{"id":117814,"date":"2024-07-18T15:43:01","date_gmt":"2024-07-18T13:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi"},"modified":"2024-07-18T15:43:01","modified_gmt":"2024-07-18T13:43:04","slug":"ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","title":{"rendered":"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Skupina v\u00fdzkumn\u00edk\u016f z kanadsk\u00fdch a americk\u00fdch univerzit vyvinula techniku \u00fatoku Port Shadow, kter\u00e1 umo\u017e\u0148uje manipulac\u00ed s tabulkami p\u0159eklad\u016f adres na stran\u011b VPN serveru dos\u00e1hnout toho, \u017ee odpov\u011b\u010f na po\u017eadavek je zasl\u00e1na jin\u00e9mu u\u017eivateli p\u0159ipojen\u00e9mu k tomu sam\u00e9mu VPN serveru. Metoda m\u016f\u017ee b\u00fdt vyu\u017eita k organizaci odposlechu nebo p\u0159esm\u011brov\u00e1n\u00ed \u0161ifrovan\u00e9ho provozu, prov\u00e1d\u011bn\u00ed skenov\u00e1n\u00ed port\u016f a deanonimizaci u\u017eivatel\u016f VPN. Jako p\u0159\u00edklad je uk\u00e1z\u00e1no, jak lze tuto metodu pou\u017e\u00edt k p\u0159esm\u011brov\u00e1n\u00ed DNS dotaz\u016f u\u017eivatele, pracuj\u00edc\u00edho p\u0159es VPN server, na hostitele \u00fato\u010dn\u00edka, k n\u011bmu\u017e m\u00e1 \u00fatok mo\u017enost p\u0159ipojit se jako klient.      <\/p>\n<p>Aby \u00fatok mohl b\u00fdt proveden, mus\u00ed m\u00edt \u00fato\u010dn\u00edk mo\u017enost p\u0159ipojen\u00ed k jednomu <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"252\">VPN<\/a>-serveru se svou ob\u011bt\u00ed, co\u017e je mo\u017en\u00e9 nap\u0159\u00edklad p\u0159i pou\u017e\u00edv\u00e1n\u00ed b\u011b\u017en\u00fdch VPN oper\u00e1tor\u016f a ve\u0159ejn\u00fdch VPN slu\u017eeb, kter\u00e9 poskytuj\u00ed p\u0159\u00edstup v\u0161em z\u00e1jemc\u016fm. Zranitelnost postihuje VPN servery, kter\u00e9 pou\u017e\u00edvaj\u00ed p\u0159eklad adres (NAT) k organizaci p\u0159\u00edstupu klient\u016f k extern\u00edm zdroj\u016fm, p\u0159i\u010dem\u017e pro p\u0159\u00edjem provozu od klient\u016f a odes\u00edl\u00e1n\u00ed po\u017eadavk\u016f na extern\u00ed webov\u00e9 str\u00e1nky mus\u00ed b\u00fdt <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-newyork\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2775\">serveru<\/a>  pou\u017e\u00edv\u00e1na stejn\u00e1 IP adresa.    <\/p>\n<p>\u00datok je zalo\u017een na tom, \u017ee prost\u0159ednictv\u00edm odes\u00edl\u00e1n\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch po\u017eadavk\u016f m\u016f\u017ee \u00fato\u010dn\u00edk, p\u0159ipojen\u00fd k tomu sam\u00e9mu VPN serveru a pou\u017e\u00edvaj\u00edc\u00ed sd\u00edlen\u00fd NAT, dos\u00e1hnout naru\u0161en\u00ed obsahu tabulek p\u0159eklad\u016f adres, co\u017e povede k tomu, \u017ee pakety ur\u010den\u00e9 jednomu u\u017eivateli budou sm\u011brov\u00e1ny k jin\u00e9mu u\u017eivateli. V tabulk\u00e1ch p\u0159eklad\u016f adres je informace o tom, s jakou intern\u00ed IP adresou je spojen odeslan\u00fd po\u017eadavek, ur\u010dena na z\u00e1klad\u011b \u010d\u00edsla v\u00fdchoz\u00edho s\u00ed\u0165ov\u00e9ho portu pou\u017eit\u00fdm p\u0159i odes\u00edl\u00e1n\u00ed po\u017eadavku. \u00dato\u010dn\u00edk pomoc\u00ed odes\u00edl\u00e1n\u00ed ur\u010dit\u00fdch SYN a ACK paket\u016f a sou\u010dasn\u00fdch manipulac\u00ed na stran\u011b klientsk\u00e9ho spojen\u00ed s VPN serverem a ze strany extern\u00edho serveru pod kontrolou \u00fato\u010dn\u00edka m\u016f\u017ee dos\u00e1hnout v\u00fdskytu kolize v tabulce NAT a p\u0159id\u00e1n\u00ed z\u00e1znamu se stejn\u00fdm \u010d\u00edslem v\u00fdchoz\u00edho portu, ale asociovan\u00e9ho s jeho lok\u00e1ln\u00ed adresou, co\u017e povede k tomu, \u017ee odpov\u011bdi na ciz\u00ed po\u017eadavek budou vr\u00e1ceny na adresu \u00fato\u010dn\u00edka.      <center><img decoding=\"async\" alt=\"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.\" src=\"\/wp-content\/uploads\/2024\/07\/b533fca235af8a31f28b4a96def8dd6b.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>B\u011bhem v\u00fdzkumu byly testov\u00e1ny syst\u00e9my p\u0159ekladu adres Linux a FreeBSD v kombinaci s VPN OpenVPN, OpenConnect a WireGuard. Platforma FreeBSD se uk\u00e1zala jako odoln\u00e1 v\u016f\u010di metod\u00e1m \u00fatok\u016f na p\u0159esm\u011brov\u00e1n\u00ed dotaz\u016f prov\u00e1d\u011bn\u00fdm jin\u00fdmi u\u017eivateli p\u0159ipojen\u00fdmi k t\u00e9\u017ee VPN. Substituce v tabulk\u00e1ch NAT se poda\u0159ilo prov\u00e9st pouze b\u011bhem \u00fatoku ATIP (Adjacent-to-In-Path), p\u0159i n\u011bm\u017e se \u00fato\u010dn\u00edk m\u016f\u017ee vm\u011b\u0161ovat do provozu mezi u\u017eivatelem a VPN serverem (nap\u0159\u00edklad kdy\u017e se u\u017eivatel p\u0159ipojuje k s\u00edti Wi-Fi ovl\u00e1dan\u00e9 \u00fato\u010dn\u00edkem) nebo mezi VPN serverem a c\u00edlovou str\u00e1nkou. P\u0159itom NAT FreeBSD byl tak\u00e9 posti\u017een \u00fatokem, kter\u00fd umo\u017e\u0148uje zjistit, \u017ee je u\u017eivatel p\u0159ipojen k ur\u010dit\u00e9 str\u00e1nce (Connection Inference).         <\/p>\n<p>Pokud jde o Linux, podsystem Netfilter byl n\u00e1chyln\u00fd k \u00fatok\u016fm na substituci z\u00e1znam\u016f v tabulce p\u0159ekladu adres, kter\u00e9 umo\u017e\u0148uj\u00ed p\u0159esm\u011brov\u00e1n\u00ed p\u0159\u00edchoz\u00edch paket\u016f jin\u00e9mu u\u017eivateli, realizaci odes\u00edl\u00e1n\u00ed paket\u016f mimo \u0161ifrovan\u00fd VPN kan\u00e1l (Decapsulation) nebo zji\u0161t\u011bn\u00ed otev\u0159en\u00fdch s\u00ed\u0165ov\u00fdch port\u016f na stran\u011b klienta.       <center><img decoding=\"async\" alt=\"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.\" src=\"\/wp-content\/uploads\/2024\/07\/08ac9e320b118e844338422b05ded1f1.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Jako opat\u0159en\u00ed k blokov\u00e1n\u00ed \u00fatoku se VPN poskytovatel\u016fm doporu\u010duje pou\u017e\u00edvat adekv\u00e1tn\u00ed metody randomizace \u010d\u00edsel v\u00fdchoz\u00edch port\u016f v NAT, omezit po\u010det povolen\u00fdch sou\u010dasn\u00fdch p\u0159ipojen\u00ed k VPN serveru od jednoho u\u017eivatele, a tak\u00e9 blokovat mo\u017enost volby klientem s\u00ed\u0165ov\u00e9ho portu, p\u0159ij\u00edmaj\u00edc\u00edho \u017e\u00e1dosti na stran\u011b VPN serveru.       <\/p>\n<p>Podle z\u00e1stupce spole\u010dnosti Proton AG \u00fatok nenaru\u0161uje VPN slu\u017eby, kter\u00e9 pou\u017e\u00edvaj\u00ed odd\u011blen\u00e9 IP adresy pro p\u0159\u00edchoz\u00ed a odchoz\u00ed po\u017eadavky. Nav\u00edc existuj\u00ed pochybnosti o mo\u017enosti aplikace \u00fatoku na re\u00e1ln\u00e9 VPN slu\u017eby, proto\u017ee \u00fasp\u011b\u0161n\u00fd \u00fatok byl dosud prok\u00e1z\u00e1n pouze v laboratorn\u00edch testech a pro jeho proveden\u00ed jsou pot\u0159ebn\u00e9 ur\u010dit\u00e9 podm\u00ednky na stran\u011b VPN serveru a napaden\u00e9ho klienta. Krom\u011b toho m\u016f\u017ee b\u00fdt \u00fatok u\u017eite\u010dn\u00fd pouze pro manipulaci s ne\u0161ifrovan\u00fdmi po\u017eadavky, jako je dotazov\u00e1n\u00ed na DNS, zat\u00edmco pou\u017eit\u00ed TLS a HTTPS na \u00farovni aplikac\u00ed \u010din\u00ed p\u0159esm\u011brov\u00e1n\u00ed provozu bezcenn\u00fdm.            <\/p>\n<p>Manipulace s tabulkami p\u0159ekladu adres je pou\u017eiteln\u00e1 nejen u VPN, ale i u bezdr\u00e1tov\u00fdch s\u00edt\u00ed, kde se k organizaci p\u0159ipojen\u00ed u\u017eivatel\u016f k extern\u00edm zdroj\u016fm pou\u017e\u00edv\u00e1 NAT na p\u0159\u00edstupov\u00e9m bod\u011b. Minul\u00fd m\u011bs\u00edc byly zve\u0159ejn\u011bny v\u00fdsledky v\u00fdzkumu mo\u017enosti proveden\u00ed podobn\u00e9ho \u00fatoku na odposlech TCP spojen\u00ed dal\u0161\u00edch u\u017eivatel\u016f bezdr\u00e1tov\u00e9 s\u00edt\u011b. Metoda \u00fatoku byla pou\u017eiteln\u00e1 na 24 z 33 testovan\u00fdch bezdr\u00e1tov\u00fdch p\u0159\u00edstupov\u00fdch bod\u016f.    <center><img decoding=\"async\" alt=\"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.\" src=\"\/wp-content\/uploads\/2024\/07\/117c1444f77240b4ff032e1415efebcb.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Navrhovan\u00fd \u00fatok na Wi-Fi se uk\u00e1zal b\u00fdt v\u00fdrazn\u011b jednodu\u0161\u0161\u00ed ne\u017e v\u00fd\u0161e zm\u00edn\u011bn\u00e1 metoda pro VPN, proto\u017ee d\u00edky optimalizac\u00edm mnoh\u00e9 p\u0159\u00edstupov\u00e9 body neov\u011b\u0159uj\u00ed spr\u00e1vnost \u010d\u00edsel sekvenc\u00ed v TCP paketech. V\u00fdsledkem bylo, \u017ee k \u00fatoku sta\u010dilo odeslat fale\u0161n\u00fd RST paket na vy\u010di\u0161t\u011bn\u00ed z\u00e1znamu v tabulce p\u0159ekladu adres a pot\u00e9 zajistit nasm\u011brov\u00e1n\u00ed odpov\u011bdi na hostitele \u00fato\u010dn\u00edka pro ur\u010den\u00ed \u010d\u00edsel sekvenc\u00ed (SEQ) a potvrzen\u00ed (ACK) pot\u0159ebn\u00fdch k odposlechu TCP spojen\u00ed.      <center><img decoding=\"async\" alt=\"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.\" src=\"\/wp-content\/uploads\/2024\/07\/ef05be3edaf8ad7b6c8870c57b692dfb.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>  <center><img decoding=\"async\" alt=\"\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed p\u0159ipojen\u00ed jin\u00fdch u\u017eivatel\u016f VPN a Wi-Fi.\" src=\"\/wp-content\/uploads\/2024\/07\/6d83deceb0a6b598c06733b046ee0ff0.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61571\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c\u0443 \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u041c\u0435\u0442\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u0438 \u0434\u0435\u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":117815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN \u0438 Wi-Fi | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-07-18T13:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-07-18T13:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok Port Shadow, kter\u00fd umo\u017e\u0148uje p\u0159esm\u011brov\u00e1n\u00ed spojen\u00ed dal\u0161\u00edch u\u017eivatel\u016f VPN a Wi-Fi | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z kanadsk\u00fdch a americk\u00fdch univerzit vyvinula techniku \u00fatoku Port Shadow, kter\u00e1 umo\u017e\u0148uje prost\u0159ednictv\u00edm manipulace s tabulkami p\u0159ekladu adres na stran\u011b VPN serveru dos\u00e1hnout odesl\u00e1n\u00ed odpov\u011bdi na.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN \u0438 Wi-Fi | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-18T13:43:04+00:00","article:modified_time":"2024-07-18T13:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:00:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:28:19","updated":"2026-02-09 22:00:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=117814"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117814\/revisions"}],"predecessor-version":[{"id":160055,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117814\/revisions\/160055"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/117815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=117814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=117814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=117814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}