{"id":53634,"date":"2019-12-06T00:00:00","date_gmt":"2019-12-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli"},"modified":"2020-02-18T14:01:34","modified_gmt":"2020-02-18T11:01:34","slug":"uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","title":{"rendered":"Sebezhet\u0151s\u00e9g, amely lehet\u0151v\u00e9 teszi a beavatkoz\u00e1st a VPN-alag\u00faton kereszt\u00fcl megval\u00f3sul\u00f3 TCP-kapcsolatokba","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kiadva<\/a><\/noindex> Az (CVE-2019-14899) t\u00e1mad\u00e1si technika lehet\u0151v\u00e9 teszi TCP-kapcsolatok csomagjainak meghamis\u00edt\u00e1s\u00e1t, m\u00f3dos\u00edt\u00e1s\u00e1t vagy helyettes\u00edt\u00e9s\u00e9t, amelyeket VPN-alag\u00faton kereszt\u00fcl tov\u00e1bb\u00edtanak. A probl\u00e9ma \u00e9rinti a Linuxot, FreeBSD-t, OpenBSD-t, Androidot, macOS-t, iOS-t \u00e9s m\u00e1s Unix-szer\u0171 rendszereket. A Linux az IPv4-hez t\u00e1mogatja az rp_filter (ford\u00edtott \u00fatvonal sz\u0171r\u00e9s) mechanizmust, amelynek szigor\u00fa \u00fczemm\u00f3dra val\u00f3 bekapcsol\u00e1sa semleges\u00edti ezt a probl\u00e9m\u00e1t. <\/p>\n

A m\u00f3dszer lehet\u0151v\u00e9 teszi csomagok behelyettes\u00edt\u00e9s\u00e9t TCP-kapcsolatok szintj\u00e9n, amelyek titkos\u00edtott alag\u00faton bel\u00fcl haladnak, de nem engedi, hogy beilleszkedjenek az olyan kapcsolatokba, amelyek tov\u00e1bbi titkos\u00edt\u00e1si r\u00e9tegeket alkalmaznak (p\u00e9ld\u00e1ul TLS, HTTPS, SSH). A VPN-ben haszn\u00e1lt titkos\u00edt\u00e1si algoritmusoknak nincs jelent\u0151s\u00e9ge, mivel a hamis csomagok a k\u00fcls\u0151 interf\u00e9szb\u0151l \u00e9rkeznek, \u00e9s a kernel VPN-interf\u00e9szk\u00e9nt kezeli \u0151ket. A t\u00e1mad\u00e1s legval\u00f3sz\u00edn\u0171bb c\u00e9lpontja a titkos\u00edtatlan HTTP kapcsolatok megzavar\u00e1sa, de nem z\u00e1rhat\u00f3 ki<\/a><\/noindex> a t\u00e1mad\u00e1s DNS-v\u00e1laszok manipul\u00e1l\u00e1s\u00e1ra is. <\/p>\n

A csomagok sikeres megb\u00edz\u00e1sa OpenVPN, WireGuard \u00e9s IKEv2\/IPSec alagutakon kereszt\u00fcl demonstr\u00e1lt\u00e1k. A Tor nem \u00e9rintett, mivel SOCKS-t haszn\u00e1l a forgalom tov\u00e1bb\u00edt\u00e1s\u00e1ra \u00e9s a loopback interf\u00e9szhez val\u00f3 k\u00f6t\u0151d\u00e9sre. IPv4 eset\u00e9n a t\u00e1mad\u00e1s lehets\u00e9ges, ha az rp_filter-t laza \u00fczemm\u00f3dba \u00e1ll\u00edtj\u00e1k (sysctl net.ipv4.conf.all.rp_filter = 2). Eredetileg a legt\u00f6bb rendszerben szigor\u00fa \u00fczemm\u00f3d volt \u00e9rv\u00e9nyben, de az systemd 240<\/a><\/noindex>, amelyet tavaly decemberben adtak ki, a gy\u00e1ri \u00fczemm\u00f3d alap\u00e9rtelmez\u00e9se laza \u00fczemm\u00f3dra v\u00e1ltozott, \u00e9s ez a v\u00e1ltoz\u00e1s sz\u00e1mos Linux disztrib\u00faci\u00f3 alap\u00e9rtelmezett be\u00e1ll\u00edt\u00e1saiba is \u00e1tsz\u0151tte.<\/p>\n

