[B! security] m-e-omoteyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

m-e-omoteyama id:m-e-omoteyama

securityã«é–¢ã™ã‚‹m-e-omoteyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Androidã§å®‰å…¨ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¿å˜ã™ã‚‹(4)ï½œTechRacho by BPSæ ªå¼ä¼šç¤¾
å‰å›žã¯ã€æš—å·åŒ–ã®æ–¹æ³•ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã—ãŸã€‚ ã—ã‹ã—ã€å…ƒã«æˆ»ã›ã‚‹æ–¹æ³•ã§ä¿å˜ã™ã‚‹ä»¥ä¸Šã€ä½•ã‹ã—ã‚‰ã®å…±é€šéµã‚’ä¿æŒã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å˜ç´”ã«ã‚¢ãƒ—ãƒªå†…ã®å®šæ•°ã¨ã—ã¦ä¿æŒã—ã¦ãŠãã¨ã€ãƒªãƒãƒ¼ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã«éžå¸¸ã«å¼±ã„ã®ã§ã€å¤šå°‘ã®å·¥å¤«ãŒæ¬²ã—ã„ã¨ã“ã‚ã§ã™ã€‚ ã¨ã“ã‚ã§ã€ã‚¿ã‚¤ãƒˆãƒ«ã«ã¯åã—ã¾ã™ãŒã€ã‚¢ãƒ—ãƒªå†…ã§å…ƒã«æˆ»ã›ã‚‹å½¢ã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¿å˜ã™ã‚‹ä»¥ä¸Šã€æœ¬å½“ã«å®‰å…¨ãªæ–¹æ³•ã¯å˜åœ¨ã—ã¾ã›ã‚“ã€‚ ç°¡æ˜“çš„ãªå¯¾ç–ã‚’çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€ã¡ã‚‡ã£ã¨ã—ãŸç”¨é€”ãªã‚‰å¿…è¦ååˆ†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç¢ºä¿ã™ã‚‹ã®ãŒç›®çš„ã§ã™ã€‚ å…ˆã«ã€APKã®ãƒªãƒãƒ¼ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°æ–¹æ³•ã‚’ç°¡å˜ã«ã”ç´¹ä»‹ã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ ãƒªã‚½ãƒ¼ã‚¹ã€ãƒžãƒ‹ãƒ•ã‚§ã‚¹ãƒˆ apktoolãŒä¾¿åˆ©ã§ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸã‚‰ã€é©å½“ãªAPKãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚ã‚‹ã¨ã“ã‚ã§ apktool d myapp.apk ã™ã‚Œã°ã€ãƒ•ã‚©ãƒ«ãƒ€ã«å±•é–‹ã•ã‚Œã¾ã™ã€‚ãƒªã‚½ãƒ¼ã‚¹ã‚„ãƒžãƒ‹ãƒ•ã‚§ã‚¹ãƒˆã¯å®Œå…¨ã«è¦‹æ”¾é¡Œã€‚ ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ ã¾ãšã€apkã®æ‹¡å¼µåã‚’.
m-e-omoteyama 2014/12/09
Androidé–‹ç™º

