Tweet
Tweet

Slide 1

Slide 1 text

8BMUJJPΛ࢖ͬͯ ̋̋ͷηΩϡϦςΟ਍அ ΍ͬͨͬͨʔʂ ηΩϡϦςΟͷ༦΂ גࣜձࣾ΢ΥϧςΟ ౻࡚ਖ਼ൣ גࣜձࣾϋʔτϏʔπ ೔ຊ.41ڠձ

Slide 2

Slide 2 text

2016/11/24 © Walti, Inc. ࣗݾ঺հ • ౻࡚ ਖ਼ൣ 'VKJTBLJ.BTBOPSJ גࣜձࣾϋʔτϏʔπ ୅දऔక໾ גࣜձࣾ΢ΥϧςΟ ୅දऔక໾ ೔ຊ.41ڠձ ཧࣄ • ೥ʹגࣜձࣾϋʔτϏʔπΛઃཱ • ೥݄ʹגࣜձࣾ΢ΥϧςΟΛઃཱ • ೥݄ʹ೔ຊ.41ڠձͷઃཱʹࢀը ΠϯϑϥΤϯδχΞͱͯ͠׆ಈ͢Δ๣Βɺ೔ຊͷ αʔόʔͷηΩϡϦςΟਫ४Λ্͍͛ͯ͜͏ͱ ʮαʔόʔαΠυͷηΩϡϦςΟεΩϟϯΛ਎ۙʹ ͢Δ׆ಈʯΛ΢ΥϧςΟͰ࣮ࢪதɻۀքஂମͰ͸ .41ͷೝ஌౓޲্ʹ౒ΊΔɻ

Slide 3

Slide 3 text

2016/11/24 © Walti, Inc. ͯ͞

Slide 4

Slide 4 text

2016/11/24 © Walti, Inc. ͍͖ͳΓͰ͕͢ ΫΠζͰ͢ɻ

Slide 5

Slide 5 text

2016/11/24 © Walti, Inc. ࠓճεΩϟϯͨ͠ͷ͸ ͲΕͰ͠ΐ͏ʁ

Slide 6

Slide 6 text

2016/11/24 © Walti, Inc. ࠓճεΩϟϯͨ͠ͷ͸ ͲΕͰ͠ΐ͏ʁ ͘͞Βͷ౦ژΦϑΟε

Slide 7

Slide 7 text

2016/11/24 © Walti, Inc. ࠓճεΩϟϯͨ͠ͷ͸ ͲΕͰ͠ΐ͏ʁ ͘͞Βͷ౦ژΦϑΟε ͘͞ΒͷφϨοδ

Slide 8

Slide 8 text

2016/11/24 © Walti, Inc. ࠓճεΩϟϯͨ͠ͷ͸ ͲΕͰ͠ΐ͏ʁ ͘͞Βͷ౦ژΦϑΟε ͘͞ΒͷφϨοδ ాத͞Μͷݸਓαʔό

Slide 9

Slide 9 text

2016/11/24 © Walti, Inc. ࠓճεΩϟϯͨ͠ͷ͸ ͲΕͰ͠ΐ͏ʁ ͘͞Βͷ౦ژΦϑΟε ͘͞ΒͷφϨοδ ాத͞Μͷݸਓαʔό ਖ਼ղ˒

Slide 10

Slide 10 text

ηΩϡϦςΟͷ༦΂ גࣜձࣾ΢ΥϧςΟ ౻࡚ਖ਼ൣ גࣜձࣾϋʔτϏʔπ ೔ຊ.41ڠձ 8BMUJJPΛ࢖ͬͯ ͘͞ΒͷφϨοδͷ ηΩϡϦςΟ਍அ ΍ͬͨͬͨʔʂ

Slide 11

Slide 11 text

2016/11/24 © Walti, Inc. ͸͡Ίʹ

Slide 12

Slide 12 text

͸͡Ίʹ ηΩϡϦςΟରࡦɺόονϦ͍ͯ͠·͔͢ʁ 2016/11/24 © Walti, Inc.

Slide 13

Slide 13 text

͸͡Ίʹ ηΩϡϦςΟରࡦɺόονϦ͍ͯ͠·͔͢ʁ ➜ όονϦ͍ͯ͠·͢ Ұ෦͍ͯ͠·͢ ͍ͯ͠·ͤΜ 2016/11/24 © Walti, Inc.

