[B! web-application] cknbstrã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

cknbstr id:cknbstr

web-applicationã«é–¢ã™ã‚‹cknbstrã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ãƒ†ã‚¹ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€Œw3af 1.0ã€ãƒªãƒªãƒ¼ã‚¹ - SourceForge.JP Magazine : ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®è©±é¡Œæº€è¼‰
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã™ã‚‹ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€ŒWeb Application Attack and Audit Frameworkï¼ˆw3afï¼‰ 1.0ã€ãŒå…¬é–‹ã•ã‚ŒãŸã€‚SourceForgeã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã‚ˆã‚Šãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãã‚‹ã€‚ w3afã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸã‚Šã€å®Ÿéš›ã«è„†å¼±æ€§ã«å¯¾ã™ã‚‹æ”»æ’ƒã‚’è¡Œã†ãŸã‚ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€‚é–‹ç™ºè€…ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¤œæŸ»ã‚„ãƒ†ã‚¹ãƒˆã«åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚’æƒ³å®šã—ã¦ã„ã‚‹ã€‚ãƒ—ãƒã‚°ãƒ©ãƒ ã¯Pythonã§æ›¸ã‹ã‚Œã¦ãŠã‚Šã€GPLã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚ã‚³ã‚¢ã®ã»ã‹ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXXSï¼‰ãªã©ã‚’ãƒã‚§ãƒƒã‚¯ã§ãã‚‹130ç¨®ä»¥ä¸Šã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã‚’æŒã¤ã€‚ åˆã®æ£å¼ç‰ˆã§ã¯ã€ã‚³ãƒ¼ãƒ‰ã®å®‰å®šæ€§ã€è‡ªå‹•ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãªã©ã®ç‰¹å¾´ã‚’æŒã¤ã€‚ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã‚’æœ€å°é™ã«æŠ‘ãˆã€å¸¸ã«æœ€æ–°æ©Ÿèƒ½ã‚’ä½¿ãˆã‚‹ã¨ã„ã†ã€‚ æ–°æ©Ÿèƒ½ã¨ã—ã¦ã¯ã€PHPã®é™çš„
cknbstr 2011/09/19
web-application

security

tool
ãƒªãƒ³ã‚¯
Pythonã§Webã‚¢ãƒ—ãƒªé–‹ç™ºå…¥é–€ã®ã‚¹ã‚¹ãƒ¡ Flask/MongoDB - mizchi log
Twit Blogin! http://twit blogin.com/ ã¨ã‹ä½œã£ãŸã“ã¨ã ã—ã€ãã“ãã“é–‹ç™ºç’°å¢ƒæ•´ã£ã¦ã€ä»Šãªã‚‰æ€ã„ã¤ãé™ã‚Šã®ã‚µãƒ¼ãƒ“ã‚¹ã¯ã•ã£ãã‚Šå®Ÿè£…ã§ããã†ã ã£ãŸã®ã§Pythonåˆå¿ƒè€…å‘ã‘ã«æ›¸ã„ã¦ãŠãã€‚ å°‘ã—ã§ã‚‚Pythonãƒ¦ãƒ¼ã‚¶ãŒå¢—ãˆã‚Œã°å¹¸ã„ã€‚ å¯¾è±¡ã¯ Python ã®åŸºæœ¬çš„ãªæ§‹æ–‡ç¨‹åº¦ã¯ã‚ã‹ã‚‹ã‘ã©ã€å…·ä½“çš„ã«ä½•ã‹ã‚‰æ‰‹ã‚’ã¤ã‘ã¦ã„ã„ã‹ã‚ã‹ã‚‰ãªã„äºº ç›®æ¬¡ Apache/WSGI/Mongo DBã®ç’°å¢ƒæ§‹ç¯‰ flask [ Sinatraé¢¨ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯] pymongo [ Mongo DBãƒ©ãƒƒãƒ‘ãƒ¼ ] werkzeug [Web Application ãƒ‡ãƒãƒƒã‚¬] jinja2 [ HTMLãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆãƒ“ãƒ«ãƒ€ãƒ¼ ] pyquery [ jQueryé¢¨HTMLãƒ‘ãƒ¼ã‚µ ] nose [ TDD ] ç´°ã‹ã„ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ä½¿ã„æ–¹ã¨ã‹Python æœ¬ä½“ã®è¨€èªžä»•æ§˜ã¨ã‹ã¯é©å½“ã«ããã£ã¦
cknbstr 2011/08/31
python

