{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Remote Desktop set fra en angribers perspektiv","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Introduktion<\/h1>\n<p><\/p>\n<p>Virksomheder, der ikke havde etableret fjernadgangssystemer, indf\u00f8rte hastigt s\u00e5danne for et par m\u00e5neder siden. Ikke alle administratorer var forberedte p\u00e5 en s\u00e5dan \"krisesituation\", hvilket f\u00f8rte til sikkerhedsm\u00e6ssige svagheder: forkert konfiguration af tjenester eller endda installation af for\u00e6ldede versioner af software med tidligere kendte s\u00e5rbarheder. Nogle har allerede f\u00e5et konsekvenserne af disse svagheder retur, mens andre har v\u00e6ret heldigere, men der er helt sikkert vigtige lektioner at l\u00e6re for alle. Loyaliteten til fjernarbejde er steget markant, og flere og flere virksomheder accepterer fjernarbejde som en acceptabel permanent l\u00f8sning.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Der er mange muligheder for at sikre fjernadgang: forskellige VPN, RDS og VNC, TeamViewer og andre. Administratorer har et bredt udvalg at v\u00e6lge imellem, baseret p\u00e5 den specifikke opbygning af virksomhedens netv\u00e6rk og de enheder, der indg\u00e5r deri. VPN-l\u00f8sninger forbliver de mest popul\u00e6re, men mange sm\u00e5 virksomheder v\u00e6lger RDS (Remote Desktop Services), da de er enklere og hurtigere at implementere.<\/p>\n<p><\/p>\n<p>I denne artikel vil vi se n\u00e6rmere p\u00e5 sikkerheden ved RDS. Vi vil give en kort oversigt over kendte s\u00e5rbarheder og tage nogle angrebsscenarier p\u00e5 netv\u00e6rksinfrastruktur baseret p\u00e5 Active Directory under overvejelse. Vi h\u00e5ber, at vores artikel kan hj\u00e6lpe nogen med at l\u00e6re af deres fejl og \u00f8ge sikkerheden.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Nyere s\u00e5rbarheder i RDS\/RDP<\/h1>\n<p><\/p>\n<p>Al software indeholder fejl og s\u00e5rbarheder, som bliver udnyttet af kriminelle, og RDS er ikke en undtagelse. For nylig har Microsoft ofte rapporteret om nye s\u00e5rbarheder, og vi har besluttet at give en kort oversigt over dem:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Denne s\u00e5rbarhed uds\u00e6tter brugere, der opretter forbindelse til en kompromitteret server, for risiko. En angriber kan f\u00e5 kontrol over brugerens enhed eller sl\u00e5 sig ned i systemet for at f\u00e5 konstant fjernadgang.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Denne gruppe af s\u00e5rbarheder giver en ikke-autoriseret angriber mulighed for at udf\u00f8re vilk\u00e5rlig kode eksternt p\u00e5 en server med RDS ved hj\u00e6lp af en specifikt udformet anmodning. De kan ogs\u00e5 bruges til at skabeorme \u2014 ondsindet software, der selv inficerer n\u00e6rliggende netv\u00e6rksenheder. Dermed kan disse s\u00e5rbarheder uds\u00e6tte hele virksomhedens netv\u00e6rk for risiko, og den eneste l\u00f8sning er rettidig opdatering.<\/p>\n<p><\/p>\n<p>Software for remote access has gained increased attention from both researchers and attackers, so we may soon hear about new vulnerabilities of this kind.<\/p>\n<p><\/p>\n<p>The good news is that not all vulnerabilities have publicly available exploits. The bad news is that an attacker with expertise can easily write an exploit for a vulnerability based on descriptions or by using techniques like Patch Diffing (which our colleagues wrote about in <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">artikel<\/a><\/noindex>). Therefore, we recommend regularly updating the software and keeping an eye out for new reports of discovered vulnerabilities.