{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Ievads<\/h1>\n<p><\/p>\n<p>Uz\u0146\u0113mumiem, kuriem nebija organiz\u0113tas att\u0101lin\u0101t\u0101s piek\u013cuves sist\u0113mas, pirms da\u017eiem m\u0113ne\u0161iem t\u0101s steig\u0101 izv\u0113rsa. Ne visi administratori bija gatavi \u0161\u0101dai \"karstajai\" situ\u0101cijai; k\u0101 rezult\u0101t\u0101 rad\u0101s dro\u0161\u012bbas nepiln\u012bbas: nepareiza pakalpojumu konfigur\u0101cija vai pat novecoju\u0161u programmat\u016bras versiju uzst\u0101d\u012b\u0161ana ar iepriek\u0161 atkl\u0101t\u0101m ievainojam\u012bb\u0101m. Da\u017ei no \u0161iem tr\u016bkumiem jau ir atgriezu\u0161ies k\u0101 bumerangs, citiem ir veicies vair\u0101k, ta\u010du secin\u0101jumus noteikti vajadz\u0113tu izdar\u012bt visiem. Lojalit\u0101te pret att\u0101lin\u0101to darbu ir iev\u0113rojami palielin\u0101jusies, un arvien vair\u0101k uz\u0146\u0113mumu pie\u0146em att\u0101lin\u0101to darbu k\u0101 past\u0101v\u012bgu izpildes formu.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>T\u0101tad, iesp\u0113ju nodro\u0161in\u0101t att\u0101lin\u0101tu piek\u013cuvi ir daudz: da\u017e\u0101di VPN, RDS un VNC, TeamViewer un citi. Administratori izv\u0113las atbilsto\u0161i korporat\u012bv\u0101s t\u012bkla strukt\u016bras un taj\u0101 eso\u0161o ier\u012b\u010du specifikai. Vispopul\u0101r\u0101kie paliek VPN risin\u0101jumi, tom\u0113r daudzi mazi uz\u0146\u0113mumi izv\u0113las RDS (Att\u0101lin\u0101t\u0101s darbvirsmas pakalpojumus), jo tie ir vienk\u0101r\u0161\u0101ki un \u0101tr\u0101ki izv\u0113r\u0161an\u0101.<\/p>\n<p><\/p>\n<p>\u0160aj\u0101 rakst\u0101 m\u0113s detaliz\u0113t\u0101k run\u0101sim par RDS dro\u0161\u012bbu. Veiksim \u012bsu p\u0101rskatu par zin\u0101maj\u0101m ievainojam\u012bb\u0101m, k\u0101 ar\u012b apl\u016bkosim vair\u0101kus uzbrukuma scen\u0101rijus uz t\u012bkla infrastrukt\u016bru, kas balst\u012bta uz Active Directory. Ceram, ka k\u0101dam m\u016bsu raksts pal\u012bdz\u0113s veikt p\u0101rdomas un uzlabot dro\u0161\u012bbu.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Neseni RDS\/RDP ievainojam\u012bbu gad\u012bjumi<\/h1>\n<p><\/p>\n<p>Jebkura programmat\u016bra satur k\u013c\u016bdas un ievainojam\u012bbas, kuras izmanto \u013caunpr\u0101t\u012bgas personas, un RDS nav iz\u0146\u0113mums. P\u0113d\u0113j\u0101 laik\u0101 Microsoft bie\u017ei zi\u0146o par jaun\u0101m ievainojam\u012bb\u0101m, m\u0113s nol\u0113m\u0101m veikt to \u012bsu p\u0101rskatu:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>\u0160\u012b ievainojam\u012bba apdraud lietot\u0101jus, kuri savienojas ar kompromit\u0113tu serveri. Uzbruc\u0113js var ieg\u016bt kontroli p\u0101r lietot\u0101ja ier\u012bci vai nostiprin\u0101ties sist\u0113m\u0101, lai ieg\u016btu past\u0101v\u012bgu att\u0101lin\u0101tu piek\u013cuvi.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>\u0160\u012b ievainojumu grupa \u013cauj neautoriz\u0113tam uzbruc\u0113jam att\u0101lin\u0101ti izpild\u012bt patva\u013c\u012bgu kodu server\u012b ar RDS, izmantojot speci\u0101li sagatavotu piepras\u012bjumu. Tos var izmantot ar\u012b, lai izveidotu k\u0101purus \u2014 \u013caunpr\u0101t\u012bgu programmat\u016bru, kas infic\u0113 blakus eso\u0161\u0101s ier\u012bces t\u012bkl\u0101. T\u0101d\u0113j\u0101di \u0161\u012bs ievainojam\u012bbas var apdraud\u0113t visu uz\u0146\u0113muma t\u012bklu, un gl\u0101bs tikai savlaic\u012bga atjaunin\u0101\u0161ana.