[B! xss] lophã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

loph id:loph

xssã«é–¢ã™ã‚‹lophã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]ç”»åƒã¸ã®PHPã‚³ãƒžãƒ³ãƒ‰æŒ¿å…¥ â€• T.Teradaã®æ—¥è¨˜
ã ã„ã¶æ™‚é–“ãŒãŸã£ã¦ã—ã¾ã„ã¾ã—ãŸãŒã€å¤§åž£ã•ã‚“ã®ä»¥ä¸‹ã®ãƒ–ãƒã‚°ã«ã‚³ãƒ¡ãƒ³ãƒˆã—ãŸã“ã¨ãªã©ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã«PHPã‚³ãƒ¼ãƒ‰ã‚’åŸ‹ã‚è¾¼ã‚€æ”»æ’ƒã¯æ—¢çŸ¥ã®å•é¡Œ â€“ yohgaki's blog ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ç”»åƒã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã«ã¤ã„ã¦ã§ã™ã€‚ æ”»æ’ƒã®æ¦‚è¦ ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã«PHPã‚³ãƒžãƒ³ãƒ‰ã‚’æŒ¿å…¥ã™ã‚‹æ”»æ’ƒã¯ã€å¤§ãã2ç¨®é¡žã«åˆ†ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 1ã¤ã¯ã€ç”»åƒã®ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰æ©Ÿèƒ½ã‚’æŒã¤ã‚µã‚¤ãƒˆè‡ªèº«ã‚’ç‹™ã†æ”»æ’ƒã§ã™ã€‚PHPã§é–‹ç™ºã•ã‚Œã¦ãŠã‚Šã€ä»»æ„ã®æ‹¡å¼µåã®ãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã‚’è¨±ã™ã‚µã‚¤ãƒˆã§ã¯ã€æ‹¡å¼µåãŒphpãªã©ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ æ‹¡å¼µåãŒphpãªã©ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«ä»•è¾¼ã¾ã‚ŒãŸPHPã‚³ãƒžãƒ³ãƒ‰ã¯ã€ãã®ãƒ•ã‚¡ã‚¤ãƒ«ã«HTTP/HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸéš›ã«å®Ÿè¡Œã•ã‚Œã¾ã™ã€‚æ”»æ’ƒè€…ã¯ã€ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é€šã˜ã¦ã€ç”»åƒãŒç½®ã‹ã‚Œã‚‹Webã‚µãƒ¼ãƒä¸Šã§ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ã§ãã¾ã™ã€‚ ã“ã®è„†å¼±æ€§ã¯ã€ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰å¯èƒ½ãªãƒ•
loph 2007/07/17
è„†å¼±æ€§

xss

security

ie

JavaScript

Cookie
ãƒªãƒ³ã‚¯
JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã ç”»åƒã‚’ä½œã£ã¦ã¿ã¾ã—ãŸ
è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ã€‚å…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2007å¹´7æœˆ17æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š å¯ºç”°ã•ã‚“ã®æ—¥è¨˜ã«è§¦ç™ºã•ã‚Œã¦ã€JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã PNGç”»åƒã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ æ³¨æ„:ã“ã®ç”»åƒã«ã¯JavaScriptãŒåŸ‹ã‚è¾¼ã‚“ã§ã‚ã‚Šã¾ã™ã€‚ ã“ã“ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€JavaScriptãŒç™ºå‹•ã—ã€ã‚ãªãŸã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆä¸Šã§Cookieã®å€¤ã‚’è¡¨ç¤ºã—ã¾ã™(IEé™å®šã§ã™) è¿½è¨˜ ImageMagic ã® convertã‚³ãƒžãƒ³ãƒ‰ã§PNGâ†’GIFâ†’PNGã¨å¤‰æ›ã—ã¦ã‚‚ã€JavaScriptã¯å‰Šé™¤ã•ã‚Œã¾ã›ã‚“ã§ã—ãŸã€‚ã“ã‚Œã¯ã€T.Teradaã•ã‚“ã®è§£èª¬ã®è¿½è©¦ã«éŽãŽã¾ã›ã‚“ãŒã€ä¸€å¿œã”å ±å‘Šã¾ã§ã€‚ è¿½è¨˜(2007/10/10)
loph 2007/07/17
è„†å¼±æ€§

