[B! XSS] monjudohã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

monjudoh id:monjudoh

XSSã«é–¢ã™ã‚‹monjudohã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (54)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2013/07/02
Flash

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1æœˆ22æ—¥ã®twitterã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹ã‚¿ â€“ twitterã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚¿ã¾ã¨ã‚
ã€ŒAdobe ã‚ˆã‚Šè‰¯ã„ã€Foxit PDF ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€ã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã§ Adobe ä»¥ä¸‹ï½žæ–°ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ï¼šé‚ªæ‚ªãª URL ã¯ã€ã„ã‹ã«ã—ã¦ã‚ãªãŸã®æ™‚é–“ã‚’å°ç„¡ã—ã«ã™ã‚‹ã‹ï¼ˆThe Registerï¼‰ dlvr.it/2qXSnC
monjudoh 2013/01/23
Web Workersã®Workerã‚³ãƒ³ã‚¹ãƒˆãƒ©ã‚¯ã‚¿ã§XSSã§ãã‚‹ï¼Ÿã¨ã„ã†ãŠè©±

JavaScript

XSS

Web Workers

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
åœ°ç„ã®JavaScriptã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
TopicsPlaceHolder SectionTitlePlaceHolder TIME rest time current/total en
monjudoh 2012/11/28
JavaScript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

DOM Based XSS
ãƒªãƒ³ã‚¯
Locking the Throne Room - How ES5+ might change views on XSS and Client Side Security
Locking the Throne Room - How ES5+ might change views on XSS and Client Side Security This document discusses using ES5 capabilities to help mitigate cross-site scripting (XSS) vulnerabilities. It summarizes the history of JavaScript and XSS, current approaches to mitigation, and limitations. It then proposes using ES5 features like Object.defineProperty to prohibit unauthorized access to DOM prop
monjudoh 2012/09/13
JavaScript

ECMAScript5

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: location.hrefã®ç›²ç‚¹
å¤ã¨ã„ã†ã“ã¨ã§ã€æ€–ã„è©±ã‚’ã—ã¾ã™ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ã®çš†ã•ã‚“ã€èžã„ã¦ä¸‹ã•ã„ã€‚ æ™‚é–“ãŒãªã„äººã‚„ã€ä»–ã®äººã«å•é¡Œã‚’èª¬æ˜Žã™ã‚‹ã¨ããªã©ã«ã¯ç°¡æ½”ã«ã¾ã¨ã‚ãŸç‰ˆã‚’ã©ã†ãžã€‚ ã“ã‚Œã¯2011å¹´12æœˆ27æ—¥ã«Appleã«å ±å‘Šã—ãŸSafariã®å•é¡Œã§ã™ã€‚Appleã‹ã‚‰ã¯ä¿®æ£ã™ã‚‹äºˆå®šã¯ãªã„ã¨ã„ã†å›žç”ã‚’è²°ã£ã¦ã„ã¾ã—ãŸãŒã€2012å¹´7æœˆ25æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸMacã®Safari 6ã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã‚ˆã‚‹ã¨ã©ã†ã‚‚Macã®Safari 6ã§ã¯ä¿®æ£ã•ã‚ŒãŸã‚ˆã†ã§ã™ã€‚ About the security content of Safari 6 http://support.apple.com/kb/HT5400 WebKit Available for: OS X Lion v10.7.4, OS X Lion Server v10.7.4 Impact: Visiting a maliciously crafted
monjudoh 2012/08/07
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

