{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"AirSnitch r\u00fcnnak, mis v\u00f5imaldab \u00fcletada isoleerimist klientide vahel Wi-Fi's.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kaliforniasest \u00dclikoolist Riverside'is on teadlased t\u00f6\u00f6tanud v\u00e4lja (PDF) uue r\u00fcnnakute klassi, mida nimetatakse AirSnitchiks. Need r\u00fcnnakud v\u00f5imaldavad \u00fcle minna Wi-Fi v\u00f5rgu klientide isolatsioonimehhanismidest, mis ei luba klientidel omavahel otse \u00fchendust v\u00f5tta. Halvimal juhul v\u00f5imaldavad need r\u00fcnnakud kurjategijal suunata ohvri liiklust enda kaudu (MITM), et anal\u00fc\u00fcsida v\u00f5i muuta kr\u00fcpteerimata p\u00e4ringuid ning asendada saidile suunamisi DNS-i vahem\u00e4lu r\u00fcndamise kaudu. <\/p>\n

R\u00fcnnakute l\u00e4biviimiseks peab r\u00fcndaja olema \u00fchendatud sama traadita v\u00f5rguga, mis ohver, v\u00f5i k\u00fclalisv\u00f5rguga, mida teenindab sama juurdep\u00e4\u00e4supunkt. N\u00e4iteks v\u00f5ivad r\u00fcnnakud toimida avalikes traadita v\u00f5rkudes. 9 testitud traadita juurdep\u00e4\u00e4supunkti mudelist Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM ja Cisco, samuti DD-WRT ja OpenWrt tarkvaraga lahendustest olid k\u00f5ik seadmed altti v\u00e4hemalt \u00fchele r\u00fcnnakumeetodile.

\"AirSnitch<\/center> <\/p>\n

Kolm probleemi t\u00f5useb esile, mis v\u00f5imaldavad r\u00fcnnakut. Esimene probleem v\u00f5imaldab klientide vahelise isolatsiooni \u00fcletamist, kuna lahtise v\u00f5tme haldamine, mida kasutatakse \u00fclekande kaadrite kaitsmiseks, ei toimi korralikult. Teine probleem on seotud sellega, et isolatsiooni rakendatakse tavaliselt MAC- v\u00f5i IP-tasandil, kuid mitte korraga m\u00f5lemal tasandil. Kolmas probleem tuleneb klientide identifikaatorite ebausaldusv\u00e4\u00e4rsest s\u00fcnkroniseerimisest kogu v\u00f5rgu virnas, mis v\u00f5imaldab muudest klientidest saabuvat ja v\u00e4ljaminevat liiklust tabada. <\/p>\n

Kaasaegsed juhtmevabad juurdep\u00e4\u00e4supunktid \u00fchendavad endas raadiovastuv\u00f5tja ja v\u00f5rgu l\u00fcliti (Layer 2 Switch) funktsioone. Seejuures kasutab l\u00fcliti, erinevalt juhelinev\u00f5rkudest, mitte kliendi sidumist f\u00fc\u00fcsilise porti kaudu, vaid loogilist seost juhtmevaba kanaliga. Sellise sidumise identifikaatorina kasutatakse kliendi MAC-aadressi, mis seostatakse kanaliga spetsiaalses MAC-aadresside tabelis. Kui klient vahetab kanalit (n\u00e4iteks 2.4 GHz-lt 5 GHz-ile), v\u00e4rskendatakse tabelis andmeid.

\"AirSnitch<\/center> <\/p>\n

R\u00fcnnak toimub OSI v\u00f5rgumudeli esimesel (f\u00fc\u00fcsiline, raadioside) ja teisel (kanal, MAC-aadress) tasemel, ning see seisneb selles, et r\u00fcndaja, kes on \u00fchendatud sama juurdepaccesspunktiga, kuid kasutab sagedusala, mis ei ole sama, mis ohvril (n\u00e4iteks 2.4 GHz asemel 5 GHz), saadab \u00fchenduse loomise taotluse (4-way handshake), n\u00e4idates ohvri MAC-aadressi (sarnane ARP-spoofingule Ethernet-v\u00f5rkudes). Kuna kliendid tuvastatakse MAC-aadressi j\u00e4rgi, arvab juurdepaccesspunkt, et klient on l\u00fclitunud teisele kanalile, ja muudab MAC-aadressi tabelis olevat kirjet. P\u00e4rast seda suunatakse kogu sissetulev liiklus juurdepaccesspunktist r\u00fcndaja seadmesse.

\"AirSnitch<\/center>
\"AirSnitch<\/center> <\/p>\n

Kaks suunda j\u00e4lgimise teostamiseks saadab r\u00fcndaja, saades ohvrile suunatud andmed, MAC-aadresside tabeli l\u00e4hteseisundi. Selleks edastatakse paketin\u00e4ide 'ICMP Ping' koos juhusliku MAC-aadressiga ja paketi kr\u00fcpteerimisega GTK (r\u00fchma ajutine v\u00f5ti) abil, mis on k\u00f5igi juhtmevabade v\u00f5rgu klientide \u00fchine. Juurutuspunkt, mis saab selle paketi, tagastab ohvri MAC-aadressi seotuse algse juhtmevaba kanaliga. Liiklusse sulandumine toimub MAC-aadresside tabeli cyclical asenduse kaudu.

\"AirSnitch<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AirSnitch r\u00fcnnak, mis v\u00f5imaldab \u00fcletada isoleerimise Wi-Fi klientide vahel | ProHoster","description":"Kalifornia \u00dclikooli Riverside'i teadlased on v\u00e4lja t\u00f6\u00f6tanud (PDF) uue r\u00fcnnakute klassi traadita v\u00f5rkudele - AirSnitch. Need r\u00fcnnakud v\u00f5imaldavad \u00fcletada Wi-Fi v\u00f5rkudes klientide isoleerimise mehhanisme, mis ei v\u00f5imalda klientidel omavahel otseselt suhelda. Halvimal juhtumil v\u00f5ivad r\u00fcnnakud v\u00f5imaldada r\u00fcndajal suunata ohvri liikluse enda kaudu (MITM), et anal\u00fc\u00fcsida v\u00f5i muuta kr\u00fcptimata p\u00e4ringuid, samuti asendada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}