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Attacks<\/h1>\n<p><\/p>\n<p>We move on to the second part of the article, where we will show how attacks on a network infrastructure based on Active Directory begin. <\/p>\n<p><\/p>\n<p>The methods described are applicable to the following threat model: an attacker with a user account and access to the Remote Desktop Gateway - a terminal server (which is often accessible, for example, from an external network). By applying these methods, the attacker can continue the attack on the infrastructure and establish their presence in the network.<\/p>\n<p><\/p>\n<p>The network configuration in each specific case may vary, but the described techniques are quite universal.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Examples of escaping from a restricted environment and privilege escalation<\/h2>\n<p><\/p>\n<p>When accessing the Remote Desktop Gateway, the attacker will likely face a somewhat limited environment. When connecting to the terminal server, an application starts: a window for connecting via the Remote Desktop protocol for internal resources, a file explorer, office packages, or any other software. <\/p>\n<p><\/p>\n<p>The attacker's goal will be to gain access to command execution, i.e., to launch cmd or PowerShell. Several classic sandbox escape techniques for Windows can assist in this. Let\u2019s explore them further.<\/p>\n<p><\/p>\n<p><strong>Mulighed 1<\/strong>. The attacker has access to the Remote Desktop connection window within the Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop set fra en angribers perspektiv\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>The \u201cShow Options\u201d menu is revealed. Options appear for manipulating connection configuration files:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop set fra en angribers perspektiv\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>From this window, it is possible to access the Explorer freely by pressing any of the \u201cOpen\u201d or \u201cSave\u201d buttons:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop set fra en angribers perspektiv\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Stifinder \u00e5bner. Dens \"adressefelt\" giver mulighed for at starte tilladte eksekverbare filer samt liste filsystemet. Dette kan v\u00e6re nyttigt for en angriber, hvis systemdrev er skjulte, og direkte adgang til dem ikke er mulig:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop set fra en angribers perspektiv\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Demo-video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Et lignende scenarie kan reproduceres, for eksempel ved at bruge Excel fra Microsoft Office-pakken som fjernsoftware. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Demo-video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Desuden b\u00f8r man ikke glemme makroerne, der anvendes i denne kontorpakke. Vore kolleger har set p\u00e5 sikkerhedsproblemerne ved makroer i denne <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">artikel<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Mulighed 2<\/strong>. Ved at bruge de samme foruds\u00e6tninger som i den tidligere version, starter angriberen flere forbindelser til den fjernarbejdsplads under den samme konto. N\u00e5r der genopretter forbindelsen, vil den f\u00f8rste blive lukket, og en fejlinformation vises p\u00e5 sk\u00e6rmen. Hj\u00e6lp-knappen i denne dialog vil starte Internet Explorer p\u00e5 serveren, hvorefter angriberen kan g\u00e5 til Stifinder.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Demo-video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Mulighed 3<\/strong>. Med etablerede begr\u00e6nsninger p\u00e5 at starte eksekverbare filer, kan angriberen st\u00f8de p\u00e5 situationer, hvor gruppepolitikker forbyder administratoren at k\u00f8re cmd.exe.<\/p>\n<p><\/p>\n<p>Der er en m\u00e5de at omg\u00e5 dette ved at k\u00f8re en bat-fil p\u00e5 den fjernarbejdsplads med indholdet cmd.exe \/K . Fejl ved k\u00f8rsel af cmd og et vellykket eksempel p\u00e5 k\u00f8rsel af bat-filen er vist p\u00e5 billedet nedenfor.