「第22回 ゼロから始めるセキュリティ入門 勉強会」で使った LT 資料です。 フルバージョンはこちら: https://diary.shift-js.info/browsing-history-sniffing/
ୈճθϩ͔Β࢝ΊΔηΩϡϦςΟೖษڧձPO:PVS#SPXTJOH)JTUPSZ͋ͳͨͷཤྺΛૂ͏߈ܸͨͪ!MNU@TXBMMPXBLB!ZOVDIZIUUQTTIJGUKTJOGP
View Slide
© 2018 shift-js.info All Rights Reserved.‣ BLB!ZOVDIZ‣ 6OEFSHSBEVBUFBU6OJWPG5PLZP‣ ὑ8FC4FDVSJUZBOE)PLLBJEP‣ 4UB⒎BU4&$$0/#FHJOOFST‣ 4UB⒎BU4FDVSJUZ$BNQ‣ 4FFIUUQTTIJGUKTJOGP!MNU@TXBMMPX
© 2018 shift-js.info All Rights Reserved./05& ҙ‣ ࠓճ ຊެ։ͨ࣍͠ͷϒϩάهࣄͷ༰ͷհͰ͢‣ #SPXTJOH)JTUPSZ4OJ⒏OH࠷લઢ͋ͳͨͷϒϥβཤྺΛૂ͏߈ܸͨͪ IUUQTEJBSZTIJGUKTJOGPCSPXTJOHIJTUPSZTOJ⒏OH‣ ࠓճͷωλͷഎܠ‣ 64&/*9ͷ4NJUIFUBM ݱͷ8FCϒϥβ๊͕͑ΔΛݟͭΊ͖͔͚ͬ͢ͱͯ͠ ͱͯΞπ͍‣ ΦϑϨίΦϑϨί
ϒϥβཤྺͱ ϢʔβʔɾϓϥΠόγʔ
© 2018 shift-js.info All Rights Reserved.#SPXTJOH)JTUPSZ ϒϥβཤྺͷॏཁੑ‣ ϒϥβཤྺ #SPXTJOH)JTUPSZ͋ΔݸਓΛΑ͘ද͢‣ ࣍ͷจ#SPXTJOH)JTUPSZͷߴ͍VOJRVFOFTT͓ΑͼpOHFSQSJOUJOHͷ༗ޮੑΛओு͍ͯ͠Δ‣ -0MFKOJL $$BTUFMMVDDJB BOE"+BOD l8IZKPIOOZDBO`UCSPXTFJOQFBDF0OUIFVOJRVFOFTTPGXFCCSPXTJOHIJTUPSZQBUUFSOT zJOUI8PSLTIPQPO)PU5PQJDTJO1SJWBDZ&OIBODJOH5FDIOPMPHJFT )PU1&5T ‣ ϒϥβཤྺ #SPXTJOH)JTUPSZݸਓͷଞͱͷؔੑද͢‣ FH4/4Ͱͷ͋ΔਓͷϓϩϑΟʔϧͷӾཡཤྺ
© 2018 shift-js.info All Rights Reserved.5XP$MBTTJDBM"UUBDLT 7JTJUFEMJOL"UUBDLͱ$BDIFCBTFE"UUBDL‣ ݱͷ)JTUPSZ4OJ⒏OHͷख๏ ֓Ͷ࣍ͷͭͷΧςΰϦʹྨ͢Δ͜ͱ͕Ͱ͖Δ‣ 7JTJUFEMJOL"UUBDL‣ WJTJUFEηϨΫλʹΑΔελΠϧͷมԽΛ తcؒతʹ؍ଌ͢ΔλΠϓͷ)JTUPSZ4OJ⒏OH‣ $BDIFCBTFE"UUBDL‣ ϒϥβͷ࠷దԽ 0QUJNJ[BUJPOػߏ ͱΓΘ͚ΩϟογϡػߏͷڍಈΛ؍ଌ͢ΔλΠϓͷ)JTUPSZ4OJ⒏OH
