[B! XSS] drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

drumsco id:drumsco

XSSã«é–¢ã™ã‚‹drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (21)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

X-Content-Type-Options: nosniff ã¤ã‹ã‚ãªã„ã‚„ã¤ã¯æ»ãã°ã„ã„ã®ã«! - è‘‰ã£ã±æ—¥è¨˜
2011-01-06: IE8ã¨ã„ã†ã“ã¨ã‚’è¿½è¨˜ & ã¡ã‚‡ã£ã¨é–“é•ã„ã‚’ä¿®æ£ã€‚ã‚ã‘ã¾ã—ã¦ãŠã‚ã§ã¨ã†ã”ã–ã„ã¾ã™ã€‚ å¹´æ˜Žã‘æ—©ã€…ã§ã™ãŒã€Internet Explorerã®è©±é¡Œã§ã™ã€‚IEã¯ã”å˜ã˜ã®é€šã‚Šã€Content-Type ã ã‘ã§ãªãã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å†…å®¹ãªã©ã‚‚ sniff ã™ã‚‹ã“ã¨ã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ã‚’æ±ºå®šã—ã¦ã„ã‚‹ãŸã‚ã€ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã‚„ãƒ†ã‚ã‚¹ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ã‚’HTMLã¨åˆ¤å®šã—ã¦ã—ã¾ã„ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãŒç™ºç”Ÿã™ã‚‹ã“ã¨ãŒæ˜”ã‹ã‚‰ãŸã³ãŸã³å ±å‘Šã•ã‚Œã¦ã„ã¾ã—ãŸ*1ã€‚ç¾åœ¨ã¯å¹¾åˆ†ãƒžã‚·ã«ãªã£ãŸã¨ã¯ã„ãˆã€IEã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ã®åˆ¤å®šã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯éžå¸¸ã«é›£è§£ã§ã‚ã‚Šã€ç¾åœ¨ã§ã‚‚çŠ¶æ³ã«ã‚ˆã£ã¦ã¯Webã‚µã‚¤ãƒˆé‹å–¶è€…ã®ã¾ã£ãŸãæ„å›³ã—ã¦ã„ãªã„ã‹ãŸã¡ã§ã®XSSãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã£ãŸã‚Šã—ã¾ã™ã€‚ãã†ã„ã†ã‚ã‘ã§ã€IEãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ sniff ã—ã¦HTMLä»¥å¤–ã®ã‚‚ã®ã‚’HTMLæ‰±ã„ã—ã¦ã—ã¾ã†ã“ã¨ã‚’é˜²ããŸã‚ã«ã€å‹•çš„ã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆã«
drumsco 2011/01/13
IE8ä»¥é™ã«é™ã‚‹ã€‚

http

security

XSS

IE8
ãƒªãƒ³ã‚¯
NZKoz's rails_xss at master - GitHub
This Plugin is for rails 2.3.5, it will not work with later versions. For all later versions you should be using the rails/rails_xss version. This plugin replaces the default ERB template handlers with erubis, and switches the behaviour to escape by default rather than requiring you to escape. This is consistent with the behaviour in Rails 3.0. Strings now have a notion of "html safe", which is fa
drumsco 2010/09/03
rails2.3.5ä»¥é™ã§åˆ©ç”¨å¯èƒ½ã€‚rails3.0ã§ã¯æ¨™æº–ã«ãªã‚‹ã¿ãŸã„ã€‚

