{"id":53634,"date":"2019-12-06T00:00:00","date_gmt":"2019-12-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli"},"modified":"2020-02-18T14:01:34","modified_gmt":"2020-02-18T11:01:34","slug":"uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","title":{"rendered":"Nj\u00eb dob\u00ebsi q\u00eb lejon nd\u00ebrhyrjen n\u00eb lidhjet TCP q\u00eb realizohen p\u00ebrmes tunelave VPN","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publikuar<\/a><\/noindex> teknika e sulmit (CVE-2019-14899), e cila lejon z\u00ebvend\u00ebsimin, ndryshimin ose futjen e paketimeve n\u00eb lidhjet TCP, q\u00eb kalojn\u00eb p\u00ebrmes tunel\u00ebve VPN. Problemi prek sistemet Linux, FreeBSD, OpenBSD, Android, macOS, iOS dhe sisteme t\u00eb tjera t\u00eb ngjashme me Unix. Linux mb\u00ebshtet mekanizmin rp_filter (filtrimi i rrug\u00ebs s\u00eb kund\u00ebrt) p\u00ebr IPv4, aktivizimi i t\u00eb cilit n\u00eb modalitetin 'Strikt' neutralizon k\u00ebt\u00eb problem. <\/p>\n

Metoda lejon z\u00ebvend\u00ebsimin e paketeve n\u00eb nivelin e lidhjeve TCP q\u00eb kalojn\u00eb brenda nj\u00eb tuneli t\u00eb enkriptuar, por nuk lejon nd\u00ebrhyrjen n\u00eb lidhjet q\u00eb p\u00ebrdorin shtresa shtes\u00eb enkriptimi (p.sh., TLS, HTTPS, SSH). Algoritmet e enkriptimit t\u00eb p\u00ebrdorura n\u00eb VPN nuk kan\u00eb r\u00ebnd\u00ebsi, pasi paketat false vijn\u00eb nga interfaci i jasht\u00ebm dhe trajtohen nga b\u00ebrthama si paketa nga interfaci VPN. Q\u00ebllimi m\u00eb i mundsh\u00ebm i sulmit \u00ebsht\u00eb nd\u00ebrhyrja n\u00eb lidhjet HTTP t\u00eb paenkriptuara, por nuk p\u00ebrjashtohet<\/a><\/noindex> dhe p\u00ebrdorimi i sulmit p\u00ebr t\u00eb manipuluar p\u00ebrgjigjet DNS. <\/p>\n

Z\u00ebvend\u00ebsimi i suksessh\u00ebm i paketimeve \u00ebsht\u00eb demonstruar p\u00ebr tunel\u00ebt e krijuar me OpenVPN, WireGuard dhe IKEv2\/IPSec. Tor nuk \u00ebsht\u00eb i ndjesh\u00ebm ndaj k\u00ebtij problemi, pasi p\u00ebrdor SOCKS p\u00ebr kalimin e trafikut dhe lidhjen me interfacin loopback. P\u00ebr IPv4, sulmi \u00ebsht\u00eb i mundsh\u00ebm n\u00eb rastin e kalimit t\u00eb rp_filter n\u00eb modalitetin 'Loose' (sysctl net.ipv4.conf.all.rp_filter = 2). Fillimisht, n\u00eb shumic\u00ebn e sistemeve p\u00ebrdorej modaliteti 'Strikt', por duke filluar nga systemd 240<\/a><\/noindex>, i l\u00ebshuar n\u00eb dhjetor t\u00eb vitit t\u00eb kaluar, modaliteti i pun\u00ebs me default u z\u00ebvend\u00ebsua me 'Loose' dhe ky ndryshim ndodhi n\u00eb konfigurimet e deritanishme t\u00eb shum\u00eb distribuive Linux.<\/p>\n

