[B! DNS rebinding] cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

cubed-l id:cubed-l

DNS rebindingã«é–¢ã™ã‚‹cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ã®ä¸€éƒ¨ç«¯æœ«ã«ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã‚’è¨±ã™å•é¡Œ
æ–‡æ›¸ç•ªå·HASHC2010052401 Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ã®ä¸€éƒ¨ç«¯æœ«ã«ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã‚’è¨±ã™å•é¡Œ HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾ å…¬é–‹æ—¥:2010å¹´5æœˆ24æ—¥ æ¦‚è¦ æ˜¨å¹´11æœˆ24æ—¥ã¥ã‘ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã¦ã€iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®JavaScriptã«ã‚ˆã‚Šã€æºå¸¯ç«¯æœ«ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸIDï¼ˆä»¥ä¸‹ã€ç«¯æœ«å›ºæœ‰IDï¼‰ã‚’åˆ©ç”¨ã—ãŸèªè¨¼æ©Ÿèƒ½ï¼ˆä»¥ä¸‹ã€ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ï¼‰ã«å¯¾ã™ã‚‹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãŒå¯èƒ½ã¨ãªã‚‹å ´åˆãŒã‚ã‚‹ã“ã¨ã‚’å ±å‘Šã—ãŸã€‚ãã®å¾Œã®èª¿æŸ»ã«ã‚ˆã‚Šã€åŒç¨®ã®å•é¡ŒãŒYahoo!ã‚±ãƒ¼ã‚¿ã‚¤ã®ãƒ–ãƒ©ã‚¦ã‚¶(é€šä¿¡äº‹æ¥è€…ã¯ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ«)ã§ã‚‚ç™ºç”Ÿã™ã‚‹ã“ã¨ã‚’ç¢ºèªã—ãŸã®ã§å ±å‘Šã™ã‚‹ã€‚å±é™ºåº¦ã®é«˜ã„æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚‹ã®ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ãŠã‚ˆã³Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤åˆ©ç”¨è€…ã«ã¯è‡³æ€¥ã®å¯¾ç–ã‚’æŽ¨å¥¨ã™ã‚‹ã€‚ èƒŒæ™¯æºå¸¯é›»è©±ã®ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨ã¯ã€ã‚±ãƒ¼ã‚¿ã‚¤ãƒ–ãƒ©ã‚¦ã‚¶ã«ç”¨æ„ã•ã‚ŒãŸç«¯æœ«å›ºæœ‰IDã‚’åˆ©ç”¨ã—ãŸç°¡æ˜“çš„ãªèªè¨¼ã§ã‚ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒIDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰
cubed-l 2010/05/24
ã‚±ãƒ¼ã‚¿ã‚¤

