[B! è„†å¼±æ€§] niseissaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

niseissa id:niseissa

è„†å¼±æ€§ã«é–¢ã™ã‚‹niseissaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

AWSç’°å¢ƒã®DROWNå¯¾å¿œ (CVE-2016-0800)ã«ã¤ã„ã¦ | DevelopersIO
ã¯ã˜ã‚ã« AWSãƒãƒ¼ãƒ ã®ã™ãšãã§ã™ã€‚ 2006å¹´3æœˆ1æ—¥ã€SSL/TLSãŒä¸æ£ã«ç›—è´ã•ã‚Œã‚‹æã‚Œã®ã‚ã‚‹è„†å¼±æ€§ã¨ã—ã¦ DROWN (Decrypting RSA with Obsolete and Weakened eNcryption)ã®å ±å‘ŠãŒã‚ã‚Šã¾ã—ãŸã€‚ An OpenSSL Userâ€™s Guide to DROWN AWSã‹ã‚‰ã‚‚ã€ELBï¼ˆãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µï¼‰åˆ©ç”¨è€…å‘ã‘ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€ãã®å†…å®¹ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ CVE-2016-0800 Advisory DROWNã«ã¤ã„ã¦ ã‚µãƒ¼ãƒãŒSSLv2ã«ã‚ˆã‚‹æŽ¥ç¶šãŒå¯èƒ½ãªå ´åˆã€ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹æ”»æ’ƒã«ã‚ˆã‚Šæš—å·åŒ–ã•ã‚ŒãŸé€šä¿¡ãŒä¸æ£ã«å¾©å·ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ AWSã§ã®å¯¾å¿œã«ã¤ã„ã¦ ELB AWSã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã®EC2ç”»é¢ã‚ˆã‚Šã€ã€Œãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã€ã®ç”»é¢ã‚’é–‹ãã¾ã™ã€‚ å¯¾è±¡ã¨ãªã‚‹ELBã‚’æŒ‡å®šã—ã€ã€Œãƒªã‚¹ãƒŠãƒ¼ã€ã®ã‚¿ãƒ–ã‹ã‚‰ã€Œå¤‰æ›´ã€ã‚’æŒ‡å®šã—è¨å®šç”»é¢ã‚’é–‹ãã¾ã™
niseissa 2016/03/09
ã‚¯ãƒ©ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰

ã‚ã¨ã§èªã‚€

AWS

è„†å¼±æ€§

SSL
ãƒªãƒ³ã‚¯
ãƒãƒƒã‚·ãƒ¥è¡çªã§TLSã‚’ç ´ã‚‹SLOTHæ”»æ’ƒ(CVE-2015-7575)ã¨ã¯ä½•ã‹ - ã¼ã¡ã¼ã¡æ—¥è¨˜
0. ç°¡å˜ãªSLOTHæ”»æ’ƒã®ã¾ã¨ã‚ æœ€åˆã«ç°¡å˜ãªã¾ã¨ã‚ã‚’æ›¸ã„ã¦ãŠãã¾ã™ã€‚é•·æ–‡ã«ãªã‚Šãã†ãªã®ã§ã€èªã‚€ã®ãŒå¤§å¤‰ãªæ–¹ã¯ã“ã“ã ã‘è¦‹ã¦ãŠã„ã¦ãã ã•ã„ã€‚ MD5ãƒãƒƒã‚·ãƒ¥ã¯æ—¢ã«å®‰å…¨ã§ã¯ãªãã€è¨¼æ˜Žæ›¸ã®ç½²åæ–¹å¼ã§ã®åˆ©ç”¨ã¯åœæ¢ã•ã‚Œã¦ã„ãŸãŒã€å¾Œæ–¹äº’æ›ã®ãŸã‚ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ãƒ‡ãƒ¼ã‚¿ã®ç½²åæ–¹å¼ã«RSA-MD5ãŒä»Šã§ã‚‚åˆ©ç”¨ã§ãã‚‹TLSå®Ÿè£…ãŒå¹¾ã¤ã‹å˜åœ¨ã—ã¦ã„ãŸ(Firefox NSS, Javaç‰)ã€‚ å…ˆé€±ã€INRIAã‚°ãƒ«ãƒ¼ãƒ—ã‹ã‚‰ãƒãƒƒã‚·ãƒ¥è¡çªã‚’åˆ©ç”¨ã—ã¦å®Ÿéš›ã«TLSã‚’ç ´ã‚‹æ”»æ’ƒ(SLOTH)ãŒå…¬é–‹ã•ã‚ŒãŸã€‚ãã‚Œã‚’å—ã‘ã€ã„ãã¤ã‹ã®å®Ÿè£…ã§RSA-MD5ã‚’å®Œå…¨ã«åˆ©ç”¨ä¸èƒ½ã«ã™ã‚‹ä¿®æ£ãŒè¡Œã‚ã‚ŒãŸ(CVE-2015-7575)ã€‚ SLOTHã§ã¯ã€SHA1ã‚„TLSã€IKEã€SSHã«å¯¾ã™ã‚‹æ”»æ’ƒã«ã¤ã„ã¦ã‚‚è©•ä¾¡ã‚’è¡Œã„ã€å¹¾ã¤ã‹ã¯å…¨ãç¾å®Ÿçš„ã«ä¸å¯èƒ½ãªãƒ¬ãƒ™ãƒ«ã§ã¯ãªã„ã“ã¨ãŒç¤ºã•ã‚ŒãŸã€‚MD5ã¨SHA-1ã§TLSãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã®å®Œå…¨æ€§ã‚’æ‹…ä¿ã—ã¦ã„ã‚‹TLS1.0/
niseissa 2016/01/15
æš—å·

