[B! JSON][Security] yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yife id:yife

JSONã¨Securityã«é–¢ã™ã‚‹yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PHPã®JSON HashDosã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
4å¹´å‰ã«HashDosï¼ˆHash Collision Attackï¼‰ã«é–¢ã™ã‚‹åŠ¹çŽ‡çš„ãªæ”»æ’ƒæ–¹æ³•ãŒ28C3ã«ã¦å…¬é–‹ã•ã‚Œã€PHPã‚’å«ã‚€ä¸»è¦è¨€èªžãŒã“ã®æ”»æ’ƒã®å½±éŸ¿ã‚’å—ã‘ã‚‹ãŸã‚å¯¾ç–ã‚’å®Ÿæ–½ã—ã¾ã—ãŸã€‚ã—ã‹ã—ã€PHPä»¥å¤–ã®è¨€èªžãŒã€ãƒãƒƒã‚·ãƒ¥ãŒè¡çªã™ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’äºˆæ¸¬å›°é›£ã«ã™ã‚‹å¯¾ç–ã‚’ã¨ã£ãŸã®ã«å¯¾ã—ã¦ã€PHPã¯ã€GET/POST/COOKIEç‰ã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã®å€‹æ•°ã‚’åˆ¶é™ã™ã‚‹ã¨ã„ã†å¯¾ç—‡ç™‚æ³•ã‚’å®Ÿæ–½ã—ãŸãŸã‚ã€PHPã«ã¯HashDosã«å¯¾ã™ã‚‹æ”»æ’ƒçµŒè·¯ãŒã¾ã æ®‹ã£ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€ä¸€éƒ¨ã®æŠ€è¡“è€…ã«ã¯çŸ¥ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ä¾‹ãˆã°ã€ä»¥ä¸‹ã®æ§˜ãªã¤ã¶ã‚„ãã«ã‚‚è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã ã£ã¦ã€ hashdos è„†å¼±æ€§ã®æ™‚ã€ Python ã¨ã‹ã®è¨€èªžãŒã€å¤–éƒ¨å…¥åŠ›ã‚’ãƒãƒƒã‚·ãƒ¥ã«å…¥ã‚Œã‚‹ã¨ãã«è¡çªã‚’ç‹™ãˆãªã„ã‚ˆã†ã«å¯¾ç–ã—ãŸã®ã«ã€phpã ã‘POSTå‡¦ç†ã§å¯¾ç–ã—ãŸã‹ã‚‰ãï¼Ÿ json ã‚’å—ã‘å–ã‚‹ã‚ˆã†ãªå£ã‚‚ã£ã¦ã‚‹phpã‚¢ãƒ—ãƒªã®ã»ã¨ã‚“ã©ãŒhashdosæ®‹ã£ã¦ã‚‹ã‚“ã˜ã‚ƒãªã„
yife 2015/10/13
php

security

JSON

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
è£œè¶³ç·¨ï¼šæ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€JSONã«ã¯ X-Content-Type-Options: nosniff ã‚’ã¤ã‘ã‚‹ã¹ã - è‘‰ã£ã±æ—¥è¨˜
ã€Œæ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€JSONã«ã¯ X-Content-Type-Options: nosniff ã‚’ã¤ã‘ã‚‹ã¹ã - è‘‰ã£ã±æ—¥è¨˜ã€ã®è£œè¶³ç·¨ã§ã™ã€‚ çµå±€ã€ã‚ˆãã‚ã‹ã‚‰ãªã„ã‚“ã ã‘ã©ã€‚ ã‚ˆãã‚ã‹ã‚‰ãªã„å ´åˆã¯ã€ã¨ã«ã‹ãå…¨ã¦ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã« X-Content-Type-Options: nosniff ã‚’ã¤ã‘ã¾ã—ã‚‡ã†ã€‚ æ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€JSONã«X-Content-Type-Options:nosniffã‚’ã¤ã‘ã‚‹ç†ç”±ã¯ã‚ã‹ã£ãŸã‘ã©ã€ã€Œã‚ã‚‰ã‚†ã‚‹ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ã¤ã‘ã‚‹ç†ç”±ã¯ãªãœï¼Ÿ æ©Ÿå¯†æƒ…å ±ã‚’å«ã¾ãªãã¦ã‚‚ã€<script>ã®ã‚ˆã†ãªæ–‡å—åˆ—ã‚’å«ã‚€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’IEã§ç›´æŽ¥é–‹ã„ãŸå ´åˆã«ã¯XSSã«ã¤ãªãŒã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚Šã¾ã™ã€‚ã©ã®ã‚ˆã†ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«X-Content-Type-Options:nosniffãŒå¿…è¦ã‹ã‚’è€ƒãˆã‚‹ãã‚‰ã„ã§ã‚ã‚Œã°ã€å…¨ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ä»˜ä¸Žã—ãŸã»ã†ãŒé–“é•ã„ãŒãªãã¦ã„ã„ã§ã—ã‚‡ã†ã€ã¨ã„ã†ã“ã¨ã§ã™ã€‚ IEã®ãŸã‚ã ã‘ã®å•
yife 2015/04/01
Security

