{"id":88992,"date":"2020-07-17T07:42:02","date_gmt":"2020-07-17T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami"},"modified":"2020-07-17T07:42:02","modified_gmt":"2020-07-17T05:42:02","slug":"wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","title":{"rendered":"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/c52b58a326ba424d73a93614818c82f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nEelmisel <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/news\/t\/507776\/\">artiklis<\/a><\/noindex> r\u00e4\u00e4kisime <strong>Nemesida WAF Free<\/strong> \u2014 tasuta t\u00f6\u00f6riist, mis kaitseb veebisaite ja API-sid h\u00e4kkerir\u00fcnnakute eest. Otsustasime teha \u00fclevaate populaarsetest turvaaukude skaneerimise t\u00f6\u00f6riistadest. <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">Wapiti<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Veebisaidi turvaaukude skaneerimine on h\u00e4davajalik meetod, mis koos l\u00e4htekoodi anal\u00fc\u00fcsiga v\u00f5imaldab hinnata saidi turvalisuse taset v\u00f5imalike ohtude eest. Veebiteenuse skaneerimist saab teha spetsialiseeritud t\u00f6\u00f6riistadega.<\/p>\n<p><\/p>\n<p>Nikto, W3af (kirjutatud Python 2.7, mille tugi on l\u00f5ppenud) v\u00f5i Arachni (mis ei saa enam toetamist alates veebruarist) on tasuta valiku seas k\u00f5ige populaarsemad lahendused. Loomulikult on olemas ka teisi, n\u00e4iteks Wapiti, millele me keskendume.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3 id=\"wapiti-rabotaet-so-sleduyuschimi-tipami-uyazvimostey\">Wapiti tuvastab j\u00e4rgmisi turvaauke:<\/h3>\n<p><\/p>\n<ul>\n<li>failide avalikustumine (kohalikud ja eemalolevad, fopen, readfile);<\/li>\n<li>s\u00fcstid (PHP \/ JSP \/ ASP \/ SQL-s\u00fcstid ja XPath-s\u00fcstid);<\/li>\n<li>XSS (v\u00f5\u00f5raste skriptide r\u00fcnnak) (peegelduvad ja p\u00fcsivad);<\/li>\n<li>k\u00e4skude tuvastamine ja t\u00e4itmine (eval (), system (), passtru ());<\/li>\n<li>CRLF-s\u00fcstid (HTTP vastuste jagamine, seansi fikseerimine);<\/li>\n<li>XXE (XML v\u00e4line entiteet) s\u00fcstimine;<\/li>\n<li>SSRF (serveripoolne p\u00e4ringute valeidentifitseerimine);<\/li>\n<li>tuntud potentsiaalselt ohtlike failide kasutamine (Nikto andmebaasi kaudu);<\/li>\n<li>n\u00f5rgad .htaccess seadistused, mida saab m\u00f6\u00f6da hiilida;<\/li>\n<li>varukoopiafailide olemasolu, mis avalikustavad konfidentsiaalset teavet (l\u00e4htekoodi avalikustamine);<\/li>\n<li>Shellshock;<\/li>\n<li>avatud \u00fcmbersuunamised;<\/li>\n<li>ebastandardsete HTTP meetodite lubamine (PUT).<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"vozmozhnosti\">V\u00f5imalused:<\/h4>\n<p><\/p>\n<ul>\n<li>toetab HTTP, HTTPS ja SOCKS5 proksisid;<\/li>\n<li>autentimine mitmete meetoditega: Basic, Digest, Kerberos v\u00f5i NTLM;<\/li>\n<li>v\u00f5imalus piirata skaneerimise ulatust (domeen, kaust, leht, URL);<\/li>\n<li>automaatne \u00fche URL parameetri eemaldamine;<\/li>\n<li>mitmed ettevaatusabin\u00f5ud l\u00f5putute skaneerimisringide vastu (n\u00e4iteks: ifor, parameetri v\u00e4\u00e4rtuste piiramisega);<\/li>\n<li>v\u00f5imalus m\u00e4\u00e4rata URL-ide prioriteetide uurimiseks (isegi kui need ei asu skaneerimise piirkonnas);<\/li>\n<li>v\u00f5imalus v\u00e4listada m\u00f5ned URL-id