{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 nov\u00e1 technika MITM \u00fatokov na HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Skupina v\u00fdskumn\u00edkov z nieko\u013ek\u00fdch nemeck\u00fdch univerz\u00edt vyvinula nov\u00fa met\u00f3du MITM \u00fatoku na HTTPS, ktor\u00e1 umo\u017e\u0148uje extrakciu cookie s identifik\u00e1tormi rel\u00e1cie a in\u00fdch citliv\u00fdch \u00fadajov, ako aj vykonanie \u013eubovo\u013en\u00e9ho JavaScript k\u00f3du v kontexte inej webovej str\u00e1nky. \u00datok dostal n\u00e1zov ALPACA a m\u00f4\u017ee by\u0165 aplikovan\u00fd na TLS servery implementuj\u00face r\u00f4zne aplika\u010dn\u00e9 protokoly (HTTPS, SFTP, SMTP, IMAP, POP3), ale pou\u017e\u00edva\u0165 spolo\u010dn\u00e9 TLS certifik\u00e1ty.      <\/p>\n<p>Podstata \u00fatoku spo\u010d\u00edva v tom, \u017ee pri kontrole nad sie\u0165ov\u00fdm br\u00e1nou alebo bezdr\u00f4tov\u00fdm pr\u00edstupov\u00fdm bodom m\u00f4\u017ee \u00fato\u010dn\u00edk presmerova\u0165 webov\u00fd traffic na in\u00fd sie\u0165ov\u00fd port a zorganizova\u0165 spojenie s FTP alebo po\u0161tov\u00fdm serverom, ktor\u00e9 podporuj\u00fa TLS \u0161ifrovanie a pou\u017e\u00edvaj\u00fa spolo\u010dn\u00fd TLS certifik\u00e1t s HTTP serverom. Prehliada\u010d pou\u017e\u00edvate\u013ea potom bude pova\u017eova\u0165, \u017ee bolo nadviazan\u00e9 spojenie s po\u017eadovan\u00fdm HTTP serverom. Ke\u010f\u017ee protokol TLS je univerz\u00e1lny a nie je viazan\u00fd na aplika\u010dn\u00e9 protokoly, nadviazanie \u0161ifrovan\u00e9ho spojenia pre v\u0161etky slu\u017eby je identick\u00e9 a chyba pri odosielan\u00ed po\u017eiadavky na nespr\u00e1vnu slu\u017ebu m\u00f4\u017ee by\u0165 identifikovan\u00e1 iba po nadviazan\u00ed \u0161ifrovan\u00e9ho rel\u00e1cie po\u010das spracovania pr\u00edkazov odoslanej po\u017eiadavky.     <\/p>\n<p>T\u00fdm p\u00e1dom, ak napr\u00edklad presmerujete pou\u017e\u00edvate\u013esk\u00e9 pripojenie, ktor\u00e9 bolo p\u00f4vodne adresovan\u00e9 na HTTPS, na po\u0161tov\u00fd server, ktor\u00fd pou\u017e\u00edva spolo\u010dn\u00fd certifik\u00e1t s HTTPS serverom, TLS spojenie bude \u00faspe\u0161ne nadviazan\u00e9, ale po\u0161tov\u00fd server nebude schopn\u00fd spracova\u0165 odovzdan\u00e9 HTTP pr\u00edkazy a vr\u00e1ti odpove\u010f s chybov\u00fdm k\u00f3dom. T\u00e1to odpove\u010f bude spracovan\u00e1 prehliada\u010dom ako odpove\u010f po\u017eadovanej str\u00e1nky, odoslan\u00e1 vo vn\u00fatri spr\u00e1vne nadviazan\u00e9ho \u0161ifrovan\u00e9ho komunika\u010dn\u00e9ho kan\u00e1la.        <\/p>\n<p>Boli navrhnut\u00e9 tri varianty \u00fatoku:   <\/p>\n<ul>\n<li class=\"l\"> \u201eNahr\u00e1\u0165\u201c pre extrakciu cookie s autentifika\u010dn\u00fdmi parametrami. Tento metod je aplikovate\u013en\u00fd, ak FTP server pokryt\u00fd TLS certifik\u00e1tom umo\u017e\u0148uje nahr\u00e1vanie a extrakciu svojich \u00fadajov. V tomto variante \u00fatoku m\u00f4\u017ee \u00fato\u010dn\u00edk dosiahnu\u0165 uchovanie \u010dast\u00ed p\u00f4vodn\u00e9ho HTTP po\u017eiadavku pou\u017e\u00edvate\u013ea, ako je obsah hlavi\u010dky cookie, ak napr\u00edklad FTP server interpretuje po\u017eiadavku ako s\u00fabor na ulo\u017eenie alebo \u00faplne zaznamen\u00e1va prich\u00e1dzaj\u00face po\u017eiadavky. Na \u00faspe\u0161n\u00fd \u00fatok potom \u00fato\u010dn\u00edk potrebuje nejak\u00fdm sp\u00f4sobom extrahova\u0165 ulo\u017een\u00fd obsah. \u00datok je aplikovate\u013en\u00fd na Proftpd, Microsoft IIS, vsftpd, filezilla a serv-u.