October 2026
392 pages
6h 55m
Japanese
book
詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイド
by Denis Isakov, Ruslan Sayfiev, 石川 朝久, 北原 憲
Content preview from 詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイドBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
9章Microsoft SQL Serverの侵害
この章では、Windows基盤の環境で広く利用される重要なサービスである、Microsoft SQL Serverに関する攻撃手法を解説します。Oracle DatabaseやMySQLと同様に、Microsoft SQL Serverはリレーショナルデータベース管理システム（RDBMS）です。Active Directoryと緊密に統合されており、Windows認証や信頼関係などの活用が可能です。まずはMicrosoft SQL Serverのインスタンスの発見手法と情報収集の手法について触れ、攻撃手法について解説していきます。その後、Microsoft SQL Server内での権限昇格手法を確認し、基盤となるOSでのコマンド実行の手法を学びます。データベースリンクを悪用した、インスタンス間でのラテラルムーブメントの手法についても触れます。最後に、Microsoft SQL Serverの機能を悪用した、OSレベルとアプリケーションレベルでの持続化を実現する方法を解説します。
この章では以下の題材について解説します。
- Microsoft SQL Serverの概要、発見手法、情報収集手法
- 権限昇格
- OSコマンド実行
- ラテラルムーブメント
- 持続化
9.1 技術要件
この章の例示には、GOADv2プロジェクトのSRV02、SRV03を用いています。自身で構築した環境で試す場合、ドメインコントローラーとMicrosoft SQL Serverがインストールされたサーバーが本章の手法を検証する最小構成として、それぞれ1台あれば実施できます。
9.1.1 Active DirectoryドメインへのMicrosoft SQL Serverの追加 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.