¦ãŠè©±ï¼Ž ãã‚‚ãã‚‚ XHR XSS ã£ã¦ä½•ã‚ˆ ç°¡å˜ã«è¨€ã†ã¨XHR2 ã«ã‚ˆã‚‹ XSS ã®ã“ã¨ã®ã¤ã‚‚ã‚Šï¼Žèº«è¿‘ãªã¨ã“ã‚ã ã¨ï¼ŒjQuery Mobile ãŒã‚„ã‚‰ã‹ã—ãŸã‚Šï¼Œå¤§é˜ªåºœè¦ãŒã‚„ã‚‰ã‹ã—ãŸã‚Šã—ãŸï¼Ž å…·ä½“ä¾‹1 jQuery Mobile jQuery Mobile ã«ã¤ã„ã¦ã¯ï¼ŒjQuery Mobileã®XSSã«ã¤ã„ã¦ã®è§£èª¬ ã§è§£èª¬ã•ã‚Œã‚‹ã¨ãŠã‚Šï¼Ž ã‹ã„ã¤ã¾ã‚“ã§è¨€ã†ã¨ï¼ŒjQuery Mobile ã« location.hash ã®å¤‰æ›´( hashchange ã‚¤ãƒ™ãƒ³ãƒˆç™ºç«ï¼‰æ™‚ã«ï¼Œlocation.hash ã‚’ URL ã¨ã¿ãªã—ã¦èªè¾¼ã‚“ã§ï¼Œãƒšãƒ¼ã‚¸å†…å®¹ã‚’å¤‰æ›´ã¨ã„ã†æ©Ÿèƒ½ãŒã‚ã£ã¦ï¼Œãã®èªè¾¼å…ˆ URL ã«ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã®åˆ¶ç´„ãŒãªã‹ã£ãŸã®ã§ X
defiant 2012/03/23
javascript

security

xss

xhr2
ãƒªãƒ³ã‚¯
XSSã®æ”»æ’ƒæ‰‹æ³•ã„ã‚ã„ã‚ - ã†ãªã®æ—¥è¨˜
html5securityã®ã‚µã‚¤ãƒˆã«ã€XSSã®å„ç¨®æ”»æ’ƒæ‰‹æ³•ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã®ã‚’ç™ºè¦‹ã›ã‚Š!ã¨ã„ã†ã“ã¨ã§ã€å€‹äººçš„ã«ã€ŒãŠ!ã€ã¨æ€ã£ãŸæ”»æ’ƒã‚’ã‚µãƒ³ãƒ—ãƒ«ã¤ãã§ã”ç´¹ä»‹ã—ã¾ã™ã€‚ 1. CSS Expression IE7ä»¥å‰ã«ã¯ã€ŒCSS Expressionsã€ã¨ã„ã†æ‹¡å¼µæ©Ÿèƒ½ãŒã‚ã‚Šã€CSSå†…ã§JavaScriptã‚’å®Ÿè¡Œã§ããŸã‚Šã—ã¾ã™ã€‚ <div style="color:expression(alert('XSS'));">a</div> ç¢ºèª @IT -ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS ã§è©³ã—ãè§£èª¬ã•ã‚Œã¦ã„ã¾ã™ãŒã€CSSã®è§£é‡ˆãŒæŸ”è»Ÿãªã“ã¨ã¨ã‚‚ã‚ã„ã¾ã£ã¦è‡ªå‰ã§ç„¡å®³åŒ–ã™ã‚‹ã®ã¯ãªã‹ãªã‹å›°é›£ã€‚ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã§ã‚‚ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ <div style="color:expr/* ã‚³ãƒ¡ãƒ³ãƒˆã®æŒ¿å…¥ */ession(alert('XSS'));">a</div> ç¢ºèª <div s
defiant 2011/09/06
security

xss
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
defiant 2011/04/25
security

