投稿時間:2022-06-12 23:18:34 RSSフィード2022-06-12 23:00 分まとめ(23件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
python	Pythonタグが付けられた新着投稿 - Qiita	LightGBMのdartモードでEarlyStoppingを使う	https://qiita.com/birdwatcher/items/78e0158957fec2d6c9e8	LightGBMのdartモードでEarlyStoppingを使うLightGBMでboostingdartを指定すると、earlystoppingroundsを指定してもdartモードでは使えないという趣旨のwarningが表示され、使うことはできない。	2022-06-12 22:52:38
python	Pythonタグが付けられた新着投稿 - Qiita	[2022年]おすすめ機械学習書籍(参考書)	https://qiita.com/chelatelemonade/items/f7f1b473709552e66327	amazon	2022-06-12 22:50:11
python	Pythonタグが付けられた新着投稿 - Qiita	バイノーラルビート使用時の脳波を計測してみる	https://qiita.com/tatsui/items/6308563300bebd8ef61b	誘導	2022-06-12 22:45:05
python	Pythonタグが付けられた新着投稿 - Qiita	Seleniumを利用してEdgeを自動化する(初心者備忘録)	https://qiita.com/Ito_Natsuko/items/cd2df14b8a8c69c27214	selenium	2022-06-12 22:20:11
js	JavaScriptタグが付けられた新着投稿 - Qiita	【JavaScript/TypeScript】?.・?・|	https://qiita.com/seiya2130/items/9355531b9bb69a5ba6cf	javascript	2022-06-12 22:34:08
Ruby	Rubyタグが付けられた新着投稿 - Qiita	新米エンジニアによるリファクタリングのすすめ-前編-	https://qiita.com/Yporon/items/f5664677fedb9c5343c6	自分	2022-06-12 22:28:36
Ruby	Rubyタグが付けられた新着投稿 - Qiita	【binding.pry】エラーは出ないけど、画像投稿出来ない時の対処法	https://qiita.com/yanatyamn/items/1af1e55a3df3b00c3f0d	bindingpry	2022-06-12 22:25:46
Docker	dockerタグが付けられた新着投稿 - Qiita	Docker create image and run with Kubernetes	https://qiita.com/lidengke/items/c2a5f3d261c554412df2	const	2022-06-12 22:16:59
golang	Goタグが付けられた新着投稿 - Qiita	[2022年]オライリー書籍ランキング1(O'Reilly)	https://qiita.com/metimeti/items/a349a5b7b521414c9e5a	amazon	2022-06-12 22:05:16
Ruby	Railsタグが付けられた新着投稿 - Qiita	【binding.pry】エラーは出ないけど、画像投稿出来ない時の対処法	https://qiita.com/yanatyamn/items/1af1e55a3df3b00c3f0d	bindingpry	2022-06-12 22:25:46
海外TECH	MakeUseOf	How to Tin a Soldering Iron and Why	https://www.makeuseof.com/how-to-tin-a-soldering-iron-and-why/	acquiring	2022-06-12 13:30:14
海外TECH	DEV Community	Let's Explore Wonderland: The Try Hack Me CTF. 🐰	https://dev.to/christinecdev/lets-explore-wonderland-the-try-hack-me-ctf-3o4h	Let x s Explore Wonderland The Try Hack Me CTF I ve never really been a big Alice in Wonderland fan I don t hate it but it s not my favorite piece of literature That aside I really enjoyed this CTF except the last part but we ll get to that later Get ready to fall into some holes because we are about to hack Wonderland Obtain the flag in user txtOkay first things first When we start our machine and we navigate to the given IP in our browser we are given the following objective Follow the White Rabbit Inspecting the page source we can see that there are no hidden values for us to see so we need to move on to our enumeration Start up your terminal and run a good ol nmap scan We can see two services that are running ssh and http nmap sV sC Pn lt your machine IP gt Next run a gobuster scan so we can see if there are any directories which are hidden There are a few but the most important one is the r directory gobuster dir w usr share wordlists dirbuster directory list small txt u lt your machine IP gt t When we go to the r directory in our browser it tells us to keep going Let s run another gobuster scan gobuster dir w usr share wordlists dirbuster directory list small txt u lt your machine IP gt r t Note that you can skip doing the manual enumeration for each directory by running a normal gobuster scan with a R flag at the end We can see that there is a r a directory You can probably guess where this is going the next one will be b b i t Let s follow the white rabbit to the end by going to the r a b b i t directory When we inspect the page source we can see that we have found Alice s username and password for a potential ssh login Okay Now let s open up our terminal and log into our ssh service using our found credentials ssh alice lt your machine IP gt When we list the files in our current directory we find that we have a root txt and a walrus and the carpenter py file We will use come back to these files later For now let s find and read the contents of our user txt file which is located under root hence the hint everything is upside down in here cat root user txtHoorah We ve found our user txt flag Escalate your privileges what is the flag in root txt Okay remember when I said we d get back to our root txt and a walrus and the carpenter py files Well cd back into the home alice directory and let s analyse these files again We do not have permission to read the contents of the root txt file and the walrus and the carpenter py imports the random module in python which returns a random poem contents of walrus and the carpenter py I forgot to take a screenshot import randompoem The sun was shining on the sea Shining with all his might He did his very best to make And that was scarcely odd becauseTheyd eaten every one for i in range line random choice poem split n print The line was t line Let s see what commands Alice can run in our current environment sudo lWe can see that Alice can run the usr bin python walrus and the carpenter py command as one single string to escalate her privilege to Rabbit Now we can exploit that random module that is imported above via Python Library Hijacking We will do this by creating a random py file in our current home alice directory adding contents into it via nano and then running our command Carefully follow the steps below Make sure you are in the home alice