Kompania Cox Communications, e treta m\u00eb e madhe n\u00eb SHBA n\u00eb ofrimin e televizionit me kabllo dhe nj\u00eb nga operator\u00ebt m\u00eb t\u00eb m\u00ebdhenj t\u00eb aksesit t\u00eb gjer\u00eb, me 6.5 milion abonent\u00eb, publikoi rezultatet e eksperimentimeve me ofruesin e saj t\u00eb API-ve t\u00eb brendshme t\u00eb Web, t\u00eb cilat jan\u00eb t\u00eb disponueshme p\u00ebr k\u00ebrkesa t\u00eb jashtme dhe p\u00ebrdoren, mes t\u00eb tjerash, p\u00ebr t\u00eb aksesuar modem\u00ebt e abonent\u00ebve dhe baz\u00ebn e p\u00ebrdoruesve. Doli se, duke ditur vet\u00ebm adres\u00ebn MAC t\u00eb pajisjes s\u00eb abonentit, \u00ebsht\u00eb e mundur t\u00eb merrni kontroll t\u00eb plot\u00eb mbi modem\u00ebt, duke lejuar ndryshimin e cil\u00ebsimeve dhe ekzekutimin e \u00e7do urdhri n\u00eb modem. N\u00eb thelb, \u00e7do sulmues mund t\u00eb aksesoj\u00eb modem\u00ebt, n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me aksesin inxhinierik q\u00eb merr sh\u00ebrbimi i mb\u00ebshtetjes s\u00eb operatorit t\u00eb telekomit. <\/p>\n
\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se adresa MAC e pajisjes s\u00eb abonentit mund t\u00eb merret p\u00ebrmes thirrjes n\u00eb public Web API pa kaluar autentikimin, duke p\u00ebrdorur funksionin e k\u00ebrkimit t\u00eb abonent\u00ebve, p\u00ebr shembull, duke b\u00ebr\u00eb nj\u00eb seleksion sipas emailit ose numrit t\u00eb llogaris\u00eb (duke kaluar n\u00ebp\u00ebr numra, mund t\u00eb nxirren t\u00eb dh\u00ebna p\u00ebr klient\u00ebt nj\u00eb nga nj\u00eb). P\u00ebrve\u00e7 adres\u00ebs MAC, jepen edhe t\u00eb tjera t\u00eb dh\u00ebna mbi abonentin, duke p\u00ebrfshir\u00eb adres\u00ebn, telefonin, emrin dhe mbiemrin dhe emailin. T\u00eb gjitha informacionet jan\u00eb t\u00eb disponueshme p\u00ebr k\u00ebrkesa nga rrjeti i jasht\u00ebm pa autentikim. Gjithashtu, informacioni mund t\u00eb jo vet\u00ebm t\u00eb merret, por edhe t\u00eb ndryshohet. E gjith\u00eb API publike e disponueshme ka m\u00eb shum\u00eb se 700 menaxher\u00eb, shum\u00eb prej t\u00eb cil\u00ebve realizojn\u00eb operacione administrimi. <\/p>\n
P\u00ebr verifikimin e transmetimit t\u00eb urdhrave dhe cil\u00ebsimeve n\u00eb modem\u00ebt e p\u00ebrdoruesve, \u00ebsht\u00eb p\u00ebrdorur nj\u00eb paramet\u00ebr i enkriptuar, por funksionet p\u00ebr enkriptimin jan\u00eb gjetur n\u00eb nj\u00eb nga skriptet n\u00eb gjuh\u00ebn JavaScript, t\u00eb ofruara nga faqja webcdn-business.cox.com. \u00c7el\u00ebsi p\u00ebr enkriptimin u mund\u00ebsua duke vendosur nj\u00eb pik\u00eb Nd\u00ebrprerje n\u00eb k\u00ebto funksione n\u00eb debugger-in e JavaScript n\u00eb shfletues gjat\u00eb regjistrimit n\u00eb faqen myaccount-business.cox.com. \u00c7el\u00ebsi p\u00ebr enkriptimin u formua duke p\u00ebrdorur adres\u00ebn MAC, identifikuesin e pajisjes dhe numrin e llogaris\u00eb s\u00eb p\u00ebrdoruesit, si dhe disa parametra ndihm\u00ebs, si\u00e7 \u00ebsht\u00eb modeli i pajisjes dhe lloji i aksesit. <\/p>\n
