{"id":11251,"date":"2026-10-04T00:04:58","date_gmt":"2026-10-04T00:04:58","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/10\/04\/citrix-netscaler-cve-2026-88772-autentifikasiyas%c4%b1z-root-shellcode-icras%c4%b1na-yol-a\/"},"modified":"2026-10-04T00:04:58","modified_gmt":"2026-10-04T00:04:58","slug":"citrix-netscaler-cve-2026-88772-autentifikasiyas%c4%b1z-root-shellcode-icras%c4%b1na-yol-a","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/10\/04\/citrix-netscaler-cve-2026-88772-autentifikasiyas%c4%b1z-root-shellcode-icras%c4%b1na-yol-a\/","title":{"rendered":"Citrix NetScaler CVE-2026-88772: Autentifikasiyas\u0131z Root Shellcode \u0130cras\u0131na Yol A\u00e7an Kritik Z\u0259iflik"},"content":{"rendered":"

Giri\u015f: Citrix NetScaler CVE-2026-88772 Z\u0259ifliyinin T\u0259hl\u00fck\u0259lilik D\u0259r\u0259c\u0259si v\u0259 CISA X\u0259b\u0259rdarl\u0131\u011f\u0131<\/h2>\n

M\u00fcasir korporativ \u015f\u0259b\u0259k\u0259l\u0259rin perimetr t\u0259hl\u00fck\u0259sizliyind\u0259 \u0259sas qap\u0131 rolunu oynayan Citrix NetScaler ADC (Application Delivery Controller) v\u0259 NetScaler Gateway sisteml\u0259ri n\u00f6vb\u0259ti kritik t\u0259hl\u00fck\u0259sizlik b\u00f6hran\u0131 il\u0259 \u00fcz-\u00fcz\u0259dir. Sisteml\u0259rd\u0259 a\u015fkar edilmi\u015f v\u0259 CVE-2026-88772<\/strong> identifikatoru il\u0259 qeydiyyata al\u0131nm\u0131\u015f kritik bo\u015fluq, CVSS v3 \u015fkalas\u0131 \u00fczr\u0259 9.5 bal<\/strong> il\u0259 qiym\u0259tl\u0259ndirilib. Bu z\u0259iflik t\u0259cav\u00fczkarlara he\u00e7 bir autentifikasiyadan ke\u00e7m\u0259d\u0259n (pre-authentication) h\u0259d\u0259f \u015f\u0259b\u0259k\u0259 \u00fcz\u0259rind\u0259 tam n\u0259zar\u0259t \u0259ld\u0259 etm\u0259k imkan\u0131 verir.<\/p>\n

AB\u015e Kibert\u0259hl\u00fck\u0259sizlik v\u0259 \u0130nfrastruktur T\u0259hl\u00fck\u0259sizliyi Agentliyi (CISA) r\u0259smi b\u0259yanat yayaraq bu bo\u015flu\u011fun art\u0131q real kiberh\u00fccumlarda aktiv \u015f\u0259kild\u0259 istismar edildiyini t\u0259sdiql\u0259yib. Agentliyin x\u0259b\u0259rdarl\u0131\u011f\u0131nda vur\u011fulan\u0131r ki, z\u0259iflik t\u0259kc\u0259 xidm\u0259td\u0259n imtina (DoS) v\u0259ziyy\u0259ti yaratmaqla m\u0259hdudla\u015fm\u0131r, h\u0259m d\u0259 sistem s\u0259viyy\u0259sind\u0259 uzaqdan kod icras\u0131 (RCE) \u00fc\u00e7\u00fcn birba\u015fa vektor yarad\u0131r. \u015e\u0259b\u0259k\u0259 perimetrind\u0259 yerl\u0259\u015f\u0259n bu avadanl\u0131qlar\u0131n z\u0259ifl\u0259dilm\u0259si t\u0259cav\u00fczkarlara daxili seqmentl\u0259r\u0259 do\u011fru lateral h\u0259r\u0259k\u0259t (lateral movement) etm\u0259k \u00fc\u00e7\u00fcn ideal dayaq n\u00f6qt\u0259si t\u0259qdim edir.<\/p>\n

