[B! xss] radiocatã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

radiocat id:radiocat

xssã«é–¢ã™ã‚‹radiocatã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ„å›³ã—ãªã„å‡¦ç†ãŒå®Ÿè¡Œã•ã‚Œã‚‹CSRFã¨ã¯ï¼Ÿæ¦‚è¦ã¨å¯¾ç– - RAKUS Developers Blog | ãƒ©ã‚¯ã‚¹ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€mickey-STRANGEã§ã™ã€‚æ˜¨å¹´ã«æ–°å’ã§ãƒ©ã‚¯ã‚¹ã«å…¥ç¤¾ã—ã¾ã—ãŸ2å¹´ç›®ã§ã™ã€‚ æ–°å’ã«æ¯›ãŒç”ŸãˆãŸç¨‹åº¦ã®æ–°ç±³ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã§ã™ãŒã€ä»Šå›žã¯ãã®æ•°å°‘ãªã„æ¯›ã®ä¸ã‹ã‚‰å¦ç”Ÿæ™‚ä»£ã«æ„è˜ã—ãŸã“ã¨ã®ãªã‹ã£ãŸã‚‚ã®ã¨ã„ã†è¦³ç‚¹ã§è„†å¼±æ€§ã®ãŠè©±ã‚’é¸ã³ã€è¨˜äº‹ã«ã—ã¾ã—ãŸã€‚æ–°ã—ãWebé–‹ç™ºä¼æ¥ã«å…¥ç¤¾ã—ãŸæ–°å’ã®æ–¹ã®å¦ç¿’ã®æ‰‹åŠ©ã‘ã«ãªã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ ç›®æ¬¡ ã¯ã˜ã‚ã« è„†å¼±æ€§ã¨ã¯ï¼Ÿ CSRF(ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª) æ¦‚è¦ å¯¾ç– ç¢ºå®šå‡¦ç†ã®å‰ã«èªè¨¼ã‚’è¡Œã† ãƒªãƒ•ã‚¡ãƒ©ã‚’ç¢ºèªã™ã‚‹ ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åˆ©ç”¨ã™ã‚‹ ãŠã‚ã‚Šã« è„†å¼±æ€§ã¨ã¯ï¼Ÿ è„†å¼±æ€§ã¨ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®é¢ã‹ã‚‰ã¿ãŸã‚·ã‚¹ãƒ†ãƒ ã®æ¬ é™¥ã®ã“ã¨ã§ã™ã€‚ è„†å¼±æ€§ã‚’ã¤ã„ã¦æ”»æ’ƒã•ã‚Œã¦ã—ã¾ã†ã¨ã€ãƒ¦ãƒ¼ã‚¶ã«ã¯æœ¬æ¥è¨±ã•ã‚Œã¦ã„ãªã„æ“ä½œãŒã§ãã¦ã—ã¾ã£ãŸã‚Šã€ã‚µãƒ¼ãƒã«ã‚¦ã‚£ãƒ«ã‚¹ã‚’ä»•è¾¼ã¾ã‚Œã¦ã—ã¾ã£ãŸã‚Šã¨ã„ã†è¢«å®³ãŒå‡ºã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯è„†å¼±æ€§ã®ä¸ã§ã‚‚ã€ç§ãŒå®Ÿéš›ã«ç†è§£ã«æ™‚é–“ã®ã‹ã‹ã£ãŸ CSRF
radiocat 2017/09/21
xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Twitterã®â€œXSSé¨’å‹•â€ã¯ã©ã®ã‚ˆã†ã«åºƒã¾ã£ãŸã‹
Twitterã®å¤§é¨’å‹•ã‹ã‚‰1æ—¥ã€ã“ã®ã„ãŸãšã‚‰ã‚’ä»•æŽ›ã‘ãŸçŠ¯äººãŸã¡ãŒã©ã†ã‚„ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã€è¨³ã®åˆ†ã‹ã‚‰ãªã„ãƒªãƒ„ã‚¤ãƒ¼ãƒˆã‚’å¤§é‡ã«ã°ã‚‰ã¾ã„ãŸã®ã‹ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ãã¦ã„ã‚‹ã€‚æ„å¤–ãªã®ã¯ã€çŠ¯äººã®ã»ã¨ã‚“ã©ã¯ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚’ä¹—ã£å–ã£ãŸã‚Šã€æƒ…å ±ã‚’ç›—ã‚‚ã†ã¨ã™ã‚‹çŠ¯ç½ªè€…ã‚„æ”»æ’ƒè€…ã§ã¯ãªãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’åˆ©ç”¨ã—ã¦ä½•ãŒã§ãã‚‹ã®ã‹è¦‹ã¦ã¿ã‚ˆã†ã¨å¥½å¥‡å¿ƒã«é§†ã‚‰ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã ã£ãŸã¨ã„ã†ã“ã¨ã ã€‚ å„ç´™å ±é“ã«ã‚ˆã‚‹ã¨ã€Twitterã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®XSSï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼‰è„†å¼±æ€§ã‚’æœ€åˆã«ç™ºè¦‹ã—ãŸã®ã¯ã€Masato Kinugawaã¨åä¹—ã‚‹æ—¥æœ¬äººé–‹ç™ºè€…ã ã£ãŸã€‚å½¼ã¯ã“ã‚Œã‚’åˆ©ç”¨ã—ã¦ã€è™¹ã®ä¸ƒè‰²ã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚’ä½œã£ãŸã€‚ãƒŽãƒ«ã‚¦ã‚§ãƒ¼ã®Ruby ãƒ—ãƒã‚°ãƒ©ãƒžãƒ¼ã€ãƒžã‚°ãƒŠã‚¹ãƒ»ãƒ›ãƒ«ãƒ æ°ã‚‚é¨’å‹•ã«è·æ‹…ã—ãŸ1äººã§ã€New York Timesã«ã‚ˆã‚‹ã¨ã€ã“ã®XSSè„†å¼±æ€§ã‚’æ‚ªç”¨ã™ã‚‹æœ€åˆã®ãƒ¯ãƒ¼ãƒ ã®ä½œæˆè€…ã¨ã„ã†ã€‚åŒæ°ã¯Kinugawaæ°ã®ã‚³ãƒ¼ãƒ‰ã‚’è¦‹ã¦ã€è‡ª
radiocat 2010/09/24
SNSã«ã¨ã£ã¦æœ€å¾Œã®ä¸€æ–‡ãŒã¨ã¦ã‚‚å¤§äº‹ã€‚

