[B! xss] Cherenkovã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Cherenkov id:Cherenkov

xssã«é–¢ã™ã‚‹Cherenkovã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (122)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

S3çµŒç”±ã§XSS!?ä¸å¯æ€è°ãªContent-Typeã®å€¤ã‚’åˆ©ç”¨ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®æ–°è¦³ç‚¹ - Flatt Security Blog
ã¯ã˜ã‚ã« ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®é½‹è—¤ã“ã¨azaraã§ã™ã€‚ä»Šå›žã¯ã€ä¸å¯æ€è°ãªContent-Typeã®å€¤ã¨ã€ã‚¯ãƒ©ã‚¦ãƒ‰æ™‚ä»£ã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã«ã¤ã„ã¦ãŠè©±ã—ã—ã¾ã™ã€‚ æœ¬ãƒ–ãƒã‚°ã¯ã€2024 å¹´ 3 æœˆ 30 æ—¥ã«é–‹å‚¬ã•ã‚ŒãŸ BSides Tokyo ã§ç™»å£‡ã—ãŸéš›ã®ç™ºè¡¨ã«ã¤ã„ã¦ã€ã¾ã¨ã‚ãŸã‚‚ã®ã§ã™ã€‚ ã¾ãŸã€ãƒ–ãƒã‚°è³‡æ–™åŒ–ã«ã‚ãŸã‚Šã€Content-Type ã®å‹•ä½œã‚„ä»•æ§˜ã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸå½¢ã§å†ç·¨ã‚’è¡Œã„ã€ç™»å£‡æ™‚ã«å£é ã§è£œè¶³ã—ãŸå†…å®¹ã®è¿½è¨˜ã€å¿…è¦ã«å¿œã˜ãŸè£œè¶³ã‚’è¡Œãªã£ã¦ã„ã¾ã™ã€‚ ã¾ãŸã€æœ¬ãƒ–ãƒã‚°ã§è§£èª¬ã‚’ã™ã‚‹ BSides Tokyoã§ã®ç™ºè¡¨ã®ã‚‚ã†ä¸€ã¤ã®é¡Œã§ã‚ã‚‹ã€ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã«ã¤ã„ã¦ã¯ã€ä»¥ä¸‹ã®ãƒ–ãƒã‚°ã‹ã‚‰ç¢ºèªã‚’ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã®ã§ã€ã”è¦§ãã ã•ã„ã€‚ blog.flatt.tech ãªãœä»Šã€ã“ã®å•é¡Œã‚’å–ã‚Šä¸Šã’ã‚‹ã®ã‹ï¼Ÿ å¾“æ¥ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã«ãŠã„ã¦ã€Content-Type ã®å€¤ã‚’ä»»æ„ã®å€¤ã«è¨å®šã™ã‚‹ã“ã¨
Cherenkov 2024/05/30
xss

security
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ã‚’æŽ¢ã™è©± 2023 - Qiita
æœ€è¿‘å¹´2å›žã®ã‚µã‚¤ãƒœã‚¦ã‚ºä»¥å¤–ã¯ã»ã¼ãƒã‚°ãƒã‚¦ãƒ³ãƒ†ã‚£ã—ã¦ã„ãªã„ç¾çŠ¶ã§ã‚ã‚‹ãŒã€ã‚„ã‚‹æ°—ãŒèµ·ããŸã¨ãã‚ˆã†ã«ãƒ¡ãƒ¢ ä¸»ã«Webã‚¢ãƒ—ãƒªã«é–¢ã™ã‚‹ã“ã¨ è¨ºæ–ã¨è‡ªåˆ†ã§å‹æ‰‹ã«è„†å¼±æ€§ã‚’æŽ¢ã™è¡Œç‚ºã¨ã®é•ã„ ç¶²ç¾…æ€§ã¯å…¨ãå¿…è¦ãªã„ è¨ºæ–ã¯ç¶²ç¾…ã—ã¦ãªã„ã¨æ€’ã‚‰ã‚Œã‚‹ã“ã¨ãŒã‚ã‚‹ãŒå¥½ããªè„†å¼±æ€§ã ã‘æŽ¢ã›ã‚‹ã€‚ æœŸé–“ãŒæ°¸é è¨ºæ–æœŸé–“ã¯è‡ªç”±ãªã®ã§å¾Œã§æ°—ã¥ã„ã¦é ã‚’æŠ±ãˆã‚‹ã“ã¨ã¯ãªã„ æ”»æ’ƒã«åˆ°ã‚‹ã¾ã§ã‚’èª¬æ˜Žã™ã‚‹å¿…è¦ãŒã‚ã‚‹ ã€Œãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå¤ã„ã®ã§ãƒ€ãƒ¡ã§ã™ã€ã ã‘ã§ã¯è¨±ã—ã¦ã‚‚ã‚‰ãˆãªã„ å¤‰ãªã“ã¨ã™ã‚‹ã¨é€®æ•ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ ç„¡é—‡ã«ãƒ„ãƒ¼ãƒ«å›žã™ã¨ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ç¦æ¢æ³•ã«å¼•ã£ã‹ã‹ã‚‹ã®ã§ ã ãŒã—ã‹ã—æµ·å¤–å‹¢ã¯æ³•å¾‹ã®é•ã„ã‚‚ã‚ã‚‹ã®ã‹å¥½ããªã‚µã‚¤ãƒˆã«æ°—è»½ã«ãƒ„ãƒ¼ãƒ«ã‚’å›žã™ã®ã§å¤ªåˆ€æ‰“ã¡ã§ããªã„ æ—¥æœ¬äººã¨ã—ã¦ã¯è¨±å¯ã•ã‚ŒãŸã¨ã“ã‚ã‹ãƒãƒ¼ã‚«ãƒ«ã«ç’°å¢ƒä½œã£ã¦æ”»æ’ƒã™ã‚‹ã®ãŒå¿ƒç†çš„å®‰å…¨æ€§ãŒé«˜ã„ 2023å¹´åº¦ã®å‚¾å‘ ã‚³ãƒ¢ãƒ‡ã‚£ãƒ†ã‚£åŒ–ãŒé€²ã‚€ è‡ªåˆ†ã ã‘ã—ã‹çŸ¥ã‚‰ãªã„ã‚ˆã†ãªè„†å¼±æ€§ã¯ãªã„ ã¾ã çŸ¥ã‚‰ã‚Œã¦ã„ãªã„æ‰‹æ³•ã‚‚ã»ã¼
Cherenkov 2023/05/14
security

