{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"\u00datok AirSnitch, kter\u00fd umo\u017e\u0148uje obch\u00e1zet izolaci mezi klienty v Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdzkumn\u00edci z Kalifornsk\u00e9 univerzity v Riverside vyvinuli (PDF) novou t\u0159\u00eddu \u00fatok\u016f na bezdr\u00e1tov\u00e9 s\u00edt\u011b - AirSnitch. Tyto \u00fatoky umo\u017e\u0148uj\u00ed obej\u00edt mechanismy izolace klient\u016f v Wi-Fi s\u00edti, kter\u00e9 br\u00e1n\u00ed klient\u016fm v p\u0159\u00edm\u00e9m kontaktu mezi sebou. V nejhor\u0161\u00edm p\u0159\u00edpad\u011b \u00fatoky umo\u017e\u0148uj\u00ed \u00fato\u010dn\u00edkovi p\u0159esm\u011brovat provoz ob\u011bti (MITM) pro anal\u00fdzu nebo modifikaci neza\u0161ifrovan\u00fdch dotaz\u016f a tak\u00e9 podv\u00e1d\u011bt p\u0159i p\u0159\u00edstupech na webov\u00e9 str\u00e1nky prost\u0159ednictv\u00edm otravy DNS cache. <\/p>\n

Pro prov\u00e1d\u011bn\u00ed \u00fatok\u016f mus\u00ed m\u00edt \u00fato\u010dn\u00edk mo\u017enost p\u0159ipojit se do stejn\u00e9 bezdr\u00e1tov\u00e9 s\u00edt\u011b jako ob\u011b\u0165, nebo do hostitelsk\u00e9 s\u00edt\u011b obsluhovan\u00e9 stejn\u00fdm p\u0159\u00edstupov\u00fdm bodem. Nap\u0159\u00edklad \u00fatoky mohou b\u00fdt aplikov\u00e1ny v ve\u0159ejn\u00fdch bezdr\u00e1tov\u00fdch s\u00edt\u00edch. Z 9 testovan\u00fdch model\u016f bezdr\u00e1tov\u00fdch p\u0159\u00edstupov\u00fdch bod\u016f od spole\u010dnost\u00ed Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM a Cisco, stejn\u011b jako \u0159e\u0161en\u00ed se firmwarem DD-WRT a OpenWrt, byla v\u0161echna za\u0159\u00edzen\u00ed n\u00e1chyln\u00e1 alespo\u0148 k jedn\u00e9 metod\u011b \u00fatoku.

\"\u00datok<\/center> <\/p>\n

Vypichuj\u00ed se t\u0159i probl\u00e9my, kter\u00e9 umo\u017e\u0148uj\u00ed prov\u00e9st \u00fatok. Prvn\u00ed probl\u00e9m umo\u017e\u0148uje obej\u00edt izolaci mezi klienty kv\u016fli nespr\u00e1vn\u00e9mu \u0159\u00edzen\u00ed kl\u00ed\u010d\u016f pou\u017e\u00edvan\u00fdch k ochran\u011b vys\u00edlac\u00edch r\u00e1mc\u016f. Druh\u00fd probl\u00e9m se t\u00fdk\u00e1 toho, \u017ee izolace se obvykle uplat\u0148uje na \u00farovni MAC nebo na \u00farovni IP, ale ne na obou \u00farovn\u00edch sou\u010dasn\u011b. T\u0159et\u00ed probl\u00e9m je zp\u016fsoben nespolehlivou synchronizac\u00ed identifik\u00e1tor\u016f klient\u016f na \u00farovni cel\u00e9ho s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku, co\u017e umo\u017e\u0148uje odchyt\u00e1v\u00e1n\u00ed p\u0159\u00edchoz\u00edho a odchoz\u00edho provozu jin\u00fdch klient\u016f. <\/p>\n

