[B! xss] tsukkeeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tsukkee id:tsukkee

xssã«é–¢ã™ã‚‹tsukkeeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
tsukkee 2010/12/04
twitter

xss

json

security
ãƒªãƒ³ã‚¯
XSSã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã¨æ£ã—ã„è„†å¼±æ€§å ±å‘Šã®ã‚ã‚Šæ–¹ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
é©å½“ XSSãŒã‚ã‚‹=ãªã‚“ã§ã‚‚ã‚„ã‚Šæ”¾é¡Œã§ã¯ãªã„ ãƒ–ãƒã‚°ã‚µãƒ¼ãƒ“ã‚¹ãªã©è‡ªç”±ã«HTMLã‚’ã‹ã‘ã‚‹ã‚ˆã†ãªã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€å®³ãŒåŠã°ãªã„ã‚ˆã†ã«è¡¨ç¤ºã‚’ä¸¸ã”ã¨åˆ¥ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã«åˆ†ã‘ã¦ã„ãŸã‚Šã€ã‚ã‚‹ã„ã¯åˆ¥ãƒ‰ãƒ¡ã‚¤ãƒ³ã®IFRAMEå†…ã§å®Ÿè¡Œã—ãŸã‚Šã—ã¦ã„ã‚‹ã®ãŒæ™®é€šã§ã™ã€‚å€‹äººæƒ…å ±ã‚’é ã‹ã£ã¦ã‚‹ã‚µã‚¤ãƒˆã¯ã€é‡è¦å€‹äººæƒ…å ±ã«ã¤ã„ã¦ã¯HTTPSã˜ã‚ƒãªã„ã¨å‚ç…§ã§ããªã‹ã£ãŸã‚Šã€ãã‚‚ãã‚‚è¡¨ç¤ºã—ãªã‹ã£ãŸã‚Š(ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã‚«ãƒ¼ãƒ‰ç•ªå·ç‰)ã€æ±ºæ¸ˆç”¨ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„æš—è¨¼ç•ªå·ã‚’å…¥ã‚Œãªã„ã¨æ“ä½œã§ããªã‹ã£ãŸã‚Šã™ã‚‹ã€‚ å‚è€ƒã¾ã§ã« http://blog.bulknews.net/mt/archives/001274.html (2004å¹´ã®ã‚¢ãƒ¡ãƒ–ãƒè„†å¼±æ€§ã®è©±) http://d.hatena.ne.jp/yamaz/20090114 (ä¿¡é ¼ã§ããªã„ãƒ‡ãƒ¼ã‚¿ã‚’å–ã‚Šæ‰±ã†ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ†ã‘ã‚‹è©±) ç®¡ç†ç”¨ã¨åˆ¥ãƒ‰ãƒ¡ã‚¤ãƒ³ã«åˆ†ã‘ãŸã«ã‚‚é–¢ã‚ã‚‰ãšã€scriptå®Ÿè¡Œã§ãã‚‹ã“ã¨ã«å¯¾ã—ã¦DISã‚‰ã‚Œ
tsukkee 2010/03/05
xss

