Mamiriro anosuruvarisa ane satellite Internet kuchengetedza

Pamusangano wekupedzisira Black Hat yakaratidzwa chirevo, yakatsaurirwa kumatambudziko ekuchengetedza musatellite Internet access systems. Munyori weshumo, achishandisa isingadhure DVB inogamuchira, yakaratidza mukana wekutora Internet traffic inofambiswa kuburikidza nesatellite yekutaurirana nzira.

Mutengi anogona kubatana kune satellite mupi kuburikidza neasymmetric kana symmetric chiteshi. Panyaya yeasymmetric chiteshi, traffic inobuda kubva kumutengi inotumirwa kuburikidza nemupi wepasi uye inogashirwa kuburikidza nesatellite. Mune symmetrical links, inobuda uye inouya traffic inopfuura nepasatellite. Mapaketi anotumirwa kune mutengi anotumirwa kubva kusatellite achishandisa nhepfenyuro yekushambadzira inosanganisira traffic kubva kune vakasiyana vatengi, zvisinei nenzvimbo yavo. Zvakanga zvisina kuoma kubata traffic yakadai, asi kubata traffic yaibva kumutengi kuburikidza nesatellite kwaisava nyore.

Kuchinjana data pakati pesetiraiti nemupi, kutapurirana kwakananga kunowanzo shandiswa, izvo zvinoda kuti munhu anorwisa ave makumi emakiromita kubva pazvivakwa zveanopa, uye zvakare anoshandisa akasiyana frequency renji uye encoding mafomati, kuongororwa kunoda inodhura mupi michina. . Asi kunyange kana mupi akashandisa zvakajairwa Ku-bhendi, sekutonga, mafambisirwo emativi akasiyana akasiyana, izvo zvinoda kushandiswa kwechipiri satellite dish uye kugadzirisa dambudziko rekuyerera kwerukova kuti ribate munzira mbiri.

Zvaifungidzirwa kuti kuronga kubatwa kwesatellite kutaurirana, michina yakakosha yaidiwa, iyo inodhura makumi ezviuru zvemadhora, asi muchokwadi kurwiswa kwakadaro kwakaitwa pachishandiswa. nguva dzose DVB-S tuner yesatellite terevhizheni (TBS 6983/6903) uye parabolic antenna. Mutengo wese wekiti yekurwiswa waive madhora mazana matatu. Kunongedza antenna kumasetellite, ruzivo rwaiwanikwa pachena nezve nzvimbo yemasatelliti rwakashandiswa, uye kuona nzira dzekutaurirana, chirongwa chakajairwa chakagadzirirwa kutsvaga satellite TV chiteshi chakashandiswa. Antenna yakanongedzerwa kune satellite uye maitiro ekuongorora akatanga Ku-band.

Zviteshi zvakaonekwa nekuona nhongonya muredhiyo frequency spectrum yaionekwa neruzha rwekumashure. Mushure mekuzivisa iyo yepamusoro, kadhi reDVB rakagadziridzwa kududzira uye kurekodha chiratidzo seyenguva dzose yedhijitari vhidhiyo kutepfenyura yesatellite terevhizheni. Nerubatsiro rwekumisikidza bvunzo, chimiro chetraffic chakatemwa uye data reInternet rakapatsanurwa kubva kudhijitari terevhizheni (kutsvagisa banal kwakashandiswa mudump rakapihwa neDVB kadhi uchishandisa "HTTP" mask, kana yawanikwa, yaifungidzirwa kuti. gwara rine data reInternet rakanga rawanikwa).

Chidzidzo chetraffic chakaratidza kuti vese vakaongororwa setiraiti Internet vanopa havashandise encryption nekukasira, izvo zvinobvumira kusingatadziswe kuteedzera traffic. Izvo zvakakosha kuti yambiro nezve satellite chengetedzo Internet matambudziko rakabudiswa makore gumi apfuura, asi kubvira ipapo mamiriro acho haana kuchinja, pasinei nekuiswa kwemaitiro matsva ekufambisa data. Shanduko kune itsva GSE (Generic Stream Encapsulation) protocol yekuvharira Internet traffic uye kushandiswa kwakaoma modulation masisitimu senge 32-dimensional amplitude modulation uye APSK (Phase Shift Keying) haina kuita kuti kurwisa kuome zvakanyanya, asi mutengo wemidziyo yekuvharira. ikozvino yadzikira kubva pa$50000 kusvika pa$300.

Chinhu chakakosha dhizaini kana uchitumira data kuburikidza nesetiraiti yekutaurirana nzira ndiko kunonoka kukuru mukutakura kwepaketi (~ 700 ms), inova makumi enguva yakakura kupfuura kunonoka pakutumira mapaketi kuburikidza nepasirese nzira dzekukurukurirana. Ichi chimiro chine maviri akakosha kukanganisa pakuchengetedza: kushomeka kwekushandiswa kwakapararira kweVPNs uye kushomeka kwedziviriro kubva ku spoofing (packet substitution). Zvinocherechedzwa kuti kushandiswa kweVPN kunononoka kutapurirana neanenge 90%, iyo, tichifunga kunonoka kukuru ivo pachavo, inoita kuti VPN isashande nematanho esatellite.

Kusagadzikana kwe spoofing kunotsanangurwa nenyaya yekuti munhu anorwisa anogona kunyatsoteerera traffic inouya kune akabatwa, izvo zvinoita kuti zvikwanise kuona nhamba dzekutevedzana mumapaketi eTCP anozivisa kubatana. Kana uchitumira pakiti yekunyepera kuburikidza nechiteshi chepasi, inenge yakavimbiswa kusvika pasati pakiti chaiyo inofambiswa kuburikidza nesatellite chiteshi nekunonoka kwenguva refu uye nekuwedzera kupfuura nemupi wekufambisa.

Zvinangwa zviri nyore zvekurwiswa kwevashandisi vesetiraiti network ndeye DNS traffic, isina kuvharirwa HTTP uye email, ayo anowanzo shandiswa nevatengi vasina kuvharirwa. Kune DNS, zviri nyore kuronga kutumira kwenhema DNS mhinduro dzinobatanidza dura kune server yeanorwisa (anorwisa anogona kuburitsa mhinduro yenhema pakarepo mushure mekunzwa chikumbiro mutraffic, nepo chikumbiro chaicho chichiri kufanira kupfuura nemupi anoshumira. iyo satellite traffic). Ongororo yetraffic email inokutendera kuti utore ruzivo rwakavanzika, semuenzaniso, unogona kutanga nzira yekudzoreredza password pawebhusaiti uye kunosora mutraffic meseji inotumirwa neemail ine kodhi yekusimbisa yekushanda.

Munguva yekuyedza, inenge 4 TB yedata yakafambiswa nemasatelliti gumi nemasere yakabatwa. Iyo yakashandiswa kugadzirisa mune mamwe mamiriro ezvinhu haina kupa yakavimbika kupindira kwekubatanidza nekuda kweiyo yakakwira chiratidzo-ku-ruzha reshiyo uye kugamuchirwa kwemapaketi asina kukwana, asi ruzivo rwakaunganidzwa rwakanga rwakakwana pakukanganisa. Mimwe mienzaniso yezvakawanikwa mune data yakabatwa:

• Ruzivo rwekufambisa uye imwe data yeavionics yakatumirwa kune ndege yakagamuchirwa. Ruzivo urwu haruna kungofambiswa pasina encryption, asi zvakare mune imwechete chiteshi ne traffic ye general on-board network, kuburikidza iyo vafambi vanotumira tsamba uye kuongorora mawebhusaiti.
• Chikamu Cookie chemutungamiriri wejenareta yemhepo kumaodzanyemba kweFrance, iyo yakabatana neiyo control system isina encryption, yakabatwa.
• Kuchinjana kweruzivo nezvematambudziko ehunyanzvi pangarava yeoiri yekuEgypt kwakabatwa. Pamusoro peruzivo rwekuti ngarava yaisazokwanisa kuenda kugungwa kweinenge mwedzi, ruzivo rwakagamuchirwa nezvezita uye nhamba yepasipoti yainjiniya ane basa rekugadzirisa dambudziko.
• Ngarava yengarava yaiendesa ruzivo rwakadzama nezve Windows-yakavakirwa nharaunda network, kusanganisira yekubatanidza data yakachengetwa muLDAP.
• Gweta reSpain rakatumira mutengi tsamba ine ruzivo rwenyaya iri kuuya.
• Munguva yekubatwa kwetraffic kune yacht yeGreek bhirioni, password yekudzoreredza account yakatumirwa neemail mumasevhisi eMicrosoft yakabatwa.

Source: opennet.ru