Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
MR.RABBIT 聞いた事はあるけど、実際には見た事がないハッキングガジェット
Search
MR.RABBIT
December 04, 2017
2
7.2k
MR.RABBIT 聞いた事はあるけど、実際には見た事がないハッキングガジェット
2017年12月2日(土) 元祖 濱せっく #1 で発表させてもらった資料です。
MR.RABBIT
December 04, 2017
Tweet
Share
More Decks by MR.RABBIT
See All by MR.RABBIT
P.A.K.U.R.I SECCON2019 Akihabara YOROZU
01rabbit
1
98
P.A.K.U.R.I AVTOKYO HIVE
01rabbit
0
49
The Empire Strikes Back ~MR.RABBIT 帝国の逆襲~
01rabbit
0
230
地雷探しに脆弱性を使うのは間違っているだろうか Hack a Minesweeper
01rabbit
0
180
あの日学んだ攻撃の方法を僕達はまだ知らない。
01rabbit
0
170
Featured
See All Featured
Build your cross-platform service in a week with App Engine
jlugia
229
18k
GraphQLの誤解/rethinking-graphql
sonatard
66
9.9k
Bootstrapping a Software Product
garrettdimon
PRO
305
110k
No one is an island. Learnings from fostering a developers community.
thoeni
19
3k
Documentation Writing (for coders)
carmenintech
65
4.4k
Rebuilding a faster, lazier Slack
samanthasiow
79
8.6k
Music & Morning Musume
bryan
46
6.1k
Code Reviewing Like a Champion
maltzj
519
39k
Fireside Chat
paigeccino
32
3k
Making the Leap to Tech Lead
cromwellryan
132
8.9k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.1k
Adopting Sorbet at Scale
ufuk
73
9k
Transcript
ฉ͍ͨࣄ͋Δ͚Ͳɺ࣮ࡍʹݟͨࣄ͕ͳ͍ ϋοΩϯάΨδΣοτ ݩᖛͤͬ͘ !SBJU
ࣗݾհ ͏͗͞ .33"##*5 w झຯͰηΩϡϦςΟใͷऩूɺ߈ܸݕূΛ͠ ͯΔࣗশϖςϯࢣڃΫϥοΧʔ w ॏ͍தೋපΛױ͍ͬͯΔϥϊϕѪಡՈ w
झຯےτϨͱαόήʔ ͏͞ϒϩ ɹIUUQSBJUCMPHIBUFCMPKQ 5XJUUFS ɹ!SBJU
͋͐͡Μͩ wϋοΩϯάΨδΣοτͷ wকདྷతʹʮϑΟΫγϣϯʯͰͳ ͯ͘ʮϊϯϑΟΫγϣϯʯʹͳΓ ͦ͏ͳ߈ܸγφϦΦ
ΨνͳϋοΧʔͷਓʁ✋
ࣖΛ࠹͗ɺޱΛ࠹͗ɺΛด͡Δ͔ɺ $5'ʹઐ೦ͯ͠Լ͍͞
.330#05ͬͯΔਓʁ✋
None
ΥονυοάεͬͯΔਓʁ✋
None
өըɺւ֎υϥϚɺήʔϜͰͬͯΔ αΠόʔ߈ܸͬͯຊʹͰ͖Δͷʁ
͋ΜͳศརͳϋοΩϯάΨδΣοτͬͯ ຊʹ͋Δͷʁ
͋ͬͨʂ
,BMJ-JOVY/FU)VOUFS /FYVT 1XO1 3BTQCFSSZ1J;FSP8
άάΓͳ͕Β࡞ͬͯΈͨʂ
ϚδͰX
ͦͦίϨԿʁ
