{"id":40151,"date":"2020-01-31T20:49:28","date_gmt":"2020-01-31T17:49:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/bitva-koderov-ya-protiv-togo-parnya-s-vnc"},"modified":"2020-01-31T20:49:28","modified_gmt":"2020-01-31T17:49:28","slug":"bitva-koderov-ya-protiv-togo-parnya-s-vnc","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/bitva-koderov-ya-protiv-togo-parnya-s-vnc","title":{"rendered":"Bitka programera: ja protiv onog tipa s VNC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V na ovom blogu<\/a><\/noindex> objavljeno je mnogo ra\u010dunalnih pri\u010da. Volim se prisjetiti svojih starih gluposti. Pa, evo jo\u0161 jedne takve pri\u010de.<\/p>\n

Prvi put sam se zainteresovao za ra\u010dunala, posebno programiranje, kada sam imao oko 11 godina. U po\u010detku srednje \u0161kole bo<\/b>ve\u0107i dio svog slobodnog vremena provodio sam igraju\u0107i se sa svojim C64 i pisao na Basicu, a onda sam \u0161karama rezal lo\u0161 kod. Ne \u0161alim se, \u0161karama<\/a><\/noindex>.<\/p>\n

Nakon \u0161kole (u dobi od oko 16 godina), britanska djeca obi\u010dno idu na fakultet, gdje biraju tri ili \u010detiri predmeta za studij prije nego \u0161to krenu na sveu\u010dili\u0161te. S obzirom na svoju ljubav prema be\u017eoj kutiji i kasetofonu kod ku\u0107e, odlu\u010dio sam da je studiranje 'informatike' na fakultetu pravi izbor.<\/p>\n

Kurs mi se svidio vi\u0161e nego \u0161to sam o\u010dekivao; tamo sam prvi put upoznao Pascal i Delphi.
\n<\/a><\/noindex>
\nIzme\u0111u nastave studenti su mogli raditi na bilo kojem slobodnom ra\u010dunalu u ra\u010dunalnoj dvorani. Zamislite: ogromna soba, predvi\u0111ena negdje za stotinu ljudi, s redovima stolova, natovarenih ra\u010dunalima \u2014 poput onih gdje je monitor na sistemskoj jedinici. Kontinuirano zujanje ventilatora, kuglice mi\u0161a grgu\u0107u po stolovima ne staju\u0107i ni sekunde. U zraku je \u010dudan miris, kao da se 50-100 tinejd\u017eera koji lu\u010de hormone povremeno mije\u0161a za hla\u0111enje stotina Pentium III \u010dipova.<\/p>\n

Bez obzira na rizike za zdravlje, volio sam sjesti za ra\u010dunalom kada god bih imao slobodnu minutu.<\/p>\n

U sobi je de\u017eurao admin, niskog mu\u0161karca srednjih godina, kojeg su izabrali za ovu ulogu zbog njegovog neizmjernog entuzijazma da postane zli dictator. Mislim da je tako. De\u017eurati \u2014 slabo re\u010deno, tip je stvarno volio svoj posao. Pru\u017eili su mu zadatak da odr\u017eava red, kako nitko ne bi koristio ra\u010dunalo za u\u010denje za ne\u0161to neprikladno.<\/p>\n

I do danas mi intuicija govori da je honorar admina bio izravno povezan s brojem studenata koje uhvati na djelu i izbaci iz ra\u010dunalne dvorane. Prakti\u010dki sam siguran da je tip prije vremena otplatio svoj hipoteku.<\/p>\n

Sedeo je u udaljenom kutu ra\u010dunarske sobe za uglastim stolom. I s sigurno\u0161\u0107u se moglo pretpostaviti da su njegovi plodni monitori prona\u0161li na\u010din da se razmno\u017eavaju s impresivno kratkim razdobljem trudno\u0107e \u2014 toliko ih je bilo mnogo. Ostajalo je samo naga\u0111ati prati li on stvarno sve njih. Naravno, \u0161alim se\u2026 spomenuo sam da je ozbiljno shva\u0107ao posao?<\/p>\n