JavaScript

XSS
ãƒªãƒ³ã‚¯
@â€XSS (ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefãŒXSSã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„ã“ã¨ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·)
@â€XSS (ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefãŒXSSã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„ã“ã¨ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·) æ¦‚è¦ ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefã¯ã€XSSãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„å€¤ã‚’è¿”ã—ã¾ã™ã€‚ã“ã®æŒ™å‹•ã«ã‚ˆã‚Šã€location.hrefãŒè‡ªåˆ†ã¨åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³ã®URLã‚’è¿”ã™ã“ã¨ã‚’å‰æã«æ›¸ã„ã¦ã„ã‚‹ã‚³ãƒ¼ãƒ‰ã¯å…¨ã¦ã€æ£ã—ãå‹•ã‹ãªããªã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ Safari 6æœªæº€(Windowsã¯ä¿®æ£ç‰ˆãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã¾ã›ã‚“) iOS 6.0æœªæº€ã®Safari Mobile Android4.1æœªæº€?ã®æ¨™æº–ãƒ–ãƒ©ã‚¦ã‚¶(Android 2.3.6ã§ãƒ†ã‚¹ãƒˆã—ã¾ã—ãŸã€‚@bulkneetsã•ã‚“ã«ã‚ˆã‚‹ã¨4.1ã¯ä¿®æ£æ¸ˆã¿ã€4.0.3ã¯å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚@cubedlã•ã‚“ã«ã‚ˆã‚‹ã¨4.0.4ã¯å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚) æŒ™å‹•ã®å†ç¾ 1. http://l0.cm/atx
monjudoh 2012/08/03
XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2012/07/11
XSS

cookie
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2012/04/27
jQuery

JavaScript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

DOM Based XSS

monkey patch
ãƒªãƒ³ã‚¯
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®å·¨å¤§ãªã‚¯ãƒƒã‚ãƒ¼ã¨ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ãƒ˜ãƒƒãƒ€ãƒ¼ã‚µã‚¤ã‚ºåˆ¶é™ã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹DoSã«ã¤ã„ã¦ - ãƒ‡ãƒ¼
ã‚‚ã†10å¹´ä»¥ä¸Šå‰ã®ãƒã‚¿ãªã®ã§ã™ãŒã€ã„ã¾ã ã«æœ‰åŠ¹ã ã—ã€æœ€è¿‘ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’æ‰±ã£ã¦ã„ãªã„ãªã‚‰XSSãŒã‚ã£ã¦ã‚‚ã‚ã¾ã‚Šå•é¡Œãªã„ã¨ã„ã†æ„è¦‹ã‚’è¦‹ã‚‹ã“ã¨ãŒã‚ã‚‹ã®ã§ã€ã‚µãƒ¼ãƒ“ã‚¹æä¾›å´ã¨ã—ã¦æ¡ˆå¤–é¢å€’ãªã“ã¨ã«ãªã‚‹å ´åˆãŒã‚ã‚‹ã€ã¨ã„ã†è©±ã‚’æ›¸ãã¾ã—ãŸã€‚ POCã§ã™ã€‚ http://www.udp.jp/misc/largecookiedos.html å†…å®¹ã¨ã—ã¦ã¯ã€ JavaScriptã‹ã‚‰å·¨å¤§ãªCookieã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã«è¨å®šã§ãã‚‹ HTTPã‚µãƒ¼ãƒãƒ¼ã¯å—ã‘å–ã‚Œã‚‹HTTPãƒ˜ãƒƒãƒ€ãƒ¼ã‚µã‚¤ã‚ºã®ä¸Šé™ã‚’æŒã£ã¦ã„ã¦ã€ãã‚Œã‚’è¶…ãˆã¦ã„ãŸå ´åˆã«Bad Requestã‚’è¿”ã™ 1ã«ã‚ˆã£ã¦2ã‚’è¶…ãˆã‚‹ã‚µã‚¤ã‚ºã®CookieãŒè¨å®šå¯èƒ½ãªå ´åˆãŒã‚ã‚‹ï¼ˆãŸã¶ã‚“ã»ã¨ã‚“ã©ã®å ´åˆå¯èƒ½ï¼‰ ã‚ˆã£ã¦XSSãªã©ã«ã‚ˆã£ã¦å·¨å¤§ãªCookieã‚’è¨å®šã•ã‚Œã‚‹ã¨ä»¥é™ã‚µãƒ¼ãƒ“ã‚¹ãŒåˆ©ç”¨ã§ããªããªã‚‹ ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ Cookieã®æœ‰åŠ¹æœŸé™ã‚’ä½•åå¹´ã‚‚è¨å®šã•ã‚Œã‚‹ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼å´ã§å‹æ‰‹ã«å›žå¾©ã™ã‚‹ã“ã¨
monjudoh 2012/04/18
èˆˆå‘³æ·±ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

