{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Desktop la distan\u021b\u0103 prin ochii atacatorului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Introducere<\/h1>\n<p><\/p>\n<p>Companiile care nu \u0219i-au organizat sistemele de acces de la distan\u021b\u0103, le-au implementat \u00een regim de urgen\u021b\u0103 acum c\u00e2teva luni. Nu to\u021bi administratorii au fost preg\u0103ti\u021bi pentru o astfel de \"foc\u0103\", iar \u00een consecin\u021b\u0103 - au ap\u0103rut sl\u0103biciuni \u00een securitate: configurarea gre\u0219it\u0103 a serviciilor sau chiar instalarea versiunilor \u00eenvechite ale software-ului cu vulnerabilit\u0103\u021bi cunoscute anterior. Unora dintre ace\u0219tia, aceste neaten\u021bii le-au revenit ca un bumerang, iar altora le-a mers mai bine, dar cu siguran\u021b\u0103 toat\u0103 lumea ar trebui s\u0103 trag\u0103 concluzii. Loialitatea fa\u021b\u0103 de munca la distan\u021b\u0103 a crescut exponential, iar tot mai multe companii accept\u0103 telemunca ca un format acceptabil pe termen lung.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>A\u0219adar, exist\u0103 numeroase op\u021biuni pentru asigurarea accesului de la distan\u021b\u0103: diverse VPN-uri, RDS \u0219i VNC, TeamViewer \u0219i altele. Administratorii au de unde alege, baz\u00e2ndu-se pe specificul re\u021belei corporative \u0219i al dispozitivelor din aceasta. Cele mai populare r\u0103m\u00e2n solu\u021biile VPN, totu\u0219i, multe companii mici aleg RDS (Servicii Desktop la Distan\u021b\u0103), acestea fiind mai simple \u0219i rapide \u00een implementare.<\/p>\n<p><\/p>\n<p>\u00cen acest articol vom discuta mai \u00een detaliu despre securitatea RDS. Vom face un scurt rezumat al vulnerabilit\u0103\u021bilor cunoscute, precum \u0219i vom analiza c\u00e2teva scenarii de ini\u021biere a atacurilor asupra infrastructurii de re\u021bea bazate pe Active Directory. Sper\u0103m c\u0103 articolul nostru va ajuta pe cineva s\u0103-\u0219i corecteze gre\u0219elile \u0219i s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 securitatea.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Vulnerabilit\u0103\u021bi recente RDS\/RDP<\/h1>\n<p><\/p>\n<p>Orice software con\u021bine erori \u0219i vulnerabilit\u0103\u021bi care sunt exploatate de c\u0103tre r\u0103uf\u0103c\u0103tori, iar RDS nu face excep\u021bie. Recent, Microsoft a anun\u021bat frecvent noi vulnerabilit\u0103\u021bi, a\u0219a c\u0103 am decis s\u0103 facem un scurt rezumat al acestora:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Aceast\u0103 vulnerabilitate pune \u00een pericol utilizatorii care se conecteaz\u0103 la un server compromis. Un atacator poate prelua controlul dispozitivului utilizatorului sau poate r\u0103m\u00e2ne \u00een sistem pentru a avea acces constant de la distan\u021b\u0103.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Aceast\u0103 grup\u0103 de vulnerabilit\u0103\u021bi permite unui atacator neautorizat s\u0103 execute cod arbitrar de la distan\u021b\u0103 pe un server cu RDS printr-o cerere special formulat\u0103. De asemenea, acestea pot fi utilizate pentru a crea viermi - software mali\u021bios care infecteaz\u0103 de la sine dispozitivele adiacente din re\u021bea. Astfel, aceste vulnerabilit\u0103\u021bi pot pune \u00een pericol \u00eentreaga re\u021bea a companiei, iar singura protec\u021bie este actualizarea la timp.<\/p>\n<p><\/p>\n<p>Software for remote access has gained increased attention from both researchers and attackers, so we may soon hear about new vulnerabilities of this kind.<\/p>\n<p><\/p>\n<p>The good news is that not all vulnerabilities have publicly available exploits. The bad news is that an attacker with expertise can easily write an exploit for a vulnerability based on its description or using techniques such as Patch Diffing (which our colleagues have written about in <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">pe care l-a\u021bi citit<\/a><\/noindex>). Therefore, we recommend regularly updating the software and keeping an eye on the emergence of new vulnerability reports.