skaneerimisest ja r\u00fcnnakutest (n\u00e4iteks: URL logout);<\/li>\n<li>k\u00fcpsiste importimine (saamine t\u00f6\u00f6riista wapiti-getcookie kaudu);<\/li>\n<li>v\u00f5imalus aktiveerida\/deaktiveerida SSL-sertifikaatide kontrollimine;<\/li>\n<li>v\u00f5imalus ekstraheerida URL JavaScriptist (v\u00e4ga lihtne JS-interpretator);<\/li>\n<li>koost\u00f6\u00f6 HTML5-ga;<\/li>\n<li>m\u00f5ned v\u00f5imalused crawler'i k\u00e4itumise ja piirangute haldamiseks;<\/li>\n<li>skaneerimisprotsessi maksimaalse aja seadmine;<\/li>\n<li>m\u00f5nede kohandatavate HTTP-pealkirjade lisamine v\u00f5i kohandatud User-Agent'i seadistamine.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"dopolnitelnye-vozmozhnosti\">Lisafunktsioonid:<\/h4>\n<p><\/p>\n<ul>\n<li>haavatavusraportite loomine erinevates formaatides (HTML, XML, JSON, TXT);<\/li>\n<li>skaneerimise v\u00f5i r\u00fcnnaku peatamine ja j\u00e4tkamine (seansimehhanism SQLite3 andmebaasi kasutades);<\/li>\n<li>terminaalihaldus haavatavuste esitlemiseks;<\/li>\n<li>erinevad logimise tasemed;<\/li>\n<li>kiire ja lihtne viis r\u00fcnnakumoodulite aktiveerimiseks\/deaktiveerimiseks.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"ustanovka\">Paigaldamine<\/h3>\n<p><\/p>\n<p>Praeguse Wapiti versiooni saab installida 2 viisil:<\/p>\n<p><\/p>\n<ul>\n<li>alla laadida allika ametlikult <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">lehelt<\/a><\/noindex> ja k\u00e4ivitada installiskeem, eelnevalt paigaldades Python3;<\/li>\n<li>kasutades k\u00e4sku pip3 install wapiti3.<\/li>\n<\/ul>\n<p><\/p>\n<p>P\u00e4rast seda on Wapiti valmis t\u00f6\u00f6ks.<\/p>\n<p><\/p>\n<h3 id=\"rabota-s-instrumentom\">T\u00f6\u00f6riista kasutamine<\/h3>\n<p><\/p>\n<p>Wapiti t\u00f6\u00f6 demonstreerimiseks kasutame spetsiaalselt ettevalmistatud seisti sites.vulns.pentestit.ru (siseressurss), mis sisaldab erinevaid haavatavusi (sisestus, XSS, LFI\/RFI) ja muid veebirakenduste puudusi. <\/p>\n<p><\/p>\n<p><strong>Teave on antud ainult tutvumiseks. \u00c4rge rikkuda seadusi!<\/strong><\/p>\n<p><\/p>\n<p>P\u00f5hikomandad skanneri k\u00e4ivitamiseks:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u &lt;target&gt; &lt;options&gt;<\/code><\/pre>\n<p><\/p>\n<p>Samas on olemas \u00fcsna \u00fcksikasjalik abi, kus on palju k\u00e4ivitamisvalikuid, n\u00e4iteks:<\/p>\n<p><\/p>\n<p><strong>\u2014 ulatus<\/strong> \u2014 skaneerimise ulatus<br \/>\nKui lisada skaneerimise URL'ile scope parameeter, saab reguleerida saidi skaneerimise ulatust, m\u00e4rkimiseks eraldi lehte v\u00f5i k\u00f5iki lehti, mida saidilt leida.<\/p>\n<p><\/p>\n<p><strong>-s<\/strong> ja <strong>-x<\/strong> \u2014 parameetrid, mis lisavad v\u00f5i eemaldavad konkreetsed URL-aadressid. Need parameetrid on kasulikud, kui on vaja lisada v\u00f5i eemaldada konkreetne URL skaneerimisprotsessist.<\/p>\n<p><\/p>\n<p><strong>\u2014 vahelej\u00e4tmine<\/strong> \u2014 m\u00e4\u00e4ratud parameeter selle v\u00f5tmega skaneeritakse, kuid ei r\u00fcnnata. Kasulik, kui on mingeid ohtlikke parameetreid, mida oleks parem skaneerimisest v\u00e4lja j\u00e4tta.<\/p>\n<p><\/p>\n<p><strong>\u2014 kinnita-ssl<\/strong> \u2014 sertifikaadi kontrollimise lubamine v\u00f5i keelamine.<br \/>\nWapiti skanner on modulaarne. K however, for running specific modules among those that are connected automatically when the scanner operates, the key -m should be used and the desired modules listed with a comma. If the key is not used, all modules will work by default. In the simplest variant, this will look as follows:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u http:\/\/sites.vulns.pentestit.ru\/ -m sql,xss,xxe<\/code><\/pre>\n<p><\/p>\n<p>See n\u00e4idis t\u00e4hendab, et me kasutame sihtm\u00e4rkide skaneerimisel ainult SQL, XSS ja XXE mooduleid. Lisaks on v\u00f5imalik filtreerida moodulite t\u00f6\u00f6d s\u00f5ltuvalt vajalikust meetodist. N\u00e4iteks <strong>-m \u201cxss: get, blindsql: post, xxe: post\u201d<\/strong>. Sellisel juhul rakendatakse moodulit <strong>xss<\/strong> GET meetodiga edastatavatele p\u00e4ringutele, samas kui moodul <strong>blibdsql<\/strong> rakendatakse POST p\u00e4ringutele jne. \u00dchtlasi, kui m\u00f5nda moodulit, mis on nimekirjas, ei vajata skaneerimise ajal v\u00f5i see t\u00f6\u00f6tab v\u00e4ga kaua, siis klahvikombinatsiooni Ctrl+C abil saab olemasoleva mooduli kasutamise vahele j\u00e4tta, valides vastava punkti interaktiivses men\u00fc\u00fcs.<\/p>\n<p><\/p>\n<p>Wapiti toetab p\u00e4ringute edastamist l\u00e4bi proxy-serveri v\u00f5tmega <strong>-p<\/strong> ja autentimist sihtm\u00e4rgis oleva veebisaidi kaudu parameetriga <strong>-a<\/strong>. Samuti on v\u00f5imalik m\u00e4\u00e4rata autentimise t\u00fc\u00fcp: <strong>Basi\u0441<\/strong>, <strong>Digest<\/strong>, <strong>Kerberos<\/strong> ja <strong>NTLM<\/strong>. Kahte viimast v\u00f5ib olla vaja t\u00e4iendavate moodulite installimiseks. Lisaks on v\u00f5imalik p\u00e4ringutesse sisestada mis tahes p\u00e4iseid (sealhulgas suvaline <strong>User-Agent<\/strong>) ja palju muud.<\/p>\n<p><\/p>\n<p>Autentimise kasutamiseks saab kasutada t\u00f6\u00f6riista <strong>wapiti-getcookie<\/strong>. Selle abil koostame <strong>k\u00fcpsised<\/strong>, mida Wapiti kasutab skaneerimisel. Koostamine <strong>k\u00fcpsised<\/strong> teostatakse k\u00e4suga:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie -u http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json<\/code><\/pre>\n<p><\/p>\n<p>T\u00f6\u00f6tamise k\u00e4igus interaktiivses re\u017eiimis vastame k\u00fcsimustele ja n\u00e4itame vajalikku teavet, nagu: kasutajanimi, parool ja muu:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/1f858db74cd11b0837d0aeca890af816.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V\u00e4ljundina saame JSON formaadis faili. Teine v\u00f5imalus on lisada kogu vajalik teave parameetri kaudu <strong>-d<\/strong>:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie - http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json -d &quot;username=admin&amp;password=admin&amp;enter=submit&quot;<\/code><\/pre>\n<p><\/p>\n<p>Tulemus on sarnane:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/87e0923c3027bdda5f1ccf0d4e08a10f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Peamise funktsionaalsuse vaatamisel oli meie jaoks veebirakenduse testimiseks l\u00f5ppp\u00e4ring:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti --level 1 -u http:\/\/sites.vulns.pentestit.ru\/ -f html -o \/tmp\/vulns.html -m all --color -\u0441 cookie.json --scope folder --flush-session -A 'Pentestit Scans' -p http:\/\/proxy.office.pentestit.ru:3128<\/code><\/pre>\n<p><\/p>\n<p>kus teiste parameetrite seas:<\/p>\n<p><\/p>\n<p><strong>-f<\/strong> ja <strong>-o<\/strong> \u2014 aruande vorming ja tee salvestamiseks;<\/p>\n<p><\/p>\n<p><strong>-m<\/strong> \u2014 k\u00f5igi moodulite \u00fchendamine \u2014 ei soovitata, kuna see m\u00f5jutab testimise aega ja aruande suurust;<\/p>\n<p><\/p>\n<p><strong>\u2014 v\u00e4rv<\/strong> \u2014 toob esile leitud haavatavused vastavalt nende t\u00f5sidusele Wapiti enda versiooni j\u00e4rgi;<\/p>\n<p><\/p>\n<p><strong>-c<\/strong> \u2014 faili kasutamine <strong>k\u00fcpsised<\/strong>, mis on genereeritud kasutades <strong>wapiti-getcookie<\/strong>; <\/p>\n<p><\/p>\n<p><strong>\u2014 ulatus<\/strong> \u2014 sihtm\u00e4rgi valik r\u00fcnnakuks. Valides variandi <strong>kaust<\/strong> skaneeritakse ja r\u00fcnnatakse iga URL, alustades baasist. Baasu URL peab olema kaldkriipsuga (ilma failinime);<\/p>\n<p><\/p>\n<p><strong>\u2014 puhasta-seanss<\/strong> \u2014 v\u00f5imaldab teostada uuesti skaneerimist, kus eelnevaid tulemusi ei arvestata;<\/p>\n<p><\/p>\n<p><strong>-A<\/strong> \u2014 kohandatud <strong>User-Agent<\/strong>;<\/p>\n<p><\/p>\n<p><strong>-p<\/strong> \u2014 proxy serveri aadress, kui seda on vaja.<\/p>\n<p><\/p>\n<h3 id=\"nemnogo-ob-otchete\">Veidi raportist<\/h3>\n<p><\/p>\n<p>Skaneerimise tulemused esitatakse p\u00f5hjaliku raportina k\u00f5igist avastatud haavatavustest HTML-lehe formaadis, mis on arusaadavas ja mugavas vormingus. Raportis on m\u00e4rgitud kategooriad ja avastatud haavatavuste arv, nende kirjeldus, p\u00e4ringud, k\u00e4sud <strong>curl<\/strong> ja soovitused nende sulgemiseks. Navigatsiooni mugavuse huvides lisatakse kategooriate pealkirjadele link, millele klikkides saab liikuda sellele:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/39d35304b6f2ea20fd9096e167daabd5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Oluline puudus raportis on, et selles puudub veebirakenduse kaart, ilma milleta ei ole selge, kas k\u00f5ik aadressid ja parameetrid on anal\u00fc\u00fcsitud. Samuti on olemas valeh\u00e4irete t\u00f5en\u00e4osus. Meie juhul on raportis kirjas \"varufailid\" ja \"v\u00f5imalikult ohtlikud failid\". Nende arv ei vasta tegelikkusele, kuna selliseid faile serveris ei olnud:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/09c6f8945e6fb6dc6de1388f71fc96bb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V\u00f5ib-olla ajaga parandavad vale t\u00f6\u00f6modulid olukorda. Samuti on raporti puuduseks avastatud haavatavuste v\u00e4rvumine (s\u00f5ltuvalt nende kriitilisusest) v\u00f5i v\u00e4hemalt nende kategoriseerimise puudumine. Ainus, kuidas me saame kaudselt m\u00f5ista avastatud haavatavuse kriitilisust, on kasutada parameetrit <strong>\u2014 v\u00e4rv<\/strong> skaneerimise k\u00e4igus ja siis v\u00e4rvitakse leitud haavatavused erinevates v\u00e4rvides:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/46f4c34f9215117eeddd96db633e9e3e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Kuid raportis selline v\u00e4rvimine ei ole ette n\u00e4htud.