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

ndk
ãƒªãƒ³ã‚¯
è¨å®šã‚¬ã‚¤ãƒ‰ï¼šã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼æ©Ÿèƒ½ã‚’åœæ¢ã™ã‚‹ã«ã¯ã€BINDç·¨ã€‘
--------------------------------------------------------------------- â– è¨å®šã‚¬ã‚¤ãƒ‰ï¼šã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼æ©Ÿèƒ½ã‚’åœæ¢ã™ã‚‹ã«ã¯ã€BINDç·¨ã€‘ æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2013/04/18ï¼ˆThuï¼‰ --------------------------------------------------------------------- â–¼ã¯ã˜ã‚ã« æœ¬è³‡æ–™ã¯ã€ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ã¨ã—ã¦å‹•ä½œã—ã¦ã„ã‚‹BINDã‚’ä½¿ã£ãŸDNSã‚µãƒ¼ãƒãƒ¼ ã®è¨å®šã‚’ã€ç°¡å˜ãªã‚¹ãƒ†ãƒƒãƒ—ã§ä¿®æ£ã™ã‚‹äº‹ã‚’ç›®çš„ã¨ã—ã¦ã„ã¾ã™ã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ã«ã¤ã„ã¦ã®æŠ€è¡“çš„ãªè§£èª¬ã¯æœ¬è³‡æ–™ã§ã¯è¡Œã„ã¾ã›ã‚“ã€‚æ‰‹é † ã«æ²¿ã£ãŸæ“ä½œã§è¨å®šã‚’å¤‰æ›´ã—ã€èªè€…ãŒé‹ç”¨ã™ã‚‹DNSã‚µãƒ¼ãƒãƒ¼ãŒã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ« ãƒãƒ¼ã§ã¯ãªããªã‚‹ã“ã¨ã‚’ç›®æŒ‡ã—ã¦ã„ã¾ã™ã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ãŠã‚ˆã³ãã‚Œã‚’åˆ©ç”¨ã—
m-e-omoteyama 2014/07/28
dns

centos

linux

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
DNSã‚µãƒ¼ãƒãƒ¼ã‚’ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ã«ã—ãªã„
ä»Šå¹´ã«å…¥ã£ã¦ã€DNSã®å†å¸°çš„ãªå•ã„åˆã‚ã›ã‚’ä½¿ã£ãŸDDosæ”»æ’ƒãŒå ±å‘Šã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãƒ¼ã¨ã—ã¦é‹ç”¨ã—ã¦ã„ã‚‹å ´åˆã§ã‚‚ã€åˆ¶é™ã‚’è¨ã‘ã¦é©åˆ‡ã«è¨å®šã‚’ã—ã¦ãŠã‹ãªã„ã¨ã€ DDosæ”»æ’ƒã®è¸ã¿å°ã«ã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ è©³ã—ãã¯ã“ã¡ã‚‰ã®ã‚µã‚¤ãƒˆã‚’å‚è€ƒã«ã—ã¦ãã ã•ã„ã€‚ http://www.jpcert.or.jp/pr/2013/pr130002.html ç®¡ç†ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒãƒ¼ãŒã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ã«ãªã£ã¦ã„ãªã„ã‹ã©ã†ã‹ã‚’ç¢ºèªã™ã‚‹ã‚µã‚¤ãƒˆãŒé–‹è¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ http://www.openresolver.jp/ OSã‚„BINDã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã£ã¦ã‚‚ç•°ãªã‚Šã¾ã™ãŒã€è¨å®šä¾‹ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ã¾ãšã€ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ã«ãªã£ã¦ã„ãªã„ã‹ã‚’ç¢ºèªã—ã¾ã™ã€‚ å‰è¿°ã—ãŸã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒãƒ¼ç¢ºèªã‚µã‚¤ãƒˆã‚‚ç¢ºèªã§ãã¾ã™ãŒã€ã“ã“ã§ã¯ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã§ç¢ºèªã—ã¾ã™ã€‚ $ wget -qO - http://www.openre
m-e-omoteyama 2014/07/27
dns

