[B! javascript][xss] Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Itisango id:Itisango

javascriptã¨xssã«é–¢ã™ã‚‹Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (18)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
Itisango 2013/11/13
â€œä»»æ„ã®æ–‡å—åˆ—ã‚’çªã£è¾¼ã‚ã‚‹å ´åˆã«ã¯ {"key": "</script>"} ã§scriptã‚¿ã‚°ã‚’å¼·åˆ¶çµ‚äº†ã§ãã¦ã—ã¾ã†ã‹ã‚‰ã§ã™ã€‚JSONã¨ã—ã¦ã¯æ£ã—ã„ã§ã™ãŒHTMLã«åŸ‹ã‚è¾¼ã‚€éš›ã«ã¯ã€ãã‚Œã ã‘ã§ã¯ãƒ€ãƒ¡ãªã®ã§ã™ã€‚æ–‡å—åˆ—ä¸ã« U+2028, U+2029ãŒå‡ºç¾ã™ã‚‹å ´åˆâ€

javascript

xss

json

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

escape

JS

HTML

button

2013å¹´
ãƒªãƒ³ã‚¯
JavaScriptæ–‡å—åˆ—ã®å‹•çš„ç”Ÿæˆã«ãŠã‘ã‚‹ã‚¨ã‚¹ã‚±ãƒ¼ãƒ— - è‘‰ã£ã±æ—¥è¨˜
ã€ŒJavaScriptæ–‡å—åˆ—ã‚’å‹•çš„ç”Ÿæˆã™ã‚‹ã€ã¨ä¸€è¨€ã§è¨€ã£ã¦ã‚‚ã€ä¾‹ãˆã° <html>... <script> // HTMLå†…ã®scriptè¦ç´ å†…ã«ç”Ÿæˆ var s = "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹"; </script> ã ã£ãŸã‚Šã€ <div onclick='foo("ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹");'> ã ã£ãŸã‚Šã€ <script src="external.js"></script> // external.js var s = "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹"; ã ã£ãŸã‚Šã€ã•ã‚‰ã«è¤‡é›‘ãªçµ„ã¿åˆã‚ã›ã ã£ãŸã‚Šã¨ã„ã‚ã‚“ãªçŠ¶æ³ãŒã‚ã£ã¦ã€åŸºæœ¬çš„ã«ã¯ã€ŒJavaScriptã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ã«åŠ ãˆã¦ãã®å¤–å´ã®(å ´åˆã«ã‚ˆã£ã¦ã¯ãƒã‚¹ãƒˆã—ã¦ã„ã‚‹)ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆã«å¿œã˜ãŸã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒå¿…è¦ã€ã¨ã„ã†è©±ã€‚ ã§ã€é¢å€’ã ã£ãŸã‚‰ var s = decodeURIComponent( "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹" ); ã«ã—ã¦ã€ç”Ÿæˆã™ã‚‹å´ã¯U
Itisango 2013/11/13
â€œåŸºæœ¬çš„ã«ã¯ã€ŒJavaScriptã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ã«åŠ ãˆã¦ãã®å¤–å´ã®(å ´åˆã«ã‚ˆã£ã¦ã¯ãƒã‚¹ãƒˆã—ã¦ã„ã‚‹)ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆã«å¿œã˜ãŸã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒå¿…è¦â€