Slide 14

Slide 14 text

͸͡Ίʹ ηΩϡϦςΟରࡦɺόονϦ͍ͯ͠·͔͢ʁ ➜ όονϦ͍ͯ͠·͢ Ұ෦͍ͯ͠·͢ ͍ͯ͠·ͤΜ 2016/11/24 © Walti, Inc. ࣗ৴Λ΋ͬͯճ౴͢Δʹ͸ ঢ়گΛ೺Ѳ͍ͯ͠Δ͜ͱ͕େ੾

Slide 15

Slide 15 text

͸͡Ίʹ ηΩϡϦςΟରࡦɺόονϦ͍ͯ͠·͔͢ʁ ➜ όονϦ͍ͯ͠·͢ Ұ෦͍ͯ͠·͢ ͍ͯ͠·ͤΜ 2016/11/24 © Walti, Inc. ࣗ৴Λ΋ͬͯճ౴͢Δʹ͸ ঢ়گΛ೺Ѳ͍ͯ͠Δ͜ͱ͕େ੾ ʢͰ΋༧ࢉͳ͍͜ͱଟ͍…ʣ

Slide 16

Slide 16 text

ଛ֐ഛঈͷ൑ྫ΋ʜ 42-ΠϯδΣΫγϣϯରࡦ͍ͯ͠ͳ͍ͱɺଛ֐ഛঈʹͭͳ͕Δ͜ͱ΋ɻ 2016/11/24 © Walti, Inc. ग़య 40'5*$൑ྫθϛ ଛ֐ഛঈ੥ٻࣄ݅ ౦ژ஍ํࡋ൑ॴ൑ܾฏ੒೥ ϫ ୈ߸ IUUQXXXTPGUJDPSKQTFNJ@PQQEG ¥22,523,697ʂ ߹ܭड஫ֹ(¥9,788,100)ͷ 2ഒҎ্…

Slide 17

Slide 17 text

ଛ֐ഛঈͷ൑ྫ΋ʜ 42-ΠϯδΣΫγϣϯରࡦ͍ͯ͠ͳ͍ͱɺଛ֐ഛঈʹͭͳ͕Δ͜ͱ΋ɻ 2016/11/24 © Walti, Inc. ग़య 40'5*$൑ྫθϛ ଛ֐ഛঈ੥ٻࣄ݅ ౦ژ஍ํࡋ൑ॴ൑ܾฏ੒೥ ϫ ୈ߸ IUUQXXXTPGUJDPSKQTFNJ@PQQEG ¥109,135,528ʂ ߹ܭड஫ֹ(¥9,788,100)ͷ 10ഒҎ্…

Slide 18

Slide 18 text

ʮ৘ใηΩϡϦςΟେڴҖ ʯ 2016/11/24 © Walti, Inc. ग़య ৘ใॲཧਪਐػߏ ৘ใηΩϡϦςΟେڴҖ IUUQTXXXJQBHPKQTFDVSJUZWVMOUISFBUTIUNM ࣄۀΛܧଓʹ͸ αʔόʔॏཁɻ

Slide 19

Slide 19 text

2016/11/24 © Walti, Inc. ͯ͞ ࠓճͷຊ୊Ͱ͢

Slide 20

Slide 20 text

2016/11/24 © Walti, Inc. ΈΜͳେ޷͖ ͘͞ΒͷφϨοδʂ

Slide 21

Slide 21 text

͝ڠྗ͋Γ͕ͱ͏͍͟͝·͢ʂ 2016/11/24 © Walti, Inc. ͘͞ΒΠϯλʔωοτ ܵҪ͞· ͘͞ΒͷφϨοδͷ؅ཧਓ http://knowledge.sakura.ad.jp/ unimal Ӭా͞· ͘͞ΒͷφϨοδͷγεςϜαϙʔτ Web੍࡞νʔϜͷͨΊͷ ΫϦΤΠςΟϒɾϓϥοτϑΥʔϜ ʮuniversionsʢϢχόʔδϣϯζʣʯ http://universions.com

