[B! security] indicationã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

indication id:indication

securityã«é–¢ã™ã‚‹indicationã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (31)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Black Hat USA 2019 / DEF CON 27ã«å‚åŠ ã—ã¦ãã¾ã—ãŸ -Black Hatç·¨- | NTT Communications Developer Portal
æŠ€è¡“é–‹ç™ºéƒ¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¦ãƒ‹ãƒƒãƒˆã®æ˜Ÿé‡Žã§ã™ã€‚ å‰å›žã®ã€ŒBlack Hat USA 2019 / DEF CON 27ã«å‚åŠ ã—ã¦ãã¾ã—ãŸã€ã§ã¯ã€ãã‚Œãžã‚Œã®ã‚¤ãƒ™ãƒ³ãƒˆã®æ¦‚è¦ã¨ãŠã™ã™ã‚ã®æ©ãæ–¹ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ã¾ã—ãŸã€‚ ä»Šå›žã¯ã€ãã®ã†ã¡Black Hat USA 2019ã®è©³ç´°ãªå†…å®¹ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ã¾ã™ã€‚ å‰å›žã‚‚è¿°ã¹ãŸã¨ãŠã‚Šã€Black Hatã®ä¸ã§è¡Œã‚ã‚Œã‚‹ã‚¤ãƒ™ãƒ³ãƒˆã¯ä¸»ã«ãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°ã€ãƒ–ãƒªãƒ¼ãƒ•ã‚£ãƒ³ã‚°ã€ãƒ“ã‚¸ãƒã‚¹ãƒ›ãƒ¼ãƒ«ã®3ã¤ãŒã‚ã‚Šã¾ã™ã€‚ãã®3ã¤ã®ã†ã¡ã€ç§ãŒå‚åŠ ã—ãŸãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°ã®å†…å®¹ã¨ã€è´è¬›ã—ãŸãƒ–ãƒªãƒ¼ãƒ•ã‚£ãƒ³ã‚°ã®ä¸€éƒ¨ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°å†…å®¹ã®ç´¹ä»‹ ç§ã¯ã€ â€œAdvarsary Tactics: Red Team Opsâ€ ã¨ã„ã†4æ—¥é–“ã®ãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°ã‚’å—è¬›ã—ã¾ã—ãŸã€‚ https://www.blackhat.com/us-19/training/schedule/#adversary-tactics-
indication 2019/09/24
ã€Œå›ã®ãŸã‚ã«æ¨©é™æ˜‡æ ¼ã—ãŸã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’ç”¨æ„ã—ã¦ãŠã„ãŸã‚ˆã€å®Ÿã¯è·ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã§ã—ãŸã¨ã‹ã€ã‚ªãƒã¯æµçŸ³ã«ãªã„ã‹

ç’°å¢ƒ

security
ãƒªãƒ³ã‚¯
å›½å†…ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒå¯¾è±¡ã€TCP 22/23/80ç•ªã¸ã®ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚’NICTãŒå®Ÿæ–½ã¸ã€11æœˆ1æ—¥ã®æ”¹æ£æ³•ä»¤æ–½è¡Œã‚’å—ã‘ - INTERNET Watch
indication 2018/11/08
é–“é•ãˆã¦ä»–å›½ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¸ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ç››å¤§ã«ã‚„ã£ã¦ã—ã¾ã†ã¨ã‹ãªã„ã®ã‹ãªã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

internet

security
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
indication 2018/01/04
security

javascript

XSS
ãƒªãƒ³ã‚¯
BIOS Security Updates for Multiple Issues | IntelÂ® Product Security Center
IntelÂ® Product Security Announcements Intel is focused on ensuring the security of our customers computing environments. We are committed to rapidly addressing issues as they arise, and providing recommendations through security advisories and security announcements. Report a Vulnerability If you have information about a security issue or vulnerability with anÂ Intel branded product or techno logy,
indication 2017/11/21
intel

security
ãƒªãƒ³ã‚¯
Linux security tools (top 100)
Hunting the best security toolsThere is a wide range of security tools available for Linux and other platforms. To make them easier to find, we started an extensive review process to gather and document them. The goal of this top 100 is to showcase the best Linux security tools. By best there is an implied level of quality, healthy community and good governance of the project. Requirements for lis
indication 2017/07/11
çŸ¥ã‚‰ãªã„ã‚‚ã®ãŒå¤šæ•°ã‚ã‚‹

