{"id":38057,"date":"2019-10-31T22:21:26","date_gmt":"2019-10-31T19:21:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dnevnik-toma-hantera-sobaka-baskervilevyh\/"},"modified":"2019-10-31T22:21:26","modified_gmt":"2019-10-31T19:21:26","slug":"dnevnik-toma-hantera-sobaka-baskervilevyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dnevnik-toma-hantera-sobaka-baskervilevyh","title":{"rendered":"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A \u00eent\u00e2rzierea semn\u0103rii este un lucru obi\u0219nuit pentru orice companie mare. Oricum, nu a fost o excep\u021bie acordul dintre Tom Hunter \u0219i un magazin de animale de companie online pentru un test de penetrare amplu. Trebuia s\u0103 verifice at\u00e2t site-ul, c\u00e2t \u0219i re\u021beaua intern\u0103, iar chiar \u0219i Wi-Fi-ul de lucru.<\/p>\n<p>Nu este de mirare c\u0103 m\u00e2inile au \u00eenceput s\u0103 m\u0103 g\u00e2ndesc s\u0103 ac\u021bionez \u00eenainte ca toate formalit\u0103\u021bile s\u0103 fie finalizate. Doar s\u0103 scaneze site-ul, a\u0219a, pentru siguran\u021b\u0103, este pu\u021bin probabil ca un magazin at\u00e2t de cunoscut precum \u201eC\u00e2inele lui Baskerville\u201d s\u0103 fi l\u0103sat vreo eroare \u00een aceast\u0103 privin\u021b\u0103. Dup\u0103 c\u00e2teva zile, Tom a primit, totu\u0219i, originalul semnat al acordului \u2014 \u00een acel moment, cu a treia cea\u0219c\u0103 de cafea \u00een fa\u021b\u0103, Tom evalua cu interes starea stocurilor din CMS-ul intern...<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/1279e05d19f867047c118b33451ad628.jpg\" style=\"display:block;margin: 0 auto;\" \/><i>Sursa: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.artstation.com\/ehsantaeb\">Ehsan Taebloo<\/a><\/noindex><\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nDar nu a reu\u0219it s\u0103 fac\u0103 prea multe \u00een CMS \u2014 administratorii site-ului i-au interzis IP-ul lui Tom Hunter. De\u0219i ar fi fost timp pentru a genera bonusuri pe cardul magazinului \u0219i pentru a hr\u0103ni pisica lui preferat\u0103 timp de luni \u00eentregi cu pre\u021buri mici... \u201eNu de data asta, Darth Sidious\u201d \u2014 s-a g\u00e2ndit Tom cu un z\u00e2mbet. Ar fi fost la fel de interesant s\u0103 treac\u0103 din zona website-ului \u00een re\u021beaua local\u0103 a clientului, dar, se pare, aceste segmente nu sunt toate legate. A\u0219a se \u00eent\u00e2mpl\u0103 mai des \u00een companiile foarte mari.<\/p>\n<p>Dup\u0103 toate formalit\u0103\u021bile, Tom Hunter s-a echipat cu contul VPN furnizat \u0219i s-a \u00eendreptat spre re\u021beaua local\u0103 a clientului. Contul era \u00een domeniul Active Directory, a\u0219a c\u0103 putea s\u0103 fac\u0103 f\u0103r\u0103 prea multe eforturi un dump AD \u2014 s\u0103 extrag\u0103 toat\u0103 informa\u021bia public\u0103 despre utilizatori \u0219i computerele de lucru.<\/p>\n<p>Tom a lansat utilitarul adfind \u0219i a \u00eenceput s\u0103 trimit\u0103 cereri LDAP c\u0103tre controlerul de domeniu. Cu un filtru pe clasa object\u0421ategory, specific\u00e2nd person ca atribut. R\u0103spunsul a venit cu o structur\u0103 de acest gen:<\/p>\n<pre><code class=\"plaintext\">dn:CN=Guest,CN=Users,DC=domain,DC=local\n&gt;objectClass: top\n&gt;objectClass: person\n&gt;objectClass: organizationalPerson\n&gt;objectClass: user\n&gt;cn: Guest\n&gt;description: Cont \u00eencorporat pentru accesul oaspe\u021bilor la computer sau domeniu\n&gt;distinguishedName: CN=Guest,CN=Users,DC=domain,DC=local\n&gt;instanceType: 4\n&gt;whenCreated: 20120228104456.0Z\n&gt;whenChanged: 20120228104456.0Z<\/code><\/pre>\n<p>\nPe l\u00e2ng\u0103 aceasta, au fost multe informa\u021bii utile, dar cel mai interesant se afla \u00een c\u00e2mpul &gt;description: &gt;description. Acesta este un comentariu la cont \u2014 practic, un loc convenabil pentru a p\u0103stra noti\u021be minore. Dar administratorii clientului au considerat c\u0103 \u0219i parolele pot sta aici lini\u0219tite. Cine, \u00een fond, ar putea fi interesat de toate aceste conturi de serviciu neglijabile? Astfel, comentariile primite de Tom au fost:<\/p>\n<pre><code class=\"plaintext\">Creat de Administrator, 2018.11.16 7po!