[B! Security] k_37toã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

k_37to id:k_37to

Securityã«é–¢ã™ã‚‹k_37toã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (109)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

çŸ¥ã‚‰ãªã‹ã£ãŸã‚‰NGãªWEBã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§ä¸€è¦§ : mwSoft blog
å…ˆæ—¥ã€Amebaãªã†ãŒCSRFã¨ã„ã†éžå¸¸ã«ãƒãƒ”ãƒ¥ãƒ©ãƒ¼ãªè„†å¼±æ€§ã‚’æŠ«éœ²ã—ãŸã‹ã¨æ€ã£ãŸã‚‰ã€ã“ã“æ•°æ—¥ã¯ã‚»ãƒ–ãƒ³ãƒãƒƒãƒˆã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã§XSSã®è„†å¼±æ€§ã¨ã€IDæŽ¨æ¸¬ã«ã‚ˆã‚‹ä»–ãƒ¦ãƒ¼ã‚¶ã®å€‹äººæƒ…å ±é–²è¦§ã®å•é¡ŒãŒç™ºç”Ÿã—ã¦ã„ã‚‹ã¨ã„ã†å™‚ãŒæµã‚Œã¦ã„ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ã®æƒ…å ±ã‚’é ã‹ã£ã¦ãŠããªãŒã‚‰ã€åŸºæœ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å¯¾ç–ã‚‚ã§ãã¦ã„ãªã„ã¨ã„ã†ã®ã¯ã€éŠ€è¡Œã«ä¾‹ãˆã‚‹ãªã‚‰ã€ãŠé‡‘ã‚’é ã‘ã‚ˆã†ã¨ã—ãŸæ™‚ã«ã€ŒãŠé‡‘ã¯é ã‹ã‚Šã¾ã™ã€‚ã¡ã‚ƒã‚“ã¨ä¿ç®¡ã—ã¾ã™ã€‚ã§ã‚‚è¦å‚™ã¯ã‚ã¾ã‚Šã—ãªã„ã®ã§ç›—ã¾ã‚ŒãŸã‚‰ã‚¹ã‚¤ãƒžã‚»ãƒ³ã€ã¨è¨€ã‚ã‚Œã‚‹ã‚ˆã†ãªã‚‚ã®ã ã¨æ€ã†ã€‚ è¦å‚™ã«ç©´ãŒã‚ã£ãŸã¨ã„ã†ã®ã§ã¯ãªãã€ã¾ã¨ã‚‚ã«è¦å‚™ã—ã¦ã¾ã›ã‚“ã§ã—ãŸã€ã¨ã„ã†ã®ã¯ã•ã™ãŒã«ã‚ã‚Šãˆãªã„ã“ã¨ã§ã™ã€‚ ãã“ã§ã€é‡Žè‰¯WEBãƒ—ãƒã‚°ãƒ©ãƒžã§ã‚ã‚‹ç§ãŒçŸ¥ã£ã¦ã„ã‚‹è„†å¼±æ€§ã‚’åˆ—æŒ™ã—ã¦ã¿ãŸã€‚ ç§ã¯ãƒ—ãƒã‚°ãƒ©ãƒžã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã§ã™ã€‚ã—ã‹ã‚‚ä»Šå¹´ã®æ˜¥è¾ºã‚Šã‹ã‚‰ãšã£ã¨å¤–å‘ã‘ã®WEBãƒ—ãƒã‚°ãƒ©ãƒ ã¯çµ„ã‚“ã§ã¾ã›ã‚“ã€‚ ãã®äººé–“ãŒçŸ¥ã£ã¦ã„ã‚‹ã‚‚ã®ã‚’ä¸¦ã¹
k_37to 2009/12/19
web

security
ãƒªãƒ³ã‚¯
Amazonã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ã¾ã¨ã‚ - ãƒ¢ã‚¹ãƒžãƒ³
ã‚¯ãƒ©ã‚¦ãƒ‰ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã«ä¹—ã‚Šå‡ºã™éš›ã®æœ€å¤§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®æ‡¸å¿µã¯ã€é¡§å®¢æƒ…å ±ãƒ»æ›¸ããŸã‚ãŸãƒã‚¨ãƒ ãƒ»ãƒžãƒ«ç§˜ç”»åƒãªã©ã‚’èª°ã‹ã«é ã‘ã‚‹ã¨ã“ã‚ã«ã‚ã‚‹ã€‚ã€Œè²¡å¸ƒãªã©ã®è²´é‡å“ã¯è‚Œèº«é›¢ã•ãšã€è‡ªåˆ†ã®è¿‘ã„ã¨ã“ã‚ã«ç½®ã„ã¦ãŠãã€ã¨ã„ã†ä»Šã¾ã§ã®å¸¸è˜ã«åã™ã‚‹è¡Œå‹•ã‚’è¿«ã‚‰ã‚Œã‚‹ã®ã§ã‚ã‚‹ã€‚ã‚¯ãƒ©ã‚¦ãƒ‰æã‚ã—ã‚„ã€‚ã¾ã—ã¦é ã‘ã‚‹ç›¸æ‰‹ãŒAmazonã¨ã„ã†140å„„å††ã®è¿½å¾´èª²ç¨Žã‚’å‘½ã˜ã‚‰ã‚Œã‚ˆã†ãªäº‹æ¥è€…ã§ã‚ã‚Œã°ãªãŠã•ã‚‰ã§ã‚ã‚‹ã€‚ ã“ã®èª°ã—ã‚‚æ„Ÿã˜ã‚‹ä¸å®‰ã‚’æ‰•æ‹ã™ã‚‹ãŸã‚ã«Amazon Web Services (AWS) ã¯è‡ªç¤¾ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’ã¾ã¨ã‚ãŸæ–‡ç« ã‚’å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ Amazon Web Services Security ãƒ›ãƒ¯ã‚¤ãƒˆãƒšãƒ¼ãƒ‘ãƒ¼ (PDFæ³¨æ„) è¦ã¯ã€ŒAmazonã¯ã“ã‚“ãªã«é ‘å¼µã£ã¦çš†ã•ã‚“ã®ãƒ‡ãƒ¼ã‚¿ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç¢ºä¿ã—ã¦ã„ã¾ã™ã‚ˆã€ã¨ã„ã†è²©å£²ä¿ƒé€²ã®ä¸€ç’°ã§ã‚ã‚‹ã€‚ã—ã‹ã—ã‚ˆãã¾ã¨ã¾ã£ã¦ã„ã¦ã€Amazonã®ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ã‚’æ¤œè¨Žã—ã¦ã„ã‚‹äººã ã‘ã§ãªã
k_37to 2009/12/11
Amazon

