{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"\u00datok AirSnitch, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 izol\u00e1ciu medzi klientmi v Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdskumn\u00edci z Kalifornskej univerzity v Riverside vyvinuli (PDF) nov\u00fa triedu \u00fatokov na bezdr\u00f4tov\u00e9 siete \u2014 AirSnitch. Tieto \u00fatoky umo\u017e\u0148uj\u00fa ob\u00eds\u0165 mechanizmy izol\u00e1cie klientov v Wi-Fi sieti, ktor\u00e9 br\u00e1nia klientom vo vz\u00e1jomnej komunik\u00e1cii. V najhor\u0161om scen\u00e1ri \u00fatok umo\u017e\u0148uje \u00fato\u010dn\u00edkovi presmerova\u0165 trafic obete (MITM) na anal\u00fdzu alebo modifik\u00e1ciu neza\u0161ifrovan\u00fdch po\u017eiadaviek, ako aj podmeni\u0165 pr\u00edstup na webov\u00e9 str\u00e1nky prostredn\u00edctvom otravy DNS cache. <\/p>\n

Na vykonanie \u00fatokov mus\u00ed ma\u0165 \u00fato\u010dn\u00edk mo\u017enos\u0165 pripoji\u0165 sa k tej istej bezdr\u00f4tovej sieti ako obe\u0165, alebo k hos\u0165ovskej sieti obsluhovanej rovnak\u00fdm pr\u00edstupov\u00fdm bodom. Napr\u00edklad, \u00fatoky m\u00f4\u017eu by\u0165 aplikovan\u00e9 v verejn\u00fdch bezdr\u00f4tov\u00fdch sie\u0165ach. Z 9 testovan\u00fdch modelov bezdr\u00f4tov\u00fdch pr\u00edstupov\u00fdch bodov od Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM a Cisco, ako aj rie\u0161en\u00ed s firmv\u00e9rmi DD-WRT a OpenWrt, sa v\u0161etky zariadenia uk\u00e1zali ako zranite\u013en\u00e9 vo\u010di aspo\u0148 jednej met\u00f3de \u00fatoku.

\"\u00datok<\/center> <\/p>\n

Vyn\u00e1raj\u00fa sa tri probl\u00e9my, ktor\u00e9 umo\u017e\u0148uj\u00fa vykona\u0165 \u00fatok. Prv\u00fd probl\u00e9m umo\u017e\u0148uje ob\u00eds\u0165 izol\u00e1ciu medzi klientmi kv\u00f4li nespr\u00e1vnemu spravovaniu k\u013e\u00fa\u010dov pou\u017e\u00edvan\u00fdch na ochranu \u0161irokop\u00e1smov\u00fdch r\u00e1mcov. Druh\u00fd probl\u00e9m s\u00favis\u00ed s t\u00fdm, \u017ee izol\u00e1cia sa zvy\u010dajne aplikuje na \u00farovni MAC alebo na \u00farovni IP, ale nie na oboch \u00farovniach s\u00fa\u010dasne. Tret\u00ed probl\u00e9m je sp\u00f4soben\u00fd nespo\u013eahlivou synchroniz\u00e1ciou identifik\u00e1torov klientov na \u00farovni celej sie\u0165ovej \u0161trukt\u00fary, \u010do umo\u017e\u0148uje zachyt\u00e1va\u0165 prich\u00e1dzaj\u00facu a odch\u00e1dzaj\u00facu prem\u00e1vku in\u00fdch klientov. <\/p>\n

