{"id":37112,"date":"2019-10-31T22:15:49","date_gmt":"2019-10-31T19:15:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti\/"},"modified":"2019-10-31T22:15:49","modified_gmt":"2019-10-31T19:15:49","slug":"http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti","title":{"rendered":"Headers HTTP Alt-Svc mund t\u00eb p\u00ebrdoren p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Hulumtuesit nga Universiteti i Bostonit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/conference\/woot19\/presentation\/tiwari\">kan\u00eb zhvilluar<\/a><\/noindex> metoda e sulmit<br \/>\n(CVE-2019-11728), <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/system\/files\/woot19-paper_tiwari.pdf\">leht\u00ebson<\/a><\/noindex> t\u00eb realizohet skanimi i adresave IP dhe porteve t\u00eb hapura t\u00eb rrjetit n\u00eb rrjetin e brendsh\u00ebm t\u00eb p\u00ebrdoruesit, q\u00eb \u00ebsht\u00eb e ndar\u00eb nga rrjeti i jasht\u00ebm nga nj\u00eb firewall, ose n\u00eb sistemin aktual (localhost). Sulmi mund t\u00eb kryhet me hapjen n\u00eb shfletues nj\u00eb faqeje t\u00eb dizajnuar posa\u00e7\u00ebrisht. Teknika e propozuar bazohet n\u00eb p\u00ebrdorimin e titullit HTTP <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Headers\/Alt-Svc\">Alt-Svc<\/a><\/noindex> (HTTP Alternate Services, <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc7838\/\">RFC-7838<\/a><\/noindex>). Problemi shfaqet n\u00eb Firefox, Chrome dhe shfletuesit e bazuar n\u00eb motor\u00ebt e tyre, p\u00ebrfshir\u00eb Tor Browser dhe Brave.<\/p>\n<p>\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Alt-Svc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0430\u0439\u0442\u0443 \u0438 \u043f\u0440\u043e\u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0445\u043e\u0441\u0442, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 &#8216;Alt-Svc: http\/1.1=&#187;other.example.com:443&#8243;;ma=200&#8217; \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0441 \u0445\u043e\u0441\u0442\u043e\u043c other.example.org, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0440\u0442 443 \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP\/1.1. \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 &#171;ma&#187; \u0437\u0430\u0434\u0430\u0451\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u041a\u0440\u043e\u043c\u0435 HTTP\/1.1, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f HTTP\/2-over-TLS (h2), HTTP\/2-over plain text (h2c), SPDY(spdy) \u0438 QUIC (quic), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 UDP.<\/p>\n<p><center><img decoding=\"async\" alt=\"Headers HTTP Alt-Svc mund t\u00eb p\u00ebrdoren p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm\" src=\"\/wp-content\/uploads\/2019\/08\/20a9c58c37c506b07a80703760a52bfc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>P\u00ebr skanimin e adresave, website i sulmuesit mund t\u00eb shkoj\u00eb radhazi p\u00ebrmes adresave t\u00eb interesit t\u00eb rrjetit t\u00eb brendsh\u00ebm dhe porteve t\u00eb rrjetit, duke p\u00ebrdorur si tregues vones\u00ebn midis k\u00ebrkesave t\u00eb p\u00ebrs\u00ebritura.<br \/>\nN\u00eb rast se burimi i ridrejtuar nuk \u00ebsht\u00eb i arritsh\u00ebm, shfletuesi menj\u00ebher\u00eb merr nj\u00eb paket\u00eb RST si p\u00ebrgjigje dhe menj\u00ebher\u00eb sh\u00ebnon sh\u00ebrbimin alternativ si t\u00eb pap\u00ebrfshir\u00eb dhe e rivendos koh\u00ebn e jetes\u00ebs s\u00eb ridrejtimit q\u00eb ishte p\u00ebrcaktuar n\u00eb k\u00ebrkes\u00eb.<br \/>\nN\u00ebse porta e rrjetit \u00ebsht\u00eb e hapur, at\u00ebher\u00eb do t\u00eb nevojitet m\u00eb shum\u00eb koh\u00eb p\u00ebr t\u00eb p\u00ebrfunduar lidhjen (do t\u00eb b\u00ebhet nj\u00eb p\u00ebrpjekje p\u00ebr t\u00eb vendosur lidhjen me shk\u00ebmbimin p\u00ebrkat\u00ebs t\u00eb paketave) dhe shfletuesi nuk do t\u00eb reagoj\u00eb menj\u00ebher\u00eb. <\/p>\n<p>P\u00ebr t\u00eb marr\u00eb informacion mbi verifikimin, sulmuesi mund t\u00eb ridrejtoj\u00eb menj\u00ebher\u00eb p\u00ebrdoruesin n\u00eb nj\u00eb faqe t\u00eb dyt\u00eb, e cila n\u00eb titullin Alt-Svc do t\u00eb referohet n\u00eb nj\u00eb