\n<li class=\"l\"> \u201eStiahnu\u0165\u201c pre organiz\u00e1ciu medziwebov\u00e9ho skriptingu (XSS). Tento metod predpoklad\u00e1, \u017ee \u00fato\u010dn\u00edk m\u00f4\u017ee v d\u00f4sledku ur\u010dit\u00fdch manipul\u00e1ci\u00ed umiestni\u0165 d\u00e1ta do slu\u017eby, ktor\u00e1 pou\u017e\u00edva zdie\u013ean\u00e9 <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/ssl-sertifikat\/\"   title=\"TLS certifik\u00e1t\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS certifik\u00e1t<\/a>, ktor\u00e9 n\u00e1sledne m\u00f4\u017eu by\u0165 poskytnut\u00e9 ako odpove\u010f na dopyt pou\u017e\u00edvate\u013ea. \u00datok je aplikovate\u013en\u00fd na uveden\u00e9 FTP servery, IMAP servery a POP3 servery (courier, cyrus, kerio-connect a zimbra).\n<li class=\"l\"> \u201eReflexia\u201c pre spustenie JavaScriptu v kontexte inej str\u00e1nky. Tento metod je zalo\u017een\u00fd na vr\u00e1ten\u00ed \u010dasti po\u017eiadavku klientovi, v ktorom sa nach\u00e1dza JavaScriptov\u00fd k\u00f3d zaslan\u00fd \u00fato\u010dn\u00edkom. \u00datok je aplikovate\u013en\u00fd na vy\u0161\u0161ie uveden\u00e9 FTP servery, IMAP servery cyrus, kerio-connect a zimbra, ako aj na SMTP server sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Napr\u00edklad pri otvoren\u00ed str\u00e1nky pod kontrolou \u00fato\u010dn\u00edka m\u00f4\u017ee by\u0165 z tejto str\u00e1nky iniciovan\u00fd po\u017eiadavok na zdroj z webu, na ktorom m\u00e1 pou\u017e\u00edvate\u013e akt\u00edvny \u00fa\u010det (napr\u00edklad bank.com). Po\u010das MITM \u00fatoku m\u00f4\u017ee by\u0165 tento po\u017eiadavok adresovan\u00fd webovej str\u00e1nke bank.com presmerovan\u00fd na po\u0161tov\u00fd server, ktor\u00fd pou\u017e\u00edva rovnak\u00fd TLS certifik\u00e1t s bank.com. Ke\u010f\u017ee po\u0161tov\u00fd server neskon\u010d\u00ed rel\u00e1ciu po prvej chybe, servisn\u00e9 hlavi\u010dky a pr\u00edkazy, ako \u201ePOST \/ HTTP\/1.1\u201c a \u201eHost:\u201c, bud\u00fa spracovan\u00e9 ako nezn\u00e1me pr\u00edkazy (po\u0161tov\u00fd server vr\u00e1ti na ka\u017ed\u00fa hlavi\u010dku \u201e500 unrecognized command\u201c).     <\/p>\n<p>Po\u0161tov\u00fd server nezapad\u00e1 do \u0161pecif\u00edk protokolu HTTP a pre neho s\u00fa servisn\u00e9 hlavi\u010dky a blok d\u00e1t POST dopytu spracovan\u00e9 rovnako, a preto v tele POST dopytu mo\u017eno uvies\u0165 riadok s pr\u00edkazom po\u0161tov\u00e9mu serveru. Napr\u00edklad je mo\u017en\u00e9 prenies\u0165: MAIL FROM:  na \u010do po\u0161tov\u00fd server vr\u00e1ti chybov\u00e9 hl\u00e1senie 501 : malformed address: alert(1); may not follow      <\/p>\n<p>Tento odpov\u011b\u010f obdr\u017e\u00ed prohl\u00ed\u017ee\u010d u\u017eivatele, kter\u00fd provede JavaScriptov\u00fd k\u00f3d v kontextu, kter\u00fd nen\u00ed origin\u00e1ln\u011b otev\u0159en\u00fdm webem \u00fato\u010dn\u00edka, ale webem banky bank.com, na kter\u00fd byla zasl\u00e1na \u017e\u00e1dost, proto\u017ee odpov\u011b\u010f byla p\u0159ijata v r\u00e1mci platn\u00e9ho TLS relace, jej\u00ed\u017e certifik\u00e1t potvrdil pravost odpov\u011bdi bank.com.     <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Skener ve glob\u00e1ln\u00ed s\u00edti uk\u00e1zal, \u017ee tento probl\u00e9m obecn\u011b postihuje kolem 1,4 milionu webov\u00fdch server\u016f, kter\u00e9 mohou b\u00fdt c\u00edlem\u00fatoku se sm\u00ed\u0161en\u00fdmi po\u017eadavky podle r\u016fzn\u00fdch protokol\u016f. Mo\u017enost skute\u010dn\u00e9ho proveden\u00ed \u00fatoku byla identifikov\u00e1na u 119 tis\u00edc webov\u00fdch server\u016f, na kter\u00fdch byly p\u0159\u00edtomny souvisej\u00edc\u00ed TLS servery na jin\u00fdch aplika\u010dn\u00edch protokolech.        <\/p>\n<p>P\u0159\u00edklady exploit\u016f byly p\u0159ipraveny pro FTP servery jako pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla a serv-u, IMAP a POP3 servery dovecot, courier, exchange, cyrus, kerio-connect a zimbra, SMTP servery postfix, exim, sendmail, mailenable, mdaemon a opensmtpd. V\u00fdzkumn\u00edci zkoumali mo\u017enost proveden\u00ed \u00fatoku pouze ve spojen\u00ed se servery FTP, SMTP, IMAP a POP3, p\u0159i\u010dem\u017e nelze vylou\u010dit, \u017ee probl\u00e9m se m\u016f\u017ee projevovat i pro jin\u00e9 aplika\u010dn\u00ed protokoly, kter\u00e9 vyu\u017e\u00edvaj\u00ed TLS.     <center><img decoding=\"async\" alt=\"ALPACA - nov\u00e1 technika MITM \u00fatok\u016f na HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>K blokov\u00e1n\u00ed \u00fatoku se navrhuje pou\u017e\u00edt roz\u0161\u00ed\u0159en\u00ed ALPN (Application Layer Protocol Negotiation) pro vyjedn\u00e1v\u00e1n\u00ed TLS relace s ohledem na aplika\u010dn\u00ed protokol a roz\u0161\u00ed\u0159en\u00ed SNI (Server Name Indication) pro vazbu na n\u00e1zev hostitele v p\u0159\u00edpad\u011b pou\u017e\u00edv\u00e1n\u00ed TLS certifik\u00e1t\u016f, kter\u00e9 pokr\u00fdvaj\u00ed v\u00edce <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/domain\/\"   title=\"dom\u00e9nov\u00fdch mien\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">dom\u00e9nov\u00fdch mien<\/a>. Na stran\u011b aplikac\u00ed se doporu\u010duje omezit limit na po\u010det chyb p\u0159i zpracov\u00e1n\u00ed p\u0159\u00edkaz\u016f, po jeho\u017e dosa\u017een\u00ed dojde k p\u0159eru\u0161en\u00ed spojen\u00ed. Proces vypracov\u00e1n\u00ed opat\u0159en\u00ed k blokov\u00e1n\u00ed \u00fatoku za\u010dal ji\u017e v \u0159\u00edjnu minul\u00e9ho roku. Podobn\u00e1 opat\u0159en\u00ed na ochranu byla ji\u017e p\u0159ijata v Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZilla, crypto\/tls (Go) a Internet Explorer.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 nov\u00e1 technika MITM \u00fatok\u016f na HTTPS | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z n\u011bkolika n\u011bmeck\u00fdch univerzit vyvinula nov\u00fd metod MITM \u00fatoku na HTTPS, kter\u00fd umo\u017e\u0148uje extrakci cookies s identifik\u00e1tory relac\u00ed a dal\u0161\u00edch citliv\u00fdch \u00fadaj\u016f, a tak\u00e9 dosa\u017een\u00ed.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}