[B! å’ç ”][web] yuu2634ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yuu2634 id:yuu2634

å’ç ”ã¨webã«é–¢ã™ã‚‹yuu2634ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apache hooké–¢æ•°
äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥ï¼ˆæ—§ï¼‰ ã€Œã‚¦ã‚§ãƒ–ã®æ´å²ã¯äººé¡žã®æ´å²ã®ç¹°ã‚Šè¿”ã—ã€ã¨ã„ã†è¦³ç‚¹ã‹ã‚‰è‰²ã€…å‹‰å¼·ã—ã¦ã„ã¾ã™ã€‚2014å¹´ã¾ã§ã®äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥ã®æ—§ãƒ–ãƒã‚°ã§ã™ã€‚
yuu2634 2012/02/16
å’ç ”

web

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°
ãƒªãƒ³ã‚¯
URLè¸ã‚€ã¨ã€Œã“ã‚“ã«ã¡ã¯ã€€ã“ã‚“ã«ã¡ã¯!!ã€ã€€Amebaãªã†ã®CSRFè„†å¼±æ€§ã§â€œæ„å›³ã—ãªã„æŠ•ç¨¿â€åºƒãŒã‚‹
12æœˆ10æ—¥ã«PCç‰ˆãŒã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸã‚µã‚¤ãƒãƒ¼ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã®ãƒŸãƒ‹ãƒ–ãƒã‚°ã‚µãƒ¼ãƒ“ã‚¹ã€ŒAmebaãªã†ã€ã§ã€ã‚ã‚‹URLã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€ã€Œã“ã‚“ã«ã¡ã¯ã€€ã“ã‚“ã«ã¡ã¯!!ã€ã¨ã„ã†ãƒ•ãƒ¬ãƒ¼ã‚ºã¨ã‚¯ãƒªãƒƒã‚¯ã—ãŸURLæ–‡å—åˆ—ãŒè‡ªå‹•ã§æŠ•ç¨¿ã•ã‚Œã€ã€Œã¯ã¾ã¡ã‚„2ã€ã•ã‚“ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’è‡ªå‹•ã§ãƒ•ã‚©ãƒãƒ¼ã—ã¦ã—ã¾ã†ã¨ã„ã†ç¾è±¡ãŒåºƒãŒã£ãŸã€‚ URLã‚’ã‚¯ãƒªãƒƒã‚¯ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ„å›³ã—ãªã„æ©Ÿèƒ½ã‚’å®Ÿè¡Œã•ã›ã‚‰ã‚Œã‚‹Webã‚¢ãƒ—ãƒªã®è„†å¼±æ€§ã®ä¸€ç¨®ãƒ»ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰ã‚’çªã„ãŸã‚‚ã®ã€‚åŒç¤¾ã¯10æ—¥å¤œã€URLã‚’ã‚¯ãƒªãƒƒã‚¯ã—ãªã„ã‚ˆã†ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å‘ŠçŸ¥ã€‚èª¤ã£ã¦ã‚¯ãƒªãƒƒã‚¯ã—ãŸå ´åˆã¯æŠ•ç¨¿ã‚’å‰Šé™¤ã—ã€ã¯ã¾ã¡ã‚„2ã•ã‚“ã®ãƒ•ã‚©ãƒãƒ¼ã‚’å¤–ã™ã‚ˆã†å‘¼ã³æŽ›ã‘ãŸã€‚11æ—¥æœã¾ã§ã«è„†å¼±æ€§ã‚‚ä¿®æ£ã—ãŸã¨ã„ã†ã€‚ mixiã§ã‚‚2005å¹´ã€ã‚ã‚‹URLã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€Œã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼ã€ã¨ã„ã†æ—¥è¨˜ãŒå‹æ‰‹ã«æŠ•ç¨¿ã•ã‚Œã‚‹ã¨ã„ã†ã€CSRFã‚’åˆ©ç”¨ã—ãŸã‚¹ãƒ‘ãƒ ãŒæµé€šã—ãŸã“ã¨ãŒã‚ã£ãŸã€‚ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãƒ¼ã‚µã‚¤ãƒˆæ§‹
yuu2634 2011/12/27
Web

