GitHub - HoLyVieR/prototype-pollution-nsec18: Content released at NorthSec 2018 for my talk on prototype pollutionYou signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.
VBA Stomping — Advanced Maldoc Techniques
Authors: Kirk Sayre (@bigmacjpg), Harold Ogden (@haroldogden) and Carrie Roberts (@OrOneEqualsOne) IntroductionThere are powerful malicious document (maldoc) generation techniques that are effective at bypassing anti-virus detection. A technique which we refer to as VBA stomping was originally brought to our attention by Dr. Vesselin Bontchev (see here). VBA stomping refers to destroying the VBA s
GitHub - matt-/CVE-2018-15685: POC for CVE-2018-15685
This is a minimal Electron application with a POC for CVE-2018-15685. A remote code execution vulnerability has been discovered affecting apps with the ability to open nested child windows on Electron versions (3.0.0-beta.6, 2.0.7, 1.8.7, and 1.7.15). This vulnerability has been assigned the CVE identifier CVE-2018-15685. For more information see my full write up on the Contrast Security blog or t
ã€ä»®æƒ³é€šè²¨ãƒžã‚¤ãƒ‹ãƒ³ã‚°é€®æ•å•é¡Œã€‘逮æ•ã®åŸºæº–を神奈å·çœŒè¦ã«é–‹ç¤ºè«‹æ±‚→回ç”引ã伸ã°ã—ã®æœ«ã€2ヶ月経ã£ã¦ã‚„ã£ã¨é–‹ç¤ºã€Œè¦å¯ŸãŒæ¥ã‚‹ã¾ã§ä½•ãŒé•æ³•ã‹åˆ¤æ–ã§ããªã„ã®ãŒå•é¡Œã€
è¦å¯Ÿåº @NPA_KOHO マイニングツールã®è¨ç½®ã‚’閲覧者ã«æ˜Žç¤ºã›ãšã«è¨ç½®ã—ãŸå ´åˆã€çŠ¯ç½ªã«ãªã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€ãƒžã‚¤ãƒ‹ãƒ³ã‚°ãƒ„ールãŒè¨ç½®ã•ã‚ŒãŸã‚¦ã‚§ãƒ–サイトã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ãƒ‘ソコンã®å‹•ä½œãŒé…ããªã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ã”注æ„ãã ã•ã„。npa.go.jp/cyber/policy/1… è¦å¯Ÿåº @NPA_KOHO è¦å¯Ÿåºå…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ã™ã€‚ 発信ã™ã‚‹æƒ…å ±ã¯ã€Œå ±é“発表資料ã€ã€Œæ–°ç€æƒ…å ±ã€ã‚’基本ã¨ã—ã¦ã„ã¾ã™ã€‚当アカウントã¯ç™ºä¿¡å°‚用ã®ãŸã‚è¦å¯Ÿåºã‹ã‚‰ã®è¿”ä¿¡ç‰ã¯è¡Œã£ã¦ãŠã‚Šã¾ã›ã‚“。