host t\u00eb pun\u00ebs t\u00eb sulmuesit. N\u00ebse shfletuesi i klientit d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb n\u00eb k\u00ebt\u00eb faqe, mund t\u00eb mendohet se ridrejtimi i k\u00ebrkes\u00ebs s\u00eb par\u00eb Alt-Svc \u00ebsht\u00eb anuluar dhe hosti dhe porta e kontrolluar jan\u00eb t\u00eb paaksesuesh\u00ebm. N\u00ebse nuk ka pasur k\u00ebrkes\u00eb, do t\u00eb thot\u00eb se t\u00eb dh\u00ebnat p\u00ebr ridrejtimin e par\u00eb ende nuk jan\u00eb skaduar dhe lidhja \u00ebsht\u00eb vendosur. <\/p>\n<p>Metoda e p\u00ebrcaktuar gjithashtu lejon verifikimin e porteve t\u00eb rrjetit t\u00eb listuara n\u00eb blacklist nga shfletuesi, si\u00e7 jan\u00eb portat e server\u00ebve t\u00eb post\u00ebs. Sulmi aktual \u00ebsht\u00eb p\u00ebrgatitur duke p\u00ebrdorur z\u00ebvend\u00ebsimin e iframe n\u00eb trafik t\u00eb viktim\u00ebs dhe duke p\u00ebrdorur n\u00eb Alt-Svc protokollin HTTP\/2 p\u00ebr Firefox dhe QUIC p\u00ebr skanimin e porteve UDP n\u00eb Chrome. N\u00eb Tor Browser, sulmi nuk mund t\u00eb aplikohet n\u00eb kontekstin e rrjetit t\u00eb brendsh\u00ebm dhe localhost, por \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr organizimin e skanimit t\u00eb fsheht\u00eb t\u00eb hosteve t\u00eb jashtme p\u00ebrmes nodit dal\u00ebs Tor. Problemi me skanimin e porteve tashm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/advisories\/mfsa2019-21\/\">i eliminuar<\/a><\/noindex> n\u00eb Firefox 68.<\/p>\n<p>Titulli Alt-Svc gjithashtu mund t\u00eb aplikohet:<\/p>\n<ul>\n<li class=\"l\"> N\u00eb organizimin e sulmeve DDoS. P\u00ebr shembull, p\u00ebr TLS ridrejtimi mund t\u00eb siguroj\u00eb nj\u00eb nivel p\u00ebrforcimi deri n\u00eb 60 her\u00eb pasi k\u00ebrkesa fillestare e klientit z\u00eb 500 byte, p\u00ebrgjigjja me certifikat rreth 30 KB. Duke gjeneruar k\u00ebrkesa t\u00eb tilla n\u00eb cik\u00ebl nga shum\u00eb sisteme klienti mund t\u00eb arrij\u00eb shterjen e burimeve rrjet t\u00eb disponueshme t\u00eb serverit;\n<p><center><img decoding=\"async\" alt=\"Headers HTTP Alt-Svc mund t\u00eb p\u00ebrdoren p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm\" src=\"\/wp-content\/uploads\/2019\/08\/78f00dbe7eb06470e58eede203abb8e7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<li class=\"l\"> P\u00ebr t\u00eb anashkaluar mekanizmat e mbrojtjes nga phishing dhe malware, t\u00eb ofruara nga sh\u00ebrbime si Safe Browsing (ridrejtimi n\u00eb nj\u00eb host t\u00eb d\u00ebmsh\u00ebm nuk \u00e7on n\u00eb shfaqjen e paralajm\u00ebrimeve);\n<li class=\"l\"> P\u00ebr t\u00eb organizuar ndjekjen e l\u00ebvizjes s\u00eb p\u00ebrdoruesit. Thelbi i metod\u00ebs \u00ebsht\u00eb z\u00ebvend\u00ebsimi i iframe, q\u00eb lidh n\u00eb Alt-Svc nj\u00eb procesor t\u00eb jasht\u00ebm p\u00ebr ndjekjen e l\u00ebvizjes, e cila thirret pavar\u00ebsisht nga aktivizimi i mjeteve p\u00ebr mbrojtje nga ndjek\u00ebsit. Po ashtu, \u00ebsht\u00eb e mundur t\u00eb ndjekim n\u00eb nivelin e ofruesve p\u00ebrmes p\u00ebrdorimit n\u00eb Alt-Svc t\u00eb nj\u00eb identifikuesi unik (IP t\u00eb rast\u00ebsish\u00ebm:port si identifikues) me analizimin e tij t\u00eb m\u00ebvonsh\u00ebm n\u00eb trafikun e tranzitit;\n<p><center><img decoding=\"async\" alt=\"Headers HTTP Alt-Svc mund t\u00eb p\u00ebrdoren p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm\" src=\"\/wp-content\/uploads\/2019\/08\/a7d81a5066534a3f20ea54f874e9b475.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<center><img decoding=\"async\" alt=\"Headers HTTP Alt-Svc mund t\u00eb p\u00ebrdoren p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm\" src=\"\/wp-content\/uploads\/2019\/08\/be310d5a2a209f521dd257b3cb052757.