ã‚»ã‚ュアã«Goを書ããŸã‚ã®ã€Œã‚¬ãƒ¼ãƒ‰ãƒ¬ãƒ¼ãƒ«ã€ã‚’ç½®ã“ㆠ- 安全ãªGoプãƒãƒ€ã‚¯ãƒˆé–‹ç™ºã«å‘ã‘ãŸæŒç¶šå¯èƒ½ãªã‚¢ãƒ—ãƒãƒ¼ãƒ - Flatt Security Blog
The Go gopher was designed by Renee French. (http://reneefrench.blogspot.com/) The design is licensed under the Creative Commons 3.0 Attributions license. 種々㮠linter ãŒæ§˜ã€…ãªãƒ—ãƒãƒ€ã‚¯ãƒˆã®å“質を高ã‚ã¦ããŸã€ã¨ã„ã†ã®ã¯ç–‘ã†ä½™åœ°ã®ãªã„事実ã§ã™ã€‚実装ã®åˆæ©çš„ãªå•é¡Œã‚’エディタ内や CI/CD パイプラインä¸ã§æ©Ÿæ¢°çš„ã«æ¤œå‡ºã§ãる環境を作れã°ã€é–‹ç™ºè€…ã¯ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚„コードレビューã®é‚ªé”ã«ãªã‚‹äº›æœ«ãªå•é¡Œã‚’早期ã«é ã‹ã‚‰è¿½ã„出ã—ã€æœ¬è³ªçš„ãªå•é¡Œã«é›†ä¸ã§ãã¾ã™ã€‚ ã¾ãŸã€ãã®ã‚ˆã†ãªç’°å¢ƒã¥ãり（e.g. linter ã®ãƒ«ãƒ¼ãƒ«ã‚»ãƒƒãƒˆã®å®šç¾©ã€çµ„織独自ã®ãƒ«ãƒ¼ãƒ«ã®ä½œæˆã€â€¦ï¼‰ã¯ã€ã¾ã•ã«é–‹ç™ºçµ„ç¹”ã®ãƒ™ãƒ¼ã‚¹ãƒ©ã‚¤ãƒ³ã‚’定義ã™ã‚‹ä½œæ¥ã¨ã—ã¦æ‰ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚一度誰ã‹ãŒå®šç¾©
DNS改竄検知ツールをgolangã§ä½œã£ãŸ(Slack通知付ã) - Code Day's Night
DNSã®NSレコードã€MXレコードã®æ”¹ç«„を検知（変更検知）ã—ã€ã‚ªãƒ—ションã§Slack通知もã§ãるツールを公開ã—ã¾ã—ãŸã€‚ https://github.com/ichikaway/nschecker Go言語ã§é–‹ç™ºã—ã€Linuxã¨Macã®ãƒã‚¤ãƒŠãƒªã‚‚ダウンãƒãƒ¼ãƒ‰ã§ãã¾ã™ã€‚ ã™ãã«å®Ÿè¡Œã§ãã‚‹ãŸã‚ã€cron指定ã—ã¦ãŠã‘ã°æ„図ã—ãªã„レコードã®å¤‰æ›´ãŒã‚ã‹ã‚Šã¾ã™ã€‚ 作ã£ãŸçµŒç·¯ 最近ã€ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã®äº‹ä»¶ã‚’ç›®ã«ã™ã‚‹ã‚ˆã«ãªã‚Šã¾ã—ãŸã€‚ DNSè¨å®šã®æ”¹ã–ã‚“ã«ã‚ˆã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«æ³¨æ„喚起（JPRS） | ScanNetSecurity 2020å¹´6月ã«ã‚³ã‚¤ãƒ³ãƒã‚§ãƒƒã‚¯ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯äº‹ä»¶ãŒèµ·ãã¦ã„ã¾ã™ã€‚ コインãƒã‚§ãƒƒã‚¯ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã®æ‰‹æ³•ã‚’調査ã—㟠- Shooting!!! ã“ã®è¨˜äº‹ã‚’èªã‚€ã¨ã€æ”¹ç«„ã•ã‚ŒãŸãƒ¬ã‚³ãƒ¼ãƒ‰ã¯ã€ns-1515.awsdns-"0"61.orgã®ã‚ˆã†ãªä¸€è¦‹æ£ã—ãã†ã ãŒ
Security assessment techniques for Go projects
