{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"Kapja (tarpit) p\u00ebr lidhje hyr\u00ebse SSH","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nuk\u00eb \u00ebsht\u00eb sekret q\u00eb interneti \u00ebsht\u00eb nj\u00eb ambient shum\u00eb armiq\u00ebsor. Sa her\u00eb q\u00eb ngrini nj\u00eb server, ai menj\u00ebher\u00eb p\u00ebrballet me sulme masive dhe scans t\u00eb shumta. N\u00eb shembullin e hunipotit nga siguria<\/a><\/noindex> mund t\u00eb vler\u00ebsohet madh\u00ebsia e k\u00ebtij trafiku t\u00eb pad\u00ebshiruar. N\u00eb fakt, n\u00eb nj\u00eb server mesatar, 99% e trafikut mund t\u00eb jet\u00eb keqb\u00ebr\u00ebse.<\/p>\n

Tarpit \u00ebsht\u00eb nj\u00eb port-past\u00ebr q\u00eb p\u00ebrdoret p\u00ebr t\u00eb ngadal\u00ebsuar lidhjet hyr\u00ebse. N\u00ebse nj\u00eb sistem i jasht\u00ebm lidhet me k\u00ebt\u00eb port, nuk do t\u00eb jet\u00eb e leht\u00eb ta mbyllni shpejt lidhjen. Ai do t\u00eb duhet t\u00eb shpenzoj\u00eb burimet e veta sistemike dhe t\u00eb pres\u00eb derisa lidhja t\u00eb nd\u00ebrpritet p\u00ebr shkak t\u00eb koh\u00ebs s\u00eb pritjes, ose ta nd\u00ebrpres\u00eb manualisht at\u00eb.<\/p>\n

M\u00eb s\u00eb shumti, tarpitet p\u00ebrdoren p\u00ebr mbrojtje. Kjo teknik\u00eb u zhvillua p\u00ebr her\u00eb t\u00eb par\u00eb p\u00ebr mbrojtjen nga vermet kompjuterike. Tani ajo mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb prishur jet\u00ebn spamer\u00ebve dhe studiuesve, t\u00eb cil\u00ebt merren me skanimin e gjer\u00eb t\u00eb t\u00eb gjitha adresave IP nj\u00eb pas nj\u00eb (shembuj n\u00eb Habr\u00eb: Austri<\/a><\/noindex>, Ukraina<\/a><\/noindex>).
\n<\/a><\/noindex>
\nNj\u00eb nga administrator\u00ebt e sistemeve, emri i t\u00eb cilit \u00ebsht\u00eb Kris Vellons, duket se iu m\u00ebrzit t\u00eb v\u00ebzhgoj\u00eb k\u00ebt\u00eb kaos dhe shkroi nj\u00eb program t\u00eb vog\u00ebl Endlessh<\/a><\/noindex>, nj\u00eb tarpit p\u00ebr SSH, q\u00eb ngadal\u00ebson lidhjet hyr\u00ebse. Programi hap nj\u00eb port (me parazgjedhje p\u00ebr testim \u00ebsht\u00eb caktuar porti 2222) dhe pretendon t\u00eb jet\u00eb nj\u00eb server SSH, nd\u00ebrsa n\u00eb t\u00eb v\u00ebrtet\u00eb krijon nj\u00eb lidhje t\u00eb pafundme me klientin e hyrjes, derisa ai t\u00eb dor\u00ebzohet. Kjo mund t\u00eb vazhdoj\u00eb disa dit\u00eb ose m\u00eb shum\u00eb, derisa klienti t\u00eb dor\u00ebzohet.<\/p>\n

Instalimi i utilitarit:<\/p>\n