centos

linux

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
DNSãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã¨ã¯ã€Œéš ã™ã€ãã—ã¦ã€Œé‡ãã‚‹ã€ â€• ï¼ IT
ç¬¬2å›ž DNSãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã¨ã¯ã€Œéš ã™ã€ãã—ã¦ã€Œé‡ãã‚‹ã€ æ¾è°·ã€€å¯¿å¤« Infobloxæ ªå¼ä¼šç¤¾ Systems Engineer 2007/12/14 è»½è¦–ã•ã‚ŒãŒã¡ã®DNSã«ã‚‚ã†ä¸€åº¦æ˜Žã‹ã‚Šã‚’ã¨ã‚‚ã™æ–°é€£è¼‰ã€‚ç¬¬2å›žã§ã¯DNSã®æœ€æ–°æƒ…å ±ã¨ã€å‰å›žã®æœ€å¾Œã§å›³ã ã‘æç¤ºã—ãŸã€ŒDNSã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã€æ§‹æˆã®æ„å‘³ã‚’è§£èª¬ã—ã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ ã„ã¾ã ã«è¨å®šãƒŸã‚¹ã®å¤šã„DNS ä»Šå›žã‚‚å¼•ãç¶šãDNSã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ã¾ãšã¯ã€ãŠã•ã‚‰ã„ã‚’ã‹ãã¦ã€2007å¹´11æœˆã«ç™ºè¡¨ã•ã‚ŒãŸDNSé–¢ä¿‚ã®ãƒªãƒªãƒ¼ã‚¹ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ 11æœˆ19æ—¥ã«é–‹å‚¬ã•ã‚Œã¾ã—ãŸDNS DAYã§ã‚‚è©±é¡Œã«ä¸ŠãŒã£ã¦ã„ãŸã®ã§ã™ãŒã€ã„ã¾ã ã«å¤šãã®DNSã‚µãƒ¼ãƒã«è¨å®šãƒŸã‚¹ãŒå¤šã„ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚è¨å®šãƒŸã‚¹ã®å†…å®¹ã¨ã—ã¦ã¯ã€ã„ãã¤ã‹ã‚ã‚Šã¾ã™ãŒã€ãã®ä¸ã§ã‚‚æ·±åˆ»ãªå•é¡Œã¨ã—ã¦ã¯ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒã®ã‚µãƒ¼ãƒã«ãªã£ã¦ã—ã¾ã£ã¦ã„ã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ å‰å›žèª¬æ˜Žã—ãŸã€Œ
m-e-omoteyama 2014/07/24
dns

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚µãƒ¼ãƒé‹ç”¨
ãƒªãƒ³ã‚¯
ï¼ ITï¼šSnortã§ã¤ãã‚‹ä¸æ£ä¾µå…¥æ¤œçŸ¥ã‚·ã‚¹ãƒ†ãƒ ç¬¬1å›ž
â€»ã”æ³¨æ„ æœ¬ç¨¿ã®å†…å®¹ã‚’æ¤œè¨¼ã™ã‚‹å ´åˆã¯ã€å¿…ãšå½±éŸ¿ã‚’åŠã¼ã•ãªã„é™ã‚‰ã‚ŒãŸç’°å¢ƒä¸‹ã§è¡Œã£ã¦ä¸‹ã•ã„ã€‚ã¾ãŸã€æœ¬ç¨¿ã‚’åˆ©ç”¨ã—ãŸè¡Œç‚ºã«ã‚ˆã‚‹å•é¡Œã«é–¢ã—ã¾ã—ã¦ã¯ã€ç†è€…ãŠã‚ˆã³æ ªå¼ä¼šç¤¾ã‚¢ãƒƒãƒˆãƒžãƒ¼ã‚¯ãƒ»ã‚¢ã‚¤ãƒ†ã‚£ã¯ä¸€åˆ‡è²¬ä»»ã‚’è² ã„ã‹ãã¾ã™ã€‚ã”äº†æ‰¿ãã ã•ã„ã€‚ ã€ŒIDSã€ã¨ã„ã†è¨€è‘‰ã‚’ã”å˜ã˜ã ã‚ã†ã‹ã€‚IDSã¨ã¯ã€ŒIntrusion Detection Systemã€ã®ç•¥ã§ã€æ—¥æœ¬èªžã§ã¯ã€Œä¾µå…¥æ¤œçŸ¥ã‚·ã‚¹ãƒ†ãƒ ã€ã¨è¨³ã•ã‚Œã‚‹ã€‚ã“ã®é€£è¼‰ã§ã¯ãƒ•ãƒªãƒ¼ã®IDSã§ã‚ã‚‹Snortã‚’é¡Œæã«ã€IDSã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‹ã‚‰é‹ç”¨ã¾ã§ã‚’è§£èª¬ã—ã¦ã„ããŸã„ã¨æ€ã†ã€‚ IDSã¨ã¯ä½•ã‹ ã€ŒIDSã¨ã¯ä¸€ä½“ä½•ãªã®ã‹ã€ã€‚ãã†ç–‘å•ã«æ€ã£ãŸæ–¹ã¯å°‘ãªããªã„ã§ã‚ã‚ã†ã€‚ç°¡å˜ã«ã„ãˆã°ã€ã€Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’æµã‚Œã‚‹ãƒ‘ã‚±ãƒƒãƒˆã«å¯¾ã—ã¦ã‚ã‚‹ãƒ‘ã‚¿ãƒ¼ãƒ³ã«åˆè‡´ã—ã¦ã„ã‚‹ã‹å¦ã‹ã‚’åˆ¤å®šã—ã€åˆè‡´ã—ã¦ã„ã‚‹å ´åˆã¯ã‚ã‚‰ã‹ã˜ã‚å®šã‚ã‚‰ã‚ŒãŸå‡¦ç†ã‚’è¡Œã†ã€ã‚‚ã®ã§ã‚ã‚‹ã€‚ ã€Œã‚ã‚‰ã‹ã˜ã‚å®šã‚ã‚‰ã‚ŒãŸå‡¦ç†ã€ã¨ã¯å…·ä½“çš„ã«ã©ã®ã‚ˆã†ãªå‡¦ç†ãªã®ã‹ã¨ã„ã†ã¨ã€
m-e-omoteyama 2014/01/09
snortå…¥é–€

