{"id":117814,"date":"2024-07-18T15:43:01","date_gmt":"2024-07-18T13:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi"},"modified":"2024-07-18T15:43:01","modified_gmt":"2024-07-18T13:43:04","slug":"ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","title":{"rendered":"\u00datok Port Shadow, ktor\u00fd umo\u017e\u0148uje presmerova\u0165 pripojenia in\u00fdch pou\u017e\u00edvate\u013eov VPN a Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdskumn\u00edkov z kanadsk\u00fdch a americk\u00fdch univerz\u00edt vyvinula techniku \u00fatoku Port Shadow, ktor\u00e1 umo\u017e\u0148uje cez manipul\u00e1ciu s tabulkami prekladania adries na strane VPN servera dosiahnu\u0165 poslanie odpovede na dopyt in\u00e9mu pou\u017e\u00edvate\u013eovi pripojen\u00e9mu k rovnak\u00e9mu VPN serveru. Met\u00f3da m\u00f4\u017ee by\u0165 vyu\u017eit\u00e1 na organizovanie odpo\u010d\u00favania alebo presmerovania \u0161ifrovan\u00e9ho prenosu, vykon\u00e1vanie skenovania portov a deanonimiz\u00e1ciu pou\u017e\u00edvate\u013eov VPN. Ako pr\u00edklad je uk\u00e1zan\u00e9, ako je mo\u017en\u00e9 vyu\u017ei\u0165 met\u00f3du na presmerovanie DNS po\u017eiadaviek pou\u017e\u00edvate\u013ea, ktor\u00fd pracuje cez VPN server, ku ktor\u00e9mu m\u00e1 ako klient mo\u017enos\u0165 pripoji\u0165 sa \u00fato\u010dn\u00edk. <\/p>\n

Na vykonanie \u00fatoku mus\u00ed ma\u0165 \u00fato\u010dn\u00edk mo\u017enos\u0165 pripoji\u0165 sa k jedn\u00e9mu VPN<\/a>-serveru so svojou obetou, \u010do je mo\u017en\u00e9 napr\u00edklad pri pou\u017e\u00edvan\u00ed \u0161tandardn\u00fdch VPN oper\u00e1torov a verejn\u00fdch VPN slu\u017eieb poskytuj\u00facich pr\u00edstup v\u0161etk\u00fdm z\u00e1ujemcom. Zranite\u013enos\u0165 zasahuje VPN servery, ktor\u00e9 pou\u017e\u00edvaj\u00fa prekladanie adries (NAT) na organiz\u00e1ciu pr\u00edstupu klientov k vonkaj\u0161\u00edm zdrojom, pri\u010dom pre prij\u00edmanie prenosu od klientov a posielanie dopytov na vonkaj\u0161ie weby by sa serveri<\/a> mala pou\u017e\u00edva\u0165 rovnak\u00e1 IP adresa. <\/p>\n

\u00datok je zalo\u017een\u00fd na tom, \u017ee cez posielanie \u0161peci\u00e1lne form\u00e1tovan\u00fdch dopytov \u00fato\u010dn\u00edk, pripojen\u00fd k rovnak\u00e9mu VPN serveru a pou\u017e\u00edvaj\u00faci spolo\u010dn\u00fd NAT, m\u00f4\u017ee dosiahnu\u0165 skreslenie obsahu tabuliek prekladania adries, \u010do povedie k tomu, \u017ee pakety adresovan\u00e9 jedn\u00e9mu pou\u017e\u00edvate\u013eovi bud\u00fa smerovan\u00e9 in\u00e9mu pou\u017e\u00edvate\u013eovi. V tabu\u013ek\u00e1ch prekladania adries sa inform\u00e1cie o tom, s ktor\u00fdm vn\u00fatorn\u00fdm IP adresou je zaslan\u00fd dopyt sp\u00e1rovan\u00fd, ur\u010duj\u00fa na z\u00e1klade \u010d\u00edsla v\u00fdstupn\u00e9ho sie\u0165ov\u00e9ho portu pou\u017eit\u00fdch pri zasielan\u00ed dopytu. \u00dato\u010dn\u00edk prostredn\u00edctvom posielania ur\u010dit\u00fdch SYN a ACK paketov a s\u00fa\u010dasn\u00fdch manipul\u00e1ci\u00ed zo strany klientsk\u00e9ho pripojenia k VPN serveru a zo strany \u00fato\u010dn\u00edkmi kontrolovan\u00e9ho vonkaj\u0161ieho servera m\u00f4\u017ee dosiahnu\u0165 vznik kol\u00edzie v NAT tabu\u013eke a prida\u0165 z\u00e1znam so rovnak\u00fdm \u010d\u00edslom v\u00fdstupn\u00e9ho portu, ale asociovan\u00fdm s jeho lok\u00e1lnou adresou, \u010do povedie k tomu, \u017ee odpovede na cudz\u00ed dopyt bud\u00fa vr\u00e1ten\u00e9 na adresu \u00fato\u010dn\u00edka.

