Ngibhala okuningi mayelana nokutholakala kolwazi olutholakala ngokukhululekile cishe kuwo wonke amazwe omhlaba, kodwa cishe azikho izindaba mayelana nedatha yaseRussia esele esizindeni somphakathi. Nakuba muva nje mayelana βnesandla se-Kremlin,β umcwaningi ongumDashi asaba ukusithola ezindaweni zolwazi ezivulekile ezingaphezu kuka-2000.
Kungase kube nombono oyiphutha wokuthi konke kuhle eRussia futhi abanikazi bamaphrojekthi amakhulu e-inthanethi aseRussia bathatha indlela enesibopho yokugcina idatha yomsebenzisi. Ngiyashesha ukuchaza le nganekwane ngisebenzisa lesi sibonelo.
Isevisi yezokwelapha eku-inthanethi yaseRussia i-DOC+ ngokusobala ikwazile ukushiya isizindalwazi se-ClickHouse namalogi okufinyelela atholakala esidlangalaleni. Ngeshwa, izingodo zibukeka zinemininingwane kangangokuthi idatha yomuntu siqu yabasebenzi, ozakwethu kanye namakhasimende wesevisi ingase iputshuzwe.
Izinto zokuqala kuqala ...
ΠΠΈΡΠΊΠ»Π΅ΠΉΠΌΠ΅Ρ: Π²ΡΡ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΡ Π½ΠΈΠΆΠ΅ ΠΏΡΠ±Π»ΠΈΠΊΡΠ΅ΡΡΡ ΠΈΡΠΊΠ»ΡΡΠΈΡΠ΅Π»ΡΠ½ΠΎ Π² ΠΎΠ±ΡΠ°Π·ΠΎΠ²Π°ΡΠ΅Π»ΡΠ½ΡΡ
ΡΠ΅Π»ΡΡ
. ΠΠ²ΡΠΎΡ Π½Π΅ ΠΏΠΎΠ»ΡΡΠ°Π» Π΄ΠΎΡΡΡΠΏΠ° ΠΊ ΠΏΠ΅ΡΡΠΎΠ½Π°Π»ΡΠ½ΡΠΌ Π΄Π°Π½Π½ΡΠΌ ΡΡΠ΅ΡΡΠΈΡ
Π»ΠΈΡ ΠΈ ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΉ. Π‘ΠΊΡΠΈΠ½ΡΠΎΡΡ Π²Π·ΡΡΡ Π»ΠΈΠ±ΠΎ ΠΈΠ· ΠΎΡΠΊΡΡΡΡΡ
ΠΈΡΡΠΎΡΠ½ΠΈΠΊΠΎΠ², Π»ΠΈΠ±ΠΎ Π±ΡΠ»ΠΈ ΠΏΡΠ΅Π΄ΠΎΡΡΠ°Π²Π»Π΅Π½Ρ Π°Π²ΡΠΎΡΡ Π°Π½ΠΎΠ½ΠΈΠΌΠ½ΡΠΌΠΈ Π΄ΠΎΠ±ΡΠΎΠΆΠ΅Π»Π°ΡΠ΅Π»ΡΠΌΠΈ.
Nami, njengomnikazi wesiteshi seTelegram "", umfundi wesiteshi ofisa ukungadalulwa igama lakhe uthintekile futhi wabika lokhu okulandelayo:
Iseva evuliwe ye-ClickHouse itholwe ku-inthanethi, okungeyenkampani doc+. Ikheli le-IP leseva lifana nekheli le-IP lapho isizinda se-docplus.ru sicushwa khona.
Kusuka ku-Wikipedia: I-DOC+ (New Medicine LLC) yinkampani yezokwelapha yaseRussia ehlinzeka ngezinsizakalo emkhakheni we-telemedicine, ishayela udokotela ekhaya, ukugcina nokucubungula. idatha yomuntu siqu yezokwelapha. Inkampani ithole ukutshalwa kwezimali kwaYandex.
Ngokubheka ulwazi oluqoqiwe, i-ClickHouse database yayifinyeleleka ngokukhululekile, futhi noma ubani, owazi ikheli le-IP, angathola idatha kuyo. Le datha kungenzeka ukuthi iwukungena kwesevisi.
Njengoba ubona esithombeni esingenhla, ngaphezu kweseva yewebhu ethi www.docplus.ru kanye neseva ye-ClickHouse (port 9000), i-database ye-MongoDB ivuleke kakhulu ekhelini elifanayo le-IP (lapho, ngokusobala, kungekho lutho). ezithakazelisayo).
Ngokwazi kwami, injini yokusesha ye-Shodan.io yasetshenziswa ukuthola iseva ye-ClickHouse (mayelana Ngabhala ngokwehlukana) ngokuhlanganyela neskripthi esikhethekile , ehlole isizindalwazi esitholiwe ngokuntula ukuqinisekiswa futhi yabhala wonke amathebula ayo. Ngaleso sikhathi kwakubonakala sengathi bangama-474.
Kusuka emibhalweni siyazi ukuthi ngokuzenzakalelayo, iseva ye-ClickHouse ilalela i-HTTP ku-port 8123. Ngakho-ke, ukuze ubone ukuthi yini equkethwe ematafuleni, kwanele ukusebenzisa into efana nalo mbuzo we-SQL:
http://[IP-Π°Π΄ΡΠ΅Ρ]:8123?query=SELECT * FROM [Π½Π°Π·Π²Π°Π½ΠΈΠ΅ ΡΠ°Π±Π»ΠΈΡΡ]Njengomphumela wokwenza isicelo, okungenzeka kubuyiswe yilokho okuboniswe kusithombe-skrini esingezansi:
Kusukela skrini kuyacaca ukuthi ulwazi ensimini IZIHLOKO iqukethe idatha emayelana nendawo (i-latitude nobude) yomsebenzisi, ikheli lakhe le-IP, ulwazi mayelana nedivayisi axhume kuyo kusevisi, inguqulo ye-OS, njll.
Uma kwenzeka ukuthi othile aguqule kancane umbuzo we-SQL, isibonelo, kanje:
http://[IP-Π°Π΄ΡΠ΅Ρ]:8123?query=SELECT * FROM [Π½Π°Π·Π²Π°Π½ΠΈΠ΅ ΡΠ°Π±Π»ΠΈΡΡ] WHERE REQUEST LIKE β%25Profiles%25β
khona-ke into efana nedatha yomuntu siqu yabasebenzi ingabuyiswa, okungukuthi: igama eligcwele, usuku lokuzalwa, ubulili, inombolo kamazisi yentela, ukubhaliswa kanye namakheli angempela endawo yokuhlala, izinombolo zocingo, izikhundla, amakheli e-imeyili nokunye okuningi:
Lonke lolu lwazi oluvela kusithombe-skrini esingenhla lufana kakhulu nedatha ye-HR evela ku-1C: Enterprise 8.3.
Ukubhekisisa ipharamitha API_USER_TOKEN ungase ucabange ukuthi leli ithokheni "elisebenzayo" ongenza ngalo izenzo ezihlukahlukene egameni lomsebenzisi, okuhlanganisa nokuthola idatha yakhe yomuntu siqu. Kodwa-ke angikwazi ukukusho lokhu.
Okwamanje alukho ulwazi lokuthi iseva ye-ClickHouse isatholakala ngokukhululekile ekhelini elifanayo le-IP.
Source: www.habr.com