é«˜è² è·ã‚µã‚¤ãƒˆã®ãƒœãƒˆãƒ«ãƒãƒƒã‚¯ã‚’見ã¤ã‘ã‚‹ã«ã¯ : DSAS開発者ã®éƒ¨å±‹ã¯ã˜ã‚㫠アクセスãŒæ€¥å¢—ã™ã‚‹ã¨ã€å¿œç”時間ãŒè‘—ã—ã悪化ã™ã‚‹ã‚µã‚¤ãƒˆã¯ã‚ã‚Šã¾ã›ã‚“ã‹ï¼Ÿ 普段ã¯200ミリ秒以内ã§å®‰å®šã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã•ã°ã„ã¦ã„ã‚‹ã®ã«ã€ã‚¤ãƒ™ãƒ³ãƒˆã‚„らã‚ャンペーンやらを開始ã—ãŸçž¬é–“ã‹ã‚‰ã€æ™®æ®µã®ï¼’å€ã‚„３å€ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒæ®ºåˆ°ã—ã€ãã®çµæžœã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚¿ã‚¤ãƒ ãŒ3秒ã¨ã‹9秒ã¨ã‹ã‹ã‹ã‚‹ã‚ˆã†ã«ãªã£ã¦ã—ã¾ã†ã“ã¨ã£ã¦ã‚ã‚Šã¾ã™ã‚ˆã。 ã‚るサイトã®å®ŸçŠ¶ ã¤ã„先日ã¾ã§ã€ãã‚“ãªã‚µã‚¤ãƒˆãŒç§ã®ç›®ã®å‰ã«ã‚‚ã‚ã‚Šã¾ã—ãŸã€‚自社ã§é‹å–¶ã—ã¦ã„ã‚‹æŸã‚½ãƒ¼ã‚·ãƒ£ãƒ«ç³»ã®ã‚µã‚¤ãƒˆãªã‚“ã§ã™ãŒã€ã‚¤ãƒ™ãƒ³ãƒˆé–‹å§‹æ™‚刻ã¨åŒæ™‚ã«ã‚¢ã‚¯ã‚»ã‚¹æ•°ãŒæ€¥å¢—ã™ã‚‹ã®ã§ã™ã€‚ã¨ã¯ã„ãˆã€æ‰€è©®ã¯æ™®æ®µã®2å€ã¨ã‹3å€ç¨‹åº¦ã®æ•°ãªã®ã ã‹ã‚‰ã€å°‘ãªãã¨ã‚‚1秒以内ã«ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’è¿”ã›ã‚‹ãらã„ã®æ€§èƒ½ã¯ç¶æŒã—ãŸã„ã‚‚ã®ã§ã™ã€‚ ã—ã‹ã—実際ã¯å›°ã£ãŸã“ã¨ã«ã€å¿œç”ã«3秒以上もã‹ã‹ã£ã¦ã—ã¾ã†å‡¦ç†ãŒå¤§é‡ã«ç™ºç”Ÿã—ã¦ã—ã¾ã†çŠ¶æ³ã«é™¥ã£ã¦ã—ã¾ã£ã¦ã„ã¾ã—ãŸã€‚ã“ã‚Œã¯ãã£ã¨ã€ã©ã“ã‹ã«ãƒœãƒˆãƒ«ãƒãƒƒã‚¯ãŒã‚ã‚‹ã«é•ã„ã‚ã‚Šã¾ã›ã‚“。 仮説を立
ãƒã‚°ã‹ã‚‰ã¯è¦‹ãˆã¦ã“ãªã„é«˜è² è·ã‚µã‚¤ãƒˆã®ãƒœãƒˆãƒ«ãƒãƒƒã‚¯ : DSAS開発者ã®éƒ¨å±‹
外部å‘ã‘ HTTP 通信ã®å†é€æ¤œçŸ¥ãƒ„ールを作ã£ãŸè©± : DSAS開発者ã®éƒ¨å±‹
「サイãƒãƒ¼ãƒ¬ã‚¹ã‚ュー隊（J-CRAT）技術レãƒãƒ¼ãƒˆ2017ã€ã‚’公開：IPA 独立行政法人 æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
第25回 ã‚»ã‚ュリティ対ç–ã®å¿…è¦æ€§ã‚’経営層ã«åˆ†ã‹ã£ã¦ã‚‚らã†ã«ã¯ï¼Ÿ
CSIRT体験記～åˆã‚ã¦ã®é•·æœŸä¼‘暇編～
図解ã§ã‚ã‹ã‚‹Spectreã¨Meltdown
GitHub - jivoi/awesome-osint: :scream: A curated list of amazingly awesome OSINT
GitHub - Mr-Un1k0d3r/MaliciousMacroGenerator: Malicious Macro Generator
GitHub - onethawt/idaplugins-list: A list of IDA Plugins
僕ãŒèª¿ã¹ãŸApacheãƒãƒ¼ã‚¸ãƒ§ãƒ³åˆ¤å®šã®å°ãƒã‚¿ - ã¨ã‚る診æ–å“¡ã®å‚™å¿˜éŒ²
診æ–æ–‡å—列を打ã¡è¾¼ã¾ãšã«PHPã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’推測ã™ã‚‹
GitHub - ankokuty/HakoniwaBadStore: ç®±åºBadStore
GitHub - fnord0/hURL: hexadecimal & URL encoder + decoder
https://github.com/toolswatch/blackhat-arsenal-tools/blob/master/osint/datasploit.md
GitHub - khalilbijjou/WAFNinja: WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
GitHub - zodiacon/DriverMon: Monitor activity of any driver
API-Security-Checklist/README-ja.md at master · shieldfy/API-Security-Checklist
GitHub - shutingrz/cuckoo_malware_downloader: Cuckoo Sandbox 用 Webアプリケーション。指定ã•ã‚ŒãŸURLã‹ã‚‰ãƒ•ã‚¡ã‚¤ãƒ«ã‚’å–å¾—ã—ã€Cuckoo REST APIã«é€ä¿¡ã™ã‚‹
GitHub - wtsxDev/Malware-Analysis: List of awesome malware analysis tools and resources
https://github.com/msuhanov/regf/blob/master/Windows%20registry%20file%20format%20specification.md
ida/idapython_tools/findcrypt at master · you0708/ida
ntopng + Elastic Stackã«ã‚ˆã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯è§£æž - Qiita
GitHub - gyoisamurai/GyoiThon: GyoiThon is a growing penetration test tool using Machine Learning.
GitHub - olafhartong/sysmon-modular: A repository of sysmon configuration modules
CVE-2018-7600/poc.py at master · firefart/CVE-2018-7600
SA-CORE-2018-004/drupalgeddon3.py at master · oways/SA-CORE-2018-004
GitHub - rastating/wordpress-exploit-framework: A Ruby framework designed to aid in the penetration testing of WordPress systems.
GitHub - immunIT/drupwn: Drupal enumeration & exploitation tool
Windows 7/8.1ã®ISOイメージファイルをDVDã‚„USBメモリã¸æ›¸ã込むMicrosoftå…¬å¼ãƒ„ールï¼ã‚¦ã‚£ã‚¶ãƒ¼ãƒ‰å½¢å¼ã§ç°¡å˜ã«ãƒ–ータブルメディアを作æˆã€ãƒ¬ãƒ“ュー】
安全ãªãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹é‹ç”¨ã€è¨å®šã¯å…·ä½“çš„ã«ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ï¼ˆã‚»ã‚ュリティ関連ã®åˆæœŸåŒ–パラメーター一覧付ã）
DDEを悪用ã™ã‚‹ Macroless Office Document Exploits
GitHub - platomav/MEAnalyzer: Intel Engine & Graphics Firmware Analysis Tool
GitHub - zodiacon/AllTools: All reasonably stable tools
https://docs.oracle.com/cd/E82638_01/DBSEG/keeping-your-oracle-database-secure.htm
{{#tags}}- {{label}}
{{/tags}}