{"id":116339,"date":"2024-06-04T21:40:05","date_gmt":"2024-06-04T19:40:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vozmozhnost-upravleniya-modemami-millionov-abonentov-isp-cox-bez-autentifikaczii"},"modified":"2024-06-04T21:40:05","modified_gmt":"2024-06-04T19:40:05","slug":"vozmozhnost-upravleniya-modemami-millionov-abonentov-isp-cox-bez-autentifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vozmozhnost-upravleniya-modemami-millionov-abonentov-isp-cox-bez-autentifikaczii","title":{"rendered":"Mund\u00ebsi p\u00ebr t\u00eb menaxhuar modem\u00ebt e miliona abonent\u00ebve ISP Cox pa autentifikim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Klienti Cox Communications, ofruesi i tret\u00eb m\u00eb i madh i televizionit me kabllor n\u00eb SHBA dhe nj\u00eb nga operator\u00ebt m\u00eb t\u00eb m\u00ebdhenj t\u00eb aksesit me broadband, me 6.5 milion abonoresh, publikoi rezultatet e eksperimenteve me API-n\u00eb e brendshme t\u00eb Web q\u00eb p\u00ebrdoret nga ofruesi, e cila \u00ebsht\u00eb e aksesueshme p\u00ebr k\u00ebrkesa t\u00eb jashtme dhe p\u00ebrdoret, p\u00ebrfshir\u00eb, p\u00ebr aksesin e sh\u00ebrbimit t\u00eb mb\u00ebshtetjes n\u00eb modem\u00ebt e abonent\u00ebve dhe baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve. Doli se duke ditur vet\u00ebm adres\u00ebn MAC t\u00eb pajisjes s\u00eb abonentit, mund t\u00eb marr\u00ebsh kontroll t\u00eb plot\u00eb mbi modem\u00ebn, q\u00eb lejon ndryshimin e cil\u00ebsimeve dhe ekzekutimin e \u00e7do urdhri n\u00eb modem. N\u00eb thelb, \u00e7do sulmues mund t\u00eb ket\u00eb qasje n\u00eb modem, duke i ngjar\u00eb qasjes inxhinierike q\u00eb siguron sh\u00ebrbimi i mb\u00ebshtetjes s\u00eb operatorit t\u00eb komunikimit. <\/p>\n
\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se adresa MAC e pajisjes s\u00eb abonentit mund t\u00eb merret p\u00ebrmes nj\u00eb k\u00ebrkese n\u00eb API-n\u00eb publike t\u00eb Web pa kaluar autentikimin, duke p\u00ebrdorur funksionin e k\u00ebrkimit p\u00ebr abonent\u00eb, p\u00ebr shembull, p\u00ebrmes seleksionit sipas emailit ose numrit t\u00eb llogaris\u00eb (duke p\u00ebrs\u00ebritur numrat, mund t\u00eb eksportohet gradualisht t\u00eb dh\u00ebnat p\u00ebr klient\u00ebt). P\u00ebrve\u00e7 adres\u00ebs MAC shfaqen edhe informacione t\u00eb tjera rreth abonentit, duke p\u00ebrfshir\u00eb adres\u00ebn, telefonin, emrin dhe mbiemrin dhe emailin. T\u00eb gjitha informacionet jan\u00eb t\u00eb aksesueshme p\u00ebr k\u00ebrkesa nga rrjeti i jasht\u00ebm pa autentifikim. P\u00ebr m\u00eb tep\u00ebr, informacioni mund t\u00eb merret dhe t\u00eb nd\u00ebrruar. API-ja publike ka m\u00eb shum\u00eb se 700 menaxher\u00eb, shum\u00eb prej t\u00eb cil\u00ebve realizojn\u00eb operacione p\u00ebr administrim. <\/p>\n
P\u00ebr verifikimin e transmetimit t\u00eb urdh\u00ebresave dhe cil\u00ebsimeve n\u00eb modem\u00ebt e p\u00ebrdoruesve \u00ebsht\u00eb p\u00ebrdorur nj\u00eb paramet\u00ebr i enkriptuar, por funksionet p\u00ebr enkriptimin u gjet\u00ebn n\u00eb nj\u00eb nga skriptet n\u00eb gjuh\u00ebn JavaScript, t\u00eb ofruara nga faqja webcdn-business.cox.com. \u00c7el\u00ebsi p\u00ebr enkriptimin u p\u00ebrcaktua duke vendosur nj\u00eb pik\u00eb ndalimi n\u00eb k\u00ebto funksione n\u00eb debugger-in e JavaScript t\u00eb shfletuesit gjat\u00eb regjistrimit n\u00eb faqen myaccount-business.cox.com. \u00c7el\u00ebsi p\u00ebr enkriptimin u formua duke p\u00ebrdorur adres\u00ebn MAC, identifikuesin e pajisjes dhe numrin e llogaris\u00eb s\u00eb p\u00ebrdoruesit, si dhe disa parametra ndihm\u00ebs, t\u00eb tilla si modeli i pajisjes dhe lloji i aksesit. <\/p>\n
Skema e sulmit p\u00ebrfshin k\u00ebrkimin e viktim\u00ebs p\u00ebrmes API-s\u00eb publike t\u00eb Web, duke p\u00ebrdorur nj\u00eb k\u00ebrkes\u00eb sipas emrit, numrit t\u00eb telefonit, emailit ose numrit t\u00eb llogaris\u00eb. M\u00eb pas, sulmuesi i drejtohet API-s\u00eb s\u00eb Web p\u00ebr t\u00eb eksportuar t\u00eb dh\u00ebnat e plota personale t\u00eb abonentit, duke p\u00ebrdorur UUID-n\u00eb e marr\u00eb gjat\u00eb k\u00ebrkimit n\u00eb faz\u00ebn e par\u00eb. Duke p\u00ebrdorur adres\u00ebn MAC t\u00eb modem\u00ebs, e cila \u00ebsht\u00eb e listuar n\u00eb t\u00eb dh\u00ebnat p\u00ebr abonentin, sulmuesi mund t\u00eb shikoj\u00eb list\u00ebn e pajisjeve t\u00eb lidhura me modem\u00ebn, t\u00eb ndryshoj\u00eb \u00e7do parametr t\u00eb modem\u00ebs, t\u00eb k\u00ebrkoj\u00eb fjal\u00ebkalimin q\u00eb p\u00ebrdoret p\u00ebr lidhjen me Wi-Fi, dhe t\u00eb ekzekutoj\u00eb \u00e7do urdh\u00ebr n\u00eb pajisje, \u00e7ka mund t\u00eb p\u00ebrdoret, p\u00ebr shembull, p\u00ebr t\u00eb organizuar analiz\u00eb ose p\u00ebr t\u00eb ridrejtuar trafikun e p\u00ebrdoruesit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"