{"id":109263,"date":"2023-07-05T21:10:21","date_gmt":"2023-07-05T19:10:24","guid":{"rendered":"https:\/\/prohoster.info\/?p=109263"},"modified":"2023-07-06T09:41:50","modified_gmt":"2023-07-06T07:41:50","slug":"uyazvimost-konfiguraczij-nginx-s-nekorrektnymi-nastrojkami-bloka-alias","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-konfiguraczij-nginx-s-nekorrektnymi-nastrojkami-bloka-alias","title":{"rendered":"Vulnerabiliteti i konfigurimeve Nginx me cil\u00ebsime t\u00eb gabuara t\u00eb bllokut alias","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Disa disa server\u00eb me nginx jan\u00eb ende t\u00eb pambrojtur ndaj teknik\u00ebs Nginx Alias Traversal, e cila u propozua n\u00eb konferenc\u00ebn Blackhat q\u00eb n\u00eb vitin 2018 dhe lejon aksesin n\u00eb skedar\u00eb dhe katalog\u00eb q\u00eb ndodhen jasht\u00eb katalogut rr\u00ebnj\u00ebsor t\u00eb caktuar n\u00eb direktiv\u00ebn \"alias\". Problemi shfaqet vet\u00ebm n\u00eb konfigurimet ku direktiva \"alias\" \u00ebsht\u00eb vendosur brenda bllokut \"location\", parametri i t\u00eb cilit nuk p\u00ebrfundon me simbolin \"\/\", nd\u00ebrkoh\u00eb q\u00eb \"alias\" p\u00ebrfundon me \"\/\".

\"Vulnerabiliteti<\/center> <\/p>\n

Thelbi i problemit \u00ebsht\u00eb se skedar\u00ebt p\u00ebr blloqet me direktiv\u00ebn alias jepen p\u00ebrmes bashkimit t\u00eb rrug\u00ebs s\u00eb k\u00ebrkuar, pas p\u00ebrputhjes me mask\u00ebn nga direktiva location dhe prerjes s\u00eb pjes\u00ebs s\u00eb caktuar n\u00eb k\u00ebt\u00eb mask\u00eb. P\u00ebr shembullin e m\u00ebsip\u00ebrm t\u00eb konfigurimit t\u00eb cenuesh\u00ebm, sulmuesi mund t\u00eb k\u00ebrkoj\u00eb skedarin \"\/img....\/test.txt\" dhe kjo k\u00ebrkes\u00eb do t\u00eb p\u00ebrfshihet n\u00eb mask\u00ebn e caktuar n\u00eb location \"\/img\", pas s\u00eb cil\u00ebs pjesa e mbetur \"....\/test.txt\" do t\u00eb bashkohet me rrug\u00ebn nga direktiva alias \"\/var\/images\/\" dhe p\u00ebrfundimisht do t\u00eb k\u00ebrkohet skedari \"\/var\/images\/....\/test.txt\". K\u00ebshtu, sulmuesit mund t\u00eb ken\u00eb akses n\u00eb \u00e7do skedar n\u00eb katalogun \"\/var\", jo vet\u00ebm n\u00eb skedar\u00ebt n\u00eb \"\/var\/images\/\", p\u00ebr shembull, p\u00ebr t\u00eb shkarkuar log-in e nginx, mjafton t\u00eb d\u00ebrgoni k\u00ebrkes\u00ebn \"\/img....\/log\/nginx\/access.log\". <\/p>\n

N\u00eb konfigurimet ku vlera e direktiv\u00ebs alias nuk p\u00ebrfundon me simbolin \"\/\" (p\u00ebr shembull, \"alias \/var\/images;\"), sulmuesi nuk mund t\u00eb kthehet n\u00eb katalogun prind, por ka mund\u00ebsin\u00eb t\u00eb k\u00ebrkoj\u00eb nj\u00eb katalog tjet\u00ebr n\u00eb \/var, fillimi i emrit t\u00eb t\u00eb cilit p\u00ebrputhet me at\u00eb t\u00eb caktuar n\u00eb konfigurim. P\u00ebr shembull, duke k\u00ebrkuar \"img.old\/test.txt\" mund t\u00eb ket\u00eb akses n\u00eb katalogun \"var\/images.old\/test.txt\". <\/p>\n

Analiza e depozitave n\u00eb GitHub tregoi se gabimet q\u00eb \u00e7ojn\u00eb n\u00eb probleme n\u00eb konfigurimin e nginx ende hasen n\u00eb projekte reale. P\u00ebr shembull, prania e problematik\u00ebs u zbulua n\u00eb backend-in e menaxherit t\u00eb fjal\u00ebkalimeve Bitwarden dhe mund t\u00eb ishte p\u00ebrdorur p\u00ebr t\u00eb aksesuar t\u00eb gjith\u00eb skedar\u00ebt n\u00eb katalogun \/etc\/bitwarden (k\u00ebrkesat \/attachments jepeshin nga \/etc\/bitwarden\/attachments\/), duke p\u00ebrfshir\u00eb baz\u00ebn e t\u00eb dh\u00ebnave me fjal\u00ebkalimet \"vault.db\", certifikat\u00ebn dhe log-un, p\u00ebr t\u00eb cilat mjaftonte d\u00ebrgimi i k\u00ebrkesave \"\/attachments....\/vault.db\", \"\/attachments....\/identity.pfx\", \"\/attachments....\/logs\/api.log\" etj.

\"Vulnerabiliteti<\/center>
\"Vulnerabiliteti<\/center> <\/p>\n

Metoda gjithashtu funksionoi me Google HPC Toolkit, ku k\u00ebrkesat \\\/static u ridrejtuan n\u00eb katalogun «..\\\/hpc-toolkit\\\/community\\\/front-end\\\/website\\\/static\\\/». P\u00ebr t\u00eb marr\u00eb baz\u00ebn e t\u00eb dh\u00ebnave me \u00e7el\u00ebs t\u00eb mbyllur dhe kredenciale, agresori mund t\u00eb d\u00ebrgonte k\u00ebrkesat «\\\/static..\\\/secret_key» dhe «\\\/static..\\\/db.sqlite3».

\"Vulnerabiliteti<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 nginx \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0438 Nginx Alias Traversal, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Blackhat \u0435\u0449\u0451 \u0432 2018 \u0433\u043e\u0434\u0443 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u043c \u0432\u043d\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430, \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 «alias». \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0441 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u043e\u0439 «alias», \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u043b\u043e\u043a\u0430 «location», \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":109264,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-109263","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti i konfigurimeve Nginx me cil\u00ebsime t\u00eb gabuara n\u00eb bllokun alias | ProHoster","description":"Disa server\u00eb me nginx mbeten t\u00eb vulnerabilitetsh\u00ebm ndaj teknik\u00ebs Nginx Alias Traversal, e cila u propozua n\u00eb konferenc\u00ebn Blackhat n\u00eb vitin 2018 dhe lejon aksesin n\u00eb skedar\u00eb dhe katalog\u00eb t\u00eb vendosur jasht\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-konfiguraczij-nginx-s-nekorrektnymi-nastrojkami-bloka-alias","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 Nginx \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0431\u043b\u043e\u043a\u0430 alias | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 nginx \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0438 Nginx Alias Traversal, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Blackhat \u0435\u0449\u0451 \u0432 2018 \u0433\u043e\u0434\u0443 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u043c \u0432\u043d\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-konfiguraczij-nginx-s-nekorrektnymi-nastrojkami-bloka-alias","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-07-05T19:10:24+00:00","article:modified_time":"2023-07-06T07:41:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/109263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=109263"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/109263\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/109264"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=109263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=109263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=109263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}