xss

browser

ie
ãƒªãƒ³ã‚¯
Research: Remarkable 2nd order XSS @ Amazon or How to hack Amazon with a book
Update: 12/18/2010, 10:30pm GMT+1: Looks like Amazon reacted already, the findings below don't work anymore. Research: Stored XSS Vulnerability @ Amazon There's a remarkable flaw in Amazon's web shop (tested on .de, co.uk, .com): It's a stored XSS vulnerability. So far so, good what's new? â€” is probably what you're thinking â€” XSS probl ems had Amazon and other major companies too in the past. Pictu
defiant 2010/12/21
security

xss
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: XSSã«å¼·ã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ä½œã‚‹ â€“ ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ã®é¸å®šåŸºæº–ã¨ã‚¹ãƒ‹ãƒšãƒƒãƒˆã®ç”Ÿæˆæ‰‹æ³• (ç¬¬ï¼‘å›žç¥žæ³‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼šç™ºè¡¨è³‡æ–™)
ç™ºè¡¨è³‡æ–™ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã€‚æ˜¥å±±æ§˜ã¯ã˜ã‚ECãƒŠãƒ“ã®çš†æ§˜ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ XSSã«å¼·ã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ä½œã‚‹ â€“ ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ã®é¸å®šåŸºæº–ã¨ã‚¹ãƒ‹ãƒšãƒƒãƒˆã®ç”Ÿæˆæ‰‹æ³•View more presentations from kazuho.
defiant 2010/11/01
security

xss

programming
ãƒªãƒ³ã‚¯
Geekãªãºãƒ¼ã˜ : ãƒ¡ã‚¿æƒ…å ±ã«ã‚ˆã‚‹XSS
å…ˆæ—¥ã€ãªã‹ãªã‹å¼·çƒˆãªXSSæ”»æ’ƒæ‰‹æ³•ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ DNSã¸ã®å•ã„åˆã‚ã›çµæžœã«JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã§ã—ã¾ãŠã†ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ SkullSecurity: Stuffing Javascript into DNS names DarkReading: Researcher Details New Class Of Cross-Site Scripting Attack nCircle: Meta-Information Cross Site Scripting (PDF) è‡ªå‹•ç”Ÿæˆã•ã‚Œã‚‹Webãƒšãƒ¼ã‚¸ä¸ã«ã€DNSã«ã‚ˆã‚‹åå‰è§£æ±ºçµæžœãŒã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•ã‚Œãªã„çŠ¶æ…‹ã§å«ã¾ã‚Œã¦ã„ã‚‹ã¨ã€JavaScriptãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†ã¨ã„ã†ä»•æŽ›ã‘ã§ã™ã€‚ ã€Œhogehoge.example.comã€ãŒæœ¬æ¥ãªã‚‰ã°ã€Œ198.1.100.3ã€ã¨ã„ã†ã‚ˆã†ãªIPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒçµæžœã¨ã—ã¦è¿”ã‚‹ã¨ã“ã‚ã‚’ã€DNSã«ç´°å·¥ã‚’è¡Œã£
defiant 2010/10/07
security

dns

xss
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼†ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚ãƒ£ãƒ³ãƒ—ã®CTFã§å‡ºé¡Œã—ãŸXSSå•é¡Œ - è‘‰ã£ã±æ—¥è¨˜
é›£ã—ã™ãŽã¦è§£ã‘ãªã„ã‚ˆï¼ã¨ä¸æº€å™´å‡ºã ã£ãŸå•é¡Œã€‚æ¥å¹´ã‚„ã‚‹ã¨ã—ãŸã‚‰ã€ã”ã£ãã‚Šå¤‰æ›´ã™ã‚‹ã®ã§å…¬é–‹ã—ã¡ã‚ƒãŠã†ã€‚ http://utf-8.jp/cgi-bin/xss1/search.cgi http://utf-8.jp/cgi-bin/xss2/search.cgi http://utf-8.jp/cgi-bin/xss3/search.cgi (è¿½è¨˜) å›žç”ä¾‹ã‚’ã‚ãƒ£ãƒ³ãƒ—å—è¬›ç”Ÿã® @tyage ã•ã‚“ãŒæ›¸ã„ã¦ãã‚Œã¦ã„ã¾ã™ã€‚GJ! XSSãƒ¡ãƒ¢æ›¸ã | ãƒãƒ£ã‚²ã£ã¦ã‚‹æ—¥ã€…
defiant 2010/08/25
security

