Redis・Docker APIã‚’ç‹™ã†ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®èª¿æŸ»ã¨ã‚¹ã‚ャンã®è¦³æ¸¬ã¯ã˜ã‚ã« SOCã§ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«å¯¾ã—ã¦å…¬é–‹ã•ã‚ŒãŸãƒ›ã‚¹ãƒˆã‚’ç‹™ã†ã‚¹ã‚ャン活動を観測ã—ã¦ã„ã¾ã™ã€‚2021年以é™ã¯ç‰¹ã«6379/TCP（Redis）ã¨2375/TCP（Docker API）ã¸ã®ã‚¹ã‚ャンãŒå¤§å¹…ã«å¢—åŠ ã—ã¦ã„ã‚‹ã“ã¨ã‚’確èªã—ã¦ãŠã‚Šã€IIJãŒç™ºè¡Œã—ã¦ã„る技術レãƒãƒ¼ãƒˆã€ŒInternet Infrastructure Review（IIR）Vol.54ã€å†…ã®SOCレãƒãƒ¼ãƒˆã§ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚ Redisã¯ãƒ‘スワードãŒæ¨™æº–ã§ã¯è¨å®šã•ã‚Œã¦ã„ãªã„ãŸã‚ã€å¤–部ã«å…¬é–‹ã™ã‚‹ã¨ãƒ‘スワードãªã—ã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ 攻撃者ã«ã‚ˆã‚ŠconfigコマンドãŒæ‚ªç”¨ã•ã‚Œã‚‹ã“ã¨ã§ã€ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ ã¾ãŸã€Dockerã¯ã‚³ãƒ³ãƒ†ãƒŠã‚’æ“作ã§ãã‚‹Docker APIを外部ã«å…¬é–‹ã™ã‚‹ã¨ã€æ”»æ’ƒè€…ãŒç”¨æ„ã—ãŸã‚³ãƒ³ãƒ†ãƒŠã‚¤ãƒ¡ãƒ¼ã‚¸ãŒãƒ‡ãƒ—ãƒã‚¤ã•ã‚Œã€ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ 図-1ã¨å›³-2ã«ã€
Railsã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ä¿å˜å ´æ‰€ã‚’Cookieã‹ã‚‰Redisã«å¤‰æ›´ã™ã‚‹æ–¹æ³• | Enjoy IT Life
æ—¢å˜ã®Railsプãƒã‚¸ã‚§ã‚¯ãƒˆã«Redisã‚³ãƒ³ãƒ†ãƒŠã‚’è¿½åŠ ã—㟠– 百蔵ã®éƒ¨å±‹
ã€å…¥é–€ã€‘Redis - Qiita
Itamaeレシピ集 - Ruby/nginx/MySQL/Redis/etc - çˆç²é§†å‹•é–‹ç™º
redis-cliã®ä½¿ã„æ–¹ - Qiita
Redis ã«ä¿å˜ã•ã‚Œã¦ã‚‹å€¤ã‚’見よã†ã¨æ€ã£ãŸæ™‚ã«è¦šãˆã¦ãŠããŸã„ redis コマンド | ãã‚“ãªã“ã¨è¦šãˆã¦ãªã„
phpredis ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ - Qiita
EC2 : Rails, MySQL, Redis, nginx, Unicorn 環境構築 - Qiita
Redisã®ãƒ‡ãƒ¼ã‚¿ã‚’削除ã™ã‚‹æ–¹æ³• | shimar's blog
Redisã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ»ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— - Qiita
Redis - The Real-time Data Platform
Redisãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ(導入編) - Qiita
Railsã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¹ãƒˆã‚¢ã¨ã—ã¦Redisを使ã†(Mac/EC2:AmazonLinux) - Qiita
Ruby用ãƒãƒƒã‚¯ã‚°ãƒ©ã‚¦ãƒ³ãƒ‰ã‚¸ãƒ§ãƒ–ライブラリ「sidekiqã€ã®ã‚³ãƒ¼ãƒ‰ã‚’èªã‚“ã§ã¿ã‚‹ï¼ˆå‰åŠï¼‰ – ãªã¾ã‘ã‚‚ã®ã‹ã‚‰ã®è„±å´ã‚’目指ã™ITエンジニアã®ãƒ¡ãƒ¢
Spring Boot+Spring Sessionã§ã‚¹ã‚±ãƒ¼ãƒ©ãƒ–ルãªã‚¹ãƒ†ãƒ¼ãƒˆãƒ•ãƒ«WebアプリãŒç°¡å˜ã«ã¤ãれるよ〜 - Qiita
SpringBootã§ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’redisã«ä¿å˜ã™ã‚‹ - blog.beaglesoft.net
{{#tags}}- {{label}}
{{/tags}}