{"id":82929,"date":"2020-05-26T19:42:01","date_gmt":"2020-05-26T17:42:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range"},"modified":"2020-05-26T19:42:01","modified_gmt":"2020-05-26T17:42:01","slug":"rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","title":{"rendered":"RangeAmp — s\u00e9rie \u00fatok\u016f na CDN, manipuluj\u00edc\u00ed s HTTP hlavi\u010dkou Range","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Pekingsk\u00e9 univerzity, Univerzity Tsinghua a Texask\u00e9 univerzity v Dallasu odhalila<\/a><\/noindex> nov\u00e1 t\u0159\u00edda DoS \u00fatok\u016f \u2013 RangeAmp, zalo\u017een\u00e1 na vyu\u017eit\u00ed HTTP hlavi\u010dky Rozsah<\/a><\/noindex> k uspo\u0159\u00e1d\u00e1n\u00ed zes\u00edlen\u00ed traffiku p\u0159es s\u00edt\u011b pro doru\u010dov\u00e1n\u00ed obsahu (CDN). Podstatou metody je, \u017ee kv\u016fli vlastnostem zpracov\u00e1n\u00ed Range hlavi\u010dek ve mnoha CDN m\u016f\u017ee \u00fato\u010dn\u00edk po\u017e\u00e1dat p\u0159es CDN o jeden byte z velk\u00e9ho souboru, ale CDN st\u00e1hne z c\u00edlov\u00e9ho serveru cel\u00fd soubor nebo v\u00fdrazn\u011b v\u011bt\u0161\u00ed blok dat pro ulo\u017een\u00ed do cache. \u00darove\u0148 zes\u00edlen\u00ed traffiku p\u0159i takov\u00e9m \u00fatoku se v z\u00e1vislosti na CDN pohybuje od 724 do 43330kr\u00e1t, co\u017e m\u016f\u017ee b\u00fdt vyu\u017eito k p\u0159et\u00ed\u017een\u00ed p\u0159\u00edchoz\u00edho traffiku CDN nebo sn\u00ed\u017een\u00ed propustnosti koncov\u00e9ho komunika\u010dn\u00edho kan\u00e1lu ke str\u00e1nce ob\u011bti.<\/p>\n

\"RangeAmp<\/center><\/p>\n

Hlavi\u010dka Range umo\u017e\u0148uje klientovi ur\u010dit rozsah pozic v souboru, kter\u00e9 se maj\u00ed st\u00e1hnout m\u00edsto dod\u00e1n\u00ed cel\u00e9ho souboru. Nap\u0159\u00edklad klient m\u016f\u017ee specifikovat \u201eRange: bytes=0-1023\u201c a server p\u0159enese pouze prvn\u00edch 1024 bajt\u016f dat. Takov\u00e1 mo\u017enost je \u017e\u00e1dan\u00e1 p\u0159i stahov\u00e1n\u00ed velk\u00fdch soubor\u016f \u2013 u\u017eivatel m\u016f\u017ee pozastavit stahov\u00e1n\u00ed a pot\u00e9 jej pokra\u010dovat od p\u0159eru\u0161en\u00e9 pozice. P\u0159i uveden\u00ed \u201ebytes=0-0\u201c standard p\u0159edepsal dod\u00e1n\u00ed prvn\u00edho bajtu v souboru, \u201ebytes=-1\u201c \u2013 posledn\u00edho, \u201ebytes=1-\u201c \u2013 od 1 bajtu a\u017e do konce souboru. Je povoleno p\u0159ed\u00e1vat n\u011bkolik rozsah\u016f v jedn\u00e9 hlavi\u010dce, nap\u0159\u00edklad \u201eRange: bytes=0-1023,8192-10240\u201c.<\/p>\n

Byla navr\u017eena druh\u00e1 varianta \u00fatoku zam\u011b\u0159en\u00e1 na zv\u00fd\u0161en\u00ed s\u00ed\u0165ov\u00e9ho zat\u00ed\u017een\u00ed p\u0159i p\u0159ed\u00e1v\u00e1n\u00ed provozu p\u0159es dal\u0161\u00ed CDN, kter\u00e9 se pou\u017e\u00edv\u00e1 jako proxy (nap\u0159\u00edklad kdy\u017e jako frontend (FCDN) vystupuje Cloudflare a backend (BCDN) \u2013 Akamai). Metoda p\u0159ipom\u00edn\u00e1 prvn\u00ed \u00fatok, ale lokalizuje se uvnit\u0159 CDN s\u00edt\u00ed a umo\u017e\u0148uje zes\u00edlit tok p\u0159i vol\u00e1n\u00ed p\u0159es jin\u00e9 CDN, \u010d\u00edm\u017e se zvy\u0161uje z\u00e1t\u011b\u017e na infrastrukturou a sni\u017euje kvalita slu\u017eby. <\/p>\n

