[B! xss] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

xssã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (81)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚ã‚‹ãã‹ãŸ
2024/10/5 YAPC::Hakodate 2024
ishideo 2024/10/07
vulnerability

headers

click-jacking

xss

csrf

sanitize

path-traversal

phishing

css-injection

dompurity
ãƒªãƒ³ã‚¯
GitHub - thecybertix/One-Liner-Collections: This Repositories contains list of One Liners with Descriptions and Installation requirements
ishideo 2024/07/01
onliner

bash

python

cli

recon

vulnerability

sqli

xss

github
ãƒªãƒ³ã‚¯
æ³¨ç›®ã—ãŸã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®è„†å¼±æ€§2é¸/ Security.Tokyo #3
Security.Tokyo #3ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®ãƒ‘ã‚¹ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã¨ã€postMessageçµŒç”±ã®è„†å¼±æ€§ã‚’å–ã‚Šä¸Šã’ã¾ã—ãŸã€‚
ishideo 2024/03/10
client

slide

speakerdeck

javascript

xss

csrf

open-redirect

path-traversal

vulnerability

jwt
ãƒªãƒ³ã‚¯
Notion â€“ The all-in-one workspace for your notes, tasks, wikis, and databases.
ishideo 2024/01/26
vulnerability

pentest

threat

bypass

xss

checklist

sqli

open-redirect

notion
ãƒªãƒ³ã‚¯
GitHub - ReAbout/web-sec: WEBå®‰å…¨æ‰‹å†Œ(çº¢é˜Ÿå®‰å…¨æŠ€èƒ½æ ˆ)ï¼Œæ¼æ´žç†è§£ï¼Œæ¼æ´žåˆ©ç”¨ï¼Œä»£ç å®¡è®¡å’Œæ¸—é€æµ‹è¯•æ€»ç»“ã€‚ã€æŒç»æ›´æ–°ã€‘
ishideo 2023/09/06
web

xss

csrf

vulnerability

ssrf

sqli

xxe

webshell

github

chinese
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€è¦å¯Ÿã§ã™ï¼æ—¢ã«åŒ…å›²ã•ã‚Œã¦ã„ã‚‹ï¼è¦³å¿µã—ã¦ãƒ˜ãƒƒãƒ€ã‚’æŒ¿å…¥ã—ãªã•ã„ï¼ - ã‚¨ãƒ ã‚¹ãƒªãƒ¼ãƒ†ãƒƒã‚¯ãƒ–ãƒã‚°
ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ãƒ–ãƒã‚°ãƒªãƒ¬ãƒ¼2å›žç›®ã€‘ ã“ã‚“ã«ã¡ã¯ã€‚ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã®å±±æœ¬ã§ã™ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã¯ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—å…¨ä½“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å‘ä¸Šã•ã›ã‚‹ãŸã‚ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒãƒ¼ãƒ ãªã®ã§ã™ãŒã€å„ãƒ—ãƒãƒ€ã‚¯ãƒˆé–‹ç™ºãƒãƒ¼ãƒ ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ã€å”åŠ›ã—ãªãŒã‚‰å…¨ä½“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å‘ä¸Šã•ã›ã¦ã„ãã®ãŒãƒŸãƒƒã‚·ãƒ§ãƒ³ã§ã™ã€‚ ãã®ãŠä»•äº‹ã®ä¸€ç’°ã¨ã—ã¦ã€Œã“ã®éƒ¨åˆ†ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€ãŒè¶³ã‚Šãªã„ã‹ã‚‰å…¥ã‚Œã¦ãã ã•ã„ï¼ã€ã¨ã„ã†ã‚„ã‚Šã¨ã‚Šã‚’æ—¥å¸¸çš„ã«è¡Œãªã£ã¦ã„ã¾ã™ã€‚ ä»Šæ—¥ã¯ã“ã®ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€ã€ã¨ã„ã†ã‚‚ã®ãŒä¸€ä½“ä½•ãªã®ã‹ã€ä»Šã•ã‚‰äººã«èžã‘ãªã„ã‚¢ãƒ¬ã‚³ãƒ¬ã‚’å–ã‚Šã¾ã¨ã‚ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€è¦å¯Ÿã®æ—¥å¸¸ã®å›³(ã‚‚ã¡ã‚ã‚“å†—è«‡ã§ã™) ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€ ãã‚‚ãã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€ã¨ã¯ï¼Ÿ æ¯”è¼ƒçš„å®‰å…¨ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ˜ãƒƒãƒ€ X-Content-Type-Options X-XSS-Protection Strict-Tr
ishideo 2023/06/14
cybersecurity

