[B! xss] nori0620ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nori0620 id:nori0620

xssã«é–¢ã™ã‚‹nori0620ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Masato Kinugawa Security Blog: location.hrefã®ç›²ç‚¹
å¤ã¨ã„ã†ã“ã¨ã§ã€æ€–ã„è©±ã‚’ã—ã¾ã™ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ã®çš†ã•ã‚“ã€èžã„ã¦ä¸‹ã•ã„ã€‚ æ™‚é–“ãŒãªã„äººã‚„ã€ä»–ã®äººã«å•é¡Œã‚’èª¬æ˜Žã™ã‚‹ã¨ããªã©ã«ã¯ç°¡æ½”ã«ã¾ã¨ã‚ãŸç‰ˆã‚’ã©ã†ãžã€‚ ã“ã‚Œã¯2011å¹´12æœˆ27æ—¥ã«Appleã«å ±å‘Šã—ãŸSafariã®å•é¡Œã§ã™ã€‚Appleã‹ã‚‰ã¯ä¿®æ£ã™ã‚‹äºˆå®šã¯ãªã„ã¨ã„ã†å›žç”ã‚’è²°ã£ã¦ã„ã¾ã—ãŸãŒã€2012å¹´7æœˆ25æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸMacã®Safari 6ã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã‚ˆã‚‹ã¨ã©ã†ã‚‚Macã®Safari 6ã§ã¯ä¿®æ£ã•ã‚ŒãŸã‚ˆã†ã§ã™ã€‚ About the security content of Safari 6 http://support.apple.com/kb/HT5400 WebKit Available for: OS X Lion v10.7.4, OS X Lion Server v10.7.4 Impact: Visiting a maliciously crafted
nori0620 2012/08/03
security

xss

JavaScript
ãƒªãƒ³ã‚¯
sla.ckers.org web application security forum :: XSS Info
Q and A for any cross site scripting information. Feel free to ask away.
nori0620 2010/02/03
xss
ãƒªãƒ³ã‚¯
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSSï¼šæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ3ï¼‰ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ ãªãœã‹å¥¥æ·±ã„IEã®XSSã®è©± çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ ç¬¬1å›žã€Œï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆã€ã¨ç¬¬2å›žã€Œï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–ã€ã§Internet Explorer(IE)ã®ç‹¬è‡ªã®æ©Ÿèƒ½ãŒã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼šcross-site scriptingï¼‰ã‚’å¼•ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ãã¾ã—ãŸã€‚ ç¬¬3å›žã§ã‚‚å¼•ãç¶šãã€IEç‰¹æœ‰ã®æ©Ÿèƒ½ãŒXSSã‚’å¼•ãèµ·ã“ã™ä¾‹ã¨ã„ã†ã“ã¨ã§ã€
nori0620 2010/01/20
xss

