{"id":920,"date":"2024-04-29T12:39:00","date_gmt":"2024-04-29T03:39:00","guid":{"rendered":"https:\/\/emeth.jp\/diary\/?p=920"},"modified":"2024-08-10T14:33:05","modified_gmt":"2024-08-10T05:33:05","slug":"zansin-mini-hardening-v4","status":"publish","type":"post","link":"https:\/\/emeth.jp\/diary\/2024\/04\/zansin-mini-hardening-v4\/","title":{"rendered":"ZANSIN\u3092\u4f7f\u3063\u3066\u304a\u3046\u3061\u3067MINI Hardening v4\u3092\u697d\u3057\u3082\u3046"},"content":{"rendered":"\n<p>Black Hat Asia 2024 Arsenal\u3067MINI Hardening\u306e\u65b9\u3005\u306b\u3088\u308bZANSIN\u304c\u516c\u958b\u3055\u308c\u305f\u3002<\/p>\n\n\n<div class=\"wp-block-su-blogcard\">\n\t<article class=\"wp-blogcard\" cite=\"https:\/\/www.blackhat.com\/asia-24\/arsenal\/schedule\/index.html#zansin-37245\">\n\t\t<a\n\t\t\thref=\"https:\/\/www.blackhat.com\/asia-24\/arsenal\/schedule\/index.html#zansin-37245\"\n\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\t\t\t\t\t\trel=\"noopener noreferrer nofollow\"\n\t\t\t\t\t\tclass=\"wp-blogcard-item\"\n\t\t>\n\t\t\t\t\t\t<div class=\"wp-blogcard-content\">\n\t\t\t\t<div class=\"wp-blogcard-title\"><\/div>\n\t\t\t\t<div class=\"wp-blogcard-description\"><\/div>\n\t\t\t\t<div class=\"wp-blogcard-cite\">\n\t\t\t\t\t\t\t\t\t\t\t<img\n\t\t\t\t\t\t\tclass=\"wp-blogcard-favicon\"\n\t\t\t\t\t\t\tsrc=\"https:\/\/www.google.com\/s2\/favicons?domain=www.blackhat.com&#038;sz=16\"\n\t\t\t\t\t\t\talt=\"\"\n\t\t\t\t\t\t\taria-hidden=\"true\"\n\t\t\t\t\t\t\/>\n\t\t\t\t\t\t\t\t\t\t<div class=\"wp-blogcard-domain\">www.blackhat.com<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/a>\n\t<\/article>\n<\/div>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">I&#39;m joining Black Hat Asia 2024.<br>We talk a tool called \u201cZANSIN\u201d in ARSENAL.<br>Please check out the our tool !<a href=\"https:\/\/t.co\/y0yC3CWhU5\">https:\/\/t.co\/y0yC3CWhU5<\/a><a href=\"https:\/\/twitter.com\/hashtag\/BHASIA?src=hash&amp;ref_src=twsrc%5Etfw\">#BHASIA<\/a><\/p>&mdash; \u3068\u3042\u308b\u8a3a\u65ad\u54e1 (@tigerszk) <a href=\"https:\/\/twitter.com\/tigerszk\/status\/1780826500243292234?ref_src=twsrc%5Etfw\">April 18, 2024<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n<div class=\"wp-block-su-blogcard\">\n\t<article class=\"wp-blogcard\" cite=\"https:\/\/github.com\/ZANSIN-sec\/ZANSIN\">\n\t\t<a\n\t\t\thref=\"https:\/\/github.com\/ZANSIN-sec\/ZANSIN\"\n\t\t\t\t\t\t\ttarget=\"_blank\"\n\t\t\t\t\t\t\t\t\t\trel=\"noopener noreferrer nofollow\"\n\t\t\t\t\t\tclass=\"wp-blogcard-item\"\n\t\t>\n\t\t\t\t\t\t<div class=\"wp-blogcard-content\">\n\t\t\t\t<div class=\"wp-blogcard-title\"><\/div>\n\t\t\t\t<div class=\"wp-blogcard-description\"><\/div>\n\t\t\t\t<div class=\"wp-blogcard-cite\">\n\t\t\t\t\t\t\t\t\t\t\t<img\n\t\t\t\t\t\t\tclass=\"wp-blogcard-favicon\"\n\t\t\t\t\t\t\tsrc=\"https:\/\/www.google.com\/s2\/favicons?domain=github.com&#038;sz=16\"\n\t\t\t\t\t\t\talt=\"\"\n\t\t\t\t\t\t\taria-hidden=\"true\"\n\t\t\t\t\t\t\/>\n\t\t\t\t\t\t\t\t\t\t<div class=\"wp-blogcard-domain\">github.com<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/a>\n\t<\/article>\n<\/div>\n\n\n\n<p>\u306a\u3093\u3068\u3001ZANSIN\u3092\u4f7f\u3046\u3053\u3068\u3067MINI Hardening\u306ev4\u3092\u81ea\u5b85\u3067\u52d5\u304b\u3059\u3053\u3068\u304c\u3067\u304d\u3061\u3083\u3046\u3002<br>\u3057\u304b\u3082\u74b0\u5883\u304c\u624b\u5143\u306b\u3042\u308b\u306e\u3067\u4f55\u5ea6\u3082\u7e70\u308a\u8fd4\u3057\u5b9f\u65bd\u3057\u3066\u8155\u3092\u78e8\u304f\u3053\u3068\u304c\u3067\u304d\u308b\u3002\u3084\u3063\u305f\u305c\u3002MINI