{"id":53634,"date":"2019-12-06T00:00:00","date_gmt":"2019-12-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli"},"modified":"2020-02-18T14:01:34","modified_gmt":"2020-02-18T11:01:34","slug":"uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","title":{"rendered":"Nj\u00eb vulnerabilitet q\u00eb lejon nd\u00ebrhyrjet n\u00eb lidhjet TCP t\u00eb realizuara p\u00ebrmes tunelesh VPN","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publikuar<\/a><\/noindex> teknika e sulmit (CVE-2019-14899), e cila lejon ndryshimin, mesimin ose z\u00ebvend\u00ebsimin e paketeve n\u00eb lidhjet TCP, t\u00eb kaluara p\u00ebrmes tunel\u00ebve VPN. Problemi prek Linux, FreeBSD, OpenBSD, Android, macOS, iOS dhe sisteme t\u00eb tjera t\u00eb ngjashme me Unix. Linux mb\u00ebshtet mekanizmin rp_filter (filtrimi i rrug\u00ebs s\u00eb kund\u00ebrt) p\u00ebr IPv4, aktivizimi i t\u00eb cilit n\u00eb modalitetin \u2018Strict\u2019 neutralizon k\u00ebt\u00eb problem. <\/p>\n

Metoda lejon z\u00ebvend\u00ebsimin e paketeve n\u00eb nivelin e lidhjeve TCP, q\u00eb kalojn\u00eb brenda nj\u00eb tuneli t\u00eb enkriptuar, por nuk lejon p\u00ebrfshirjen n\u00eb lidhjet q\u00eb p\u00ebrdorin shtresa t\u00eb tjera enkriptuese (p\u00ebr shembull, TLS, HTTPS, SSH). Algoritmet e enkripcioneve t\u00eb p\u00ebrdorura n\u00eb VPN nuk kan\u00eb r\u00ebnd\u00ebsi, pasi paketat e falsifikuara vijn\u00eb nga interfaci i jasht\u00ebm, nd\u00ebrsa p\u00ebrpunohen nga b\u00ebrthamaja si paketa nga interfaci VPN. Q\u00ebllimi m\u00eb i mundsh\u00ebm i sulmit \u00ebsht\u00eb nd\u00ebrhyrja n\u00eb lidhjet HTTP t\u00eb paenkriptuara, por nuk p\u00ebrjashtohet<\/a><\/noindex> dhe p\u00ebrdorimi i sulmit p\u00ebr t\u00eb manipuluar p\u00ebrgjigjet DNS. <\/p>\n

Z\u00ebvend\u00ebsimi i suksessh\u00ebm i paketeve \u00ebsht\u00eb demonstruar p\u00ebr tunel\u00ebt e krijuar me OpenVPN, WireGuard dhe IKEv2\/IPSec. Tor nuk \u00ebsht\u00eb i ndjesh\u00ebm ndaj problemit, pasi p\u00ebrdor SOCKS p\u00ebr kalimin e trafikut dhe lidhjen me interfacin loopback. P\u00ebr IPv4, sulmi \u00ebsht\u00eb i mundsh\u00ebm n\u00ebse rp_filter \u00e7ohet n\u00eb modalitetin \u2018Loose\u2019 (sysctl net.ipv4.conf.all.rp_filter = 2). Fillimisht, n\u00eb shumic\u00ebn e sistemeve u p\u00ebrdor modaliteti \u2018Strict\u2019, por duke filluar nga systemd 240<\/a><\/noindex>, i l\u00ebshuar n\u00eb dhjetor t\u00eb vitit t\u00eb kaluar, modaliteti i funksionimit nga e para u z\u00ebvend\u00ebsua me \u2018Loose\u2019 dhe ky ndryshim u pasqyrua n\u00eb cil\u00ebsimet fillestare t\u00eb shum\u00eb distribucioneve Linux.<\/p>\n

