Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
DNSトンネリングの手法 / A technique of DNS tunneling (#s...
Search
shutingrz
May 24, 2018
Technology
12
3.8k
DNSトンネリングの手法 / A technique of DNS tunneling (#ssmjp)
2018/05 の #ssmjp で発表した時の資料。
@shutingrz
shutingrz
May 24, 2018
Tweet
Share
More Decks by shutingrz
See All by shutingrz
イ良い日ンマを作る(USBストレージ容量偽装の手法) / USB Storage Capacity Faking Techniques
shutingrz
0
1.9k
Analyze AutoMotive ECU
shutingrz
3
3.5k
KnotResolverへの毒入れ~世にも珍しいKashpureff型攻撃~ / Hack_to_KnotResolver
shutingrz
0
590
JC3が教える! Gozi/DreamBot 判別法 / analysis_JC3_checksite
shutingrz
1
700
Other Decks in Technology
See All in Technology
GraphQLを活用したリアーキテクチャに対応するSLI/Oの再設計
coconala_engineer
0
200
AIとSREで「今」できること
honmarkhunt
3
710
10ヶ月かけてstyled-components v4からv5にアップデートした話
uhyo
5
460
Azure Maps Visual in PowerBIで分析しよう
nakasho
0
200
テストって楽しい!開発を加速させるテストの魅力 / Testing is Fun! The Fascinating of Testing to Accelerate Development
aiandrox
0
160
勝手に!深堀り!Cloud Run worker pools / Deep dive Cloud Run worker pools
iselegant
4
650
Part1 GitHubってなんだろう?その1
tomokusaba
2
540
AOAI で AI アプリを開発する時にまず考えたいこと
mappie_kochi
1
450
Simplify! 10 ways to reduce complexity in software development
ufried
1
240
PagerDuty×ポストモーテムで築く障害対応文化/Building a culture of incident response with PagerDuty and postmortems
aeonpeople
3
560
Databricksで完全履修!オールインワンレイクハウスは実在した!
akuwano
0
150
Azure & DevSecOps
kkamegawa
2
160
