{"id":30258,"date":"2019-10-31T21:34:32","date_gmt":"2019-10-31T18:34:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/netbios-v-rukah-hakera\/"},"modified":"2019-10-31T21:34:32","modified_gmt":"2019-10-31T18:34:32","slug":"netbios-v-rukah-hakera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/netbios-v-rukah-hakera","title":{"rendered":"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb k\u00ebt\u00eb artikull do t\u00eb flitet shkurtimisht p\u00ebr at\u00eb q\u00eb mund t\u00eb na tregoj\u00eb nj\u00eb gj\u00eb kaq e zakonshme si <i>NetBIOS<\/i>. \u00c7far\u00eb informacioni mund t\u00eb siguroj\u00eb ai p\u00ebr nj\u00eb keqb\u00ebr\u00ebs potencial\/pentester.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Zona e demonstruar e aplikimit t\u00eb teknikave t\u00eb zbulimit i p\u00ebrket rrjeteve t\u00eb brendshme, pra atyre t\u00eb izoluar dhe t\u00eb paqasshme nga jasht\u00eb. T\u00eb tilla rrjete zakonisht ka n\u00eb \u00e7do kompani, madje edhe n\u00eb ato m\u00eb t\u00eb voglat.<\/p>\n<p>I vet\u00eb <i>NetBIOS<\/i> p\u00ebrdoret zakonisht p\u00ebr t\u00eb marr\u00eb emrin e rrjetit. Dhe kjo do t\u00eb jet\u00eb e mjaftueshme p\u00ebr t\u00eb b\u00ebr\u00eb t\u00eb pakt\u00ebn 4 gj\u00ebra.<\/p>\n<p><b>Zbulimi i hosteve<\/b><br \/>\nP\u00ebr shkak se NetBIOS mund t\u00eb p\u00ebrdor\u00eb UDP si transport, shpejt\u00ebsia e tij e pun\u00ebs e lejon t\u00eb zbuloj\u00eb hostet n\u00eb rrjete shum\u00eb t\u00eb m\u00ebdha. K\u00ebshtu, p\u00ebr shembull, mjeti <i>nbtscan<\/i>, i p\u00ebrfshir\u00eb n\u00eb paket\u00ebn me t\u00eb nj\u00ebjtin em\u00ebr, mund t\u00eb zgjidh\u00eb adresat e rrjetit t\u00eb tipit 192.168.0.0\/16 p\u00ebr vet\u00ebm 2 sekonda (mund t\u00eb ngadal\u00ebsoj\u00eb rrjetin), nd\u00ebrsa nj\u00eb skanim tradicional TCP do t\u00eb marr\u00eb disa minuta. Kjo ve\u00e7ori mund t\u00eb p\u00ebrdoret si nj\u00eb teknik\u00eb zbulimi hostesh (host sweep) n\u00eb rrjete shum\u00eb t\u00eb m\u00ebdha, p\u00ebr t\u00eb cilat nuk dihet asgj\u00eb, para se t\u00eb nisi nmap. Edhe pse rezultati nuk garanton 100% zbulimi, pasi kryesisht do t\u00eb p\u00ebrgjigjen hostet Windows dhe as k\u00ebto jo t\u00eb gjitha, ai gjithsesi do t\u00eb lejoj\u00eb t\u00eb p\u00ebrcaktohet n\u00eb cilat zona ndodhen hostet aktiv\u00eb.<\/p>\n<p><b>Identifikimi i hosteve<\/b><br \/>\nDuke p\u00ebrdorur rezultatet e marrjes s\u00eb emrave nga adresat IP:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/c56ad0590b7023bf3fb192f46b8e23c8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nmund t\u00eb shohim: p\u00ebrve\u00e7 se emri zbulon pronarin e stacionit t\u00eb pun\u00ebs (edhe pse kjo ndodh jo gjithmon\u00eb), nj\u00eb nga adresat dallohet qart\u00eb nga t\u00eb tjerat. Mund t\u00eb shohim se \u00ebsht\u00eb marr\u00eb emri <i>KALI<\/i>. Ky q\u00ebndrim \u00ebsht\u00eb karakteristik, zakonisht p\u00ebr <i>unix<\/i>-implementimin <i>SMB\/NetBIOS<\/i> n\u00eb paket\u00ebn softuerike <i>samba<\/i> ose p\u00ebr Windows m\u00eb t\u00eb vjetra <i>Windows 2000<\/i>. <br \/>\nMarrja e emrit <i>KALI<\/i>, ndonj\u00ebher\u00eb n\u00eb hoste t\u00eb tjera kjo &lt;<i>unknown<\/i>&gt; tregon