Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
How to hack metacpan.org
Search
Sponsored
·
SiteGround - Reliable hosting with speed, security, and support you can count on.
→
mala
September 04, 2014
Programming
1.4k
7
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
How to hack metacpan.org
YAPC::Asia 2014 Reject con LT
2014-09-03
mala
September 04, 2014
More Decks by mala
See All by mala
The Evolution of Alert & Notification System / Becks Japan #1
mala
11
9k
TBD/Shibuya.XSS techtalk #8
mala
5
2.8k
実例に学ぶXSS脆弱性の発見と修正方法/line_dm 16 20160916 how to find and fix xss
mala
25
9.7k
超絶技巧CSRF / Shibuya.XSS techtalk #7
mala
41
15k
SECCON2013 slide
mala
14
3k
Other Decks in Programming
See All in Programming
PostgreSQL 18で考えるUUID主キー
kazuhiro1982
0
470
リアルな遅延を測る仕様
kota_yata
1
120
What's New in Android 2026
veronikapj
0
260
わからない話を追いかけたら、プログラミング言語を作る側にいた
ydah
3
520
Building a Meta Ray-Ban display app
akkeylab
0
160
数百円から始めるRuby電子工作
tarosay
0
160
【QA Test Talk Vol.8】AI-DLC による Whole Team Approach の加速
pkshadeck
PRO
0
200
Flow は今どうなっているか
mizdra
PRO
0
600
Detecting Compromised CI with eBPF and Cilium Tetragon
lizrice
0
210
Go 1.27 における memory allocation の高速化
andpad
0
230
Foundation Models frameworkで画像分析
ryodeveloper
1
620
「人を評価する AI」の設計と実装
ryoyanara
0
210
Featured
See All Featured
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
25
2k
The Anti-SEO Checklist Checklist. Pubcon Cyber Week
ryanjones
0
210
Automating Front-end Workflow
addyosmani
1369
210k
Done Done
chrislema
186
16k
Sam Torres - BigQuery for SEOs
techseoconnect
PRO
0
490
Have SEOs Ruined the Internet? - User Awareness of SEO in 2025
akashhashmi
0
420
Code Reviewing Like a Champion
maltzj
528
40k
Building the Perfect Custom Keyboard
takai
2
840
Intergalactic Javascript Robots from Outer Space
tanoku
273
27k
StorybookのUI Testing Handbookを読んだ
zakiyama
31
6.9k
What does AI have to do with Human Rights?
axbom
PRO
1
2.3k
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
techseoconnect
PRO
0
390
Transcript
)PXUPIBDL NFUBDQBOPSH NBMB
:"1$ߦͬͯͳ͍
͖ΐ͏ͷςʔϚ w )PXUPIBDLNFUBDQBOPSH ! w ѱ͍ҙຯͰ