neta
ãƒªãƒ³ã‚¯
ãƒ„ãƒƒã‚³ãƒŸ hideden (2009-08-06 12:45) - å¾³ä¸¸æµ©ã®æ—¥è¨˜ - i-mode2.0ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æ¤œè¨Ž - æºå¸¯JavaScriptã¨XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã®å¯èƒ½æ€§
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¯ãŠã™ã¿ã§ã™ã‹? é–‹ç™ºé–‹å§‹æ™‚ç‚¹ã‹ã‚‰ã®ã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°ã‹ã‚‰ã€å…¬é–‹æ¸ˆã¿Webã‚µã‚¤ãƒˆã®è„†å¼±æ€§æ¤œæŸ»ã€ è„†å¼±æ€§ç™ºè¦‹å¾Œã®é©åˆ‡ãªå¯¾ç–ã¾ã§ â—æºå¸¯JavaScriptã¨XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã®å¯èƒ½æ€§ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€æºå¸¯é›»è©±ã®ãƒ–ãƒ©ã‚¦ã‚¶ã«æè¼‰ã•ã‚ŒãŸJavaScriptã¨ã€Webã‚µã‚¤ãƒˆã®XSSã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚Šã€ã„ã‚ã‚†ã‚‹ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã«å¯¾ã™ã‚‹ä¸æ£ãƒã‚°ã‚¤ãƒ³ã®å¯èƒ½æ€§ã«ã¤ã„ã¦æ¤œè¨Žã™ã‚‹ã€‚ 5æœˆ28ã«ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã«æ›¸ã„ãŸæ—¥è¨˜ã€Œi-mode2.0ã¯å‰é€”å¤šé›£ã€ã«ã¦ã€ä»Šå¹´ã®NTTãƒ‰ã‚³ãƒ¢ã®å¤ãƒ¢ãƒ‡ãƒ«P-07Aã«ã¦JavaScriptæ©Ÿèƒ½ãŒåˆ©ç”¨åœæ¢ã•ã‚ŒãŸã“ã¨ã‚’æŒ‡æ‘˜ã—ãŸã€‚åŒæ—¥ä»˜ã®NTTãƒ‰ã‚³ãƒ¢ç¤¾ã®ãƒªãƒªãƒ¼ã‚¹ã«ã‚ˆã‚‹ã¨ã€ã€Œã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢æ›´æ–°ã«ä¼´ã„ã€é«˜åº¦åŒ–ã—ãŸæ©Ÿèƒ½ã®ä¸€éƒ¨ã‚’ã”åˆ©ç”¨ã„ãŸã ã‘ãªããªã£ã¦ã„ã¾ã™ãŒã€å†ã³ã”åˆ©ç”¨ã„ãŸã ã‘ã‚‹ã‚ˆã†é€Ÿã‚„ã‹ã«å¯¾å‡¦ã„ãŸã—ã¾ã™ã€ã¨ã‚ã£ãŸãŒã€ãã‚Œä»¥
tsukkee 2009/08/09
mobile

security

javascript

xss
ãƒªãƒ³ã‚¯
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSSï¼šæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ3ï¼‰ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ ãªãœã‹å¥¥æ·±ã„IEã®XSSã®è©± çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ ç¬¬1å›žã€Œï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆã€ã¨ç¬¬2å›žã€Œï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–ã€ã§Internet Explorer(IE)ã®ç‹¬è‡ªã®æ©Ÿèƒ½ãŒã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼šcross-site scriptingï¼‰ã‚’å¼•ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ãã¾ã—ãŸã€‚ ç¬¬3å›žã§ã‚‚å¼•ãç¶šãã€IEç‰¹æœ‰ã®æ©Ÿèƒ½ãŒXSSã‚’å¼•ãèµ·ã“ã™ä¾‹ã¨ã„ã†ã“ã¨ã§ã€
tsukkee 2009/06/05
security

ie

css

xss
ãƒªãƒ³ã‚¯
ç¬¬3å›žã€€US-ASCIIã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° | gihyo.jp
ä»Šå›žã¯ã€US-ASCIIã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)ã¨ã„ã†è©±é¡Œã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ å‰å›žã¾ã§ã§èª¬æ˜Žã—ãŸUTF-7ã«ã‚ˆã‚‹XSSã¨åŒæ§˜ã«ã€æ”»æ’ƒè€…ã¯US-ASCIIã¨ã„ã†æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’å·§ã¿ã«åˆ©ç”¨ã™ã‚‹ã“ã¨ã§ã€IEã‚’å¯¾è±¡ã«XSSã‚’ç™ºç”Ÿã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚US-ASCIIã«ã‚ˆã‚‹XSSã¯ã€UTF-7ã«ã‚ˆã‚‹XSSã¨é¡žä¼¼ç‚¹ã‚‚å¤šã„ãŸã‚ã€å‰å›žã¾ã§ã®èª¬æ˜Žã‚‚ä½µã›ã¦èªã‚“ã§ãŠãã¨ã‚ˆã„ã§ã—ã‚‡ã†ã€‚ US-ASCIIã«ã‚ˆã‚‹XSSã«ã¤ã„ã¦ã‚‚å…ˆã«å¯¾ç–ã‚’æ›¸ã„ã¦ã—ã¾ã†ã¨ã€UTF-7ã®ã¨ãã¨åŒæ§˜ã«HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã«ã¦ Content-Type: text/html; charset=UTF-8 Content-Type: text/html; charset=Shift_JIS Content-Type: text/html; charset=EUC-JP ã®ã„ãšã‚Œã‹ã‚’å‡ºåŠ›ã™ã‚‹ã¨ã„ã†åŽŸå‰‡ã‚’å®ˆã‚‹ã“ã¨ã§ã€å®Œå…¨ã«æ”»æ’ƒ
tsukkee 2009/04/21
xss