snort

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
OpenBlocks AX3 ã§ PacketFence ã‚’å‹•ã‹ã—ã¦ã¿ã‚‹
OBDNãƒžã‚¬ã‚¸ãƒ³ - OpenBlocks Developers Network Magazine OBDNãƒ—ãƒ©ã‚¤ãƒžãƒ«ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒ»å¾Œè—¤æ•ä¹Ÿ Toshiya Goto ã‚’è²¬ä»»ç·¨é›†è€…ã¨ã—ã¦ã¤ã¥ã‚‹ã€OpenBlocksã‚„ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒã€Linuxã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®æœ€æ–°æŠ€è¡“ã‚„ãƒ‹ãƒ¥ãƒ¼ã‚¹å®šç‚¹è¦³æ¸¬ãƒ–ãƒã‚°ã§ã™ã€‚ é–¢é€£æƒ…å ±ã«èˆˆå‘³ã‚’æŒã¤æŠ€è¡“è€…ã‚„ç®¡ç†è€…ã«ã€Linuxæ¥ç•Œç¬¬ä¸€äººè€…ã¨ã—ã¦ã®è¦–ç‚¹ã‹ã‚‰è¦‹ãŸITæœ€æ–°æƒ…å ±ã‚’ãŠå±Šã‘ã—ã¾ã™ã€‚ OpenBlocks Developers Network ã¯ã“ã¡ã‚‰ http://openblocks.plathome.co.jp/support/ ã¯ã˜ã‚ã« PacketFence ã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¢ã‚¯ã‚»ã‚¹ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ï¼ˆNetwork Access Control, NACï¼‰ã‚·ã‚¹ãƒ†ãƒ ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹å®Ÿè£…ã§ã™ã€‚2004å¹´é ƒã‹ã‚‰é–‹ç™ºãŒè¡Œã‚ã‚Œã€ç¾åœ¨ã«è‡³ã‚‹ã¾ã§ã‚¢ã‚¯ãƒ†ã‚£ãƒ–ã«é–‹ç™ºãŒè¡Œ
m-e-omoteyama 2014/01/08
ç›£è¦–ã‚µãƒ¼ãƒãƒ¼ã®å°Žå…¥