pranin\u00eb e asaj q\u00eb quhet <i>null-session<\/i>. Me konfigurimet e paracaktuara <i>SMB<\/i>-serverat n\u00eb <i>linux<\/i> jan\u00eb t\u00eb prir\u00eb ndaj saj. <i>Null-session<\/i> thjesht lejon q\u00eb n\u00eb m\u00ebnyr\u00eb absolutisht anonime (dhe nuk kemi futur asnj\u00eb fjal\u00ebkalim, si\u00e7 duket n\u00eb ekran) t\u00eb marrim nj\u00eb sasi t\u00eb madhe informacioni t\u00eb m\u00ebtejsh\u00ebm, si\u00e7 \u00ebsht\u00eb politika lokale e fjal\u00ebkalimeve, lista e p\u00ebrdoruesve lokal\u00eb, grupeve dhe lista e burimeve t\u00eb shp\u00ebrndara (share):<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/29d9c5e9f760d95166abe62a5e8aef4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nShpesh n\u00eb <i>linux SMB<\/i>-serverat kan\u00eb nshkalla publike t\u00eb aksesueshme, jo vet\u00ebm p\u00ebr t\u00eb lexuar, por madje edhe p\u00ebr t\u00eb shkruar. Prania e t\u00eb dyve bart rreziqe t\u00eb ndryshme, p\u00ebrdorimi i t\u00eb cilave kalon p\u00ebrtej k\u00ebtij artikulli.<\/p>\n<p><i>NetBIOS<\/i> po ashtu lejon marrjen e emrave t\u00eb t\u00eb gjith\u00eb tipeve q\u00eb ruan stacioni i pun\u00ebs:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/0d0f2d46683ff0a829668fafc9dc99d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nn\u00eb k\u00ebt\u00eb rast, kjo mund\u00ebson t\u00eb dihet se hosti \u00ebsht\u00eb gjithashtu nj\u00eb kontrollues domeni. <i>ARRIVA<\/i>.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb vihet n\u00eb dukje q\u00eb <i>NetBIOS<\/i> mund\u00ebson t\u00eb marr\u00eb <i>mac<\/i>-adres\u00eb. N\u00eb p\u00ebrputhje me k\u00ebrkesat arp, k\u00ebrkesat NetBIOS kan\u00eb aft\u00ebsin\u00eb t\u00eb kalojn\u00eb p\u00ebrtej n\u00ebnrrjet\u00ebs. Kjo mund t\u00eb jet\u00eb e dobishme, p\u00ebr shembull, n\u00ebse k\u00ebrkohet t\u00eb gjendet nj\u00eb laptop ose nj\u00eb harduer specifik n\u00eb rrjet, duke ditur prodhuesin e tij. Duke qen\u00eb se tre oktetet e para <i>mac<\/i>-adresave identifikojn\u00eb prodhuesin, \u00ebsht\u00eb e mundur t\u00eb d\u00ebrgohen t\u00eb tilla <i>NetBIOS<\/i>-k\u00ebrkesa n\u00eb t\u00eb gjitha n\u00ebnrrjetet e njohura p\u00ebr t\u00eb provuar t\u00eb gjejm\u00eb pajisjen e k\u00ebrkuar (http:\/\/standards-oui.ieee.org\/oui.txt).<\/p>\n<p><b>P\u00ebrcaktimi i p\u00ebrkat\u00ebsis\u00eb n\u00eb <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/domain\/\"   title=\"domen\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1221\">domen<\/a><\/b><br \/>\nShpesh, kur l\u00ebvizim n\u00ebp\u00ebr rrjetet e brendshme kuorporative, \u00ebsht\u00eb e nevojshme t\u00eb sulmohet pik\u00ebrisht stacioni i pun\u00ebs, i p\u00ebrfshir\u00eb n\u00eb domen (p.sh., p\u00ebr t\u00eb rritur privilegjet n\u00eb nivelin e administratorit t\u00eb domenit) ose anasjelltas. N\u00eb k\u00ebt\u00eb rast, <i>NetBIOS<\/i> nj\u00eb her\u00eb tjet\u00ebr mund t\u00eb ndihmoj\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/4488df62ea520dc1898e0e52e5a419a1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb rast, me ndihm\u00ebn e <i>NetBIOS<\/i> u mor\u00ebn t\u00eb gjith\u00eb emrat e t\u00eb gjith\u00eb tipeve. Nd\u00ebr