xss
ãƒªãƒ³ã‚¯
Zennã§è¦‹ã¤ã‘ãŸXSSã¨markdown-it
1å¹´ä»¥ä¸Šå‰ã€ãƒªãƒªãƒ¼ã‚¹ç›´å¾Œãã‚‰ã„ã®Zennã§XSSã‚’è¦‹ã¤ã‘ãŸè©±ã§ã™ã€‚ çµŒé¨“çš„ã«ã¯markdownã‚’ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã¯å¤§æŠµXSSãŒã‚ã‚‹â€¦â€¦ã¨ã„ã†ã“ã¨ã§Zennã®markdownè¨˜æ³•ã‚’ç¢ºèªã—ãªãŒã‚‰ã‚¬ãƒãƒ£ã‚¬ãƒãƒ£ã‚„ã£ã¦ã„ã‚‹ã¨è¦‹ã¤ã‘ã¾ã—ãŸã€‚Zennè‡ªä½“ã¯Reactã§æ›¸ã‹ã‚Œã¦ã„ã‚‹ã®ã§XSSã¯èµ·ãã«ãã„ã®ã§ã™ãŒã€Zennã§ä½¿ç”¨ã—ã¦ã„ã‚‹markdown-itã®pluginå´ã«è„†å¼±æ€§ãŒã‚ã‚Šã¾ã—ãŸã€‚ ç™ºè¦‹æ™‚ã¯Zennã®editorã®ã‚³ãƒ¼ãƒ‰ãŒGithubã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã«æ°—ã¥ã„ã¦ã„ãªã‹ã£ãŸã®ã§ã€Zennã®å•ã„åˆã‚ã›ãƒ•ã‚©ãƒ¼ãƒ çµŒç”±ã§å ±å‘Šã—ãŸã¨ã“ã‚ã€catnoseã•ã‚“ã«ã‚ˆã‚Šãã®æ—¥ã®æ·±å¤œã«ä¿®æ£ã•ã‚Œã¦ã€ç¿Œæ—¥ã«ã¯pluginå´ã¸ã®ä¿®æ£PRã‚‚ä½œæˆã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ markdown-it-prism ã‚³ãƒ¼ãƒ‰ãƒ–ãƒãƒƒã‚¯ã®è¨€èªžæŒ‡å®šã®éƒ¨åˆ†ã« " ã‚’ã„ã‚Œã‚‹ã¨ä»¥é™ã®éƒ¨åˆ†ã«HTMLã‚’è¨˜è¿°ã§ãã¾ã—ãŸã€‚lang ã®å€¤ãŒã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•
Cherenkov 2022/08/09
markdown-it

xss

security
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: Discordãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã‚¢ãƒ—ãƒªã®RCE
æ•°ã‹æœˆå‰ã€ã‚²ãƒ¼ãƒ ã®ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãªã©ã§äººæ°—ã®ãƒãƒ£ãƒƒãƒˆã‚¢ãƒ—ãƒªã€ŒDiscordã€ã®ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç”¨ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œå¯èƒ½ãªå•é¡Œã‚’ç™ºè¦‹ã—ã€Bug Bounty Programã‚’é€šã˜ã¦å ±å‘Šã—ã¾ã—ãŸã€‚ç™ºè¦‹ã—ãŸRCEã¯ã€è¤‡æ•°ã®ãƒã‚°ã‚’çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã«ã‚ˆã£ã¦é”æˆã•ã‚Œã‚‹é¢ç™½ã„ã‚‚ã®ã ã£ãŸã®ã§ã€ã“ã®è¨˜äº‹ã§ã¯ã€ãã®è©³ç´°ã‚’å…±æœ‰ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ãªãŠã€ç¾åœ¨è„†å¼±æ€§ã¯ä¿®æ£ã•ã‚Œã¦ã„ã¾ã™ã€‚ èª¿æŸ»ã®ãã£ã‹ã‘Electronã‚¢ãƒ—ãƒªã®è„†å¼±æ€§ã‚’æŽ¢ã—ãŸã„æ°—åˆ†ã ã£ãŸã®ã§ã€Electronã‚¢ãƒ—ãƒªã§å ±å¥¨é‡‘ãŒå‡ºã‚‹ã‚¢ãƒ—ãƒªã‚’æŽ¢ã—ã¦ã„ãŸã¨ã“ã‚ã€DiscordãŒå€™è£œã«ã‚ãŒã‚Šã¾ã—ãŸã€‚Discordã¯è‡ªåˆ†è‡ªèº«ãŒåˆ©ç”¨è€…ã§ã€è‡ªåˆ†ãŒä½¿ã†ã‚¢ãƒ—ãƒªãŒå®‰å…¨ã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã—ãŸã„ã¨ã„ã†æ€ã„ã‚‚ã‚ã£ãŸã®ã§ã€èª¿æŸ»ã‚’ã™ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ ç™ºè¦‹ã—ãŸè„†å¼±æ€§ç§ã¯ä¸»ã«æ¬¡ã®3ã¤ã®ãƒã‚°ã‚’çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§RCEã‚’é”æˆã—ã¾ã—ãŸã€‚ contextIsolationã‚ªãƒ—ã‚·ãƒ§ãƒ³ã®
Cherenkov 2021/02/04
security

xss

javascript
ãƒªãƒ³ã‚¯
é§†ã‘å‡ºã—ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®çš†ã•ã‚“ã«çŸ¥ã£ã¦ã»ã—ã„è„†å¼±æ€§ã®ã“ã¨ã€‚
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯é›£ã—ã„ã§ã™ã€‚ ã§ã™ãŒã€ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°åˆå¦è€…ã®çš†ã•ã‚“ã¯å¿…è¦ä»¥ä¸Šã«èŽç¸®ã›ãšã€ã©ã‚“ã©ã‚“ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã‚Šã€å…¬é–‹ã™ã‚‹ã“ã¨ã«ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã—ã¦æ¬²ã—ã„ã¨ç§ã¯æ€ã£ã¦ã„ã¾ã™ã€‚ ä¸€æ–¹ã€äº‹å®Ÿã¨ã—ã¦ã€è„†å¼±ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ï¼ˆã‚µãƒ¼ãƒä¸Šã§ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ãªçŠ¶æ…‹ã«ãªã£ã¦ã„ã‚‹ï¼‰ã ã‘ã§ã€å…¨ãç„¡é–¢ä¿‚ãªç¬¬ä¸‰è€…ãŒè¢«å®³ã‚’è¢«ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ã¯çŸ¥ã£ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãã‚Œã¯WordPressã‚’ä½¿ã£ãŸå˜ãªã‚‹Webã‚µã‚¤ãƒˆã§ã‚ã£ãŸã¨ã—ã¦ã‚‚åŒã˜ã§ã™ã€‚ ã¾ãŸã€ã‚ãªãŸã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒç ´å£Šã•ã‚Œã¦å›°ã‚‰ãªã„ã‚‚ã®ã§ã‚ã£ãŸã‚Šã€ å€‹äººæƒ…å ±ã‚’ä¿æŒã—ã¦ã„ãªã„ã‚‚ã®ã§ã‚ã£ãŸã¨ã—ã¦ã‚‚ã€ã§ã™ã€‚ ã ã‹ã‚‰ã€çŸ¥ã‚‰ãªã‹ã£ãŸã€ã§ã¯æ¸ˆã¾ã•ã‚Œãªã„ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ã€PHPã®ã‚½ãƒ¼ã‚¹ã‚’ä¾‹ã«ã€ ç‰¹ã«ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°åˆå¦è€…ãŒç”Ÿã¿å‡ºã—ã‚„ã™ã„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã€ å…·ä½“çš„ãªã‚³ãƒ¼ãƒ‰ã‚’æŒ™ã’ãªãŒã‚‰è§£èª¬ã—ã¾ã™ã€‚ ãªãŠã€æœ¬è¨˜äº‹ã®ã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰ã¯ã‚‚
Cherenkov 2020/10/09
xss