EC2

s3

aws

security

resources
ãƒªãƒ³ã‚¯
WITOOL ( Web sql injection tool )
â’š Introduce WITOOL is SQL injection tool by .NET (2.0). - For SQL Server, Oracle - Error Base and Union Base â’š Last Update
k_37to 2009/01/26
security

SQL

injection

tools
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
k_37to 2008/12/25
browser

security

document
ãƒªãƒ³ã‚¯
ratproxyã¨wapitiã‚’çµ„ã¿åˆã‚ã›ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒ³
ä»¥å‰ãƒ•ãƒªãƒ¼ã§ä½¿ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒŠãƒ»ãƒ„ãƒ¼ãƒ«ã¾ã¨ã‚ã¨ã„ã†ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã„ãŸã®ã§ã™ãŒã€ãã®ç¶šãã¨ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã‹ã‚‰å®Ÿè¡Œã™ã‚‹ã‚¿ã‚¤ãƒ—ã®ãƒ„ãƒ¼ãƒ«ã¨ãƒ—ãƒã‚ã‚·åž‹ã®ãƒ„ãƒ¼ãƒ«ã‚’çµ„ã¿åˆã‚ã›ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ãã‚Œãã‚Œã‚‚æ‚ªç”¨ã¯ã—ãªã„ã§ãã ã•ã„ãï¼ ä¸€ã¤æ³¨æ„ã—ã¦ãŠã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„ã®ã¯ã€ç‰¹å®šã®ãƒšãƒ¼ã‚¸ã«å¯¾ã—ã¦è©³ç´°ãªãƒ†ã‚¹ãƒˆã‚’è¡Œã†ã®ã§ã‚ã‚Œã°ã€æ‰‹å‹•ã§ãƒ†ã‚¹ãƒˆã—ãŸæ–¹ãŒã€ç²¾åº¦ã¯é«˜ã„ã§ã™ï¼ˆãƒ†ã‚¹ãƒˆã™ã‚‹äººã®ã‚¹ã‚ãƒ«ã®å•é¡Œã‚‚ã‚ã‚Šã¾ã™ãŒï¼‰ã€‚ ä»Šå›žç´¹ä»‹ã™ã‚‹ã‚ˆã†ãªæ–¹æ³•ã ã¨ã€å€‹äººã®ã‚¹ã‚ãƒ«ã«ä¾å˜ã™ã‚‹ã“ã¨ãªãã€ã‚ã‚‹ç¨‹åº¦ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¹ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã‚ˆãƒ¼ã€ã¨ã„ã†ã“ã¨ãŒä¸»é¡Œã§ã™ã€‚ ãã‚Œã§ã¯ã€æ—©é€Ÿæœ¬é¡Œã§ã™ã€‚ ratproxy ã¨ wapiti ã®èª¬æ˜Žã«é–¢ã—ã¦ã¯ã€ãƒ•ãƒªãƒ¼ã§ä½¿ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒŠãƒ»ãƒ„ãƒ¼ãƒ«ã¾ã¨ã‚ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ã¨ã‚‚ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒä¸ŠãŒã£ã¦ã„ã¾ã™ãŒã€ãã‚Œã»ã©å¤‰æ›´ã¯ãªã„ã¨æ€ã„ã¾ã™ã€‚ ratproxy 1.5.1-b
k_37to 2008/12/05
Ratproxy

