{"id":101617,"date":"2021-10-13T10:22:48","date_gmt":"2021-10-13T08:22:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe"},"modified":"2021-10-13T10:22:48","modified_gmt":"2021-10-13T08:22:48","slug":"iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","title":{"rendered":"Skadliga paket mitmproxy2 och mitmproxy-iframe har tagits bort fr\u00e5n PyPI-katalogen.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

F\u00f6rfattaren till mitmproxy, ett verktyg f\u00f6r analys av HTTP\/HTTPS-trafik, noterade att en fork av sitt projekt hade dykt upp i katalogen f\u00f6r Python-paket PyPI (Python Package Index). Forken distribuerades under det liknande namnet mitmproxy2 och en icke-existerande version 8.0.1 (nuvarande version av mitmproxy \u00e4r 7.0.4) med f\u00f6rhoppningen att ouppm\u00e4rksamma anv\u00e4ndare skulle uppfatta paketet som en ny utg\u00e5va av huvudprojektet (typklick) och vilja testa den nya versionen. <\/p>\n

\u041f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0441\u0442\u0430\u0432\u0443 mitmproxy2 \u0431\u044b\u043b \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d mitmproxy, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043a \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 «X-Frame-Options: DENY», \u0437\u0430\u043f\u0440\u0435\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u043d\u0443\u0442\u0440\u0438 iframe, \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 XSRF-\u0430\u0442\u0430\u043a \u0438 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 «Access-Control-Allow-Origin: *», «Access-Control-Allow-Headers: *» \u0438 «Access-Control-Allow-Methods: POST, GET, DELETE, OPTIONS». <\/p>\n

De angivna \u00e4ndringarna tog bort begr\u00e4nsningar f\u00f6r \u00e5tkomst till HTTP API:et som anv\u00e4nds f\u00f6r att styra mitmproxy genom webgr\u00e4nssnittet, vilket gjorde det m\u00f6jligt f\u00f6r varje angripare som befann sig i samma lokala n\u00e4tverk att initiera k\u00f6rningen av sin egen kod p\u00e5 anv\u00e4ndarens system genom att skicka HTTP-f\u00f6rfr\u00e5gningar. <\/p>\n

Katalogadministrationen gick med p\u00e5 att de f\u00f6r\u00e4ndringar som gjorts kan tolkas som skadliga, och att paketet i sig var ett f\u00f6rs\u00f6k att marknadsf\u00f6ra en annan produkt under f\u00f6respeglingen av huvudprojektet (i paketbeskrivningen h\u00e4vdades det att detta var en ny version av mitmproxy, och inte en fork). Efter att paketet tagits bort fr\u00e5n katalogen publicerades n\u00e4sta dag ett nytt paket mitmproxy-iframe i PyPI, vars beskrivning ocks\u00e5 helt \u00f6verensst\u00e4mde med det officiella paketet. F\u00f6r n\u00e4rvarande har paketet mitmproxy-iframe ocks\u00e5 tagits bort fr\u00e5n katalogen PyPI.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0432\u0442\u043e\u0440 mitmproxy, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 HTTP\/HTTPS, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0444\u043e\u0440\u043a\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0424\u043e\u0440\u043a \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u0445\u043e\u0436\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c mitmproxy2 \u0438 \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 8.0.1 (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a mitmproxy 7.0.4) \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u043e\u0441\u043f\u0440\u0438\u043c\u0443\u0442 \u043f\u0430\u043a\u0435\u0442 \u043a\u0430\u043a \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 (\u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433) \u0438 \u043f\u043e\u0436\u0435\u043b\u0430\u044e\u0442 \u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101617","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Skadliga paket mitmproxy2 och mitmproxy-iframe har tagits bort fr\u00e5n katalogen PyPI | ProHoster","description":"F\u00f6rfattaren till mitmproxy, ett verktyg f\u00f6r analys av HTTP\/HTTPS-trafik, noterade att en fork av sitt projekt hade dykt upp i katalogen f\u00f6r Python-paket PyPI (Python Package Index).","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 PyPI \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b mitmproxy2 \u0438 mitmproxy-iframe | ProHoster","og:description":"\u0410\u0432\u0442\u043e\u0440 mitmproxy, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 HTTP\/HTTPS, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0444\u043e\u0440\u043a\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/iz-kataloga-pypi-udaleny-vredonosnye-pakety-mitmproxy2-i-mitmproxy-iframe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-13T08:22:48+00:00","article:modified_time":"2021-10-13T08:22:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101617","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-13 08:28:03","updated":"2022-10-06 02:37:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/101617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=101617"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/101617\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=101617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=101617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=101617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}