ta, p\u00ebrve\u00e7 emrit t\u00eb PC-s\u00eb (ato q\u00eb ishte marr\u00eb m\u00eb par\u00eb), mund t\u00eb shikohet gjithashtu emri i grupit t\u00eb pun\u00ebs. N\u00eb m\u00ebnyr\u00eb t\u00eb parazgjedhur p\u00ebr <i>windows<\/i> zakonisht \u00ebsht\u00eb di\u00e7ka si <i>WORKGROUP<\/i> \u0438\u043b\u0438 <i>IVAN-PC<\/i>, por n\u00ebse stacioni i pun\u00ebs \u00ebsht\u00eb n\u00eb domen, at\u00ebher\u00eb grupi i tij i pun\u00ebs \u00ebsht\u00eb emri i domenit.<br \/>\nK\u00ebshtu, me ndihm\u00ebn e <i>NetBIOS<\/i> mund t\u00eb dihet n\u00ebse stacioni i pun\u00ebs \u00ebsht\u00eb n\u00eb domen dhe, n\u00ebse po, n\u00eb cilin.<br \/>\nN\u00ebse k\u00ebrkohet t\u00eb merret lista e hosteve t\u00eb domenit brenda n\u00ebnrrjet\u00ebs, nj\u00eb k\u00ebrkes\u00eb e vetme e transmetimit me emrin e domenit t\u00eb nevojsh\u00ebm do t\u00eb mjaftoj\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/d99e6b6ed805bebb425d9d2f22cd0bea.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nn\u00eb rezultat do t\u00eb p\u00ebrgjigjen t\u00eb gjith\u00eb hostet q\u00eb jan\u00eb pjes\u00eb e k\u00ebtij domendi.<\/p>\n<p><b>Zbulimi i hosteve multihomed<\/b><br \/>\nDhe n\u00eb fund, nj\u00eb teknik\u00eb ndoshta shum\u00eb e panjohur, e cila \u00ebsht\u00eb thjesht e domosdoshme p\u00ebr <i>gjetjen e rrug\u00ebve<\/i> n\u00eb rrjete t\u00eb mbrojtura, ndoshta edhe fizikisht t\u00eb izoluara. K\u00ebto mund t\u00eb jen\u00eb rrjetet e pun\u00ebs t\u00eb nd\u00ebrmarrjeve, t\u00eb pajisura me kontrolle. Qasje n\u00eb k\u00ebt\u00eb rrjet p\u00ebr nj\u00eb sulmues do t\u00eb thot\u00eb mund\u00ebsi p\u00ebr t\u00eb ndikuar n\u00eb procesin teknologjik, nd\u00ebrsa p\u00ebr nd\u00ebrmarrjen rreziku p\u00ebr t\u00eb p\u00ebrjetuar humbje t\u00eb m\u00ebdha.<br \/>\nPra ndaj, thelbi \u00ebsht\u00eb q\u00eb, edhe n\u00ebse rrjeti \u00ebsht\u00eb i izoluar nga rrjeti korporativ, shpesh disa administrator\u00eb, p\u00ebr shkak t\u00eb len\u00ebsis\u00eb s\u00eb tyre ose ndoshta nga m\u00ebnyra tjet\u00ebr, preferojn\u00eb t\u00eb aktivizojn\u00eb nj\u00eb kart\u00eb t\u00eb re rrjeti n\u00eb PC-t\u00eb e tyre q\u00eb t\u00eb ken\u00eb akses n\u00eb k\u00ebt\u00eb rrjet. Kjo b\u00ebhet sigurisht n\u00eb m\u00ebnyr\u00eb t\u00eb paligjshme p\u00ebrmes rregullave t\u00eb \u00e7do mbrojtjeje korporative t\u00eb rrjetit. E leht\u00eb, apo jo, por jo shum\u00eb e sigurt; n\u00ebse dikush sulmon, at\u00ebher\u00eb do t\u00eb b\u00ebheni nj\u00eb ur\u00eb p\u00ebr k\u00ebt\u00eb rrjet dhe do t\u00eb mbani p\u00ebrgjegj\u00ebsi.<br \/>\nMegjithat\u00eb, p\u00ebr sulmuesin, ka nj\u00eb problem \u2014 t\u00eb gjej\u00eb at\u00eb administratorin q\u00eb \u00ebsht\u00eb futur n\u00eb rrjetin e mbrojtur n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb t\u00eb paligjshme. P\u00ebr m\u00eb tep\u00ebr, kjo \u00ebsht\u00eb nj\u00eb problem i v\u00ebshtir\u00eb edhe p\u00ebr sigurin\u00eb e rrjetit. N\u00eb nd\u00ebrmarrjet e m\u00ebdha, kjo \u00ebsht\u00eb me te v\u00ebrtet\u00eb nj\u00eb t\u00ebr\u00ebsi e v\u00ebshtir\u00eb, si t\u00eb gjesh nj\u00eb gjilp\u00ebr\u00eb n\u00eb nj\u00eb grumbull me r\u00ebr\u00eb.