*Vqn<\/code><\/pre>\n<p>\nNu trebuie s\u0103 fii un geniu ca s\u0103 \u00een\u021belegi la ce va folosi combina\u021bia de la final. A r\u0103mas de parcurs un fi\u0219ier mare de r\u0103spuns de la KD pe c\u00e2mpul &gt;description: \u0219i iat\u0103-le \u2014 20 de perechi username-parol\u0103. Aproape jum\u0103tate au drepturi de acces prin RDP. O bun\u0103 pozi\u021bie de plecare, timpul s\u0103 \u00eemp\u0103r\u021bim for\u021bele atacatoare.<\/p>\n<h2>Mediul de re\u021bea<\/h2>\n<p>\nPartaj\u0103rile disponibile \u00een \u201eC\u00e2inii Baskerville\u201d sem\u0103nau cu un ora\u0219 mare \u00een tot haosul \u0219i imprevizibilitatea sa. Cu profilele user \u0219i RDP, Tom Hunter era \u00een acest ora\u0219 un b\u0103iat s\u0103r\u0103c\u0103cios, dar chiar \u0219i el a apucat s\u0103 observe multe prin vitrinele str\u0103lucitoare ale politicii de securitate.<\/p>\n<p>Par\u021bi de servere de fi\u0219iere, conturi contabile \u0219i chiar \u0219i scripturile asociate \u2014 toate acestea erau expuse publicului. \u00cen set\u0103rile unuia dintre aceste scripturi, Tom a g\u0103sit un hash MS SQL al unui utilizator. Pu\u021bin\u0103 magie cu bruteforce \u2014 \u0219i hash-ul utilizatorului s-a transformat \u00eentr-o parol\u0103 \u00een clar. Mul\u021bumesc John The Ripper \u0219i Hashcat.<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/7c973b607959091472a17a24f991be3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAcestui cheie trebuia s\u0103-i corespund\u0103 vreun cuf\u0103r. Cuf\u0103rul a fost g\u0103sit, \u0219i mai mult \u2014 cu el au fost asociate \u00eenc\u0103 zece \u201ecufere\u201d. \u0218i \u00een \u0219ase dintre ele se aflau\u2026 drepturi de superuser, nt authority sistem! \u00cen dou\u0103 a reu\u0219it s\u0103 execute procedura stocat\u0103 xp_cmdshell \u0219i s\u0103 trimit\u0103 comenzi cmd \u00een Windows. Ce altceva s\u0103 mai dore\u0219ti?<\/p>\n<h2>Controlere de domeniu<\/h2>\n<p>\nAl doilea atac pe care Tom Hunter l-a planificat pentru controlerele de domeniu. \u00cen re\u021beaua \u201eC\u00e2inilor Baskerville\u201d erau trei \u2014 conform num\u0103rului de servere aflate la distan\u021b\u0103 teritorial. Fiecare controler de domeniu are un folder public, ca o vitrin\u0103 deschis\u0103 \u00eentr-un magazin, l\u00e2ng\u0103 care plute\u0219te acela\u0219i b\u0103iat s\u0103r\u0103c\u0103cios, Tom.<\/p>\n<p>\u0218i de data aceasta, b\u0103iatului i-a sur\u00e2s din nou norocul \u2014 din vitrin\u0103 nu au scos scriptul \u00een care era hardcodat\u0103 parola administratorului serverului local. A\u0219adar, drumul c\u0103tre controlerul de domeniu era deschis. Intr\u0103, Tom!<\/p>\n<p>Aici a fost scos din jobenul magic <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tomhunter\/blog\/454758\/\">mimikatz<\/a><\/noindex>, care s-a hr\u0103nit cu c\u00e2\u021biva administratori de domenii. Tom Hunter a ob\u021binut acces la toate ma\u0219inile din re\u021beaua local\u0103, iar r\u00e2sul diavolesc a speriat pisica de pe fotoliul vecin. Acest traseu a fost mai scurt dec\u00e2t se a\u0219tepta.<\/p>\n<h2>EternalBlue<\/h2>\n<p>\nAmintirea WannaCry \u0219i Petya este \u00eenc\u0103 vie \u00een min\u021bile pentesterilor, dar unii administratori par s\u0103 fi uitat de ransomware \u00een mijlocul altor \u0219tiri de sear\u0103. Tom a descoperit trei noduri vulnerabile ale protocoalelor SMB - CVE-2017-0144 sau EternalBlue. Aceasta este vulnerabilitatea prin care s-au r\u0103sp\u00e2ndit ransomware-urile WannaCry \u0219i Petya, o vulnerabilitate care permite executarea de cod arbitrar pe nod. Pe unul dintre nodurile vulnerabile exista o sesiune de administrator de domeniu - \u201eexploateaz\u0103 \u0219i ob\u021bine\u201d. Ce s\u0103-i faci, timpul nu a \u00eenv\u0103\u021bat pe toat\u0103 lumea.<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/c2e1102eab9d34f9e21ca8391a3c4b7f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>\u00abC\u00e2inele Baskerville\u00bb<\/h2>\n<p>\nClasicii securit\u0103\u021bii informa\u021biei ador\u0103 s\u0103 repete c\u0103 cea mai slab\u0103 leg\u0103tur\u0103 din orice sistem este omul. A\u021bi observat c\u0103 titlul de mai sus nu corespunde numelui magazinului? Poate c\u0103 nu to\u021bi sunt at\u00e2t de aten\u021bi.