ืึทื˜ืึทืงืขืจื– ื”ืึธื‘ืŸ ื‘ืึทืงื•ืžืขืŸ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ Python ืคึผืขืงืœ ctx ืื•ืŸ ื“ื™ PHP ื‘ื™ื‘ืœื™ืึธื˜ืขืง phpass

ืื•ืžื‘ืึทืงืึทื ื˜ ืึทื˜ืึทืงืขืจื– ืคืืจื“ื™ื ื˜ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ Python ืคึผืขืงืœ ctx ืื•ืŸ ื“ื™ PHP ื‘ื™ื‘ืœื™ืึธื˜ืขืง phpass, ื ืึธืš ื•ื•ืึธืก ื–ื™ื™ ืึทืจื™ื™ึทื ื’ืขืฉื™ืงื˜ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืžื™ื˜ ืึท ื‘ื™ื™ื–ืข ืึทืจื™ื™ึทื ืœื™ื™ื’ืŸ ื•ื•ืึธืก ื’ืขืฉื™ืงื˜ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืฆื• ืึท ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืกืขืจื•ื•ืขืจ ืžื™ื˜ ื“ื™ ื“ืขืจื•ื•ืึทืจื˜ื•ื ื’ ืคื•ืŸ ืกื˜ื™ืœื™ื ื’ ื˜ืึธืงืขื ืก ืฆื• AWS ืื•ืŸ ืงืขืกื™ื™ื“ืขืจื“ื™ืง ื™ื ื˜ืึทื’ืจื™ื™ืฉืึทืŸ ืกื™ืกื˜ืขืžืขืŸ. ืœื•ื™ื˜ ืฆื• ื‘ื ื™ืžืฆื ืกื˜ืึทื˜ื™ืกื˜ื™ืง, ื“ื™ Python ืคึผืขืงืœ 'ctx' ืื™ื– ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืคื•ืŸ ื“ื™ PyPI ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื•ื•ืขื’ืŸ 22 ื˜ื•ื™ื–ื ื˜ ืžืืœ ืึท ื•ื•ืึธืš. ื“ื™ phpass PHP ืคึผืขืงืœ ืื™ื– ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš ื“ื™ ืงืึทืžืคึผืึธื•ื–ืขืจ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื•ืŸ ืื™ื– ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืžืขืจ ื•ื•ื™ 2.5 ืžื™ืœื™ืึธืŸ ืžืึธืœ ื‘ื™ื– ืื™ืฆื˜.

ืื™ืŸ ctx, ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ื– ื’ืขื•ื•ืขืŸ ืึทืจื™ื™ึทื ื’ืขืฉื™ืงื˜ ืื•ื™ืฃ ืžืื™ 15 ืื™ืŸ ืžืขืœื“ื•ื ื’ 0.2.2, ืื•ื™ืฃ ืžืื™ 26 ืื™ืŸ ืžืขืœื“ื•ื ื’ 0.2.6, ืื•ืŸ ืื•ื™ืฃ ืžืื™ 21 ื“ื™ ืึทืœื˜ ืžืขืœื“ื•ื ื’ 0.1.2, ืขืจื™ื“ื–ืฉื ืึทืœื™ ื’ืขื’ืจื™ื ื“ืขื˜ ืื™ืŸ 2014, ืื™ื– ื’ืขื•ื•ืขืŸ ืจื™ืคึผืœื™ื™ืกื˜. ืขืก ืื™ื– ื’ืขื’ืœื•ื™ื‘ื˜ ืึทื– ืึทืงืกืขืก ืื™ื– ื‘ืืงื•ืžืขืŸ ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“ ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจ ืก ื—ืฉื‘ื•ืŸ.

ืึทื˜ืึทืงืขืจื– ื”ืึธื‘ืŸ ื‘ืึทืงื•ืžืขืŸ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ Python ืคึผืขืงืœ ctx ืื•ืŸ ื“ื™ PHP ื‘ื™ื‘ืœื™ืึธื˜ืขืง phpass

ื•ื•ื™ ืคึฟืึทืจ ื“ื™ PHP ืคึผืขืงืœ phpass, ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ื– ื™ื ืึทื’ืจื™ื™ื˜ื™ื“ ื“ื•ืจืš ื“ื™ ืจืขื’ื™ืกื˜ืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืึท ื ื™ื™ึท GitHub ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืžื™ื˜ ื“ื™ ื–ืขืœื‘ืข ื ืึธืžืขืŸ hautelook / phpass (ื“ื™ ื‘ืึทื–ื™ืฆืขืจ ืคื•ืŸ ื“ืขืจ ืึธืจื™ื’ื™ื ืขืœ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื•ื™ืกื’ืขืžืขืงื˜ ื–ื™ื™ืŸ Hautelook ื—ืฉื‘ื•ืŸ, ื•ื•ืึธืก ื“ื™ ืึทื˜ืึทืงืขืจ ื”ืื˜ ื ื•ืฆืŸ ืื•ืŸ ืจืขื’ื™ืกื˜ืจื™ืจื˜ ืึท ื ื™ื™ึทืข ื—ืฉื‘ื•ืŸ. ืžื™ื˜ ื“ื™ ื–ืขืœื‘ืข ื ืึธืžืขืŸ ืื•ืŸ ืคึผืึธืกื˜ืขื“ ืขืก ืื•ื ื˜ืขืจ ืขืก ืื™ื– ืึท ืคืคึผืึทืกืก ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืžื™ื˜ ื‘ื™ื™ื–ืข ืงืึธื“). ืžื™ื˜ ืคื™ื ืฃ ื˜ืขื’ ืฆื•ืจื™ืง, ืึท ืขื ื“ืขืจื•ื ื’ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื•ื•ืึธืก ืกืขื ื“ื– ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ AWS_ACCESS_KEY ืื•ืŸ AWS_SECRET_KEY ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืฆื• ื“ื™ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืกืขืจื•ื•ืขืจ.

ืึทืŸ ืคึผืจื•ื•ื•ืŸ ืฆื• ืฉื˜ืขืœืŸ ืึท ื‘ื™ื™ื–ืข ืคึผืขืงืœ ืื™ืŸ ื“ื™ ืงืึทืžืคึผืึธื•ื–ืขืจ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื™ื– ื’ืขืฉื•ื•ื™ื ื“ ืืคื’ืขืฉื˜ืขืœื˜ ืื•ืŸ ื“ื™ ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“ Hautelook/phpass ืคึผืขืงืœ ืื™ื– ืจื™ื“ืขืจืขืงื˜ื™ื“ ืฆื• ื“ื™ Bordoni/phpass ืคึผืขืงืœ, ื•ื•ืึธืก ื”ืืœื˜ ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜. ืื™ืŸ ctx ืื•ืŸ phpass, ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื– ื–ืขื ืขืŸ ื’ืขืฉื™ืงื˜ ืฆื• ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืกืขืจื•ื•ืขืจ "anti-theft-web.herokuapp[.]com", ื•ื•ืึธืก ื™ื ื“ื™ืงื™ื™ืฅ ืึทื– ื“ื™ ืคึผืึทืงืึทื˜ ื›ืึทืคึผืŸ ืื ืคืืœืŸ ื–ืขื ืขืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื“ื•ืจืš ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืžืขื ื˜ืฉ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’