[B! misconfiguration] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

misconfigurationã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (34)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

ãƒãƒƒã‚«ãƒ¼ã¯mxcheck(é›»åãƒ¡ãƒ¼ãƒ« ã‚µãƒ¼ãƒãƒ¼ ã‚¹ã‚ãƒ£ãƒŠãƒ¼)ã‚’åˆ©ç”¨ã—ã¦ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒãƒ¼ã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘å‡ºã—ã¾ã™(Kali Linux) | AIã‚’æ¦å™¨ã«ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ã«ãªã‚‹
mxcheckã¯ã€Kali Linux 2024.3 ãƒªãƒªãƒ¼ã‚¹æ™‚ã«è¿½åŠ ã•ã‚ŒãŸãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ mxcheckã¨ã¯ mxcheckã¯ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚mxcheckã¯ã™ã¹ã¦ã®MXã‚¨ãƒ³ãƒˆãƒªã‚’ç…§ä¼šã—ã€ã•ã‚‰ã« DNSæƒ…å ±ã‚’åŽé›†ã—ã¾ã™ã€‚ãã®å¾Œã€ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚’é–‹å§‹ã—ã€ã‚µãƒ¼ãƒãƒ¼ãƒ•ãƒ©ã‚°ã‚’èªã¿å–ã‚Šã€ãƒ›ã‚¹ãƒˆåã‚’PTRã‚¨ãƒ³ãƒˆãƒªã€StartTLSã€ãŠã‚ˆã³è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æ€§ã¨æ¯”è¼ƒã—ã¾ã™ã€‚ã¾ãŸã€VRFYã‚³ãƒžãƒ³ãƒ‰ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã“ã¨ã§ã€ã‚µãƒ¼ãƒãƒ¼ãŒæƒ…å ±ã‚’æ¼ã‚‰ã—ã¦ã„ãªã„ã‹ã©ã†ã‹ã‚‚ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€‚ æ©Ÿèƒ½ mxcheck ã¯é›»åãƒ¡ãƒ¼ãƒ« ã‚µãƒ¼ãƒãƒ¼ã®æƒ…å ±ã‚¹ã‚ãƒ£ãƒŠãƒ¼ã§ã‚ã‚Šã€æ¬¡ã®é …ç›®ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€‚ ãƒ»DNSãƒ¬ã‚³ãƒ¼ãƒ‰ Aã€MXã€PTRã€SPFã€MTA-SSã€DKIMã€DMARC ãƒ»ASç•ªå·ã¨ASå›½ ãƒ»StartTLSã®ã‚µãƒãƒ¼ãƒˆã¨è¨¼æ˜Žæ›¸ ãƒ»ã‚ªãƒ¼ãƒ—ãƒ³ãƒãƒ¼ãƒˆ 25, 465, 587 ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ãŒãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã«æŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã‹ ãƒ»ã‚µãƒ¼ãƒ
ishideo 2024/10/10
mxcheck

email

pentest

vulnerability

spf

mta-sts

dmarc

dns

misconfiguration

dkim
ãƒªãƒ³ã‚¯
intoDNS: checks DNS and mail servers health
IntoDNS checks the health and configuration and provides DNS report and mail servers report. And provides suggestions to fix and improve them, with references to protocolsâ€™ official documentation.
ishideo 2024/06/16
dns

intodns

misconfiguration

health

check

mail

mx
ãƒªãƒ³ã‚¯
GitHub - kaliafridi/Google-Dorking-Tool
ishideo 2024/05/01
google

dorks

python

cli

github

misconfiguration

webcam

backup

git
ãƒªãƒ³ã‚¯
ã‚ªãƒ•ã‚§ãƒ³ã‚·ãƒ–è¦–ç‚¹ã«ã‚ˆã‚‹ Cloud Security å…¥é–€ ~AWS ç·¨~ - blog of morioka12
1. å§‹ã‚ã« ã“ã‚“ã«ã¡ã¯ã€morioka12 ã§ã™ã€‚ æœ¬ç¨¿ã§ã¯ã€AWS ç’°å¢ƒã«ãŠã‘ã‚‹æ”»æ’ƒè€…ã®ã‚ªãƒ•ã‚§ãƒ³ã‚·ãƒ–ãªè¦–ç‚¹ã§ Cloud Security ã®å…¥é–€ã¨ã—ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ 1. å§‹ã‚ã« å…è²¬äº‹é … æƒ³å®šèªè€… 2. ã‚¯ãƒ©ã‚¦ãƒ‰ã«ãŠã‘ã‚‹è„…å¨ ã‚¯ãƒ©ã‚¦ãƒ‰ã®é‡å¤§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„…å¨ 11ã®æ‚ªè³ªãªè„…å¨ ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ã«é–¢é€£ã™ã‚‹ãƒªã‚¹ã‚¯ Top 10 AWS ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ§‹æˆãƒŸã‚¹ Top 10 3. AWS ç’°å¢ƒã«ãŠã‘ã‚‹æ”»æ’ƒè€…ã®è¦³ç‚¹ 3.1 AWS ç’°å¢ƒã®å¤–éƒ¨ã‹ã‚‰ã®è¦³ç‚¹ 3.2 AWS ç’°å¢ƒã®å†…éƒ¨ã‹ã‚‰ã®è¦³ç‚¹ 4. MITRE ATT&CK Framework for Cloud (IaaS) 4.1 åˆæœŸã‚¢ã‚¯ã‚»ã‚¹ (Initial Access) 4.2 å®Ÿè¡Œ (Execution) 4.3 æ°¸ç¶šåŒ– (Persistence) 4.4 æ¨©é™æ˜‡æ ¼ (Privilege Escalation) 4.5 é˜²å¾¡å›žé¿
ishideo 2024/01/23
aws

offensive

misconfiguration

cloud

honeypot

cybersecurity
ãƒªãƒ³ã‚¯
Internet Storm Center Diary 2023-11-18 - SANS Internet Storm Center
ishideo 2023/11/11
sans

vscode

sftp

sftp.json

.vscode

misconfiguration

extension

leakix

leaks
ãƒªãƒ³ã‚¯
GitHub - StefanGrimminck/zgrab2-configurations: A repository for possible zgrab2 configurations
ishideo 2023/10/10
zgrab2

configuration

misconfiguration

product

banner

github

cli

scan

vulnerability
ãƒªãƒ³ã‚¯
GitHub - SpectralOps/netz: Discover internet-wide misconfigurations while drinking coffee
ishideo 2023/10/09
netz

golang

recon

misconfiguration

github

osint

masscan

zgrab

elasticsearch

discover.sh
ãƒªãƒ³ã‚¯
How I Discovered Thousands of Open Databases on AWS
My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during due diligence, and more. Table Of Contents OverviewBackgroundMy HypothesisScanningBI & Automation: From thousands to hundredsExamples of data I foundConclusionOverviewIt is easy to find misconfigured assets on cloud services, by scanning the CIDR blocks (IP ra
ishideo 2023/10/09
cidr

aws

misconfiguration

db

port

scan

elk

logstash

masscan

infosecwriteups
ãƒªãƒ³ã‚¯
Certified Pre-Owned
TL;DR Active Directory Certificate Services has a lot of attack potential! Check out our whitepaper â€œCertified Pre-Owned: Abusing Active Directory Certificate Servicesâ€ for complete details. Weâ€™re also presenting this material at Black Hat USA 2021. [EDIT 06/22/21] â€” Weâ€™ve updated some of the details for ESC1 and ESC2 in this post which will be shortly updated in the whitepaper. For the past sever
ishideo 2023/10/06
activedirectory

certify

forgecert

blackhat

ldap

misconfiguration

adcs

escalation
ãƒªãƒ³ã‚¯
Intrusion Detection and Prevention Systems Cheat Sheet: Choosing the Best Solution, Common Misconfigurations, Evasion Techniques, and Recommendations. | SANS Institute
ishideo 2023/10/03
sans

intrusion

detection

prevention

cheatsheet

misconfiguration

vulnerability

threat

ids

ips
ãƒªãƒ³ã‚¯
Discover Dangling Domains that point to your cloud assets to prevent subdomain takeover
ishideo 2023/06/20
subdomain

takeover

aws

azure

gcp

misconfiguration

dangling

dns

lightspin

prevent
ãƒªãƒ³ã‚¯
Discover Dangling Domains that point to your cloud assets to prevent subdomain takeover
ishideo 2023/06/20
subdomain

takeover

aws

azure

gcp

vulnerability

misconfiguration

dangling

dns

securityboulevard
ãƒªãƒ³ã‚¯
How i was able to find Django Misconfiguration using Shodan.
ishideo 2023/02/27
django

misconfiguration

shodan

dorks

medium

vulnerability

threat
ãƒªãƒ³ã‚¯
Common Bug Pada Laravel
ishideo 2023/01/25
laravel

debug-mode

detection

banner

rce

path

.env

misconfiguration

phpunit

laravel-filemanager
ãƒªãƒ³ã‚¯
AllAboutBugBounty/Technologies/Laravel.md at master Â· daffainfo/AllAboutBugBounty
ishideo 2023/01/25
laravel