$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nNj\u00eb tarpit i implementuar si\u00e7 duhet do t\u00eb marr\u00eb m\u00eb shum\u00eb burime nga keqb\u00ebr\u00ebsi se sa nga ju. Por \u00e7\u00ebshtja nuk \u00ebsht\u00eb vet\u00ebm burimet. Autori CNBC, n\u00eb periudh\u00ebn nga 2000 deri n\u00eb 2018 Facebook, Alphabet, Microsoft, Apple dhe Amazon kan\u00eb pun\u00ebsuar m\u00eb shum\u00eb se nj\u00eb milion punonj\u00ebs t\u00eb rinj. T\u00eb tilla biznese akumullojn\u00eb mjaft burime, p\u00ebrve\u00e7 aktivitetit t\u00eb tyre kryesor, p\u00ebr t\u00eb realizuar k\u00ebrkime dhe zhvillime masive n\u00eb fusha t\u00eb reja, ndonj\u00ebher\u00eb me rrezikshm\u00ebri t\u00eb lart\u00eb. P\u00ebr m\u00eb tep\u00ebr, kompanit\u00eb formojn\u00eb dhe ekosistemin e tyre, brenda t\u00eb cilit p\u00ebrdoruesit i zgjidhin nj\u00eb gam\u00eb t\u00eb gjer\u00eb problemesh - porositin menj\u00ebher\u00eb t\u00eb gjitha produktet e nevojshme, nga ushqimi deri te teknika, n\u00eb Amazon. Sipas parashikimeve t\u00eb analist\u00ebve, deri n\u00eb vitin 2021 ai<\/a><\/noindex>thot\u00eb se programi krijon var\u00ebsi. Tani n\u00eb grack\u00ebn e tij jan\u00eb 27 klient\u00eb, disa prej t\u00eb cil\u00ebve jan\u00eb lidhur p\u00ebr jav\u00eb. N\u00eb kulmin e aktivitetit, 1378 klient\u00eb ishin n\u00eb grack\u00eb p\u00ebr 20 or\u00eb!<\/p>\n
N\u00eb operacionin normal, serveri Endlessh duhet vendosur n\u00eb portin e zakonsh\u00ebm 22, ku huligan\u00ebt e godasin masivisht. Rekomandimet standarde p\u00ebr siguri gjithmon\u00eb sugjerojn\u00eb t\u00eb zhvendosin SSH n\u00eb nj\u00eb port tjet\u00ebr, gj\u00eb q\u00eb menj\u00ebher\u00eb e zvog\u00eblon ndjesh\u00ebm madh\u00ebsin\u00eb e log\u00ebve.<\/p>\n
Kris Vellons thot\u00eb se programi i tij shfryt\u00ebzon nj\u00eb paragraf nga specifikimi RFC 4253<\/a><\/noindex> p\u00ebr protokollin SSH. Menj\u00ebher\u00eb pas vendosjes s\u00eb lidhjes TCP, por para se t\u00eb p\u00ebrdoret kriptografia, t\u00eb dy pal\u00ebt duhet t\u00eb d\u00ebrgojn\u00eb nj\u00eb string identifikimi. Dhe aty ka nj\u00eb shtes\u00eb: \u00abServeri MUND t\u00eb d\u00ebrgoj\u00eb rreshta t\u00eb tjer\u00eb t\u00eb dh\u00ebnash para se t\u00eb d\u00ebrgoj\u00eb rreshtin me versionin\u00bb<\/i>. Dhe nuk ka kufizim<\/b> n\u00eb volum t\u00eb k\u00ebtyre t\u00eb dh\u00ebnave, thjesht \u00e7do rresht duhet t\u00eb filloj\u00eb me SSH-<\/code>.<\/p>\n
Kjo \u00ebsht\u00eb ajo q\u00eb b\u00ebn programi Endlessh: ai d\u00ebrgon t\u00eb pafund<\/i> rrjedh\u00ebn e t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme t\u00eb gjeneruara<\/b>, q\u00eb p\u00ebrputhen me RFC 4253, dometh\u00ebn\u00eb d\u00ebrgimi para identifikimit, dhe \u00e7do rresht fillon me SSH-<\/code> dhe nuk kalon 255 karaktere, duke p\u00ebrfshir\u00eb karakterin e p\u00ebrfundimit t\u00eb rreshtit. N\u00eb p\u00ebrgjith\u00ebsi, gjith\u00e7ka sipas standardit.<\/p>\n