\"\u00datok<\/center> <\/p>\n

V r\u00e1mci v\u00fdskumu boli testovan\u00e9 syst\u00e9my pre preklad adries Linux a FreeBSD v kombin\u00e1cii s VPN OpenVPN, OpenConnect a WireGuard. Platforma FreeBSD sa uk\u00e1zala ako odoln\u00e1 vo\u010di \u00fatokom na presmerovanie po\u017eiadaviek zo strany in\u00fdch pou\u017e\u00edvate\u013eov pripojen\u00fdch k tej istej VPN. Nahradenie v tabu\u013ek\u00e1ch NAT sa podarilo uskuto\u010dni\u0165 len po\u010das \u00fatoku ATIP (Adjacent-to-In-Path), pri ktorom sa \u00fato\u010dn\u00edk m\u00f4\u017ee vmie\u0161a\u0165 do prev\u00e1dzky medzi pou\u017e\u00edvate\u013eom a VPN serverom (napr\u00edklad ke\u010f sa pou\u017e\u00edvate\u013e pripoj\u00ed k sieti Wi-Fi ovl\u00e1danej \u00fato\u010dn\u00edkom) alebo medzi VPN serverom a cie\u013eov\u00fdm webom. Pri tom NAT FreeBSD zasiahlo aj \u00fatok, ktor\u00fd umo\u017e\u0148uje ur\u010di\u0165, \u017ee pou\u017e\u00edvate\u013e je pripojen\u00fd na ur\u010dit\u00fa str\u00e1nku (Connection Inference). <\/p>\n

Pokia\u013e ide o Linux, podsystem Netfilter sa uk\u00e1zal by\u0165 vystaven\u00fd \u00fatokom na nahradenie z\u00e1znamov v tabu\u013eke prekladu adries, \u010do umo\u017e\u0148uje presmerova\u0165 prich\u00e1dzaj\u00face pakety in\u00e9mu pou\u017e\u00edvate\u013eovi, dosiahnu\u0165 odosielanie paketov mimo \u0161ifrovan\u00e9ho VPN kan\u00e1la (Decapsulation) alebo ur\u010di\u0165 otvoren\u00e9 sie\u0165ov\u00e9 ports na strane klienta.

\"\u00datok<\/center> <\/p>\n

Aby sa zablokovali \u00fatoky, VPN poskytovate\u013eom sa odpor\u00fa\u010da pou\u017e\u00edva\u0165 adekv\u00e1tne met\u00f3dy n\u00e1hodn\u00e9ho generovania \u010d\u00edsel zdrojov\u00fdch portov v NAT, obmedzi\u0165 po\u010det povolen\u00fdch s\u00fa\u010dasn\u00fdch pripojen\u00ed k VPN serveru od jedn\u00e9ho pou\u017e\u00edvate\u013ea a tie\u017e zablokova\u0165 mo\u017enos\u0165 v\u00fdberu sie\u0165ov\u00e9ho portu klientom na prij\u00edmanie po\u017eiadaviek na strane VPN servera. <\/p>\n