xss
ãƒªãƒ³ã‚¯
æºå¸¯é›»è©±äº‹æ¥è€…ã«å¦ã¶ã€ŒXSSå¯¾ç–ã€ - ockeghem's blog
NTTãƒ‰ã‚³ãƒ¢ã¨ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ«ã¯ã€ãƒ•ã‚£ãƒ¼ãƒãƒ£ãƒ¼ãƒ•ã‚©ãƒ³ï¼ˆã„ã‚ã‚†ã‚‹ã‚¬ãƒ©ã‚±ãƒ¼ï¼‰ã«ã¦JavaScriptã®å¯¾å¿œã‚’å§‹ã‚ã¦ã„ã¾ã™ã€‚JavaScriptã«å¯¾å¿œã™ã‚‹ã¨ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)è„†å¼±æ€§ã®æ‡¸å¿µãŒé«˜ã¾ã‚Šã¾ã™ãŒã€ä¸¡ç¤¾ã¯ç‹¬è‡ªã®æ‰‹æ³•ã«ã‚ˆã‚ŠXSSå¯¾ç–ã‚’ã—ã¦ã„ã‚‹ï¼ˆã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹ï¼‰æŒ™å‹•ãŒè¦³æ¸¬ã•ã‚Œã¾ã—ãŸã®ã§å ±å‘Šã—ã¾ã™ã€‚ã“ã®å†…å®¹ã¯ã€ã‚ªãƒ¬æ¨™æº–JavaScriptå‹‰å¼·ä¼šã§ãƒã‚¿ã¨ã—ã¦ä½¿ã£ãŸã‚‚ã®ã§ã™ã€‚ NTTãƒ‰ã‚³ãƒ¢ã«å¦ã¶ã€ŒXSSå¯¾ç–ã€ã¾ãšã€ã‚µãƒ³ãƒ—ãƒ«ã¨ã—ã¦ä»¥ä¸‹ã®ã‚ˆã†ãªXSSè„†å¼±ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ç”¨æ„ã—ã¾ã™ã€‚ <?php session_start(); ?> <body> ã“ã‚“ã«ã¡ã¯<?php echo $_GET['p']; ?>ã•ã‚“ </body>ã“ã‚Œã‚’ä»¥ä¸‹ã®URLã§èµ·å‹•ã™ã‚‹ã¨ã€IE7ã§ã¯ä¸‹å›³ã®ã‚ˆã†ãªè¡¨ç¤ºã«ãªã‚Šã¾ã™ã€‚ []http://example.com/xss01.php?p=å±±ç”°<scrip
defiant 2010/07/26
security

mobile

xss

javascript
ãƒªãƒ³ã‚¯
IIS 7.5 è¯¦ç»†é”™è¯¯ - 404.0 - Not Found
é”™è¯¯æ‘˜è¦ HTTP é”™è¯¯ 404.0 - Not Found æ‚¨è¦æ‰¾çš„èµ„æºå·²è¢«åˆ é™¤ã€å·²æ›´åæˆ–æš‚æ—¶ä¸å¯ç”¨ã€‚
defiant 2009/12/15
security

xss
ãƒªãƒ³ã‚¯
IIS 7.5 è¯¦ç»†é”™è¯¯ - 404.0 - Not Found
é”™è¯¯æ‘˜è¦ HTTP é”™è¯¯ 404.0 - Not Found æ‚¨è¦æ‰¾çš„èµ„æºå·²è¢«åˆ é™¤ã€å·²æ›´åæˆ–æš‚æ—¶ä¸å¯ç”¨ã€‚
defiant 2009/12/15
security

xss
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ“ã‚¹çµ‚äº†ã®ãŠçŸ¥ã‚‰ã›
ã‚µãƒ¼ãƒ“ã‚¹çµ‚äº†ã®ãŠçŸ¥ã‚‰ã› ã„ã¤ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ãŠå®¢æ§˜ãŒã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸã‚µãƒ¼ãƒ“ã‚¹ã¯æœ¬æ—¥ã¾ã§ã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã„ãŸã—ã¾ã—ãŸã€‚ ä»Šå¾Œã¨ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”æ„›é¡§ãã ã•ã„ã¾ã™ã‚ˆã†ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
defiant 2009/09/24
security