security

charset
ãƒªãƒ³ã‚¯
Twitter XSS é¨’å‹• - Yaks
(2009/04/12 6ï¼š40 pm è¿½è¨˜ã—ã¾ã—ãŸ) (2009/04/12 7ï¼š24 pm å†åº¦è¿½è¨˜ã—ã¾ã—ãŸ) å…ˆã»ã©ã‹ã‚‰ Twitterä¸Šã«ã¦ XSS ã®ã‚ˆã‚‹è¢«å®³ãŒå‡ºã¦ã„ã¾ã™ã€‚ æ—¢ã«æµ·å¤–ã®ãƒ–ãƒã‚°ãªã©ã§ã‚‚å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ HOWTO: Remove StalkDaily.com Auto-Tweets From Your Infected Twitter Profile (Twittercsm) Warning: Twitter Hit By StalkDaily Worm (TechCrunch) æ—¢ã« XSS ã®éƒ¨åˆ†ã¯æ”¹ä¿®ã•ã‚Œã¦å¤§åˆ†åŽã¾ã£ãŸã‚ˆã†ã§ã™ãŒã€å¿µã®ãŸã‚ã«æ›¸ã„ã¦ãŠãã¾ã™ã€‚ å†…å®¹ã¨ã—ã¦ã¯ã€ 1. StalkDaily.com ã‚’å®£ä¼ã™ã‚‹ã¤ã¶ã‚„ããŒå‹æ‰‹ã«æŠ•ç¨¿ã•ã‚Œã‚‹ 2. ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã® Web ãŒæ”¹ã–ã‚“ã•ã‚Œã‚‹ 3. æ”¹ã–ã‚“ã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒšãƒ¼ã‚¸ã‚’è¦‹ã‚‹ã¨ã€è‡ªåˆ†ã®ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã‚‚
tsukkee 2009/04/13
twitter

xss

security
ãƒªãƒ³ã‚¯
CSSXSSã‚’æ”¹è‰¯ã—ãŸï¼Ÿæ‰‹æ³•ã§mixiã®post_keyã‚’æŠœãå–ã‚‹ãƒ‡ãƒ¢ã‚’ä½œã‚Šã¾ã—ãŸ - ?D of K:
IDã‚’æŠœãå–ã‚‹æ–¹æ³•ãŒæ€ã„ã¤ã‹ãªã‹ã£ãŸã®ã§ã€ã€Œã¯ã¾ã¡ã¡ã‚ƒã‚“ã€ã®æ›¸ãè¾¼ã¿ã®äºŒå¹´æ¥ã®å†æ¥ã¨ã¯ã„ãã¾ã›ã‚“ãŒã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ›ãƒ¼ãƒ«ã ã¨æ€ã†ã®ã§ã€æ—©ã‚ã«æ›¸ã„ã¦ãŠãã¾ã™ã€‚ï¼ˆä¿®æ£æ¸ˆã¿ã§ã™ï¼‰ å®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ http://k75.s321.xrea.com/cssxss/mixi.html ãƒ‘ãƒƒãƒæ¸ˆã¿ã®IE6ã§mixiã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ãŸå ´åˆã€post_keyã®å–å¾—ã‚’ç¢ºèªã§ãã‚‹ã¨æ€ã„ã¾ã™ã€‚å‹˜é•ã„ã ã£ãŸã‚‰ã™ã¿ã¾ã›ã‚“ã€‚ãã®éš›ã€åƒ•ã®mixiã®ã‚ã—ã‚ã¨ã«æ®‹ã‚‹ã®ã§ãã®ç‚¹ã®ã¿æ³¨æ„ã—ã¦ãã ã•ã„ã€‚ æ‰‹æ³• CSSã®èªã¿è¾¼ã¿ ã„ã‚ã‚†ã‚‹CSSXSSã¨åŒã˜ã‚ˆã†ã«linkã‚’ä½¿ã£ã¦ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è¾¼ã¿ã¾ã™ã€‚æ—§æ¥ã®æ‰‹æ³•ã§ã¯ä¸æ‹¬å¼§ãŒã‚ã‚‹ã“ã¨ã§CSSã¨èª¤èªè˜ã•ã›ã€css Textã§å–å¾—ã—ã¾ã—ãŸãŒã€ä»Šå›žã¯æ–‡ä¸ã«ã€Œ}selector{property:ã€ã¨ã„ã†æ–‡å—åˆ—ã‚’åŸ‹ã‚è¾¼ã‚“ã§ã€selectorã«è©²å½“ã™ã‚‹è¦ç´ ã®currentStyle.property
tsukkee 2008/11/12
xss