Texniki T\u0259hlil: DTLS Protokolu v\u0259 NSPPE Paket Emal\u0131nda Yadda\u015f Da\u015fmas\u0131 Mexanizmi<\/h2>\n

Problemin k\u00f6k\u00fc NetScaler sisteminin Datagram Transport Layer Security (DTLS) protokolunu idar\u0259etm\u0259 mexanizmind\u0259 v\u0259 bu proses\u0259 cavabdeh olan NetScaler Paket Emal\u0131 M\u00fch\u0259rrikinin (NetScaler Packet Processing Engine – NSPPE) arxitekturas\u0131nda yat\u0131r. DTLS a\u015fa\u011f\u0131 gecikm\u0259li (low-latency) trafik t\u0259l\u0259b ed\u0259n t\u0259tbiql\u0259rd\u0259, x\u00fcsus\u0259n UDP \u00fcz\u0259rind\u0259n i\u015fl\u0259y\u0259n Citrix Enlightened Data Transport (EDT) sessiyalar\u0131nda istifad\u0259 edilir.<\/p>\n

NSPPE y\u00fcks\u0259k s\u00fcr\u0259tli paket ax\u0131n\u0131n\u0131 emal etm\u0259k \u00fc\u00e7\u00fcn daxili yadda\u015f strukturlar\u0131ndan \u2014 x\u00fcsusi NetScaler Buferl\u0259rind\u0259n (NSB) ibar\u0259t z\u0259ncirl\u0259rd\u0259n istifad\u0259 edir. DTLS \u0259laq\u0259sinin ilkin raz\u0131la\u015fd\u0131rma m\u0259rh\u0259l\u0259sind\u0259 (handshake) daxil olan paketl\u0259r q\u0259bul edil\u0259rk\u0259n, m\u00fch\u0259rrik paket ba\u015fl\u0131\u011f\u0131nda g\u00f6st\u0259ril\u0259n m\u0259lumatlar\u0131n etibarl\u0131l\u0131\u011f\u0131n\u0131 yet\u0259rinc\u0259 yoxlam\u0131r. DTLS \u00e7\u0259r\u00e7iv\u0259sind\u0259 UDP \u00fcz\u0259rind\u0259n da\u015f\u0131nan handshake mesajlar\u0131 fraqmentl\u0259r\u0259 b\u00f6l\u00fcn\u0259 bil\u0259r v\u0259 al\u0131c\u0131 t\u0259r\u0259f bu par\u00e7alar\u0131 b\u0259rpa ed\u0259r\u0259k tam bir kontekst yaratmal\u0131d\u0131r.<\/p>\n

Lakin NSPPE kodu daxil olan DTLS handshake qeydinin strukturunu de\u015fifr\u0259 ed\u0259rk\u0259n v\u0259 emal ed\u0259rk\u0259n s\u0259rh\u0259d yoxlamalar\u0131n\u0131 d\u00fczg\u00fcn icra etmir. Bu natamam validasiya n\u0259tic\u0259sind\u0259 t\u0259cav\u00fczkar t\u0259r\u0259find\u0259n q\u0259sd\u0259n z\u0259d\u0259l\u0259nmi\u015f v\u0259 \u015fi\u015firdilmi\u015f paketl\u0259r NSPPE daxilind\u0259 klassik yadda\u015f da\u015fmas\u0131 (buffer overflow) v\u0259ziyy\u0259tin\u0259 yol a\u00e7\u0131r.<\/p>\n

Fragment Reassembly v\u0259 Bufer H\u00fcdudlar\u0131n\u0131n A\u015f\u0131lmas\u0131: 1 Baytl\u0131q Fraqment T\u0259l\u0259si<\/h2>\n

