{"id":115607,"date":"2024-05-07T13:52:17","date_gmt":"2024-05-07T11:52:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp"},"modified":"2024-05-07T13:52:17","modified_gmt":"2024-05-07T11:52:19","slug":"ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","title":{"rendered":"Sulmi TunnelVision, q\u00eb mund\u00ebson ridrejtime t\u00eb trafikut VPN p\u00ebrmes manipulimeve me DHCP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Metoda e sulmit TunnelVision \u00ebsht\u00eb propozuar p\u00ebr publikun, e cila lejon, n\u00ebse ka qasje n\u00eb rrjetin lokal ose kontrolle mbi rrjetin pa tel, t\u00eb drejtoj\u00eb trafikun e viktim\u00ebs n\u00eb hostin e tij, duke shmangur VPN-n\u00eb (n\u00eb vend q\u00eb t\u00eb d\u00ebrgohet p\u00ebrmes VPN, trafiku do t\u00eb d\u00ebrgohet n\u00eb m\u00ebnyr\u00eb t\u00eb hapur pa tunelizim n\u00eb sistemin e sulmuesit). Problemi \u00ebsht\u00eb se i gjith\u00eb klient\u00ebt VPN jan\u00eb t\u00eb ndjesh\u00ebm, t\u00eb cil\u00ebt nuk p\u00ebrdorin hap\u00ebsira t\u00eb izoluara emrash p\u00ebr n\u00ebnstruktur\u00ebn e rrjetit (network namespace) kur drejtojn\u00eb trafikun n\u00eb tunel ose nuk vendosin rregulla t\u00eb filtrit t\u00eb paketave q\u00eb ndalojn\u00eb ruterimin e trafikut VPN p\u00ebrmes interfecesve fizik\u00eb t\u00eb rrjetit t\u00eb disponuesh\u00ebm. <\/p>\n

Q\u00ebllimi i sulmit \u00ebsht\u00eb se sulmuesi mund t\u00eb nis\u00eb serverin e tij DHCP dhe ta p\u00ebrdor\u00eb at\u00eb p\u00ebr t\u00eb d\u00ebrguar informacion te klienti p\u00ebr t\u00eb ndryshuar ruterimin. N\u00eb ve\u00e7anti, sulmuesi mund t\u00eb p\u00ebrfitoj\u00eb nga opsioni 121 i ofruar n\u00eb protokollin DHCP (RFC-3442, miratuar n\u00eb vitin 2002), i dedikuar p\u00ebr t\u00eb p\u00ebrcjell\u00eb informacion mbi ruterat statik\u00eb, p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime n\u00eb tabel\u00ebn e ruterimit n\u00eb makin\u00ebn e viktim\u00ebs dhe p\u00ebr t\u00eb drejtuar trafikun n\u00ebp\u00ebrmjet. VPN<\/a>. Ruterimi realizohet p\u00ebrmes vendosjes s\u00eb nj\u00eb serie ruterash p\u00ebr n\u00ebnrrjeta me prefiks \/1, t\u00eb cilat kan\u00eb prioritet m\u00eb t\u00eb lart\u00eb se ruterat e p\u00ebrdorur si parazgjedhje me prefiks \/0 (0.0.0.0\/0), k\u00ebshtu q\u00eb trafiku n\u00eb vend t\u00eb interfaces virtuale t\u00eb rrjetit VPN, do t\u00eb drejtohet p\u00ebrmes interfaces fizik\u00eb t\u00eb rrjetit n\u00eb hostin e sulmuesit n\u00eb rrjetin lokal. <\/p>\n

Sulmi mund t\u00eb realizohet n\u00eb \u00e7do sistem operativ q\u00eb mb\u00ebshtet opsionin 121 t\u00eb DHCP, duke p\u00ebrfshir\u00eb Linux, Windows, iOS dhe macOS, pa marr\u00eb parasysh protokollin e p\u00ebrdorur VPN (Wireguard, OpenVPN, IPsec) dhe grupin e kriptografive. Platforma Android nuk \u00ebsht\u00eb e ndjeshme ndaj sulmit, pasi nuk trajton opsionin 121 n\u00eb DHCP. Megjithat\u00eb, sulmi lejon qasje n\u00eb trafik, por nuk jep mund\u00ebsin\u00eb p\u00ebr t\u00eb nd\u00ebrhyr\u00eb n\u00eb lidhjet dhe p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen q\u00eb transmetohet duke p\u00ebrdorur protokolle t\u00eb mbrojtura t\u00eb nivelit t\u00eb aplikacionit, si TLS dhe SSH; p\u00ebr shembull, sulmuesi nuk mund t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen e k\u00ebrkesave HTTPS, por mund t\u00eb kuptoj\u00eb se n\u00eb cilat serivce d\u00ebrgohen ato. <\/p>\n

