{"id":55145,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","title":{"rendered":"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb penteshti socioteknik","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb penteshti socioteknik\" src=\"\/wp-content\/uploads\/2020\/01\/fa938cb2a5cb85adb395a1b2c3b14d4b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nImagjino nj\u00eb situat\u00eb t\u00eb till\u00eb. Nj\u00eb m\u00ebngjes i ftoht\u00eb tetori, nj\u00eb institut projektesh n\u00eb nj\u00eb qend\u00ebr t\u00eb rajonit t\u00eb nj\u00eb prej vendeve t\u00eb Rusis\u00eb. Disa nga departamenti i burimeve njer\u00ebzore hyn n\u00eb nj\u00eb nga faqet e vendeve t\u00eb pun\u00ebs n\u00eb faqen e institutit, t\u00eb postuar disa dit\u00eb m\u00eb par\u00eb, dhe sheh atje nj\u00eb fotografi t\u00eb nj\u00eb maceje. M\u00ebngjesi shpejt fillon t\u00eb mos jet\u00eb m\u00eb i m\u00ebrzitsh\u00ebm... <\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull, Pavel Suprunyuk, drejtori teknik i departamentit t\u00eb auditimit dhe konsulenc\u00ebs n\u00eb Group-IB, flet p\u00ebr rolin e sulmeve socioteknike n\u00eb projektet e vler\u00ebsimit t\u00eb mbrojtjes praktike, p\u00ebr format e pazakonta q\u00eb ato mund t\u00eb marrin, si dhe p\u00ebr m\u00ebnyrat se si t\u00eb mbrohemi nga k\u00ebto sulme. Autori thekson se artikulli ka karakter informues, megjithat\u00eb, n\u00ebse ndonj\u00eb aspekt t\u00eb intereson, ekspert\u00ebt e Group-IB do t\u00eb p\u00ebrgjigjen me k\u00ebnaq\u00ebsi n\u00eb komentet. <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex> <\/p>\n<h2>Pjesa 1. Pse t\u00eb jesh kaq serioz?<\/h2>\n<p>\nT\u00eb kthehemi te macja jon\u00eb. Pas nj\u00eb kohe, departamenti i burimeve njer\u00ebzore heq fotografin\u00eb (fotografit\u00eb e ekranit k\u00ebtu e m\u00eb tej jan\u00eb pjes\u00ebrisht t\u00eb retushura p\u00ebr t\u00eb mos zbuluar emrat e v\u00ebrtet\u00eb), por ajo me ngulm rikthehet, e fshin p\u00ebrs\u00ebri, dhe k\u00ebshtu ndodh disa her\u00eb. Departamenti i burimeve njer\u00ebzore kupton se q\u00ebllimet e mac\u00ebs jan\u00eb shum\u00eb serioze, nuk d\u00ebshiron t\u00eb largohet, dhe th\u00ebrrasin p\u00ebr ndihm\u00eb programuesin web \u2014 personin q\u00eb b\u00ebri faqen dhe kupton si funksionon, dhe tani e administro. Programuesi hyn n\u00eb faqen, heq p\u00ebrs\u00ebri macen e bezdisshme, zbulon se ajo ishte postuar n\u00eb em\u00ebr t\u00eb vet\u00eb departamentit t\u00eb burimeve njer\u00ebzore, pastaj b\u00ebn supozimin se fjal\u00ebkalimi i departamentit t\u00eb burimeve njer\u00ebzore ka rrjedhur tek ndonj\u00eb hajdut n\u00eb internet, dhe e ndryshon at\u00eb. Macja nuk kthehet m\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb penteshti socioteknik\" src=\"\/wp-content\/uploads\/2020\/01\/319d5d30d3b563897339362e0fac1a6e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00c7far\u00eb ndodhi n\u00eb t\u00eb v\u00ebrtet\u00eb? N\u00eb lidhje me grupin e kompanive, ku b\u00ebnte pjes\u00eb instituti, specialist\u00ebt e Group-IB realizuan nj\u00eb testim t\u00eb dep\u00ebrtimit n\u00eb nj\u00eb format t\u00eb ngjash\u00ebm me Red Teaming (thjesht, kjo \u00ebsht\u00eb nj\u00eb imitim i sulmeve t\u00eb targetuara ndaj kompanis\u00eb tuaj duke p\u00ebrdorur metodat dhe instrumentet m\u00eb t\u00eb avancuara nga arsenali i grupeve t\u00eb haker\u00ebve). Ne kemi folur n\u00eb detaje p\u00ebr Red Teaming. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/group-ib\/blog\/460461\/\">k\u00ebtu<\/a><\/noindex>\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb dihet se gjat\u00eb zhvillimit t\u00eb nj\u00eb testi t\u00eb till\u00eb mund t\u00eb aplikohet nj\u00eb gam\u00eb e gjer\u00eb sulmesh nga ato t\u00eb miratuara paraprakisht, p\u00ebrfshir\u00eb inxhinierin\u00eb sociale. E qart\u00eb se vendosja e mac\u00ebs nuk ishte q\u00ebllimi p\u00ebrfundimtar i ndodhis\u00eb. Q\u00ebllimi ishte si n\u00eb vijim:<\/p>\n<ul>\n<li>faq.<\/li>\n<li>gjithashtu, keni d\u00ebshtuar t\u00eb ruani informacionin p\u00ebr identitetin e pjes\u00ebmarr\u00ebsve.<\/li>\n<li>n\u00ebp\u00ebrmjet p\u00ebrmir\u00ebsimit t\u00eb faqeve, ishte e mundshme t\u00eb vendosnit skenar\u00eb JavaScript. K\u00ebta zakonisht b\u00ebjn\u00eb faqet interaktive, por n\u00eb k\u00ebt\u00eb rast ato mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb vjedhur nga shfletuesi i vizitor\u00ebve informacionin q\u00eb dallon HR nga programuesi, dhe programuesin nga vizitori i thjesht\u00eb - identifikuesin e sesionit n\u00eb faqe. Maces ishte trigeri i sulmit dhe imazhi p\u00ebr t\u00eb t\u00ebrhequr v\u00ebmendjen. N\u00eb HTML, kjo dukej k\u00ebshtu: n\u00ebse keni ngarkuar nj\u00eb imazh, JavaScript tashm\u00eb \u00ebsht\u00eb ekzekutuar dhe identifikuesi juaj i sesionit s\u00eb bashku me t\u00eb dh\u00ebnat p\u00ebr shfletuesin tuaj dhe adres\u00ebn IP tashm\u00eb ishte vjedhur.<\/li>\n<li> me identifikuesin e vjedhur t\u00eb administratorit do t\u00eb ishte e mundur t\u00eb merrni qasje t\u00eb plot\u00eb n\u00eb faqe, t\u00eb publikoni faqe ekzekutive n\u00eb PHP, duke siguruar k\u00ebshtu akses n\u00eb sistemin operativ t\u00eb serverit, dhe m\u00eb pas n\u00eb vet\u00eb rrjetin lokal, q\u00eb ishte q\u00ebllimi i r\u00ebnd\u00ebsish\u00ebm nd\u00ebrmjet\u00ebs i projektit.<\/li>\n<\/ul>\n<p>\nsulmi p\u00ebrfundoi me nj\u00eb sukses t\u00eb pjessh\u00ebm - identifikuesi i administratorit u vodh, por ai ishte i lidhur me adres\u00ebn IP. Ne nuk arrit\u00ebm ta kalojm\u00eb k\u00ebt\u00eb, nuk mund\u00ebm ta rrisim privilegjin n\u00eb faqen deri n\u00eb at\u00eb t\u00eb administratorit, por p\u00ebrmir\u00ebsuam humorin ton\u00eb. Rezultati p\u00ebrfundimtar e mor\u00ebm n\u00eb nj\u00eb pjes\u00eb tjet\u00ebr t\u00eb perimetris\u00eb s\u00eb rrjetit.<\/p>\n<h2>Pjesa 2. Po ju shkruaj - \u00e7far\u00eb tjet\u00ebr? Dhe po telefonoj dhe po eci te zyra juaj, duke l\u00ebshuar USB-t\u00eb.<br \/>\n<\/h2>\n<p>\nAjo q\u00eb ndodhi n\u00eb situat\u00ebn me macen \u00ebsht\u00eb nj\u00eb shembull i inxhinieris\u00eb sociale, ndon\u00ebse jo krejt\u00ebsisht klasike. N\u00eb t\u00eb v\u00ebrtet\u00eb, kjo histori kishte m\u00eb shum\u00eb ngjarje: kishte macen, institutin, departamentin e burimeve njer\u00ebzore, dhe programuesin, por kishte gjithashtu edhe email-e me pyetje sqaruese, t\u00eb d\u00ebrguara nga ata q\u00eb pretendoheshin si \"kandidat\u00eb\" drejtuar pik\u00ebrisht departamentit t\u00eb burimeve njer\u00ebzore dhe programuesit, p\u00ebr t\u00eb provokuar ata t\u00eb hynin n\u00eb faqen e internetit.