{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"AirSnitch-angreb, der tillader at omg\u00e5 isolation mellem klienter i Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Forskere fra University of California, Riverside, har udviklet (PDF) en ny klasse angreb p\u00e5 tr\u00e5dl\u00f8se netv\u00e6rk \u2014 AirSnitch. Angrebene muligg\u00f8r omg\u00e5else af klientisolationsmekanismer i Wi-Fi-netv\u00e6rk, som forhindrer klienter i at kontakte hinanden direkte. I det v\u00e6rste scenarium kan angrebene give en angriber mulighed for at omdirigere offerets trafik (MITM) til analyse eller modificering af usikrede foresp\u00f8rgsler samt \u00e6ndre anmodninger til websteder gennem DNS-cacheforgiftning. <\/p>\n

For at gennemf\u00f8re angrebene skal angriberen have mulighed for at forbinde til det samme tr\u00e5dl\u00f8se netv\u00e6rk som offeret, eller til g\u00e6stenetv\u00e6rket, der betjenes af den samme adgangspunkt. Angrebene kan for eksempel anvendes i offentlige tr\u00e5dl\u00f8se netv\u00e6rk. Af 9 testede modeller af tr\u00e5dl\u00f8se adgangspunkter fra Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM og Cisco, samt l\u00f8sninger med DD-WRT og OpenWrt firmware, viste alle enheder sig at v\u00e6re s\u00e5rbare over for mindst \u00e9n angrebsmetode.

\"AirSnitch-angreb,<\/center> <\/p>\n

Tre problemer fremh\u00e6ves, som muligg\u00f8r et angreb. Det f\u00f8rste problem tillader at omg\u00e5 isolation mellem klienter p\u00e5 grund af forkert h\u00e5ndtering af n\u00f8gler, der bruges til at beskytte broadcast-rammer. Det andet problem er relateret til, at isolation normalt anvendes p\u00e5 MAC- eller IP-niveau, men ikke p\u00e5 begge niveauer samtidig. Det tredje problem skyldes usikre synkronisering af klientidentifikatorer p\u00e5 tv\u00e6rs af hele netv\u00e6rksstakken, hvilket muligg\u00f8r opsnapning af indg\u00e5ende og udg\u00e5ende trafik fra andre klienter. <\/p>\n

Moderne tr\u00e5dl\u00f8se adgangspunkter kombinerer funktionerne af en radiosender og en netv\u00e6rksswitch (Layer 2 Switch), hvor switchen, i mods\u00e6tning til kablede netv\u00e6rk, i stedet for at binde klienten til en fysisk port, bruger en logisk binding til det tr\u00e5dl\u00f8se kanal. Som identifikator i en s\u00e5dan binding anvendes klientens MAC-adresse, som identificeres med kanalen i en s\u00e6rlig tabel over MAC-adresser. Hvis klienten skifter til en anden kanal (f.eks. efter at have skiftet fra 2,4 GHz til 5 GHz), opdateres dataene i tabellen.

\"AirSnitch-angreb,<\/center> <\/p>\n

Angrebet udf\u00f8res p\u00e5 det f\u00f8rste (fysiske, radiokanalen) og andet (fragt- MAC-adresse) niveau i OSI-netv\u00e6rksmodellen, og g\u00e5r ud p\u00e5, at en angriber, der har tilsluttet sig det samme adgangspunkt, men bruger et frekvensb\u00e5nd, der ikke er det samme som offerets (for eksempel 2,4 GHz i stedet for 5 GHz), sender en anmodning om at etablere forbindelse (4-way handshake) og angiver offerets MAC-adresse (som ARP-spoofing i Ethernet-netv\u00e6rk). Da klienter identificeres ved MAC-adressen, antager adgangspunktet, at klienten har skiftet til en anden kanal og \u00e6ndrer optegnelsen i MAC-adresse-tabellen. Herefter begynder al indg\u00e5ende trafik fra adgangspunktet at blive sendt til angriberens enhed.

\"AirSnitch-angreb,<\/center>
\"AirSnitch-angreb,<\/center> <\/p>\n

For at organisere bi-direktionel opsnapning returnerer angriberen de data, der er adresseret til offeret, til den oprindelige tilstand i MAC-adresstabellen. Dette g\u00f8res ved at sende en 'ICMP Ping'-pakke med en tilf\u00e6ldig MAC-adresse og kryptering af pakken med GTK (Group Temporal Key), som er f\u00e6lles for alle klienter i det tr\u00e5dl\u00f8se netv\u00e6rk. Adgangspunktet, der modtager denne pakke, returnerer bindingen af offerets MAC-adresse til den oprindelige tr\u00e5dl\u00f8se kanal. Indgreb i trafikken sker gennem cyklisk substitution og genoprettelse af posten i MAC-adresstabellen.

\"AirSnitch-angreb,<\/center>
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AirSnitch-angrebet, der g\u00f8r det muligt at omg\u00e5 isolation mellem klienter i Wi-Fi | ProHoster","description":"Forskere fra University of California, Riverside har udviklet (PDF) en ny klasse angreb p\u00e5 tr\u00e5dl\u00f8se netv\u00e6rk - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}