{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Remote Desktop o\u010dami \u00fato\u010dn\u00edka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. \u00davod<\/h1>\n<p><\/p>\n<p>Spolo\u010dnosti, ktor\u00e9 nemali zriaden\u00e9 syst\u00e9my vzdialen\u00e9ho pr\u00edstupu, ich v n\u00fadzovom re\u017eime zav\u00e1dzali pred p\u00e1r mesiacmi. Nie v\u0161etci administr\u00e1tori boli pripraven\u00ed na tak\u00fato \"hor\u00fa\u010davu\", ako d\u00f4sledok \u2014 opomenutia v oblasti bezpe\u010dnosti: nespr\u00e1vna konfigur\u00e1cia slu\u017eieb alebo dokonca in\u0161tal\u00e1cia zastaran\u00fdch verzi\u00ed softv\u00e9ru so zn\u00e1mymi zranite\u013enos\u0165ami. Niektor\u00ed u\u017e za toto opomenutie zaplatili cenu, in\u00fdm sa \u0161\u0165astie usmialo, ale ur\u010dite by mali v\u0161etci urobi\u0165 z\u00e1very. Loyalita k vzdialenej pr\u00e1ci sa v\u00fdrazne zv\u00fd\u0161ila a \u010doraz viac spolo\u010dnost\u00ed akceptuje remote work ako prijate\u013en\u00fd form\u00e1t na trvalej b\u00e1ze.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Existuje mno\u017estvo mo\u017enost\u00ed, ako zabezpe\u010di\u0165 vzdialen\u00fd pr\u00edstup: r\u00f4zne VPN, RDS a VNC, TeamViewer a in\u00e9. Administr\u00e1tori maj\u00fa z \u010doho vybera\u0165, zalo\u017een\u00e9 na \u0161pecifik\u00e1ch budovania firemnej siete a zariaden\u00ed v nej. Najob\u013e\u00fabenej\u0161ie zost\u00e1vaj\u00fa VPN rie\u0161enia, av\u0161ak mnoh\u00e9 mal\u00e9 spolo\u010dnosti si vyberaj\u00fa RDS (Remote Desktop Services), ktor\u00e9 s\u00fa jednoduch\u0161ie a r\u00fdchlej\u0161ie na nasadenie.<\/p>\n<p><\/p>\n<p>V tomto \u010dl\u00e1nku sa podrobnej\u0161ie pozrieme na bezpe\u010dnos\u0165 RDS. Urob\u00edme stru\u010dn\u00fd preh\u013ead zn\u00e1mych zranite\u013enost\u00ed a presk\u00famame nieko\u013eko scen\u00e1rov \u00fatokov na sie\u0165ov\u00fa infra\u0161trukt\u00faru zalo\u017een\u00fa na Active Directory. D\u00fafame, \u017ee na\u0161a \u010dl\u00e1nok niekomu pom\u00f4\u017ee vykona\u0165 pr\u00e1cu nachyby a zv\u00fd\u0161i\u0165 bezpe\u010dnos\u0165.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Ned\u00e1vne zranite\u013enosti RDS\/RDP<\/h1>\n<p><\/p>\n<p>Ak\u00fdko\u013evek softv\u00e9r obsahuje chyby a zranite\u013enosti, ktor\u00e9 zneu\u017e\u00edvaj\u00fa \u00fato\u010dn\u00edci, a RDS nie je v\u00fdnimkou. V poslednom \u010dase Microsoft \u010dasto informoval o nov\u00fdch zranite\u013enostiach, a rozhodli sme sa urobi\u0165 ich stru\u010dn\u00fd preh\u013ead:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>T\u00e1to zranite\u013enos\u0165 ohrozuje pou\u017e\u00edvate\u013eov, ktor\u00ed sa prip\u00e1jaj\u00fa k kompromitovan\u00e9mu serveru. \u00dato\u010dn\u00edk m\u00f4\u017ee z\u00edska\u0165 kontrolu nad pou\u017e\u00edvate\u013esk\u00fdm zariaden\u00edm alebo sa usadi\u0165 v syst\u00e9me, aby mal trval\u00fd vzdialen\u00fd pr\u00edstup.