php

sample

security
ãƒªãƒ³ã‚¯
è‰²ã‚“ãªXSS â€“ nootropic.me
2015/4/16(æœ¨)ï¼šãƒšãƒ¼ã‚¸ã®ä¸€ç•ªä¸‹ã«è¿½è¨˜ã‚’è¨˜è¿°ã—ã¾ã—ãŸã€‚ ãã®æ˜”ã€ãªã‚“ã¨ã‹ã‚ãƒ£ãƒ³ãƒ—ã¨ã„ã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚¤ãƒ™ãƒ³ãƒˆã«å‚åŠ ã—ãŸæ™‚ã€Œã‚¢ã‚¦ãƒˆãƒ—ãƒƒãƒˆãŒå¤§äº‹ã€ã¨è¨€ã‚ã‚ŒãŸã®ã‚’æ€ã„å‡ºã—ã¾ã—ãŸã€‚ ã§ã‚‚ã€æ™®é€šè‡ªåˆ†ã®è¦‹ã¤ã‘ãŸçŸ¥è˜ã¯å¾Œç”Ÿå¤§äº‹ã«æŠ±ãˆã¦ãŠããŸã„ã‚‚ã‚“ã ã¨æ€ã„ã¾ã™ã€‚ ãã“ã§ä»Šå›žã¯ãã†ã„ã£ãŸä½•ã‹ã—ã‚‡ãƒ¼ã‚‚ãªã„ã‚‚ã®ã‚’æ¨ã¦ã‚‹ã¹ãã€æºœã‚è¾¼ã‚“ã è‰²ã‚“ãªXSSã®PoCã‚’å°‘ã—æ›¸ãå‡ºã—ã¦ã¾ã¨ã‚ã¾ã—ãŸã€‚ ä»Šã¾ã§è‡ªåˆ†ã§è¦‹ã¤ã‘ãŸã‚‚ã®ã‚„æµ·å¤–ã®Security Researcheré”ã‹ã‚‰åŽé›†ã—ãŸã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ã€‚ ã•ã¦ã€ä»Šå›žãƒªã‚¹ãƒˆã‚¢ãƒƒãƒ—ã—ãŸPoCã®è¦‹æ–¹ã§ã™ãŒã„ãã¤ã‹ã®é …ç›®ãŒã‚ã‚Šã¾ã™ã€‚ ä¸€ç•ªä¸Šã®ã€Œæ‰‹æ³•ã€ã¯ã‚¿ã‚¤ãƒˆãƒ«ã¿ãŸã„ãªã‚‚ã®ã ã¨æ€ã£ã¦ä¸‹ã•ã„ã€‚ äºŒç•ªç›®ã®ã€ŒPoCã€ã¯ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ç‚ºã®ã‚³ãƒ¼ãƒ‰ã§ã™ã€‚æ®†ã©ãŒã‚¢ãƒ©ãƒ¼ãƒˆãŒå‡ºã‚‹ã ã‘ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®ç‚ºå±é™ºãªã‚³ãƒ¼ãƒ‰ã¯ç„¡ã„ã¤ã‚‚ã‚Šã§ã™ãŒã”è‡ªåˆ†ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§å®Ÿè¡Œã™ã‚‹éš›ã¯è‡ªå·±è²¬ä»»ã§ãŠé¡˜ã„ã—ã¾ã™ã€‚ãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒ
Cherenkov 2015/04/14
security

XSS

browser

JavaScript

IE

tutorial
ãƒªãƒ³ã‚¯
ã‚µã‚¤ãƒœã‚¦ã‚ºã®å ±å¥¨é‡‘ã«åŠå¹´ã§158ä»¶ã®å ±å‘Šã€2015å¹´ã¯ç‰¹å®šæ”»æ’ƒã‚’å¢—é¡
ã‚µã‚¤ãƒœã‚¦ã‚ºã¯2015å¹´1æœˆ27æ—¥ã€2014å¹´6æœˆã«é–‹å§‹ã—ãŸã€Œè„†å¼±æ€§å ±å¥¨é‡‘åˆ¶åº¦ã€ã«é–¢ã™ã‚‹èª¬æ˜Žä¼šã‚’é–‹å‚¬ã—ãŸã€‚åŒåˆ¶åº¦ã¯ã€åŒç¤¾ã®è£½å“ã‚µãƒ¼ãƒ“ã‚¹ã«ã¤ã„ã¦ã€ç¤¾å†…ã§æ¤œå‡ºã—ã¦ã„ãªã„æœªçŸ¥ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ãƒ»å ±å‘Šã—ãŸå–„æ„ã®å”åŠ›è€…ã«å ±å¥¨é‡‘ã‚’æ”¯æ‰•ã†ã‚‚ã®ã€‚2014å¹´ã¯ã€6æœˆ19æ—¥ï½ž12æœˆ25æ—¥ã®æœŸé–“ã«å ±å‘Šã‚’å—ã‘ä»˜ã‘ãŸã€‚ãã®çµæžœã€158ä»¶ã®æœªçŸ¥ã®è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚Šã€ç·é¡687ä¸‡å††ã®å ±å¥¨é‡‘ã‚’æ”¯æ‰•ã£ãŸã¨ã„ã†ã€‚2015å¹´ã¯ã€ç‰¹å®šã®æ”»æ’ƒã«é–¢ã™ã‚‹è„†å¼±æ€§ã®å ±å¥¨é‡‘ã‚’å¢—é¡ã™ã‚‹ã¨ã¨ã‚‚ã«ã€å ±å¥¨é‡‘ã‚’æŒ¯ã‚Šè¾¼ã‚€ã¾ã§ã®æœŸé–“ã‚’çŸç¸®ã™ã‚‹ã€‚ åŒåˆ¶åº¦ã¯ã€åŒç¤¾ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸è£½å“ã¨APIã€ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹åŸºç›¤ã€Œcybozu.comã€ã§ç¨¼åƒã™ã‚‹å„ã‚µãƒ¼ãƒ“ã‚¹ã€åŒç¤¾æŒ‡å®šãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«ã¤ã„ã¦ã€ç¤¾å†…æ¤œè¨¼ã‚„ç¬¬ä¸‰è€…æ©Ÿé–¢ã«ã‚ˆã‚‹æ¤œè¨¼ã§ç™ºè¦‹ã•ã‚Œã¦ãªã„æœªçŸ¥ã®è„†å¼±æ€§ã‚’ã€å¤–éƒ¨ã®å”åŠ›è€…ã«ç™ºè¦‹ãƒ»å ±å‘Šã—ã¦ã‚‚ã‚‰ã†ãŸã‚ã®ä»•æŽ›ã‘ã§ã‚ã‚‹ã€‚å ±å‘Šã•ã‚ŒãŸè„†å¼±æ€§ã«ã¤ã„ã¦ã€å…±é€šè„†å¼±æ€§è©•ä¾¡ã‚·ã‚¹ãƒ†ãƒ ã€ŒCVSS v2ã€ã®è©•
Cherenkov 2015/02/17
ã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã¯ã˜ã¾ã£ãŸ