<br \/>\nN\u00eb k\u00ebt\u00eb situat\u00eb, p\u00ebr sulmuesin do t\u00eb kishte dy mund\u00ebsi t\u00eb qarta:<br \/>\n1. t\u00eb p\u00ebrpiqet t\u00eb p\u00ebrdor\u00eb secilin PC n\u00eb subnetin korporativ si nj\u00eb kalim p\u00ebr n\u00eb rrjetin e k\u00ebrkuar. Kjo do t\u00eb ishte shum\u00eb e p\u00ebrshtatshme, por rrall\u00eb ndodh, pasi n\u00eb <i>windows<\/i> hostet <i>ip forwarding<\/i> \u00ebsht\u00eb pothuajse gjithmon\u00eb i \u00e7aktivizuar. P\u00ebr m\u00eb tep\u00ebr, nj\u00eb kontroll i till\u00eb \u00ebsht\u00eb i mundur vet\u00ebm brenda subnetit t\u00eb tij, dhe gjithashtu k\u00ebrkon q\u00eb sulmuesi t\u00eb dij\u00eb sakt\u00ebsisht adres\u00ebn e synuar nga rrjeti i izoluar.<br \/>\n2. t\u00eb p\u00ebrpiqet t\u00eb hyj\u00eb n\u00eb \u00e7do host dhe t\u00eb ekzekutoj\u00eb komand\u00ebn banale <i>ipconfig\/ifconfig<\/i>. Dhe k\u00ebtu nuk \u00ebsht\u00eb gjith\u00e7ka aq e leht\u00eb. Edhe n\u00ebse sulmuesi ka fituar t\u00eb drejtat e administratorit t\u00eb domenit, asnj\u00eb nga mbrojtjet e rrjetit dhe firewall-at lokal\u00eb nuk jan\u00eb anuluar. K\u00ebshtu q\u00eb kjo detyr\u00eb nuk mund t\u00eb automatizohet 100%. Si rezultat, mbetet t\u00eb hyhet n\u00eb \u00e7do host duke u p\u00ebrballur me mbrojtjet e rrjetit (shpesh duke bllokuar portin 445\/tcp), n\u00eb shpres\u00eb t\u00eb shohim p\u00ebrfundimisht nd\u00ebrfaqen e d\u00ebshiruar t\u00eb rrjetit.<\/p>\n<p>Megjithat\u00eb, ka nj\u00eb zgjidhje shum\u00eb m\u00eb t\u00eb thjesht\u00eb. Ekziston nj\u00eb teknik\u00eb jasht\u00ebzakonisht e thjesht\u00eb q\u00eb lejon t\u00eb merret nga nj\u00eb host Lista e nd\u00ebrfaqeve t\u00eb rrjetit. Le t\u00eb supozojm\u00eb se kemi nj\u00eb host t\u00eb till\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/79b10413cb1b0c3ab1f3116af8d6609b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nkjo \u00ebsht\u00eb nj\u00eb zgjidhje e prapambetur ip-adresa \u2192 emri i rrjetit. N\u00ebse tani p\u00ebrpiqemi t\u00eb b\u00ebjm\u00eb nj\u00eb zgjidhje t\u00eb drejtp\u00ebrdrejt\u00eb emri i rrjetit \u2192 ip-adresa:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/e72c3b210658d935c58354d6a8e6092b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nat\u00ebher\u00eb do t\u00eb zbulojm\u00eb se ky host \u00ebsht\u00eb gjithashtu nj\u00eb kalim (duke duket) n\u00eb nj\u00eb rrjet tjet\u00ebr. Vlen t\u00eb p\u00ebrs\u00ebritet se, n\u00eb k\u00ebt\u00eb rast, k\u00ebrkesa \u00ebsht\u00eb b\u00ebr\u00eb p\u00ebrmes nj\u00eb transmetimi t\u00eb gjer\u00eb. Me fjal\u00eb t\u00eb tjera, do t\u00eb d\u00ebgjohet vet\u00ebm nga hostet brenda subnetit t\u00eb sulmuesit.<br \/>\nN\u00ebse host-i i synuar ndodhet jasht\u00eb n\u00ebnrrjetit, mund t\u00eb d\u00ebrgohet nj\u00eb k\u00ebrkes\u00eb e synuar:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/525de9a6d615691458beff622ea60d5b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb rast, duket se q\u00ebllimi ndodhet jasht\u00eb n\u00ebnrrjetit t\u00eb sulmuesit. Me ndihm\u00ebn e \u00e7el\u00ebsit -B, u tregua se k\u00ebrkesa duhet d\u00ebrguar n\u00eb nj\u00eb adres\u00eb t\u00eb caktuar, e jo n\u00eb at\u00eb t\u00eb p\u00ebrgjithshme.