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>T\u00e1to skupina zranite\u013enost\u00ed umo\u017e\u0148uje neopr\u00e1vnen\u00e9mu \u00fato\u010dn\u00edkovi vzdialene vykon\u00e1va\u0165 \u013eubovo\u013en\u00fd k\u00f3d na serveri s RDS prostredn\u00edctvom \u0161peci\u00e1lne sformulovanej po\u017eiadavky. Taktie\u017e ich je mo\u017en\u00e9 vyu\u017ei\u0165 na vytvorenie \u010dervov \u2014 \u0161kodliv\u00e9ho softv\u00e9ru, ktor\u00fd infikuje susedn\u00e9 sie\u0165ov\u00e9 zariadenia samostatne. Tak\u017ee, tieto zranite\u013enosti m\u00f4\u017eu ohrozi\u0165 cel\u00fa sie\u0165 spolo\u010dnosti, a z\u00e1chranou pred nimi je len v\u010dasn\u00e9 aktualizovanie.<\/p>\n<p><\/p>\n<p>Softv\u00e9r na vzdialen\u00fd pr\u00edstup z\u00edskal zv\u00fd\u0161en\u00fa pozornos\u0165 zo strany v\u00fdskumn\u00edkov aj \u00fatokov, tak\u017ee \u010doskoro m\u00f4\u017eeme po\u010du\u0165 o nov\u00fdch podobn\u00fdch zranite\u013enostiach.<\/p>\n<p><\/p>\n<p>Dobrou spr\u00e1vou je, \u017ee nie v\u0161etky zranite\u013enosti maj\u00fa verejne dostupn\u00e9 exploitov. Zl\u00e1 spr\u00e1va \u2014 \u00fato\u010dn\u00edk so znalos\u0165ami si m\u00f4\u017ee bez probl\u00e9mov nap\u00edsa\u0165 exploit pre zranite\u013enos\u0165 na z\u00e1klade popisu, alebo pomocou techn\u00edk ako Patch Diffing (o tom p\u00edsali na\u0161i kolegovia v <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">\u010dl\u00e1nku<\/a><\/noindex>). Preto odpor\u00fa\u010dame pravidelne aktualizova\u0165 softv\u00e9r a sledova\u0165 objaven\u00e9 nov\u00e9 spr\u00e1vy o zranite\u013enostiach.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. \u00datoky<\/h1>\n<p><\/p>\n<p>Prech\u00e1dzame do druhej \u010dasti \u010dl\u00e1nku, kde uk\u00e1\u017eeme, ako za\u010d\u00ednaj\u00fa \u00fatoky na sie\u0165ov\u00fa infra\u0161trukt\u00faru zalo\u017een\u00fa na Active Directory. <\/p>\n<p><\/p>\n<p>Op\u00edsan\u00e9 met\u00f3dy s\u00fa aplikovate\u013en\u00e9 pre nasleduj\u00faci model \u00fato\u010dn\u00edka: \u00fato\u010dn\u00edk s u\u017e\u00edvate\u013esk\u00fdm \u00fa\u010dtom, ktor\u00fd m\u00e1 pr\u00edstup k Remote Desktop Gateway \u2014 termin\u00e1lnemu serveru (\u010dasto je dostupn\u00fd napr\u00edklad z vonkaj\u0161ej siete). Pou\u017eit\u00edm t\u00fdchto met\u00f3d m\u00f4\u017ee \u00fato\u010dn\u00edk pokra\u010dova\u0165 v \u00fatoku na infra\u0161trukt\u00faru a upevni\u0165 svoj pr\u00edstup v sieti.<\/p>\n<p><\/p>\n<p>Konfigur\u00e1cia siete sa m\u00f4\u017ee v ka\u017edom pr\u00edpade l\u00ed\u0161i\u0165, ale op\u00edsan\u00e9 techniky s\u00fa dos\u0165 univerz\u00e1lne.