{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 uus tehnika MITM-r\u00fcnnakuteks HTTPS-i suhtes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mitm-r\u00fcnnakuteenus, liituda mitme Saksa \u00fclikooli teadlastega, on v\u00e4lja t\u00f6\u00f6tatud uus meetod, mis v\u00f5imaldab v\u00e4lja v\u00f5tta k\u00fcpsiseid ja teisi konfidentsiaalseid andmeid, sealhulgas aktiveerida JavaScripti koodi teise saidi kontekstis. R\u00fcnnaku nimi on ALPACA ning seda saab kasutada erinevate rakendusprotokollidega TLS-serverite vastu (HTTPS, SFTP, SMTP, IMAP, POP3), mis kasutavad sama TLS-sertifikaati.      <\/p>\n<p>R\u00fcnne p\u00f5hiolemus seisneb selles, et kui r\u00fcnnakul on kontroll v\u00f5rgu v\u00e4rava v\u00f5i traadita juurdep\u00e4\u00e4supunkti \u00fcle, siis v\u00f5ib r\u00fcndaja suunata veebiliikluse teisele v\u00f5rguportile ja korraldada \u00fchenduse loomise FTP- v\u00f5i postiserveriga, mis toetavad TLS-kr\u00fcptimist ja kasutavad HTTP-serveriga \u00fchiseid TLS-sertifikaate. Kasutaja brauser arvab, et \u00fchendus on loodud soovitud HTTP-serveriga. Kuna TLS-protokoll on universaalne ja mitte seotud rakenduse tasandi protokollidega, on kr\u00fcptitud \u00fchenduse loomine k\u00f5ikide teenuste puhul identne ning viga, mille t\u00f5ttu p\u00e4ring saadetakse valele teenusele, tuvastatakse alles p\u00e4rast kr\u00fcptitud seansi loomist saadetud p\u00e4ringu k\u00e4sitlemise ajal.     <\/p>\n<p>Seega, kui n\u00e4iteks suunata HTTPS-iga algselt adresseeritud kasutaja\u00fchendus postitussserverisse, kus kasutatakse HTTPS-serveriga \u00fchist sertifikaati, siis TLS-\u00fchendus saab edukalt luua, kuid postitussserver ei suuda edastatud HTTP-k\u00e4sku t\u00f6\u00f6delda ja tagastab veakoodi vastuse. Seda vastust k\u00e4sitletakse brauseris kui taotletud saidilt saadud vastust, mis on edastatud korrektselt loodud kr\u00fcpteeritud suhtlemiskanali kaudu.        <\/p>\n<p>Pakutud on kolm r\u00fcnnakuv\u00f5imalust:   <\/p>\n<ul>\n<li class=\"l\"> <span>&#171;\u00dcleslaadimine&#187; autentimisparameetrite Cookie'ide v\u00e4ljav\u00f5tmiseks. Meetod kehtib, kui TLS-sertifikaadiga FTP-server v\u00f5imaldab andmete \u00fcleslaadimist ja v\u00e4ljav\u00f5tmist. Selle r\u00fcnnaku variandi korral v\u00f5ib r\u00fcndaja saavutada kasutaja algse HTTP-p\u00e4ringu osade, n\u00e4iteks Cookie p\u00e4ise sisu s\u00e4ilitamise, n\u00e4iteks kui FTP-server t\u00f5lgendab p\u00e4ringut kui salvestamiseks m\u00f5eldud faili v\u00f5i logib t\u00e4ielikult sisenevaid p\u00e4ringuid. Eduka r\u00fcnnaku korral peab s\u00fc\u00fcdistatav kuidagi salvestatud sisu v\u00e4ljav\u00f5tma. R\u00fcnnak on rakendatav Proftpd, Microsoft IIS, vsftpd, filezilla ja serv-u suhtes.<\/span>\n<li class=\"l\"> <span>&#171;Allalaadimine&#187; saidi\u00fclese skriptimise (XSS) korraldamiseks. Meetod eeldab, et r\u00fcndaja suudab m\u00f5ningate erimanipulatsioonide tulemusel andmeid teenusesse sisestada, mis kasutab \u00fchiseid<\/span> <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/ssl-sertifikat\/\"   title=\"TLS-sertifikaat\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS-sertifikaat<\/a>, mida saab hiljem esitada vastusena kasutaja p\u00e4ringule. R\u00fcnnak kehtib \u00fclaltoodud FTP-serverite, IMAP-serverite ja POP3-serverite (courier, cyrus, kerio-connect ja zimbra) suhtes.\n<li class=\"l\"> <span>&#171;Peegeldus&#187; JavaScripti k\u00e4ivitamiseks teise saidi kontekstis. Meetod p\u00f5hineb kliendile p\u00e4ringu osade tagasiv\u00f5tmisel, mis sisaldab r\u00fcndaja saatnud JavaScript-koodi. R\u00fcnnak on rakendatav \u00fclalmainitud FTP-serveritele, IMAP-serveritele cyrus, kerio-connect ja zimbra, samuti SMTP-serverile sendmail.<\/span>    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - uus MITM-r\u00fcnnakute tehnika HTTPS-is.