xss
ãƒªãƒ³ã‚¯
XSSã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ç™ºè¦‹ã™ã‚‹Â·Pixy MOONGIFT
PHPã¯Webã‚·ã‚¹ãƒ†ãƒ ã®ä¸ã§åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒãƒ”ãƒ¥ãƒ©ãƒ¼ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆè¨€èªžã ã€‚ã ãŒã€æ‰‹è»½ã«ç¿’å¾—ã—ã€é–‹ç™ºãŒè¡Œãˆã‚‹ã¨ã‚ã£ã¦æˆæžœç‰©ã®ãƒ¬ãƒ™ãƒ«ãŒæ§˜ã€…ã§ã‚ã‚Šã€ä¸ã«ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šå•é¡Œã®ã‚ã‚‹ã‚³ãƒ¼ãƒ‰ãŒå¤šæ•°å˜åœ¨ã™ã‚‹ã“ã¨ãŒã‚ã‚‹ã€‚ãã†ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã‚’è§£æ±ºã™ã‚‹æ‰‹æ³•ã‚„ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚‚ã‚ã‚‹ãŒã€ã”ãç°¡å˜ãªã‚·ã‚¹ãƒ†ãƒ ã§ã¯ä½¿ã‚ã‚Œã‚‹ã“ã¨ãŒãªã„ã ã‚ã†ã€‚ SQLã®ã‚³ãƒ¼ãƒ‰ã‚’ç²¾æŸ»ã—ã€å•é¡Œã®ç™ºè¦‹ã«ã¤ãªã’ã‚‹ ãã®ã‚ˆã†ãªã‚‚ã®ã‚’æ”¾ç½®ã—ã¦ãŠãã¨ã€ã„ã¤ä½•æ™‚å•é¡ŒãŒã‚ãä¸ŠãŒã‚‹ã‹åˆ†ã‹ã‚‰ãªã„ã€‚ãã†ã—ãŸä¸å®‰ã‚’å–ã‚Šé™¤ããŸã‚ã«ã‚‚Pixyã‚’ä½¿ã£ã¦ã¿ã‚ˆã†ã€‚ ä»Šå›žç´¹ä»‹ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯Pixyã€XSSã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ç™ºè¦‹ã™ã‚‹ã‚¹ã‚ãƒ£ãƒŠã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã€‚ æœ€åˆã«æ–ã£ã¦ãŠãã¨å®Ÿéš›è©¦ã—ã¦ã¿ãŸã¨ã“ã‚ã§ã¯100%ã®è§£æ±ºã«ã¯ã¤ãªãŒã‚‰ãªã•ãã†ãªã®ã§ã”æ³¨æ„ã„ãŸã ããŸã„ã€‚Pixyã¯Javaã§ä½œã‚‰ã‚ŒãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã€PHPãƒ•ã‚¡ã‚¤ãƒ«ã‚’æŒ‡å®šã—ã¦å®Ÿè¡Œã™ã‚‹ã¨ã‚½ãƒ¼ã‚¹ãƒ•
defiant 2009/08/20
security