<\/p>\n<p><\/p>\n<p>T\u0101 k\u0101 att\u0101lin\u0101t\u0101 piek\u013cuve ir k\u013cuvusi par aktu\u0101lu t\u0113mu gan p\u0113tniekiem, gan \u013caunpr\u0101t\u012bgiem lietot\u0101jiem, dr\u012bz vien, iesp\u0113jams, m\u0113s dzird\u0113sim par jaun\u0101m l\u012bdz\u012bg\u0101m ievainojam\u012bb\u0101m.<\/p>\n<p><\/p>\n<p>Laba zi\u0146a ir t\u0101, ka ne vis\u0101m ievainojam\u012bb\u0101m ir pieejami publiskie eksploit\u0113\u0161anas r\u012bki. Slikt\u0101 zi\u0146a \u2013 \u013caunpr\u0101t\u012bgam lietot\u0101jam ar nepiecie\u0161amaj\u0101m prasm\u0113m neb\u016bs gr\u016bti uzrakst\u012bt eksploit\u0101cijas r\u012bku, balstoties uz aprakstu, vai izmantojot metodes, piem\u0113ram, Patch Diffing (par to rakst\u012bju\u0161i m\u016bsu kol\u0113\u0123i <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">rakst\u0101<\/a><\/noindex>). T\u0101p\u0113c m\u0113s iesak\u0101m regul\u0101ri atjaunin\u0101t programmat\u016bru un sekot jaunumiem par atrastaj\u0101m ievainojam\u012bb\u0101m.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Uzbrukumi<\/h1>\n<p><\/p>\n<p>P\u0101r\u0113j\u0101 raksta otraj\u0101 da\u013c\u0101 m\u0113s par\u0101d\u012bsim, k\u0101 s\u0101kas uzbrukumi t\u012bkla infrastrukt\u016brai, kas balst\u012bta uz Active Directory. <\/p>\n<p><\/p>\n<p>Aprakst\u012bt\u0101s metodes ir piem\u0113rojamas sekojo\u0161\u0101 p\u0101rk\u0101p\u0113ja modelim: \u013caunpr\u0101t\u012bgs lietot\u0101js, kuram ir lietot\u0101ja konts un piek\u013cuve Remote Desktop Gateway \u2013 termin\u0101lserverim (bie\u017ei tas ir pieejams, piem\u0113ram, no \u0101r\u0113j\u0101s t\u012bkla). Izmantojot \u0161\u012bs metodes, \u013caunpr\u0101t\u012bgais lietot\u0101js var\u0113s turpin\u0101t uzbrukumu infrastrukt\u016brai un nostiprin\u0101t savu kl\u0101tb\u016btni t\u012bkl\u0101.<\/p>\n<p><\/p>\n<p>T\u012bkla konfigur\u0101cija katr\u0101 konkr\u0113taj\u0101 gad\u012bjum\u0101 var at\u0161\u0137irties, ta\u010du aprakst\u012bt\u0101s metodes ir diezgan univers\u0101las.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Gad\u012bjumi, kad izn\u0101k no ierobe\u017eotas vides un palielina privil\u0113\u0123ijas<\/h2>\n<p><\/p>\n<p>Piek\u013c\u016bstot Remote Desktop Gateway, \u013caunpr\u0101t\u012bgais lietot\u0101js, visticam\u0101k, sastapsies ar ierobe\u017eotu vidi. Piesl\u0113dzoties termin\u0101lserverim, taj\u0101 tiek palaista lietojumprogramma: logs Remote Desktop piesl\u0113g\u0161anai iek\u0161\u0113jiem resursiem, failu p\u0101rl\u016bks, biroja komplekti vai jebkura cita programmat\u016bra. <\/p>\n<p><\/p>\n<p>Uzbruc\u0113ja m\u0113r\u0137is b\u016bs ieg\u016bt piek\u013cuvi komandu izpildei, t.i., cmd vai powershell palai\u0161anai. Tam var pal\u012bdz\u0113t da\u017eas klasiskas \u201csmil\u0161u kastes\u201d p\u0101rsnieg\u0161anas tehnikas Windows. Apspried\u012bsim t\u0101s t\u0101l\u0101k.