css

security

mixi
ãƒªãƒ³ã‚¯
printenv at xss-quiz.int21h.jp
printenv at xss-quiz.int21h.jp Your IP address: 133.242.243.6 () NameValue HTTP_ACCEPT*/* HTTP_CACHE_CONTROLno-cache HTTP_CONNECTIONclose HTTP_HOSTxss-quiz.int21h.jp HTTP_USER_AGENTHatenaBookmark/4.0 (Hatena::Bookmark; Analyzer) QUERY_STRING REMOTE_ADDR133.242.243.6 REQUEST_METHODGET REQUEST_SCHEMEhttp REQUEST_URI/
tsukkee 2008/10/13
ã‚ã¨ã§æŒ‘æˆ¦ã™ã‚‹

xss
ãƒªãƒ³ã‚¯
http://blogged-on.de/xss/
tsukkee 2008/10/13
æœ€å¾Œã¾ã§ã„ã‘ãŸï¼

xss

security
ãƒªãƒ³ã‚¯
ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)ã¨CSRFã®é•ã„æ—©åˆ†ã‹ã‚Š - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜
æ˜¨æ—¥ã®æ—¥è¨˜ã§ã€DKç¥ã‚Šã§ä½¿ã‚ã‚Œã¦ã„ã‚‹è„†å¼±æ€§ãŒXSSã‹CSRFã‹ã¨ã„ã†å•é¡Œã«ãªã£ãŸã€‚ã©ã†ã‚‚ã€XSSã¨CSRFãŒã”ã£ã¡ã‚ƒã«ãªã£ã¦ã„ã‚‹äººã‚‚ã„ã‚‹ã‚ˆã†ã«è¦‹å—ã‘ã‚‹ã®ã§ã€ç°¡å˜ãªæ•´ç†ã‚’è©¦ã¿ãŸã„ã€‚ XSSã¨CSRFã«ã¯ä¼¼ãŸç‚¹ãŒã‚ã‚‹ã€‚ ã©ã¡ã‚‰ã‚‚ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã€ã¨ã„ã†è¨€è‘‰ãŒå…ˆé ã«ã¤ã ãªã‚Šã™ã¾ã—ã®ã‚ˆã†ãªã“ã¨ãŒçµæžœã¨ã—ã¦ã§ãã‚‹ ã©ã¡ã‚‰ã‚‚å—å‹•åž‹æ”»æ’ƒã§ã‚ã‚‹ ãã‚Œã«å¯¾ã—ã¦ã€ã‚‚ã¡ã‚ã‚“é•ã†ç‚¹ã‚‚ã‚ã‚‹ã€‚å°‚é–€å®¶ã‹ã‚‰è¦‹ã‚Œã°ã€Œä¼¼ã¦ã‚‹ã‚‚ä½•ã‚‚ã€ãã‚‚ãã‚‚å…¨ç„¶é•ã†ã‚‚ã®ã§ã™ã‚ˆã€ã¨ãªã‚‹ã®ã ã‚ã†ãŒã€ç¾ã«æ··åŒã—ã¦ã„ã‚‹äººãŒã„ã‚‹ã®ã ã‹ã‚‰ç´›ã‚‰ã‚ã—ã„ç‚¹ã‚‚ã‚ã‚‹ã®ã ã‚ã†ã€‚ ç§æ€ã†ã«ã€XSSã¨CSRFã®æ±ºå®šçš„ãªé•ã„ã¯ã€ä»¥ä¸‹ã®ç‚¹ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚ XSSã¯æ”»æ’ƒã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§å‹•ããŒã€CSRFã¯ã‚µãƒ¼ãƒãƒ¼ä¸Šã§å‹•ã ã“ã®ãŸã‚ã€XSSã§ã§ãã‚‹æ‚ªã„ã“ã¨ã¯ã€ã™ãªã‚ã¡JavaScriptã§ã§ãã‚‹ã“ã¨ã§ã‚ã£ã¦ã€æ”»æ’ƒå¯¾è±¡ã®Cookieã‚’ç›—ã¿å‡ºã™ã“ã¨ãŒå…¸åž‹ä¾‹ã¨ãªã‚‹ã€‚ä¸€æ–¹ã€CS
tsukkee 2008/10/13
xss

