{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 uus tehnika MITM-r\u00fcnnakuteks HTTPS-i vastu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mitm-r\u00fchma teadlased mitmest Saksamaa \u00fclikoolist on v\u00e4lja t\u00f6\u00f6tanud uue meetodi MITM-r\u00fcnnakuks HTTPS-i suhtes, mis v\u00f5imaldab hankida k\u00fcpsiseid, mis sisaldavad sessiooni identifikaatoreid ja muid konfidentsiaalseid andmeid, samuti saavutada juhusliku JavaScripti koodi t\u00e4itmine teise saidi kontekstis. R\u00fcnnakut nimetatakse ALPACA-ks ja seda saab rakendada TLS-serveritele, mis toetavad erinevaid rakenduskihti protokolle (HTTPS, SFTP, SMTP, IMAP, POP3), kuid kasutavad \u00fchist TLS-sertifikaati.      <\/p>\n<p>R\u00fcnnaku olemus seisneb selles, et kui r\u00fcndajal on kontroll v\u00f5rgu v\u00e4rava v\u00f5i traadita ligip\u00e4\u00e4supunkti \u00fcle, v\u00f5ib ta suunata veebiliikluse teisele v\u00f5rgu portile ja korraldada \u00fchenduse loomise FTP- v\u00f5i meiliserveriga, mis toetab TLS-kr\u00fcptimist ning kasutab HTTP-serveriga \u00fchist TLS-sertifikaati, mist\u00f5ttu kasutaja brauser arvan, et \u00fchendus on loodud soovitud HTTP-serveriga. Kuna TLS-protokoll on universaalne ja ei ole seotud rakenduskihti protokollidega, on kr\u00fcpteeritud \u00fchenduse loomine k\u00f5ikide teenuste jaoks identne ning viga, mille t\u00f5ttu saadetud p\u00e4ring suunati valele teenusele, saab tuvastada alles p\u00e4rast kr\u00fcpteeritud seansi loomist p\u00e4ringu k\u00e4sitlemise ajal.     <\/p>\n<p>Seet\u00f5ttu, kui n\u00e4iteks suunata kasutaja \u00fchendus, mis algselt suunati HTTPS-ile, meiliserversisse, kus kasutatakse HTTPS-serveriga \u00fchist sertifikaati, siis TLS-\u00fchendus luuakse edukalt, kuid meiliserver ei suuda edastatud HTTP-k\u00e4ske t\u00f6\u00f6delda ja tagastab veakoodi. See vastus t\u00f6\u00f6deldakse brauseri poolt nagu vastus soovitud saidilt, mis edastati korrektselt loodud kr\u00fcpteeritud sidekanali kaudu.        <\/p>\n<p>R\u00fcnnaku kolme varianti on pakutud:   <\/p>\n<ul>\n<li class=\"l\"> \u00abUpload\u00bb autentimisprotsessi k\u00fcpsiste v\u00e4ljav\u00f5tmiseks. See meetod on rakendatav, kui TLS-sertifikaadiga FTP-server lubab laadida ja oma andmeid v\u00e4lja v\u00f5tta. Selles r\u00fcnnakute variandis v\u00f5ib r\u00fcndaja saavutada, et osa algsest kasutaja HTTP-p\u00e4ringust, nagu k\u00fcpsisepealkirja sisu, salvestatakse, n\u00e4iteks kui FTP-server t\u00f5lgendab p\u00e4ringut salvestamiseks m\u00f5eldud failina v\u00f5i logib t\u00e4ielikult sisse tulevad p\u00e4ringud. R\u00fcnde edukaks teostamiseks peab kurjategija kuidagi salvestatud sisu v\u00e4lja v\u00f5tma. R\u00fcnnak on rakendatav Proftpd, Microsoft IIS, vsftpd, FileZilla ja Serv-U vahel.\n<li class=\"l\"> \u00abDownload\u00bb ristveebiskriptimise (XSS) korraldamiseks. Meetod eeldab, et r\u00fcndaja saab teatud eramanipulatsioonide tulemusena sisestada andmeid teenusesse, mis kasutab jagatud <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/ssl-sertifikat\/\"   title=\"TLS-sertifikaat\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS-sertifikaat<\/a>, mida saab then esitata kasutaja p\u00e4ringu vastusena. R\u00fcnnak on rakendatav eespool mainitud FTP-serverite, IMAP-serverite ja POP3-serverite (courier, cyrus, kerio-connect ja zimbra) puhul.