security

tools
ãƒªãƒ³ã‚¯
ã‚·ãƒ³ã‚°ãƒ«ã‚¯ã‚©ãƒ¼ãƒˆã‚‚ãã¡ã‚“ã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ - ç´ äººãŒãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’å‹‰å¼·ã—ã¦ã„ãŸãƒ–ãƒã‚°
è¿½è¨˜2ï¼š2007-10-11 - hoshikuzu | star_dust ã®æ›¸æ–Žã‚’è¦‹ã‚‹ã¨ã€ä¸‹ã«æ›¸ã„ã¦ã‚‹ã‚ˆã†ãªå¯¾ç–ã§ã¯ä¸ååˆ†ãªã‚ˆã†ã ã€‚ è¿½è¨˜ï¼šã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã¹ãæ–‡å—ã¯ã€Re: JavaScriptå†…ï¼ˆæ–‡å—åˆ—ï¼‰ã«ãƒ‡ãƒ¼ã‚¿ã‚’å‡ºåŠ›ã™ã‚‹å ´åˆã®é©åˆ‡ãªã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹é †ï½œfreeml byGMOãªã©ã‚’å‚è€ƒã«ã€‚ ã‚·ãƒ³ã‚°ãƒ«ã‚¯ã‚©ãƒ¼ãƒˆ(')ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã›ãšXSSã®åŽŸå› ã«ãªã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã‚’ã‘ã£ã“ã†è¦‹ã‹ã‘ãŸã®ã§ã€ã©ã†ã„ã†æ™‚å•é¡Œã«ãªã‚‹ã®ã‹æ›¸ã„ã¦ãŠãã€‚ JavaScriptã®æ–‡å—åˆ—ã‚’å‹•çš„ã«åŸ‹ã‚è¾¼ã‚€å ´åˆã€‚ <script> var q = 'hoge"fuga'; document.getElementById('word').appendChild(document.createTextNode(q + 'ã®æ¤œç´¢çµæžœ')); </script> ã®ã‚ˆã†ã«ã€å¤‰æ•°ã«ä»£å…¥ã™ã‚‹æ–‡å—åˆ—ã‚’å‹•çš„ã«ä½œã£ã¦ã„ã‚‹å ´åˆã€Rubyã®CG
k_37to 2008/11/28
JavaScript

security
ãƒªãƒ³ã‚¯
2008-11-02
ã¡ã‚‡ã£ã¨ä½œæˆã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«è„†å¼±æ€§ãŒã‚ã‚‹ã‹ã‚’ãã¡ã‚“ã¨ãƒã‚§ãƒƒã‚¯ã—ãªã„ã¨ã„ã‘ãªã„ç¾½ç›®ã«ãªã£ãŸã®ã§èª¿ã¹ã¦ã¿ãŸï¼Ž å‡ºæ¥ã‚Œã°ãƒ•ãƒªãƒ¼ã§ï¼Œç„¡ã‘ã‚Œã°æœ‰å„Ÿã§ã‚‚ã„ã„ã®ã§ï¼Žã„ã‚„ï¼Œã‚„ã£ã±ã‚Šãƒ•ãƒªãƒ¼ã§ï¼Žï¼Žï¼Ž èª¿ã¹ã¦å®Ÿéš›ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚„ä½¿ã£ã¦ã¿ãŸé †ã«è¼‰ã›ã¦ã¿ã¾ã™ï¼Ž Nessus http://www.nessus.org/nessus/ ãƒ•ãƒªãƒ¼ã§ã¯ä¸€ç•ªä½¿ã„ã‚„ã™ã„ã‚µãƒ¼ãƒè„†å¼±æ€§è¨ºæ–ãƒ„ãƒ¼ãƒ«ã‹ãªï¼Žæœ‰åã ã—ï¼Ž ã§ã‚‚ã‚µãƒ¼ãƒã®è„†å¼±æ€§è¨ºæ–ã¨ã„ã†ä½ç½®ã¥ã‘ãŒå¼·ã„ MultiInjector released - automatic parallel website Injector / Defacer http://chaptersinwebsecurity.blogspot.com/2008/10/multiinjector-released-automatic.html Pythonã®2.4ä»¥ä¸Šã§å‹•ä½œ Windowsã§ã‚‚ä½¿
k_37to 2008/11/15
security

check

tools

resources
ãƒªãƒ³ã‚¯
PHPã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢ - Liner Note
k_37to 2008/11/12
php

