[B! Shibuya.xss] sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sugyan id:sugyan

Shibuya.xssã«é–¢ã™ã‚‹sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è¶…çµ¶æŠ€å·§CSRF / Shibuya.XSS techtalk #7
CSRF, HTML Form Protocol Attack, Cross-protocol scripting attackã«ã¤ã„ã¦
sugyan 2016/03/29
security

CSRF

presentation

mala

Shibuya.xss
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ #5 ã‚¢ã‚¦ãƒˆãƒ©ã‚¤ãƒ³ãƒ¡ãƒ¢
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ #5 : ATND Shibuya.XSSã«å‚åŠ ã—ã¦ããŸã®ã§ãƒ¡ãƒ¢ã§ã™ã€‚ ä½“èª¿ãŒã‚¤ãƒžã‚¤ãƒã ã£ãŸã®ã§æœ¦æœ§ã¨ã—ãŸãƒ¡ãƒ¢ã§ã™ã€‚ å¾Œã€ã‚ªãƒ•ãƒ¬ã‚³ãªã‚‚ã®ãŒã‚ã£ãŸã®ã§ã€ãã®éƒ¨åˆ†ã¯ã‚ªãƒ•ãƒ¬ã‚³ã¨ã—ã¦ã‚ã‚Šã¾ã™ã€‚ å…¬é–‹ã—ã¦ã„ã‘ãªã„ç®‡æ‰€ãŒã‚ã£ãŸã‚‰Issuesãªã©ç«‹ã¦ã¦ãã ã•ã„ã€‚ ç§ã®è¦‹ã¤ã‘ãŸXSS - yousukezan JVNã®XSS Flashã®XSS Paypalã®XSS($100ãã‚‰ã„) paypalã®ä¸å›½ã®ã‚µã‚¤ãƒˆ paypal-wujinggou.com All in ONE SEOãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã®XSS (Wordpress) s=\\x22\x3e ã¿ãŸã„ãªæ„Ÿã˜ã§XSS Wordpressã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ XSSãŒæ—¥ã€…å¤§é‡ã«è¦‹ã¤ã‹ã‚‹ã®ã§è¦ãƒã‚§ãƒƒã‚¯ Yahoo!ã®XSS åŽ»å¹´ãƒã‚¦ãƒ³ãƒ†ã‚£ãƒ—ãƒã‚°ãƒ©ãƒ ãŒå§‹ã¾ã£ã¦å¤§é‡ã®è„†å¼±æ€§ãŒå ±å‘Šã•ã‚Œã¦ã„ã‚‹ Yahoo!mail ã® Self-X
sugyan 2014/08/11
Shibuya.xss

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
æ–‡å—åˆ—ã‹ã‚‰HTMLã‚’çµ„ã¿ç«‹ã¦ã‚‹è©± Shibuya.XSS techtalk #5
sugyan 2014/08/08
Shibuya.xss

presentation
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
sugyan 2012/04/06
Shibuya.xss

xss
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 é–‹å‚¬ã—ã¾ã—ãŸã€‚ - è‘‰ã£ã±æ—¥è¨˜
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1ã‚’é–‹å‚¬ã—ã¾ã—ãŸã€‚ å‚åŠ ã—ã¦é ‚ã„ãŸã¿ãªã•ã‚“ã€ç™ºè¡¨ã—ã¦ãã ã•ã£ãŸã¿ãªã•ã‚“ã€ãã—ã¦ä¼šå ´ã‚’å¿«ããŠè²¸ã—ãã ã•ã£ãŸã†ãˆã«ãƒ“ãƒ¼ãƒ«ã¨ãƒ”ã‚¶ã¾ã§ã”ç”¨æ„ãã ã•ã£ãŸmixiã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ç§ã®ç™ºè¡¨ã—ãŸè³‡æ–™ã‚’ç½®ã„ã¦ãŠãã¾ã™ã€‚ MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š æ¬¡å›žäºˆå®šã¯ã¾ã£ãŸãæœªå®šã§ã™ãŒã€ã‚‚ã—é–‹å‚¬ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã—ãŸã‚‰ã¾ãŸã¿ãªã•ã‚“ã®ã”å‚åŠ ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚
sugyan 2012/04/05
Shibuya.xss

presentation

hasegawa
ãƒªãƒ³ã‚¯
Shibuya.XSSã¾ã¨ã‚
ONETOPIã€Œmixiã€ @mixi_1topi ãƒŸã‚¯ã‚·ã‚£ç¤¾ã®ã‚³ãƒ©ãƒœãƒ«ãƒ¼ãƒ ã§æœ¬æ—¥ Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ #shibuyaxss ã¨ã„ã†é–‹ç™ºè€…å‘ã‘ã®ã‚¤ãƒ™ãƒ³ãƒˆãŒé–‹å‚¬ã•ã‚Œã‚‹ã‚ˆã†ã§ã™ã€‚æ—¢ã«å‹Ÿé›†ã¯ã€†åˆ‡ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒ ï¼šShibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯ http://t.co/c4aJhtND #1tp 2012-04-04 16:31:18
sugyan 2012/04/05
Togetter

Shibuya.xss

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
The Sexy Assassinã§ç´¹ä»‹ã•ã‚Œã¦ã‚‹CSS HTML Attribute ReaderãŒã©ã“ã¾ã§å±é™ºã‹æ¤œè¨¼ã—ã¦ã¿ãŸ
The Sexy Assassinã§ç´¹ä»‹ã•ã‚Œã¦ã‚‹CSS HTML Attribute ReaderãŒã©ã“ã¾ã§å±é™ºã‹æ¤œè¨¼ã—ã¦ã¿ãŸ
sugyan 2012/04/04
Shibuya.xss

xss

presentation
ãƒªãƒ³ã‚¯
1