<\/p>\n<p><\/p>\n<p><strong>Varianta 1<\/strong>. \u013baunpr\u0101t\u012bgais lietot\u0101js ir piek\u013cuvis Remote Desktop piesl\u0113g\u0161an\u0101s logam Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Atveras \u201cShow Options\u201d izv\u0113lne. Par\u0101d\u0101s iesp\u0113jas konfigur\u0101cijas failu manipul\u0113\u0161anai:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>No \u0161\u012b loga var bez \u0161\u0137\u0113r\u0161\u013ciem piek\u013c\u016bt File Explorer, nospie\u017eot jebkuru no \u201cOpen\u201d vai \u201cSave\u201d pog\u0101m:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Atveras P\u0101rl\u016bks. T\u0101 \"adreses josla\" \u013cauj palaist at\u013cautus izpild\u0101mus failus, k\u0101 ar\u012b par\u0101d\u012bt failu sist\u0113mu. Tas var noder\u0113t uzbruc\u0113jam gad\u012bjum\u0101, ja sist\u0113mas diski ir sl\u0113pti un piek\u013cuve tiem tie\u0161i nav iesp\u0113jama:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>L\u012bdz\u012bgu scen\u0101riju var reproduc\u0113t, piem\u0113ram, izmantojot Excel no Microsoft Office pakotnes k\u0101 att\u0101lin\u0101tu programmu. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Turkl\u0101t nevajadz\u0113tu aizmirst par makrosiem, kas tiek izmantoti \u0161aj\u0101 biroja paket\u0113. M\u016bsu kol\u0113\u0123i apsprieda makro dro\u0161\u012bbas probl\u0113mas \u0161aj\u0101 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">rakst\u0101<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Varianta 2<\/strong>. Izmantojot tos pa\u0161us ievaddatus k\u0101 iepriek\u0161\u0113j\u0101 variant\u0101, uzbruc\u0113js izveido vair\u0101kas savienojumu ar att\u0101lin\u0101to darbvirsmu ar vienu un to pa\u0161u kontu. Piesl\u0113dzoties atk\u0101rtoti, pirmais savienojums tiks sl\u0113gts, un ekr\u0101n\u0101 par\u0101d\u012bsies k\u013c\u016bdas zi\u0146ojums. Pal\u012bdz\u012bbas poga \u0161aj\u0101 log\u0101 izsauks Internet Explorer server\u012b, p\u0113c tam uzbruc\u0113js var p\u0101riet uz P\u0101rl\u016bku.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Varianta 3<\/strong>. Ja ir iestat\u012bti ierobe\u017eojumi izpild\u0101mo failu palai\u0161anai, uzbruc\u0113js var saskarties ar situ\u0101ciju, kad grupas politikas aizliedz administratoram palaist cmd.exe.<\/p>\n<p><\/p>\n<p>Ir veids, k\u0101 to apiet, palai\u017eot bat failu att\u0101lin\u0101taj\u0101 darbvirsm\u0101 ar t\u0101du saturu k\u0101 cmd.exe \/K . K\u013c\u016bda cmd palai\u0161an\u0101 un veiksm\u012bgs bat faila izpildes piem\u0113rs ir par\u0101d\u012bts zem\u0101k.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"T\u0101lvad\u012bbas darbstacija uzbruc\u0113ja ac\u012bm\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Variants 4<\/strong>. Aizliegums palaist lietotnes, izmantojot melnu sarakstu p\u0113c izpild\u0101mo failu nosaukumiem, nav panaceja, to var apiet. <\/p>\n<p><\/p>\n<p>Apskat\u012bsim n\u0101kamo scen\u0101riju: m\u0113s esam aizliegu\u0161i piek\u013cuvi komandrindai, aizliegu\u0161i Internet Explorer un PowerShell palai\u0161anu, izmantojot grupas politikas. Uzbruc\u0113js m\u0113\u0123ina izsaukt pal\u012bdz\u012bbu \u2014 nek\u0101das atbildes. M\u0113\u0123ina palaist PowerShell caur konteksta izv\u0113lni, kas izsaukta, nospie\u017eot Shift tausti\u0146u \u2014 zi\u0146ojums par aizliegumu palaist administratoram. M\u0113\u0123ina palaist PowerShell caur adreses joslu \u2014 atkal nek\u0101das atbildes. K\u0101 to apiet? <\/p>\n<p><\/p>\n<p>Snieg\u0161ana vajadz\u012bga tikai kop\u0113t powershell.exe no mapes C:WindowsSystem32WindowsPowerShellv1.0 uz lietot\u0101ja mapi, main\u012bt nosaukumu uz citu, nevis powershell.exe, un palai\u0161anas iesp\u0113ja par\u0101d\u012bsies.