xss

security

ie

JavaScript

Cookie
ãƒªãƒ³ã‚¯
ã¾ã ã¾ã ã‚ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒæ³•
å‰å›žã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®ãœã„å¼±æ€§ã‚’çªãæ”»æ’ƒã®å¯¾ç–ã¨ã—ã¦ã®HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã®æœ‰åŠ¹æ€§ã‚’è¿°ã¹ãŸã€‚ãŸã ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã ã‘ã§ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã‚’å®Œå…¨ã«é˜²å¾¡ã™ã‚‹ã“ã¨ã¯ã§ããªã„ã€‚ãã“ã§ä»Šå›žã¯ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„ã‚¿ã‚¤ãƒ—ã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã®æ‰‹å£ã¨ï¼Œãã®å¯¾ç–ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã€‚ HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„æ”»æ’ƒã«ã¯ï¼Œæ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚‹ã€‚ ã‚¿ã‚°æ–‡å—ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆWebãƒ¡ãƒ¼ãƒ«ï¼Œãƒ–ãƒã‚°ãªã©ï¼‰ CSSï¼ˆã‚«ã‚¹ã‚±ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒ»ã‚¹ã‚¿ã‚¤ãƒ«ã‚·ãƒ¼ãƒˆï¼‰ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆãƒ–ãƒã‚°ãªã©ï¼‰ æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Žç¤ºã—ã¦ã„ãªã„ã‚±ãƒ¼ã‚¹ã§UTF-7æ–‡å—ã‚³ãƒ¼ãƒ‰ã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° <SCRIPT>ã®å†…å®¹ã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆ Aã‚¿ã‚°ãªã©ã®URLã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆæ³¨ï¼‰ ä»¥ä¸‹ã§ã¯ï¼ŒHTMLã‚¿ã‚°ã‚„CSSã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆã¨ï¼Œæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Ž
loph 2007/04/17
css

html

javascript

security

web

xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ãã‚Œ Unicode ã§
UTF-7 ã‚’ä½¿ã£ã¦ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’è¨˜è¿° +ADw-SCRIPT+AD4-alert(\'XSS\');+ADw-+AC8-SCRIPT+AD4- IE ã¯ã€æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãŒä¸æ˜Žã§ UTF-7 ã£ã½ã„æ–‡å—åˆ—ãŒã‚ã‚Œã°ã€è‡ªå‹•åˆ¤åˆ¥ã§ UTF-7 ã¨ãªã‚‹ã€‚
loph 2006/12/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss

unicode

security

æ–‡å—ã‚³ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

xssã«é–¢ã™ã‚‹lophã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬3é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

xssã«é–¢ã™ã‚‹lophã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

[ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£]ç”»åƒã¸ã®PHPã‚³ãƒžãƒ³ãƒ‰æŒ¿å…¥ â€• T.Teradaã®æ—¥è¨˜

JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã ç”»åƒã‚’ä½œã£ã¦ã¿ã¾ã—ãŸ

ã¾ã ã¾ã ã‚ã‚‹ã‚¯ãƒ­ã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒæ³•

ãã‚Œ Unicode ã§

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬3é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

xssã«é–¢ã™ã‚‹lophã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]ç”»åƒã¸ã®PHPã‚³ãƒžãƒ³ãƒ‰æŒ¿å…¥ â€• T.Teradaã®æ—¥è¨˜

JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã ç”»åƒã‚’ä½œã£ã¦ã¿ã¾ã—ãŸ

ã¾ã ã¾ã ã‚ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒæ³•

ãã‚Œ Unicode ã§

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬3é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´4æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