[B! bash] yamadamnã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yamadamn id:yamadamn

bashã«é–¢ã™ã‚‹yamadamnã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

BASHã®è„†å¼±æ€§ã§CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—ãŸ
ç’°å¢ƒå¤‰æ•°ã«ä»•è¾¼ã¾ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã†BASHã®è„†å¼±æ€§ãŒ CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹ã‹è©¦ã—ã¦ã¿ãŸã‚‰çµæžœã¯æ‚²æƒ¨ãªæ„Ÿã˜ã« Tweet 2014å¹´9æœˆ25æ—¥ å¶‹ç”°å¤§è²´ ã“ã®è¨˜äº‹ã¯2014å¹´ã®ã‚‚ã®ã§ã™ æœã‹ã‚‰ Bash specially-crafted environment variables code injection attack ãªã‚‹ã‚‚ã®ã§é¨’ãŽã«ãªã£ã¦ã„ãŸã®ã§ã€ã•ã£ããæ‰‹å…ƒã® Apacheã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ /hoge.cgiã¨ã„ã†URIã§å®Ÿè¡Œã•ã‚Œã‚‹ã‚ˆã†ã«ã€ä¸€è¡Œã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºåŠ›ã™ã‚‹ã ã‘ã® CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’è¨ç½®ã—ã¾ã™ã€‚ã„ã£ã‘ã‚“ã€ãªã‚“ã®å…¥åŠ›ã‚‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã‹ã‚‰å—ã‘ä»˜ã‘ã¦ã„ãªã„ãŸã‚å±é™ºã®ã‚ã‚Šã‚ˆã†ã‚‚ãªãè¦‹ãˆã¾ã™ã€‚ #!/bin/sh echo "Content-type: text/plain" echo echo "Hi! I'm an ordinary CGI script w
yamadamn 2014/09/25
bash

security

linux
ãƒªãƒ³ã‚¯
Linuxã®ä½¿ã„æ–¹
ã¯ã˜ã‚ã« å½“è¬›åº§ã®ã”æ¡ˆå†… Linuxã¯ã‚µãƒ¼ãƒãƒ¼åŠã³ã€ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç”¨OSã¨ã—ã¦ä½¿ç”¨ã™ã‚‹ã®ãŒä¸€èˆ¬çš„ã¨æ€ã‚ã‚Œã¾ã™ãŒã€æœ€è¿‘ã¯çµ„ã¿è¾¼ã¿ç”¨OSã¨ã—ã¦ã‚‚ä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚„ã‚¿ãƒ–ãƒ¬ãƒƒãƒˆç”¨OSã¨ã—ã¦æœ‰åãªAndroidã®ã‚«ãƒ¼ãƒãƒ«ã¯Linuxã§ã™ã€‚ ã“ã®è¬›åº§ã§ã¯ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç”¨OSã¨ã—ã¦ä½¿ç”¨ã™ã‚‹ã“ã¨ã‚’å‰æã¨ã—ã¦èª¬æ˜Žã—ã¾ã™ã€‚ãªãŠã€ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç’°å¢ƒã¯KDEã¨ã—ã¾ã™ã€‚ ã‚µãƒ¼ãƒãƒ¼ç’°å¢ƒã§ä½¿ã†ã®ã§ã‚ã‚Œã°ã€ã»ã¨ã‚“ã©ã®æ“ä½œã¯ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ç”¨ã—ã¦è¡Œã†ã“ã¨ã«ãªã‚‹ã¨æ€ã„ã¾ã™ã®ã§ã€ã‚³ãƒžãƒ³ãƒ‰ã«é–¢ã™ã‚‹çŸ¥è˜ã¯å¿…é ˆã ã¨æ€ã„ã¾ã™ã€‚ä¸€æ–¹ã€ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç’°å¢ƒã®å ´åˆã¯ã»ã¨ã‚“ã©ã®ä½œæ¥ãŒGUIï¼ˆGraphical User Interfaceï¼‰ã§å‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã£ã¦æ¥ãŸãŸã‚ã€ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã†ã“ã¨ã¯å°‘ãªããªã£ã¦æ¥ã¾ã—ãŸã€‚ã—ã‹ã—ã€æ¬¡ã®ã‚ˆã†ãªå ´åˆã«ã¯ã¾ã ã¾ã ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã†ã“ã¨ãŒå¤šã„ã¨æ€ã„ã¾ã™ã€‚ ãƒˆãƒ©ãƒ–ãƒ«ç™ºç”Ÿæ™‚ã®åŽŸå› ç©¶æ˜Žã‚„å¯¾å¿œç–ã®å®Ÿæ–½ ã‚ˆã‚ŠåŠ¹çŽ‡çš„ãªä½œæ¥ã®å®Ÿæ–½
yamadamn 2010/12/24
linux