Mekanizmi rp_filter aplikohet<\/a><\/noindex> p\u00ebr verifikimin e shtes\u00eb t\u00eb rrug\u00ebve t\u00eb kalimit t\u00eb paketeve p\u00ebr t\u00eb parandaluar spufimin e adresave t\u00eb burimit. Kur vendoset n\u00eb vler\u00ebn 0, verifikimi i adres\u00ebs s\u00eb burimit nuk kryhet dhe \u00e7do paket\u00eb mund t\u00eb ridrejtohet pa kufizime mes interfecesh rrjetesh. Modaliteti 1 \u2018Strict\u2019 aktivizon verifikimin e \u00e7do pakete q\u00eb vjen nga jasht\u00eb p\u00ebr t\u00eb p\u00ebrputhur me tabel\u00ebn e rrug\u00ebve, dhe n\u00ebse interfaci rrjetit, p\u00ebrmes t\u00eb cilit \u00ebsht\u00eb marr\u00eb paketa, nuk lidhet me rrug\u00ebn optimale p\u00ebr dor\u00ebzimin e p\u00ebrgjigjes, at\u00ebher\u00eb paketa hidhet posht\u00eb. Modaliteti 2 \u2018Loose\u2019 leht\u00ebson verifikimin p\u00ebr t\u00eb lejuar pun\u00ebn n\u00eb p\u00ebrdorimin e balancuesve t\u00eb ngarkes\u00ebs ose rrug\u00ebs asimetrike, ku
\nrruga e p\u00ebrgjigjes mund t\u00eb kaloj\u00eb jo p\u00ebrmes atij interfaci rrjeti, p\u00ebrmes t\u00eb cilit ka ardhur paketa e ardhshme.<\/p>\n

N\u00eb modalitetin \u201eLoose\u201c, paketa n\u00eb hyrje kontrollohet p\u00ebr t'u p\u00ebrputhur me tabel\u00ebn e ruterit, por konsiderohet e pranueshme n\u00ebse adresa e burimit \u00ebsht\u00eb e arritshme p\u00ebrmes ndonj\u00eb nd\u00ebrfaqe rrjeti t\u00eb disponueshme. Sulmi i propozuar bazohet n\u00eb supozimin se sulmuesi mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb paket\u00eb me nj\u00eb adres\u00eb burimi t\u00eb manipuluar q\u00eb i p\u00ebrket nd\u00ebrfaqes VPN, dhe megjithat\u00eb, ndon\u00ebse kjo paket\u00eb hyjn\u00eb n\u00eb sistem p\u00ebrmes nj\u00eb nd\u00ebrfaqeje t\u00eb jashtme t\u00eb rrjetit dhe jo p\u00ebrmes VPN, n\u00eb modalitetin rp_filter \u201eLoose\u201c kjo paket\u00eb nuk do t\u00eb hidhet. <\/p>\n

P\u00ebr t\u00eb kryer sulmin, sulmuesi duhet t\u00eb kontrolloj\u00eb portin p\u00ebrmes t\u00eb cilit p\u00ebrdoruesi del n\u00eb rrjet (p\u00ebr shembull, p\u00ebrmes nj\u00eb organizate MITM, kur viktima lidhet me nj\u00eb pik\u00eb qasjeje t\u00eb kontrolluar nga sulmuesi ose p\u00ebrmes k\u00ebrcimit t\u00eb ruterit<\/a><\/noindex>). Duke kontrolluar portin p\u00ebrmes t\u00eb cilit p\u00ebrdoruesi \u00ebsht\u00eb i lidhur n\u00eb rrjet, sulmuesi mund t\u00eb d\u00ebrgoj\u00eb paketa fallco q\u00eb do t\u00eb perceptohen n\u00eb kontekstin e nd\u00ebrfaqes s\u00eb rrjetit VPN, por p\u00ebrgjigjet do t\u00eb d\u00ebrgohen p\u00ebrmes tunelit.<\/p>\n

