Upgrade to Pro — share decks privately, control downloads, hide ads and more …

脆弱性から学ぶ
Webセキュリティ/study-web-security-from-vulnerability1

hypermkt
October 12, 2019

 脆弱性から学ぶ
Webセキュリティ/study-web-security-from-vulnerability1

バーチー / GMO Pepabo, Inc.
2019.10.12 PHPカンファレンス沖縄
https://phpcon.okinawa.jp

hypermkt

October 12, 2019
Tweet

More Decks by hypermkt

Other Decks in Programming

Transcript

  1. ੈͷதʹ͸༷ʑͳ੬ऑੑ͕͋Δ w 42-ΠϯδΣΫγϣϯ w ΫϩεαΠτεΫϦϓςΟϯά w $43' w σΟϨΫτϦύετϥόʔαϧ w

    04ίϚϯυɾΠϯδΣΫγϣϯ w ηογϣϯ؅ཧͷෆඋ w )551ϝʔϧϔομʔΠϯδΣΫγϣϯ w ΞΫηε੍ޚ΍ೝՄ੍ޚͷܽམ w ͳͲ
  2. ࠓ೔͸ҎԼ̏఺Λղઆ͢Δ w 42-ΠϯδΣΫγϣϯ w ΫϩεαΠτεΫϦϓςΟϯά w $43' w σΟϨΫτϦύετϥόʔαϧ w

    04ίϚϯυɾΠϯδΣΫγϣϯ w ηογϣϯ؅ཧͷෆඋ w )551ϝʔϧϔομʔΠϯδΣΫγϣϯ w ΞΫηε੍ޚ΍ೝՄ੍ޚͷܽམ w ͳͲ
  3. લఏ஌ࣝɿϦςϥϧ Ωʔϫʔυ ༧໿ޠ 4&-&$5'30.8)&3& ԋࢉࢠ  ࣝผࢠ OBNF Ϧςϥϧ bZBNBEB`

    w 42-͸্هͷཁૉͰߏ੒͞ΕΔ w 42-จதͷZBNBEBͷ෦෼ΛϦςϥϧͱݺͿ w จࣈྻͷ৔߹͸จࣈྻϦςϥϧɺ਺ࣈͷ৔߹͸਺஋ϦςϥϧͱݺͿ w ZBNBEB͸จࣈྻϦςϥϧͰ͋Δ
  4. 944ͷڴҖᶄը໘ͷॻ͖׵͑ʹΑΔِϖʔδͷදࣔ w944͕ѱ༻͞ΕΔͱ)5.-+BWB4DSJQUʹΑΓը໘͕ॻ͖׵͑ΒΕِ ϖʔδ͕දࣔ͞ΕΔ ͓໰͍߹ΘͤϑΥʔϜ 
 ໊͓લ
 ి࿩൪߸ ߈ܸऀ ᶃ߈ܸεΫϦϓτͰ ը໘Λվ͟Μ

    վ͟Μ͞Εͨ
 ͓໰͍߹ΘͤϑΥʔϜ 
 ໊͓લ
 ి࿩൪߸
 ΫϨδοτΧʔυ൪߸ ੬ऑੑͷ͋ΔαΠτ ߈ܸऀͷαʔόʔ ᶄػີ৘ใΛೖྗ ར༻ऀ ᶅσʔλૹ৴
  5. $43'ͱ͸ wѱҙͷ͋Δਓ͕༻ҙͨ͠᠘ʹΑΓɺར༻ऀ͕༧ظ͠ͳ͍ϦΫΤετΛड ৴͠ॲཧͯ͠͠·͏͜ͱ w͜ΕΛ$43' $SPTT4JUF3FRVFTU'PSHFSJFT ੬ऑੑͱݺͿ  ߈ܸऀ ར༻ऀ ᶃ᠘ϦϯΫΛ

    ࢓ࠐΉ ߈ܸର৅αΠτ ᠘αΠτ ᶄར༻ऀ͕᠘ϦϯΫΛΫϦοΫ ᶅ੬ऑੑͷ͋ΔαΠτʹ ༠ಋ͞ΕΔ ᶆ঎඼ͷෆਖ਼ߪೖ͕ ͞ΕΔ
  6. ͪͳΈʹଞͷ੬ऑੑʹ͍ͭͯ͸ʁʁ w 42-ΠϯδΣΫγϣϯ w ΫϩεαΠτεΫϦϓςΟϯά w $43' w σΟϨΫτϦύετϥόʔαϧ w

    04ίϚϯυɾΠϯδΣΫγϣϯ w ηογϣϯ؅ཧͷෆඋ w )551ϝʔϧϔομʔΠϯδΣΫγϣϯ w ΞΫηε੍ޚ΍ೝՄ੍ޚͷܽམ w ͳͲ