Me default, programi pret 10 sekonda midis d\u00ebrgesave t\u00eb pakove. Kjo parandalon nd\u00ebrprerjen p\u00ebr shkak t\u00eb koh\u00ebs, k\u00ebshtu q\u00eb klienti do t\u00eb ngec\u00eb p\u00ebrgjithmon\u00eb.<\/p>\n
Duke qen\u00eb se d\u00ebrgimi i t\u00eb dh\u00ebnave b\u00ebhet p\u00ebrpara se t\u00eb aplikohet kriptografia, programi \u00ebsht\u00eb jasht\u00ebzakonisht i thjesht\u00eb. Nuk ka nevoj\u00eb p\u00ebr implementimin e ndonj\u00eb cifrimi dhe mb\u00ebshtetje p\u00ebr shum\u00eb protokolle.<\/p>\n
Autori \u00ebsht\u00eb p\u00ebrpjekur q\u00eb utilitarja t\u00eb konsumoj\u00eb minimumin e burimeve dhe t\u00eb funksionoj\u00eb absolutisht paduksh\u00ebm n\u00eb makin\u00ebn. Ndryshe nga antivirus\u00ebt modern\u00eb dhe sistemet e tjera \u00abt\u00eb siguris\u00eb\u00bb, ajo nuk duhet t\u00eb ngadal\u00ebsoj\u00eb kompjuterin. Ai ka arritur t\u00eb minimizoj\u00eb si trafikun, ashtu edhe konsumimin e memories p\u00ebrmes nj\u00eb realizimi disi m\u00eb t\u00eb sofistikuar t\u00eb programit. N\u00ebse ai do t\u00eb kishte vet\u00ebm nj\u00eb proces t\u00eb ve\u00e7ant\u00eb p\u00ebr nj\u00eb lidhje t\u00eb re, at\u00ebher\u00eb sulmuesit potencial\u00eb mund t\u00eb kryenin nj\u00eb sulm DDoS duke hapur shum\u00eb lidhje p\u00ebr t\u00eb shteruar burimet n\u00eb makin\u00eb. Nj\u00eb rrjedh\u00eb p\u00ebr lidhje \u2014 gjithashtu nuk \u00ebsht\u00eb opsioni m\u00eb i mir\u00eb, sepse b\u00ebrthama do t\u00eb shpenzoj\u00eb burimet p\u00ebr menaxhimin e rrjedhave.<\/p>\n
Prandaj, Chris Wellons zgjodhi opsionin m\u00eb t\u00eb leht\u00eb p\u00ebr Endlessh: serveri nj\u00eb rrjedh\u00ebshe poll(2)<\/code>, ku klient\u00ebt n\u00eb ngacmim praktikisht nuk konsumojn\u00eb burime t\u00eb tep\u00ebrta, p\u00ebrve\u00e7 Objektit t\u00eb socketit n\u00eb b\u00ebrtham\u00eb dhe 78 byte t\u00eb tjera p\u00ebr ndjekjen n\u00eb Endlessh. P\u00ebr t\u00eb mos ndar\u00eb buferat e marrjes dhe d\u00ebrgimit p\u00ebr \u00e7do klient, Endlessh hap nj\u00eb socket t\u00eb aksesit t\u00eb drejtp\u00ebrdrejt\u00eb dhe transmeton drejtp\u00ebrdrejt paketat TCP, duke injoruar pothuajse t\u00eb gjith\u00eb stek TCP\/IP t\u00eb sistemit operativ. Bufferi i hyrjes nuk \u00ebsht\u00eb aspak i nevojsh\u00ebm, sepse t\u00eb dh\u00ebnat e hyra nuk na interesojn\u00eb.<\/p>\n