security

å ±å¥¨é‡‘

xss

csrf
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: Cure53 XSSMas Challenge '14 Writeup
12æœˆã¨è¨€ãˆã°XSS-Masã®å£ç¯€ã¨ã„ã†ã“ã¨ã§ã€æœ€è¿‘ã¯ã€XSS-Maså‰ã‹ã‚‰1æœˆã®çµ‚ã‚ã‚Šã¾ã§é–‹å‚¬ã•ã‚Œã¦ã„ãŸã€è³žé‡‘ä»˜ãXSSãƒãƒ£ãƒ¬ãƒ³ã‚¸ã€ŒCure53 XSS-Mas Challenge 2014ã€ã«æŒ‘æˆ¦ã—ã¦ã„ã¾ã—ãŸã€‚ XSSãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¨ã„ã†ã®ã¯ã€å‡ºé¡Œè€…ãŒã‚ã–ã¨ã‚ã‹ã‚Šã«ãã„å½¢ã§XSSã«è„†å¼±ã«ã—ãŸãƒšãƒ¼ã‚¸(ä¾‹ï¼šç‰¹å®šã®è¨˜å·ã‚„æ–‡å—ãŒä½¿ãˆãªã„ã€æ–‡å—æ•°åˆ¶é™ãŒã‚ã‚‹ç‰)ã§ã€æŒ‡å®šã—ãŸæ¡ä»¶(alerté–¢æ•° ã§ã€Œ1ã€ã®æ–‡å—ã‚’ã ã™ã¨ã‹)ã‚’ã‚¯ãƒªã‚¢ã—ã¦ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã§ãã‚‹ã“ã¨ã‚’è¨¼æ˜Žã™ã‚‹ã¨ã„ã†ã€XSSã‚’å—œã‚€äººãŸã¡ã®é–“ã§æ¥½ã—ã¾ã‚Œã‚‹ä¸€ç¨®ã®ãƒ‘ã‚ºãƒ«ã‚²ãƒ¼ãƒ ã§ã™ã€‚ å®Ÿéš›ã«XSSã§æ”»æ’ƒå¯èƒ½ãªã“ã¨ã‚’è¨¼æ˜Žã—ãªã„ã¨ã„ã‘ãªã„å ´é¢ã§ã‚‚ã€ç‰¹å®šã®åˆ¶ç´„ãŒã‹ã‹ã‚‹ã“ã¨ã¯å¤šãã€ã“ã†ã„ã£ãŸãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¯å˜ãªã‚‹ãƒ‘ã‚ºãƒ«éŠã³ã¨ã„ã†ã ã‘ã§ãªãã€æ”»æ’ƒã®ç™ºæƒ³ã‚’é¤Šã†ã†ãˆã§ã¨ã¦ã‚‚æœ‰ç›Šãªã‚‚ã®ã§ã™ã€‚
Cherenkov 2015/02/12
xss

security

kinugawamasato
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ç™ºè¦‹ã®ãƒ—ãƒã€Œã‚ãƒŒã‚¬ãƒ¯ ãƒžã‚µãƒˆã€ã•ã‚“ã¯æ—¥æœ¬äººã ã£ãŸ
è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«è²¢çŒ®ã—ã¦ã„ã‚‹ã®ãŒã€ã€Œãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã€ã¨å‘¼ã°ã‚Œã‚‹å˜åœ¨ã ã€‚Googleãªã©ãƒ™ãƒ³ãƒ€ãƒ¼ã®å ±å¥¨é‡‘ã§ç”Ÿè¨ˆã‚’ç«‹ã¦ã¦ã„ã‚‹ã¨ã„ã†ã€Œã‚ãƒŒã‚¬ãƒ¯ ãƒžã‚µãƒˆã€ã•ã‚“ãŒã€ãƒ—ãƒã®ãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã¨ã—ã¦ã®â€œæ„‰ã—ã¿â€ã‚’ç´¹ä»‹ã—ã¦ãã‚ŒãŸã€‚ ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ãƒã‚°ã‚„è„†å¼±æ€§ã¯ã€è»½å¾®ãªä¸å…·åˆã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®æ·±åˆ»ãªå•é¡Œã‚’å¼•ãèµ·ã“ã™ã‚‚ã®ã¾ã§ã€æ§˜ã€…ãªã‚‚ã®ãŒã‚ã‚‹ã€‚é–‹ç™ºè€…ãŒå¹¾ã‚‰æ³¨æ„ã—ã¦ã‚‚è„†å¼±æ€§ã‚’ãªãã™ã“ã¨ã¯éžå¸¸ã«é›£ã—ã„ãŒã€å¤–éƒ¨ã®ç«‹å ´ã‹ã‚‰è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«è²¢çŒ®ã™ã‚‹ã€Œãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã€ã¨ã„ã†å˜åœ¨ã‚’ã”å˜ã˜ã ã‚ã†ã‹ã€‚ Googleã‚„Microsoftã€ã‚µã‚¤ãƒœã‚¦ã‚ºãªã©ä¸€éƒ¨ã®ãƒ™ãƒ³ãƒ€ãƒ¼ã¯ã€è„†å¼±æ€§ã‚’å ±å‘Šã—ãŸãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã«å ±å¥¨é‡‘ãªã©ã‚’æ”¯æ‰•ã†åˆ¶åº¦ã‚’é‹å–¶ã€‚ãã®å ±å¥¨é‡‘ã§ç”Ÿè¨ˆã‚’ç«‹ã¦ã‚‹ãƒ—ãƒã®ä¸€äººãŒã€Œã‚ãƒŒã‚¬ãƒ¯ ãƒžã‚µãƒˆã€ã•ã‚“ã ã€‚12æœˆ18ã€19æ—¥ã«è¡Œã‚ã‚ŒãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€ŒCODE BLUEã€ã§ã¯ã€ã‚ãƒŒã‚¬ãƒ¯ã•ã‚“ãŒãƒ—ãƒã®ãƒã‚°ãƒãƒ³ã‚¿
Cherenkov 2014/12/20
security