software

xss

database
ãƒªãƒ³ã‚¯
i-mode2.0ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æ¤œè¨Ž: æºå¸¯JavaScriptã¨XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã®å¯èƒ½æ€§ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-08-05)
_æºå¸¯JavaScriptã¨XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã®å¯èƒ½æ€§ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€æºå¸¯é›»è©±ã®ãƒ–ãƒ©ã‚¦ã‚¶ã«æè¼‰ã•ã‚ŒãŸJavaScriptã¨ã€Webã‚µã‚¤ãƒˆã®XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚Šã€ã„ã‚ã‚†ã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã«å¯¾ã™ã‚‹ä¸æ£ãƒã‚°ã‚¤ãƒ³ã®å¯èƒ½æ€§ã«ã¤ã„ã¦æ¤œè¨Žã™ã‚‹ã€‚ 5æœˆ28ã«ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã«æ›¸ã„ãŸæ—¥è¨˜ã€Œi-mode2.0ã¯å‰é€”å¤šé›£ã€ã«ã¦ã€ä»Šå¹´ã®NTTãƒ‰ã‚³ãƒ¢ã®å¤ãƒ¢ãƒ‡ãƒ«P-07Aã«ã¦JavaScriptæ©Ÿèƒ½ãŒåˆ©ç”¨åœæ¢ã•ã‚ŒãŸã“ã¨ã‚’æŒ‡æ‘˜ã—ãŸã€‚åŒæ—¥ä»˜ã®NTTãƒ‰ã‚³ãƒ¢ç¤¾ã®ãƒªãƒªãƒ¼ã‚¹ã«ã‚ˆã‚‹ã¨ã€ã€Œã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢æ›´æ–°ã«ä¼´ã„ã€é«˜åº¦åŒ–ã—ãŸæ©Ÿèƒ½ã®ä¸€éƒ¨ã‚’ã”åˆ©ç”¨ã„ãŸã ã‘ãªããªã£ã¦ã„ã¾ã™ãŒã€å†ã³ã”åˆ©ç”¨ã„ãŸã ã‘ã‚‹ã‚ˆã†é€Ÿã‚„ã‹ã«å¯¾å‡¦ã„ãŸã—ã¾ã™ã€ã¨ã‚ã£ãŸãŒã€ãã‚Œä»¥æ¥2ãƒ¶æœˆä»¥ä¸ŠãŒçµŒã¤ã‚‚ã®ã®ã€æœªã ã«JavaScriptæ©Ÿèƒ½ã¯åˆ©ç”¨ã§ããªã„çŠ¶æ…‹ã®ã¾ã¾ã ã€‚ å®Ÿã¯ã€NTTãƒ‰ã‚³ãƒ¢ç¤¾ãŒæ…Œã¦ãµãŸã‚ã„ã¦JavaScriptæ©Ÿèƒ½ã‚’æ€¥é½åœæ¢
defiant 2009/08/05
security

mobile

javascript

xss
ãƒªãƒ³ã‚¯
ï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–
ãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—æ±ºå®šã®ä¾‹ å®Ÿéš›ã«ã€Content-Typeã¨URLã‹ã‚‰ã©ã®ã‚ˆã†ãªãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ãŒæ±ºå®šã•ã‚Œã‚‹ã‹ã€ã„ãã¤ã‹ä¾‹ã‚’ç¤ºã—ã¦ã¿ã¾ã™ã€‚ â—ä¾‹1 Content-TypeãŒtext/plainã®å ´åˆã€Content sniffingãŒæœ‰åŠ¹ã§ã‚ã‚Œã°Content sniffingã«åŸºã¥ããƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ãŒæ±ºå®šã•ã‚Œã¾ã™ã€‚ Content sniffingãŒç„¡åŠ¹ã§ã‚ã‚Œã°ãƒ—ãƒ¬ãƒ¼ãƒ³ãƒ†ã‚ã‚¹ãƒˆã¨ã—ã¦è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ URL http://example.com/search.cgi?format=txt Content-Type
defiant 2009/03/31
security

ie

xss
ãƒªãƒ³ã‚¯
æ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ç¬¬1å›ž ï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆ âˆ’ ï¼ IT
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ å°ã•ãªè©±é¡ŒãŒé¢ç™½ã„ çš†ã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã¨ç”³ã—ã¾ã™ã€‚ ã€Œæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã¨ã„ã†ã“ã¨ã§ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã™ã‚‹ã€æ™®æ®µã‚ã¾ã‚Šè¦‹æŽ›ã‘ãªã„ã‚ˆã†ãªå°ã•ãªè©±é¡Œã‚’å–ã‚Šä¸Šã’ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã«ã€é–‹ç™ºè€…ã®æ–¹ã ã‘ã§ãªãã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œã†æ–¹ã€…ã«ã‚‚èªã‚“ã§ã„ãŸã ããŸã„ã¨æ€ã£ã¦ã„ã¾ã™ã€‚é‡ç®±ã®éš…ã‚’æ¥Šæžã§ã»ã˜ãã‚‹ã‚ˆã†ãªå°ã•ãªè©±é¡Œã°ã‹ã‚Šã§ã™ãŒã€çš†ã•ã‚“ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ ã•ã¦ç¬¬1å›žã¯ã€Internet ExplorerãŒHTMLã‚’è§£é‡ˆã™ã‚‹éš›ã®å¼•ç”¨
defiant 2009/03/31
ie

