際際滷

際際滷Share a Scribd company logo
INTRODUCTION   危 ろ磯 OT
 危
 轟朱 螻給 襦蠏碁 危
 ?
 World Wide Web(WWW, W3) 譴襷
 語 蠍磯 蟇磯語
  危瑚 螻, 企  伎襦 企 讌
 襷襦 郁屋
 誤磯血 HTTP 襦貊, 危狩ろ, HTML 煙  一危磯ゼ 蟲 °逢 覩誤蠍磯

< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet

< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet
 Internet 蠍磯朱 
 TCP/IP 襦貊 伎 覲企ゼ
譯手覦 貉危 ろ語
 轟 蠍磯蓋朱 HTTP 襦貊 伎
  危轟 伎 HTTP  讌
 ろ語 轟朱 誤 螻糾鴬 蠍磯 
 ex) SYN flooding
 -> 覿覿 轟 る讌  蟆

 螳 蟲語 蠍一牛伎 
 襦蠏語, 語
 語
 語 蟠 磯 旧
 蠏 旧
  蠍一
 貎
 
 豬曙
 貎,   -> るジ  豌
   蟠 詞
< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet

< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet
 HTTP 覃讌襯 豌襴
 Client蟆 Response襯 蟾
 豬曙
 襦貊 豌伎 豬曙
 轟覯 覲伎 れ 覈視 豬曙

< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet  伎襯 豌襴
   豌襴
 襦蠏碁 襦讌 れ願 螻
 -> 襷 豬曙 
 DB  るジ 覦煙 貉危語 
 豬曙
 襦蠏碁 襦讌 豌
  蟲朱 豬曙 
 蟆讀讌  螳 るジ 貉危語蟆
蟆 覦危讌 覈

 DB
 一危磯ゼ 豌願朱 ロ蠍  伎
 SQL 伎 DB 伎
 豬曙
 SQL injection
 DB襯 覲願碓 譟一
< 覯> < 危襴貅伎 覯> <一危磯伎>
<Server>

豢
<Client>
<> < 觚殊一>
Request
Response
Internet
朱 螻給 蟆
 ろ語 企
 Application / Transport / Network 螻豸 譴
 HTTP, DNS, TCP/IP, DHCP
 殊壱 蠍磯蓋 襴
 ろ語 襦蠏碁覦
 TCP/IP襯 伎 螳 襦蠏碁覦
  蠍磯蓋 讌
 襦語 蟯 : HTML, CSS, JavaScript
 覦煙 蟯 : PHP, SQL, (JAVA, python, ......)
 PHP螳  ..  危 覓語襦 譯 覲伎...
 誤, 語
 豺れ 觜豺  螳
 譯 一企 , 語
  豬曙螻 危 蠍磯
 危襴貅伎 讌  / 企殊伎誤 豸 旧 壱 / 語 覓企ロ / 語 蟯襴 螻糾鴬 / 蠏 旧 螻糾鴬 / 一危 レ 螻糾鴬 / 覦煙 貉危 螻糾鴬 / 襴貅伎 襦讌 螻糾鴬
/  螻糾鴬 : XSS / 蠍壱 螻糾鴬 / ......
 螻糾鴬 覦覯襦 磯ジ れ
 れ  伎襯 螻糾鴬 朱 谿 磯 れ
  螻糾鴬 覦れ   れ 危轟 蠍  襴
蟲

