GitHub - bp0lr/gauplusYou signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
「Athenaã§170万円請求ã€ã€ŒEC2ãŒå¾©æ—§ã§ããªã„ã€ã€€AWSã—ãã˜ã‚Šå…ˆç”Ÿ part.1
Cloud Operator Days Tokyo ã¯ã€ã‚¯ãƒ©ã‚¦ãƒ‰ã®é‹ç”¨è€…ã«ç„¦ç‚¹ã‚’当ã¦ãŸæŠ€è¡“者å‘ã‘ã®æ–°ã—ã„テックイベントã§ã™ã€‚AWS環境ã®é‹ç”¨ã‚’手ãŒã‘ã‚‹ã‚¢ã‚¤ãƒ¬ãƒƒãƒˆæ ªå¼ä¼šç¤¾ã®ã‚¤ãƒ³ãƒ•ãƒ©ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢å¤å±‹æ°ãŒã€å®Ÿéš›ã«ã‚„ã£ã¦ã—ã¾ã£ãŸã—ãã˜ã‚Šã‚’ç´¹ä»‹ã€‚åŽŸå› ã¨å¯¾ç–を語りã¾ã™ã€‚ã¾ãšã¯ã€ŒAthenaã§170万円請求ã€ã€ŒEC2ãŒå¾©æ—§ã§ããªã„ã€ã€€ã¨ã„ã†ã—ãã˜ã‚Šã‹ã‚‰ã€‚（全2回） ã—ãã˜ã‚Šå…ˆç”Ÿ on AWS å¤å±‹å•“介æ°ï¼ˆä»¥ä¸‹ã€å¤å±‹ï¼‰ï¼šã§ã¯ã€Œã—ãã˜ã‚Šå…ˆç”Ÿ on AWSã€ã¨ã„ã†ã“ã¨ã§ã€å§‹ã‚ãŸã„ã¨æ€ã„ã¾ã™ã€‚よã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚今日ã¯ã€AWS環境を使ã£ã¦æ—¥ã€…é‹ç”¨ã—ã¦ã„ãä¸ã§ç™ºç”Ÿã—ãŸã€ã—ãã˜ã‚Šã€å¤±æ•—事例。ãã—ã¦ãã®ã—ãã˜ã‚Šã®åŽŸå› ã¨ã€ãã“ã‹ã‚‰å¾—られãŸæ•™è¨“ã«ã¤ã„ã¦ãŠä¼ãˆã—よã†ã¨æ€ã„ã¾ã™ã€‚ 今日ã“ã®ãŠè©±ã‚’èžã„ãŸã¿ãªã•ã‚“ã®ä¸ã§ã€Œã‚ã€ã†ã¡ã®ç’°å¢ƒã©ã†ã£ã ã£ãŸã‹ãªï¼Ÿã€ã¨ã€æ€ã‚れる方もã„らã£ã—ゃるã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。今日ãŠä¼ãˆã™ã‚‹ã“ã¨ã®ä¸ã§ã€ã¡ã‚‡ã£
入門 Amazon Athena - Qiita
世ã®ä¸çš„ã«ã¯åˆ†æžãªã©ã‚’ã™ã‚‹éš›ã«ã¯BigQueryã®ã‚±ãƒ¼ã‚¹ãŒå¤šã„ã¨æ€ã„ã¾ã™ãŒã€ä»•äº‹ã§Amazon Athenaを触るケースãŒå‡ºã¦ããŸã®ã§ã€å…¥é–€ã¨ã—ã¦ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ Amazon Athenaã¨ã¯ BigQueryã¿ãŸãã€SQLã§å¤§ããªãƒ‡ãƒ¼ã‚¿ã‚’集計ãªã©ã§ãã‚‹AWSã®ã‚µãƒ¼ãƒ“スã§ã™ã€‚ 分æžã®ä»–ã«ã‚‚ä»–ã®AWSサービスã®ãƒã‚°ç¢ºèªãªã©ã§ã‚‚使ã‚ã‚ŒãŸã‚Šã—ã¾ã™ãŒã€ä»Šå›žã¯åˆ†æžå¯„ã‚Šã®è¨˜äº‹ã¨ã—ã¦é€²ã‚ã¾ã™ã€‚ BigQueryã¨æ¯”ã¹ã¦å¤§ããç•°ãªã‚‹ç‚¹ã¨ã—ã¦ã€ã€Œãƒ‡ãƒ¼ã‚¿ã‚’S3ã«é…ç½®ã™ã‚‹ã€ã¨ã„ã†ç‚¹ãŒã‚ã‚Šã¾ã™ï¼ˆãã‚Œã«ã‚ˆã‚‹ãƒ¡ãƒªãƒƒãƒˆãªã©ã¯å¾Œè¿°ï¼‰ã€‚ コストã¯ã©ã†ãªã®ï¼Ÿ 基本的ã«ã‚¹ã‚ャンサイズã®ã¿ã«èª²é‡‘ã•ã‚Œã¾ã™ã€‚ Amazon Athena ã§ã¯ã€å®Ÿè¡Œã—ãŸã‚¯ã‚¨ãƒªã«å¯¾ã—ã¦ã®ã¿æ–™é‡‘ãŒç™ºç”Ÿã—ã¾ã™ã€‚クエリã”ã¨ã«ã‚¹ã‚ャンã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã®åˆ†é‡ã«åŸºã¥ã„ã¦æ–™é‡‘ãŒè«‹æ±‚ã•ã‚Œã€1 テラãƒã‚¤ãƒˆã”ã¨ã« 5 USD ãŒè«‹æ±‚ã•ã‚Œã¾ã™ã€‚ Amazon Athena
domain record lookup services
※本投稿ã«è¨˜è¼‰ã®å†…容ã¯çŠ¯ç½ªè¡Œç‚ºã‚’助長ã™ã‚‹ã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“。必ãšè‡ªèº«ã®ç®¡ç†ä¸‹ã«ã‚ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚„サーãƒãƒ¼ã«å¯¾ã—ã¦ã®ã¿å®Ÿæ–½ã—ã¦ãã ã•ã„。 サブドメインã®åˆ—挙ãŒå®Œäº†ã—ãŸã‚‰ã€æ¬¡ã¯ãã®ã‚µãƒ–ドメインã«ç´ã¥ãIPアドレスを見ã¤ã‘ã¾ã™ã€‚ãªãœIPアドレスãŒå¿…è¦ã‹ã¨ã„ã†ã¨ã€æ¬¡ã‚¹ãƒ†ãƒƒãƒ—ã§ä½¿ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“スã®æ¤œç´¢ãŒIPアドレスベースã®ãŸã‚ã§ã™ã€‚ ã•ã¦ã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‹ã‚‰IPアドレスã«å¤‰æ›ã‚’è¡Œã†ã ã‘ã§ã‚ã‚Œã°ã€nslookupã‚’ãŸãŸã‘ã°å……分ãªã®ã§ã™ãŒã€ã“ã®ã‚·ãƒªãƒ¼ã‚ºã§ã¯ã‚ãã¾ã§ãƒ‘ッシブã«ã“ã ã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€è©²å½“DNSレコードãŒã„ã¤ã®æ™‚点ã§æœ‰åŠ¹ã§ã‚ã£ãŸã‚‚ã®ã‹ã‚’知る必è¦ãŒã‚ã‚‹ãŸã‚ã€ãã®æƒ…å ±ãŒåˆ†ã‹ã‚‹ã€ä»¥ä¸‹3サービスを紹介ã—ã¾ã™ã€‚ãªãŠã€ç´¹ä»‹ã™ã‚‹ã‚µãƒ¼ãƒ“スã®ã†ã¡1～2ã¯ã€å‰ã‚¹ãƒ†ãƒƒãƒ—ã§æ—¢ã«ç´¹ä»‹æ¸ˆã¿ã®ãŸã‚ã€ã‚µãƒ¼ãƒ“スã®å†…容ãªã©é‡è¤‡ã™ã‚‹ç®‡æ‰€ã‚‚ã‚ã‚Šã¾ã™ãŒã€ã”容赦ãã ã•ã„。 1.Security Trails(★★) 2.RiskIQ(★★) 3.