ãƒ‹ãƒ¥ãƒ¼ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å’ç ”
ãƒªãƒ³ã‚¯
ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ã‚¹ãƒ‘ãƒ ã‚ˆã‘ã«ã‚‚ä½¿ãˆã‚‹ã€Œmod_securityã€
Apacheã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã€Œmod_securityã€ã¨ã„ã†ã®ãŒã‚ã‚‹ãã†ã§ã€‚ã„ã‚ã‚†ã‚‹Web Application Firewall (WAF)ã¨ã„ã†ã‚‚ã®ã«åˆ†é¡žã•ã‚Œã‚‹ä»•çµ„ã¿ãªã®ã§ã™ãŒã€éžå¸¸ã«æ©Ÿèƒ½ãŒå¼·åŠ›ã€‚ãƒ˜ãƒƒãƒ€ã€GETã€POSTã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å«ã‚€INã¨OUTã®å…¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆï¼ˆHTTPSå«ã‚€ï¼‰ã«å¯¾ã—ã¦ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°å¯èƒ½ã€‚é€šå¸¸ã§ã¯è¨˜éŒ²ã•ã‚Œãªã„POSTã®ãƒã‚°ã‚‚è¨˜éŒ²å¯èƒ½ã€‚ ã§ã€ã“ã®æ©Ÿèƒ½ã‚’ä½¿ãˆã°ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ã‚¹ãƒ‘ãƒ ã‚‚ã‚µãƒ¼ãƒå´ã§å§‹æœ«ã§ãã‚‹ã®ã§ã€PHPãªã©ãŒå‹•ã„ã¦åˆ¤å®šã™ã‚‹å‰ã«å‡¦ç†ã§ãã€ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ã‚¹ãƒ‘ãƒ ã«ã‚ˆã‚‹è² è·ãŒè»½ããªã‚‹ã¨ã„ã†ã‚ã‘ã€‚ è¨å®šã®è©³ç´°ãªã©ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚mod_securityç”¨ã®ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚‚ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãã‚‹ã®ã§è¨å®šã‚‚ç°¡å˜ã§ã™ã€‚ å…¬å¼ã‚µã‚¤ãƒˆã¯ä»¥ä¸‹ã€‚ ModSecurity (mod_security) - Open Source Web Application Firewal
yuu2634 2011/07/20
Web

å’ç ”
ãƒªãƒ³ã‚¯
[ã‚±ãƒ¼ã‚¿ã‚¤ç”¨èªžã®åŸºç¤ŽçŸ¥è˜]ç¬¬524å›žï¼šã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° ã¨ã¯
yuu2634 2011/07/20
å’ç ”

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

Web
ãƒªãƒ³ã‚¯
Geekãªãºãƒ¼ã˜ : IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹æž¯æ¸‡ã€‚ãã®æ„å‘³ã¨æã‚‰ãã“ã‚Œã‹ã‚‰èµ·ãã‚‹ã“ã¨
ä»Šã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¯IPãƒãƒ¼ã‚¸ãƒ§ãƒ³4ã§å‹•ä½œã—ã¦ã„ã¾ã™ãŒã€ãã®IPv4ã§å„æ©Ÿå™¨ã‚’è˜åˆ¥ã™ã‚‹ãŸã‚ã®IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒé‚ã«äº‹å®Ÿä¸Šæž¯æ¸‡ã—ã¾ã—ãŸ(å‚è€ƒ)ã€‚ é•·å¹´ã€Œæž¯æ¸‡ã™ã‚‹ã€ã¨è¨€ã‚ã‚Œç¶šã‘ã¦ã„ã¾ã—ãŸãŒã€ãã‚ŒãŒé‚ã«ç¾å®Ÿã®ç‰©ã¨ãªã‚Šã¾ã—ãŸã€‚ ã“ã“ã§ã¯ã€IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹æž¯æ¸‡ã¨ã¯ä½•ã‹ã¨ã€ãã‚Œã«ã‚ˆã£ã¦ä½•ãŒèµ·ãã‚‹ã®ã‹ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹æž¯æ¸‡ã«é–¢ã—ã¦ã€ã‚¢ãƒŠãƒã‚°æ”¾é€ã®åœæ³¢ã¨åœ°ãƒ‡ã‚¸ã¸ã®ç§»è¡Œã‚„ã€åŽŸæ²¹æž¯æ¸‡ã¨ä¼¼ãŸã‚ˆã†ãªã‚‚ã®ã§ã‚ã‚‹ã‚ˆã†ãªèªè˜ãŒå¤šãè¦‹ã‚‰ã‚Œã¾ã™ãŒã€å€‹äººçš„ã«ã¯IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹æž¯æ¸‡å¾Œã®IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚¢ãƒŠãƒã‚¸ãƒ¼(é¡žæ¯”)ã¨ã—ã¦ã¯ç›¸æ’²ã®è¦ªæ–¹æ ªã®æ–¹ãŒè¿‘ã„æ°—ãŒã—ã¦ã„ã¾ã™ã€‚ ã¾ãšã€ã‚¢ãƒŠãƒã‚°æ”¾é€ã®åœæ³¢ã¨åœ°ãƒ‡ã‚¸ã¸ã®ç§»è¡Œã§ã™ãŒã€ã‚¢ãƒŠãƒã‚°æ”¾é€ã¯2011å¹´7æœˆã«ä¸€æ–‰ã«åœæ¢ã—ã¾ã™ã€‚ ã—ã‹ã—ã€IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹ã®å ´åˆã¯ã€ã‚ã‚‹æ—¥çªç„¶IPv4ãŒä½¿ãˆãªããªã‚‹ã‚ã‘ã§ã¯ãªãã€ä»Šã¾ã§ä½¿ã£ã¦ã„ã‚‹IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ãã®ã¾ã¾ä½¿ã„ç¶šã‘ã‚‰ã‚Œã‚‹ã¨ã„ã†æ„å‘³ã§ã‚¢ãƒŠ
yuu2634 2011/02/10
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

ã¾ã¨ã‚

web

å’ç ”
ãƒªãƒ³ã‚¯
1