Pod\u013ea z\u00e1stupcu spolo\u010dnosti Proton AG \u00fatok nezah\u0155\u0148a VPN slu\u017eby, ktor\u00e9 pou\u017e\u00edvaj\u00fa oddelen\u00e9 IP adresy pre prich\u00e1dzaj\u00face a odch\u00e1dzaj\u00face po\u017eiadavky. Okrem toho s\u00fa pochybnosti o mo\u017enosti aplik\u00e1cie \u00fatoku na re\u00e1lne VPN slu\u017eby, preto\u017ee \u00faspe\u0161n\u00fd \u00fatok bol zatia\u013e demon\u0161trovan\u00fd iba v laborat\u00f3rnych testoch a na jeho vykonanie s\u00fa potrebn\u00e9 ur\u010dit\u00e9 podmienky na strane VPN servera a napadnut\u00e9ho klienta. Okrem toho m\u00f4\u017ee by\u0165 \u00fatok u\u017eito\u010dn\u00fd iba na manipul\u00e1cie s neza\u0161ifrovan\u00fdmi po\u017eiadavkami, ako je pr\u00edstup k DNS, zatia\u013e \u010do pou\u017e\u00edvanie TLS a HTTPS na \u00farovni aplik\u00e1ci\u00ed rob\u00ed presmerovanie prev\u00e1dzky zbyto\u010dn\u00fdm. <\/p>\n

Manipul\u00e1cie s tabu\u013ekami prekladu adries \u00fatokov s\u00fa pou\u017eite\u013en\u00e9 nielen pre VPN, ale aj pre bezdr\u00f4tov\u00e9 siete, v ktor\u00fdch sa na organiz\u00e1ciu pripojenia pou\u017e\u00edvate\u013eov k extern\u00fdm zdrojom na pr\u00edstupovom bode pou\u017e\u00edva NAT. Minul\u00fd mesiac boli zverejnen\u00e9 v\u00fdsledky v\u00fdskumu mo\u017en\u00e9ho vykonania podobn\u00e9ho \u00fatoku na zachytenie TCP pripojen\u00ed in\u00fdch pou\u017e\u00edvate\u013eov bezdr\u00f4tovej siete. Met\u00f3da \u00fatoku sa uk\u00e1zala ako pou\u017eite\u013en\u00e1 na 24 z 33 testovan\u00fdch bezdr\u00f4tov\u00fdch pr\u00edstupov\u00fdch bodov.

\"\u00datok<\/center> <\/p>\n

Navrhnut\u00fd \u00fatok na Wi-Fi sa uk\u00e1zal by\u0165 podstatne jednoduch\u0161\u00ed ako vy\u0161\u0161ie uveden\u00e1 met\u00f3da pre VPN, preto\u017ee v d\u00f4sledku optimaliz\u00e1ci\u00ed mnoh\u00e9 pr\u00edstupov\u00e9 body nekontroluj\u00fa spr\u00e1vnos\u0165 \u010d\u00edsel sekvenci\u00ed v TCP paketochn. Nakoniec na \u00fatok sta\u010dilo posla\u0165 falo\u0161n\u00fd RST paket na vymazanie z\u00e1znamu v tabu\u013eke prekladu adries a potom dosiahnu\u0165 nasmerovanie odpovede na hostite\u013ea \u00fato\u010dn\u00edka na ur\u010denie \u010d\u00edsel sekvencie (SEQ) a potvrdenia (ACK), potrebn\u00fdch na zachytenie TCP pripojenia.

\"\u00datok<\/center>
\"\u00datok<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c\u0443 \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u041c\u0435\u0442\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u0438 \u0434\u0435\u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":117815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok Port Shadow, ktor\u00fd umo\u017e\u0148uje preposiela\u0165 pripojenia in\u00fdch pou\u017e\u00edvate\u013eov VPN a Wi-Fi | ProHoster","description":"Skupina v\u00fdskumn\u00edkov z kanadsk\u00fdch a americk\u00fdch univerz\u00edt vyvinula techniku \u00fatoku Port Shadow, ktor\u00e1 umo\u017e\u0148uje pomocou manipul\u00e1cie s tabu\u013ekami prekladu adries na strane VPN servera dosiahnu\u0165 odoslanie odpovede na.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN \u0438 Wi-Fi | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Port Shadow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-port-shadow-pozvolyayushhaya-perenapravlyat-soedineniya-drugih-polzovatelej-vpn-i-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-18T13:43:04+00:00","article:modified_time":"2024-07-18T13:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:00:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:28:19","updated":"2026-02-09 22:00:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/117814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=117814"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/117814\/revisions"}],"predecessor-version":[{"id":160055,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/117814\/revisions\/160055"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/117815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=117814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=117814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=117814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}