directory then create a new file via the touch random py command Then open up nano so that we can insert our script in this file via nano random py With nano opened insert the following script and save import osos system bin bash Finally we can commence with our privilege escalation from user Alice to User Rabbit via the following command sudo u rabbit usr bin python home alice walrus and the carpenter py We now have access to the system as Rabbit Let s see what we can find in the home rabbit directory There is a single executable teaParty When we run this executable we can see that there is an odd string Probably by Sat Jun If we read this file with nano we can see that it is calling upon a date file Before we continue lets see what access we have to this teaParty executable by running ls la Fortunately we can escalate our privilege from Rabbit to root by spawning root privilege via the Echo Command hack we will do this by modifying our date file in our tmp direcotory Carefully enter the commands as sequenced below cd tmpecho bin bash gt datechmod dateecho PATHexport PATH tmp PATHcd home rabbit teaPartyWe now have access as Hatter When we see which privileges he has we see an interesting file password txt We now have the password for Hatter Unfortunately Hatter does not have any sudo capabilities try this by running sudo l Now this is where my struggle started I used GTFObins to find a list of binaries that we can exploit to escalate our environments capabilities so that we can run sudo as Hatter We will do so via perl In your terminal run the command below I kept on getting permission denied so I had to restart my OPENVPN connection and then I got in Unfortunately I was so tired by then that I forgot to take screenshots I guess you can say I fell into a deep hole perl e use POSIX qw setuid POSIX setuid exec bin sh You can now cd into and read the contents of our home alice root txt directory We got our flag ConclusionThings got pretty messy there at the end so I apologize for that I guess this write up is as upside down as the lab itself I hope that this was easy enough for you to follow and until next time happy hacking See more on my GitHub	2022-06-12 13:43:37
海外TECH	DEV Community	Tips for Coding Newbies 1. Read Documentation (Add yours)	https://dev.to/prudence97/tips-for-coding-newbies-1-read-documentation-add-yours-ii7	Tips for Coding Newbies Read Documentation Add yours Yes Read the DocsIt might looks pretty boring but you ll be saving yourself a lot of heartache ️What s your Tip for a Coding Newbie What have you learnt that you ve been doing wrong What would you change if you were starting afresh Please leave a comment	2022-06-12 13:28:56
海外TECH	DEV Community	What are the benefits of learning programming languages?	https://dev.to/khansa/what-are-the-benefits-of-learning-programming-languages-5dn3	What are the benefits of learning programming languages I d want to know why you re reading this post before we go into depth about it There might be a variety of causes for this including the following You re a non programmer curious about how things function in today s technological world You re interested in technology and considering pursuing a career in it You are a novice who has recently entered this area and is unsure whether you made the right decision in picking this career You may find it frightening annoying or even enjoyable You re an experienced programmer who wants to know how far you ve gone and what changes you ve seen since starting out in this area There are several causes for this some of which are enumerated in this article Increased ability to communicate programming ideas A better foundation for selecting acceptable languagesImproved capacity to pick up new languagesRealizing the importance of implementationAbility to create new languages has increased Increased ability to communicate programming ideas The study of programming languages aids in the development of the ability to express programming ideas Dijkstra has expressed it this way The tools we use have a profound and devious influence on our thinking habits and therefore on our thinking abilities That is the instruments employed to articulate one s thoughts limit one s ability to think The expressive capacity of language influences the depth to which we can think It covers the types of algorithms you can create Learning new languages broadens the scope of software development thought processes since such constructs may be mimicked A better foundation for selecting acceptable languagesStudying programming languages also aids in the selection of the appropriate language for a specific job According to Abraham Maslow “To the man who only has a hammer in the toolkit every problem looks like a nail That is if your only tool is a hammer you will tackle every situation as if it were a nail Some programming languages are better suited to certain tasks than others Improved capacity to pick up new languagesGood programmers don t simply know how to code they also know how to wrap their heads around a difficult problem and write effective code to solve it While most programming languages can perform most tasks each has its own set of advantages and disadvantages Knowing various languages is beneficial since you may not be able to get the same outcomes with each one You will have