© 2018 shift-js.info All Rights Reserved.WJTJUFE JO$44 WJTJUFEηϨΫλ‣ $44ʹ๚Εͨ͜ͱʹ͋Δ ϒϥβཤྺதʹ͋ΔϦϯΫʹରͯ͠ͷΈ WJTJUFEͱݺΕΔٖࣅΫϥε QTFVEPDMBTTΛ༻͍ͯ ಛผͳελΠϧΛࢦఆ͢Δ͜ͱ͕Ͱ͖Δ‣ ্๚Εͨ͜ͱͷ͋ΔϦϯΫΛ৭Ͱදࣔ͢Δ߹ͷྫa:visited {color: green;}
© 2018 shift-js.info All Rights Reserved.%JSFDU"CVTFPGWJTJUFE ѱ༻͢Δ͜ͱͰ͖Δ͔‣ ݱࡏ ࣗ໌ͳѱ༻ํ๏͕Ε͍ͯΔ‣ ੲXJOEPXHFU$PNQVUFE4UZMFͦͷସͨΓ͑ΔͷʹΑΓ WJTJUFEঢ়ଶͰ͋Δ͜ͱΛײͰ͖͕ͨ ࠓμϝ‣ ͦͦࠓWJTJUFEͷதͰࢦఆͰ͖ΔελΠϧ੍͕ݶ͞Ε͍ͯΔ‣ FHCBDLHSPVOEJNHVSM Ͱ͖ͳ͍‣ ΑΓৄ͘͠ҎԼΛҰಡͷ͜ͱ‣ 1SJWBDZBOEUIFWJTJUFETFMFDUPS IUUQTEFWFMPQFSNP[JMMBPSHFO64EPDT8FC$441SJWBDZ@BOE@UIF@WJTJUFE@TFMFDUPS
© 2018 shift-js.info All Rights Reserved.5IF&SBPG*OEJSFDU"CVTFؒతͳ߈ܸख๏‣ ͦ͜Ͱؒతͳѱ༻ํ๏͕ࡧ͞ΕΔΑ͏ʹͳ͖ͬͯͨ‣ WJTJUFEηϨΫλΛར༻͢Δख๏‣ WJTJUFEʹΑΓى͜ΔมԽ͕ٴ΅͢෭࡞༻Λ؍ଌ͢Δ‣ αΠυνϟωϧ߈ܸతͳख๏Ͱ͋Δ‣ WJTJUFEηϨΫλΛར༻͠ͳ͍ख๏‣ ϒϥβͷΩϟογϡػߏͷڍಈΛར༻ͨ͠ͷ‣ )454Λར༻ͨ͠ͷ‣ FH4OJ⒐ZIUUQEJSBDEFMUBTHJUIVCJPTOJ⒐Z‣ ৄ͘͠ϒϩά IUUQTEJBSZTIJGUKTJOGPCSPXTJOHIJTUPSZTOJ⒏OH
ࠓޙ *OUIF'VUVSF
© 2018 shift-js.info All Rights Reserved.ෳࡶԽ͢Δ8FC 5BOHMFE8PSMEPG8FC5FDIOPMPHZ‣ 8FCٕज़ͷ$PNQMFYJUZʑ૿͍ͯ͠Δ‣ ͦΕͧΕ͕ࣗ༝ͳਐԽΛ͛ ෳࡶʹབྷΈ߹͍ͬͯΔ‣ ηΩϡϦςΟҙࣝͷͳ͍Ұ෦ͷ༷࣮͕ શମͷ҆શʹ΄͜ΖͼΛ࡞͍ͬͯΔͱ͍͏έʔε͕ ͜ͷෳࡶ͞ͷதʹӅΕ͍ͯΔ‣ ͜ͷ$PNQMFYJUZͱͷ͏·͍͖߹͍ํΛಘ͍ͯ͘ඞཁ͕͋Δ‣ /05&ҎԼͷΑ͏ͳൃදͨ͠ͷͰڵຯ͕͋Εੋඇ‣ 5BOHMFE8PSMEPG8FC5FDIOPMPHZ IUUQTTQFBLFSEFDLDPNMNU@TXBMMPXUBOHMFEXPSMEPGXFCUFDIOPMPHZBSFXFTBGF
"OZ2VFTUJPOT 5BLBTIJ:POFVDIJKB!MNU@TXBMMPX FO!ZOVDIZIUUQTTIJGUKTJOGP