[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] msh514ã®ãƒ

msh514 id:msh514

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹msh514ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SASE?SSE?ZeroTrust? ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã«æƒ‘ã‚ã•ã‚Œãªã„æœ€é©ãªé¸æŠžã‚’ã—ãŸã„äººã«å‘ã‘ã¦ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³
Securityã‚’çµ±åˆ/ã‚¯ãƒ©ã‚¦ãƒ‰åŒ–ã—ã€ãƒ“ã‚¸ãƒã‚¹åŸºç›¤ã¨ã—ã¦æŸ”è»Ÿæ€§ã‚„å³å¿œæ€§ã‚’æŒãŸã›ã‚‹ã¨ã„ã†ã“ã¨ãŒãƒˆãƒ¬ãƒ³ãƒ‰ã«ãªã£ã¦ã„ã¾ã™ã€‚ä¿—ã«è¨€ã†SASE/SSE/ZeroTrustã§ã™ã€‚ãŸã ã€å«ã¾ã‚Œã‚‹è¦ç´ ãŒå¤šãã€å®šç¾©ãŒæ›–æ˜§ãªã“ã†ã„ã£ãŸ"ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰"ã¯é©åˆ‡ãªã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³/ã‚µãƒ¼ãƒ“ã‚¹ã‚’é¸å®šã™ã‚‹ã¨ãã®å¦¨ã’ã«ãªã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚ã“ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§ã¯ã€è¨€è‘‰ã«æƒ‘ã‚ã•ã‚Œãšã€è¦ä»¶ã«å¯¾ã—ã¦æœ€é©ãªã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³/ã‚µãƒ¼ãƒ“ã‚¹ã‚’é¸å®šã§ãã‚‹ã‚ˆã†ã«ã€ã„ãã¤ã‹ã®ã‚³ãƒ„ã‚’ãŠä¼ãˆè‡´ã—ã¾ã™ã€‚ â€»SBã‚¯ãƒªã‚¨ã‚¤ãƒ†ã‚£ãƒ–æ ªå¼ä¼šç¤¾ï¼ˆãƒ“ã‚¸ãƒã‚¹+ITï¼‰ä¸»å‚¬ã€2023å¹´10æœˆ11æ—¥ã€ŒSecurity Management Conference Roadshow 2023 æ±äº¬ã€ã‚ˆã‚Š
msh514 2024/01/13
IT

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
æš—å·éµç®¡ç†ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ | æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
å®Ÿéš›ã®æš—å·ã‚·ã‚¹ãƒ†ãƒ ãŒã‚»ã‚ãƒ¥ã‚¢ã«å‹•ä½œã—ç¶šã‘ã‚‹ãŸã‚ã«ã¯ã€æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ è‡ªä½“ãŒã‚»ã‚ãƒ¥ã‚¢ã§ã‚ã‚‹ã ã‘ã§ã¯ä¸ååˆ†ã§ã€ãƒ‡ãƒ¼ã‚¿ãŒä¿è·ã•ã‚Œã‚‹æœŸé–“ä¸ã€ãã®æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒä½¿ç”¨ã™ã‚‹æš—å·éµã‚‚ã‚»ã‚ãƒ¥ã‚¢ã«ç®¡ç†ã•ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ãã®ãŸã‚ã€æš—å·éµã‚„ãƒ‡ãƒ¼ã‚¿ã®ãƒ©ã‚¤ãƒ•ã‚µã‚¤ã‚¯ãƒ«ã‚’è¸ã¾ãˆãŸé‹ç”¨ã€å®‰å…¨ãªæš—å·éµã®ä¿ç®¡ã€æš—å·éµå±æ®†åŒ–æ™‚ã®å¯¾ç–ãªã©ã‚’è¡Œã†ä¸Šã§å‚è€ƒã¨ãªã‚‹ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã‚’å–ã‚Šã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ ã€Œæš—å·éµç®¡ç†ã‚·ã‚¹ãƒ†ãƒ è¨è¨ˆæŒ‡é‡ï¼ˆåŸºæœ¬ç·¨ï¼‰ã€ã®å†…å®¹ ã€Œæš—å·éµç®¡ç†ã‚·ã‚¹ãƒ†ãƒ è¨è¨ˆæŒ‡é‡ï¼ˆåŸºæœ¬ç·¨ï¼‰ã€ã¯ã€ã‚ã‚‰ã‚†ã‚‹åˆ†é‡Žãƒ»ã‚ã‚‰ã‚†ã‚‹é ˜åŸŸã®å…¨ã¦ã®æš—å·éµç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã‚’å¯¾è±¡ã«ã€æš—å·éµç®¡ç†ã‚’å®‰å…¨ã«è¡Œã†ãŸã‚ã®æ§‹ç¯‰ãƒ»é‹ç”¨ãƒ»å½¹å‰²ãƒ»è²¬ä»»ç‰ã«é–¢ã™ã‚‹å¯¾å¿œæ–¹é‡ã¨ã—ã¦è€ƒæ…®ã™ã¹ãäº‹é …ã‚’ç¶²ç¾…çš„ã«æä¾›ã—ã€è¨è¨ˆæ™‚ã«è€ƒæ…®ã™ã¹ããƒˆãƒ”ãƒƒã‚¯ã‚¹åŠã³è¨è¨ˆæ›¸ç‰ã«æ˜Žç¤ºçš„ã«è¨˜è¼‰ã™ã‚‹è¦æ±‚äº‹é …ã‚’å–ã‚Šã¾ã¨ã‚ãŸã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã¨ã—ã¦ä½œæˆã•ã‚ŒãŸã‚‚ã®ã§ã™ã€‚ å…·ä½“çš„ã«ã¯ã€æš—å·éµç®¡ç†ã®å¿…è¦æ€§ã‚’èªè˜ã—ã¦ã‚‚ã‚‰ã†ãŸã‚ã«ã€Œ
msh514 2023/05/10
æœ¬

ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ

æƒ…å ±

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Vue.jsã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãªã‚‰çŸ¥ã£ã¦ãŠããŸã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼
ã“ã‚“ã«ã¡ã¯ kotamat ã§ã™ã€‚ æ›¸ã„ã¦ã„ãŸã‚‰ã»ã¨ã‚“ã©Vue.jsã®è©±ã˜ã‚ƒãªããªã£ã¡ã‚ƒã„ã¾ã—ãŸãŒã€SPAã®æ§‹æˆã«ãŠã„ã¦æ°—ã‚’ã¤ã‘ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ã«é–¢ã—ã¦ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å…è²¬ã‚‚ã¡ã‚ã‚“ã™ã¹ã¦ã®è„†å¼±æ€§ã‚’ç¶²ç¾…ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ãŸã‚ã€ã“ã“ã«ç´¹ä»‹ã—ã¦ã„ã‚‹ã‚‚ã®ã‚’ã™ã¹ã¦ã‚„ã‚Œã°å®Œå…¨ã«ã‚»ã‚ãƒ¥ã‚¢ã¨ã„ã†ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ç°¡æ˜“ã«TIPSã‚’ç´¹ä»‹ã™ã‚‹ã¨ã„ã†ç›®çš„ã¨ãªã‚Šã¾ã™ã€‚ DOM Based XSSVue.jsãªã©DOMã‚’ç”Ÿæˆã™ã‚‹ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚’ä½¿ã†ã«ã‚ãŸã£ã¦åˆ‡ã£ã¦ã‚‚åˆ‡ã‚Šé›¢ã›ãªã„è„†å¼±æ€§ã®ä¸€ã¤ãŒã“ã‚Œã§ã—ã‚‡ã†ã€‚å‚è€ƒURL JavaScriptã«ã‚ˆã£ã¦ç”Ÿæˆã•ã‚Œã‚‹HTML DOMã«ã‚ˆã£ã¦æ”»æ’ƒè€…ãŒä»»æ„ã®å®Ÿè¡Œã•ã‚Œã‚‹JavaScriptã‚³ãƒ¼ãƒ‰ã‚’æ³¨å…¥ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹è„†å¼±æ€§ã§ã‚ã‚Šã€æ”»æ’ƒã‚’å—ã‘ãŸè¢«å®³è€…ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§å®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†äº‹ã«ã‚ˆã‚Šã€æ©Ÿå¾®ãªæƒ…å ±ã®æ¼ãˆã„ç‰ãŒç™ºç”Ÿã—ã¦ã—ã¾ã†å¯èƒ½æ€§ã®ã‚ã‚‹å•é¡Œã‚’ã¯ã‚‰ã‚“ã§ã„ã¾ã™ã€‚
msh514 2022/09/18
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