Ruby

Rails

plugin

XSS

security
ãƒªãƒ³ã‚¯
ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : XSSã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®ã‚³ãƒ¡ãƒ³ãƒˆ
XSSã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®ã‚³ãƒ¡ãƒ³ãƒˆ 2010å¹´06æœˆ23æ—¥17:05 ãƒ„ã‚¤ãƒ¼ãƒˆ masanori_katayama ã‚ªãƒ•ã‚£ã‚·ãƒ£ãƒ«ã‚³ãƒ¡ãƒ³ãƒˆÂ byï¼šç‰‡å±± æ˜Œæ†² ã‚µã‚¤ãƒˆé‹å–¶è€…ã®è¦–ç‚¹ã§XSSã®è„†å¼±æ€§ã«ã¤ã„ã¦ã‚³ãƒ¡ãƒ³ãƒˆã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ã“ã®livedoorãƒ–ãƒã‚°ã ã‘ã§ãªãã€ã‚¨ã‚ã‚µã‚¤ãƒˆã§ã‚‚XSSã®è„†å¼±æ€§ã¯éŽåŽ»ã«ã‚ã‚Šã¾ã—ãŸã€‚ã§ã¯ã€ã©ã®ã‚ˆã†ã«ã—ã¦XSSã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ã¦ã„ã‚‹ã‹ï¼Ÿã¨è¨€ã„ã¾ã™ã¨ã€è„†å¼±æ€§ã®ãƒ†ã‚¹ãƒˆã‚’å¤–éƒ¨æ©Ÿé–¢ã«ãŠé¡˜ã„ã—ã¦ç™ºè¦‹ã—ã¦ã„ã¾ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€ç¤¾å†…ã§ã‚‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«å¯¾ã™ã‚‹çŸ¥è¦‹ãŒã‚ã‚‹äººæãŒãŠã‚Šã€è„†å¼±æ€§ã«ã¤ã„ã¦ã¯ãƒ†ã‚¹ãƒˆã—ã¦ã„ã¾ã™ãŒã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒã§ãªã‘ã‚Œã°ç™ºè¦‹ã§ããªã„è„†å¼±æ€§ãŒã‚ã‚‹ã¨ã„ã†äº‹ã§ã™ã€‚ã“ã®è„†å¼±æ€§ã®ç™ºè¦‹å¾Œã®å¯¾å¿œã¯ã€ã‚‚ã¡ã‚ã‚“é–‹ç™ºã—ãŸã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒå¯¾å¿œã—ã¦ãŠã‚Šã€åŒã˜ã‚ˆã†ãªå•é¡ŒãŒ2åº¦ã¨ç™ºç”Ÿã—ãªã„ã‚ˆã†ã«ã—ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã€é‡è¦ãªè¦ç´ ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™ã€‚ ãƒ»WEBã‚µã‚¤ãƒˆã®é–‹ç™ºè€…ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
drumsco 2010/06/25
security

XSS
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
drumsco 2010/03/19
security

OWASP

AntiSamy

XSS

dot.net

Java
ãƒªãƒ³ã‚¯
Category:OWASP AntiSamy Project - OWASP
This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests. To view the new OWASP Foundation website, please visit https://owasp.org OWASP AntiSamy is a library for HTML and CSS encoding. Introduction AntiSamy was originally authored by Arshan Dabirsiaghi (arshan.dabirsiaghi [at the] gmail.com) of Contrast Security with help from Jason Li (jason.li [at the] owasp.o
drumsco 2010/03/19
security

OWASP

XSS

AntiSamy
ãƒªãƒ³ã‚¯
AntiSamy 1.0ãŒãƒªãƒªãƒ¼ã‚¹ - Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æœ‰å®³ãªHTMLã¨CSSã‹ã‚‰é˜²å¾¡
Spring Bootã«ã‚ˆã‚‹APIãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰æ§‹ç¯‰å®Ÿè·µã‚¬ã‚¤ãƒ‰ ç¬¬2ç‰ˆ ä½•åƒäººã‚‚ã®é–‹ç™ºè€…ãŒã€InfoQã®ãƒŸãƒ‹ãƒ–ãƒƒã‚¯ã€ŒPractical Guide to Building an API Back End with Spring Bootã€ã‹ã‚‰ã€Spring Bootã‚’ä½¿ã£ãŸREST APIæ§‹ç¯‰ã®åŸºç¤Žã‚’å¦ã‚“ã ã€‚ã“ã®æœ¬ã§ã¯ã€å‡ºç‰ˆæ™‚ã«æ–°ã—ããƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚ã‚‹ Spring Boot 2 ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€Spring Boot3ãŒæœ€è¿‘ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã€é‡è¦ãªå¤‰...
drumsco 2010/03/19
security