packetfence

OpenBlocks

linux

security
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã€ŒOpenVASã€ã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
ã“ã‚Œã‚‰ã¯ãã‚Œãžã‚ŒåŒä¸€ã®ãƒžã‚·ãƒ³ã§å®Ÿè¡Œã•ã›ã‚‹ã“ã¨ã‚‚ã§ãã‚‹ã—ã€ç•°ãªã‚‹ãƒžã‚·ãƒ³ã§å®Ÿè¡Œã•ã›ã‚‹ã“ã¨ã‚‚å¯èƒ½ã ã€‚ãªãŠã€Greenbone Security DesktopãŠã‚ˆã³OpenVAS CLIã«ã¤ã„ã¦ã¯LinuxãŠã‚ˆã³Windowså‘ã‘ã®ãƒã‚¤ãƒŠãƒªãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã‚‹ãŒã€ãã‚Œä»¥å¤–ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«ã¤ã„ã¦ã¯åŸºæœ¬çš„ã«ã¯Linuxå‘ã‘ã¨ãªã£ã¦ã„ã‚‹ã€‚ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãƒšãƒ¼ã‚¸ã§ã¯ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®ã»ã‹ã€CentOS 6ãŠã‚ˆã³Fedora 15ï½ž18ã€Red Hat Enterprise 6å‘ã‘ãƒã‚¤ãƒŠãƒªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®å…¥æ‰‹æ–¹æ³•ãŒæ¡ˆå†…ã•ã‚Œã¦ã„ã‚‹ã€‚ãªãŠã€Debian GNU/Linuxã‚„Fedoraãªã©ã¯ãã®å…¬å¼ãƒªãƒã‚¸ãƒˆãƒªã§OpenVASã®ãƒã‚¤ãƒŠãƒªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒæä¾›ã•ã‚Œã¦ã„ã‚‹ã€‚ãŸã ã—ã€å¿…ãšã—ã‚‚æœ€æ–°ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒæä¾›ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã®ã§ã€ãã‚Œã‚‰ã‚’åˆ©ç”¨ã™ã‚‹éš›ã¯æ³¨æ„ã—ã¦ã»ã—ã„ã€‚ ä»Šå›žã¯ã€CentOS 6.3ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸ1å°ã®ã‚µãƒ¼
m-e-omoteyama 2013/12/17
OpenVAS

security

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
cloudpackãƒ–ãƒã‚° - skipfishã‚’æ—©ãçµ‚äº†ã•ã›ã‚‹ãŸã‚ã«
ä»¥å‰ã€skipfishã§Webã‚¢ãƒ—ãƒªã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ã®è¨˜äº‹ã«ã¦skipfishã‚’åˆ©ç”¨ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ã®æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ ã—ã‹ã—ã€ã“ã®skipfishã¯å®Ÿéš›ã«åˆ©ç”¨ã—ã¦ã¿ã‚‹ã¨è¨ºæ–ã«æ™‚é–“ãŒã‹ã‹ã‚Šã€ãªã‹ãªã‹çµ‚äº†ã—ã¾ã›ã‚“ã€‚ ãã“ã§ã€ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ç‰ã§ã‚¢ã‚¯ã‚»ã‚¹å†…å®¹ã‚’ç¢ºèªã—ã¦ã¿ã‚‹ã¨ã€å»¶ã€…ã¨ã€è†¨å¤§ãªè¾žæ›¸ãƒ•ã‚¡ã‚¤ãƒ«ä¸Šã®ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã«å¯¾ã—ã¦ã€ãã‚Œã‚‰ã‚’ãƒ•ã‚¡ã‚¤ãƒ«åã¨ã—ãŸURLã®ãƒã‚§ãƒƒã‚¯ã‚’ã—ã¦ã„ã¾ã—ãŸã€‚ ã“ã®URLãƒã‚§ãƒƒã‚¯ã¯ã€å®Ÿè¡Œæ™‚é–“ã‚’è€ƒãˆã‚‹ã¨ç¾å®Ÿçš„ã§ã¯ãªã„ã®ã§ã€ä¸‹è¨˜ã®ã‚ˆã†ãªã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§ã€ã“ã®ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã‚ãªã„ã‚ˆã†ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ./skipfish -LVY -W /dev/null -o admin http://www.suz-lab.com/ ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ -L: do not auto-learn new keywords for the site -V: do not upd
m-e-omoteyama 2013/12/12
ãƒ†ã‚¹ãƒˆã®é«˜é€ŸåŒ–