è„†å¼±æ€§

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ã‚¿ãƒ€ã§å‡ºæ¥ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ CSIRTã‚’æ°—æ¥½ã«ä½œã‚ã† | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚èªã¿æ–¹ã¯ã‚·ãƒ¼ã‚µãƒ¼ãƒˆã€ã”å˜ã˜ã§ã™ã‹ï¼Ÿã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆãƒ»ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ»ãƒãƒ¼ãƒ ã®ç•¥ã§ã™ã€‚ãªã‚“ã ã‹ã‚ˆãåˆ†ã‹ã‚Šã¾ã›ã‚“ãŒã€è¦ã™ã‚‹ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ãªã‚“ã‹ã†ã¾ã„ã“ã¨ã‚„ã‚‹çµ„ç¹”ã®äº‹ã§ã™ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã£ã¦ç¯„å›²ã¯åºƒã„ã—è²»ç”¨å¯¾åŠ¹æžœãŒåˆ†ã‹ã‚Šã¥ã‚‰ã„ã—ã€é›£ã—ã„ã§ã™ã‚ˆãã€‚ã ã‹ã‚‰ã“ãCSIRTã«æ³¨ç›®ã™ã¹ãã§ã™ã€‚ ãã‚‚ãã‚‚CSIRTã¨ã¯ä½•ãªã®ã‹ æ—¥æœ¬ä¼æ¥ã®å¤šãã¯ã€ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒžãƒ¼ã‚¯åˆ¶åº¦ã‚„ISMSãªã©ã‚’æ´»ç”¨ã—ã¦è‡ªç¤¾ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®é«˜ã•ã‚’è¨¼æ˜Žã™ã‚‹ã‚ã‘ã§ã™ãŒã€ã“ã‚Œã‚‰ã«ã¯å¤§ããªç‰¹å¾´ãŒã‚ã£ã¦ã€ã€Œå†…éƒ¨çš„ãªçµ±åˆ¶ã‚’å–ã‚ã†ã¨ã™ã‚‹ã€å‚¾å‘ãŒã‚ã‚Šã¾ã™ã€‚ä»£ã‚ã£ã¦CSIRTã¯ã€ã€Œå¤–éƒ¨ã‹ã‚‰ã®æ”»æ’ƒã«å¯¾å‡¦ã™ã‚‹ã€ã¨ã„ã†ç‚¹ãŒç‰¹å¾´çš„ã§ã™ã€‚ä¾‹ãˆã°ã€ æ¨™çš„åž‹ ãƒªã‚¹ãƒˆåž‹ ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹ã‚¢ã‚¿ãƒƒã‚¯ Dosæ”»æ’ƒ/ DDoSæ”»æ’ƒ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° ãƒ«ãƒ¼ãƒˆã‚ãƒƒãƒˆ ã‚¬ãƒ³ãƒ–ãƒ©ãƒ¼ ä»–ã«ã‚‚ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãŒã©ã†ã¨ã‹ãƒžãƒ«ã‚¦
niseissa 2015/11/26
ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CSIRT

