Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
MR.RABBIT 聞いた事はあるけど、実際には見た事がないハッキングガジェット
Search
Mr.Rabbit
December 04, 2017
2
7.3k
MR.RABBIT 聞いた事はあるけど、実際には見た事がないハッキングガジェット
2017年12月2日(土) 元祖 濱せっく #1 で発表させてもらった資料です。
Mr.Rabbit
December 04, 2017
Tweet
Share
More Decks by Mr.Rabbit
See All by Mr.Rabbit
BOCCHI
01rabbit
0
16
KaliPAKU
01rabbit
0
17
Babbly
01rabbit
0
59
P.A.K.U.R.I SECCON2019 Akihabara YOROZU
01rabbit
1
110
P.A.K.U.R.I AVTOKYO HIVE
01rabbit
0
71
The Empire Strikes Back ~MR.RABBIT 帝国の逆襲~
01rabbit
0
230
地雷探しに脆弱性を使うのは間違っているだろうか Hack a Minesweeper
01rabbit
0
200
あの日学んだ攻撃の方法を僕達はまだ知らない。
01rabbit
0
180
Featured
See All Featured
Raft: Consensus for Rubyists
vanstee
140
7.1k
Code Review Best Practice
trishagee
69
19k
Being A Developer After 40
akosma
90
590k
Building Flexible Design Systems
yeseniaperezcruz
328
39k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
667
120k
We Have a Design System, Now What?
morganepeng
53
7.7k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
23
1.4k
RailsConf 2023
tenderlove
30
1.2k
Making the Leap to Tech Lead
cromwellryan
134
9.5k
Mobile First: as difficult as doing things right
swwweet
223
9.9k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
26
3k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
358
30k
Transcript
ฉ͍ͨࣄ͋Δ͚Ͳɺ࣮ࡍʹݟͨࣄ͕ͳ͍ ϋοΩϯάΨδΣοτ ݩᖛͤͬ͘ !SBJU
ࣗݾհ ͏͗͞ .33"##*5 w झຯͰηΩϡϦςΟใͷऩूɺ߈ܸݕূΛ͠ ͯΔࣗশϖςϯࢣڃΫϥοΧʔ w ॏ͍தೋපΛױ͍ͬͯΔϥϊϕѪಡՈ w
झຯےτϨͱαόήʔ ͏͞ϒϩ ɹIUUQSBJUCMPHIBUFCMPKQ 5XJUUFS ɹ!SBJU
͋͐͡Μͩ wϋοΩϯάΨδΣοτͷ wকདྷతʹʮϑΟΫγϣϯʯͰͳ ͯ͘ʮϊϯϑΟΫγϣϯʯʹͳΓ ͦ͏ͳ߈ܸγφϦΦ
ΨνͳϋοΧʔͷਓʁ✋
ࣖΛ࠹͗ɺޱΛ࠹͗ɺΛด͡Δ͔ɺ $5'ʹઐ೦ͯ͠Լ͍͞
.330#05ͬͯΔਓʁ✋
None
ΥονυοάεͬͯΔਓʁ✋
None
өըɺւ֎υϥϚɺήʔϜͰͬͯΔ αΠόʔ߈ܸͬͯຊʹͰ͖Δͷʁ
͋ΜͳศརͳϋοΩϯάΨδΣοτͬͯ ຊʹ͋Δͷʁ
͋ͬͨʂ
,BMJ-JOVY/FU)VOUFS /FYVT 1XO1 3BTQCFSSZ1J;FSP8
άάΓͳ͕Β࡞ͬͯΈͨʂ
ϚδͰX
ͦͦίϨԿʁ