linux

security

è³‡æ–™

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
Exploitingå®Ÿç¿’ã€€ç¬¬8å›ž
æ—¥æ™‚ï¼š2008-06-28 æ‹…å½“ï¼šDefolos ç›®æ¬¡ å‰å›žã¾ã§ã®ãƒãƒƒã‚ãƒ³ã‚°æ–¹æ³•ã«ãŠã‘ã‚‹å•é¡Œç‚¹ NOPã‚¹ãƒ¬ãƒƒãƒ‰ RETã®é€£ç™º æŸ”è»Ÿæ€§ å®Ÿéš›ã®æŒ¿å…¥ãƒ™ã‚¯ã‚¿ãƒ¼ç”Ÿæˆãƒ—ãƒã‚°ãƒ©ãƒ ä¾‹é¡Œ æ¬¡å›žã®äºˆå®š å‰å›žã¾ã§ã®ãƒãƒƒã‚ãƒ³ã‚°æ–¹æ³•ã«ãŠã‘ã‚‹å•é¡Œç‚¹ å‰å›žã¾ã§ã¯SEIPã®ä½ç½®ã‚„æˆ»ã‚Šã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ã—ã¦æ›¸ãæ›ãˆã‚‹ã¹ããƒãƒƒãƒ•ã‚¡ã®å…ˆé ã‚¢ãƒ‰ãƒ¬ã‚¹ãªã©ã‚’ãƒ—ãƒã‚°ãƒ©ãƒ ã«è¡¨ç¤ºã—ã¦ã„ãŸ ãã‚Œã‚’åŸºã«BOFã‚’ä½¿ã£ã¦SEIFã‚’æ›¸ãæ›ãˆãŸ ã—ã‹ã—ã€é€šå¸¸ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã¯ãã‚“ãªæƒ…å ±ã‚’è¡¨ç¤ºã—ã¦ãã‚Œãªã„ï¼ åŽ³å¯†ãªå ´æ‰€ã‚’æŒ‡å®šã™ã‚‹ã®ã¯ç¾å®Ÿçš„ã§ã¯ãªã„ â†’ æŸ”è»Ÿæ€§ ã‚’æŒã£ãŸæ”»æ’ƒæ‰‹æ³•ãŒç¾å®Ÿã«ã¯å¿…è¦ ãƒãƒƒãƒ•ã‚¡å…ˆé ã‚¢ãƒ‰ãƒ¬ã‚¹ã®æŒ‡å®šã«æŸ”è»Ÿæ€§ã‚’æŒãŸã›ã‚‹ï¼NOPã‚¹ãƒ¬ãƒƒãƒ‰ SEIPã®å ´æ‰€äºˆæ¸¬ã«æŸ”è»Ÿæ€§ã‚’æŒãŸã›ã‚‹ï¼RETã®é€£ç™º NOPã‚¹ãƒ¬ãƒƒãƒ‰ NOP...No Operationã€€ä½•ã‚‚ã—ãªã„å‘½ä»¤ã€€16é€²æ•°ã§0x90 ã‚¹ãƒ¬ãƒƒãƒ‰...ã‚½ãƒª NOPã‚¹ãƒ¬ãƒƒãƒ‰...NOPå‘½ä»¤ã‚’ç«‹ã¦ç¶šã‘ã«æ›¸ãä»˜ã‘
indication 2016/05/09
security

ãƒ—ãƒã‚°ãƒ©ãƒ
ãƒªãƒ³ã‚¯
æ—¥æœ¬ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ - Site Home - TechNet Blogs
Congratulations to the Top MSRC 2024 Q3 Security Researchers! Wednesday, October 23, 2024 Congratulations to all the researchers recognized in this quarterâ€™s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2024 Q3 Security Researcher Leaderboard are wkai, VictorV, and Zhih
indication 2015/09/24
ãƒªãƒ•ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ä½¿ã£ã¦ã‚‹ã‚ˆã†ãªã‚±ãƒ¼ã‚¹ã¯å¤§ä¸ˆå¤«ã ã‚ã†ã‹