security

xss
ãƒªãƒ³ã‚¯
SQLã¨XSSã¯æœ€å‡¶ãƒ„ãƒ¼ãƒˆãƒƒãƒ—ï¼Ÿ - æ¥µæ¥½ã›ãã‚…ã‚ãƒ–ãƒã‚°
ä¸–é–“ã®èªè˜ã¨è„…å¨ãƒ¬ãƒ™ãƒ«ã®ã‚®ãƒ£ãƒƒãƒ—â€•â€•XSSã¯æœ¬å½“ã«å±ãªã„ã‹ï¼Ÿï¼šå·å£æ´‹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆãƒ»ã‚¢ã‚¤ã‚ºï¼ˆ13ï¼‰ - ï¼ IT ã“ã‚Œè‰¯ã„è¨˜äº‹ã ãªã‚ã€‚æœ€è¿‘ãªã‚“ã‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®ã‚ãŠã‚Šã™ãŽãŒé¼»ã«ã¤ãæ°—ãŒã—ã¦ã„ãŸã‚“ã ã‚ˆãã€‚ã¾ã‚ãã®ç‰‡æ£’ã‚’æ€ã„ã£ãã‚Šæ‹…ã„ã§ã„ãŸã‚Šã‚‚ã—ãŸã®ã§ã€ä»Šæ›´ä½•ã‚’ã¨è¨€ã‚ã‚Œã¦ã—ã¾ã†ã ã‚ã†ã‘ã©ã€‚ ã“ã®è¨˜äº‹ã§ã¯ã€å®Ÿéš›ã«å³ã—ãŸãƒªã‚¹ã‚¯ã®åˆ†æžã‚’ã¡ã‚ƒã‚“ã¨ã—ã‚ˆã†ãœã€ã¨ã„ã†ã“ã¨ã‚’è¨€ã£ã¦ã„ã‚‹ã¨æ€ã†ã‚“ã ã‘ã©ã€ãã†ã„ã†ã¨ã“ã‚å¤§äº‹ã£ã™ã‚ˆãã€‚ ãŸã ã€ã‚ã£ã—ã®æ„è¦‹ã¯ã¡ã‚‡ã£ã¨é•ã†ã‹ãªã‚ã€‚ã‚ã£ã—ã¯ã€çµå±€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨XSSã£ã¦ã‚»ãƒƒãƒˆã§è€ƒãˆã‚‹ã¹ããªã‚“ã˜ã‚ƒãªã„ã®ã€ã¨æ€ã£ã¦ã„ãŸã‚Šã—ã¾ã™ã€‚ ãã‚‰ç´°ã‹ãè¦‹ã‚Œã°ã€å¯¾ç–ã™ã‚‹æ–¹æ³•ã‚„å¯¾ç–ãã®ã‚‚ã®ã‚‚ç•°ãªã‚Šã¾ã™ã—ã€ä¾‹ãˆã°ã€ŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã¯å¯¾ç–ã‚’è¡Œã£ã¦ã€ã‹ã¤XSSã®å¯¾ç–ã¯è¡Œã£ã¦ã„ãªã„ã€ã¨ã„ã†çŠ¶æ³ã«ãªã‚‹å¯èƒ½æ€§ã¯ã‚¼ãƒã§ã¯ãªã„ã§ã—ã‚‡ã†ã€‚ã—ã‹ã—ç¾å®Ÿçš„ã«ã¯ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³
defiant 2009/03/19
security

xss
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