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Attacks<\/h1>\n<p><\/p>\n<p>We move on to the second part of the article, where we will show how attacks on network infrastructure based on Active Directory begin. <\/p>\n<p><\/p>\n<p>The described methods apply to the following attacker model: an attacker with a user account and access to the Remote Desktop Gateway\u2014a terminal server (often accessible, for example, from the external network). By applying these methods, the attacker can continue the attack on the infrastructure and solidify their presence in the network.<\/p>\n<p><\/p>\n<p>The network configuration in each specific case may vary, but the described techniques are quite universal.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Examples of escaping from a restricted environment and escalating privileges<\/h2>\n<p><\/p>\n<p>When accessing the Remote Desktop Gateway, the attacker will likely encounter some limited environment. When connecting to the terminal server, an application launches: a window for connecting via the Remote Desktop protocol to internal resources, a file explorer, office suites, or any other software. <\/p>\n<p><\/p>\n<p>The attacker's goal will be to gain access to command execution, that is, to launch cmd or PowerShell. Several classic sandbox escape techniques for Windows can help with this. Let's examine them further.<\/p>\n<p><\/p>\n<p><strong>Op\u021biunea 1<\/strong>. The attacker has access to the Remote Desktop connection window within the Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktop la distan\u021b\u0103 prin ochii atacatorului\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>The 'Show Options' menu is revealed. Options for manipulating the connection configuration files appear:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktop la distan\u021b\u0103 prin ochii atacatorului\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>From this window, it is possible to easily access the Explorer by clicking any of the 'Open' or 'Save' buttons:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktop la distan\u021b\u0103 prin ochii atacatorului\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Se deschide Explorer. \u201eBara de adrese\u201d a acestuia permite lansarea fi\u0219ierelor executabile autorizate, precum \u0219i listarea sistemului de fi\u0219iere. Acest lucru poate fi util unui atacator \u00een cazul \u00een care discurile sistemului sunt ascunse \u0219i accesibilitatea lor direct\u0103 nu este posibil\u0103:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktop la distan\u021b\u0103 prin ochii atacatorului\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Videoclip demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Un scenariu similar poate fi reprodus, de exemplu, folosind Excel din pachetul Microsoft Office ca software de acces de la distan\u021b\u0103. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Videoclip demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>\u00cen plus, nu trebuie uitate macrocomenzile utilizate \u00een acest pachet de birou. Colegii no\u0219tri au analizat problema de securitate a macrocomenzilor \u00een aceast\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">pe care l-a\u021bi citit<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Op\u021biunea 2<\/strong>. Folosind acelea\u0219i informa\u021bii ca \u00een varianta anterioar\u0103, atacatorul stabile\u0219te mai multe conexiuni la biroul de lucru de la distan\u021b\u0103 sub acela\u0219i cont. La reconectare, prima va fi \u00eenchis\u0103, iar pe ecran va ap\u0103rea o fereastr\u0103 cu un mesaj de eroare. Butonul de ajutor din aceast\u0103 fereastr\u0103 va deschide Internet Explorer pe server, dup\u0103 care atacatorul poate accesa Explorer.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Videoclip demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Op\u021biunea 3<\/strong>. Dac\u0103 exist\u0103 restric\u021bii setate pentru lansarea fi\u0219ierelor executabile, atacatorul se poate confrunta cu o situa\u021bie \u00een care politicile de grup interzic lansarea cmd.exe de c\u0103tre administrator.<\/p>\n<p><\/p>\n<p>Exist\u0103 o modalitate de a o ocoli prin lansarea unui fi\u0219ier bat pe biroul de lucru la distan\u021b\u0103 cu con\u021binut de tip cmd.exe \/K . Eroarea la lansarea cmd \u0219i un exemplu de succes al execu\u021biei fi\u0219ierului bat sunt prezentate \u00een imaginea de mai jos.