DNSãƒ‰ç´ äººãŒdigコマンドã¨Route 53を使ã£ã¦ã€DNSã«ã¤ã„ã¦ã‚ã‚Œã“ã‚Œå¦ã‚“ã§ã¿ãŸ | DevelopersIO
試ã—ã«ã€digコマンドを利用ã—ã¦ã€yahoo.co.jpã«åå‰è§£æ±ºã—ã¦ã¿ã¾ã—ょã†ã€‚ $ dig yahoo.co.jp ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.56.amzn1 <<>> yahoo.co.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57517 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;yahoo.co.jp. IN A ;; ANSWER SECTION: yahoo.co.jp. 60 IN A 182.22.59.229 yahoo.co.jp.
ELBã®DNS Lookupã§IPアドレスを8個返ã™ã‚ˆã†ã«ãªã‚Šã¾ã—㟠| DevelopersIO
今ã¾ã§ã®ELB 今ã¾ã§ã®ELBã¯ã‚ã‚‹DNSåã«å¯¾ã—ã¦1ã¤ã®IPアドレスを返ã—ã¦ã„ã¾ã—ãŸã€‚ã“ã®IPアドレスã¯å›ºå®šã§ã¯ãªãã€ELBã®æ··é›‘状æ³ã«ã‚ˆã£ã¦è‡ªå‹•çš„ã«å¤‰åŒ–ã—ã¦ã„ã¾ã—ãŸã€‚ã“ã®DNSåã«å¯¾ã™ã‚‹IPアドレスã®å¤‰æ›´ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¢ãƒ—リå´ã®DNSã‚ャッシュç‰ã§ä¸å…·åˆã‚’èµ·ã“ã™å±é™ºæ€§ãŒã‚¼ãƒã§ã¯ãªãã€å®Ÿéš›ã«ç§ã¯ä½“験ã—ã¾ã—ãŸã€‚ æ–°ã—ã„ELB æ–°ã—ã„ELBã¯æœ€å¤§ã§8ã¤ã®IPアドレスを返ã—ã¦ãã‚Œã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã£ã¦ã€ELBã®æ··é›‘状æ³ã«ã‚ˆã£ã¦æ‹¡å¤§ã—ãŸã‚Šç¸®å°ã—ãŸå ´åˆã«ã€ã•ã£ãã¾ã§è¦‹ãˆã¦ã„ãŸã‚ャッシュã—ãŸIPアドレスãŒè¦‹ã¤ã‹ã‚‰ãªã„ã¨ã„ã£ãŸã‚¨ãƒ©ãƒ¼ãŒç„¡ããªã‚Šã¾ã™ã€‚ 8ã¤ã®IPアドレスを確èªã™ã‚‹ digコマンドã§ç¢ºèªã§ãã¾ã™ã€‚試ã—ã¦ã¿ã¦å‹˜é•ã„ã—ã¦ã„ãŸã®ã§ã™ãŒã€AZã®æ•°ã«å¿œã˜ã¦æœ€å¤§ã§8ã¤ã®ã‚ˆã†ã§ã™ã€‚以下ã¯AZ1ã¤ã®å ´åˆã§ã€çµæžœã®Aレコードã¯1ã¤ã§ã—ãŸã€‚ $ dig MyLoadBalancer-83p080071.ap-n
GitHub - meirwah/awesome-incident-response: A curated list of tools for incident response
APTSimulator - Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised. Atomic Red Team (ART) - Small and highly portable detection tests mapped to the MITRE ATT&CK Framework. AutoTTP - Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers. Calde
インシデントレスãƒãƒ³ã‚¹åˆå‹•å¯¾å¿œæ™‚ã®ãƒ‡ãƒ¼ã‚¿åŽé›†ãƒ„ール - setodaNote
2023-01-10 データåŽé›†ãƒ„ール インシデントレスãƒãƒ³ã‚¹ã®åˆå‹•å¯¾å¿œã§ç«¯æœ«ã‹ã‚‰ãƒ‡ãƒ¼ã‚¿ã‚’å–å¾—ã™ã‚‹ã®ã«åˆ©ç”¨ã§ããã†ãªãƒ„ールをã„ãã¤ã‹è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ 主ã«ãƒ•ã‚¡ã‚¤ãƒ«ãƒ€ãƒ³ãƒ—å–得を目的ã¨ã—ã¦ã€ã±ã£ã¨ãã®ã¾ã¾ä½¿ãˆã‚‹ã‚‚ã®ã‚’ã¨ã„ã†è¦³ç‚¹ã§ã„ãã¤ã‹ã®æ©Ÿèƒ½ã‚’確èªã—ã€çµæžœã‚’表ã«ã¾ã¨ã‚ã¾ã—ãŸã€‚（※1ã€â€»2ã€â€»6） 実行çµæžœï¼ˆWindows 環境ã§ç¢ºèªï¼‰ # å称 対応OS $MFT $UsnJrnl $LogFile Evtx Registry Prefetch Browser History Memory Dump Report é…å¸ƒå ´æ‰€ 1 CDIR Collector Windows OK OK - OK OK (+.log) OK IE/Edge, Chrome, Firefox OK Log å…¬å¼ã‚µã‚¤ãƒˆ 2 CyLR Windows, Mac, Linux OK OK OK OK OK (+.log)
