luyikei ã§ããä»é ã«ãªã£ã¦åå å ±åã§ã… å¤ã«æ¸ããã¾ãããªææ³ãã¢ãããã¾ããå°ã夿´ãå ãã¦ãã¾ããå®é使ã£ãæè¡ã«ã¤ãã¦ã®è©³ããè¨äºã¯å¾ã
å
¬éãã¾ã
äºåå¦ç¿ã¯çµæ§ããã¼ã§å¯åº¦ã®æ¿ããã®ã ã£ããã·ã¹ãã ã³ã¼ã«ãªã©ãç´æ¥å©ç¨ããããã°ã©ãã³ã°ããããã¨ããªãã£ãã®ã§è¦æ¦ãããçµæçã«é常ã«ããã«ãªã£ãä¸ã«ã楽ãããã¨æãã
1æ¥ç® é½å
ã«ä½ãã§ããã®ã§æèµ·ãã¦ããã«åºçºããããã¯ã 1æ¥ç®ãªã®ã§ããç¨åº¦ã¯ç·å¼µããããããã¤ãã³ãé¢é£ã§ã¯ç§ã®ä¸ã§ã¯ããã¾ã§ç·å¼µãã¦ããªãæ¹ã«å
¥ãããããããåãããã«å¿ãã¦æ¥ã人ãã¡ã§éã¾ã£ã¦ãã¦ãäºåå¦ç¿ãªã©ã§çµæ§ãã§ã«ãäºãã®ãã¨ãªã©ãç¥ã£ã¦ããããã§ãããå®éç§ã¯ã»ãã¥ãªãã£ãã£ã³ãã§æ³å以ä¸ã®è¦ªäº¤ãä½ããã 1 æ¥ç®ã¯å
¨ä½è¬ç¾©ãä¸å¿ã ã£ãããã®è¬ç¾©ãåºæ¿çã§ããã¾ã§ã»ãã¥ãªãã£ã«çãç§ã«ã¨ã£ã¦ã¯ã»ãã¥ãªãã£ã¨ããè¨èãåºãæå³ãæã¤ãã®ã ã¨æãç¥ããããã1 æ¥ç®ã«ãããã£ãå
¨ä½è¬ç¾©ãè¨ãããã¨ã¯é常ã«è¯ããã¨ã ã¨æã£ãã ã空ãæéãé£äºã®æéã§åéã¨ã®äº¤æµãé常ã«éè¦ã ãä»ããæãã¨å°ãèªåã¯ã·ã£ã¤ã ã£ãã¨æãããç©ã¿éãªã£ãååºãè¦ãã¨ãããã»ã©æ²¢å±±ã®äººãå±
ããã ãªã¨æã£ãã
2æ¥ç® å°éè¬ç¾©ã¨ BoF ãã¡ã¤ã³ã ã£ããå°éè¬ç¾©ã¯åºæ¬çã«ç§ã®å¥½ã㪠Qt ã使ã£ã¦éçºããã®ã§ãããã»ãã¥ãªãã£ãã£ã³ãã§ã¯æ®æ®µä½¿ããªãä½ã¬ã¤ã¤ã¼ãªæ©è½ã使ããæ²¼ã«ã¯ã¾ã£ã¦ããããã§ãã£ããï¼ä¾ãã°ã·ã¹ãã ã³ã¼ã«ãªã©ã§ãããï¼ãã¨ã¯ããç§ãä¸è¦ãããä¸å¿«ã«æã£ã¦ããããã«ä»ã®äººã¯è¦ããããããªãããæ¬å¿ã§ã¯ãã¤ãé«ã¬ã¤ã¤ã¼ã§éçºãããã³ããªåãã¦ããã®ã§ãã®ä½ã¬ã¤ã¤ã¼ãªãµã³ãããã¯ã¹æ²¼ãæè¿ãã大ãã«æ¥½ããã ãç¹ã« seccomp-bpf ã使ç¨ãããµã³ãããã¯ã¹ã«æåããæããã®ãããæåããã®ãä»ã§ãè¦ãã¦ããã BoF ã¯å¤å½äººã®æ¹ã®è¬ç¾©ãè´ãããè¬ç¾©ã¯è±èªã ã£ããã§ããã ãè´ãã¨ããã¨åªåããã主ã«ã»ãã¥ãªãã£é¢é£ã®ä¼ç¤¾ã§åãã¦ãæã«ééããé¢ç½ãã»ãã¥ãªãã£ã®ã¤ã³ã·ãã³ãã®è©±ã§ããããã®è¬ç¾©ã§å§ãã¦ã»ãã¥ãªãã£ã®ä»äºã«é