web-application

mongodb
ãƒªãƒ³ã‚¯
ã‚‚ã—ã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ã€ã®è‘—è€…ãŒå¾³ä¸¸æµ©ã®ã€Žå®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã‚’èªã‚“ã ã‚‰ - ockeghem's blog
ãŸã«ãã¡ã¾ã“ã¨ã•ã‚“ã®æ›¸ã‹ã‚ŒãŸã€Žã‚ˆãã‚ã‹ã‚‹PHPã®æ•™ç§‘æ›¸ï¼ˆä»¥ä¸‹ã€ã€Œã‚ˆãã‚ã‹ã‚‹ã€ï¼‰ã€ã‚’è³¼å…¥ã—ã¦ãƒ‘ãƒ©ãƒ‘ãƒ©ã¨è¦‹ã¦ã„ãŸã‚‰ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡ŒãŒã‹ãªã‚Šã‚ã‚‹ã“ã¨ã«æ°—ãŒã¤ãã¾ã—ãŸã€‚ãã“ã§ã€æ‹™è‘—ã€Œä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ï¼ˆä»¥ä¸‹ã€å¾³ä¸¸æœ¬ï¼‰ã€ã®ç« ãƒ»ç¯€æ¯Žã«ç…§ã‚‰ã—åˆã‚ã›ã¦ã€ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®è„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¾ã™ã€‚ä¸»ã«ã€å¾³ä¸¸æœ¬ã®4ç« ã¨5ç« ã‚’å‚ç…§ã—ã¾ã™ã€‚ 4.2 å…¥åŠ›å‡¦ç†ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®ã‚µãƒ³ãƒ—ãƒ«ã‚„è§£èª¬ã§ã¯ã€å…¥åŠ›å€¤æ¤œè¨¼ã¯ã»ã¨ã‚“ã©ã—ã¦ã„ã¾ã›ã‚“ã€‚ã—ã‹ã—ã€å…¥åŠ›å€¤æ¤œè¨¼ã‚’ã—ã¦ã„ãªã„ã‹ã‚‰ã¨ã„ã£ã¦å³è„†å¼±ã‹ã¨ã„ã†ã¨ãã†ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚å¾³ä¸¸æœ¬ã§ã‚‚å¼·èª¿ã—ã¦ã„ã‚‹ã‚ˆã†ã«ã€å…¥åŠ›å€¤æ¤œè¨¼ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¦ä»¶ï¼ˆä»•æ§˜ï¼‰ã«æ²¿ã£ã¦ã„ã‚‹ã“ã¨ã‚’ç¢ºèªã™ã‚‹ã‚‚ã®ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒç›®çš„ã§ã¯ãªã„ã‹ã‚‰ã§ã™ã€‚ ã€Œã‚ˆãã‚ã‹ã‚‹ã€ã®ä¸ã§ã€ç§ãŒè¦‹ãŸç¯„å›²ã§å”¯ä¸€ã®å…¥åŠ›å€¤æ¤œè¨¼ã¯ã€éƒµä¾¿ç•ªå·ã®ãƒã‚§ãƒƒã‚¯ã‚’ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ä»¥ä¸‹ã«å¼•ç”¨ã—ã¾ã™ï¼ˆã€Œã‚ˆãã‚
cknbstr 2011/08/24
security

