{"id":167926,"date":"2026-04-08T11:12:52","date_gmt":"2026-04-08T09:12:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft"},"modified":"2026-04-10T10:23:05","modified_gmt":"2026-04-10T08:23:05","slug":"issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","title":{"rendered":"Nj\u00eb k\u00ebrkues publikoi n\u00eb internet kodin e nj\u00eb eksploiti p\u00ebr Windows n\u00eb p\u00ebrgjigje t\u00eb mosveprimit t\u00eb Microsoft.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb k\u00ebrkues sigurie publikoi n\u00eb internet kodin e nj\u00eb eksploiti t\u00eb dit\u00ebs zero p\u00ebr Windows, i quajtur BlueHammer. Arsyetimi pas k\u00ebtij hapi radikal \u00ebsht\u00eb nj\u00eb konflikt mes specialistit dhe Qendr\u00ebs s\u00eb Reagimit t\u00eb Microsoft (MSRC) p\u00ebr m\u00ebnyr\u00ebn e trajtimit t\u00eb procesit t\u00eb informimit q\u00eb ai kishte ofruar.<\/p>\n

\"Nj\u00eb<\/p>\n

K\u00ebrkuesi, q\u00eb shfaqet me pseudonimin Chaotic Eclipse, publiikoi kodin e eksploitit m\u00eb 3 prill n\u00eb platform\u00ebn GitHub. Autori shprehu zhg\u00ebnjimin e tij me q\u00ebndrimin e menaxhimit t\u00eb MSRC ndaj informacionit q\u00eb ai kishte ofruar m\u00eb par\u00eb p\u00ebr incidentin dhe refuzoi t\u00eb shpjegonte detajet teknike t\u00eb metod\u00ebs s\u00eb tij t\u00eb zbules\u00ebs s\u00eb dob\u00ebsis\u00eb. Eksploiti i lejon nj\u00eb sulmues lokal t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem n\u00eb nivelin SYSTEM ose t\u00eb fitoj\u00eb t\u00eb drejta t\u00eb zgjeruara si administrator. Nd\u00ebrkoh\u00eb, Microsoft nuk ka l\u00ebshuar ende nj\u00eb p\u00ebrdit\u00ebsim sigurie, duke ofruar vet\u00ebm nj\u00eb koment t\u00eb zakonsh\u00ebm mbi r\u00ebnd\u00ebsin\u00eb e zbules\u00ebs s\u00eb koordinuar t\u00eb dob\u00ebsive.<\/p>\n

Analisti kryesor i siguris\u00eb n\u00eb kompanin\u00eb Tharros, Will Dormann, konfirmoi funksionalitetin e shfryt\u00ebzimit. Ai sqaroi se sulmi p\u00ebrfaq\u00ebson nj\u00eb ngritje lokale t\u00eb privilegjeve, e cila kombinon nj\u00eb dob\u00ebsi t\u00eb koh\u00ebs s\u00eb kontrollit deri n\u00eb koh\u00ebn e p\u00ebrdorimit (Time-of-Check to Time-of-Use, TOCTOU) dhe konfuzionin me rrug\u00ebt. Ky metod\u00eb komplekse i jep hakerit akses n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb Security Account Manager (SAM), ku ruhen hash-et e fjal\u00ebkalimeve t\u00eb llogarive lokale. Si rezultat, \u00ebsht\u00eb e mundur t\u00eb nisni nj\u00eb shell komandash me t\u00eb drejta maksimale dhe t\u00eb komprometoni plot\u00ebsisht kompjuterin.<\/p>\n

N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, autori i kodit Chaotic Eclipse dhe testuesit e jasht\u00ebm sh\u00ebnojn\u00eb pranin\u00eb e gabimeve n\u00eb shfryt\u00ebzim, duke b\u00ebr\u00eb q\u00eb ky t\u00eb funksionoj\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb paq\u00ebndrueshme. S\u00eb ve\u00e7anti, n\u00eb platform\u00ebn Windows Server, kodi nuk jep t\u00eb drejta t\u00eb plota sistemike, por vet\u00ebm i rrit ato n\u00eb nivelin administrativ me nj\u00eb k\u00ebrkes\u00eb p\u00ebr konfirmim. Dormann sugjeroi se irritimi i autorit mund t\u00eb jet\u00eb shkaktuar nga k\u00ebrkesa e Microsoft p\u00ebr t\u00eb bashkangjitur detyrimisht nj\u00eb video q\u00eb demonstrojn\u00eb hakin.<\/p>\n

Megjith\u00ebse shp\u00ebrthimi k\u00ebrkon akses lokal fillestar, haker\u00ebt mund ta fitojn\u00eb leht\u00ebsisht at\u00eb p\u00ebrmes inxhinieris\u00eb sociale ose dob\u00ebsive t\u00eb tjera n\u00eb softuer.<\/p>\n

Burimi:<\/strong><\/p>\n