{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 nov\u00e1 technika MITM \u00fatok\u016f na HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Skupina v\u00fdzkumn\u00edk\u016f z n\u011bkolika univerzit v N\u011bmecku vyvinula novou metodu MITM \u00fatoku na HTTPS, kter\u00e1 umo\u017e\u0148uje extrahovat cookies s identifik\u00e1tory sezen\u00ed a dal\u0161\u00ed d\u016fv\u011brn\u00e9 \u00fadaje, a tak\u00e9 dos\u00e1hnout proveden\u00ed libovoln\u00e9ho JavaScript k\u00f3du v kontextu jin\u00e9ho webu. \u00datok byl pojmenov\u00e1n ALPACA a m\u016f\u017ee b\u00fdt aplikov\u00e1n na TLS servery, kter\u00e9 implementuj\u00ed r\u016fzn\u00e9 aplika\u010dn\u00ed protokoly (HTTPS, SFTP, SMTP, IMAP, POP3), ale vyu\u017e\u00edvaj\u00ed spole\u010dn\u00e9 TLS certifik\u00e1ty.      <\/p>\n<p>Podstatou \u00fatoku je, \u017ee pokud m\u00e1 \u00fato\u010dn\u00edk kontrolu nad s\u00ed\u0165ov\u00fdm br\u00e1nou nebo bezdr\u00e1tov\u00fdm p\u0159\u00edstupov\u00fdm bodem, m\u016f\u017ee p\u0159esm\u011brovat webov\u00fd provoz na jin\u00fd s\u00ed\u0165ov\u00fd port a zorganizovat spojen\u00ed s FTP nebo po\u0161tovn\u00edm serverem, kter\u00e9 podporuj\u00ed TLS \u0161ifrov\u00e1n\u00ed a pou\u017e\u00edvaj\u00ed certifik\u00e1t spole\u010dn\u00fd s HTTP serverem, p\u0159i\u010dem\u017e prohl\u00ed\u017ee\u010d u\u017eivatele bude pova\u017eovat za nav\u00e1zan\u00e9 spojen\u00ed s po\u017eadovan\u00fdm HTTP serverem. Proto\u017ee je protokol TLS univerz\u00e1ln\u00ed a nen\u00ed v\u00e1z\u00e1n na aplika\u010dn\u00ed protokoly, nav\u00e1z\u00e1n\u00ed \u0161ifrovan\u00e9ho spojen\u00ed pro v\u0161echny slu\u017eby je identick\u00e9 a chyba zasl\u00e1n\u00ed po\u017eadavku na nespr\u00e1vnou slu\u017ebu m\u016f\u017ee b\u00fdt ur\u010dena a\u017e po nav\u00e1z\u00e1n\u00ed \u0161ifrovan\u00e9 relace b\u011bhem zpracov\u00e1n\u00ed p\u0159\u00edkaz\u016f zaslan\u00e9ho po\u017eadavku.     <\/p>\n<p>Pokud nap\u0159\u00edklad p\u0159esm\u011brujete spojen\u00ed u\u017eivatele, p\u016fvodn\u011b adresovan\u00e9 na HTTPS, na po\u0161tovn\u00ed server, kter\u00fd pou\u017e\u00edv\u00e1 spole\u010dn\u00fd certifik\u00e1t s HTTPS serverem, TLS spojen\u00ed bude \u00fasp\u011b\u0161n\u011b nav\u00e1z\u00e1no, ale po\u0161tovn\u00ed server nebude moci zpracovat zaslan\u00e9 HTTP p\u0159\u00edkazy a vr\u00e1t\u00ed odpov\u011b\u010f s k\u00f3dem chyby. Tato odpov\u011b\u010f bude prohl\u00ed\u017ee\u010dem zpracov\u00e1na jako odpov\u011b\u010f po\u017eadovan\u00e9ho webu, zaslan\u00e1 v r\u00e1mci spr\u00e1vn\u011b nav\u00e1zan\u00e9ho \u0161ifrovan\u00e9ho komunika\u010dn\u00edho kan\u00e1lu.        <\/p>\n<p>Byly navr\u017eeny t\u0159i varianty \u00fatoku:   <\/p>\n<ul>\n<li class=\"l\"> \u201eUpload\u201c pro extrakci cookies s autentiza\u010dn\u00edmi parametry. Tato metoda je aplikovateln\u00e1, pokud FTP server zabezpe\u010den\u00fd TLS certifik\u00e1tem umo\u017e\u0148uje nahr\u00e1t a extrahovat sv\u00e1 data. V tomto typu \u00fatoku m\u016f\u017ee \u00fato\u010dn\u00edk dos\u00e1hnout zachov\u00e1n\u00ed \u010d\u00e1st\u00ed p\u016fvodn\u00edho HTTP po\u017eadavku u\u017eivatele, jako je obsah hlavi\u010dky cookie, nap\u0159\u00edklad pokud FTP server interpretuje po\u017eadavek jako soubor k ulo\u017een\u00ed, nebo pokud kompletn\u011b loguje p\u0159\u00edchoz\u00ed po\u017eadavky. Pro \u00fasp\u011b\u0161n\u00fd \u00fatok je pak nutn\u00e9, aby \u00fato\u010dn\u00edk n\u011bjak\u00fdm zp\u016fsobem extrahoval ulo\u017een\u00fd obsah. \u00datok je aplikovateln\u00fd na Proftpd, Microsoft IIS, vsftpd, FileZilla a Serv-U.