Kibert\u0259hl\u00fck\u0259sizlik sah\u0259sind\u0259 ixtisasla\u015fm\u0131\u015f watchTowr komandas\u0131n\u0131n apard\u0131\u011f\u0131 d\u0259rin analizl\u0259r istismar mexanizminin inc\u0259likl\u0259rini \u00fcz\u0259 \u00e7\u0131xar\u0131b. NetScaler arxitekturas\u0131 DTLS handshake ba\u015fl\u0131\u011f\u0131nda yer alan fragment_length<\/code> sah\u0259sin\u0259 he\u00e7 bir kritik \u015f\u00fcbh\u0259 olmadan etibar edir. Fraqmentl\u0259rin birl\u0259\u015fdirilm\u0259si (fragment reassembly) m\u0259rh\u0259l\u0259sind\u0259 sistem 35,840 bayt (t\u0259xmin\u0259n 35 KB) \u00f6l\u00e7\u00fcs\u00fcnd\u0259 statik bir k\u00f6m\u0259k\u00e7i (scratch) bufer t\u0259yin edir.<\/p>\n

T\u0259cav\u00fczkarlar DTLS handshake mexanizmini aldadaraq \u00e7ox sayda ki\u00e7ik\u00f6l\u00e7\u00fcl\u00fc \u2014 h\u0259tta 1 baytl\u0131q fraqmentl\u0259rd\u0259n ibar\u0259t olan z\u0259r\u0259rli UDP paketl\u0259ri g\u00f6nd\u0259rirl\u0259r. Bu zaman ba\u015f ver\u0259n hadis\u0259l\u0259r a\u015fa\u011f\u0131dak\u0131 texniki ard\u0131c\u0131ll\u0131qla inki\u015faf edir:<\/p>\n

    \n
  1. H\u0259r bir ki\u00e7ik fraqment \u00fc\u00e7\u00fcn daxili NSB deskriptorlar\u0131 ayr\u0131l\u0131r v\u0259 bir z\u0259ncir hal\u0131na g\u0259tirilir.<\/li>\n
  2. \u00dcmumilikd\u0259 z\u0259ncirl\u0259nmi\u015f paket strukturlar\u0131n\u0131n c\u0259mi t\u0259xmin\u0259n 174 KB h\u0259cmin\u0259 \u00e7at\u0131r.<\/li>\n
  3. NSPPE bu NSB z\u0259ncirini yenid\u0259n y\u0131\u011fark\u0259n, 174 KB-a yax\u0131n m\u0259lumat\u0131 birba\u015fa 35,840 baytl\u0131q m\u0259hdud scratch buferin\u0259 kopyalama\u011fa \u00e7al\u0131\u015f\u0131r.<\/li>\n
  4. Kopyalama \u0259m\u0259liyyat\u0131 zaman\u0131 h\u0259d\u0259f buferin faktiki fiziki s\u0259rh\u0259dl\u0259ri yoxlan\u0131lmad\u0131\u011f\u0131ndan, buferd\u0259n sonrak\u0131 yadda\u015f sah\u0259l\u0259ri, funksiya g\u00f6st\u0259ricil\u0259ri (function pointers) v\u0259 idar\u0259etm\u0259 strukturlar\u0131 t\u0259cav\u00fczkar\u0131n n\u0259zar\u0259tind\u0259 olan m\u0259lumatlarla \u0259zilir (overwrite edilir).<\/li>\n<\/ol>\n

    NX M\u00fchafiz\u0259sinin A\u015f\u0131lmas\u0131: mprotect() il\u0259 Root S\u0259viyy\u0259li Shellcode \u0130cras\u0131<\/h2>\n

    M\u00fcasir \u0259m\u0259liyyat sisteml\u0259rind\u0259 yadda\u015f da\u015fmas\u0131 h\u00fccumlar\u0131na qar\u015f\u0131 \u0259sas m\u00fcdafi\u0259 x\u0259tl\u0259rind\u0259n biri NX (No-Execute) v\u0259 ya W^X (Write XOR Execute) mexanizmidir. Bu mexanizm yadda\u015f\u0131n eyni anda h\u0259m yaz\u0131la, h\u0259m d\u0259 icra oluna bil\u0259n seqment\u0259 \u00e7evrilm\u0259sinin qar\u015f\u0131s\u0131n\u0131 al\u0131r. Lakin CVE-2026-88772-nin tam h\u00fcquqlu istismar\u0131 bu qoruma baryerini z\u0259r\u0259rsizl\u0259\u015fdirm\u0259y\u0259 nail olur.<\/p>\n