XSS
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2012/04/05
Shibuya.XSS

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DOM Based XSS
ãƒªãƒ³ã‚¯
Shibuya.XSS ã‚¢ã‚¦ãƒˆãƒ©ã‚¤ãƒ³ãƒ¡ãƒ¢
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 : ATND ã«å‚åŠ ã—ã¦ããŸã®ã§ã€ãã®æ™‚ã®ãƒ¡ãƒ¢ã€‚ Shibuya.XSS Shibuya.XSSã¾ã¨ã‚ â€“ Togetter DOM Based XSSã®å‚¾å‘ã¨å¯¾ç– â€“ mala Shibuya.XSSã§ç™ºè¡¨ã—ã¦ãã¾ã—ãŸ â€“ é‡‘åˆ©0ç„¡åˆ©æ¯ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚° â€“ ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã§ãã¾ã™ â€“ subtech æ©Ÿæ¢°çš„ãªã‚¹ã‚ãƒ£ãƒ³ã§è¦‹ã¤ã‘ã¥ã‚‰ã„XSS location.hashçµŒç”±ã§ç™ºç«ãŒå¤šã„ã€ ã‚µãƒ¼ãƒå´ã«ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ãŒæ®‹ã‚Šã¥ã‚‰ã„ ãƒ“ãƒ¼ã‚³ãƒ³ã§location.hashã‚’è¨˜éŒ²ã™ã‚‹äº‹ã‚‚å¯èƒ½ã ã‘ã©ã€å®Ÿè¡Œé †åºã§æ½°ã•ã‚Œã‚‹äº‹ãŒã‚ã‚‹ location.hashã§ã®å•é¡Œ XHR2 ã©ã‚“ãªæ™‚ã«è¦‹ã¤ã‘ã«ãã„ ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ã‚’ãƒ‘ãƒ¼ã‚¹ã—ã¦åˆ©ç”¨ã—ã¦ã‚‹å ´åˆ ã‚½ãƒ¼ã‚¹ã‚’èªã¾ãªã„ã¨è¦‹ã¤ã‘ã«ãã„ã€‚ é›£èªåŒ–ã•ã‚Œã¦ã‚‹ã¨ã—ã‚“ã©ã„ ãƒ¬ã‚¬ã‚·ãƒ¼ã‚³ãƒ¼ãƒ‰ ã©ã†ã™ã‚‹ã®ãŒã„ã„ã®ã ã‚ã†ã‹ ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³? ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³
monjudoh 2012/04/05
Shibuya.XSS

XSS

DOM Based XSS
ãƒªãƒ³ã‚¯
Shibuya.xss ã§è©±ã—ã¦ãã¾ã—ãŸ - nothing but trouble
ã™ã”ã„é¢ç™½ã‹ã£ãŸã€‚ä¼šã„ãŸã‹ã£ãŸäººã«ã‚‚æ²¢å±±ä¼šãˆãŸã—ã€‚ é©å½“ãªæ„Ÿã˜ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ãŒã€ãã“ãã“åå¿œãŒã‚ã£ã¦å¬‰ã—ã‹ã£ãŸã€‚ [Shibuya.xss] ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°ãƒã‚¿äºŒæœ¬ View more PowerPoint from send_
monjudoh 2012/04/05
img.onerrorã‚’ç™ºç«ã•ã›ãªã„ã®ãŒå¤§å¤‰ã¨ã„ã†ãŠè©±

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Shibuya.XSS

XSS

JavaScript

DOM
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
monjudoh 2011/11/22
DOMãƒ™ãƒ¼ã‚¹XSS

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

JavaScript

tool
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2011/06/28
JavaScript

jQuery

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

DOM Based XSS
ãƒªãƒ³ã‚¯
new XSS pattern with jQuery
XSS with $(location.hash) demo Click this link. It works on IE, Firefox, Chrome, Opera. In Safari, location.hash is percent encoded, not work. why? $("#id") is css selector, $("<img>") is createElement, and $("#<img>") is createElement too. how to fix in your library var hash = "#" + location.hash.replace(/[^\w]/g, ""); if ($(hash).size()) { ... } or patch to jQuery - quickExpr = /^(?:[^<]*(<[\w\W
monjudoh 2011/06/06
JavaScript