security

resources
ãƒªãƒ³ã‚¯
æ±äº¬éƒ½ã§èˆˆä¿¡æ‰€æ¯”è¼ƒ@å®Œç’§ãªèª¿æŸ»ä¼šç¤¾ã¯ã‚³ã‚³ã€æœ€æ–°ç‰ˆã€‘
æºå¸¯ã«ãƒ¡ãƒ¼ãƒ«ã‚„é›»è©±ã®ç€ä¿¡ãŒæ€¥ã«å¢—ãˆãŸã‚Š ã‚¹ãƒžãƒ›ã§ä»Šã¾ã§ä½¿ç”¨ã—ã¦ã„ãªã‹ã£ãŸãƒãƒƒã‚¯æ©Ÿèƒ½ã‚’ä½¿ã†ã‚ˆã†ã«ãªã£ãŸ ãŠå‡ºã‹ã‘ã‚„å¤–æ³Šã®æ©Ÿä¼šãŒå¢—ãˆãŸ è¡£è£…ãŒæ´¾æ‰‹ã«ãªã£ãŸ ã¨ã„ã†ã‚±ãƒ¼ã‚¹ã¯æµ®æ°—ã®å¯èƒ½æ€§ãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ã‚‚ã—æµ®æ°—ã‚’ç¶šã‘ã‚‰ã‚Œã‚‹ã¨ã€ã•ã‚ŒãŸå´ã¯ç²¾ç¥žçš„ã«è‹¦ã—ã„æ€ã„ã‚’ç¶šã‘ã‚‹ã“ã¨ã«ãªã‚Šã€ã™ã‚‹æ–¹ã‚‚å¾Œã‚ã‚ãŸã„æ°—æŒã¡ãŒè†¨ã‚Œä¸ŠãŒã‚Šè‰¯ã„ã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã‚„ã‚ã¦ã‚‚ã‚‰ã„ãŸã„ã‹ã€ã„ã£ãã®ã“ã¨åˆ¥ã‚Œã¦äººç”Ÿã‚’ã‚„ã‚Šç›´ã™ã‹ã¯ã—ã£ã‹ã‚Šã¨ã—ãŸè¨¼æ‹ ãŒãã‚ã£ã¦ã‹ã‚‰è€ƒãˆã¦ã‚‚ã‚ˆã„ã‹ã¨æ€ã„ã¾ã™ã€‚ ãã®ãŸã‚ã«ã¯ä¸‹æ‰‹ã«å‹•ã‹ãšã€æ±äº¬éƒ½ã§èˆˆä¿¡æ‰€ã®ãƒ—ãƒã«ã‚ˆã‚‹æµ®æ°—èª¿æŸ»ã‚’ã™ã‚‹ã®ãŒè‰¯ã„ã§ã—ã‚‡ã†ã€‚ ãã®ç†ç”±ã¨ã—ã¦ã¯ã€æµ®æ°—ãŒåŽŸå› ã§é›¢å©šã¨ãªã‚Œã°æ…°è¬æ–™ã®è«‹æ±‚ãŒå¯èƒ½ã¨ãªã‚Šã€ãã®æ³•çš„ãªè¨¼æ‹ ã‚’å¾—ã‚‹ã«ã¯ç´ äººã‚ˆã‚Šãƒ—ãƒã®æ–¹ã®ä½œã‚Šã ã™ã‚‚ã®ãŒæ±ºå®šçš„ãªã‚‚ã®ã«ãªã‚‹ãŸã‚ã§ã™ã€‚ å…¨ã¦ã‚’ã™ã£ãã‚Šã•ã›ã¦ä»Šå¾Œã®äººç”Ÿã‚’ã‚„ã‚Šç›´ã—ã‚„ã™ãã™ã‚‹ãŸã‚ã«ã‚‚åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚’ãŠã™ã™ã‚ã—ã¾ã™ã€‚
k_37to 2008/10/29
Java

MySQL

security

tools
ãƒªãƒ³ã‚¯
XSSã‚’ä¿®æ£ã—ãªã„ã¨ã„ã†äº‹ (Kanasansoft Web Lab.)
ä»Šèªã¿è¿”ã™ã¨ã€ã‚ã¡ã“ã¡ã«å¤‰ãªæ—¥æœ¬èªžãŒæ··ã˜ã£ã¦ã„ã¾ã™ãã€‚ è¨‚æ£ã™ã‚‹ã®ã‚‚å«Œã‚‰ã—ã„ã®ã§ãã®ã¾ã¾ã«ã—ã¦ãŠãã¾ã™ã€‚ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§ã€å½“ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã«å¯¾ã—ã¦ã¤ã„ãŸã‚³ãƒ¡ãƒ³ãƒˆã«è¿”ä¿¡ã—ã¦ã„ãã¾ã™ã€‚ ã“ã®ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã«ã¯ã€ã€ŒXSSã®å±é™ºæ€§ã‚’ã‚ã‹ã£ã¦ã„ãªã„äººã«ç†è§£ã—ã¦ã‚‚ã‚‰ã†ã€ã¨ã„ã†ã®ãŒå‰æã¨ã—ã¦ã‚ã‚Šã¾ã—ãŸã€‚ ãã—ã¦ã€ã€ŒæŠ€è¡“ã®ç–Žã„äººã«ã‚‚ç†è§£ã—ã¦å‹•ã„ã¦ã‚‚ã‚‰ã†ã€ã¨ã„ã†é¡˜ã„ã‚‚ã‚ã‚Šã¾ã—ãŸã€‚ ã“ã®ãŸã‚ã«ã€ã€Œå¤šå°‘ã®èª¤è§£ã‚’ä¸ŽãˆãŸã¨ã—ã¦ã‚‚ãªã‚“ã¨ãªãç†è§£ã—ã¦ã‚‚ã‚‰ã†ã€äº‹ã‚’é‡è¦è¦–ã—ã¦ã„ã¾ã™ã€‚ ã“ã‚Œã‚’è¸ã¾ãˆã¦ä»¥ä¸‹è¨˜è¿°ã—ã¾ã™ã€‚ ã€Œ#ã€ã§ã¯ã˜ã¾ã‚‹ã®ãŒã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®ã‚³ãƒ¡ãƒ³ãƒˆã§ã™ã€‚ #2008å¹´10æœˆ24æ—¥Â g616blackheartÂ ã‚¬ãƒ¼ãƒ‰ãŒå …ã„ã¨è¨€ã‚ã‚ŒãŸâ€¦â€¦ã©ã†ã—ã¦ã ã‚ã†ï¼Ÿ #2008å¹´10æœˆ24æ—¥Â anigokaÂ ãªã‚“ã‹ã‚¬ãƒ¼ãƒ‰ãŒå …ã„ã¦è¨€ã‚ã‚Œã¡ã‚ƒã£ãŸã‚“ã ã‘ã©ã€ãªã«,ã‚ªãƒ¬ãŒéžã‚³ãƒŸãƒ¥ã ã£ã¦è¨€ã„ãŸã„ã®ï¼ï¼Ÿ ç”³ã—è¨³ãªã„ã§ã™ã€‚
k_37to 2008/10/24
JavaScript