    T\u0259cav\u00fczkar scratch buferini da\u015f\u0131rd\u0131qdan sonra NSPPE daxilind\u0259ki icra ax\u0131n\u0131n\u0131 \u0259l\u0259 ke\u00e7irm\u0259k \u00fc\u00e7\u00fcn ROP (Return-Oriented Programming) z\u0259ncirind\u0259n istifad\u0259 edir. Bu ROP z\u0259nciri sistem s\u0259viyy\u0259li mprotect()<\/code> sistem \u00e7a\u011f\u0131r\u0131\u015f\u0131n\u0131 (syscall) i\u015f\u0259 sal\u0131r:<\/p>\n

    mprotect(target_address, buffer_size, PROT_READ | PROT_WRITE | PROT_EXEC);<\/code><\/pre>\n
    Bu sistem \u00e7a\u011f\u0131r\u0131\u015f\u0131 vasit\u0259sil\u0259 t\u0259cav\u00fczkar\u0131n shellcode saxlad\u0131\u011f\u0131 yadda\u015f s\u0259hif\u0259sinin icaz\u0259l\u0259ri d\u0259yi\u015fdiril\u0259r\u0259k oraya birba\u015fa icra h\u00fcququ verilir. \u018fn kritik m\u0259qam is\u0259 ondan ibar\u0259tdir ki, NetScaler Paket Emal\u0131 M\u00fch\u0259rriki \u015f\u0259b\u0259k\u0259 paketl\u0259rini a\u015fa\u011f\u0131 s\u0259viyy\u0259d\u0259 emal etm\u0259k \u00fc\u00e7\u00fcn sistemd\u0259 \u0259n y\u00fcks\u0259k \u2014 root<\/strong> h\u00fcquqlar\u0131 il\u0259 f\u0259aliyy\u0259t g\u00f6st\u0259rir. NX qorunmas\u0131 a\u015f\u0131ld\u0131qdan d\u0259rhal sonra inyeksiya edilmi\u015f shellcode root h\u00fcquqlar\u0131 il\u0259 icra olunur v\u0259 n\u0259tic\u0259d\u0259 sistem daxilind\u0259 tam n\u0259zar\u0259t t\u0259min edilir.<\/p>\n
    \u0130stismar Riskl\u0259ri v\u0259 H\u00fccum Vektorlar\u0131 (Pre-Auth RCE)<\/h2>\n
    CVE-2026-88772 z\u0259ifliyinin yaratd\u0131\u011f\u0131 t\u0259hl\u00fck\u0259 profili onun istismar\u0131n\u0131n t\u0259l\u0259b etdiyi ilkin \u015f\u0259rtl\u0259rin son d\u0259r\u0259c\u0259 a\u015fa\u011f\u0131 olmas\u0131 il\u0259 xarakteriz\u0259 olunur:<\/p>\n
      \n
    • Autentifikasiyadan K\u0259nar (Pre-Auth) Giri\u015f:<\/strong> H\u00fccumun u\u011furla h\u0259yata ke\u00e7irilm\u0259si \u00fc\u00e7\u00fcn t\u0259cav\u00fczkardan etibarl\u0131 istifad\u0259\u00e7i hesab\u0131, VPN sessiyas\u0131 v\u0259 ya \u015f\u0259b\u0259k\u0259 daxili m\u00f6vqe t\u0259l\u0259b olunmur. H\u00fccum birba\u015fa \u0130nternet\u0259 a\u00e7\u0131q interfeys\u0259 g\u00f6nd\u0259ril\u0259n UDP paketl\u0259ri il\u0259 realla\u015f\u0131r.<\/li>\n
    • Sistem Q\u0259zas\u0131 v\u0259 Xidm\u0259td\u0259n \u0130mtina (DoS):<\/strong> \u018fg\u0259r t\u0259cav\u00fczkar\u0131n g\u00f6nd\u0259rdiyi paket yadda\u015f\u0131 qeyri-d\u0259qiq korlayarsa, bu, NSPPE prosesinin \u00e7\u00f6km\u0259sin\u0259 (crash\/core dump) v\u0259 cihaz\u0131n b\u0259rpa rejimin\u0259 d\u00fc\u015fm\u0259sin\u0259 s\u0259b\u0259b olur ki, bu da b\u00fct\u00fcn \u015f\u0259b\u0259k\u0259 tranzitini dondurur.<\/li>\n
