[B! security][Security] dslã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

dsl id:dsl

securityã¨Securityã«é–¢ã™ã‚‹dslã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
dsl 2011/04/23
Security

XSS
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - Bluetoothã§å±±æ‰‹ç·šã®ä¹—é™ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’è¿½è·¡ã—ã¦ã¿ãŸ , ãƒ¦ãƒ“ã‚ã‚¿ã‚¹ç¤¾ä¼šã®æ©ãæ–¹(6) Bluetoothã®ã€Œãƒ‡ãƒã‚¤ã‚¹ã®å…¬é–‹ã€ã€Œæ¤œå‡ºå¯èƒ½ã«ã™ã‚‹ã€..
â– Bluetoothã§å±±æ‰‹ç·šã®ä¹—é™ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’è¿½è·¡ã—ã¦ã¿ãŸ ã“ã®æ—¥è¨˜ã‚’æ›¸ãå§‹ã‚ã¦ã‹ã‚‰ã‚‚ã†6å¹´ã«ãªã‚ã†ã¨ã—ã¦ã„ã‚‹ã€‚æ›¸ãå§‹ã‚ãŸãã£ã‹ã‘ã¯ã€RFIDã‚¿ã‚°ã®ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼å•é¡ŒãŒç†è§£ã•ã‚Œãªã„ã“ã¨ã«ç„¦ã‚Šã‚’æ„Ÿã˜ãŸã‹ã‚‰ã ã£ãŸã€‚å½“æ™‚ã®ç©ºæ°—ã§ã¯ã€RFIDã‚¿ã‚°ã¯5å¹´å¾Œãã‚‰ã„ã«æ™®åŠã—ã€ã—ã ã„ã«RFIDã®åŸ‹ã‚è¾¼ã¾ã‚ŒãŸæ—¥ç”¨å“ã§æº¢ã‚Œã‹ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã€10å¹´å¾Œãã‚‰ã„ã«ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼å•é¡ŒãŒé¡•åœ¨åŒ–ã™ã‚‹ã¨ç›®ã•ã‚Œã¦ã„ãŸã€‚ã—ã‹ã—ã€6å¹´çµŒã£ãŸç¾åœ¨ã€ç§ã®é´ã«RFIDã‚¿ã‚°ã¯åŸ‹ã‚è¾¼ã¾ã‚Œã¦ã„ãªã„ã€‚ å½“æ™‚ã®è°è«–ã§æã‹ã‚Œã¦ã„ãŸRFIDã‚¿ã‚°ã®å•é¡Œã¯ã€ç„¡ç·šLANã‚„Bluetoothã«ã‚‚å…±é€šã™ã‚‹ã“ã¨ã§ã‚ã‚Šï¼ˆMACã‚¢ãƒ‰ãƒ¬ã‚¹ãŒãƒ¦ãƒ‹ãƒ¼ã‚¯IDã¨ãªã‚‹ï¼‰ã€ãã‚Œã‚‰ã®æ–¹ãŒå…ˆã«æ™®åŠã™ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã¨ã„ã†äºˆæ„Ÿã¯ã‚ã£ãŸãŒã€ç¾æ™‚ç‚¹ã§ã‚‚ã€ç„¡ç·šLANæ©Ÿå™¨ã‚’æŒã¡æ©ã„ã¦ã„ã‚‹äººã¯ã”ãä¸€éƒ¨ã®äººã«é™ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€Bluetoothã¯ã©ã†ã ã‚ã†ã‹ã€‚ã“ã‚Œã¾ã§ã«ã‚‚ä½•åº¦ã‹ã€æœ€è¿‘ã®Bluetoo
dsl 2009/03/03
ã™ã°ã‚‰ã—ã„å®Ÿé¨“ã€‚ãƒ¡ãƒ¼ã‚«ãƒ¼ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆOnã§å‡ºè·ã™ã‚‹ã‹ã‚‰ã„ã‘ãªã„ã®ã‚ˆããƒ¼ã€‚ã©ã†ã›Bluetoothãªã‚“ã¦ã‚¹ã‚ãƒ«é«˜ã„ãƒ¦ãƒ¼ã‚¶ã—ã‹ä½¿ã‚ãªã„ã‚“ã ã‹ã‚‰ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆOffã§ã„ã„ã®ã«ã€‚

