[B! ctf] dorokeiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

dorokei id:dorokei

ctfã«é–¢ã™ã‚‹dorokeiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

S3ã®ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’ç”¨ã„ãŸæ”»æ’ƒ
ä¾‹ãˆã°ã€Content-Typeãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã®å€¤ã‚’ç´°å·¥ã—ãŸã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’å–å¾—ã•ã›ã‚‹ã“ã¨ã§XSSã‚’ç™ºç”Ÿã•ã›ãŸã‚Šã€Content-Dispositionãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’ç´°å·¥ã—ã¦RFD (Reflected File Download) ã‚’å¼•ãèµ·ã“ã—ãŸã‚Šã€ x-amz-storage-classãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’æ“ä½œã—ã¦æ„å›³ã›ã¬ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚¯ãƒ©ã‚¹ã‚’ä½¿ç”¨ã•ã›EDoS (Economical Deninal of Sustainability)ã‚’ç™ºç”Ÿã•ã›ãŸã‚Šã€ã¨ã„ã£ãŸæ”»æ’ƒãŒæˆç«‹ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ä¸ã§ã‚‚Content-Typeã‚’æ‚ªç”¨ã—ãŸXSSã¯ã€S3ã®ä»•æ§˜ã‚„ä½¿ç”¨æ–¹æ³•ã ã‘ã§ãªãã€ãƒ–ãƒ©ã‚¦ã‚¶ã®æŒ™å‹•ã«ã‚‚æ³¨æ„ã‚’æ‰•ã†å¿…è¦ãŒã‚ã‚Šã€ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã¯æ”»æ’ƒã®åŽŸç†ã¨å¯¾å‡¦ã‚’ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 9/21ã«Azaraã•ã‚“ã¨Security-JAWSã®ã‚³ãƒ©ãƒœã§ã€ã“ã®å•é¡Œã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸCTFã‚¤ãƒ™ãƒ³ãƒˆã€Œã¨ã‚ã‚‹æµ·è±¹ã¨Security-
dorokei 2025/01/02
ctf

aws

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

s3
ãƒªãƒ³ã‚¯
ã€2020å¹´ã€‘CTF Webå•é¡Œã®æ”»æ’ƒæ‰‹æ³•ã¾ã¨ã‚ - ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã—ãƒ¼ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã¶ã„
ã¯ã˜ã‚ã« å¯¾è±¡ã‚¤ãƒ™ãƒ³ãƒˆ èªã¿æ–¹ã€ä½¿ã„æ–¹ Remote Code Execution(RCE) è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæŒ‡å®šã«ã‚ˆã‚‹open_basedirã®ãƒã‚¤ãƒ‘ã‚¹ PHP-FPMã®TCPã‚½ã‚±ãƒƒãƒˆæŽ¥ç¶šã«ã‚ˆã‚‹open_basedirã¨disable_functionsã®ãƒã‚¤ãƒ‘ã‚¹ Javaã®Runtime.execã§ã‚·ã‚§ãƒ«ã‚’å®Ÿè¡Œ Cross-Site Scripting(XSS) nginxç’°å¢ƒã§HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ãŒæ“ä½œã§ãã‚‹å ´åˆã«CSPãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ç„¡åŠ¹åŒ– Googleã®ClosureLibraryã‚µãƒ‹ã‚¿ã‚¤ã‚¶ãƒ¼ã®XSSè„†å¼±æ€§ Webã®Proxyæ©Ÿèƒ½ã‚’ä»‹ã—ãŸService Workerã®ç™»éŒ² æ‹¬å¼§ã‚’ä½¿ã‚ãªã„XSS /è¨˜å·ã‚’ä½¿ç”¨ã›ãšã«é·ç§»å…ˆURLã‚’æŒ‡å®š SOME(Same Origin Method Execution)ã‚’åˆ©ç”¨ã—ã¦document.writeã‚’é †æ¬¡å®Ÿè¡Œ SQL Injection MySQ
dorokei 2021/08/10
ctf