Hardening v4\u306b\u3064\u3044\u3066\u306f\u3053\u3061\u3089\u3092\u53c2\u7167\u3002<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-the-next-generation wp-block-embed-the-next-generation\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"9mwuRs78th\"><a href=\"https:\/\/emeth.jp\/diary\/2023\/08\/mini-hardening-4-5\/\">MINI Hardening 4.5\u306b\u53c2\u52a0\u3057\u305f \/ Hardening\u306b\u53c2\u52a0\u3057\u3088\u3046<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;MINI Hardening 4.5\u306b\u53c2\u52a0\u3057\u305f \/ Hardening\u306b\u53c2\u52a0\u3057\u3088\u3046&#8221; &#8212; \u611a\u884c\u9332 the Next Generation\" src=\"https:\/\/emeth.jp\/diary\/2023\/08\/mini-hardening-4-5\/embed\/#?secret=jx23ij8cJB#?secret=9mwuRs78th\" data-secret=\"9mwuRs78th\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<p>\u3068\u3044\u3046\u308f\u3051\u3067\u624b\u5143\u3067\u52d5\u304b\u3057\u3066\u307f\u305f\u3002<\/p>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u306e\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7<\/h2>\n\n\n\n<p>\u6700\u4f4e2\u53f0\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u304c\u5fc5\u8981\u3068\u306a\u308b\u30021\u53f0\u306f\u653b\u6483\u306e\u5b9f\u65bd\u3084\u30af\u30ed\u30fc\u30ea\u30f3\u30b0\u3001\u30b9\u30b3\u30a2\u306e\u7b97\u51fa\u3068\u3044\u3063\u305f\u8a13\u7df4\u306e\u5236\u5fa1\u3092\u884c\u3046\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u3001\u3082\u30461\u53f0\u306f\u8a13\u7df4\u3092\u53d7\u3051\u308b\u8005\u304c\u64cd\u4f5c\u3057\u3066\u9632\u5fa1\u3092\u5b9f\u8df5\u3059\u308b\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u3002<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/SystemOverviewImage.png\"><img loading=\"lazy\" decoding=\"async\" width=\"720\" height=\"392\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/SystemOverviewImage.png\" alt=\"\" class=\"wp-image-928\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/SystemOverviewImage.png 720w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/SystemOverviewImage-300x163.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/SystemOverviewImage-624x340.png 624w\" sizes=\"auto, (max-width: 720px) 100vw, 720px\" \/><\/a><figcaption class=\"wp-element-caption\"><a href=\"https:\/\/github.com\/ZANSIN-sec\/ZANSIN\/blob\/main\/documents\/SystemOverview.md\" target=\"_blank\" rel=\"noopener\" title=\"System Overview\">System Overview<\/a>\u3088\u308a\u5f15\u7528<\/figcaption><\/figure>\n<\/div>\n\n\n<p>\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u306f\u7269\u7406\u3067\u3082\u4eee\u60f3\u3067\u3082\u30af\u30e9\u30a6\u30c9\u3067\u3082\u3044\u3044\u304c\u3001\u516c\u5f0f\u306e\u63a8\u5968\u306f\u3001\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u304c\u53d6\u308c\u308b\u3053\u3068\u304b\u3089\u4f55\u5ea6\u3082\u8a13\u7df4\u3092\u7e70\u308a\u8fd4\u3059\u306e\u306b\u9069\u3057\u3066\u3044\u308bVirtualBox\u4e0a\u306eVM\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3002<\/p>\n\n\n\n<p>\u305d\u308c\u305e\u308c\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u306b\u306fUbuntu Server\u304c\u5c0e\u5165\u3055\u308c\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308b\u300220.04\u4ee5\u4e0a\u304c\u5fc5\u8981\u3068\u306e\u3053\u3068\u3002\u79c1\u306e\u624b\u5143\u3067\u306f22.04\u3067\u6b63\u5e38\u306b\u52d5\u4f5c\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u6e08\u307f\u3002ZANSIN\u306e\u30ea\u30ea\u30fc\u30b9\u5f8c\u306b\u51fa\u305fUbuntu Server 