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DNS rebinding

javascript
ãƒªãƒ³ã‚¯
PROXYï¼ˆãƒ—ãƒã‚ã‚·ï¼‰çµŒç”±ã§ã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¨å¯¾ç–
è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ã€‚å…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2010å¹´4æœˆ6æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€PROXYçµŒç”±ã§Webã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹å ´åˆã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°å¯¾ç–ã«ã¤ã„ã¦è€ƒå¯Ÿã™ã‚‹ã€‚ PROXYï¼ˆãƒ—ãƒã‚ã‚·ï¼‰çµŒç”±ã§Webã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹å ´åˆã€DNSã«ã‚ˆã‚‹åå‰è§£æ±ºã¯ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯ãªãPROXYã«ã‚ˆã‚Šè¡Œã‚ã‚Œã‚‹ã€‚ã—ãŸãŒã£ã¦ã€ ãƒ–ãƒ©ã‚¦ã‚¶å´ã§ã¯DNS Pinningã§ããªã„ã®ã§ã€PROXYå´ã§ã®å¯¾ç–ãŒé‡è¦ã«ãªã‚‹ã€‚ åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹PROXYã‚µãƒ¼ãƒãƒ¼ã§ã‚ã‚‹squidã®å ´åˆã€DNS Pinningã«ç›¸å½“ã™ã‚‹ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã¯ã€negative_dns_ttlã§ã‚ã‚Šã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå€¤ã¯1åˆ†é–“ã§ã‚ã‚‹ã€‚ã—ãŸãŒã£ã¦ã€æœ€åˆ
cubed-l 2010/04/07
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DNS rebinding
ãƒªãƒ³ã‚¯
Javaã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¯JREå´ã§å¯¾ç–æ¸ˆã¿ã ã£ãŸ - å¾³ä¸¸æµ©ã®æ—¥è¨˜
Black Hat Japan 2007ã«ãŠã‘ã‚‹é‡‘åºŠæ°ã®ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã‚„é‡‘åºŠæœ¬ã§ã€Javaã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã«å¯¾ã™ã‚‹DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã®æ‰‹æ³•ãŒèª¬æ˜Žã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã“ã—ã°ã‚‰ãã€ãã®è¿½è©¦ã‚’è¡Œã£ã¦ã„ãŸã€‚çµè«–ã¨ã—ã¦ã¯ã€é‡‘åºŠæ°ã®æ–¹æ³•ã«ã¯JREå´ã§å¯¾ç–ãŒã¨ã‚‰ã‚Œã¦ã„ãŸã®ã§å ±å‘Šã™ã‚‹ã€‚ é‡‘åºŠæ°ãŒå ±å‘Šã—ã¦ã„ã‚‹DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã®æ‰‹æ³•ã¨ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ã ï¼ˆé‡‘åºŠæœ¬ã«èª¬æ˜Žã•ã‚Œã¦ã„ã‚‹æ–¹æ³•ï¼‰ã€‚ è¢«å®³è€…ã®ãƒ¦ãƒ¼ã‚¶ã«ãƒ¯ãƒŠã®ãƒšãƒ¼ã‚¸ã‚’PROXYçµŒç”±ã§é–²è¦§ã•ã›ã‚‹ ãƒ¯ãƒŠã®ãƒ‰ãƒ¡ã‚¤ãƒ³(FQDN)ã«å¯¾ã™ã‚‹IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å¤‰æ›´ã™ã‚‹ ãƒ¯ãƒŠãƒšãƒ¼ã‚¸ä¸Šã§æ•°ç§’ï½žæ•°åç§’ã®ã¡ã«JavaScriptã«ã‚ˆã‚ŠJavaã‚¢ãƒ—ãƒ¬ãƒƒãƒˆç”¨ã®HTMLã‚’ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã™ã‚‹ JREãŒã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã‚’PROXYçµŒç”±ã§*1ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã™ã‚‹ ã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰æ™‚ç‚¹ã§æ—¢ã«DNSãƒ¬ã‚³ãƒ¼ãƒ‰ã¯æ›¸ãæ›ã‚ã£ã¦ã„ã‚‹ãŒã€PROXYãŒDNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã—ã¦ã„ã‚‹ãŸã‚ã€ã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã¯æ£å¸¸ã«ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œ
cubed-l 2010/04/05
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DNS rebinding
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

DNS rebindingã«é–¢ã™ã‚‹cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

DNS rebindingã«é–¢ã™ã‚‹cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ã®ä¸€éƒ¨ç«¯æœ«ã«ã€Œã‹ã‚“ãŸã‚“ãƒ­ã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã‚’è¨±ã™å•é¡Œ

PROXYï¼ˆãƒ—ãƒ­ã‚­ã‚·ï¼‰çµŒç”±ã§ã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¨å¯¾ç­–

Javaã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¯JREå´ã§å¯¾ç­–æ¸ˆã¿ã ã£ãŸ - å¾³ä¸¸æµ©ã®æ—¥è¨˜

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

DNS rebindingã«é–¢ã™ã‚‹cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ã®ä¸€éƒ¨ç«¯æœ«ã«ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãªã‚Šã™ã¾ã—ã‚’è¨±ã™å•é¡Œ

PROXYï¼ˆãƒ—ãƒã‚ã‚·ï¼‰çµŒç”±ã§ã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¨å¯¾ç–

Javaã‚¢ãƒ—ãƒ¬ãƒƒãƒˆã®DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¯JREå´ã§å¯¾ç–æ¸ˆã¿ã ã£ãŸ - å¾³ä¸¸æµ©ã®æ—¥è¨˜

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