[B! xss][perl] ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ockeghem id:ockeghem

xssã¨perlã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ–‡å—ã‚³ãƒ¼ãƒ‰ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãªã©ï¼‰
ã§ã¯ã€ã“ã®HTMLã‚¿ã‚°ã®ç„¡åŠ¹åŒ–ï¼ˆã‚µãƒ‹ã‚¿ã‚¤ã‚¸ãƒ³ã‚°ï¼‰ã¯ã©ã†ã™ã‚Œã°ã„ã„ã‹ã¨ã„ã„ã¾ã™ã¨ã€çš†ã•ã‚“ã”å˜çŸ¥ã®ã‚ˆã†ã«ã€å·¦ã®è¡¨ã®ã‚ˆã†ã«ç½®æ›ã™ã‚Œã°è‰¯ã„ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã“ã‚Œã¯ã€ä¸‹è¨˜ã®ã‚ˆã†ãªæ–‡å—åŒ–ã‘Â ã‚’æ‚ªç”¨ã—ãŸæ”»æ’ƒã«ã‚‚åŠ¹æžœçš„ã§ã™ã€‚ ä¾‹ãˆã°ã€ã€Œ<ã€ã¯16é€²æ–‡å—ã‚³ãƒ¼ãƒ‰ã§ã€Œ0x3Cã€ã§ã™ã€‚ç¢ºã‹ã«ã€ã€Œ<ã€ã§è¡¨ç¤ºã•ã‚Œã‚‹æ–‡å—ï¼ˆï¼‘ãƒã‚¤ãƒˆï¼‰ãªã‚‰ã€Shift_JISã§ã‚‚EUC-JPã§ã‚‚JISã§ã‚‚æ–‡å—ã‚³ãƒ¼ãƒ‰ã¯ä¸€ç·’ã§ã—ã‚‡ã†ã€‚ã—ã‹ã—ã€ã‚‚ã—ã€Œ0x3Cã€ã‚’2ãƒã‚¤ãƒˆæ–‡å—ï¼ˆæ¼¢å—ï¼‰ã®ä¸€éƒ¨ã§ã‚ã‚‹ã¨è§£é‡ˆã™ã‚Œã°ã©ã†ã§ã—ã‚‡ã†ã‹ï¼Ÿ Shift_JISã‚„EUC-JPã«ã¯å¹¸ã„ã€Œ0x3Cã€ã¯ç¾ã‚Œã¾ã›ã‚“ãŒã€JISã«ã¯ç¾ã‚Œã¾ã™ã€‚ ä¾‹ãˆã°ã€ã€Œç´—ã€ã¨ã„ã†æ¼¢å—ã¯ã€Shift_JISã§ã¯0x8ED1ã§ã™ãŒã€JISã§ã¯0x3C53ã§ã™ã€‚0x3C53ã¯ã€Shift_JISã‚„EUC-JPã§ã¯ã€ã€Œ1ãƒã‚¤ãƒˆæ–‡å—ãŒäºŒã¤ã‚ã‚‹ã€ã¨ã—ã‹è§£é‡ˆã§ãã¾ãšã€ã“ã®å ´åˆã€ã€Œ0x3C=<ã€ã€Œ0x53=Sã€
ockeghem 2010/07/09
perl