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
CTF ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å•é¡Œã®åŸºæœ¬å•é¡Œ(1) - æ°—ã¾ãã‚Œãƒ–ãƒã‚°(æ—¥è¨˜ãƒ»æŠ€è¡“è¨˜äº‹ãƒ»ç ”ç©¶ã®ã“ã¨ãªã©)
sample.pcap sample2.pcap sample3.pcap ãƒ‘ã‚±ãƒƒãƒˆã®çµ±è¨ˆã‚’è¦‹ã‚‹ æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ãƒ—ãƒãƒˆã‚³ãƒ«ã®åˆ†æž ç‰¹å®šã®ãƒãƒ¼ãƒˆãƒ»ã‚¢ãƒ‰ãƒ¬ã‚¹ã®é€šä¿¡ã‚’åˆ†æž çµ‚ã‚ã‚Šã« CTFã®å‹‰å¼·ã‚’ã‚µãƒœã‚Šã™ãŽã¦ã„ãŸã®ã§ãã‚ãã‚å‹‰å¼·ã‚’å†é–‹ã—ã‚ˆã†ã¨æ€ã„ã¾ã™. ä»Šå›žã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å•é¡Œã«ç„¦ç‚¹ã‚’çµžã£ã¦, å¦ã‚“ã ã“ã¨ã‚’æ›¸ã„ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™. ä»¥ä¸‹ã®CTFãƒ“ã‚®ãƒŠãƒ¼ã‚ºã§ä½¿ç”¨ã•ã‚ŒãŸç·´ç¿’å•é¡Œã‚’å…ƒã«å‹‰å¼·ã‚’ã—ã¦ã„ãã¾ã™. https://onedrive.live.com/?authkey=%21ANE0wqC_trouhy0&id=5EC2715BAF0C5F2B%2110056&cid=5EC2715BAF0C5F2B CTF for ãƒ“ã‚®ãƒŠãƒ¼ã‚ºã€€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¬›ç¿’è³‡æ–™ from SECCON Beginners www.slideshare.net sample.pcap ã¾ãšã¯Wiresharkã§ãƒ‘ã‚±ãƒƒãƒˆæƒ…
dorokei 2019/03/29
ctf
ãƒªãƒ³ã‚¯
CTFåˆå¿ƒè€…ãŒè€ƒãˆã‚‹CTFå…¥é–€ - ããªã“ã‚‚ã¡ã€‚
2023/07/22 ã€Žåˆã‚ã¦ã®ãƒžãƒ«ã‚¦ã‚§ã‚¢è§£æžã€ã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚ 2022/12/25 ã€Žå®Ÿè·µãƒã‚¤ãƒŠãƒªè§£æžã€ã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚ 2021/8/22 ã€Žè©³è§£ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ³ãƒ†ã‚¹ãƒˆ ~CTFã§å¦ã¶è„†å¼±æ€§æ”»ç•¥ã®æŠ€è¡“ã€ã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚ 2021/2/20 Web Security Academyã®ç´¹ä»‹ã‚’è¿½è¨˜ã—ã¾ã—ãŸã€‚ 2021/1/1ã€€ä¸€éƒ¨ã®å‚è€ƒæ›¸ã‚’åˆ·æ–°ã„ãŸã—ã¾ã—ãŸã€‚ 2020/5/3ã€€è¨˜äº‹ã‚’æ›¸ã„ã¦1å¹´ä»¥ä¸ŠçµŒã£ãŸã®ã§ã€å¤§å¹…ã«åŠ ç†&ä¿®æ£ã„ãŸã—ã¾ã—ãŸã€‚ ã©ã†ã‚‚ã€ããªã“ã§ã™(Â´ãƒ»Ï‰ãƒ»`) å…ˆæ—¥ãƒ„ã‚¤ãƒ¼ãƒˆã—ãŸCTFåˆå¿ƒè€…ã«ã¤ã„ã¦ã®å†…å®¹ãŒã¡ã‚‡ã£ã¨ã°ã‹ã‚ŠåéŸ¿ãŒã‚ã£ãŸã“ã¨ã€ãã—ã¦ã€ç§è‡ªèº«ãŒCTFã«é–¢ã—ã¦å³ã‚‚å·¦ã‚‚åˆ†ã‹ã‚‰ãªã„çŠ¶æ…‹ã‹ã‚‰ã€ã‚ã‚‹ç¨‹åº¦çµŒé¨“ã‚’ç©ã‚“ã ã“ã¨ã«ã‚ˆã‚Šã€ç°¡å˜ãªå•é¡Œãªã‚‰è§£ã‘ã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ã€ä»Šæ—¥ã¯CTFåˆå¿ƒè€…ã‹ã‚‰è€ƒãˆãŸã€CTFåˆå¿ƒè€…å‘ã‘ã®å¦ç¿’ã®é“ç‹ã‚’æ›¸ã“ã†ã¨æ€ã„ã¾ã™(Â´ãƒ»Ï‰ãƒ»`) ã¡ãªã¿ã«ç§ã¯SECCONç‰
dorokei 2019/03/29
ctf
ãƒªãƒ³ã‚¯
1