xss

kinugawamasato
ãƒªãƒ³ã‚¯
ä»£å®˜å±±è”¦å±‹æ›¸åº—ECã‚µã‚¤ãƒˆã®XSS - Heavy Moon
CCCãŒé‹å–¶ã—ã¦ã„ã‚‹ä»£å®˜å±±è”¦å±‹æ›¸åº—ã¯ECã‚µã‚¤ãƒˆã‚‚é‹å–¶ã—ã¦ã„ã‚‹ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³ã¯tsiteé…ä¸‹ã ã€‚ è©³ç´°ã¯çœããŒãã“ã«XSSã®è„†å¼±æ€§ãŒã‚ã‚‹ã“ã¨ã‚’2014å¹´7æœˆ5æ—¥ã®æ™‚ç‚¹ã§ç¢ºèªã—ãŸã€‚ å¤å…¸çš„ãªæ–¹æ³•ã§ç¢ºèªã™ã‚‹ã€‚ ï¼ˆå‚è€ƒï¼šã‚µã‚¤ãƒˆè„†å¼±æ€§ã‚’ãƒã‚§ãƒƒã‚¯ã—ã‚ˆã†ï¼--ç¬¬5å›žï¼šXSSã®è„†å¼±æ€§ã‚’æ¤œæŸ»ã™ã‚‹æ–¹æ³•ï¼‰ å•†å“æ¤œç´¢ã®æ¤œç´¢çª“ã«ã€Ž>'><script>alert('test')</script>ã€ã¨å…¥åŠ›ã—æ¤œç´¢ã‚’å®Ÿè¡Œã™ã‚‹ã€‚ ã“ã®ã‚ˆã†ã«ãƒãƒƒãƒ—ã‚¢ãƒƒãƒ—ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ ã‚ã‹ã‚Šã‚„ã™ãã™ã‚‹ã¨ã“ã†ã„ã†çŠ¶æ…‹ã€‚ ã“ã®ä»¶ã«é–¢ã—ã¦å†’é ã«ã‚‚æ›¸ã„ãŸã‚ˆã†ã«2014å¹´7æœˆ5æ—¥ã®æ™‚ç‚¹ã§ç¢ºèªã—ã¦ãŠã‚Šã€æ—¢ã«CCCå´ã‚‚çŠ¶æ³ã‚’ç¢ºèªã—ã¦ã„ã‚‹ã¯ãšã§ã‚ã‚‹ã€‚ æ—¢ã«2é€±é–“æ”¾ç½®ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã§ã€è„†å¼±æ€§ã®æƒ…å ±ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ã‚ˆã‚Šã‚‚ã€è„†å¼±æ€§ã®ã‚ã‚‹çŠ¶æ³ãŒæ”¾ç½®ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã®ã»ã†ãŒå±é™ºåº¦ãŒä¸Šå›žã‚‹ã®ã§ã¯ãªã„ã‹ï¼Ÿã¨ã„ã†åˆ¤æ–ã‚’ã—æœ¬ãƒ–ãƒã‚°ã‚’æ›¸ãã“ã¨ã«ã—ãŸã€‚ â€»archive.o
Cherenkov 2014/07/20
security

xss
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: ãŸã¶ã‚“XSSãŒç†ç”±ã§ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒã¨ã¾ã£ãŸ
æ˜”è‡ªåˆ†ãŒåˆ©ç”¨è€…ã ã£ãŸã‚µã‚¤ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œ(XSS)ã‚’ã„ãã¤ã‹å ±å‘Šã—ã¦ã„ãŸã®ã§ã™ãŒã€ãŠãã‚‰ããã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ç†ç”±ã«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒä½¿ãˆãªããªã‚Šã¾ã—ãŸã€‚ãƒ—ãƒãƒã‚¤ãƒ€ã«æŽ¥ç¶šã‚’æ¢ã‚ã‚‰ã‚ŒãŸã®ã§ã™ã€‚ ãã®ã‚µã‚¤ãƒˆã§å•é¡Œã‚’ã¿ã¤ã‘ãŸã¨ãã€ã‚µãƒ¼ãƒ“ã‚¹æä¾›è€…å´ã®åå¿œã‚’ç¤ºã™å…†å€™ãŒã‚ã‚Šã¾ã—ãŸã€‚ å•é¡Œã‚’ç™ºè¦‹å¾Œã€ã—ã°ã‚‰ãã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã•ã‚ŒãŸã‹ã‚‰ã§ã™ã€‚ ã‚µãƒ¼ãƒ“ã‚¹æä¾›è€…ã«ã¯å•é¡Œã‚’å ±å‘Šã—ã€ã‚¢ã‚¯ã‚»ã‚¹æ‹’å¦ã«ã¤ã„ã¦ã‚‚ã€ä¸€å¿œã€ä»Šå ±å‘Šã—ã¦ã‚‹é€šã‚Šã“ã‚Œã¯æ”»æ’ƒã§ã¯ãªã„ã®ã§èª¤è§£ãªãã‚ˆã†ã‚ˆã‚ã—ãã¨ãƒ¡ãƒ¼ãƒ«é€£çµ¡ã—ãŸã¨ã“ã‚ã€å•é¡Œã¯ä¿®æ£ã•ã‚Œã¾ã—ãŸã€‚ ã“ã‚Œã§çœŸæ„ã¯ä¼ã‚ã‚Šã€ã‚¢ã‚¯ã‚»ã‚¹ã¨é–¢é€£ä»˜ã‘ã‚‰ã‚Œã€ã‚¢ã‚¯ã‚»ã‚¹æ‹’å¦ã«å¯¾ã™ã‚‹èª¤è§£ã‚‚è§£æ±ºã—ãŸã ã‚ã†ã¨æ€ã£ãŸã®ã§ã™ãŒã€ãã®å¾Œæ€¥ã«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒä½¿ãˆãªã„äº‹æ…‹ã«ã¾ã§ãªã‚‹ã¨ã¯ã ã‚ŒãŒäºˆæƒ³ã§ããŸã§ã—ã‚‡ã†ã‹â€¦ã€‚(ä»Šã¯æºå¸¯ã®å›žç·šã‚’ä½¿ã£ã¦ã„ã¾ã™) ãƒ—ãƒãƒã‚¤ãƒ€ã‹ã‚‰æ›¸é¢ãŒå±Šãã€æ›¸é¢ã«ã¯å•é¡Œã®å ±å‘Šæ™‚ã¨ã»ã¼åŒã˜æ—¥ä»˜ã«
Cherenkov 2014/05/31
ãƒ™ãƒãƒƒã‚»

