[B! xss] swimbird55ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

swimbird55 id:swimbird55

xssã«é–¢ã™ã‚‹swimbird55ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SECCON2013 åŒ—é™¸å¤§ä¼šã®å‰æ—¥å‹‰å¼·ä¼šã®è³‡æ–™ ã‚¹ãƒ©ã‚¤ãƒ‰å½¢å¼ã®ã¯ã“ã¡ã‚‰ https://speakerdeck.com/mala/seccon2013-slide
ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ ma.la è‡ªå·±ç´¹ä»‹ http://ma.la https://twitter.com/bulkneets LINEæ ªå¼ä¼šç¤¾ livedooræ–¹é¢ã®äººã§ã™ ä»•äº‹ JavaScript, Perl å…ƒã€…ã®å°‚é–€é ˜åŸŸã¯UI, ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ Webã‚¢ãƒ—ãƒªå…¨èˆ¬ èªè¨¼èªå¯å‘¨ã‚Š ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹æ¥å‹™ è‡ªç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã®ãƒªãƒªãƒ¼ã‚¹å‰ã«ãƒã‚§ãƒƒã‚¯ã—ãŸã‚Šã¨ã‹ ä½•ã‹æ–°ã—ã„æ”»æ’ƒæ‰‹æ³•è¦‹ã¤ã‹ã£ãŸã‚‰èª¿æŸ» ä»–ç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã®å•é¡Œè¦‹ã¤ã‘ã¦å ±å‘Šã—ãŸã‚Š ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ—ãƒãƒ€ã‚¯ãƒˆã®ãƒã‚°å ±å‘Šã—ãŸã‚Š ãã‚‚ãã‚‚ä½•ã§JavaScriptã‚’æ›¸ã„ã¦ãŸäººé–“ãŒ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã“ã¨ã‚’ã‚„ã£ã¦ã„ã‚‹ã®ã‹ ã‚ã‚‰ã‚†ã‚‹ãƒ‡ãƒã‚¤ã‚¹ã§HTML + JavaScriptãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ ã©ã“ã¾ã§æ‚ªç”¨ã§ãã‚‹ã®ã‹ã€ã©ã†ã‚„ã£ã¦ä¿®æ£ã™ã¹ããªã®ã‹ ç¤¾å†…ã§ã‚‚ã£ã¨ã‚‚è©³ã—ã„ åŸºæœ¬çš„ã«ã¯Webã®äºº iOS / Android ã‚¢ãƒ—ãƒªé–‹ç™ºã‚ã¾ã‚Šè©³ã—ã
swimbird55 2013/12/25
xss

javascript
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
swimbird55 2012/07/10
cookie

XSS

web
ãƒªãƒ³ã‚¯
[IEInternals] XSS ãƒ•ã‚£ãƒ«ã‚¿ãƒ¼ã‚’åˆ¶å¾¡ã™ã‚‹
Controlling the XSS Filter http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx ã‚ˆã†ã‚„ãåŒ»è€…ã‹ã‚‰æ—¥å¸¸ã«å¾©ã—ã¦å•é¡Œãªã—ã¨ã®è¨ºæ–ã‚’å¾—ã¾ã—ãŸã®ã§ã€ã¾ãšè¶³æ…£ã‚‰ã—ã« Twitter ã§ @hasegawayosuke ã•ã‚“ã¨è©±é¡Œã«ã—ã¦ã„ãŸ X-XSS-Protection ãƒ˜ãƒƒãƒ€ãƒ¼ã«ã¤ã„ã¦ã® EricLawâ€™s IEInternals ã®è¨˜äº‹ã‚’ç§è¨³ã—ã¦ã¿ã¾ã—ãŸã€‚ ä»¥ä¸‹ã®æ–‡ç« ã¯ EricLawâ€™s IEInternals ã® 1/31 ã®è¨˜äº‹ Controlling the XSS Filter ã‚’ hebikuzure ãŒç§çš„ã«è©¦è¨³ã—ãŸã‚‚ã®ã§ã™
swimbird55 2012/04/09
xss

javascript

header
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
swimbird55 2012/04/06
javascript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

HTML5
ãƒªãƒ³ã‚¯
ãƒ•ã‚©ãƒ¼ãƒ è‡ªå‹•å…¥åŠ›(x-autocompletetype)ã®å®Ÿé¨“
â€»ã”æ³¨æ„ï¼š ã‚¦ã‚¤ãƒ«ã‚¹ãƒã‚¹ã‚¿ãƒ¼ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ç’°å¢ƒã ã¨ã€ã“ã®è¨˜äº‹ã¯èªã‚ãªã„ã‚ˆã†ã§ã™ (â†’å‚è€ƒç”»åƒ) (x-autocompletetypeã¨ã¯ï¼Ÿ) Webã‚µã‚¤ãƒˆã®ãƒ•ã‚©ãƒ¼ãƒ ã«ãƒ¯ãƒ³ã‚¯ãƒªãƒƒã‚¯ã§å€‹äººæƒ…å ±ã‚’è‡ªå‹•å…¥åŠ›ã—ã¦ãã‚Œã‚‹ä¾¿åˆ©æ©Ÿèƒ½ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«ã€ã‚ã‚‰ã‹ã˜ã‚åå‰ã‚„ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ä½æ‰€ã‚„ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ãªã©ã®æƒ…å ±ã‚’è¨å®šã—ã¦ãŠãã€‚ ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆã‚µã‚¤ãƒˆã¨ã‹ã«è¶…ä¾¿åˆ© å…¥åŠ›ãŒè‹¦æ‰‹ãªã‚ªã‚«ãƒ³ã‚‚ä¾¿åˆ© ã¨ã«ã‹ãã¹ã‚“ã‚Š Google Chrome ã®ã¿å¯¾å¿œã—ã¦ã‚‹ (2012å¹´4æœˆ4æ—¥æ™‚ç‚¹)ã€‚ ä¾¿åˆ©ã™ãŽã¦ä»Šå¾Œã€ä»–ã®ãƒ–ãƒ©ã‚¦ã‚¶ã‚‚è¿½éšå¿…è‡³ã€‚ (ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒè‡ªå‹•å…¥åŠ›ã‚’ä½¿ã†ã«ã¯) Google Chrome è¨å®š â†’ å€‹äººè¨å®š â†’ è‡ªå‹•å…¥åŠ›è¨å®šã®ç®¡ç† â†’ ä½æ‰€æ°åãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ç‰ã‚’å…¥ã‚Œã¦ãŠã (Webãƒšãƒ¼ã‚¸å´ã§ã®è‡ªå‹•å…¥åŠ›ã®è¨å®š) inputã«x-autocompletetypeå±žæ€§ã‚’ã¤ã‘ã¦ã€å€¤ã‚’ em ail ã¨ã‹ sname
swimbird55 2012/04/06
html5

chrome

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

x-autocompletetype

xss
ãƒªãƒ³ã‚¯
http://lovemorgue.org/xss.html
swimbird55 2008/01/17
xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1