GitHub - iipc/awesome-web-archiving: An Awesome List for getting started with web archiving
ArchiveBox - A tool which maintains an additive archive from RSS feeds, bookmarks, and links using wget, Chrome headless, and other methods (formerly Bookmark Archiver). (In Development) archivenow - A Python library to push web resources into on-demand web archives. (Stable) ArchiveWeb.Page - A plugin for Chrome and other Chromium based browsers that lets you interactively archive web pages, repl
é»’å¡—ã‚Šã®DNS
é»’å¡—ã‚Šã®DNS (èŽç¸®ç·¨) ～共用サービスã®é—‡ï½ž Apr 23, 2019 ssmjp E-ONTAP.COM 鈴木常彦 (@tss_ontap) ã‚ã‚‹æ—¥ã®æˆ‘ãŒè·å ´ (æ¥) ç§(TEL) 「m.chukyo-u.ac.jp 見ã¦ã¿ã‚Œï¼ ä¸è¯æ–™ç†å±‹ã«ä¹—ã£å–られã¦ã‚‹ãž wwwã€ æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ã€Œãˆï¼...ã“ã‚Œã¯...調ã¹ã¾ã™...〠後日 「レンタルサーãƒè¿”ã—ãŸå¾Œ A レコード削除申請ãŒãªã‹ã£ãŸã‚ˆã†ã§ã™!〠å±é™ºãªå¿˜ã‚Œç‰© - Floating Domainname 借りãŸã‚µãƒ¼ãƒ (IPアドレス) ã«ãƒªã‚½ãƒ¼ã‚¹ãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’å‘ã‘ãŸã¾ã¾è§£ç´„ã—ã¦ã¯ã„ã‘ãªã„ Subdomain Takeover Attack 放置ã•ã‚ŒãŸ CNAME ã®å…ˆã¯ç‹™ã£ã¦å†ç™»éŒ²ã•ã‚Œã†ã‚‹ã€ã€ã€ old-service.example.jp IN CNAME orphan.cdn.example.com fan.football.son
Configuration | Documentation | Poetry - Python dependency management and packaging made easy
Introduction Poetry is a tool for dependency management and packaging in Python. Basic usage For the basic usage introduction we will be installing pendulum, a datetime library. Libraries This chapter will tell you how to make your library installable through Poetry. Versioning Poetry requires PEP 440-compliant versions for all projects. While Poetry does not enforce any release convention, it use
転è·é»™ç¤ºéŒ²(6) Poetryã§ä½œã£ãŸFastAPIアプリをVSCode Debuggerã§ãƒ‡ãƒãƒƒã‚°ã™ã‚‹ - Qiita
Visual Studio Code(VSCode)ã«ã‚ˆã‚‹Poetryプãƒã‚¸ã‚§ã‚¯ãƒˆã®ãƒ‡ãƒãƒƒã‚° モãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ æ–¹å‘性も定ã¾ã‚‰ãªã„ã®ã§WebフレームワークãŒä½•ã—ã¦ã„ã‚‹ã®ã‹ç†è§£ã—よã†ã¨FastAPIã®ã‚½ãƒ¼ã‚¹ã§ã‚‚èªã‚€ã‹ã¨æ€ã£ãŸã®ã ãŒpoetryã®ä»®æƒ³ç’°å¢ƒãŒVSCodeã§èªè˜ã•ã‚Œãªã‹ã£ãŸ. poetry shellã§ä»®æƒ³ç’°å¢ƒã‚’有効ã«ã™ã‚‹ 基本ã¯å…¬å¼ã®Debuggingã«ã‚るよã†ã«uvicornをモジュールã¨ã—ã¦è¿½åŠ ã—ã¦ãƒˆãƒƒãƒ—レベルã®ã‚³ãƒ¼ãƒ‰ã¨ã—ã¦å®Ÿè¡Œã™ã‚‹. å•é¡Œã¯poetryãŒä½œã‚‹ä»®æƒ³ç’°å¢ƒã‚’ã©ã†ã‚„ã£ã¦VSCodeã«èªè˜ã•ã›ã‚‹ã‹ã§ã‚ã‚‹. VSCodeã¯pyenvã‹ã‚‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸã‚¤ãƒ³ã‚¿ãƒ—リタã«ã¤ã„ã¦ã¯å‹æ‰‹ã«èªè˜ã—ã¦ãれる. é©å½“ãªPythonファイルを開ãã¨ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ãƒ»ãƒãƒ¼ã®å·¦ç«¯ã«ç¾åœ¨ã®ã‚¤ãƒ³ã‚¿ãƒ—リタãŒè¡¨ç¤ºã•ã‚Œã‚‹. ã“ã“をクリックã™ã‚‹ã¨ã‚¤ãƒ³ã‚¿ãƒ—リタã®é¸æŠžè‚¢ãŒè¡¨ç¤ºã•ã‚Œã‚‹. pyenvã¨æœ€å¾Œã«ã¤ã„ã¦ã„ã‚‹ã®
PoetryãŒä½œæˆã—ãŸä»®æƒ³ç’°å¢ƒã‚’VSCodeã«èªè˜ã•ã›ã‚‹æ–¹æ³•
å‰æ›¸ã Zennã§ã®ã¯ã˜ã‚ã¦ã®æŠ•ç¨¿ã«ãªã‚Šã¾ã™ã€‚よã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ Poetryã§ã¯ä½•ã‚‰ã‹ã®ãƒ‘ッケージをインストールã™ã‚‹å‰ã«ä»®æƒ³ç’°å¢ƒãŒè‡ªå‹•çš„ã«ä½œæˆã•ã‚Œã‚‹ãŒã€VSCodeãŒãã®ä»®æƒ³ç’°å¢ƒã‚’見ã¤ã‘ã¦ãã‚Œãªã„ã®ã§ã€æ‰‹å‹•ã§èªè˜ã•ã›ã¦ã‚ã’ãªã‘ã‚Œã°ã„ã‘ã¾ã›ã‚“。 毎回忘れã¦ã‚°ã‚°ãƒƒã¦ã„ã‚‹æ°—ãŒã™ã‚‹ã®ã§ã€ä»Šå›žã¯ãã®æ–¹æ³•ã‚’メモã¨ã—ã¦æ®‹ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã©ã†ã‚„ã‚‹ã‹ Poetryã§ä½œæˆã—ãŸä»®æƒ³ç’°å¢ƒã‚’VSCodeã«èªè˜ã•ã›ã‚‹æ–¹æ³•ã¯ç§ã®çŸ¥ã‚‹é™ã‚Šã ã¨ä»¥ä¸‹ã®3パターンãŒã‚ã‚Šã¾ã™ã€‚ poetry shellã§ä»®æƒ³ç’°å¢ƒã«åˆ‡ã‚Šæ›¿ãˆã¦ã‹ã‚‰VSCodeã‚’é–‹ã .vscode/setting.jsonã«poetryã«ã‚ˆã£ã¦è‡ªå‹•ç”Ÿæˆã•ã‚ŒãŸä»®æƒ³ç’°å¢ƒã®ãƒ‘スを入力ã™ã‚‹ プãƒã‚¸ã‚§ã‚¯ãƒˆç›´ä¸‹ã§ä»®æƒ³ç’°å¢ƒã‚’作æˆã™ã‚‹ã‚ˆã†ã«Poetryã®è¨å®šã‚’変更ã™ã‚‹(個人的ã«ãŠã™ã™ã‚) 以é™ã§ä¸€ã¤ãšã¤å…·ä½“çš„ãªã‚„り方を記載ã—ã¦ã„ãã¾ã™ã€‚ poetry shel
脆弱性対応（Heartbleed）ã®è²¬ä»»ã®æ‰€åœ¨ã€€æ±äº¬åœ°åˆ¤ä»¤å…ƒ.12.20（平29ワ6203） - IT・システム判例メモ
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±æ¼ãˆã„事故ã«é–¢ã—，ãã®åŽŸå› ã®ä¸€ã¤ã¨è€ƒãˆã‚‰ã‚Œã‚‹è„†å¼±æ€§å¯¾å¿œãŒé‹ç”¨ä¿å®ˆæ¥å‹™ã«å«ã¾ã‚Œã¦ã„ãŸã‹å¦ã‹ãŒäº‰ã‚ã‚ŒãŸäº‹ä¾‹ã€‚ 事案ã®æ¦‚è¦ Xã¯ï¼ŒXã®é‹å–¶ã™ã‚‹é€šè²©ã‚µã‚¤ãƒˆï¼ˆæœ¬ä»¶ã‚µã‚¤ãƒˆï¼‰ã‚’第三者ã«é–‹ç™ºå§”託ã—，é‹ç”¨ã—ã¦ã„ãŸãŒï¼Œãã®å¾Œï¼Œ2013å¹´1月ã“ã‚ã¾ã§ã«ï¼ŒYã«å¯¾ã—，本件サイトã®é‹ç”¨æ¥å‹™ã‚’月é¡20万円ã§å§”託ã—ãŸï¼ˆæœ¬ä»¶å¥‘約）。本件サイトã¯EC-CUBEã§ä½œã‚‰ã‚Œã¦ã„ãŸã€‚ãªãŠï¼ŒXã‹ã‚‰Yã¸ã®æ¥å‹™å§”託ã«é–¢ã—，契約書ã¯ä½œæˆã•ã‚Œã¦ãŠã‚‰ãšï¼Œæ³¨æ–‡æ›¸ã«ã¯ã€Œæœ¬ä»¶ã‚µã‚¤ãƒˆã®é‹ç”¨ï¼Œä¿å®ˆç®¡ç†ã€ã€Œï¼¥ï¼£ï¼ï¼£ï¼µï¼¢ï¼¥ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã€ã¨ã—ã‹è¨˜è¼‰ã•ã‚Œã¦ã„ãªã„。 2014å¹´4月ã«ã¯ï¼ŒOpenSSL*1ã®è„†å¼±æ€§ãŒã‚ã‚‹ã“ã¨ãŒå…¬è¡¨ã•ã‚ŒãŸãŒ*2，本件サイトã§ã¯ï¼ŒOpenSSLãŒç”¨ã„られã¦ã„ãŸã€‚ 2015å¹´5月ã“ã‚，Xã¯ï¼Œæ±ºæ¸ˆä»£è¡Œä¼šç¤¾ã‹ã‚‰æœ¬ä»¶ã‚µã‚¤ãƒˆã‹ã‚‰Xã®é¡§å®¢æƒ…å ±ï¼ˆã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å«ã‚€ï¼‰ãŒæ¼ãˆã„ã—ã¦ã„る懸念ãŒã‚ã‚‹ã¨ã®é€£çµ¡ã‚’å—ã‘ï¼ˆæœ¬ä»¶æƒ…å ±æ¼ãˆã„）