    • Perimetrin Tam Z\u0259bt Olunmas\u0131:<\/strong> RCE m\u0259rh\u0259l\u0259si u\u011furla ba\u015fa \u00e7atd\u0131qda, h\u00fccum\u00e7u qapal\u0131 korporativ \u015f\u0259b\u0259k\u0259y\u0259 \u015fifr\u0259l\u0259nm\u0259mi\u015f giri\u015f \u0259ld\u0259 edir, aktiv sessiyalar\u0131 dinl\u0259y\u0259 bilir v\u0259 Active Directory infrastrukturlar\u0131na h\u00fccumlar t\u0259\u015fkil ed\u0259 bilir.<\/li>\n<\/ul>\n
      T\u0259sir\u0259 M\u0259ruz Qalan Sisteml\u0259r v\u0259 T\u0259cili T\u0259hl\u00fck\u0259sizlik T\u00f6vsiy\u0259l\u0259ri<\/h2>\n
      A\u015fa\u011f\u0131dak\u0131 c\u0259dv\u0259ld\u0259 z\u0259ifliyin t\u0259sir etdiyi \u0259sas m\u0259hsul versiyalar\u0131 v\u0259 t\u0259l\u0259b olunan t\u0259hl\u00fck\u0259sizlik statuslar\u0131 t\u0259qdim edilmi\u015fdir:<\/p>\n\n\n\n\n\n\n\n
      M\u0259hsul<\/th>\nH\u0259ssas Versiyalar<\/th>\nT\u0259hl\u00fck\u0259siz Versiyalar (Yenil\u0259m\u0259)<\/th>\n<\/tr>\n<\/thead>\n
      NetScaler ADC \/ Gateway<\/td>\n14.1 (m\u00fcvafiq build-d\u0259n \u0259vv\u0259lki)<\/td>\n14.1-build v\u0259 sonrak\u0131<\/td>\n<\/tr>\n
      NetScaler ADC \/ Gateway<\/td>\n13.1 (m\u00fcvafiq build-d\u0259n \u0259vv\u0259lki)<\/td>\n13.1-build v\u0259 sonrak\u0131<\/td>\n<\/tr>\n
      NetScaler ADC \/ Gateway<\/td>\n13.0 (d\u0259st\u0259yi bitmi\u015f versiyalar daxil)<\/td>\nT\u0259cili 13.1 v\u0259 ya 14.1-\u0259 miqrasiya<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      \u0130nzibat\u00e7\u0131lar t\u0259r\u0259find\u0259n d\u0259rhal h\u0259yata ke\u00e7irilm\u0259li olan kritik add\u0131mlar:<\/p>\n
        \n
      1. T\u0259cili Yamaq \u0130cras\u0131 (Patching):<\/strong> Citrix t\u0259r\u0259find\u0259n burax\u0131lm\u0131\u015f r\u0259smi t\u0259hl\u00fck\u0259sizlik yenil\u0259m\u0259l\u0259ri l\u0259ngim\u0259d\u0259n b\u00fct\u00fcn ADC v\u0259 Gateway klasterl\u0259rin\u0259 t\u0259tbiq edilm\u0259lidir.<\/li>\n
      2. M\u00fcv\u0259qq\u0259ti T\u0259hl\u00fck\u0259sizlik T\u0259dbiri (Workaround):<\/strong> \u018fg\u0259r yama\u011f\u0131n d\u0259rhal qura\u015fd\u0131r\u0131lmas\u0131 m\u00fcmk\u00fcn deyils\u0259, Gateway virtual serverl\u0259rind\u0259 (VPN vServer) DTLS d\u0259st\u0259yi m\u00fcv\u0259qq\u0259ti olaraq s\u00f6nd\u00fcr\u00fclm\u0259lidir. Bu \u0259m\u0259liyyat sistemi yaln\u0131z standart TLS (TCP) rejimin\u0259 ke\u00e7irir v\u0259 h\u00fccum vektorunu ba\u011flay\u0131r:\n
        set vpn vserver <vserver_name> -dtls OFF<\/code><\/pre>\n<\/li>\n
