{"id":167926,"date":"2026-04-08T11:12:52","date_gmt":"2026-04-08T09:12:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft"},"modified":"2026-04-10T10:23:05","modified_gmt":"2026-04-10T08:23:05","slug":"issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/issledovatel-slil-v-set-kod-eksplojta-dlya-windows-v-otvet-na-bezdejstvie-microsoft","title":{"rendered":"Nj\u00eb hulumtues ka rrjedhur n\u00eb internet kodin e nj\u00eb eksploiti p\u00ebr Windows si p\u00ebrgjigje ndaj mosveprimit t\u00eb Microsoft.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb k\u00ebrkues sigurie publikoi n\u00eb internet kodin e nj\u00eb eksploiti t\u00eb zero dit\u00ebve p\u00ebr Windows, i quajtur BlueHammer. Shkaku i k\u00ebtij hapi radikal ishte nj\u00eb konflikt mes specialistit dhe Qendr\u00ebs s\u00eb Reagimit t\u00eb Microsoft (MSRC) p\u00ebr p\u00ebrpunimin e informacionit t\u00eb dh\u00ebn\u00eb prej tij.<\/p>\n

\"Nj\u00eb<\/p>\n

K\u00ebrkuesi, q\u00eb shfaqet me pseudonimin Chaotic Eclipse, publikoi kodin e eksploiti n\u00eb platform\u00ebn GitHub m\u00eb 3 prill. Autori shprehu zhg\u00ebnjimin ndaj q\u00ebndrimit t\u00eb drejtuesve t\u00eb MSRC ndaj informacionit q\u00eb i kishte dh\u00ebn\u00eb m\u00eb par\u00eb p\u00ebr incidentin dhe refuzoi t\u00eb shpjegonte detajet teknike t\u00eb metod\u00ebs s\u00eb tij t\u00eb zbules\u00ebs s\u00eb dob\u00ebsis\u00eb. Eksploiti lejon nj\u00eb sulmues lokal t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem deri n\u00eb nivelin SYSTEM ose t\u00eb fitoj\u00eb t\u00eb drejta t\u00eb zgjeruara administrative. Deri m\u00eb tani, Microsoft nuk ka l\u00ebshuar nj\u00eb p\u00ebrdit\u00ebsim sigurie, duke ofruar vet\u00ebm nj\u00eb deklarat\u00eb t\u00eb zakonshme mbi r\u00ebnd\u00ebsin\u00eb e zbules\u00ebs s\u00eb koordinuar t\u00eb dob\u00ebsive.<\/p>\n

Analisti kryesor i siguris\u00eb n\u00eb kompanin\u00eb Tharros, Will Dormann, konfirmoi funksionalitetin e eksploiti. Ai shpjegoi se sulmi p\u00ebrb\u00ebn nj\u00eb rritje lokale t\u00eb privilegjeve, e cila kombinon nj\u00eb dob\u00ebsi nga koha e kontrollit deri n\u00eb p\u00ebrdorim (Time-of-Check to Time-of-Use, TOCTOU) dhe konfuzion me rrug\u00ebt. Ky metod\u00eb e komplikuar i jep hakerit akses n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb Security Account Manager (SAM), ku ruhen hash-et e fjal\u00ebkalimeve t\u00eb llogarive lokale. Si rezultat, \u00ebsht\u00eb e mundur t\u00eb startohet nj\u00eb shell komandash me t\u00eb drejta maksimale dhe t\u00eb kompromentohet plot\u00ebsisht kompjuteri.<\/p>\n

Nd\u00ebrkoh\u00eb, autori i kodit Chaotic Eclipse dhe testuesit e pavarur kan\u00eb v\u00ebn\u00eb n\u00eb dukje pranin\u00eb e gabimeve n\u00eb eksploit, duke e b\u00ebr\u00eb at\u00eb t\u00eb funksionoj\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb paq\u00ebndrueshme. N\u00eb ve\u00e7anti, n\u00eb platform\u00ebn Windows Server, kodi nuk ofron t\u00eb drejta t\u00eb plota sistemin, por vet\u00ebm i rrit ato deri n\u00eb nivelin administrativ me k\u00ebrkes\u00ebn p\u00ebr konfirmim. Dormann sugjeroi se irritimi i autorit mund t\u00eb jet\u00eb shkaktuar nga k\u00ebrkesa e Microsoft q\u00eb t\u00eb pranohet nj\u00eb video me demonstrimin e thyerjes.<\/p>\n

Megjith\u00ebse dob\u00ebsia k\u00ebrkon akses lokal fillestar, haker\u00ebt mund ta fitojn\u00eb at\u00eb leht\u00ebsisht p\u00ebrmes inxhinieris\u00eb sociale ose brekllave t\u00eb tjera n\u00eb softuer.<\/p>\n

Burimi:<\/strong><\/p>\n