{"id":85702,"date":"2020-06-18T13:42:59","date_gmt":"2020-06-18T11:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej"},"modified":"2020-06-18T13:42:59","modified_gmt":"2020-06-18T11:42:59","slug":"bhunter-vzlamyvaem-uzly-bot-setej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","title":{"rendered":"Bhunter \u2013 hackujeme uzly botnet\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Analytici vir\u016f a v\u00fdzkumn\u00edci v oblasti kybernetick\u00e9 bezpe\u010dnosti se sna\u017e\u00ed shrom\u00e1\u017edit co nejv\u00edce vzork\u016f nov\u00fdch botnet\u016f. K t\u011bmto \u00fa\u010del\u016fm vyu\u017e\u00edvaj\u00ed honeypoty.\u2026 Ale co kdy\u017e chcete sledovat \u0161kodliv\u00fd software za skute\u010dn\u00fdch podm\u00ednek? Ohrozit sv\u016fj server, router? A co kdy\u017e nen\u00ed k dispozici vhodn\u00e9 za\u0159\u00edzen\u00ed? Pr\u00e1v\u011b tyto ot\u00e1zky m\u011b p\u0159ivedly k vytvo\u0159en\u00ed bhunter \u2014 n\u00e1stroje pro z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu k uzl\u016fm botnet\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Bhunter \u2013 hackujeme uzly botnet\u016f\" src=\"\/wp-content\/uploads\/2020\/06\/eb488707720f4584577a1ee20c266868.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h1>Hlavn\u00ed my\u0161lenka<\/h1>\n<p>\nExistuje mnoho zp\u016fsob\u016f, jak \u0161\u00ed\u0159it \u0161kodliv\u00fd software pro roz\u0161i\u0159ov\u00e1n\u00ed botnet\u016f: od phishingu a\u017e po vyu\u017e\u00edv\u00e1n\u00ed 0-day zranitelnost\u00ed. Ale nejb\u011b\u017en\u011bj\u0161\u00edm metodou z\u016fst\u00e1v\u00e1 st\u00e1le h\u00e1d\u00e1n\u00ed hesel pro SSH.<\/p>\n<p>My\u0161lenka je velmi jednoduch\u00e1. Pokud se z n\u011bjak\u00e9ho uzlu botnetu pokou\u0161\u00edte o h\u00e1d\u00e1n\u00ed hesel k va\u0161emu serveru, pravd\u011bpodobn\u011b tento uzel tak\u00e9 padl do pasti p\u0159i h\u00e1d\u00e1n\u00ed jednoduch\u00fdch hesel. A to znamen\u00e1, \u017ee abyste z\u00edskali p\u0159\u00edstup, mus\u00edte mu prost\u011b vr\u00e1tit \"dv\u011bma rukama\".<\/p>\n<p>P\u0159esn\u011b tak funguje bhunter. Naslouch\u00e1 na portu 22 (SSH slu\u017eba) a shroma\u017e\u010fuje v\u0161echny pokusy o p\u0159ipojen\u00ed a hesla. Pot\u00e9 se pokou\u0161\u00ed p\u0159ipojit k \u00fato\u010dn\u00fdm uzl\u016fm s pou\u017eit\u00edm shrom\u00e1\u017ed\u011bn\u00fdch hesel.<\/p>\n<h1>Algoritmus pr\u00e1ce<\/h1>\n<p>\nProgram lze zjednodu\u0161en\u011b rozd\u011blit na dv\u011b hlavn\u00ed \u010d\u00e1sti, kter\u00e9 b\u011b\u017e\u00ed v samostatn\u00fdch vl\u00e1knech. Prvn\u00ed \u010d\u00e1st \u2014 honeypot. Zpracov\u00e1v\u00e1 pokusy o p\u0159ihl\u00e1\u0161en\u00ed, shroma\u017e\u010fuje unik\u00e1tn\u00ed loginy a hesla (v tomto p\u0159\u00edpad\u011b je p\u00e1r login+heslo pova\u017eov\u00e1n za celek) a tak\u00e9 p\u0159id\u00e1v\u00e1 do fronty IP adresy, kter\u00e9 se pokou\u0161ely p\u0159ipojit, pro dal\u0161\u00ed \u00fatok.<\/p>\n<p>Druh\u00e1 \u010d\u00e1st je p\u0159\u00edmo zodpov\u011bdn\u00e1 za \u00fatok. \u00datok se prov\u00e1d\u00ed ve dvou re\u017eimech: BurstAttack (\u00fatok frontou) \u2014 h\u00e1d\u00e1n\u00ed login\u016f a hesel ze spole\u010dn\u00e9ho seznamu a SingleShotAttack (\u00fatok jednotliv\u00fdmi v\u00fdst\u0159ely) \u2014 h\u00e1d\u00e1n\u00ed hesel, kter\u00e9 byly pou\u017eity \u00fato\u010d\u00edc\u00edm uzlem, ale je\u0161t\u011b nebyly p\u0159id\u00e1ny do spole\u010dn\u00e9ho seznamu.