オリジンIPã®ç‰¹å®šã«ã‚ˆã‚‹ã‚¯ãƒ©ã‚¦ãƒ‰åž‹WAFã®ãƒã‚¤ãƒ‘スオリジンIPã®ç‰¹å®šã«ã‚ˆã‚‹ã‚¯ãƒ©ã‚¦ãƒ‰åž‹WAFã®ãƒã‚¤ãƒ‘ス May 27, 2019 昨年末ã«ã€ŒHow i was able to pwned application by Bypassing Cloudflare WAFã€ã‚’èªã‚“ã§ã€Cloudflareã®WAFã‚’ãƒã‚¤ãƒ‘スã™ã‚‹æ–¹æ³•ã¨ãã‚ŒãŒãƒã‚°ãƒã‚¦ãƒ³ãƒ†ã‚£ã§èªå®šã•ã‚ŒãŸäº‹ä¾‹ã‚’知ã£ãŸã€‚記事を書ã„ãŸ@vis_hackeræ°ã¯èª¿æŸ»ã«ã€ŒCloudFlairã€ã¨ã„ã†ãƒ„ールを使用ã—ã¦ãŠã‚Šã€ã“ã®ãƒ„ールを開発ã—ãŸ@christophetdæ°ã‚‚åŒæ§˜ã®æ–¹æ³•ã§å ±å¥¨é‡‘ã‚’ç²å¾—ã—ã¦ã„ãŸÂ¹ã€‚ Cloudflareã«é™ã‚‰ãšã‚¯ãƒ©ã‚¦ãƒ‰åž‹WAFã®ãƒã‚¤ãƒ‘スã¯2016å¹´é ƒã«ã¯æ—¢ã«è©±é¡Œã«ãªã£ã¦ãŠã‚Šã€è«–文も書ã‹ã‚Œã¦ã„ãŸÂ²ã€‚2013å¹´ã®BlackHat USAã§ã¯DDoSä¿è·ã®ãƒã‚¤ãƒ‘スã¨ã—ã¦ç™ºè¡¨ã•ã‚ŒÂ³ã€DDoSä¿è·ã‚µãƒ¼ãƒ“スをæä¾›ã™ã‚‹ãƒ™ãƒ³ãƒ€ãƒ¼ãŒæ³¨æ„å–šèµ·ã‚’è¡Œãªã£ã¦ã„ã‚‹â´ âµã€‚脆弱性ã¨ã—ã¦èˆˆå‘³æ·±ã‹ã£ãŸã®ã§è©³
DNSDumpster - Find & lookup dns records for recon & research
Beginners CTF 2019 ã® write-up
{{#tags}}- {{label}}
{{/tags}}