Az rp_filter mechanizmus haszn\u00e1latban van<\/a><\/noindex> tov\u00e1bbi ellen\u0151rz\u00e9sek be\u00e1ll\u00edt\u00e1s\u00e1hoz a csomagok \u00fatvonal\u00e1nak k\u00f6vet\u00e9se \u00e9rdek\u00e9ben a forr\u00e1st c\u00edm hamis\u00edt\u00e1s\u00e1nak megakad\u00e1lyoz\u00e1s\u00e1hoz. Ha null\u00e1ra \u00e1ll\u00edtj\u00e1k, a forr\u00e1c\u00edm ellen\u0151rz\u00e9se nem t\u00f6rt\u00e9nik meg, \u00e9s b\u00e1rmely csomag korl\u00e1tlanul tov\u00e1bb\u00edthat\u00f3 a h\u00e1l\u00f3zati interf\u00e9szek k\u00f6z\u00f6tt. Az 1-es \u00fczemm\u00f3d (szigor\u00fa) minden bej\u00f6v\u0151 csomagot ellen\u0151riz a routingt\u00e1bl\u00e1val val\u00f3 megfelel\u00e9s szempontj\u00e1b\u00f3l, \u00e9s ha a csomaggal \u00e9rkez\u0151 interf\u00e9sz nem kapcsol\u00f3dik a legjobb \u00fatvonalhoz, akkor a csomag elutas\u00edt\u00e1sra ker\u00fcl. A 2-es \u00fczemm\u00f3d (laza) enyh\u00edti az ellen\u0151rz\u00e9st, hogy lehet\u0151v\u00e9 tegye a terhel\u00e9seloszt\u00f3k vagy aszimmetrikus \u00fatv\u00e1laszt\u00e1s m\u0171k\u00f6d\u00e9s\u00e9t, amelyn\u00e9l
\na v\u00e1lasz \u00fatvonala nem a h\u00e1l\u00f3zati interf\u00e9szen kereszt\u00fcl haladhat, amelyen a bej\u00f6v\u0151 csomag \u00e9rkezett.<\/p>\n

A laza \u00fczemm\u00f3dban a bej\u00f6v\u0151 csomag megfelel\u00e9s\u00e9t ellen\u0151rzik a routingt\u00e1bl\u00e1val, de el\u00e9rhet\u0151nek tekintik, ha a forr\u00e1c\u00edm b\u00e1rmelyik rendelkez\u00e9sre \u00e1ll\u00f3 h\u00e1l\u00f3zati interf\u00e9szen kereszt\u00fcl el\u00e9rhet\u0151. Az aj\u00e1nlott t\u00e1mad\u00e1s azon alapul, hogy a t\u00e1mad\u00f3 olyan csomagot k\u00fcldhet el, amelyben a forr\u00e1c\u00edmet a VPN interf\u00e9szhez igaz\u00edtj\u00e1k, \u00e9s b\u00e1r ez a csomag a rendszerbe egy k\u00fcls\u0151 h\u00e1l\u00f3zati interf\u00e9szen kereszt\u00fcl \u00e9rkezik, nem a VPN-en kereszt\u00fcl, a laza rp_filter \u00fczemm\u00f3dban az ilyen csomagot nem utas\u00edtj\u00e1k el. <\/p>\n

To carry out the attack, the attacker must control the gateway through which the user accesses the network (for example, through a MITM organization, when the victim connects to a wireless access point controlled by the attacker or through compromised routers<\/a><\/noindex>). By controlling the gateway to which the user is connected, the attacker can send fake packets that will be perceived in the context of the VPN network interface, but responses will be sent through the tunnel.<\/p>\n