\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p><span>N\u00e4iteks kui kasutaja avab r\u00fcndajate kontrolli all oleva lehe, v\u00f5ib sellelt lehelt alata p\u00e4ring ressursside jaoks saidilt, kus kasutajal on aktiivne konto (n\u00e4iteks bank.com). MITM-r\u00fcnnaku k\u00e4igus saab selle p\u00e4ringu, mis on suunatud bank.com-i veebisaidile, suunata postiserverisse, kus kasutatakse sama TLS-sertifikaati nagu bank.com-il. Kuna postiserver ei sulge sessiooni p\u00e4rast esimest viga, t\u00f6\u00f6deldakse teenuse p\u00e4iseid ja k\u00e4ske, nagu &#171;POST \/ HTTP\/1.1&#187; ja &#171;Host:&#187;, tundmatute k\u00e4skudena (postiserver tagastab iga p\u00e4ise puhul &#171;500 unrecognized command&#187;).<\/span>     <\/p>\n<p>Postiserver ei t\u00f5lgenda HTTP protokolli erip\u00e4rasid ning teenuse p\u00e4iseid ja postip\u00e4ringu andmeplokki k\u00e4sitletakse \u00fchtemoodi, seet\u00f5ttu saab POST-p\u00e4ringu kehas m\u00e4\u00e4rata rea postiserverile k\u00e4su edastamiseks. N\u00e4iteks saab edastada: MAIL FROM:  mille peale postiserver tagastab veateate 501 : malformed address: alert(1); may not follow      <\/p>\n<p>See vastuse saadab kasutaja brauser, kes k\u00e4ivitab JavaScripti koodi kontekstis, mis ei ole r\u00fcndaja algselt avatud sait, vaid say bank.com, kuhu p\u00e4ring on saadetud, kuna vastus tuli \u00f5igesti TLS-seansi k\u00e4igus, mille sertifikaat kinnitas vastuse autentsuse bank.com.     <center><img decoding=\"async\" alt=\"ALPACA - uus MITM-r\u00fcnnakute tehnika HTTPS-is.\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Globaalne v\u00f5rkude skaneerimine n\u00e4itas, et probleemi \u00fcldises vormis on kokku puutunud umbes 1,4 miljonit veebiserverit, mille suhtes on v\u00f5imalik r\u00fcnnakute teostamine erinevate protokollide segamise kaudu. Reaalse r\u00fcnnaku teostamise v\u00f5imalust on kindlaks tehtud 119 tuhande veebiserveri puhul, millel olid kaasnevad TLS-serverid, mis tuginesid teistele rakenduse protokollidele.        <\/p>\n<p>Eksplootide n\u00e4ited on ette valmistatud FTP-serverite pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla ja serv-u, IMAP- ja POP3-serverite dovecot, courier, exchange, cyrus, kerio-connect ja zimbra, SMTP-serverite postfix, exim, sendmail, mailenable, mdaemon ja opensmtpd jaoks. Uurijad on uurinud r\u00fcnnaku teostamise v\u00f5imalust ainult FTP, SMTP, IMAP ja POP3 serverite kombinatsioonis, samas ei v\u00e4listata, et probleem v\u00f5ib ilmneda ka muude rakenduse protokollide puhul, mis kasutavad TLS-i.     <center><img decoding=\"async\" alt=\"ALPACA - uus MITM-r\u00fcnnakute tehnika HTTPS-is.\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>R\u00fcnnakute blokeerimiseks soovitatakse kasutada ALPN (rakenduse tasandi protokolli l\u00e4bir\u00e4\u00e4kimiste) laiendust TLS-seansi kohandamiseks rakenduse protokolli arvestades ning SNI (serveri nime n\u00e4itamise) laiendust, et siduda see hostinimega, kui rakendatakse TLS-sertifikaate, mis katab mitut. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/domain\/\"   title=\"domeeninimesid\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">domeeninimesid<\/a>. Rakenduste poolel soovitatakse piirata k\u00e4su t\u00f6\u00f6tlemise vigade arvu, p\u00e4rast mille saavutamist katkestada \u00fchendus. Protsess r\u00fcnnaku blokeerimise meetmete v\u00e4ljat\u00f6\u00f6tamiseks algas juba m\u00f6\u00f6dunud aasta oktoobris. Taolisi meetmeid kaitseks on juba rakendatud Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZilla, crypto\/tls (Go) ja Internet Exploreris.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 uus MITM-r\u00fcnnaku tehnika HTTPS-i jaoks | ProHoster","description":"Mitme Saksa \u00fclikooli teadlaste grupp on v\u00e4lja t\u00f6\u00f6tanud uue meetodi MITM-r\u00fcnnakuks HTTPS-ile, mis v\u00f5imaldab v\u00e4lja v\u00f5tta k\u00fcpsiseid koos seansi identifikaatoritega ja muid konfidentsiaalseid andmeid ning saavutada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}