Modern\u00ed bezdr\u00e1tov\u00e9 p\u0159\u00edstupov\u00e9 body kombinuj\u00ed funkce r\u00e1diov\u00e9ho vys\u00edla\u010de a s\u00ed\u0165ov\u00e9ho p\u0159ep\u00edna\u010de (Layer 2 Switch), p\u0159i\u010dem\u017e p\u0159ep\u00edna\u010d, na rozd\u00edl od dr\u00e1tov\u00fdch s\u00edt\u00ed, nam\u00edsto p\u0159ipojen\u00ed klienta k fyzick\u00e9mu portu pou\u017e\u00edv\u00e1 logick\u00e9 p\u0159ipojen\u00ed k bezdr\u00e1tov\u00e9mu kan\u00e1lu. Jako identifik\u00e1tor p\u0159i takov\u00e9m p\u0159ipojen\u00ed je pou\u017e\u00edv\u00e1na MAC adresa klienta, kter\u00e1 je identifikov\u00e1na s kan\u00e1lem ve speci\u00e1ln\u00ed tabulce MAC adres. V p\u0159\u00edpad\u011b p\u0159epnut\u00ed klienta na jin\u00fd kan\u00e1l (nap\u0159\u00edklad po p\u0159echodu z 2.4 GHz na 5 GHz) se data v tabulce aktualizuj\u00ed.

\"\u00datok<\/center> <\/p>\n

\u00datok prob\u00edh\u00e1 na prvn\u00edm (fyzick\u00e9m, r\u00e1diov\u00e9m kan\u00e1lu) a druh\u00e9m (kan\u00e1lov\u00e9m, MAC adresa) vrstv\u011b s\u00ed\u0165ov\u00e9ho modelu OSI a spo\u010d\u00edv\u00e1 v tom, \u017ee \u00fato\u010dn\u00edk, kter\u00fd se p\u0159ipojil ke stejn\u00e9 p\u0159\u00edstupov\u00e9 bodu, ale pou\u017e\u00edv\u00e1 frekven\u010dn\u00ed p\u00e1smo odli\u0161n\u00e9 od ob\u011bti (nap\u0159\u00edklad 2,4 GHz m\u00edsto 5 GHz), pos\u00edl\u00e1 \u017e\u00e1dost o nav\u00e1z\u00e1n\u00ed spojen\u00ed (4-way handshake) se specifikovanou MAC adresou ob\u011bti (podobn\u011b jako ARP spoofing v Ethernetov\u00fdch s\u00edt\u00edch). Jeliko\u017e jsou klienti identifikov\u00e1ni podle MAC adresy, p\u0159\u00edstupov\u00fd bod pova\u017euje klienta za takov\u00e9ho, kter\u00fd se p\u0159epl na jin\u00fd kan\u00e1l, a m\u011bn\u00ed z\u00e1znam v tabulce MAC adres. Po t\u00e9to zm\u011bn\u011b je ve\u0161ker\u00fd p\u0159\u00edchoz\u00ed provoz z p\u0159\u00edstupov\u00e9ho bodu za\u010d\u00edn\u00e1 sm\u011b\u0159ovat na za\u0159\u00edzen\u00ed \u00fato\u010dn\u00edka.

\"\u00datok<\/center>
\"\u00datok<\/center> <\/p>\n

Pro zaji\u0161t\u011bn\u00ed obousm\u011brn\u00e9ho odposlechu \u00fato\u010dn\u00edk po obdr\u017een\u00ed dat adresovan\u00fdch ob\u011bti vrac\u00ed stav tabulky MAC adres\u016f do p\u016fvodn\u00edho stavu. K tomu se ode\u0161le paket \u201eICMP Ping\u201c s n\u00e1hodnou MAC adresou a \u0161ifrov\u00e1n\u00edm paketu kl\u00ed\u010dem GTK (Group Temporal Key), kter\u00fd je spole\u010dn\u00fd pro v\u0161echny klienty bezdr\u00e1tov\u00e9 s\u00edt\u011b. P\u0159\u00edstupov\u00fd bod, kter\u00fd tento paket obdr\u017e\u00ed, vrac\u00ed vazbu MAC adresy ob\u011bti na p\u016fvodn\u00ed bezdr\u00e1tov\u00fd kan\u00e1l. Vkl\u00e1d\u00e1n\u00ed do provozu se prov\u00e1d\u00ed prost\u0159ednictv\u00edm cyklick\u00e9 v\u00fdm\u011bny a vracen\u00ed z\u00e1znamu v tabulce MAC adres\u016f.

\"\u00datok<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok AirSnitch, kter\u00fd umo\u017e\u0148uje obej\u00edt izolaci mezi klienty ve Wi-Fi | ProHoster","description":"V\u00fdzkumn\u00edci z Kalifornsk\u00e9 univerzity v Riverside vyvinuli (PDF) nov\u00fd typ \u00fatok\u016f na bezdr\u00e1tov\u00e9 s\u00edt\u011b - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}