security

skipfish
ãƒªãƒ³ã‚¯
ã€Œskipfishã€ã§Webã‚¢ãƒ—ãƒªã®è„†å¼±æ€§ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
è¿‘å¹´ã§ã¯å¤šãã®åˆ†é‡Žã§Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä½¿ã‚ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã€å¤§é‡ã®å€‹äººæƒ…å ±ã‚„é‡è¦ãªç§˜å¯†æƒ…å ±ã‚’æ‰±ã†ã‚ˆã†ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚‚å°‘ãªããªã„ã€‚ãã®ãŸã‚ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚‚æ”»æ’ƒå¯¾è±¡ã¨ã—ã¦ç‹™ã‚ã‚Œã‚„ã™ããªã£ã¦ã„ã‚‹ã€‚ä»Šå›žã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã—ã¦ã€GoogleãŒå…¬é–‹ã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£èª¿æŸ»ãƒ„ãƒ¼ãƒ«ã€Œskipfishã€ã‚’ä½¿ã£ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ã‚ãƒ£ãƒ³ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ç‰¹åŒ–ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£èª¿æŸ»ãƒ„ãƒ¼ãƒ«ã€Œskipfishã€ ä»Šæ—¥ã§ã¯ã€Webãƒ–ãƒ©ã‚¦ã‚¶çµŒç”±ã§ã•ã¾ã–ã¾ãªæ“ä½œã‚’è¡Œãˆã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåºƒãæµ¸é€ã—ã¦ã„ã‚‹ã€‚Webãƒ–ãƒ©ã‚¦ã‚¶ã¯æœ€è¿‘ã®ã»ã¼ã™ã¹ã¦ã®PCã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ãŠã‚Šã€å°‚ç”¨ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’ç”¨æ„ã›ãšã«ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æ“ä½œã§ãã‚‹ã¨ã„ã†ã®ãŒãã®æµ¸é€ã®ç†ç”±ã®1ã¤ã ã€‚ã—ã‹ã—ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ç°¡å˜ã«ãã®ä¸€éƒ¨ï¼ˆHTMLã‚„JavaScriptï¼‰ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’é–²è¦§
m-e-omoteyama 2013/12/12
ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ãƒ„ãƒ¼ãƒ« google - skip fish

security

skipfish
ãƒªãƒ³ã‚¯
SSHã®è¨å®š - DenyHostsã§SSHã¸ã®æ”»æ’ƒã‚’é˜²ãï¼štech.ckme.co.jp
ä¾‹ãˆã°openSUSE 10.0ã§/var/log/messagesã‚’è¦‹ã‚‹ã¨æ™‚ã€… Mar 26 22:01:32 linux sshd[18645]: Invalid user test12 from 65.205.238.12 Mar 26 22:01:34 linux sshd[18647]: Invalid user test12 from 65.205.238.12 Mar 26 22:01:35 linux sshd[18649]: Invalid user test12 from 65.205.238.12 Mar 26 22:01:37 linux sshd[18651]: Invalid user test12 from 65.205.238.12 Mar 26 22:01:38 linux sshd[18653]: Invalid user test12 from 65.
m-e-omoteyama 2013/12/10
denyhosts

security
ãƒªãƒ³ã‚¯
websec-room.comÂ -Â websec room ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
This webpage was generated by the domain owner using Sedo Domain Parking. Disclaimer: Sedo maintains no relationship with third party advertisers. Reference to any specific service or trade mark is not controlled by Sedo nor does it constitute or imply its association, endorsement or recommendation.
m-e-omoteyama 2013/09/26
ã€€OWASP ZAP

web

è„†å¼±æ€§

security
ãƒªãƒ³ã‚¯
CentOS6 - Apache2 working but when installing / enabling SSL, server won't start because of permissions error
m-e-omoteyama 2013/09/06
SSLè¨¼æ˜Žæ›¸ã®SELinuxã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆè¨å®š