Tada je ra\u010dunarska mre\u017ea radila pod operativnim sistemom Windows 2000. Ubrzo sam otkrio da se pri svakom prijavljivanju pokre\u0107e skripta koja pokre\u0107e VNC server s administratorskim ra\u010dunom za daljinski pristup radnoj povr\u0161ini. Svaki put kada je taj tip \u017eeleo da vas nadgleda, povezivao se direktno na va\u0161u ma\u0161inu i posmatrao. Bilo je to zastra\u0161uju\u0107e, a sada kada razmislim, verovatno i ilegalno.<\/p>\n

Nakon \u0161to sam se osposobio u Basicu i C64, sada sam pisao na C-u i \u010dak malo na C++. Tada sam se veoma zaljubio u jezik D, koji je ispravljao neke nedostatke C++-a, kako mi se tada \u010dinilo.<\/p>\n

Obi\u010dno sam ulazio u ra\u010dunalnu sobu kako bih pro\u010ditao ne\u0161to novo o D-u ili se igrao s kompajlerom Digital Mars D. Ponekad, ometaju\u0107i misli o velikoj budu\u0107nosti D-a, pisao sam kod na C-u za hakovanje drugih Win32 programa putem njihovih prozorskih deskriptora.<\/p>\n

U dobra stara vremena programiranja na Win32, pronala\u017eenje deskriptora prozora bila je najjednostavnija metoda za hakovanje drugih programa. O\u010digledno, sve programe s grafi\u010dkim korisni\u010dkim interfejsom u Windows-u imale su prozor, \u010dak i ako nije bio prikazan na ekranu. Pisaju\u0107i program za ekstrakciju deskriptora drugog procesa (\u0161tavi\u0161e, linka na njega), mogli ste mu slati poruke. To je omogu\u0107ilo obavljanje nekih osnovnih operacija, poput skrivanja\/prikazivanja prozora programa, kao i zaista kul stvari, poput prisiljavanja procesa da u\u010dita proizvoljnu DLL u svoj prostor memorije i zapo\u010dne izvr\u0161avanje koda. Nakon injekcije DLL-a po\u010dinjalo je najzanimljivije.<\/p>\n

V prvih petnajstih dneh me ta detektiv ni posebej motil, povezal se je z VNC stre\u017enikom na mojem ra\u010dunalniku le enkrat ali dvakrat. A ena posebna seja je verjetno prebudila njegovo zanimanje. Pisal sem nekak\u0161no kodo v C-ju za skrivanje oken Minesweeper (brez zapiranja), da bi bilo la\u017eje igrati v razredu, in takrat sem opazil, da je bela ikona VNC v sistemski vrstici postala \u010drna. To je pomenilo, da me zdaj opazuje.<\/p>\n

Nadaljeval sem s kodiranjem kot obi\u010dajno, posku\u0161al sem se \u010dim manj ukvarjati z njim. Medtem je ra\u010dunalnik za\u010del o\u010ditno zaostajati, ko je posku\u0161al prenesti maksimalno \u0161tevilo sli\u010dic na enega izmed mnogih monitorjev v kotu sobe. Windows je skoraj nehal odzivati se, ko je moje potrpljenje popustilo, iz sistema sem se odjavil in zaklju\u010dil za danes.<\/p>\n

Med naslednjimi obiski ra\u010dunalni\u0161ke sobe je Columbo skoraj vsakokrat pokazal \u017eivo zanimanje za to, kar delam. Pribli\u017eno po \u010detrtem obisku sem sklenil, da je treba s tem nekaj storiti.<\/p>\n

Predvidevam, da bi razumen, racionalen \u010dlovek preprosto postavil to vpra\u0161anje neposredno njemu ali njegovemu nadrejenemu. Vendar pa sem se vedno predal sku\u0161njavi in hitro prepri\u010dal sebe, da izberem povsem druga\u010dno strategijo.<\/p>\n

\u2014 Ni\u010d ne bo\u0161 mogel storiti brez tega VNC stre\u017enika! \u2014 sem si mirno odlo\u010deno rekel nekajkrat.<\/p>\n

Treba je bilo ubiti VNC.<\/p>\n

Za\u010del sem vstopati v ra\u010dunalni\u0161ko sobo z velikimi skupinami \u0161tudentov in sedeti \u010dim dlje od kota z monitorji. Nekaj \u010dasa je to delovalo in mi dalo malo \u010dasa za preverjanje idej.<\/p>\n