api

javascript

vue
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è¦ä»¶ã‚’ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã¨å®Ÿæ…‹èª¿æŸ»ã‹ã‚‰è€ƒãˆã‚‹
ä»Šå›žã®ãƒ–ãƒã‚°ã§ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¤ã„ã¦è€ƒãˆãŸã„ã¨æ€ã„ã¾ã™ã€‚çµ„ç¹”ãƒ»ã‚·ã‚¹ãƒ†ãƒ ã«ã¯ã©ã®ã‚ˆã†ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è¦ä»¶ã‚’è¨ã‘ã‚‹ã¹ãã‹ã‚„ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ã©ã®ã‚ˆã†ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã™ã‚‹ã¹ãã‹ã«ã¤ã„ã¦æ§˜ã€…ãªè°è«–ã‚„ã‚¬ã‚¤ãƒ‰ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ãƒ–ãƒã‚°ã§é”æˆã—ãŸã„ã“ã¨ã¯ã„ã‚ã‚†ã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è¦ä»¶ã«ã¤ã„ã¦ç”ãˆã‚’ç¤ºã™ã“ã¨ã§ã¯ãªãã€èªè€…ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¤ã„ã¦è€ƒãˆã‚‹æ©Ÿä¼šã‚’æŒã£ã¦ã‚‚ã‚‰ã†ã“ã¨ã§ã™ã€‚ ãã“ã§è€ƒãˆã‚‹è©±ã®ãŸãã¨ã—ã¦ã€NIST(National Institute of Standards and Techno logy)ã‚„CIS(Center for Internet Security)ãªã©ã®å›£ä½“ãŒç¤ºã—ã¦ã„ã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒªã‚·ãƒ¼ã«é–¢ã™ã‚‹ã‚¬ã‚¤ãƒ‰ã‹ã‚‰ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è¦ä»¶ã‚’æ•´ç†ã—ã¾ã—ãŸã€‚ ã•ã‚‰ã«ã€ã§ã¯å®Ÿæ…‹ã¯ã©ã†ã‹ã¨ã„ã†ã“ã¨ã§ã€31ã®Webã‚µã‚¤ãƒˆã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œæˆã¾ãŸã¯ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’èª¿æŸ»ã™ã‚‹ã“ã¨ã§ã€ãã®Webã‚µã‚¤ãƒˆã§å®Ÿéš›ã«ã©ã®ã‚ˆã†ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è¦ä»¶ãŒå®šã‚ã‚‰
msh514 2022/07/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è¦ä»¶