NFUBDQBOPSHͰͷ SFNPUFDPEFFYFDVUJPO w िؒ΄ͲલʹใࠂpYFE w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF w NFUBDQBOPSH͔ͬͯΒৄࡉॻ͜͏ͱࢥͬͨΒ NJZBHBXB͞Μ͕ͰϦϦʔεͨ͠ͷͰ NFUBDQBOPSHθϩσΠެ։ঢ়ଶͩͬͨ
͝ଘͰ͔͢ʁ 4UPSBCMFͰ ҙίʔυ࣮ߦ
ΦϒδΣΫτσγϦΞϥΠβ Λ௨ͨ͡ίʔυ࣮ߦ w ෳͷݴޠͰಉ༷ͷ͕ใࠂ͞Ε͍ͯΔ w ҙͷΫϥεͷΦϒδΣΫτΛ෮ݩͰ͖Δͷ w 3VCZ :".- .BSTIBM
w 1FSM 4UPSBCMF :".- 9.-
$PPLJFܦ༝Ͱͷ 4UPSBCMFΦϒδΣΫτ w σγϦΞϥΠζͷλΠϛϯάͰίʔυ࣮ߦग़དྷΔ w $PPLJFʹ4UPSBCMFͰσʔλอଘ͢Δηογϣϯ Ϛωʔδϟ͕͋Δ w )."$ॺ໊ʹΑΔվ᜵ࢭ͕ͳ͍PS伴͕ऑ͍ PS伴͕࿙ΕΔέʔεͰDPPLJF͕վ᜵Ͱ͖Δ
w ࡉͨ͠$PPLJFΛͬͨҙίʔυ࣮ߦग़དྷΔ
͍͔ͭ͘ใࠂ͞Ε͍ͯΔ w SFQPSUFECZNBMB ͍͖͞Μ w )5514FTTJPO "NPO w 1MBDL.JEEMFXBSF4FTTJPO$PPLJF
w w 4UPSBCMFUIBXDBMMFEPODPPLJFEBUBJONVMUJQMF $1"/NPEVMFT w IUUQTFDMJTUTPSHPTTTFDR
Өڹൣғ w ΦϒδΣΫτ͕෮ݩ͞ΕΔͱ͍͏͜ͱ w ԿΒ͔ͷॳظԽॲཧ͕࣮ߦ͞ΕͨΓ w ഁغ͞ΕΔλΠϛϯάͰσετϥΫλ͕࣮ߦ͞ΕͨΓ w ܕมͷλΠϛϯάͰԿ͔͕͓͖ͨΓ ʢίʔυຒΊࠐΊΔςϯϓϨʔτΤϯδϯͱ͔ʣ
w ͦͷଞΖΖͷ༧ظ͠ͳ͍
ΦϒδΣΫτσγϦΞϥΠβ ةݥ w ϓϨʔϯͳϋογϡΑΓ༧ظ͠ͳ͍͜ͱ͕ى ͖Δ w CMFTTFEIBTIඞཁͳ͚Ε 4UPSBCMFΛΘͳ͍΄͏͕͍͍
+40/ʹ͢Ε҆શʁ w ͓͓ΉͶͦ͏ w σγϦΞϥΠζͷΈͰى͖ͳ͍ w +40/ 42-JOKFDUJPO w จࣈྻ͕དྷΔͱࢥͬͯΔՕॴʹϋογϡྻ
͕ೖΔ͜ͱͰ༧ظ͠ͳ͍ಈ࡞͕ى͜ΔՄೳੑ
4UPSBCMFͷಛච͖͢ w ҙͷϞδϡʔϧͷϩʔυ͕Մೳ w PWFSMPBE͕ΘΕ͍ͯΔΦϒδΣΫτΛGSFF[F͢Δͱɺ PWFSMPBEϑϥά͖Ͱอଘ͞ΕΔ w PWFSMPBEϑϥά͕͍͍ͯΔ4UPSBCMFEPDVNFOUΛ ϩʔυ͢ΔࡍʹɺಁաతʹϞδϡʔϧΛϩʔυ͢Δ w
ຊདྷͳΒPWFSMPBE͕ΘΕ͍ͯͳ͍ϞδϡʔϧͰɺ͜ ͷϑϥάΛઃఆ͢Δ͜ͱͰɺҙͷϞδϡʔϧΛϩʔυ Մೳ
͜ΕطͷͰ͋Δ w NBTUFSJOHQFSMPSHUIFTUPSBCMF TFDVSJUZQSPCMFN w ۙʹͳͬͯEPDVNFOUʹॻ͔Εͨ w IUUQQFSMHJUQFSMPSHQFSMHJUDPNNJU GBDCCECGFEEB DFF
σετϥΫλ࣮ߦ 㲈ҙίʔυ࣮ߦ w σετϥΫλ࣮ߦͰग़དྷΔ͜ͱ͕ݶΒΕΔ w యܕతͳͷҰ࣌ϑΝΠϧআ ˠҙϑΝΠϧআ w ͤΊͯϑΝΠϧॻ͖ࠐΈ͕ग़དྷΕɾɾɾ w
ѱ༻Ͱ͖ͦ͏ͳ$1"/ϞδϡʔϧΛ୳͢
ݬͷҙίʔυ࣮ߦՄೳϞδϡʔϧΛ୳ͯ͠ w σετϥΫλͰίʔυ࣮ߦͰ͖ͦ͏ͳͷΛ୳ ͢ w FWBMTFMG\DPEF^ w PQFO ') TFMG\pMFOBNF^
w TZTUFN FYFD EP HMPC FUD w ͦ͏ͦ͏ͳ͍Α
ϑΝΠϧͷॻ͖ࠐΈ w ϑΝΠϧͷॻ͖ࠐΈ͕ग़དྷΕɺQNϑΝΠϧ Λੜͯ͠ϩʔυͯ͠Εҙίʔυ࣮ߦग़ དྷΔͷͰͳ͍͔ʁ w ࣮ࡍͷΞϓϦέʔγϣϯVTFMJCͯ͠Δ͜ͱ͕ ଟ͍ MJCMPDBM
w ΧϨϯτσΟϨΫτϦҎԼͷϑΝΠϧʹ͋Δఔ ࣗ༝ͳϑΥʔϚοτͰॻ͖ࠐΈ͕ग़དྷΕɻɻ
σετϥΫλͰϑΝΠϧʹॻ͖ࠐΉ $1"/Ϟδϡʔϧ w ࣮ࡏͨ͠ w HSFQ͠·ͬͯ͘ൃݟ w ࣗಈηʔϒϩάϑΝΠϧͷqVTIܥͷػೳ w QNϑΝΠϧΛੜͯ͠ϩʔυ·ͰՄೳ
w ςϯϓϨʔτվ᜵͔Βҙίʔυ࣮ߦ͕Մೳ
4UPSBCMFͰͷίʔυ࣮ߦ w ਂࠁ্͕͕ͬͨͱߟ͑ͯྑ͍ જࡏతҙίʔυ࣮ߦˠ࣮֬ͳҙίʔυ࣮ߦ w ਖ਼֬ʹʮΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ࣍ୈͰ ҙίʔυ࣮ߦ͕Մೳʯ w ͔ͳΓଟ͘ͷڥͰΠϯετʔϧ͞Ε͍ͯΔϞδϡʔϧ
ͰՄೳͩͬͨ w QFSMTFDVSJUZʹใࠂ FYQMPJUެ։͕ద͔Ͳ͏͔૬ஊ த
·ͱΊ w 4UPSBCMF ͱ͍͏͔CMFTTFEIBTIΛ෮ݩͰ͖Δ γϦΞϥΠβҙίʔυ࣮ߦʹܨ͕Δةݥ͕ ͋Δ w "NPOͱ1MBDL.JEEMFXBSF4FTTJPOΛ֘͢ Δ͍ํͯ͠ΔਓΞφϯεಡΜͰରԠͯ͠Ͷɻ w
)BQQZ)BDLJOH