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktop la distan\u021b\u0103 prin ochii atacatorului\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Op\u021biunea 4<\/strong>. Interzicerea lans\u0103rii aplica\u021biilor prin liste negre bazate pe numele fi\u0219ierelor executabile nu este o solu\u021bie universal\u0103, acestea pot fi ocolite. <\/p>\n<p><\/p>\n<p>S\u0103 lu\u0103m \u00een considerare urm\u0103torul scenariu: am interzis accesul la linia de comand\u0103, am interzis lansarea Internet Explorer \u0219i PowerShell prin politici de grup. Atacatorul \u00eencearc\u0103 s\u0103 apeleze ajutorul \u2014 nu exist\u0103 r\u0103spuns. \u00cencerc\u00e2nd s\u0103 lanseze powershell prin meniul contextual al feron\u021bei modale, apelat\u0103 cu tasta Shift ap\u0103sat\u0103 \u2014 mesaj de interzicere a lans\u0103rii de c\u0103tre administrator. \u00cencerc\u00e2nd s\u0103 lanseze powershell prin bara de adrese \u2014 din nou nu exist\u0103 r\u0103spuns. Cum se poate o ocoli aceast\u0103 restric\u021bie? <\/p>\n<p><\/p>\n<p>Este suficient s\u0103 copiezi powershell.exe din folderul C:WindowsSystem32WindowsPowerShellv1.0 \u00een folderul utilizatorului, s\u0103 \u00eei schimbi numele \u00eentr-unul diferit de powershell.exe, iar posibilitatea de lansare va ap\u0103rea.<\/p>\n<p><\/p>\n<p>Implicit, atunci c\u00e2nd te conectezi la biroul de lucru de la distan\u021b\u0103, se ofer\u0103 acces la discurile locale ale clientului, din care atacatorul poate copia powershell.exe \u0219i, dup\u0103 redenumire, s\u0103-l lanseze.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Videoclip demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Am prezentat doar c\u00e2teva metode de ocolire a restric\u021biilor; se pot imagina multe altele, dar toate au \u00een comun ie\u0219irea \u00een Explorer-ul Windows. Exist\u0103 multe aplica\u021bii care folosesc resursele standard ale Windows pentru a lucra cu fi\u0219iere, iar atunci c\u00e2nd sunt plasate \u00eentr-un mediu restric\u021bionat, se pot aplica tehnici similare.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Recomand\u0103ri \u0219i concluzii<\/h1>\n<p><\/p>\n<p>Dup\u0103 cum vedem, chiar \u0219i \u00eentr-un mediu restric\u021bionat exist\u0103 spa\u021biu pentru dezvoltarea atacului. Totu\u0219i, putem \u00eengreuna via\u021ba atacatorului. Oferim recomand\u0103ri generale care sunt utile at\u00e2t \u00een variantele discutate, c\u00e2t \u0219i \u00een alte cazuri.<\/p>\n<p><\/p>\n<ul>\n<li>Restric\u021biona\u021bi execu\u021bia programelor prin liste negre\/alimente, folosind politici de grup.<br \/>\nCu toate acestea, \u00een majoritatea cazurilor r\u0103m\u00e2ne posibilitatea de a rula cod. V\u0103 recomand\u0103m s\u0103 consulta\u021bi proiectul <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, pentru a avea o idee despre metodele nedocumentate de manipulare a fi\u0219ierelor \u0219i de execu\u021bie a codului \u00een sistem.<br \/>\nV\u0103 recomand\u0103m s\u0103 combina\u021bi ambele tipuri de restric\u021bii: de exemplu, pute\u021bi permite rularea fi\u0219ierelor executabile semnate de Microsoft, dar s\u0103 restric\u021biona\u021bi execu\u021bia cmd.exe.<\/li>\n<li>Dezactiva\u021bi tab-urile de set\u0103ri din Internet Explorer (se poate face local \u00een registry). <\/li>\n<li>Dezactiva\u021bi prin regedit apelarea ajutoarelor \u00eencorporate Windows.<\/li>\n<li>Dezactiva\u021bi posibilitatea de a monta discuri locale pentru conexiuni de la distan\u021b\u0103, dac\u0103 aceast\u0103 restric\u021bie nu este critic\u0103 pentru utilizatori.<\/li>\n<li>Restric\u021biona\u021bi accesul la discurile locale ale ma\u0219inii remote, l\u0103s\u00e2nd acces doar la dosarele utilizatorilor.<\/li>\n<\/ul>\n<p><\/p>\n<p>Sper\u0103m c\u0103 v-a fost cel pu\u021bin interesant, iar \u00een cel mai bun caz, acest articol va ajuta la securizarea muncii la distan\u021b\u0103 a companiei dumneavoastr\u0103.<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Desktop Remote prin ochii atacatorului | ProHoster","description":"1. Introducere Companiile care nu aveau organizate sisteme de acces la distan\u021b\u0103 le-au desf\u0103\u0219urat \u00een mod de urgen\u021b\u0103 acum c\u00e2teva luni.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}