<br \/>\nTani mbetet vet\u00ebm t\u00eb mblidhet shpejt informacioni nga e gjith\u00eb n\u00ebnrrjeti i interesit, e jo vet\u00ebm nga nj\u00eb adres\u00eb. P\u00ebr k\u00ebt\u00eb, mund t\u00eb p\u00ebrdoret nj\u00eb <i>python<\/i>-skipt:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/f70721f54fe98d16c6ac6ae85b41c19c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDhe pas disa sekondash:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/d37932871820fcf07de8ca68b5060f6d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb rast, host-i i dedikuar do t\u00eb b\u00ebhej targeti i par\u00eb i sulmuesit, n\u00ebse ai do t\u00eb ndiqte rrjetin 172.16.1\/24.<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/e5a4a9e3f61f1b7232ae230304e56b93.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nEmrat e p\u00ebrs\u00ebritur n\u00eb ip t\u00eb ndryshme tregojn\u00eb se host-i ka gjithashtu dy karta rrjeti, por tashm\u00eb n\u00eb nj\u00eb n\u00ebnrrjet. K\u00ebtu duhet theksuar se <i>NetBIOS<\/i> nuk zbulon <i>alias<\/i>-at (t\u00eb cilat mund t\u00eb llogariten leht\u00ebsisht p\u00ebrmes k\u00ebrkesave arp si ip me t\u00eb nj\u00ebjtin <i>mac<\/i>). N\u00eb k\u00ebt\u00eb rast <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/lir\/ipv4\/\"   title=\"ip-\u0430\u0434\u0440\u0435\u0441\u0430\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"620\">ip-\u0430\u0434\u0440\u0435\u0441\u0430<\/a> kan\u00eb t\u00eb ndryshme <i>mac<\/i>.<\/p>\n<p>Nj\u00eb shembull tjet\u00ebr i p\u00ebrdorimit t\u00eb k\u00ebtij triku \u00ebsht\u00eb Wi-Fi publik. Ndonj\u00ebher\u00eb, mund t\u00eb hasni situata kur n\u00eb mesin e pajisjeve t\u00eb mysafir\u00ebve q\u00eb lidhen me rrjetin publik, stafi q\u00eb punon n\u00eb nj\u00eb segment t\u00eb mbyllur t\u00eb korporat\u00ebs lidhet gjithashtu. At\u00ebher\u00eb, me ndihm\u00ebn e k\u00ebsaj teknike spiunazhi, sulmuesi do t\u00eb jet\u00eb shum\u00eb shpejt n\u00eb gjendje t\u00eb p\u00ebrcaktoj\u00eb nj\u00eb rrug\u00eb p\u00ebr t\u00eb hyr\u00eb n\u00eb rrjetin e mbyllur:<\/p>\n<p><img decoding=\"async\" alt=\"NetBIOS n\u00eb duar t\u00eb hacker\u00ebve\" src=\"\/wp-content\/uploads\/2019\/03\/5feac7ee3cfbd70c4c323f8e9583227c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb rast, nd\u00ebr 65 klient\u00ebt e Wi-Fi publik, u zbuluan dy stacione pune, t\u00eb cilat kishin nj\u00eb nd\u00ebrfaqe shtes\u00eb, m\u00eb s\u00eb shumti t\u00eb lidhur me rrjetin korporativ.<\/p>\n<p>N\u00ebse ndonj\u00ebher\u00eb midis segmenteve t\u00eb rrjetit, ose direkt n\u00eb stacionet e pun\u00ebs, v\u00ebrehet filtrimi i trafikut n\u00eb portin 445\/tcp, i cili parandalon hyrjen e larg\u00ebt n\u00eb sistem (ekzekutimin e kodit nga distanca), at\u00ebher\u00eb n\u00eb k\u00ebt\u00eb rast p\u00ebr zgjidhjen e emrave p\u00ebrdoret <i>NetBIOS<\/i> porti 137\/udp, bllokimi i vet\u00ebdijsh\u00ebm i t\u00eb cilit gati nuk ndodh, pasi do t\u00eb d\u00ebmtonte ndjesh\u00ebm leht\u00ebsin\u00eb e pun\u00ebs n\u00eb rrjet, p\u00ebr shembull, mund t\u00eb zhduket ambienti rrjet\u00ebsor etj.