ï¼ITãã³ãã¼ã®Go To Marketæ¦ç¥ï¼å¤è³ç·¨ãVerkada Japanããã¤ããªããã¯ã©ã¦ãã«ããç©çã»ãã¥ãªãã£ã¼å¼·åããã¼ããã¼ãã¸ãã¹ã®å¼·åã§é¡§å®¢å±¤æ¡å¤§
ï¼ITãã³ãã¼ã®Go To Marketæ¦ç¥ï¼å¤è³ç·¨ãVerkada Japanããã¤ããªããã¯ã©ã¦ãã«ããç©çã»ãã¥ãªãã£ã¼å¼·åããã¼ããã¼ãã¸ãã¹ã®å¼·åã§é¡§å®¢å±¤æ¡å¤§
2014-11-20 ã»ãã¥ãã£ã³åã³ infosec writeups æ°ã¥ãããããã»ãã¥ãã£ã³ããåå¹´çµã¨ããã¦ããã®ã§ãæã®ããã°ã®å¿åç¨ç´ã®ä¸èº«ãæããè¨äºãã¤ã£ãã¿ãå ¥ãã¤ã¤æ¯ãè¿ã£ã¦ã¿ããã¨æãã¾ãããã¤ã£ãã¿ã¯ãã®ããã«ç®±ã®ä¸ã«æ¸ãã¦ããã¾ãã ã»ãã¥ãªãã£ã»ãã£ã³ãã®ãããã¯ã¼ã¯ã»ã»ãã¥ãªãã£ã¯ã©ã¹ã«åæ ¼ãããã¨ãã§ãã¾ãããå¦æ ¡ã®å人ã«å¥ãªã¯ã©ã¹ã®åæ ¼è ãããã®ã§ãçµæ§ã³ã£ãããã¦ã¾ãããã¦ãããããªäººãå¿åã«ã¤ãã¦ããã°ã«è¼ãã¦ããããåãæ¸ããã¨æãã¾ãã ãããã¯ã¼ã¯ã»ãã¥ãªãã£ã®åç ããã§ãããçµæ§é«ãã£ããããã§ãããå¿åã®å½¢å¼èªä½ãè¬ã®ãã¡ã¤ã«ã®è§£æããã¯ãã¾ããããèå³ãæã¡æ¯è¼ç楽ã«è§£ãã¦ãã¾ããããããããããããªãããã£ã¦æãå¿åã«è¸ã¿åã£ãæ¹ãå¤ããã¨æãã¾ããå®éåãããã§ããããæ½åºã«30å以ä¸ãããã¾ããã fileã³ãã³ããWiresha
ä»å¹´ã®ï¼æï¼ï¼æ¥ï½ï¼ï¼æ¥ãã»ãã¥ãªãã£ã»ãã£ã³ãå ¨å½å¤§ä¼ï¼ï¼ï¼ï¼ã«ãåå ãã¦ãã¾ãã(â´âï½)ã ãã»ãã¥ãªãã£ã»ãã£ã³ãå ¨å½å¤§ä¼2014ãï¼IPA ç¬ç«è¡æ¿æ³äºº æ å ±å¦çæ¨é²æ©æ§ ããªãé ããªã£ã¦ãã¾ãã¾ããããææ³ãæ¸ãããã¨æãã¾ãã æ¸ã足ããªããããã«ãè²ã ãªãã¨ãæãããçµé¨ãããããã®ã§ãããé·ãæç« ãæ¸ãã®ã¯è¦æãªã®ã§ããã¿ã¾ãããå¤ãªæç« ã«ãªã£ã¦ãããã¨æãã¾ãã âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã»âã» ã»ãã¥ãªãã£ã»ãã£ã³ãã«å¿åãããã£ãã ï¼æé ãè¬æ¼ã«æ¥ãããIPAã®æ¹ã®ã話ã®ä¸ã§ãã»ãã¥ãªãã£ã»ãã£ã³ãã®åå¨ãç¥ãã¾ããã ãã®ã¨ãã«ã楽ãããï¼ã¨æã£ãã®ããã£ããã«ãåéã¨ä¸ç·ã«ã»ãã¥ãªãã£ã»ãã£ã³ããç®æãããã«ãåå¼·ä¼ãå§ãã¾ããã åå¼·ä¼ã§ã¯ããããã¯ã¼ã¯ã®åºç¤ããåå¼·ãããã®ã§ãããç¥èããªããªã追ãã¤ããªãã¦ãã»ã