jQuery

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2011/05/07
iOSã‚¢ãƒ—ãƒªã®UIWebViewå†…ã§file://ã§ä»»æ„ã®HTMLã‚’è¡¨ç¤ºã§ãã‚‹ã¨ãã®ã‚¢ãƒ—ãƒªã®plistã‚’XHRã§èªã‚“ã§å¤–ã«æ¼ã‚‰ã™ã“ã¨ãŒå¯èƒ½ãªã®ã§ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã«å¹³æ–‡ä¿å˜ã™ã‚‹ãªã€keychainä½¿ãˆã¨ã„ã†è©±ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

iOS

UIWebView
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2011/05/07
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS
ãƒªãƒ³ã‚¯
Evernote XSSäº‹ä»¶ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã¨ãã®å¯¾ç–éŽç¨‹ã¨é¡›æœ« | uuu
Evernoteã«ä»»æ„ã®HTMLã‚’æ³¨å…¥ã§ãã‚‹è„†å¼±æ€§ãŒã‚ã‚Šã¾ã—ãŸã€‚ http://togetter.com/li/125281 Evernoteã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ã¨ã‹ã«ã¯è§¦ã‚Œãšã€ã¨ã‚Šã‚ãˆãšä½•ãŒå¯èƒ½ã ã£ãŸã®ã‹ã€ã©ã†ã„ã†çŠ¶æ³ã ã£ãŸã®ã‹ã‚’æ›¸ãã¾ã™ã€‚ 4/18 16æ™‚ã”ã‚ Evernoteã®ç™»éŒ²ãƒšãƒ¼ã‚¸ã®HTMLã«ä»¥ä¸‹ã®ã‚ˆã†ãªè¨˜è¿°ãŒã‚ã‚Šã¾ã™ã€‚ <script type="text/javascript"> $(document).ready(function() { suggestedTags = []; suggestedNotebook = ""; sourceUrl = ""; providerName = ""; payload = { "user" : { ... }, ..å¾Œç•¥.. </script> ã“ã®sourceUrl = ""ã®éƒ¨åˆ†ã€https://www.evernote.c
monjudoh 2011/04/21
XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

äº‹ä¾‹
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2010/11/18
ã€Žã™ã§ã«ç”»é¢ã«å‡ºåŠ›ã•ã‚Œã¦ã„ã‚‹ãªã‚‰DOMã§æ‹¾ã£ã¦ãã‚‹ã®ãŒè‰¯ã„ã€scriptã‚’å‹•çš„ã«ç”Ÿæˆã™ã‚‹ã®ã¯é¿ã‘ã‚‹ã¹ãã€ã§FAã ã¨æ€ã†ã€‚ãã†ã—ã¦å®‰å…¨ã«åŸ‹ã‚ã“ã¾ã‚ŒãŸã‚‚ã®ã‚’ãƒã‚«ãŒå‡ºåŠ›æ™‚ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãªã„ã§ä½¿ã†ã“ã¨ã¾ã§è€ƒæ…®ã—ãŸã‚‰ã‚ãƒªãŒãªã„

JavaScript

HTML

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: XSSã«å¼·ã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ä½œã‚‹ â€“ ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ã®é¸å®šåŸºæº–ã¨ã‚¹ãƒ‹ãƒšãƒƒãƒˆã®ç”Ÿæˆæ‰‹æ³• (ç¬¬ï¼‘å›žç¥žæ³‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼šç™ºè¡¨è³‡æ–™)
ç™ºè¡¨è³‡æ–™ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã€‚æ˜¥å±±æ§˜ã¯ã˜ã‚ECãƒŠãƒ“ã®çš†æ§˜ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ XSSã«å¼·ã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ä½œã‚‹ â€“ ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ã®é¸å®šåŸºæº–ã¨ã‚¹ãƒ‹ãƒšãƒƒãƒˆã®ç”Ÿæˆæ‰‹æ³•View more presentations from kazuho.
monjudoh 2010/10/27
hogehogeè¨˜æ³•ã¿ãŸã„ãªãƒ¦ãƒ¼ã‚¶ã®å…¥åŠ›ã‹ã‚‰HTMLã‚’ç”Ÿæˆã™ã‚‹å ´åˆã®è©±

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

ã‚¹ãƒ©ã‚¤ãƒ‰
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