<\/p>\n<p>Aby m\u011bl bhunter n\u011bjakou z\u00e1kladnu login\u016f a hesel ihned po spu\u0161t\u011bn\u00ed, inicializuje se pomoc\u00ed seznamu z souboru \/etc\/bhunter\/defaultLoginPairs. <\/p>\n<h1>Rozhran\u00ed<\/h1>\n<p>\nExistuje n\u011bkolik zp\u016fsob\u016f, jak spustit bhunter:<\/p>\n<h5>Jednodu\u0161e p\u0159\u00edkazem<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">sudo bhunter<\/code><\/pre>\n<p>\nP\u0159i tomto spu\u0161t\u011bn\u00ed existuje mo\u017enost ovl\u00e1dat bhunter prost\u0159ednictv\u00edm jeho textov\u00e9ho menu: p\u0159id\u00e1vat p\u0159ihla\u0161ovac\u00ed jm\u00e9na a hesla pro \u00fatok, exportovat datab\u00e1zi p\u0159ihla\u0161ovac\u00edch jmen a hesel, ur\u010dit c\u00edl pro \u00fatok. Ve\u0161ker\u00e9 zhackovan\u00e9 uzly lze zobrazit v souboru \/var\/log\/bhunter\/hacked.log<\/p>\n<h5>Pou\u017eit\u00ed tmux<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">sudo bhunter-ts # p\u0159\u00edkaz pro spu\u0161t\u011bn\u00ed bhuntera p\u0159es tmux  \nsudo tmux attach -t bhunter # p\u0159ipoj\u00edme se k relaci, ve kter\u00e9 je spu\u0161t\u011bn bhunter\n<\/code><\/pre>\n<p>\nTmux je termin\u00e1lov\u00fd multiplexor, velmi u\u017eite\u010dn\u00fd n\u00e1stroj. Umo\u017e\u0148uje v r\u00e1mci jednoho termin\u00e1lu vytv\u00e1\u0159et v\u00edce oken a okna rozd\u011blovat na panely. Jeho pou\u017eit\u00edm lze opustit termin\u00e1l a pot\u00e9 se vr\u00e1tit, ani\u017e by do\u0161lo k p\u0159eru\u0161en\u00ed b\u011b\u017e\u00edc\u00edch proces\u016f. <\/p>\n<p>Skript bhunter-ts vytv\u00e1\u0159\u00ed tmux relaci a d\u011bl\u00ed okno na t\u0159i panely. V prvn\u00edm \u2014 nejv\u011bt\u0161\u00edm, se nach\u00e1z\u00ed textov\u00e9 menu. Horn\u00ed prav\u00fd panel obsahuje logy honeypotu, zde lze vid\u011bt zpr\u00e1vy o pokusech o p\u0159ihl\u00e1\u0161en\u00ed na honeypot. V doln\u00edm prav\u00e9m panelu je zobrazena informace o pr\u016fb\u011bhu \u00fatoku na uzly botnet\u016f a o \u00fasp\u011b\u0161n\u00fdch hackersk\u00fdch \u00fatoc\u00edch.<\/p>\n<p>V\u00fdhoda tohoto zp\u016fsobu oproti prvn\u00edmu spo\u010d\u00edv\u00e1 v tom, \u017ee m\u016f\u017eeme klidn\u011b zav\u0159\u00edt termin\u00e1l a vr\u00e1tit se k n\u011bmu pozd\u011bji, p\u0159i\u010dem\u017e bhunter nezastav\u00ed svou \u010dinnost. T\u011bm, kte\u0159\u00ed se s tmuxem moc nesetkali, nab\u00edz\u00edm <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/126996\/\"> tuto p\u0159\u00edru\u010dku<\/a><\/noindex>.<\/p>\n<h5>Jako slu\u017eba<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">systemctl enable bhunter\nsystemctl start bhunter<\/code><\/pre>\n<p>\nV tomto p\u0159\u00edpad\u011b zap\u00edn\u00e1me autostart bhuntera p\u0159i spu\u0161t\u011bn\u00ed syst\u00e9mu. V tomto zp\u016fsobu nen\u00ed s bhunterem p\u0159edpokl\u00e1d\u00e1no \u017e\u00e1dn\u00e9 interakce, ale seznam napaden\u00fdch uzl\u016f lze z\u00edskat z \/var\/log\/bhunter\/hacked.log<\/p>\n<h1>Efektivita<\/h1>\n<p>\nB\u011bhem