<\/p>\n<p>\u00cen cele mai bune tradi\u021bii ale blockbusterelor de phishing, Tom Hunter a \u00eenregistrat un domeniu care se deosebe\u0219te de domeniul \u201eC\u00e2inilor Baskerville\u201d printr-o singur\u0103 liter\u0103. Adresa de e-mail de pe acest domeniu imita adresa serviciului de securitate al magazinului. Pe parcursul a 4 zile, \u00eentre orele 16:00 \u0219i 17:00, au fost trimise uniform 360 de scrisori de la o adres\u0103 fals\u0103:<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/479551f0f038d72bf1274bea1be3c1d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nProbabil, de la scurgerea masiv\u0103 de parole ale angaja\u021bilor a salvat doar lenea proprie. Din cele 360 de scrisori, doar 61 au fost deschise - serviciul de securitate nu se bucur\u0103 de o mare popularitate. \u00cen schimb, mai departe a fost mai u\u0219or.<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/e91f5d2a5a94dcd59f7539e5966f71fe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Pagin\u0103 de phishing<\/i><\/p>\n<p>46 de persoane au dat clic pe link, iar aproape jum\u0103tate - 21 de angaja\u021bi - nu s-au uitat \u00een bara de adrese \u0219i au introdus lini\u0219ti\u021bi numele de utilizator \u0219i parolele lor. O captur\u0103 bun\u0103, Tom.<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/ecd1ad9f42de4059d711b791e92e53d1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>Re\u021bea Wi-Fi<\/h2>\n<p>\nAcum, pe ajutorul pisicii nu se putea conta. Tom Hunter a aruncat c\u00e2teva aparate \u00een sedanul s\u0103u mai vechi \u0219i s-a \u00eendreptat c\u0103tre biroul \u201eC\u00e2inilor Baskerville\u201d. Vizita sa nu era programat\u0103: Tom inten\u021biona s\u0103 testeze Wi-Fi-ul clientului. Pe parcursul parc\u0103rii centrului de afaceri s-au g\u0103sit c\u00e2teva locuri libere, care se \u00eencadrau perfect \u00een perimetrul re\u021belei \u021bint\u0103. Despre restric\u021bia sa, aparent, nu s-au g\u00e2ndit prea mult - de parc\u0103 administratorii ar fi fost \u00een mod aleatoriu ad\u0103ug\u00e2nd puncte suplimentare ca r\u0103spuns la orice pl\u00e2ngere legat\u0103 de Wi-Fi slab.<\/p>\n<p>Cum func\u021bioneaz\u0103 protec\u021bia WPA\/WPA2 PSK? Criptarea \u00eentre punctul de acces \u0219i clien\u021bi este asigurat\u0103 de cheia de sesiune unic\u0103 - Pairwise Transient Key (PTK). PTK folose\u0219te Pre-Shared Key \u0219i al\u021bi cinci parametri - SSID, Authenticator Nounce (ANounce), Supplicant Nounce (SNounce), adresele MAC ale punctului de acces \u0219i ale clientului. Tom a interceptat to\u021bi cei cinci parametri, iar acum \u00eei lipsea doar Pre-Shared Key.<\/p>\n<p><img decoding=\"async\" alt=\"Jurnalul lui Tom Hunter: \u201eC\u00e2inele Baskervililor\u201d\" src=\"\/wp-content\/uploads\/2019\/09\/82e7d555fe060286f23ef95883abde70.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nUtilitarul Hashcat a recuperat acest link lips\u0103 \u00een aproximativ 50 de minute - iar eroul nostru s-a aflat \u00een re\u021beaua de oaspe\u021bi. De acolo putea deja s\u0103 observe re\u021beaua de lucru - ciudat, Tom a reu\u0219it s\u0103 sparg\u0103 parola \u00een aproximativ nou\u0103 minute. \u0218i toate acestea f\u0103r\u0103 a p\u0103r\u0103si parcarea, f\u0103r\u0103 VPN-uri. Re\u021beaua de lucru \u00eei deschidea eroului nostru oportunit\u0103\u021bi pentru activit\u0103\u021bi monstruoase, dar el\u2026 nu a ad\u0103ugat bonusuri pe cardul magazinului.<\/p>\n<p><i>Tom a f\u0103cut o pauz\u0103, s-a uitat la ceas, a aruncat c\u00e2teva bancnote pe mas\u0103 \u0219i, r\u0103mas r\u0103mas, a ie\u0219it din cafenea. Poate un nou pentest, sau poate c\u0103 a... <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tomhunter\">canalul de telegram<\/a><\/noindex> g\u00e2ndit s\u0103 scrie...