javascript

XSS

escape

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

HTML

neta

2013å¹´

hasegawayosuke

ãƒã‚¿
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: Referreræ–‡å—åˆ—ã«ã‚ˆã‚‹XSS
ãƒªãƒ•ã‚¡ãƒ©ã‚’ä½¿ã£ãŸXSSã®å°ãƒã‚¿ã§ã™ã€‚ ä»Šå›žå–ã‚Šä¸Šã’ã‚‹ã®ã¯ã€ã‚¿ãƒ¼ã‚²ãƒƒãƒˆè‡ªèº«ãŒã€ç´°å·¥ã—ãŸãƒšãƒ¼ã‚¸ã‚’çµŒç”±ã™ã‚‹ã“ã¨ã§ã¤ã‘ã‚‰ã‚ŒãŸãƒªãƒ•ã‚¡ãƒ©ã«ã‚ˆã£ã¦æ”»æ’ƒã‚’å—ã‘ã‚‹ã‚±ãƒ¼ã‚¹ã§ã™ã€‚ã“ã®ã‚ˆã†ãªæ”»æ’ƒã®å ´åˆã¯ã€ç¾å®Ÿã«çµŒç”±å¯èƒ½ãªãƒšãƒ¼ã‚¸ã‹ã‚‰ã§ã—ã‹æ”»æ’ƒæ–‡å—åˆ—ã‚’é€ã‚Šã“ã‚€ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚ ä¾‹ãˆã°ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã€document.referrerã‚’ãã®ã¾ã¾document.write()ã—ã¦ã„ã‚‹ãƒšãƒ¼ã‚¸ãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ http://vulnerabledoma.in/location/ ãƒªãƒ•ã‚¡ãƒ©ã‚’æ›¸ãå‡ºã—ã¦ã„ã‚‹éƒ¨åˆ†ã§XSSã§ãã‚‹ã§ã—ã‚‡ã†ã‹ã€‚ IEã§ã¯å˜ç´”ã§ã™ã€‚ IEã¯URLã®ã‚¯ã‚¨ãƒªã«ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã›ãšã«ã€Œ"<>ã€ãªã©ã‚’å«ã‚ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã§ã€ã“ã‚Œã‚‰ã‚’å«ã‚€URLã‹ã‚‰ã€ãƒªãƒ•ã‚¡ãƒ©ã‚’æ›¸ãå‡ºã—ã¦ã„ã‚‹ãƒšãƒ¼ã‚¸ã¸é·ç§»ã•ã›ã‚Œã°ã€XSSãŒèµ·ãã¾ã™ã€‚ http://l0.cm/xss_referrer.html?<script>alert(1)</sc
Itisango 2013/10/29
â€œChromeã‚„Safari(6.1ã§ç¢ºèª)ã§ã‚‚æ”»æ’ƒãŒå¯èƒ½ã ã¨ã„ã†ã“ã¨ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ä»Šæ—¥è¨€ã„ãŸã„ã®ã¯ã“ã“ã§ã™ã€‚ãŸã¶ã‚“ã€ã¾ã èª°ã‚‚å…¬é–‹ã—ã¦ã„ãªã„æ‰‹æ³•ã ã¨æ€ã„ã¾ã™ã€‚â€