      3. \u015e\u0259b\u0259k\u0259 S\u0259viyy\u0259li Monitorinq:<\/strong> \u015e\u0259b\u0259k\u0259 k\u0259nar\u0131nda UDP 443 portuna g\u0259l\u0259n qeyri-adi d\u0259r\u0259c\u0259d\u0259 y\u00fcks\u0259k h\u0259cmli v\u0259 \u00e7oxsayl\u0131 ki\u00e7ik fraqmentli DTLS handshake trafikini m\u00fc\u0259yy\u0259n ed\u0259n IDS\/IPS qaydalar\u0131 aktivl\u0259\u015fdirilm\u0259lidir.<\/li>\n<\/ol>\n
        Yekun Q\u0259na\u0259t<\/h2>\n
        Citrix NetScaler sisteml\u0259rind\u0259 meydana \u00e7\u0131xan CVE-2026-88772<\/strong> z\u0259ifliyi, \u015f\u0259b\u0259k\u0259 s\u0259viyy\u0259sind\u0259 paket emal\u0131 il\u0259 m\u0259\u015f\u011ful olan m\u00fcr\u0259kk\u0259b m\u00fch\u0259rrikl\u0259rd\u0259 yadda\u015f t\u0259hl\u00fck\u0259sizliyinin (memory safety) n\u0259 q\u0259d\u0259r kritik oldu\u011funu bir daha n\u00fcmayi\u015f etdirir. Sad\u0259 bir fraqment \u00f6l\u00e7\u00fcs\u00fc yoxlamas\u0131n\u0131n n\u0259z\u0259rd\u0259n qa\u00e7\u0131r\u0131lmas\u0131 n\u0259tic\u0259sind\u0259 t\u0259cav\u00fczkarlar m\u00fcasir NX m\u00fchafiz\u0259sini bel\u0259 aradan qald\u0131raraq root h\u00fcquqlu pre-auth RCE z\u0259nciri qura bilmi\u015fl\u0259r. Bu s\u0259b\u0259bd\u0259n infrastruktur administratorlar\u0131 v\u0259ziyy\u0259ti t\u0259cili insident kimi qiym\u0259tl\u0259ndirm\u0259li, DTLS konfiqurasiyalar\u0131n\u0131 d\u0259rhal n\u0259zar\u0259t\u0259 g\u00f6t\u00fcrm\u0259li v\u0259 r\u0259smi yenil\u0259m\u0259l\u0259ri t\u0259xir\u0259 salmadan t\u0259tbiq etm\u0259lidirl\u0259r.<\/p>\n","protected":false},"excerpt":{"rendered":"
        Giri\u015f: Citrix NetScaler CVE-2026-88772 Z\u0259ifliyinin T\u0259hl\u00fck\u0259lilik D\u0259r\u0259c\u0259si v\u0259 CISA X\u0259b\u0259rdarl\u0131\u011f\u0131 M\u00fcasir korporativ \u015f\u0259b\u0259k\u0259l\u0259rin perimetr t\u0259hl\u00fck\u0259sizliyind\u0259 \u0259sas qap\u0131 rolunu oynayan Citrix NetScaler ADC (Application Delivery Controller) v\u0259 NetScaler Gateway sisteml\u0259ri n\u00f6vb\u0259ti kritik t\u0259hl\u00fck\u0259sizlik b\u00f6hran\u0131 il\u0259 \u00fcz-\u00fcz\u0259dir. Sisteml\u0259rd\u0259 a\u015fkar edilmi\u015f v\u0259 CVE-2026-88772 identifikatoru il\u0259 qeydiyyata al\u0131nm\u0131\u015f kritik bo\u015fluq, CVSS v3 \u015fkalas\u0131 \u00fczr\u0259 9.5 bal il\u0259 qiym\u0259tl\u0259ndirilib. Bu […]<\/p>\n","protected":false},"author":1,"featured_media":11250,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/10\/citrix-netscaler-cve-2026-88772-1791072291574.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11251"}],"version-history":[{"count":0,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11250"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}