Autori thot\u00eb se n\u00eb momentin e programit t\u00eb tij nuk e dinte<\/a><\/noindex> p\u00ebr ekzistenc\u00ebn e asycio n\u00eb Python dhe kapak\u00ebt e tjer\u00eb. N\u00ebse do t\u00eb kishte ditur p\u00ebr asycio, at\u00ebher\u00eb utilitarin e tij do ta kishte realizuar n\u00eb vet\u00ebm 18 rreshta n\u00eb Python:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio \u00ebsht\u00eb ideale p\u00ebr t\u00eb shkruar tarpita. P\u00ebr shembull, nj\u00eb kapje e till\u00eb mund t\u00eb bllokoj\u00eb Firefox, Chrome ose nj\u00eb klient tjet\u00ebr q\u00eb p\u00ebrpiqet t\u00eb lidhet me serverin tuaj HTTP p\u00ebr disa or\u00eb:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpiti \u00ebsht\u00eb nj\u00eb mjet e shk\u00eblqyer p\u00ebr t\u00eb nd\u00ebshkuar haker\u00ebt e internetit. Megjithat\u00eb, ekziston nj\u00eb rrezik i caktuar q\u00eb t\u00ebrheq v\u00ebmendjen ndaj sjelljes s\u00eb pazakont\u00eb t\u00eb serverit tuaj. Disa mund t\u00eb mendojn\u00eb p\u00ebr hakmarrje<\/a><\/noindex> dhe p\u00ebr nj\u00eb sulm t\u00eb synuar DDoS ndaj IP-s\u00eb tuaj. Megjithat\u00eb, deri tani nuk ka pasur raste t\u00eb tilla dhe tarpitat funksionojn\u00eb shum\u00eb mir\u00eb.<\/p>\n
Kategorit\u00eb:
\nPython, Siguria Informative, Softueri, Administrimi i Sistemeve<\/p>\n
Etiketat:
\nSSH, Endlessh, tarpit, kapje, asycio
\nKapja (tarpit) p\u00ebr lidhje hyr\u00ebse SSH<\/p>\n
Nuk\u00eb \u00ebsht\u00eb sekret q\u00eb interneti \u00ebsht\u00eb nj\u00eb ambient shum\u00eb armiq\u00ebsor. Sa her\u00eb q\u00eb ngrini nj\u00eb server, ai menj\u00ebher\u00eb p\u00ebrballet me sulme masive dhe scans t\u00eb shumta. N\u00eb shembullin e hunipotit nga siguria<\/a><\/noindex> mund t\u00eb vler\u00ebsohet madh\u00ebsia e k\u00ebtij trafiku t\u00eb pad\u00ebshiruar. N\u00eb fakt, n\u00eb nj\u00eb server mesatar, 99% e trafikut mund t\u00eb jet\u00eb keqb\u00ebr\u00ebse.<\/p>\n
Tarpit \u00ebsht\u00eb nj\u00eb port-past\u00ebr q\u00eb p\u00ebrdoret p\u00ebr t\u00eb ngadal\u00ebsuar lidhjet hyr\u00ebse. N\u00ebse nj\u00eb sistem i jasht\u00ebm lidhet me k\u00ebt\u00eb port, nuk do t\u00eb jet\u00eb e leht\u00eb ta mbyllni shpejt lidhjen. Ai do t\u00eb duhet t\u00eb shpenzoj\u00eb burimet e veta sistemike dhe t\u00eb pres\u00eb derisa lidhja t\u00eb nd\u00ebrpritet p\u00ebr shkak t\u00eb koh\u00ebs s\u00eb pritjes, ose ta nd\u00ebrpres\u00eb manualisht at\u00eb.<\/p>\n
M\u00eb s\u00eb shumti, tarpitet p\u00ebrdoren p\u00ebr mbrojtje. Kjo teknik\u00eb u zhvillua p\u00ebr her\u00eb t\u00eb par\u00eb p\u00ebr mbrojtjen nga vermet kompjuterike. Tani ajo mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb prishur jet\u00ebn spamer\u00ebve dhe studiuesve, t\u00eb cil\u00ebt merren me skanimin e gjer\u00eb t\u00eb t\u00eb gjitha adresave IP nj\u00eb pas nj\u00eb (shembuj n\u00eb Habr\u00eb: Austri<\/a><\/noindex>, Ukraina<\/a><\/noindex>).<\/p>\n