SQL

slack

DOS

ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆ

Slack

DoSæ”»æ’ƒ
ãƒªãƒ³ã‚¯
GHOST è„†å¼±æ€§ã¯å¦‚ä½•æ§˜ã«ä½¿ã†ã®ã‹ | Webã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºï¼æ•™è‚²ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¿ã‚¤ãƒ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ¡ãƒ‡ã‚£ã‚¢
å…ˆæ—¥ GHOST ã¨å‘¼ã°ã‚Œã‚‹ glibc ã®è„†å¼±æ€§ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚ãªã‚“ã§ã‚‚ã€ã€Œãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€ã‚‰ã—ã„ã§ã¯ãªã„ã‹ã€‚ã—ã‹ã‚‚æ§˜ã€…ãªãƒ—ãƒã‚°ãƒ©ãƒ ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªéƒ¨åˆ†ã®å•é¡Œã¨ã‚ã£ã¦ã€å½±éŸ¿ç¯„å›²ãŒã¨ã¦ã‚‚åºƒã„ã€‚ãªã‹ãªã‹åŽ„ä»‹ãªã“ã¨ã§ã‚ã‚‹ã€‚ ã¯ã¦ã€ã—ã‹ã—ä¸€ä½“å…¨ä½“ã©ã†ã‚„ã£ã¦ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã‚ˆã†ã¨ã„ã†ã®ã ã‚ã†ï¼Ÿ è©±ã‚’èžãã«ã€ãŸã‹ãŒæ•°ãƒã‚¤ãƒˆã®æƒ…å ±ã‚’ç¯„å›²å¤–ã®ãƒ¡ãƒ¢ãƒªã«æ›¸ãè¾¼ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã ã‘ã ã¨ã„ã†ã€‚å®Ÿéš›ãã‚Œã ã‘ã®ã“ã¨ã§ã‚µãƒ¼ãƒãƒ¼ã®ä¹—ã£å–ã‚Šãªã©ã§ãã‚‹ã‚‚ã®ãªã®ã ã‚ã†ã‹ã€‚ãã‚“ãªã‚ã‘ã§ã€ãã®ç–‘å•ã«ç”ãˆã‚‹ã¹ãã€æœ¬è¨˜äº‹ã§ã¯ä»¥ä¸‹ã® URL ã§è§£èª¬ã•ã‚Œã¦ã„ã‚‹å®Ÿéš›ã®æ”»æ’ƒæ–¹æ³•ã‚’è‹¥å¹²ç«¯æŠ˜ã£ã¦ç´¹ä»‹ã—ã¦ã¿ã‚ˆã†ã¨æ€ã†ã€‚ http://www.openwall.com/lists/oss-security/2015/01/27/9 ãªãŠã€æœ¬è¨˜äº‹ã¯ã“ã®è„†å¼±æ€§ãã®ã‚‚ã®ã«å¯¾ã™ã‚‹ç·Šæ€¥åº¦ãªã©ã«ã¤ã„ã¦è¨€
niseissa 2015/01/31
glibc

è„†å¼±æ€§

ã‚ã¨ã§èªã‚€

vulnerability

security
ãƒªãƒ³ã‚¯
The Metasploit Project by H.D. Moore
The worldâ€™s most used penetration testing framework Knowledge is power, especially when itâ€™s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.
niseissa 2013/05/08
ãƒ„ãƒ¼ãƒ«

Metasploit

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Japan Vulnerability Notes
JVNVU#95720792: Trend Micro Apex OneãŠã‚ˆã³Apex One SaaSã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ï¼ˆ2024å¹´12æœˆï¼‰ã€€[2024/12/20 16:15] JVNVU#98968158: è¤‡æ•°ã®Hitachi Energyè£½å“ã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ã€€[2024/12/20 14:45] JVNVU#90514806: Delta Electronicsè£½DTM Softã«ãŠã‘ã‚‹ä¿¡é ¼ã§ããªã„ãƒ‡ãƒ¼ã‚¿ã®ãƒ‡ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚¼ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€€[2024/12/20 14:45] JVNVU#92857767: Tibbo Systemsè£½AggreGate Network Managerã«ãŠã‘ã‚‹ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®æ¤œè¨¼ä¸å‚™ã®è„†å¼±æ€§ã€€[2024/12/20 14:45] JVNVU#92082022: è¤‡æ•°ã®Schneider Electricè£½å“ã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ã€€[2
niseissa 2013/01/11
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