Featured
See All Featured
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
34
2.2k
The Language of Interfaces
destraynor
158
25k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
29
1.7k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
357
30k
YesSQL, Process and Tooling at Scale
rocio
172
14k
Facilitating Awesome Meetings
lara
54
6.3k
Producing Creativity
orderedlist
PRO
344
40k
Six Lessons from altMBA
skipperchong
28
3.8k
Music & Morning Musume
bryan
47
6.5k
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.3k
Site-Speed That Sticks
csswizardry
6
540
Java REST API Framework Comparison - PWX 2021
mraible
31
8.6k
Transcript
%/4τϯωϦϯάͷख๏ ͠Ύʔͱ !TIVUJOHS[
ࣗݾհ w ͱ͋ΔηΩϡϦςΟձࣾͷ40$ΤϯδχΞ w %/4 #(1ͳͲΠϯλʔωοτج൫͕͖ w ۀʹ͋·Γؔͳ͍ɾɾɾ w ઌ݄͕TTNKQॳࢀՃʢਓ͍͢͝
ͬͯΔ͜ͱ w "4ͱϐΞϦϯά w ͱϑϧϧʔτΛͬͯ·͢ w ࠷ۙ6αʔόΛखʹೖΕͨͷͰ ਓݖΛಘΒΕͨ
ͬͯΔ͜ͱ w %/4ΩϟογϡϙΠζχϯάΛ ߦ͏.FUBTQMPJUϞδϡʔϧͱ͔ ࡞ͬͯ·ͨ͠ w ͕͢͞ʹඇެ։Ͱ͢
υϝΠϯϩοΫ͞Εͨ '#*ʢ'FEFSBM#VSFBVPG*OWFTUJHBUJPOʣ ͔ΒͷࢦࣔʹΑΓɺ
%/4τϯωϦϯά
%/4τϯωϦϯάͱ w %/4௨৴ʹผͷతΛ࣋ͬͨใΛؚΊΔ͜ͱ w ِ௨৴ͷҰछ
҉߸Խ௨৴ͱͷҧ͍ w ҉߸Խ௨৴ w ͲͷΑ͏ͳσʔλ͔֬ೝͰ͖ͳ͍Α͏ʹ͢Δ w ௨৴͕ߦΘΕ͍ͯΔ͜ͱೝ͞ΕͯΑ͍ w ِ௨৴ w
ҙຯͷ͋ΔσʔλΛૹ৴͍ͯ͠Δ͜ͱΛ ΒΕͳ͍Α͏ʹ͢Δ
%/4τϯωϦϯάͷར༻ྫ w ϑΟϧλϦϯάڥԼͰͷ71/ w VEQ UDQ։͍͍ͯΔՄೳੑ͕ߴ͍ w ϚϧΣΞ w )551ʹൺͯϩΪϯά͞Ε͍ͯͳ͍
%/4τϯωϦϯάͷར༻ྫ w ϑΟϧλϦϯάڥԼͰͷ71/ w VEQ UDQ։͍͍ͯΔՄೳੑ͕ߴ͍ w ϚϧΣΞ w )551ʹൺͯϩΪϯά͞Ε͍ͯͳ͍
ϚϧΣΞͷ)551௨৴ w ϚϧΣΞ͕)551௨৴Λར༻͢Δཧ༝ ΄ͱΜͲͷ04Ͱ)551௨৴͕ՄೳͰ͋Δ ϓϩΩγαʔό͕ଘࡏ͍ͯ͠Δ߹Ͱɺ ΫϥΠΞϯτͷ௨৴͕΄΅ͦͷ··Ͱ֎෦ ʹൈ͚ग़ͤΔΑ͏ʹͳ͍ͬͯΔ
༷ʑͳσʔλΛॊೈʹදݱͰ͖Δ