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop set fra en angribers perspektiv\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Mulighed 4<\/strong>. Forbud mod at starte programmer ved hj\u00e6lp af sortlister baseret p\u00e5 navne p\u00e5 eksekverbare filer er ikke en panac\u00e9e; de kan omg\u00e5s. <\/p>\n<p><\/p>\n<p>Lad os overveje f\u00f8lgende scenarie: vi har forbudt adgangen til kommandoprompten, forbudt Internet Explorer og PowerShell ved hj\u00e6lp af gruppepolitikker. Angriberen fors\u00f8ger at kalde hj\u00e6lp \u2013 der er ingen respons. Fors\u00f8ger at starte PowerShell gennem kontekstmenuen i modalvinduet, der fremkaldes med Shift-tasten \u2013 en meddelelse om forbud mod at starte af administratoren. Fors\u00f8ger at starte PowerShell gennem adressefeltet \u2013 igen ingen respons. Hvordan kan man omg\u00e5 begr\u00e6nsningen? <\/p>\n<p><\/p>\n<p>Det er tilstr\u00e6kkeligt at kopiere powershell.exe fra mappen C:WindowsSystem32WindowsPowerShellv1.0 til brugerens mappe, \u00e6ndre navnet til et, der er forskelligt fra powershell.exe, og muligheden for at starte vil v\u00e6re til stede.<\/p>\n<p><\/p>\n<p>Som standard giver forbindelse til den fjernarbejdsplads adgang til klientens lokale drev, hvorfra angriberen kan kopiere powershell.exe og derefter starte det efter at have omd\u00f8bt det.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Demo-video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Vi har kun n\u00e6vnt nogle f\u00e5 m\u00e5der at omg\u00e5 begr\u00e6nsninger p\u00e5; der kan t\u00e6nkes mange flere scenarier, men de har alle det tilf\u00e6lles, at de involverer Windows Stifinder. Der findes mange applikationer, der bruger standardmidlerne i Windows til at arbejde med filer, og n\u00e5r de placeres i et begr\u00e6nset milj\u00f8, kan lignende teknikker anvendes.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Anbefalinger og konklusion<\/h1>\n<p><\/p>\n<p>Som vi kan se, er der selv i et begr\u00e6nset milj\u00f8 plads til at udvikle angreb. Det er dog muligt at g\u00f8re livet vanskeligere for angriberen. Vi giver her nogle generelle anbefalinger, som vil v\u00e6re nyttige b\u00e5de i de varianter, vi har gennemg\u00e5et, og i andre tilf\u00e6lde.<\/p>\n<p><\/p>\n<ul>\n<li>Begr\u00e6ns programudf\u00f8relse med sorte\/hvide lister ved hj\u00e6lp af gruppepolitikker.<br \/>\nI de fleste tilf\u00e6lde forbliver det muligt at k\u00f8re kode. Vi anbefaler at se n\u00e6rmere p\u00e5 projektet <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, for at f\u00e5 indsigt i udbudte metoder til manipulation med filer og udf\u00f8relse af kode i systemet.<br \/>\nVi anbefaler at kombinere begge typer begr\u00e6nsninger: man kan f.eks. tillade k\u00f8rsel af eksekverbare filer, der er signeret af Microsoft, men begr\u00e6nse k\u00f8rsel af cmd.exe.<\/li>\n<li>Deaktiver indholdskortene i Internet Explorer (kan g\u00f8res lokalt i registreringsdatabasen). <\/li>\n<li>Deaktiver kaldet til den indbyggede Windows-hj\u00e6lp via regedit.<\/li>\n<li>Deaktiver muligheden for at montere lokale drev for fjernforbindelser, medmindre en s\u00e5dan begr\u00e6nsning ikke er kritisk for brugerne.<\/li>\n<li>Begr\u00e6ns adgangen til lokale drev p\u00e5 den fjernbetjente maskine og lad kun brugernes mapper v\u00e6re tilg\u00e6ngelige.<\/li>\n<\/ul>\n<p><\/p>\n<p>Vi h\u00e5ber, at du har fundet dette interessant, og at denne artikel i bedste fald vil hj\u00e6lpe med at g\u00f8re din virksomheds fjernarbejde mere sikkert.<\/p>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Remote Desktop set fra en angriber | ProHoster","description":"1. Introduktion Virksomheder, der ikke havde organiseret systemer til fjernadgang, implementerede hurtigt s\u00e5danne systemer for et par m\u00e5neder siden.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}