Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SECCON2013 slide

mala
December 24, 2013

SECCON2013 slide

SECCON2013北陸前日勉強会のスライドです
http://2013.seccon.jp/2013events.html

元データここ https://gist.github.com/mala/8112696

mala

December 24, 2013
Tweet

More Decks by mala

Other Decks in Programming

Transcript

  1. ଞࣾαʔϏεͷࣄྫ ଞࣾαʔϏεͷࣄྫ Google, Facebook, Twitter, Yahoo, Amazon, Evernote, etc hatena,

    mixi, Doorkeeper, ೚ఱಊ, etc දཱͬͯॻ͍ͨΓ͢Δͷ͸XSS͕ଟ͍ ݸਓͷ׆ಈͰ͢ɻ ͨ·ͨ·ۀ຿࣌ؒதʹݟ͚ͭΔ͜ͱ΋͋Γ·͕͢ݸਓͷ׆ ಈͰ͢
  2. javascript: javascript: ΁ͷϦϯΫ ΁ͷϦϯΫ a href΁ͷࢦఆ → ΫϦοΫ࣌ʹscript࣮ߦ iframe src΁ͷࢦఆ

    → ϩʔυ࣌ʹscript࣮ߦ img src΄͔ → ੲ͸࣮ߦ͞Ε͕ͨࠓ͸࣮ߦ͞Εͳ͍
  3. Ruby on Rails Ruby on Rails ͷ ͷ Turbolinks Turbolinks

    Ajax + history.pushState Ͱߴ଎ʹը໘੾Γସ͑ githubͰ΍ͬͯΔΑ͏ͳ΍ͭ
  4. Flash based XSS Flash based XSS ී௨ͷXSS͸ݟ͔ͭΓʹ͘͘ͳ͍ͬͯΔ Flash based XSS͕Ξπ͍!

    ࣄྫʹ͍ͭͯ·ͱΊͯ·͢ http://subtech.g.hatena.ne.jp/mala/20130604/1370328779
  5. Web Web → → εϚϗ εϚϗ ੬ऑੑͷൃੜ͠΍͍͢ϙΠϯτ͸ಉ͡ WebView + XSS

    CSRFʹࣅͨ΋ͷ(Cross-Application request forgeries) ଞݴޠͱͷϒϦοδػೳ
  6. "As many have noted, the real risks presented by running

    javascript within Mailbox are extremely limited thanks to how iOS is designed." ଟ͘ͷਓ͕ࢦఠͯ͠ΔΑ͏ʹMailbox্Ͱͷjavascript࣮ߦʹ ΑΔϦεΫ͸ۃΊͯݶఆతͰ͢ɺiOSͷઃܭʹײँ
  7. <!--> < script> your code here < /script> --> HTMLύʔαϥΠϒϥϦͷଟ͘͸ίϝϯτͱͯ͠ղऍ

    ࣮ࡍͷϒϥ΢βͰ͸Ұߦ໨Ͱίϝϯτऴྃͱݟͳ͢ ஌Βͳ͍ͱؾ෇͔ͳ͍
  8. iOS iOSͷΞυϨεாͷύʔϛο ͷΞυϨεாͷύʔϛο γϣϯ γϣϯ addressbook.sqlitedb iOS5: file:// ͔ΒͰ͋Ε͹ڐՄແ͘ಡΈࠐΊͨ iOS6:

    ΞϓϦ͕Ұ౓ΞυϨεாΛಡΈࠐΜͩޙͳΒಡΈࠐ Ίͨ iOS7: file:// Ͱ௚઀ΞΫηε͕ෆՄೳʹͳͬͨ
  9. Android AndroidଆͰͷରԠ ଆͰͷରԠ Android API Level 17 Ͱͷมߋ ࢦఆͨ͠ϝιου͔͠ݺͼग़ͤͳ͍Α͏ʹ͢Δ͜ͱ͕Մೳ ʹ

    ಈ࡞ର৅σόΠε͕ݶΒΕΔ͜ͱʹͳͬͯ͠·͏ http://commonsware.com/blog/2013/02/18/webview- addjavascriptinterface-change.html http://android-developers.blogspot.jp/2013/02/security- enhancements-in-jelly-bean.html
  10. ೝূɺ ೝূɺOpenID OpenID΍ ΍OAuth OAuthɺ ɺ ϓϥοτϑΥʔϜ ϓϥοτϑΥʔϜSDK SDK ڧ੍తʹೝՄͤͯ͞͠·͏Α͏ͳ΋ͷ

    ଞਓʹ੒Γ͢·ͯ͠ϩάΠϯग़དྷͯ͠·͏΋ͷ ਖ਼نͷΞϓϦҎ֎ʹڧ੍తʹೝՄͰ͖ͯ͠·͏΋ͷ
  11. ݺͼग़͠ݩͷݕূ ݺͼग़͠ݩͷݕূ: Android : Android ͷέʔε ͷέʔε 2013೥7݄: Android OS

    ʹ͓͍ͯΞϓϦͷॺ໊ͷݕূ͕ෆ े෼ͳ੬ऑੑ ݹ͍୺຤ + ໺ྑΞϓϦΛߟྀ͢Δ৔߹: package signature ͕ѼʹͳΒͳ͍ ਖ਼نͷΞϓϦʹݶఆ͍ͨ͠ॲཧ͕໺ྑΞϓϦ͔ΒͰ΋ୟ͚ Δ͜ͱʹ
  12. ݺͼग़͠ݩͷݕূ ݺͼग़͠ݩͷݕূ: iOS : iOSͷ ͷ έʔε έʔε openURLͰଞͷΞϓϦέʔγϣϯىಈ ݺͼग़͠ݩΞϓϦͷBundle

    IDΛऔΕΔ WebView಺ͷϦϯΫΫϦοΫͰ΋෇͍ͪΌ͏Α ೚ҙͷWebϖʔδΛදࣔ͢ΔΑ͏ͳػೳ͕͋ΔͳΒݺͼग़ ͠ݩΞϓϦ৘ใ͸ΞςʹͳΒͳ͍