24.04\u3092\u4f7f\u3046\u969b\u306b\u306f\u3061\u3087\u3063\u3068\u5de5\u592b\u304c\u5fc5\u8981\u3002\u3053\u308c\u306b\u3064\u3044\u3066\u306f\u6700\u5f8c\u306e\u304a\u307e\u3051\u30d1\u30fc\u30c8\u306b\u8a18\u8f09\u3002\u653b\u6483\u307e\u3067\u3046\u307e\u304f\u884c\u304f\u304b\u306f\u672a\u691c\u8a3c\u3002<\/p>\n\n\n\n<p>\u4ed6\u306b\u3082\u3044\u304f\u3064\u304b\u6e80\u305f\u3057\u3066\u304a\u304f\u3079\u304d\u6761\u4ef6\u304c\u3042\u308b\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u3068\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u304c\u4e92\u3044\u306b\u901a\u4fe1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068<\/li>\n\n\n\n<li>2\u53f0\u3068\u3082\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u74b0\u5883\u3067\u3042\u308b\u3053\u3068<\/li>\n\n\n\n<li>2\u53f0\u3068\u3082<code>sudo<\/code>\u53ef\u80fd\u306a<code>zansin<\/code>\u30e6\u30fc\u30b6\u304c\u4f5c\u6210\u3055\u308c\u3066\u3044\u308b\u3053\u3068<\/li>\n\n\n\n<li><code>zansin<\/code>\u30e6\u30fc\u30b6\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306f2\u53f0\u3067\u5171\u901a\u3067\u3042\u308b\u3053\u3068<\/li>\n\n\n\n<li>\u3069\u3061\u3089\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u306b\u3082\u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\u53ef\u80fd\u306aSSH\u30b5\u30fc\u30d0\u304c\u5c0e\u5165\u3055\u308c\u3066\u3044\u308b\u3053\u3068<\/li>\n<\/ul>\n\n\n\n<p>1\u3064\u3081\u306f2\u53f0\u3092\u540c\u3058\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30bb\u30b0\u30e1\u30f3\u30c8\u306b\u8a2d\u7f6e\u3057\u3066\u540c\u3058\u30b5\u30d6\u30cd\u30c3\u30c8\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u632f\u3063\u3066\u3084\u308c\u3070\u3088\u3044\u3002\u5f8c\u308d3\u3064\u306fUbuntu\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u6642\u306b<code>zansin<\/code>\u30e6\u30fc\u30b6\u3092\u4f5c\u6210\u3057\u3001OpenSSH\u30b5\u30fc\u30d0\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u30c1\u30a7\u30c3\u30af\u30dc\u30c3\u30af\u30b9\u3092On\u306b\u3059\u308c\u3070\u3088\u3044\u3002<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"614\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36-1024x614.png\" alt=\"\" class=\"wp-image-929\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36-1024x614.png 1024w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36-300x180.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36-768x461.png 768w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36-624x374.png 624w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-34-36.png 1280w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">\u30e6\u30fc\u30b6\u4f5c\u6210\u753b\u9762<\/figcaption><\/figure>\n<\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"614\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51-1024x614.png\" alt=\"\" class=\"wp-image-930\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51-1024x614.png 1024w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51-300x180.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51-768x461.png 768w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51-624x374.png 624w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_TrainingMachine2204-2024-05-25-09-36-51.png 