Twitter

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss
ãƒªãƒ³ã‚¯
ãƒ–ãƒã‚°
Twitterã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨ã«ãªã‚‹ã¨ã€Cookieã®ä½¿ç”¨ ã«åŒæ„ã—ãŸã‚‚ã®ã¨ã¿ãªã•ã‚Œã¾ã™ã€‚Cookieã¯ã‚¢ãƒŠãƒªãƒ†ã‚£ã‚¯ã‚¹ã€ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã€åºƒå‘Šãªã©ã«ä½¿ã‚ã‚Œã¾ã™ã€‚
radiocat 2010/09/22
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒªã‚»ãƒƒãƒˆã®ãƒªãƒ³ã‚¯è¸ã‚“ã ã‚‰ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä¹—ã£å–ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã‚“ã˜ã‚ƒãªã‹ã£ãŸã‹ãªï¼Ÿ

XSS

JavaScript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Twitter
ãƒªãƒ³ã‚¯
twitterã§XSSè„†å¼±æ€§ç™ºç”Ÿ:ãƒãƒ ã‚¹ã‚¿ãƒ¼é€Ÿå ± - ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ãƒ–ãƒã‚°
twitterã§XSSè„†å¼±æ€§ç™ºç”Ÿ ã‚«ãƒ†ã‚´ãƒªãƒ‹ãƒ¥ãƒ¼ã‚¹ 1 ï¼š çµµæœ¬ä½œå®¶(catv?)ï¼š2010/09/21(ç«) 20:48:54.40 ID:N9k777o3iâ— ?BRZ(10000) ã‚½ãƒ¼ã‚¹ http://twitter.com/Hamachiya http://twitter.com/hapinano/status/25102437219 Webä»¥å¤–ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯å•é¡Œãªã— document.bodyã®ãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ã‚‚å½“ç„¶å¯èƒ½ãªã®ã§ãƒã‚°ã‚¢ã‚¦ãƒˆæŽ¨å¥¨ 3 ï¼š æ¯ç§‘åŒ»å¸«(é–¢è¥¿åœ°æ–¹)ï¼š2010/09/21(ç«) 20:49:22.57 ID:6PM295IO0 ã¤ã¾ã‚Šã©ã†ãªã‚‹ã‚“ã ã‚ˆï¼Ÿ 7 ï¼š å…¬å‹™å“¡(æ±äº¬éƒ½)ï¼š2010/09/21(ç«) 20:50:10.15 ID:6XnlGTOm0 tiwtterçµ‚äº†ã®ãŠçŸ¥ã‚‰ã› 8 ï¼š å¹¼ç¨šåœ’ã®å…ˆç”Ÿ(ã‚¢ãƒ©ãƒãƒžå·ž)ï¼š2010/09/21
radiocat 2010/09/22
xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