Duke gjeneruar nj\u00eb rrjedh\u00eb paketash fallco, n\u00eb t\u00eb cilat vihet adresa IP e nd\u00ebrfaqes VPN, b\u00ebhen p\u00ebrpjekje p\u00ebr t\u00eb ndikuar n\u00eb lidhjen e vendosur nga klienti, por ndikimi i k\u00ebtyre paketimeve mund t\u00eb v\u00ebrehet vet\u00ebm p\u00ebrmes analiz\u00ebs pasive t\u00eb trafikut t\u00eb kriptuar t\u00eb lidhur me veprimin e tunelit. P\u00ebr t\u00eb kryer sulmin, duhet t\u00eb dihet adresa IP e caktuar nga serveri VPN p\u00ebr nd\u00ebrfaqen e tunelit, si dhe t\u00eb p\u00ebrcaktohet se n\u00eb at\u00eb moment ka nj\u00eb lidhje aktive p\u00ebr nj\u00eb host t\u00eb caktuar p\u00ebrmes tunelit. <\/p>\n

P\u00ebr t\u00eb p\u00ebrcaktuar IP-n\u00eb e nd\u00ebrfaqes virtuale t\u00eb rrjetit VPN, p\u00ebrdoret d\u00ebrgimi i paketimeve SYN-ACK n\u00eb sistemin e viktim\u00ebs, duke kaluar n\u00ebp\u00ebr t\u00eb gjith\u00eb gam\u00ebn e adresave virtuale (fillimisht shqyrtohen adresat q\u00eb p\u00ebrdoren n\u00eb VPN m\u00eb s\u00eb shpeshti, p\u00ebr shembull, n\u00eb OpenVPN p\u00ebrdoret subneti 10.8.0.0\/24). Eksistenca e nj\u00eb adrese mund t\u00eb gjykohet nga ardhja e nj\u00eb p\u00ebrgjigjeje me flamurin RST.<\/p>\n

N\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme, p\u00ebrcaktohet pranin\u00eb e nj\u00eb lidhjeje me nj\u00eb faqe t\u00eb caktuar dhe numrin e portit nga ana e klientit \u2014 duke i provuar numrat e portit n\u00eb drejtim t\u00eb p\u00ebrdoruesit, d\u00ebrgohet nj\u00eb paket\u00eb SYN, me adres\u00ebn burimore, ku \u00ebsht\u00eb vendosur IP e faqes, nd\u00ebrsa adresa e destinacionit \u00ebsht\u00eb IP virtuale VPN. Porta serverit mund t\u00eb parashikohet (80 p\u00ebr HTTP), nd\u00ebrsa numri i portit nga ana e klientit mund t\u00eb llogaritet p\u00ebrmes prov\u00ebs, duke analizuar ndryshimin e intensitetit t\u00eb p\u00ebrgjigjeve ACK p\u00ebr numra t\u00eb ndrysh\u00ebm t\u00eb ndryshimeve n\u00eb munges\u00eb t\u00eb paket\u00ebs me flamurin RST.<\/p>\n

N\u00eb k\u00ebt\u00eb faz\u00eb, sulmuesi di t\u00eb kat\u00ebr element\u00ebt e lidhjes (adresat\/portet IP t\u00eb burimit dhe adres\u00ebn\/portin IP t\u00eb destinacionit), por p\u00ebr t\u00eb gjeneruar nj\u00eb paket\u00eb t\u00eb rreme, e cila do t\u00eb pranohet nga sistemi i viktim\u00ebs, sulmuesi duhet t\u00eb p\u00ebrcaktoj\u00eb numrat e sekuenc\u00ebs dhe konfirmimit (seq dhe ack) t\u00eb lidhjes TCP. P\u00ebr t\u00eb p\u00ebrcaktuar k\u00ebto parametra, sulmuesi vazhdimisht d\u00ebrgon paketat e rreme RST, duke provuar numra t\u00eb ndrysh\u00ebm sekuencash, derisa t\u00eb regjistroj\u00eb nj\u00eb paket\u00eb ACK p\u00ebrgjigje, arrij\u00eb q\u00eb treguesi tregon se numri bie brenda dritares TCP. <\/p>\n