ã”利用ã«ã‚ãŸã£ã¦ã¯ã€Œè¦å¯ŸåºX（旧：Twitter）é‹ç”¨ãƒãƒªã‚·ãƒ¼ã€npa.go.jp/twitter/policy…をã”覧ãã ã•ã„。 npa.go.jp 梅酒ã¿ã‚Šã‚“@7a! @PokersonT 今ã¾ã§ã®ç°¡å˜ãªçµŒç·¯ 神奈å·çœŒè¦ç‰ãŒcoin hiveã«ã‚ˆã‚‹ä»®æƒ³é€šè²¨ãƒžã‚¤ãƒ‹ãƒ³ã‚°ã‚’ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚¦ã‚¤ãƒ«ã‚¹é ’å¸ƒç½ªã§ä¸€æ–‰é€®æ•ãƒ»é€æ¤œ ⇒「ãŠå®…ら一体ã©
サイãƒãƒ¼è¦å¯Ÿã«å®¶å®…æœç´¢ã‚’å—ã‘ãŸéš›ã®ä½“験談
ã¯ã˜ã‚ã« ã“ã‚Œã¯ã€ç§ãŒ2018å¹´4月ã«åŸ¼çŽ‰çœŒè¦ã®ã‚µã‚¤ãƒãƒ¼è¦å¯Ÿã«è‡ªå®…ã®å®¶å®…æœç´¢ã‚’å—ã‘ãŸæ™‚ã®ä½“験談ã§ã™ã€‚ 事実を出æ¥ã‚‹ã ã‘詳細ã«è¨˜è¼‰è‡´ã—ã¾ã™ã€‚ã¾ãŸã€å¤§å¤‰ç¨šæ‹™ã§æれ入りã¾ã™ãŒç§è‡ªèº«ã®æ£ç›´ãªæ°—æŒã¡ã‚‚一緒ã«æ›¸ãç•™ã‚ã¦ã„ã¾ã™ã€‚ ã¾ãŸã€äº‹ä»¶å†…容ã®è©³ç´°ã«ã¤ãã¾ã—ã¦ã¯ã€è¦å¯Ÿã«å£æ¢ã‚ã•ã‚Œã¦ã„る上ã€ç§ã‚‚æœæŸ»ã‚’妨害ã™ã‚‹æ„図ãªã©ã¯å…¨ããªãæœæŸ»ä¸Šã®ç§˜å¯†ãŒå®ˆã‚‰ã‚Œã‚‹ã“ã¨ã¯å€‹äººçš„ã«ã‚‚大切ã ã¨ç†è§£ã—åŒæ„ã‚‚ã—ã¦ã„ã‚‹ã®ã§æŽ²è¼‰ã—ãªã„ã“ã¨ã¨ã—ã¾ã™ã€‚ ã“ã®è¨˜äº‹ã®æŽ²è¼‰ç›®çš„ã¯ã€ä¸»æ¨©è€…（ç´ç¨Žè€…）ã§ã‚ã‚‹ç§ä»¥å¤–ã®å›½æ°‘ã®çš†æ§˜ã«ã€è¡Œæ”¿çµ„ç¹”ã®1ã¤ã§ã‚ã‚‹è¦å¯Ÿã‹ã‚‰ç§ã¨åŒã˜ã‚ˆã†ãªä½“験をã—ã¦é ‚ããŸããªã„ã¨ã„ã†ç‚¹ã¨ã€ã‚µã‚¤ãƒãƒ¼è¦å¯Ÿçµ„ç¹”ã®ç¾çŠ¶ã‚’垣間見ãŸä¸€å¸‚æ°‘ã€ä¸€ITエンジニアã¨ã—ã¦ç§ãŒæ„Ÿã˜ãŸã“ã¨ã€ä½“験致ã—ã¾ã—ãŸã“ã¨ã‚’皆様ã«å…±æœ‰ã•ã›ã¦é ‚ã‘ã‚Œã°ã¨æ€ã„執ç†ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ ç™»å ´äººç‰©ã®ç´¹ä»‹ ã“ã“ã§ã¯ã€å°‘ã—話ãŒé•·ããªã‚Šã¾ã™ã®ã§å…ˆã«ç™»å ´äººç‰©ã‚’ã¾ã¨ã‚ã•ã›ã¦é ‚ãã¾ã™ã€‚ ç§ï¼šè‡ªå–¶
サイトç‰ã«Coinhiveç‰ã®ä»®æƒ³é€šè²¨ãƒžã‚¤ãƒ‹ãƒ³ã‚°ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’è¨ç½®ã™ã‚‹ã¨ã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªï¼ˆä¸æ£æŒ‡ä»¤é›»ç£çš„記録作æˆç½ªï¼‰ãŒæˆç«‹ã™ã‚‹ã®ã‹ï¼Ÿ : ãªã‹2656ã®blog