json

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
yife 2013/11/13
javascript

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

json
ãƒªãƒ³ã‚¯
æ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€JSONã«ã¯ X-Content-Type-Options: nosniff ã‚’ã¤ã‘ã‚‹ã¹ã - è‘‰ã£ã±æ—¥è¨˜
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦JSONã‚’ç”¨ã„ã¦ãƒ–ãƒ©ã‚¦ã‚¶ - ã‚µãƒ¼ãƒé–“ã§ãƒ‡ãƒ¼ã‚¿ã®ã‚„ã‚Šå–ã‚Šã‚’è¡Œã†ã“ã¨ã¯ã‚‚ã¯ã‚„æ™®é€šã®ã“ã¨ã§ã™ãŒã€ã“ã®ã¨ãJSONå†…ã«ç¬¬ä¸‰è€…ã«æ¼ã‚Œã¦ã¯å›°ã‚‹æ©Ÿå¯†æƒ…å ±ãŒå«ã¾ã‚Œã‚‹å ´åˆã¯ã€å¿…ãš X-Content-Type-Options: nosniff ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¤ã‘ã‚‹ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†(ã‚€ã—ã‚æ©Ÿå¯†æƒ…å ±ã‹ã©ã†ã‹ã«é–¢ã‚ã‚‰ãšã€å…¨ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ã¤ã‘ã‚‹ã»ã†ãŒã‚ˆã„ã€‚é–¢é€£:X-Content-Type-Options: nosniff ã¤ã‹ã‚ãªã„ã‚„ã¤ã¯æ»ãã°ã„ã„ã®ã«! - è‘‰ã£ã±æ—¥è¨˜)ã€‚ ä¾‹ãˆã°ã€æ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€ä»¥ä¸‹ã®ã‚ˆã†ãªJSONé…åˆ—ã‚’è¿”ã™ãƒªã‚½ãƒ¼ã‚¹(http://example.jp/target.json)ãŒã‚ã£ãŸã¨ã—ã¾ã™ã€‚ [ "secret", "data", "is", "here" ] æ”»æ’ƒè€…ã¯ç½ ãƒšãƒ¼ã‚¸ã‚’ä½œæˆã—ã€ä»¥ä¸‹ã®ã‚ˆã†ã«JSONé…åˆ—ã‚’vbscriptã¨ã—ã¦èªã¿è¾¼ã¿ã¾ã™ã€‚ã‚‚ã¡ã‚
yife 2013/05/17
Internet

Internet Explorer

javascript

security

JSON

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTP
ãƒªãƒ³ã‚¯
ãªãœGoogleã¯JSONã®å…ˆé ã« while(1); ã‚’ã¤ã‘ã‚‹ã®ã‹ - Qiita
while(1);[['u',[['smsSentFlag','false'],['hideInvitations','false'],['remindOnRespondedEventsOnly','true'],['hideInvitations_remindOnRespondedEventsOnly','false_true'],['Calendar ID stripped for privacy','false'],['smsVerifiedFlag','true']]]] ã“ã‚Œä»¥å¤–ã«ã‚‚Googleã®ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ &&&START&&& ã¨ã‹ while(1); &&&START&&& ã¦ã®ãŒå…ˆé ã«å…¥ã£ã¦ãŸã‚Šã™ã‚‹ã‚“ã ã‘ã©ã€ã“ã‚Œã¯ä¸€ä½“ä½•ï¼Ÿ è§£ç” ã“ã‚Œã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªå¯¾ç–ã€‚ ä¾‹ãˆã°GoogleãŒ gmail.com/json?action=inbox ã¨ã„ã†URL
yife 2013/02/06
google

Facebook

ãƒãƒƒãƒ‰ãƒŽã‚¦ãƒã‚¦

security

Ajax

JavaScript

Google

JSON
ãƒªãƒ³ã‚¯
1