JVN
ãƒªãƒ³ã‚¯
Web Application Firewall èªæœ¬ | ã‚¢ãƒ¼ã‚«ã‚¤ãƒ– | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
2019å¹´3æœˆ28æ—¥ã«ã€ã€ŒWeb Application Firewall èªæœ¬ã€ã®è£œè¶³è³‡æ–™ã¨ã—ã¦ã€ã€ŒWeb Application Firewallã®å°Žå…¥ã«å‘ã‘ãŸæ¤œè¨Žé …ç›®ã€ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ ã“ã¡ã‚‰ã¯ã€WAFã®å°Žå…¥ã‚’æ¤œè¨Žã•ã‚Œã¦ã„ã‚‹æ–¹ã€æ—¢ã«å°Žå…¥æ¸ˆã¿ã§é‹ç”¨ã‚’è¦‹ç›´ã—ãŸã„æ–¹å‘ã‘ã«ã€WAFã«ã¯ã©ã®ã‚ˆã†ãªè£½å“ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ç¨®é¡žãŒå˜åœ¨ã—ã€ã©ã®ã‚ˆã†ãªç‰¹å¾´ãŒã‚ã‚Šã€ é‹ç”¨ã®éš›ã«ã©ã®ã‚ˆã†ãªä½“åˆ¶ãŒå¿…è¦ã‹ã‚’è§£èª¬ã—ã¦ãŠã‚Šã¾ã™ã€‚ æ¦‚è¦ ã€ŒWeb Application Firewall èªæœ¬ã€ ã€ŒWeb Application Firewall èªæœ¬ã€ã¯ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆé‹å–¶è€…ãŒWAFã®å°Žå…¥ã‚’æ¤œè¨Žã™ã‚‹éš›ã«ã€WAFã®ç†è§£ã‚’æ‰‹åŠ©ã‘ã™ã‚‹ãŸã‚ã®è³‡æ–™ã§ã™ã€‚æœ¬è³‡æ–™ã§ã¯ã€KISA(*1)ã‚„OWASP(*2)ã€WASC(*3)ãªã©ã®æ©Ÿé–¢ã«ãŠã‘ã‚‹WAFã«é–¢ã™ã‚‹å–ã‚Šçµ„ã¿ã€WAFã®æ¦‚è¦ã€æ©Ÿèƒ½ã®è©³ç´°ã€å°Žå…¥ã«ãŠã‘ã‚‹ãƒã‚¤ãƒ³ãƒˆç‰ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ ç¬¬1ç« ã§ã¯
niseissa 2010/06/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
skipfishã‚’ãŸã‚ã™ - 2010-04-10 - T.Teradaã®æ—¥è¨˜
Googleã‹ã‚‰æ–°ã—ã„æ¤œæŸ»ãƒ„ãƒ¼ãƒ«ãŒå‡ºãŸã¨ã®ã“ã¨ã§ã€ä¸èº«ã‚’è¦‹ã¦ã¿ã¾ã—ãŸã€‚ Google Code Archive - Long-term storage for Google Code Project Hosting. ãƒ„ãƒ¼ãƒ«ã®ä½œè€…ã¯Ratproxyã¨åŒã˜ãMichaÅ‚ Zalewskiæ°ã§ã™ãŒã€ä»Šå›žã®ãƒ„ãƒ¼ãƒ«ã¯Ratproxyã¨ã¯é•ã£ã¦"Active"ãªæ¤œæŸ»ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ æœ€æ–°ç‰ˆã®Version 1.29ãƒ™ãƒ¼ã‚¿ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ä½¿ã£ã¦ã¿ã¾ã—ãŸã€‚ ã‚·ã‚°ãƒãƒãƒ£ã¨æ¤œæŸ»çµæžœ ã“ã¡ã‚‰ã®ãƒšãƒ¼ã‚¸ã‚’å‚è€ƒã«ã—ã¦ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã—ãŸã€‚ skipfishã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ¡ãƒ¢ | ä¿ºã®ãƒ¡ãƒ¢ ãƒ—ãƒã‚°ãƒ©ãƒ ã¯Cè¨€èªžã§æ›¸ã‹ã‚Œã¦ãŠã‚Šã€ãƒ˜ãƒƒãƒ€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’å«ã‚ã¦10KLç¨‹åº¦ã®è¦æ¨¡ã§ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«å¾Œã«ãƒ„ãƒ¼ãƒ«ã‚’èµ·å‹•ã™ã‚‹ã¨ã€é–‹å§‹ç‚¹ã¨ã—ã¦æŒ‡å®šã—ãŸãƒšãƒ¼ã‚¸ã‹ã‚‰ãƒªãƒ³ã‚¯ã‚’ãŸã©ã£ã¦è‡ªå‹•çš„ã«æ¤œæŸ»ã—ã¦ãã‚Œã¾ã™ã€‚æ¤œæŸ»ãŒçµ‚ã‚ã‚‹ã¨HTMLã®ãƒ¬ãƒãƒ¼
niseissa 2010/04/22
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢

SQL Injection

è„†å¼±æ€§

google
ãƒªãƒ³ã‚¯
2008-11-02
ã¡ã‚‡ã£ã¨ä½œæˆã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«è„†å¼±æ€§ãŒã‚ã‚‹ã‹ã‚’ãã¡ã‚“ã¨ãƒã‚§ãƒƒã‚¯ã—ãªã„ã¨ã„ã‘ãªã„ç¾½ç›®ã«ãªã£ãŸã®ã§èª¿ã¹ã¦ã¿ãŸï¼Ž å‡ºæ¥ã‚Œã°ãƒ•ãƒªãƒ¼ã§ï¼Œç„¡ã‘ã‚Œã°æœ‰å„Ÿã§ã‚‚ã„ã„ã®ã§ï¼Žã„ã‚„ï¼Œã‚„ã£ã±ã‚Šãƒ•ãƒªãƒ¼ã§ï¼Žï¼Žï¼Ž èª¿ã¹ã¦å®Ÿéš›ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚„ä½¿ã£ã¦ã¿ãŸé †ã«è¼‰ã›ã¦ã¿ã¾ã™ï¼Ž Nessus http://www.nessus.org/nessus/ ãƒ•ãƒªãƒ¼ã§ã¯ä¸€ç•ªä½¿ã„ã‚„ã™ã„ã‚µãƒ¼ãƒè„†å¼±æ€§è¨ºæ–ãƒ„ãƒ¼ãƒ«ã‹ãªï¼Žæœ‰åã ã—ï¼Ž ã§ã‚‚ã‚µãƒ¼ãƒã®è„†å¼±æ€§è¨ºæ–ã¨ã„ã†ä½ç½®ã¥ã‘ãŒå¼·ã„ MultiInjector released - automatic parallel website Injector / Defacer http://chaptersinwebsecurity.blogspot.com/2008/10/multiinjector-released-automatic.html Pythonã®2.4ä»¥ä¸Šã§å‹•ä½œ Windowsã§ã‚‚ä½¿
niseissa 2010/03/29
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ„ãƒ¼ãƒ«