web-application
ãƒªãƒ³ã‚¯
Node ã«ãŠã‘ã‚‹ã‚¹ã‚±ãƒ¼ãƒ«ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£è€ƒå¯Ÿ(SSP ç·¨) - Block Rockinâ€™ Codes
ï¼Šæ¯æŠœããŒã¦ã‚‰æ›¸ã„ã¦ã„ãŸã‚‰é•·ããªã£ã¦ã—ã¾ã£ãŸã€‚ã€‚ ï¼Šå½“ãŸã‚Šå‰ã§ã™ãŒã€ã‚ãã¾ã§å€‹äººçš„ãªè€ƒãˆã§ã™ã€‚ ï¼Šã“ã‚ã“ã‚å¤‰ã‚ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ Node ã®åŸºæœ¬çš„ãªçŸ¥è˜ã«ã¤ã„ã¦ã®è©±ã¯è‰²ã€…ãªã¨ã“ã‚ã§å‡ºå§‹ã‚ã¦ã€ ã˜ã‚ƒã‚ã“ãƒ¼ã„ã†å ´åˆã¯ã©ã†ã™ã‚‹ã®ï¼Ÿ ã¿ãŸã„ãªè©±ãŒå‡ºå§‹ã‚ãŸã‚Šã‚‚ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ããŸæ°—ã‚‚ã—ã¾ã™ã€‚ æ£ç›´ã€è‡ªåˆ†ã«ã‚‚ã¾ã åˆ†ã‹ã‚‰ãªã„ã“ã¨ã ã‚‰ã‘ã§ã™ã€‚ ãã‚‚ãã‚‚è‡ªåˆ†ã¯ãã“ã¾ã§ã‚¹ã‚±ãƒ¼ãƒ«ã«é–¢ã™ã‚‹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚„ã€OS ã®ä½Žãƒ¬ã‚¤ãƒ¤ã«ç²¾é€šã—ã¦ã„ã‚‹ã¨ã¯è¨€ãˆãªã„ã®ã§ã€ ã“ã‚Œã‚’æœŸã« Node ã¯ä½•ãŒå¾—æ„ã§ä½•ãŒä¸å¾—æ„ãªã®ã‹ã€ã‚¹ã‚±ãƒ¼ãƒ«ã•ã›ã‚‹ãŸã‚ã«è€ƒãˆãªã„ã¨ã„ã‘ãªã„ã“ã¨ã€ãªã©ã‚’è‡ªåˆ†ãªã‚Šã«ã¾ã¨ã‚ã¦ã€ ã¤ã„ã§ã«ã€ã“ã‚Œã¾ã§å¦ã‚“ã§ããŸå‘¨è¾ºã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã«é–¢ã™ã‚‹çŸ¥è˜ã‚‚æ··ãœã¦ã€è‰²ã€…æ€è€ƒå®Ÿé¨“ã‚’ã—ã¦ã¿ãŸã„ã¨æ€ã£ã¦ã„ã¾ã™ã€‚ ã ã‹ã‚‰ WebSocket ã«ãƒ–ãƒ©ã‚¦ã‚¶ãŒå¯¾å¿œã—ã¦ãªã„ã¨ã‹ã€ãã‚“ãªè¤‡é›‘ãªã‚µãƒ¼ãƒç¾¤æœ¬å½“ã«é‹ç”¨ã§ãã‚‹ã®ã‹ã¨ã‹ã€ ãã†ã„ã†è©±ã¯ç„¡ã—ã«ã€
cknbstr 2011/08/04
node.js

web-application

architecture
ãƒªãƒ³ã‚¯
Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹æ”»æ’ƒã¨é˜²å¾¡ â€” Gruyere - 1.1
2010-06-13: Codelab ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®åå‰ã‚’ Gruyere (æ—§ Jarlsberg) ã«å¤‰æ›´ã€‚ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã‚’æ›´æ–°ã—ã¦ãã ã•ã„ã€‚ ãƒãƒƒã‚«ãƒ¼ã‚’æ‰“ã¡è² ã‹ã—ãŸã„ã§ã™ã‹ ?Â¶ ãƒãƒƒã‚«ãƒ¼ãŒã©ã®ã‚ˆã†ã«ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã‚‹ã®ã‹ã‚’å¦ã¶ ! ãƒãƒƒã‚«ãƒ¼ãŒã©ã®ã‚ˆã†ã« Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æ”»æ’ƒã™ã‚‹ã®ã‹ã‚’å¦ã¶ ! ãã‚Œã‚’ã©ã®ã‚ˆã†ã«é˜²ãã‹ã‚’å¦ã¶ ! ã“ã® codelab ã§ã¯ã€ã©ã®ã‚ˆã†ã«ã—ã¦ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ãŒæ”»æ’ƒã•ã‚Œã‚‹ã‹ã€ ã¾ãŸãã®æ”»æ’ƒã‚’ã©ã®ã‚ˆã†ã«é˜²å¾¡ã™ã‚‹ã‹ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å¦ç¿’ã™ã‚‹ãŸã‚ã®æœ€å–„ã®é“ã¯å®Ÿéš›ã«ã‚„ã£ã¦ã¿ã‚‹ã“ã¨ã§ã‚ã‚Šã€ å®Ÿã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã—ã¦ä¾µå…¥ã‚’ãƒ†ã‚¹ãƒˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å…·ä½“çš„ã«ã¯ã€ä»¥ä¸‹ã®å†…å®¹ã‚’å¦ç¿’ã—ã¾ã™: ã©ã®ã‚ˆã†ã«ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã® ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (XSS) ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªãƒ¼ (XSRF
cknbstr 2011/07/14
security

web-application
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
cknbstr 2011/07/13
skipfish

security

web-application
ãƒªãƒ³ã‚¯
1