This blog post is older than a year. The information provided below may be outdated. Command (.cmd) and batch (.bat) files can be directly provided as input to the CreateProcess as if it is an executable. CreateProcess uses the cmd.exe automatically to run the input .cmd or .bat. Today, with the bulletin MS14-019 we are fixing a vulnerability, where in particular scenario it is possible to hijack
タグ
- すべて
- .net (15)
- 0day (2)
- 2ch (3)
- 404 (3)
- Addon (25)
- Ajax (20)
- Amberate (3)
- DATETIME (2)
- DaRT (3)
- FileFormat (16)
- Gmail (16)
- Google (77)
- Hardware (9)
- IDN (4)
- IPA (18)
- ISO (2)
- Java (8)
- Library (7)
- Linux (11)
- Microsoft (157)
- Mlang.DLL (2)
- NTFS (4)
- Network (13)
- OOP (11)
- Plagger (5)
- RFC (29)
- RSS (9)
- Ruby (10)
- TIPS (4)
- TOOL (109)
- TxF (2)
- UTF-7 (16)
- Unicode (89)
- WMI (6)
- WSH (16)
- Windows (105)
- XDM (2)
- XDR (2)
- XSS nite (7)
- aa (14)
- aaencode (5)
- ad (2)
- admintech.jp (19)
- adobe (8)
- ajaxmin (2)
- akira_you (2)
- amazon (4)
- andoroid (2)
- android (26)
- angularjs (3)
- apache (6)
- api (5)
- apple (2)
- appsecapac2014 (29)
- asm (8)
- asm.js (2)
- ast (3)
- atnd (3)
- au (2)
- auth (2)
- autorun (3)
- avtokyo2008 (26)
- avtokyo2009 (12)
- avtokyo2010 (15)
- avtokyo2011 (19)
- avtokyo2014 (11)
- aws (4)
- azurestone (2)
- bhj (9)
- bhj2008 (32)
- bhusa2016 (4)
- binary (3)
- book (54)
- browser (97)
- bug (3)
- bugbounty (10)
- bugreport (6)
- c (3)
- c# (5)
- c++ (5)
- cache (2)
- caja (2)
- calendar (3)
- camp2009 (111)
- camp2010 (98)
- camp2011 (79)
- camp2012 (38)
- camp2013 (65)
- camp2014 (35)
- canvas (3)
- capture (2)
- caravan2008 (60)
- cb2014 (6)
- cgi (2)
- charset (63)
- chrome (62)
- chromeapps (2)
- chromium (4)
- clickjack (9)
- cmd (2)
- codeblue (11)
- coffeescript (2)
- coldfire (6)
- commonjs (3)
- community (7)
- cookie (28)
- copyright (15)
- cors (12)
- cpp (2)
- cpu (2)
- crypt (2)
- csp (22)
- csrf (25)
- css (23)
- ctf (9)
- cure53 (2)
- cybozu (8)
- data-scheme (2)
- dbxss (4)
- debug (17)
- develop (96)
- devsumi2009 (23)
- devsumi2012 (8)
- dns (11)
- dns rebinding (8)
- doctype (2)
- dom (19)
- domstorage (4)
- domxss (22)
- e4x (17)
- ecma (2)
- ecmascript (31)
- edge (6)
- education (2)
- electron (7)
- elinjection (2)
- embedded (2)
- emoji (4)
- emoticon (2)
- english (8)
- error (2)
- es2015 (2)
- es2016 (3)
- es5 (2)
- es6 (25)
- ethna祭り (5)
- event (93)
- extension (6)
- facebook (9)
- fetch (4)
- fiddler (9)
- fileapi (3)
- filename (2)
- filesystem (4)
- firebug (3)
- firefox (139)
- firefoxos (4)
- firesheep (4)
- flash (20)
- font (16)
- forensic (13)
- foss (5)
- ftp (3)
- fuzzing (2)
- game (2)
- garethheyes (4)
- gender (2)
- gfx (4)
- gifar (3)
- git (3)
- github (4)
- go (3)
- gofish (3)
- google+ (2)
- gopher (5)
- gpl (4)
- h-itoro#1 (5)
- h12e (2)
- hacker (2)
- hamachiya2 (2)
- hanazukin (8)
- hash (2)
- hatebu (2)
- hatena (20)
- hidek (6)
- himote (2)
- hoshikuzu (2)
- hpkp (3)
- hsts (7)
- html (64)
- html5 (110)
- http (70)
- http2 (20)
- https (27)
- hyoshiok (2)
- i18n (31)
- icon (2)
- ids (2)
- ie (188)
- ie10 (7)
- ie11 (9)
- ie6 (5)
- ie8 (41)
- ie9 (21)
- iframe (2)
- iis (3)
- image (4)
- ime (2)
- insessionphishing (2)
- ios (3)
- iot (2)
- iphone (3)
- japanese (2)
- javascript (564)
- jetpack (2)
- ji2 (2)
- jjencode (21)
- jquery (33)
- js (2)
- jscript (11)
- jsdeferred (3)
- jsfuck (2)
- json (19)
- jsonp (4)
- jui (10)
- jwntug (2)
- jxck (4)
- kanasan.JS (5)
- kanatako (12)
- kazuho (10)
- kazuhooku (4)
- keyboard (2)