Recommended

Windows reversing study_basic_8
Windows reversing study_basic_8
J J
Linux reversing study_basic_3
Linux reversing study_basic_3
J J
System+os study 1
System+os study 1
J J
Windows reversing study_basic_9
Windows reversing study_basic_9
J J
Pwnable study basic_2
Pwnable study basic_2
J J
System+os study 3
System+os study 3
J J
System+os study 7
System+os study 7
J J
Assembly ろ磯 1
Assembly ろ磯 1
J J
Linux reversing study_basic_4
Linux reversing study_basic_4
J J
Pwnable study basic_1
Pwnable study basic_1
J J
Windows reversing study_basic_6
Windows reversing study_basic_6
J J
System+os study 5
System+os study 5
J J
Windows reversing study_basic_5
Windows reversing study_basic_5
J J
Windows reversing study_basic_7
Windows reversing study_basic_7
J J
Pwnable study basic_3
Pwnable study basic_3
J J
Assembly ろ磯 2
Assembly ろ磯 2
J J
Windows reversing study_basic_3
Windows reversing study_basic_3
J J
Windows reversing study_basic_4
Windows reversing study_basic_4
J J
Windows reversing study_basic_2
Windows reversing study_basic_2
J J
System+os study 6
System+os study 6
J J
Linux reversing study_basic_2
Linux reversing study_basic_2
J J
結 Apache avro
結 Apache avro
ル旭 豕
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
ル旭 豕
2016 hack festival igrus
2016 hack festival igrus
Jinookawk
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
Tae Young Lee
Avro 譟一
Avro 譟一
= ≡ =梶 C
= ≡ =梶 C
Heesuk Kang
Web hacking 螳
Web hacking 螳
Jongseok Choi
悌メ戟估過估メ估估=.沿沿岳恰
悌メ戟估過估メ估估=.沿沿岳恰
dalonn

More Related Content

What's hot (20)

Linux reversing study_basic_4
Linux reversing study_basic_4
J J
Pwnable study basic_1
Pwnable study basic_1
J J
Windows reversing study_basic_6
Windows reversing study_basic_6
J J
System+os study 5
System+os study 5
J J
Windows reversing study_basic_5
Windows reversing study_basic_5
J J
Windows reversing study_basic_7
Windows reversing study_basic_7
J J
Pwnable study basic_3
Pwnable study basic_3
J J
Assembly ろ磯 2
Assembly ろ磯 2
J J
Windows reversing study_basic_3
Windows reversing study_basic_3
J J
Windows reversing study_basic_4
Windows reversing study_basic_4
J J
Windows reversing study_basic_2
Windows reversing study_basic_2
J J
System+os study 6
System+os study 6
J J
Linux reversing study_basic_2
Linux reversing study_basic_2
J J
結 Apache avro
結 Apache avro
ル旭 豕
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
ル旭 豕
2016 hack festival igrus
2016 hack festival igrus
Jinookawk
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
Tae Young Lee
Avro 譟一
Avro 譟一
= ≡ =梶 C
= ≡ =梶 C
Heesuk Kang
Linux reversing study_basic_4
Linux reversing study_basic_4
J J
Pwnable study basic_1
Pwnable study basic_1
J J
Windows reversing study_basic_6
Windows reversing study_basic_6
J J
System+os study 5
System+os study 5
J J
Windows reversing study_basic_5
Windows reversing study_basic_5
J J
Windows reversing study_basic_7
Windows reversing study_basic_7
J J
Pwnable study basic_3
Pwnable study basic_3
J J
Assembly ろ磯 2
Assembly ろ磯 2
J J
Windows reversing study_basic_3
Windows reversing study_basic_3
J J
Windows reversing study_basic_4
Windows reversing study_basic_4
J J
Windows reversing study_basic_2
Windows reversing study_basic_2
J J
System+os study 6
System+os study 6
J J
Linux reversing study_basic_2
Linux reversing study_basic_2
J J
結 Apache avro
結 Apache avro
ル旭 豕
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
れ讌 讌譯, Winsock API - WSAPoll, Fast Loopback
ル旭 豕
2016 hack festival igrus
2016 hack festival igrus
Jinookawk
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
2016317 伎蠍一_伎_れれ覿_Jupyter襯殊伎襦蠏碁覦_危
Tae Young Lee
Avro 譟一
Avro 譟一
= ≡ =梶 C
= ≡ =梶 C
Heesuk Kang

Similar to Web hacking introduction (20)

Web hacking 螳
Web hacking 螳
Jongseok Choi
悌メ戟估過估メ估估=.沿沿岳恰
悌メ戟估過估メ估估=.沿沿岳恰
dalonn
web study 1day
web study 1day
Web2.0 guide by_twlog
Web2.0 guide by_twlog
twdanny
Web vulnerability seminar2
Web vulnerability seminar2
Sakuya Izayoi
轟 讌燕 蠍一
轟 讌燕 蠍一
轟 讌燕 蠍一
轟 讌燕 蠍一
JungHyuk Kwon
濠鍵 危 (襦語 蠍一)
濠鍵 危 (襦語 蠍一)
JoonHee Lee
覯 螳覦螳 蠍 豌 蟇語
覯 螳覦螳 蠍 豌 蟇語
nexusz99
Owasp
Owasp
hyeok gyu Kwon
求 = 衣午≡= 求梶 梶
求 = 衣午≡= 求梶 梶
2015 2 襴 伎擦 碁碁 - 覯 螳覦螳 蠍 豌蟇語 (25蠍 譟一煙)
2015 2 襴 伎擦 碁碁 - 覯 螳覦螳 蠍 豌蟇語 (25蠍 譟一煙)
khuhacker
1 WEB UI Overview
1 WEB UI Overview
Web App Security 2015.10
Web App Security 2015.10
Chanjin Park
Web2.0 蠍一 覦 web 覲伎 豬曙 覿
Web2.0 蠍一 覦 web 覲伎 豬曙 覿
nam kwangjin
Under attack - web
Under attack - web
Wonjun Hwang
[D2 campus seminar]≡== == = =求a
[D2 campus seminar]≡== == = =求a
NAVER D2
Basic of web ref.轟讌燕蠍一_01
Basic of web ref.轟讌燕蠍一_01
SangHun Lee
煙 螳覦, 蠍煙 蠍壱
煙 螳覦, 蠍煙 蠍壱
Yongho Ha
[113]LINExNAVER 螳覦 覲伎 豬曙 伎手鍵
[113]LINExNAVER 螳覦 覲伎 豬曙 伎手鍵
NAVER D2
悌メ戟估過估メ估估=.沿沿岳恰
悌メ戟估過估メ估估=.沿沿岳恰
dalonn
web study 1day
web study 1day
Web2.0 guide by_twlog
Web2.0 guide by_twlog
twdanny
Web vulnerability seminar2
Web vulnerability seminar2
Sakuya Izayoi
轟 讌燕 蠍一
轟 讌燕 蠍一
轟 讌燕 蠍一
轟 讌燕 蠍一
JungHyuk Kwon
濠鍵 危 (襦語 蠍一)
濠鍵 危 (襦語 蠍一)
JoonHee Lee
覯 螳覦螳 蠍 豌 蟇語
覯 螳覦螳 蠍 豌 蟇語
nexusz99
求 = 衣午≡= 求梶 梶
求 = 衣午≡= 求梶 梶
2015 2 襴 伎擦 碁碁 - 覯 螳覦螳 蠍 豌蟇語 (25蠍 譟一煙)
2015 2 襴 伎擦 碁碁 - 覯 螳覦螳 蠍 豌蟇語 (25蠍 譟一煙)
khuhacker
1 WEB UI Overview
1 WEB UI Overview
Web App Security 2015.10
Web App Security 2015.10
Chanjin Park
Web2.0 蠍一 覦 web 覲伎 豬曙 覿
Web2.0 蠍一 覦 web 覲伎 豬曙 覿
nam kwangjin
Under attack - web
Under attack - web
Wonjun Hwang
[D2 campus seminar]≡== == = =求a
[D2 campus seminar]≡== == = =求a
NAVER D2
Basic of web ref.轟讌燕蠍一_01
Basic of web ref.轟讌燕蠍一_01
SangHun Lee
煙 螳覦, 蠍煙 蠍壱
煙 螳覦, 蠍煙 蠍壱
Yongho Ha
[113]LINExNAVER 螳覦 覲伎 豬曙 伎手鍵
[113]LINExNAVER 螳覦 覲伎 豬曙 伎手鍵
NAVER D2

More from J J (6)