Nj\u00eb nga administrator\u00ebt e sistemeve, emri i t\u00eb cilit \u00ebsht\u00eb Kris Vellons, duket se iu m\u00ebrzit t\u00eb v\u00ebzhgoj\u00eb k\u00ebt\u00eb kaos dhe shkroi nj\u00eb program t\u00eb vog\u00ebl Endlessh<\/a><\/noindex>, nj\u00eb tarpit p\u00ebr SSH, q\u00eb ngadal\u00ebson lidhjet hyr\u00ebse. Programi hap nj\u00eb port (me parazgjedhje p\u00ebr testim \u00ebsht\u00eb caktuar porti 2222) dhe pretendon t\u00eb jet\u00eb nj\u00eb server SSH, nd\u00ebrsa n\u00eb t\u00eb v\u00ebrtet\u00eb krijon nj\u00eb lidhje t\u00eb pafundme me klientin e hyrjes, derisa ai t\u00eb dor\u00ebzohet. Kjo mund t\u00eb vazhdoj\u00eb disa dit\u00eb ose m\u00eb shum\u00eb, derisa klienti t\u00eb dor\u00ebzohet.<\/p>\n
Instalimi i utilitarit:<\/p>\n
$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nNj\u00eb tarpit i implementuar si\u00e7 duhet do t\u00eb marr\u00eb m\u00eb shum\u00eb burime nga keqb\u00ebr\u00ebsi se sa nga ju. Por \u00e7\u00ebshtja nuk \u00ebsht\u00eb vet\u00ebm burimet. Autori CNBC, n\u00eb periudh\u00ebn nga 2000 deri n\u00eb 2018 Facebook, Alphabet, Microsoft, Apple dhe Amazon kan\u00eb pun\u00ebsuar m\u00eb shum\u00eb se nj\u00eb milion punonj\u00ebs t\u00eb rinj. T\u00eb tilla biznese akumullojn\u00eb mjaft burime, p\u00ebrve\u00e7 aktivitetit t\u00eb tyre kryesor, p\u00ebr t\u00eb realizuar k\u00ebrkime dhe zhvillime masive n\u00eb fusha t\u00eb reja, ndonj\u00ebher\u00eb me rrezikshm\u00ebri t\u00eb lart\u00eb. P\u00ebr m\u00eb tep\u00ebr, kompanit\u00eb formojn\u00eb dhe ekosistemin e tyre, brenda t\u00eb cilit p\u00ebrdoruesit i zgjidhin nj\u00eb gam\u00eb t\u00eb gjer\u00eb problemesh - porositin menj\u00ebher\u00eb t\u00eb gjitha produktet e nevojshme, nga ushqimi deri te teknika, n\u00eb Amazon. Sipas parashikimeve t\u00eb analist\u00ebve, deri n\u00eb vitin 2021 ai<\/a><\/noindex>thot\u00eb se programi krijon var\u00ebsi. Tani n\u00eb grack\u00ebn e tij jan\u00eb 27 klient\u00eb, disa prej t\u00eb cil\u00ebve jan\u00eb lidhur p\u00ebr jav\u00eb. N\u00eb kulmin e aktivitetit, 1378 klient\u00eb ishin n\u00eb grack\u00eb p\u00ebr 20 or\u00eb!<\/p>\n
N\u00eb operacionin normal, serveri Endlessh duhet vendosur n\u00eb portin e zakonsh\u00ebm 22, ku huligan\u00ebt e godasin masivisht. Rekomandimet standarde p\u00ebr siguri gjithmon\u00eb sugjerojn\u00eb t\u00eb zhvendosin SSH n\u00eb nj\u00eb port tjet\u00ebr, gj\u00eb q\u00eb menj\u00ebher\u00eb e zvog\u00eblon ndjesh\u00ebm madh\u00ebsin\u00eb e log\u00ebve.<\/p>\n