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç™½æ›¸2021ã€€ | æ›¸ç±ãƒ»åˆŠè¡Œç‰© | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
ç·¨é›†ãƒ»ç™ºè¡Œå…ƒ ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆIPAï¼‰ ç™ºè¡Œæ—¥ 2021å¹´7æœˆ30æ—¥ ã‚µã‚¤ã‚º ã‚½ãƒ•ãƒˆã‚«ãƒãƒ¼ï¼A4åˆ¤ ISBN ISBN 978-4-905318-75-0 å®šä¾¡ å®šä¾¡ï¼š2,200å††ï¼ˆæœ¬ä½“ä¾¡æ ¼2,000 å††ï¼‹ç¨Ž10ï¼…ï¼‰ æ›¸ç±æ¦‚è¦ æ¦‚è¦ æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç™½æ›¸2021 é€²ã‚€ãƒ‡ã‚¸ã‚¿ãƒ«ã€åºƒãŒã‚‹ãƒªã‚¹ã‚¯ï¼šå®ˆã‚Šã®åŸºæœ¬ã‚’è¦‹ç›´ãã† IPAã§ã¯ã€ã€Œæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç™½æ›¸ã€ã‚’2008å¹´ã‹ã‚‰æ¯Žå¹´ç™ºè¡Œã—ã¦ã„ã¾ã™ã€‚æœ¬ç™½æ›¸ã¯ã€æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹å›½å†…å¤–ã®æ”¿ç–ã‚„è„…å¨ã®å‹•å‘ã€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã®ç™ºç”ŸçŠ¶æ³ã€è¢«å®³å®Ÿæ…‹ãªã©å®šç•ªãƒˆãƒ”ãƒƒã‚¯ã®ä»–ã€ãã®å¹´ãªã‚‰ã§ã¯ã®è±¡å¾´çš„ãªãƒˆãƒ”ãƒƒã‚¯ã‚’å–ã‚Šä¸Šã’ã¦ã„ã¾ã™ã€‚ å›½å†…å¤–ã®å®˜æ°‘ã®å„ç¨®ãƒ‡ãƒ¼ã‚¿ã€è³‡æ–™ã‚’æ•°å¤šãå¼•ç”¨ã—ãƒˆãƒ”ãƒƒã‚¯ã‚’è§£èª¬ã—ã¦ãŠã‚Šã€æƒ…å ±ã®ç¶²ç¾…æ€§ã¨å‚ç…§æ€§ã®é«˜ã•ãŒç‰¹é•·ã§ã€æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†é‡Žã®å…¨ä½“æŠŠæ¡ãŒå®¹æ˜“ã§ã™ã€‚ ã¾ãŸã€æœ¬ç™½æ›¸ã¯æ¬¡ã®ã‚ˆã†ãªä½¿é€”ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ï¼ˆ2020å¹´ç‰ˆã®èªè€…ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆã‚ˆã‚Šï¼‰ã€‚
msh514 2021/07/22
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è³‡æ–™
ãƒªãƒ³ã‚¯
èªè¨¼ç”¨ãƒˆãƒ¼ã‚¯ãƒ³ä¿å˜å…ˆã®ç¬¬4é¸æŠžè‚¢ã¨ã—ã¦ã®ã€ŒAuth0ã€
iCARE Developer Meetupã¯ã€æœˆæ¬¡ã§é–‹å‚¬ã—ã¦ã„ã‚‹æ ªå¼ä¼šç¤¾iCAREãŒä¸»å‚¬ã™ã‚‹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢å‘ã‘ã®LTå‹‰å¼·ä¼šã§ã™ã€‚18å›žç›®ã®ä»Šå›žã¯ã€Ruby on Railsã‚’ãƒ†ãƒ¼ãƒžã«è¡Œã„ã¾ã—ãŸã€‚ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®è¶Šå·æ°ã‹ã‚‰ã¯Tokenèªè¨¼æ©Ÿèƒ½ã«ã¤ã„ã¦ã€‚ Rails APIãƒ¢ãƒ¼ãƒ‰ã§é–‹ç™ºã™ã‚‹ã¨ãã®èªè¨¼ç”¨ã®ãƒˆãƒ¼ã‚¯ãƒ³ã¯ã©ã“ã«ä¿å˜ã™ã‚Œã°ã„ã„ã®å•é¡Œ è¶Šå·ä½³ç¥æ°ï¼šç§ã‹ã‚‰ã¯ã€ã€ŒRails APIãƒ¢ãƒ¼ãƒ‰ã«ãŠã‘ã‚‹Tokenèªè¨¼æ©Ÿèƒ½ã«ã¤ã„ã¦ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§LTï¼ˆãƒ©ã‚¤ãƒˆãƒ‹ãƒ³ã‚°ãƒˆãƒ¼ã‚¯ï¼‰ã‚’ã—ã‚ˆã†ã¨æ€ã£ã¦ã„ãŸã‚“ã§ã™ãŒã€ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’ä½œã£ã¦ã„ã¦ã€Œã‚ã‚Œã€ã“ã‚Œåˆ¥ã«Railsã ã‘ã®è©±ã˜ã‚ƒãªããªã„ï¼Ÿã€ã¨æ€ã£ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ã¿ãªã•ã‚“ã®ä¸ã«ã‚‚ã€ãã†æ€ã†æ–¹ãŒã„ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‚“ã§ã™ãŒã€ã‚‚ã†ã“ã‚Œã§ä½œã£ã¡ã‚ƒã£ãŸã®ã§ã”äº†æ‰¿ãã ã•ã„ã€‚ ç§ã¯æ ªå¼ä¼šç¤¾iCAREã§ã€ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’ã—ã¦ã„ã‚‹ã€è¶Šå·ã¨ç”³ã—ã¾ã™ã€‚Twitterã¯@kossy0
msh514 2021/05/21
rails

javascript

tech

api

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Wireshark Tutorial: Examining Emotet Infection Traffic
This post is also available in: æ—¥æœ¬èªž (Japanese) Executive Summary This tutorial is designed for security professionals who investigate suspicious network activity and review packet captures (pcaps). Familiarity with Wireshark is necessary to understand this tutorial, which focuses on Wireshark version 3.x. Emotet is an information-stealer first reported in 2014 as banking malware. It has since evol
msh514 2021/01/21
post

