[B! security] nntsuguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nntsugu id:nntsugu

securityã«é–¢ã™ã‚‹nntsuguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (85)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SPAã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¶…å…¥é–€ | ãƒ‰ã‚¯ã‚»ãƒ«
ã‚¹ãƒ©ã‚¤ãƒ‰æ¦‚è¦ SPA(Single Page Application)ã®æ™®åŠãŒä¸€å±¤é€²ã‚“ã§ãŠã‚Šã€å¾“æ¥åž‹ã®MPAã‚’çŸ¥ã‚‰ãªã„ã‚¦ã‚§ãƒ–é–‹ç™ºè€…ã‚‚ç”Ÿã¾ã‚Œã¤ã¤ã‚ã‚‹ã‚ˆã†ã§ã™ã€‚SPAå¯¾å¿œã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã§ã¯åŸºæœ¬çš„ãªè„†å¼±æ€§ã«ã¤ã„ã¦ã¯å¯¾ç–æ©Ÿèƒ½ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ãŒã€ãã‚Œã«ã‚‚é–¢ã‚ã‚‰ãšã€è„†å¼±æ€§è¨ºæ–ç‰ã§åŸºæœ¬çš„ãªè„†å¼±æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã‚‹ã‚±ãƒ¼ã‚¹ã¯ã‚€ã—ã‚å¢—ãˆã¤ã¤ã‚ã‚Šã¾ã™ã€‚ æœ¬ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§ã¯ã€Laravelã¨Reactã§é–‹ç™ºã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ãƒ¢ãƒ‡ãƒ«ã¨ã—ã¦ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€èªå¯åˆ¶å¾¡ä¸å‚™ç‰ã®è„†å¼±æ€§ã®å®Ÿä¾‹ã‚’ç´¹ä»‹ã—ãªãŒã‚‰ã€ç¾å®Ÿçš„ãªå¯¾ç–ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚Laravelã‚„Reactä»¥å¤–ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯åˆ©ç”¨è€…ã«ã‚‚å½¹ç«‹ã¤èª¬æ˜Žã‚’å¿ƒãŒã‘ã¾ã™ã€‚ PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2022ã§ã®è¬›æ¼”è³‡æ–™ã§ã™ã€‚ PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã§ã®å‹•ç”»URL https://www.youtube.com/watch?v=jZ6sWyGxcCs
nntsugu 2022/09/30
ã‚ã¨ã§èªã‚€

SPA

security
ãƒªãƒ³ã‚¯
Webã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã ã£ãŸã‚‰å½“ç„¶çŸ¥ã£ã¦ãŠããŸã„ã€Œ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å¯¾ç– ã€ã¨ã¯ï¼Ÿ | æ ªå¼ä¼šç¤¾ãƒŒãƒ¼ãƒ©ãƒœ(Nulab inc.)
ã“ã‚“ã«ã¡ã¯ã€‚Typetalkãƒãƒ¼ãƒ ã®æ°¸æ±Ÿã§ã™ã€‚ä»Šå›žã¯4æœˆã«ãƒªãƒªãƒ¼ã‚¹ã—ãŸã€Backlogã¨Typetalkã®é€£æºæ©Ÿèƒ½ã§ã‚ã‚‹ã€ŒBacklogã‚«ãƒ¼ãƒ‰ã€ã®å®Ÿè£…ã®éš›ã«è¡Œã£ãŸ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å¯¾ç– ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ Backlogã‚«ãƒ¼ãƒ‰ã¨ã¯ Backlogã‚«ãƒ¼ãƒ‰ã¯ã€Typetalkã®ãƒˆãƒ”ãƒƒã‚¯å†…ã«Backlogã®èª²é¡Œã‚„ã‚³ãƒ¡ãƒ³ãƒˆã‚’ã‚«ãƒ¼ãƒ‰å½¢å¼ã«ã—ã¦è¡¨ç¤ºã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚Backlogã®èª²é¡Œã‚ãƒ¼ã‚„èª²é¡Œã®URLã‚’è²¼ã‚Šä»˜ã‘ã‚‹ã ã‘ã§ã€ä»¥ä¸‹ã®ç”»åƒã®ã‚ˆã†ã«è¡¨ç¤ºã§ãã¾ã™ï¼ˆâ€»è©³ã—ã„ã”åˆ©ç”¨æ–¹æ³•ã«ã¤ã„ã¦ã¯ã“ã¡ã‚‰ã®ã€ŒTypetalkã®ãƒˆãƒ”ãƒƒã‚¯ä¸Šã§èª²é¡Œã®è©³ç´°ã‚’è¦‹ã‚‰ã‚Œã‚‹ Backlogã‚«ãƒ¼ãƒ‰ ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸï¼ã€ã‚’ã”å‚ç…§ãã ã•ã„ï¼‰ã€‚ Backlogã‚«ãƒ¼ãƒ‰ã®å®Ÿè£…ã¯ã€Typetalkã‹ã‚‰Backlogã«ç”¨æ„ã—ãŸåŸ‹ã‚è¾¼ã¿ç”¨ã®èª²é¡Œãƒšãƒ¼ã‚¸ã‚’<iframe>ã§è¡¨ç¤ºã™ã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ã“ã®ã‚ˆã†ãªå®Ÿè£…ã«ã—ãŸã®ã¯ã€ã‚‚ã¨ã‚‚ã¨Backlogã«<if
nntsugu 2021/06/14
ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å¯¾ç–ï¼ˆå¾³ä¸¸ã•ã‚“ãŠå¢¨ä»˜ã