xss

security
ãƒªãƒ³ã‚¯
ã‚ã¾ã‚ŠçŸ¥ã‚‰ã‚Œã¦ã„ãªã„æºå¸¯ã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ä½¿ã†å ´åˆã®é‡è¦ãªå•é¡Œ - toytools log
æ„å›³ã—ãªã„ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¸ãƒ£ãƒƒã‚¯ã®å¯èƒ½æ€§ æœ€è¿‘ã€Œãƒ—ãƒãƒšã€‚ã€ã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã‚’å…¬é–‹ã—ã¾ã—ãŸ http://d.hatena.ne.jp/toytools/20080712 http://prope.in/ é–‹ç™ºä¸ã«æºå¸¯ã‚µã‚¤ãƒˆã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ä½¿ã†éš›ã«ã€æ„è˜ã—ã¦å¯¾ç–ã—ã¦ãŠã‹ãªã„ã¨ã¾ãšã„ç‚¹ã«æ°—ã¥ãã¾ã—ãŸã€‚ ãƒãƒƒãƒˆã§ã‚‚ã“ã†ã„ã£ãŸæ–¹æ³•ã«ã¤ã„ã¦è§¦ã‚Œã‚‰ã‚Œã¦ã„ã‚‹ã“ã¨ãŒç„¡ã„ã®ã§ã€ã“ã®å•é¡Œã«å¯¾ã™ã‚‹å¯¾ç–ã‚’è¡Œã£ã¦ã„ã‚‹å ´åˆã¯æ„å¤–ã¨å°‘ãªã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ å•é¡Œç‚¹ã¯ã€å°‚ç”¨ã®å¯¾ç–ã‚’è¡Œã£ã¦ã„ãªã‘ã‚Œã°ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ„è˜ã›ãšã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¸ãƒ£ãƒƒã‚¯ã‚’è¡Œã£ã¦ã—ã¾ã†å¯èƒ½æ€§ã§ã™ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ï¼¡ã€‘ãŒã‚»ãƒƒã‚·ãƒ§ãƒ³IDã€ï¼‘ã€‘ãŒã¤ã„ãŸURLã‚’ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ï¼¡ã€‘ãŒã—ã°ã‚‰ãã‚µã‚¤ãƒˆã‚’ä½¿ã‚ãªã„ã“ã¨ã§ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã€ï¼‘ã€‘ãŒã‚µãƒ¼ãƒãƒ¼å´ã§ç ´æ£„ã•ã‚Œã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ï¼¢ã€‘ãŒãƒã‚°ã‚¤ãƒ³ã—ãŸéš›ã«ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã€ï¼‘ã€‘ãŒä»˜ä¸Žã•ã‚Œã‚‹ ã‚µãƒ¼ãƒãƒ¼å´ã‹ã‚‰è¦‹ã‚‹ã¨ã™ã§ã«ç ´æ£„ã•ã‚ŒãŸã‚»ãƒƒã‚·ãƒ§ãƒ³
k_37to 2008/10/02
mobile

security

session
ãƒªãƒ³ã‚¯
ãƒ•ãƒªãƒ¼ã§ä½¿ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒŠãƒ»ãƒ„ãƒ¼ãƒ«ã¾ã¨ã‚
ã“ã‚Œã§ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸãƒžã‚·ãƒ³ã®8080ç•ªãƒãƒ¼ãƒˆã‚’ãƒ—ãƒã‚ã‚·ã¨ã—ã¦æŒ‡å®šã—ã¦ã€ãƒã‚§ãƒƒã‚¯ã—ãŸã„ã‚µã‚¤ãƒˆã‚’ãƒ–ãƒ©ã‚¦ã‚¸ãƒ³ã‚°ã™ã‚‹ã ã‘ã§ã™ã€‚ çµ¶å¯¾ã«è‡ªåˆ†ã§ç®¡ç†ã—ã¦ã„ãªã„ã‚µã‚¤ãƒˆã«å¯¾ã—ã¦å®Ÿè¡Œã—ãªã„ã§ãã ã•ã„ã€‚ ã“ã†ã—ã¦ã§ããŸã€hoge.log ã‚’åŒæ¢±ã®ratproxy-report.shã§è§£æžã™ã‚Œã°ã€ãƒ¬ãƒãƒ¼ãƒˆãŒHTMLã¨ã—ã¦å‡ºåŠ›ã•ã‚Œã¾ã™ã€‚ ãƒ¬ãƒãƒ¼ãƒˆã®HTMLã‚‚ã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã‚·ãƒ§ãƒƒãƒˆã‚‚å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ ãã®ä»–ã®ãƒ—ãƒã‚ã‚·åž‹ã‚¹ã‚ãƒ£ãƒŠ ãã®ä»–ã«ã‚‚ãƒ—ãƒã‚ã‚·åž‹ã®ã‚¹ã‚ãƒ£ãƒŠã¯è‰²ã€…ã¨ã‚ã‚‹ã®ã§ã™ãŒã€RatProxyã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆãƒšãƒ¼ã‚¸ã«è‡ªåˆ†ãŒèª¿ã¹ãŸã‚‚ã®ã¯å¤§ä½“è¨˜è¿°ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ãªã®ã§ã€ç°¡å˜ã«è§¦ã‚Œã‚‹ã«ã¨ã©ã‚ã¦ãŠãã¾ã™ã€‚ 1. WebScarab 2. Paros 3. Burp 4. ProxMon 5. Pantera 6. Chorizo! ãã‚Œãžã‚Œã®ãƒ—ãƒã‚°ãƒ©ãƒ ã«ã¤ã„ã¦ã€æ¤œç´¢ã™ã‚Œã°ä½¿ã„æ–¹ã¯ã‚ã‚Šã¨ç°¡å˜ã«ã‚ã‹ã‚‹ã¨æ€ã„ã¾ã™ã€‚ã¾ãŸã€Pro
k_37to 2008/07/16
security