ie

css
ãƒªãƒ³ã‚¯
mod_securityã®XSSå¯¾ç–ãƒ«ãƒ¼ãƒ«ã‚’ä½œæˆã™ã‚‹
mod_securityã®XSSå¯¾ç–ãƒ«ãƒ¼ãƒ«ã‚’ä½œæˆã™ã‚‹ï¼šWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«æ½œã‚€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ï¼ˆ12ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ â€»ã”æ³¨æ„ ä»–ç¤¾ãŠã‚ˆã³ä»–çµ„ç¹”ã®Webã‚µã‚¤ãƒˆãªã©ã¸ã®ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ãŠã‚ˆã³ãƒ‡ãƒ¼ã‚¿ã®å–å¾—ãªã©ã®è¡Œç‚ºã§å¾—ãŸæƒ…å ±ã‚’ä¾µå…¥ãªã©ã«æ‚ªç”¨ã™ã‚‹ã‹ã€ã¾ãŸã¯åŒã˜ç›®çš„ã‚’æŒã¤ç¬¬ä¸‰è€…ã«æä¾›ã—ãŸæ™‚ç‚¹ã§é•æ³•ã¨ãªã‚Šã¾ã™ã€‚ã”æ³¨æ„ãã ã•ã„ã€‚ æœ¬ç¨¿ã®å†…å®¹ã‚’æ¤œè¨¼ã™ã‚‹å ´åˆã¯ã€å¿…ãšå½±éŸ¿ã‚’åŠã¼ã•ãªã„é™ã‚‰ã‚ŒãŸç’°å¢ƒä¸‹ã§è¡Œã£ã¦ä¸‹ã•ã„ã€‚ ã¾ãŸã€æœ¬ç¨¿ã‚’åˆ©ç”¨ã—ãŸè¡Œç‚ºã«ã‚ˆã‚‹å•é¡Œã«é–¢ã—ã¾ã—ã¦ã¯ã€ç†è€…ãŠã‚ˆã³æ ªå¼ä¼šç¤¾ã‚¢ãƒƒãƒˆãƒžãƒ¼ã‚¯ãƒ»ã‚¢ã‚¤ãƒ†ã‚£ã¯ä¸€åˆ‡è²¬ä»»ã‚’è² ã„ã‹ãã¾ã™ã€‚ã”äº†æ‰¿ãã ã•ã„ã€‚ å‰å›žã¯ä¸€èˆ¬çš„ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼ˆWAFï¼‰ã«é–¢ã™ã‚‹èª¬æ˜Žã¨ã€mod_securityã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãŠã‚ˆã³ç°¡å˜ãªä½¿ã„æ–¹ã«ã¤ã„ã¦èª¬æ˜Žã—ãŸã€‚ä»Šå›žã¯ã‚‚ã†å°‘ã—å®Ÿç”¨çš„ãªè¨å®šã‚’è€ƒãˆã¦ã¿ã‚‹ã“ã¨ã«ã™ã‚‹ã€‚æœ¬ç¨¿ã§èª¬æ˜Žã™ã‚‹mod_securityã®ãƒ«ãƒ¼ãƒ«ã¯ã€ä¸€èˆ¬çš„
nori0620 2010/01/18
xss

security
ãƒªãƒ³ã‚¯
http://www.7netshopping.jp/home/search_result/?kword_in=&kword_out=&title=&brand=%22%3Balert%281%29%3B%22&seller=&ctgySearchDetail=&priceClassFrom=&priceClassTo=&sale_sy=&sale_sm=&sale_ey=&sale_em=&productPlace=&sort=0&disp=0&extract=0&allGoods=on&submit2
nori0620 2009/12/19
xss