php

security

xss

charset
ãƒªãƒ³ã‚¯
æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã¯ã©ã†å¯¾ç–ã™ã¹ãã‹: U+00A5ã‚’ç”¨ã„ãŸXSSã®å¯èƒ½æ€§ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-03-11)
_U+00A5ã‚’ç”¨ã„ãŸXSSã®å¯èƒ½æ€§ å‰å›žã®æ—¥è¨˜ã§ã¯ã€æ˜¨å¹´ã®Black Hat Japanã«ãŠã‘ã‚‹é•·è°·å·é™½ä»‹æ°ã®è¬›æ¼”ã«ã€Œè¶£å‘³ã¨å®Ÿç›Šã®æ–‡å—ã‚³ãƒ¼ãƒ‰æ”»æ’ƒ(è¬›æ¼”è³‡æ–™)ã€ã«åˆºæ¿€ã•ã‚Œã‚‹å½¢ã§ã€Unicodeã®å††è¨˜å·U+00A5ã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®å¯èƒ½æ€§ã«ã¤ã„ã¦æŒ‡æ‘˜ã—ãŸã€‚ ã¯ã›ãŒã‚æ°ã®å…ƒè³‡æ–™ã§ã¯ãƒ‘ã‚¹ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã®å¯èƒ½æ€§ã‚’æŒ‡æ‘˜ã—ã¦ãŠã‚‰ã‚Œã‚‹ã®ã§ã€æ®‹ã‚‹è„†å¼±æ€§ãƒ‘ã‚¿ãƒ¼ãƒ³ã¨ã—ã¦ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)ã®å¯èƒ½æ€§ãŒã‚ã‚‹ã‹ã©ã†ã‹ãŒãšã£ã¨æ°—ã«ãªã£ã¦ã„ãŸã€‚ç‹¬è‡ªã®èª¿æŸ»ã«ã‚ˆã‚Šã€XSSæ”»æ’ƒã®èµ·ç‚¹ã¨ãªã‚‹ã€Œ<ã€ã‚„ã€Œ"ã€ã€ã€Œ'ã€ãªã©ã«ã¤ã„ã¦ã€Œå¤šå¯¾ä¸€ã®å¤‰æ›ã€ãŒã•ã‚Œã‚‹æ–‡å—ã‚’æŽ¢ã—ã¦ããŸãŒã€ç¾å®Ÿçš„ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§å‡ºç¾ã—ãã†ãªçµ„ã¿åˆã‚ã›ã¯è¦‹ã¤ã‘ã‚‰ã‚Œã¦ã„ãªã„ã€‚ ä¸€æ–¹ã€U+00A5ãŒå‡¦ç†ç³»ã«ã‚ˆã£ã¦ã¯0x5Cã€Œ\ã€ã«å¤‰æ›ã•ã‚Œã‚‹ã“ã¨ã«èµ·å› ã—ã¦XSSãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã¯ã‚ã‚‹ã€‚JavaScriptãŒã‹ã‚‰ã‚€å ´åˆãŒãã‚Œã ã€‚ã—ã‹ã—ã€
ockeghem 2009/03/11
xss

charset

security

perl

ã‚»ãƒ«ã‚¯ãƒž
ãƒªãƒ³ã‚¯
perl - Encodeã§XSSã‚’é˜²ã : 404 Blog Not Found
2009å¹´03æœˆ03æ—¥19:00 ã‚«ãƒ†ã‚´ãƒªLightweight Languages perl - Encodeã§XSSã‚’é˜²ã è‰¯è¨˜äº‹ã€‚ ç¬¬7å›žâ– æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãŒç”Ÿã¿å‡ºã™ãœã„å¼±æ€§ã‚’çŸ¥ã‚‹ï¼šITpro ã ã‘ã©ã€å•é¡Œç‚¹ã®ã¿å…·ä½“ä¾‹ãŒã‚ã£ã¦ã€å¯¾ç–ã«ãªã„ã®ãŒç‰‡æ‰‹è½ã¡ã«æ„Ÿã˜ã‚‰ã‚ŒãŸã®ã§ã€ãã®ç‚¹ã‚’è£œè¶³ã€‚ çµè«–ã ã‘è¨€ã£ã¦ã—ã¾ãˆã°ã€Perlãªã‚‰ä»¥ä¸‹ã®åŽŸå‰‡ã‚’å®ˆã‚‹ã ã‘ã§ã™ã€‚ 404 Blog Not Found:perl - Encode å…¥é–€ ã™ã§ã«OSCONã§ã‚‚YAPCã§ã‚‚ã€ã‚ã¡ã“ã¡ãã¡ã“ã¡ã§ã“ã®åŸºæœ¬æ–¹é‡ã«é–¢ã—ã¦ã¯è©±ã—ãŸã®ã§ã™ãŒã€ã“ã“ 404 Blog Not Found ã§ã‚‚æ”¹ã‚ã¦ã€‚ Perl ã§ utf8 åŒ–ã‘ã—ãŸã¨ãã«ã©ã†ã—ãŸã‚‰ã„ã„ã‹ - TokuLog æ”¹ã‚ ã ã¾ã£ã¦ã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã‚ˆãƒã‚²å…¥ã‚Šå£ã§ decode ã—ã¦ã€å†…éƒ¨ã§ã¯ã™ã¹ã¦ flagged utf8 ã§æ‰±ã„ã€å‡ºå£ã§ encode ã™ã‚‹ã€‚ã“ã‚ŒãŒ
ockeghem 2009/03/03
å…ƒè¨˜äº‹ã®ç†è€…ã§ã™ã€‚ã‚³ãƒ¡ãƒ³ãƒˆã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ã€Žäº‹ä¾‹ã¨å¯¾ç–ã¯åŒã˜è¨˜äº‹ã®ä¸ã«è¼‰ã›ã‚‹ã¹ãã€<ã”æ„è¦‹ã‚‚ã£ã¨ã‚‚ã§ã™ãŒã€ã“ã®éƒ¨åˆ†ã¯ã€Œæ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®é¸æŠžã€ã«é–¢ã™ã‚‹éƒ¨åˆ†ã§ã™ã®ã§å¯¾ç–ã¯åˆ¥ã®å›žã§è§£èª¬äºˆå®šã§ã™