check

tools
ãƒªãƒ³ã‚¯
10 Best Security Software Tools for Linux
Linux is a hackerâ€™s dream computer operating system. It supports tons of tools and utilities for cracking passwords, scanning network vulnerabilities, and detecting possible intrusions. I have here a collection of 10 of the best security software tools for Linux. Please always keep in mind that these tools are not meant to harm, but to protect. John the Ripper is a free password cracking software
k_37to 2008/07/12
clack

security

tools

resources
ãƒªãƒ³ã‚¯
Greasemonkeyã‹ã‚‰UIã‚’ä½œã£ã¦ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’å…¥ã‚ŒãŸã‚Šã™ã‚‹ã®ã¯å®‰å…¨ã§ãªã„ - ãƒãƒƒã‚¯ã‚¹ã‚¿ãƒ¼ã«ãªã‚ŠãŸã„
proto.jp blog Â» Tumblrã®è¤‡æ•°ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†Greasemonkeyã‚¹ã‚¯ãƒªãƒ—ãƒˆã€ŽTumblrLoginSã€ã®UIã¿ãŸã„ãªã®ã€ã¿ãŸã‚ã‚‚ã„ã„ã—ä¾¿åˆ©ã ã‹ã‚‰ã€è‡ªåˆ†ã‚‚AutoPagerizeã¨ã‹ã«ã‚ã£ãŸã‚‰ã„ã„ãªã¨æ€ã£ã¦è€ƒãˆãŸã“ã¨ãŒã‚ã‚‹ã‚“ã ã‘ã©ã€ç¾çŠ¶ã ã¨GMã‹ã‚‰ãƒšãƒ¼ã‚¸ã«UIã‚’å…¥ã‚Œè¾¼ã‚€ã®ã¯å®‰å…¨ã«ä½œã‚‹ã“ã¨ãŒã§ããªã„ã€‚ Greasemonkeyã§ã„ã¾è¦‹ã¦ã‚‹ãƒšãƒ¼ã‚¸ã®ä¸Šã«UIã‚’ä½œã£ã¦ãã“ã«ãƒ‡ãƒ¼ã‚¿ã‚’å…¥ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ã¨ã€ãã®ã„ã¾è¦‹ã¦ãŸãƒšãƒ¼ã‚¸ãŒTumblrLoginSã‚’ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã«ã—ã¦TumblrLoginSã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç›£è¦–ã™ã‚‹ã‚ˆã†ãªæ‚ªæ„ã‚ã‚‹ã“ã‚“ãª window.setInterval( function () { var passwd = document.getElementById('tumbID_0').getElementsByTagName("input")[1]; passwd.v
k_37to 2008/05/13
greasemonkey

security
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - æºå¸¯é›»è©±å‘ã‘Webã‚¢ãƒ—ãƒªã®è„†å¼±æ€§äº‹æƒ…ã¯ã©ã†ãªã£ã¦ã„ã‚‹ã®ã‹
â– æºå¸¯é›»è©±å‘ã‘Webã‚¢ãƒ—ãƒªã®è„†å¼±æ€§äº‹æƒ…ã¯ã©ã†ãªã£ã¦ã„ã‚‹ã®ã‹ WEB+DB PRESSèªŒã®Vol.37ã«ã€Œæºå¸¯ã‚µã‚¤ãƒˆé–‹ç™º å®Ÿè·µãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ 2007ã€ã¨ã„ã†è¨˜äº‹ãŒæŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã®ã ãŒã€ãã“ã«ã“ã‚“ãªè¨˜è¿°ãŒã‚ã£ãŸã€‚ ç«¯æœ«èªè¨¼ ç™»éŒ²ãŒå¿…è¦ãªã‚µã‚¤ãƒˆã®å ´åˆï¼Œåˆ©ç”¨ã™ã‚‹éš›ã«ã¯ãƒã‚°ã‚¤ãƒ³ãŒå¿…è¦ã§ã™ï¼ŽID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¯Žå›žå…¥åŠ›ã™ã‚‹ã®ã§ã¯ï¼Œæºå¸¯ã®å ´åˆã§ã¯ç‰¹ã«é¢å€’ã§ã™ï¼Ž ãã“ã§æºå¸¯ãªã‚‰ã§ã¯ã®èªè¨¼æ–¹æ³•ã¨ã—ã¦ï¼Œç¾åœ¨ã®ç«¯æœ«ã§ã¯å–å¾—ãŒå®¹æ˜“ã«ã§ãã‚‹ç«¯æœ«è‡ªä½“ã®æƒ…å ±ï¼ˆç«¯æœ«IDï¼‰ã‚’åˆ©ç”¨ã—ã¾ã™ï¼Ž ï¼ˆç•¥ï¼‰ ã‚»ãƒƒã‚·ãƒ§ãƒ³ PCã‚µã‚¤ãƒˆã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ä½¿ã†å ´åˆã¯ï¼Œé€šå¸¸ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’Cookieã«ä¿å˜ã—ã¾ã™ãŒï¼Œæºå¸¯ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯Cookieã«ãƒ‡ãƒ¼ã‚¿ã‚’ä¿å˜ã™ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ï¼Žãã“ã§æºå¸¯ã‚µã‚¤ãƒˆã§Cookieã‚’ä½¿ã†å ´åˆã¯URLã«ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’åŸ‹ã‚è¾¼ã‚€ã“ã¨ã«ãªã‚Šã¾ã™ï¼Ž ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’GETã§æ¸¡ã™ ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’GETã§æ¸¡ã™å ´åˆã¯ï¼ŒPHPã®è¨å®šãƒ•ã‚¡
k_37to 2008/03/24
mobile

