@Fukuoka.go #11
https://fukuokago.connpass.com/event/87684/
6DIJP,POEP'VLVPLBHP(PͳͲͰ࡞Δ੬ऑੑରࡦήʔϜ
View Slide
(.0ϖύϘγχΞϓϦϯγύϧۙ౻͏͓ͪ!VE[VSB044ϓϩμΫτw NSVCZͷίϯςφϥϯλΠϜ)BDPOJXBw 3VCZͷ ZFU"OPUIFS0QFO4UBDLDMJFOU:BP3VCZ΄Ͳɺ(P͙Β͍ʁ͖ͳϥΠϒϥϦIBTIJDPSQIDMར༻ϒΩϓϥΠϜγϡʔλʔίϥϘηΩϡϦςΟษڧ࢝͠Ί͔ͨΓͰ͢
"MTPB3VCZJTU
13
'VLVPLBSC!ԙϖύες
8FCΞϓϦέʔγϣϯͷ੬ऑੑ
944
$43'
42-*OKFDUJPO
߈ܸ͞Εͨ͜ͱ͋Γ·͔͢ʁ
߈ܸΛΓ͍ͨޚ͍ͨ͠
࿅शʢʁʣ͠Α͏
DG%78"w%BNO7VMOFSBCMF8FC"QQMJDBUJPOw͋͑ͯ੬ऑͳ࡞Γʹͨ͠ΣϒΞϓϦέʔγϣϯw༷ʑͳ߈ܸΛ࣮ࡍʹߦ͏͜ͱͰɺ߈ܸଆͷؾ࣋ͪʹͳΓ ͦΕ͕։ൃʹ͓͍ͯʹཱͭwΞϓϦέʔγϣϯͷ੬ऑ߹͍ΛઃఆͰ͖ͯศརʢʁʣIUUQXXXEWXBDPVL
߈ܸΛͯ͠ΈΔͱ
͜ΕΛࣗಈԽ͢Δͱ
ޚଆͷ࿅शʹ͑ΔͷͰʁ
CJHCSJEHFϓϩδΣΫτʢԾʣwೋͭͷίϯςφΛ࡞Δ߈ܸଆɺޚଆw߈ܸଆόΠφϦͰϒϥοΫϘοΫεͷϓϩάϥϜwޚଆ"[email protected]ͳ੬ऑͳΞϓϦέʔγϣϯ TTIͰௐࠪՄೳͳΑ͏ɺγεςϜίϯςφʹͳ͍ͬͯΔ
CJHCSJEHFIUUQTDTLZVTIVVBDKQFOQJUQSP
ߏBinaryApache MySQLApp(PHP)SSHDAttacker Defender
ޚଆ͔ΒৄࡉΛɻwTPWFSMBZͱ͍͏ɺ%PDLFSίϯςφʹಛԽͨ͠γϯϓϧͳJOJUͷΈΛͬͯγεςϜίϯςφΛ࡞ΔɻwTTIE ϩάͷͨΊSTZTMPHɺBQBDIFɺ.Z42-Λࣂ͍ͬͯΔwPDUPQBTTͰTTIϩάΠϯपΓΛ؆୯ʹIUUQTHJUIVCDPNKVTUDPOUBJOFSTTPWFSMBZ
߈ܸଆɻwṖͷόΠφϦ͕͋Δwઃఆʹɺ߈ܸઌͷΞυϨεͳͲͷใ͔ͤ͠ͳ͘ɺͲ͏͍͏߈ܸΛ͍ͯ͠Δ͔Θ͔Βͳ͍wىಈ͢Δͱɺରͷ߈ܸͷޭࣦഊ͚͕ͩΘ͔ΔwˠޚଆͷϩάͳͲΛ֬ೝ͠ɺΞϓϦΛվमͯ͠
߈ܸϕϯνϚʔΫͷྲྀΕw߈ܸଆͰόΠφϦىಈˠޚଆͰϩάͳͲΛ֬ೝwˠޚଆͷઃఆΛมߋͨ͠ΓɺΞϓϦΛվमwˠ࠶߈ܸΛ͠ɺࣦഊͨ͠ΒӴޭʂʂʂ̍
ṖͷόΠφϦ
ͦ͜ͰɺΛ͏
࣮ͷྫ
ʹཱͭͷwIFBE[PPTVSGwঢ়ଶΛอͭ͜ͱ͕Ͱ͖ΔΣϒεΫϨΠύʔϥΠϒϥϦIUUQTHJUIVCDPNIFBE[PPTVSG
EFNPwʢतۀͰ͏ͱ͍͏͜ͱͰɺৄࡉ·ͩφΠγϣʣ
ࠓޙΓ͍ͨ͜ͱw߈ܸͷόϦΤʔγϣϯΛ૿͢w؆୯ͳରࡦͰ͋ͬͨΒ߈ܸଆͰݟൈ͔Εͯ͢Γൈ͚Δͭͱ͔w߈ܸόΠφϦΛͬͱಡԽ͢Δwޚଆɺ1)1Ҏ֎ͷݴޠϑϨʔϜϫʔΫΛ૿͢
จࣈྻΛӅ͍ͨ͠w(PݴޠͷόΠφϦͰɺͪΖΜTUSJOHT ͳͲͰ߈ܸख๏ʹؔ͢Δจࣈྻݟ͑ͯ͠·͏ɻwจࣈσʔλΛ·ͱΊͯ֎෦͔Βఏڙͭͭɺ҉߸Խ͞ΕͨܗͰόΠφϦؚΉΑ͏ͳπʔϧΛ࡞ΕΔͱྑͦ͞͏ʁwʢͪΖΜɺҰൠతͳͰόΠφϦͷจࣈྻΛ҉߸Խͯ͠ ɹͦΜͳʹηΩϡϦςΟରࡦʹͳΒͳ͍ɻΫΠζͷқతͳͰʣ
PT&YJU