IT

security
ãƒªãƒ³ã‚¯
LAMPã®Pã‚’PHPã‹ã‚‰Perl/Python/Rubyã«æ›¿ãˆã‚‹ã ã‘ã§ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯å‘ä¸Šã—ãªã„è¨¼æ‹
(Last Updated On: 2008å¹´4æœˆ3æ—¥)èª¤è§£ã‚’æ‹›ãè¨˜äº‹ â€“ LAMPã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹4ã¤ã®æ–¹æ³•ã§ç´¹ä»‹ã—ãŸè¨˜äº‹ã‚ˆã†ã«ã€æœ€è¿‘ã€Œè¨€èªžã‚’æ›¿ãˆã‚‹ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå‘ä¸Šã™ã‚‹ã€ã¨ã„ã£ãŸé–“é•ã£ãŸèªè˜ãŒåºƒã¾ã‚Šã¤ã¤ã‚ã‚‹ã‚ˆã†ã«æ€ãˆã¾ã™ã€‚ çµè«–ã‹ã‚‰ã„ã†ã¨ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã™ã‚‹æ©Ÿèƒ½ãŒåŒç‰ãªè¨€èªžã§ã‚ã‚Œã°ã€Œè¨€èªžã‚’æ›¿ãˆã‚‹ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå‘ä¸Šã™ã‚‹ã„ã†è€ƒãˆã€ã¯å¦„æƒ³ã§ã™ã€‚è¨€èªžã‚’æ›¿ãˆã¦ã‚‚ã€æ£ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çŸ¥è˜ã‚’æŒã¡åˆã‚ã›ãŸé–‹ç™ºè€…ãŒé–‹ç™ºã—ãªã„ã¨ã€å±ãªã„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒç°¡å˜ã«ä½œã‚Œã¾ã™ã€‚ ã¡ã‚‡ã†ã©è‰¯ã„è¨¼æ‹ ã¨ãªã‚‹Ploneã®CVEã‚¨ãƒ³ãƒˆãƒªãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚Ploneã¯Pythonã§è¨˜è¿°ã•ã‚ŒãŸCMSã§ã™ã€‚ç§ã‚‚åˆ©ç”¨ã—ãŸã“ã¨ãŒã‚ã‚Šã¾ã™ãŒã€ãªã‹ãªã‹ã‚ˆãã§ãã¦ã„ã‚‹CMSã§ã™ã€‚å‡ºæ¥ç«‹ã¦ã®CMSã§ã¯ãªãä½•å¹´ã‚‚å‰ã‹ã‚‰å®Ÿç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã¨ã—ã¦Pythonã®Webã‚·ã‚¹ãƒ†ãƒ ã‚ˆãåˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹Zopeã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚
dsl 2008/03/21
php

security
ãƒªãƒ³ã‚¯
äºˆç´„èªžãªã—ã«JavaScriptã§ã„ã‚ã„ã‚ã—ã¦ã¿ã‚‹ - hoshikuzu | star_dust ã®æ›¸æ–Ž
JavaScriptã§ã€‚æ–‡å—åˆ—'al%65rt%28%22Hello%20World%21%22%29'ã‚’unescape()ã—ã¦ã‚„ã£ã¦ãã®å¾Œã«eval()ã«é€šã›ã°ã€çµæžœã¨ã—ã¦ã€ŒHello World!ã€ã¨alertã•ã‚Œã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã“ã®æ“ä½œã‚’ã€å®‰ç›´ãªXSSå¯¾ç–ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã«ãŠã‘ã‚‹ãƒ¨ãƒ¯ãƒ¨ãƒ¯ãªå®ˆå‚™ã®å›žé¿ã‚’ç›®çš„ã«ã€JavaScriptã®äºˆç´„èªžï¼ˆã¨è¨€ã£ã¦ã‚ˆã„ã§ã™ã‹ï¼Ÿï¼‰ã‚’ã€é™½ã«ã¯ä¸€åˆ‡ã€ä½¿ã‚ãšã«è¡Œã£ã¦ã¿ã‚‹ã¨ã„ã†è©¦ã¿ã§ã™ã€‚ä»¥ä¸‹ã€‚ <script> ( (21)['c' + 'onstructor']['co' + 'nstructor'] ( ( ( (21)['con' + 'structor']['cons' + 'tructor'] ('retur' + 'n unesc' + 'ape') ) () ) ('al%65' + 'rt%28%22Hello%20World%21%22%29'
dsl 2008/03/18
JavaScript

security

xss
ãƒªãƒ³ã‚¯
1