command

bash
ãƒªãƒ³ã‚¯
ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆï¼ˆBashï¼‰
ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã¨ã¯ã‚³ãƒžãƒ³ãƒ‰ã‚„ã‚·ã‚§ãƒ«ã®çµ„ã¿è¾¼ã¿ã‚³ãƒžãƒ³ãƒ‰ãªã©ã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã«è¨˜è¿°ã—ã€å®Ÿè¡Œã§ãã‚‹ã‚ˆã†ã«ã—ãŸã‚‚ã®ã§ã‚ã‚‹ã€‚ ã¾ãŸãƒ—ãƒã‚°ãƒ©ãƒ ã®åˆ¶å¾¡æ§‹é€ ãªã©ã‚‚ä½¿ç”¨ã§ãã€æŸ”è»Ÿãªå‡¦ç†ãŒå¯èƒ½ã§ã‚ã‚Šã€/etc/rc.d/initd/ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå†…ã®èµ·å‹•ã‚¹ã‚¯ãƒªãƒ—ãƒˆãªã©ã¯ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã‚ã‚‹ã€‚ ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ã«ã¯å®Ÿè¡Œæ¨©é™ãŠã‚ˆã³èªã¿è¾¼ã¿æ¨©é™ãŒå¿…è¦ã§ã™ã€‚ ã¾ãŸã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ã®1è¡Œç›®ã«ã¯ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ã‚·ã‚§ãƒ«ã®ãƒ‘ã‚¹ã‚’è¨˜è¿°ã—ã¾ã™ã€‚ ã‚¹ã‚¯ãƒªãƒ—ãƒˆãƒ•ã‚¡ã‚¤ãƒ«å†…ã§ã‚‚ã€ã‚·ã‚§ãƒ«å¤‰æ•°ã‚’å®šç¾©ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ã¾ãŸãã®å¤‰æ•°ã‚’å‚ç…§ã™ã‚‹å ´åˆã¯å¤‰æ•°åã®å‰ã«" $ "ã‚’ ä»˜ã‘ã‚‹ã“ã¨ã§å‚ç…§ã§ãã‚‹ã€‚å¤‰æ•°åã«ä½¿ç”¨ã§ãã‚‹æ–‡å—ã¯è‹±æ•°å—ãŠã‚ˆã³" _ "ï¼ˆã‚¢ãƒ³ãƒ€ãƒ¼ãƒãƒ¼ï¼‰ã§ã‚ã‚Šå…ˆé ã¯è‹±å—ã‚’ä½¿ç”¨ã—ãªãã¦ã¯ãªã‚‰ãªã„ã€‚
yamadamn 2010/04/02
bash

shell

unix

linux
ãƒªãƒ³ã‚¯
GT Nitro: ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚·ãƒ³ã‚°ãƒ»ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚·ãƒ³ã‚°ã‚²ãƒ¼ãƒ - Google Play ã®ã‚¢ãƒ—ãƒª
GT Nitro: Car Game Drag Raceã¯ã€å…¸åž‹çš„ãªã‚«ãƒ¼ã‚²ãƒ¼ãƒ ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã‚Œã¯ã‚¹ãƒ”ãƒ¼ãƒ‰ã€ãƒ‘ãƒ¯ãƒ¼ã€ã‚¹ã‚ãƒ«å…¨é–‹ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚ãƒ–ãƒ¬ãƒ¼ã‚ã¯å¿˜ã‚Œã¦ã€ã“ã‚Œã¯ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã€ãƒ™ã‚¤ãƒ“ãƒ¼ï¼å¤å…¸çš„ãªã‚¯ãƒ©ã‚·ãƒƒã‚¯ã‹ã‚‰æœªæ¥çš„ãªãƒ“ãƒ¼ã‚¹ãƒˆã¾ã§ã€æœ€ã‚‚ã‚¯ãƒ¼ãƒ«ã§é€Ÿã„è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã§ãã¾ã™ã€‚ã‚¹ãƒ†ã‚£ãƒƒã‚¯ã‚·ãƒ•ãƒˆã‚’ãƒžã‚¹ã‚¿ãƒ¼ã—ã€ãƒ‹ãƒˆãƒã‚’è³¢ãä½¿ã£ã¦ç«¶äº‰ã‚’æ‰“ã¡ç ´ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã¯ãã®ãƒªã‚¢ãƒ«ãªç‰©ç†å¦ã¨ç´ æ™´ã‚‰ã—ã„ã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã§ã‚ãªãŸã®å¿ƒã‚’çˆ†ç™ºã•ã›ã¾ã™ã€‚ã“ã‚Œã¾ã§ãƒ—ãƒ¬ã‚¤ã—ãŸã“ã¨ã®ãªã„ã‚ˆã†ãªã‚‚ã®ã§ã™ã€‚ GT Nitroã¯ã€ãƒªãƒ•ãƒ¬ãƒƒã‚¯ã‚¹ã¨ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã‚’è©¦ã™ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚æ£ã—ã„çž¬é–“ã«ã‚®ã‚¢ã‚’ã‚·ãƒ•ãƒˆã—ã€ã‚¬ã‚¹ã‚’æ€ã„åˆ‡ã‚Šè¸ã‚€å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€å¤§ç‰©ãŸã¡ã¨ç«¶ã„ã¤ã¤ã€è»Šã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¨ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚‚è¡Œã‚ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ä¸–ç•Œä¸ã§æœ€é«˜ã®ãƒ‰ãƒ©ã‚¤ãƒãƒ¼ã¨è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã«æŒ‘ã‚€ã“ã¨ã«ãªã‚Šã€ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã®çŽ‹å†
yamadamn 2010/04/01
bash

