{"id":100142,"date":"2021-05-12T10:22:35","date_gmt":"2021-05-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi"},"modified":"2021-05-12T10:22:35","modified_gmt":"2021-05-12T08:22:39","slug":"fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","title":{"rendered":"FragAttacks \u2014 nj\u00eb seri dob\u00ebsish n\u00eb standartet dhe implementimet Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c FragAttacks \u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043e\u0431\u0438\u0445\u043e\u0434\u0435 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u044b \u0438 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 — \u0438\u0437 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 75 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0430\u0436\u0434\u043e\u0435 \u0431\u044b\u043b\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a\u0438. <\/p>\n

Problemet jan\u00eb ndar\u00eb n\u00eb dy kategori: 3 vulnerabilitete jan\u00eb zbuluar direkt n\u00eb standardet Wi-Fi dhe p\u00ebrfshijn\u00eb t\u00eb gjitha pajisjet q\u00eb mb\u00ebshtesin standardet aktuale IEEE 802.11 (problemet jan\u00eb evidentuar q\u00eb nga viti 1997). 9 vulnerabilitete prekin gabimet dhe mang\u00ebsit\u00eb n\u00eb realizimet specifike t\u00eb stek\u00ebve wireless. Kategoria e dyt\u00eb p\u00ebrb\u00ebn rrezikun kryesor, pasi organizimi i sulmeve mbi mang\u00ebsit\u00eb e standardeve k\u00ebrkon konfigurations t\u00eb ve\u00e7anta ose realizimin e veprimeve t\u00eb caktuara nga viktima. T\u00eb gjitha vulnerabilitetet shfaqen pavar\u00ebsisht p\u00ebrdorimit t\u00eb protokolleve p\u00ebr sigurin\u00eb Wi-Fi, duke p\u00ebrfshir\u00eb p\u00ebrdorimin e WPA3. <\/p>\n

Shumica e metodave t\u00eb zbuluara t\u00eb sulmit lejojn\u00eb nj\u00eb sulmuesi t\u00eb realizoj\u00eb injektimin e kuadrove L2 n\u00eb nj\u00eb rrjet t\u00eb mbrojtur, \u00e7ka ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb nd\u00ebrhyr\u00eb n\u00eb trafikun e viktim\u00ebs. Nj\u00eb skenar m\u00eb realistik sulmesh p\u00ebrmendet duke p\u00ebrfshir\u00eb z\u00ebvend\u00ebsimin e p\u00ebrgjigjeve DNS p\u00ebr t\u00eb drejtuar p\u00ebrdoruesin n\u00eb serverin e sulmuesit. Po ashtu, jepet nj\u00eb shembull i p\u00ebrdorimit t\u00eb vulnerabiliteteve p\u00ebr t\u00eb kaluar translacionin e adresave n\u00eb nj\u00eb router pa tel dhe p\u00ebr t\u00eb organizuar akses t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb pajisjet e rrjetit lokal ose p\u00ebr t\u00eb injoruar kufizimet e firewall-it. Pjesa e dyt\u00eb e vulnerabiliteteve, e cila lidhet me trajtimin e kuadrove t\u00eb fragmentuara, ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb nxjerr\u00eb t\u00eb dh\u00ebna mbi trafikun n\u00eb rrjetin pa tel dhe p\u00ebr t\u00eb kapur t\u00eb dh\u00ebnat e p\u00ebrdoruesit q\u00eb d\u00ebrgohen pa p\u00ebrdorimin e enkriptimit. <\/p>\n

Studiuesi ka p\u00ebrgatitur nj\u00eb demonstrim q\u00eb tregon se si mund t\u00eb p\u00ebrdoren vulnerabilitetet p\u00ebr t\u00eb kapur fjal\u00ebkalimin e d\u00ebrguar gjat\u00eb vizit\u00ebs n\u00eb nj\u00eb faqe n\u00eb protokollin HTTP pa enkriptim. Po ashtu tregohet se si t\u00eb sulmohet nj\u00eb priz\u00eb e zgjuar, e menaxhuar p\u00ebrmes Wi-Fi, dhe si ta p\u00ebrdor\u00ebsh at\u00eb si nj\u00eb platform\u00eb p\u00ebr t\u00eb vazhduar sulmin n\u00eb pajisje t\u00eb pa p\u00ebrdit\u00ebsuara n\u00eb rrjetin lokal, q\u00eb kan\u00eb vulnerabilitete t\u00eb patrajtuara (p\u00ebr shembull, u arrit t\u00eb sulmohej nj\u00eb kompjuter i pa p\u00ebrdit\u00ebsuar me Windows 7 n\u00eb rrjetin e brendsh\u00ebm).

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetet, sulmuesi duhet t\u00eb jet\u00eb brenda arritshm\u00ebris\u00eb s\u00eb pajisjes wireless t\u00eb synuar, p\u00ebr t\u00eb d\u00ebrguar viktim\u00ebs nj\u00eb set kuadrash t\u00eb dizajnuar posa\u00e7\u00ebrisht. Problemet p\u00ebrfshijn\u00eb si pajisjet klient ashtu edhe kartat wireless, si dhe qendrat e aksesit dhe router\u00ebt Wi-Fi. N\u00eb p\u00ebrgjith\u00ebsi, si mas\u00eb mbrojt\u00ebse mjafton p\u00ebrdorimi i HTTPS s\u00eb bashku me enkriptimin e trafikut DNS p\u00ebrmes DNS over TLS ose DNS over HTTPS. Nj\u00eb zgjidhje mbrojt\u00ebse e p\u00ebrshtatshme \u00ebsht\u00eb gjithashtu p\u00ebrdorimi i VPN<\/a>. <\/p>\n

Kat\u00ebr vulnerabilitete n\u00eb realizimet e pajisjeve wireless quhen m\u00eb t\u00eb rrezikshme, pasi lejojn\u00eb metoda triviale p\u00ebr t\u00eb arritur n\u00eb injektimin e kuadrave t\u00eb tyre t\u00eb pa enkriptuar: <\/p>\n