<>

2013å¹´

Web

browser

security

XSS

referer

DOM

JavaScript

script
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: U+2028/2029ã¨DOM based XSS
ECMAScriptã®ä»•æ§˜ã§ã¯ã€0x0A/0x0Dä»¥å¤–ã«U+2028/2029ã®æ–‡å—ã‚‚æ”¹è¡Œã¨ã™ã‚‹ã“ã¨ãŒæ˜Žè¨˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã‚Œã¯ã‚ã¾ã‚ŠçŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã‚ˆã†ã«æ€ã„ã¾ã™ã€‚ ä»¥ä¸‹ã¯ã‚¢ãƒ©ãƒ¼ãƒˆã‚’å‡ºã—ã¾ã™ã€‚ <script> //[U+2028]alert(1) </script> çŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã ã‘ã§ãªãã€çŸ¥ã£ã¦ã„ãŸã¨ã—ã¦ã‚‚ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§æ–‡å—åˆ—ã‚’å‡¦ç†ã™ã‚‹ã¨ãã«ã€U+2028/2029ã¾ã§è€ƒæ…®ã™ã‚‹é–‹ç™ºè€…ãŒã©ã‚Œã ã‘ã„ã‚‹ã®ã‹ã¨ã„ã†è©±ã§ã™ã€‚ å®Ÿéš›ã€U+2028/2029ã‚’æ”¾ã‚Šè¾¼ã‚€ã¨æ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«å†…ã«ãã®æ–‡å—ãŒç”Ÿã®ã¾ã¾é…ç½®ã•ã‚Œã€ã‚¨ãƒ©ãƒ¼ãŒå‡ºã‚‹ãƒšãƒ¼ã‚¸ã¯æœ¬å½“ã«ãŸãã•ã‚“ã‚ã‚Šã¾ã™ã€‚ã¾ã‚ã€ã‚¨ãƒ©ãƒ¼ãŒã§ã‚‹ã ã‘ãªã‚‰ã€å¤§æŠµã®å ´åˆå¤§ããªå•é¡Œã«ã¯ãªã‚Šã¾ã›ã‚“ã€‚ ã¨ã“ã‚ãŒã€U+2028/2029ã«ã‚ˆã£ã¦XSSãŒå¼•ãèµ·ã“ã•ã‚Œã¦ã—ã¾ã†å ´åˆã¨ã„ã†ã®ã‚’æœ€è¿‘å®Ÿéš›ã«è¦‹ã¾ã—ãŸã€‚ Googleã®ã‚µãƒ¼ãƒ“ã‚¹ã§è¦‹ã¤ã‘ãŸ2ã¤ã®ã‚±ãƒ¼ã‚¹ã‚’å–ã‚Šä¸Šã’ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚±
Itisango 2013/09/17
â€œECMAScriptã®ä»•æ§˜ã§ã¯ã€0x0A/0x0Dä»¥å¤–ã«U+2028/2029ã®æ–‡å—ã‚‚æ”¹è¡Œã¨ã™ã‚‹ã“ã¨ãŒæ˜Žè¨˜ã•ã‚Œã¦ã„ã¾ã™ã€‚â€

javascript

Unicode

xss

security

domxss

Google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æ£è¦è¡¨ç¾

æ–‡å—ã‚³ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
Making HTML safer: details for toStaticHTML
This browser is no longer supported. Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Itisango 2013/06/26
#Microsoft #toStaticHTML #XSS #security

toStaticHTML

windows

HTML

javascript

security

xss

ie

document

Microsoft
ãƒªãƒ³ã‚¯
è‘‰ã£ã±æ—¥è¨˜
ã¯ã˜ã‚ã« ä¹…ã—ã¶ã‚Šã«æ–‡å—ã‚³ãƒ¼ãƒ‰ã®XSSã®è©±ãŒç››ã‚Šä¸ŠãŒã£ã¦ã‚‹ã®ã§ã€ä¹…ã—ã¶ã‚Š(3å¹´ä»¥ä¸Šã¶ã‚Šï¼)ã«ãƒ–ãƒã‚°ã‚’æ›¸ãã¾ã—ãŸã€‚ã‚ã‘ã¾ã—ã¦ãŠã‚ã§ã¨ã†ã”ã–ã„ã¾ã™ã€‚ä»Šå¹´ã¨æ¥å¹´ã¨ãã®ã•ãã‚‚3å¹´ãã‚‰ã„ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ blog.tokumaru.org HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ãƒ¼ã‚„HTML metaã‚¿ã‚°ã§ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°åã®æŒ‡å®šãŒãªã„å ´åˆã«æ”»æ’ƒè€…ãŒISO-2022-JPç‰¹æœ‰ã®ãƒã‚¤ãƒˆåˆ—ã‚’HTMLå†…ã«åŸ‹ã‚è¾¼ã‚€ã“ã¨ã§ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ãŒãã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ISO-2022-JPã§ã‚ã‚‹ã¨èª¤èªã™ã‚‹ã€ãã®ã¨ãã«å‹•çš„ã«JavaScriptå†…ã®æ–‡å—åˆ—ã‚’ç”Ÿæˆã—ã¦ã„ã‚‹ã¨ã™ã‚‹ã¨US-ASCIIã§ã„ã†ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ã§ã¯ãªãJIS X0201ã®å††è¨˜å·ã‚’æŒ¿å…¥ã™ã‚‹ã“ã¨ã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒç„¡åŠ¹ã«ãªã‚‹ã€çµæžœã¨ã—ã¦JavaScriptã®æ–‡å—åˆ—å¤–ã«æ”»æ’ƒè€…ã¯ã‚³ãƒ¼ãƒ‰ã‚’ç½®ãã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã®ãŒå¾³ä¸¸ã•ã‚“ã®æ›¸ã‹ã‚Œã¦ã„ã‚‹è¨˜äº‹ã«ãªã‚Šã¾ã™ã€‚ å¯¾ç–ã¨ã—ã¦ã¯ã€å¾³ä¸¸ã•ã‚“ã®è¨˜
Itisango 2013/05/06
id:hasegawayosuke ã•ã‚“ã® #BLOG ã€‚æ„å¤–ã«ã‚‚ä»Šæ—¥ã¾ã§ãƒ–ã‚¯ãƒžã—ã¦ã„ãªã‹ã£ãŸã€‚

