[B! security][sql] yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yife id:yife

securityã¨sqlã«é–¢ã™ã‚‹yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã€‘å¾³ä¸¸å…ˆç”Ÿã«æ€’ã‚‰ã‚Œãªã„ã€å‹•çš„SQLã®å®‰å…¨ãªçµ„ã¿ç«‹ã¦æ–¹
ç¬¬ 87 å›ž PHP å‹‰å¼·ä¼šã§ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚PHP ã®å‡¦ç†ç³»ã«æŽ¡ç”¨ã•ã‚Œã¦ã„ã‚‹å‚ç…§ã‚«ã‚¦ãƒ³ãƒˆæ–¹å¼ã® GC ã¨å¾ªç’°å‚ç…§ã‚’å›žåŽã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«ã¤ã„ã¦ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ã¾ãŸã€ç‰¹å®šã®é™ã‚‰ã‚ŒãŸçŠ¶æ³ã§å¾ªç’°å‚ç…§ã®å›žåŽãŒå‡¦ç†é€Ÿåº¦ã«æ‚ªå½±éŸ¿ã‚’ä¸Žãˆã‚‹ã“ã¨ã‚’ã€ç°¡å˜ãªã‚µãƒ³ãƒ—ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ç”¨ã„ã¦ç¤ºã—ã¾ã™ã€‚
yife 2015/10/09
SQL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php

SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

security
ãƒªãƒ³ã‚¯
sqlmap: automatic SQL injection and database takeover tool
Introduction sql map is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the und
yife 2015/08/27
database

MySQL

security

SQL

sqlmap

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Column SQL Truncationè„†å¼±æ€§ã«ã”ç”¨å¿ƒ
å‰å›žã®ãƒ–ãƒã‚°è¨˜äº‹ã€ŒCMSå››å¤©çŽ‹ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³çŠ¶æ³ã‚’èª¿æŸ»ã—ãŸã¨ã“ã‚æ„å¤–ãªçµæžœã«ãªã£ãŸã€ã«ã¦ã€Joomlaã¨MovableTypeã¯é•·å¤§ãªãƒã‚°ã‚¤ãƒ³åã‚’ç™»éŒ²ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãƒã‚°ã‚¤ãƒ³åã®é‡è¤‡ãŒèµ·ã“ã‚Šå¾—ã‚‹ã“ã¨ã‚’æŒ‡æ‘˜ã—ãŸã¨ã“ã‚ã€facebookã®ç§ã®ã‚¦ã‚©ãƒ¼ãƒ«ã«ã¦ã€Column SQL Truncationè„†å¼±æ€§ã®è©±é¡Œã«ãªã‚Šã¾ã—ãŸã€‚Column SQL Truncationã¯ã€2008å¹´ã«WordPressã®è„†å¼±æ€§ã¨ã—ã¦å ±å‘Šã•ã‚ŒãŸã“ã¨ãŒã‚ã‚Šã¾ã™ï¼ˆå‚ç…§ã€å‚ç…§ï¼‰ã€‚ æœ¬ç¨¿ã§ã¯ã€ç°¡å˜ãªãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã®SQLå‘¼ã³å‡ºã—ä¾‹ã‚’ç”¨ã„ã¦Column SQL Truncationã‚’èª¬æ˜Žã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ èªè¨¼ç”¨ãƒ†ãƒ¼ãƒ–ãƒ«å®šç¾©ã®èª¬æ˜Ž èªè¨¼ã«ç”¨ã„ã‚‹ä¼šå“¡ãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ä¸‹è¨˜ã¨ã—ã¾ã™ã€‚ã”è¦§ã®ã‚ˆã†ã«ã€ãƒã‚°ã‚¤ãƒ³åã‚’ç¤ºã™åˆ— username ã«ã¯ä¸€æ„åˆ¶ç´„ãŒã‚ã‚Šã¾ã›ã‚“ã€‚ï¼ˆè¿½è¨˜ï¼‰ä¸€æ„åˆ¶ç´„ã¯ãµã¤ã†ã‚ã‚‹ã ã‚ã¨æ€ã‚ã‚Œã‚‹ã§ã—ã‚‡ã†ãŒã€CMSå››å¤©çŽ‹ã®ä¸ã§ä¸€æ„åˆ¶ç´„
yife 2015/06/11
column