a larger knowledge base and be more likely to be able to solve issues faster and more effectively if you study additional languages Acquisition of the syntax and semantics of different programming languages as well as knowing diverse design techniques aids in the learning of new languages Realizing the importance of implementationUnderstanding implementation concerns may sometimes lead to a better understanding of why languages are constructed the way they are This in turn leads to effective language usage Row vs column major is one such example If a programmer understands that two dimensional arrays are stored column wise column major in FORTRAN whereas they are stored row wise in most other languages he will process it column wise making it more efficient Recursion works in the same way If a programmer understands how recursion works and how much recursive programs cost he may utilize that knowledge to create more efficient programs Furthermore certain defects can only be detected and repaired if the programmer is familiar with technical details Ability to create new languages has increased Learning a variety of programming languages allows one to have a better understanding of the advantages and disadvantages of various language features as well as the challenges that these characteristics might cause As a result if one has to create a new language for any reason this knowledge will be useful You Enjoy It MoreDepending on your work duties you may find yourself doing the same or similar tasks every day which may soon get tedious Knowing various languages on the other hand may keep your mind awake and your job duties diverse because you ll be able to concentrate on multiple tasks at once You re more likely to appreciate the task you re doing and have more fun doing it if you have fresh possibilities and challenges Learning a programming language is like learning a foreign language in that after you ve mastered the second the third and fourth are considerably simpler This is because you spend time learning how to learn when learning the second language and this process gets simpler with practice You begin to see parallels across languages which aids in the learning process and the retention of new knowledge It s not as difficult as it may appear Whether you want to uncover the secrets of the universe or you just want to pursue a career in the st century basic computer programming is an essential skill to learn ーStephen HawkingThat s allI appreciate your patience in reading thus far Please share this message with others so they can find their way as well Twitter LinkedIn GitHub are all places where you can find me Have fun Programming	2022-06-12 13:27:45
Apple	AppleInsider - Frontpage News	Apple still plans iPad Pro updates for fall 2022	https://appleinsider.com/articles/22/06/12/apple-still-plans-ipad-pro-updates-for-fall-2022?utm_medium=rss	Apple still plans iPad Pro updates for fall Apple is still planning to bring out an update to its iPad Pro lineup in the fall a report claims insisting new models are on the way despite rumors of a inch version On June it was rumored that Apple was working on creating a new larger iPad Pro model combining a inch mini LED display with the M chip While that iPad Pro was supposedly being prepared for an early release it is thought that the current size options will still receive updates in In the Power On newsletter for Bloomberg Mark Gurman writes that there are no plans to stop producing its inch iPad Pro or inch iPad Pro models despite the prospect of a inch model Read more	2022-06-12 13:53:15
海外科学	NYT > Science	‘Vegan Leather’: How Fashion Giants Recast Plastic as Good for the Planet	https://www.nytimes.com/2022/06/12/climate/vegan-leather-synthetics-fashion-industry.html	Vegan Leather How Fashion Giants Recast Plastic as Good for the PlanetAn influential system overseen by retailers and clothing makers ranks petroleum based synthetics like “vegan leather as more environmentally sound than natural fibers	2022-06-12 13:37:17
ニュース	BBC News - Home	Ukraine war: Former British soldier Jordan Gatley killed in fighting	https://www.bbc.co.uk/news/uk-61777224?at_medium=RSS&at_campaign=KARANGA	severodonetsk	2022-06-12 13:49:08
ニュース	BBC News - Home	Rail strike: Agency staff could cover future disruption	https://www.bbc.co.uk/news/uk-61773437?at_medium=RSS&at_campaign=KARANGA	workers	2022-06-12 13:05:08
ニュース	BBC News - Home	Rebel Wilson: Paper denies outing actress amid storm of criticism	https://www.bbc.co.uk/news/world-australia-61775909?at_medium=RSS&at_campaign=KARANGA	herald	2022-06-12 13:48:33
ニュース	BBC News - Home	England v New Zealand: Watch highlights of Ollie Pope's 100	https://www.bbc.co.uk/sport/av/cricket/61775815?at_medium=RSS&at_campaign=KARANGA	England v New Zealand Watch highlights of Ollie Pope x s Watch the best shots from Ollie Pope s second Test century as England reply to New Zealand s on the third day of the second Test at Trent Bridge	2022-06-12 13:39:54
ビジネス	ダイヤモンド・オンライン - 新着記事	森岡毅流「自分の強みを見つける」方法とは？【書籍オンライン編集部セレクション】 - 苦しかったときの話をしようか	https://diamond.jp/articles/-/304258		2022-06-12 22:30:00
北海道	北海道新聞	ＹＯＳＡＫＯＩ祭りが閉幕、札幌　マスク着用、２万人が演舞	https://www.hokkaido-np.co.jp/article/692660/	yosakoi	2022-06-12 22:14:00
北海道	北海道新聞	埼玉で女性が刺され死亡　本庄市	https://www.hokkaido-np.co.jp/article/692659/	坂東大橋	2022-06-12 22:04:00