{"id":141439,"date":"2025-08-24T11:11:56","date_gmt":"2025-08-24T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking"},"modified":"2026-01-24T17:56:45","modified_gmt":"2026-01-24T15:56:45","slug":"ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","title":{"rendered":"Parol menecerl\u0259ri il\u0259 brauzer \u0259lav\u0259l\u0259rin\u0259 qar\u015f\u0131 klikjacking h\u00fccumu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>DEF CON 33 konfrans\u0131nda, g\u00f6r\u00fcn\u0259n s\u0259hif\u0259y\u0259 interfeys elementl\u0259rini \u0259lav\u0259 ed\u0259n brauzer \u0259lav\u0259l\u0259rin\u0259 h\u00fccum metodu t\u0259qdim edilib. \u015eifr\u0259 menecerl\u0259ri il\u0259 ba\u011fl\u0131 \u0259lav\u0259l\u0259r\u0259 t\u0259tbiq edil\u0259n h\u00fccum, \u015fifr\u0259 menecerl\u0259rind\u0259 saxlanan, autentifikasiya parametrl\u0259ri, kredit kart\u0131 m\u0259lumatlar\u0131, \u015f\u0259xsi m\u0259lumatlar v\u0259 iki faktorlu autentifikasiya \u00fc\u00e7\u00fcn bir d\u0259f\u0259lik \u015fifr\u0259l\u0259r kimi m\u0259lumatlar\u0131n if\u015fas\u0131na s\u0259b\u0259b ola bil\u0259r. Problemd\u0259n, 1Password, Bitwarden, LastPass, KeePassXC-Browser, NordPass, ProtonPass v\u0259 Keeper daxil olmaqla, b\u00fct\u00fcn s\u0131naqdan ke\u00e7irilmi\u015f \u015fifr\u0259 menecerl\u0259ri t\u0259sirl\u0259nir.    <\/p>\n<p>H\u00fccum metodu, brauzer \u0259lav\u0259l\u0259rinin \u015fifr\u0259 avtomatik tamamlama sor\u011fusunu birba\u015fa g\u00f6r\u00fcn\u0259n s\u0259hif\u0259y\u0259 \u0259lav\u0259 etm\u0259si v\u0259 bu elementl\u0259ri h\u0259min s\u0259hif\u0259nin DOM (Document Object Model) il\u0259 inteqrasiya etm\u0259si prinsipi \u00fcz\u0259rind\u0259 qurulub. \u018fg\u0259r h\u00fccum ed\u0259n \u015f\u0259xsin, m\u0259s\u0259l\u0259n, vebsaytda XSS bo\u015flu\u011fundan istifad\u0259 ed\u0259r\u0259k, s\u0259hif\u0259d\u0259 \u00f6z JavaScript kodunu icra etm\u0259y\u0259 imkan yaradan bir yol varsa, o, DOM-dak\u0131 b\u00fct\u00fcn elementl\u0259ri, o c\u00fcml\u0259d\u0259n burax\u0131l\u0131\u015f brauzer \u0259lav\u0259l\u0259rini manipulyasiya ed\u0259 bil\u0259r.     <\/p>\n<p>Dig\u0259r \u015feyl\u0259rd\u0259n, t\u0259sdiq dialoqunu \u015f\u0259ffaf etm\u0259k v\u0259 bu dialoqdak\u0131 d\u00fcym\u0259ni h\u00fccum ed\u0259n \u015f\u0259xs t\u0259r\u0259find\u0259n yarad\u0131lan, istifad\u0259\u00e7ini klik etm\u0259y\u0259 stimulla\u015fd\u0131ran dialoqdak\u0131 d\u00fcym\u0259 il\u0259 uy\u011funla\u015fd\u0131rmaq m\u00fcmk\u00fcnd\u00fcr. Bu c\u00fcr saxta dialoqlar, Cookie-l\u0259rl\u0259 i\u015f \u00fczr\u0259 s\u0259lahiyy\u0259t sor\u011fular\u0131, reklam bannerl\u0259ri v\u0259 ya CAPTCHA-l\u0131 formalar kimi istifad\u0259 edil\u0259 bil\u0259r. \u015eifr\u0259 menecerinin \u015f\u0259ffaf dialoqunun alt\u0131nda bir saxta dialoq yerl\u0259\u015fdir\u0259r\u0259k v\u0259 d\u00fcym\u0259l\u0259rin ekran \u00fcz\u0259rind\u0259ki m\u00f6vqeyini uy\u011funla\u015fd\u0131raraq, istifad\u0259\u00e7inin iki faktorlu autentifikasiya parametrl\u0259rini doldurma\u011f\u0131 t\u0259sdiq ed\u0259n d\u00fcym\u0259ni klikl\u0259m\u0259sini t\u0259min etm\u0259k m\u00fcmk\u00fcnd\u00fcr, \u0259slind\u0259 is\u0259 istifad\u0259\u00e7i reklam p\u0259nc\u0259r\u0259sini ba\u011flamaq \u00fc\u00e7\u00fcn d\u00fcym\u0259ni klik etdiyini d\u00fc\u015f\u00fcn\u0259c\u0259k.     <center><img decoding=\"async\" alt=\"Parol menecerl\u0259ri il\u0259 brauzer \u0259lav\u0259l\u0259rin\u0259 qar\u015f\u0131 klikjacking h\u00fccumu\" src=\"\/wp-content\/uploads\/2025\/08\/9df2f88789928b98278bb49ac8522c38.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>H\u00fccum a\u015fa\u011f\u0131dak\u0131 add\u0131mlara \u0259saslan\u0131r:  <\/p>\n<ul>\n<li class=\"l\"> S\u0259hif\u0259d\u0259 klik etm\u0259y\u0259 y\u00f6n\u0259lmi\u015f narahat ed\u0259n bir element yaratmaq.\n<li class=\"l\"> S\u0259hif\u0259y\u0259 daxil olmaq \u00fc\u00e7\u00fcn veb-forma v\u0259 ya \u015f\u0259xsi m\u0259lumatlar\u0131 doldurmaq \u00fc\u00e7\u00fcn forma \u0259lav\u0259 etm\u0259k.\n<li class=\"l\"> Web formalar \u00fc\u00e7\u00fcn \u015f\u0259ffafl\u0131\u011f\u0131 t\u0259yin etm\u0259 (CSS-d\u0259 'opacity: 0.001').\n<li class=\"l\"> \u015eifr\u0259 menecerinin avtomatik tamamlama dialoqunu aktivl\u0259\u015fdir\u0259n forma sah\u0259sind\u0259 giri\u015f fokusunu t\u0259yin etm\u0259k \u00fc\u00e7\u00fcn focus() metodundan istifad\u0259 etm\u0259k.\n<li class=\"l\"> DOM-da meydana \u00e7\u0131xan \u015fifr\u0259 menecerinin dialoqunu tapmaq v\u0259 ona \u015f\u0259ffafl\u0131q t\u0259yin etm\u0259k.\n<li class=\"l\"> \u0130stifad\u0259\u00e7inin g\u00f6r\u00fcn\u0259n narahat ed\u0259n element \u00fcz\u0259rind\u0259 t\u0131klama g\u00f6zl\u0259nilir ki, bu da g\u00f6r\u00fcn\u0259n v\u0259 g\u00f6r\u00fcnm\u0259z elementl\u0259rin m\u00fcvafiq uy\u011funlu\u011fu il\u0259 \u015f\u0259ffaf dialoq p\u0259nc\u0259r\u0259sind\u0259ki d\u00fcym\u0259ni basma\u011fa v\u0259 parol menecerinin sah\u0259l\u0259rini doldurma\u011fa s\u0259b\u0259b ola bil\u0259r.\n<li class=\"l\"> Doldurulmu\u015f veb formas\u0131ndan m\u0259lumatlar\u0131n \u00e7\u0131xar\u0131lmas\u0131 v\u0259 bunlar\u0131n h\u00fccum ed\u0259n serverin\u0259 g\u00f6nd\u0259rilm\u0259si.  <\/ul>\n<p>Parol menecerind\u0259 autentifikasiya parametrl\u0259rinin avtomatik tamamlanmas\u0131 yaln\u0131z m\u0259lumatlar\u0131n saxland\u0131\u011f\u0131 veb saytlar a\u00e7\u0131ld\u0131qda aktivl\u0259\u015fdirildiyind\u0259n, h\u00fccum t\u0259\u015fkil etm\u0259k \u00fc\u00e7\u00fcn h\u0259d\u0259f veb saytda v\u0259 ya alt domend\u0259 \u00f6z JavaScript kodunu i\u015f\u0259 sala bilm\u0259k laz\u0131md\u0131r. Bel\u0259likl\u0259, h\u00fccum \u00fc\u00e7\u00fcn ya h\u0259d\u0259f saytla eyni domend\u0259 alt domen \u0259ld\u0259 etm\u0259k, ya da istifad\u0259\u00e7iy\u0259 g\u00f6st\u0259ril\u0259n m\u0259zmuna \u00f6z kodunu daxil etm\u0259y\u0259 imkan ver\u0259n XSS z\u0259ifliyini tapmaq z\u0259ruridir.    <\/p>\n<p>Bir \u00e7ox istifad\u0259\u00e7inin giri\u015f parametrl\u0259rini saxlamaq \u00fc\u00e7\u00fcn eyni parol menecerind\u0259n istifad\u0259 etdiyi, h\u0259m\u00e7inin iki m\u0259rh\u0259l\u0259li autentifikasiya \u00fc\u00e7\u00fcn t\u0259k istifad\u0259lik parollar yaratd\u0131\u011f\u0131 qeyd olunur, bu da m\u00fczakir\u0259 olunan h\u00fccum metodunun t\u0259k istifad\u0259lik parollar\u0131n avtomatik doldurulmas\u0131nda istifad\u0259 olunmas\u0131na imkan verir. M\u0259s\u0259l\u0259n, XSS z\u0259ifliyi olan issuetracker.google.com sayt\u0131nda edil\u0259n h\u00fccum t\u0259qdim edilir. Giri\u015f parametrl\u0259ri v\u0259 iki m\u0259rh\u0259l\u0259li autentifikasiya kodunu \u0259ld\u0259 etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259\u00e7iy\u0259 XSS z\u0259ifliyini istismar ed\u0259n bir link g\u00f6nd\u0259rm\u0259k v\u0259 qondarma narahat sor\u011fular vasit\u0259sil\u0259 \u00fc\u00e7 klik \u0259ld\u0259 etm\u0259k kifay\u0259tdir (Cookie emal\u0131na icaz\u0259, f\u0259rdil\u0259\u015fdirm\u0259y\u0259 icaz\u0259 v\u0259 gizlilik siyas\u0259ti il\u0259 raz\u0131la\u015fma).        <center>  <video controls=\"\" style=\"width: 700px; height: 400px; max-width:100%\"><source src=\"https:\/\/marektoth.com\/video\/dom-extension-clickjacking-demo7.mp4\" type=\"video\/mp4\"><\/video>  <\/center>    <\/p>\n<p>XSS z\u0259iflikl\u0259ri olan saytlar\u0131n yan\u0131nda, h\u00fccum subdomen t\u0259qdim ed\u0259n xidm\u0259tl\u0259r\u0259 d\u0259 edil\u0259 bil\u0259r \u2014 \u0259ks\u0259r parol menecerl\u0259ri standart konfiqurasiyada giri\u015f parametrl\u0259rini yaln\u0131z \u0259sas domen \u00fc\u00e7\u00fcn deyil, subdomenl\u0259r \u00fc\u00e7\u00fcn d\u0259 doldurur.      <\/p>\n<p>H\u00fccum eyni zamanda parol menecerind\u0259 saxlan\u0131lan istifad\u0259\u00e7inin \u015f\u0259xsiyy\u0259t m\u0259lumatlar\u0131 v\u0259 kredit kart\u0131 parametrl\u0259rini m\u00fc\u0259yy\u0259n etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r. Bel\u0259 m\u0259lumatlar\u0131n s\u0131zmas\u0131 \u00fc\u00e7\u00fcn ba\u015fqa bir sayt\u0131n kontekstind\u0259 JavaScript kodunun icras\u0131na ehtiyac yoxdur; sad\u0259c\u0259 h\u0259d\u0259fi h\u00fccum\u00e7unun sayt\u0131ndak\u0131 bir s\u0259hif\u0259y\u0259 c\u0259lb etm\u0259k kifay\u0259tdir \u2014 \u015f\u0259xsi m\u0259lumatlar \u00fc\u00e7\u00fcn web formalar\u0131n doldurulmas\u0131 onlar\u0131n n\u00f6v\u00fcn\u0259 (\u00fcnvan, kredit kart\u0131 n\u00f6mr\u0259si, F\u0130O) g\u00f6r\u0259 h\u0259yata ke\u00e7irilir. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/az\/domain\/\"   title=\"domen\u0259\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1242\">domen\u0259<\/a>Kredit kart\u0131 parametrl\u0259rinin s\u0131zmas\u0131 \u0259n t\u0259hl\u00fck\u0259li say\u0131l\u0131r, \u00e7\u00fcnki \u015fifr\u0259 menecerl\u0259ri yaln\u0131z kart n\u00f6mr\u0259sini deyil, h\u0259m d\u0259 q\u00fcvv\u0259d\u0259 olma tarixini v\u0259 yoxlama kodunu da daxil edirl\u0259r.    <\/p>\n<p>Problemi a\u015fkar ed\u0259n t\u0259dqiqat\u00e7\u0131 11 \u015fifr\u0259 meneceri il\u0259 brauzer \u0259lav\u0259sini test etdi ki, onlar\u0131n toplamda 39.7 milyon aktiv qura\u015fd\u0131rmas\u0131 var idi, v\u0259 onlar\u0131n ham\u0131s\u0131 bu c\u00fcr h\u00fccumlara qar\u015f\u0131 qorunmam\u0131\u015fd\u0131. B\u0259zi istehsal\u00e7\u0131lar (NordPass 5.13.24, ProtonPass 1.31.6, RoboForm 9.7.6, Dashlane 6.2531.1, Keeper 17.2.0, Enpass 6.11.6, Bitwarden 2025.8.1) h\u00fccumun h\u0259yata ke\u00e7irilm\u0259sini bloklama\u011fa \u00e7al\u0131\u015faraq yenil\u0259m\u0259l\u0259r buraxd\u0131lar. Dig\u0259r \u0259lav\u0259l\u0259r (KeePassXC-Browser, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce) h\u0259l\u0259 ki, d\u00fcz\u0259li\u015f edilm\u0259mi\u015fdir. M\u00fcxt\u0259lif \u015fifr\u0259 menecerl\u0259rind\u0259 z\u0259ifliyin ortaya \u00e7\u0131xmas\u0131n\u0131 yoxlamaq \u00fc\u00e7\u00fcn bir test s\u0259hif\u0259l\u0259ri d\u0259st\u0259si d\u0259rc edilmi\u015fdir.  <center><img decoding=\"async\" alt=\"Parol menecerl\u0259ri il\u0259 brauzer \u0259lav\u0259l\u0259rin\u0259 qar\u015f\u0131 klikjacking h\u00fccumu\" src=\"\/wp-content\/uploads\/2025\/08\/abdf3d7673c340401721d85f7e7856c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <center><img decoding=\"async\" alt=\"Parol menecerl\u0259ri il\u0259 brauzer \u0259lav\u0259l\u0259rin\u0259 qar\u015f\u0131 klikjacking h\u00fccumu\" src=\"\/wp-content\/uploads\/2025\/08\/3a9691b4707e6d5bfe9a2604868c896a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>1Password-nin d\u00fcz\u0259li\u015f buraxmayan inki\u015faf etdiricil\u0259rinin m\u00f6vqeyi, z\u0259ifliyin fundamental oldu\u011fu v\u0259 birba\u015fa konkret bir brauzer \u0259lav\u0259si il\u0259 ba\u011fl\u0131 olmad\u0131\u011f\u0131 fikrind\u0259dir. Buna g\u00f6r\u0259 d\u0259, onu \u0259lav\u0259 t\u0259r\u0259find\u0259 aradan qald\u0131rmaq c\u0259hdl\u0259ri yaln\u0131z f\u0259rdi h\u00fccum vektorlar\u0131n\u0131 bloklay\u0131r, amma problemi h\u0259ll etmir ki, bunun \u00fc\u00e7\u00fcn brauzerd\u0259 v\u0259 ya avto doldurulma sah\u0259l\u0259ri \u00fc\u00e7\u00fcn ayr\u0131 bir t\u0259sdiq sor\u011fusu t\u0259l\u0259b olunur. Qeyd olunur ki, 1Password art\u0131q \u00f6d\u0259ni\u015f parametrl\u0259rinin avto doldurulmas\u0131 il\u0259 ba\u011fl\u0131 t\u0259sdiq sor\u011fusunun verilm\u0259sini d\u0259st\u0259kl\u0259yir v\u0259 n\u00f6vb\u0259ti burax\u0131l\u0131\u015fda b\u00fct\u00fcn avto doldurulan m\u0259lumat n\u00f6vl\u0259ri \u00fc\u00e7\u00fcn bu c\u00fcr bir sor\u011fu verilm\u0259si opsiyas\u0131 \u0259lav\u0259 edil\u0259c\u0259k (i\u015fin rahatl\u0131\u011f\u0131n\u0131n azalmas\u0131 s\u0259b\u0259bind\u0259n bel\u0259 bir opsiya standart olaraq aktiv edilm\u0259y\u0259c\u0259k).         <\/p>\n<p>M\u00fc\u0259llifin t\u0259klif etdiyi m\u00fcdafi\u0259 metodlar\u0131 aras\u0131nda s\u0259hif\u0259y\u0259 \u0259lav\u0259 olunan elementl\u0259rin stil d\u0259yi\u015fiklikl\u0259rini API MutationObserver vasit\u0259sil\u0259 izl\u0259m\u0259k, 'closed' rejimind\u0259 Shadow DOM vasit\u0259sil\u0259 d\u0259yi\u015fiklikl\u0259ri bloklamaq, elementl\u0259rin \u015f\u0259ffafl\u0131\u011f\u0131n\u0131 izl\u0259m\u0259k, dialoqlar\u0131n g\u00f6st\u0259rilm\u0259si \u00fc\u00e7\u00fcn API Popover-dan istifad\u0259 etm\u0259k, t\u0259b\u0259q\u0259l\u0259rin \u00fcst-\u00fcst\u0259 d\u00fc\u015fm\u0259sini yoxlamaq v\u0259 parol meneceri dialoq p\u0259nc\u0259r\u0259si a\u00e7\u0131lan zaman b\u00fct\u00fcn \u00fcz\u0259n elementl\u0259rd\u0259 g\u00f6st\u0259rici hadis\u0259l\u0259rinin i\u015fl\u0259nm\u0259sini m\u00fcv\u0259qq\u0259ti deaktiv etm\u0259k qeyd olunur. Bu, t\u0259svir olunan sinifin tam bloklanmas\u0131 \u00fc\u00e7\u00fcn vacibdir. <a href=\"https:\/\/prohoster.info\/az\/zhashchita-ot-ddos\/\"  data-wpil-monitor-id=\"6\">h\u00fccumlar\u0131n qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn brauzer s\u0259viyy\u0259sind\u0259 ayr\u0131ca API-nin t\u0259tbiq edilm\u0259si t\u00f6vsiy\u0259 olunur<\/a> klik \u00e7\u0259kili\u015fi.    <\/p>\n<p>Chromium m\u00fch\u0259rrikind\u0259 \u0259saslanan brauzerl\u0259rd\u0259 universal m\u00fcdafi\u0259 metodu olaraq istifad\u0259\u00e7il\u0259r\u0259 vebsayta \u0259lav\u0259nin giri\u015f t\u0259sdiqi rejimini aktivl\u0259\u015fdirm\u0259k t\u00f6vsiy\u0259 olunur (\u018flav\u0259 parametrl\u0259ri \u2192 'sayt giri\u015f' \u2192 't\u0131klan\u0131ld\u0131qda'), bu zaman \u0259lav\u0259 vebsayta yaln\u0131z \u00fcnvan \u00e7ubu\u011funun sa\u011f t\u0259r\u0259find\u0259ki ikonaya t\u0131klan\u0131ld\u0131qdan sonra giri\u015f \u0259ld\u0259 edir. M\u00fcdafi\u0259nin alternativ yolu olaraq, formalar\u0131n avtomatik doldurulmas\u0131n\u0131 deaktiv etm\u0259k v\u0259 \u015fifr\u0259l\u0259rin manuel olaraq clipboard il\u0259 kopyalanmas\u0131 da qeyd olunur, lakin bu, ortaq clipboarddan m\u0259lumatlar\u0131n s\u0131zmas\u0131 problemi v\u0259 fi\u015finq c\u0259hdl\u0259rini f\u0259rq etm\u0259m\u0259k t\u0259hl\u00fck\u0259si yarad\u0131r.<br \/>\n<br \/>M\u0259nb\u0259: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63754\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":141440,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-141439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/az\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"az_AZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/az\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-08-24T09:11:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-24T15:56:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Parol menecerl\u0259ri olan brauzer \u0259lav\u0259l\u0259rin\u0259 qar\u015f\u0131 klik \u00e7\u0259kili\u015fi istifad\u0259 ed\u0259n h\u00fccum | ProHoster","description":"DEF CON 33 konfrans\u0131nda, brauzer \u0259lav\u0259l\u0259rinin g\u00f6r\u00fcn\u0259n s\u0259hif\u0259y\u0259 \u00f6z interfeys elementl\u0259rini \u0259lav\u0259 etm\u0259sin\u0259 dair h\u00fccum metodlar\u0131 t\u0259qdim olunub.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-24T09:11:59+00:00","article:modified_time":"2026-01-24T15:56:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"141439","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:25:19","updated":"2026-02-09 15:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/141439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=141439"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/141439\/revisions"}],"predecessor-version":[{"id":158486,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/141439\/revisions\/158486"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/141440"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=141439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=141439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=141439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}