Windows

security
ãƒªãƒ³ã‚¯
æ—¥ç«‹ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚ºã€Žç§˜æ–‡ File Encryptionã€ã¨è‡ªå·±è§£å‡åž‹exeãƒ•ã‚¡ã‚¤ãƒ«ã«å¯¾ã™ã‚‹åå¿œ
æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ã®æƒ…å ±æ¼æ´©äº‹ä»¶ã®èƒŒæ™¯ã®ä¸€ã¤ã¨ã‚‚è€ƒãˆã‚‰ã‚Œã‚‹å•é¡Œã«ã¤ã„ã¦å¤šãã®äººã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚’é›†ã‚ãŸã‚‚ã®ã§ã™ã€‚ è‡ªå·±å¾©å·åž‹æ©Ÿå¯†ãƒ•ã‚¡ã‚¤ãƒ«ã€è‡ªå·±è§£å‡åž‹æ›¸åº«ã€ãªã©ã¨å‘¼ã°ã‚Œã‚‹Windowsã®å®Ÿè¡Œå½¢å¼(exeå½¢å¼)ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ¡ãƒ¼ãƒ«ã«æ·»ä»˜ã™ã‚‹ã“ã¨ã€ãã®ã‚ˆã†ãªä½¿ç”¨æ–¹æ³•ã‚’å‰æã¨ã—ãŸã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼å¯¾ç–ã‚½ãƒ•ãƒˆã€ã¸ã®æ‰¹åˆ¤ãŒä¸»ãªå†…å®¹ã§ã™ã€‚ ç¶²ç¾…çš„ã«é›†ã‚ãŸãŸã‚é‡ãŒå¤šãã„ãã¤ã‹ã®è«–ç‚¹ã‚„æ„è¦‹ãŒæ··ã–ã£ã¦ã„ã¾ã™ã€‚
indication 2015/06/08
kasperskyãŒæ¿€ãŠã“ã·ã‚“ã·ã‚“ä¸¸ã§ã“ã‚Œã‚’ãƒ”ãƒ³ãƒã‚¤ãƒ³ãƒˆã§å‰Šé™¤ã•ã‚Œã¦ãŸãªã€‚è‰¯ã„åã ã¨æ€ã†ã‚ˆ

ãƒã‚¿

security
ãƒªãƒ³ã‚¯
1183461 â€“ (CVE-2015-0235) CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow
indication 2015/01/28
é¦™ã°ã—ã„(å†·ã‚„æ±—)

security

bug
ãƒªãƒ³ã‚¯
Vagrantã¨Kali Linuxã‚’ä½¿ã£ã¦ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã®è„†å¼±æ€§ã‚’ãƒ†ã‚¹ãƒˆã—ã‚ˆã† | Casley Deep Innovationsæ ªå¼ä¼šç¤¾ æŠ€è¡“ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€‚ç”°ä¸ï¼ˆé‚¦ï¼‰ã§ã™ã€‚ ä»Šå›žã¯ã€â€The most advanced penetration testing distribution,ever.â€ ãªLinuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚‹Kali Linuxã‚’ä½¿ã£ã¦ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã®è„†å¼±æ€§ã‚’ãƒ†ã‚¹ãƒˆã—ã¦ã¿ã¾ã™ã€‚ Vagrantã¨Virtual Boxã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« Vagrantã¨VirtualBoxã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã‚ã‚‹ã“ã¨ãŒå‰æã§ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã„ãªã„æ–¹ã¯ã¾ãšã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãŠã„ã¦ãã ã•ã„ã€‚ Oracle VM VirtualBox Vagrant ã¤ã„ã§ã«ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã®vagrant-vbguestã‚‚å…¥ã‚Œã¦ãŠãã¨ä¾¿åˆ©ã ã¨æ€ã„ã¾ã™ã€‚ Kali Linuxã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã¾ãšã¯Kali Linuxã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãªã„ã¨å§‹ã¾ã‚Šã¾ã›ã‚“ã€‚ ã“ã¡ã‚‰â†“ã‚’å‚è€ƒã«æ—¥æœ¬èªžç‰ˆã®Kali Linuxã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ wasabeef/vagr
indication 2014/04/25
ã“ã‚“ã©ä»®æƒ³ãƒžã‚·ãƒ³ã«å…¥ã‚Œã¦ãŠã