Kris Vellons thot\u00eb se programi i tij shfryt\u00ebzon nj\u00eb paragraf nga specifikimi RFC 4253<\/a><\/noindex> p\u00ebr protokollin SSH. Menj\u00ebher\u00eb pas vendosjes s\u00eb lidhjes TCP, por para se t\u00eb p\u00ebrdoret kriptografia, t\u00eb dy pal\u00ebt duhet t\u00eb d\u00ebrgojn\u00eb nj\u00eb string identifikimi. Dhe aty ka nj\u00eb shtes\u00eb: \u00abServeri MUND t\u00eb d\u00ebrgoj\u00eb rreshta t\u00eb tjer\u00eb t\u00eb dh\u00ebnash para se t\u00eb d\u00ebrgoj\u00eb rreshtin me versionin\u00bb<\/i>. Dhe nuk ka kufizim<\/b> n\u00eb volum t\u00eb k\u00ebtyre t\u00eb dh\u00ebnave, thjesht \u00e7do rresht duhet t\u00eb filloj\u00eb me SSH-<\/code>.<\/p>\n
Kjo \u00ebsht\u00eb ajo q\u00eb b\u00ebn programi Endlessh: ai d\u00ebrgon t\u00eb pafund<\/i> rrjedh\u00ebn e t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme t\u00eb gjeneruara<\/b>, q\u00eb p\u00ebrputhen me RFC 4253, dometh\u00ebn\u00eb d\u00ebrgimi para identifikimit, dhe \u00e7do rresht fillon me SSH-<\/code> dhe nuk kalon 255 karaktere, duke p\u00ebrfshir\u00eb karakterin e p\u00ebrfundimit t\u00eb rreshtit. N\u00eb p\u00ebrgjith\u00ebsi, gjith\u00e7ka sipas standardit.<\/p>\n
Me default, programi pret 10 sekonda midis d\u00ebrgesave t\u00eb pakove. Kjo parandalon nd\u00ebrprerjen p\u00ebr shkak t\u00eb koh\u00ebs, k\u00ebshtu q\u00eb klienti do t\u00eb ngec\u00eb p\u00ebrgjithmon\u00eb.<\/p>\n
Duke qen\u00eb se d\u00ebrgimi i t\u00eb dh\u00ebnave b\u00ebhet p\u00ebrpara se t\u00eb aplikohet kriptografia, programi \u00ebsht\u00eb jasht\u00ebzakonisht i thjesht\u00eb. Nuk ka nevoj\u00eb p\u00ebr implementimin e ndonj\u00eb cifrimi dhe mb\u00ebshtetje p\u00ebr shum\u00eb protokolle.<\/p>\n
Autori \u00ebsht\u00eb p\u00ebrpjekur q\u00eb utilitarja t\u00eb konsumoj\u00eb minimumin e burimeve dhe t\u00eb funksionoj\u00eb absolutisht paduksh\u00ebm n\u00eb makin\u00ebn. Ndryshe nga antivirus\u00ebt modern\u00eb dhe sistemet e tjera \u00abt\u00eb siguris\u00eb\u00bb, ajo nuk duhet t\u00eb ngadal\u00ebsoj\u00eb kompjuterin. Ai ka arritur t\u00eb minimizoj\u00eb si trafikun, ashtu edhe konsumimin e memories p\u00ebrmes nj\u00eb realizimi disi m\u00eb t\u00eb sofistikuar t\u00eb programit. N\u00ebse ai do t\u00eb kishte vet\u00ebm nj\u00eb proces t\u00eb ve\u00e7ant\u00eb p\u00ebr nj\u00eb lidhje t\u00eb re, at\u00ebher\u00eb sulmuesit potencial\u00eb mund t\u00eb kryenin nj\u00eb sulm DDoS duke hapur shum\u00eb lidhje p\u00ebr t\u00eb shteruar burimet n\u00eb makin\u00eb. Nj\u00eb rrjedh\u00eb p\u00ebr lidhje \u2014 gjithashtu nuk \u00ebsht\u00eb opsioni m\u00eb i mir\u00eb, sepse b\u00ebrthama do t\u00eb shpenzoj\u00eb burimet p\u00ebr menaxhimin e rrjedhave.<\/p>\n