By generating a stream of fake packets with the VPN interface IP address substituted in, attempts are made to influence the connection established by the client, but the impact of these packets can only be observed through passive analysis of the encrypted traffic stream associated with the operation of the tunnel. To carry out the attack, it is necessary to know the IP address assigned by the VPN server to the tunnel's network interface, as well as to determine that a connection to a specific host is currently active through the tunnel. <\/p>\n

To determine the IP of the virtual VPN network interface, SYN-ACK packets are sent to the victim's system, sequentially testing the entire range of virtual addresses (first testing addresses commonly used in VPN by default, such as the subnet 10.8.0.0\/24 in OpenVPN). The existence of an address can be inferred from receiving a response with the RST flag.<\/p>\n

Hasonl\u00f3 m\u00f3don hat\u00e1rozhat\u00f3 meg a kapcsolat megl\u00e9te egy adott weboldallal \u00e9s a port sz\u00e1ma az \u00fcgyf\u00e9l oldal\u00e1n - a felhaszn\u00e1l\u00f3 fel\u00e9 ir\u00e1nyul\u00f3 SYN-csomagot k\u00fcldve, amelynek forr\u00e1sc\u00edmek\u00e9nt a weboldal IP-c\u00edme szerepel, a c\u00e9lc\u00edm pedig a virtu\u00e1lis VPN IP. A szerver portja el\u0151re megj\u00f3solhat\u00f3 (80 a HTTP-hez), m\u00edg a kliens oldal\u00e1nak portsz\u00e1m\u00e1t kisz\u00e1m\u00edthatjuk prob\u00e1l\u00e1ssal, elemezve a k\u00fcl\u00f6nb\u00f6z\u0151 sz\u00e1mokhoz tartoz\u00f3 ACK-v\u00e1laszok intenzit\u00e1s\u00e1nak v\u00e1ltoz\u00e1s\u00e1t, egy\u00fctt a RST z\u00e1szl\u00f3val rendelkez\u0151 csomag hi\u00e1ny\u00e1val.<\/p>\n

Ezen a ponton a t\u00e1mad\u00f3 m\u00e1r ismeri a kapcsolat n\u00e9gy elem\u00e9t (forr\u00e1s IP\/c\u00edm\/port \u00e9s c\u00e9l IP\/c\u00edm\/port), de ahhoz, hogy l\u00e9trehozzon egy hamis csomagot, amelyet az \u00e1ldozat rendszere \u00e9rz\u00e9kel, a t\u00e1mad\u00f3nak meg kell hat\u00e1roznia a TCP kapcsolat sorozatsz\u00e1m\u00e1t \u00e9s meger\u0151s\u00edt\u00e9si sz\u00e1m\u00e1t (seq \u00e9s ack). E param\u00e9terek meghat\u00e1roz\u00e1s\u00e1hoz a t\u00e1mad\u00f3 folyamatosan hamis RST-csomagokat k\u00fcld, vari\u00e1lva a sorozatsz\u00e1mokat, am\u00edg meg nem kap egy v\u00e1lasz ACK-csomagot, amely jelzi, hogy a sz\u00e1m beleesik a TCP ablak\u00e1ba. <\/p>\n