Pastaj sulmuesi sakt\u00ebson sakt\u00ebsin\u00eb e p\u00ebrcaktimit duke d\u00ebrguar paketa me t\u00eb nj\u00ebjtin num\u00ebr dhe duke v\u00ebzhguar marrjen e p\u00ebrgjigjeve ACK, pas s\u00eb cil\u00ebs p\u00ebrshtat numrin e sakt\u00eb t\u00eb sekuenc\u00ebs aktuale. Detyra v\u00ebshtir\u00ebsohet sepse p\u00ebrgjigjet d\u00ebrgohen brenda nj\u00eb tuneli t\u00eb enkriptuar dhe analiza e pranis\u00eb s\u00eb tyre n\u00eb rrjedh\u00ebn e kapur t\u00eb trafikut mund t\u00eb b\u00ebhet vet\u00ebm me metoda indirekte. Fakti i d\u00ebrgimit t\u00eb nj\u00eb pakete ACK t\u00eb adresuar serverit VPN nga klienti p\u00ebrcaktohet bazuar n\u00eb madh\u00ebsin\u00eb dhe vones\u00ebn e p\u00ebrgjigjeve t\u00eb enkriptuara, t\u00eb cilat korrelacionojn\u00eb me d\u00ebrgimin e paketave t\u00eb rreme. P\u00ebr shembull, p\u00ebr OpenVPN, nj\u00eb paket\u00eb e enkriptuar me madh\u00ebsi 79 lejon t\u00eb gjykohet sakt\u00ebsisht se brenda saj ndodhet nj\u00eb konfirmim ACK.<\/p>\n

Para se mbrojtja nga sulmi t\u00eb shtohej n\u00eb b\u00ebrtham\u00ebn e sistemit operativ, si nj\u00eb metod\u00eb p\u00ebrkohshme p\u00ebr bllokimin e problemit rekomandohet<\/a><\/noindex> me an\u00eb t\u00eb filtrit t\u00eb paketave n\u00eb zinxhirin \u00abpreroute\u00bb p\u00ebr t\u00eb bllokuar kalimin e paketave, n\u00eb t\u00eb cilat si adres\u00eb destinacioni \u00ebsht\u00eb vendosur IP-efikase n\u00eb tunel.<\/p>\n

iptables -t raw -I PREROUTING ! -i wg0 -d 10.182.12.8 -m addrtype ! \u2014src-type LOCAL -j DROP<\/p>\n

ose p\u00ebr nftables<\/p>\n

nft add table ip raw
\n nft add chain ip raw prerouting \u2018{ type filter hook prerouting priority 0; }\u2019
\n nft add rule ip raw prerouting \u2018iifname != \u00abwg0\u00bb ip daddr 10.182.12.8 fib saddr type != local drop\u2019<\/p>\n

P\u00ebr mbrojtje gjat\u00eb p\u00ebrdorimit t\u00eb tunlesh me adresa IPv4, mjafton t\u00eb kaloni rp_filter n\u00eb m\u00ebnyr\u00ebn «Strict» («sysctl net.ipv4.conf.all.rp_filter = 1»). Nga ana e VPN, metoda e p\u00ebrcaktimit t\u00eb numrit t\u00eb rendit mund t\u00eb bllokohet duke shtuar mbushje n\u00eb paketat e enkriptuara, duke b\u00ebr\u00eb q\u00eb madh\u00ebsia e t\u00eb gjitha paketave t\u00eb jet\u00eb e nj\u00ebjt\u00eb. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043f\u0440\u043e\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux, FreeBSD, OpenBSD, Android, macOS, iOS \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. Linux \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c rp_filter (reverse path filtering) \u0434\u043b\u044f IPv4, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u0436\u0438\u043c «Strict» \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53634","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti q\u00eb lejon nd\u00ebrhyrjen n\u00eb lidhjet TCP t\u00eb realizuara p\u00ebrmes tunelikeve VPN | ProHoster","description":"Teknika e sulmit (CVE-2019-14899) \u00ebsht\u00eb publikuar, e cila lejon z\u00ebvend\u00ebsimin, modifikimin ose futjen e paketave.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043a\u043b\u0438\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53634","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:21:20","updated":"2026-01-24 08:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53634"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53634\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}