åãæãããããã®åå 追跡ã®è½åãåæåã«ã¯å§åããããããã»ã©åºæ¿ã«ãªãçºè¡¨ãå°ãªãã ããã
3 æ¥ç® å°éè¬ç¾©ã¨ã°ã«ã¼ãã¯ã¼ã¯ãã¡ã¤ã³ãå°éè¬ç¾©ã¯åããä½ã¬ã¤ã¤ã¼ã®ä¸çã§æ¥½ããã§ããã主ã«ãã£ã¦ããã®ã¯èªåã§éçºãã¦ãã«ãããã»ã¹ã®ãã©ã¦ã¶ã¼ã§ãµã³ãããã¯ã¹åããã¨ãããã¨ã Qt ã®ãã°ã«ééãå°ãå°æãããããããããçµé¨ã«ãªã£ãã¨æããçµæçã«å½åã®æ³å®ããã鲿ãåºããã®ã§é常ã«è¯ãã£ãããã®é ã«ãªã£ã¦ã»ãã¥ãªãã£ãã£ã³ãã«æ
£ãã¯ãããå±
å¿å°ãããªã£ã¦ãããã°ã«ã¼ãã¯ã¼ã¯ã¯å
¨ããã¼ããæãã¤ããçµå±å
¨ã°ã«ã¼ãã®ä¸çªæå¾ãããã«æ±ºã¾ã£ãã®ã«ãé¢ãããããã»ãã¥ã¢ãªè²æ¯ãã«ãªã£ã¦ãã¾ã£ããçµå±ãããã©ãçºè¡¨ã«ä»ä¸ãããã§è²ã
ã¨è¦å´ãããéã«ããã§ã°ã«ã¼ãã«ä¸ä½æãçã¾ããã
4æ¥ç® CTF ãã¡ã¤ã³ã妨害ã³ã³ãã³ãã¯èªåã«ã¨ã£ã¦ã¯è¾ãã£ãããããããèªåã«è§£ããåé¡ããã£ããã¨ãæå¤ã ã£ãã SQL ã¤ã³ã¸ã§ã¯ã·ã§ã³ã¯çµå±ã¯è§£ããªãã£ãããã¡ã¤ã«ã®ä¸èº«ãè¦ããæ®µéã¾ã§è³ããã®ã¯èªåã§ãé©ããããã¡ããç§ã®ããã« CTF ã®åé¡ã«ã«ç´æ¥çã«å¿ç¨ã§ãããããªæè¡ãã¿ããªãå¦ãã§ããããã§ã¯ãªãã®ã§ããç¨åº¦é£æåº¦ãä½ããã¦ãããã¨ããããããCTF ã«èå³ããããã/æã¤ã¨ããç¹ã§ããã¨æã£ããç§ãæã£ãã®ã¯ CTF ã¯ç¢ºãã«ç¥èãéè¦ã ããã以ä¸ã«æ¤ç´¢è½åãåããã¦ããã¨ããç¹ã ãããããªãã¦ãã¡ããã¨èª¿ã¹ãã°è§£ããå¯è½æ§ãããã®ã§éå¸¸ã«æ¥½ãããã
5æ¥ç® ææçºè¡¨ãã¡ã¤ã³ãã°ã«ã¼ãã¯ã¼ã¯ã®çºè¡¨ã¯ã©ã®ã°ã«ã¼ããç¬åµçã§ããã£ããç§éã®ã°ã«ã¼ãã¯ãã»ãã¥ã¢ãªè²æ¯ãã¨ãããããããªããã¼ãã ã£ãããã¾ãå