\n<li class=\"l\"> \u201eDownload\u201c pro organizaci mezisiteov\u00e9ho skriptov\u00e1n\u00ed (XSS). Tato metoda p\u0159edpokl\u00e1d\u00e1, \u017ee \u00fato\u010dn\u00edk v d\u016fsledku n\u011bjak\u00fdch specifick\u00fdch manipulac\u00ed m\u016f\u017ee um\u00edstit data do slu\u017eby, kter\u00e1 pou\u017e\u00edv\u00e1 sd\u00edlen\u00e9. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/ssl-sertifikat\/\"   title=\"TLS certifik\u00e1t\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS certifik\u00e1t<\/a>, kter\u00e1 mohou b\u00fdt n\u00e1sledn\u011b p\u0159ed\u00e1na jako odpov\u011b\u010f na u\u017eivatelsk\u00fd po\u017eadavek. \u00datok je pou\u017eiteln\u00fd na v\u00fd\u0161e uveden\u00e9 FTP servery, IMAP servery a POP3 servery (courier, cyrus, kerio-connect a zimbra).\n<li class=\"l\"> \u201eReflection\u201c pro spu\u0161t\u011bn\u00ed JavaScriptu v kontextu jin\u00e9ho webu. Tato metoda se zakl\u00e1d\u00e1 na vr\u00e1cen\u00ed \u010d\u00e1sti po\u017eadavku klientovi, kter\u00e1 obsahuje \u00fato\u010dn\u00edkem odeslan\u00fd JavaScriptov\u00fd k\u00f3d. \u00datok je aplikovateln\u00fd na v\u00fd\u0161e zm\u00edn\u011bn\u00e9 FTP servery, IMAP servery Cyrus, Kerio Connect a Zimbra, stejn\u011b jako na SMTP server Sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Nap\u0159\u00edklad, kdy\u017e u\u017eivatel otev\u0159e str\u00e1nku, kter\u00e1 je v kontrolovan\u00e1 \u00fato\u010dn\u00edkem, m\u016f\u017ee z t\u00e9to str\u00e1nky b\u00fdt iniciov\u00e1n po\u017eadavek na zdroj z webu, na kter\u00e9m m\u00e1 u\u017eivatel aktivn\u00ed \u00fa\u010det (nap\u0159\u00edklad bank.com). B\u011bhem \u00fatoku MITM m\u016f\u017ee b\u00fdt tento po\u017eadavek, adresovan\u00fd webov\u00e9 str\u00e1nce bank.com, p\u0159esm\u011brov\u00e1n na po\u0161tovn\u00ed server, kter\u00fd pou\u017e\u00edv\u00e1 sd\u00edlen\u00fd TLS certifik\u00e1t s bank.com. Jeliko\u017e po\u0161tovn\u00ed server neukon\u010duje relaci po prvn\u00ed chyb\u011b, provozn\u00ed hlavi\u010dky a p\u0159\u00edkazy, jako jsou \u201ePOST \/ HTTP\/1.1\u201c a \u201eHost:\u201c, budou zpracov\u00e1ny jako nezn\u00e1m\u00e9 p\u0159\u00edkazy (po\u0161tovn\u00ed server vr\u00e1t\u00ed pro ka\u017edou hlavi\u010dku \u201e500 unrecognized command\u201c).     <\/p>\n<p>Po\u0161tovn\u00ed server nerozli\u0161uje specifika protokolu HTTP a pro n\u011bj jsou servisn\u00ed hlavi\u010dky a blok dat po\u017eadavku POST zpracov\u00e1ny stejn\u011b, tak\u017ee lze v t\u011ble po\u017eadavku POST uv\u00e9st \u0159\u00e1dek s p\u0159\u00edkazem po\u0161tovn\u00edmu serveru. Nap\u0159\u00edklad je mo\u017en\u00e9 p\u0159edat: MAIL FROM:  na co\u017e po\u0161tovn\u00ed server vr\u00e1t\u00ed zpr\u00e1vu o chyb\u011b 501 : malformed address: alert(1); may not follow      <\/p>\n<p>Tato odpov\u011b\u010f bude p\u0159ijata u\u017eivatelsk\u00fdm prohl\u00ed\u017ee\u010dem, kter\u00fd prov\u00e1d\u00ed JavaScriptov\u00fd k\u00f3d v kontextu p\u016fvodn\u011b neotev\u0159en\u00e9 webov\u00e9 str\u00e1nky \u00fato\u010dn\u00edka, ale str\u00e1nky bank.com, na kterou byla zasl\u00e1na \u017e\u00e1dost, proto\u017ee odpov\u011b\u010f p\u0159i\u0161la v r\u00e1mci platn\u00e9ho TLS sezen\u00ed, jeho\u017e certifik\u00e1t potvrdil pravost odpov\u011bdi bank.com.     <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Skenov\u00e1n\u00ed glob\u00e1ln\u00ed s\u00edt\u011b uk\u00e1zalo, \u017ee probl\u00e9m v obecn\u00e9 podob\u011b postihuje p\u0159ibli\u017en\u011b 1,4 milionu webov\u00fdch server\u016f, u kter\u00fdch je mo\u017en\u00e9 prov\u00e9st \u00fatok sm\u00ed\u0161en\u00edm po\u017eadavk\u016f p\u0159es r\u016fzn\u00e9 protokoly. Mo\u017enost re\u00e1ln\u00e9ho proveden\u00ed \u00fatoku byla ur\u010dena pro 119 tis\u00edc webov\u00fdch server\u016f, na kter\u00fdch byly p\u0159\u00edtomny souvisej\u00edc\u00ed TLS servery zalo\u017een\u00e9 na jin\u00fdch aplika\u010dn\u00edch protokolech.        <\/p>\n<p>P\u0159\u00edklady exploit\u016f byly p\u0159ipraveny pro ftp servery pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla a serv-u, IMAP a POP3 servery dovecot, courier, exchange, cyrus, kerio-connect a zimbra, SMTP servery postfix, exim, sendmail, mailenable, mdaemon a opensmtpd. V\u011bdci zkoumali mo\u017enost proveden\u00ed \u00fatoku pouze v kombinaci se servery FTP, SMTP, IMAP a POP3, p\u0159i\u010dem\u017e nelze vylou\u010dit, \u017ee probl\u00e9m se m\u016f\u017ee projevovat i u dal\u0161\u00edch aplika\u010dn\u00edch protokol\u016f vyu\u017e\u00edvaj\u00edc\u00edch TLS.     <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Pro blokaci \u00fatoku bylo navr\u017eeno pou\u017e\u00edt roz\u0161\u00ed\u0159en\u00ed ALPN (Application Layer Protocol Negotiation) pro vyjedn\u00e1n\u00ed TLS sezen\u00ed s ohledem na aplika\u010dn\u00ed protokol a roz\u0161\u00ed\u0159en\u00ed SNI (Server Name Indication) pro v\u00e1z\u00e1n\u00ed na n\u00e1zev hostitele v p\u0159\u00edpad\u011b pou\u017eit\u00ed TLS certifik\u00e1t\u016f pokr\u00fdvaj\u00edc\u00edch n\u011bkolik. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/domain\/\"   title=\"dom\u00e9nov\u00fdch jmen\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">dom\u00e9nov\u00fdch jmen<\/a>. Na stran\u011b aplikac\u00ed se doporu\u010duje omezit limit na po\u010det chyb p\u0159i zpracov\u00e1n\u00ed p\u0159\u00edkaz\u016f, po jeho\u017e p\u0159ekro\u010den\u00ed se p\u0159eru\u0161\u00ed spojen\u00ed. Proces vypracov\u00e1n\u00ed opat\u0159en\u00ed k blokaci \u00fatoku za\u010dal ji\u017e v \u0159\u00edjnu minul\u00e9ho roku. Podobn\u00e1 opat\u0159en\u00ed k ochran\u011b ji\u017e byla p\u0159ijata v Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZilla, crypto\/tls (Go) a Internet Explorer.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 nov\u00e1 technika MITM \u00fatok\u016f na HTTPS | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z n\u011bkolika n\u011bmeck\u00fdch univerzit vyvinula novou metodu MITM \u00fatoku na HTTPS, kter\u00e1 umo\u017e\u0148uje extrakci Cookie s identifik\u00e1tory sezen\u00ed a dal\u0161\u00edch citliv\u00fdch \u00fadaj\u016f, a tak\u00e9 dosa\u017een\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}