Moja prva poskusna, mislim, da se strinjate, je bila precej \u0161ibka. S klikom z desno tipko mi\u0161ke na ikono VNC v sistemski vrstici se je odprl meni z magi\u010dnimi \u010drkami E-X-I-T. Na \u017ealost so bile \u010drke napisane sivo obrobnim besedilom. Administrator je onemogo\u010dil izbiro v meniju 'Izhod' prek urejevanja skupinskih politik. Poskusil sem ubiti proces prek upravitelja opravil, a seveda je bil za mene neviden, saj je deloval pod drugo, bolj privilegirano ra\u010dunovodsko. Ni\u010d ni uspelo.<\/p>\n

VNC stre\u017enik deluje na TCP vratih 5900, sem se spomnil. Moj naslednji na\u010drt je bil, da na ta vrata po\u0161ljem po\u0161kodovane pakete, da bi ga ustavil.<\/p>\n

\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439 \u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043d\u0430 \u043f\u043e\u0440\u0442 5900 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u043e\u0440\u043c\u044b \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u043d\u0430\u0434\u0435\u0436\u0434\u0435 \u043d\u0430 \u0441\u0431\u043e\u0439. \u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u044d\u0442\u043e \u0442\u043e\u0436\u0435 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e.<\/p>\n

\u042f \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b \u0434\u0443\u043c\u0430\u0442\u044c, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0433\u0443 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u044d\u0442\u043e\u0439 \u0432\u0435\u0449\u0438, \u043a\u043e\u0433\u0434\u0430 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043e\u0441\u0435\u043d\u0438\u043b\u043e: \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u043e\u043a\u043d\u043e! \u041d\u0443\u0436\u043d\u043e \u0435\u0433\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0442\u044c. \u041c\u043e\u0436\u0435\u0442, \u0442\u0430\u043c \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u043d\u043e\u043f\u043a\u0430 \u00ab\u0412\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u00bb, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044f \u0441\u043c\u043e\u0433\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c!<\/p>\n

\u042f \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0432\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 C \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u043e\u043a\u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u2014 \u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0448\u0435\u043b VNC. \u042f \u0447\u0443\u0432\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0441\u0435\u0431\u044f \u043d\u0430 \u0441\u0435\u0434\u044c\u043c\u043e\u043c \u043d\u0435\u0431\u0435, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0431\u0440\u0430\u043b WM_SHOWWINDOW<\/code>. \u041f\u043e\u043f\u0440\u043e\u0431\u0443\u0439\u0442\u0435 \u0443\u0433\u0430\u0434\u0430\u0442\u044c, \u0447\u0442\u043e \u044f \u0443\u0432\u0438\u0434\u0435\u043b?<\/p>\n

\u041d\u0438\u0447\u0435\u0433\u043e!<\/p>\n

\u0422\u0435\u043f\u0435\u0440\u044c \u043c\u043d\u0435 \u0441\u0442\u0430\u043b\u043e \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u043e... \u0443 \u043d\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043a\u043d\u043e, \u043d\u043e \u043e\u043d\u043e \u043d\u0435 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043d\u0430 \u043c\u043e\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u042f \u0434\u0432\u0430\u0436\u0434\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u0441\u0432\u043e\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u041f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0433\u043e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445, \u0438 \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043e\u0442\u043b\u0438\u0447\u043d\u043e. \u042f \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u043a\u043d\u043e VNC, \u043d\u043e \u0442\u043e\u0436\u0435 \u043d\u0438\u0447\u0435\u0433\u043e.<\/p>\n

\u0418 \u0442\u0443\u0442 \u043c\u0435\u043d\u044f \u043e\u0441\u0435\u043d\u0438\u043b\u043e!<\/p>\n

\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0447\u0435\u043d\u044c \u0442\u043e\u043b\u0441\u0442\u043e\u0439 \u043a\u043d\u0438\u0433\u0438<\/a><\/noindex> \u0427\u0430\u0440\u043b\u044c\u0437\u0430 \u041f\u0435\u0442\u0446\u043e\u043b\u044c\u0434\u0430 \u044f \u0443\u0433\u043b\u0443\u0431\u0438\u043b\u0441\u044f \u0432 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 Win32 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Win32 \u0435\u0441\u0442\u044c \u043e\u043a\u043d\u043e \u0438 \u00ab\u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439\u00bb. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0430\u043c\u043e\u0439 Windows, \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0430 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0435\u0448\u0430\u0435\u0442, \u043a\u0430\u043a \u0438\u0445 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c.<\/p>\n