csrf

security
ãƒªãƒ³ã‚¯
yohgaki's blog - ã„ã‚ã„ã‚å¤‰ã‚ã£ãŸXSSãŒã‚ã‚Šã¾ã™ãŒ...
(Last Updated On: 2007å¹´10æœˆ12æ—¥)ç§ãŒçŸ¥ã‚‰ãªã‹ã£ãŸã ã‘ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ã“ã‚Œã«ã¯ã‹ãªã‚Šé©šãã¾ã—ãŸã€‚ã„ã‚ã‚“ãªæ‰€ã§å•é¡ŒãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã¾ã™ãŒã€ECMAScriptã«XMLæ©Ÿèƒ½ã‚’è¿½åŠ ã—ãŸã®ã¯ã©ã†ãªã‚“ã§ã—ã‚‡ã†ãâ€¦. ç¢ºã‹ã«ã‹ãªã‚Šä¾¿åˆ©ãªã®ã§ã™ãŒä»¥ä¸‹ã®ã‚³ãƒ¼ãƒ‰ã§ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã•ã‚Œã‚‹ã“ã¨ã¯ã»ã¨ã‚“ã©çŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã§ã—ã‚‡ã†ãã€‚ <script> 123[â€+<_>ev</_>+<_>al</_>](â€+<_>aler</_>+<_>t</_>+<_>(1)</_>); </script> å¥½ã‚€ã¨å¥½ã¾ã–ã‚‹é–¢ä¿‚ãªãFirefox 1.5ã‹ã‚‰ä½¿ãˆã‚‹ã®ã§Webé–‹ç™ºè€…ã¯çŸ¥ã£ã¦ãŠã‹ãªã‚Œã°ãªã‚‰ãªã„ã§ã™ã€‚ æ—¥æœ¬èªžè¨³ http://www.ne.jp/asahi/nanto/moon/specs/ecma-357.html åŽŸæ–‡ http://www.ecma-international.org/pu
tsukkee 2008/10/13
xss

e4x
ãƒªãƒ³ã‚¯
ç¬¬9å›žã€€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®åç§°ã¨ç¨®é¡ž | gihyo.jp
å‰å›žã¯Webé–‹ç™ºã«ä¸æ…£ã‚Œãªé–‹ç™ºè€…ãŒè¡Œã„ãŒã¡ãªã€ä¸é©åˆ‡ãªã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°å¯¾ç–ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ä»Šå›žã¯é©åˆ‡ãªå¯¾ç–ã‚’ç†è§£ã™ã‚‹ãŸã‚ã«å¿…è¦ãªã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®æœ¬è³ªã¨ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®ç¨®é¡žã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®åç§° ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€ã¯ã€ã‚ˆãã‚ã‚‹æ”»æ’ƒæ–¹æ³•ã‚’è¡¨ã—ãŸåå‰ã§ã™ã€‚ã‚µã‚¤ãƒˆã‚’ã¾ãŸãŒã£ã¦æ”»æ’ƒç”¨ã®JavaScriptã‚³ãƒ¼ãƒ‰ï¼ˆã‚¹ã‚¯ãƒªãƒ—ãƒˆï¼‰ã‚’é€ã‚‹ã®ã§ã€ã€Œâ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã€ã€Œâ ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€ã¨å‘½åã—ãŸã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ å˜èªžã®é æ–‡å—ã‚’å–ã‚‹ã¨ã€ŒCSSã€ã¨ãªã‚Šã¾ã™ãŒã€ã‚«ã‚¹ã‚±ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚¹ã‚¿ã‚¤ãƒ«ã‚·ãƒ¼ãƒˆã®ã€ŒCSSã€ã¨åŒã˜ã«ãªã‚Šã€åŒºåˆ¥ã§ããªã„ã®ã§ã€ŒXSSã€ã¨è¡¨è¨˜ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®è§£èª¬æƒ…å ±ã«ã¯ã€ŒXSSã€ã§ã¯ãªãã€ŒCSSã€ã¨è¡¨è¨˜ã—ã¦ã„ã‚‹å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ ã—ã‹ã—æ®‹å¿µãªãŒã‚‰ã“ã®åå‰ã¯ç›´æ„Ÿçš„ãªåå‰ã¨ã¯ã„ãˆã¾ã›ã‚“
tsukkee 2008/10/13
php