\n<li class=\"l\"> \u00abReflection\u00bb JavaScripti k\u00e4ivitamiseks teise saidi kontekstis. Meetod p\u00f5hineb kliendile osa p\u00e4ringust tagastamisel, milles sisaldub r\u00fcndaja saadetud JavaScripti kood. R\u00fcnnak on rakendatav \u00fclalnimetatud FTP-serverites, IMAP-serverites nagu Cyrus, Kerio-Connect ja Zimbra, samuti SMTP-serveris Sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - uus tehnika MITM-r\u00fcnnakute jaoks HTTPS-ile\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>N\u00e4iteks, kui kasutaja avab r\u00fcndaja kontrolli all oleva lehe, v\u00f5ib sellelt lehelt algatada p\u00e4ringu ressursile, mis asub saidil, kus kasutajal on aktiivne konto (n\u00e4iteks bank.com). MITM-r\u00fcnnaku k\u00e4igus saab selle p\u00e4ringu, mis suunatakse veebisaidile bank.com, suunata postiserverisse, kus kasutatakse sama TLS-sertifikaati, mis bank.com-iga. Kuna postiserver ei l\u00f5peta seanssi p\u00e4rast esimest viga, t\u00f6\u00f6deldakse teenusepealkirju ja k\u00e4ske, nagu \u00abPOST \/ HTTP\/1.1\u00bb ja \u00abHost:\u00bb, tundmatute k\u00e4skudena (postiserver tagastab iga pealkirja puhul \u00ab500 unrecognized command\u00bb).     <\/p>\n<p>Postiserver ei t\u00f5lgenda HTTP protokolli erip\u00e4ra ning teeninduspealkirjad ja POST-p\u00e4ringu andmeblokid t\u00f6\u00f6deldakse \u00fchtemoodi, seega saab POST-p\u00e4ringu kehas osutada rida postiserverile k\u00e4su andmiseks. N\u00e4iteks saab edastada: MAIL FROM:  millele postiserver vastab veateatega 501 : malformed address: alert(1); ei saa j\u00e4rgida      <\/p>\n<p>See vastus vastust saab brauser kasutaja, kes k\u00e4ivitab JavaScripti koodi r\u00fcnnakute k\u00e4ivitamata avatud saidi kontekstis, vaid saidil bank.com, kuhu p\u00e4ring saadeti, kuna vastus saabus korrektses TLS-seansis, mille sertifikaat kinnitas bank.com-i vastuse autentsust.     <center><img decoding=\"async\" alt=\"ALPACA - uus tehnika MITM-r\u00fcnnakute jaoks HTTPS-ile\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>\u00dclemaailmne skaneerimine n\u00e4itas, et probleem on \u00fcldiselt umbes 1,4 miljonit veebiserverit, millele on v\u00f5imalik r\u00fcnnata, kasutades erinevate protokollide segamise r\u00fcnnakut. Reaalne r\u00fcnnaku v\u00f5imalus on m\u00e4\u00e4ratud 119 000 veebiserveri jaoks, millel olid seotud TLS-serverid, mis p\u00f5hinevad teistel rakendusprotokollidel.        <\/p>\n<p>Eksploidid on ette valmistatud ftp-serveritele nagu pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla ja serv-u, IMAP- ja POP3-serveritele dovecot, courier, exchange, cyrus, kerio-connect ja zimbra, SMTP-serveritele postfix, exim, sendmail, mailenable, mdaemon ja opensmtpd. Uurijad on uurinud v\u00f5imalust r\u00fcnnaku teostamiseks ainult FTP, SMTP, IMAP ja POP3 serveritega, samas ei v\u00e4listata, et probleem v\u00f5ib ilmneda ka teiste rakendusprotokollide korral, mis kasutavad TLS-i.     <center><img decoding=\"async\" alt=\"ALPACA - uus tehnika MITM-r\u00fcnnakute jaoks HTTPS-ile\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>R\u00fcnnaku blokeerimiseks on soovitatud kasutada ALPN-i (rakendustasandi protokolli l\u00e4bir\u00e4\u00e4kimised) TLS-seansi koosk\u00f5lastamiseks rakendusprotokolli arvesse v\u00f5ttes ning SNI (serveri nime n\u00e4itamine) laiendust TLS-sertifikaatide puhul, mis katab mitu <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/domain\/\"   title=\"domeeninime\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">domeeninime<\/a>. Rakenduste poolel on soovitatav piirata vigu k\u00e4skude t\u00f6\u00f6tlemisel, p\u00e4rast mille saavutamist katkestada \u00fchendus. R\u00fcnnaku blokeerimise meetmete v\u00e4ljat\u00f6\u00f6tamise protsess algas juba eelmise aasta oktoobris. Sarnased kaitsemeetmed on juba vastuv\u00f5etud Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZilla, crypto\/tls (Go) ja Internet Explorer.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 uus tehnika MITM-r\u00fcnnakute jaoks HTTPS-ile | ProHoster","description":"Mitme Saksamaa \u00fclikooli teadlaste r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud uue MITM-r\u00fcnnaku meetodi HTTPS-i jaoks, mis v\u00f5imaldab hankida k\u00fcpsiseid seansi identifikaatoritega ja muid konfidentsiaalseid andmeid, samuti saavutada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}