,BMJ-JOVY/FU)VOUFS ,BMJ-JOVY/FU)VOUFSɺ/FYVTσόΠε༻ͷΦʔϓϯιʔεͷ"OESPJE ༻৵ೖςετϓϥοτϑΥʔϜͰ͢ɻ/FU)VOUFSɺ,BMJ-JOVYͷ৵ೖς ετπʔϧҎ֎ʹɺ)*%ΩʔϘʔυ߈ܸɺ#BE64#߈ܸɺ&WJM"1 ."/"߈ܸͳͲ͍͔ͭ͘ͷίϯϙʔωϯτ͕Ճ͞Ε͍ͯΔɻ
1XO13BTQCFSSZ1J;FSP8 1XO1ɺՁ֨ͷ3BTQCFSSZ1J;FSP·ͨ3BTQCFSSZ1J;FSP8Λϕʔε ʹͨ͠ɺߴʹΧελϚΠζՄೳͳ64#߈ܸϓϥοτϑΥʔϜͰ͢ɻ 1XO1ͷػೳ w )*%ӅΕνϟωϧ'SPOU%PPS#BDL%PPSc)*%σόΠεܦ༝Ͱ8JOEPXTλʔήοτͷϦϞʔτγΣϧΞΫηεΛऔಘ w 8JOEPXT-PDL1JDLFScऑ͍ύεϫʔυͷεΫϦʔϯϩοΫΛղআ͢ΔʢશࣗಈԽʣ w 8J'Jϗοτεϙοτc44)ΞΫηεʢ1J;FSP8ͷΈʣɺӅ͞Εͨ&44*%Λαϙʔτ
ͳͲ
σϞϯετϨʔγϣϯ
,BMJ-JOVY/FU)VOUFS )*%ΩʔϘʔυ߈ܸ 8JOEPXT 7.8BSF'VTJPO /FU)VOUFS /FYVT %VDL)VOUFS)*%
1XO1 8JOEPXT-PDL1JDLFS 8JOEPXT 6TFS7JDUJN 1BTTXPSE 1XO1 )*%ΩʔϘʔυͷػೳΛར༻ͯ͠ϋογϡΛͱͬͯΫϥοΫ͢Δ
1XO1 )*%ӅΕνϟωϧ#BDL%PPS 8JOEPXT 1XO1
ҙ֎ͱөըͬΆ͍͜ͱ Ͱ͖ͪΌͬͨX
͘ͳ͍ʁ
কདྷతʹʮϑΟΫγϣϯʯͰͳͯ͘ ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ඪతܕ߈ܸʹ͓͚Δ߈ܸऀͷߦಈΛੳͨ͠ߟ͑ํͱ͞ΕΔ ʮαΠόʔΩϧνΣʔϯʯͷதʹ/FU)VOUFSɺ1XO1ͷ ༷ͳΨδΣοτΛऔΓೖΕͨʮϑΟΫγϣϯʯͰແ͘ͳΓ ͦ͏ͳ߈ܸγφϦΦΛߟ͑ͯΈͨɻ
αΠόʔΩϧνΣʔϯͱ ߈ܸͷஈ֊ ֓ཁ ఁ 3FDPOOBJTTBODF ΦʔϓϯιʔεͳͲ͔ΒඪతͷใΛऩू͢Δ ثԽ 8FBQPOJ[BUJPO
߈ܸίʔυϚϧΣΞͷ࡞ ૹ %FMJWFSZ ͳΓ͢·͠ϝʔϧʢϚϧΣΞʣΛૹ ϚϧΣΞઃஔαΠτͷ༠ಋ ߈ܸ &YQMPJUBUJPO ߈ܸίʔυϚϧΣΞΛ࣮ߦͤ͞Δ Πϯετʔϧ *OTUBMMBUJPO ඪత͕ϚϧΣΞʹײછ ԕִૢ࡞ $ ϚϧΣΞͱ$αʔόΛ௨৴ͤ͞ԕִૢ࡞͢Δ ৵ೖ֦େɾత࣮ߦ "DUJPOTPO0CKFDUJWFT ϚϧΣΞͷײછ֦େ ใͷࡡऔ
ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ʢରɿΠϯλʔωοτʹଓՄೳͳެతػؔʣ ᶃެ͔ࣔΒܯඋձࣾͷग़ೖΓۀऀΛׂΓग़͠৵ೖʢఁʣ ᶄ$ଓ͢Δ1PXFS4IFMMεΫϦϓτΛ༻ҙʢثԽʣ ᶅਓ͕1$͔ΒΕͨ伱ʹ/FU)VOUFSΛଓʢૹʣ ᶆ)*%ΩʔϘʔυ߈ܸʢ߈ܸʣ ᶇ1$ʹϚϧΣΞΛײછͤ͞ΔʢΠϯετʔϧʣ ᶈϚϧΣΞΛ$αʔόͱ௨৴ʢ$ʣ ᶉσʔλϕʔεͷഁյPSใࡡऔʢతୡʣ ᶃᶄ
ᶅ ᶆ ᶇ ᶈ ᶉ ˞ΨδΣοτΛར༻͢Δ͜ͱͰ"7ιϑτʹݕ͞ΕΔϦεΫΛԼ͛ͯϚϧΣΞΛײછͤ͞ΒΕΔ
ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ʢରɿΠϯλʔωοτ͔Βִ͞Ε͍ͯΔެతػؔʣ ᶃެ͔ࣔΒܯඋձࣾͷग़ೖΓۀऀΛׂΓग़͠৵ೖʢఁʣ ᶄ1XO1ͷઃఆΛ)*%ӅΕνϟωϧ#BDL%PPSʹ͢ΔʢثԽʣ ᶅਓ͕1$͔ΒΕͨ伱ʹ1XO1Λଓʢૹʣ ᶆ)*%ӅΕνϟωϧ#BDL%PPSͰଓʢ߈ܸʣ ᶇ1XO1Λ߈ܸऀͷ1$ͱ௨৴ʢ$ʣ ᶈσʔλϕʔεͷഁյPSใࡡऔʢతୡʣ ᶃᶄ ᶅ
ᶆ ᶇ ᶈ ˞Πϯλʔωοτ͔Βִ͢ΔҝͷΤΞΪϟοϓΛ1XO1Λར༻͢ΔࣄͰ֎෦ͱଓͤ͞Δ
өըυϥϚͷ ݟա͗Ͱ͠ΐ͏͔ʁ
͜ΕϑΟΫγϣϯ͚ͩͷ Ͱ͠ΐ͏͔ʁ
ਥೋපͷໝͱࢥͬͨํস͍ͬͯͬͯͩ͘͞X ͠ɺࢲͱಉ༷͡ʹڴҖͱͳΓ͏Δͱײͨ͡ํ͕͍Βͬ ͠Ό͍·ͨ͠ΒҰॹʹରԠࡦΛߟ͑ͯΈ·ͤΜ͔ʁ ͓ΘΓ