,BMJ-JOVY/FU)VOUFS ,BMJ-JOVY/FU)VOUFSɺ/FYVTσόΠε༻ͷΦʔϓϯιʔεͷ"OESPJE ༻৵ೖςετϓϥοτϑΥʔϜͰ͢ɻ/FU)VOUFSɺ,BMJ-JOVYͷ৵ೖς ετπʔϧҎ֎ʹɺ)*%ΩʔϘʔυ߈ܸɺ#BE64#߈ܸɺ&WJM"1 ."/"߈ܸͳͲ͍͔ͭ͘ͷίϯϙʔωϯτ͕Ճ͞Ε͍ͯΔɻ
1XO13BTQCFSSZ1J;FSP8 1XO1ɺՁ֨ͷ3BTQCFSSZ1J;FSP·ͨ3BTQCFSSZ1J;FSP8Λϕʔε ʹͨ͠ɺߴʹΧελϚΠζՄೳͳ64#߈ܸϓϥοτϑΥʔϜͰ͢ɻ 1XO1ͷػೳ w )*%ӅΕνϟωϧ'SPOU%PPS#BDL%PPSc)*%σόΠεܦ༝Ͱ8JOEPXTλʔήοτͷϦϞʔτγΣϧΞΫηεΛऔಘ w 8JOEPXT-PDL1JDLFScऑ͍ύεϫʔυͷεΫϦʔϯϩοΫΛղআ͢ΔʢશࣗಈԽʣ w 8J'Jϗοτεϙοτc44)ΞΫηεʢ1J;FSP8ͷΈʣɺӅ͞Εͨ&44*%Λαϙʔτ
ͳͲ
σϞϯετϨʔγϣϯ
,BMJ-JOVY/FU)VOUFS )*%ΩʔϘʔυ߈ܸ 8JOEPXT 7.8BSF'VTJPO /FU)VOUFS /FYVT %VDL)VOUFS)*%
1XO1 8JOEPXT-PDL1JDLFS 8JOEPXT 6TFS7JDUJN 1BTTXPSE 1XO1 )*%ΩʔϘʔυͷػೳΛར༻ͯ͠ϋογϡΛͱͬͯΫϥοΫ͢Δ
1XO1 )*%ӅΕνϟωϧ#BDL%PPS 8JOEPXT 1XO1
ҙ֎ͱөըͬΆ͍͜ͱ Ͱ͖ͪΌͬͨX
͘ͳ͍ʁ
কདྷతʹʮϑΟΫγϣϯʯͰͳͯ͘ ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ඪతܕ߈ܸʹ͓͚Δ߈ܸऀͷߦಈΛੳͨ͠ߟ͑ํͱ͞ΕΔ ʮαΠόʔΩϧνΣʔϯʯͷதʹ/FU)VOUFSɺ1XO1ͷ ༷ͳΨδΣοτΛऔΓೖΕͨʮϑΟΫγϣϯʯͰແ͘ͳΓ ͦ͏ͳ߈ܸγφϦΦΛߟ͑ͯΈͨɻ
αΠόʔΩϧνΣʔϯͱ ߈ܸͷஈ֊ ֓ཁ ఁ 3FDPOOBJTTBODF ΦʔϓϯιʔεͳͲ͔ΒඪతͷใΛऩू͢Δ ثԽ 8FBQPOJ[BUJPO
߈ܸίʔυϚϧΣΞͷ࡞ ૹ %FMJWFSZ ͳΓ͢·͠ϝʔϧʢϚϧΣΞʣΛૹ ϚϧΣΞઃஔαΠτͷ༠ಋ ߈ܸ &YQMPJUBUJPO ߈ܸίʔυϚϧΣΞΛ࣮ߦͤ͞Δ Πϯετʔϧ *OTUBMMBUJPO ඪత͕ϚϧΣΞʹײછ ԕִૢ࡞ $ ϚϧΣΞͱ$αʔόΛ௨৴ͤ͞ԕִૢ࡞͢Δ ৵ೖ֦େɾత࣮ߦ "DUJPOTPO0CKFDUJWFT ϚϧΣΞͷײછ֦େ ใͷࡡऔ
ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ʢରɿΠϯλʔωοτʹଓՄೳͳެతػؔʣ ᶃެ͔ࣔΒܯඋձࣾͷग़ೖΓۀऀΛׂΓग़͠৵ೖʢఁʣ ᶄ$ଓ͢Δ1PXFS4IFMMεΫϦϓτΛ༻ҙʢثԽʣ ᶅਓ͕1$͔ΒΕͨ伱ʹ/FU)VOUFSΛଓʢૹʣ ᶆ)*%ΩʔϘʔυ߈ܸʢ߈ܸʣ ᶇ1$ʹϚϧΣΞΛײછͤ͞ΔʢΠϯετʔϧʣ ᶈϚϧΣΞΛ$αʔόͱ௨৴ʢ$ʣ ᶉσʔλϕʔεͷഁյPSใࡡऔʢతୡʣ ᶃᶄ
ᶅ ᶆ ᶇ ᶈ ᶉ ˞ΨδΣοτΛར༻͢Δ͜ͱͰ"7ιϑτʹݕ͞ΕΔϦεΫΛԼ͛ͯϚϧΣΞΛײછͤ͞ΒΕΔ
ʮϊϯϑΟΫγϣϯʯʹͳΓͦ͏ͳ߈ܸγφϦΦ ʢରɿΠϯλʔωοτ͔Βִ͞Ε͍ͯΔެతػؔʣ ᶃެ͔ࣔΒܯඋձࣾͷग़ೖΓۀऀΛׂΓग़͠৵ೖʢఁʣ ᶄ1XO1ͷઃఆΛ)*%ӅΕνϟωϧ#BDL%PPSʹ͢ΔʢثԽʣ ᶅਓ͕1$͔ΒΕͨ伱ʹ1XO1Λଓʢૹʣ ᶆ)*%ӅΕνϟωϧ#BDL%PPSͰଓʢ߈ܸʣ ᶇ1XO1Λ߈ܸऀͷ1$ͱ௨৴ʢ$ʣ ᶈσʔλϕʔεͷഁյPSใࡡऔʢతୡʣ ᶃᶄ ᶅ
ᶆ ᶇ ᶈ ˞Πϯλʔωοτ͔Βִ͢ΔҝͷΤΞΪϟοϓΛ1XO1Λར༻͢ΔࣄͰ֎෦ͱଓͤ͞Δ
өըυϥϚͷ ݟա͗Ͱ͠ΐ͏͔ʁ
͜ΕϑΟΫγϣϯ͚ͩͷ Ͱ͠ΐ͏͔ʁ
ਥೋපͷໝͱࢥͬͨํস͍ͬͯͬͯͩ͘͞X ͠ɺࢲͱಉ༷͡ʹڴҖͱͳΓ͏Δͱײͨ͡ํ͕͍Βͬ ͠Ό͍·ͨ͠ΒҰॹʹରԠࡦΛߟ͑ͯΈ·ͤΜ͔ʁ ͓ΘΓ