{"id":115607,"date":"2024-05-07T13:52:17","date_gmt":"2024-05-07T11:52:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp"},"modified":"2024-05-07T13:52:17","modified_gmt":"2024-05-07T11:52:19","slug":"ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","title":{"rendered":"Sulmi TunnelVision, q\u00eb lejon ridrejtimin e trafikut VPN p\u00ebrmes manipulimit me DHCP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Metoda e sulmit TunnelVision \u00ebsht\u00eb paraqitur p\u00ebr publikun, e cila, kur ka qasje n\u00eb rrjetin lokal ose kontroll mbi rrjetin wireless, lejon redirektimin e trafik\u00ebve t\u00eb viktim\u00ebs n\u00eb hostin e sulmuesit n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb anashkalohen VPN-t\u00eb (n\u00eb vend t\u00eb d\u00ebrgimit p\u00ebrmes VPN, trafiku do t\u00eb d\u00ebrgohet n\u00eb form\u00eb t\u00eb hapur pa tunelizim n\u00eb sistemin e sulmuesit). \u00c7\u00ebshtjes i n\u00ebnshtrohen t\u00eb gjitha klient\u00ebt VPN, t\u00eb cil\u00ebt nuk p\u00ebrdorin hap\u00ebsira t\u00eb izoluara emrash t\u00eb n\u00ebnsiat\u00ebs (network namespace) kur drejtojn\u00eb trafikun n\u00eb tunel ose nuk vendosin rregulla t\u00eb filtrit t\u00eb paketave q\u00eb ndalojn\u00eb rrug\u00ebzimin e trafik\u00ebve VPN p\u00ebrmes interfaceve fizike t\u00eb rrjetit. <\/p>\n

Natyra e sulmit \u00ebsht\u00eb q\u00eb sulmuesi mund t\u00eb niste serverin e tij DHCP dhe ta p\u00ebrdor\u00eb at\u00eb p\u00ebr t\u00eb transmetuar informacion te klienti p\u00ebr t\u00eb ndryshuar rrug\u00ebzimin. N\u00eb ve\u00e7anti, sulmuesi mund t\u00eb shfryt\u00ebzoj\u00eb opsionin 121 (RFC-3442, miratuar n\u00eb vitin 2002) t\u00eb ofruar n\u00eb protokollin DHCP, i cili \u00ebsht\u00eb i dedikuar p\u00ebr transmetimin e informacionit mbi rrug\u00ebt statike, p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime n\u00eb tabel\u00ebn e rrug\u00ebzimit n\u00eb makin\u00ebn e viktim\u00ebs dhe p\u00ebr t\u00eb drejtuar trafikun n\u00eb m\u00ebnyr\u00eb t\u00eb anashkaluar. VPN<\/a>. Redirektimi b\u00ebhet p\u00ebrmes caktimit t\u00eb nj\u00eb serie rrug\u00ebsh p\u00ebr n\u00ebnrrjetet me prefiksin \/1, t\u00eb cilat kan\u00eb prioritet m\u00eb t\u00eb lart\u00eb se ruta e p\u00ebrdorur si standard me prefiksin \/0 (0.0.0.0\/0); si rezultat, trafiku, p\u00ebrve\u00e7 atij q\u00eb caktuar p\u00ebr VPN-in virtual, do t\u00eb d\u00ebrgohet p\u00ebrmes interfaceve fizike t\u00eb rrjetit n\u00eb hostin e sulmuesit n\u00eb rrjetin lokal. <\/p>\n

Sulmi mund t\u00eb realizohet n\u00eb \u00e7do sistem operativ q\u00eb mb\u00ebshtet opsionin 121 t\u00eb DHCP, duke p\u00ebrfshir\u00eb Linux, Windows, iOS dhe macOS, pavar\u00ebsisht nga protokolli VPN i p\u00ebrdorur (Wireguard, OpenVPN, IPsec) dhe grupi i algoritmeve t\u00eb enkriptimit. Platforma Android nuk \u00ebsht\u00eb e prekur nga sulmi, pasi nuk e p\u00ebrpunon opsionin 121 n\u00eb DHCP. Megjithat\u00eb, sulmi lejon qasje n\u00eb trafik, por nuk ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb nd\u00ebrhyr\u00eb n\u00eb lidhjet dhe p\u00ebr t\u00eb identifikuar p\u00ebrmbajtjen e d\u00ebrguar duke p\u00ebrdorur protokolle t\u00eb sigurta n\u00eb nivelin e aplikacionit, si\u00e7 jan\u00eb TLS dhe SSH; p\u00ebr shembull, sulmuesi nuk mund t\u00eb identifikoj\u00eb p\u00ebrmbajtjen e k\u00ebrkesave HTTPS, por mund t\u00eb kuptoj\u00eb n\u00eb cilat servera d\u00ebrgohen ato. <\/p>\n