linux

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ç™»éŒ²ã•ã‚Œã‚‹ã¨ã¤ã‚‰ã„ãƒ¦ãƒ¼ã‚¶ãƒ¼åãƒªã‚¹ãƒˆ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? Twitter, GitHub, Qiita ãªã©ã®ã‚ˆã†ã« root/(username) ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒšãƒ¼ã‚¸ã‚’ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã™ã‚‹ã¨ã“ã‚ãŒå¢—ãˆã¦ãã¦ã„ã‚‹. ã“ã®ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’æŽ¡ç”¨ã—, help ãªã©ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã‚’è¨±å¯ã™ã‚‹ã¨, root/help ãŒå¥ªã‚ã‚Œã¦ã—ã¾ã†. ãã“ã§, ç™»éŒ²æ™‚ã« validate ã§, ã‚ã‚‹ç¨‹åº¦æŽ’é™¤ã™ã‚‹ã®ãŒç¿’ã‚ã—ã«ãªã£ã¦ã„ã‚‹ã¨æ€ã†ãŒ, æ€¥ã« root ç›´ä¸‹ã«ç½®ããŸã„ãƒšãƒ¼ã‚¸ãŒå¢—ãˆãŸã¨ããªã©ã«å–å¾—ã•ã‚Œã¦ã„ã‚‹ã¨æ‚²ã—ã„ã“ã¨ã«ãªã‚‹. ã¾ãŸ, ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ©ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã ã¨, api ãªã©ã‚’ã†ã£ã‹ã‚Šå–ã‚‰ã‚Œã¦ã—ã¾ã†ã‚±ãƒ¼ã‚¹ãŒå¾Œã‚’çµ¶
indication 2014/02/16
API

development

security
ãƒªãƒ³ã‚¯
æ¯Žæ—¥ãŒAndroid&å†™çœŸæ—¥å’Œ - ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ã€ŒSYSTEM_ALERT_WINDOWã€ã‚’ä½¿ã†ã‚¢ãƒ—ãƒªãŒèµ·å‹•ã—ã¦ã„ã‚‹ã¨ã€apkã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ç”»é¢ã®ã€Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€ãƒœã‚¿ãƒ³ãŒæŠ¼ã›ãªã„
ã€Œæ—¥å’Œè¦‹Androidä¸»ç¾©ã€ï¼ˆhttp://hiyoridroid.wordpress.com/ï¼‰ã®ãƒŸãƒ‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ï¼‹å†™çœŸã‚’å°‘ã€…ã€‚å†™çœŸã¯ãŸã¶ã‚“ã»ã¨ã‚“ã©ãŒpicplzçµŒç”±ã€‚ ã‚ã‚“ã¾ã‚Šå‡ºãã‚ã™ã“ã¨ã®ãªã„ãƒˆãƒ©ãƒ–ãƒ«ã‹ã‚‚ã—ã‚Œãªã„ã‘ã‚Œã©ã‚‚ã€ã€Œãªã‚‹ã»ã©ï¼ã€ã¨æ€ã£ãŸã®ã§ã¡ã‚‡ã£ã¨è¨˜äº‹ã«ã—ã¦ã¿ã‚‹ã€‚ ã‚ã‚‹ã¨ãã€ãƒžãƒ¼ã‚±ãƒƒãƒˆã‹ã‚‰ã§ãªãapkãƒ•ã‚¡ã‚¤ãƒ«ã§æŸæ‰€ã‹ã‚‰è½ã¨ã—ãŸã‚¢ãƒ—ãƒªã‚’è‡ªåˆ†ã®ç«¯æœ«ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã‚ˆã†ã¨ã—ãŸã¨ã“ã‚ã€apkãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¿ãƒƒãƒ—ã—ã¦å‡ºã¦ãã‚‹ç”»é¢ã®ã€Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€ãƒœã‚¿ãƒ³ã ã‘ã©ã†ã‚„ã£ã¦ã‚‚æŠ¼ã›ãªã„ã¨ã„ã†ã“ã¨ãŒã‚ã£ãŸã€‚ ã‚ãƒ£ãƒ³ã‚»ãƒ«ãƒœã‚¿ãƒ³ã ã‘ã¯æŠ¼ã›ã‚‹ã‚“ã ãŒã€ã©ã†ã—ã¦ã‚‚ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒœã‚¿ãƒ³ãŒåå¿œã—ãªã„ã€‚ ãªã‚“ã§ã‹ã¨æ€ã£ã¦èª¿ã¹ã¦ã¿ãŸã‚‰ã€ã“ã‚“ãªç¾è±¡ã€ã¨ã„ã†ã‹ä»•æ§˜ãŒã‚ã‚‹ã“ã¨ã‚’çŸ¥ã£ãŸã€‚ ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ã€ŒSYSTEM_ALERT_WINDOWã€ã‚’ä½¿ã†ã‚¢ãƒ—ãƒªãŒèµ·å‹•ã—ã¦ã„ã‚‹ã¨ã€ï¼ˆæã‚‰ãã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®éƒ½åˆã§ï¼‰apkã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ç”»é¢ã®ã€Œ
indication 2013/09/18
Android