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
çŸ¥ã‚‰ãªã‹ã£ãŸã‚‰NGãªWEBã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§ä¸€è¦§ : mwSoft blog
å…ˆæ—¥ã€Amebaãªã†ãŒCSRFã¨ã„ã†éžå¸¸ã«ãƒãƒ”ãƒ¥ãƒ©ãƒ¼ãªè„†å¼±æ€§ã‚’æŠ«éœ²ã—ãŸã‹ã¨æ€ã£ãŸã‚‰ã€ã“ã“æ•°æ—¥ã¯ã‚»ãƒ–ãƒ³ãƒãƒƒãƒˆã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã§XSSã®è„†å¼±æ€§ã¨ã€IDæŽ¨æ¸¬ã«ã‚ˆã‚‹ä»–ãƒ¦ãƒ¼ã‚¶ã®å€‹äººæƒ…å ±é–²è¦§ã®å•é¡ŒãŒç™ºç”Ÿã—ã¦ã„ã‚‹ã¨ã„ã†å™‚ãŒæµã‚Œã¦ã„ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ã®æƒ…å ±ã‚’é ã‹ã£ã¦ãŠããªãŒã‚‰ã€åŸºæœ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å¯¾ç–ã‚‚ã§ãã¦ã„ãªã„ã¨ã„ã†ã®ã¯ã€éŠ€è¡Œã«ä¾‹ãˆã‚‹ãªã‚‰ã€ãŠé‡‘ã‚’é ã‘ã‚ˆã†ã¨ã—ãŸæ™‚ã«ã€ŒãŠé‡‘ã¯é ã‹ã‚Šã¾ã™ã€‚ã¡ã‚ƒã‚“ã¨ä¿ç®¡ã—ã¾ã™ã€‚ã§ã‚‚è¦å‚™ã¯ã‚ã¾ã‚Šã—ãªã„ã®ã§ç›—ã¾ã‚ŒãŸã‚‰ã‚¹ã‚¤ãƒžã‚»ãƒ³ã€ã¨è¨€ã‚ã‚Œã‚‹ã‚ˆã†ãªã‚‚ã®ã ã¨æ€ã†ã€‚ è¦å‚™ã«ç©´ãŒã‚ã£ãŸã¨ã„ã†ã®ã§ã¯ãªãã€ã¾ã¨ã‚‚ã«è¦å‚™ã—ã¦ã¾ã›ã‚“ã§ã—ãŸã€ã¨ã„ã†ã®ã¯ã•ã™ãŒã«ã‚ã‚Šãˆãªã„ã“ã¨ã§ã™ã€‚ ãã“ã§ã€é‡Žè‰¯WEBãƒ—ãƒã‚°ãƒ©ãƒžã§ã‚ã‚‹ç§ãŒçŸ¥ã£ã¦ã„ã‚‹è„†å¼±æ€§ã‚’åˆ—æŒ™ã—ã¦ã¿ãŸã€‚ ç§ã¯ãƒ—ãƒã‚°ãƒ©ãƒžã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã§ã™ã€‚ã—ã‹ã‚‚ä»Šå¹´ã®æ˜¥è¾ºã‚Šã‹ã‚‰ãšã£ã¨å¤–å‘ã‘ã®WEBãƒ—ãƒã‚°ãƒ©ãƒ ã¯çµ„ã‚“ã§ã¾ã›ã‚“ã€‚ ãã®äººé–“ãŒçŸ¥ã£ã¦ã„ã‚‹ã‚‚ã®ã‚’ä¸¦ã¹
niseissa 2009/12/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§èªã‚€

*ã‚ã¨ã§èªã‚€

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

programming

webã‚µãƒ¼ãƒ“ã‚¹

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§ä½¿ãˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã‚¹ã‚ãƒ£ãƒŠã€€ãƒˆãƒƒãƒ—ï¼‘ï¼•*ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã‚’ä½œã‚‹äººã®ãƒã‚¿å¸³
niseissa 2009/06/26
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ„ãƒ¼ãƒ«

è„†å¼±æ€§

mysql

SQL
ãƒªãƒ³ã‚¯
ã‚«ãƒ¼ãƒ‰ãƒãƒ¼ãƒ³ã®å˜åœ¨æ„ç¾©ã«ã¤ã„ã¦ã€è€ƒãˆã¦ã¿ãŸæŽ²ç¤ºæ¿ã€‘
ã‚«ãƒ¼ãƒ‰ãƒãƒ¼ãƒ³ã®ã‚ˆã†ãªèžè³‡ã‚µãƒ¼ãƒ“ã‚¹ã®å˜åœ¨æ„ç¾©ã«ã¤ã„ã¦è€ƒãˆãŸã“ã¨ãŒã‚ã‚Šã¾ã™ã‹ï¼Ÿå®Ÿéš›ã«åˆ©ç”¨ã™ã‚‹ã¨ä¾¿åˆ©ã§é ¼ã‚Œã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãªã®ã§ã™ãŒã€ã„ã„ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’æŒã£ã¦ã„ãªã„ã“ã¨ã‚‚äº‹å®Ÿã§ã™ã€‚å½“ã‚µã‚¤ãƒˆã§ã¯ã‚«ãƒ¼ãƒ‰ãƒãƒ¼ãƒ³ã®å˜åœ¨æ„ç¾©ã€ãã—ã¦ä½¿ã†ä¸Šã§ã®æ³¨æ„ç‚¹ãªã©ã‚’åˆ©ç”¨è€…ã‹ã‚‰èžã„ãŸæ„è¦‹ã¨åˆã‚ã›ã¦æŽ²è¼‰ã—ã¦ãŠã‚Šã¾ã™ã€‚
niseissa 2009/04/03
è„†å¼±æ€§

web

security
ãƒªãƒ³ã‚¯
1