apache

security
ãƒªãƒ³ã‚¯
ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³•
Landscape ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ | < å‰ã®æ—¥ 2004-11-15 2004-11-17 æ¬¡ã®æ—¥ 2004-11-18 > Landscape - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ¡ãƒ¢Â 2004-11-17 ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³• å½“ã‚µã‚¤ãƒˆå†…ã‚’ Google æ¤œç´¢ã§ãã¾ã™ * ssh scp sftp ã®æ£ã—ã„è‡ªå‹•å®Ÿè¡Œæ–¹æ³•ã“ã®è¨˜äº‹ã®ç›´ãƒªãƒ³ã‚¯URL: Permlink | ã“ã®è¨˜äº‹ãŒå±žã™ã‚‹ã‚«ãƒ†ã‚´ãƒª: [ssh] [ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] scp ã¨ sftp ã«ã¤ã„ã¦èª¿ã¹ã¦ã„ã‚‹ã¨ã€æ£ã—ã„è‡ªå‹•å®Ÿè¡Œã«ã¤ã„ã¦ã®æ–‡æ›¸ã‚’è¦‹ã¤ã‘ãŸã€‚cron ã‹ã‚‰ scp ã‚„ sftp ã‚’è‡ªå‹•å®Ÿè¡Œã—ã‚ˆã†ã¨è€ƒãˆã¦ã„ã‚‹ç§ã«ã¯å½¹ã«ç«‹ã¤æ–‡æ›¸ã ã€‚ - ã€Œå°‚ç”¨ã®ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºãªã—ã®éµã‚’ä½œã£ã¦æ¨©é™é™å®šã€ãŒãƒ™ã‚¹ãƒˆæ£ã—ã„ssh/scpã®è‡ªå‹•é‹è»¢ã¯ ã´ã‚æ—¥è¨˜ http://www.banana-fish.com/~piro/20040609.
m-e-omoteyama 2013/02/26
è‡ªå‹•å®Ÿè¡Œæ™‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®š

ssh

scp

Security
ãƒªãƒ³ã‚¯
å‹˜é•ã„ã—ãŸããªã„Androidã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€Œã‚¢ãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€ã«é–¢ã™ã‚‹5ã¤ã®ãƒã‚¤ãƒ³ãƒˆ - ReDo
â€»æ£ã—ãã¯signatureOrSystemã§ã™ã€‚typoã™ã„ã¾ã›ã‚“ã€‚ æœ€è¿‘è©±é¡Œã®Androidã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã€ç¢ºã‹ã«ä½•ã‚‚ç„¡ã„ã¨ã¯æ€ã£ã¦ã„ãªã„ã®ã§ã™ãŒã€å°‘ã€…ç…½ã‚ŠãŒéŽãŽã‚‹ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã®ã§ã€å°‘ã—ã§ã‚‚èª¤è§£ãŒè§£ã‘ã‚Œã°ã„ã„ãªã¨ã„ã†ã“ã¨ã§ã€ã€Œå‹æ‰‹ã«ä»–ã®Androidã‚¢ãƒ—ãƒªã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹æ¨©é™ã€ã«ã¤ã„ã¦å°‘ã—ã ã‘å™›ã¿ç •ã„ã¦èª¬æ˜Žã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã€æ³¨ã€‘å™›ã¿ç •ã„ãŸã¤ã‚‚ã‚ŠãŒã€ã‚¨ãƒ³ãƒˆãƒªã®å¯¾è±¡è€…ãŒå°‚é–€å®¶ãªã®ã‹é–‹ç™ºçµŒé¨“è€…ãªã®ã‹ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãªã®ã‹ãƒ¬ãƒ™ãƒ«ãŒãƒãƒ©ãƒãƒ©ã®è¡¨è¨˜ã«ãªã£ã¦ã—ã¾ã£ã¦ãŠã‚Šã¾ã™ã€‚ãã®ã†ã¡ã‚‚ã†å°‘ã—ã‚ã‹ã‚Šã‚„ã™ãæ”¹ç¨¿ã—ã¦ãƒªãƒ™ãƒ³ã‚¸ã—ãŸã„ã§ã™...orz 2011.07.26 ä¸€éƒ¨è¡¨ç¾ã‚’ä¿®æ£ã€‚ ã€Œã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¨©é™ã€ã‚’ç¢ºèªã—ã€ã€Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€ã‚’é¸æŠžã™ã‚‹ç”»é¢ã‚’å‘¼ã³å‡ºã™ã«ã¯ç‰¹åˆ¥ãªæ¨©é™ã¯ä½•ã‚‚è¦ã‚Šã¾ã›ã‚“ã€‚ MIME-TypeãŒapplication/vnd.android.package-archive
m-e-omoteyama 2012/10/30
è‡ªå‹•ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€æ›´æ–°