Web

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

computer

blog

hasegawayosuke

XSS

IT

JavaScript

Perl
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
Itisango 2012/04/26
jQuery

javascript

XSS

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

2012å¹´
ãƒªãƒ³ã‚¯
Shibuya.xss ã§è©±ã—ã¦ãã¾ã—ãŸ - nothing but trouble
ã™ã”ã„é¢ç™½ã‹ã£ãŸã€‚ä¼šã„ãŸã‹ã£ãŸäººã«ã‚‚æ²¢å±±ä¼šãˆãŸã—ã€‚ é©å½“ãªæ„Ÿã˜ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ãŒã€ãã“ãã“åå¿œãŒã‚ã£ã¦å¬‰ã—ã‹ã£ãŸã€‚ [Shibuya.xss] ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°ãƒã‚¿äºŒæœ¬ View more PowerPoint from send_
Itisango 2012/04/08
shibuya.xss

javascript

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

event

slide

ã‚¹ãƒ©ã‚¤ãƒ‰

2012å¹´
ãƒªãƒ³ã‚¯
rails3ä»¥é™ã®WEBã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã‚ã‚ŠãŒã¡ãªXSS - hanagemanã®æ—¥è¨˜ã§ã¯ãªã„
æ˜Žç¤ºã—ãªãã¦ã‚‚viewã§ã®å‡ºåŠ›ã‚’HTMLã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ã¦ãã‚Œã‚‹ã®ã§ç„¡è¦æˆ’ã«ãªã£ã¦ã‚‹ html_escapeãŒã‚·ãƒ³ã‚°ãƒ«ã‚¯ã‚©ãƒ¼ãƒˆã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãªã„ã¨ã„ã†èªè˜ãŒãªã„ viewã§javascriptã‚’æ›¸ãã¨ãã«åŸ‹ã‚è¾¼ã‚€å€¤ã‚’escape_javascriptã—ã¦ãªã„ ã“ã®ã‚ãŸã‚Šã®è¦ç´ ãŒçµ„ã¿åˆã‚ã•ã‚‹ã¨XSSãŒã†ã¾ã‚Œã‚„ã™ã„ã¨ã„ã†è©±ã‚’æ›¸ãã¾ã™ã€‚ã‚ã‹ã£ã¦ã‚‹äººã«ã¨ã£ã¦ã¯ã‚¯ã‚½ã¿ãŸã„ãªå†…å®¹ãªã®ã§èªã‚€æ™‚é–“ãŒã‚‚ã£ãŸã„ãªã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ãŸã¨ãˆã°js.erbã§ã“ã‚“ãªãµã†ã«æ›¸ã„ã¦ãŸã¨ã—ã¦ var article_id = '<%= @article_id %>'; @article_idãŒä¿¡ç”¨ã§ãã‚‹å€¤ã ã¨ã„ã†å‰æã ã¨å•é¡Œãªã„ã®ã§ã™ãŒã€controllerã§ @article_id = params[:article][:id] å®Ÿã¯ã“ã‚“ãªã“ã¨ã—ã¦ã‚‹ã ã‘ã§ã‚ã¨ã¯ç´ é€šã—ã£ã¦ã„ã†äººã‚‚ã€ã‚‚ã—ã‹ã—ãŸã‚‰ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚è¦ã¯å¤–ã‹ã‚‰æ¸¡
Itisango 2012/04/07
ruby

rails

XSS

Security

javascript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
JS Array Hijacking with MBCS encodings = MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š / Yosuke HASEGAWA ; NetAgent
Itisango 2012/04/06
JSON