AntiSamy

XSS

OWASP
ãƒªãƒ³ã‚¯
ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜ - XSSå¯¾ç–:ã©ã®æ–‡å—ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¹ããªã®ã‹ ï¼ ã‚³ãƒ¡ãƒ³ãƒˆ#1
ITproã®é€£è¼‰ä¸ã«ã€id:hasegawayosukeã•ã‚“ã‹ã‚‰ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¡ãƒ³ãƒˆã‚’ã„ãŸã ã„ã¦ã„ã¾ã—ãŸã€‚ å¯¾ç–é…ã‚‰ã›ã‚‹HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®ã€Œç¥žè©±ã€ï¼šITpro - è‘‰ã£ã±æ—¥è¨˜ å…¨ã¦ã®æ–‡å—ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ã‚ˆã†ãªã©ã¨éžç¾å®Ÿçš„ãªã“ã¨ã¯è¨€ã‚ãªã„ã‘ã‚Œã©(ã¨ã¯ã„ãˆMicrosoft Anti-Cross Site Scripting Libraryã®ã‚ˆã†ã«ã»ã¨ã‚“ã©å…¨ã¦ã®æ–‡å—ã‚’å®Ÿä½“å‚ç…§ã«ç½®ãæ›ãˆã‚‹ã‚‚ã®ã‚‚ã‚ã‚‹ã®ã§ã€ã‚ãªãŒã¡éžç¾å®Ÿçš„ã¨ã‚‚è¨€ãˆãªã„ã®ã‹ã‚‚çŸ¥ã‚Œãªã„)ã€ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å¯¾è±¡ã‚’ã€Œ'ã€ã€Œ"ã€ã€Œ<ã€ã€Œ>ã€ã€Œ&ã€ã®5æ–‡å—ã«é™å®šã—ã¦ã„ã‚‹ã®ã¯ä½•ã‹ã“ã®è¨˜äº‹ã«æ›¸ã‹ã‚Œã¦ã„ãªã„ç†ç”±ãŒã‚ã‚‹ã¯ãšã ã¨æ€ã£ãŸã‹ã‚‰ã§ã™ã€‚ ã¯ã¦ã¶ã®æ–¹ã¯è¦‹ã¦ã„ã¾ã—ãŸãŒã€æ—¥è¨˜ã®æ–¹ã‚’è¦‹è½ã¨ã—ã¦ã„ã¾ã—ã¦ã€ãŠè¿”äº‹ãŒé…ã‚Œã¾ã—ãŸ(_ _)ã€‚ ãªãœã€ã€Œ<ã€ã€ã€Œ>ã€ã€ã€Œ&ã€ã€ã€Œ"ã€ã€ã€Œ'ã€ã®5ç¨®é¡žã®æ–‡å—ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã®ã‹ã«ã¤ã„ã¦ã¯ã€è‰²ã€…è€ƒãˆã‚‹ã¨ã“ã‚ãŒã‚ã‚Šã¾ã™ã€‚
drumsco 2010/03/19
æ–‡å—ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã«ã¤ã„ã¦ã€çµŒç·¯ã‚„HTMLä»•æ§˜ã€IPAã®è³‡æ–™ã«è¨€åŠã—ã¦å†è€ƒã—ã¦ã„ã‚‹ã€‚

