life is penetration. geeks cheer. geeks be ambitious.ã¡ãã£ã¨èª¿ã¹ã¦ã¿ãã¨ããã¾ã¨ã¾ã£ã¦ãããµã¤ããè¦ãããã®ã§æåãã¦ãèªåç¨ã«ã¡ã¢ã ãããã¦è¦ãã¨çµæ§ãããã®ã§ãããã¾ã ã¾ã ãä¸ã®ä¸ã§ã¯ãSQLã¤ã³ã¸ã§ã¯ã·ã§ã³ã®æ³¨æåèµ·ãã¨ããè¨èãã¡ããã¡ããç®ã«ãã¾ããWebç³»ã®æ»æã¯ãæ¯è¼çææ³ãå ¬éããã¦ããå°è±¡ãåãã¾ãã®ã§ãå®ãç«å ´ã®æ¹ãã好ã¿ã®ãã®ãã»ããã¢ãããã¦ã調ã¹ãªããæå ã§è©¦ãã¦ã¿ã¦ã¯ãããã§ããããã å®ãã ãã§ã¯ãªãæ»ãããã¨ã§ã¾ããéã£ãè¦ç¹ãæã¦ããã¨ãã§ããå®ãåã«ç£¨ãããããããããã¾ãããã ã»Moth ãµã¤ã: http://www.bonsai-sec.com/en/research/moth.php ç°å¢: Linux VMWare image ã¤ã³ã¹ãã¼ã«: VMä¸ã§åç ã»Mutilli
ç±³Qualysã¯ç±³å½æé2009å¹´4æ20æ¥ï¼ç±³ã«ãªãã©ã«ãã¢å·ãµã³ãã©ã³ã·ã¹ã³ã§éå¬ä¸ã®ãRSA Conferenceãã«ããã¦ï¼Webã¢ããªã±ã¼ã·ã§ã³ã®ããå¼±æ§ãæ¤åºãããQualysGuard Web Application Scanningï¼WASï¼1.0ããªã©ã®æ°è£½åãçºè¡¨ããã QualysGuard WASã¯ï¼å社ãSaaSï¼ã½ããã¦ã¨ã¢ã»ã¢ãºã»ã¢ã»ãµã¼ãã¹ï¼å½¢å¼ã§æä¾ãããQualysGuard Security and Compliance Suiteãã®ä¸é¨ã¨ãã¦å©ç¨å¯è½ã¨ãªããã«ã¹ã¿ã ã®Webã¢ããªã±ã¼ã·ã§ã³ãèªåçã«ã¹ãã£ã³ãã¦ãã¹ããè¡ãï¼SQLã¤ã³ã¸ã§ã¯ã·ã§ã³ãã¯ãã¹ãµã¤ãã»ã¹ã¯ãªããã£ã³ã°ã¨ãã£ãããå¼±æ§ãæ¤åºããã社å å¤ã§ç¨¼åä¸ã¾ãã¯éçºç°å¢ã«ããè¤æ°ã®Webã¢ããªã±ã¼ã·ã§ã³ã«å¯¾å¿ã§ãï¼QualysGuardã®UIã使ã£ã¦Webã¢ããªã±ã¼ã·ã§ã³ã®ç®¡çãã¹ãã£
CUI 㪠Git ãã©ã¦ã¶ tig ãå ¥ãã¦ã¿ã (Born Too Late) [git][scm][tig] tig ã使ã£ã¦ã¿ã (do_akiã®å¾ç¶æ³è¨) Twitter Trackbacks () ã¨ã¹ã¨ã¹å¤ç¥ã2010é»è¨é¨ã«åå ãã #tobesetu (key-cc) EC-CUBE LC_Page::sendRedirect()ã«å¼æ°ã渡ããªã (å¼±å°PHPerã®æ鬱) [densetu][åå¼·ä¼][å¦æ ¡]é»è¨é¨ITåå¼·ä¼#3ããã¾ããï¼éæè¿½è¨ (å¦å ITåå¼·ä¼ã®ã¹ã¹ã¡ - atcorp) é»è¨é¨ITåå¼·ä¼#3ã«åå ããã£ï¼ (Curious) GLT #24 ï¼æ親ä¼ï¼ã«ä¹±å ¥ãã¦ããï¼ (Curious) GLT (Genesis Lightning Talks) Vol.24ã«åå ãã¾ãã (key-cc) GLT (Genesis Lightning Talks
