{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. \u00davod<\/h1>\n<p><\/p>\n<p>Firmy, kter\u00e9 nem\u011bly zorganizovan\u00e9 syst\u00e9my vzd\u00e1len\u00e9ho p\u0159\u00edstupu, je v nouzov\u00e9m re\u017eimu zav\u00e1d\u011bly p\u0159ed p\u00e1r m\u011bs\u00edci. Ne v\u0161ichni administr\u00e1to\u0159i byli p\u0159ipraveni na takovou \"horkou\" situaci, co\u017e vedlo ke z\u00e1va\u017en\u00fdm bezpe\u010dnostn\u00edm pochyben\u00edm: nespr\u00e1vn\u00e1 konfigurace slu\u017eeb nebo dokonce instalace zastaral\u00fdch verz\u00ed softwaru se d\u0159\u00edve zn\u00e1m\u00fdmi zranitelnostmi. N\u011bkte\u0159\u00ed u\u017e se s t\u011bmito pochyben\u00edmi setkali, jin\u00ed m\u011bli v\u00edce \u0161t\u011bst\u00ed, ale z\u00e1v\u011bry si ur\u010dit\u011b mus\u00ed vz\u00edt k srdci v\u0161ichni. Lojalita k pr\u00e1ci na d\u00e1lku v\u00fdrazn\u011b vzrostla a st\u00e1le v\u00edce firem p\u0159ij\u00edm\u00e1 distan\u010dn\u00ed pr\u00e1ci jako trvalou mo\u017enost.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Existuje mnoho mo\u017enost\u00ed pro zaji\u0161t\u011bn\u00ed vzd\u00e1len\u00e9ho p\u0159\u00edstupu: r\u016fzn\u00e9 VPN, RDS a VNC, TeamViewer a dal\u0161\u00ed. Administr\u00e1to\u0159i maj\u00ed z \u010deho vyb\u00edrat na z\u00e1klad\u011b specifikac\u00ed podnikov\u00e9 s\u00edt\u011b a za\u0159\u00edzen\u00ed v n\u00ed. Nejobl\u00edben\u011bj\u0161\u00edmi z\u016fst\u00e1vaj\u00ed \u0159e\u0161en\u00ed VPN, ale mnoh\u00e9 mal\u00e9 firmy si vyb\u00edraj\u00ed RDS (Remote Desktop Services), kter\u00e9 jsou jednodu\u0161\u0161\u00ed a rychlej\u0161\u00ed na nasazen\u00ed.<\/p>\n<p><\/p>\n<p>V tomto \u010dl\u00e1nku se podrobn\u011bji pod\u00edv\u00e1me na bezpe\u010dnost RDS. Kr\u00e1tce p\u0159ehledneme zn\u00e1m\u00e9 zranitelnosti a tak\u00e9 prozkoum\u00e1me n\u011bkolik sc\u00e9n\u00e1\u0159\u016f zah\u00e1jen\u00ed \u00fatoku na s\u00ed\u0165ovou infrastrukturu zalo\u017eenou na Active Directory. Douf\u00e1me, \u017ee n\u011bkomu na\u0161e \u010dl\u00e1nek pom\u016f\u017ee identifikovat chyby a zv\u00fd\u0161it bezpe\u010dnost.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Ned\u00e1vn\u00e9 zranitelnosti RDS\/RDP<\/h1>\n<p><\/p>\n<p>Ka\u017ed\u00fd software obsahuje chyby a zranitelnosti, kter\u00e9 zneu\u017e\u00edvaj\u00ed \u00fato\u010dn\u00edci, a RDS nen\u00ed v\u00fdjimkou. V posledn\u00ed dob\u011b Microsoft \u010dasto oznamoval nov\u00e9 zranitelnosti, rozhodli jsme se ud\u011blat jejich stru\u010dn\u00fd p\u0159ehled:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Tato zranitelnost ohro\u017euje u\u017eivatele, kte\u0159\u00ed se p\u0159ipojuj\u00ed k kompromitovan\u00e9mu serveru. \u00dato\u010dn\u00edk m\u016f\u017ee p\u0159evz\u00edt kontrolu nad u\u017eivatelsk\u00fdm za\u0159\u00edzen\u00edm nebo se usadit v syst\u00e9mu, aby m\u011bl trval\u00fd vzd\u00e1len\u00fd p\u0159\u00edstup.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Tato skupina zranitelnost\u00ed umo\u017e\u0148uje neopr\u00e1vn\u011bn\u00e9mu \u00fato\u010dn\u00edkovi vzd\u00e1len\u011b prov\u00e1d\u011bt libovoln\u00fd k\u00f3d na serveru s RDS prost\u0159ednictv\u00edm speci\u00e1ln\u011b sestaven\u00e9ho po\u017eadavku. Lze je tak\u00e9 vyu\u017e\u00edt k vytv\u00e1\u0159en\u00ed \u010derv\u016f \u2013 malwaru, kter\u00fd s\u00e1m infikuje sousedn\u00ed za\u0159\u00edzen\u00ed v s\u00edti. T\u00edmto zp\u016fsobem mohou tyto zranitelnosti ohrozit celou s\u00ed\u0165 firmy, a zato je ochr\u00e1n\u00ed pouze v\u010dasn\u00e1 aktualizace.