{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 teknika e re MITM-e p\u00ebr sulmet n\u00eb HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup studiuesish nga disa universitete n\u00eb Gjermani ka zhvilluar nj\u00eb metod\u00eb t\u00eb re sulmi MITM mbi HTTPS, e cila lejon nxjerrjen e cookie-ve me identifikues seance dhe t\u00eb dh\u00ebna t\u00eb tjera t\u00eb ndjeshme, si dhe ekzekutimin e kodit t\u00eb rastit JavaScript n\u00eb kontekstin e nj\u00eb faqeje tjet\u00ebr. Sulmi mori emrin ALPACA dhe mund t\u00eb aplikoj\u00eb ndaj server\u00ebve TLS q\u00eb implementojn\u00eb protokolle t\u00eb ndryshme t\u00eb nivelit aplikativ (HTTPS, SFTP, SMTP, IMAP, POP3), por q\u00eb p\u00ebrdorin certifikata TLS t\u00eb p\u00ebrbashk\u00ebta.      <\/p>\n<p>Kjo sulm bazohet n\u00eb faktin se, duke pasur kontroll mbi portin e rrjetit ose pik\u00ebn e qasjes pa tela, sulmuesi mund t\u00eb me drejt\u00eb redirektoj\u00eb trafikun web n\u00eb nj\u00eb port tjet\u00ebr rrjeti dhe t\u00eb organizoj\u00eb vendosjen e nj\u00eb lidhjeje me nj\u00eb server FTP ose me nj\u00eb server t\u00eb post\u00ebs elektronike q\u00eb mb\u00ebshtesin enkriptimin TLS dhe p\u00ebrdorin nj\u00eb certifikat\u00eb TLS t\u00eb p\u00ebrbashk\u00ebt me serverin HTTP, dhe shfletuesi i p\u00ebrdoruesit do t\u00eb mendoj\u00eb se \u00ebsht\u00eb vendosur lidhja me serverin HTTP t\u00eb k\u00ebrkuar. Duke pasur parasysh se protokolli TLS \u00ebsht\u00eb universale dhe i pap\u00ebrshtatur me protokollet e nivelit aplikativ, vendosja e nj\u00eb lidhjeje t\u00eb enkriptuar p\u00ebr t\u00eb gjitha sh\u00ebrbimet \u00ebsht\u00eb e nj\u00ebjt\u00eb dhe gabimi n\u00eb d\u00ebrgimin e nj\u00eb k\u00ebrkese n\u00eb sh\u00ebrbimin e gabuar mund t\u00eb identifikohet vet\u00ebm pas vendosjes s\u00eb seanc\u00ebs s\u00eb enkriptuar gjat\u00eb p\u00ebrpunimit t\u00eb komandave t\u00eb d\u00ebrguara.     <\/p>\n<p>Prandaj, n\u00ebse, p\u00ebr shembull, redirektohet lidhja e p\u00ebrdoruesit, fillimisht drejtuar HTTPS, n\u00eb nj\u00eb server t\u00eb post\u00ebs elektronike, i cili p\u00ebrdor nj\u00eb certifikat\u00eb t\u00eb p\u00ebrbashk\u00ebt me serverin HTTPS, lidhja TLS do t\u00eb vendoset me sukses, por serveri i post\u00ebs nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb trajtoj\u00eb komandat HTTP t\u00eb d\u00ebrguara dhe do t\u00eb kthej\u00eb nj\u00eb p\u00ebrgjigje me kod gabimi. Ky p\u00ebrgjigje do t\u00eb trajtohet nga shfletuesi si nj\u00eb p\u00ebrgjigje e faqes s\u00eb k\u00ebrkuar, brenda nj\u00eb kanali t\u00eb komunikimit t\u00eb enkriptuar t\u00eb vendosur sakt\u00eb.        <\/p>\n<p>Jan\u00eb ofruar tri variante sulmi:   <\/p>\n<ul>\n<li class=\"l\"> \u00abNgarko\u00bb p\u00ebr t\u00eb nxjerr\u00eb Cookie me parametrat e autentikimit. Metoda \u00ebsht\u00eb e aplikueshme n\u00ebse serveri FTP i mbuluar nga TLS lejon ngarkimin dhe nxjerrjen e t\u00eb dh\u00ebnave t\u00eb tij. N\u00eb k\u00ebt\u00eb variant t\u00eb sulmit, sulmuesi mund t\u00eb arrij\u00eb t\u00eb ruaj\u00eb pjes\u00eb t\u00eb k\u00ebrkes\u00ebs origjinale HTTP t\u00eb p\u00ebrdoruesit, si\u00e7 \u00ebsht\u00eb p\u00ebrmbajtja e headers Cookie, p\u00ebr shembull, n\u00ebse serveri FTP e interpreton k\u00ebrkes\u00ebn si nj\u00eb sked\u00eb p\u00ebr ruajtje ose e regjistron plot\u00ebsisht k\u00ebrkesat e ardhshme. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm, sulmuesi ka nevoj\u00eb pastaj t\u00eb nxjerr\u00eb ndonj\u00eb m\u00ebnyr\u00eb p\u00ebrmbajtjen e ruajtur. Sulmi \u00ebsht\u00eb i aplikuesh\u00ebm p\u00ebr Proftpd, Microsoft IIS, vsftpd, filezilla dhe serv-u.\n<li class=\"l\"> \u00abShkarko\u00bb p\u00ebr organizimin e script-imit nd\u00ebr-sit\u00ebsor (XSS). Metoda parashikon q\u00eb sulmuesi, si rezultat i disa manipulimeve t\u00eb ve\u00e7anta, mund t\u00eb vendos\u00eb t\u00eb dh\u00ebna n\u00eb nj\u00eb sh\u00ebrbim q\u00eb p\u00ebrdor ndarjen e p\u00ebrgjithshme. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/ssl-sertifikat\/\"   title=\"certifikata TLS\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">certifikata TLS<\/a>, t\u00eb cilat m\u00eb pas mund t\u00eb nxirren n\u00eb p\u00ebrgjigjen ndaj k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit. Sulmi \u00ebsht\u00eb i aplikuesh\u00ebm p\u00ebr server\u00ebt FTP t\u00eb p\u00ebrmendur m\u00eb lart, server\u00ebt IMAP dhe server\u00ebt POP3 (courier, cyrus, kerio-connect dhe zimbra).\n<li class=\"l\"> \u00abReflektimi\u00bb p\u00ebr t\u00eb ekzekutuar JavaScript n\u00eb kontekstin e nj\u00eb siti tjet\u00ebr. Metoda bazohet n\u00eb kthimin te klienti t\u00eb pjes\u00ebs s\u00eb k\u00ebrkes\u00ebs, n\u00eb t\u00eb cil\u00ebn p\u00ebrfshihet kodi JavaScript i d\u00ebrguar nga sulmuesi. Sulmi \u00ebsht\u00eb i aplikuesh\u00ebm p\u00ebr server\u00ebt FTP t\u00eb p\u00ebrmendur m\u00eb lart, server\u00ebt IMAP cyrus, kerio-connect dhe zimbra, si dhe p\u00ebr serverin SMTP sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re sulmesh MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>P\u00ebr shembull, kur p\u00ebrdoruesi hap nj\u00eb faqe q\u00eb kontrollohet nga sulmuesit, nga kjo faqe mund t\u00eb iniciar nj\u00eb k\u00ebrkes\u00eb burimi nga nj\u00eb site ku p\u00ebrdoruesi ka nj\u00eb llogari aktive (p.sh., bank.com). Gjat\u00eb sulmit MITM, kjo k\u00ebrkes\u00eb, e adresuar n\u00eb faqen e bank.com, mund t\u00eb ridrejtohet n\u00eb serverin e post\u00ebs, i cili p\u00ebrdor nj\u00eb TLS t\u00eb p\u00ebrbashk\u00ebt me bank.com. Duke qen\u00eb se serveri i post\u00ebs nuk p\u00ebrfundon seanc\u00ebn pas gabimit t\u00eb par\u00eb, headers dhe komandat sh\u00ebrbimore, si \u00abPOST \/ HTTP\/1.1\u00bb dhe \u00abHost:\u00bb, do t\u00eb p\u00ebrpunohen si komanda t\u00eb panjohura (serveri i post\u00ebs do t\u00eb kthej\u00eb p\u00ebr \u00e7do header \u00ab500 komanda e pa njohur\u00bb).     <\/p>\n<p>Serveri i post\u00ebs nuk e interpreton ve\u00e7orit\u00eb e protokollit HTTP dhe p\u00ebr t\u00eb, kokat sh\u00ebrbyese dhe blloku i t\u00eb dh\u00ebnave t\u00eb k\u00ebrkes\u00ebs POST p\u00ebrpunohen nj\u00eblloj, prandaj n\u00eb trupin e k\u00ebrkes\u00ebs POST mund t\u00eb tregohet nj\u00eb varg me komand\u00ebn p\u00ebr serverin e post\u00ebs. P\u00ebr shembull, mund t\u00eb d\u00ebrgoni: MAIL FROM:  n\u00eb p\u00ebrgjigje, serveri i post\u00ebs do t\u00eb kthej\u00eb nj\u00eb mesazh gabimi 501 : adres\u00eb t\u00eb deformuar: alert(1); nuk mund t\u00eb ndjek\u00eb      <\/p>\n<p>Kjo p\u00ebrgjigje do ta marr\u00eb shfletuesi i p\u00ebrdoruesit, i cili do t\u00eb ekzekutoj\u00eb kodin JavaScript n\u00eb kontekstin e nj\u00eb faqeje q\u00eb nuk \u00ebsht\u00eb nga fillimisht e hapur nga sulmuesi, por faqeja bank.com, e cila i jepej k\u00ebrkes\u00ebs, ngase p\u00ebrgjigja kishte mb\u00ebrritur brenda nj\u00eb seance t\u00eb sakt\u00eb TLS, certifikata e s\u00eb cil\u00ebs kishte konfirmuar autentikimin e p\u00ebrgjigjes bank.com.     <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re sulmesh MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Skandimi i rrjetit global ka treguar se rreth 1.4 milion server\u00eb web jan\u00eb t\u00eb ekspozuar ndaj nj\u00eb problemi m\u00eb t\u00eb gjer\u00eb, p\u00ebr t\u00eb cil\u00ebt \u00ebsht\u00eb e mundur kryerja e nj\u00eb sulmi me kombinimin e k\u00ebrkesave p\u00ebr protokolle t\u00eb ndryshme. Mund\u00ebsia reale e kryerjes s\u00eb nj\u00eb sulmi \u00ebsht\u00eb p\u00ebrcaktuar p\u00ebr 119 mij\u00eb server\u00eb web, p\u00ebr t\u00eb cil\u00ebt ka qen\u00eb e pranishme zgjidhja TLS nga protokolle t\u00eb tjera aplikativ\u00eb.        <\/p>\n<p>Shembujt e eksploit\u00ebve jan\u00eb p\u00ebrgatitur p\u00ebr server\u00ebt ftp si pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla dhe serv-u, p\u00ebr server\u00ebt IMAP dhe POP3 dovecot, courier, exchange, cyrus, kerio-connect dhe zimbra, p\u00ebr server\u00ebt SMTP postfix, exim, sendmail, mailenable, mdaemon dhe opensmtpd. K\u00ebrkuesit kan\u00eb studiuar mund\u00ebsin\u00eb e kryerjes s\u00eb sulmit vet\u00ebm n\u00eb lidhje me server\u00ebt FTP, SMTP, IMAP dhe POP3, megjithat\u00eb nuk p\u00ebrjashtohet q\u00eb problemi t\u00eb shfaqet edhe p\u00ebr protokolle t\u00eb tjera aplikativ\u00eb q\u00eb p\u00ebrdorin TLS.     <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re sulmesh MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>P\u00ebr bllokimin e sulmit, sugjerohet p\u00ebrdorimi i zgjerimit ALPN (Negociata e Protokollit t\u00eb Nivelit Aplikativ) p\u00ebr t\u00eb negociuar seanc\u00ebn TLS n\u00eb p\u00ebrputhje me protokollin aplikativ dhe zgjerimin SNI (T\u00eb Dh\u00ebnat e Emrit t\u00eb Serverit) p\u00ebr t\u00eb lidhur me emrin e hostit n\u00eb rastin e p\u00ebrdorimit t\u00eb certifikatet TLS q\u00eb mbulojn\u00eb disa. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/domain\/\"   title=\"emrave t\u00eb domain-eve\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">emrave t\u00eb domain-eve<\/a>N\u00eb an\u00ebn e aplikacioneve, rekomandohet t\u00eb kufizohet limiti i numrit t\u00eb gabimeve gjat\u00eb p\u00ebrpunimit t\u00eb komandave, pas t\u00eb cilave duhet t\u00eb nd\u00ebrpritet lidhja. Procesi i nd\u00ebrtimit t\u00eb masave p\u00ebr bllokimin e sulmit ka filluar q\u00eb n\u00eb tetor t\u00eb vitit t\u00eb kaluar. Masa t\u00eb tilla mbrojt\u00ebse tashm\u00eb jan\u00eb pranuar n\u00eb Nginx 1.21.0 (post\u00eb proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZill, crypto\/tls (Go) dhe Internet Explorer.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 nj\u00eb teknik\u00eb e re sulmesh MITM ndaj HTTPS | ProHoster","description":"Nj\u00eb grup k\u00ebrkuesish nga disa universitete n\u00eb Gjermani ka zhvilluar nj\u00eb metod\u00eb t\u00eb re sulmi MITM ndaj HTTPS, e cila mund\u00ebson nxjerrjen e Cookie me identifikues sesioni dhe t\u00eb dh\u00ebna t\u00eb tjera t\u00eb ndjeshme, si dhe ekzekutimin e kodit t\u00eb ndonj\u00eb JavaScript n\u00eb kontekstin e nj\u00eb faqe tjet\u00ebr. Sulmi \u00ebsht\u00eb em\u00ebruar ALPACA dhe mund t\u00eb aplikohet ndaj server\u00ebve TLS q\u00eb implementojn\u00eb protokolle t\u00eb ndryshme t\u00eb nivelit aplikativ (HTTPS, SFTP, SMTP, IMAP, POP3), por","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}