容ãä½ããããã¨æããã¾ããã»ãã®ã¯ã©ã¹ã®ææçºè¡¨ã§åãã¦ä»ã®ã¯ã©ã¹ããã4æ¥éã§ä½ããã£ã¦ãããã¨ããã®ãããã£ããã»ãã®ã¯ã©ã¹ã¯æåã¯èå³ããªãã£ããçºè¡¨ãè´ãã¦å°ãèå³ãåºããçµæçã«å®¶ã«å¸°ã£ãå¾ãè¬ç¾©è³æãè¦ãªããå°ãä»ã®ã¯ã©ã¹ã®å
容ãèªåã§è»½ãç¬å¦ããã5æ¥éã§åéã¨ã仲è¯ããªããè¬å¸«ããã¥ã¼ã¿ã¼ã¨ã坿¥ãªé¢ä¿ãä½ãããããã5æ¥ç®ã§åæ®æããææ
ãå¼ãç«ã¦ããã¨ã¨ãªã£ãã®ã ããããã¯ä»å¾ã®ã¢ããã¼ã·ã§ã³ã¨ãªãããã«ï¼åéãé å¼µã£ã¦ããããèªåãé å¼µããã°ï¼è¬å¸«ã®ãããªæè¡åãã¤ãããï¼ã¨ãã£ããããªï¼åªåãç¶ãããã
ã¾ã¨ã  äºåå¦ç¿ãå«ãé常ã«ããçµé¨ã«ãªã£ãããã¡ããæè¡çã«åãã¤ããã®å½ç¶ã ããä½ããã親交ãä½ãããã¨ããããã¢ããã¼ã·ã§ã³ã«ãªã£ããã¨ãã¾ããã³ããªåãã¦ããããã°ã©ãã³ã°ã®æ°ããªæ¥½ãã¿æ¹ãç¥ããã¨ãã§ãããã¨ãªã©ãã©ããæ®éã«å®¶ã§åå¼·ãã¦ããã ãã§ã¯æã«å
¥ãããã¨ãã§ããªãè²´éãªãã®ã ã宿çã«ãããã£ãã¤ãã³ãã«åå ãã交æµãã大åããç¥ã£ã¦ããã£ãã¨æãã ã¾ããç§ãå人çã«æã£ãã®ã¯è¬ç¾©è³æã¨ãã¯ç¡æã§é
å¸ãã¦ã¯ãããªãããèªåã§ã¤ããç¥èã¯åºãããã¨ã許ãããã®ã§ãã²æ
å ±ãçºä¿¡ãã¦ããããã¨æã£ãããªããªããã®ã»ãã¥ãªãã£ã¨ããåéã¯æ
å ±ãå°ãªããç§ãåå ããåã¾ã§ã¯ããããããªãã£ãã®ã§ãã§ããã ãçããã«éè¦æ§ã楽ãããç¥ã£ã¦ãããããããã§ããããã»ãã¥ã¢ãªè²æ¯ãã®ãããªç°¡åãªå©ã話ã¨ãã§ããæ¬æ ¼çãªæè¡ã§ãã©ããªå½¢ã§ãããã®ã§æ
å ±ãç©æ¥µçã«çºä¿¡ãã¦ããããã¨æã£ãã æå¾ã«ãè¬å¸«ã®çããããã¥ã¼ã¿ã¼ã®çãããåéã®çãããéå¶ã¹ã¿ããã®çããæ¬å½ã«ãããã¨ããããã¾ãããã¾ããã»ãã¥ãªãã£ãã£ã³ãã«å¿åãããè¿·ã£ã¦ãã人ã¯è¿·ããå¿åãã¦ãã ããï¼çµ¶å¯¾ããåºæ¿ãã¢ããã¼ã·ã§ã³ã«ãªãã¯ãã§ãï¼ã»ãã¥ãªãã£ãã£ã³ãã¯å人çã«ã¯ 5å² ãããã¯äººã¨ã®äº¤æµãéãã¦ããã¨æãã¾ãããããéå¸¸ã«æ¥½ããéè¦ãªã®ã§ãã