security

HTML

JavaScript

XSS
ãƒªãƒ³ã‚¯
XSSå¯¾ç–:JavaScriptã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—(ãã®3) - ockeghem's blog
5/14ã®æ—¥è¨˜XSSå¯¾ç–:JavaScriptã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—(ãã®2) - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜ã«å¯¾ã—ã¦ã€id:hasegawayosukeã•ã‚“ã‹ã‚‰ã‚³ãƒ¡ãƒ³ãƒˆã‚’é ‚æˆ´ã—ãŸã€‚ãã®å†…å®¹ã¯ã€JavaScriptã«å¯¾å¿œã—ã¦ã„ãªã„ãƒ–ãƒ©ã‚¦ã‚¶ã®å ´åˆã«å¯¾ã™ã‚‹è€ƒæ…®ãŒæŠœã‘ã¦ã„ã‚‹ã¨ã„ã†è¶£æ—¨ã ã¨ç†è§£ã—ãŸã€‚ å…ƒã®æ—¥è¨˜ã«ã‚‚æ›¸ã„ãŸã‚ˆã†ã«ã€ç§è‡ªèº«ã¯JavaScriptã®å‹•çš„ç”Ÿæˆã¯(ç‰¹æ®Šãªå ´åˆã‚’é™¤ã„ã¦)å¥½ã¾ã—ããªã„ã¨è€ƒãˆã¦ã„ã‚‹ãŒã€å§‹ã‚ãŸä»¥ä¸Šã¯æœ€å¾Œã¾ã§æ¤œè¨Žã—ã‚ˆã†ã¨æ€ã†ã€‚ è§£æ±ºã™ã¹ãèª²é¡Œã®æ•´ç† ã¾ãšã€è§£æ±ºã™ã¹ãèª²é¡Œã‚’æ•´ç†ã—ã‚ˆã†ã€‚å…ƒã®æ—¥è¨˜ã§ã¯ã€JavaScriptã‚’å‹•çš„ç”Ÿæˆã™ã‚‹(ãŸã ã—ã€æ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«å†…ã®ãƒ‡ãƒ¼ã‚¿ã«é™ã‚‹)å ´åˆã®XSSå¯¾ç–ã¨ã—ã¦äºŒæ®µéšŽã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒå¿…è¦ã§ã‚ã‚‹ã“ã¨ã‚’èª¬æ˜Žã—ãŸã€‚å…·ä½“çš„ã«ã¯ã€(1)JavaScriptæ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¨ã—ã¦ã€ã€Œ"ã€ã€ã€Œ'ã€ã€ã€Œ\ã€ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®å®Ÿæ–½ã€(2)HTMLã¨ã—ã¦ã®ã‚¨ã‚¹
drumsco 2010/03/19
javascript æ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã«ã€ ">" -> "\x3e" ã‚’è¿½åŠ ã™ã‚‹ã€‚

security

JavaScript

XSS
ãƒªãƒ³ã‚¯
AJAX and Mashup Security
drumsco 2010/03/19
security

Ajax

XSS

JavaScript
ãƒªãƒ³ã‚¯
Oracle.com Outage
drumsco 2010/03/19
eval(), javascript, script ã‚’å‰Šé™¤ã™ã‚‹ã“ã¨ã€‚