Prandaj, Chris Wellons zgjodhi opsionin m\u00eb t\u00eb leht\u00eb p\u00ebr Endlessh: serveri nj\u00eb rrjedh\u00ebshe poll(2)<\/code>, ku klient\u00ebt n\u00eb ngacmim praktikisht nuk konsumojn\u00eb burime t\u00eb tep\u00ebrta, p\u00ebrve\u00e7 Objektit t\u00eb socketit n\u00eb b\u00ebrtham\u00eb dhe 78 byte t\u00eb tjera p\u00ebr ndjekjen n\u00eb Endlessh. P\u00ebr t\u00eb mos ndar\u00eb buferat e marrjes dhe d\u00ebrgimit p\u00ebr \u00e7do klient, Endlessh hap nj\u00eb socket t\u00eb aksesit t\u00eb drejtp\u00ebrdrejt\u00eb dhe transmeton drejtp\u00ebrdrejt paketat TCP, duke injoruar pothuajse t\u00eb gjith\u00eb stek TCP\/IP t\u00eb sistemit operativ. Bufferi i hyrjes nuk \u00ebsht\u00eb aspak i nevojsh\u00ebm, sepse t\u00eb dh\u00ebnat e hyra nuk na interesojn\u00eb.<\/p>\n
Autori thot\u00eb se n\u00eb momentin e programit t\u00eb tij nuk e dinte<\/a><\/noindex> p\u00ebr ekzistenc\u00ebn e asycio n\u00eb Python dhe kapak\u00ebt e tjer\u00eb. N\u00ebse do t\u00eb kishte ditur p\u00ebr asycio, at\u00ebher\u00eb utilitarin e tij do ta kishte realizuar n\u00eb vet\u00ebm 18 rreshta n\u00eb Python:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio \u00ebsht\u00eb ideale p\u00ebr t\u00eb shkruar tarpita. P\u00ebr shembull, nj\u00eb kapje e till\u00eb mund t\u00eb bllokoj\u00eb Firefox, Chrome ose nj\u00eb klient tjet\u00ebr q\u00eb p\u00ebrpiqet t\u00eb lidhet me serverin tuaj HTTP p\u00ebr disa or\u00eb:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpiti \u00ebsht\u00eb nj\u00eb mjet e shk\u00eblqyer p\u00ebr t\u00eb nd\u00ebshkuar haker\u00ebt e internetit. Megjithat\u00eb, ekziston nj\u00eb rrezik i caktuar q\u00eb t\u00ebrheq v\u00ebmendjen ndaj sjelljes s\u00eb pazakont\u00eb t\u00eb serverit tuaj. Disa mund t\u00eb mendojn\u00eb p\u00ebr hakmarrje<\/a><\/noindex> dhe p\u00ebr nj\u00eb sulm t\u00eb synuar DDoS ndaj IP-s\u00eb tuaj. Megjithat\u00eb, deri tani nuk ka pasur raste t\u00eb tilla dhe tarpitat funksionojn\u00eb shum\u00eb mir\u00eb.<\/p>\n
\n\"Kapja<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kapja (tarpit) p\u00ebr lidhjet SSH t\u00eb ardhshme | ProHoster","description":"Nuk \u00ebsht\u00eb sekret se interneti \u00ebsht\u00eb nj\u00eb mjedis shum\u00eb armiq\u00ebsor. Sa her\u00eb q\u00eb ngre nj\u00eb server, ai menj\u00ebher\u00eb i n\u00ebnshtrohet sulmeve masive dhe skanimeve t\u00eb shumta.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}