SMTP

HTTP

çµ±è¨ˆ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
REST ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ - OWASP
REST (REpresentational State Transfer) ã¯ã€ã‚·ã‚¹ãƒ†ãƒ å†…ã®ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’ URL ãƒ‘ã‚¹è¦ç´ ã«ã‚ˆã£ã¦è¡¨ç¾ã™ã‚‹ãŸã‚ã®æ‰‹æ®µã§ã™ã€‚REST ã¯ã€ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚’æŒ‡ã™è¨€è‘‰ã§ã¯ãªãã€Web ä¸Šã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’æ§‹ç¯‰ã™ã‚‹éš›ã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚¹ã‚¿ã‚¤ãƒ«ã‚’æŒ‡ã™è¨€è‘‰ã§ã™ã€‚REST ã«ã‚ˆã‚‹ Web ãƒ™ãƒ¼ã‚¹ã®ã‚·ã‚¹ãƒ†ãƒ ã¨ã®å¯¾è©±ã§ã¯ã€è¤‡é›‘ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆæœ¬æ–‡ã‚„ POST ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ã‚’ä½¿ã‚ãšã€ç°¡ç´ åŒ–ã•ã‚ŒãŸ URL ã‚’ä½¿ç”¨ã—ã¦ã‚·ã‚¹ãƒ†ãƒ ä¸Šã®ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚’æŒ‡å®šã™ã‚‹ã“ã¨ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã€REST ãƒ™ãƒ¼ã‚¹ã®ã‚µãƒ¼ãƒ“ã‚¹ã«å½¹ç«‹ã¤ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã®ã‚¬ã‚¤ãƒ‰ã¨ã—ã¦ä½¿ç”¨ã§ãã¾ã™ã€‚ èªè¨¼ã¨ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç† RESTful Web ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€POST ã«ã‚ˆã£ã¦ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç¢ºç«‹ã™ã‚‹ã‹ã€ã¾ãŸã¯ POST æœ¬æ–‡ã®å¼•æ•°ã‚„ Cookie ã¨ã—ã¦ API ã‚ãƒ¼ã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ™ãƒ¼ã‚¹ã®èªè¨¼
msh514 2019/08/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

ã‚µãƒ¼ãƒ“ã‚¹

web

api

rest
ãƒªãƒ³ã‚¯
REST Security - OWASP Cheat Sheet Series
REST Security Cheat SheetÂ¶ IntroductionÂ¶ REST (or REpresentational State Transfer) is an architectural style first described in Roy Fielding's Ph.D. dissertation on Architectural Styles and the Design of Network-based Software Architectures. It evolved as Fielding wrote the HTTP/1.1 and URI specs and has been proven to be well-suited for developing distributed hypermedia applications. While REST i
msh514 2019/08/16
REST

security

api

Cheatsheet

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Worldâ€™s Biggest Data Breaches & Hacks â€” Information is Beautiful
Worldâ€™s Biggest data breaches and hacks. Regularly updated. Let us know if we missed any big data breaches. Created with data-visualisation software VizSweet. Â» See the data Â» Safely check if your details have been compromised in any recent data breaches: https://haveibeenpwned.com/ Learn to Create Impactful Infographics Â» Sign up to be notified when we release new graphics Â» Check out our beautif
msh514 2016/06/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Data

