RPO
RPO Friday, 21 March 2014 Relative VS Absolute RPO (Relative Path Overwrite) is a technique to take advantage of relative URLs by overwriting their target file. To understand the technique we must first look into the differences between relative and absolute URLs. An absolute URL is basically the full URL for a destination address including the protocol and domain name whereas a relative URL doesn
RPO Gadgets
If you are here because you thought the title meant Return Oriented Programming (ROP), then sorry for the clickbait. I wanted to introduce a techninque to help exploit Relative Path Overwrite (RPO) when XSS is not an option by chaining "gadgets". This will be the first part of the series of me exploiting RPO against Google's services. Since this is an advanced topic, readers are expected to have f
CSS Injection å†å…¥é–€
本稿ã¯ã‚»ã‚ュリティã‚ャンプ ä¿®äº†ç”Ÿé€²æ— #seccamp OB/OG Advent Calendar 2018 ã® 17 日目ã¨ã—ã¦æ›¸ã‹ã‚ŒãŸè¨˜äº‹ã§ã™ã€‚一時期よã話題ã«ä¸ŠãŒã£ã¦ã„㟠CSS Injection ã‚’, 改ã‚ã¦çœºã‚ç›´ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¯ã˜ã‚ã« #seccamp 2012 Web ã‚»ã‚ュリティクラスå’æ¥ç”Ÿã®ã¤ã°ã‚(@lmt_swallow, @y0n3uchy)ã§ã™ã€‚ã‚»ã‚ュリティ・(ミニ|ジュニア)ã‚ャンプã«æœ€è¿‘カメラ片手ã«å‡ºæ²¡ã—ã¦ã„ã¾ã™ã€‚æ¥å¹´ã‚‚é ‘å¼µã‚‹ãžã„。 å’æ¥ç”Ÿé€²æ— Advent Calendar らã—ã„ã®ã§, 最åˆã«å°‘ã—ã ã‘, 自分ã®è¿‘æ³ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠãã“ã¨ã«ã—ã¾ã™ã€‚ 自分ã®ä»Šã„る大å¦ã¯ 2 年生ã¾ã§ã¯æ•™é¤Šå¦éƒ¨ã«æ‰€å±žã›ãã°ãªã‚Šã¾ã›ã‚“。ãã®ãŸã‚大å¦ã§ã¯å¿ƒç†å¦ã‚„脳科å¦, æ•°å¦(ã®ã•ã‚ã‚Š)ã®å‹‰å¼·ã‚’ãŸãã•ã‚“ã—ã¦ã„ã¾ã™(授æ¥ã«æ½œã£ãŸã‚Š)。ãã†ã—ã¦ã“ã‚Œã¾ã§ã®è¶£å‘³ã¨ã¯å¤–ã‚ŒãŸã“ã¨ã«ç†±
CSS - The Sexy Assassin
The Sexy Assassin's Arsenal - Power optimized Concussion sticks (PoCs) Arithmetics Sums Multiplications chmod calc CSS Hangman Game CSK1 CSK2 Loops Stopmotion animation 7 segments counter binary counter Mouse tracking CSS Paint CSS Attribute Reading Attribute Reader History Reading CSS History Bool CSS LAN Scanner History Crawler
Masato Kinugawa Security Blog: @font-faceã®unicode-rangeを利用ã—ã¦CSSã ã‘ã§ãƒ†ã‚ストをèªã¿å‡ºã™
English version: http://mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html ---------------------------------- CSSã®Â @font-faceã®unicode-range を使ã£ãŸæ”»æ’ƒæ‰‹æ³•ã‚’æ€ã„ã¤ã„ãŸã®ã§å…±æœ‰ã—ã¾ã™ã€‚ ã“ã®æ‰‹æ³•ã‚’使ã†ã¨ã€æ”»æ’ƒè€…ã¯CSSã ã‘ã§ãƒšãƒ¼ã‚¸å†…ã«æ›¸ã‹ã‚ŒãŸãƒ†ã‚ストを推測ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®æ‰‹æ³•ã¯ã€æ¬¡ã®ã‚ˆã†ãªå ´é¢ã§åˆ©ç”¨ã§ãã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。 ・ ブラウザã®XSSä¿è·æ©Ÿèƒ½ã®ãƒã‚¤ãƒ‘ス(Chromeã®XSS Auditorã¯<style>ã®æ³¨å…¥ã‚’ブãƒãƒƒã‚¯ã—ãªã„) ・ ターゲットã®ãƒšãƒ¼ã‚¸ã§ã€JavaScriptã®å®Ÿè¡Œã¯ã§ããªã„ãŒã‚¹ã‚¿ã‚¤ãƒ«ãŒæ³¨å…¥ã§ããŸå ´åˆã®æ”»æ’ƒã¸ã®åˆ©ç”¨ 自分ãŒçŸ¥ã‚‹é™ã‚Šã§ã¯ã€CSSを利用ã—ãŸä»Šã§ã‚‚使ãˆã‚‹æ—¢çŸ¥ã®æ”»æ’ƒæ‰‹æ³•ã«ã¯ã€å±žæ€§å€¤ã‚’
Practical Web Cache Poisoning | PortSwigger Web Security Blog
Published: 09 August 2018 at 23:20 UTC Updated: 02 October 2023 at 14:39 UTC AbstractWeb cache poisoning has long been an elusive vulnerability, a 'theoretical' threat used mostly to scare developers into obediently patching issues that nobody could actually exploit. In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery sys
アセンブラ入門
アセンブラ入門ã¸ã‚ˆã†ã“ã。アセンブラ・アセンブリ言語（マシン語）をåˆã‚ã¦å¦ã¶æ–¹ã‹ã‚‰ä¸ç´šè€…å‘ã‘ã®ãƒšãƒ¼ã‚¸ã§ã™ã€‚ç·´ç¿’å•é¡Œã‚‚豊富ã§ã™ã€‚x86ç³»CPUをターゲットã«ã—ã¦ã„ã¾ã™ã€‚
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}