Skenari i sulmit p\u00ebrfshin gjetjen e viktim\u00ebs p\u00ebrmes nj\u00eb API publik n\u00eb internet, duke p\u00ebrdorur k\u00ebrkimin sipas emrit, numrit t\u00eb telefonit, emailit ose numrit t\u00eb llogaris\u00eb. M\u00eb pas, sulmuesi i drejtohet API-t p\u00ebr t\u00eb nxjerr\u00eb nj\u00eb grup t\u00eb plot\u00eb t\u00eb t\u00eb dh\u00ebnave personale t\u00eb abonentit, duke p\u00ebrdorur UUID-n\u00eb e marr\u00eb gjat\u00eb k\u00ebrkimit n\u00eb hapin e par\u00eb. Duke p\u00ebrdorur adres\u00ebn MAC t\u00eb modem\u00ebs, e cila figuron n\u00eb t\u00eb dh\u00ebnat e abonentit, sulmuesi mund t\u00eb shikoj\u00eb list\u00ebn e pajisjeve t\u00eb lidhura me modem\u00ebn, t\u00eb ndryshoj\u00eb \u00e7do parametrin n\u00eb modem\u00eb, t\u00eb k\u00ebrkoj\u00eb fjal\u00ebkalimin q\u00eb p\u00ebrdoret p\u00ebr lidhjen me Wi-Fi dhe t\u00eb ekzekutoj\u00eb \u00e7do komand\u00eb n\u00eb pajisje, t\u00eb cilat mund t\u00eb p\u00ebrdoren, p\u00ebr shembull, p\u00ebr organizimin e analiz\u00ebs ose p\u00ebr redrektimin e trafikut t\u00eb p\u00ebrdoruesit. \u041a\u043b\u0438\u0435\u043d\u0442 Cox Communications, \u0442\u0440\u0435\u0442\u044c\u0435\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u043a\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u043b\u0435\u0432\u0438\u0434\u0435\u043d\u0438\u044f \u0432 \u0421\u0428\u0410 \u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 6.5 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c Web API, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u043c, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u043c \u043c\u043e\u0434\u0435\u043c\u0430\u043c \u0438 \u0431\u0430\u0437\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043d\u0430\u044f \u043b\u0438\u0448\u044c MAC-\u0430\u0434\u0440\u0435\u0441 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116339","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mund\u00ebsia p\u00ebr t\u00eb menaxhuar modemet e miliona abonent\u00ebve ISP Cox pa autentifikim | ProHoster","description":"Klienti Cox Communications, ofruesi i tret\u00eb m\u00eb t\u00eb madh t\u00eb televizionit kabllor n\u00eb Shtetet e Bashkuara dhe nj\u00eb nga operator\u00ebt m\u00eb t\u00eb m\u00ebdhenj t\u00eb aksesit n\u00eb internet me 6.5 milion abonent\u00eb, publikoi rezultatet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/vozmozhnost-upravleniya-modemami-millionov-abonentov-isp-cox-bez-autentifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432 ISP Cox \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u041a\u043b\u0438\u0435\u043d\u0442 Cox Communications, \u0442\u0440\u0435\u0442\u044c\u0435\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u043a\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u043b\u0435\u0432\u0438\u0434\u0435\u043d\u0438\u044f \u0432 \u0421\u0428\u0410 \u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 6.5 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/vozmozhnost-upravleniya-modemami-millionov-abonentov-isp-cox-bez-autentifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-04T19:40:05+00:00","article:modified_time":"2024-06-04T19:40:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116339","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:43:19","updated":"2026-01-23 01:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=116339"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116339\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=116339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=116339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=116339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"