ϚϧΣΞͷ)551௨৴ w ϚϧΣΞ͕)551௨৴Λར༻͢Δཧ༝ ΄ͱΜͲͷ04Ͱ)551௨৴͕ՄೳͰ͋Δ ϓϩΩγαʔό͕ଘࡏ͍ͯ͠Δ߹Ͱɺ ΫϥΠΞϯτͷ௨৴͕΄΅ͦͷ··Ͱ֎෦ ʹൈ͚ग़ͤΔΑ͏ʹͳ͍ͬͯΔ
༷ʑͳσʔλΛॊೈʹදݱͰ͖Δ %/4 ϑϧϦκϧό %/4 %/4
%/4τϯωϦϯά ϚϧΣΞͷ௨৴ྫ
ϚϧΣΞ໊ ϗετ໊ͷنଇ 33 1MVH9 YB <CBTF><Կ͔ͷنଇ>TVCEPNBJO 595 1MVH9 Y <CBTF>TVCEPNBJO
595 .6-5*(3"*/ MPH<CBTF>TVCEPNBJO 595 QJTMPBEFS <Կ͔ͷنଇ><CBTF>TVCEPNBJO 595 'FFEFSCPU <CZUFT><$)6/,*%> <REQBSBN>TVCEPNBJO 595 %/4.FTTFOHFS <҉߸Խ\σʔλ>^>TVCEPNBJO 595 'SBNFXPSL104 <Τϯίʔυ>EPNBJO """"" $1303"$$00/ <CBTF>EPNBJO $/".& )FMNJOUI <CPUJE><DNEJE><QBSUJE>< SBOEPN > <%"5">EPNBJO " %FOJT <EBUB><" ><EBUB>EPNBJO ಠࣗ ݁ߏଟ͍ʂ
ϚϧΣΞͷಛ͔ΒΘ͔Δ %/4τϯωϦϯάͷख๏ w αʔό͔ΒΫϥΠΞϯτͷ໋ྩ595͕ଟ͍ w 595ҙͷσʔλΛؚΊΒΕΔͨΊ w ΫϥΠΞϯτ͔Βͷใૹ৴ROBNFΛ͏ w ΩϟογϡαʔόROBNFͷΈΛར༻͢ΔͨΊ
w ROBNF͕͍ w ؚΊΒΕΔσʔλྔͷؔͱɺΩϟογϡ͞ΕΔͨΊ
ٙࣅϚϧΣΞʹΑΔ %/4τϯωϦϯάσϞ w "ϨίʔυΛ༻͍ͨ$௨৴ w )FMNJOUIΛղੳͯ͠࡞ͨ͠$αʔό w 595ϨίʔυΛ༻͍ͨ$௨৴
ϚϧΣΞ࡞ऀΛ ग़͠ൈ͚Δ͔
छͷΞϓϩʔν w ௨৴Ͱ͖Δ߹ ΫϥΠΞϯτ͔Βαʔό αʔό͔ΒΫϥΠΞϯτ w ϑϧϦκϧόΛܦ༝͢Δ߹
ΫϥΠΞϯτ͔Βαʔό αʔό͔ΒΫϥΠΞϯτ
4UVCSFTPMWFS XXXTIVUJOHS[DPNͷ*1ΞυϨεʁ DBDIF 'VMM 'VMMTFSWJDF SFTPMWFS BSPPUTFSWFSTOFU BHUMETFSWFSTOFU OTTIVUJOHS[DPN
"VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS ௨৴͢Δ߹
4UVCSFTPMWFS XXXTIVUJOHS[DPNͷ*1ΞυϨεʁ DBDIF 'VMM 'VMMTFSWJDF SFTPMWFS XXXTIVUJOHS[DPN*/"
Ωϟογϡ֬ೝ BSPPUTFSWFSTOFU BHUMETFSWFSTOFU OTTIVUJOHS[DPN "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS XXXTIVUJOHS[DPN*/"ʁ DPNBHUMETFSWFSTOFUʹҕৡͯ͠Δ TIVUJOHS[DPNOTTIVUJOHS[DPNʹҕৡͯ͠Δ XXXTIVUJOHS[DPN*/"ʁ XXXTIVUJOHS[DPN*/"ʁ ` XXXTIVUJOHS[DPN*/" ΩϟογϡαʔόΛܦ༝͢Δ߹
௨৴Ͱ͖Δ߹
