{"id":84555,"date":"2020-06-09T01:41:56","date_gmt":"2020-06-08T23:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov"},"modified":"2020-06-09T01:41:56","modified_gmt":"2020-06-08T23:41:56","slug":"v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","title":{"rendered":"Do uBlock Origin bola pridan\u00e1 blok\u00e1cia skriptov na skenovanie sie\u0165ov\u00fdch portov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vo filtre pou\u017e\u00edvanom v uBlock Origin EasyPrivacy<\/a><\/noindex> boli pridan\u00e9 pravidl\u00e1 na blokovanie typick\u00fdch skriptov pre skenovanie sie\u0165ov\u00fdch portov na lok\u00e1lnom syst\u00e9me pou\u017e\u00edvate\u013ea. Pripom\u00edname, \u017ee v m\u00e1ji bolo zisten\u00e9<\/a><\/noindex> skenovanie lok\u00e1lnych portov pri otv\u00e1ran\u00ed str\u00e1nky eBay.com. Uk\u00e1zalo sa, \u017ee tak\u00e1to prax nie je obmedzen\u00e1 len na eBay a mnoh\u00e9 in\u00fd weby<\/a><\/noindex> (Citibank, TD Bank, Sky, GumTree, WePay a pod.) pou\u017e\u00edvaj\u00fa skenovanie portov lok\u00e1lneho syst\u00e9mu pou\u017e\u00edvate\u013ea pri otv\u00e1ran\u00ed svojich str\u00e1nok, pri\u010dom pou\u017e\u00edvaj\u00fa k\u00f3d na zistenie pokusov o pr\u00edstup z napadnut\u00fdch po\u010d\u00edta\u010dov, poskytovan\u00fd slu\u017ebou ThreatMetrix.<\/p>\n

V pr\u00edpade eBay sa kontrolovalo 14 sie\u0165ov\u00fdch portov, asociovan\u00fdch so servermi vzdialen\u00e9ho pr\u00edstupu, ako s\u00fa VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin a RDP. Je pravdepodobn\u00e9, \u017ee kontrola sa vykon\u00e1va na ur\u010denie<\/a><\/noindex> na pr\u00edtomnosti st\u00f4p infikovania syst\u00e9mu \u0161kodliv\u00fdm softv\u00e9rom s cie\u013eom zabr\u00e1ni\u0165 podvodn\u00fdm n\u00e1kupom pomocou botnetov. Skenovanie m\u00f4\u017ee by\u0165 taktie\u017e pou\u017eit\u00e9 na z\u00edskanie \u00fadajov pre nepriame identifikovanie pou\u017e\u00edvate\u013ea<\/a><\/noindex>.<\/p>\n

Na skenovanie sa pou\u017e\u00edva technika zalo\u017een\u00e1 na pokuse o vytvorenie spojenia s r\u00f4znymi sie\u0165ov\u00fdmi portami hostite\u013ea 127.0.0.1 (localhost) cez WebSocket<\/a><\/noindex>Fakt, \u017ee je otvoren\u00fd sie\u0165ov\u00fd port, sa ur\u010duje nepriamo na z\u00e1klade rozdielu v spracovan\u00ed ch\u00fdb pripojenia k akt\u00edvnym a nevyu\u017e\u00edvan\u00fdm sie\u0165ov\u00fdm portom. WebSocket umo\u017e\u0148uje posiela\u0165 len HTTP po\u017eiadavky, ale podobn\u00e1 po\u017eiadavka na neakt\u00edvny sie\u0165ov\u00fd port sa skon\u010d\u00ed chybou hne\u010f, zatia\u013e \u010do na akt\u00edvnom porte a\u017e po ur\u010ditom \u010dase, ke\u010f sa pok\u00fa\u0161a o nadviazanie spojenia. Okrem toho, v pr\u00edpade neakt\u00edvneho portu WebSocket vracia k\u00f3d chyby pripojenia (ERR_CONNECTION_REFUSED), zatia\u013e \u010do v pr\u00edpade akt\u00edvneho portu \u2014 k\u00f3d chyby pri nadv\u00e4zovan\u00ed spojenia. <\/p>\n

\"Do<\/a><\/noindex><\/center><\/p>\n

Okrem skenovania portov WebSockets m\u00f4\u017ee by\u0165 pou\u017eit\u00e9<\/a><\/noindex> by\u0165 pou\u017eit\u00fd na \u00fatoky na syst\u00e9my webov\u00fdch v\u00fdvoj\u00e1rov, ktor\u00ed sp\u00fa\u0161\u0165aj\u00fa na lok\u00e1lnom syst\u00e9me WebSocket spracovate\u013eov pre aplik\u00e1cie React. Extern\u00fd web m\u00f4\u017ee preh\u013eada\u0165 sie\u0165ov\u00e9 porty, zisti\u0165 pr\u00edtomnos\u0165 tak\u00e9ho spracovate\u013ea a pripoji\u0165 sa k nemu. Ak v\u00fdvoj\u00e1r urob\u00ed chybu, \u00fato\u010dn\u00edk m\u00f4\u017ee z\u00edska\u0165 obsah ladac\u00edch \u00fadajov, ktor\u00e9 m\u00f4\u017eu obsahova\u0165 \u00fatr\u017ekovit\u00e9 d\u00f4vern\u00e9 inform\u00e1cie.<\/p>\n

\"Do<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 eBay.com. \u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f eBay \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (Citibank, TD Bank, Sky, GumTree, WePay \u0438 \u0442.\u043f.) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84556,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V uBlock Origin bola pridan\u00e1 funkcia blokovania skriptov na kontrolu sie\u0165ov\u00fdch portov | ProHoster","description":"Do filtra EasyPrivacy pou\u017e\u00edvan\u00e9ho v uBlock Origin boli pridan\u00e9 pravidl\u00e1 na blokovanie typick\u00fdch skriptov.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 uBlock Origin \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T23:41:56+00:00","article:modified_time":"2020-06-08T23:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84555","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:55:41","updated":"2022-09-28 02:39:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/84555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=84555"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/84555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/84556"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=84555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=84555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=84555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}