2ch

twitter
ãƒªãƒ³ã‚¯
2010 å¹´ 9 æœˆ 21 æ—¥ç¾åœ¨ã®ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã®ãƒã‚°(è„†å¼±æ€§)ã«ã¤ã„ã¦
ã€ãŠçŸ¥ã‚‰ã›ã€‘ 9 æœˆ 21 æ—¥åˆå¾Œ 11 æ™‚é ƒã€å…¬å¼ã‚µã‚¤ãƒ‰ã‹ã‚‰è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸã¨ã®ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸã€‚ ã¯ã˜ã‚ã« 2010 å¹´ 9 æœˆ 21 æ—¥ã€ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã§æ·±åˆ»ãªè„†å¼±æ€§(ãœã„ã˜ã‚ƒãã›ã„)ãŒç™ºè¦‹ã•ã‚Œã€è¢«å®³ãŒåºƒãŒã£ã¦ã„ã¾ã™ã€‚ã“ã‚ŒãŒä½•ãªã®ã‹ã€ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ JavaScript ã¨ãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ã‚¤ãƒ™ãƒ³ãƒˆ ã¾ãšã€ä¸‹ã®ãƒ”ãƒ³ã‚¯è‰²ã®æž å†…ã«ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½ãƒ«ã‚’ã™ã¹ã‚‰ã›ã¦ã¿ã¦ãã ã•ã„ã€‚ ã“ã®æž ã®ä¸ã‚’ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½ãƒ«ã§è§¦ã£ã¦! ã©ã†ã§ã—ãŸã‹ã€‚ã€Œè§¦ã£ã¦ãã‚Œã¦ã‚ã‚ŠãŒã¨ã†!ã€ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¾ã—ãŸãã€‚ ã“ã®ã‚ˆã†ã«ã€ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã«ã¯ç°¡å˜ãªãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä»•è¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ã©ã®ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼(çš†ã•ã‚“ãŒã‚¦ã‚§ãƒ–ã‚’è¦‹ã‚‹æ™‚ã«ä½¿ã†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¨ã‚¯ã‚¹ãƒ—ãƒãƒ¼ãƒ©ãƒ¼ãªã©)ã§ã‚‚å…±é€šã§ä½¿ãˆã‚‹ã€ŒJavaScript (ã‚¸ãƒ£ãƒã‚¹ã‚¯ãƒªãƒ—ãƒˆ)ã€ã¨ã„ã†è¨€èªžãŒä¸€èˆ¬çš„ã«ä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ä»Šå›žã¯ã€ãƒšãƒ¼ã‚¸ä¸Šã®ã‚ã‚‹éƒ¨åˆ†ã«ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½
radiocat 2010/09/22
ä»–ã®ã©ã‚“ãªã‚µã‚¤ãƒˆã§ã‚‚ã„ã¤ã§ã‚‚èµ·ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ã‚’è¦å‘Šã—ã¦ãŠã‘ã°å®Œç’§ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

twitter

xss

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
IIS 7.5 è¯¦ç»†é”™è¯¯ - 404.0 - Not Found
é”™è¯¯æ‘˜è¦ HTTP é”™è¯¯ 404.0 - Not Found æ‚¨è¦æ‰¾çš„èµ„æºå·²è¢«åˆ é™¤ã€å·²æ›´åæˆ–æš‚æ—¶ä¸å¯ç”¨ã€‚
radiocat 2009/12/16
å†…è£½åŒ–ã®å·ä»¤ã‹ã‚‰ã®çµŒç·¯ã‚‚å«ã‚ã¦5ï½ž10å¹´ãã‚‰ã„é…ã‚Œã¦ã„ã‚‹å°è±¡ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss

èªã¿ç‰©
ãƒªãƒ³ã‚¯
1