dankogai

æ–‡å—ã‚³ãƒ¼ãƒ‰

perl

xss
ãƒªãƒ³ã‚¯
403 Forbidden
We're sorry... ... but your query looks similar to automated requests from a computer virus or spyware application. To protect our users, we can't process your request right now. We'll restore your access as quickly as possible, so try again soon. In the meantime, if you suspect that your computer or network has been infected, you might want to run a virus checker or spyware remover to make sure t
ockeghem 2008/06/05
XSS Niteã¨ç©ºç›®ã¯ã—ãªã„ã®ã ãŒã€ã©ã†ã—ã¦ã‚‚è„³å†…å¤‰æ›ã•ã‚Œã¦XSS Niteã«è¦‹ã‚ˆã†è¦‹ã‚ˆã†ã¨ã—ã¦ã—ã¾ã†

shibuya.pm

perl

xs

xss
ãƒªãƒ³ã‚¯
Perlã‚’ä½¿ã£ã¦è„†å¼±æ€§ã‚’æ¤œè¨¼ã™ã‚‹ï¼šCodeZine
ã¯ã˜ã‚ã« ä»Šå›žã¯XSSã®è„†å¼±æ€§ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹Perlã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ä½œæˆã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ã™ã¹ã¦ã®XSSã«ã‚ˆã‚‹è„†å¼±æ€§ãŒå›žé¿ã§ãã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ãƒ†ã‚¹ãƒˆã‚³ãƒ¼ãƒ‰ä½œæˆã®ãƒ’ãƒ³ãƒˆã«ãªã‚Œã°å¹¸ã„ã§ã™ã€‚ å¯¾è±¡èªè€… Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ã§ã€XSSã®ãƒ†ã‚¹ãƒˆã‚±ãƒ¼ã‚¹ã‚’ä½œæˆã—ãŸã„æ–¹ã€‚ å¿…è¦ãªç’°å¢ƒ Perl 5.8ä»¥ä¸ŠãŒå‹•ä½œã™ã‚‹ç’°å¢ƒã€‚åŸºæœ¬å‹•ä½œã®ç¢ºèªã¯Mac OS Xã‚’åˆ©ç”¨ã—ã¾ã—ãŸã€‚æ¬¡ã®Perlãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’åˆ©ç”¨ã™ã‚‹ã®ã§ã€ã‚ã‚‰ã‹ã˜ã‚ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãŠã„ã¦ãã ã•ã„ã€‚ Template::Toolkit Web::Scraper Test::Base ã¾ãŸCGIã‚’ä½¿ç”¨ã™ã‚‹ã®ã§ã€Apacheãªã©ã®CGIãŒå®Ÿè¡Œã§ãã‚‹Webã‚µãƒ¼ãƒã‚’ç”¨æ„ã—ã¦ãã ã•ã„ã€‚ è§£èª¬å†…å®¹ ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰è§£èª¬ ã¾ãšæœ€åˆã«ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®è§£èª¬ã‚’ã—ã¾ã™ã€‚ xss.pl
ockeghem 2007/09/21
perl

security

xss
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (8)

xssã¨perlã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (8)

xssã¨perlã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

æ–‡å­—ã‚³ãƒ¼ãƒ‰ã¨ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ï¼ˆã‚¯ãƒ­ã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãªã©ï¼‰

æ–‡å­—ã‚³ãƒ¼ãƒ‰ã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã¯ã©ã†å¯¾ç­–ã™ã¹ãã‹: U+00A5ã‚’ç”¨ã„ãŸXSSã®å¯èƒ½æ€§ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-03-11)

perl - Encodeã§XSSã‚’é˜²ã : 404 Blog Not Found

403 Forbidden

Perlã‚’ä½¿ã£ã¦è„†å¼±æ€§ã‚’æ¤œè¨¼ã™ã‚‹ï¼šCodeZine

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (8)

xssã¨perlã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

æ–‡å—ã‚³ãƒ¼ãƒ‰ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãªã©ï¼‰

æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã¯ã©ã†å¯¾ç–ã™ã¹ãã‹: U+00A5ã‚’ç”¨ã„ãŸXSSã®å¯èƒ½æ€§ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-03-11)

perl - Encodeã§XSSã‚’é˜²ã : 404 Blog Not Found

Perlã‚’ä½¿ã£ã¦è„†å¼±æ€§ã‚’æ¤œè¨¼ã™ã‚‹ï¼šCodeZine

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