P\u00ebr t\u00eb mbrojtur veten nga sulmi, mund t\u00eb ndalohet n\u00eb nivelin e filtrit t\u00eb paketave d\u00ebrgimi i paketeve t\u00eb adresuara n\u00eb interfesin VPN n\u00ebp\u00ebr interfecet e tjera t\u00eb rrjetit; t\u00eb bllokohen paketat DHCP me opsionin 121; t\u00eb p\u00ebrdoret VPN brenda nj\u00eb makine virtuale t\u00eb ve\u00e7ant\u00eb (ose kontejner) t\u00eb izoluar nga rrjeti i jasht\u00ebm, ose t\u00eb p\u00ebrdoren modulet speciale t\u00eb konfigurimit t\u00eb tunel\u00ebve q\u00eb p\u00ebrdorin hap\u00ebsira em\u00ebrimi n\u00eb Linux (network namespace). P\u00ebr eksperimentet me realizimin e sulmit, \u00ebsht\u00eb publikuar nj\u00eb grup skriptesh.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div> <\/center> <\/p>\n

Vlen t\u00eb theksohet se ideja e ndryshimit lokal t\u00eb ruterimit nuk \u00ebsht\u00eb e re dhe m\u00eb par\u00eb zakonisht p\u00ebrdorej n\u00eb sulme q\u00eb synonin z\u00ebvend\u00ebsimin e serverit DNS. N\u00eb nj\u00eb sulm t\u00eb ngjash\u00ebm, TunnelCrack, ku ruterimi i trafikut u realizua p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb port\u00ebs default, problemi preku t\u00eb gjith\u00eb klient\u00ebt VPN t\u00eb verifikuar p\u00ebr iOS, n\u00eb 87.5% t\u00eb klient\u00ebve VPN p\u00ebr macOS, 66.7% p\u00ebr Windows, 35.7% p\u00ebr Linux dhe 21.4% p\u00ebr Android. N\u00eb kontekstin e VPN dhe DHCP, metoda \u00ebsht\u00eb p\u00ebrmendur gjithashtu m\u00eb par\u00eb; p\u00ebr shembull, nj\u00eb nga raportet n\u00eb konferenc\u00ebn e vitit t\u00eb kaluar USENIX 2023 ishte dedikuar p\u00ebr t\u00eb (kjo studim tregoi se 64.6% nga 195 klient\u00eb VPN t\u00eb testuar ishin t\u00eb ndjesh\u00ebm ndaj sulmit). <\/p>\n

P\u00ebr vendosjen e ruter\u00ebve m\u00eb par\u00eb gjithashtu ishte propozuar p\u00ebrdorimi i nj\u00eb USB-t\u00eb ngjyrosur posa\u00e7\u00ebrisht, q\u00eb simulonte funksionimin e nj\u00eb adaptori rrjeti, i cili, kur lidhesh me kompjuterin p\u00ebrmes DHCP, shpall veten si port\u00eb. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ka kontroll mbi port\u00ebn (p\u00ebr shembull, kur viktima lidhet me nj\u00eb rrjet pa tel t\u00eb kontrolluar nga sulmuesi), \u00ebsht\u00eb zhvilluar nj\u00eb teknik\u00eb p\u00ebr vendosjen e paketeve n\u00eb tunel, t\u00eb perceptuara n\u00eb kontekstin e interfeces VPN. <\/p>\n

Fluxet e t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrdorimit t\u00eb VPN:

\"Sulmi<\/center> <\/p>\n

Fluxet e t\u00eb dh\u00ebnave pas realizimit t\u00eb sulmit:

\"Sulmi<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0442\u0440\u0430\u0444\u0438\u043a \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0431\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u044e\u0431\u044b\u0435 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0451\u043d \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b (network […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":115608,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115607","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sulmi TunnelVision, e cila lejon ruterimin e trafikut VPN p\u00ebrmes manipulimeve me DHCP | ProHoster","description":"Metoda e sulmit TunnelVision \u00ebsht\u00eb propozuar p\u00ebr publikun, e cila lejon, n\u00ebse ka qasje n\u00eb rrjetin lokal ose kontrolle mbi rrjetin pa tel, t\u00eb drejtoj\u00eb trafikun e viktim\u00ebs n\u00eb hostin e tij, duke shmangur VPN-n\u00eb (n\u00eb vend q\u00eb t\u00eb d\u00ebrgohet p\u00ebrmes VPN, trafiku do t\u00eb d\u00ebrgohet n\u00eb m\u00ebnyr\u00eb t\u00eb hapur pa tunelizim n\u00eb sistemin e sulmuesit). Problemi \u00ebsht\u00eb se i gjith\u00eb klient\u00ebt VPN jan\u00eb t\u00eb ndjesh\u00ebm, t\u00eb cil\u00ebt nuk p\u00ebrdorin hap\u00ebsira t\u00eb izoluara emrash p\u00ebr n\u00ebnstruktur\u00ebn e rrjetit (network.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c VPN-\u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 DHCP | ProHoster","og:description":"\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0442\u0440\u0430\u0444\u0438\u043a \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0431\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u044e\u0431\u044b\u0435 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0451\u043d \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b (network","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-07T11:52:19+00:00","article:modified_time":"2024-05-07T11:52:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115607","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:58:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 23:52:19","updated":"2026-02-04 14:58:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=115607"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607\/revisions"}],"predecessor-version":[{"id":156765,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607\/revisions\/156765"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/115608"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=115607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=115607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=115607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}