Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
HITCON 2017 Zeroday 發表會
Search
Inndy
August 26, 2017
Technology
0
1.2k
HITCON 2017 Zeroday 發表會
https://zeroday.hitcon.org/vulnerability/ZD-2016-00306
Inndy
August 26, 2017
Tweet
Share
More Decks by Inndy
See All by Inndy
工程師一定要懂的 Text Encoding
inndy
1
480
資訊安全:麻瓜的黑魔法防禦術
inndy
3
2.7k
HackmeCTF 平台背後的心酸血淚史
inndy
2
750
COSCUP 2018 Lightning Talk - 審稿好難,所以我們來寫程式吧
inndy
0
350
逆向工程:從入門到放棄
inndy
7
3.3k
No More Crypto Fails
inndy
33
7.7k
你再共用密碼啊
inndy
1
690
CTF From Zero To One
inndy
5
4.5k
逆向工程基礎
inndy
4
1.4k
Other Decks in Technology
See All in Technology
「スニダン」開発組織の構造に込めた意図 ~組織作りはパッションや政治ではない!~
rinchsan
3
550
よく聞くけど使ったことないソフトウェアNo.1 KafkaとSnowflake
foursue
4
350
Kernel MemoryでAzure OpenAI Serviceとお手軽データソース連携
mitsuzono
1
240
プロトタイピングによる不確実性の低減 / Reducing Uncertainty through Prototyping
ohbarye
5
380
コンテナセキュリティの基本と脅威への対策
kyohmizu
3
750
地理空間データ可視化・解析・活用ソリューション Pacific Spatial Solutions (PSS)
pacificspatialsolutions
0
140
ServiceNow Knowledge 24の歩き方 EYストラテジー・アンド・コンサルティング
manarobot
0
190
20240416_devopsdaystokyo
kzkmaeda
1
220
JSON攻略法.pdf
miyakemito
8
4.9k
Compose Compiler Metricsを使った実践的なコードレビュー
tomorrowkey
1
220
チームでロジカルシンキングに改めて向き合っている話 〜学習環境と実践⽅法〜
sansantech
PRO
2
2.1k
Next'24 事例セッションの紹介とクラウド資格を活用したキャリア形成について語りMuscle
yasumuusan
1
430
Featured
See All Featured
Build The Right Thing And Hit Your Dates
maggiecrowley
24
2k
Why You Should Never Use an ORM
jnunemaker
PRO
51
8.6k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
21
1.6k
Atom: Resistance is Futile
akmur
259
25k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
244
20k
Fontdeck: Realign not Redesign
paulrobertlloyd
76
4.9k
What's in a price? How to price your products and services
michaelherold
237
11k
It's Worth the Effort
3n
180
27k
WebSockets: Embracing the real-time Web
robhawkes
59
7k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
125
32k
VelocityConf: Rendering Performance Case Studies
addyosmani
320
23k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
659
120k
Transcript
)*5$0/;FSPEBZ 䧮䟝銴⤑㹆涸J1IPOF4&⛓飑暟"QQ䢔呪
)J 䧮僽*OOEZ BLB加啄
➛㣔䧮銴铞♧⦐ 飑暟"QQ剤㥪㢵䓳럊涸佦✲ @ sཀպ̼ @
䎃厥♧㣔 䧮罉꠸騈䧮铞 ؇̫٥
厥飑暟笪畀剤馄⤑㹆ꣳꆀ㉂ㅷ ⿶ⶍ㥪䧮䟝䳖䩛堥 s٥Ī٥A
None
搭䖕䧮⦛㽠䩧 #VSQ4VJUF㨥溏溏 ง๑•̀@•́ ง
䧮欽7VFKT㻨✫♧⦐溏匢 ⢵䮋鼇⤑㹆涸㉂ㅷ 齡儘⦬䊨⡲ⶍ㥪㖈欽7VFKT鄄OPEFKT䵆䖤㥪汥蕲 Aİs
٧(́◕◞౪◟◕
䱺衽涮植♴鎎㋲涸"1* 须俲剤⸈㺙 ಠ@ಠ
剤⦐䊨Ⱘ〭⨞KBEY 〳⟃管陼"OESPJE"QQ ҙŐ ұѨѠѽ♧
s̫A _ԍ
s̫A _ԍ
昸✫䵻⤑㹆涸J1IPOF4& ٧ ԫӟ ظ
㻨玑䒭䵻飑
穡卓剤"1*鸠䏞ꣳⵖ 鼩剤♧❉㼭稣眏尝岤䠑ⵌ İ
穡卓䧮♧⦐鿪尝䵻ⵌ இŐஇ
㔐곃♧♴ s٥Ī٥A
"&4$#$1,$4 s٥Ī٥A
1BEEJOH0SBDMF sİA
'JYFE,FZ*7 sİA
䧮ⶍⶍ僽♶僽铞䧮⦛欽 #SVQ4VJUF s٥Ī٥A
飑暟笪畀䥰鑪剤 44-5-4ゅ s٥Ī٥A
sİA
䖕⢵䟝䟝"QQ鿪㻨涸鸏 랃昈✫㥪⫹剤溏ⵌTRMJUF sŐA
@ sཀպ̼ @
卓搭剤42-*OKFDUJPO @ sཀպ̼ @
˙08"415PQ.PCJMF3JTLT'JOBM-JTU ˙.8FBL4FSWFS4JEF$POUSPMT ˙.*OTFDVSF%BUB4UPSBHF ˙.*OTVDJFOU5SBOTQPSU-BZFS1SPUFDUJPO ˙.6OJOUFOEFE%BUB-FBLBHF ˙.1PPS"VUIPSJ[BUJPOBOE"VUIFOUJDBUJPO ˙.#SPLFO$SZQUPHSBQIZ ˙.$MJFOU4JEF*OKFDUJPO ˙ 鸏䧮尝剤庠麕
魨⟨阮㶶贫㶸㖈1SFGFSFODF.BOBHFS酆
㥶卓䧮僽䟅䠑余乹罏 ̫
䎙㣔䖕䧮䪾须俲侮椚♧♴ ⚓♳)*5$0/;FSPEBZ
None
⼿⸔鹎遤醳庠
恠Ꟁ涸麕玑н sŐA й • 2016/11 送出 • ⽉月底廠商才有回應 • 修到⼀一半請我複測,接著交給其他廠商做檢測
• 拖了了半年年,2017/05 終於公開了了!⼼心好累
鸏⚆歲涸怪峯⿶㼱✫♧⦐ sӟA
昸➊랃剚剤鸏랃㢵怪峯 sŐ
醳醢顦♳䊨玑䌌 ಠ@ಠ
IUUQTMBVSFOUHJUIVCJPTPJOKFDUJPOT
䖰㷸绢㻨玑䒭涸儘⦬ 㽠ⴀ✫㉏겗 ⡹涸罉䌌铞♶㹁㽠僽怪峯⢵彂 䠮闒➮雊䧮⦛剤䊨⡲
䖎㢵剅硃䲿⣘涸眕⢿玑䒭 㽠剤㉏겗 ⡹剅㽷缺1)1涸剅♧㹁䪪涸ⵌ42-*OKFDUJPO
♧饱㔐㜡怪峯 鍑对剤㉏겗涸➃來肬➮⦛ ؇̫٥