JavaScript

xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

presentation

security

hasegawayosuke
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 é–‹å‚¬ã—ã¾ã—ãŸã€‚ - è‘‰ã£ã±æ—¥è¨˜
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1ã‚’é–‹å‚¬ã—ã¾ã—ãŸã€‚ å‚åŠ ã—ã¦é ‚ã„ãŸã¿ãªã•ã‚“ã€ç™ºè¡¨ã—ã¦ãã ã•ã£ãŸã¿ãªã•ã‚“ã€ãã—ã¦ä¼šå ´ã‚’å¿«ããŠè²¸ã—ãã ã•ã£ãŸã†ãˆã«ãƒ“ãƒ¼ãƒ«ã¨ãƒ”ã‚¶ã¾ã§ã”ç”¨æ„ãã ã•ã£ãŸmixiã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ç§ã®ç™ºè¡¨ã—ãŸè³‡æ–™ã‚’ç½®ã„ã¦ãŠãã¾ã™ã€‚ MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š æ¬¡å›žäºˆå®šã¯ã¾ã£ãŸãæœªå®šã§ã™ãŒã€ã‚‚ã—é–‹å‚¬ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã—ãŸã‚‰ã¾ãŸã¿ãªã•ã‚“ã®ã”å‚åŠ ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚
Itisango 2012/04/06
Shibuya.xss

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

hasegawayosuke

JavaScript
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
Itisango 2012/04/06
shibuya.xss

DOM

javascript

api

xss

security

jquery

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTML5

web
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã‚’å¤–ã—ã¾ã—ãŸ
ã“ã®æ•°æ—¥é–“å•é¡Œã«ãªã£ã¦ã„ã‚‹ã€Œã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã€ã§ã™ãŒã€å½“æ—¥è¨˜ãŠã‚ˆã³HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°ã‚ªãƒ•ã‚£ã‚·ãƒ£ãƒ«ãƒ–ãƒã‚°ã«ã‚‚ã€å½“è©²ãƒœã‚¿ãƒ³ãŒã¤ã„ã¦ã„ã¾ã—ãŸã€‚ä½•ãŒå•é¡Œã§ã‚ã‚‹ã‹ã¯ä»¥ä¸‹ãŒè©³ã—ã„ã§ã™ãŒã€è¦ã¯ã€ã¯ã¦ãªã®ç®¡ç†ä¸‹ã§ãªã„å½“ã‚µã‚¤ãƒˆã§ã€ã¯ã¦ãªã®ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„ãŒèªè€…ã®çš†æ§˜ã®ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã‚’ã—ã¦ã„ã‚‹ã“ã¨ãŒå•é¡Œã§ã™ã€‚ å‚è€ƒï¼š ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã¯2011å¹´9æœˆ1æ—¥ã‚ˆã‚Šè¡Œå‹•æƒ…å ±ã®å–å¾—ã‚’ã—ã¦ã„ã‚‹ ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„ã‚„ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒœã‚¿ãƒ³ã®é¡žã§ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ãŒæ®‹ã‚‹ã®ã¯å½“ç„¶ã ã‘ã©ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã•ã‚Œã‚‹ã®ã¯å½“ãŸã‚Šå‰ã«ã¯ãªã£ã¦ã„ãªã„ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã®ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°å•é¡Œã§é«˜æœ¨æµ©å…‰å…ˆç”ŸãŒæ±ºåˆ¥ãƒ„ã‚¤ãƒ¼ãƒˆã‚’ã™ã‚‹ã«è‡³ã£ãŸçµŒç·¯ã¾ã¨ã‚ ç§ã¯ã€2006å¹´11æœˆã«ã€ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã§æ—¥è¨˜ã‚’æ›¸ãå§‹ã‚ã¦ä»¥æ¥ã€ä¸€è²«ã—ã¦ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã—ã¦ãã¾ã—ãŸã®ã§ã€å½“ãƒ–ãƒã‚°ã«ã‚‚ã€Œã¯ã¦ãªã®ãƒœã‚¿ãƒ³ã‚‚ã¤ã‘ã¨ã‹ãªãã‚ƒãªã€ç¨‹åº¦ã®ãƒŽãƒªã§ãƒœã‚¿ãƒ³ã‚’ã¤ã‘ã¦ãŠã‚Šã¾ã—ãŸã€‚ãã®æ™‚
Itisango 2012/03/11
"å¾“ã£ã¦ã€æ„å›³çš„ã«åŸ‹ã‚è¾¼ã‚€JavaScriptã«ã¤ã„ã¦ã‚‚ã€æä¾›å…ƒã®ä¿¡é ¼æ€§ã‚’ååˆ†èª¿æŸ»ã—ãŸä¸Šã§ã€ä¿å®ˆçš„ã§æ…Žé‡ãªåˆ¤æ–ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚"