伎擦螳 螻 苦 蟆... 覲企慨 覓瑚骸 蠍 谿剰鍵
伎擦螳 螻 苦 蟆... 覲企慨 覓瑚骸 蠍 谿剰鍵
J J
Linux reversing study_basic_1
Linux reversing study_basic_1
J J
Python
Python
J J
System+os study 4
System+os study 4
J J
System+os study 2
System+os study 2
J J
Windows reversing study_basic_1
Windows reversing study_basic_1
J J
伎擦螳 螻 苦 蟆... 覲企慨 覓瑚骸 蠍 谿剰鍵
伎擦螳 螻 苦 蟆... 覲企慨 覓瑚骸 蠍 谿剰鍵
J J
Linux reversing study_basic_1
Linux reversing study_basic_1
J J
Python
Python
J J
System+os study 4
System+os study 4
J J
System+os study 2
System+os study 2
J J
Windows reversing study_basic_1
Windows reversing study_basic_1
J J

Web hacking introduction

  • 1. INTRODUCTION 危 ろ磯 OT
  • 2. 危 轟朱 螻給 襦蠏碁 危 ? World Wide Web(WWW, W3) 譴襷 語 蠍磯 蟇磯語 危瑚 螻, 企 伎襦 企 讌 襷襦 郁屋 誤磯血 HTTP 襦貊, 危狩ろ, HTML 煙 一危磯ゼ 蟲 °逢 覩誤蠍磯
  • 3. < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet
  • 4. < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet Internet 蠍磯朱 TCP/IP 襦貊 伎 覲企ゼ 譯手覦 貉危 ろ語 轟 蠍磯蓋朱 HTTP 襦貊 伎 危轟 伎 HTTP 讌 ろ語 轟朱 誤 螻糾鴬 蠍磯 ex) SYN flooding -> 覿覿 轟 る讌 蟆
  • 5. 螳 蟲語 蠍一牛伎 襦蠏語, 語 語 語 蟠 磯 旧 蠏 旧 蠍一 貎 豬曙 貎, -> るジ 豌 蟠 詞 < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet
  • 6. < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet HTTP 覃讌襯 豌襴 Client蟆 Response襯 蟾 豬曙 襦貊 豌伎 豬曙 轟覯 覲伎 れ 覈視 豬曙
  • 7. < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet 伎襯 豌襴 豌襴 襦蠏碁 襦讌 れ願 螻 -> 襷 豬曙 DB るジ 覦煙 貉危語 豬曙 襦蠏碁 襦讌 豌 蟲朱 豬曙 蟆讀讌 螳 るジ 貉危語蟆 蟆 覦危讌 覈
  • 8. DB 一危磯ゼ 豌願朱 ロ蠍 伎 SQL 伎 DB 伎 豬曙 SQL injection DB襯 覲願碓 譟一 < 覯> < 危襴貅伎 覯> <一危磯伎> <Server> 豢 <Client> <> < 觚殊一> Request Response Internet
  • 9. 朱 螻給 蟆 ろ語 企 Application / Transport / Network 螻豸 譴 HTTP, DNS, TCP/IP, DHCP 殊壱 蠍磯蓋 襴 ろ語 襦蠏碁覦 TCP/IP襯 伎 螳 襦蠏碁覦 蠍磯蓋 讌 襦語 蟯 : HTML, CSS, JavaScript 覦煙 蟯 : PHP, SQL, (JAVA, python, ......) PHP螳 .. 危 覓語襦 譯 覲伎... 誤, 語 豺れ 觜豺 螳 譯 一企 , 語 豬曙螻 危 蠍磯 危襴貅伎 讌 / 企殊伎誤 豸 旧 壱 / 語 覓企ロ / 語 蟯襴 螻糾鴬 / 蠏 旧 螻糾鴬 / 一危 レ 螻糾鴬 / 覦煙 貉危 螻糾鴬 / 襴貅伎 襦讌 螻糾鴬 / 螻糾鴬 : XSS / 蠍壱 螻糾鴬 / ...... 螻糾鴬 覦覯襦 磯ジ れ れ 伎襯 螻糾鴬 朱 谿 磯 れ 螻糾鴬 覦れ れ 危轟 蠍 襴
  • 10.