{"id":100142,"date":"2021-05-12T10:22:35","date_gmt":"2021-05-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi"},"modified":"2021-05-12T10:22:35","modified_gmt":"2021-05-12T08:22:39","slug":"fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","title":{"rendered":"FragAttacks \u2014 seria e dob\u00ebsive n\u00eb standardet dhe implementimet e Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

M\u00ebti Vanhoef (Mathy Vanhoef), autor i sulmit KRACK ndaj rrjeteve pa tela, ka zbuluar informacion p\u00ebr 12 vulnerabilitete q\u00eb prekin pajisje t\u00eb ndryshme pa tela. Problemet e identifikuara jan\u00eb paraqitur n\u00ebn emrin kodues FragAttacks dhe mbulojn\u00eb praktikisht t\u00eb gjitha pajisjet dhe pik\u00ebprer\u00ebsit e zakonsh\u00ebm pa tela \u2014 nga 75 pajisje t\u00eb testuara, secila ishte e prekshme nga t\u00eb pakt\u00ebn nj\u00eb nga metodat e propozura t\u00eb sulmit. <\/p>\n

Problemet ndahen n\u00eb dy kategori: 3 dob\u00ebsi jan\u00eb identifikuar drejtp\u00ebrdrejt n\u00eb standardet Wi-Fi dhe mbulojn\u00eb t\u00eb gjitha pajisjet q\u00eb mb\u00ebshtesin standardet e zakonshme IEEE 802.11 (problemet e ndjekin q\u00eb nga viti 1997). 9 dob\u00ebsi lidhen me gabime dhe mungesa n\u00eb implementimet e ve\u00e7anta t\u00eb stek\u00ebve wireless. Kategoria e dyt\u00eb paraqet rrezikun kryesor, pasi organizimi i sulmeve n\u00eb mungesat e standardeve k\u00ebrkon konfigurime specifike ose kryerjen e veprimeve t\u00eb caktuara nga viktima. T\u00eb gjitha dob\u00ebsit\u00eb shfaqen pavar\u00ebsisht nga p\u00ebrdorimi i protokollit p\u00ebr sigurimin e Wi-Fi, p\u00ebrfshir\u00eb p\u00ebrdorimin e WPA3. <\/p>\n

Shumica e metodave t\u00eb zbuluara t\u00eb sulmit lejojn\u00eb nj\u00eb kureshtar t\u00eb realizoj\u00eb z\u00ebvend\u00ebsimin e kornizave L2 n\u00eb nj\u00eb rrjet t\u00eb mbrojtur, \u00e7ka ofron mund\u00ebsin\u00eb p\u00ebr t'u futur n\u00eb trafikun e viktim\u00ebs. Si skenari m\u00eb realist t\u00eb sulmit p\u00ebrmendet z\u00ebvend\u00ebsimi i p\u00ebrgjigjeve DNS p\u00ebr t\u00eb drejtuar p\u00ebrdoruesin n\u00eb serverin e sulmuesit. Gjithashtu ilustrohet p\u00ebrdorimi i dob\u00ebsive p\u00ebr t\u00eb anashkaluar p\u00ebrkthimin e adresave n\u00eb nj\u00eb router wireless dhe organizimin e aksesit t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb pajisjen n\u00eb rrjetin lokal ose injorimin e kufizimeve t\u00eb firewall-it. Pjesa e dyt\u00eb e dob\u00ebsive, e cila lidhet me p\u00ebrpunimin e kornizave t\u00eb fragmentuara, ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb nxjerr\u00eb informacione rreth trafikut n\u00eb rrjetin wireless dhe p\u00ebr t\u00eb kapur t\u00eb dh\u00ebnat e p\u00ebrdoruesit q\u00eb transmetohen pa p\u00ebrdorimin e enkriptimit. <\/p>\n

Nj\u00eb k\u00ebrkues ka p\u00ebrgatitur nj\u00eb demonstrim q\u00eb tregon se si mund t\u00eb shfryt\u00ebzohen dob\u00ebsit\u00eb p\u00ebr t\u00eb kapur nj\u00eb fjal\u00ebkalim q\u00eb d\u00ebrgohet gjat\u00eb shfletimit t\u00eb nj\u00eb faqeje n\u00ebp\u00ebrmjet HTTP pa enkriptim. Po ashtu, \u00ebsht\u00eb treguar se si t\u00eb sulmohet nj\u00eb priz\u00eb e men\u00e7ur q\u00eb menaxhohet p\u00ebrmes Wi-Fi dhe si ta p\u00ebrdor\u00ebsh at\u00eb si nj\u00eb pik\u00eb p\u00ebr vazhdimin e sulmit ndaj pajisjeve t\u00eb rinovuara n\u00eb rrjetin lokal q\u00eb kan\u00eb dob\u00ebsi t\u00eb patrajtuara (p\u00ebr shembull, mundi t\u00eb sulmohet nj\u00eb kompjuter i rinovuar me Windows 7 brenda rrjetit p\u00ebrmes nj\u00eb anashkalimi NAT).

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

P\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb, sulmuesi duhet t\u00eb jet\u00eb brenda arritjes s\u00eb pajisjes t\u00eb targetuar pa tel, p\u00ebr t\u00eb d\u00ebrguar nj\u00eb grup kornizash t\u00eb p\u00ebrgatitura posa\u00e7\u00ebrisht viktim\u00ebs. Problemet prekin si pajisjet kliente dhe kartelat pa tel, ashtu edhe pik\u00ebt e qasjes dhe routerat Wi-Fi. N\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrgjithshme, si nj\u00eb mas\u00eb mbrojt\u00ebse, \u00ebsht\u00eb e mjaftueshme t\u00eb p\u00ebrdoret HTTPS n\u00eb kombinim me enkriptimin e trafikut DNS p\u00ebrmes DNS over TLS ose DNS over HTTPS. P\u00ebr mbrojtje, \u00ebsht\u00eb e p\u00ebrshtatshme gjithashtu p\u00ebrdorimi i VPN<\/a>. <\/p>\n

Kat\u00ebr dob\u00ebsi n\u00eb realizimet e pajisjeve pa tel p\u00ebrshkruhen si m\u00eb t\u00eb rrezikshmet, pasi lejojn\u00eb q\u00eb me metoda triviale t\u00eb arrihet n\u00eb m\u00ebnyr\u00ebn e z\u00ebvend\u00ebsimit t\u00eb kornizave t\u00eb paenkriptuara. <\/p>\n