http

headers

xss
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã€MIXI 23æ–°å’æŠ€è¡“ç ”ä¿®ã€‘
23æ–°å’æŠ€è¡“ç ”ä¿®ã§å®Ÿæ–½ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã®è¬›ç¾©è³‡æ–™ã§ã™ã€‚ è³‡æ–™ã®åˆ©ç”¨ã«ã¤ã„ã¦ å…¬é–‹ã—ã¦ã„ã‚‹è³‡æ–™ã¯å‹‰å¼·ä¼šã‚„ä¼æ¥ã®ç ”ä¿®ãªã©ã§è‡ªç”±ã«ã”åˆ©ç”¨é ‚ã„ã¦å¤§ä¸ˆå¤«ã§ã™ãŒã€ä»¥ä¸‹ã®å½¢ã§ã®åˆ©ç”¨ã ã‘ã”é æ…®ãã ã•ã„ã€‚ ãƒ»å—è¬›è€…ã‹ã‚‰å‚åŠ è²»ã‚„æŽˆæ¥æ–™ãªã©ã‚’é›†ã‚ã‚‹å½¢ã§ã®åˆ©ç”¨ï¼ˆä¼šå ´è²»ã‚„é£²é£Ÿè²»ãªã©â€¦
ishideo 2023/06/12
mixi

cybersecurity

slide

vulnerability

xss

sqli

api

cloud

speakerdeck
ãƒªãƒ³ã‚¯
GitHub - joe-shenouda/awesome-cyber-skills: A curated list of hacking environments where you can train your cyber skills legally and safely
ishideo 2023/04/14
awesome

list

xss

pentest

cybersecurity

vulnerability

threat

exploit

github
ãƒªãƒ³ã‚¯
BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting
ishideo 2023/01/04
bug-bounty

vulnerability

rce

ssrf

xss

sqli

idor

search
ãƒªãƒ³ã‚¯
GitHub - wonda-tea-coffee/security-tips
ishideo 2022/09/15
security

vulnerability

threat

xss

sqli

qiita

docker

github

awesome

list
ãƒªãƒ³ã‚¯
BSCPæ”»ç•¥ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ
ishideo 2022/09/15
bscp

burp-suite

cheatsheet

vulnerability

xss

sqli

cors

web-cache-poisoning
ãƒªãƒ³ã‚¯
CSP Evaluator
CSP Evaluator allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. It assists with the process of reviewing CSP policies, which is usually a manual task, and helps identify subtle CSP bypasses which undermine the value of a policy. CSP Evaluator checks are based on a large-scale study and are aimed to
ishideo 2022/08/14
csp

xss

security

webservice

google

check

osint

header
ãƒªãƒ³ã‚¯
GitHub - sobinge/shadow2: æ¸—é€ è¶…å…¨é¢çš„æ¸—é€èµ„æ–™ðŸ’¯ åŒ…å«ï¼š0dayï¼Œxssï¼Œsqlæ³¨å…¥ï¼Œææƒâ€¦â€¦
ishideo 2022/08/08
shadow2

0day

xss

sqli

vulnerability

threat

github
ãƒªãƒ³ã‚¯
GitHub - twseptian/oneliner-bugbounty: oneliner commands for bug bounties
ishideo 2022/07/19
oneliner

bug-bounty

cli

xss

sqli

misconfiguration

ssrf

vulnerability

recon

github
ãƒªãƒ³ã‚¯
T00ls/Vulns.md at main Â· 1amUnvalid/T00ls
ishideo 2022/05/11
github

git

ip

rotate

open-redirect

xss

cli

leak
ãƒªãƒ³ã‚¯
DevOps-Security/88-xss/README.md at fd39f3b0c2e7ce77813948e189117cdb06c296c1 Â· Make-School-Courses/DevOps-Security
ishideo 2021/12/21
devops

xss

github
ãƒªãƒ³ã‚¯
h_data/get/Links.txt at 895290ddf84b5fca5e831ce9815b540d41ef6c90 Â· mCstl/h_data
ishideo 2021/12/21
xss

forum

exploit

scanner

payload

cheatsheet

sqli

link

list
ãƒªãƒ³ã‚¯
Dom XSS Scanner is History | Geeksta
ishideo 2021/12/21
xss

scanner
ãƒªãƒ³ã‚¯
GitHub - nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters: A list of resources for those interested in getting started in bug bounties
ishideo 2021/10/13
nahamsec

resource

bug-bounty

vulnerability

xss

ssrf

github

security

pentest
ãƒªãƒ³ã‚¯
GitHub - Vanshal/Bug-Hunting: The aim of this Reposiotry is to Provide the Resoursces of Learning at one place For Bug Bounty Hunters.
ishideo 2021/10/04
bug-bounty

bug-hunting

vulnerability

xss

csrf

sqli

subdomain

takeover

github

rce
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx