[B! security] kkazkekeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kkazkeke id:kkazkeke

securityã«é–¢ã™ã‚‹kkazkekeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Bsports | NhÃ cÃ¡i Bsport Uy tÃn - Äáº³ng cáº¥p - Cháº¥t lÆ°á»£ng
Trong thá»‹ trÆ°á»ng cÃ¡ cÆ°á»£c ngÃ y cÃ ng Ä‘Ã´ng Ä‘áº£o nhiá»u nhÃ cÃ¡i xuáº¥t hiá»‡n vá»›i nhiá»u quy mÃ´ khÃ¡c nhau. Tuy nhiÃªn, Bsports váº«n lÃ sá»± lá»±a chá»n hÃ ng Ä‘áº§u vÃ nháºn Ä‘Æ°á»£c nhiá»u Ä‘Ã¡nh giÃ¡ cao tá»« ngÆ°á»i chÆ¡i. Náº¿u báº¡n muá»‘n hiá»ƒu rÃµ hÆ¡n vá» nhÃ cÃ¡i nÃ y thÃ¬ hÃ£y xem qua bÃ i viáº¿t dÆ°á»›i Ä‘Ã¢y nhÃ©. Giá»›i thiá»‡u Ä‘Ã´i nÃ©t nhÃ cÃ¡i BsportsBsportsÂ lÃ cá»•ng nhÃ cÃ¡i game cÃ¡ cÆ°á»£c uy tÃn hÃ ng Ä‘áº§u Viá»‡t Nam. Há»‡ thá»‘ng cÃ¡ cÆ°á»£c cÃ³ giao diá»‡n Ä‘á»™c
kkazkeke 2009/07/19
è„†å¼±æ€§æ¤œæŸ»

security
ãƒªãƒ³ã‚¯
AQTRONiX
AQTRONiX WebKnight - Open Source Web Application Firewall (WAF) for IIS What is it? Features Download Install F.A.Q. What is it? AQTRONIX WebKnight is an application firewall for IIS and other web servers and is released under the GNU General Public License. More particularly it is an ISAPI filter that secures your web server by blocking certain requests. If an alert is triggered WebKnight will ta
kkazkeke 2009/03/19
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ãƒ¤ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«

security

firewall
ãƒªãƒ³ã‚¯
ModSecurity (mod_security) - Open Source Web Application Firewall
The 1st Line of DefenseModSecurity is an open source, cross-platform web application firewall (WAF) module. Known as the â€œSwiss Army Knifeâ€ of WAFs, it enables web application defenders to gain visibility into HTTP(S) traffic and provides a power rules language and API to implement advanced protections. Get latest v2: 2.9.7 Get latest v3: 3.0.12 The most widespread open source WAFUsed by businesse
kkazkeke 2009/03/19
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ãƒ¤ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«

security

firewall
ãƒªãƒ³ã‚¯
XSS: ä»Šã“ãXSSå¯¾ç–ã«ã¤ã„ã¦ã¾ã¨ã‚ã‚ˆã† - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2008-08-22)
_ä»Šã“ãXSSå¯¾ç–ã«ã¤ã„ã¦ã¾ã¨ã‚ã‚ˆã† æ²¢å‡ºæ°´ï¼ˆã•ã‚ã€€ã„ãšã¿ï¼‰ã•ã‚“ã‹ã‚‰ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ã‚’é ‚æˆ´ã—ãŸã€‚ å…ƒã€…ã¯ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆæ–¹å¼ã®å„ªä½ã¯ç¥žè©±ã¨ã„ã†ã‚¨ãƒ³ãƒˆãƒªã§ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã¯ã©ã†ä½œã‚‹?ã‚’å¼•ç”¨(æ‰¹åˆ¤)ã—ãŸäº‹ãŒç™ºç«¯ã®æ¨¡æ§˜ã§ã™ã€‚ ä¸€è¦‹çœŸã£å‘å¯¾æ±ºã—ã¦ã„ã‚‹ã‚ˆã†ãªã®ã§èˆˆå‘³æ·±ãèªã¾ã›ã¦ã„ãŸã ã„ãŸã®ã§ã™ãŒã€æ£ç›´ã€ä¸¡è€…ã®ä¸»å¼µã®é•ã„ãŒã‚ã‹ã‚Šã¾ã›ã‚“ã€‚ ã©ã¡ã‚‰ã‚‚XSSç‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ç³»ã®å¯¾ç–ã¨ã—ã¦ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§å…¥åŠ›å€¤ãŒæ£ã—ã„å½¢å¼ã®ç¯„å›²å†…ã‹ãƒã‚§ãƒƒã‚¯ã—ã€å‡ºåŠ›æ™‚ã«å¿…è¦ãªã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã‚’è¡Œã†ã€ã¨ã„ã†çµè«–ã«æ€ãˆã‚‹ã‚“ã§ã™ã‘ã©â€¦ [ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã¨ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚ˆã‚Šå¼•ç”¨] ã”æŒ‡æ‘˜ã®é€šã‚Šã§ã€XSSå¯¾ç–ã¯å…¥ã‚Šå£ã§ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¨è¡¨ç¤º(HTMLçµ„ã¿ç«‹ã¦)æ™‚ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã ã€‚ã—ã‹ã—ã€å…ƒãƒ–ãƒã‚°ã®ä¸»é¡Œã¯ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã¨ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã®æ¯”è¼ƒãªã®ã§ã€ã€ŒãŸã ã€è¡¨é¢çš„ã«æ–‡ç« ã‚’è¿½ã£ãŸã ã‘ã§ã¯ã€Žä½•ã‚’ãƒ›ãƒ¯ã‚¤ãƒˆãƒªã‚¹ãƒˆã¨å‘¼ã¶ã®ã‹ã€ã¨ã„ã†éƒ¨åˆ†ãŒã ã„ã¶é•ã†å°è±¡ã‚’
kkazkeke 2008/12/17
security
ãƒªãƒ³ã‚¯
UTF-7 XSS Cheat Sheet
Countermeasures against XSS with UTF-7 are: Specify charset clearly (HTTP header is recommended) Don't place the text attacker can control before <meta> Specify recognizable charset name by browser. For more information about UTF-7 trick, see "Cross-site scripthing with UTF-7". These XSS patterns are tested on IE6 and IE7. Yosuke HASEGAWA <[email protected]> Last modified: 2008-01
kkazkeke 2008/12/17
utf7ã§xssã‚’ç™ºç”Ÿã•ã›ã‚‹æ–¹æ³•

security
ãƒªãƒ³ã‚¯
teraccâ€™s blog
è¡¨é¡Œã®ã¨ãŠã‚Šã§ã™ãŒã€ # PHP7.4.3ï¼ˆUbuntu 20.04ï¼‰ã«xdebugã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« apt install php-xdebug phpenmod xdebug systemctl restart apache2 # xdebugã‚’ç„¡åŠ¹ã«ã™ã‚‹ phpdismod xdebug systemctl restart apache2 Apacheã§PHPã®ãƒšãƒ¼ã‚¸ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨segmentation faultã«ãªã‚‹ã€‚ [Thu Dec 16 19:32:08.276046 2021] [core:notice] [pid 421823] AH00051: child pid 421937 exit signal Segmentation fault (11), possible coredump in /etc/apache2CLIã‚‚åŒã˜ã§ã€gdbã§è¦‹ã‚‹ã¨ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™
kkazkeke 2008/12/17
web ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–é–¢é€£

security
ãƒªãƒ³ã‚¯
1