unix

shell
ãƒªãƒ³ã‚¯
bashã®ã‚ãƒ¼æ“ä½œä¸€è¦§ã¾ã¨ã‚ - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
bashã§ã¯ã€"Ctrl"ã‚„"Esc"ã‚ãƒ¼ã¨çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§æ§˜ã€…ãªæ“ä½œãŒã§ãã‚‹ã®ã§ã€ãƒ¡ãƒ¢ä»£ã‚ã‚Šã«ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ ã‚ˆãã‚„ã‚‹ã®ãŒã€ŒCtrl + sã€ã‚ãƒ¼ã‚’æŠ¼ã—ã¦ã—ã¾ã†ã¨ã€ãƒ•ãƒªãƒ¼ã‚ºã—ãŸã‹ã®ã‚ˆã†ã«è¦‹ãˆã‚‹ã®ã§ä¸€çž¬ç„¦ã£ã¦ã—ã¾ã†ã€‚ãã‚“ãªæ™‚ã¯ãƒ»ãƒ»ãƒ» Ctrl + b ã‚«ãƒ¼ã‚½ãƒ«ã‚’å·¦ã¸1æ–‡å—ç§»å‹• (â†ã‚ãƒ¼ã§ã‚‚OK) Ctrl + f ã‚«ãƒ¼ã‚½ãƒ«ã‚’å³ã¸1æ–‡å—ç§»å‹• (â†’ã‚ãƒ¼ã§ã‚‚OK) Esc + b ã‚«ãƒ¼ã‚½ãƒ«ã‚’å³ã¸1å˜èªžç§»å‹• Esc + f ã‚«ãƒ¼ã‚½ãƒ«ã‚’å³ã¸1å˜èªžç§»å‹• Ctrl + p historyã®1ã¤å‰ã«å…¥åŠ›ã—ãŸã‚³ãƒžãƒ³ãƒ‰ã‚’è¡¨ç¤º (â†‘ã‚ãƒ¼ã§ã‚‚OK) Ctrl + n historyã®1ã¤å¾Œã«å…¥åŠ›ã—ãŸã‚³ãƒžãƒ³ãƒ‰ã‚’è¡¨ç¤º (â†“ã‚ãƒ¼ã§ã‚‚OK) Ctrl + h ã‚«ãƒ¼ã‚½ãƒ«ã®å·¦1æ–‡å—ã‚’å‰Šé™¤ (Backspaceã‚ãƒ¼ã§ã‚‚OK) Ctrl + d ã‚«ãƒ¼ã‚½ãƒ«ã®å³1æ–‡å—ã‚’å‰Šé™¤ (Deleteã‚ãƒ¼ã§ã‚‚OK) Ctrl + a ã‚«ãƒ¼
yamadamn 2009/10/13
bash

command
ãƒªãƒ³ã‚¯
UNIX & Linux ã‚³ãƒžãƒ³ãƒ‰ãƒ»ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆ ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹
ã‚µãƒ¼ãƒ“ã‚¹çµ‚äº†ã®ãŠçŸ¥ã‚‰ã› ã„ã¤ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ãŠå®¢æ§˜ãŒã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸã‚µãƒ¼ãƒ“ã‚¹ã¯æœ¬æ—¥ã¾ã§ã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã„ãŸã—ã¾ã—ãŸã€‚ ä»Šå¾Œã¨ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”æ„›é¡§ãã ã•ã„ã¾ã™ã‚ˆã†ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
yamadamn 2009/01/29
linux

reference

bash
ãƒªãƒ³ã‚¯
1