P\u00ebr mbrojtjen nga sulmet, \u00ebsht\u00eb e mundur t\u00eb ndalohet n\u00eb nivelin e filtrit t\u00eb paketave d\u00ebrgimi i pacaketeve adresuara n\u00eb nd\u00ebrfaqen VPN p\u00ebrmes nd\u00ebrfaqeve t\u00eb tjera rrjetore; t\u00eb bllokohen paketat DHCP me opsionin 121; t\u00eb p\u00ebrdoret VPN brenda nj\u00eb makine virtuelle t\u00eb ve\u00e7ant\u00eb (ose konteineri), e izoluar nga rrjeti i jasht\u00ebm, ose t\u00eb aplikohen regjime t\u00eb ve\u00e7anta t\u00eb konfigurimit t\u00eb tunelave q\u00eb p\u00ebrdorin hap\u00ebsira em\u00ebror n\u00eb Linux (network namespace). P\u00ebr eksperimente me realizimin e sulmit \u00ebsht\u00eb publikuar nj\u00eb grup skriptesh.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div> <\/center> <\/p>\n

Vlen t\u00eb theksohet se ideja e ndryshimit lokal t\u00eb rrug\u00ebzimit nuk \u00ebsht\u00eb e re dhe m\u00eb par\u00eb zakonisht \u00ebsht\u00eb p\u00ebrdorur n\u00eb sulmet q\u00eb synonin z\u00ebvend\u00ebsimin e serverit DNS. N\u00eb nj\u00eb sulm t\u00eb ngjash\u00ebm, TunnelCrack, ku p\u00ebrcjellja e trafikut u realizua p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb port\u00ebs s\u00eb paracaktuar, problemi preku t\u00eb gjith\u00eb klient\u00ebt VPN t\u00eb verifikuar p\u00ebr iOS, 87.5% t\u00eb klient\u00ebve VPN p\u00ebr macOS, 66.7% p\u00ebr Windows, 35.7% p\u00ebr Linux dhe 21.4% p\u00ebr Android. N\u00eb kontekstin e VPN dhe DHCP, ky metod \u00ebsht\u00eb p\u00ebrmendur m\u00eb her\u00ebt, p\u00ebr shembull, i \u00ebsht\u00eb kushtuar nj\u00eb nga referatet n\u00eb konferenc\u00ebn e vitit t\u00eb kaluar USENIX 2023 (studimi tregoi se 64.6% e 195 klient\u00ebve VPN t\u00eb testuar ishin t\u00eb ekspozuar ndaj sulmit). <\/p>\n

P\u00ebr z\u00ebvend\u00ebsimin e rrug\u00ebve, m\u00eb par\u00eb u propozua p\u00ebrdorimi i nj\u00eb USB t\u00eb ve\u00e7uar, i cili simulohej si nj\u00eb adaptator rrjeti, i cili kur lidhet me kompjuterin, p\u00ebrmes DHCP shpall veten si port\u00eb. P\u00ebrve\u00e7 k\u00ebsaj, n\u00ebse ka kontroll mbi port\u00ebn (p\u00ebr shembull, kur viktima lidhet me nj\u00eb rrjet wireless t\u00eb kontrolluar nga sulmuesi), \u00ebsht\u00eb zhvilluar nj\u00eb teknik\u00eb p\u00ebr z\u00ebvend\u00ebsimin e pacaketave n\u00eb tunel, t\u00eb perceptuara n\u00eb kontekstin e nd\u00ebrfaqes s\u00eb rrjetit VPN. <\/p>\n

Rrjedhat e t\u00eb dh\u00ebnave duke p\u00ebrdorur VPN:

\"Sulmi<\/center> <\/p>\n

Rrjedhat e t\u00eb dh\u00ebnave pas p\u00ebrfundimit t\u00eb sulmit:

\"Sulmi<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0442\u0440\u0430\u0444\u0438\u043a \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0431\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u044e\u0431\u044b\u0435 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0451\u043d \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b (network […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":115608,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115607","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sulmi TunnelVision, i cili lejon p\u00ebrcjelljen e trafikut VPN p\u00ebrmes manipulimeve me DHCP | ProHoster","description":"Metoda e sulmit TunnelVision \u00ebsht\u00eb ofruar p\u00ebr publikun, e cila lejon, n\u00ebse ka akses n\u00eb rrjetin lokal ose kontroll mbi rrjetin wireless, t\u00eb realizohet p\u00ebrcjellja e trafikut t\u00eb viktim\u00ebs p\u00ebrmes manipulimeve me DHCP n\u00eb hostin e tij.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c VPN-\u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 DHCP | ProHoster","og:description":"\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 TunnelVision, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0445\u043e\u0441\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0431\u0445\u043e\u0434 VPN (\u0432\u043c\u0435\u0441\u0442\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-tunnelvision-pozvolyayushhaya-perenapravit-vpn-trafik-cherez-manipulyaczii-s-dhcp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-07T11:52:19+00:00","article:modified_time":"2024-05-07T11:52:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115607","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:58:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 23:52:19","updated":"2026-02-04 14:58:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=115607"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607\/revisions"}],"predecessor-version":[{"id":156765,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/115607\/revisions\/156765"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/115608"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=115607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=115607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=115607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}