My\u0161lenka spo\u010d\u00edv\u00e1 v tom, \u017ee \u00fato\u010dn\u00edk sm\u011bruje do CDN Range-\u017e\u00e1dosti n\u011bkolika rozsah\u016f, jako \u201ebytes=0-,0-,0-\u2026\u201c, \u201ebytes=1-,0-,0-\u2026\u201c nebo \u201ebytes=-1024,0-,0-\u2026\u201c. \u017d\u00e1dosti obsahuj\u00ed velk\u00e9 mno\u017estv\u00ed rozsah\u016f \u201e0-\u201c, co\u017e znamen\u00e1 dod\u00e1n\u00ed souboru od nulov\u00e9 pozice do konce. V d\u016fsledku nespr\u00e1vn\u00e9 implementace anal\u00fdzy rozsah\u016f p\u0159i vol\u00e1n\u00ed prvn\u00edho CDN k druh\u00e9mu, se na ka\u017ed\u00fd rozsah \u201e0-\u201c dod\u00e1v\u00e1 cel\u00fd soubor (rozsahy se neagreguj\u00ed, ale postupn\u011b se proch\u00e1zej\u00ed), pokud v p\u016fvodn\u011b zaslan\u00e9 \u00fato\u010dn\u00edkov\u011b \u017e\u00e1dosti existuje duplicita a p\u0159ekr\u00fdv\u00e1n\u00ed rozsah\u016f. Stupe\u0148 zes\u00edlen\u00ed toku v takov\u00e9m \u00fatoku se pohybuje od 53 do 7432.<\/p>\n

\"RangeAmp<\/center><\/p>\n

B\u011bhem v\u00fdzkumu bylo studov\u00e1no chov\u00e1n\u00ed 13 CDN \u2013
\nAkamai, Alibaba Cloud, Azure, CDN77, CDNsun, Cloudflare, CloudFront, Fastly, G-Core Labs, Huawei Cloud, KeyCDN, StackPath a Tencent Cloud. V\u0161echny z posuzovan\u00fdch CDN umo\u017enily prvn\u00ed typ \u00fatoku na koncov\u00fd server. Druh\u00e9mu typu \u00fatoku na CDN podl\u00e9halo 6 slu\u017eeb, z nich\u017e \u010dty\u0159i mohou hr\u00e1t roli front-endu (CDN77, CDNsun, Cloudflare a StackPath) a t\u0159i v roli back-endu (Akamai, Azure a StackPath). Nejvy\u0161\u0161\u00edho zes\u00edlen\u00ed dosahuje Akamai a StackPath, kter\u00e9 povoluj\u00ed uveden\u00ed ve v\u0161ech rozsaz\u00edch po v\u00edce ne\u017e 10 tis\u00edc\u00edch rozsah\u016f. Vlastn\u00edci CDN byli o zranitelnostech informov\u00e1ni p\u0159ibli\u017en\u011b p\u0159ed 7 m\u011bs\u00edci, a do doby ve\u0159ejn\u00e9ho odhalen\u00ed informac\u00ed 12 z 13 CDN odstranilo zji\u0161t\u011bn\u00e9 probl\u00e9my nebo vyj\u00e1d\u0159ilo ochotu je odstranit (nebyla reagov\u00e1no pouze na slu\u017ebu StackPath).<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 DoS-\u0430\u0442\u0430\u043a — RangeAmp, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Range \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (CDN). \u0421\u0443\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Range-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 CDN \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 CDN \u043e\u0434\u0438\u043d \u0431\u0430\u0439\u0442 \u0438\u0437 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47RangeAmp \u2014 s\u00e9rie \u00fatok\u016f na CDN, manipuluj\u00edc\u00ed s HTTP hlavi\u010dkou Range | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Pekingsk\u00e9 univerzity, Univerzity Tsinghua a Texask\u00e9 univerzity v Dallasu","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47RangeAmp \u2014 \u0441\u0435\u0440\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 CDN, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0430\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c Range | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-26T17:42:01+00:00","article:modified_time":"2020-05-26T17:42:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:28:37","updated":"2022-10-02 22:54:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/82929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=82929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/82929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/82930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=82929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=82929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=82929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}