pr\u00e1ce na bhunterovi se mi poda\u0159ilo naj\u00edt a z\u00edskat p\u0159\u00edstup k r\u016fzn\u00fdm za\u0159\u00edzen\u00ed: raspberry pi, routery (zejm\u00e9na mikrotik), webov\u00e9 servery, a jednou i na farmu na t\u011b\u017ebu (bohu\u017eel p\u0159\u00edstup k n\u00ed byl pouze na jeden den, tak\u017ee z toho nevznikla \u017e\u00e1dn\u00e1 zaj\u00edmav\u00e1 historka). Zde je screenshot programu, na kter\u00e9m je vid\u011bt seznam napaden\u00fdch uzl\u016f po n\u011bkolika dnech pr\u00e1ce:<\/p>\n<p><img decoding=\"async\" alt=\"Bhunter \u2013 hackujeme uzly botnet\u016f\" src=\"\/wp-content\/uploads\/2020\/06\/3886b6a7188a5b77b4e0a1a7d58f0324.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBohu\u017eel \u00fa\u010dinnost tohoto n\u00e1stroje nedos\u00e1hla m\u00fdch o\u010dek\u00e1v\u00e1n\u00ed: bhunter m\u016f\u017ee zkou\u0161et hesla na uzlech n\u011bkolik dn\u00ed bez v\u00fdsledku, ale tak\u00e9 m\u016f\u017ee prolomit n\u011bkolik c\u00edl\u016f za p\u00e1r hodin. Ale pro pravideln\u00fd p\u0159\u00edsun nov\u00fdch vzork\u016f botnet\u016f je to dostate\u010dn\u00e9.<\/p>\n<p>Na \u00fa\u010dinnost maj\u00ed vliv parametry jako: zem\u011b, ve kter\u00e9 se nach\u00e1z\u00ed server s bhunter, hosting a rozsah, ze kter\u00e9ho je p\u0159id\u011blen\u00e1 IP adresa. Z m\u00e9 zku\u0161enosti byl p\u0159\u00edpad, kdy jsem si pronajal dva virtu\u00e1ln\u00ed servery od jednoho poskytovatele a jeden z nich byl vystaven \u00fatok\u016fm ze strany botnet\u016f dvakr\u00e1t \u010dast\u011bji.<\/p>\n<h1>Chyby, kter\u00e9 zat\u00edm nem\u00e1m opraven\u00e9<\/h1>\n<p>\nP\u0159i \u00fatoku na naka\u017een\u00e9 uzly v n\u011bkter\u00fdch situac\u00edch nelze jednozna\u010dn\u011b ur\u010dit, zda byl zvolen\u00fd heslo spr\u00e1vn\u00e9. Zaznamen\u00e1v\u00e1n\u00ed takov\u00fdch p\u0159\u00edpad\u016f prob\u00edh\u00e1 v souboru \/var\/log\/debug.log.<\/p>\n<p>Modul Paramiko, kter\u00fd se pou\u017e\u00edv\u00e1 pro pr\u00e1ci s SSH, se n\u011bkdy chov\u00e1 nespr\u00e1vn\u011b: doch\u00e1z\u00ed k nekone\u010dn\u00e9mu \u010dek\u00e1n\u00ed na odpov\u011b\u010f od uzlu, kdy\u017e se pokou\u0161\u00ed p\u0159ipojit. Experimentoval jsem s \u010dasova\u010di, ale nedos\u00e1hl jsem po\u017eadovan\u00e9ho v\u00fdsledku.<\/p>\n<h1>Na \u010dem je je\u0161t\u011b t\u0159eba pracovat?<\/h1>\n<p><\/p>\n<h5>N\u00e1zev slu\u017eby<\/h5>\n<p>\nPodle RFC-4253 si klient a server p\u0159ed n\u00e1slednou implementac\u00ed vym\u011b\u0148uj\u00ed n\u00e1zvy slu\u017eeb, kter\u00e9 realizuj\u00ed protokol SSH. Tento n\u00e1zev se nach\u00e1z\u00ed v poli \u201eSERVICE NAME\u201c, kter\u00e9 je obsa\u017eeno jak v \u017e\u00e1dosti ze strany klienta, tak v odpov\u011bdi ze strany serveru. Pole p\u0159edstavuje \u0159et\u011bzec a jeho hodnotu lze zjistit pomoc\u00ed wiresharku nebo nmapu. Zde je p\u0159\u00edklad pro OpenSSH:<\/p>\n<pre><code class=\"plaintext\">$ nmap -p 22 ***.**.***.** -sV\nZah&aacute;jen&iacute; Nmap ...