Ezut\u00e1n a t\u00e1mad\u00f3 meger\u0151s\u00edti a pontos azonos\u00edt\u00e1st azzal, hogy csomagokat k\u00fcld ugyanazzal a sz\u00e1mmal, \u00e9s figyeli az ACK-v\u00e1laszok be\u00e9rkez\u00e9s\u00e9t, majd pontosan meghat\u00e1rozza az aktu\u00e1lis sorozatsz\u00e1mot. A feladatot megnehez\u00edti, hogy a v\u00e1laszokat titkos\u00edtott alag\u00fatban k\u00fcldik, \u00e9s ezek jelenl\u00e9t\u00e9t az elfogott forgalmi adatfolyamban csak k\u00f6zvetett m\u00f3dszerekkel lehet elemezni. A VPN-kiszolg\u00e1l\u00f3 fel\u00e9 c\u00edmzett ACK-csomag elk\u00fcld\u00e9se a kliens \u00e1ltal a titkos\u00edtott v\u00e1laszok m\u00e9rete \u00e9s k\u00e9s\u00e9se alapj\u00e1n \u00e1llap\u00edthat\u00f3 meg, amelyek korrel\u00e1lnak a hamis csomagok k\u00fcld\u00e9s\u00e9vel. P\u00e9ld\u00e1ul az OpenVPN eset\u00e9ben a 79-es m\u00e9ret\u0171 titkos\u00edtott csomag pontosan arra utal, hogy bel\u00fcl egy ACK-meger\u0151s\u00edt\u00e9s tal\u00e1lhat\u00f3.<\/p>\n

Miel\u0151tt a t\u00e1mad\u00e1s elleni v\u00e9delem hozz\u00e1 lenne adva az oper\u00e1ci\u00f3s rendszer kernelj\u00e9hez, ideiglenes megold\u00e1sk\u00e9nt blokkolni kell a probl\u00e9m\u00e1t aj\u00e1nlott<\/a><\/noindex> csomagsz\u0171r\u0151 seg\u00edts\u00e9g\u00e9vel a 'preroute' l\u00e1ncban blokkoljuk azokat a csomagokat, amelyekn\u00e9l a c\u00e9lc\u00edm virtu\u00e1lis IP-c\u00edme van megadva.<\/p>\n

iptables -t raw -I PREROUTING ! -i wg0 -d 10.182.12.8 -m addrtype ! --src-type LOCAL -j DROP<\/p>\n

vagy nftables eset\u00e9n<\/p>\n

nft add table ip raw
\n nft add chain ip raw prerouting '{ type filter hook prerouting priority 0; }'
\n nft add rule ip raw prerouting 'iifname != \"wg0\" ip daddr 10.182.12.8 fib saddr type != local drop'<\/p>\n

A IPv4 c\u00edmekkel rendelkez\u0151 alagutak haszn\u00e1latakor elegend\u0151 a rp_filter-t 'Strikt' m\u00f3dba \u00e1ll\u00edtani ('sysctl net.ipv4.conf.all.rp_filter = 1'). A VPN oldal\u00e1r\u00f3l a szekvenciasz\u00e1m meghat\u00e1roz\u00e1si m\u00f3dszert blokkolhatjuk az\u00e1ltal, hogy a titkos\u00edtott csomagokhoz kieg\u00e9sz\u00edt\u0151 kit\u00f6lt\u00e9st adunk hozz\u00e1, amely egys\u00e9gess\u00e9 teszi az \u00f6sszes csomag m\u00e9ret\u00e9t. <\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043f\u0440\u043e\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux, FreeBSD, OpenBSD, Android, macOS, iOS \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. Linux \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c rp_filter (reverse path filtering) \u0434\u043b\u044f IPv4, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u0436\u0438\u043c «Strict» \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53634","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9g, amely lehet\u0151v\u00e9 teszi a TCP-kapcsolatok megfert\u0151z\u00e9s\u00e9t VPN-alagutakon kereszt\u00fcl | ProHoster","description":"T\u00e1mad\u00e1si technik\u00e1t tettek k\u00f6zz\u00e9 (CVE-2019-14899), amely lehet\u0151v\u00e9 teszi a csomagok megv\u00e1ltoztat\u00e1s\u00e1t, helyettes\u00edt\u00e9s\u00e9t vagy becsemp\u00e9sz\u00e9s\u00e9t.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043a\u043b\u0438\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53634","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:21:20","updated":"2026-01-24 08:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/53634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=53634"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/53634\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=53634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=53634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=53634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}