CUI 㪠Git ãã©ã¦ã¶ tig ãå ¥ãã¦ã¿ã (Born Too Late) [git][scm][tig] tig ã使ã£ã¦ã¿ã (do_akiã®å¾ç¶æ³è¨) Twitter Trackbacks () ã¨ã¹ã¨ã¹å¤ç¥ã2010é»è¨é¨ã«åå ãã #tobesetu (key-cc) EC-CUBE LC_Page::sendRedirect()ã«å¼æ°ã渡ããªã (å¼±å°PHPerã®æ鬱) [densetu][åå¼·ä¼][å¦æ ¡]é»è¨é¨ITåå¼·ä¼#3ããã¾ããï¼éæè¿½è¨ (å¦å ITåå¼·ä¼ã®ã¹ã¹ã¡ - atcorp) é»è¨é¨ITåå¼·ä¼#3ã«åå ããã£ï¼ (Curious) GLT #24 ï¼æ親ä¼ï¼ã«ä¹±å ¥ãã¦ããï¼ (Curious) GLT (Genesis Lightning Talks) Vol.24ã«åå ãã¾ãã (key-cc) GLT (Genesis Lightning Talks
IPAãç¬ç«è¡æ¿æ³äºº æ å ±å¦çæ¨é²æ©æ§ ã»ãã¥ãªãã£ã»ã³ã¿ã¼ã«ããã»ãã¥ã¢ã»ããã°ã©ãã³ã°è¬åº§ï¼Webã¢ããªã±ã¼ã·ã§ã³ç·¨ & C / C++è¨èªç·¨
ã¤ã¨ãã¼ ãã¼ã³ã¿ ã·ã¢ã³ ãã©ã㯠FIP 2008/08 C M Y CM MY CY CMY K C M Y CM MY CY CMY K Webã¢ããªã±ã¼ã·ã§ã³èå¼±æ§è¨ºæãµã¼ãã¹ Webã¢ã¿ãã¯ãã¹ã Webã¢ããªã±ã¼ã·ã§ã³ã«æ½ãè å¨ãå®æçã«ãã§ãã¯ ï¼ è¿å¹´ã®Webãµã¤ ãæ¹ãããæ å ±æ¼ããçã®äºä»¶ã¯ã ç¬èªéçºããWebã¢ããªã±ã¼ã·ã§ã³ã®èå¼±æ§ãçã£ãæ»æ ã«ãããã®ãå¢ãã¦ãã¾ãã ããã«ã¯ã ã¾ãWebã¢ããªã±ã¼ã·ã§ã³ã«æ½ãèå¼±æ§ã®æç¡ã確èªãã å¿ è¦ãªå¯¾çã è¬ãããã¨ã大åã§ãã ãWebã¢ã¿ ãã¯ãã¹ ãã ã¯ã Webãµã¼ãã«ã¦åä½ããã¢ããªã±ã¼ã· 㧠ã³ã«å¯¾ãã èå¼±æ§æ¤æ»ãã¼ã« ãWebInspectï¼ ã ã ç¨ãã¦æ¤æ»ãã æ¤åºãããåé¡ç¹ã¨å¯¾çæ¹æ³ã«ã¤ãã¦ã®ã¬ãã¼ ãããæä¾ãããã¾ãã ï¼WebInspect ï¼ ãã¥ã¼ã¬ã ã ã» ããã«ã¼ã社æä¾ã®