<\/p>\n<p><\/p>\n<p>Noklus\u0113juma piek\u013cuve att\u0101lin\u0101taj\u0101 darbvirsm\u0101 nodro\u0161ina piek\u013cuvi klienta lok\u0101lajiem diskiem, no kuriem uzbruc\u0113js var kop\u0113t powershell.exe un p\u0113c tam p\u0101rd\u0113v\u0113t to, lai palaistu.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Demo video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Esam pa\u0146\u0113mu\u0161i v\u0113r\u0101 tikai da\u017eus veidus, k\u0101 apiet ierobe\u017eojumus; iesp\u0113jams izdom\u0101t v\u0113l daudzus scen\u0101rijus, ta\u010du visus tos vieno izeja Windows p\u0101rl\u016bk\u0101. Ir daudz lietojumprogrammu, kas izmanto Windows standarta r\u012bkus failu apstr\u0101dei, un ierobe\u017eot\u0101 vid\u0113 var izmantot l\u012bdz\u012bgas tehnikas.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Ieteikumi un secin\u0101jumi<\/h1>\n<p><\/p>\n<p>K\u0101 redzam, pat ierobe\u017eot\u0101 vid\u0113 ir att\u012bst\u012bbas iesp\u0113jas uzbrukumam. Tom\u0113r var apgr\u016btin\u0101t uzbruc\u0113ja dz\u012bvi. \u0160eit ir visp\u0101r\u012bgi ieteikumi, kas noder\u0113s gan apskat\u012btajos variantos, gan citos gad\u012bjumos.<\/p>\n<p><\/p>\n<ul>\n<li>Ierobe\u017eojiet programmu palai\u0161anu ar melnajiem \/ baltajiem sarakstiem, izmantojot grupas politiku.<br \/>\nTom\u0113r vairum\u0101 gad\u012bjumu joproj\u0101m ir iesp\u0113ja palaist kodu. Iesak\u0101m iepaz\u012bties ar projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, lai g\u016btu priek\u0161statu par neofici\u0101lajiem failu manipul\u0101cijas un koda izpildes veidiem sist\u0113m\u0101.<br \/>\nIesak\u0101m apvienot abus ierobe\u017eojumu veidus: piem\u0113ram, varat at\u013caut izpild\u0101mo failu palai\u0161anu, ko parakst\u012bjusi uz\u0146\u0113mums Microsoft, bet ierobe\u017eot cmd.exe palai\u0161anu.<\/li>\n<li>Izsl\u0113dziet Internet Explorer iestat\u012bjumu cilnes (to var izdar\u012bt lok\u0101li re\u0123istr\u0101). <\/li>\n<li>Izsl\u0113dziet ieb\u016bv\u0113t\u0101s Windows pal\u012bdz\u012bbas izsaukumu caur regedit.<\/li>\n<li>Izsl\u0113dziet lok\u0101lo disku mont\u0113\u0161anas iesp\u0113ju att\u0101lajiem savienojumiem, ja \u0161\u0101ds ierobe\u017eojums nav kritisks lietot\u0101jiem.<\/li>\n<li>Ierobe\u017eojiet piek\u013cuvi att\u0101l\u0101s ma\u0161\u012bnas lok\u0101lajiem diskiem, atst\u0101jot piek\u013cuvi tikai lietot\u0101ja map\u0113m.<\/li>\n<\/ul>\n<p><\/p>\n<p>Ceram, ka jums bija vismaz interesanti, bet maksim\u0101li \u2014 \u0161is raksts pal\u012bdz\u0113s padar\u012bt j\u016bsu uz\u0146\u0113muma att\u0101lin\u0101to darbu dro\u0161\u0101ku.<\/p>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Att\u0101l\u0101 darbvirsma uzbruc\u0113ja acu skat\u012bjum\u0101 | ProHoster","description":"1. Ievads Uz\u0146\u0113mumi, kuriem nebija organiz\u0113tas att\u0101lin\u0101t\u0101 piek\u013cuves sist\u0113mas, steidzami t\u0101s izveidoja pirms p\u0101ris m\u0113ne\u0161iem.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}