security

XSS

ã“ã‚Œã¯ã²ã©ã„
ãƒªãƒ³ã‚¯
ã¨ã‚ã‚‹è¨ºæ–å“¡ã¨SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³
7. é€šå¸¸ã®Webã‚µãƒ¼ãƒã¨ã®é€šä¿¡ <html> <body> <form action=â€œregisterâ€ method=â€œPOSTâ€> æ°å:vultest<BR> ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹:vulte [email protected]<BR> æ€§åˆ¥:ç”·<BR> ï¼ˆä»¥ä¸‹ç•¥ï¼‰ </html> POST /confirm.php HTTP/1.1 Host: example.jp ï¼ˆä»¥ä¸‹ç•¥ï¼‰ Cookie: PHP SESSID=xxxxxxxxxx name=vultest&mail=vultest%40example.jp&gender=1 HTTP Response HTTP Request 8. è‰²ã€…ã„ã˜ã£ã¦ã¿ã¦ã©ã†ã„ã†å¿œç”ãŒã‚ã‚‹ã‹ç¢ºèª POST /confirm.php HTTP/1.1 Host: example.jp ï¼ˆä»¥ä¸‹ç•¥ï¼‰ Cookie: PHP SESSID=xxxxxxxxxx name
Cherenkov 2014/05/27
SQL Injection

security

SQL

xss
ãƒªãƒ³ã‚¯
é™å²¡ç†å·¥ç§‘å¤§å¦ã•ã‚“ã§ç‰¹åˆ¥è¬›å¸«ã‚’ã‚„ã‚‰ã›ã¦é ‚ãã¾ã—ãŸ
Cherenkov 2013/10/01
ã‚·ãƒ¼ãƒã‚¤ãƒ³ãƒˆ é’æœ¨ã•ã‚“

æµœæ¾

xss

security

programmer
ãƒªãƒ³ã‚¯
CSP to the Rescue: Leveraging the Browser for Security
Programming is difficult â€” and difficult things generally donâ€™t have a perfect solution. As an example, cross-site scripting (XSS) is still very much unsolved. Itâ€™s very easy to think youâ€™re doing the right thing at the right time, but there are two opportunities to fail here: the fix might not be correct, and it might not be applied correctly. Escaping content (while still the most effective way
Cherenkov 2013/06/09
twitter

security

xss

csp

kinugawamasato
ãƒªãƒ³ã‚¯
é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹ã«ã‚ˆã‚‹é€£ç¶šå¨åŠ›æ¥å‹™å¦¨å®³ç‰äº‹ä»¶ã€€ï¼šè¦è¦–åº
äº‹ä»¶ã®æ¦‚è¦ å¹³æˆ24å¹´6æœˆ29æ—¥ã‹ã‚‰9æœˆ10æ—¥ã«ã‹ã‘ã¦ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ²ç¤ºæ¿ã€Œï¼’ã¡ã‚ƒã‚“ãã‚‹ã€ã‚’åˆ©ç”¨ã—ã¦ã€ç¬¬ä¸‰è€…ã®ãƒ‘ã‚½ã‚³ãƒ³ã‚’é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹ã€Œiesys.exeã€ã«æ„ŸæŸ“ã•ã›ã‚‹ãªã©ã—ã€æ„ŸæŸ“ã—ãŸãƒ‘ã‚½ã‚³ãƒ³ã‹ã‚‰ç„¡å·®åˆ¥æ®ºäººã‚„èˆªç©ºæ©Ÿçˆ†ç ´ç‰ã®çŠ¯ç½ªäºˆå‘Šã‚’å†…å®¹ã¨ã™ã‚‹è„…è¿«æ–‡ã‚’ã€å¸‚å½¹æ‰€ç‰ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«æŠ•ç¨¿ã—ã€ã¾ãŸã€ãƒ¡ãƒ¼ãƒ«ã§é€ä¿¡ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€å¸‚å½¹æ‰€ã‚„ä¼šç¤¾ã®æ¥å‹™ãŒå¦¨å®³ã•ã‚Œã‚‹ãªã©ã®äº‹ä»¶ãŒé€£ç¶šã—ã¦ç™ºç”Ÿã—ã¾ã—ãŸã€‚ å¹³æˆï¼’ï¼”å¹´ï¼–æœˆï¼’ï¼™æ—¥ã€ç¥žå¥ˆå·çœŒæ¨ªæµœå¸‚å½¹æ‰€ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆä¸Šã«ã€æ¨ªæµœå¸‚å†…ã®å°å¦æ ¡ã«å¯¾ã™ã‚‹ç„¡å·®åˆ¥å¤§é‡æ®ºå®³äºˆå‘ŠãŒè¡Œã‚ã‚ŒãŸçµæžœã€åŒæ ¡ã®æ¥å‹™ãŒå¦¨å®³ã•ã‚Œã¾ã—ãŸã€‚ å¹³æˆï¼’ï¼”å¹´ï¼—æœˆï¼’ï¼™æ—¥ã€å¤§é˜ªåºœå¤§é˜ªå¸‚ä¸å¤®åŒºå½¹æ‰€ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆä¸Šã«ã€é€šç§°ã‚ªã‚¿ãƒãƒ¼ãƒ‰ã«ãŠã‘ã‚‹ç„¡å·®åˆ¥å¤§é‡æ®ºå®³äºˆå‘ŠãŒè¡Œã‚ã‚ŒãŸçµæžœã€åŒåŒºå½¹æ‰€è·å“¡ã®æ¥å‹™ãªã©ãŒå¦¨å®³ã•ã‚Œã¾ã—ãŸã€‚ å¹³æˆï¼’4å¹´ï¼˜æœˆï¼‘æ—¥ã€èˆªç©ºä¼šç¤¾ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆä¸Šã«ã€æˆç”°å›½éš›ç©ºæ¸¯ã‚’é›¢é™¸ã—ã€ãƒ‹ãƒ¥ãƒ¼ãƒ¨ãƒ¼ã‚¯ã¸å‘ã‘èˆªè¡Œä¸ã®èˆªç©º
Cherenkov 2012/12/13
security