Mekanizmi rp_filter p\u00ebrdoret<\/a><\/noindex> p\u00ebr nj\u00eb kontroll shtes\u00eb t\u00eb rrug\u00ebve t\u00eb kalimit t\u00eb paketimeve p\u00ebr t\u00eb parandaluar falsifikimin e adres\u00ebs s\u00eb burimit. Kur \u00ebsht\u00eb vendosur n\u00eb vler\u00ebn 0, kontrolli i adres\u00ebs s\u00eb burimit nuk b\u00ebhet dhe \u00e7do paket\u00eb mund t\u00eb redirektohet pa kufizime mes interfaceve rrjetore. Modaliteti 1 'Strikt' p\u00ebrfshin kontrollimin e \u00e7do pakete q\u00eb vjen nga jasht\u00eb p\u00ebr t\u00eb p\u00ebrputhur me tabel\u00ebn e rrug\u00ebzimit, dhe n\u00ebse interfaceti rrjetor, p\u00ebrmes t\u00eb cilit \u00ebsht\u00eb marr\u00eb paketa, nuk \u00ebsht\u00eb i lidhur me rrug\u00ebn optimale p\u00ebr dor\u00ebzimin e p\u00ebrgjigjes, at\u00ebher\u00eb paketa hidhet posht\u00eb. Modaliteti 2 'Loose' leht\u00ebson kontrollin, p\u00ebr t\u00eb lejuar pun\u00ebn kur p\u00ebrdoren balancuesit e ngarkes\u00ebs ose rrug\u00ebzimi asimetrik, ku
\nrruga e p\u00ebrgjigjes mund t\u00eb kaloj\u00eb jo p\u00ebrmes atij interfaci t\u00eb rrjetit p\u00ebrmes t\u00eb cilit \u00ebsht\u00eb marr\u00eb paketa hyr\u00ebse.<\/p>\n

N\u00eb modalitetin 'Loose' paketa e ardhshme kontrollohet p\u00ebr t'u p\u00ebrputhur me tabel\u00ebn e rrug\u00ebzimit, por konsiderohet e lejueshme n\u00ebse adresa e burimit \u00ebsht\u00eb e arritshme p\u00ebrmes ndonj\u00eb interfaceti rrjetor n\u00eb dispozicion. Sulmi i propozuar nd\u00ebrtohet mbi faktin se sulmuesi mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb paket\u00eb me adres\u00ebn e burimit t\u00eb modifikuar, e cila p\u00ebrputhet me interfacetin VPN, dhe ndon\u00ebse kjo paket\u00eb do t\u00eb arrij\u00eb sistemin p\u00ebrmes nj\u00eb interfaci rrjetor t\u00eb jashtme dhe jo p\u00ebrmes VPN, n\u00eb modalitetin rp_filter 'Loose' nj\u00eb paket\u00eb e till\u00eb nuk do t\u00eb hidhet posht\u00eb. <\/p>\n

P\u00ebr t\u00eb kryer sulmin, sulmuesi duhet t\u00eb kontrolloj\u00eb grev\u00ebn p\u00ebrmes s\u00eb cil\u00ebs p\u00ebrdoruesi del n\u00eb rrjet (p.sh., p\u00ebrmes nj\u00eb organizate MITM, kur viktima lidhet me nj\u00eb pik\u00eb t\u00eb kontrolluar nga sulmuesi t\u00eb aksesit t\u00eb wireless ose p\u00ebrmes hacks t\u00eb routerit<\/a><\/noindex>). Duke kontrolluar grev\u00ebn p\u00ebrmes t\u00eb cil\u00ebs p\u00ebrdoruesi \u00ebsht\u00eb i lidhur n\u00eb rrjet, sulmuesi mund t\u00eb d\u00ebrgoj\u00eb paketa false q\u00eb do t\u00eb perceptohen n\u00eb kontekstin e interfaci t\u00eb VPN, por p\u00ebrgjigjet do t\u00eb d\u00ebrgohen p\u00ebrmes tunelit.<\/p>\n