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - drsigned/sigurls: sigurls is a reconnaissance tool, it fetches URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine.
AmazonAthenaã§æ—¥æ™‚ãƒãƒƒãƒå‡¦ç†ã‚’ä½œæˆ â€“ TECH4ALL
Athenaを使ã£ãŸãƒãƒƒãƒå‡¦ç†ã®TIPS
Summary of domain name collection methods for red and blue confrontation - Programmer Sought
GitHub - codingo/Interlace: Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
OTX Example API Calls
GitHub - brianwarehime/otx_transforms: Transforms for the AlienVault OTX service
GitHub - commoncrawl/cc-notebooks: Various Jupyter notebooks about Common Crawl data
GitHub - commoncrawl/cc-index-table: Index Common Crawl archives in tabular format
Bug Bounty Tips #3 - InfosecMatter
sub.sh/sub.sh at master · cihanmehmet/sub.sh
ãã“ã«ã‚る匿åFTPサーム- 00One, Inc.
Karmaを使ã£ãŸMirai系マルウェアã®æ¨™çš„ã¨ãªã‚‹IoT機器ã®ç¢ºèª - 00One, Inc.
GitHub - c-bata/kube-prompt: An interactive kubernetes client featuring auto-complete.
Recon
GitHub - fumiyas/dnsq-go: djbdns's dnsq(1) and dnsqr(1) clone implemeted in golang
GitHub - mailgun/dnsq: DNS Query Tool
pentest-tools/keyhacks.sh at master · gwen001/pentest-tools
GitHub - nahamsec/lazys3
GitHub - sa7mon/S3Scanner: Scan for misconfigured S3 buckets across S3-compatible APIs!
GitHub - gwen001/s3-buckets-finder: Find AWS S3 buckets and test their permissions.
GitHub - securing/DumpsterDiver: Tool to search secrets in various filetypes.
GitHub - smiegles/mass3
GitHub - disruptops/cred_scanner: A simple file-based scanner to look for potential AWS access and secret keys in files
GitHub - nuncan/slurp: The original slurp source
Cloudflare fixed an HTTP/2 smuggling vulnerability - Cloud Security
GitHub - neex/http2smugl
GitHub - offensive-terraform/terraform-aws-s3-subdomain-takeover: Offensive Terraform module which takes over a subdomain which has a CNAME record pointing to non-existing S3 bucket in target's Route53. The module creates a S3 bucket with a name as subdom
XXXX
{{#tags}}- {{label}}
{{/tags}}