debug-mode

detection

banner

cve-2021-3129

rce

cve-2017-9841

path

.env

misconfiguration
ãƒªãƒ³ã‚¯
HatalÄ± YapÄ±landÄ±rÄ±lmÄ±ÅŸ AWS S3 Bucket Ãœzerinde Bulunan GÃ¼venlik AÃ§Ä±ÄŸÄ±nÄ±n YarattÄ±ÄŸÄ± Etkiler ã‚’è¨³ã—ã¦ã¿ãŸ - Shikata Ga Nai
Hello there, ('Ï‰')ãƒŽ AWS S3 ãƒã‚±ãƒƒãƒˆã®è¨å®šãƒŸã‚¹ã«ã‚ˆã‚‹è„†å¼±æ€§ã§æƒ…å ±æ¼ãˆã„ã¨ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¹—ã£å–ã‚Šã‚’ã€‚ è„†å¼±æ€§ï¼š AWS ã®è¨å®šãƒŸã‚¹ è¨˜äº‹ï¼š https://medium.com/@gguzelkokar.mdbf15/hatal%C4%B1-yap%C4%B1land%C4%B1r%C4%B1lm%C4%B1%C5%9F-aws-s3-bucket-%C3%BCzerinde-bulunan-g%C3%BCvenlik-a%C3%A7%C4%B1%C4%9F%C4%B1n%C4%B1n-yaratt%C4%B1%C4%9F%C4%B1-etkiler-cb073179360d ä»Šå›žã¯ã€HackerOne ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«æŽ¥ç¶šã•ã‚Œã¦ã„ã‚‹æ°‘é–“ä¼æ¥ã§ã€‚ ç™ºè¦‹ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã€‚ ã¾ãšã¯ã€æ”»æ’ƒå´ã¨é˜²å¾¡å´ã®ä¸¡æ–¹ã‚’èª¿ã¹ã¦ã€‚ ä¼šç¤¾åã‚’ XYZ ã¨ã™ã‚‹ã¨ã€‚ ï¼‘ï¼Žç™ºè¦‹
ishideo 2023/01/10
aws

s3

bucket

subdomain

takeover

misconfiguration

vulnerability
ãƒªãƒ³ã‚¯
Unprotected .git folders on the internet pose a security risk
ishideo 2022/11/09
.git

switzerland

credential

csirt

vulnerability

threat

.env

ds_store

misconfiguration

leakage
ãƒªãƒ³ã‚¯
aws
ishideo 2022/09/05
aws

s3

bucket

google

dorks

grayhatwarware

misconfiguration

search

wiki

github
ãƒªãƒ³ã‚¯
Dockerã‚³ãƒ³ãƒ†ãƒŠã®postgresqlãŒãƒžãƒ«ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã—ãŸä»¶ã«ã¤ã„ã¦ - Qiita
èƒŒæ™¯ Dockerã‚³ãƒ³ãƒ†ãƒŠã‚’ç«‹ã¦ãŸã‚‰ãƒžãƒ«ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã—ãŸã®ã§ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•“è’™ã‚’å…¼ãã¦ãƒ¡ãƒ¢æ›¸ãã—ã¦ã¿ã¾ã—ãŸã€‚ æ³¨æ„äº‹é … ãƒžãƒ«ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã—ãŸè¢«å®³ã®å¯¾å‡¦æ–¹æ³•ã‚’è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚ãƒžãƒ«ã‚¦ã‚§ã‚¢è‡ªä½“ã®æ©Ÿèƒ½ã‚„è§£æžã®è§£èª¬ã§ã¯ãªãä¸€èˆ¬åˆ©ç”¨è€…ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è¦–ç‚¹ã‹ã‚‰æ„ŸæŸ“çµŒè·¯ã¨å¯¾å¿œæ–¹æ³•ã«ã¤ã„ã¦ã®è¨˜è¿°ã«ãªã‚Šã¾ã™ã€‚ ãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“çŠ¶æ³ ç—‡çŠ¶ Dockerã‚³ãƒ³ãƒ†ãƒŠã‚’ç¨¼åƒã•ã›ãŸãƒ›ã‚¹ãƒˆã®ãƒãƒ¼ãƒ‰ã‚¢ãƒ™ãƒ¬ãƒ¼ã‚¸(CPUè² è·)ãŒå¸¸æ™‚4ã‚’è¶…ãˆã‚‹çŠ¶æ³ã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ã¤ã¾ã‚Š400%ã§ãƒ›ã‚¹ãƒˆãŒãƒ•ãƒ«å›žè»¢ã—ã¦ãŸè¨³ã§ã™ãªã€‚ ä¾‹ãˆã‚‹ãªã‚‰ã‚¨ãƒ´ã‚¡ãƒ³ã‚²ãƒªã‚ªãƒ³åˆå·æ©ŸãŒæš´èµ°ã—ã¦ãƒžãƒ¤ã¡ã‚ƒã‚“ãŒã‚³ãƒ³ã‚½ãƒ¼ãƒ«ç”»é¢ã«å‘ã‹ã£ã¦å«ã‚“ã§ã„ã‚‹ã¨ã“ã‚ã§ã™ï¼ˆé•ï¼‰ ã“ã†ãªã‚‹ã¨ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã®AWSã¨ã‹ã ã¨è‹±æ–‡ã§è¦å‘Šã‚¢ãƒ©ãƒ¼ãƒˆãŒé£›ã‚“ã§æ¥ã¾ã™ã—æ¯Žæ—¥èª²é‡‘ã•ã‚Œã§è†¨å¤§ãªåˆ©ç”¨æ–™é‡‘è«‹æ±‚ãŒæ¥ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚æã‚ã—ã„ï¼ï¼ çŠ¶æ³ã®èª¿æŸ» CPUã®åˆ©ç”¨çŠ¶æ³ã‚„ãƒ¡ãƒ¢ãƒªã®ä½¿ç”¨é‡ãªã©ã‚’èª¿æŸ»ã™ã‚‹ãƒ„ãƒ¼ãƒ«é¡žãŒã‚ã‚Š
ishideo 2022/08/28
docker