Duke gjeneruar nj\u00eb fluks t\u00eb pacakteve false, n\u00eb t\u00eb cilat vendoset adresa IP e interfaci t\u00eb VPN, b\u00ebhen p\u00ebrpjekje p\u00ebr t\u00eb ndikuar n\u00eb lidhjen e vendosur nga klienti, por v\u00ebzhgimi i ndikimit t\u00eb k\u00ebtyre paketeve mund t\u00eb b\u00ebhet vet\u00ebm p\u00ebrmes nj\u00eb analize pasive t\u00eb fluksit t\u00eb enkriptuar t\u00eb trafikut q\u00eb lidhet me funksionimin e tunelit. P\u00ebr t\u00eb kryer sulmin \u00ebsht\u00eb e nevojshme t\u00eb dihet adresa IP e caktuar nga serveri VPN t\u00eb interfaci t\u00eb tunelit, si dhe t\u00eb determinohet q\u00eb n\u00eb at\u00eb moment nj\u00eb lidhje aktive \u00ebsht\u00eb n\u00eb tunel me nj\u00eb host t\u00eb caktuar. <\/p>\n

P\u00ebr t\u00eb p\u00ebrcaktuar IP-n\u00eb e interfaci virtual t\u00eb rrjetit VPN, d\u00ebrgohen SYN-ACK paketa n\u00eb sistemin e viktim\u00ebs, duke e kaluar gradualisht t\u00eb gjith\u00eb diapazonin e adresave virtuale (fillimisht adresa t\u00eb p\u00ebrdorura n\u00eb VPN nga e drejta, p.sh. n\u00eb OpenVPN p\u00ebrdoret subneti 10.8.0.0\/24). Eksistenc\u00ebn e adres\u00ebs mund ta gjykojm\u00eb nga marrja e nj\u00eb p\u00ebrgjigjeje me flag RST.<\/p>\n

Po ashtu, p\u00ebrcaktohet ekzistenca e nj\u00eb lidhjeje me nj\u00eb sit t\u00eb caktuar dhe numri i portit n\u00eb an\u00ebn e klientit - duke shqyrtuar numrat e portit n\u00eb drejtim t\u00eb p\u00ebrdoruesit d\u00ebrgohet nj\u00eb paket\u00eb SYN, ku adresa e burimit, n\u00eb t\u00eb cil\u00ebn \u00ebsht\u00eb futur IP i sitit, dhe adresa e destinacionit \u00ebsht\u00eb nj\u00eb IP virtuale VPN. Porta e serverit mund t\u00eb parashikohet (80 p\u00ebr HTTP), nd\u00ebrsa numri i portit n\u00eb an\u00ebn e klientit mund t\u00eb llogaritet p\u00ebrmes shqyrtimit t\u00eb ndryshimeve n\u00eb intensitetin e p\u00ebrgjigjeve ACK n\u00eb p\u00ebrputhje me munges\u00ebn e paket\u00ebs me flamur RST.<\/p>\n

N\u00eb k\u00ebt\u00eb faz\u00eb, sulmuesi di t\u00eb kat\u00ebr element\u00ebt e lidhjes (adresat\/portet IP t\u00eb burimit dhe adres\u00ebn\/portin IP t\u00eb destinacionit), por p\u00ebr t\u00eb gjeneruar nj\u00eb paket\u00eb t\u00eb rreme q\u00eb do t\u00eb perceptohet nga sistemi i viktim\u00ebs, sulmuesi duhet t\u00eb p\u00ebrcaktoj\u00eb numrat e sekuenc\u00ebs dhe t\u00eb konfirmimit (seq dhe ack) t\u00eb lidhjes TCP. P\u00ebr t\u00eb p\u00ebrcaktuar k\u00ebto parametra, sulmuesi vazhdon t\u00eb d\u00ebrgoj\u00eb paketa RST t\u00eb rreme, duke kaluar me numra t\u00eb ndrysh\u00ebm sekuence, derisa t\u00eb regjistroj\u00eb paket\u00ebn ACK p\u00ebrgjigje, e cila tregon se numri \u00ebsht\u00eb brenda dritares TCP. <\/p>\n