programming

security
ãƒªãƒ³ã‚¯
'or/**/1=1#' on Twitter: "â€œKazunori ANDO on Twitter: "(ãƒãƒ¼ãƒˆç•ªå·å¤‰ãˆãªãã¦ã‚‚sshd_configã«KexAlgorithmsã¨Ciphersã¨MACsæ›¸ã„ã¦å¼±ã„ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ å¼¾ãã ã‘ã§å¤§é‡ã«æ¥ã‚‹ã®ã¯é˜²ã’ã‚‹ã—ã€ãƒãƒ¼ãƒˆè‡ªä½“ã®å¼·åº¦ä¸Šâ€¦ https://t.co/zi8SSupTsM"
nntsugu 2020/09/28
è¸ã¿å°ã®SSHã‚¹ã‚ãƒ£ãƒ³ã®ãŠè©±

SSH

security
ãƒªãƒ³ã‚¯
æœ¬å½“ã¯ã“ã‚ã„MySQLãƒ—ãƒãƒˆã‚³ãƒ« - tmtms ã®ãƒ¡ãƒ¢
11/28 ã« Haskell ã§ MySQL ã® Xãƒ—ãƒãƒˆã‚³ãƒ«ã‚’å®Ÿè£…ã—ãŸã¨ã„ã†è©±ãŒè´ã‘ã‚‹ Club MySQL ã¨ã„ã†ã‚¤ãƒ™ãƒ³ãƒˆãŒã‚ã£ãŸã®ã§å‚åŠ ã—ã¦ãã¾ã—ãŸã€‚ clubmysql.connpass.com MySQLã®ãƒ—ãƒãƒˆã‚³ãƒ«ã®è©±ã¨ã„ã†ã“ã¨ã§ã€å¹³æ—¥ã®å¤œã¨ã¯è¨€ãˆæ±äº¬ã§å‚åŠ è€…9äºº(ç™ºè¡¨è€…å«ã‚€)ã¨ã„ã†ãƒžãƒ‹ã‚¢ãƒƒã‚¯ãªé›†ã¾ã‚Šã§ã—ãŸã€‚ è‡ªåˆ†ã‚‚1å¹´å‰ã« Ruby ã§ MySQL Xãƒ—ãƒãƒˆã‚³ãƒ«ã‚’å®Ÿè£…ã—ã¦ã„ãŸã®ã§ã™ãŒã€ã“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚’æœ€å¾Œã«ä¸æ–ã—ã¦ã„ãŸã®ã§ã—ãŸã€‚ MySQL X Protocol ã§ Collection ã®è¿½åŠ ã¯ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸãŒã€æ¤œç´¢ãŒã‚ã‚“ã©ãã•ã„ã€‚æ¡ä»¶æ–‡å—åˆ—ã®ãƒ‘ãƒ¼ã‚¹ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§è¡Œã†å¿…è¦ãŒã‚ã‚‹ã‚“ã ãªã€‚â€” ã¨ã¿ãŸã¾ã•ã²ã‚ðŸ’ŽðŸ¬ (@tmtms) 2017å¹´2æœˆ20æ—¥ ä»Šå›žè©±ã‚’èžã„ã¦ã€ç„¡ç†ã«è¬Žæ¡ä»¶å¼æ–‡å—åˆ—ã‚’ãƒ‘ãƒ¼ã‚¹ã™ã‚‹ã‚“ã˜ã‚ƒãªãã¦ã€å‡¦ç†ç³»ã§æ›¸ãã‚„ã™ã„ã‚ˆã†ã«æ›¸ã‘ã°ã„ã„ã‚“ã ã¨ã„ã†æ–¹å¼ã«ç›®ã‹ã‚‰
nntsugu 2020/01/29
MITM