security

XSS

JavaScript

JSON
ãƒªãƒ³ã‚¯
GoogleãŒä½œã£ãŸWebã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒ„ãƒ¼ãƒ«ã€Œratproxyã€
2008å¹´7æœˆï¼Œç±³ã‚°ãƒ¼ã‚°ãƒ«ã¯åŒç¤¾ãŒé–‹ç™ºã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãœã„å¼±æ€§æ¤œå‡ºãƒ„ãƒ¼ãƒ«ã€Œratproxyã€ã‚’ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã¨ã—ã¦å…¬é–‹ã—ãŸã€‚æ¤œç´¢ã‚µã‚¤ãƒˆæœ€å¤§æ‰‹ã®åŒç¤¾ã¯ï¼Œæ”»æ’ƒã‚’å—ã‘ã‚‹ã“ã¨ã‚‚å¤šã„ã€‚Google Appsã‚’ã¯ã˜ã‚ï¼Œä»£è¡¨çš„ãªWeb 2.0ç³»ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã®å…ˆé§†è€…ã§ã‚‚ã‚ã‚‹åŒç¤¾ãŒé–‹ç™ºã—ãŸãƒ„ãƒ¼ãƒ«ã®å¨åŠ›ã¯ã©ã‚Œã»ã©ã®ã‚‚ã®ã‹ã€‚ãœã„å¼±æ€§æ¤œæŸ»ã®å°‚é–€å®¶ãŒæŽ¢ã£ãŸã€‚ â€œå—å‹•çš„â€ãªæ¤œå‡ºãƒ„ãƒ¼ãƒ«ï¼ŒWeb 2.0ç³»ã®ãœã„å¼±æ€§ã«å¼·ã¿ æ¤œå‡ºã§ãã‚‹ãœã„å¼±æ€§ã¯42ç¨®é¡žï¼ŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¯è‹¦æ‰‹ Content-Typeãªã©ã§XSSã®å±é™ºåº¦ã‚’ãƒã‚§ãƒƒã‚¯ JavaScriptã‚¹ã‚¯ãƒªãƒ—ãƒˆã«æ½œã‚€XSSã®ãœã„å¼±æ€§ã‚‚æ¤œå‡º JavaScript Hijack/JSON Hijackã®ãœã„å¼±æ€§
drumsco 2010/03/19
ratproxy

security

XSS

Google

tool

proxy
ãƒªãƒ³ã‚¯
â€œå—å‹•çš„â€ãªæ¤œå‡ºãƒ„ãƒ¼ãƒ«ï¼ŒWeb 2.0ç³»ã®ãœã„å¼±æ€§ã«å¼·ã¿
ã“ã®æ•°å¹´æ¥ï¼ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãœã„å¼±æ€§ã‚’ç‹™ã£ãŸæ”»æ’ƒã«ã‚ˆã‚Šï¼Œå€‹äººæƒ…å ±ãŒæ¼æ´©ã—ãŸã‚Šï¼ŒWebãƒšãƒ¼ã‚¸ãŒæ”¹ã–ã‚“ã•ã‚Œã‚‹è¢«å®³ãŒãŸã³ãŸã³ç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ã“ã®ã‚ˆã†ãªè¢«å®³ã«éã‚ãªã„ã‚ˆã†ã«ï¼ŒWebã‚µã‚¤ãƒˆé–‹ç™ºè€…ã«ã¯ä»Šï¼Œã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã™ã‚‹ãŸã‚ã«ä¸€ç•ªé‡è¦ãªã“ã¨ã¯ï¼Œãã‚‚ãã‚‚ã‚»ã‚ãƒ¥ã‚¢ã«è¨è¨ˆãƒ»ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã™ã‚‹ã“ã¨ã§ã™ã€‚ãã®ãŸã‚ã«ã¯é–‹ç™ºè€…ã®æ•™è‚²ã‚„é–‹ç™ºã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ãªã©ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚åŒæ™‚ã«ï¼Œé–‹ç™ºè€…ãŒä½œã£ãŸã‚‚ã®ãŒæœ¬å½“ã«ã‚»ã‚ãƒ¥ã‚¢ã§ã‚ã‚‹ã‹ã‚’ç¢ºèªã™ã‚‹ãƒ—ãƒã‚»ã‚¹ãŒå¿…è¦ã§ã™ã€‚ç¢ºèªã®å¯¾è±¡ã¨ãªã‚‹ã®ã¯ï¼Œè¨è¨ˆæ›¸ï¼Œã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ï¼Œå®Ÿéš›ã«ç¨¼åƒã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãªã©ã§ã™ãŒï¼Œä¸€èˆ¬ã«Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦åºƒãè¡Œãªã‚ã‚Œã¦ã„ã‚‹ã®ã¯ï¼Œå®Ÿéš›ã«ç¨¼åƒã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å¯¾è±¡ã¨ã™ã‚‹æ¤œæŸ»ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ ã“ã®ç¨®ã®æ¤œæŸ»ã§ã¯ï¼ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã—ã¦æ§˜ã€…
drumsco 2010/03/19
securityæ¤œæŸ»ã®ãŸã‚ã®local proxyãƒ„ãƒ¼ãƒ«ã€‚