Slide 22

Slide 22 text

؆୯ͳߏ੒ 2016/11/24 © Walti, Inc. *OUFSOFU ͘͞ΒͷϚωʔδυαʔό

Slide 23

Slide 23 text

͘͞ΒͷϚωʔδυαʔό 2016/11/24 © Walti, Inc. ग़లIUUQXXXTBLVSBOFKQNBOBHFETFSWFS

Slide 24

Slide 24 text

͘͞ΒͷϚωʔδυαʔό 2016/11/24 © Walti, Inc. ग़లIUUQXXXTBLVSBOFKQNBOBHFETFSWFS

Slide 25

Slide 25 text

͘͞ΒͷϚωʔδυαʔό 2016/11/24 © Walti, Inc. ग़లIUUQXXXTBLVSBOFKQNBOBHFETFSWFS ͘͞ΒΠϯλʔωοτ͞Μ͕ Ϛωʔδυͯ͘͠ΕΔαʔϏεɻ • *QUBCMFTQSPDFTT؅ཧ͸͘͞Β͞ ΜͷαʔϏεϙϦγʔͰܾ·Δ • $.4౳ͷηΩϡϦςΟ؅ཧ͸ ϢʔβʔͰରԠ

Slide 26

Slide 26 text

͘͞ΒͷϚωʔδυαʔό 2016/11/24 © Walti, Inc. ग़లIUUQXXXTBLVSBOFKQNBOBHFETFSWFS ͘͞ΒΠϯλʔωοτ͞Μ͕ Ϛωʔδυͯ͘͠ΕΔαʔϏεɻ • *QUBCMFTQSPDFTT؅ཧ͸͘͞Β͞ ΜͷαʔϏεϙϦγʔͰܾ·Δ • $.4౳ͷηΩϡϦςΟ؅ཧ͸ ϢʔβʔͰରԠ ͪ͜Β͸ ͘͞Β͞Μʹ ͓·͔ͤ

Slide 27

Slide 27 text

͘͞ΒͷϚωʔδυαʔό 2016/11/24 © Walti, Inc. ग़లIUUQXXXTBLVSBOFKQNBOBHFETFSWFS ͘͞ΒΠϯλʔωοτ͞Μ͕ Ϛωʔδυͯ͘͠ΕΔαʔϏεɻ • *QUBCMFTQSPDFTT؅ཧ͸͘͞Β͞ ΜͷαʔϏεϙϦγʔͰܾ·Δ • $.4౳ͷηΩϡϦςΟ؅ཧ͸ ϢʔβʔͰରԠ ͜͜ΛؤுΔʂ

Slide 28

Slide 28 text

2016/11/24 © Walti, Inc. 8BMUJJPͰ Ͱ͖Δ͜ͱ

Slide 29

Slide 29 text

ϑΝΠΞ΢Υʔϧ wwONBQ IUUQTONBQPSH 8FCαʔόઃఆ wwOJLUP https://cirt.net/Nikto2 44-ূ໌ॻ wwTTMZ[F https://github.com/iSECPartners/sslyze 8FCΞϓϦέʔγϣϯ wwTLJQGJTI https://code.google.com/p/skipfish/ ➡ ࠓޙ΋ରԠ044εΩϟφΛ௥Ճ༧ఆͰ͢ɻ 2016/11/24 © Walti, Inc. 10ԁ/ճ 10ԁ/ճ 5ԁ/ճ 100ԁ/ճ 8BMUJJPͰͰ͖Δ͜ͱ 8BMUJJPͷ8FCαΠτ͔ΒϢʔβʔొ࿥ͯ͠ར༻͢ΔϓϥϯͰ͢ɻεΩϟϯΛ͢Δ ͨΊʹ͸ొ࿥ͨ͠8FCαΠτΛΞΫςΟϕʔτ͢Δඞཁ͕͋Γ·͢ɻ ҎԼͷ֤εΩϟϯର৅ʹରԠ͍ͯ͠Δ044εΩϟϯπʔϧΛ̍ճຖͷྉۚͰ࢖͑ ·͢ɻ