MySQL

security
ãƒªãƒ³ã‚¯
100ä¸‡å††ã‚’ã‚²ãƒƒãƒˆã™ã‚‹æ–¹æ³•ï¼šZOZOå‰æ¾¤ç¤¾é•·ã®TwitterãŠå¹´çŽ‰ä¼ç”»ã«ã¯å‚åŠ ã›ãšã€ãªã‚Šã™ã¾ã—ã¦è©æ¬ºåºƒå‘Šã‚’å‡ºç¨¿ã™ã‚‹ | åŒ¿åãƒ–ãƒã‚°
100ä¸‡å††ã‚’ã‚²ãƒƒãƒˆã™ã‚‹æ–¹æ³•ï¼šZOZOå‰æ¾¤ç¤¾é•·ã®TwitterãŠå¹´çŽ‰ä¼ç”»ã«ã¯å‚åŠ ã›ãšã€ãªã‚Šã™ã¾ã—ã¦è©æ¬ºåºƒå‘Šã‚’å‡ºç¨¿ã™ã‚‹ Twitterã«ã¯ã€ä¼æ¥ã®å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãªã©ãŒé–‹å‚¬ã™ã‚‹ã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ä¼ç”»ãŒã‚ã‚Šã¾ã™ã€‚å¿œå‹Ÿæ¡ä»¶ãŒã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ãƒ•ã‚©ãƒãƒ¼ã‚„ç‰¹å®šãƒ„ã‚¤ãƒ¼ãƒˆã®ãƒªãƒ„ã‚¤ãƒ¼ãƒˆãªã©ã€ç°¡å˜ã«å‚åŠ ã§ãã‚‹ã“ã¨ã‹ã‚‰äººæ°—ã‚’é›†ã‚ã¦ã„ã¾ã™ã€‚æ‡¸è³žä¼ç”»ã«å‚åŠ ã™ã‚‹ãŸã‚ã«å°‚ç”¨ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œæˆã™ã‚‹äººã€…ã‚‚ã„ã¾ã™ã€‚ æœ€è¿‘ã§ã¯ã€ZOZOã®å‰æ¾¤å‹ä½œç¤¾é•·ãŒTwitterã§ã€Œ100ä¸‡å††ã‚’100äººã«ãƒ—ãƒ¬ã‚¼ãƒ³ãƒˆã™ã‚‹ã€ã¨ã„ã†ä¼ç”»ã‚’é–‹å‚¬ã—ã€ãã®ãƒªãƒ„ã‚¤ãƒ¼ãƒˆæ•°ã¯500ä¸‡ä»¶ã¨ä¸–ç•Œè¨˜éŒ²ã‚’é”æˆã—ã¦ã„ã¾ã™ã€‚ ZOZOå‰æ¾¤ç¤¾é•·ã€Twitterã§ã€Œ100ä¸‡å††ã‚’100äººã«ãƒ—ãƒ¬ã‚¼ãƒ³ãƒˆã€ã€€340ä¸‡ä»¥ä¸Šã®å¿œå‹Ÿã€ã€ŒRTæ—¥æœ¬è¨˜éŒ²æ›´æ–°ã€ â€“ ITmedia NEWS http://www.itmedia.co.jp/news/articles/1901/07/news048.html
nntsugu 2019/01/22
security

ãªã‚Šã™ã¾ã—
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒãƒ¼ç¾¤ã¸ã®ç®¡ç†è€…ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’çµ±åˆ¶ã™ã‚‹ | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚sshã‚’åˆ©ç”¨ã—ã¦ã‚µãƒ¼ãƒãƒ¼ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹éš›ã€IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§rootã«ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã•ã›ã¦ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚ã¾ã¾ã‚ã‚‹ã§ã—ã‚‡ã†ãŒã€ç›£æŸ»ã‚‚é€šã‚‰ãªã„ã—ä¹—ã£å–ã‚Šãƒªã‚¹ã‚¯é«˜ã™ãŽå•é¡Œãªã®ã§è¾žã‚ãŸã„ã¨ã“ã‚ã§ã™ã€‚ã‚¯ãƒ©ã‚¦ãƒ‰ã‚’æ—¥å¸¸çš„ã«åˆ©ç”¨ã™ã‚‹æ–¹ã€…ã®å ´åˆã€é€šå¸¸ã¯è¨¼æ˜Žæ›¸èªè¨¼ã«ã‚ˆã£ã¦ã‚µãƒ¼ãƒãƒ¼ãƒã‚°ã‚¤ãƒ³ã‚’è¡Œã£ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ«ãŒæ¬¡ã€…ã¨å¢—ãˆã¦ã„ãå•é¡Œã€è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰‹ã«å…¥ã‚Œã‚Œã°å¤šãã®äººãŒã‚µãƒ¼ãƒãƒ¼ã«ãƒã‚°ã‚¤ãƒ³ã§ãã¡ã‚ƒã†å•é¡Œã¯ç›®ã‚’ã¤ã¶ã‚‹ã—ã‹ãªã„ã®ã‹ã€‚ ãã“ã§ã‚¨ãƒ³ãƒ—ãƒ©ãªã©ã§ã¯ã€ã€Œè¸ã¿å°ã‚µãƒ¼ãƒãƒ¼ã€ã‚’ä½œã£ã¦ã€ãã“ã§ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã™ã‚‹ã“ã¨ã§ã€ã‚µãƒ¼ãƒãƒ¼ãƒã‚°ã‚¤ãƒ³ã¸ã®çµ±åˆ¶ã‚’å›³ã‚‹ã‚ã‘ã§ã™ãŒã€ç¬¬ä¸€è¸ã¿å°ã‹ã‚‰ç¬¬äºŒè¸ã¿å°ã¸ãã—ã¦ç¬¬ä¸‰è¸ã¿å°ã¨ã‹ã„ã†çµ¶æœ›ã‚‚ç¾å®Ÿçš„ã«å˜åœ¨ã—ã¦ã„ã‚‹å®ŸçŠ¶ã§ã™ã€‚ãã‚‚ãã‚‚ã€ã‚¨ãƒ³ãƒ—ãƒ©ãŒè¸ã¿å°ã‚µãƒ¼ãƒãƒ¼ã‚’è‡ªå‰ã§ä½œã‚‹ã‚ã‘ãŒãªãã€ãã†ã„ã†è£½å“ã‚’è³¼å…¥ã—ã¦ä½œã£ã¦ã‚‚ã‚‰ã†ã€ã¯ã„æ•°åƒä¸‡å††ã€ä¿å®ˆè²»æ¯Žå¹´ã‚ˆã‚ã—ãã¿ãŸã„ãªä¸–
nntsugu 2019/01/05
ã‚ã¨ã§èªã‚€

security

teleport

SSH
ãƒªãƒ³ã‚¯
The ultimate PHP Security Checklist
Product { this.openCategory = category; const productMenu = document.querySelector('.product-menu'); window.DD_RUM.onReady(function() { if (productMenu.classList.contains('show')) { window.DD_RUM.addAction(`Product Category ${category} Hover`) } }) }, 160); }, clearCategory() { clearTimeout(this.timeoutID); } }" x-init=" const menu = document.querySelector('.product-menu'); var observer = new Muta
nntsugu 2018/12/31
book