1280w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">SSH\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u753b\u9762<\/figcaption><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\">ZANSIN\u306e\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7<\/h2>\n\n\n\n<p>\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306f\u7c21\u5358\u3067\u3042\u308b\u3002GitHub\u304b\u3089\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u7528\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u304d\u3066\u5b9f\u884c\u3059\u308b\u3060\u3051\u3002\u88cf\u3067Ansible\u3092\u4f7f\u3063\u3066\u30d1\u30c3\u30b1\u30fc\u30b8\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3060\u306eDocker\u30b3\u30f3\u30c6\u30ca\u306e\u5c0e\u5165\u306a\u3069\u304c\u884c\u308f\u308c\u308b\u3002\u3053\u3053\u306f\u6642\u9593\u304c\u304b\u304b\u308b\u306e\u3067\u3086\u3063\u304f\u308a\u5f85\u3068\u3046\u3002<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: bash; title: ; notranslate\" title=\"\">\n# \u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\nwget https:\/\/raw.githubusercontent.com\/ZANSIN-sec\/ZANSIN\/main\/zansin.sh\n# \u5b9f\u884c\u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u3092\u8a2d\u5b9a\u3057\u3066\u5b9f\u884c\nchmod +x zansin.sh\n.\/zansin.sh\n<\/pre><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43.png\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"600\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43.png\" alt=\"\" class=\"wp-image-931\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43.png 800w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43-300x225.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43-768x576.png 768w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/ZANSIN_ControlServer-2024-05-25-09-57-43-624x468.png 624w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><figcaption class=\"wp-element-caption\">\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306e\u69d8\u5b50<\/figcaption><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\">\u8a13\u7df4\u306e\u5b9f\u65bd<\/h2>\n\n\n\n<p>\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u4e0a\u3067<code>red_controller.py<\/code>\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u3067\u8a13\u7df4\u3092\u958b\u59cb\u3067\u304d\u308b\u3002\u958b\u59cb\u524d\u306b\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u306e\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u3092\u53d6\u3063\u3066\u304a\u304f\u3068\u826f\u3044\u3002\u518d\u5ea6\u8a13\u7df4\u3092\u3057\u305f\u3044\u5834\u5408\u306b\u306f\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u306b\u66f8\u304d\u623b\u3059\u3053\u3068\u3067\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306e\u624b\u9593\u3092\u7701\u3051\u308b\u3002<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: bash; title: ; notranslate\" title=\"\">\nzansin@control-server:~$ source red-controller\/red_controller_venv\/bin\/activate\n(red_controller_venv) zansin@control-server:~$ cd red-controller\/\n(red_controller_venv) zansin@control-server:~\/red-controller$ python3 red_controller.py -n tkito -t 192.168.1.2 -c 192.168.1.1 -a 1\n \n<\/pre><\/div>\n\n\n<p><code>-a<\/code>\u306f\u5b9f\u65bd\u3059\u308b\u30b7\u30ca\u30ea\u30aa\u3092\u6307\u5b9a\u3059\u308b\u30021\u3060\u3068\u901a\u5e38\u30e2\u30fc\u30c9\u30022\u3060\u3068\u653b\u6483\u534a\u6e1b\u30e2\u30fc\u30c9\u30020\u306f\u958b\u767a\u7528\u306a\u306e\u3067\u4f7f\u308f\u306a\u3044\u3002\u30b7\u30ca\u30ea\u30aa\u5185\u5bb9\u306f\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u3044\u3058\u308b\u3053\u3068\u3067\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3067\u304d\u306a\u304f\u3082\u306a\u3044\uff08\u5f8c\u8ff0\uff09\u3002\u308f\u304b\u3063\u3066\u308b\u4eba\u5411\u3051\u3002<\/p>\n\n\n\n<p>\u8a13\u7df4\u958b\u59cb\u3057\u305f\u3089\u3001\u8a13\u7df4\u3092\u53d7\u3051\u308b\u8005\u306f\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u306b<code>vendor<\/code>\u30a2\u30ab\u30a6\u30f3\u30c8\uff08\u521d\u671f\u30d1\u30b9\u30ef\u30fc\u30c9\u306f<code>Passw0rd!23<\/code>\uff09\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u9632\u5fa1\u3092\u958b\u59cb\u3059\u308b\u3002<br><em>(2024\/07\/14 \u521d\u671f\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u8a18\u8f09\u304c\u9593\u9055\u3063\u3066\u3044\u305f\u306e\u3067\u4fee\u6b63)<\/em><\/p>\n\n\n\n<p>\u8a13\u7df4\u6642\u9593\u306f4\u6642\u9593\u3002\u521d\u3081\u306f\u653b\u6483\u304c\u6765\u306a\u3044\u304c\u3001\u5c11\u3057\u3059\u308b\u3068\u653b\u6483\u304c\u59cb\u307e\u308b\u3002\u653e\u3063\u3066\u304a\u304f\u3068\u3084\u308a\u305f\u3044\u653e\u984c\u3084\u3089\u308c\u3066\u3057\u307e\u3046\u306e\u3067\u3001\u3084\u3089\u308c\u306a\u3044\u3088\u3046\u9632\u5fa1\u3057\u3066\u3044\u3053\u3046\u3002<\/p>\n\n\n\n<p>\u8a13\u7df4\u6642\u9593\u304c\u7d42\u308f\u308b\u3068\u3001\u30b9\u30b3\u30a2\u304c\u8868\u793a\u3055\u308c\u308b\u3002\u5168\u3066\u306e\u901a\u4fe1\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u6700\u5f37\u30e2\u30fc\u30c9()\u3067\u9632\u5fa1\u3057\u3066\u307f\u305f\u3002Operation\u304c100\u306a\u306e\u306f\u8b0e\u3002\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u5074\u3067\u8a13\u7df4\u6642\u9593\u306a\u3069\u3044\u3058\u3063\u305f\u308a\u3057\u305f\u306e\u3067\u305d\u306e\u305b\u3044\u304b\u3082\uff1f\u3042\u3068\u305a\u308c\u3066\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"643\" height=\"96\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-1.png\" alt=\"\" class=\"wp-image-947\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-1.png 643w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-1-300x45.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-1-624x93.png 624w\" sizes=\"auto, (max-width: 643px) 100vw, 643px\" \/><\/a><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u8a13\u7df4\u306e\u30ab\u30b9\u30bf\u30de\u30a4\u30ba<\/h2>\n\n\n\n<p>\u3053\u3053\u304b\u3089\u306f\u308f\u304b\u3063\u3066\u308b\u4eba\u5411\u3051\u306e\u81ea\u5df1\u8cac\u4efb\u30a8\u30ea\u30a2\u3002<\/p>\n\n\n\n<p><code>red-controller\/config.ini<\/code>\u3067\u8a2d\u5b9a\u5909\u66f4\u3067\u304d\u308b\u3002<code>training_minues<\/code>\u306f\u8a13\u7df4\u6642\u9593\u3092\u5206\u5358\u4f4d\u3067\u6307\u5b9a\u3059\u308b\u3002\u30c7\u30d7\u30ed\u30a4\u76f4\u5f8c\u306f240(4\u6642\u9593)\u304c\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u3002\u3053\u3053\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u30675\u5206\u3067\u7d42\u308f\u3089\u305b\u308b\u3053\u3068\u3082\u53ef\u80fd\u3002\u305f\u3060\u3057\u3053\u306e\u5f8c\u306b\u8aac\u660e\u3059\u308b\u30b7\u30ca\u30ea\u30aa\u3067\u6307\u5b9a\u3057\u305f\u6642\u9593\u306e\u65b9\u304c\u9577\u3044\u5834\u5408\u306f\u305d\u3061\u3089\u304c\u512a\u5148\u3055\u308c\u308b\u3002<\/p>\n\n\n\n<p>\u7d30\u304b\u3044\u8a71\u3092\u3059\u308b\u3068\u3001<code>training_minutes<\/code>\u306f\u3001\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u306e\u5b9f\u884c\u3068\u4e26\u884c\u3057\u3066\u5b9f\u884c\u3055\u308c\u308b\u30af\u30ed\u30fc\u30e9\u306e\u5b9f\u884c\u6642\u9593\u3092\u898f\u5b9a\u3059\u308b\u30d1\u30e9\u30e1\u30fc\u30bf\u3067\u3042\u308b\u3002\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u3068\u30af\u30ed\u30fc\u30e9\u306e\u4e21\u65b9\u304c\u7d42\u4e86\u3059\u308b\u3053\u3068\u3067\u8a13\u7df4\u304c\u7d42\u4e86\u3068\u306a\u308b\u305f\u3081\u3001\u30af\u30ed\u30fc\u30e9\u304c\u5b9f\u884c\u7d42\u4e86\u3057\u3066\u3082\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u304c\u7d42\u308f\u3063\u3066\u306a\u3051\u308c\u3070\u8a13\u7df4\u306