security

xss
ãƒªãƒ³ã‚¯
ç¬¬7å›žã€€ã„ã¾ã•ã‚‰ãªãŒã‚‰ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®åŸºç¤Žã®åŸºç¤Ž | gihyo.jp
ä»Šå›žã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã£ãŸã“ã¨ãŒãªã„æ–¹ã§ã‚‚åˆ†ã‹ã‚‹ã‚ˆã†ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°è„†å¼±æ€§ã‚’è§£èª¬ã—ã¾ã™ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¨ã¯ï¼Ÿ åˆã‚ã¦ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¨èžã„ã¦ã€ã©ã®ã‚ˆã†ãªå•é¡Œãªã®ã‹ã™ãã«ç†è§£ã§ãã‚‹äººã¯ã„ãªã„ã¨æ€ã„ã¾ã™ã€‚ã‚µã‚¤ãƒˆAã«è¨˜è¿°ã•ã‚ŒãŸJavaScriptãƒ—ãƒã‚°ãƒ©ãƒ ãŒã‚µã‚¤ãƒˆBä¸Šã§å®Ÿè¡Œã•ã‚Œã‚‹ãŸã‚ã«ç™ºç”Ÿã™ã‚‹ã“ã¨ãŒå•é¡Œã¨ã•ã‚ŒãŸã®ã§ã€ã€Œâ ã‚µã‚¤ãƒˆé–“ã‚’ã¾ãŸãŒã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å®Ÿè¡Œã€å•é¡Œã¨ã—ã¦ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ã¨åå‰ãŒä»˜ã‘ã‚‰ã‚Œã¾ã—ãŸã€‚ã“ã®å‘½åã§ã¯ç›´æ„Ÿçš„ã«åˆ†ã‹ã‚Šã¥ã‚‰ã„ã€ã‚µã‚¤ãƒˆé–“ã«ã¾ãŸãŒã‚‰ãšHTMLãƒ¡ãƒ¼ãƒ«ãªã©ã«JavaScriptã‚’æŒ¿å…¥ã™ã‚‹æ”»æ’ƒã§ã‚‚åŒã˜åŠ¹æžœãŒå¾—ã‚‰ã‚Œã‚‹ã“ã¨ã‹ã‚‰ã€ã€Œâ JavaScriptã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã¨ã‚‚å‘¼ã°ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ å›³1ã€€ç°¡å˜ãªã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° ä¾‹1ã€€ç°¡å˜ãªç›´æŽ¥æ”»æ’ƒ æŽ²ç¤ºæ¿ã‚µã‚¤ãƒˆã«æŠ•ç¨¿ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦
tsukkee 2008/10/13
xss

security
ãƒªãƒ³ã‚¯
IE ã«ãŠã‘ã‚‹ "expression" ã®éŽå‰°æ¤œå‡ºã«ã‚ˆã‚‹ XSS ã® èª˜å›
IE ã«ãŠã‘ã‚‹ "expression" ã®éŽå‰°æ¤œå‡ºã«ã‚ˆã‚‹ XSS ã® èª˜å› 2006-08-31-1: [Security] http://archive.openmya.devnull.jp/2006.08/msg00369.html IE ã§ã¯ expression(å¼) ã‚’ã‚¹ã‚¿ã‚¤ãƒ«ã‚·ãƒ¼ãƒˆå†…ã§è¨˜è¿°ã™ã‚‹ã“ã¨ã§ JavaScript ã‚’è¨˜è¿°ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã¯æœ‰åã§ã™ãŒï¼Œ IE ã«ã‚ˆã‚‹ expression ã®æ¤œå‡ºãŒã‚„ãŸã‚‰éŽå‰°ã§ XSS ã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„ã¨ã„ã†ã“ã¨ã‚‰ã—ã„ï¼Ž å®Ÿæ…‹å‚ç…§ã‚„ã‚³ãƒ¡ãƒ³ãƒˆã®æŒ¿å…¥ï¼ŒUnicode æ–‡å—ï¼Œå…¨è§’æ–‡å—ã§è¨˜è¿°ã—ã¦ã‚‚ expression ã¨ã—ã¦æ¤œå‡ºã•ã‚Œã‚‹ï¼Ž è©³ç´°ã¯ï¼Œä¸Šè¨˜ã‚µã‚¤ãƒˆã‚ˆã‚Šå¼•ç”¨ï¼Ž IE ã§ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªã‚¹ã‚¿ã‚¤ãƒ«ã‚’è¨˜è¿°ã™ã‚‹ã“ã¨ã§ã€JavaScript ã‚’å‹•ä½œã•ã›ã‚‹ ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ 1) <style>ãƒ–ãƒãƒƒã‚¯å†…ã§ã®å®šç¾© <style>input { l
tsukkee 2008/10/10
ie

css

xss

bug
ãƒªãƒ³ã‚¯
1