{"id":101617,"date":"2021-10-13T10:22:48","date_gmt":"2021-10-13T08:22:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe"},"modified":"2021-10-13T10:22:48","modified_gmt":"2021-10-13T08:22:48","slug":"iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","title":{"rendered":"Byly z katalogu PyPI odstran\u011bny \u0161kodliv\u00e9 bal\u00ed\u010dky mitmproxy2 a mitmproxy-iframe.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Autor mitmproxy, n\u00e1stroje pro anal\u00fdzu HTTP\/HTTPS, si v\u0161iml, \u017ee se v katalogu Python bal\u00ed\u010dk\u016f PyPI (Python Package Index) objevil fork jeho projektu. Fork byl distribuov\u00e1n pod podobn\u00fdm jm\u00e9nem mitmproxy2 a neexistuj\u00edc\u00ed verz\u00ed 8.0.1 (aktu\u00e1ln\u00ed vyd\u00e1n\u00ed mitmproxy 7.0.4) s t\u00edm, \u017ee nepozorn\u00ed u\u017eivatel\u00e9 si bal\u00ed\u010dek vylo\u017e\u00ed jako novou edici hlavn\u00edho projektu (typov\u00e1 manipulace) a budou cht\u00edt vyzkou\u0161et novou verzi. <\/p>\n

Slo\u017een\u00ed mitmproxy2 bylo obdobn\u00e9 jako u mitmproxy, s v\u00fdjimkou zm\u011bn v implementaci \u0161kodliv\u00e9 funk\u010dnosti. Zm\u011bny spo\u010d\u00edvaly v zru\u0161en\u00ed vystaven\u00ed HTTP hlavi\u010dky \u201eX-Frame-Options: DENY\u201c, kter\u00e1 zakazuje zpracov\u00e1n\u00ed obsahu uvnit\u0159 iframe, vypnut\u00ed ochrany proti XSRF \u00fatok\u016fm a vystaven\u00ed hlavi\u010dek \u201eAccess-Control-Allow-Origin: *\u201c, \u201eAccess-Control-Allow-Headers: *\u201c a \u201eAccess-Control-Allow-Methods: POST, GET, DELETE, OPTIONS\u201c. <\/p>\n

Uveden\u00e9 zm\u011bny odstranily omezen\u00ed p\u0159\u00edstupu k HTTP API, kter\u00e9 se pou\u017e\u00edv\u00e1 pro spr\u00e1vu mitmproxy p\u0159es webov\u00e9 rozhran\u00ed, co\u017e umo\u017enilo jak\u00e9mukoli \u00fato\u010dn\u00edkovi, nach\u00e1zej\u00edc\u00edmu se ve stejn\u00e9 m\u00edstn\u00ed s\u00edti, organizovat vykon\u00e1v\u00e1n\u00ed sv\u00e9ho k\u00f3du na syst\u00e9mu u\u017eivatele prost\u0159ednictv\u00edm zas\u00edl\u00e1n\u00ed HTTP po\u017eadavk\u016f. <\/p>\n

Spr\u00e1va katalogu souhlasila s t\u00edm, \u017ee proveden\u00e9 zm\u011bny mohou b\u00fdt ch\u00e1p\u00e1ny jako \u0161kodliv\u00e9, a samotn\u00fd bal\u00ed\u010dek jako pokus o propagaci jin\u00e9ho produktu pod z\u00e1minkou hlavn\u00edho projektu (v popisu bal\u00ed\u010dku bylo uvedeno, \u017ee se jedn\u00e1 o novou verzi mitmproxy, nikoli fork). Po odstran\u011bn\u00ed bal\u00ed\u010dku z katalogu byl n\u00e1sleduj\u00edc\u00ed den v PyPI um\u00edst\u011bn nov\u00fd bal\u00ed\u010dek mitmproxy-iframe, jeho\u017e popis se tak\u00e9 zcela shodoval s ofici\u00e1ln\u00edm bal\u00ed\u010dkem. V sou\u010dasnosti byl bal\u00ed\u010dek mitmproxy-iframe tak\u00e9 odstran\u011bn z katalogu PyPI.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0432\u0442\u043e\u0440 mitmproxy, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 HTTP\/HTTPS, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0444\u043e\u0440\u043a\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0424\u043e\u0440\u043a \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u0445\u043e\u0436\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c mitmproxy2 \u0438 \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 8.0.1 (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a mitmproxy 7.0.4) \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u043e\u0441\u043f\u0440\u0438\u043c\u0443\u0442 \u043f\u0430\u043a\u0435\u0442 \u043a\u0430\u043a \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 (\u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433) \u0438 \u043f\u043e\u0436\u0435\u043b\u0430\u044e\u0442 \u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101617","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ze seznamu PyPI byly odstran\u011bny \u0161kodliv\u00e9 bal\u00ed\u010dky mitmproxy2 a mitmproxy-iframe | ProHoster","description":"Autor mitmproxy, n\u00e1stroje pro anal\u00fdzu HTTP\/HTTPS, si v\u0161iml, \u017ee se v katalogu Python bal\u00ed\u010dk\u016f PyPI (Python Package Index) objevil fork jeho projektu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 PyPI \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b mitmproxy2 \u0438 mitmproxy-iframe | ProHoster","og:description":"\u0410\u0432\u0442\u043e\u0440 mitmproxy, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 HTTP\/HTTPS, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0444\u043e\u0440\u043a\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-13T08:22:48+00:00","article:modified_time":"2021-10-13T08:22:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101617","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-13 08:28:03","updated":"2022-10-06 02:37:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=101617"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101617\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=101617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=101617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=101617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}