security
ãƒªãƒ³ã‚¯
Apache HTTPD: `Options -FollowSymLinks` ã¯ä¸å®Œå…¨ - ãƒ€ãƒ¡å‡ºã— Blog
ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯æ”»æ’ƒã‚’é˜²ããŸã‚ã® Apache HTTPD ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è§£èª¬ã¯ã“ã¡ã‚‰: Apache HTTPD: mod_allowfileowner https://fumiyas.github.io/apache/mod-allowfileowner.html èƒŒæ™¯ ãƒãƒªãƒãƒƒãƒ—ã®å…±æœ‰ Web ã‚µãƒ¼ãƒ“ã‚¹ä¸‹ã®ã‚µã‚¤ãƒˆæ”¹ã–ã‚“äº‹ä»¶ã§ã€ æ”»æ’ƒæ‰‹æ³•ã®ä¸€ã¤ã¨ã—ã¦ ã€Œä»–ãƒ¦ãƒ¼ã‚¶ãƒ¼æ‰€æœ‰ã®ãƒ•ã‚¡ã‚¤ãƒ«ã¸ã®ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’è‡ªåˆ†ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸‹ã«ä½œã‚Šã€Apache HTTPD çµŒç”±ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã€æ‰‹é †ãŒåˆ©ç”¨ã•ã‚ŒãŸã‚‰ã—ã„ã€‚ å‚è€ƒ: http://blog.tokumaru.org/2013/09/symlink-attack.html å½“ç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã€Œãƒãƒªãƒãƒƒãƒ—ï¼ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚µã‚¤ãƒˆã¸ã®ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹å¤§è¦æ¨¡æ”»æ’ƒã«ã¤ã„ã¦ http://lolipop.jp/info/news/4149/#090
indication 2013/09/03
å‹äººå‘ã‘ã«æ§‹ç¯‰ã—ãŸã‚µãƒ¼ãƒãƒ¼ã¯mpm-itkã§ã€apacheè‡ªä½“ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼æ¨©é™ã§å‹•ãã®ã§webDAVã‚‚ã„ã‘ã‚‹ã‹ã‚‰ã€å¤‰æ…‹ä»•æ§˜ã€‚ãŸã ã€apacheãŒrootã§å‹•ãå¿…è¦ãŒã‚ã‚‹ã‹ã‚‰ä¸€å®šã®ä¸å®‰ã¯ã‚ã‚‹

apache

è¨å®š

security
ãƒªãƒ³ã‚¯
ã„ã¾ã•ã‚‰èžã‘ãªã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å–ã‚Šæ‰±ã„æ–¹
2. æœ¬æ—¥ãŠè©±ã—ã—ãŸã„ã“ã¨ â€¢ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å™¨ã®è¦ä»¶ â€¢ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸èº«ã®è¦ä»¶ â€¢ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å…¥åŠ›ç”»é¢ã®è¦ä»¶ â€¢ èªè¨¼ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®è¦ä»¶ â€¢ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¿å˜æ–¹æ³• 2Copyright Â© 2013 HASH Consulting Corp. 4. SMBCãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¯ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå›žå¾©ã«æ‰‹é–“ã‚’ã‹ã‘ã‚‹ã“ã¨ã§å¯¾å¿œ? 4Copyright Â© 2013 HASH Consulting Corp. http://www.smbc.co.jp/kojin/otetsuduki/anshou/saihakko/index.html â€¢ SMBCã¯ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒãƒƒã‚¯å¾Œã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå›žå¾©ã‚’æ›¸é¢ã‚ã‚‹ã„ã¯é›»è©±ã¨ã™ã‚‹ ã“ã¨ã§ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æ”»æ’ƒã«å¯¾ç–ã—ã¦ã„ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã‚‹ã€‚ â€¢ è‡ªå‹•çš„ã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå›žå¾©ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆã¯ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è¦ä»¶ã‚’åŽ³ã— ãã™ã‚‹ã“ã¨ã§ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è©¦è¡Œã«å¯¾æŠ—ã—ãŸæ–¹ãŒã‚ˆã„ â€¢
indication 2013/08/22
è¾žæ›¸