2012å¹´

ã¯ã¦ãª

javascript

Security

privacy

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ad

XSS

Hatena

bookmark
ãƒªãƒ³ã‚¯
JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ã©ã“ã¾ã§ã‚„ã‚‹ã‹å•é¡Œ - è‘‰ã£ã±æ—¥è¨˜
Ajaxãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦ã€ã‚µãƒ¼ãƒã‹ã‚‰JSONã‚’è¿”ã™å ´åˆã«ã€JSONè‡ªä½“ã¯validã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã€(IEã®éƒ½åˆã§)ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã¦è„†å¼±æ€§ã«ã¤ãªãŒã£ã¦ã‚‹å ´åˆãŒã‚ã‚‹ã®ã§ã€æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ç™ºç”Ÿã™ã‚‹ã‹ã‚‚ã—ã‚Œãªã„è„†å¼±æ€§ JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã‚‹å ´åˆã«ç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ JSONå†…ã«å«ã¾ã‚Œã‚‹æ©Ÿå¯†æƒ…å ±ã®æ¼ãˆã„ XSS ãã‚Œãžã‚Œã®è©³ç´°ã«ã¤ã„ã¦ã¯å¾Œè¿°ã—ã¾ã™ã€‚ é–‹ç™ºå´ã§ã‚„ã‚‹ã¹ãã“ã¨ æ–‡å—åˆ—ä¸ã®Unicodeæ–‡å—ã¯ "\uXXXX" ãªå½¢å¼ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨ã¨ã‚‚ã«ã€ASCIIãªç¯„å›²ã§ã‚ã£ã¦ã‚‚ã€Œ/ã€ã€Œ<ã€ã€Œ>ã€ã€Œ+ã€ã‚‚åŒæ§˜ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€å‰è¿°ã®è„†å¼±æ€§ã‚’é˜²ãã“ã¨ãŒã§ãã¾ã™ã€‚ Perlã§ã‚ã‚Œã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã«ãªã‚Šã¾ã™ã€‚JSON->ascii(1) ã«ç¶šã‘ã¦ã€JSONæ–‡å—åˆ—ã‚’æ£è¦è¡¨ç¾ã§ç½®æ›ã—ã¦ã„ã‚‹ã‚ãŸã‚ŠãŒã‚ãƒ¢ã«ãªã‚Šã¾ã™ã€‚ use utf8; u
Itisango 2011/07/06
json