M\u00eb pas, sulmuesi verifikon sakt\u00ebsin\u00eb e p\u00ebrcaktimit duke d\u00ebrguar paketa me numrin e nj\u00ebjt\u00eb dhe duke v\u00ebzhguar ardhjen e p\u00ebrgjigjeve ACK, pas s\u00eb cil\u00ebs p\u00ebrcakton numrin e sakt\u00eb t\u00eb sekuenc\u00ebs aktuale. Detyra \u00ebsht\u00eb e komplikuar sepse p\u00ebrgjigjet d\u00ebrgohen brenda nj\u00eb tuneli t\u00eb enkriptuar dhe analizimi i tyre n\u00eb trafikun e kapur mund t\u00eb b\u00ebhet vet\u00ebm me metoda indirekte. Fakti i d\u00ebrgimit t\u00eb paket\u00ebs ACK t\u00eb adresuar n\u00eb serverin VPN nga klienti p\u00ebrcaktohet n\u00eb baz\u00eb t\u00eb madh\u00ebsis\u00eb dhe vones\u00ebs s\u00eb p\u00ebrgjigjeve t\u00eb enkriptuara, q\u00eb korrelacionojn\u00eb me d\u00ebrgimin e paketimeve t\u00eb rreme. P\u00ebr shembull, p\u00ebr OpenVPN, nj\u00eb paket\u00eb e enkriptuar me madh\u00ebsi 79 lejon t\u00eb gjykohet me sakt\u00ebsi se brenda p\u00ebrmban konfirmimin ACK.<\/p>\n

Para se t\u00eb shtohet mbrojtja ndaj sulmit n\u00eb b\u00ebrtham\u00ebn e sistemit operativ, si nj\u00eb metod\u00eb p\u00ebrkoh\u00ebsore t\u00eb bllokimit t\u00eb problemit rekomandohet<\/a><\/noindex> p\u00ebrdorimi i filtrit t\u00eb paketave n\u00eb zinxhirin «preroute» p\u00ebr t\u00eb bllokuar kalimin e paketimeve, n\u00eb t\u00eb cilat si adres\u00eb destinacioni \u00ebsht\u00eb e specifikuar adresa virtuale IP e tunelit.<\/p>\n

iptables -t raw -I PREROUTING ! -i wg0 -d 10.182.12.8 -m addrtype ! —src-type LOCAL -j DROP<\/p>\n

ose p\u00ebr nftables<\/p>\n

nft add table ip raw
\n nft add chain ip raw prerouting ‘{ type filter hook prerouting priority 0; }’
\n nft add rule ip raw prerouting ‘iifname != «wg0» ip daddr 10.182.12.8 fib saddr type != local drop’<\/p>\n

P\u00ebr mbrojtje gjat\u00eb p\u00ebrdorimit t\u00eb tunelieve me adresat IPv4, mjafton t\u00eb kalosh rp_filter n\u00eb modin «Strict» («sysctl net.ipv4.conf.all.rp_filter = 1»). Nga ana e VPN, metoda p\u00ebr t\u00eb p\u00ebrcaktuar numrin e sekuenc\u00ebs mund t\u00eb bllokohet duke shtuar mbushje n\u00eb paketat e enkriptuara, duke b\u00ebr\u00eb q\u00eb madh\u00ebsia e t\u00eb gjitha paketimeve t\u00eb jet\u00eb e nj\u00ebjt\u00eb. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043f\u0440\u043e\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux, FreeBSD, OpenBSD, Android, macOS, iOS \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. Linux \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c rp_filter (reverse path filtering) \u0434\u043b\u044f IPv4, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u0436\u0438\u043c «Strict» \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53634","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti q\u00eb lejon nd\u00ebrhyrjen n\u00eb lidhjet TCP q\u00eb kalojn\u00eb p\u00ebrmes tunel\u00ebve VPN | ProHoster","description":"\u00cbsht\u00eb publikuar teknika e sulmit (CVE-2019-14899), e cila lejon z\u00ebvend\u00ebsimin, modifikimin ose futjen e paketimeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043a\u043b\u0438\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53634","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:21:20","updated":"2026-01-24 08:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53634"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53634\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}