Android

security
ãƒªãƒ³ã‚¯
Snort2.7ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« - satospo
m-e-omoteyama 2012/08/22
snort ãƒãƒ¼ãƒˆãƒŸãƒ©ãƒ¼ãƒªãƒ³ã‚°

network

security
ãƒªãƒ³ã‚¯
http://www.vigiliti.com/en/support/docu/html/nlive4_manual/ch02s04.html
m-e-omoteyama 2012/08/22
ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ãƒ‡ãƒã‚¤ã‚¹è¨å®š

network

security
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ã‚«ãƒ‡ãƒ¡ã‚¤ã‚¢
å½“ã‚µã‚¤ãƒˆã®ä¸€éƒ¨ãƒšãƒ¼ã‚¸ã«ã¯ã€ã‚¢ãƒ•ã‚£ãƒªã‚¨ã‚¤ãƒˆãƒ»ã‚¢ãƒ‰ã‚»ãƒ³ã‚¹ãƒ»ã‚¢ã‚½ã‚·ã‚¨ã‚¤ãƒˆãƒ»ãƒ—ãƒãƒ¢ãƒ¼ã‚·ãƒ§ãƒ³åºƒå‘Šã‚’æŽ²è¼‰ã—ã¦ã„ã¾ã™ã€‚ Amazonã®ã‚¢ã‚½ã‚·ã‚¨ã‚¤ãƒˆã¨ã—ã¦ã€Security Akademeiaã¯é©æ ¼è²©å£²ã«ã‚ˆã‚ŠåŽå…¥ã‚’å¾—ã¦ã„ã¾ã™ã€‚ åºƒå‘Šé…ä¿¡ç‰ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼ãƒšãƒ¼ã‚¸ã«æŽ²è¼‰ã—ã¦ã„ã¾ã™ã€‚ æ¶ˆè²»è€…åºãŒã€2023å¹´10æœˆ1æ—¥ã‹ã‚‰æ–½è¡Œã™ã‚‹æ™¯å“è¡¨ç¤ºæ³•ã®è¦åˆ¶å¯¾è±¡ï¼ˆé€šç§°:ã‚¹ãƒ†ãƒžè¦åˆ¶ï¼‰ã«ãªã‚‰ãªã„ã‚ˆã†ã€é…æ…®ã—ã¦è¨˜äº‹ã‚’ä½œæˆã—ã¦ã„ã¾ã™ã€‚ã‚‚ã—å•é¡Œã®è¡¨ç¾ãŒã‚ã‚Šã¾ã—ãŸã‚‰ã€å•ã„åˆã‚ã›ãƒšãƒ¼ã‚¸ã‚ˆã‚Šã”é€£çµ¡ãã ã•ã„ã€‚ å‚è€ƒï¼šä»¤å’Œ5å¹´10æœˆ1æ—¥ã‹ã‚‰ã‚¹ãƒ†ãƒ«ã‚¹ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã¯æ™¯å“è¡¨ç¤ºæ³•é•åã¨ãªã‚Šã¾ã™ã€‚ | æ¶ˆè²»è€…åº
m-e-omoteyama 2011/02/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼‹ã‚¢ãƒ«ãƒ•ã‚¡

security
ãƒªãƒ³ã‚¯
1