WebShellåž‹ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆã‚’è¨ç½®ã—ã¦WebShellã«å¯¾ã™ã‚‹ã‚¹ã‚ャンを観察ã—㟠- ã“ã‚“ã¨ã‚ーるã—ーã“ã‚“ã¨ã‚ーるã¶ã„
ä¹…ã—ã¶ã‚Šã«ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆã®ãƒã‚¿ã§ã™ã€‚ タイトルãŒå…¨ã¦ã§ã™ãŒã€Œæœ€è¿‘ã€WebShellè¨ç½®ã®èª¿æŸ»ã«å¯¾ã™ã‚‹ã‚¹ã‚ャン多ã™ãŽãªã„？ã€ã¨æ€ã£ãŸã®ãŒç™ºç«¯ã€‚ WebShellè¨ç½®ã®èª¿æŸ»ã«å¯¾ã™ã‚‹ã‚¹ã‚ャンã¨ã¯ã€é©å½“ãªãƒ•ã‚¡ã‚¤ãƒ«åã®phpファイルã«å¯¾ã—ã¦ã€HTTPリクエストボディã«die(@md5(J4nur4ry));ã¨ã‹ã‚»ãƒƒãƒˆã•ã‚Œã¦ã„るリクエストã§ã™ã€‚ ã“ã†ã„ã†ã¨ãã«ã€Œãªã‚‰ã€æœ¬å½“ã«WebShellãŒã‚ã£ãŸã‚‰ã€ãŠå‰ã‚‰(攻撃者)ã©ã†ã™ã‚‹ã¤ã‚‚ã‚Šãªã®ï¼Ÿã€ã¨æ€ã†ã®ã¯è‡ªç„¶ãªç™ºæƒ³ã§ã™ã。 ã¨ã„ã†ã“ã¨ã§ã€æŠ•å…¥ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã‚’実行ã™ã‚‹WebShellを作æˆã—ã¦è¦³å¯Ÿã‚’ã—ã¾ã—ãŸã€‚ 環境 AWSã®EC2ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ç«‹ã¦ã¦ã€ãã®ä¸Šã«Dockerコンテナを立ã¦ã¾ã—ãŸã€‚ ãªãŠã€ç¾åœ¨ã€é«˜å¯¾è©±åž‹ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆåŸºç›¤ã‚’構築ã—ã¦ãŠã‚Šã€ãã¡ã‚‰ã«æ§‹ç¯‰ã—ãŸDockerコンテナã®ä¸€ã¤ã§ã™ã€‚ é‹ç”¨ãŒå®‰å®šã—ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ‰‹é †ãŒã¾ã¨ã¾ã£ãŸã‚‰githubã§å…¬é–‹äºˆå®šã§
REST Security - OWASP Cheat Sheet Series
REST Security Cheat Sheet¶ Introduction¶ REST (or REpresentational State Transfer) is an architectural style first described in Roy Fielding's Ph.D. dissertation on Architectural Styles and the Design of Network-based Software Architectures. It evolved as Fielding wrote the HTTP/1.1 and URI specs and has been proven to be well-suited for developing distributed hypermedia applications. While REST i
ランã‚ング
ãŠçŸ¥ã‚‰ã›
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Python3　æ£è¦è¡¨ç¾ã‚’用ã„ã¦IPアドレスを判定ã—ãŸã„
WoWHoneypotã®access_logã‚’Fluentdã§BigQueryã«å…¥ã‚Œã‚‹(base64デコード) | Qrunch（クランãƒï¼‰
https://digitalforensic.jp/wp-content/uploads/2018/08/guideline_7.1st.pdf
＊白百åˆã‚も＊
GitHub - NextronSystems/APTSimulator: A toolset to make a system look as if it was the victim of an APT attack
GitHub - ForensicArtifacts/artifacts: Digital Forensics artifact repository
GitHub - graneed/bwpot: 高対話型ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆ
GitHub - JPCERTCC/MalConfScan: Volatility plugin for extracts configuration data of known malware
Home
GitHub - sisoc-tokyo/Real-timeDetectionAD_ver2
GitHub - shieldfy/API-Security-Checklist: Checklist of the most important security countermeasures when designing, testing, and releasing your API
{{#tags}}- {{label}}
{{/tags}}