１．ã¯ã˜ã‚㫠最近ã€SNSã«ã¦ã€ã€ŒCoinhiveã¯ã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªãªã©ãŒæˆç«‹ã™ã‚‹ã®ã‹ï¼Ÿã€ã¨ã„ã†è©±é¡Œã«ã¤ãやや盛り上ãŒã£ã¦ã„ã‚‹ãŸã‚ã€ç§ã‚‚å°‘ã—調ã¹ã¦ã¿ã¾ã—ãŸã€‚ ■関連ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ ・サイトç‰ã«Coinhive（仮想通貨マイニングã®ãƒ—ãƒã‚°ãƒ©ãƒ ）をè¨ç½®ã—ãŸè¢«ç–‘者16åã‚’è¦å¯ŸãŒã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªã§æ‘˜ç™º ２．Coinhiveã¨ã¯ Coinhive（コインãƒã‚¤ãƒ–）ã¨ã¯ã€ã‚µã‚¤ãƒˆã®é‹å–¶è€…ãŒã‚µã‚¤ãƒˆã®é–²è¦§è€…ã®PCç‰ã«ä»®æƒ³é€šè²¨ã‚’採掘(マイニング)ã•ã›ãã®åŽç›Šã‚’å—ã‘å–るサービスã§ã™(マイニングツールã€ä»®æƒ³é€šè²¨ãƒžã‚¤ãƒ‹ãƒ³ã‚°)。 サイトé‹å–¶è€…ãŒCoinhiveã®JavaScriptコードをサイトã«åŸ‹ã‚込むã¨ã€ãã®ã‚µã‚¤ãƒˆã‚’閲覧ã—ãŸäººã®PCã®CPUパワーを使ã„ã€ä»®æƒ³é€šè²¨ã€ŒMoneroã€ã‚’採掘ã—ã€æŽ¡æŽ˜ç›Šã®ï¼—割ãŒã‚µã‚¤ãƒˆé‹å–¶è€…ã«ã€ï¼“割ãŒCoinhiveã®é‹å–¶è€…ã«åˆ†é…ã•ã‚Œã‚‹ä»•çµ„ã¿ã§ã‚ã‚‹ãã†ã§ã™ã€‚ 「多ãã®ã‚¦ã‚§ãƒ–サイトã«ã¯é‚ªé”ãªåºƒå‘ŠãŒè¡¨
Cookies specification compatibility in modern browsers
Cookies specification compliance issues in modern browsers Star research by Ivan Nikulin (email: ifaaan@gmail.com, github: inikulin, twitter: _inikulin_) This table lists RFC 6265 compliance issues found in modern browsers. Data was obtained by running the IETF test suite across major browsers using a specially made test runner. Test fails are divided into categories for the working group to disti
reCAPTCHA bypass via HTTP Parameter Pollution
tl;dr I reported a reCAPTCHA bypass to Google in late January. The bypass required the web application using reCAPTCHA to craft the request to /recaptcha/api/siteverify in an insecure way; but when this situation occurred the attacker was able to bypass the protection every time. The security issue was fixed “upstream†at Google’s reCAPTCHA API and no modifications are required to your web applica
Web Authentication: An API for accessing Public Key Credentials - Level 2
This version: https://www.w3.org/TR/2021/REC-webauthn-2-20210408/ Latest published version: https://www.w3.org/TR/webauthn-2/ Editor's Draft: https://w3c.github.io/webauthn/ Previous Versions: https://www.w3.org/TR/2021/PR-webauthn-2-20210225/ https://www.w3.org/TR/2020/CR-webauthn-2-20201222/ https://www.w3.org/TR/2020/WD-webauthn-2-20201216/ https://www.w3.org/TR/2020/WD-webauthn-2-20201116/ htt