security

tool

Google

proxy

XSS
ãƒªãƒ³ã‚¯
Jibbering Musings Â» Don't serve JSON as text/html
Another day, another XSS flaw, this one in Google again, but this is a little more interesting than the normal ones, what this one shows is how JSON results add an extra vector to attack that might be missed by your QA team. The probl em here was that the JSON was returned with a mime-type of text/html, a browser will render that as if it was an HTML page, even if it's really just a javascript snip
drumsco 2010/03/19
JSONãƒ‡ãƒ¼ã‚¿ãƒ¼ã‚’ text/html ã§é€ä¿¡ã—ã¦ã¯ã„ã‘ãªã„ã€‚ æ—¥æœ¬èªžè¨³ã‚µã‚¤ãƒˆãªã„ã‹ãªï¼Ÿ

security

JSON

MIME

XSS
ãƒªãƒ³ã‚¯
Download details: Windows Server 2003 Resource Kit Tools
Your AI-powered copilot for the web. Ask questions. Chat to refine results. Get comprehensive answers and creative inspiration.
drumsco 2008/09/03
dot.net

XSS

security

tool
ãƒªãƒ³ã‚¯
Download details: Windows Server 2003 Resource Kit Tools
Your AI-powered copilot for the web. Ask questions. Chat to refine results. Get comprehensive answers and creative inspiration.
drumsco 2008/09/03
ã‚¢ã‚»ãƒ³ãƒ–ãƒªã®publicéƒ¨ã®å·®ç•°ã‚’æ¤œå‡ºã™ã‚‹ãƒ„ãƒ¼ãƒ«ã€‚public IFã‚’å¤‰æ›´ã—ã¦ã„ãªã„ã‹ç¢ºèªã™ã‚‹ãŸã‚ã«ä½¿ãˆãã†ã€‚

dot.net

tool

diff
ãƒªãƒ³ã‚¯
Google Code Archive - Long-term storage for Google Code Project Hosting.
Code Archive Skip to content Google About Google Privacy Terms
drumsco 2008/07/07
security

proxy

tool

Google

ratproxy

XSS
ãƒªãƒ³ã‚¯
Atom ã‚„ RDF ã‚’åˆ©ç”¨ã—ãŸXSS - è‘‰ã£ã±æ—¥è¨˜
Internet Explorer ã®æ‚ªåé«˜ã„ Content-Type: ç„¡è¦–ã¨ã„ã†ä»•æ§˜ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€Atom ã‚„ RDF/RSS ã‚’åˆ©ç”¨ã—ã¦XSSã‚’ç™ºç”Ÿã§ãã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚æ¡ä»¶çš„ã«å¯¾è±¡ã¨ãªã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯å¤šãã¯ãªã„ã¨æ€ã„ã¾ã™ãŒã€ãã‚Œã§ã‚‚ã„ãã¤ã‹è©²å½“ã™ã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå®Ÿåœ¨ã™ã‚‹ã“ã¨ã‚’ç¢ºèªã—ã¾ã—ãŸã€‚ä»¥ä¸‹ã®ä¾‹ã§ã¯ Atom ã®å ´åˆã«ã¤ã„ã¦æ›¸ã„ã¦ã„ã¾ã™ãŒ RDF/RSS ã§ã‚‚åŒæ§˜ã§ã™ã€‚ ä¾‹ãˆã°ã€http://example.com/search.cgi?output=atom&q=abcd ã¨ã„ã† URL ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ã€Œabcdã€ã¨ã„ã†æ–‡å—åˆ—ã®æ¤œç´¢çµæžœã‚’ Atom ã¨ã—ã¦è¿”ã™CGIãŒã‚ã£ãŸã¨ã—ã¾ã™ã€‚ GET /search.cgi?output=atom&q=abcd Host: example.com HTTP/1.1 200 OK Content-Type: ap
drumsco 2007/08/10
security

