Upgrade to Pro — share decks privately, control downloads, hide ads and more …

KnotResolverへの毒入れ~世にも珍しいKashpureff型攻撃~ / Hack_t...

shutingrz
September 07, 2019

KnotResolverへの毒入れ~世にも珍しいKashpureff型攻撃~ / Hack_to_KnotResolver

shutingrz

September 07, 2019
Tweet

More Decks by shutingrz

Other Decks in Technology

Transcript

  1. ֓ཁ w ,OPU3FTPMWFS d ʹಟೖΕͷ੬ऑੑ w $7& w $/".&࿈࠯ͷΩϟογϡաఔͰCBJMJXJDLνΣοΫ͕ແ͔ͬͨ w

    ࠓճͷΑ͏ͳ%/4ಟೖΕ੬ऑੑ͸ۃΊͯϨΞέʔε w 1P$Λࣗ࡞͠੒ޭΛ֬ೝ w ͜ͷ੬ऑੑΛ௨ͯ͠ɺ%/4ಟೖΕͷ࠷΋جૅతͳ֓೦ ʮCBJMJXJDLʯͷॏཁੑΛઆ໌͠·͢
  2. 4UVCSFTPMWFS  XXXTIVUJOHS[DPNͷ*1ΞυϨε͸ʁ ͍ΘΏΔ1$ DBDIF 'VMMTFSWJDFSFTPMWFS  XXXTIVUJOHS[DPN*/"  `

    ` Ωϟογϡ֬ೝ BSPPUTFSWFSTOFU BHUMETFSWFSTOFU OTTIVUJOHS[DPN "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS  XXXTIVUJOHS[DPN*/"ʁ  DPN͸BHUMETFSWFSTOFUʹҕৡͯ͠Δ  TIVUJOHS[DPN͸OTTIVUJOHS[DPNʹҕৡͯ͠Δ  XXXTIVUJOHS[DPN*/"ʁ  XXXTIVUJOHS[DPN*/"ʁ     ` XXXTIVUJOHS[DPN*/"    ˞Ұ෦؆ུԽ͍ͯ͠·͢ ࢀߟ ໊લղܾͷಈ࡞
  3. 4UVCSFTPMWFS  XXXTIVUJOHS[DPNͷ*1ΞυϨε͸ʁ ͍ΘΏΔ1$ DBDIF 'VMMTFSWJDFSFTPMWFS  XXXTIVUJOHS[DPN*/" BSPPUTFSWFSTOFU BHUMETFSWFSTOFU

    OTTIVUJOHS[DPN "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS "VUIPSJUBUJWFTFSWFS  XXXTIVUJOHS[DPN*/"ʁ  DPN͸BHUMETFSWFSTOFUʹҕৡͯ͠Δ  TIVUJOHS[DPN͸OTTIVUJOHS[DPNʹҕৡͯ͠Δ  XXXTIVUJOHS[DPN*/"ʁ  XXXTIVUJOHS[DPN*/"ʁ     ` XXXTIVUJOHS[DPN*/"    %/4ΩϟογϡϙΠζχϯάͷݪཧ  `  ߈ܸऀ  ` ` Ωϟογϡ֬ೝ
  4. ಟೖΕ͸छྨʹେผ͞ΕΔ w ِ૷Ԡ౴ܕ w ΈΜͳ͕஌͍ͬͯΔ%/4ΩϟογϡϙΠζχϯά w ϓϩτίϧʹର͢Δ߈ܸ 3'$४ڌͰݪཧ্๷͛ͳ͍ w ,BNJOTLZܕ߈ܸख๏

    ୈҰϑϥάϝϯτศ৐߈ܸ΋ຊ࣭͸͜Ε w ,BTIQVSF⒎ܕ w CBJMJXJDLνΣοΫෆඋʹΑΔΩϟογϡͱ͍͏࣮૷Λಥ͍ͨ߈ܸ
 3'$ҧ൓ͳͷͰमਖ਼Մೳ
  5. CBJMJXJDL w ௚༁ͰʮͳΘ͹Γʯ w ֤κʔϯʹ͸ͦΕͧΕͷʮͳΘ͹Γʯ͕ଘࡏ͢Δ w κʔϯͷݖҖαʔό͕ฦͨ͠ʮͳΘ͹ΓʯͰ͸ͳ͍Ԡ౴͸ Ωϟογϡͯ͠͸͍͚ͳ͍ w ਌κʔϯͷݖҖαʔό͕ฦͨ͠ɺࢠκʔϯͷͳΘ͹ΓͰ͋Δ

    Ԡ౴Λɺඞཁͳ৔߹Λআ͍ͯແࢹ͢Δ΂͖ 3'$  w ͋ΔκʔϯͷͳΘ͹ΓͰ͋Δ෦෼ΛʮJOCBJMJXJDLʯ
 ͳΘ͹ΓͰͳ͍෦෼ΛʮPVUPGCBJMJXJDLʯͱݺͿ
  6. CBJMJXJDL w ௚༁ͰʮͳΘ͹Γʯ w ֤κʔϯʹ͸ͦΕͧΕͷʮͳΘ͹Γʯ͕ଘࡏ͢Δ w κʔϯͷݖҖαʔό͕ฦͨ͠ʮͳΘ͹ΓʯͰ͸ͳ͍Ԡ౴͸ Ωϟογϡͯ͠͸͍͚ͳ͍ w ਌κʔϯͷݖҖαʔό͕ฦͨ͠ɺࢠκʔϯͷͳΘ͹ΓͰ͋Δ

    Ԡ౴Λɺඞཁͳ৔߹Λআ͍ͯແࢹ͢Δ΂͖ 3'$  w ͋ΔκʔϯͷͳΘ͹ΓͰ͋Δ෦෼ΛʮJOCBJMJXJDLʯ
 ͳΘ͹ΓͰͳ͍෦෼ΛʮPVUPGCBJMJXJDLʯͱݺͿ ˠྫ֎HMVFϨίʔυ ࠓճ͸ׂѪ %/4ಟೖΕରࡦͰ࠷΋ॏཁͳ֓೦
  7. ໰୊Ͳ͕͜CBJMJXJDLͩʁ JOCBJMJXJDL JOCBJMJXJDL JOCBJMJXJDL ˞͋͘·ͰྫͰ͋Γ࣮ࡍͷωʔϜαʔό͸͜͏͍͏Ԡ౴Ͱ͸ͳ͍ͷͰ஫ҙ ྫKQSTDPKQκʔϯͷݖҖαʔόʹΑΔݖҖԠ౴
 
 26&45*0/4&$5*0/
 XXXKQSTDPKQ*/"
 "/48&34&$5*0/


    XXXKQSTDPKQ*/"
 "65)03*5:4&$5*0/
 KQSTDPKQ*//4OTKQSTDPKQ
 "%%*5*0/"-4&$5*0/
 OTKQSTDPKQ*/"