site

session

security
ãƒªãƒ³ã‚¯
Twitter ã® crossdomain.xml å•é¡Œã«ã¤ã„ã¦ã€‚ - ã¦ã£ãç…®ãƒ–ãƒã‚°
ã¤ã„ã£ãŸãƒ¼è¶³ã‚ã¨å¸³ é–¢é€£ã§ã“ã‚“ãªãƒ–ãƒã‚°è¨˜äº‹ã‚’ç™ºè¦‹ã—ãŸã€‚ä»Šå›žã¯ twitterã®protectãªç™ºè¨€ã¨ã‹settingã‹ã‚‰ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®å–å¾—ã‚„å¤‰æ›´ãªã‚“ã‹ã§ãã¡ã‚ƒã£ã¦ãŸã‚ã‘ã§â€¦2008-03-09 - skubotaã®æ—¥è¨˜å¤‰æ›´ï¼Ÿï¼Ÿé–“é•ã£ãŸæƒ…å ±ãŒåºƒãŒã‚‹ã¨ã‚ˆããªã„ã®ã§å‹æ‰‹ã«è£œè¶³ã€‚ã“ã®è¨˜äº‹ã«ã¯èª¤è§£ãŒã‚ã‚‹ã€‚ç¢ºã‹ã«å–å¾—ã¯ã§ãã‚‹ã‘ã©ã€å¤‰æ›´ã¯ã§ããªã„ã€‚å®Ÿéš›ã«è©¦ã—ãŸç§ãŒè¨€ã†ã‚“ã ã‹ã‚‰é–“é•ã„ãªã„ã€‚ï¼ˆè£œè¶³ï¼‰ãŸã‚ã—ãŸã®ã¯ã€ã¤ã„ã£ãŸãƒ¼è¶³ã‚ã¨ã¡ã‚‡ã†ã‚’ä½œã£ãŸã‚‰ã¸ã‚“ã€‚ä»Šã¯ä»•æ§˜å¤‰ã‚ã£ã¦ã‚‹ã‹ã‚‚(?)ãŸã¶ã‚“ã€ã‚µãƒ¼ãƒãƒ¼å´ã§ãƒªãƒ•ã‚¡ãƒ©ã‚’è¦‹ã¦å¼¾ã„ã¦ã‚‹ã‚“ã ã¨æ€ã†ã€‚SWF ã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆã™ã‚‹å ´åˆã¯ã€SWF ã® URL ãŒãƒªãƒ•ã‚¡ãƒ©ã¨ã—ã¦ã¤ãã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚ãƒªãƒ•ã‚¡ãƒ©ã‚’ãªã—ã«ã—ã¦é€ã£ãŸã‚‰ã†ã¾ãè¡Œãã“ã¨ã‚‚ç¢ºèªã—ãŸã€‚ã ã‹ã‚‰ã€swf ã‹ã‚‰ã®ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚¢ã‚¯ã‚»ã‚¹ã«å¯¾ã—ã¦ã¯é€šç”¨ã—ãªã„ã§ã‚ã‚ã†ã€‚ã‚ˆã£ã¦ã€(1)ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®å¤‰æ›´ã€(2)ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒªã‚»ãƒƒãƒˆ
k_37to 2008/03/11
twitter

security

crossdomain.xml
ãƒªãƒ³ã‚¯
printenv at xss-quiz.int21h.jp
printenv at xss-quiz.int21h.jp Your IP address: 133.242.243.6 () NameValue HTTP_ACCEPT*/* HTTP_CACHE_CONTROLno-cache HTTP_CONNECTIONclose HTTP_HOSTxss-quiz.int21h.jp HTTP_USER_AGENTHatenaBookmark/4.0 (Hatena::Bookmark; Analyzer) QUERY_STRING REMOTE_ADDR133.242.243.6 REQUEST_METHODGET REQUEST_SCHEMEhttp REQUEST_URI/
k_37to 2008/02/02
xss