The Trail of Bits Assurance practice has received an influx of Go projects, following the success of our Kubernetes assessment this summer. As a result, we’ve been adapting for Go projects some of the security assessment techniques and tactics we’ve used with other compiled languages. We started by understanding the design of the language, identifying areas where developers may not fully understan
GitHub - ssllabs/ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
This tool is a command-line client for the SSL Labs APIs, designed for automated and/or bulk testing. If you'd like to contribute, please have a look at the TODO file. For larger work, please get in touch first. For smaller work (there are some TODO comments in the source code), feel free to submit pull requests. To report a problem related to this tool, please create a new issue on GitHub: https:
OWASP/Go-SCPã‚’èªã‚“ã§ã‚»ã‚ュアプãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã¨Goã‚’å¦ã¶ - My External Storage
ã“ã®è¨˜äº‹ã¯Go Advent Calendar 2019ã®4日目ã®è¨˜äº‹ã«ãªã‚‹ã€‚ 3日目ã¯@ikawahaã•ã‚“ã®ã€ŒGoa v3 ã®ãƒ†ã‚¹ãƒˆã‚’シュッã¨ã™ã‚‹]ã€ã ã£ãŸã€‚ 本記事ã§ã¯Open Web Application Security Project（OWASP)ãŒå…¬é–‹ã—ã¦ã„ã‚‹Go-SCPリãƒã‚¸ãƒˆãƒªã‚’紹介ã™ã‚‹ã€‚ Webアプリケーションã«ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ティング（XSS）やクãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRF）ãªã©ã€æ§˜ã€…ãªè„†å¼±æ€§ãŒæ½œã‚€å¯èƒ½æ€§ãŒã‚る。 脆弱性対ç–ã®æ›¸ç±ã¨ã—ã¦ã¯ã€ä½“系的ã«å¦ã¶ 安全ãªWebアプリケーションã®ä½œã‚Šæ–¹ï¼ˆå¾³ä¸¸æœ¬ï¼‰ãªã©ãŒæœ‰åã ã‚ã†ã€‚ Go-SCPリãƒã‚¸ãƒˆãƒªã«ã¯Webアプリケーションを実装ã™ã‚‹éš›ã«å¿…è¦ãªè„†å¼±æ€§ã®çŸ¥è˜ã¨ã€Goを使ã£ãŸè„†å¼±æ€§å¯¾ç–ã®å®Ÿè£…方法ãŒå«ã¾ã‚Œã¦ã„る。 https://github.com/OWASP/Go-SCP TL;DR OWASPã¨ã„ã†WEB
GitHub - drk1wi/Modlishka: Modlishka. Reverse Proxy.