security
ãƒªãƒ³ã‚¯
6æœˆ9æ—¥ï¼ˆæ—¥ï¼‰ ã«æ”¾æ˜ ã•ã‚ŒãŸã€Œã»ã“Ã—ãŸã¦ã€ã®ã€ŒãŸã¦ã€ã®è£å´ã«ã¤ã„ã¦
2013/06/11ã€€ã‚³ãƒ¼ã‚¹ï¼šå…ƒç¥–ã“ã£ã¦ã‚Š ã€Œå…ƒç¥–ã“ã£ã¦ã‚Šã€è¨˜äº‹ã¯ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ—§ãƒ–ãƒã‚°[netagent-blog.jp]ã«æŽ²è¼‰ã•ã‚Œã¦ã„ãŸè¨˜äº‹ã§ã‚ã‚Šã€ç¾åœ¨ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã«åœ¨ç±ã—ã¦ã„ãªã„ãƒ©ã‚¤ã‚¿ãƒ¼ã®è¨˜äº‹ã‚‚å«ã¿ã¾ã™ã€‚ 6æœˆ9æ—¥ï¼ˆæ—¥ï¼‰ ã«æ”¾æ˜ ã•ã‚ŒãŸã€Œã»ã“Ã—ãŸã¦ã€ã®ã€ŒãŸã¦ã€ã®è£å´ã«ã¤ã„ã¦ 2013å¹´6æœˆ9æ—¥ã«æ”¾æ˜ ã•ã‚Œã¾ã—ãŸã€ãƒ•ã‚¸ãƒ†ãƒ¬ãƒ“ã€Œã»ã“Ã—ãŸã¦ã€ã«é–¢ã—ã¾ã—ã¦ã€åéŸ¿ãŒå¤§ãã„ã‚ˆã†ã§ã™ã®ã§æ’®å½±ã®è£å´ã‚’ã”ç´¹ä»‹ã„ãŸã—ã¾ã™ã€‚ ã¾ãšã€ç•ªçµ„ã‚³ãƒ¼ãƒŠãƒ¼å†…ã®å†’é ã«ã”ç´¹ä»‹ã„ãŸã ãã¾ã—ãŸå¼Šç¤¾è£½å“ã€Œé˜²äººã€ã«ã¤ã„ã¦ã¯ã€å¼Šç¤¾ãŒã©ã®ã‚ˆã†ãªä¼šç¤¾ãªã®ã‹ã‚’ç°¡å˜ã«ç´¹ä»‹ã™ã‚‹ã¨ã„ã†ã“ã¨ã§ãŠè¦‹ã›ã—ã¾ã—ãŸãŒã€é˜²äººã¯ãƒ¡ãƒ¼ãƒ«ã«ã‚ˆã‚‹æ¨™çš„åž‹æ”»æ’ƒã‚’é˜²ããŸã‚ã®è£½å“ã§ã™ã®ã§ã€ãã®å¾Œã®å¯¾æ±ºã«ã¯ä¸€åˆ‡ä½¿ç”¨ã—ã¦ã„ã¾ã›ã‚“ã€‚ å®Ÿéš›ã®å¯¾æ±ºã«éš›ã—ã¦é˜²å¾¡å´ã«æ±‚ã‚ã‚‰ã‚ŒãŸã®ã¯ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ‘ãƒƒã‚¯ã‚„ä¿®æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã®å…¨ãå½“ã¦ã‚‰ã‚Œã¦ã„ãªã„ãƒ‘ã‚½ã‚³ãƒ³ä¸Šã§ã€è„†å¼±æ€§ãŒç¢ºå®Ÿã«å˜åœ¨ã—ã¦ã„ã‚‹ã‚µãƒ¼
indication 2013/06/11
win2kã¨ã‹ã€xp spãªã—ã¨ã‹ã€ç•ªçµ„ã§ã—ã£ã‹ã‚Šæ¡ˆå†…ã—ã¦ã„ã‚Œã°ã€å–¶æ¥æ´»å‹•ã«ä½¿ãˆãŸã‹ã‚‚ã—ã‚Œãªã„ã®ã«(ã‚¹ãƒãƒ³ã‚µãƒ¼å•é¡Œã¯åº¦å¤–è¦–)

ç’°å¢ƒ

security

ãƒ†ãƒ¬ãƒ“
ãƒªãƒ³ã‚¯
The Zeek Network Security Monitor
Zeek has been a cornerstone of the open-source and cybersecurity communities for decades. Originally developed by Vern Paxson in the 1990s under the name â€œBro,â€ Zeek was designed to provide deep insights into network activity across university and national lab networks. In 2018, the project was renamed Zeek to reflect its growing role and evolution in the world of network security. Today, Zeek rem
indication 2013/02/25
linux

