{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"AirSnitchi r\u00fcnnak, mis v\u00f5imaldab \u00fcletada isolatsiooni Wi-Fi klientide vahel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kaliforniya \u00dclikooli Riverside'i teadlased on v\u00e4ljat\u00f6\u00f6tanud uue r\u00fcnnete klassi traadita v\u00f5rkudele \u2014 AirSnitch. R\u00fcnnakud v\u00f5imaldavad m\u00f6\u00f6da minna kliendi isoleerimise mehhanismidest Wi-Fi v\u00f5rgus, mis ei luba klientidel omavahel otse suhelda. Halvimal juhul v\u00f5imaldavad r\u00fcnnakud kurjategijal suunata ohvri liikluse enda kaudu (MITM) anal\u00fc\u00fcsimiseks v\u00f5i mittesalatuks k\u00fcsitlusteks, samuti asendada veebilehtedele p\u00f6\u00f6rdumisi DNS-i vahem\u00e4lu r\u00fcnnaku kaudu. <\/p>\n

R\u00fcnnakute l\u00e4biviimiseks peab r\u00fcndaja olema suuteline \u00fchendama enda seadme sama juhtmevaba v\u00f5rgu k\u00fclge, millega ohver on \u00fchendatud, v\u00f5i sama juurdep\u00e4\u00e4supunkti k\u00fclge k\u00fclalisv\u00f5rgu kaudu. N\u00e4iteks v\u00f5ivad r\u00fcnnakud olla rakendatavad avalikes juhtmevabades v\u00f5rkudes. 9 testitud juhtmevaba juurdep\u00e4\u00e4supunkti mudelist firmadelt Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM ja Cisco, samuti DD-WRT ja OpenWrt tarkvaralahendustest, olid k\u00f5ik seadmed haavatavad v\u00e4hemalt \u00fche r\u00fcnnaku meetodi suhtes.

\"AirSnitchi<\/center> <\/p>\n

R\u00fcnnaku v\u00f5imaldavates probleemides eristatakse kolme aspekti. Esimene probleem on seotud ebakorrektse v\u00f5tmehaldusega k\u00fclgnevate raadiokadudeg, mis kaitsevad lainetavaid raame. Teine probleem on seotud sellega, et isolatsioon rakendatakse tavaliselt MAC-tasandil v\u00f5i IP-tasandil, aga mitte m\u00f5lemal tasemel korraga. Kolmas probleem tuleneb usaldamatust klientide identifikaatorite s\u00fcnkroniseerimisest kogu v\u00f5rgustiku kihis, mis v\u00f5imaldab teiste klientide sisendalise ja v\u00e4lise liikluse pealtkuulamist. <\/p>\n

Kaasaegsed juhtmevabad juurdep\u00e4\u00e4supunktid \u00fchendavad endas raadiovastuv\u00f5tja ja v\u00f5rgu l\u00fcliti (Layer 2 Switch) funktsioone, samas kui l\u00fcliti, erinevalt juhtmega v\u00f5rkudest, kasutab klientide loogilist sidumist juhtmevaba kanali kaudu f\u00fc\u00fcsilise porti asemel. Sel juhul kasutatakse identifikaatorina MAC-aadressi, mis seostatakse kanaliga spetsiaalses MAC-aadressi tabelis. Kui klient vahetab kanalit (n\u00e4iteks 2.4 GHz-lt 5 GHz-le), uuendatakse tabelis andmeid.

\"AirSnitchi<\/center> <\/p>\n

R\u00fcnne toimub OSI v\u00f5rgumudeli esimese (f\u00fc\u00fcsiline, raadiov\u00f5rk) ja teise (kanali, MAC-aadress) tasandi tasemel ning see seisneb selles, et r\u00fcndaja, kes on \u00fchendatud sama p\u00e4\u00e4supunktiga, kuid kasutab sagedusala, mis ei ole ohvri oma (n\u00e4iteks 2,4 GHz asemel 5 GHz), saadab \u00fchenduse loodud n\u00f5ude (4-way handshake), m\u00e4rkides ohvri MAC-aadressi (sarnane ARP-spoofing Ethernet-v\u00f5rkudes). Kuna kliendid tuvastatakse MAC-aadressi j\u00e4rgi, arvab p\u00e4\u00e4supunkt, et klient on l\u00fclitunud teisele kanalile, ja muudab kirje MAC-aadresside tabelis. P\u00e4rast seda suunatakse kogu sissetulev liiklus p\u00e4\u00e4supunktist r\u00fcndaja seadmesse.

\"AirSnitchi<\/center>
\"AirSnitchi<\/center> <\/p>\n

Kaks suunda katte tagamiseks saadab r\u00fcndaja, kui on saanud ohvrile suunatud andmed, MAC-aadresside tabeli oleku algsesse seisu. Selleks saadetakse \"ICMP Ping\" pakett juhusliku MAC-aadressiga ja paketi kr\u00fcpteerimine GTK (Group Temporal Key) v\u00f5tmega, mis on k\u00f5igi traadita v\u00f5rgu klientide jaoks \u00fchine. Juurdep\u00e4\u00e4supunkt, kui saab selle paketi, tagastab ohvri MAC-aadressi sidumise algse traadita kanaliga. Liiklusse sekkumine toimub MAC-aadresside tabelis ringikujulise asendamise ja salvestamise kaudu.

\"AirSnitchi<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AirSnitch r\u00fcnnak, mis v\u00f5imaldab m\u00f6\u00f6da minna klientide isolatsioonist Wi-Fi kaudu | ProHoster","description":"California \u00dclikooli Riverside'i teadlased on v\u00e4lja t\u00f6\u00f6tanud (PDF) uue r\u00fcnnakute klassi traadita v\u00f5rkudele - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}