<\/p>\n<p><\/p>\n<p>Software for remote access has drawn increased attention from both researchers and attackers, so we may soon hear about new similar vulnerabilities.<\/p>\n<p><\/p>\n<p>The good news is that not all vulnerabilities have public exploits available. The bad news is that an attacker with expertise can easily write an exploit for a vulnerability based on its description or by using techniques like Patch Diffing (as our colleagues discussed in <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">\u010dl\u00e1nku<\/a><\/noindex>). Therefore, we recommend regularly updating the software and keeping an eye out for new reports on discovered vulnerabilities.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Attacks<\/h1>\n<p><\/p>\n<p>We move on to the second part of the article, where we will demonstrate how attacks on network infrastructure based on Active Directory begin. <\/p>\n<p><\/p>\n<p>The methods described are applicable to the following attacker model: an attacker with a user account who has access to the Remote Desktop Gateway \u2014 a terminal server (which is often accessible, for example, from the external network). By applying these methods, the attacker will be able to continue the attack on the infrastructure and establish their presence in the network.<\/p>\n<p><\/p>\n<p>The network configuration may vary in each specific case, but the techniques described are quite universal.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Examples of breaking out of a restricted environment and elevating privileges<\/h2>\n<p><\/p>\n<p>When accessing the Remote Desktop Gateway, the attacker will likely encounter some limited environment. When connecting to the terminal server, an application launches: the Remote Desktop connection window for internal resources, a file explorer, office suites, or any other software. <\/p>\n<p><\/p>\n<p>The attacker's goal will be to gain access to command execution, that is, to launch cmd or PowerShell. Several classic techniques for breaking out of a Windows 'sandbox' can assist with this. Let's consider them further.<\/p>\n<p><\/p>\n<p><strong>Mo\u017enost 1<\/strong>. The attacker has access to the Remote Desktop connection window within the Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>The \u201cShow Options\u201d menu opens. Options for manipulating the connection configuration files appear:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>From this window, it is possible to access the Explorer without any hindrance by clicking any of the \u201cOpen\u201d or \u201cSave\u201d buttons:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Otev\u00edr\u00e1 se Pr\u016fzkumn\u00edk. Jeho \u201eadresn\u00ed \u0159\u00e1dek\u201c umo\u017e\u0148uje spou\u0161t\u011bn\u00ed povolen\u00fdch spustiteln\u00fdch soubor\u016f, stejn\u011b jako seznam souborov\u00e9ho syst\u00e9mu. To m\u016f\u017ee b\u00fdt \u00fato\u010dn\u00edk\u016fm u\u017eite\u010dn\u00e9 v p\u0159\u00edpad\u011b, kdy jsou syst\u00e9mov\u00e9 disky skryt\u00e9 a p\u0159\u00edstup k nim nen\u00ed p\u0159\u00edmo mo\u017en\u00fd:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Podobn\u00fd sc\u00e9n\u00e1\u0159 lze reprodukovat nap\u0159\u00edklad p\u0159i pou\u017eit\u00ed jako vzd\u00e1len\u00e9ho softwaru Excel z bal\u00ed\u010dku Microsoft Office. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Krom\u011b toho bychom nem\u011bli zapom\u00ednat na makra pou\u017e\u00edvan\u00e1 v tomto kancel\u00e1\u0159sk\u00e9m bal\u00ed\u010dku. Na\u0161i kolegov\u00e9 se zab\u00fdvali probl\u00e9mem bezpe\u010dnosti maker v t\u00e9to <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">\u010dl\u00e1nku<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Mo\u017enost 2<\/strong>. Pou\u017eit\u00edm stejn\u00fdch vstup\u016f jako v p\u0159edchoz\u00ed variant\u011b \u00fato\u010dn\u00edk spou\u0161t\u00ed n\u011bkolik p\u0159ipojen\u00ed k vzd\u00e1len\u00e9 pracovn\u00ed plo\u0161e pod stejn\u00fdm \u00fa\u010dtem. P\u0159i op\u011btovn\u00e9m p\u0159ipojen\u00ed bude prvn\u00ed p\u0159ipojen\u00ed uzav\u0159eno a na obrazovce se objev\u00ed okno s chybovou zpr\u00e1vou. Tla\u010d\u00edtko n\u00e1pov\u011bdy v tomto okn\u011b vyvol\u00e1 Internet Explorer na serveru, po \u010dem\u017e se \u00fato\u010dn\u00edk m\u016f\u017ee p\u0159esm\u011brovat do Pr\u016fzkumn\u00edka.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Varianta 3<\/strong>. P\u0159i nastaven\u00fdch omezen\u00edch na spou\u0161t\u011bn\u00ed spustiteln\u00fdch soubor\u016f se m\u016f\u017ee \u00fato\u010dn\u00edk setkat se situac\u00ed, kdy skupinov\u00e9 politiky zakazuj\u00ed spu\u0161t\u011bn\u00ed cmd.exe administr\u00e1torem.<\/p>\n<p><\/p>\n<p>Existuje zp\u016fsob, jak to obej\u00edt pomoc\u00ed spu\u0161t\u011bn\u00ed bat souboru na vzd\u00e1len\u00e9 pracovn\u00ed plo\u0161e s obsahem ve form\u00e1tu cmd.exe \/K <p>. Chyba p\u0159i spu\u0161t\u011bn\u00ed cmd a \u00fasp\u011b\u0161n\u00fd p\u0159\u00edklad proveden\u00ed bat souboru je uveden na obr\u00e1zku n\u00ed\u017ee.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vzd\u00e1len\u00e1 plocha o\u010dima \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Varianta 4<\/strong>. Z\u00e1kaz spu\u0161t\u011bn\u00ed aplikac\u00ed pomoc\u00ed \u010dern\u00fdch seznam\u016f podle n\u00e1zvu spustiteln\u00fdch soubor\u016f nen\u00ed v\u0161el\u00e9k, d\u00e1 se obej\u00edt. <\/p>\n<p><\/p>\n<p>Zva\u017eme n\u00e1sleduj\u00edc\u00ed sc\u00e9n\u00e1\u0159: zak\u00e1zali jsme p\u0159\u00edstup k p\u0159\u00edkazov\u00e9mu \u0159\u00e1dku, zak\u00e1zali jsme spu\u0161t\u011bn\u00ed Internet Exploreru a PowerShellu pomoc\u00ed skupinov\u00fdch politik. \u00dato\u010dn\u00edk se sna\u017e\u00ed vyvolat n\u00e1pov\u011bdu \u2013 \u017e\u00e1dn\u00e1 odpov\u011b\u010f. Sna\u017e\u00ed se spustit powershell prost\u0159ednictv\u00edm kontextov\u00e9ho menu mod\u00e1ln\u00edho okna vyvolan\u00e9ho stiskem kl\u00e1vesy Shift \u2013 zpr\u00e1va o z\u00e1kazu spu\u0161t\u011bn\u00ed administr\u00e1torem. Sna\u017e\u00ed se spustit powershell prost\u0159ednictv\u00edm adresn\u00edho \u0159\u00e1dku \u2013 znovu \u017e\u00e1dn\u00e1 odpov\u011b\u010f. Jak obej\u00edt toto omezen\u00ed? <\/p>\n<p><\/p>\n<p>Sta\u010d\u00ed zkop\u00edrovat powershell.exe z adres\u00e1\u0159e C:\\Windows\\System32\\WindowsPowerShell\\v1.0 do u\u017eivatelsk\u00e9 slo\u017eky, zm\u011bnit n\u00e1zev na odli\u0161n\u00fd od powershell.exe a mo\u017enost spu\u0161t\u011bn\u00ed se objev\u00ed.<\/p>\n<p><\/p>\n<p>Ve v\u00fdchoz\u00edm nastaven\u00ed p\u0159i p\u0159ipojen\u00ed k vzd\u00e1len\u00e9 pracovn\u00ed plo\u0161e je poskytov\u00e1n p\u0159\u00edstup k m\u00edstn\u00edm disk\u016fm klienta, odkud m\u016f\u017ee \u00fato\u010dn\u00edk zkop\u00edrovat powershell.exe a po p\u0159ejmenov\u00e1n\u00ed ho spustit.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Uvedli jsme pouze n\u011bkolik zp\u016fsob\u016f, jak obch\u00e1zet omezen\u00ed; sc\u00e9n\u00e1\u0159\u016f by se dalo vymyslet je\u0161t\u011b mnoho, ale v\u0161echny je spojuje v\u00fdstup do Pr\u016fzkumn\u00edka Windows. Aplikac\u00ed vyu\u017e\u00edvaj\u00edc\u00edch standardn\u00ed prost\u0159edky Windows pro pr\u00e1ci se soubory je mnoho a p\u0159i jejich um\u00edst\u011bn\u00ed do omezen\u00e9ho prost\u0159ed\u00ed je mo\u017en\u00e9 vyu\u017e\u00edvat podobn\u00e9 techniky.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Doporu\u010den\u00ed a z\u00e1v\u011br<\/h1>\n<p><\/p>\n<p>Jak vid\u00edme, i v omezen\u00e9m prost\u0159ed\u00ed existuje prostor pro rozvoj \u00fatoku. Nicm\u00e9n\u011b lze \u00fato\u010dn\u00edkovi zt\u00ed\u017eit \u017eivot. Uv\u00e1d\u00edme obecn\u00e1 doporu\u010den\u00ed, kter\u00e1 se hod\u00ed jak v na\u0161ich uveden\u00fdch p\u0159\u00edpadech, tak v dal\u0161\u00edch situac\u00edch.<\/p>\n<p><\/p>\n<ul>\n<li>Omezte spou\u0161t\u011bn\u00ed program\u016f pomoc\u00ed \u010dern\u00fdch\/b\u00edl\u00fdch seznam\u016f pomoc\u00ed skupinov\u00fdch politik.<br \/>\nP\u0159itom v mnoha p\u0159\u00edpadech z\u016fst\u00e1v\u00e1 mo\u017enost spou\u0161t\u011bn\u00ed k\u00f3du. Doporu\u010dujeme se sezn\u00e1mit s projektem <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, abyste m\u011bli p\u0159edstavu o nedokumentovan\u00fdch zp\u016fsobech manipulace se soubory a prov\u00e1d\u011bn\u00ed k\u00f3du v syst\u00e9mu.<br \/>\nDoporu\u010dujeme kombinovat oba typy omezen\u00ed: nap\u0159\u00edklad m\u016f\u017eete povolit spou\u0161t\u011bn\u00ed spustiteln\u00fdch soubor\u016f podepsan\u00fdch spole\u010dnost\u00ed Microsoft, ale omezit spou\u0161t\u011bn\u00ed cmd.exe.<\/li>\n<li>Deaktivujte z\u00e1lo\u017eky nastaven\u00ed Internet Exploreru (m\u016f\u017eete to prov\u00e9st lok\u00e1ln\u011b v registru). <\/li>\n<li>Deaktivujte pomoc\u00ed regedit vyvol\u00e1n\u00ed vestav\u011bn\u00e9 n\u00e1pov\u011bdy Windows.<\/li>\n<li>Deaktivujte mo\u017enost p\u0159ipojov\u00e1n\u00ed m\u00edstn\u00edch disk\u016f pro vzd\u00e1len\u00e9 p\u0159ipojen\u00ed, pokud toto omezen\u00ed nen\u00ed kritick\u00e9 pro u\u017eivatele.<\/li>\n<li>Omezte p\u0159\u00edstup k m\u00edstn\u00edm disk\u016fm vzd\u00e1len\u00e9ho stroje, ponechte p\u0159\u00edstup pouze k u\u017eivatelsk\u00fdm slo\u017ek\u00e1m.<\/li>\n<\/ul>\n<p><\/p>\n<p>Douf\u00e1me, \u017ee jste na\u0161li alespo\u0148 n\u011bco zaj\u00edmav\u00e9ho a v nejlep\u0161\u00edm p\u0159\u00edpad\u011b, \u017ee v\u00e1m tento \u010dl\u00e1nek pom\u016f\u017ee u\u010dinit vzd\u00e1lenou pr\u00e1ci va\u0161\u00ed spole\u010dnosti bezpe\u010dn\u011bj\u0161\u00ed.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Remote Desktop o\u010dima \u00fato\u010dn\u00edka | ProHoster","description":"1. \u00davod Spole\u010dnosti, kter\u00e9 nem\u011bly zorganizov\u00e1ny syst\u00e9my vzd\u00e1len\u00e9ho p\u0159\u00edstupu, je v neodkladn\u00e9 dob\u011b zprovoz\u0148ovaly p\u0159ed p\u00e1r m\u011bs\u00edci.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}