f\u7d9a\u304f\u3068\u3044\u3046\u308f\u3051\u3067\u3042\u308b\u3002\u3053\u306e\u305f\u3081\u3001<code>training_minutes<\/code>\u3067\u8a2d\u5b9a\u3057\u305f\u6642\u9593\u3067\u8a13\u7df4\u304c\u7d42\u308f\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u3053\u3068\u306b\u306f\u6ce8\u610f\u304c\u5fc5\u8981\u3002<\/p>\n\n\n\n<p>\u30b7\u30ca\u30ea\u30aa\u306f<code>red_controller\/attack\/attack_config.ini<\/code>\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u3002\u4e2d\u3092\u898b\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u884c\u304c\u3042\u308b\u3002<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\n1-001               : 001@nmap@0\n1-003               : 003@nikto@0\n1-006               : 031@nmap@0\n1-008               : 033@nikto@0\n<\/pre><\/div>\n\n\n<p>\u30b3\u30ed\u30f3\u306e\u5de6\u5074\u304c\u30b7\u30ca\u30ea\u30aa\u756a\u53f7(1\u6841)\u3068\u30a4\u30d9\u30f3\u30c8\u756a\u53f7(3\u6841)\u3067\u3042\u308b\u3002\u53f3\u5074\u304c\u5b9f\u884c\u3059\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u6307\u5b9a\u3057\u3066\u3044\u308b\u3002<code>@<\/code>\u3067\u533a\u5207\u3089\u308c\u305f\u3046\u30611\u3064\u3081\u304c\u8a13\u7df4\u958b\u59cb\u304b\u3089\u30a2\u30af\u30b7\u30e7\u30f3\u5b9f\u884c\u307e\u3067\u306e\u5f85\u6a5f\u6642\u9593\uff08\u5358\u4f4d\u306f\u5206\uff09\u30012\u3064\u76ee\u304c\u5b9f\u884c\u3059\u308b\u95a2\u6570\uff08<code>red_controller\/attack\/attack_controller.py<\/code>\u5185\u3067\u5b9a\u7fa9\uff09\u30013\u3064\u3081\u306f\u95a2\u6570\u306b\u6e21\u3059\u5f15\u6570\uff080\u306f\u5f15\u6570\u7121\u3057\uff09\u3067\u3042\u308b\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u5185\u5bb9\u3092\u5909\u3048\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u3092\u597d\u304d\u306a\u9806\u756a\u3067\u5b9f\u884c\u3055\u305b\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002\u3061\u306a\u307f\u306b\u3001\u30b7\u30ca\u30ea\u30aa\u756a\u53f7\u304c0\u306e\u5834\u5408\u306f\u5f85\u6a5f\u6642\u9593\u304c\u79d2\u5358\u4f4d\u306b\u306a\u308b\u305f\u3081\u3001\u9ad8\u901f\u3067\u8a13\u7df4\u3092\u7d42\u308f\u3089\u305b\u305f\u3044\u5834\u5408\u306b\u306f\u6709\u7528\u3002\u30c7\u30d0\u30c3\u30b0\u7528\u9014\u4ee5\u5916\u306e\u9700\u8981\u306f\u305f\u3076\u3093\u306a\u3044\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u304a\u308f\u308a\u306b<\/h2>\n\n\n\n<p>MINI Hardening\u3092\u304a\u624b\u8efd\u306b\u4f53\u9a13\u3067\u304d\u308bZANSIN\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3053\u3068\u3067\u3001Hardening\u7af6\u6280\u8005\u306e\u81ea\u5df1\u935b\u932c\u306b\u9769\u547d\u304c\u8d77\u304d\u308b\uff01\u305f\u3076\u3093\uff01<\/p>\n\n\n\n<p>MINI\/Micro\u542b\u3081\u305fHardening\u7af6\u6280\u306b\u53c2\u52a0\u3059\u308b\u306e\u306f\u3061\u3087\u3063\u3068\u96e3\u304c\u3042\u308b\uff08\u6642\u9593\u3068\u304b\u7269\u7406\u7684\u306a\u8ddd\u96e2\u3068\u304b\uff09\u3068\u3044\u3046\u65b9\u3067\u3082\u697d\u3057\u3081\u308b\u306e\u3067\u305c\u3072\u3084\u308d\u3046\uff01<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u304a\u307e\u3051\uff1aUbuntu Server 24.04\u306b\u3064\u3044\u3066<\/h2>\n\n\n\n<p>\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u3092Ubuntu Server 24.04\u306b\u3059\u308b\u5834\u5408\u3001\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u308224.04\u3067\u3042\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u305d\u3046\u3057\u306a\u3044\u3068Ansible\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u95a2\u4fc2\u3067\u30a8\u30e9\u30fc\u304c\u51fa\u308b\u3002\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u304c24.04\u306e\u5834\u5408\u306b\u306f\u8a13\u7df4\u7528\u30de\u30b7\u30f3\u306f\u3069\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3082\u3088\u3044\uff08\u305f\u3076\u3093\uff09\u3002<\/p>\n\n\n\n<p>\u307e\u305f\u3001\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30b5\u30fc\u30d0\u304cUbuntu