- kinugawamasato (5)
- korea (3)
- kuza55 (2)
- law (51)
- ldr (2)
- let's encrypt (3)
- license (5)
- life (15)
- line (2)
- lltv (2)
- log (3)
- mac (3)
- madoka (5)
- mail (3)
- mala (17)
- mario (12)
- markdown (2)
- mashup (2)
- matcha139 (24)
- matcha445 (23)
- mattn (4)
- mhtml (5)
- mikewest (2)
- mime (18)
- mitoh (3)
- mixi (4)
- mizchi (2)
- ml (2)
- mlang (2)
- mobile (16)
- mozilla (6)
- mpu (5)
- mrkm (2)
- ms-dos (2)
- msdn (8)
- mutual (2)
- mxss (6)
- mysql (6)
- nacl (5)
- namazu (2)
- neta (207)
- netagent (16)
- netwatch (30)
- news (3)
- nginx (6)
- nintendo (2)
- node.js (19)
- nodejs (9)
- npapi (2)
- oauth (12)
- obfuscate (7)
- ockeghem (16)
- office (3)
- openid (4)
- openredir (5)
- openxml (3)
- opera (21)
- orejs (6)
- owasp (33)
- owaspjapan (38)
- p2p (2)
- p3p (2)
- pacsec2008 (3)
- password (6)
- pc (2)
- pcidss (2)
- pdf (15)
- pe (4)
- performance (2)
- perl (33)
- pex (2)
- php (49)
- pki (2)
- plack (6)
- poc2008 (11)
- polyglot (8)
- ppencode (3)
- ppt (3)
- privacy (42)
- prog-lang (6)
- protocol (3)
- proxy (5)
- python (2)
- quic (3)
- quine (6)
- rails (4)
- rakuten (10)
- react (2)
- referer (3)
- regexp (5)
- registry (6)
- report (4)
- rest (2)
- ripjyr (2)
- s6 (3)
- safari (13)
- sandbox (3)
- sdl (5)
- search (4)
- seccon (34)
- secmikan (2)
- secpolo (5)
- security (771)
- seh (2)
- server (2)
- serviceworker (9)
- session (2)
- shazzer (2)
- shebang (2)
- shell (3)
- shellcode (3)
- shibuya.pm (48)
- shibuya.xss (10)
- silverlight (2)
- skype (2)
- slang (2)
- slide (2)
- smtp (3)
- sn2011 (2)
- soaj1664ashar (3)
- social (33)
- software (2)
- sokai (3)
- sonodam (3)
- sop (6)
- source (3)
- spa (2)
- spam (2)
- spcamp (401)
- spdy (24)
- spidermonkey (5)
- sqli (23)
- ssd (3)
- ssl (12)
- ssr (3)
- standard (4)
- streaming (3)
- study (2)
- sua (3)
- sugyan (4)
- svg (6)
- swf (9)
- sysinternal (2)
- takesako (6)
- techtalk (4)
- template (4)
- teppeis (8)
- teracc (4)
- tessy (2)
- test (8)
- text (2)
- tksk (16)
- tls (7)
- tor (2)
- traceability (3)
- translate (2)
- tthttpd (2)
- twitter (34)
- typo (13)
- ui (9)
- unix (5)
- url (8)
- usb (7)
- utf-8 (11)
- uxss (5)
- v8 (5)
- vbscript (4)
- vim (3)
- vm (4)
- vue (5)
- w3c (3)
- waf (12)
- wafful (17)
- was (47)
- wasf (5)
- wasm (5)
- wassr (6)
- web (20)
- webapi (8)
- webcomponents (11)
- webkit (15)
- webrtc (18)
- websocket (13)
- webworkers (3)
- welcomeie9 (4)
- willty (9)
- win32 (15)
- win7 (6)
- windows7 (3)
- winny (5)
- work (6)
- x-frame-options (3)
- x86 (15)
- xhr (13)
- xml (11)
- xss (528)
- xssme (3)
- xxe (6)
- xxs (6)
- yamagata21 (3)
- yapcasia (14)
- yapcasia2012 (14)
- yappo (6)
- yaruo (6)
- あとで読む (21)
- あれ (5)
- おもしろ (3)
- お役立ち (5)
- これはすごい (9)
- これはひどい (18)
- また上野宣か (14)
- わっふるわっふる (3)
- イメージファイト (17)
- コマンドライン (3)
- セルクマ (31)
- ネタ帳 (42)
- バイナリ (7)
- プレゼン (18)
- メール (5)
- モメゴト (3)
- ヲチ (4)
- 使うな危険 (4)
- 勉強会 (5)
- 建設予定地 (3)
- 惰弱性 (6)
- 携帯 (4)
- 文字コード (40)
- 日本語 (3)
- 昭和 (3)
- 独り言 (14)
- 用語 (6)
- 素材 (23)
- 肖像権 (3)
- 著作権 (5)
- 虚弱性 (81)
- 記号プログラミング (5)
- 読んだら消す (6)
- 資料 (3)
- 雑学 (4)
- 雑談 (5)
- 高専カンファレンス (3)
- ﾓﾒｺﾞﾄ (4)
- security (771)
- javascript (564)
- xss (528)
- spcamp (401)
- neta (207)
- ie (188)
- Microsoft (157)
- firefox (139)
- camp2009 (111)
- html5 (110)
cmdに関するhasegawayosukeのブックマーク (2)
-
hasegawayosuke 2014/04/09
- cmd
- windows
- win32
リンク -
-
1
公式Twitter
- @HatenaBookmark
リリース、障害情報などのサービスのお知らせ
- @hatebu
最新の人気エントリーの配信
処理を実行中です
キーボードショートカット一覧
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
設定を変更しましたx