network

system

security
ãƒªãƒ³ã‚¯
Microsoft PowerPoint - 05 ã€è³‡æ–™ï¼˜ï¼ï¼”ã€‘Linuxï¼ˆNECï¼‰ - å…¬é–‹ç”¨.ppt [äº’æ›ãƒ¢ãƒ¼ãƒ‰]
è³‡æ–™ï¼˜ï¼ï¼” è³‡æ–™ Malwareã«é–¢ã™ã‚‹èª¿æŸ»ç ”ç©¶2007å¹´åº¦ Malwareã«é–¢ã™ã‚‹èª¿æŸ»ç ”ç©¶2007å¹´åº¦ Linuxã‚·ã‚¹ãƒ†ãƒ ã«ãŠã‘ã‚‹ Linuxã‚·ã‚¹ãƒ†ãƒ ã«ãŠã‘ã‚‹ Malwareã®è„…å¨ã«é–¢ã™ã‚‹èª¿æŸ»ç ”ç©¶ Linuxã‚·ã‚¹ãƒ†ãƒ ã¨Malware Li ã‚·ã‚¹ãƒ†ãƒ ã®å¢—åŠ ï¿½ Linuxã‚·ã‚¹ãƒ†ãƒ ã®å¢—åŠ Â¾ Webã‚µãƒ¼ãƒç‰ã€ã‚µãƒ¼ãƒã‚·ã‚¹ãƒ†ãƒ ã¨ã—ã¦ã®åˆ©ç”¨ã«åŠ ãˆã€ã‚¯ãƒ© ã‚¤ã‚¢ãƒ³ãƒˆã‚·ã‚¹ãƒ†ãƒ ã¨ã—ã¦ã®åˆ©ç”¨ã‚‚å¢—åŠ ã€‚ ã‚¤ã‚¢ãƒ³ãƒˆã‚·ã‚¹ãƒ†ãƒ ã¨ã—ã¦ã®åˆ©ç”¨ã‚‚å¢—åŠ ã€‚ Â¾ æ•°ãŒå¢—ãˆã‚Œã°æ”»æ’ƒã‚¿ãƒ¼ã‚²ãƒƒãƒˆã¨ã—ã¦ã®æ—¨ã¿ãŒå¢—ã™ãŸã‚ã€æ”» æ’ƒãŒå¢—ãˆã‚‹äº‹ãŒäºˆæƒ³ã•ã‚Œã‚‹ã€‚ å‹•ä½œã™ã‚‹ å®Ÿæ…‹ ï¿½ Linuxã§å‹•ä½œã™ã‚‹Malwareã®å®Ÿæ…‹ Â¾ Windowså‘ã‘Malwareã«ã¤ã„ã¦ã¯å®Ÿæ…‹èª¿æŸ»ãŒè¡Œã‚ã‚Œã¦ã„ ã‚‹ãŒ Linuxå‘ã‘ã«ã¤ã„ã¦ã¯ç¾çŠ¶èª¿æŸ»ä¸ååˆ† ã‚‹ãŒã€Linuxå‘ã‘ã«ã¤ã„ã¦ã¯ç¾çŠ¶èª¿æŸ»ä¸ååˆ†ã€‚ Â¾ Linuxå‘ã‘ã®Malwareã‚’ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã¨ã—ãŸAntiVir
indication 2013/01/12
ãƒžãƒ«ã‚¦ã‚§ã‚¢ã«ã¤ã„ã¦ã®çŠ¶æ³èª¿æŸ»

linux

security
ãƒªãƒ³ã‚¯
ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®è¦å‘Š
è¡¨ç¤ºä¸ã®ãƒšãƒ¼ã‚¸ã‹ã‚‰ http://ierae.co.jp/uploads/webview.pdf ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã‚ˆã†ã¨ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ãƒšãƒ¼ã‚¸ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ãªã„ã‚ˆã†ã«ã™ã‚‹å ´åˆã¯ã€å‰ã®ãƒšãƒ¼ã‚¸ã«æˆ»ã£ã¦ãã ã•ã„ã€‚
indication 2012/10/18
ã‚ãƒ¼ã‚„ã£ã±ã‚Šã€‚çµæ§‹é›£ã—ãã†ã€‚