Slide 30

Slide 30 text

ϑΝΠΞ΢Υʔϧ wwONBQ IUUQTONBQPSH 8FCαʔόઃఆ wwOJLUP https://cirt.net/Nikto2 44-ূ໌ॻ wwTTMZ[F https://github.com/iSECPartners/sslyze 8FCΞϓϦέʔγϣϯ wwTLJQGJTI https://code.google.com/p/skipfish/ ➡ ࠓޙ΋ରԠ044εΩϟφΛ௥Ճ༧ఆͰ͢ɻ 2016/11/24 © Walti, Inc. 10ԁ/ճ 10ԁ/ճ 5ԁ/ճ 100ԁ/ճ 8BMUJJPͰͰ͖Δ͜ͱ 8BMUJJPͷ8FCαΠτ͔ΒϢʔβʔొ࿥ͯ͠ར༻͢ΔϓϥϯͰ͢ɻεΩϟϯΛ͢Δ ͨΊʹ͸ొ࿥ͨ͠8FCαΠτΛΞΫςΟϕʔτ͢Δඞཁ͕͋Γ·͢ɻ ҎԼͷ֤εΩϟϯର৅ʹରԠ͍ͯ͠Δ044εΩϟϯπʔϧΛ̍ճຖͷྉۚͰ࢖͑ ·͢ɻ 8PSE1SFTT ɾɾXQTDBO IUUQTXQTDBOPSH ແྉʂ ϦϦʔε

Slide 31

Slide 31 text

2016/11/24 © Walti, Inc. ·ͣ͸ εΩϟϯ͠·͢

Slide 32

Slide 32 text

IUUQTXBMUJJP΁ΞΫηε 2016/11/24 © Walti, Inc. ͔͜͜Β ΞΧ΢ϯτ࡞੒

Slide 33

Slide 33 text

ΞΧ΢ϯτొ࿥ 2016/11/24 © Walti, Inc. 'BDFCPPL(JU)VCָ͕

Slide 34

Slide 34 text

૊৫Λͭͬͯ͘ 2016/11/24 © Walti, Inc.

Slide 35

Slide 35 text

ؔ܎ऀΛొ࿥͠·͢ɻ 2016/11/24 © Walti, Inc.

Slide 36

Slide 36 text

ؔ܎ऀΛొ࿥͠·͢ɻ 2016/11/24 © Walti, Inc. ΈΜͳͰঢ়گ೺Ѳ͢Δ͜ͱ͕ ରԠͷ༏ઌ౓ΛܾΊΔ্Ͱେ੾

Slide 37

Slide 37 text

࣍ʹ8BMUJJPʹλʔήοτొ࿥͠·͢ɻ 2016/11/24 © Walti, Inc.

Slide 38

Slide 38 text

8BMUJJPʹλʔήοτొ࿥͠·͢ɻ 2016/11/24 © Walti, Inc. LOPXMFEHFTBLVSBBEKQ Λొ࿥

Slide 39

Slide 39 text

λʔήοτͷॴ༗ऀ֬ೝΛߦ͍·͢ɻ 2016/11/24 © Walti, Inc.

Slide 40

Slide 40 text

ॴ༗ऀ֬ೝ׬ྃ͠·ͨ͠ɻ 2016/11/24 © Walti, Inc.

Slide 41

Slide 41 text

ॴ༗ऀ֬ೝ׬ྃ͠·ͨ͠ɻ 2016/11/24 © Walti, Inc. ॳճ͸'SFFεΩϟϯ ׬શແྉͰ͢ʂ

Slide 42

Slide 42 text

2016/11/24 © Walti, Inc. εΩϟϯத…

Slide 43

Slide 43 text

εΩϟϯͨ݁͠Ռ 2016/11/24 © Walti, Inc.

