{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"Ataque AirSnitch, que permite contornar a isola\u00e7\u00e3o entre clientes em Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pesquisadores da Universidade da Calif\u00f3rnia em Riverside desenvolveram (PDF) uma nova classe de ataques a redes sem fio \u2014 AirSnitch. Esses ataques permitem contornar os mecanismos de isolamento de clientes em redes Wi-Fi, que impedem que clientes se comuniquem diretamente entre si. No pior cen\u00e1rio, os ataques permitem que um invasor redirecione o tr\u00e1fego da v\u00edtima (MITM) para analisar ou modificar requisi\u00e7\u00f5es n\u00e3o criptografadas, al\u00e9m de falsificar acessos a sites atrav\u00e9s da contamina\u00e7\u00e3o do cache DNS. <\/p>\n

Para conduzir os ataques, o invasor deve ter a capacidade de se conectar \u00e0 mesma rede sem fio que a v\u00edtima, ou a uma rede de convidados atendida pelo mesmo ponto de acesso. Por exemplo, os ataques podem ser aplicados em redes sem fio p\u00fablicas. Dos 9 modelos testados de pontos de acesso sem fio da Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM e Cisco, bem como solu\u00e7\u00f5es com firmwares DD-WRT e OpenWrt, todos os dispositivos mostraram-se vulner\u00e1veis a pelo menos um m\u00e9todo de ataque.

\"Ataque<\/center> <\/p>\n

Tr\u00eas problemas s\u00e3o destacados, permitindo a realiza\u00e7\u00e3o do ataque. O primeiro problema permite contornar o isolamento entre clientes devido a um gerenciamento inadequado das chaves usadas para proteger quadros de broadcast. O segundo problema est\u00e1 relacionado ao fato de que o isolamento geralmente \u00e9 aplicado no n\u00edvel MAC ou no n\u00edvel IP, mas n\u00e3o em ambos os n\u00edveis simultaneamente. O terceiro problema \u00e9 causado pela sincroniza\u00e7\u00e3o inst\u00e1vel dos identificadores de clientes em todo o stack de rede, permitindo interceptar o tr\u00e1fego de entrada e sa\u00edda de outros clientes. <\/p>\n

Os modernos pontos de acesso sem fio combinam as fun\u00e7\u00f5es de transmissor de r\u00e1dio e switch de rede (Layer 2 Switch), sendo que o switch, ao contr\u00e1rio das redes com fio, usa a vincula\u00e7\u00e3o l\u00f3gica ao canal sem fio em vez de conectar fisicamente o cliente \u00e0 porta. Como identificador nessa vincula\u00e7\u00e3o, utiliza-se o endere\u00e7o MAC do cliente, que \u00e9 associado ao canal em uma tabela especial de endere\u00e7os MAC. No caso de mudan\u00e7a de canal (por exemplo, ao alternar de 2.4 GHz para 5 GHz), os dados na tabela s\u00e3o atualizados.

\"Ataque<\/center> <\/p>\n

O ataque ocorre nos primeiros (f\u00edsico, canal de r\u00e1dio) e segundos (canal, endere\u00e7o MAC) n\u00edveis do modelo OSI de rede, consistindo que um invasor, conectado ao mesmo ponto de acesso mas utilizando uma faixa de frequ\u00eancia diferente da v\u00edtima (por exemplo, 2,4 GHz em vez de 5 GHz), envia uma solicita\u00e7\u00e3o de estabelecimento de conex\u00e3o (4-way handshake), especificando o endere\u00e7o MAC da v\u00edtima (semelhante ao ARP spoofing em redes Ethernet). Como os clientes s\u00e3o identificados pelo endere\u00e7o MAC, o ponto de acesso acredita que o cliente mudou para outro canal e altera a entrada na tabela de endere\u00e7os MAC. Ap\u00f3s isso, todo o tr\u00e1fego de entrada do ponto de acesso come\u00e7a a ser enviado para o dispositivo do atacante.

\"Ataque<\/center>
\"Ataque<\/center> <\/p>\n

Para organizar a intercepta\u00e7\u00e3o bidirecional, o atacante, ao receber dados destinados \u00e0 v\u00edtima, restaura o estado da tabela de endere\u00e7os MAC. Para isso, um pacote «ICMP Ping» \u00e9 enviado com um endere\u00e7o MAC aleat\u00f3rio e a criptografia do pacote usando a chave GTK (Group Temporal Key), comum a todos os clientes da rede sem fio. O ponto de acesso, ao receber esse pacote, retorna a associa\u00e7\u00e3o do endere\u00e7o MAC da v\u00edtima ao canal sem fio original. A infiltra\u00e7\u00e3o no tr\u00e1fego \u00e9 realizada atrav\u00e9s da substitui\u00e7\u00e3o c\u00edclica e restaura\u00e7\u00e3o da entrada na tabela de endere\u00e7os MAC.

\"Ataque<\/center>
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ataque AirSnitch, que permite contornar a isola\u00e7\u00e3o entre clientes no Wi-Fi | ProHoster","description":"Pesquisadores da Universidade da Calif\u00f3rnia em Riverside desenvolveram (PDF) uma nova classe de ataques em redes sem fio - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}