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Pr\u00edklady \u00fanikov z obmedzen\u00e9ho prostredia a zv\u00fd\u0161enia opr\u00e1vnen\u00ed<\/h2>\n<p><\/p>\n<p>Pri pr\u00edstupe k Remote Desktop Gateway sa \u00fato\u010dn\u00edk pravdepodobne stretne s ur\u010dit\u00fdm obmedzen\u00fdm prostred\u00edm. Pri pripojen\u00ed k termin\u00e1lnemu serveru sa spust\u00ed aplik\u00e1cia: okno na pripojenie cez protokol Remote Desktop pre intern\u00e9 zdroje, prieskumn\u00edk, kancel\u00e1rske bal\u00edky alebo ak\u00fdko\u013evek in\u00fd softv\u00e9r. <\/p>\n<p><\/p>\n<p>Cie\u013eom \u00fato\u010dn\u00edka bude z\u00edska\u0165 pr\u00edstup k vykon\u00e1vaniu pr\u00edkazov, teda k spusteniu cmd alebo powershell. V tom m\u00f4\u017eu pom\u00f4c\u0165 niektor\u00e9 klasick\u00e9 techniky \u00faniku z 'pieskoviska' pre Windows. Pozrime sa na ne \u010falej.<\/p>\n<p><\/p>\n<p><strong>Varianta 1<\/strong>. \u00dato\u010dn\u00edk m\u00e1 pr\u00edstup k oknu pripojenia Remote Desktop v r\u00e1mci Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop o\u010dami \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Otv\u00e1ra sa ponuka 'Show Options'. Objavuj\u00fa sa mo\u017enosti na manipul\u00e1ciu s konfigura\u010dn\u00fdmi s\u00fabormi pripojenia:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop o\u010dami \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Z tohto okna je mo\u017en\u00e9 bez prek\u00e1\u017eok prejs\u0165 do Prieskumn\u00edka kliknut\u00edm na ak\u00e9ko\u013evek tla\u010didlo 'Open' alebo 'Save':<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop o\u010dami \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Otv\u00e1ra sa Prieskumn\u00edk. Jeho 'adresn\u00fd riadok' umo\u017e\u0148uje sp\u00fa\u0161\u0165anie povolen\u00fdch spustite\u013en\u00fdch s\u00faborov, ako aj preh\u013ead\u00e1vanie s\u00faborov\u00e9ho syst\u00e9mu. To m\u00f4\u017ee by\u0165 pre \u00fato\u010dn\u00edka u\u017eito\u010dn\u00e9, ak s\u00fa syst\u00e9mov\u00e9 disky skryt\u00e9 a nie je k nim mo\u017en\u00e9 z\u00edska\u0165 priamy pr\u00edstup:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop o\u010dami \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Demon\u0161tra\u010dn\u00e9 video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Podobn\u00fd scen\u00e1r je mo\u017en\u00e9 zrealizova\u0165 napr\u00edklad pri pou\u017e\u00edvan\u00ed Excelu z bal\u00edka Microsoft Office ako vzdialen\u00e9ho softv\u00e9ru. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Demon\u0161tra\u010dn\u00e9 video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Okrem toho netreba zab\u00fada\u0165 na makr\u00e1 pou\u017e\u00edvan\u00e9 v tomto kancel\u00e1rskom bal\u00edku. Na\u0161i kolegovia sk\u00famali bezpe\u010dnostn\u00e9 probl\u00e9my makier v tejto <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">\u010dl\u00e1nku<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Varianta 2<\/strong>. Pou\u017e\u00edvaj\u00fac tie ist\u00e9 vstupy, ak\u00e9 sme mali v predch\u00e1dzaj\u00facej variante, \u00fato\u010dn\u00edk sp\u00fa\u0161\u0165a nieko\u013eko pripojen\u00ed k vzdialen\u00e9mu pracovn\u00e9ho stol\u00edku pod jedn\u00fdm a t\u00fdm ist\u00fdm \u00fa\u010dtom. Pri op\u00e4tovnom pripojen\u00ed sa prv\u00e9 pripojenie uzavrie a na obrazovke sa objav\u00ed okno s chybov\u00fdm ozn\u00e1men\u00edm. Tla\u010didlo pomoci v tomto okne otvor\u00ed Internet Explorer na serveri, po \u010dom sa \u00fato\u010dn\u00edk m\u00f4\u017ee presun\u00fa\u0165 do Prieskumn\u00edka.