Slide 44

Slide 44 text

εΩϟϯͨ݁͠Ռ 2016/11/24 © Walti, Inc. ͍ͬͺ͍ग़ͯΔΑ͏ʹݟ͑Δ ͚Ͳɺޡݕ஌ɾରԠෆཁ΋ ͋ΔͷͰ൵؍͸ෆཁ

Slide 45

Slide 45 text

ରԠ͠ͳ͚Ε͹ͳΒͳ͍΋ͷ 2016/11/24 © Walti, Inc. छผ ߲໨ ରԠཁ൱ ରԠྫ nikto YQPXFSFECZϔομʹ 1)1όʔδϣϯ͕هࡌ͞Ε ͍ͯΔ ਪ঑ QIQJOJͰ FYQPTF@QIQΛ0GGʹ ͢Δ nikto ΫϦοΫδϟοΩϯά๷ࢭ ͷͨΊͷYGSBNFPQUJPOT ϔομΛฦ͍ͯ͠ͳ͍ ਪ঑ 8PSE1SFTTଆͰग़ ྗ͢ΔΑ͏ʹ͢Δ ͔ɺIUBDDFTTͰ ϔομΛηοτ͢Δ

Slide 46

Slide 46 text

ରԠ͠ͳ͚Ε͹ͳΒͳ͍΋ͷ 2016/11/24 © Walti, Inc. छผ ߲໨ ରԠཁ൱ ରԠྫ wpscan XQDPOUFOUVQMPBEσΟ ϨΫτϦͷϑΝΠϧҰཡ ͕ެ։͞Ε͍ͯΔ ਪ঑ ϑΝΠϧҰཡΛදࣔ ͠ͳ͍Α͏ʹXFC αʔόͷઃఆΛมߋ ͢Δ wpscan XQJODVEFTσΟϨΫτϦ ͷϑΝΠϧҰཡ͕ެ։͞ Ε͍ͯΔ ਪ঑ ϑΝΠϧҰཡΛදࣔ ͠ͳ͍Α͏ʹXFC αʔόͷઃఆΛมߋ ͢Δ wpscan 8PSE1SFTTͷόʔδϣϯ ͕هࡌ͞ΕͨSFBENFϑΝ Πϧ͕αʔόʹଘࡏ͢Δ ਪ঑ SFBENFϑΝΠϧΛ ࡟আ͢Δ wpscan ੬ऑੑͷ͋Δ 8PSE1SFTT Λ࢖༻ ͍ͯ͠Δ ඞਢ ੬ऑੑ͕मਖ਼͞Εͨ όʔδϣϯʹΞοϓ σʔτ

Slide 47

Slide 47 text

2016/11/24 © Walti, Inc. ରԠத… by

Slide 48

Slide 48 text

2016/11/24 © Walti, Inc. ͪʔΜ (ϨϯδԻత)

Slide 49

Slide 49 text

2016/11/24 © Walti, Inc. ରԠ಺༰

Slide 50

Slide 50 text

2016/11/24 © Walti, Inc. ରԠ಺༰

Slide 51

Slide 51 text

2016/11/24 © Walti, Inc. ࠶εΩϟϯத…

Slide 52

Slide 52 text

࠶εΩϟϯͨ݁͠Ռ 2016/11/24 © Walti, Inc. 8BMUJJPͷதͷਓ

Slide 53

Slide 53 text

ରԠ࣌ؒ 2016/11/24 © Walti, Inc.

Slide 54

Slide 54 text

ରԠ࣌ؒ 2016/11/24 © Walti, Inc. ੬ऑੑରԠͷௐࠪɿ I ରԠͷ࡞ۀɿ I ରԠͷಈ࡞νΣοΫ I ࡞ۀલόοΫΞοϓɺ εςʔδϯά؀ڥ࡞ۀͳͲ΋ ͍ΕΔͱ͢΂ͯͰEBZ I

Slide 55

Slide 55 text

ରԠޙͷײ૝ͳͲ 2016/11/24 © Walti, Inc.

Slide 56

Slide 56 text

ରԠޙͷײ૝ͳͲ 2016/11/24 © Walti, Inc. • ੬ऑੑͷରԠ౳͸άάΕ͹͙͢ • ൃݟɺಛఆͱ͍͏ͷ͕ ීஈ͔ΒΊΜͲ͍͘͞࡞ۀ • ߲໨͑͞ग़ͯ͘Ε͹ ΄΅࣌ؒ͸͔͔Βͳ͍ • ࣗ෼ͷ؀ڥͩͬͨΒ ෼΋͔͔Βͳ͍ʂ

Slide 57

Slide 57 text

ରԠޙͷײ૝ͳͲ 2016/11/24 © Walti, Inc. • ੬ऑੑͷݕࠪɾಛఆ͸8BMUJJPͰɺ ରࡦ͸αΫοͱάάͬͯ΍ͬͯ͠·͏ • εςʔδϯά؀ڥΛৗʹ4ZOD͓ͯ͠ ͍ͯɺରԠޙεϜʔζʹϦϦʔεͰ͖ Δ͜ͱ͕͜Ε͔Βͷ՝୊

Slide 58

Slide 58 text

͞Βʹ 2016/11/24 © Walti, Inc.

