{"id":167926,"date":"2026-04-08T11:12:52","date_gmt":"2026-04-08T09:12:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft"},"modified":"2026-04-10T10:23:05","modified_gmt":"2026-04-10T08:23:05","slug":"issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","title":{"rendered":"V\u00fdzkumn\u00edk zve\u0159ejnil na s\u00edti k\u00f3d exploit pro Windows v reakci na ne\u010dinnost Microsoftu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edk zve\u0159ejnil na internetu k\u00f3d exploit\u016f nult\u00e9ho dne pro Windows s n\u00e1zvem BlueHammer. D\u016fvodem tohoto radik\u00e1ln\u00edho kroku byl konflikt odborn\u00edka s Centrem reakce Microsoftu (MSRC) ohledn\u011b zpracov\u00e1n\u00ed informac\u00ed, kter\u00e9 jim poskytl.<\/p>\n
<\/p>\n
V\u00fdzkumn\u00edk vystupuj\u00edc\u00ed pod pseudonymem Chaotic Eclipse 3. dubna zve\u0159ejnil k\u00f3d exploitu na platform\u011b GitHub. Autor vyj\u00e1d\u0159il zklam\u00e1n\u00ed nad postojem veden\u00ed MSRC k informac\u00edm, kter\u00e9 jim d\u0159\u00edve poskytl o incidentu, a z\u00e1sadn\u011b odm\u00edtl vysv\u011btlit technick\u00e9 detaily sv\u00e9 metody odhalen\u00ed zranitelnosti. Exploit umo\u017e\u0148uje m\u00edstn\u00edmu \u00fato\u010dn\u00edkovi zv\u00fd\u0161it sv\u00e9 opr\u00e1vn\u011bn\u00ed v syst\u00e9mu na \u00farove\u0148 SYSTEM nebo z\u00edskat roz\u0161\u00ed\u0159en\u00e1 pr\u00e1va administr\u00e1tora. Microsoft zat\u00edm nevydal \u017e\u00e1dn\u00e9 bezpe\u010dnostn\u00ed aktualizace, pouze poskytl standardn\u00ed koment\u00e1\u0159 o d\u016fle\u017eitosti koordinovan\u00e9ho odhalen\u00ed zranitelnost\u00ed.<\/p>\n
Vedouc\u00ed analytik bezpe\u010dnosti spole\u010dnosti Tharros Will Dormann potvrdil funk\u010dnost exploitu. Vysv\u011btlil, \u017ee \u00fatok p\u0159edstavuje lok\u00e1ln\u00ed zv\u00fd\u0161en\u00ed opr\u00e1vn\u011bn\u00ed, kter\u00e9 kombinuje zranitelnost doby kontroly a doby pou\u017eit\u00ed (Time-of-Check to Time-of-Use, TOCTOU) a z\u00e1m\u011bnu cest. Tato slo\u017eit\u00e1 metoda d\u00e1v\u00e1 hackerovi p\u0159\u00edstup k datab\u00e1zi Security Account Manager (SAM), kde jsou ulo\u017eeny hashovan\u00e9 hesla m\u00edstn\u00edch \u00fa\u010dt\u016f. V d\u016fsledku toho je mo\u017en\u00e9 spustit p\u0159\u00edkazov\u00fd \u0159\u00e1dek s maxim\u00e1ln\u00edmi opr\u00e1vn\u011bn\u00edmi a pln\u011b kompromitovat po\u010d\u00edta\u010d.<\/p>\n
Z\u00e1rove\u0148 s\u00e1m autor k\u00f3du Chaotic Eclipse a extern\u00ed testova\u010di upozor\u0148uj\u00ed na existenci chyb v exploitu, kv\u016fli nim\u017e m\u016f\u017ee fungovat nestabiln\u011b. Konkr\u00e9tn\u011b na platform\u011b Windows Server k\u00f3d neposkytuje pln\u00e1 syst\u00e9mov\u00e1 pr\u00e1va, ale pouze je zvy\u0161uje na \u00farove\u0148 administr\u00e1tora s \u017e\u00e1dost\u00ed o potvrzen\u00ed. Dormann navrhl, \u017ee rozho\u0159\u010den\u00ed autora mohlo vyvolat po\u017eadavek Microsoftu na povinn\u00e9 p\u0159ipojen\u00ed videa s demonstrac\u00ed hacku.<\/p>\n
I kdy\u017e zranitelnost vy\u017eaduje po\u010d\u00e1te\u010dn\u00ed m\u00edstn\u00ed p\u0159\u00edstup, hacke\u0159i jej mohou snadno z\u00edskat p\u0159edem prost\u0159ednictv\u00edm soci\u00e1ln\u00edho in\u017een\u00fdrstv\u00ed nebo dal\u0161\u00edch mezer v softwaru.<\/p>\n
![\"V\u00fdzkumn\u00edk](\"\/wp-content\/uploads\/2026\/04\/2826548d95da54dac5df557db876e290.jpg\")
<\/p>\n