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Demon\u0161tra\u010dn\u00e9 video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Varianta 3<\/strong>. Pri nastaven\u00fdch obmedzeniach na sp\u00fa\u0161\u0165anie spustite\u013en\u00fdch s\u00faborov sa m\u00f4\u017ee \u00fato\u010dn\u00edk stretn\u00fa\u0165 so situ\u00e1ciou, kedy skupinov\u00e9 politiky zakazuj\u00fa sp\u00fa\u0161\u0165anie cmd.exe administr\u00e1torom.<\/p>\n<p><\/p>\n<p>Existuje sp\u00f4sob, ako to ob\u00eds\u0165 pomocou spustenia bat s\u00faboru na vzdialenom pracovnom stole s obsahom typu cmd.exe \/K . Chyba pri spusten\u00ed cmd a \u00faspe\u0161n\u00fd pr\u00edklad vykonania bat s\u00faboru s\u00fa uveden\u00e9 na obr\u00e1zku ni\u017e\u0161ie.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop o\u010dami \u00fato\u010dn\u00edka\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Varianta 4<\/strong>. Z\u00e1kaz sp\u00fa\u0161\u0165ania aplik\u00e1ci\u00ed pomocou \u010diernych zoznamov pod\u013ea n\u00e1zvu spustite\u013en\u00fdch s\u00faborov nie je v\u0161eliek, d\u00e1 sa to ob\u00eds\u0165. <\/p>\n<p><\/p>\n<p>Zv\u00e1\u017eme nasledovn\u00fd scen\u00e1r: zak\u00e1zali sme pr\u00edstup k pr\u00edkazov\u00e9mu riadku, zak\u00e1zali sme sp\u00fa\u0161\u0165anie Internet Explorer a PowerShell pomocou skupinov\u00fdch polit\u00edk. \u00dato\u010dn\u00edk sa sna\u017e\u00ed vyvola\u0165 pomoc \u2014 \u017eiadna odozva. Pok\u00fa\u0161a sa spusti\u0165 PowerShell cez kontextov\u00fa ponuku mod\u00e1lneho okna vyvolan\u00e9ho so stla\u010den\u00fdm kl\u00e1vesom Shift \u2014 spr\u00e1va o z\u00e1kaze sp\u00fa\u0161\u0165ania administr\u00e1torom. Pok\u00fa\u0161a sa spusti\u0165 PowerShell cez adresn\u00fd riadok \u2014 op\u00e4\u0165 \u017eiadna odozva. Ako ob\u00eds\u0165 toto obmedzenie? <\/p>\n<p><\/p>\n<p>Sta\u010d\u00ed skop\u00edrova\u0165 powershell.exe z prie\u010dinka C:\\Windows\\System32\\WindowsPowerShell\\v1.0 do pou\u017e\u00edvate\u013esk\u00e9ho prie\u010dinka, zmeni\u0165 n\u00e1zov na in\u00fd ako powershell.exe a mo\u017enos\u0165 spustenia sa objav\u00ed.<\/p>\n<p><\/p>\n<p>Predvolene je pri pripojen\u00ed k vzdialen\u00e9mu pracovn\u00e9ho stolu poskytnut\u00fd pr\u00edstup k lok\u00e1lnym diskom klienta, odkia\u013e m\u00f4\u017ee \u00fato\u010dn\u00edk skop\u00edrova\u0165 powershell.exe a po premenovan\u00ed spusti\u0165.