Windows 8 でパケットキャプチャ

34
Windows 8 で でででで ででででで でででででででで でででででででででででで でで で aka hebikuzure
  • Upload

    -
  • Category

    Documents

  • view

    7.690
  • download

    4

description

第7回「ネットワーク パケットを読む会(仮)」での発表資料です。

Transcript of Windows 8 でパケットキャプチャ

  • 1. aka hebikuzure

2. Windows Windows Server 8 Consumer Preview http://windows.microsoft.com/ja-JP/windows-8/consumer-preview Windows + Metro UI + #7 2012/4/162 3. #7 2012/4/16 3 4. Microsoft http://www.microsoft.com/download/ en/details.aspx?id=4865 #7 2012/4/16 4 5. 1. 2. 3. UAC 4. 5. 6. #7 2012/4/16 5 6. #7 2012/4/16 6 7. #7 2012/4/16 7 8. Metro Metro Metro IE, , #7 2012/4/168 9. #7 2012/4/16 9 10. http://www.wireshark.org/download.html ver. 1.6.7 #7 2012/4/1610 11. 1. 2. 3. UAC 4. WinPcap #7 2012/4/16 11 12. Wireshark WinPcap #7 2012/4/16 12 13. WinPcap Wireshrak #7 2012/4/1613 14. #7 2012/4/16 14 15. #7 2012/4/16 15 16. Wireshark Ctrl + Alt + Del Esc #7 2012/4/16 16 17. #7 2012/4/16 17 18. Metro Metro Metro IE, , #7 2012/4/1618 19. PCAP http://www.netresec.com/?page= NetworkMiner #7 2012/4/1619 20. ZIP Program Files ex. %Userprofile%AppDataLocal #7 2012/4/16 20 21. Wireshark WinPcap Wireshark WinPcap #7 2012/4/16 21 22. #7 2012/4/16 22 23. #7 2012/4/16 23 24. Metro Metro Metro IE, , #7 2012/4/16 24 25. Microsoft HTTP HTTP http://www.fiddler2.com/fiddler2/ #7 2012/4/16 25 26. .NET Framework 3.5 [ ] []- [Windows ] .NET Framework 3.5 OK #7 2012/4/16 26 27. #7 2012/4/16 27 28. Desktop Metro Metro localhost 127.0.01 Fiddler localhost #7 2012/4/16 28 29. EnableLoopbackUtility http://blogs.msdn.com/b/fiddler/archive/2011/12/10 /fiddler-windows-8-apps-enable-loopback-network- isolation-exemption.aspx http://bit.ly/IqlA6h CheckNetIsolation http://msdn.microsoft.com/en- us/library/windows/apps/hh452759.aspx #7 2012/4/1629 30. [Tool] [Win8 Loopback Fiddler Exemptions] UAC #7 2012/4/16 30 31. HTTP #7 2012/4/1631 32. Metro EnableLoopback Utility Metro Metro IE, , #7 2012/4/16 32 33. Windows on ARM x64 / x86 / ARM MIM / #7 2012/4/16 33 34. : 69 : Microsoft : Javascript + Fiddler / Strace/ HTTPREPLAY () : 5/28() 5/31() 19:00 : : #7 2012/4/16 34