ãµã¼ãã¹ã« é¢ãã ãåãåãã ãä¸æãªç¹ããè¦ç©ã®ãç¸è«ãªã©ãã¾ãã¯æ°è»½ã«ãåãåãããã ããã
Webã¢ããªã±ã¼ã·ã§ã³è¨ºæãµã¼ãã¹ã¯ãã客æ§ãç¬èªã«æ§ç¯ããWebã¢ããªã±ã¼ã·ã§ã³ï¼CGIãASPãªã©ï¼ã«å¯¾ãã¦ãã»ãã¥ãªãã£å°é家ãæ¢ç¥ã®èå¼±æ§ã«å¯¾ãç¶²ç¾ çã«è¨ºæãå®æ½ãã客観çãªè©ä¾¡ã¨å¯¾çæ¡ã診æå ±åæ¸ã¨ãã¦æä¾ãã¾ãã
Webã¢ããªã±ã¼ã·ã§ã³ã®å®è£ æ¹å¼ãéçºè¨èªãå©ç¨ãã©ãããã©ã¼ã ãªã©ãèæ ®ãããã¾ãã¾ãªé ç®ã«ã¤ãã¦è¨ºæãè¡ããã客æ§ã®ãã¸ãã¹ã®å®å ¨æ§ãè ããè¦å ã¸ã®å¯¾çãé©åã«è¡ããã¦ãããã診æãã¾ããWebãã©ã¦ã¶ãå©ç¨ããä¸è¬çãªWebã¢ããªã±ã¼ã·ã§ã³ã ãã§ãªããSOAPãå©ç¨ããWebãµã¼ãã¹ã¸ã®è¨ºæãè¡ããã¨ãã§ãã¾ãã 主è¦ãªé¨åã¯çµé¨è±å¯ãªå°é家ãæä½æ¥(ããã¥ã¢ã«)ã«ãã診æãè¡ããä¸é¨è¨ºæãã¼ã«ãè£å©çã«å©ç¨ãã¾ããããã«ãããã客æ§ãç¬èªã«ä½ãè¾¼ãã ã¢ããªã±ã¼ã·ã§ã³ã§ãã£ã¦ããæ½å¨ããã»ãã¥ãªãã£ä¸ã®åé¡ã®ã»ã¨ãã©ãçºè¦ãããã¨ãã§ãã¾ãã ã¾ããçºè¦ãããåé¡ã«å¯¾ãã¦ãå ·ä½çãªå¯¾çæ¹æ³ãã¢ããã¤ã¹ããé©åãªå¯¾çã®å®æ½ãæ¯æ´ãã¾ãã 主ãªè¨ºæé ç® ã¦ã¼ã¶èªè¨¼æ¹å¼ã®ãã§ã㯠ã¦ã¼ã¶èªè¨¼ãåé¿ãã¦ãã°ã¤ã³ãããå±éºæ§ããªããããã°ã¤ã³IDããã¹ã¯ã¼ãã®æ¨æ¸¬ã»ç·å½ãæ»æã¸ã®å¼·åº¦ãååããª
ãããªä¼æ¥æ§ã«ããããç¹é·ãµã¼ãã¹ã®ä½ç½®ä»ããµã¼ãã¹ä½ç³»æ¦è¦å³è©³ç´°æ å ±é¢é£ãªã³ã¯ãåãåããè¿å¹´ã®Webãµã¤ãæ¹ãããæ å ±æ¼ããçã®äºä»¶ã¯ãç¬èªéçºããWebã¢ããªã±ã¼ã·ã§ã³ã®èå¼±æ§ãçã£ãæ»æã«ãããã®ãå¢ãã¦ãã¾ããããã«ã¯ãã¾ãWebã¢ããªã±ã¼ã·ã§ã³ã«æ½ãèå¼±æ§ã®æç¡ã確èªããå¿ è¦ãªå¯¾çãè¬ãããã¨ã大åã§ãã Webã¢ããªã±ã¼ã·ã§ã³èå¼±æ§è¨ºæãµã¼ãã¹ãWebã¢ã¿ãã¯ãã¹ããã¯ãWebãµã¼ãã«ã¦åä½ããã¢ããªã±ã¼ã·ã§ã³ã®èå¼±æ§ã診æããåé¡ç¹ã¨å¯¾çæ¹æ³ããå ±åãããµã¼ãã¹ã§ããæ¯è¼çæ軽ãªãã¼ã«è¨ºæã¨ãã»ãã¥ãªãã£ã®å°éã¹ã¿ããã«ããæå診æã®2ã¿ã¤ãããé¸æããã ãã¾ãã ãµã¤ãä¸ã®ãã©ã¼ã ã«ã¦é信販売ãã¦ã¼ã¶ã¼ç»é²ãåçºæ³¨ãæ±äººãæ¸è³å¿åçãè¡ã£ã¦ãããµã¤ãä¸ã«ã¦ã¯ã¬ã¸ããã«ã¼ã決æ¸ï¼ãããé販ããã±ãã販売ãªã©ï¼ãè¡ã£ã¦ããPCI DSSï¼æ³¨1ï¼æºæ ã®ããã«ãã»ãã¥ãªãã£ãã¹ã