èªå¯ã¨èªè¨¼æŠ€è¡“ã«ã¤ã„ã¦ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’書ãã¾ã—㟠- ngzmã®ãƒ–ãƒã‚°
èªå¯ã¨èªè¨¼æŠ€è¡“ OAuth 1.0ã€OAuth 2.0 ãŠã‚ˆã³ OpenID Connect ã«é–¢ã™ã‚‹ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’アップã—ã¾ã—ãŸã€‚ アプリ開発ã§çŸ¥ã£ã¦ãŠããŸã„èªè¨¼æŠ€è¡“ - OAuth 1.0 + OAuth 2.0 + OpenID Connect - from Naoki Nagazumi www.slideshare.net 開発ã—ã¦ã„ã‚‹ Web アプリã§ã€OAuth 1.0 ã‚„ OAuth 2.0 ãŠã‚ˆã³ OpenID Connect ã®èªå¯ã¨èªè¨¼æŠ€è¡“を組ã¿è¾¼ã‚“ã 時ã«ã€ã‚ã‚Œã“れ調査ã—ã¦çŸ¥ã‚Šå¾—ãŸæŠ€è¡“ã‚’ã¾ã¨ã‚ãŸã‚‚ã®ã§ã™ã€‚ 130ページãらã„ã®åŠ›ä½œã§ã™ï¼ãœã²ã”覧ãã ã•ã„。 デモ ã“ã‚Œã®ãƒ‡ãƒ¢ã¯ã“ã¡ã‚‰ã«ã‚ã‚Šã¾ã™ AuthsDemo デモã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã¯ã“ã¡ã‚‰ã§ã™ã€‚ GitHub - ngzm/auths-demo: This is a demo program with using OAuth
flawed.net.nz
(Thanks to @mah3mm for sparking curiosity then schooling me on this) This post will outline a common flaw in implementations of Merkle Trees, with demonstrations of potential attacks against the most popular python libraries. But first, a brief overview of what both a Merkle Tree and a Second Preimage attack are. Merkle Trees A Merkle Tree is a fairly simple data structure that allows chunks of da
AWSå†å…¥é–€2018 ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ç·¨ | DevelopersIO
ã“ã‚“ã«ã¡ã¯ã€‚æ± ç”°ã§ã™ã€‚本州ã‹ã‚‰ã¯æ¢…ã®ä¾¿ã‚ŠãŒå±Šã„ã¦ã„ã¾ã™ãŒã€æœå¹Œã¯ã¾ã ã¾ã 雪景色ã§ã™ã€‚ 最近ã«ãªã‚Šå‘¨å›²ã§ã€Œä»Šåº¦ã¯Echoã®æ‹›å¾…ãŒå±Šã„ãŸï¼ã€ã¨ã‹ã€Œ2回目ã®Echo Dotã®æ‹›å¾…ãŒå±Šã„ãŸï¼ã€ã¨ã‹ã€Œ2å°ç›®ã‚²ãƒƒãƒˆï¼ã€ã¨ã‹èžã“ãˆã¦ãã¾ã—ãŸã€‚我ãŒå®¶ã«Echo Plusã‚’è¿Žãˆå…¥ã‚Œã‚‹æ—¥ã¯ã„ã¤ã«ãªã‚‹ã®ã§ã—ょã†ã‹ã€‚ æ—©ãスマート家電を声ã§åˆ¶å¾¡ã™ã‚‹ç”Ÿæ´»ã‚’体験ã—ãŸãã¦ãƒ¯ã‚¯ãƒ¯ã‚¯ã—ã¦ã„ã¾ã™ã€‚ ã¯ã˜ã‚㫠今年ã«å…¥ã£ã¦ã‹ã‚‰AWSå†å…¥é–€ã‚·ãƒªãƒ¼ã‚ºã¨é¡Œã—ã¦å‹‰å¼·ã‚’進ã‚ã¦ã„ã‚‹ã®ã§ã™ãŒã€ŒãŸã¾ã«ã¯AWSホワイトペーパーをèªã‚“ã§ã¿ã‚ˆã†ã€ã¨æ€ã„ç«‹ã¡ã„ãã¤ã‹èªã‚“ã§ã„ãŸä¸ã§AWS_Security_Checklistã¨ã„ã†è³‡æ–™ã‚’見ã¤ã‘ã¾ã—ãŸã€‚ 内容ã¯éžå¸¸ã«ç°¡æ½”ã§ã™ãŒã€å„é …ç›®ã¯ãã‚Œãžã‚Œé–¢é€£ã™ã‚‹AWSドã‚ュメントã¸ã®ãƒªãƒ³ã‚¯ãŒè¨ã‘られã¦ã„ã¾ã—ãŸã€‚ ãã“ã§ä»Šå›žã¯è³‡æ–™ã‹ã‚‰ã®å„リンク先ドã‚ュメントを基ã«ç†è€…ãŒæ•´ç†ã—ãŸãƒã‚§ãƒƒã‚¯ãƒã‚¤ãƒ³ãƒˆãªã©ã‚’「AWSå†å…¥é–€20
今ã•ã‚‰èžã‘ãªã„SPAã®CORS対ç–ã®è©±
æ±äº¬Nodeå¦åœ’2017ã«ã¦ç™ºè¡¨ã—ã¾ã—ãŸã€‚
2017 OWASP World Tour Tokyo - ã‚ã—ã®ã‚ã—ã‚ã¨
ä¹…ã—ã¶ã‚Šã® Web。周回é…ã‚Œã«ãªã£ã¦ã„ã‚‹ã®ã§ã€æƒ…å ±åŽé›†ã®ãŸã‚ã«å‚åŠ ã—ãŸã€‚æ€ã£ã¦ã„ãŸã®ã¨ã¯ã€ã¡ã‚‡ã£ã¨é•ã£ãŸ*1ãŒã€å‚åŠ ã—ã¦ã‚ˆã‹ã£ãŸã€‚充実ã—㟠1 æ—¥ã«ãªã£ãŸã€‚ 案内 https://www.owasp.org/index.php/2017_OWASP_World_Tour_Tokyo 詳細 Opening "OWASP Project Overview for Developers" Training 1 "OWASP TOP 10 を用ã„ãŸè„†å¼±æ€§å¯¾å¿œ" Training 2 "最å°æ¨©é™ã®å…·ä½“çš„ãªå®Ÿç¾æ–¹æ³•" Training 3 "開発者・é‹ç”¨æ‹…当者ã«å‘ã‘ãŸã€OWASP ZAP を用ã„ãŸè„†å¼±æ€§è¨ºæ–手法" Training 4 "OWASP BWA を用ã„ãŸå¦ç”ŸãŠã‚ˆã³è·å“¡å‘ã‘トレーニング" Training 5 "開発プãƒã‚¸ã‚§ã‚¯ãƒˆã®ç¾çŠ¶ã‚’把æ¡ã™ã‚‹ OWASP SAMM ã®æ´»ç”¨" Closing
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Web Platform Security PhD Summit @ Google Munich
Shigeki Ohtsu on Twitter: "WebRTCã§ãƒãƒ¼ã‚«ãƒ«IPã‚’å–å¾—ã—ã¦ãƒ«ãƒ¼ã‚¿ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’探ã—出ã—DNS rebidingã§ãƒ«ãƒ¼ã‚¿ã¸æŽ¥ç¶šã—exploitã‚’é€ã‚Šè¾¼ã¿æœ€çµ‚çš„ã«telnetã‚’æˆåŠŸã•ã›ã‚‹æ”»æ’ƒã‚’実証ã—ãŸã®ã‹ã€‚ / “Practical Attacks wi…†https://t.co/FWsMn39MeA"
Electron TechTalk
https://conference.hitb.org/hitbsecconf2017ams/materials/D2T2%20-%20Yu%20Hong%20-%20Attack%20Surface%20Extended%20by%20URL%20Schemes.pdf
Reverse Engineering Windows Defender’s JavaScript Engine
Request-URIã®ãƒ‘スã‹ã‚‰ã®CRLFインジェクション
{{#tags}}- {{label}}
{{/tags}}