Server 24.04\u306e\u5834\u5408\u3001<code>zansin.sh<\/code>\u306e\u6700\u5f8c\u306e\u65b9\u3067Python 3.10\u3092\u30de\u30a4\u30ca\u30fc\u30d0\u30fc\u30b8\u30e7\u30f3\u6c7a\u3081\u6253\u3061\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3044\u308b\u304c\u300124.04\u306b\u306f3.10\u306f\u7121\u304f3.12\u3068\u306a\u308b\u305f\u3081\u3001\u3053\u3053\u3092\u66f8\u304d\u63db\u3048\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n\n\n\n<p>\u653b\u6483\u304c\u3061\u3083\u3093\u3068\u3046\u307e\u304f\u3044\u304f\u304b\u307e\u3067\u306f\u672a\u691c\u8a3c\u3002<code>python3 red_controller.py -h<\/code>\u3057\u305f\u969b\u306bWarning\u304c\u51fa\u308b\u306e\u3067\u3082\u3057\u304b\u3057\u305f\u3089\u3046\u307e\u304f\u3044\u304b\u306a\u3044\u304b\u3082\u3057\u308c\u306a\u3044\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u304a\u307e\u3051\uff1a\u5d29\u308c\u308b\u30ed\u30b4<\/h2>\n\n\n\n<p>PuTTY\u306a\u3069\u3067\u63a5\u7d9a\u3057\u3066\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3059\u308b\u3068\u6700\u521d\u306e\u30ed\u30b4\u304c\u5d29\u308c\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u3053\u308c\u306f\u30d5\u30a9\u30f3\u30c8\u306e\u305b\u3044\u3002\u3068\u3044\u3046\u304bUnicode\u306eAmbiguous width\u306e\u305b\u3044\u3002\u6ec5\u3073\u3066\u307b\u3057\u3044\u3002<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image.png\"><img loading=\"lazy\" decoding=\"async\" width=\"824\" height=\"265\" src=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image.png\" alt=\"\" class=\"wp-image-935\" style=\"width:655px;height:auto\" srcset=\"https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image.png 824w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-300x96.png 300w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-768x247.png 768w, https:\/\/emeth.jp\/diary\/wp-content\/uploads\/2024\/05\/image-624x201.png 624w\" sizes=\"auto, (max-width: 824px) 100vw, 824px\" \/><\/a><figcaption class=\"wp-element-caption\">\u3042\u308f\u308c\u5d29\u308c\u305f\u30ed\u30b4<\/figcaption><\/figure>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Black Hat Asia 2024 Arsenal\u3067MINI Hardening\u306e\u65b9\u3005\u306b\u3088\u308bZANSIN\u304c\u516c\u958b\u3055\u308c\u305f\u3002 \u306a\u3093\u3068\u3001ZANSIN\u3092\u4f7f\u3046\u3053\u3068\u3067MINI Hardening\u306ev4\u3092\u81ea\u5b85\u3067\u52d5\u304b\u3059\u3053\u3068\u304c\u3067\u304d\u3061\u3083\u3046 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"cybocfi_hide_featured_image":"","footnotes":""},"categories":[12],"tags":[13],"class_list":["post-920","post","type-post","status-publish","format-standard","hentry","category-hardening","tag-hardening"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/comments?post=920"}],"version-history":[{"count":19,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/920\/revisions"}],"predecessor-version":[{"id":976,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/920\/revisions\/976"}],"wp:attachment":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/media?parent=920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/categories?post=920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/tags?post=920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}