security

game
ãƒªãƒ³ã‚¯
Greasemonkeyã®å…±é€šãªè½ã¨ã—ç©´ã‚’é¿ã‘ã‚‹ - minghaiã®æ—¥è¨˜
Greasemonkeyã®éŽåŽ»ã«ãŠã„ã¦ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®è§£èª¬ã€‚ Greasemonkeyã ã‘ã«é™ã‚‰ãšã€JavaScriptã«ã‚ˆã‚‹ãƒ¦ãƒ¼ã‚¶æ‹¡å¼µã‚’ä½œæˆã—ã¦ã„ã‚‹å…¨ã¦ã®æ–¹ã«å¯¾ã—ã¦ä¸€èªã®ä¾¡å€¤ãŒã‚ã‚‹ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã ã¨æ€ã‚ã‚Œã¾ã™ã€‚ åŽŸæ–‡ï¼šO'Reilly Media - Techno logy and Business Training Greasemonkeyã®å…±é€šãªè½ã¨ã—ç©´ã‚’é¿ã‘ã‚‹ Greasemonkeyã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æ´å²ãŒã‚ãªãŸã®ä»Šã«ã©ã†å½±éŸ¿ã™ã‚‹ã®ã‹ (è‘—) Mark pilgrim "Greasemonkey Hacks"ã®è‘—è€… 2005/11/11 æ˜”ã€…ã€ã‚ã‚‹ã¨ã“ã‚ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒã‚ã‚Šã¾ã—ãŸã€‚ï¼ˆã“ã‚Œã¯æ™®é€šã®ãŠã¨ãŽè©±ã§ã¯ãªã„ã‹ã‚‰ãã®ã¾ã¾èªã‚“ã§ãã ã•ã„ã€‚ï¼‰ Greasemonkeyã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã¯æœ€åˆã«æ›¸ã‹ã‚Œã¦ä»¥æ¥å¤§å¹…ã«å¤‰æ›´ã•ã‚Œã¦ããŸã€‚Version0.3ã¯åˆã‚ã¦åºƒç¯„å›²ã«äººæ°—ã‚’å¾—ãŸãƒãƒ¼
k_37to 2008/01/13
javascript

greasemonkey

security
ãƒªãƒ³ã‚¯
pageant.exe ã®ä»•çµ„ã¿ã¨å±é™ºæ€§ - ã¦ã£ãç…®ãƒ–ãƒã‚°
PuTTY ã§ SSH2 æŽ¥ç¶šã™ã‚‹ã¨ãã€æ¯Žå›žãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã‚’å…¥åŠ›ã™ã‚‹ã®ãŒã‚ã‚“ã©ãã•ã„ã¨ã„ã†ç†ç”±ã§ pageant ã‚’å¸¸æ™‚èµ·å‹•ã—ã¦ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ã€‚ãã‚“ãª pageant ã®ä»•çµ„ã¿ã¨ã€ä½¿ã£ã¦ã„ãä¸Šã§ã®ãƒªã‚¹ã‚¯ãŒæ°—ã«ãªã£ãŸã®ã§ã€ã¡ã‚‡ã£ãã‚‰ã‚½ãƒ¼ã‚¹ã‚’èªã‚“ã§ã¿ãŸã€‚ãƒ—ãƒã‚»ã‚¹é–“é€šä¿¡ã®ä»•çµ„ã¿PuTTY ã‚„ WinSCP3 ãªã©ã€pageant ã‚’åˆ©ç”¨ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã€ä½•ã‚‰ã‹ã®æ–¹æ³•ã§ pageant ã¨é€šä¿¡ã—ã¦ã„ã‚‹ã¯ãšã ã€‚ã“ã®é€šä¿¡å‡¦ç†ã‚’å®Ÿè£…ã—ã¦ã„ã‚‹ã®ãŒ winpgntc.c ã§ã‚ã‚Šã€PuTTY ã‚‚ WinSCP3 ã‚‚ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã« winpgntc.c ã‚’å«ã‚“ã§ã„ã‚‹ã€‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆå´ç´°ã‹ããªã‚‹ã‘ã©ã€PuTTY ã‚„ WinSCP3 ãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã™ã‚‹ã¨ãã®æ‰‹é †ã¯æ¬¡ã®ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚pageant ã®ï¼ˆéžè¡¨ç¤ºã«ãªã£ã¦ã„ã‚‹ï¼‰ã‚¦ã‚¤ãƒ³ãƒ‰ã‚¦ã‚’ FindWindow é–¢æ•°ã§æŽ¢ã—å‡ºã™ã€‚CreateFileMapping é–¢æ•°
k_37to 2008/01/08
SSH

PuTTY

pageant

security
ãƒªãƒ³ã‚¯
sqlninja - a SQL Server injection & takeover tool
News There is a shiny new data extraction method in the alpha of the new release. It uses WAITFOR-based injection (slow) and DNS tunnels (fast!!). It is still a bit experimental, but it could help you in your next penetration test. You can find it in the Download. Why we decided to add a data extraction module even if lots of other tools do that already? The answer is in the FAQ page. Introduction
k_37to 2007/12/07
SQL

Injection

Tools

Security
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 æ¬¡ã®ãƒšãƒ¼ã‚¸