çããã¯ãã»ãã¥ãªãã£ã»ãã£ã³ãã¨ããã¤ãã³ãããåãã§ããããï¼å ¨å½å¤§ä¼ã¨ããã»ãã£ã³ãã¨ããï¼ç¨®é¡ã®ãã£ã³ãããããä»åç§ã¯ã»ãã¥ãªãã£ãã£ã³ã2014å ¨å½å¤§ä¼ã«åå ãã¦ãã¾ãããï¼å ¬å¼ãµã¤ãã¯ãã¡ãï¼ã¤ãã³ãã«åå ããã«ã¯å¿åç¨ç´ã«æ¸ãããåé¡ã解ãããããå¿ è¦ããããæ¯å¹´ï¼ï½ï¼åã®åçã§åå è ãé¸ã°ãã¦ãã¾ãããã®ã¤ãã³ãã¯å½ã®äºç®ã«ãã£ã¦éå¶ããã¦ããå ¬å¼ãªãã®ã§ãåå è ã¯ï¼æ¥éã«ããããã»ãã¥ãªãã£ã®ããè¬å¸«éããã»ãã¥ãªãã£ã«é¢ããæè¡ãå¦ã³ã¾ããæ±ãå 容ã«ãã£ã¦ããã¤ãã¯ã©ã¹ãåããã¦ããã®ã§ãããä»åç§ã¯ãã»ãã¥ã¢ãªã·ã¹ãã ãä½ããã¯ã©ã¹ãã®ãçµã¿è¾¼ã¿ã®ã»ãã¥ãªãã£ãèããã¼ããã«åå ãã¦ãã¾ããã å¿åæã®è©± ã»ãã¥ãªãã£ãã£ã³ãã«å¿åããã«ã¯å¿åç¨ç´ãæ¸ããªãã¨ããã¾ããããããã§ããã¤ãåé¡ã解ããªãã¨ããã¾ãããã¯ã©ã¹ã«ãã£ã¦èª²ãããåé¡ã¯ç°ãªãã®ã§ããããã¨ãã°
2014-08-31 ã»ãã¥ãªãã£ãã£ã³ã2014ã«åå ãã¦ãã¾ãã ã¯ããã¦ãããã¾ãããæ¢ã«ãã£ã³ãã®çµäºãã2é±éãçµéãã¦ãã¾ããããæ¸ããªããã°(義åæ)ãã¿ãããªæ°æã¡ãããã®ã§æ¸ãã¾ããã¦ãããã¦ãã¾ã£ãã®ã§ãæçã«ããã£ããã¨ã2014å¹´8æã®12æ¥ãã16æ¥ã¾ã§ã®5æ¥éãã¯ãã¹ã¦ã§ã¼ãå¹å¼µã¨ããå ´æã«ç¼¶è©°ããã¦ã»ãã¥ãªãã£ã«é¢ãã¦åå¼·ãã¦ãã¾ãããç§ã¯ã¦ã§ãã»ãã¥ãªãã£ã¯ã©ã¹ã ã£ããããã¯ãã¹ã¦ã§ã¼ãå¹å¼µã§ã¯ãã¹ãµã¤ãhogehogeã«ã¤ãã¦å¦ã¶ãã¨ãã§ããã¨ãããã¨ã§ä¸åº¦è¯ãæãã§ã(?)ã5æ¥éã®æµãã¯å¤§ä½ä»¥ä¸ã®ãããªãã®ã§ããã1æ¥ç®: è¬æ¼ãå°éè¬ç¾©ãå°ã 2æ¥ç®: å°éè¬ç¾©ãBoFãã°ã«ã¼ãã¯ã¼ã¯ 3æ¥ç®: ä¼æ¥è¨ªåãå°éè¬ç¾© 4æ¥ç®: å°éè¬ç¾©ãCTF 5æ¥ç®: ã°ã«ã¼ãã¯ã¼ã¯çºè¡¨ãã¯ã©ã¹å¥çºè¡¨ã表彰Webã»ãã¥ãªãã£ã¯ã©ã¹ãªã®ã§å½ç¶XSSãCSRFãª
å é± 12 æ¥ãã 16 æ¥ã¾ã§ãã»ãã¥ãªãã£ã»ãã£ã³ãå ¨å½å¤§ä¼ 2014 ãéå¬ããã¾ãããä»å¹´ãåã¯ãã¥ã¼ã¿ã¼ã¨ãã¦è¡ã£ã¦ãã¾ããã®ã§ãä½ãæ¸ããã¨æãã¾ãã ãã¥ã¼ã¿ã¼ã¨ãã¦ã®ææ³ ä»å¹´ã§ 5 åç®ã®ãã¥ã¼ã¿ã¼ã 6 åç®ã®ã»ãã¥ãã£ã³ã§ãããã¨ããããä»å¹´ãç²ãããªã¼ã£ã¦æãã§ãã ã§ãã»ãã¥ãã£ã³ã£ã¦æ¥½ãããã§ãããã楽ããããæ¯å¹´è¡ã£ã¡ãããã§ãããããããã¨ã¯ã¡ããã¨ãããªãããããªãã®ã§çµæ§å¤§å¤ãªãã¨ãããã¾ããã©ããã以ä¸ã«æ¥½ããã§ãããåå ããã¨ãã¨ã¯ã¾ãéã楽ããã§ãã ã»ãã¥ãã£ã³æ¥½ããï¼â(âÏââ) ä¸ â(âÏâ)â ä¸ (ââÏâ)â åå è ã®çãã㸠åãªãããçããã«è¨ãããã¨ãªãã¦ã»ã¨ãã©ç¡ããã§ãããã¨ããããè¨ã£ã¦ãããããã¨ã¯ãæè¡ã®æªç¨ã ãã¯çµ¶å¯¾ã«ããªãã§ããã¨ãããã¨ã§ããããããã¨ã¯èªåã®å¥½ããªãã¨ã好ããªã ããã£ã¦ããã°è¯ãã¨æãã¾ãï¼ã
æ°ã¥ãã°ã»ãã¥ãªãã£ã»ãã£ã³ã2013ã«åå ãã¦ããã¯ã1å¹´ã ãã®1å¹´ããã£ã³ãã«åå ãã¦ããã¨è¨ããã®ã®ããããããªäººã¨åºä¼ãããããããªçµé¨ããããã¨ãã§ãããããããªææ¦ãã§ããèªåèªèº«ããªãæé·ãããã¨ãã§ãã¾ããã ãã®ããã°ãå§ããã®ããã£ã³ãã«åå ãããã¨ããã£ããã ã£ãã¨æãã¾ãã ã»ãã¥ãªãã£ã»ãã£ã³ã2013ã«åå ãã¾ãã - Tahoo!! ããã°ãã¯ããã¾ãã - Tahoo!! ãããªèªåãæé·ããã«ããã£ã¦èµ·çå¤ã¨ãªã£ãã»ãã¥ãªãã£ã»ãã£ã³ãã§ãããä»å¹´ã¯ãã¥ã¼ã¿ã¼ã¨ãã¦åå ãã¦ãã¾ããï¼ï¼ ããã§ãä»åã¯ãã¥ã¼ã¿ã¼ã«ã¤ãã¦ããã¥ã¼ã¿ã¼ã¨ãã¦åå ãã¦ã¿ã¦çã«ã¤ãã¦æ¸ãã¦ããããã¨æãã¾ãã ãã¥ã¼ã¿ã¼å¶åº¦ã¨ã¯ï¼ ç°¡åã«è¨ãã°ãã»ãã¥ãªãã£ã»ãã£ã³ãã®éå»ã®åæ¥çãããã£ã³ãããæä¼ãããå¶åº¦ã§ãã ä»äºã¯ã主ã«åå è ã®äºåå¦ç¿ãè¬ç¾©ä¸ã®ãµãã¼ããè¿å¯ãé£ãã¨æ
8/12ï½8/16ã«è¡ãããã»ãã¥ãªãã£ãã£ã³ã2014ã«åå ãã¾ããã ã¯ã©ã¹ã¯ã½ããã¦ã§ã¢ã»ãã¥ãªãã£ã¯ã©ã¹ã§ãã以ä¸åå è¨ã [1æ¥ç®] ä½ã¨ããã¦ä¼å ´ã«çããã¿ããªçµæ§æ©ãã¤ãã¦ãã¦ããã§ã«ãããã人ãããã ã¨ããããããããªäººã¨ååºäº¤æããããé¦ããDEFCONã®ã¢ã¬ã¶ãä¸ãã¦ã人ã¨ããã¦æãã£ãã ã§ãã¿ããªãããè¯ãäººï¼ å§ãã®ç¹å¥è¬ç¾©ã¯ã»ãã¥ãªãã£åºç¤ã èå¼±æ§èª¿æ»ã§ã©ãã¾ã§ãã£ã¦è¯ãã®ãã¨ããé©åãªå ±åã®ä»æ¹ã¨ãã®è©±ã ã£ãã ãã®å¾ã¯ã½ããã¤ã¼ãµã®äººã®è¬ç¾©ã æ³å以ä¸ã«ããé£ãã å 容ã§å¤§çç¬ããw ãµã¤ãã¼ã®ä¸çã«æ¢ã¾ããªãæã å°è±¡çã(ã¢ãã«ãã¼ãã£ã¦ãã®äººã ã£ãã®ã) æå¾ã®ç¹å¥è¬ç¾©ã¯è¦å¯å¦æ ¡ã®äººã«ããè¬ç¾©ã ãããã£ã(å°ä¸¦æ) ä½ã§è¦å¯å¦æ ¡ã«ãããã ããã¨ä½åº¦ãæã£ããè¦å¯ã«ãã¨ãã§ããªã人ããããã ãªãã¨... ã°ã«ã¼ãã¯ã¼ã¯ãå°ããã£ããã°ã«ã¼ãã®äººã¿ããª
æ¨æ¥ã«æ稿ããè¨äºã®èªã¿æ¹ã§ãã -1. ç°å¢ Xubuntu 14.04ãè²ããªãã®APTã§å ¥ãã¦ãããããªãã«ãªã¹ã«ãªã£ã¦ãã GCC,GFortranã¯4.8.2ã§ãRubyã¯2.1.2ãPythonã¯2.7.6ã¨3.4.0ãNode.jsã¯0.11.13ã ã£ãã¨æãã¾ãã 0. zipãã¡ã¤ã«ãè½ã¨ãã¦ãã ããã«ãæ¸ãã¦ããã¾ããããããã¯æ®éã«è½ã¨ãã¦ããã ãã§ãã # git clone https://gist.github.com/b35c5a5aa6f54b7faebb.git seccamp2014 && cd seccamp2014 Cloning into 'seccamp2014'... remote: Counting objects: 28, done. remote: Compressing objects: 100% (27/27), done. rem
èªåã¯ã½ããã¦ã§ã¢ã»ãã¥ãªãã£ã§åå ãã¾ããã å°éè¬ç¾©ã«ã¤ãã¦æ¸ãã¦ãããã¨æãã¾ããï¼ãã以å¤ã®é¨åã¯ä»ã®æ¹ãæ¸ãã¦ãããã¯ã äºå課é¡ã«ã¤ã㦠ï¼ãç¨èªã»ãã¼ã¯ã¼ãã«ã¤ãã¦è©³ãã調ã¹ã¬ãã¼ãã«ã¾ã¨ãã ãã©ã¬ã³ã¸ãã¯ã®èª²é¡ã§ãBIOS/UEFIã£ã¦ä½ï¼ãªã©ç¨èªã詳ãã調ã¹ããã®ã§ããã ï¼ãããã°ã©ã ãéç解æãã¦ã解æçµæãã¾ã¨ãã idbãã¡ã¤ã«ã渡ããIDAã§è§£æãè¡ããã®ã§ããã å®è¡ãã¡ã¤ã«ããªãã®ã§åç解æããããã¨ãã§ãããã²ãããã¢ã»ã³ãã©ãèªã¾ãªãã¨ãããªããã®ã§ããã ï¼ãwindowsã®ããã°ã©ã ãç¨æãããããã«å¯¾ãã¦exploitããã ãããã¡ãªã¼ãã¼ããã¼ãçºçããããã°ã©ã ã«å¯¾ãã¦exploitãè¡ããã®ã§ãWin32ç¨ã®shellcodeã1ããæ¸ããã®ã§ããã ï¼ãå種ãã¼ã«ã使ãæ £ãã ãã¤ããªç³» ã»IDA freeware versionï¼x8
ARMãã¤ã³ã³ã®ã¢ã¼ããã¯ãã£ã»ã¢ã»ã³ããªã«ã¤ãã¦å¦ç¿ãã¾ãããåäºå çã課é¡ãåºãããããåã解決ãã¦ããã¨ããå½¢ã§ããã¯ããã¦raspberry pi(raspbian)ã使ãæ©ä¼ã«ãªãã¾ããããã®å¾ã¯æ¬é¡ã®IDS,IPSãéçºããããã®éä¿¡ãããã³ã«ã®ç¥èãraspberry piã§ãããã¯ã¼ã¯è¨å®ããããããã±ãããèªä½ããããä»ã«ã¯ãããã¡ãªã¼ãã¼ããã¼ã«ã¤ãã¦å¦ç¿ãã¾ãããå ¨ãç¥ããªãç¥èãä¸ããå¦ç¿ããããã®ãããã§ã»ãã¥ãã£ã³ã®å 容ã«ã¤ãã¦ãããã¨ãã§ããããã«ãªãã¾ããï¼æ°ãããã¨ãå¦ã¹ãã楽ããã¦ãããããªã夢ã®ãããªäºåå¦ç¿ã§ããããSICTIC2014çã®å¤§ä¼ã¤ãã³ããéãªã£ã¦èªåã¯7/30以éã¯äºåå¦ç¿ã§ãã¾ããã§ããã ã»ã»ãã¥ãªãã£ãã£ã³ãåé¸å¢ã¨ã®é¢ãã ãã¥ã¼ã¿ã¼2人ã¨ç«¶æè ï¼äººãåè¨ï¼äººãåé¸ããã»ãã¥ãªãã£ãã£ã³ãï¼ï¼ï¼ï¼åå ã¨ç¥ãã¾ããï¼è¥¿æ°¸ãã¥ã¼ã¿
ã»ãã¥ãªãã£ãã£ã³ã å ¨å½å¤§ä¼ 2014ã¨ã¯IPAã»çµæ¸ç£æ¥çã主å¬ããã»ãã¥ãªãã£è¬ç¿ã»æ¼ç¿ãè¡ãå宿ã§ãã(ã»ãã¥ãªãã£ãã£ã³ãï¼IPA ç¬ç«è¡æ¿æ³äºº æ å ±å¦çæ¨é²æ©æ§) (æ¬å½ã¯)ãã¡å ã§å¿åããæãçç±ã¯æªã ã«åããã¾ãããå½é¸ãã¾ããã ã»ãã¥ãªãã£ãã£ã³ã2014ã«åæ ¼ãã¾ãã - ãããæ¥è¨ ä»åã¯ãã£ã³ãã«åå ããææ³ã»è¨é²ãã¾ã¨ãã¾ããã ï¼æ¥ç® éå§åä»ã11æã12æã§ãã£ããããé å¼µã£ã¦AM4:30ã«èµ·åºãã¦ç§»åãéå§ãã¾ããã夢ã®å½é§ ãè¶ãã¦èæµé§ ã«çããã®ã¯AM11:20ãããã§ããã ã»ãã¥ãã£ã³å¢ããã ããå çãè¿ãã®ã³ã³ããã§RedBullãè²·ãå ãã¦ããã¨ãã話ãèãã¦èæµé§ ã§RedBullãè²·ã£ã¦ããã¾ããã ã¬ãããã«ãã£ã pic.twitter.com/4QL7sI9YkYâ ãããã (@nemumupoyo) August 12, 2014
ãã¹ã¯ã¼ããå¿ããæ¹ã¯ãã¹ã¯ã¼ãã®åè¨å®ãè¡ã£ã¦ãã ããã ãã¾ããã°ã¤ã³ã§ããªãæ¹ã¯ãåãåãããã覧ããã ããCookieã®è¨å®ãã確èªãã ããã
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}