mysql

security

SQL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹

tips
ãƒªãƒ³ã‚¯
Time-based SQL Injectionã¯æ„å¤–ã«å®Ÿç”¨çš„ã ã£ãŸ
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Time-based SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã™ãªã‚ã¡æ™‚é–“å·®ã‚’åˆ©ç”¨ã—ãŸSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒæ„å¤–ã«å®Ÿç”¨çš„ã ã£ãŸã¨ã„ã†å ±å‘Šã‚’ã—ã¾ã™ã€‚ãƒ‡ãƒ¢æ˜ åƒã‚ã‚Šã§ã™ã€‚ ã¯ã˜ã‚ã« Time-based SQL Injectionã¨ã„ã†æ”»æ’ƒãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯ãƒ–ãƒ©ã‚¤ãƒ³ãƒ‰SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®ä¸€ç¨®ã§ã€ã‚ã‚‹æ¡ä»¶ã®å ´åˆã«ä¸€å®šæ™‚é–“ï¼ˆä¾‹ãˆã°5ç§’ï¼‰ã‚¹ãƒªãƒ¼ãƒ—ã—ã€ãã†ã§ãªã„æ™‚ã¨ã®å¿œç”æ™‚é–“ã®å·®ã§æƒ…å ±ã‚’ç›—ã‚‚ã†ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚1å›žã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã§1ãƒ“ãƒƒãƒˆã®æƒ…å ±ãŒå¾—ã‚‰ã‚Œã‚‹ã®ã§ã€ãã‚Œã‚’ç©ã¿é‡ãã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ã„ãã‚‰ã§ã‚‚æƒ…å ±ã‚’ç›—ã‚ã‚‹ã¯ãšã§ã™â€¦ç†è«–çš„ã«ã¯ã€‚ ã—ã‹ã—ã€ã€Œç†å±ˆã¯ãã†ã§ã‚‚ã€æ™‚é–“ãŒæŽ›ã‹ã‚Šã™ãŽã‚‹ã‚ˆãã€ã¨ã„ã†ã“ã¨ã§ã€æ·±ãã¯è¿½ã£ã‹ã‘ã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®æ¤œæŸ»ã«ã¯æœ‰åŠ¹ã§ã‚‚ã€æ‚ªç”¨ã¨ã—ã¦ã®å®Ÿç”¨æ€§ã¯ã‚ã¾ã‚Šãªã„ã¨è€ƒãˆã¦ã„ãŸã®ã§ã™ã€‚ ãã£ã‹ã‘ ãã£ã‹ã‘ã¯ã€ä»¥ä¸‹ã®Yahoo!çŸ¥æµè¢‹ã«ä»¥ä¸‹ã®è³ªå•ã§ã™ã€‚ SQL
yife 2015/04/16
SQL

sqlã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

security
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ©ãƒƒã‚¯ï½œæƒ…å ±ã‚’å®ˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢
æƒ…å ±ã‚’å®ˆã‚Šã€æœªæ¥ã‚’å‰µé€ ã™ã‚‹ãƒ‘ã‚¤ã‚ªãƒ‹ã‚¢ã¨ã—ã¦ã®ä¿¡é ¼ã¨è‡ªä¿¡ã§ã€ã‚‚ã£ã¨å…ˆã¸ æœ€é«˜å³°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã¨ã€ITãƒˆãƒ¼ã‚¿ãƒ«ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ ã‚‚ã£ã¨çŸ¥ã‚‹
yife 2013/11/01
â€œã‚»ã‚«ãƒ³ãƒ‰ã‚ªãƒ¼ãƒ€ãƒ¼SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³â€