DevOps

security
ãƒªãƒ³ã‚¯
For Engineers - PagerDuty Security Training
Security Training for Engineers This is an open-source version of "Security Training for Engineers", PagerDuty's internal technical security training, open to all PagerDuty employees as part of our continuous security training program. Unlike our course for everyone, this course covers more technical topics and is more applicable to those in an engineering role. While it delves into various techni
nntsugu 2018/12/28
ã‚ã¨ã§èªã‚€

æ•™æ

security

PagerDuty
ãƒªãƒ³ã‚¯
O'Reilly Japan - ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹é§†å‹•åž‹ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆãƒ¬ã‚¹ãƒãƒ³ã‚¹
ã‚µã‚¤ãƒãƒ¼è„…å¨ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ã¯ã€ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã«é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ç©æ¥µçš„ã«é›†ã‚ã€åˆ†æžã™ã‚‹ã“ã¨ã§é˜²å¾¡ã«å½¹ç«‹ã¦ã‚‹ã“ã¨ã‚’æŒ‡ã—ã¾ã™ã€‚ã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã‚„æ¨™çš„åž‹æ”»æ’ƒãªã©äºˆæ¸¬ã®é›£ã—ã„æ”»æ’ƒãŒå¢—ãˆã€æ—¢å˜ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ„ãƒ¼ãƒ«ã ã‘ã§ã¯é˜²å¾¡ãŒé›£ã—ã„æ˜¨ä»Šã€æ³¨ç›®ã•ã‚Œã‚‹åˆ†é‡Žã§ã™ã€‚æœ¬æ›¸ã¯ã€ã‚µã‚¤ãƒãƒ¼è„…å¨ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ã‚’ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«æ´»ç”¨ã™ã‚‹ãŸã‚ã®æŒ‡å—æ›¸ã§ã™ã€‚ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ã®åŸºç¤Žã‹ã‚‰ã€ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹é§†å‹•åž‹ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã€å°†æ¥ã«å‘ã‘ãŸãƒ—ãƒã‚°ãƒ©ãƒ æ§‹ç¯‰ã¾ã§ã‚’è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ åºæ–‡ ã¯ã˜ã‚ã« ç¬¬1éƒ¨ã€€åŸºç¤Žç·¨ 1ç« ã€€å°Žå…¥ 1.1ã€€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã®ãŸã‚ã®ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ 1.1.1ã€€ã‚µã‚¤ãƒãƒ¼è„…å¨ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ã®æ´å² 1.1.2ã€€ç¾ä»£ã®ã‚µã‚¤ãƒãƒ¼è„…å¨ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ 1.1.3ã€€ä»Šå¾Œã®æ–¹å‘æ€§ 1.2ã€€ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ã®ãŸã‚ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œ 1.3ã€€ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹é§†å‹•åž‹ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã¨ã¯ä½•ã‹ï¼Ÿ 1.4ã€€ãªãœã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹é§†å‹•
nntsugu 2018/12/17
ã‚ã¨ã§èªã‚€