\u0421\u0430\u043c\u043e \u043f\u043e \u0441\u0435\u0431\u0435 \u044d\u0442\u043e \u043d\u0435 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435. \u041d\u043e \u043a\u043e\u0433\u0434\u0430 \u044f \u043f\u043e\u043d\u044f\u043b, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0437\u0430\u0432\u0438\u0441\u0448\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 Window Process Manager, \u043c\u0435\u043d\u044f \u043e\u0445\u0432\u0430\u0442\u0438\u043b\u043e \u0447\u0443\u0432\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u043e\u0442\u043e\u043d\u0438\u043d\u0430.<\/p>\n

\u041d\u0435 \u0442\u0435\u0440\u044f\u044f \u043d\u0438 \u0441\u0435\u043a\u0443\u043d\u0434\u044b, \u044f \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u043a \u0441\u0432\u043e\u0435\u043c\u0443 \u043a\u043e\u0434\u0443 \u043d\u0430 C, \u0433\u043e\u0442\u043e\u0432\u044f\u0441\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u043a\u043d\u043e VNC \u0435\u0449\u0435 \u043e\u0434\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 WM_SHOWWINDOW<\/code>. \u0412 \u0446\u0438\u043a\u043b\u0435. \u0412\u0435\u0447\u043d\u043e\u043c. \u0422\u0430\u043a \u0447\u0442\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 WM_SHOWWINDOW<\/code>, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u043d\u0430\u043b, VNC \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c... \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0442\u0440\u0430\u0445 \u0438 \u0440\u0438\u0441\u043a.<\/p>\n

\u042f \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b 4 \u041a\u0411 \u0441\u0430\u043c\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043e\u043b\u044e\u0431\u0438\u0432\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0436\u0438\u0437\u043d\u0438. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438 \u0441\u0435\u043a\u0443\u043d\u0434\u044b Windows \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441 vncserver.\u0435\u0445\u0435<\/code> \u043d\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043c\u043d\u0435 \u0447\u0442\u043e-\u0442\u043e, \u043e\u0442 \u0447\u0435\u0433\u043e \u044f \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043c\u043e\u0433 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f:<\/p>\n

\u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441?<\/b><\/i><\/p><\/blockquote>\n

\n\u0427\u0435\u0440\u0442 \u0432\u043e\u0437\u044c\u043c\u0438, \u0414\u0410!<\/p>\n

\u041f\u043e\u0437\u0432\u043e\u043b\u044c\u0442\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043d\u044f \u044f \u0431\u044b\u043b \u043d\u0435\u0432\u044b\u043d\u043e\u0441\u0438\u043c\u043e \u0434\u043e\u0432\u043e\u043b\u0435\u043d \u0441\u043e\u0431\u043e\u0439.<\/p>\n

Po nekaj urah, pre\u017eivetih z obdelovanjem svoje nove supermo\u010di, sem se odlo\u010dil, kako jo bom izkoristil. Preprosto ubiti sejo pred njim bi bilo preprosto. Imel sem bolj\u0161o idejo \u2013 preprosto izginiti.<\/p>\n

Po vajanja s programiranjem socketov<\/a><\/noindex> Ugotovil sem, da lahko napi\u0161em kodo, ki bo naredila dve stvari. Najprej bo zasedla nedavno spro\u0161\u010den TCP port 5900, ki ga je prej zasedal nevedni proces VNC stre\u017enika. Nato bo ustvarila novo TCP povezavo z VNC stre\u017enikom dolo\u010denega ra\u010dunalnika. Koda bo preprosto proxy-irala vse podatke med dvema socketoma, Colombo bo mislil, da se povezuje z mano, medtem ko se v resnici povezuje z povsem drugim VNC stre\u017enikom.<\/p>\n

Moja koda bo delovala kot skrivni most med mano in kak\u0161no drugo revno du\u0161o po moji izbiri. To je bilo \u010dudovito.<\/p>\n

Takoj sem se lotil pisanja svojega ponarejenega VNC mostu. Colombo se je ve\u010dkrat povezoval z mano, jaz pa sem \u0161e naprej programiral pred njegovimi o\u010dmi. Pri\u0161el sem do zaklju\u010dka, da nima pojma o mojih dejanjih, \u010deprav sem pisal o\u010ditne stvari, kot so \u0161tevilke portov in komentarji, kot so \/\/ \u041f\u0440\u043e\u0449\u0430\u0439, \u0436\u0443\u0442\u043a\u0438\u0439 \u0448\u043f\u0438\u043e\u043d VNC<\/code>.<\/p>\n

\u010cez nekaj dni mi nikakor ni uspelo spraviti kode v pravilno delovanje. Kar je \u0161e slab\u0161e, sem neprekinjeno delal s \u010drnim VNC znakom v sistemski plati. Dokler je bil povezan, nisem mogel sprostiti porta, da bi preveril svojo kodo.<\/p>\n

Ko bi takrat vedel o netcat<\/code>!<\/p>\n

Nazadnje so \u017eivci popustili, vseeno sem bil nestrpen 17-letnik. Spet sem opazoval, kako se bel znak VNC stre\u017enika spremeni v \u010drnega, in sem obupno odprl prvotno kodo, ki je napolnila \u010dakalno vrsto, ter jo zagnal pred njegovimi o\u010dmi. Tudi po\u010dakal sem nekaj sekund, preden sem pritisnil Konec procesa<\/code>, samo da se prepri\u010dam, da to vidi.<\/p>\n

\u010ce me pritisk na ta gumb \u0161e ni popolnoma prepri\u010dal, da je bilo vredno, je njegov skok iz utrdbe monitorjev, da bi mi hitro pristopil in me izgnal iz sobe, zagotovo bil vredno.<\/p>\n

Na koncu so mi prepovedali dostop do omre\u017eja za dva tedna. Pravi\u010dna kazen, sem si mislil. Pribli\u017eno tri tedne pozneje je stre\u017enik VNC izginil iz zagonskih skript in se ve\u010d nikoli ni pojavil. Nikoli nisem izvedel, ali je imela moja situacija kak\u0161en vpliv na to ali ne, a je povsem uni\u010dila moj na\u010drt in sanje o bogatenju s prodajo svojega VNC orodja zatiranim \u0161tudentom v ra\u010dunalni\u0161kih u\u010dilnicah po vsej dr\u017eavi.
\n
Izvor: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044d\u0442\u043e\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u043d\u0435\u043c\u0430\u043b\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u0441\u043a\u0438\u0445 \u0431\u0430\u0435\u043a. \u041c\u043d\u0435 \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u0442\u044c \u043e \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u0433\u043b\u0443\u043f\u043e\u0441\u0442\u044f\u0445. \u0427\u0442\u043e \u0436, \u0432\u043e\u0442 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0442\u0430\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f. \u042f \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0441\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0433\u0434\u0430 \u043c\u043d\u0435 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 11 \u043b\u0435\u0442. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0448\u043a\u043e\u043b\u044b \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u044f \u0432\u043e\u0437\u0438\u043b\u0441\u044f \u0441\u043e \u0441\u0432\u043e\u0438\u043c C64 \u0438 \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0411\u0435\u0439\u0441\u0438\u043a\u0435, \u0430 \u043f\u043e\u0442\u043e\u043c \u0432\u044b\u0440\u0435\u0437\u0430\u043b \u043d\u043e\u0436\u043d\u0438\u0446\u0430\u043c\u0438 \u043f\u043b\u043e\u0445\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40151","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bitka kodirnikov: jaz proti tistemu tipu z VNC | ProHoster","description":"Na tem blogu je objavljenih mnogo programerjem pri\u0161itih zgodb. Rad se spominjam svojih starih neumnosti.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/bitva-koderov-ya-protiv-togo-parnya-s-vnc","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0438\u0442\u0432\u0430 \u043a\u043e\u0434\u0435\u0440\u043e\u0432: \u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u043e\u0433\u043e \u043f\u0430\u0440\u043d\u044f \u0441 VNC | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u043d\u0435\u043c\u0430\u043b\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u0441\u043a\u0438\u0445 \u0431\u0430\u0435\u043a. \u041c\u043d\u0435 \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u0442\u044c \u043e \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u0433\u043b\u0443\u043f\u043e\u0441\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/sl\/blog\/bitva-koderov-ya-protiv-togo-parnya-s-vnc","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-31T17:49:28+00:00","article:modified_time":"2020-01-31T17:49:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40151","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:44:38","updated":"2022-09-29 08:39:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/40151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=40151"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/40151\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=40151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=40151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=40151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}