â å®å ¨ãªWebã¢ããªã±ã¼ã·ã§ã³ã®ããã«çºæ³¨è ããªãã¹ãã㨠ãã®ããã°ã§ã®é£è¼éå§ã«ããããWebã¢ããªã±ã¼ã·ã§ã³ãçºæ³¨ããç«å ´ã§ã®ã»ãã¥ãªãã£ã«å¯¾ãã責任ãããªãã¹ããã¨ã説æãããã¨æãã¾ãã Webã¢ããªã±ã¼ã·ã§ã³çºæ³¨è ã«èå¼±æ§ã«å¯¾ãã責任ã¯ããã ããããé常ã«åºæ¬çãªåæã¨ãã¦ãWebã¢ããªã±ã¼ã·ã§ã³ã®èå¼±æ§(SQLã¤ã³ã¸ã§ã¯ã·ã§ã³ãªã©)ã«å¯¾ããæçµçãªè²¬ä»»ã¯èª°(ã©ã®ä¼ç¤¾)ã«ããããèãã¦ã¿ã¾ããå ·ä½çã«ã¯ãã¤ã³ã¿ã¼ãããä¸ã®Webãµã¤ããéå¶ãã¦ããããããã¯Webã¢ããªã±ã¼ã·ã§ã³ã§ã³ãããã±ã¼ã¸ã½ããã¦ã§ã¢ã¨ãã¦å¸è²©ãã¦ããããéçºã¯å¤é¨ã®éçºä¼ç¤¾ã«å§è¨ãã¦ããã±ã¼ã¹ã§ãã»ãã¥ãªãã£äºæ ãªã©ãçºçãã¦ã客æ§(Webãµã¤ãã®ã¦ã¼ã¶ãããã±ã¼ã¸ã½ããã®è³¼å ¥è )ã«è¿·æãæããå ´åããã®è²¬ä»»ã¯èª°ã«ãããã¨ãããã¨ã§ãã çµè«ããè¨ãã°ããã®è²¬ä»»ã¯Webã¢ããªã±ã¼ã·ã§ã³ã®çºæ³¨è ã«ãã
æè¿å°ã調ã¹ã¦ããã®ããPHPã®ä»»æã³ã¼ãå®è¡ç³»ã®èå¼±æ§ã§ããä¸ã§ããpreg_replaceé¢æ°ï¼Perläºæã®æ£è¦è¡¨ç¾ã«ããç½®æãè¡ãªãããã®é¢æ°ï¼ãä¸é©åãªæ¹æ³ã§ä½¿ã£ãå ´åã«çºçããèå¼±æ§ã«ã¤ãã¦èª¿ã¹ã¦ãã¾ããã ãã£ãããªã®ã§ãæ¥è¨ã«ã¾ã¨ãã¦ã¿ã¾ãã 3種é¡ã®èå¼±æ§ preg_replaceé¢æ°ã使ã£ãPHPã³ã¼ãå®è¡ç³»ã®èå¼±æ§ã«ã¯ã大ããåãã¦3ã¤ã®ç¨®é¡ãããã¾ãã 第ä¸å¼æ°ã¸ã®æ¿å ¥ã許ã e修飾åä»ãã»ç¬¬äºå¼æ°ã¸ã®æ¿å ¥ã許ã e修飾åä»ãã»ç¬¬ä¸å¼æ°ã¸ã®æ¿å ¥ã許ã 以ä¸ã§ããããã«ã¤ãã¦è¦ã¦ããã¾ãã ã¿ã¤ãï¼ï¼ç¬¬ä¸å¼æ°ã¸ã®æ¿å ¥ 以ä¸ã®ã³ã¼ãã«ãä»»æã®PHPã³ã¼ããå®è¡å¯è½ãªèå¼±æ§ãããã¾ãã $m = preg_replace("/([^<]*)$kw([^>]*)/i", "\\1<font color=red>$kw</font>\\2", $m); $kwã¨$mã¯å¤é¨ãã
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}