ajax

javascript

IE

browser

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
Itisango 2011/06/24
jquery

xss

JavaScript

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

css

DOM

webåˆ¶ä½œ
ãƒªãƒ³ã‚¯
XSSä¾‹é¡Œ - masa141421356â€™s blog
alert(1)ã‚’å®Ÿè¡Œã•ã›ã¦ãã ã•ã„ã€‚ãŸã ã—ã€ãƒªãƒ³ã‚¯å…ˆã®ã‚µãƒ¼ãƒã¸ã®ç´°å·¥ã¯ä¸€åˆ‡å‡ºæ¥ãªã„ã‚‚ã®ã¨ã—ã¾ã™ï¼ˆjavascriptã‚¹ã‚ãƒ¼ãƒ ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã¨ã‹ã¯ç¦æ¢ã¨ã„ã†ã“ã¨ã§ï¼‰ã€‚ Execute alert(1), but you can not customize server linked from IMG element (for example, redirection to "javascript:" scheme is not allowed). <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>XSS challange ( execute alert())</title> <script type="text/javascript"> var w = nul
Itisango 2011/03/01
å…¨ç„¶ã‚ã‹ã‚‰ã‚“ã€‚

xss

JavaScript
ãƒªãƒ³ã‚¯
Geekãªãºãƒ¼ã˜ : ãƒ¡ã‚¿æƒ…å ±ã«ã‚ˆã‚‹XSS
å…ˆæ—¥ã€ãªã‹ãªã‹å¼·çƒˆãªXSSæ”»æ’ƒæ‰‹æ³•ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ DNSã¸ã®å•ã„åˆã‚ã›çµæžœã«JavaScriptã‚’åŸ‹ã‚è¾¼ã‚“ã§ã—ã¾ãŠã†ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ SkullSecurity: Stuffing Javascript into DNS names DarkReading: Researcher Details New Class Of Cross-Site Scripting Attack nCircle: Meta-Information Cross Site Scripting (PDF) è‡ªå‹•ç”Ÿæˆã•ã‚Œã‚‹Webãƒšãƒ¼ã‚¸ä¸ã«ã€DNSã«ã‚ˆã‚‹åå‰è§£æ±ºçµæžœãŒã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã•ã‚Œãªã„çŠ¶æ…‹ã§å«ã¾ã‚Œã¦ã„ã‚‹ã¨ã€JavaScriptãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†ã¨ã„ã†ä»•æŽ›ã‘ã§ã™ã€‚ ã€Œhogehoge.example.comã€ãŒæœ¬æ¥ãªã‚‰ã°ã€Œ198.1.100.3ã€ã¨ã„ã†ã‚ˆã†ãªIPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒçµæžœã¨ã—ã¦è¿”ã‚‹ã¨ã“ã‚ã‚’ã€DNSã«ç´°å·¥ã‚’è¡Œã£
Itisango 2010/10/06
ã“ã®ç™ºæƒ³ã¯ãªã‹ã£ãŸã€‚é¬±ã ã€‚

XSS

dns

javascript

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼†ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚ãƒ£ãƒ³ãƒ—ã®CTFã§å‡ºé¡Œã—ãŸXSSå•é¡Œ - è‘‰ã£ã±æ—¥è¨˜
é›£ã—ã™ãŽã¦è§£ã‘ãªã„ã‚ˆï¼ã¨ä¸æº€å™´å‡ºã ã£ãŸå•é¡Œã€‚æ¥å¹´ã‚„ã‚‹ã¨ã—ãŸã‚‰ã€ã”ã£ãã‚Šå¤‰æ›´ã™ã‚‹ã®ã§å…¬é–‹ã—ã¡ã‚ƒãŠã†ã€‚ http://utf-8.jp/cgi-bin/xss1/search.cgi http://utf-8.jp/cgi-bin/xss2/search.cgi http://utf-8.jp/cgi-bin/xss3/search.cgi (è¿½è¨˜) å›žç”ä¾‹ã‚’ã‚ãƒ£ãƒ³ãƒ—å—è¬›ç”Ÿã® @tyage ã•ã‚“ãŒæ›¸ã„ã¦ãã‚Œã¦ã„ã¾ã™ã€‚GJ! XSSãƒ¡ãƒ¢æ›¸ã | ãƒãƒ£ã‚²ã£ã¦ã‚‹æ—¥ã€…
Itisango 2010/08/25
ã‚»ãƒ—ã‚ãƒ£ãƒ³

XSS

security

JavaScript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å•é¡Œ
ãƒªãƒ³ã‚¯
1