௨৴Ͱ͖Δ߹ w ͳΜͰͰ͖Δ w ϑΥϨϯδοΧʔʹόϨͳ͍Α͏ʹ
ϔομ 2VFTUJPOηΫγϣϯ ϦιʔεϨίʔυ
&%/4 w &%/4ͷσʔλ෦Λར༻ w σʔλ͕ROBNFʹݱΕͳ͍ w σʔλྔόΠτ͕࠷େ w ࣮ࡍόΠτ͘Β͍͡Ό ͳ͍ͱόϨͦ͏
৭ʑͳ&%/4Φϓγϣϯ w &%/4$MJFOU4VCOFU &$4 w ΫϥΠΞϯτใΛݖҖαʔόʹૹ৴͢Δ w %/4$PPLJF w
শࢭ༻ʹݖҖαʔόʹૹ৴͢Δ
৭ʑͳ&%/4Φϓγϣϯ w $)"*/ w ݕূࡁΈκʔϯใΛϑϧϦκϧόʹૹ৴͢Δ w 1BEEJOH w ҉߸Խ௨৴ͷฏจਪଌࢭͷͨΊύσΟϯά ΛؚΊΔ
&%/4Λͬͨ %/4τϯωϦϯάσϞ w ROBNFʹσʔλ͕ೖΒͳ͍ͱ͜Ζ͕ಛ w ޙड़͢ΔROBNFݕख๏͕શ͘ʹཱͨͳ͍
ϑϧϦκϧόΛ ܦ༝͢Δ߹
ϑϧϦκϧόΛܦ༝͢Δ߹ w ҎԼͷ੍ݶ͕͋Δ w ࠶ؼ͍߹Θͤʹෆཁͳσʔλআ͞ΕΔ w ಉ͡ROBNFͱ3355-ඵΩϟογϡ͞ΕΔ
αʔό͔ΒΫϥΠΞϯτ
595 w ৭ΜͳݕূͷͨΊʹαʔό͕͍߹ΘͤΔ w σʔλ?όΠτ 3%"5"ͷ࠷େ w ͕͢͞ʹେ͖͗͢ΔͱόϨΔ w
ݩʑΪϦڐ͕ͤͨ͜͏ΘΕͯ͏μϝ
334*( w %/44&$ݕূʹ༻͍Δ33 w ֤334FUʹ༩͞ΕΔ w σʔλόΠτ͘Β͍͕ݱ࣮త w ྲྀΕ͍ͯͯΪϦڐ͞Εͦ͏ʢࠓޙΛߟ͑Δͱ w
/8෦ͷόϦσʔλ͕͢͞ʹ͓͔͍͠ʁ
$/".& w $%/͕ϝδϟʔʹͳͬͨࠓɺվΊͯΦεεϝ w σʔλྔMFO EPNBJO όΠτ w RUZQF͕"ͳͷʹจࣈྻ͕ฦ͖ͬͯͯΑ͍ w
ࣗκʔϯͷ໊લΛࣔͯ͠XJMEDBSE͢Ε ໊લղܾ͕Ͱ͖ɺෆ৹ੑΛ͑Δ͜ͱ͕Մೳ
ΫϥΠΞϯτ͔Βαʔό
ROBNF͔͠ͳ͍
%/4ͷ༷ͱ࣮ w ϑϧϦκϧόελϒϦκϧόͷ26&45*0/ 4&$5*0/ͷΈΛ࠶ؼ͍߹Θͤʹίϐʔ͢Δ w ͭ·ΓɺROBNF RDMBTT RUZQFͷΈ͕ %/4τϯωϦϯάʹ͑Δ w
݁ՌɺROBNFʹσʔλΛೖΕΔ͔͠ͳ͍ ˠROBNFʹ͑͞ؾΛ͚ͭΕݕͰ͖Δʂ
%/4τϯωϦϯάͷݕग़
௨৴͢Δ߹ w ߟ͑͏Δύλʔϯ͕ଟ͘ݕ͍͠ w ΫΤϦϩάʹΒͳ͍ͷͨ͘͞Μ͋Δ w ݕͤ͞ΔΑΓɺϑϧϦκϧό͔ΒҎ֎ͷ UDQ VEQΛϑΟϧλ͢Ε 'VMM
✗
ϑϧϦκϧόΛܦ༝͢Δ߹ w αʔό͔ΒΫϥΠΞϯτ w ීஈΘͳ͍33͔ w αΠζ͕େ͖͘ͳ͍͔ w 3$0%&͕/0&3303Ҏ֎ w
55-͕খ͘͞ͳ͍͔
ϑϧϦκϧόΛܦ༝͢Δ߹ w ΫϥΠΞϯτ͔Βαʔό w ROBNFͷ͞ w υϝΠϯʹର͢Δϗετ໊ͷ w ROBNFͷෆ৹͞
ROBNFͷෆ৹͞ w จࣈ୯ޠͷϥϯμϜੑɾූ߸Խݕ w EOVGLUFTUUFTUΑΓzෳࡶz w ୯ޠͷؔ࿈ੑΛείΞϦϯά w ͜͜ΒΜJOGPCMPY͕ಛڐ࣋ͬͯΔΒ͍͠
·ͱΊ
·ͱΊ w %/4τϯωϦϯάͻͬͦΓͱΘΕ͍ͯΔ w ϩΪϯά͞Εͳ͍͔Βඪతܕ߈ܸʹΘΕΔ w ௨৴Ͱ͖Δ߹ݕඇৗʹ͍͠ w ϑϧϦκϧό͔ΒҎ֎ΛϑΟϧλ͢Ε0, w
͋ͱROBNF͚ͩݟΕΞϊϚϦݕͰ͖Δ w దͳઃఆ͕Ͱ͖ΕࢥͬͨΑΓ୯७
ϚϧΣΞ%/4τϯωϦϯάɹɹ
͓ΘΓ