security
ãƒªãƒ³ã‚¯
ASCII.jpï¼šZaifä¸æ£å‡ºé‡‘äº‹ä»¶ã®çŠ¯äººè¿½è·¡ã«ã¤ãªãŒã‚‹è¨¼æ‹ ã€JDDã‚„ã‚¨ãƒ«ãƒ—ãƒ©ã‚¹ãŒç‰¹å®š (1/3)
Japan Digital Designï¼ˆJDDã€ä¸‰è±UFJãƒ•ã‚£ãƒŠãƒ³ã‚·ãƒ£ãƒ«ãƒ»ã‚°ãƒ«ãƒ¼ãƒ—ï¼‰ã¯2018å¹´11æœˆ5æ—¥ã€ä»®æƒ³é€šè²¨å–å¼•æ‰€ã€ŒZaifã€ã‹ã‚‰9æœˆ14æ—¥ã«æµå‡ºã—ãŸä»®æƒ³é€šè²¨ã€ŒMonacoinã€ã®é€é‡‘æŒ‡ç¤ºå…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ç‰¹å®šã«æˆåŠŸã—ãŸã“ã¨ã‚’ç™ºè¡¨ã—ãŸã€‚JDDã¨ã‚¨ãƒ«ãƒ—ãƒ©ã‚¹ã€CTFãƒãƒ¼ãƒ ã®TokyoWesternsãŒåˆåŒã§å®Ÿæ–½ã—ãŸãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆâ€œZaifçŠ¯äººè¿½è·¡ãƒãƒƒã‚«ã‚½ãƒ³â€ã«ã‚ˆã‚‹æˆæžœã€‚ ä»®æƒ³é€šè²¨ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã®P2Pãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ç€ç›®ã—ãŸèª¿æŸ»æ–¹æ³•ã‚’æŽ¡ç”¨ã—ã€ä¸æ£å‡ºé‡‘ã•ã‚ŒãŸMonacoinã«å¯¾ã—ã¦10æœˆ20æ—¥ã€22æ—¥ã«åˆ¥å£åº§ã¸ã®é€é‡‘æŒ‡ç¤ºã‚’è¡Œã£ãŸãƒ•ãƒ©ãƒ³ã‚¹ã€ãŠã‚ˆã³ãƒ‰ã‚¤ãƒ„ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å‰²ã‚Šå‡ºã—ãŸã€‚ä¸¡æ—¥ã‚’å«ã‚€åˆè¨ˆ4æ—¥é–“ã¶ã‚“ã®ã™ã¹ã¦ã®ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ãƒ‡ãƒ¼ã‚¿ã¯ã€çŠ¯äººè¿½è·¡ã«å¿…è¦ãªè¨¼æ‹ ã¨ã—ã¦10æœˆ25æ—¥ã«è¦å¯Ÿåºã¨å¤§é˜ªåºœè¦ã«æä¾›ã•ã‚Œã¦ã„ã‚‹ã€‚ãªãŠP2Pãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ç€ç›®ã—ãŸèª¿æŸ»æ–¹æ³•ã¯ã€ç¾æ™‚ç‚¹ã§å›½å†…åˆã ã¨ã„ã†ã€‚ æœ¬ç¨¿ã§ã¯ã“ã®
nntsugu 2018/11/08
ã‚ã¨ã§èªã‚€

security

ctf
ãƒªãƒ³ã‚¯
iPhoneå‘ã‘ã®ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚¢ãƒ—ãƒªã¯å˜åœ¨ã™ã‚‹ã‹ | ã‚«ã‚¹ãƒšãƒ«ã‚¹ã‚ãƒ¼å…¬å¼ãƒ–ãƒã‚°
Kaspersky LabãŒiOSå‘ã‘ã®ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚¢ãƒ—ãƒªã‚’è²©å£²ã—ã¦ã„ãªã„ã®ã¯ãªãœã§ã—ã‚‡ã†ã‹ã€‚ã¾ãŸã€æ™‚ã€…è¦‹ã‹ã‘ã‚‹Appleãƒ¢ãƒã‚¤ãƒ«ãƒ‡ãƒã‚¤ã‚¹å‘ã‘ã®ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒ—ãƒªã€ã¨ã¯ä½•ãªã®ã§ã—ã‚‡ã†ã‹ã€‚ Kaspersky Labã®è£½å“ãƒ©ã‚¤ãƒ³ã‚¢ãƒƒãƒ—ã«iOSå‘ã‘ã®ã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–ã‚¢ãƒ—ãƒªãŒãªã„ã®ã¯ã€å¦™ãªæ„Ÿã˜ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ãªã„ã®ã«ã¯ç†ç”±ãŒã‚ã‚Šã¾ã™ã€‚Apple ã¯ã€ŒAppleã®iOSãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ ¸ã«æ®ãˆã¦è¨è¨ˆã•ã‚Œã¦ã„ã¾ã™ã€ï¼ˆå‡ºå…¸ï¼‰ã¨ã—ã¦ãŠã‚Šã€iOSã«ã¯ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹è£½å“ãŒå¿…è¦ãªã„ã¨ã®ç«‹å ´ã§ã€åŽ³å¯†ãªæ„å‘³ã§ã®ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚¢ãƒ—ãƒªã‚’App Storeã§è²©å£²ã™ã‚‹ã“ã¨ã‚’èªã‚ã¦ã„ã¾ã›ã‚“ã€‚ ä¸Šã‹ã‚‰ç›®ç·šã«èžã“ãˆã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°çš„ã«ã¯ç‹ãŒé€šã£ã¦ã„ã¾ã™ã€‚ç¢ºã‹ã«Apple iOSã¯éžå¸¸ã«å®‰å…¨ãªè¨è¨ˆã«ãªã£ã¦ã„ã¦ã€iOSã®ã‚¢ãƒ—ãƒªã¯ãã®ã‚¢ãƒ—ãƒªç‹¬è‡ªã®ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹å†…ã§å®Ÿè¡Œã•ã‚Œã¾ã™ã€‚ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã¨ã¯ã€
nntsugu 2018/11/01
security