Modlishka is a powerful and flexible HTTP reverse proxy. It implements an entirely new and interesting approach of handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a single domain, without a requirement of installing any additional certificate on the client. What exactly does this mean? In short, it simply
Vulsã®ã‚³ãƒ¼ãƒ‰ã‚’èªã‚€ ãã®ï¼’ go-cve-dictionary ã‚’ç†è§£ã™ã‚‹ã€ãƒã‚°ã‚’見ã¤ã‘ã¦ãƒ—ルリクを出ã—ã¦ãƒžãƒ¼ã‚¸ã•ã‚Œã‚‹ã¾ã§ - Security Index
å‰å›žã€Vulsã®ã‚³ãƒ¼ãƒ‰ã‚’èªã‚€ ãã®ï¼‘ 全体åƒã®æŠŠæ¡ã§ã–ã£ãã‚Šã¨scanコマンド周りã®ãーã†ã‚³ãƒ¼ãƒ‰ã¨å®Ÿè¡Œæ™‚ã®æµã‚Œã®ç†è§£ã‚’è¡Œã„ã¾ã—ãŸã€‚ 今回ã¯ã€Vulsã®ä¸ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ go-cve-dictionary ã«ã¤ã„ã¦ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’èªã‚“ã§ã€ç†è§£ã‚’ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãŸã€ä»Šå›žã¯ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’確èªã—ã¦ã„ãä¸ã§ãƒã‚°ã‚’発見ã—プルリクを出ã—ã¦ã¿ã¾ã—ãŸã®ã§ãƒ—ルリクã®æŠ•ã’æ–¹ã«ã¤ã„ã¦ã‚‚ç°¡å˜ã«è§£èª¬ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ (追記 2019/11/23) 無事プルリクãŒãƒžãƒ¼ã‚¸ã•ã‚Œã¾ã—ãŸï¼ go-cve-dictionaryã®ç‰¹å¾´ ソースコード main.go commands/ commands/fetchnvd.go 1. データベース接続 2. metaæƒ…å ±ã®å–å¾— 3. metaæƒ…å ±ã‚ˆã‚Šæ›´æ–°ãŒå¿…è¦ã‹ã©ã†ã‹åˆ¤æ– (éŽåŽ»ã®metaæƒ…å ±ã¨æ¯”較) 4. NVDã®è„†å¼±æ€§æƒ…å ±ã®åŽé›†ã€å¤‰æ› 5. è„†å¼±æ€§æƒ…å ±ã‚’ãƒ‡ãƒ¼ã‚¿
Vulsã¯ã©ã†ã‚„ã£ã¦è„†å¼±æ€§ã‚’見ã¤ã‘ã‚‹ã‹ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ã¯ã˜ã‚ã« VulsãŒã©ã†ã‚„ã£ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚ŒãŸãƒ‘ッケージã¨ãã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å¯¾å¿œã™ã‚‹CVEを見ã¤ã‘出ã™ã®ã‹ç–‘å•ã«æ€ã„ã¾ã—ãŸã€‚ Golangã‚‚Vulsも何も分ã‹ã‚‰ãªã„ã®ã§é–“é•ã£ã¦ãŸã‚‰çªã£è¾¼ã‚“ã§ãã ã•ã„ 関数呼ã³å‡ºã—リスト（？ ã“ã†ã„ã†ã¨ãã©ã†ã„ã†å›³ã«ã™ã‚Œã°è‰¯ã„ã‹ã‚ã‹ã‚“ãªã„ã§ã™ã… ãƒãƒ¼ã‚«ãƒ«ã®CentOSã‚’Deep Scanã™ã‚‹å ´åˆã‚’仮定ã—ã¦ã„ã¾ã™ã€‚主è¦ãªã‚‚ã®ã ã‘抜ã出ã—ã¦ã¾ã™ã€‚ ()ã¯æ·±ã•ï¼Ÿã¿ãŸã„ãªã‚‚ã®ã®ã¤ã‚‚ã‚Šã§ã™ (0) commands/scan.go Execute vuls scanã•ã‚ŒãŸã¨ã呼ã³å‡ºã•ã‚Œã‚‹ (1) scan/ser
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - ozansz/binaryedge-challenge-amileaked
GitHub - PentestPad/subzy: Subdomain takeover vulnerability checker
GitHub - mhmdiaa/chronos: Wayback Machine OSINT Framework
GitHub - dreddsa5dies/goHackTools: Hacker tools on Go (Golang)
GitHub - haccer/subjack: Subdomain Takeover tool written in Go
GitHub - abadojack/gocensys: Go library for interacting with Censys
GitHub - projectdiscovery/dnsprobe: DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.
GitHub - tomnomnom/burl: A Broken-URL Checker
GitHub - hakluke/hakrawler: Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
GitHub - ffuf/ffuf: Fast web fuzzer written in Go
GitHub - ropnop/go-windapsearch: Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
GitHub - kgretzky/evilginx2: Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
{{#tags}}- {{label}}
{{/tags}}