{"id":162854,"date":"2026-02-26T23:11:54","date_gmt":"2026-02-26T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi"},"modified":"2026-02-26T23:11:54","modified_gmt":"2026-02-26T21:11:58","slug":"ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","title":{"rendered":"AirSnitch-attacken, som g\u00f6r det m\u00f6jligt att kringg\u00e5 isoleringen mellan klienter i Wi-Fi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Forskare vid University of California, Riverside har utvecklat (PDF) en ny klass av attacker mot tr\u00e5dl\u00f6sa n\u00e4tverk \u2014 AirSnitch. Attackerna m\u00f6jligg\u00f6r att kringg\u00e5 klientisolationsmekanismer i Wi-Fi-n\u00e4tverk som hindrar klienter fr\u00e5n att kommunicera direkt med varandra. I det s\u00e4msta scenariot till\u00e5ter attackerna en angripare att omdirigera offret trafik (MITM) f\u00f6r att analysera eller modifiera okrypterade f\u00f6rfr\u00e5gningar, samt att manipulera webbplatsanrop genom DNS-cachef\u00f6rgiftning. <\/p>\n

F\u00f6r att genomf\u00f6ra attacker m\u00e5ste en angripare ha m\u00f6jlighet att ansluta till samma tr\u00e5dl\u00f6sa n\u00e4tverk som offret, eller till ett g\u00e4stn\u00e4tverk som drivs av samma \u00e5tkomstpunkt. Till exempel kan attacker till\u00e4mpas i offentliga tr\u00e5dl\u00f6sa n\u00e4tverk. Av de 9 testade modellerna av tr\u00e5dl\u00f6sa \u00e5tkomstpunkter fr\u00e5n Netgear, Tenda, D-LINK, TP-LINK, ASUS, Ubiquiti, LANCOM och Cisco, samt l\u00f6sningar med DD-WRT och OpenWrt firmware, visade sig alla enheter vara s\u00e5rbara f\u00f6r minst en metod av attack.

\"AirSnitch-attacken,<\/center> <\/p>\n

Tre problem framh\u00e4vs som m\u00f6jligg\u00f6r attacker. Det f\u00f6rsta problemet g\u00f6r det m\u00f6jligt att kringg\u00e5 isoleringen mellan klienter p\u00e5 grund av felaktig hantering av nycklar som anv\u00e4nds f\u00f6r att skydda s\u00e4ndningar. Det andra problemet har att g\u00f6ra med att isolering vanligtvis till\u00e4mpas p\u00e5 MAC-niv\u00e5 eller IP-niv\u00e5, men inte p\u00e5 b\u00e5da niv\u00e5er samtidigt. Det tredje problemet orsakas av os\u00e4ker synkronisering av klientidentifierare p\u00e5 hela n\u00e4tverksstacken, vilket g\u00f6r det m\u00f6jligt att f\u00e5nga inkommande och utg\u00e5ende trafik fr\u00e5n andra klienter. <\/p>\n

Moderna tr\u00e5dl\u00f6sa \u00e5tkomstpunkter f\u00f6renar funktionerna av en radio\u00f6verf\u00f6ring och en n\u00e4tverksbrygga (Layer 2 Switch). Bryggan, till skillnad fr\u00e5n tr\u00e5dbundna n\u00e4tverk, anv\u00e4nder ist\u00e4llet f\u00f6r att koppla en klient till en fysisk port en logisk koppling till den tr\u00e5dl\u00f6sa kanalen. Som identifierare vid en s\u00e5dan koppling anv\u00e4nds klientens MAC-adress, som kopplas till kanalen i en s\u00e4rskild MAC-adresstabell. Om klienten v\u00e4xlar till en annan kanal (t.ex. fr\u00e5n 2,4 GHz till 5 GHz) uppdateras informationen i tabellen.

\"AirSnitch-attacken,<\/center> <\/p>\n

Attack occurs at the first (physical, radio channel) and second (data link, MAC address) layers of the OSI network model. It involves an attacker connecting to the same access point but using a different frequency range than the victim (for example, 2.4 GHz instead of 5 GHz) and sending a connection negotiation request (4-way handshake) that specifies the victim's MAC address (similar to ARP spoofing in Ethernet networks). Since clients are identified by their MAC address, the access point assumes that the client has switched to another channel and updates the entry in the MAC address table. Consequently, all incoming traffic from the access point begins to be redirected to the attacker's device.

\"AirSnitch-attacken,<\/center>
\"AirSnitch-attacken,<\/center> <\/p>\n

F\u00f6r att organisera en \u00f6msesidig avlyssning \u00e5terst\u00e4ller angriparen de data som \u00e4r adresserade till offret till det ursprungliga tillst\u00e5ndet i MAC-adresstabellen. F\u00f6r detta skickas ett paket \"ICMP Ping\" med en slumpm\u00e4ssig MAC-adress och krypteras med nyckeln GTK (Group Temporal Key), som \u00e4r gemensam f\u00f6r alla klienter i det tr\u00e5dl\u00f6sa n\u00e4tverket. Accesspunkten, som f\u00e5r detta paket, \u00e5terger bindningen av offrets MAC-adress till den ursprungliga tr\u00e5dl\u00f6sa kanalen. Ingrepp i trafiken sker genom cyklisk manipulering och \u00e5terst\u00e4llande av posten i MAC-adresstabellen.

\"AirSnitch-attacken,<\/center>
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 — AirSnitch. \u0410\u0442\u0430\u043a\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 Wi-Fi \u0441\u0435\u0442\u0438, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433 \u043a \u0434\u0440\u0443\u0433\u0443. \u041f\u0440\u0438 \u043d\u0430\u0438\u0445\u0443\u0434\u0448\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u0442\u0440\u0430\u0444\u0438\u043a \u0436\u0435\u0440\u0442\u0432\u044b (MITM) \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":162855,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AirSnitch Attack, Allowing Bypass of Client Isolation in Wi-Fi | ProHoster","description":"Researchers from the University of California, Riverside have developed a new class of attacks on wireless networks - AirSnitch.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 AirSnitch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0432 Wi-Fi | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 (PDF) \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 - AirSnitch.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-airsnitch-pozvolyayushhaya-obojti-izolyacziyu-mezhdu-klientami-v-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-26T21:11:58+00:00","article:modified_time":"2026-02-26T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162854","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-26 21:12:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-26 21:11:58","updated":"2026-02-26 21:12:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/162854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=162854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/162854\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/162855"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=162854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=162854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=162854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}