{"version":"1.0","author_url":"https://blog.hatena.ne.jp/ThisIsOne/","published":"2025-06-22 17:09:29","type":"rich","provider_url":"https://hatena.blog","width":"100%","image_url":null,"blog_url":"https://cysec148.hatenablog.com/","blog_title":"Shikata Ga Nai","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F06%2F22%2F170929\" title=\"\u7b2c31\u56de\uff1a\u5165\u529b\u30d5\u30a9\u30fc\u30e0\u3084\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306b\u6ce8\u76ee\u3057\u3088\u3046 - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_name":"Hatena Blog","height":"190","categories":["Bug Bounty"],"author_name":"ThisIsOne","url":"https://cysec148.hatenablog.com/entry/2025/06/22/170929","description":"Hello there, ('\u03c9')\u30ce 1. \u5165\u529b\u30d5\u30a9\u30fc\u30e0\u304c\u72d9\u308f\u308c\u3084\u3059\u3044\u7406\u7531 \u89b3\u70b9 \u5185\u5bb9 \u81ea\u7531\u5ea6 \u30c6\u30ad\u30b9\u30c8\u30fb\u6570\u5024\u30fb\u30d5\u30a1\u30a4\u30eb\u30fbURL \u306a\u3069\u591a\u69d8\u306a\u5165\u529b\u3092\u53d7\u3051\u53d6\u308b \u30b3\u30fc\u30c9\u5bc6\u5ea6 \u30d0\u30ea\u30c7\u30fc\u30b7\u30e7\u30f3\u3001DB \u66f8\u304d\u8fbc\u307f\u3001\u30e1\u30fc\u30eb\u9001\u4fe1\u306a\u3069\u51e6\u7406\u304c\u8907\u6570\u7d61\u3080 \u300c\u52d5\u304f\u304b\u3089OK\u300d\u601d\u8003 \u30e6\u30fc\u30b6\u30c6\u30b9\u30c8\u306f\u901a\u308b\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30b9\u30c8\u306f\u5f8c\u56de\u3057\u306b\u306a\u308a\u304c\u3061 \u201c\u8868\u793a\u306f\u554f\u984c\u306a\u304f\u3066\u3082\u88cf\u5074\u306f\u7a74\u3060\u3089\u3051\u201d\u2015\u2015\u30d5\u30a9\u30fc\u30e0\u3067\u306f\u65e5\u5e38\u8336\u98ef\u4e8b\u3067\u3059\u3002 2. \u4ee3\u8868\u7684\u306a\u30d5\u30a9\u30fc\u30e0\u7cfb\u8106\u5f31\u6027\u3068\u30c6\u30b9\u30c8\u4f8b \u8106\u5f31\u6027 \u7c21\u6613 PoC \u5f71\u97ff XSS\uff08\u53cd\u5c04\u578b\uff09 \u691c\u7d22\u6b04\u306b <script>alert(1)</script> \u76d7\u7528 Cookie \u2192 \u30bb\u30c3\u30b7\u30e7\u30f3\u4e57\u3063\u53d6\u308a SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3 \u2026","title":"\u7b2c31\u56de\uff1a\u5165\u529b\u30d5\u30a9\u30fc\u30e0\u3084\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306b\u6ce8\u76ee\u3057\u3088\u3046"}