iOS

ã‚«ã‚¹ãƒšãƒ«ã‚¹ã‚ãƒ¼

æ•™æ
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®AWSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£æŸ»çŠ¶æ³ã‚’æŽ¡ç‚¹ã€œCISãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã‚’èªã‚“ã§ã¿ãŸ | DevelopersIO
ã“ã®è¨˜äº‹ã§ã¯ã€çµ„ç¹”ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è©•ä¾¡ã—ã¦æ”¹å–„ã™ã‚‹ã®ã«å½¹ç«‹ã¤CISãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã®æ¦‚è¦èª¬æ˜Žã¨ã€å®Ÿéš›ã®ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã‚’åˆ©ç”¨ã—ãŸAWSç’°å¢ƒã®å…·ä½“çš„ãªãƒã‚§ãƒƒã‚¯é …ç›®ã«ã¤ã„ã¦ã€ã”ç´¹ä»‹ã—ã¾ã™ã€‚ è¥¿æ¾¤ã§ã™ã€‚å…ˆæ—¥ã€CIS(Center for Internet Security)ã‚ˆã‚ŠCIS AWS Foundation BenchmarkãŒç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚CISã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¿ƒé€²ã‚’ç›®çš„ã¨ã—ãŸç±³å›½ã®éžå–¶åˆ©å›£ä½“ã§ã€å°‚é–€å®¶ã«ã‚ˆã‚Šç²¾æŸ»ã•ã‚ŒãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã‚’å…¬é–‹ã—ã¦ãã‚Œã¦ã„ã¾ã™ã€‚ä»Šå›žã€å…¬é–‹ã•ã‚ŒãŸãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’èªã¿è§£ãã“ã¨ã§ã€AWSã‚’åˆ©ç”¨ã™ã‚‹ä¸Šã§å¿…è¦ã¨ãªã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã«ã¤ã„ã¦ç†è§£ã‚’æ·±ã‚ã‚‹ã“ã¨ãŒã§ãã‚Œã°ã¨ç›®ã‚’é€šã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ AWS Security Blog | Security and Compliance in the AWS Cloud CISãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ã¨ã¯ï¼Ÿ CISã¨ã¯ä¸‹è¨˜ã®ã‚ˆã†ãªéžå–¶åˆ©å›£ä½“
nntsugu 2018/10/28
CIS Amazon Web Services Foundations

security

CIS
ãƒªãƒ³ã‚¯
Serverspecã§ãƒ¦ãƒ¼ã‚¶ã«å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒè¨å®šã•ã‚Œã¦ã„ãªã„ã‹èª¿ã¹ã‚‹ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã‚’ä½œã‚Šã¾ã—ãŸ - ã‚¤ãƒ³ãƒ•ãƒ©ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢way - Powered by HEARTBEATS
ã“ã‚“ã«ã¡ã¯ã€‚CTOã®é¦¬å ´ã§ã™ã€‚ Serverspecä½¿ã£ã¦ã¾ã™ã‹ï¼Ÿ ãƒãƒ¼ãƒˆãƒ“ãƒ¼ãƒ„ã§ã¯ä½¿ã£ã¦ã„ã¾ã™ã€‚ ã‚µãƒ¼ãƒæ§‹ç¯‰å¾Œãªã©ã«å¼Šç¤¾æ¨™æº–ã®ã‚¹ã‚±ãƒ«ãƒˆãƒ³ã‚’ã‚‚ã¨ã«ãƒ†ã‚¹ãƒˆã‚’ä½œæˆãƒ»å®Ÿè¡Œã—ã¦ã„ã¾ã™ã€‚ æœ€è¿‘ã€Œå¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãŒã„ãªã„ã‹ãƒã‚§ãƒƒã‚¯ã—ãŸã„ã€ã¨ã„ã†è¦æœ›ãŒã‚ã£ãŸãŸã‚ã€ å®Ÿç¾ã™ã‚‹ãŸã‚ã« ServerspecWeakPassword ã‚’æ›¸ã„ã¦å…¬é–‹ã—ãŸã®ã§ç´¹ä»‹ã—ã¾ã™ã€‚ è‡ªåˆ†ã®ãƒ¡ã‚¤ãƒ³è¨€èªžã¯Pythonã¨Goã§ã™ãŒã€Serverspecã¯Rubyãªã®ã§ç´ ç›´ã«Rubyã§æ›¸ãã¾ã—ãŸã€‚ ServerspecWeakPassword Utility to check specified user's password is so weak. - github.com/heartbeatsjp/serverspecweakpassword ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒä»¥ä¸‹ã®æ¡ä»¶ã«åˆè‡´ã—ã¦ã„ã‚‹ã‹ã‚’ç¢ºèªã—ã€ åˆè‡´ã—ã¦ã„ã‚‹å ´åˆã¯ãƒ†
nntsugu 2018/10/25
shadowã‹ã‚‰passwordãŒå¼±ã„ã‹ç¢ºèªã—ã¦ã„ã‚‹