security
ãƒªãƒ³ã‚¯
ã‚»ãƒ–ãƒ³ãƒãƒƒãƒˆã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã€ã€Œãƒ‡ãƒ¢ç”¨ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã€ãŒæµå‡ºã€XSSè„†å¼±æ€§ã‚‚ã€€ã€Œå€‹äººæƒ…å ±æµå‡ºã¯ãªã„ã€
ã‚»ãƒ–ãƒ³ï¼†ã‚¢ã‚¤ã‚°ãƒ«ãƒ¼ãƒ—ãŒ12æœˆ8æ—¥ã«ã‚ªãƒ¼ãƒ—ãƒ³ã—ãŸECã‚µã‚¤ãƒˆã€Œã‚»ãƒ–ãƒ³ãƒãƒƒãƒˆã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã€ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒæµå‡ºã—ãŸã¨ãƒãƒƒãƒˆã§é¨’ãŽã«ãªã£ã¦ã„ã‚‹ã€‚åŒã‚µã‚¤ãƒˆã®åºƒå ±æ‹…å½“è€…ã«ã‚ˆã‚‹ã¨ã€æµå‡ºã—ãŸã®ã¯ã€Œæ¤œè¨¼ã§ä½¿ã£ã¦ã„ãŸãƒ‡ãƒ¢ç”¨ã‚³ãƒ¼ãƒ‰ã§ã€æœ¬ç•ªç”¨ã®ã‚‚ã®ã§ã¯ãªã„ã€ã€‚å€‹äººæƒ…å ±æµå‡ºã®å¯èƒ½æ€§ã‚‚ãªã„ã¨ã—ã¦ã„ã‚‹ã€‚ ãƒ‡ãƒ¢ç”¨ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã‚µãƒ¼ãƒã«ç½®ã„ã¦ã‚ã‚Šã€èª°ã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹çŠ¶æ…‹ã«ãªã£ã¦ã„ãŸã€‚åŒç¤¾ã¯12æœˆ17æ—¥åˆå‰ã€ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã«å¤–éƒ¨ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ãŒã‚ã£ãŸã“ã¨ã«æ°—ä»˜ãã€ã™ãã«å…¬é–‹ã‚µãƒ¼ãƒã‹ã‚‰å‰Šé™¤ã€‚ã€Œãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ç‰éžå…¬é–‹ã‚µãƒ¼ãƒã«ä¾µå…¥ã•ã‚ŒãŸã‚ã‘ã§ã¯ãªãã€å€‹äººæƒ…å ±æµå‡ºã®å±é™ºã¯ãªã„ã€ã¨ã—ã¦ã„ã‚‹ã€‚ åŒã‚µã‚¤ãƒˆã«ã¤ã„ã¦ã¯14æ—¥ã”ã‚ã‹ã‚‰ã€XSSï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼‰è„†å¼±æ€§ã‚‚æŒ‡æ‘˜ã•ã‚Œã¦ã„ãŸã€‚ã€Œå€‹äººæƒ…å ±ã‚’æ‰±ã†ãƒšãƒ¼ã‚¸ã§ã¯XSSè„†å¼±æ€§ã¯ãªãã€å€‹äººæƒ…å ±ã®æµå‡ºã¯ãªã„ãŒã€ãã†ã§ãªã„ãƒšãƒ¼ã‚¸ã«è„†å¼±æ€§ãŒã‚ã£ãŸã€ã¨ã—ã€15æ—¥ã¾ã§ã«å¯¾ç–ã‚’å–ã£ãŸã¨ã„ã†ã€‚ å±Šã‘
nori0620 2009/12/19
xss

Security
ãƒªãƒ³ã‚¯
WebKitã«å…¥ã£ãŸXSSæ¤œçŸ¥æ©Ÿèƒ½ - ç´ äººãŒãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’å‹‰å¼·ã—ã¦ã„ãŸãƒ–ãƒã‚°
è¿½è¨˜: ä¸‹è¨˜ã®XSSã¯ä¿®æ£ã•ã‚ŒãŸã€‚ä¿®æ£å‰ã¯ä¸‹è¨˜ã®URLã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ <link rel="alternate" type="application/rss+xml" title="RSS2.0" href="http://live.nicovideo.jp/recent/rss?tab=&sort="><script>alert("XSS");</script><meta id="&p=1" /> ã®ã‚ˆã†ã«ãªã£ã¦ã„ãŸã€‚è¿½è¨˜ã“ã“ã¾ã§ã€‚ ttp://live.nicovideo.jp/search?sort="><script>alert("XSS");</script><meta id="Firefoxç‰ã€Operaç‰ã§ã¯ã‚¢ãƒ©ãƒ¼ãƒˆãŒè¡¨ç¤ºã•ã‚Œã‚‹ãŒã€WebKitã®nightlyã§ã¯è¡¨ç¤ºã•ã‚Œãªã„ã€‚åŽŸå› ã‚’èª¿ã¹ãŸã‚‰ã€ã©ã†ã‚„ã‚‰ã“ã‚Œã¯WebKitã«æè¼‰ã•ã‚ŒãŸXSSå¯¾ç–ã®æ©Ÿèƒ½ã®ã‚ˆã†ã ã€‚ Refused
nori0620 2009/07/20
javascript

xss
ãƒªãƒ³ã‚¯
1