malware

postgresql

kinsing

cryptomining

qiita

misconfiguration
ãƒªãƒ³ã‚¯
ã‚¢ã‚»ãƒƒãƒˆã®ä¸æ£å…¬é–‹é˜²æ¢ã¨ä¿®å¾© | Mandiant
æœ€æ–°ã®ãƒ¬ãƒãƒ¼ãƒˆã€ŒDefender's Advantageï¼šé˜²å¾¡å´ã®å„ªä½æ€§ - ã‚µã‚¤ãƒãƒ¼ãƒ»ã‚¹ãƒŠãƒƒãƒ—ã‚·ãƒ§ãƒƒãƒˆã€ã®è¨˜äº‹ã€Œã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã•ã‚Œã¦ã„ã‚‹ä¸€èˆ¬çš„ãªã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆçµŒè·¯ã‚’æ¤œçŸ¥ã™ã‚‹ã€ã«ãŠã„ã¦ã€Mandiantã¯æ”»æ’ƒã®çµŒè·¯ã¨ãªã‚Šå¾—ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§ä¸æ£ã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ãƒ‘ã‚¹ã‚’ç‰¹å®šã—ã¾ã—ãŸã€‚ã“ã®ãƒ–ãƒã‚°ã§ã¯ã€å¤–éƒ¨è³‡ç”£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã«é–¢ã™ã‚‹Mandiantã®æŽ¨å¥¨äº‹é …ã‚’ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ å›³1ï¼š Mandiant Advantage Attack Surface Managementã«ã‚ˆã‚Šè¦³å¯Ÿã•ã‚ŒãŸå•é¡Œãƒˆãƒƒãƒ—5ï¼ˆ2022å¹´1æœˆ1æ—¥ï½ž2022å¹´3æœˆ31æ—¥ï¼‰å¤–éƒ¨ã‚¢ã‚»ãƒƒãƒˆã®æŽ¢ç´¢ã€ãƒªã‚¹ãƒˆã‚¢ãƒƒãƒ—ã€ä¸æ£å…¬é–‹ã®æ¤œçŸ¥Â Â Â æ”»æ’ƒè€…ã¯ã€è„†å¼±ãªå¤–éƒ¨ã‚¢ã‚»ãƒƒãƒˆã‚„ è¨å®šãƒŸã‚¹ã‚’ã‚¨ãƒ³ãƒˆãƒªãƒã‚¤ãƒ³ãƒˆï¼ˆåˆæœŸä¾µå…¥ãƒ™ã‚¯ã‚¿ãƒ¼ï¼‰ã¨ã—ã¦åˆ©ç”¨ã—ã€åµå¯Ÿã€æ°´å¹³å±•é–‹ã€ã‚¢ã‚¯ã‚»ã‚¹ã®ç¶æŒã‚’å›³ã‚Šã€ãƒŸãƒƒã‚·ãƒ§ãƒ³ã‚’é”æˆã—ã‚ˆã†ã¨ã—ã¾ã™ã€‚å¤–éƒ¨ã‚¢ã‚»ãƒƒãƒˆã‚’æ‚ªç”¨ã™ã‚‹æœ€åˆã®ä¾µ
ishideo 2022/07/29
mandiant

dns

vulnerability

threat

cve-2021-42321

s3

subdomain

takeover

exposed

misconfiguration
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx