{"id":115607,"date":"2024-05-07T13:52:17","date_gmt":"2024-05-07T11:52:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp"},"modified":"2024-05-07T13:52:17","modified_gmt":"2024-05-07T11:52:19","slug":"ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","title":{"rendered":"A TunnelVision t\u00e1mad\u00e1s, amely lehet\u0151v\u00e9 teszi a VPN forgalom \u00e1tir\u00e1ny\u00edt\u00e1s\u00e1t DHCP manipul\u00e1ci\u00f3k r\u00e9v\u00e9n","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A TunnelVision attack method is presented to the public, allowing, in the presence of access to a local network or control over a wireless network, to redirect the victim's traffic to their host bypassing VPN (instead of being sent through the VPN, the traffic will be sent in clear text without tunneling to the attacker's system). Any VPN clients that do not use isolated network namespace when directing traffic into the tunnel or do not set packet filtering rules that prohibit routing VPN traffic through existing physical network interfaces are susceptible to the problem. <\/p>\n

The essence of the attack is that the attacker can run their own DHCP server and use it to provide the client with information to change routing. In particular, the attacker can take advantage of the option 121 (RFC-3442, adopted in 2002) provided by the DHCP protocol, which is intended to send information about static routes, to make changes to the routing table on the victim's machine and direct traffic bypassing. VPN<\/a>Redirecting is performed by setting a series of routes for subnets with the prefix \/1, which have a higher priority than the default route with the prefix \/0 (0.0.0.0\/0); accordingly, the traffic intended for the VPN virtual network interface will be directed through the physical network interface to the attacker's host in the local network. <\/p>\n

The attack can be carried out on any operating systems that support DHCP option 121, including Linux, Windows, iOS, and macOS, regardless of the VPN protocol used (Wireguard, OpenVPN, IPsec) and cipher suite. The Android platform is not vulnerable to the attack since it does not process option 121 in DHCP. However, the attack allows access to the traffic but does not enable the attacker to breach connections or determine the content transmitted using secure application-level protocols, such as TLS and SSH; for example, the attacker cannot determine the contents of HTTPS requests but can understand to which servers they are sent. <\/p>\n

A t\u00e1mad\u00e1sok elleni v\u00e9dekez\u00e9s \u00e9rdek\u00e9ben meg lehet akad\u00e1lyozni a csomagsz\u0171r\u00e9s szintj\u00e9n a VPN-interf\u00e9szre ir\u00e1nyul\u00f3 csomagok k\u00fcld\u00e9s\u00e9t m\u00e1s h\u00e1l\u00f3zati interf\u00e9szeken kereszt\u00fcl; blokkolni kell a 121-es opci\u00f3val rendelkez\u0151 DHCP-csomagokat; VPN-t haszn\u00e1lni egy k\u00fcl\u00f6n virtu\u00e1lis g\u00e9pben (vagy tart\u00e1lyban), amely el van szigetelve a k\u00fcls\u0151 h\u00e1l\u00f3zatt\u00f3l, vagy alkalmazni kell speci\u00e1lis alagutak be\u00e1ll\u00edt\u00e1si m\u00f3dokat, amelyek Linuxban h\u00e1l\u00f3zati n\u00e9vt\u00e9r haszn\u00e1lat\u00e1val m\u0171k\u00f6dnek. A t\u00e1mad\u00e1s v\u00e9grehajt\u00e1s\u00e1hoz k\u00f6zz\u00e9tett egy k\u00e9szlet parancssorozatot is.

\r\n \"Vide\u00f3\r\n
<\/div>\r\n <\/div> <\/center> <\/p>\n

Megjegyezhet\u0151, hogy a helyi route m\u00f3dos\u00edt\u00e1s\u00e1nak \u00f6tlete nem \u00faj, \u00e9s kor\u00e1bban \u00e1ltal\u00e1ban DNS-szerverek hamis\u00edt\u00e1s\u00e1ra ir\u00e1nyul\u00f3 t\u00e1mad\u00e1sokban alkalmazt\u00e1k. Egy hasonl\u00f3 t\u00e1mad\u00e1s, a TunnelCrack, ahol a forgalom \u00e1tir\u00e1ny\u00edt\u00e1sa az alap\u00e9rtelmezett \u00e1tj\u00e1r\u00f3 helyettes\u00edt\u00e9s\u00e9vel t\u00f6rt\u00e9nt, minden tesztelt VPN-kliens 87,5%-\u00e1t \u00e9rintette iOS-en, 66,7%-\u00e1t Windows-on, 35,7%-\u00e1t Linux-on \u00e9s 21,4%-\u00e1t Androidon. A VPN \u00e9s a DHCP \u00f6sszef\u00fcgg\u00e9s\u00e9ben ezt a m\u00f3dszert kor\u00e1bban is eml\u00edtett\u00e9k, p\u00e9ld\u00e1ul a tavalyi USENIX 2023 konferenci\u00e1n egy el\u0151ad\u00e1s foglalkozott ezzel (a kutat\u00e1s kimutatta, hogy a 195 tesztelt VPN-kliensb\u0151l 64,6% ki volt t\u00e9ve a t\u00e1mad\u00e1snak). <\/p>\n

Az \u00fatvonalak behelyettes\u00edt\u00e9s\u00e9re kor\u00e1bban speci\u00e1lisan kialak\u00edtott USB-kulcsot javasoltak, amely \u00fagy viselkedik, mint egy h\u00e1l\u00f3zati adapter, \u00e9s amikor a sz\u00e1m\u00edt\u00f3g\u00e9phez csatlakozik DHCP-n kereszt\u00fcl, \u00e1tj\u00e1r\u00f3k\u00e9nt mag\u00e1t hirdeti. Ezen k\u00edv\u00fcl, ha ellen\u0151rz\u00e9s alatt tartj\u00e1k az \u00e1tj\u00e1r\u00f3t (p\u00e9ld\u00e1ul amikor az \u00e1ldozat csatlakozik a t\u00e1mad\u00f3 \u00e1ltal kezelt vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zatra), kifejlesztettek egy technik\u00e1t a csomagok beilleszt\u00e9s\u00e9re az alag\u00fatba, amely VPN interf\u00e9szk\u00e9nt \u00e9rz\u00e9kelhet\u0151. <\/p>\n

Adatfolyamok VPN haszn\u00e1lata eset\u00e9n:

\"A<\/center> <\/p>\n

Adatfolyamok a t\u00e1mad\u00e1s ut\u00e1n:

\"A<\/center>
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0442\u0440\u0430\u0444\u0438\u043a \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0431\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u044e\u0431\u044b\u0435 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0451\u043d \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b (network […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":115608,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115607","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TunnelVision t\u00e1mad\u00e1s, amely lehet\u0151v\u00e9 teszi a VPN-forgalom \u00e1tir\u00e1ny\u00edt\u00e1s\u00e1t a DHCP manipul\u00e1ci\u00f3ival | ProHoster","description":"A nyilv\u00e1noss\u00e1g sz\u00e1m\u00e1ra bemutatt\u00e1k a TunnelVision t\u00e1mad\u00e1si m\u00f3dszert, amely lehet\u0151v\u00e9 teszi, hogy helyi h\u00e1l\u00f3zathoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s vagy vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zat ellen\u0151rz\u00e9se eset\u00e9n a t\u00e1mad\u00f3 a VPN-t megker\u00fclve ir\u00e1ny\u00edtsa \u00e1t az \u00e1ldozat forgalm\u00e1t a saj\u00e1t hosztj\u00e1ra (helyett.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c VPN-\u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 DHCP | ProHoster","og:description":"\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-07T11:52:19+00:00","article:modified_time":"2024-05-07T11:52:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115607","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:58:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 23:52:19","updated":"2026-02-04 14:58:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/115607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=115607"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/115607\/revisions"}],"predecessor-version":[{"id":156765,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/115607\/revisions\/156765"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/115608"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=115607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=115607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=115607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}