è¦å¯Ÿ

äº‹ä»¶

xss

csrf
ãƒªãƒ³ã‚¯
èª¤èªé€®æ•å·¡ã‚Šå°‘å¹´ã«è£œå„Ÿæ±ºå®šã€€é éš”æ“ä½œã§å®¶è£æµœæ¾æ”¯éƒ¨ - æ—¥æœ¬çµŒæ¸ˆæ–°èž
ãƒ‘ã‚½ã‚³ãƒ³é éš”æ“ä½œã§æ¨ªæµœå¸‚ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«å°å¦æ ¡è¥²æ’ƒäºˆå‘ŠãŒæ›¸ãè¾¼ã¾ã‚Œã€å°‘å¹´ï¼ˆ19ï¼‰ãŒèª¤èªé€®æ•ã•ã‚ŒãŸäº‹ä»¶ã§ã€é™å²¡å®¶è£æµœæ¾æ”¯éƒ¨ï¼ˆæ¡ã‚±è°·æ•¬ä¸‰è£åˆ¤å®˜ï¼‰ãŒå°‘å¹´ã¸ã®è£œå„Ÿã‚’æ±ºã‚ãŸã“ã¨ãŒ16æ—¥ã€é™å²¡å®¶è£ã¸ã®å–æã§åˆ†ã‹ã£ãŸã€‚é™å²¡å®¶è£ã«ã‚ˆã‚‹ã¨ã€æ±ºå®šã¯12æ—¥ä»˜ã§ã€è£œå„Ÿé‡‘é¡ã¯æ˜Žã‚‰ã‹ã«ã—ã¦ã„ãªã„ã€‚å®¶è£ã¯å°‘å¹´ã®ä¿è·è¦³å¯Ÿå‡¦åˆ†ãŒå–ã‚Šæ¶ˆã•
Cherenkov 2012/11/18
ãƒ‘ã‚½ã‚³ãƒ³é éš”æ“ä½œã§æ¨ªæµœå¸‚ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«å°å¦æ ¡è¥²æ’ƒäºˆå‘ŠãŒæ›¸ãè¾¼ã¾ã‚Œã€å°‘å¹´ï¼ˆ19ï¼‰ãŒèª¤èªé€®æ•ã•ã‚ŒãŸäº‹ä»¶ã§ã€é™å²¡å®¶è£æµœæ¾æ”¯éƒ¨ï¼ˆæ¡ã‚±è°·æ•¬ä¸‰è£åˆ¤å®˜ï¼‰ãŒå°‘å¹´ã¸ã®è£œå„Ÿã‚’æ±ºã‚ãŸã“ã¨ãŒ16æ—¥ã€é™å²¡å®¶è£ã¸ã®å–æã§

xss

csrf
ãƒªãƒ³ã‚¯
ã“ã‚Œã¯é…·ã™ãŽã‚‹!è¦å¯Ÿãƒ»æ¤œå¯Ÿã®ã€Œåçœã€ãªã‚“ã¦ã¿ã‚“ãªã‚¦ã‚½ã£ã±ã¡ã ã£ãŸã€€ãƒãƒƒãƒˆãªã‚Šã™ã¾ã—æ®ºäººäºˆå‘Šã€€èª¤èªé€®æ•ã®è¢«å®³è€…ãŒã€Œææ€–ã®å–èª¿å®¤ã€ã‚’èªžã£ãŸï¼ˆé€±åˆŠç¾ä»£ï¼‰ @gendai_biz
ã“ã‚Œã¯é…·ã™ãŽã‚‹!è¦å¯Ÿãƒ»æ¤œå¯Ÿã®ã€Œåçœã€ãªã‚“ã¦ã¿ã‚“ãªã‚¦ã‚½ã£ã±ã¡ã ã£ãŸã€€ãƒãƒƒãƒˆãªã‚Šã™ã¾ã—æ®ºäººäºˆå‘Šã€€èª¤èªé€®æ•ã®è¢«å®³è€…ãŒã€Œææ€–ã®å–èª¿å®¤ã€ã‚’èªžã£ãŸ ã€Œè¦å¯Ÿãƒ»æ¤œå¯Ÿã‚’ãƒãƒ¡ã¦ã‚„ã‚ŠãŸã‹ã£ãŸã€ãã®å‹•æ©ŸãŒ100%ã§ã™ã€---çœŸçŠ¯äººã¯çŠ¯è¡Œå£°æ˜Žã§ãã†èªžã£ãŸã€‚ãƒãƒƒãƒˆçŠ¯ç½ªã®é€²åŒ–ã«ã€è¦å¯Ÿã¯ã¾ã‚‹ã§å¯¾å¿œã§ãã¦ã„ãªã„ã€‚ãã—ã¦ã€æ‚²åŠ‡ã®å†¤ç½ªäº‹ä»¶ãŒèµ·ããŸã€‚ ä»–äººäº‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ ä¸–é–“ã‚’é¨’ãŒã›ã¦ã„ã‚‹ã€Œãƒãƒƒãƒˆãªã‚Šã™ã¾ã—æ®ºäººäºˆå‘Šäº‹ä»¶ã€ã§ã€å¤§é˜ªåºœè¦ã«èª¤èªé€®æ•ã•ã‚ŒãŸåŒ—æ‘çœŸå’²ã•ã‚“(43æ³)ã®å¼è·äººã¯ã€åŒ—æ‘ã•ã‚“ã®æ€’ã‚Šã‚’ã“ã†ä»£å¼ã™ã‚‹ã€‚ ã€ŒåŒ—æ‘ã•ã‚“ã¯ã€ä»Šå›žã®äº‹ä»¶ã«é–¢ã—ã¦é€®æ•å‰ã‹ã‚‰ä¸€è²«ã—ã¦æœæŸ»ã«å”åŠ›ã—ã€ã‹ã¤å¦èªã—ã¦ã„ã¾ã—ãŸã€‚ã«ã‚‚ã‹ã‹ã‚ã‚‰ãšã€åŒ—æ‘ã•ã‚“ã¯é€®æ•ãƒ»å‹¾ç•™ã•ã‚Œã¦ã—ã¾ã„ã€è‘—ã—ã„è‚‰ä½“çš„ã€ç²¾ç¥žçš„ã€çµŒæ¸ˆçš„æ‰“æ’ƒã‚’å—ã‘ã¾ã—ãŸã€‚æœæŸ»ã«å”åŠ›ã—ã¦ã„ãŸã®ã«å®‰æ˜“ã«èº«ä½“æ‹˜æŸã«è¸ã¿åˆ‡ã£ãŸæœæŸ»æ©Ÿé–¢(å¤§é˜ªåºœè¦)ã«å¯¾ã—ã€å¼·ã„æ†¤ã‚Šã‚’è¦šãˆã¾ã™ã€‚ ã¾ãŸã€é€®æ•ã•ã‚ŒãŸå¾Œã‚‚ã€æœæŸ»æ©Ÿé–¢ã¯åŒ—æ‘ã•ã‚“
Cherenkov 2012/11/06
security