<\/p>\n<p><\/p>\n<h3 id=\"uyazvimosti\">Haavatavused<\/h3>\n<p><\/p>\n<h4 id=\"sqli\">SQLi<\/h4>\n<p><\/p>\n<p>Skanner suutis osaliselt avastada SQLi. SQL-haavatavuste otsimisel lehtedel, kus autentimine ei ole vajalik, mingeid probleeme ei esine:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/f9ffef805a115c1a7d47c068a38794bf.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ei \u00f5nnestunud leida haavatavust lehtedel, mis on ligip\u00e4\u00e4setavad ainult p\u00e4rast autentimist, isegi kasutades kehtivaid <strong>k\u00fcpsised<\/strong>, kuna t\u00f5en\u00e4oliselt toimub p\u00e4rast eduka autentimise l\u00f5ppu &quot;sisese sessiooni v\u00e4ljalogimine&quot; ja <strong>k\u00fcpsised<\/strong> muutuvad kehtetuks. Kui deautentimise funktsioon oleks teostatud eraldi skripti kaudu, mis vastutab selle protseduuri t\u00f6\u00f6tlemise eest, oleks seda saanud t\u00e4ielikult v\u00e4listada parameetriga -x, takistades seel\u00e4bi selle toimimist. Vastasel juhul ei \u00f5nnestu selle t\u00f6\u00f6tlemist v\u00e4listada. See ei ole konkreetse moduuli probleem, vaid kogu t\u00f6\u00f6riista probleem, kuid selle n\u00fcansi t\u00f5ttu ei \u00f5nnestunud avastada mitmeid s\u00fcstimist suletud ressursi osas.<\/p>\n<p><\/p>\n<h4 id=\"xss\">XSS<\/h4>\n<p><\/p>\n<p>M\u00e4\u00e4ratud \u00fclesandega skanner sai suurep\u00e4raselt hakkama ja leidis k\u00f5ik ettevalmistatud haavatavused:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/ae43bf1f7d78224a5df5f2ef733f8203.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"lfirfi\">LFI\/RFI<\/h4>\n<p><\/p>\n<p>Skanner leidis k\u00f5ik vaktsineeritud haavatavused:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 oma j\u00f5ududega veebisaidi haavatavuste kontrollimine\" src=\"\/wp-content\/uploads\/2020\/07\/9056c7911237b607a6b12cc2e5a488d3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u00dcldiselt, vaatamata valeh\u00e4iretele ja vaktsineerimise vahelej\u00e4tmisele, n\u00e4itab Wapiti kui tasuta t\u00f6\u00f6riist \u00fcsna h\u00e4id tulemusi. Igal juhul tuleb tunnistada, et skanner on \u00fcsna v\u00f5imas, paindlik ja multifunktsionaalne ning mis k\u00f5ige t\u00e4htsam \u2014 tasuta, seega on see \u00f5igustatud kasutamiseks, aidates administraatoreid ja arendajaid saada p\u00f5hiteavet veebirakenduse turvalisuse seisundi kohta.<\/p>\n<p><\/p>\n<p>P\u00fcsige terved ja kaitstud!<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/510998\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":88993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-88992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wapiti \u2014 veebisaidi turvauuringute tegemine iseseisvalt | ProHoster","description":"Eelmisel","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-17T05:42:02+00:00","article:modified_time":"2020-07-17T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88992","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:45:41","updated":"2022-09-28 15:58:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=88992"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88992\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/88993"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=88992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=88992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=88992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}