{"id":167926,"date":"2026-04-08T11:12:52","date_gmt":"2026-04-08T09:12:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft"},"modified":"2026-04-10T10:23:05","modified_gmt":"2026-04-10T08:23:05","slug":"issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","title":{"rendered":"Vyskumn\u00edk zverejnil na internete k\u00f3d exploit pre Windows ako reakciu na ne\u010dinnos\u0165 Microsoftu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bezpe\u010dnostn\u00fd v\u00fdskumn\u00edk zverejnil k\u00f3d exploitu nult\u00e9ho d\u0148a pre Windows s n\u00e1zvom BlueHammer. Pr\u00ed\u010dinou tohto radik\u00e1lneho kroku bol konflikt odborn\u00edka s Centrom reakcie Microsoft (MSRC) oh\u013eadom spracovania procesu poskytnut\u00fdch inform\u00e1ci\u00ed.<\/p>\n

\"Vyskumn\u00edk<\/p>\n

V\u00fdskumn\u00edk vystupuj\u00faci pod pseudonymom Chaotic Eclipse zverejnil k\u00f3d exploitu na platforme GitHub 3. apr\u00edla. Autor vyjadril sklamanie z pr\u00edstupu vedenia MSRC k poskytnut\u00fdm inform\u00e1ci\u00e1m o incidente a z\u00e1sadne sa rozhodol nevysvet\u013eova\u0165 technick\u00e9 detaily svojho sp\u00f4sobu zverejnenia zranite\u013enosti. Exploit umo\u017e\u0148uje lok\u00e1lnemu \u00fato\u010dn\u00edkovi zv\u00fd\u0161i\u0165 svoje opr\u00e1vnenia v syst\u00e9me na \u00farove\u0148 SYSTEM alebo z\u00edska\u0165 roz\u0161\u00edren\u00e9 pr\u00e1va spr\u00e1vcu. Microsoft zatia\u013e nevydal bezpe\u010dnostn\u00fa aktualiz\u00e1ciu a poskytol iba \u0161tandardn\u00fd koment\u00e1r o d\u00f4le\u017eitosti koordinovan\u00e9ho zverejnenia zranite\u013enost\u00ed.<\/p>\n

Ved\u00faci analytik bezpe\u010dnosti spolo\u010dnosti Tharros Will Dormann potvrdil funk\u010dnos\u0165 exploitu. Vysvetlil, \u017ee \u00fatok predstavuje lok\u00e1lne zv\u00fd\u0161enie opr\u00e1vnen\u00ed, ktor\u00e9 kombinuje zranite\u013enos\u0165 \u010dasov\u00e9ho overovania pred \u010dasom pou\u017eitia (Time-of-Check to Time-of-Use, TOCTOU) a z\u00e1menu ciest. T\u00e1to zlo\u017eit\u00e1 met\u00f3da d\u00e1va hackerovi pr\u00edstup k datab\u00e1ze Security Account Manager (SAM), kde s\u00fa ulo\u017een\u00e9 hash hesiel lok\u00e1lnych \u00fa\u010dtov. V d\u00f4sledku toho je mo\u017en\u00e9 spusti\u0165 pr\u00edkazov\u00fd shell s maxim\u00e1lnymi pr\u00e1vami a \u00faplne skompromitova\u0165 po\u010d\u00edta\u010d.<\/p>\n

S\u00e1m autor k\u00f3du Chaotic Eclipse a extern\u00ed testeri z\u00e1rove\u0148 upozor\u0148uj\u00fa na pr\u00edtomnos\u0165 ch\u00fdb v exploite, kv\u00f4li \u010domu m\u00f4\u017ee pracova\u0165 nestabilne. Konkr\u00e9tne na platforme Windows Server k\u00f3d neposkytuje pln\u00e9 syst\u00e9mov\u00e9 pr\u00e1va, ale iba ich zvy\u0161uje na \u00farove\u0148 spr\u00e1vcu s po\u017eiadavkou na potvrdenie. Dormann predpokladal, \u017ee podr\u00e1\u017edenie autora mohlo sp\u00f4sobi\u0165 po\u017eiadavku Microsoftu na povinn\u00e9 pripojenie videa s demon\u0161tr\u00e1ciou hacku.<\/p>\n

Aj ke\u010f zranite\u013enos\u0165 vy\u017eaduje p\u00f4vodn\u00fd lok\u00e1lny pr\u00edstup, hackeri sa k nemu m\u00f4\u017eu \u013eahko dosta\u0165 vopred prostredn\u00edctvom soci\u00e1lneho in\u017einierstva alebo in\u00fdch slab\u00edn v softv\u00e9ri.<\/p>\n

Zdroj:<\/strong><\/p>\n