<br \/>\n<\/i><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tomhunter\/blog\/467199\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430\u0442\u044f\u043d\u0443\u0442\u044c \u0441 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0434\u0435\u043b\u043e \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u0433\u043e\u0432\u043e\u0440 \u043c\u0435\u0436\u0434\u0443 \u0422\u043e\u043c\u043e\u043c \u0425\u0430\u043d\u0442\u0435\u0440\u043e\u043c \u0438 \u043e\u0434\u043d\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043e\u043e\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433. \u041f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438 \u0441\u0430\u0439\u0442, \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c, \u0438 \u0434\u0430\u0436\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 Wi-Fi. \u041d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0440\u0443\u043a\u0438 \u0437\u0430\u0447\u0435\u0441\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0435 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0431\u044b\u043b\u0438 \u0443\u043b\u0430\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041d\u0443 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442 \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u0432\u0440\u044f\u0434 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38057","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430\u0442\u044f\u043d\u0443\u0442\u044c \u0441 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0434\u0435\u043b\u043e \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u0433\u043e\u0432\u043e\u0440 \u043c\u0435\u0436\u0434\u0443 \u0422\u043e\u043c\u043e\u043c \u0425\u0430\u043d\u0442\u0435\u0440\u043e\u043c \u0438 \u043e\u0434\u043d\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043e\u043e\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/dnevnik-toma-hantera-sobaka-baskervilevyh\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0422\u043e\u043c\u0430 \u0425\u0430\u043d\u0442\u0435\u0440\u0430: \u00ab\u0421\u043e\u0431\u0430\u043a\u0430 \u0411\u0430\u0441\u043a\u0435\u0440\u0432\u0438\u043b\u0435\u0432\u044b\u0445\u00bb | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430\u0442\u044f\u043d\u0443\u0442\u044c \u0441 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0434\u0435\u043b\u043e \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u0433\u043e\u0432\u043e\u0440 \u043c\u0435\u0436\u0434\u0443 \u0422\u043e\u043c\u043e\u043c \u0425\u0430\u043d\u0442\u0435\u0440\u043e\u043c \u0438 \u043e\u0434\u043d\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043e\u043e\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/dnevnik-toma-hantera-sobaka-baskervilevyh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:26+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:26+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jurnalul lui Tom Hunter: \u201eC\u00e2inele din Baskerville\u201d | ProHoster","description":"Am\u00e2narea semn\u0103rii este o practic\u0103 obi\u0219nuit\u0103 pentru orice companie mare. Excep\u021bia nu a fost contractul dintre Tom Hunter \u0219i un magazin de animale de companie online pentru un test de pentesting temeinic.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dnevnik-toma-hantera-sobaka-baskervilevyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0422\u043e\u043c\u0430 \u0425\u0430\u043d\u0442\u0435\u0440\u0430: \u00ab\u0421\u043e\u0431\u0430\u043a\u0430 \u0411\u0430\u0441\u043a\u0435\u0440\u0432\u0438\u043b\u0435\u0432\u044b\u0445\u00bb | ProHoster","og:description":"\u0417\u0430\u0442\u044f\u043d\u0443\u0442\u044c \u0441 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0434\u0435\u043b\u043e \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043d\u0435 \u0441\u0442\u0430\u043b \u0434\u043e\u0433\u043e\u0432\u043e\u0440 \u043c\u0435\u0436\u0434\u0443 \u0422\u043e\u043c\u043e\u043c \u0425\u0430\u043d\u0442\u0435\u0440\u043e\u043c \u0438 \u043e\u0434\u043d\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043e\u043e\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dnevnik-toma-hantera-sobaka-baskervilevyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:26+00:00","article:modified_time":"2019-10-31T19:21:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38057","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:17:37","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:16:22","updated":"2026-01-23 20:17:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38057","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38057"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38057\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}