è¦å¯Ÿ

äº‹ä»¶

å†¤ç½ª

xss

csrf
ãƒªãƒ³ã‚¯
æ£ã—ã„è„†å¼±æ€§å ±å‘Šã®ã‚ã‚Šæ–¹ - è‘‰ã£ã±æ—¥è¨˜
ã€ŒXSSã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã¨æ£ã—ã„è„†å¼±æ€§å ±å‘Šã®ã‚ã‚Šæ–¹ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼šã€ã‚’èªã‚“ã§ã€‚ IPAã‚’é€šã˜ã¦è„†å¼±æ€§ã®å ±å‘ŠãŒæ¥ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€è„†å¼±æ€§ã®ç™ºè¦‹è€…ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ã ã£ãŸã‚Šã™ã‚‹ãŸã‚ã€å¯¾ç–ãŒå–ã‚‰ã‚Œã‚‹ã¾ã§å…¬é–‹ã•ã‚Œãªã„ã“ã¨ãŒäºˆæ¸¬ã§ãã‚‹ã€‚ã¤ã¾ã‚ŠIPAã‹ã‚‰è„†å¼±æ€§ã®å ±å‘ŠãŒæ¥ã‚‹=ç·Šæ€¥ã§ã¯ãªã„ã¨ã„ã†å›³å¼ãŒæˆã‚Šç«‹ã£ã¦ã—ã¾ã†ï¼ï¼XSSã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã¨æ£ã—ã„è„†å¼±æ€§å ±å‘Šã®ã‚ã‚Šæ–¹ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼šã‚ˆã‚Šã†ã†ã‚€ã€‚å€‹äººçš„ã«ã¯ã€è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå ´åˆã«ã¯ã‚€ã—ã‚å°‚é–€å®¶ä»¥å¤–ã®ç´ äººã»ã©IPAã‚’é€šã˜ã¦å ±å‘Šã™ã‚‹ã»ã†ãŒã‚ˆã„ã¨æ€ã£ã¦ã„ã‚‹ã€‚ç†ç”±ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ é€£çµ¡å…ˆã®æŠŠæ¡ãŒå›°é›£ Webã‚µã‚¤ãƒˆã«ã‚‚ã‚ˆã‚Šã¾ã™ãŒã€è„†å¼±æ€§å ±å‘Šã®ãŸã‚ã®çª“å£ã‚’ç”¨æ„ã—ãã‚Œã‚’æ˜Žç¢ºã«ç¤ºã—ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆã¯ã‚ã¾ã‚Šå¤šãã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãã®ã‚ˆã†ãªé€£çµ¡å…ˆã‚’ã‚µã‚¤ãƒˆã”ã¨ã«é€ä¸€æŽ¢ã™ãã‚‰ã„ã§ã‚ã‚Œã°ã€IPAã«é€£çµ¡ã™ã‚‹ã»ã†ãŒæ‰‹é–“ãŒåœ§å€’çš„ã«å°‘ãªãã¦æ¸ˆã¿ã¾ã™ã€‚ã¾ãŸã€ä¸€èˆ¬çš„ãªå•ã„åˆã‚ã›çª“å£
Cherenkov 2012/09/27
IPA

XSS

security
ãƒªãƒ³ã‚¯
è¿½ã„æ‰“ã¡ã‚’ã‹ã‘ã‚‹æ§˜ãªIPAç”°ä¸æ°ã‹ã‚‰ã®è„†å¼±æ€§ä¿®æ£æŒ‡ç¤ºåˆ°æ¥ | WhiteHackerzBlog ãƒãƒƒã‚«ãƒ¼é¤Šæˆå¦é™¢ã€€å…¬å¼ãƒ–ãƒã‚°
ã¾ãŸã€æ¥ã¾ã—ãŸã€‚ æˆ‘ã€…ã®å˜åœ¨ã‚’è„…å¨ã¨æ‰ãˆã¦ã„ã‚‹äººãŒå¤šã„ã®ã‹ï¼Ÿå‰å›žå‰Šé™¤ã«ã‚ˆã£ã¦å¯¾å¿œæ¸ˆã¿ã®ãƒã‚ºã®IPAã‹ã‚‰å†åº¦è„†å¼±æ€§ãŒè¦‹ãŸã‹ã£ãŸã¨é€£çµ¡ãŒã‚ã‚Šã¾ã—ãŸã€‚å‰å›žã®ä¿®æ£åˆ†ã¯å‰Šé™¤ã¨ã„ã†å½¢ã§ã‚¹ãƒ‘ãƒƒã¨å¯¾å¿œã—ã¾ã—ãŸãŒã€ä»Šå›žã®åˆ†ã¯å½“ãƒ–ãƒã‚°ã‚‚é€£å‹•ã—ã¦ã„ã‚‹ã®ã§ãã†ã‚‚ã„ãã¾ã›ã‚“ã€‚ è¦‹ãˆãªã„ä½•ã‹ãŒå‹•ã„ã¦ã„ã‚‹ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã¨ã‚‚ã‹ãæ—©æ€¥ã«å¯¾å¿œè‡´ã—ã¾ã™ã€‚ã”è¿·æƒ‘ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒå®œã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ã—ã‹ã—ã€ã‚„ã¯ã‚Šã‚„ã£ã¦ã‚ˆã„äº‹æ‚ªã„äº‹ã¯ãƒãƒƒã‚ãƒªã•ã›ãªã„ã¨ã„ã‘ã¾ã›ã‚“ããƒ»ãƒ»ãƒ» ######################################################################### - â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”â€”- ã“ã®ãƒ¡ãƒ¼ãƒ«ã¯ã€å–æ‰±ã„ç•ªå· IPA#66901608 ã«é–¢ã™ã‚‹é€£çµ¡ã§ã™ã€‚ä»Šå¾Œ ã“ã®ä»¶ã§ IPA ã«ã”é€£çµ¡ã„ãŸã ãå ´åˆã¯ã€ãƒ¡ãƒ¼ãƒ«ã®ä»¶åã«å–æ‰±ã„ç•ªå· ã‚’åŠ ãˆã¦
Cherenkov 2012/09/26
èª¬æ˜Ž

IPA

xss

tutorial
ãƒªãƒ³ã‚¯
SecProject Web AppSec Challenge â€“ Series 1 | Soroush Dalili (@irsdl) Blog
Cherenkov 2012/05/17
ç·´ç¿’

xss

sample

tutorial
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 æ¬¡ã®ãƒšãƒ¼ã‚¸