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<li class=\"l\"> P\u00ebr t\u00eb nxjerr\u00eb informacione p\u00ebr historin\u00eb e l\u00ebvizjeve. Duke z\u00ebvend\u00ebsuar n\u00eb faqen e tij nj\u00eb iframe me nj\u00eb k\u00ebrkes\u00eb p\u00ebr imazhin nga nj\u00eb website i caktuar, q\u00eb p\u00ebrdor Alt-Svc, dhe duke analizuar statusin e Alt-Svc n\u00eb trafik, sulmuesi, q\u00eb ka mund\u00ebsin\u00eb t\u00eb analizoj\u00eb trafikun e tranzitit, mund t\u00eb haj\u00eb se p\u00ebrdoruesi ka vizituar m\u00eb par\u00eb at\u00eb website;\n<li class=\"l\"> Zhurma e logeve t\u00eb sistemeve t\u00eb zbulimit t\u00eb invazionit. N\u00ebp\u00ebrmjet Alt-Svc mund t\u00eb shkaktohet nj\u00eb val\u00eb k\u00ebrkesash ndaj sistemeve t\u00eb d\u00ebmshme n\u00eb em\u00ebr t\u00eb p\u00ebrdoruesit dhe t\u00eb krijoj\u00eb iluzionin e sulmeve t\u00eb rreme p\u00ebr t\u00eb fshehur informacionin e v\u00ebrtet\u00eb mbi nj\u00eb sulm t\u00eb v\u00ebrtet\u00eb.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51278\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0411\u043e\u0441\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-11728), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442\u0433\u043e\u0440\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u043e\u043c, \u0438\u043b\u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (localhost). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Alt-Svc (HTTP Alternate Services, RFC-7838). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27822,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0411\u043e\u0441\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-11728), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442\u0433\u043e\u0440\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u043e\u043c, \u0438\u043b\u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (localhost). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Alt-Svc (HTTP Alternate Services, RFC-7838). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Alt-Svc \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0411\u043e\u0441\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-11728), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442\u0433\u043e\u0440\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u043e\u043c, \u0438\u043b\u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (localhost). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Alt-Svc (HTTP Alternate Services, RFC-7838). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:15:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:15:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Header-i HTTP Alt-Svc mund t\u00eb p\u00ebrdoret p\u00ebr skanimin e porteve t\u00eb rrjetit t\u00eb brendsh\u00ebm | ProHoster","description":"K\u00ebrkuesit nga Universiteti i Bostonit zhvilluan nj\u00eb metod\u00eb sulmi (CVE-2019-11728) q\u00eb lejon skanimin e adresave IP dhe porteve t\u00eb hapura t\u00eb rrjetit brenda nj\u00eb rrjeti p\u00ebrdoruesi, t\u00eb mbrojtur nga nj\u00eb zjarr ndar\u00ebs, ose n\u00eb sistemin aktual (localhost). Sulmi mund t\u00eb kryhet duke hapur nj\u00eb faqe t\u00eb stilizuar n\u00eb shfletues. Teknikat e propozueshme mb\u00ebshteten n\u00eb p\u00ebrdorimin e header-it HTTP Alt-Svc (Sh\u00ebrbime Alternuese HTTP, RFC-7838). Problemi shfaqet","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Alt-Svc \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0411\u043e\u0441\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-11728), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442\u0433\u043e\u0440\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u043e\u043c, \u0438\u043b\u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (localhost). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Alt-Svc (HTTP Alternate Services, RFC-7838). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/http-zagolovok-alt-svc-mozhet-primenyatsya-dlya-skanirovaniya-portov-vnutrennej-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:15:49+00:00","article:modified_time":"2019-10-31T19:15:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37112","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 06:09:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:33:24","updated":"2026-01-22 06:09:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37112"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37112\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27822"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}