serverspec

security
ãƒªãƒ³ã‚¯
ã€éšæ™‚æ›´æ–°ã€‘Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ„ãƒ¼ãƒ«ã®ã¾ã¨ã‚ - ã¾ã£ãŸã‚ŠæŠ€è¡“ãƒ–ãƒã‚°
GUIã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³åž‹ Burp Suite ZAP zap-cli Fiddler Vex Watcher X5S ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³åž‹ï¼ˆCUIåž‹ï¼‰ SQL Map NoSQL Map w3af Arachni (çµ‚äº†) SCNR Scan My Server (â€»æä¾›çµ‚äº†) WhatWeb Skipfish Nikto Vega Grabber Wapiti WebScarab Ratproxy Wfuzz Grendel-Scan WAScan Paros SaaSåž‹ VAddyï¼ˆãƒãƒ‡ã‚£ï¼‰ AeyeScanï¼ˆã‚¨ãƒ¼ã‚¢ã‚¤ã‚¹ã‚ãƒ£ãƒ³ï¼‰ komabatoï¼ˆã‚³ãƒžãƒãƒˆï¼‰ Securifyï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ•ã‚¡ã‚¤ï¼‰ secuasï¼ˆã‚»ã‚ãƒ¥ã‚¢ã‚ºï¼‰ Walti (â€»æä¾›çµ‚äº†) ç‰¹å¾´ è¨ºæ–ç¨®åˆ¥ ã€ŒWeb Serverã€ã®ã‚¹ã‚ãƒ£ãƒ³çµæžœ Acunetix WVS Qualys - Web Application
nntsugu 2018/10/22
security
ãƒªãƒ³ã‚¯
Zaifã®ä»®æƒ³é€šè²¨ä¸æ£æµå‡ºã§è¦‹ãˆã¦ããŸã€Œæ£ã—ã„ãŠé‡‘ã®æ´—ã„æ–¹ã€ â€“ ç„¡èƒ½ãƒ–ãƒã‚°
9æœˆ20æ—¥ã€ä»®æƒ³é€šè²¨å–å¼•æ‰€ã€ŒZaifã€ã‚’é‹å–¶ã™ã‚‹ãƒ†ãƒƒã‚¯ãƒ“ãƒ¥ãƒ¼ãƒæ ªå¼ä¼šç¤¾ã¯å¤–éƒ¨ã‹ã‚‰ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ã€åŒç¤¾ãŒç®¡ç†ã™ã‚‹70å„„å††ç›¸å½“ã®ä»®æƒ³é€šè²¨ãŒæµå‡ºã—ãŸã“ã¨ã‚’å…¬è¡¨ã—ã¾ã—ãŸã€‚ ä»®æƒ³é€šè²¨ã®å…¥å‡ºé‡‘åœæ¢ã«é–¢ã™ã‚‹ã”å ±å‘Šã€åŠã³å¼Šç¤¾å¯¾å¿œã«ã¤ã„ã¦ï½œãƒ†ãƒƒã‚¯ãƒ“ãƒ¥ãƒ¼ãƒæ ªå¼ä¼šç¤¾ã®ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ https://prtimes.jp/main/html/rd/p/000000093.000012906.html ç›—ã¾ã‚ŒãŸä»®æƒ³é€šè²¨ã¯ã€ŒBitcoinã€ã€ŒBitcoin Cashã€ã€ŒMonacoinã€ã®3ç¨®é¡žã§ã™ã€‚Zaifå´ã¯æ™‚é–“å¸¯ã¨é‡‘é¡ä»¥å¤–ã«è©³ç´°ã¯æ˜Žã‹ã—ã¦ã„ã¾ã›ã‚“ãŒã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã®ã‚ã£ãŸ9æœˆ14æ—¥17æ™‚ã‹ã‚‰19æ™‚ã”ã‚ã«ç”Ÿæˆã•ã‚ŒãŸå„é€šè²¨ã®ãƒ–ãƒãƒƒã‚¯ã®å…¨å–å¼•å†…å®¹ã‚’èª¿ã¹ã‚‹ã¨ã€Bitcoinã§ã¯ãƒ–ãƒãƒƒã‚¯ #541368 ã«å«ã¾ã‚Œã‚‹å–å¼•ã«ã€å®Ÿéš›ã«Zaifã‹ã‚‰æµå‡ºã—ãŸã¨ã¿ã‚‰ã‚Œã‚‹å·¨é¡ã®é€é‡‘å±¥æ´ãŒç¢ºèªã§ãã¾ã™ã€‚ Zaifã‹ã‚‰ç›—ã¾ã‚ŒãŸBitco
nntsugu 2018/10/15
ç›—ã‚“ã ä»®æƒ³é€šè²¨ã®æ´—ã„æ–¹

work

tips

security
ãƒªãƒ³ã‚¯
çŸ¥ã‚‰ãªã‹ã£ãŸã€æ™‚ã«å›°ã‚‹Webã‚µãƒ¼ãƒ’ã‚™ã‚¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– / Where Do We Start With Information Security?
builderscon tokyo 2018ã§ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã€‚ "å®Ÿä¾‹ã¨åŸºç¤Žã§æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦çŸ¥ã‚‹" ã¨ã„ã†ãŠé¡Œã§è©±ã—ã¾ã—ãŸã€‚
nntsugu 2018/09/10
builderscon

2018

security
ãƒªãƒ³ã‚¯
ç´°å·¥ã—ãŸç”»åƒã‚’FAXã«é€ä¿¡ã—ã‚¤ãƒ³ãƒˆãƒ©ãƒãƒƒãƒˆã«ãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“ã•ã›ã‚‹è„†å¼±æ€§ï¼ˆãƒã‚§ãƒƒã‚¯ãƒ»ãƒã‚¤ãƒ³ãƒˆï¼‰ | ScanNetSecurity
nntsugu 2018/09/10
é¢ç™½ã„ã‚ˆã