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Demon\u0161tra\u010dn\u00e9 video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Predstavili sme len nieko\u013eko sp\u00f4sobov, ako ob\u00eds\u0165 obmedzenia; sc\u00e9n\u00e1rov sa d\u00e1 vymyslie\u0165 mnoho, ale v\u0161etky tieto techniky sp\u00e1ja pr\u00edstup k Prieskumn\u00edkovi Windows. Existuje mnoho aplik\u00e1ci\u00ed, ktor\u00e9 vyu\u017e\u00edvaj\u00fa \u0161tandardn\u00e9 mo\u017enosti Windows na pr\u00e1cu s nejak\u00fdmi s\u00fabormi, a ak ich vlo\u017e\u00edme do obmedzen\u00e9ho prostredia, m\u00f4\u017eeme aplikova\u0165 podobn\u00e9 techniky.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Odpor\u00fa\u010dania a z\u00e1ver<\/h1>\n<p><\/p>\n<p>Ako vid\u00edme, aj v obmedzenom prostred\u00ed existuje priestor na rozvoj \u00fatoku. Je v\u0161ak mo\u017en\u00e9 skomplikova\u0165 \u017eivot \u00fato\u010dn\u00edkovi. Predklad\u00e1me v\u0161eobecn\u00e9 odpor\u00fa\u010dania, ktor\u00e9 sa bud\u00fa hodi\u0165 ako v uveden\u00fdch pr\u00edpadoch, tak aj v in\u00fdch situ\u00e1ci\u00e1ch.<\/p>\n<p><\/p>\n<ul>\n<li>Obmedzte sp\u00fa\u0161\u0165anie programov pomocou \u010diernych\/bielych zoznamov a skupinov\u00fdch polit\u00edk.<br \/>\nVo v\u00e4\u010d\u0161ine pr\u00edpadov zost\u00e1va mo\u017enos\u0165 sp\u00fa\u0161\u0165ania k\u00f3du. Odpor\u00fa\u010dame obozn\u00e1mi\u0165 sa s projektom <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, aby ste mali predstavu o nedokumentovan\u00fdch sp\u00f4soboch manipul\u00e1cie so s\u00fabormi a vykon\u00e1van\u00edm k\u00f3du v syst\u00e9me.<br \/>\nOdpor\u00fa\u010dame kombinova\u0165 oba typy obmedzen\u00ed: napr\u00edklad m\u00f4\u017eete povoli\u0165 sp\u00fa\u0161\u0165anie vykonate\u013en\u00fdch s\u00faborov, ktor\u00e9 s\u00fa podp\u00edsan\u00e9 spolo\u010dnos\u0165ou Microsoft, ale obmedzi\u0165 sp\u00fa\u0161\u0165anie cmd.exe.<\/li>\n<li>Vypnite karty nastaven\u00ed Internet Explorer (m\u00f4\u017eete to urobi\u0165 lok\u00e1lne v registri). <\/li>\n<li>Pomocou regeditu vypnite pr\u00edstup k zabudovanej n\u00e1povede Windows.<\/li>\n<li>Zak\u00e1\u017ete mo\u017enos\u0165 montovania lok\u00e1lnych diskov pri vzdialen\u00fdch pripojeniach, ak toto obmedzenie nie je kritick\u00e9 pre pou\u017e\u00edvate\u013eov.<\/li>\n<li>Obmedzte pr\u00edstup k lok\u00e1lnym diskom vzdialen\u00e9ho po\u010d\u00edta\u010da, nechajte pr\u00edstup iba k pou\u017e\u00edvate\u013esk\u00fdm prie\u010dinkom.<\/li>\n<\/ul>\n<p><\/p>\n<p>D\u00fafame, \u017ee v\u00e1s to aspo\u0148 zaujalo a maxim\u00e1lne, \u017ee tento \u010dl\u00e1nok pom\u00f4\u017ee spravi\u0165 vzdialen\u00fa pr\u00e1cu va\u0161ej spolo\u010dnosti bezpe\u010dnej\u0161ou.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vzdialen\u00e1 plocha o\u010dami \u00fato\u010dn\u00edka | ProHoster","description":"1. \u00davod Spolo\u010dnosti, ktor\u00e9 nemali zorganizovan\u00e9 syst\u00e9my vzdialen\u00e9ho pr\u00edstupu, v n\u00fadzovom stave sp\u00fa\u0161\u0165ali ich pred p\u00e1r mesiacmi.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}