[B! è„†å¼±æ€§] hiroaki256ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hiroaki256 id:hiroaki256

è„†å¼±æ€§ã«é–¢ã™ã‚‹hiroaki256ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

ã‚ªãƒ©ãƒ³ãƒ€æ”¿åºœãŒã€ŒGitHubã€ã«ã¾ã¨ã‚ã¦ã„ã‚‹Log4Shellè„†å¼±æ€§æƒ…å ±ãŒã‚ã‹ã‚Šã‚„ã™ã„ã¨ä¸€éƒ¨ã§è©±é¡Œã«ï¼æƒ…å ±åŽé›†ã®ä¸€åŠ©ã«ã€ã‚„ã˜ã†ã¾ã®æœã€‘
hiroaki256 2021/12/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

log4j
ãƒªãƒ³ã‚¯
é«˜æ ¡2å¹´ç”ŸãŒé–‹ç™ºã—ãŸWindowså°‚ç”¨è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠãƒ¼ã€ŒDetExploitã€ãŒãƒªãƒªãƒ¼ã‚¹ï¼ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã§é–‹ç™ºã€‚ä»Šå¾Œã¯ã‚¢ãƒ‰ã‚ªãƒ³ã«ã‚ˆã‚‹æ‹¡å¼µã‚„è‡ªå‹•æ›´æ–°æ©Ÿèƒ½ã‚‚
hiroaki256 2019/10/25
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ„ãƒ¼ãƒ«

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ã€ç‰¹é›†ã€‘ Spectre V2å¯¾ç–ã«ã‚ˆã‚‹æ€§èƒ½ä½Žä¸‹ã‚’ç·©å’Œã™ã‚‹ã€ŒRetpolineã€ã®åŠ¹æžœã‚’ç¢ºèªã™ã‚‹
hiroaki256 2019/03/28
cpu

è„†å¼±æ€§

spectre
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§è„†å¼±æ€§æ¤œæŸ»ï¼Dockerfileã«4è¡Œè¿½åŠ ã§å°Žå…¥ã§ãã‚‹microscannerã‚’è©¦ã—ã¦ã¿ãŸ
microscannerã¯ã€CVEãƒ™ãƒ¼ã‚¹ã§Dockerã‚¤ãƒ¡ãƒ¼ã‚¸ã®è„†å¼±æ€§æ¤œæŸ»ã‚’ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ç°¡å˜ã«å°Žå…¥ã§ãã‹ã¤æœ‰ç”¨ãªã®ã§ã€å°Žå…¥æ–¹æ³•ã¨åˆ©ç”¨ä¸Šã®æ³¨æ„äº‹é …ãªã©ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ å…ˆæ—¥ãƒ¬ãƒãƒ¼ãƒˆã—ãŸã€ŒDockeræ¼¬ã‘ã®ä¸€æ—¥ã‚’å…±ã«ã€œDocker Meetup Tokyo #23ã€ã¯ã€æƒ…å ±é‡ãŒã¦ã‚“ã“ç››ã‚Šã§ã€å¦ã³å¤šãã¦æ¥½ã—ãã¦ãƒ¯ãƒƒã‚»ãƒã‚¤ã ã£ãŸã‚“ã§ã™ãŒã€ãã®ä¸ã§ã€ã¨ã(@CS_Toku)ã•ã‚“ãŒLTç™ºè¡¨ã•ã‚Œã¦ã„ãŸã€ŒKubeConå ±å‘Šã¨microscannerè©¦ã—ã¦ã¿ãŸã€ã®microscannerãŒã€é¢ç™½ãã†ã ã£ãŸã®ã§æ—©é€Ÿè§¦ã£ã¦ã¿ã¾ã—ãŸã€‚ Dockerfileã«4è¡Œè¿½åŠ ã™ã‚‹ã ã‘ã§ã€CVEãƒ™ãƒ¼ã‚¹ã®è„†å¼±æ€§æ¤œæŸ»ãŒç„¡æ–™ã§åˆ©ç”¨ã§ãã€æ—¢å˜ã®ã‚¤ãƒ¡ãƒ¼ã‚¸ãƒ“ãƒ«ãƒ‰ã«çµ„ã‚€ã“ã‚€ã®ã‚‚ãŠæ‰‹è»½ãã†ãªã®ã§ã€ã“ã‚Œã‹ã‚‰ã‚³ãƒ³ãƒ†ãƒŠå°Žå…¥ã—ã‚ˆã†ã¨æ€ã£ã¦ã„ã‚‹äººã‚‚ã€æ—¢ã«æœ¬ç•ªã§ã‚¬ãƒ³ã‚¬ãƒ³ã‚³ãƒ³ãƒ†ãƒŠä½¿ã£ã¦ã„ã‚‹äººã‚‚ã€ä¸€åº¦å°Žå…¥ã‚’æ¤œè¨Žã—ã¦ã¿ã¦ã¯ã„ã‹ãŒã§ã—ã‚‡ã†ã‹ã€‚ __ ï¼ˆç¥ï¼‰
hiroaki256 2018/05/21
ãƒ„ãƒ¼ãƒ«