\nPORT   STAV SLU\u017dBA VERZE\n22\/tcp otev\u0159en  ssh     &lt;b&gt;OpenSSH 7.9p1 Debian 10+deb10u2&lt;\/b&gt; (protokol 2.0)\nNmap dokon\u010deno: 1 IP adresa (1 host aktivn&iacute;) proskenov&aacute;na za 0.47 sekund\n<\/code><\/pre>\n<p>\nV p\u0159\u00edpad\u011b Paramiko ale toto pole obsahuje \u0159et\u011bzec ve tvaru \u201eParamiko Python sshd 2.4.2\u201c, co\u017e m\u016f\u017ee odradit botnety, kter\u00e9 maj\u00ed v sob\u011b zabudov\u00e1no \u201evyh\u00fdb\u00e1n\u00ed se\u201c pastem. Proto pova\u017euji za nezbytn\u00e9 nahradit tento \u0159et\u011bzec n\u011b\u010d\u00edm neutr\u00e1ln\u011bj\u0161\u00edm.<\/p>\n<h5>Dal\u0161\u00ed vektory<\/h5>\n<p>\nSSH nen\u00ed jedin\u00fdm prost\u0159edkem vzd\u00e1len\u00e9ho \u0159\u00edzen\u00ed. Existuje tak\u00e9 telnet a rdp. Stoj\u00ed za to se na n\u011b pod\u00edvat.<\/p>\n<h5>Roz\u0161\u00ed\u0159en\u00ed<\/h5>\n<p>\nBylo by skv\u011bl\u00e9 m\u00edt n\u011bkolik past\u00ed v r\u016fzn\u00fdch zem\u00edch a centr\u00e1ln\u011b shroma\u017e\u010fovat z nich p\u0159ihla\u0161ovac\u00ed \u00fadaje, hesla a napaden\u00e9 uzly do jedn\u00e9 datab\u00e1ze. <\/p>\n<h1>Kde st\u00e1hnout?<\/h1>\n<p>\nK okam\u017eiku psan\u00ed tohoto \u010dl\u00e1nku je k dispozici pouze testovac\u00ed verze, kterou lze st\u00e1hnout z <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/dvoropaev\/bhunter\">repozit\u00e1\u0159e na Githubu<\/a><\/noindex>.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/491098\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 honeypot&#8217;\u044b.\u2026 \u041d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445? \u041f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440? \u0410 \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435\u0442? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043d\u0430\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438 \u043c\u0435\u043d\u044f \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 bhunter \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Bhunter \u2014 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u043c \u0443\u0437\u043b\u044b \u0431\u043e\u0442-\u0441\u0435\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-18T11:42:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-18T11:42:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bhunter \u2014 hackujeme uzly botnet\u016f | ProHoster","description":"Virov\u00ed analytici a v\u00fdzkumn\u00edci po\u010d\u00edta\u010dov\u00e9 bezpe\u010dnosti se sna\u017e\u00ed shrom\u00e1\u017edit co nejv\u00edce vzork\u016f nov\u00fdch botnet\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Bhunter \u2014 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u043c \u0443\u0437\u043b\u044b \u0431\u043e\u0442-\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-18T11:42:59+00:00","article:modified_time":"2020-06-18T11:42:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:32:46","updated":"2022-09-27 21:52:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/85702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=85702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/85702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/85703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=85702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=85702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=85702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}