security

fax
ãƒªãƒ³ã‚¯
Burp Suiteæ—¥æœ¬èªžãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆ
Burp Suiteæ—¥æœ¬èªžãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆ ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã€Burp Suite Professionalç‰ˆã«ä»˜å±žã™ã‚‹ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ã€æ—¥æœ¬èªžã«ç¿»è¨³ã—ãŸã‚‚ã®ã§ã™ã€‚ ç›®æ¬¡ Documentation API æ³¨æ„äº‹é … Enterpriseç‰ˆã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯å«ã¾ã‚Œã¦ãŠã‚Šã¾ã›ã‚“ã€‚ APIã¯ã€2022.9ã§è¿½åŠ ã•ã‚ŒãŸ Montoyaãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®API ã§ã¯ãªãã€ãã‚Œä»¥å‰ã®APIãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã§ã™ã€‚ ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã€ç§å€‹äººãŒç‹¬è‡ªã«å‹æ‰‹ã«ç¿»è¨³ã—ãŸã‚‚ã®ã§ã€PortSwiggerç¤¾ã¯ä¸€åˆ‡é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã€‚æ—¥æœ¬èªžè¨³ã®é–“é•ã„ã¯ã‚‚ã¡ã‚ã‚“ã®ã“ã¨ã€æœ¬ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ä½¿ç”¨ã—ãŸã“ã¨ã«ã‚ˆã‚‹ä¸å…·åˆç‰ã«ã¤ã„ã¦PortSwiggerã«å•ã„åˆã‚ã›ãªã„ã‚ˆã†ãŠé¡˜ã„ã—ã¾ã™ã€‚ ç¿»è¨³ã®é–“é•ã„ã‚„ã‚ˆãæ„å‘³ã®ã‚ã‹ã‚‰ãªã„ç®‡æ‰€ãŒã‚ã‚‹å ´åˆã¯ã€GitHubã®Issueã€ã¾ãŸã¯ãã®ä»–ã®æ–¹æ³•ã§ã”é€£çµ¡ãã ã•ã„ã€‚(ç‰¹ã«SequencerãŒæ€ªã—ã„ã§ã™) ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆ
nntsugu 2018/09/10
ã‚ã¨ã§èªã‚€

Burp Suite

security

Burp
ãƒªãƒ³ã‚¯
DNS: çŸã„TTLã®ãƒªã‚¹ã‚¯
(Last Updated On: 2014å¹´12æœˆ5æ—¥)TTLãŒçŸã„ã¨DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãŒãƒ‰ãƒ¡ã‚¤ãƒ³æ¨©é™ã‚’æŒã£ãŸDNSã‚µãƒ¼ãƒã«ã‚¯ã‚¨ãƒªã«è¡Œãæ©Ÿä¼šãŒå¢—ãˆã‚‹ï¼ˆå½“ãŸã‚Šå‰ã§ã™ãŒDNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã¯TTLã§æŒ‡å®šã•ã‚ŒãŸæ™‚é–“ã ã‘ãƒ¬ã‚³ãƒ¼ãƒ‰æƒ…å ±ã‚’ã‚ãƒ£ãƒƒã‚·ãƒ¥ã—ã¦ãƒ‰ãƒ¡ã‚¤ãƒ³æ¨©é™ã‚’æŒã¤DNSã‚µãƒ¼ãƒã«ã‚¯ã‚¨ãƒªã—ãªã„ï¼‰ã®ã§å±é™ºã¨è¨€ã†è©±ã€‚1ç§’ã«ä¸€å›žã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æ›´æ–°ã™ã‚‹ã»ã†ãŒ1æ™‚é–“ã«ä¸€å›žã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æ›´æ–°ã™ã‚‹ã‚ˆã‚ŠDNSã‚ãƒ£ãƒƒã‚·ãƒ¥æ±šæŸ“ãŒè¡Œã„ã‚„ã™ããªã‚‹ã€ã¨ã„ã†å½“ãŸã‚Šå‰ã®äº‹ã§ã™ã€‚DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ãŒæ±šæŸ“å¯èƒ½ã§ã‚ã‚‹äº‹ã€ãã®æ±šæŸ“ã®ä»•çµ„ã¿ã‚’çŸ¥ã‚‰ãªã„æ–¹ã«ã¯æ€ã„ãŒã‘ãªã„ãƒªã‚¹ã‚¯å¢—åŠ ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ 7ãƒšãƒ¼ã‚¸ç›®ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã‚‹æ•°å¼ã ã‘ã§ã¯ã©ã‚ŒãŒä½•ã ã‹åˆ†ã‹ã‚Šã¾ã›ã‚“ãŒã€Nã¯ãƒãƒ¼ãƒˆæ•°ã‚’è¡¨ã—ã¦ã„ã‚‹ã¯ãšã§ã™ã€‚ãƒãƒ¼ãƒˆãŒå›ºå®šã•ã‚Œã¦ã„ã‚‹ã¨16^2ã®çµ„ã¿åˆã‚ã›ã—ã‹ãªã„ã€ã¨è¨€ã†è©±ã¯è‰¯ãçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚DNSã‚’ç®¡ç†ã—ã¦ã„ã‚‹äººãªã‚‰èª°ã§ã‚‚çŸ¥ã£ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒ
nntsugu 2018/08/31
çŸã„TTLã®ãƒªã‚¹ã‚¯

DNS

security
ãƒªãƒ³ã‚¯
Microsoft PowerPoint - iw2006-DNS-DAY-minda-05.ppt
nntsugu 2018/08/31
çŸã„TTLã®ãƒªã‚¹ã‚¯

DNS

security
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