XSS

IE

Atom

RDF
ãƒªãƒ³ã‚¯
T.Teradaã®æ—¥è¨˜ - DeXSSã‚’è©¦ã—ãŸ
DeXSSã¯Javaã®ã‚¢ãƒ³ãƒXSSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚æŽ²ç¤ºæ¿ã‚„Webãƒ¡ãƒ¼ãƒ«ãªã©ã®ã‚¢ãƒ—ãƒªã§ã€HTMLã‚¿ã‚°ã‚’è¨±å®¹ã—ãªãŒã‚‰ã€JavaScriptã‚’é™¤åŽ»ã—ãŸã„å ´é¢ã§ä½¿ç”¨ã—ã¾ã™ã€‚ XSSæ”»æ’ƒå¯¾ç–ç”¨ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒª - DeXSS 1.0ç™»å ´ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ« DeXSS -- Java program for removing JavaScript from HTMLï¼ˆDeXSSé–‹ç™ºè€…ã®ãƒšãƒ¼ã‚¸ï¼‰ ã¡ã‚‡ã£ã¨è§¦ã£ã¦ã¿ã¾ã—ãŸã€‚ æ¦‚è¦ ä»¥ä¸‹ã®ã‚ˆã†ãªã‚·ãƒ³ãƒ—ãƒ«ãªå‡¦ç†ã‚’ã—ã¾ã™ã€‚ ãƒ»TagSoupã§Parse ãƒ»æ£è¦è¡¨ç¾ã§HTMLè¦ç´ /å±žæ€§ã‚’ãƒ•ã‚£ãƒ«ã‚¿ ãƒ—ãƒã‚°ãƒ©ãƒ ã¯å®Ÿè³ªæ•°ç™¾è¡Œç¨‹åº¦ã—ã‹ã‚ã‚Šã¾ã›ã‚“ã€‚ å•é¡Œç‚¹ ã‚½ãƒ¼ã‚¹ã‚’è¦‹ãŸã‚Šã€å®Ÿéš›ã«ä½¿ã£ã¦ã¿ã‚‹ã¨å¤šãã®æ¬ é™¥ãŒç›®ã«ä»˜ãã¾ã™ã€‚ ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆ ã¾ãšæœ€å¤§ã®å•é¡Œã¯ã€ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆæ–¹å¼ã§ã¯ãªã„ã“ã¨ã§ã™ã€‚è¦ç´ /å±žæ€§å/å±žæ€§å€¤ã¯ã€å®šç¾©ã•ã‚ŒãŸæ£è¦è¡¨ç¾ï¼ˆãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆï¼‰ã§ãƒ•
drumsco 2007/05/02
Java