<\/p>\n<p>Si\u00e7 thuhet, <i>enumeration is the key<\/i><br \/>\nA ka ndonj\u00eb mbrojtje nga kjo? Nuk ka, pasi ndryshe nuk \u00ebsht\u00eb nj\u00eb dob\u00ebsi p\u00ebr t\u00eb gjith\u00eb. Ky \u00ebsht\u00eb thjesht funksionaliteti standard i asaj pak q\u00eb ekziston n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar <i>windows<\/i> (n\u00eb <i>linux<\/i> sjellja ndryshon pak). Dhe n\u00ebse, ndonj\u00ebher\u00eb, pa autorizim, u bashkuat n\u00eb nj\u00eb segment t\u00eb mbyllur, sulmuesi do t'ju gjente patjet\u00ebr dhe do ta b\u00ebnte k\u00ebt\u00eb shum\u00eb shpejt.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/445212\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS. \u041a\u0430\u043a\u0443\u044e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\/\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430. \u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u043a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c, \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437\u0432\u043d\u0435 \u0441\u0435\u0442\u044f\u043c. \u0422\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0443 \u043b\u044e\u0431\u043e\u0439 \u0434\u0430\u0436\u0435 \u0443 \u0441\u0430\u043c\u043e\u0439 \u043a\u0440\u043e\u0448\u0435\u0447\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0421\u0430\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-30258","post","type-post","status-publish","format-standard","hentry","category-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/netbios-v-rukah-hakera\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47NetBIOS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/netbios-v-rukah-hakera\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBIOS n\u00eb duar t\u00eb hakerit | ProHoster","description":"N\u00eb k\u00ebt\u00eb artikull do t\u00eb flitet shkurtimisht p\u00ebr at\u00eb q\u00eb na tregon nj\u00eb gj\u00eb q\u00eb duket aq e zakonshme si\u00e7 \u00ebsht\u00eb NetBIOS.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/netbios-v-rukah-hakera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47NetBIOS \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0451\u0442 \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0442\u0430\u043a\u0430\u044f \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0430\u044f \u0441 \u0432\u0438\u0434\u0443 \u0432\u0435\u0449\u044c \u043a\u0430\u043a NetBIOS.","og:url":"https:\/\/prohoster.info\/sq\/blog\/netbios-v-rukah-hakera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:32+00:00","article:modified_time":"2019-10-31T18:34:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:53:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:38:39","updated":"2026-02-09 15:53:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=30258"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30258\/revisions"}],"predecessor-version":[{"id":158465,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30258\/revisions\/158465"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=30258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=30258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=30258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}