security

SQL

ctf

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚´ãƒ«ãƒ• - ãªã‚“ã¨3æ–‡å—ã§èªè¨¼å›žé¿ãŒå¯èƒ½ã«
æ˜¨æ—¥ã®ã‚¨ãƒ³ãƒˆãƒªã€ŒSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚´ãƒ«ãƒ• - èªè¨¼å›žé¿ã®æ”»æ’ƒæ–‡å—åˆ—ã¯ã©ã“ã¾ã§çŸãã§ãã‚‹ã‹?ã€ã«ã¦ã€èªè¨¼å›žé¿ã®æ”»æ’ƒæ–‡å—åˆ—ãŒ5æ–‡å—ã«ã§ãã‚‹ï¼ˆã€Œ'OR'1ã€ï¼‰ã“ã¨ã‚’ç¤ºã—ã¾ã—ãŸãŒã€@masa141421356ã•ã‚“ã¨ã€ã‚„ã¾ã–ãã•ã‚“ï¼ˆãŠäºŒäººã¨ã‚‚æ‹™è‘—ã®ãƒ¬ãƒ“ãƒ¥ã‚¢ãƒ¼ã§ã™ï¼‰ã‹ã‚‰ã€idã¨pwdã«ã¾ãŸãŒã£ãŸæ”»æ’ƒä¾‹ã‚’ç¤ºã—ã¦ã„ãŸã ãã¾ã—ãŸã€‚ã‚„ã¾ã–ãã•ã‚“ã®ä¾‹ã¯ã€MySQLé™å®šãªãŒã‚‰ã€ãªã‚“ã¨3æ–‡å—ã§ã™ã€‚ã“ã‚Œã¯ã™ã”ã„ã€‚ @masa141421356ã•ã‚“ã®æ”»æ’ƒä¾‹ @masa141421356ã•ã‚“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚’å¼•ç”¨ã—ã¾ã™ã€‚ @ockeghem å¤§æŠµã®DBã§id=''OR' AND pwd='>' ' ãŒé€šã‚‹ã¨æ€ã„ã¾ã™ï¼ˆidå´ã«ã€Œ'ORã€, pwdå´ã«ã€Œ>' ã€ã§6æ–‡å—ï¼‰ã€‚é•·ã•0ã®æ–‡å—åˆ—ãŒNULLæ‰±ã„ã•ã‚Œãªã„DBãªã‚‰æœ€å¾Œã®ã‚¹ãƒšãƒ¼ã‚¹ã‚’æ¶ˆã—ã¦5æ–‡å—ã§ã™ã€‚ â€” masa141421356 (@masa141421356) June
yife 2013/06/25
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

MySQL

database

Postgresql

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

sql

mysql

Oracle
ãƒªãƒ³ã‚¯
PHPã®ã‚¤ã‚¿ã„å…¥é–€æ›¸ã‚’èªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(1) - ockeghem's blog
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚ã‚‹PHPã®å…¥é–€æ›¸ã‚’é¡Œæã¨ã—ã¦ã€Ajaxã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã«ã¤ã„ã¦æ¤œè¨Žã—ã¾ã™ã€‚å…¨3å›žã¨ãªã‚‹äºˆå®šã§ã™ã€‚ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã„ãŸãã£ã‹ã‘ twitterã‹ã‚‰ã‚¿ãƒ¬ã‚³ãƒŸã‚’ã¡ã‚‡ã†ã ã„ã—ã¦ã€ä½œã‚ŠãªãŒã‚‰åŸºç¤Žã‹ã‚‰å¦ã¶PHPã«ã‚ˆã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¥é–€XAMPP/jQuery/HTML5ã§ä½œã‚‹ã‚¤ãƒžãƒ‰ã‚ã®Weã¨ã„ã†æœ¬ã‚’èªã¿ã¾ã—ãŸã€‚æ‰€æ„Ÿã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ ã‚¿ãƒ¬ã‚³ãƒŸæ°ã®ä¸»å¼µã®ã‚ˆã†ã«ã€æœ¬æ›¸ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ä¸€åˆ‡è€ƒæ…®ã—ã¦ã„ãªã„ ä¸»ãªè„†å¼±æ€§ã¯ã€XSSã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ä»»æ„ã®ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒˆå®Ÿè¡Œï¼ˆã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰çµŒç”±ï¼‰ã€ãƒ¡ãƒ¼ãƒ«ãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ç‰ è„†å¼±æ€§ä»¥å‰ã®å•é¡Œã¨ã—ã¦ã‚µãƒ³ãƒ—ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å“è³ªãŒä½Žã„ã€‚ãƒ‡ãƒãƒƒã‚°ã—ãªã„ã¨å‹•ã‹ãªã„ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå¤šæ•°ã‚ã£ãŸ ä¸Šè¨˜ã«é–¢é€£ã—ã¦ã€æµç”¨å…ƒã®ã‚½ãƒ¼ã‚¹ã‚„ãƒ‡ãƒãƒƒã‚°ç”¨ã®alertãªã©ãŒã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æ®‹ã£ã¦ã„ã¦ç—›ã€…ã—ã„ ä»Šæ™‚ã“ã®æ°´æº–ã¯ãªã„ã‚ãƒ¼ã¨æ€ã„ã¾ã—ãŸã€‚ä»¥å‰
yife 2011/09/05
ajax

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

PHP

sqlã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

sql

html

javascript

security

Ajax
ãƒªãƒ³ã‚¯
1