android

security
ãƒªãƒ³ã‚¯
VPNãªã©ã§ä½¿ã‚ã‚Œã‚‹èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã€ŒMS-CHAPv2ã€ã€ã‚¯ãƒ©ãƒƒã‚¯ã•ã‚Œã‚‹ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ã‚¢ãƒ¬ã‚²äººãªã‚‰ãã£ã¨èªã‚“ã§ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ« memoã«ã‚ˆã‚‹ã¨ã€èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã€ŒMS-CHAPv2ã€ãŒã”è‡¨çµ‚ã¨ã®ã“ã¨ã€‚MS-CHAPv2ã¯VPNã®1ã¤ã§ã‚ã‚‹PPTPãªã©ã§ä¸€èˆ¬ã«ä½¿ã‚ã‚Œã¦ã„ã¾ã™ãŒã€ã€ŒAll users and providers of PPTP VPN solutions should immediately start migrating to a different VPN protocol. PPTP traffic should be considered unencrypted.ã€ã¨ã¾ã§æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ã¨ã¯ã„ãˆä»£æ›¿ã¨ãªã‚‹OpenVPNã¯ãƒ¡ã‚¸ãƒ£ãƒ¼ãªOSã«çµ±åˆã•ã‚Œã¦ã„ãªã„ã‚ˆã†ã§rootã‚„Jailbreakã‚’è¦ã™ã‚‹ãŸã‚ã€PPTPã»ã©æ°—è»½ã«ä½¿ãˆã‚‹ã‚‚ã®ã§ã¯ãªã•ãã†ã§ã™ã€‚
indication 2012/08/03
oops!

security

vpn
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - LINEãŒã“ã®å…ˆç”Ÿãã®ã“ã‚‹ã«ã¯
â– LINEãŒã“ã®å…ˆç”Ÿãã®ã“ã‚‹ã«ã¯ å…ˆã€…é€±ã€ãƒ†ãƒ¬ãƒ“æ±äº¬ã®ãƒ¯ãƒ¼ãƒ«ãƒ‰ãƒ“ã‚¸ãƒã‚¹ã‚µãƒ†ãƒ©ã‚¤ãƒˆã§ã€æœ€è¿‘æµè¡Œã®ã€ŒLINEã€ãŒç‰¹é›†ã•ã‚Œã¦ã„ãŸã®ã ãŒã€çµŒæ¸ˆç³»ã®ç•ªçµ„ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã€ã€Œå…ƒã‚«ãƒ¬ãŒå‡ºã¦å«Œã€ã€ã€ŒçŸ¥ã‚‰ãªã„äººãŒå‡ºã¦æ€–ã„ã€ã¨ã„ã†è¡—ã®å£°ã‚’ã¨ã£ã¦ä¼ãˆã€é›»è©±å¸³ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã®ä»¶ã«ã‚‚è§¦ã‚Œã‚‹ãªã©ã€è² ã®é¢ã‚‚æ‰±ã£ã¦ã„ã¦ã€ã¨ã¦ã‚‚ã‚ˆã„ç•ªçµ„ã§ã‚ã£ãŸã€‚ äººæ°—æ€¥æ‹¡å¤§ã€ŒLINEã€ã®å®ŸåŠ›ã¯, ãƒ¯ãƒ¼ãƒ«ãƒ‰ãƒ“ã‚¸ãƒã‚¹ã‚µãƒ†ãƒ©ã‚¤ãƒˆ, 2012å¹´6æœˆ22æ—¥ ç•ªçµ„ã‚’è¦‹ãŸå¾Œã€ä¹…ã—ã¶ã‚Šã«Twitterã‚’ã€ŒLINE çŸ¥ã‚‰ãªã„äººã€ã§æ¤œç´¢ã—ã¦ã¿ãŸã¨ã“ã‚ã€ä»¥å‰ã«ã‚‚å¢—ã—ã¦å¤§é‡ã®ãƒ„ã‚¤ãƒ¼ãƒˆãŒå‡ºã¦ããŸã®ã ãŒã€ãã®ã»ã¨ã‚“ã©ãŒã€ã€ŒèŠ¸èƒ½äººã®ãƒžãƒãƒ¼ã‚¸ãƒ£ã§ã™ãŒã€ã¨ã„ã†è©æ¬ºspamãŒæ¥ãŸã¨ã„ã†å ±å‘Šã§ã‚ã£ãŸã€‚ã¡ã‚‡ã†ã©ã“ã®ã“ã‚ã€LINEã«å¯¾ã—ã¦å¤§é‡ã®spamãŒç™ºç”Ÿã—ã¦ã„ãŸã‚ˆã†ã ã£ãŸã€‚ãã—ã¦ã€LINEã®é‹å–¶å…ƒã¯spamé˜²æ¢ã«å‹•ã„ãŸã‚ˆã†ã ã£ãŸã€‚ @magic_kanata ã”å ±å‘Šã‚ã‚ŠãŒã¨
indication 2012/07/07
lineãŒ ã“ã® å…ˆç”Ÿ ãã®ã“ã‚‹ ã«ã¯

ã‚ã¨ã§èªã‚€

security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