å¯è¦–åŒ–
ãƒªãƒ³ã‚¯
SHA1ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã—ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯å±é™ºã«ãªã£ãŸ
(Last Updated On: 2018å¹´4æœˆ3æ—¥)ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¹³æ–‡ã§ä¿å˜ã™ã‚‹ã®ã¯è«–å¤–ã§ã€MD5ã‚„SHA1ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã™ã‚‹ã®ã¯å½“ãŸã‚Šå‰ã§ã™ã€‚ã—ã‹ã—ã€SHA1ã‚’2000å€æ—©ãã‚¯ãƒ©ãƒƒã‚¯ã™ã‚‹æ–¹æ³•ãªã©ãŒç™ºè¦‹ã•ã‚Œã€ŒSHA1ã¯è„†å¼±ã ã€ï¼ˆã¡ãªã¿ã«MD5ã¯ã‚‚ã£ã¨å±é™ºï¼‰ã¨ã•ã‚Œã¦ã‹ã‚‰ã—ã°ã‚‰ãçµŒã¡ã¾ã™ã€‚ã‚¢ãƒ¡ãƒªã‚«æ”¿åºœã‚„å¤§æ‰‹ä¼æ¥ã¯SHA1ã¯ä½¿ã‚ãªã„ã€ã¨ã—ã¦ã„ã¾ã™ã€‚ Slashdot.orgã«ã¾ãŸè¼‰ã£ã¦ã„ã‚‹ã®ã§æ›´ã«é«˜é€ŸåŒ–ã§ããŸã€ã¨ã„ã†ã“ã¨ã‹? å‚è€ƒï¼š Rainbowãƒ†ãƒ¼ãƒ–ãƒ«ã«ã‚ˆã‚‹MD5ãƒãƒƒã‚·ãƒ¥ã®ã‚¯ãƒ©ãƒƒã‚¯ï¼ˆè‹±èªžï¼‰ Rainbowãƒ†ãƒ¼ãƒ–ãƒ«ã«ã‚ˆã‚‹SHA1ãƒãƒƒã‚·ãƒ¥ã®ã‚¯ãƒ©ãƒƒã‚¯ï¼ˆè‹±èªžï¼‰ å‰ã®ã‚¨ãƒ³ãƒˆãƒªÂ PostgreSQLã§SHA1Â ã§PostgreSQLã§SHA1ã‚’ä½¿ã†æ–¹æ³•ã®ä¸€ã¤ã‚’ç´¹ä»‹ã—ã¦ã„ã¾ã™ãŒå¯èƒ½ã§ã‚ã‚Œã°SHA512ãªã©ã€ã‚ˆã‚Šå¼·ã„ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã‚’åˆ©ç”¨ã—ãŸã‚Šã€Saltã‚’åˆ©ç”¨ã™ã‚‹ã€ç‰ã®æ–¹æ³•ã‚’æŽ¡ç”¨ã—ãŸæ–¹ãŒè‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ å‚™è€ƒï¼š
msh514 2015/04/21
PHP

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Security

password

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
Parosä½¿ã£ã¦ã¿ãŸ - Do You PHP ã¯ã¦ãƒ–ãƒ
ãƒ—ãƒã‚ã‚·åž‹è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã®1ã¤ã§ã‚ã‚‹Parosã‚’ä½¿ã£ã¦ã¿ã¾ã—ãŸã€‚ We wrote a program called "Paros" for people who need to evaluate the security of their web applications. It is free of charge and completely written in Java. Through Paros's proxy nature, all HTTP and HTTPS data between server and client, including cookies and form fields, can be intercepted and modified. ParosãŒãƒã‚§ãƒƒã‚¯ã™ã‚‹å†…å®¹ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¬ã‚¤ãƒ‰ã«ã‚ˆã‚‹ã¨ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ HTTP PUT allowed - chec
msh514 2014/07/17
è„†å¼±æ€§è¨ºæ–

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
2008-11-02
ã¡ã‚‡ã£ã¨ä½œæˆã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«è„†å¼±æ€§ãŒã‚ã‚‹ã‹ã‚’ãã¡ã‚“ã¨ãƒã‚§ãƒƒã‚¯ã—ãªã„ã¨ã„ã‘ãªã„ç¾½ç›®ã«ãªã£ãŸã®ã§èª¿ã¹ã¦ã¿ãŸï¼Ž å‡ºæ¥ã‚Œã°ãƒ•ãƒªãƒ¼ã§ï¼Œç„¡ã‘ã‚Œã°æœ‰å„Ÿã§ã‚‚ã„ã„ã®ã§ï¼Žã„ã‚„ï¼Œã‚„ã£ã±ã‚Šãƒ•ãƒªãƒ¼ã§ï¼Žï¼Žï¼Ž èª¿ã¹ã¦å®Ÿéš›ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚„ä½¿ã£ã¦ã¿ãŸé †ã«è¼‰ã›ã¦ã¿ã¾ã™ï¼Ž Nessus http://www.nessus.org/nessus/ ãƒ•ãƒªãƒ¼ã§ã¯ä¸€ç•ªä½¿ã„ã‚„ã™ã„ã‚µãƒ¼ãƒè„†å¼±æ€§è¨ºæ–ãƒ„ãƒ¼ãƒ«ã‹ãªï¼Žæœ‰åã ã—ï¼Ž ã§ã‚‚ã‚µãƒ¼ãƒã®è„†å¼±æ€§è¨ºæ–ã¨ã„ã†ä½ç½®ã¥ã‘ãŒå¼·ã„ MultiInjector released - automatic parallel website Injector / Defacer http://chaptersinwebsecurity.blogspot.com/2008/10/multiinjector-released-automatic.html Pythonã®2.4ä»¥ä¸Šã§å‹•ä½œ Windowsã§ã‚‚ä½¿
msh514 2014/07/17
è„†å¼±æ€§è¨ºæ–

tool

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚³ãƒ³ã‚½ãƒ¼ã‚·ã‚¢ãƒ ï¼ˆDataBase Security Consortiumï¼‰ æˆæžœç‰©
DBSCäº‹å‹™å±€ ï¼ˆãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ³ã‚½ãƒ¼ã‚·ã‚¢ãƒ ï¼‰ ã€’102-0093 æ±äº¬éƒ½åƒä»£ç”°åŒºå¹³æ²³ç”º2-16-1 å¹³æ²³ç”ºæ£®ã‚¿ãƒ¯ãƒ¼ (æ ª)ãƒ©ãƒƒã‚¯å†… TEL : 03-6757-0126
msh514 2014/02/03
çµ„ç¹”

æƒ…å ±

ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è³‡æ–™
ãƒªãƒ³ã‚¯
ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ ç¬¬2.0ç‰ˆ
msh514 2014/02/03
DB

db

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãŠå‰ã“ã®ã‚µãƒ–ãƒãƒƒãƒˆã§ã‚‚åŒã˜äº‹è¨€ãˆã‚“ã®ï¼Ÿ - çŸ¥ã‚‰ãªã„ã‘ã©ãã£ã¨ãã†ã€‚
,ã€,, ,ã€,, ,,ã€€,, _,,;' '" '' ã‚›''" ã‚›' ';;,, ï¼ˆrãƒ½,;''"""''ã‚›ã‚›ã‚›'';, ï¾‰ï½’ï¼‰ ,;'ã‚› i ï¼¿ã€€ã€€ã€ï¼¿ iãƒ½ã‚›';, ,;'" ''| ãƒ½ãƒ»ã€‰ã€€ã€ˆãƒ»ãƒŽ |ï¾žã‚› `';, ,;''ã€€"|ã€€ã€€ â–¼ã€€ã€€ |ï¾žã‚›ã€€`';, ,;''ã€€ã€€ãƒ½ï¼¿äººï¼¿ /ã€€ã€€,;'_ ï¼ï½¼ã€ã€€ ãƒ½âŒ’âŒ’ /ã€€ã€€ ï¾˜ã€€ï¼¼ |ã€€ã€€ã€€"ï½’,,ã€€ï½€"'''ï¾žÂ´ã€€ã€€,,ï¾ã‚›ã€€ã€€ | |ã€€ã€€ ã€€ã€€ ï¾˜ã€ã€€ã€€ã€€ã€€,ï¾˜ã€€ã€€ã€€ã€€| |ã€€ã€€ã€€i ã€€ã€€ã‚›ï½’ã€ï¾‰,,ï½’"ã€€iã€€ã€€ã€€_| |ã€€ã€€ã€€ï½€ãƒ¼â€•â€•----â”´ âŒ’Â´ ï¼‰ ï¼ˆãƒ½ã€€ ï¼¿ï¼¿ï¼¿ï¼¿ï¼¿ï¼¿ ,, ï¼¿Â´ï¼‰ ï¼ˆ_âŒ’ ï¼¿ï¼¿ï¼¿ï¼¿ï¼¿ï¼¿ ,, ã‚£ ä¸ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ | |ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€| å‰å›žã®ã‚¨ãƒ³ãƒˆãƒª ã§è»½ãè§¦ã‚Œã¾ã—ãŸãŒã€ARPã‚¹ãƒ—ãƒ¼ãƒ•ã‚£ãƒ³ã‚°ã‚’ç”¨ã„ã‚‹ã¨ã€ã‚µãƒ–ãƒãƒƒãƒˆå†…ã‹ã‚‰ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚²ãƒ¼ãƒˆã‚¦ã‚§ã‚¤ã‚’é€šã£ã¦å¤–ã«å‡ºã¦è¡Œãã¯ãšã®ãƒ‘ã‚±ãƒƒãƒˆã‚’ã€è‡ªåˆ†ã®ãƒ›
msh514 2013/02/04
Windows

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

network
ãƒªãƒ³ã‚¯
1