[B! WEBåˆ¶ä½œ][XSS] kana321ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kana321 id:kana321

WEBåˆ¶ä½œã¨XSSã«é–¢ã™ã‚‹kana321ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

WordPressã€æ·±åˆ»ãªè„†å¼±æ€§ã‚’ä¿®æ£ã€€XSSæ”»æ’ƒã®æã‚Œ
WordPress 4.0.1ã§ã¯XSSã®è„†å¼±æ€§ãªã©ãŒä¿®æ£ã•ã‚ŒãŸã€‚æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€Webã‚µã‚¤ãƒˆã‚’ãƒãƒƒã‚ãƒ³ã‚°ã•ã‚ŒãŸã‚Šã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‰ã‚ŒãŸã‚Šã™ã‚‹æã‚ŒãŒã‚ã‚‹ã€‚ ãƒ–ãƒã‚°ä½œæˆã‚½ãƒ•ãƒˆã®æ›´æ–°ç‰ˆã¨ãªã‚‹ã€ŒWordPress 4.0.1ã€ãŒ11æœˆ20æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã€‚ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ãªã©ã®æ·±åˆ»ãªè„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã¦ãŠã‚Šã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å¯¾ã—ã¦è‡ªåˆ†ã®Webã‚µã‚¤ãƒˆã‚’ç›´ã¡ã«æ›´æ–°ã™ã‚‹ã‚ˆã†å‘¼ã³æŽ›ã‘ã¦ã„ã‚‹ã€‚ WordPressã®ãƒ–ãƒã‚°ã«ã‚ˆã‚‹ã¨ã€WordPress 4.0.1ã§ã¯3ä»¶ã®XSSã®è„†å¼±æ€§ã‚’å«ã‚ã€è¨ˆ8ä»¶ã®è„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸã€‚æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€Webã‚µã‚¤ãƒˆã‚’ãƒãƒƒã‚ãƒ³ã‚°ã•ã‚ŒãŸã‚Šã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‰ã‚ŒãŸã‚Šã™ã‚‹æã‚ŒãŒã‚ã‚‹ã€‚è„†å¼±æ€§ã¯3.9.2ã¾ã§ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å˜åœ¨ã™ã‚‹ã€‚ æ›´æ–°ç‰ˆã¯ã€è‡ªå‹•æ›´æ–°ã‚’æœ‰åŠ¹ã«ã—ã¦ã„ã‚Œã°è‡ªå‹•çš„ã«é…ä¿¡ã•ã‚Œã‚‹ã€‚è„†
kana321 2014/11/21
æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€Webã‚µã‚¤ãƒˆã‚’ãƒãƒƒã‚ãƒ³ã‚°ã•ã‚ŒãŸã‚Šã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‰ã‚ŒãŸã‚Šã™ã‚‹æã‚ŒãŒã‚ã‚‹

*wordpress

WordPress

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Web

security

XSS

CSRF

PHP

Webåˆ¶ä½œ

mawdw
ãƒªãƒ³ã‚¯
jQueryã®.each()ã«æ½œã‚€ç½ - æš®ã‚‰ã—ã®æŠ€è¡“
.each()ã®è©± jQueryã®.each()ã‚’ä½¿ã†ã¨ï¼ŒJavaScriptã®ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‹é…åˆ—ã‚’å¯¾è±¡ã«ã—ãŸç¹°ã‚Šè¿”ã—ã‚’ç°¡å˜ã«è¨˜è¿°ã§ãã‚‹ï¼Ž*1 var list = [0,1,1,2,3,5,8,13]; $.each(list, function(index, elem){ console.log(elem * 2); }); // 0 VM2035:4 // 2 VM2035:4 // 2 VM2035:4 // 4 VM2035:4 // 6 VM2035:4 // 10 VM2035:4 // 16 VM2035:4 // 26 VM2035:4 ã§ï¼Œã“ã®eachã«ã¯ã‚‚ã†ä¸€ã¤æ›¸ãæ–¹ãŒã‚ã‚‹ï¼Ž var list = [0,1,1,2,3,5,8,13]; $.each(list, function(){ // ã•ã£ãã¯å¼•æ•°ã«index, elemã‚’æŒ‡å®šã—ã¦ã„ãŸ console.log(
kana321 2014/09/23
ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

()

jQuery

javascript

ã„ã¤ã‹è©¦ã™

xss

Webåˆ¶ä½œ

each

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ç³»èªã¿

programming
ãƒªãƒ³ã‚¯
IDEA * IDEA
ãƒ‰ãƒƒãƒˆã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ä»£è¡¨ã®ãƒ©ã‚¤ãƒ•ãƒãƒƒã‚¯ãƒ–ãƒã‚°
kana321 2014/05/30
ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ»IT

*idea

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Python

XSS

Webåˆ¶ä½œ

security

game

ãƒ–ãƒ©ã‚¦ã‚¶

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°
ãƒªãƒ³ã‚¯
ãã‚Œã¯ robots.txt ã®å•é¡Œã˜ã‚ƒãªãã¦...
ãªã‚“ã‹ robots.txt ãŒãƒ›ãƒƒãƒˆãªã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã«ãªã£ã¦ã„ãŸã®ã§ä»Šã•ã‚‰çŸ¥ã£ãŸã®ã§ã™ãŒã€é€šä¿¡æ©Ÿå™¨ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã®ä¼šç¤¾ã•ã‚“ãŒã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’ã©æ´¾æ‰‹ã«æµå‡ºã•ã›ãŸãŸä»¶ã§ã€ã‚µã‚¤ãƒˆã«è¨ç½®ã•ã‚Œã¦ã„ãŸ robots.txt ãŒè‰²ã€…ã¨æ®‹å¿µãªä»¶ã«ã¤ã„ã¦è©±é¡Œã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ robots.txt ï¼š ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚‹ãŠå®¢æ§˜æƒ…å ±æµå‡ºã«é–¢ã™ã‚‹ãŠçŸ¥ã‚‰ã›ã¨ãŠè©«ã³ ï¼š ã‚¨ã‚¯ã‚¹ã‚³ãƒ ã‚°ãƒãƒ¼ãƒãƒ«æ ªå¼ä¼šç¤¾ æƒ…å ±ãŒæµå‡ºã—ãŸç›´æŽ¥ã®åŽŸå› ã¯ SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã‚‹æ”»æ’ƒã‚’å—ã‘ãŸã¨ã®ã“ã¨ã§ã€åŒã‚µã‚¤ãƒˆã® robots.txt ãŒä½•ã®çµŒç·¯ã§è©±é¡Œã«ãªã£ãŸã®ã‹ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€robots.txt ã®å†…å®¹ã‹ã‚‰ã€CMS ã« Drupal ã‚’ä½¿ã£ã¦ã‚‹ã‚‰ã—ã„ã“ã¨ã‚„ã€Drupal ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«åŒæ¢±ã•ã‚Œã¦ãã‚‹ robots.txt ã»ã¼ãã®ã¾ã¾è¨ç½®ã•ã‚Œã¦ã„ã‚‹ä»¶ã€ã•ã‚‰ã«ãã®ã€Drupal ã®å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã¯ XSS
kana321 2013/05/29
ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

é‹ç”¨

ä»•äº‹

ã¯ã¦ãª

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Security

web

webåˆ¶ä½œ

xss

cms
ãƒªãƒ³ã‚¯
1