ã‚³ãƒ³ãƒ†ãƒŠ

docker

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ã‚¼ãƒã‹ã‚‰è€ƒãˆã‚‹è„†å¼±æ€§å¯¾å¿œ - Qiita
ã‚‚ã¡ã‚ã‚“ã€è„†å¼±æ€§ã®å†…å®¹ã«å¤§ããä¾å˜ã™ã‚‹ã®ã§ã“ã‚ŒãŒå…¨ã¦ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ã€Œ å¯¾ç–ãŒç¢ºç«‹ã•ã‚Œã¦ã„ãªã„ã®ã«æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒå‡ºå›žã£ã¦ã„ã¦ã€æ”»æ’ƒäº‹ä¾‹ã‚‚å ±å‘Šã•ã‚Œã¦ã„ã‚‹ã®ãŒæœ€ã‚‚ãƒ¤ãƒã‚¤ ã€ã£ã¦ã„ã†èªè˜ã¯æŒã£ã¦ãŠãã¹ãã§ã—ã‚‡ã†ã€‚ è„†å¼±æ€§ã®å½±éŸ¿æœ‰ç„¡ ä¸–é–“ã‚’é¨’ãŒã›ã‚‹è„†å¼±æ€§ãŒã‚ã£ãŸã¨ã—ã¦ã‚‚ã€è©²å½“æ©Ÿå™¨ãŒãªã‘ã‚Œã°é¨’ãå¿…è¦ã‚‚å½“ç„¶ãªã„ã§ã™ã—ã€æ”»æ’ƒã—ã‚ˆã†ãŒãªã„ä»•çµ„ã¿ã«ãªã£ã¦ã„ãŸã¨ã—ãŸã‚‰ãã‚Œã‚‚æ°—ã«ã™ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ãã†ã„ã†æ„å‘³ã§ã€å¯¾è±¡ã®è„†å¼±æ€§ãŒè‡ªã‚·ã‚¹ãƒ†ãƒ ã«å½±éŸ¿ãŒã‚ã‚‹ã®ã‹ã©ã†ã‹ã‚’èª¿ã¹ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚è¦³ç‚¹ã¨ã—ã¦ã¯ä»¥ä¸‹ã¨ãªã‚Šã¾ã™ã€‚ è©²å½“ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®æœ‰ç„¡ æ”»æ’ƒæ¡ä»¶ã®æˆç«‹å¯å¦ è©²å½“ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®æœ‰ç„¡ è„†å¼±æ€§ã¯å½±éŸ¿ç¯„å›²ã‚’ã‚‚ã¡ã¾ã™ã€‚æœ€ãŸã‚‹ã‚‚ã®ãŒã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã€ã€Œ ãƒãƒ¼ã‚¸ãƒ§ãƒ³Xä»¥é™ ã€ã§ã‚ã£ãŸã‚Šã€Œ ãƒãƒ¼ã‚¸ãƒ§ãƒ³Yã‹ã‚‰Zã®é–“ ã€ãªã©ã¨è¡¨ç¾ã•ã‚ŒãŸã‚Šã—ã¾ã™ã€‚ ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ã‚ˆã£ã¦ã¯ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®å‰å¾Œé–¢ä¿‚ãŒèªã¿ã¥ã‚‰ã‹ã£ãŸã‚Šã™ã‚‹ã¨æ€ã†ã®ã§ã€
hiroaki256 2018/01/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ãƒžãƒãƒ¼ã‚¸ãƒ¡ãƒ³ãƒˆ

ã‚¤ãƒ³ãƒ•ãƒ©
ãƒªãƒ³ã‚¯
OWASP ZAP ç°¡å˜ãªä½¿ã„æ–¹
2017/9/2 OWASP Kansai ãƒãƒ¼ã‚«ãƒ«ãƒãƒ£ãƒ—ã‚¿ãƒ¼ãƒŸãƒ¼ãƒ†ã‚£ãƒ³ã‚° ã‚„ã‚‰ã‚Œæ•™æã‚µãƒ¼ãƒ(OWASP BWA)ã‚’ç”¨ã„ãŸã€OWASP ZAPã®ç°¡å˜ãªä½¿ã„æ–¹ç´¹ä»‹
hiroaki256 2017/09/05
owasp

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠ OpenVAS ã‚’ä½¿ã£ã¦ã¿ã‚‹ - CUBE SUGAR CONTAINER
ä»Šå›žã¯ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã§ã‚ã‚‹ OpenVAS ã‚’ä½¿ã£ã¦ã¿ã‚‹ã“ã¨ã«ã™ã‚‹ã€‚ è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã¨ã„ã†ã®ã¯ã€ãƒ›ã‚¹ãƒˆã«æ—¢çŸ¥ã®è„†å¼±æ€§ãŒå«ã¾ã‚Œãªã„ã‹ã©ã†ã‹ã‚’è‡ªå‹•ã§ã‚¹ã‚ãƒ£ãƒ³ã—ã¦ãã‚Œã‚‹ãƒ„ãƒ¼ãƒ«ã€‚ æ³¨æ„: è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ã¯ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚„ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å«ã‚€ãŸã‚å¤–éƒ¨ã®ã‚µãƒ¼ãƒã«ã¯å®Ÿè¡Œã—ãªã„ã“ã¨ ä½¿ã£ãŸç’°å¢ƒã¯æ¬¡ã®é€šã‚Šã€‚OS ã¯ Ubuntu 16.04 LTS ã«ã—ãŸã€‚ $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04.3 LTS Release: 16.04 Codename: xenial $ uname -r 4.4.0-89-generic ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç”¨é€”ã ã¨ Kali Linux ã‚’ä½¿ã†ã“ã¨ã‚‚å¤šã„ã¿ãŸã„ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« Ubuntu ã§ OpenVA
hiroaki256 2017/08/09
ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹

OSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
SIOS Tech. Lab - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã«ãªã‚‹æŠ€è¡“ãƒˆãƒ”ãƒƒã‚¯ã‚¹
ã‚µã‚¤ã‚ªã‚¹ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒ ã‚¯ãƒ©ã‚¦ãƒ‰ã€OSSã€èªè¨¼ã«é–¢ã™ã‚‹æ§˜ã€…ãªæƒ…å ±ã‚’æä¾›ã—ã¾ã™ã€‚
hiroaki256 2017/02/19
waf

Web

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx