{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2014 nj\u00eb teknik\u00eb e re e sulmeve MITM ndaj HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup studiuesish nga disa universitete gjermane ka zhvilluar nj\u00eb metod\u00eb t\u00eb re t\u00eb sulmit MITM ndaj HTTPS, e cila b\u00ebn t\u00eb mundur nxjerrjen e Cookie me identifikuesit e sesionit dhe t\u00eb dh\u00ebna t\u00eb tjera konfidenciale, si edhe ekzekutimin e kodit arbitrar JavaScript n\u00eb kontekstin e nj\u00eb faqeje tjet\u00ebr. Sulmi \u00ebsht\u00eb quajtur ALPACA dhe mund t\u00eb aplikohet ndaj server\u00ebve TLS q\u00eb implementojn\u00eb protokolle t\u00eb ndryshme t\u00eb shtres\u00ebs s\u00eb aplikacionit (HTTPS, SFTP, SMTP, IMAP, POP3), por p\u00ebrdorin certifikata t\u00eb p\u00ebrbashk\u00ebta TLS.      <\/p>\n<p>Thelbi i sulmit \u00ebsht\u00eb se, n\u00ebse sulmuesi ka kontroll mbi gateway-in e rrjetit ose mbi nj\u00eb pik\u00eb aksesi me val\u00eb, ai mund ta ridrejtoj\u00eb trafikun web n\u00eb nj\u00eb port tjet\u00ebr rrjeti dhe t\u00eb organizoj\u00eb krijimin e nj\u00eb lidhjeje me nj\u00eb server FTP ose server poste q\u00eb mb\u00ebshtet enkriptimin TLS dhe p\u00ebrdor t\u00eb nj\u00ebjt\u00ebn certifikat\u00eb TLS si serveri HTTP, nd\u00ebrsa shfletuesi i p\u00ebrdoruesit do t\u00eb besoj\u00eb se \u00ebsht\u00eb vendosur lidhje me serverin HTTP t\u00eb k\u00ebrkuar. Meqen\u00ebse protokolli TLS \u00ebsht\u00eb universal dhe nuk lidhet me protokollet e shtres\u00ebs s\u00eb aplikacionit, krijimi i nj\u00eb lidhjeje t\u00eb enkriptuar \u00ebsht\u00eb identik p\u00ebr t\u00eb gjitha sh\u00ebrbimet, dhe gabimi i d\u00ebrgimit t\u00eb k\u00ebrkes\u00ebs te sh\u00ebrbimi i gabuar mund t\u00eb zbulohet vet\u00ebm pas vendosjes s\u00eb sesionit t\u00eb enkriptuar, gjat\u00eb p\u00ebrpunimit t\u00eb komandave t\u00eb k\u00ebrkes\u00ebs s\u00eb d\u00ebrguar.     <\/p>\n<p>Prandaj, n\u00ebse p\u00ebr shembull lidhja e p\u00ebrdoruesit, e destinuar fillimisht p\u00ebr HTTPS, ridrejtohet te nj\u00eb server poste ku p\u00ebrdoret e nj\u00ebjta certifikat\u00eb si te serveri HTTPS, lidhja TLS do t\u00eb vendoset me sukses, por serveri i post\u00ebs nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb p\u00ebrpunoj\u00eb komandat HTTP t\u00eb d\u00ebrguara dhe do t\u00eb kthej\u00eb nj\u00eb p\u00ebrgjigje me kod gabimi. Kjo p\u00ebrgjigje do t\u00eb p\u00ebrpunohet nga shfletuesi si p\u00ebrgjigjja e faqes s\u00eb k\u00ebrkuar, e transmetuar brenda nj\u00eb kanali komunikimi t\u00eb enkriptuar t\u00eb vendosur sakt\u00eb.        <\/p>\n<p>Jan\u00eb propozuar tre variante t\u00eb sulmit:   <\/p>\n<ul>\n<li class=\"l\"> \u00abNgarko\u00bb p\u00ebr nxjerrjen e Cookies me parametrat e autentifikimit. Metoda \u00ebsht\u00eb e zbatueshme n\u00ebse FTP-serveri, i mbrojtur me certifikat\u00ebn TLS, lejon ngarkimin dhe nxjerrjen e t\u00eb dh\u00ebnave t\u00eb tij. N\u00eb k\u00ebt\u00eb variant sulmi, sulmuesi mund t\u00eb arrij\u00eb t\u00eb ruaj\u00eb pjes\u00eb t\u00eb k\u00ebrkes\u00ebs origjinale t\u00eb HTTP-s\u00eb t\u00eb p\u00ebrdoruesit, si\u00e7 \u00ebsht\u00eb p\u00ebrmbajtja e kok\u00ebs s\u00eb Cookies, p\u00ebr shembull, n\u00ebse FTP-serveri e interpreton k\u00ebrkes\u00ebn si nj\u00eb sked\u00eb p\u00ebr ruajtje ose plot\u00ebsisht e regjistron k\u00ebrkesat e ardhshme. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm, sulmuesi m\u00eb pas duhet t\u00eb gjej\u00eb nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb nxjerr\u00eb p\u00ebrmbajtjen e ruajtur. Sulmi \u00ebsht\u00eb i zbatuesh\u00ebm p\u00ebr Proftpd, Microsoft IIS, vsftpd, filezilla dhe serv-u.\n<li class=\"l\"> \u00abShkarko\u00bb p\u00ebr organizimin e skriptimit nd\u00ebr-sitore (XSS). Metoda supozon q\u00eb sulmuesi, si rezultat i ndonj\u00eb manipulimi t\u00eb ve\u00e7ant\u00eb, mund t\u00eb vendos\u00eb t\u00eb dh\u00ebna n\u00eb nj\u00eb sh\u00ebrbim q\u00eb p\u00ebrdor t\u00eb p\u00ebrbashk\u00ebt <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/ssl-sertifikat\/\"   title=\"TLS-certifikat\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS-certifikat<\/a>, t\u00eb cilat m\u00eb pas mund t\u00eb kthehen si p\u00ebrgjigje ndaj k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit. Sulmi zbatohet ndaj server\u00ebve FTP t\u00eb p\u00ebrmendur m\u00eb sip\u00ebr, server\u00ebve IMAP dhe server\u00ebve POP3 (courier, cyrus, kerio-connect dhe zimbra).\n<li class=\"l\"> \u00abReflektim\u00bb p\u00ebr ekzekutimin e JavaScript n\u00eb kontekstin e nj\u00eb site tjet\u00ebr. Metoda bazohet n\u00eb kthimin e klientit nj\u00eb pjes\u00eb t\u00eb k\u00ebrkes\u00ebs, n\u00eb t\u00eb cil\u00ebn gjendet kodi JavaScript i d\u00ebrguar nga sulmuesi. Sulmi \u00ebsht\u00eb i zbatuesh\u00ebm p\u00ebr FTP-server\u00ebt e p\u00ebrmendur m\u00eb sip\u00ebr, server\u00ebt IMAP si cyrus, kerio-connect dhe zimbra, si dhe p\u00ebr serverin SMTP sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re e sulmeve MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>P\u00ebr shembull, kur p\u00ebrdoruesi hap nj\u00eb faqe t\u00eb kontrolluar nga sulmuesit, nga kjo faqe mund t\u00eb inicirohet nj\u00eb k\u00ebrkes\u00eb p\u00ebr burimin nga nj\u00eb sit ku p\u00ebrdoruesi ka nj\u00eb llogari aktive (p\u00ebr shembull, bank.com). Gjat\u00eb sulmit MITM, kjo k\u00ebrkes\u00eb, e adresuar web-saitit bank.com, mund t\u00eb redirektohet n\u00eb serverin e post\u00ebs q\u00eb p\u00ebrdor nj\u00eb certifikat TLS t\u00eb p\u00ebrbashk\u00ebt me bank.com. Duke qen\u00eb se serveri i post\u00ebs nuk e p\u00ebrfundon seanc\u00ebn pas gabimit t\u00eb par\u00eb, kokat dhe komandat sh\u00ebrbimi, si \u00abPOST \/ HTTP\/1.1\u00bb dhe \u00abHost:\u00bb, do t\u00eb p\u00ebrpunohen si komanda t\u00eb panjohura (serveri i post\u00ebs do t\u00eb kthej\u00eb p\u00ebr \u00e7do kok\u00eb \u00ab500 unrecognized command\u00bb).     <\/p>\n<p>Serveri i post\u00ebs nuk i analizon ve\u00e7orit\u00eb e protokollit HTTP dhe, p\u00ebr t\u00eb, header-at e sh\u00ebrbimit dhe blloku i t\u00eb dh\u00ebnave t\u00eb k\u00ebrkes\u00ebs POST p\u00ebrpunohen nj\u00ebsoj, prandaj n\u00eb trupin e k\u00ebrkes\u00ebs POST mund t\u00eb specifikohet nj\u00eb rresht me komand\u00eb p\u00ebr serverin e post\u00ebs. P\u00ebr shembull, mund t\u00eb d\u00ebrgohet:       MAIL FROM:     ndaj s\u00eb cil\u00ebs serveri i post\u00ebs do t\u00eb kthej\u00eb mesazhin e gabimit         501 : malformed address: alert(1); may not follow      <\/p>\n<p>K\u00ebt\u00eb p\u00ebrgjigje do ta marr\u00eb shfletuesi i p\u00ebrdoruesit, i cili do t\u00eb ekzekutoj\u00eb kodin JavaScript n\u00eb kontekstin jo t\u00eb sajtit t\u00eb sulmuesit t\u00eb hapur fillimisht, por t\u00eb sajtit bank.com, ku u d\u00ebrgua k\u00ebrkesa, pasi p\u00ebrgjigjja vjen brenda nj\u00eb sesioni t\u00eb vlefsh\u00ebm TLS, certifikata e t\u00eb cilit konfirmoi autenticitetin e p\u00ebrgjigjes nga bank.com.     <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re e sulmeve MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Skanimi i rrjetit global tregoi se, n\u00eb form\u00ebn e saj t\u00eb p\u00ebrgjithshme, problemi prek rreth 1.4 milion web-server\u00eb, p\u00ebr t\u00eb cil\u00ebt \u00ebsht\u00eb e mundur t\u00eb kryhet nj\u00eb sulm me p\u00ebrzierje k\u00ebrkesash sipas protokolleve t\u00eb ndryshme. Mund\u00ebsia e realizimit praktik t\u00eb sulmit u konfirmua p\u00ebr 119 mij\u00eb web-server\u00eb, ku ishin t\u00eb pranish\u00ebm edhe server\u00eb TLS shoq\u00ebrues t\u00eb bazuar n\u00eb protokolle t\u00eb tjera t\u00eb shtres\u00ebs s\u00eb aplikacionit.        <\/p>\n<p>Jan\u00eb p\u00ebrgatitur shembuj exploit-esh p\u00ebr FTP-server\u00ebt pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla dhe serv-u, p\u00ebr server\u00ebt IMAP dhe POP3 dovecot, courier, exchange, cyrus, kerio-connect dhe zimbra, si edhe p\u00ebr SMTP-server\u00ebt postfix, exim, sendmail, mailenable, mdaemon dhe opensmtpd. Studiuesit kan\u00eb analizuar mund\u00ebsin\u00eb e kryerjes s\u00eb sulmit vet\u00ebm n\u00eb kombinim me server\u00eb FTP, SMTP, IMAP dhe POP3, megjithat\u00eb nuk p\u00ebrjashtohet q\u00eb problemi t\u00eb shfaqet edhe te protokolle t\u00eb tjera t\u00eb shtres\u00ebs s\u00eb aplikacionit q\u00eb p\u00ebrdorin TLS.     <center><img decoding=\"async\" alt=\"ALPACA - nj\u00eb teknik\u00eb e re e sulmeve MITM ndaj HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>P\u00ebr t\u00eb bllokuar sulmin, \u00ebsht\u00eb propozuar p\u00ebrdorimi i zgjerimit ALPN (Application Layer Protocol Negotiation) p\u00ebr t\u00eb negociuar sesionin TLS duke marr\u00eb parasysh protokollin e aplikacionit, si dhe zgjerimi SNI (Server Name Indication) p\u00ebr lidhjen me emrin e hostit n\u00eb rastin e p\u00ebrdorimit t\u00eb certifikatave TLS q\u00eb mbulojn\u00eb disa <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/domain\/\"   title=\"emrash domenesh\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">emrash domenesh<\/a>. N\u00eb an\u00ebn e aplikacioneve rekomandohet t\u00eb kufizohet numri i gabimeve gjat\u00eb p\u00ebrpunimit t\u00eb komandave, pas arritjes s\u00eb t\u00eb cilit lidhja duhet t\u00eb nd\u00ebrpritet. Procesi i hartimit t\u00eb masave p\u00ebr bllokimin e sulmit ka nisur q\u00eb n\u00eb tetor t\u00eb vitit t\u00eb kaluar. Masa t\u00eb ngjashme mbrojt\u00ebse tashm\u00eb jan\u00eb zbatuar n\u00eb Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZill, crypto\/tls (Go) dhe Internet Explorer.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 nj\u00eb teknik\u00eb e re e sulmeve MITM ndaj HTTPS | ProHoster","description":"Nj\u00eb grup studiuesish nga disa universitete n\u00eb Gjermani ka zhvilluar nj\u00eb metod\u00eb t\u00eb re t\u00eb sulmit MITM ndaj HTTPS, e cila b\u00ebn t\u00eb mundur nxjerrjen e Cookie me identifikues sesioni dhe t\u00eb dh\u00ebna t\u00eb tjera konfidenciale, si edhe arritjen e.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}