vaddyの仕組み2016 vaddyミートアップvol3_20160629
TRANSCRIPT
Copyright (c) Bitforest Co., Ltd.
VAddy 2016Web VAddy
1
2016/6/29VAddy Vol.3
Copyright (c) Bitforest Co., Ltd.
• 3 API
• Proxy (
• Scan (
• , WebAPI (
2
Copyright (c) Bitforest Co., Ltd.
•
•
•
• HTTP
•
• DB
3
Copyright (c) Bitforest Co., Ltd.
• http://example.com/show?id=1&name=foo• id=1’&name=foo• id=abs(“1”)&name=foo• id=1&name=foo’• id=1&name=abs(“1”)
4
HTTP
Copyright (c) Bitforest Co., Ltd.
• POST http://example.com/edit• id=1’&name=foo• {id=‘abs(“1”)’ , name=‘foo’} //JSON
5
JSON
Copyright (c) Bitforest Co., Ltd.
• URL
• SQL
• XSS•
•
•
6
Copyright (c) Bitforest Co., Ltd.7 @vaddynet