| layout | title | level | type | tags | pitch |
|---|---|---|---|---|---|
col-sidebar |
OWASP Top 10 Risks for Open Source Software |
2 |
documentation |
top-10, open source, security, operations |
Top-10 security and operational risks related to using OSS. |
Yosuke HASEGAWA hasegawayosuke
hasegawayosuke
/ shika-2.js
Created
August 10, 2024 02:27
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // https://x.com/Awed_Urshy/status/1821112609799913615 | |
| しか="しかのこたん" | |
| しかのこ=-~しか+-~しか,のこのこ=しか==しか,こし=/たんたん/ | |
| しかしか={しか}+しか,[たん,たん]=[しかしか, | |
| しかしか[しかのこ+-~しかのこ]+しかしか[~-しかのこ]+(しかしか[しか]+しか)[~-しかのこ]+ | |
| (!のこのこ+しかしか)[~-しかのこ+しかのこ]+(のこのこ+しかしか)[しかのこ^しかのこ]+ | |
| (のこのこ+しかしか)[~-しかのこ]+(のこのこ+しかしか)[しかのこ]+しかしか[しかのこ+-~しかのこ]+ | |
| (のこのこ+しかしか)[しかのこ^しかのこ]+しかしか[~-しかのこ]+(のこのこ+しかしか)[~-しかのこ]] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // シカ色ジェイエス | |
| ぬん=! | |
| "しか"+"のこ",のこ="のこ",こし={"た":"ん"}["たん"]+"！" | |
| しか={のこ}+"のこ",のこ=-~こし|"たん",たん=!""+"！" | |
| しかのこ=のこ+のこ | |
| たんたん=のこ-のこ | |
| しかしか=しか[のこ+しかのこ+しかのこ]+しか[のこ]+こし[のこ] |
hasegawayosuke
/ www-project-open-source-software-top-10 index.md
Last active
May 17, 2024 03:28
hasegawayosuke
/ winget-mklinks.bat
Created
January 5, 2024 06:11
wingetでインストールされたバイナリへのハードリンクを %HOMEDRIVE%%HOMEPATH%\bin\ に作成する
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| @echo off | |
| for /R %LOCALAPPDATA%\Microsoft\WinGet\Packages %%x in (*.exe) do ( | |
| if exist %HOMEDRIVE%%HOMEPATH%\bin\%%~nxx del %HOMEDRIVE%%HOMEPATH%\bin\%%~nxx | |
| mklink /H %HOMEDRIVE%%HOMEPATH%\bin\%%~nxx %%x | |
| ) |
hasegawayosuke
/ tng41-ssrf-demo.js
Created
February 23, 2023 11:14
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // SSRF保護の実装サンプル | |
| // (これでも漏れがあるかも) | |
| 'use strict' | |
| const os = require('os') | |
| const net = require('net') | |
| const dns = require('dns') | |
| const http = require('http') | |
| const https = require('https') | |
| const myFetch = (url) => { |
hasegawayosuke
/ async_rex.js
Created
February 23, 2022 08:27
Asynchronous RegExp for node.js with termination
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| const { Worker, isMainThread, workerData, parentPort } = require('worker_threads') | |
| if (isMainThread) { | |
| class AsyncRex { | |
| constructor (pattern, flags) { | |
| if (pattern instanceof RegExp) { | |
| this.source = pattern.source | |
| this.flags = pattern.flags | |
| } else if (typeof pattern === 'string') { | |
| this.source = pattern |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // access to http://localhost:3000?n=65536 | |
| const http = require('http') | |
| const {URL} = require('url') | |
| const {Worker} = require('worker_threads') | |
| const rex = /\s+$/ | |
| const sleep = ms => new Promise(resolve => setTimeout(resolve, ms)) |
この文書は https://github.com/OWASP/Top10/blob/master/2021/docs/index.md の前半を @hasegawayosuke が私的に訳したものです。正確性には欠けますので取扱いには自身で注意してください。
最新のOWASP TOP 10へようこそ! OWASP TOP 10 2021は新しいグラフィックデザイン、印刷もできる1ページのインフォグラフィックの全てが刷新されたものです。
この更新作業に時間とデータを提供してくれた全ての人に心から感謝いたします。あなたがいなければこの成果は出せませんでした。 ** ありがとうございます。 **
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| const got = require('got') | |
| const myGot = async (url) => { | |
| const instance = got.extend({ | |
| hooks: { | |
| beforeRequest: [ | |
| options => { | |
| options.headers.Host = (new URL(url)).hostname | |
| options.port = 8888 | |
| options.hostname = '127.0.0.1' | |
| options.url = url |
hasegawayosuke
/ index.js
Last active
June 3, 2020 09:42
インターネット側から自宅のネットワーク(IPv6)へのアクセスがきちんとファイアウォールで遮断されているかを確認するための補助スクリプト
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /* インターネット側から自宅のネットワーク(IPv6)へのアクセスがきちんとファイアウォールで遮断されているかを確認するためのスクリプト | |
| * | |
| * 1. 自PCのIPv6アドレスを列挙する | |
| * 2. そのIPアドレスでlistenしたHTTPサーバーが起動される | |
| * 3. そのサーバーのURLはQRコードとして表示される | |
| * 4. スマホなどでWi-Fiではなくキャリア回線を通じて3.のQRコードにアクセスすることで疎通が確認できる | |
| * | |
| * node.js をインストールした環境で `node index.js` するだけ。あとは画面の指示に従ってスマホ等でアクセスする。 | |
| */ |
NewerOlder