Slide 59

Slide 59 text

8PSE1SFTTͷόʔδϣϯΞοϓ࡞ۀͳͲʹ 2016/11/24 © Walti, Inc. IUUQTTOBQVQKQ

Slide 60

Slide 60 text

2016/11/24 © Walti, Inc. কདྷʹ޲͚ͨ४උ

Slide 61

Slide 61 text

εΩϟϯͷఆظ࣮ߦΛઃఆ͠Α͏ʂ 2016/11/24 © Walti, Inc.

Slide 62

Slide 62 text

εΩϟϯͷఆظ࣮ߦΛઃఆ͠Α͏ʂ 2016/11/24 © Walti, Inc. 8PSE1SFTT͸ແྉͳͷͰɺ ि̍ͷνΣοΫΛొ࿥ͯ͠΋ ແྉʂ

Slide 63

Slide 63 text

2016/11/24 © Walti, Inc. 8BMUJJP͘͞ΒΫʔϙϯ ຖ݄ԁ෼ΛແྉͰ ͘͞Β͞ΜͷҰ෦ͷ αʔϏεʹεΩϟϯΛ ͔͚Δ͜ͱ͕Ͱ͖·͢ɻ

Slide 64

Slide 64 text

·ͱΊ ɾIUUQTXBMUJJP Λ׆༻ͯ͠੬ऑੑΛ೺Ѳ͠ରԠ͠Α͏ʂ ɾ͘͞ΒͷφϨοδɺ ηΩϡϦςΟɺόονϦͬͯΑʂʲॏཁʳ ɾIUUQTTOBQVQKQ ΋ΑΖ͘͠ʂ ɾఆظతʹεΩϟϯ͢Δ͜ͱͰɺ ੬ऑੑ͕ൃੜͨ͠Β͙͢ೝࣝͰ͖ΔΑ͏ʹͯ͠ ܧଓతʹηΩϡϦςΟ؅ཧΛߦ͍ͬͯ͜͏ʂ ɾʮ8BMUJJP͘͞ΒΫʔϙϯʯΛ׆༻͢Δͱ ຖ݄ԁ෼8BMUJJP͕࢖͑ΔΑʂ 2016/11/24 © Walti, Inc.

Slide 65

Slide 65 text

վΊͯ͝ڠྗ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ 2016/11/24 © Walti, Inc. ͘͞ΒΠϯλʔωοτ ܵҪ͞· ͘͞ΒͷφϨοδͷ؅ཧਓ http://knowledge.sakura.ad.jp/ unimal Ӭా͞· ͘͞ΒͷφϨοδͷγεςϜαϙʔτ Web੍࡞νʔϜͷͨΊͷ ΫϦΤΠςΟϒɾϓϥοτϑΥʔϜ ʮuniversionsʢϢχόʔδϣϯζʣʯ http://universions.com

Slide 66

Slide 66 text

վΊͯ͝ڠྗ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ 2016/11/24 © Walti, Inc. ͘͞ΒΠϯλʔωοτ ܵҪ͞· ͘͞ΒͷφϨοδͷ؅ཧਓ http://knowledge.sakura.ad.jp/ unimal Ӭా͞· ͘͞ΒͷφϨοδͷγεςϜαϙʔτ Web੍࡞νʔϜͷͨΊͷ ΫϦΤΠςΟϒɾϓϥοτϑΥʔϜ ʮuniversionsʢϢχόʔδϣϯζʣʯ http://universions.com ಛʹɺࠓճͷاըΛࣗΒ͝ఏҊ௖͍ͨ ܵҪ͞Μͷ༐ؾͱӳஅʹײँ͠·͢ʂ

Slide 67

Slide 67 text

͋Γ͕ͱ͏͍͟͝·ͨ͠ɻ 2016/11/24 © Walti, Inc.