S\u00fa\u010dasn\u00e9 bezdr\u00f4tov\u00e9 pr\u00edstupov\u00e9 body kombinuj\u00fa funkcie r\u00e1diov\u00e9ho vysiela\u010da a sie\u0165ov\u00e9ho prep\u00edna\u010da (Layer 2 Switch), pri\u010dom prep\u00edna\u010d, na rozdiel od k\u00e1blov\u00fdch siet\u00ed, namiesto priradenia klienta k fyzick\u00e9mu portu, pou\u017e\u00edva logick\u00e9 priradenie k bezdr\u00f4tov\u00e9mu kan\u00e1lu. Ako identifik\u00e1tor pri takomto priraden\u00ed sa pou\u017e\u00edva MAC adresa klienta, ktor\u00e1 sa identifikuje s kan\u00e1lom v \u0161peci\u00e1lnej tabu\u013eke MAC adries. V pr\u00edpade prepn\u00fa\u0165 klienta na in\u00fd kan\u00e1l (napr\u00edklad po prechode z 2.4 GHz na 5 GHz) sa \u00fadaje v tabu\u013eke aktualizuj\u00fa.

\"\u00datok<\/center> <\/p>\n

\u00datok sa vykon\u00e1va na prv\u00fdch (fyzick\u00fdch, r\u00e1diov\u00fdch kan\u00e1loch) a druh\u00fdch (kan\u00e1lov\u00fdch, MAC-adres\u00e1ch) \u00farovniach modelu OSI a spo\u010d\u00edva v tom, \u017ee \u00fato\u010dn\u00edk pripojen\u00fd k rovnak\u00e9mu pr\u00edstupov\u00e9mu bodu, ale pou\u017e\u00edvaj\u00faci frekven\u010dn\u00fd rozsah in\u00fd ako obe\u0165 (napr\u00edklad 2,4 GHz namiesto 5 GHz), posiela \u017eiados\u0165 o dohodu spojenia (4-way handshake) a uv\u00e1dza MAC-adresu obete (podobne ako ARP-spoofing v ethernetov\u00fdch sie\u0165ach). Ke\u010f\u017ee klienti s\u00fa identifikovan\u00ed pod\u013ea MAC-adresy, pr\u00edstupov\u00fd bod sa domnieva, \u017ee klient pre\u0161iel na in\u00fd kan\u00e1l a men\u00ed z\u00e1znam v tabu\u013eke MAC-adresy. Po tom, v\u0161etok prich\u00e1dzaj\u00faci traffic z pr\u00edstupov\u00e9ho bodu sa za\u010d\u00edna posiela\u0165 na zariadenie \u00fato\u010dn\u00edka.

\"\u00datok<\/center>
\"\u00datok<\/center> <\/p>\n

Na uskuto\u010dnenie obojsmern\u00e9ho odpo\u010d\u00favania \u00fato\u010dn\u00edk, ktor\u00fd z\u00edskal \u00fadaje adresovan\u00e9 obeti, vracia stav tabu\u013eky MAC adries do p\u00f4vodn\u00e9ho stavu. Za t\u00fdmto \u00fa\u010delom je zaslan\u00fd paket \u201eICMP Ping\u201c s n\u00e1hodnou MAC adresou a \u0161ifrovan\u00edm paketu k\u013e\u00fa\u010dom GTK (Group Temporal Key), ktor\u00fd je spolo\u010dn\u00fd pre v\u0161etk\u00fdch klientov bezdr\u00f4tovej siete. Pr\u00edstupov\u00fd bod, ktor\u00fd obdr\u017eal tento paket, vracia viazanie MAC adresy obete k p\u00f4vodn\u00e9mu bezdr\u00f4tov\u00e9mu kan\u00e1lu. Napojenie do trafficu sa uskuto\u010d\u0148uje prostredn\u00edctvom cyklickej podmeny a vr\u00e1tenia z\u00e1znamu v tabu\u013eke MAC adries.

\"\u00datok<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok AirSnitch, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 izol\u00e1ciu medzi klientmi v Wi-Fi | ProHoster","description":"V\u00fdskumn\u00edci z Kalifornskej univerzity v Riverside vyvinuli (PDF) nov\u00fd druh \u00fatokov na bezdr\u00f4tov\u00e9 siete - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}