_%25E3%2581%25AE%25E5%258E%259F%25E7%2590%2586%25E3%2581%25A8%25E6%2594%25BB%25E6%2592%2583%25E6%2589%258B%25E6%25B3%2595%25E3%2581%258A%25E3%2582%2588%25E3%2581%25B3%25E3%2581%259D%25E3%2581%25AE%25E5%25AE%259F%25E8%25A3%2585%25E3%2581%25AB%25E3%2581%25A4%25E3%2581%2584)
CSS Injection (+ Recursive Import) ã®åŽŸç†ã¨æ”»æ’ƒæ‰‹æ³•ãŠã‚ˆã³ãã®å®Ÿè£…ã«ã¤ã„㦠- Szarny.ioã¯ã˜ã‚ã« æ³¨æ„ CSSiã®åŽŸç†ã¨æ¦‚è¦ ã‚¯ãƒ©ã‚·ã‚«ãƒ«ãªæ‰‹æ³• æ¦‚è¦ å‹•ä½œãƒ‡ãƒ¢ 実装 脆弱ãªWebアプリケーション(/classic/user/*) 攻撃用CSS生æˆã‚¹ã‚¯ãƒªãƒ—ト(/classic/attacker/exploit.py) 攻撃者用Webサーãƒ(/classic/attacker/server.py) Recursive Import を用ã„ãŸæ‰‹æ³• æ¦‚è¦ CSSã®ã‚¤ãƒ³ãƒãƒ¼ãƒˆã¨æ”»æ’ƒã®åŽŸç† 攻撃フãƒãƒ¼ 動作デモ 実装 脆弱ãªWebアプリケーション(/recursive/user/*) 攻撃者用Webサーãƒ(/recursive/attacker/server.py) ãŠã‚ã‚Šã« å‚考文献 ã¯ã˜ã‚㫠本記事ã§ã¯CSS Injection(以下，CSSi)ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ï¼Ž CSSiã«ã¤ã„ã¦ï¼Œãã®åŽŸç†ã‚„攻撃手法ã®æ¦‚è¦ã‚’示ã—ãŸã‚ã¨ï¼Œå®Ÿéš›ã«æ”»æ’ƒç’°å¢ƒã‚’実装ã—ã¦ï¼ŒHTML上ã«å˜åœ¨ã™ã‚‹æ©Ÿå¯†æƒ…å ±ã‚’çªƒå–ã™
CTFtime.org / Meepwn CTF Quals 2018 / Grandline / Writeup
{{#tags}}- {{label}}
{{/tags}}