security

XSS

dexss
ãƒªãƒ³ã‚¯
[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]httponlyã¯æ™®åŠã™ã‚‹ã®ã‹ (2006-12-26 - T.Teradaã®æ—¥è¨˜)
Firefox2ã§ã‚‚httponlyãŒä½¿ãˆã‚‹ã¨ã„ã†è©±ã‚’è€³ã«ã—ã¾ã—ãŸã€‚ httpOnly - Firefox Add-ons*1 httponlyãŒã„ã‚ˆã„ã‚ˆæ™®åŠã™ã‚‹ã‹ï¼Ÿ ã¨ã„ã†ã®ã§ãƒã‚¿ã«ã—ã¦ã¿ã¾ã™ã€‚ ãªãŠã€ã“ã®æ—¥è¨˜ã¯ã€WinXPï¼‹IE6SP2ç’°å¢ƒã‚’å‰æã¨ã—ã¦æ›¸ãã¾ã—ãŸã€‚ ã¯ã˜ã‚ã« httponlyã¯ã€XSSè„†å¼±æ€§ãŒã‚ã‚‹çŠ¶æ³ã«ãŠã„ã¦ã‚‚ã€cookieã‚’çªƒå–ã•ã‚Œãªã„ã‚ˆã†ã«ã™ã‚‹ã“ã¨ã‚’ç‹™ã£ãŸIEã®ç‹¬è‡ªæ©Ÿèƒ½ã§ã™ã€‚ MSDN - Mitigating Cross-site Scripting With HTTP-only Cookies ã“ã®æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ç™ºè¡Œã™ã‚‹cookieã«httponlyå±žæ€§ã‚’ä»˜ã‘ã¾ã™ã€‚ Set-Cookie: key=value; domain=example.com; HttpOnly httponlyå±žæ€§ãŒä»˜ã‘ã‚‰ã‚ŒãŸcookieã¯ã€JavaScriptã®docume
drumsco 2006/12/29
security

XSS

HttpOnly
ãƒªãƒ³ã‚¯
ï¼ ITï¼šã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°å¯¾ç–ã®åŸºæœ¬
æœ€è¿‘Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å˜åœ¨ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒæ³¨ç›®ã‚’æµ´ã³ã¦ã„ã‚‹ã€‚ãã®ä¸ã§ã‚‚ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€ã¨å‘¼ã°ã‚Œã‚‹è„†å¼±æ€§ãŒæœ‰åã§ã‚ã‚‹ãŒã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°è„†å¼±æ€§ã«ã¤ã„ã¦æ£ç¢ºã«ç†è§£ã—ã¦ã„ã‚‹äººãŒä¾ç„¶ã¨ã—ã¦å°‘ãªã„ã¨æ„Ÿã˜ã‚‹ã€‚ æœ¬ç¨¿ã§ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¨ã¯ã©ã®ã‚ˆã†ãªè„†å¼±æ€§ã§ã‚ã‚‹ã®ã‹ã€ã“ã®è„†å¼±æ€§ã‚’æŒã£ãŸã‚µã‚¤ãƒˆãŒæ”»æ’ƒã•ã‚Œã‚‹ã¨ã©ã®ã‚ˆã†ãªè¢«å®³ãŒèµ·ãå¾—ã‚‹ã®ã‹ã€ãªãœãã®ã‚ˆã†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒä½œã‚Šè¾¼ã¾ã‚Œã¦ã—ã¾ã†ã®ã‹ã€ã©ã®ã‚ˆã†ã«å¯¾ç–ã‚’ã™ã‚Œã°ã‚ˆã„ã®ã‹ã‚’è§£èª¬ã—ã¦ã„ãã€‚ â€»ä»¥ä¸‹æœ¬æ–‡ä¸ã§ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°è„†å¼±æ€§ã®ã“ã¨ã‚’ã€ŒXSSã€ã¨è¡¨è¨˜ã™ã‚‹ã€‚ã€ŒCross Site Scriptingã€ã®ç•¥ã§ã‚ã‚‹ã‹ã‚‰ã€ŒCSSã€ã¨è¡¨è¨˜ã—ã¦ã„ã‚‹è¨˜äº‹ã‚‚ã‚ã‚‹ãŒã€ã€ŒCascading Style Sheetsã€ã®ç•¥ã‚‚ã€ŒCSSã€ã¨ãªã‚Šç´›ã‚‰ã‚ã—ã„ãŸã‚ã€ã€ŒXSSã€ã¨è¡¨è¨˜ã™ã‚‹å ´åˆãŒå¤šããªã£ã¦ãã¦ã„ã‚‹ã€‚æœ¬ç¨¿ã§
drumsco 2006/02/14
security

XSS
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