<\/p>\n<blockquote><p>Dhe p\u00ebr email-et. Nj\u00eb email i zakonsh\u00ebm - ndoshta mjeti kryesor p\u00ebr inxhinierin\u00eb sociale - nuk ka humbur relevanc\u00ebn e tij p\u00ebr disa dhjet\u00ebvje\u00e7ar\u00eb dhe ndonj\u00ebher\u00eb \u00e7on n\u00eb pasoja shum\u00eb t\u00eb \u00e7uditshme. <\/p><\/blockquote>\n<p>Histori tuajin ne shpesh e tregojm\u00eb n\u00eb aktivitetet tona, pasi \u00ebsht\u00eb shum\u00eb ilustrative.<\/p>\n<p>Zakonisht, ne p\u00ebrfundojm\u00eb nj\u00eb statistik\u00eb nga rezultatet e projekteve t\u00eb inxhinieris\u00eb sociale, q\u00eb si\u00e7 dihet, \u00ebsht\u00eb nj\u00eb gj\u00eb e that\u00eb dhe e m\u00ebrzitshme. Nj\u00eb p\u00ebrqindje e caktuar e marr\u00ebsve hapi bashk\u00ebngjitjen e emailit, nj\u00eb tjet\u00ebr kaloi n\u00eb lidhje, dhe k\u00ebta tre madje fut\u00ebn emrin e p\u00ebrdoruesit dhe fjal\u00ebkalimin e tyre. N\u00eb nj\u00eb projekt, ne regjistruam m\u00eb shum\u00eb se 100% t\u00eb futjes s\u00eb fjal\u00ebkalimeve \u2014 dometh\u00ebn\u00eb, doli m\u00eb shum\u00eb se sa kishim d\u00ebrguar. <\/p>\n<p>K\u00ebshtu ndodhi: u d\u00ebrgua nj\u00eb email phishing, pretenduar nga CISO i nj\u00eb korporate shtet\u00ebrore, me k\u00ebrkes\u00ebn \"t\u00eb testoni menj\u00ebher\u00eb ndryshimet n\u00eb sh\u00ebrbimin e post\u00ebs elektronike\". Emaili arriti te drejtori i nj\u00eb dege t\u00eb madhe q\u00eb merrej me mb\u00ebshtetje teknike. Drejtori ishte shum\u00eb i kujdessh\u00ebm n\u00eb kryerjen e detyrave nga shefat e lart\u00eb dhe e d\u00ebrgoi at\u00eb te t\u00eb gjith\u00eb n\u00ebnshkruesit e tij. Qendra e thirrjeve vet\u00eb ishte mjaft e madhe. N\u00eb p\u00ebrgjith\u00ebsi, situatat kur dikush e d\u00ebrgon \"emailin interesante\" t\u00eb phishingut koleg\u00ebve t\u00eb tij dhe ata gjithashtu bien pre jan\u00eb nj\u00eb fenomen shum\u00eb i zakonsh\u00ebm. P\u00ebr ne, kjo \u00ebsht\u00eb kthimi m\u00eb i mir\u00eb mbi cil\u00ebsin\u00eb e p\u00ebrgatitjes s\u00eb emailit.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb penteshti socioteknik\" src=\"\/wp-content\/uploads\/2020\/01\/2af30148f4b5d22033c5137625f421ab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPak m\u00eb von\u00eb na zbuluan (emaili u mor nga llogaria e komprometuar):<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb penteshti socioteknik\" src=\"\/wp-content\/uploads\/2020\/01\/1d36db3cb55d0e6d6061fb002d5f987a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKy sukses i sulmit u shkaktua nga disa k\u00ebng\u00eb teknike t\u00eb sistemit t\u00eb post\u00ebs elektronike t\u00eb klientit. Ai ishte konfiguruar n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb d\u00ebrgoj\u00eb \u00e7do email nga emri i \u00e7do d\u00ebrguesi t\u00eb vet\u00eb organizat\u00ebs pa autorizim, madje edhe nga interneti. Dometh\u00ebn\u00eb, ishte e mundur t\u00eb imitohej CISO, ose drejtori i mb\u00ebshtetjes teknike, ose dikush tjet\u00ebr. P\u00ebr m\u00eb tep\u00ebr, nd\u00ebrfaqja e post\u00ebs, duke par\u00eb emailin nga \"domaini\" i saj, e shtonte me kujdes fotografin\u00eb nga agjenda e adresave, q\u00eb shtonte natyrshm\u00ebrin\u00eb e d\u00ebrguesit.<\/p>\n<p>Sinqerisht, nj\u00eb sulm i till\u00eb nuk p\u00ebrfshin teknologji ve\u00e7an\u00ebrisht t\u00eb komplikuara, \u00ebsht\u00eb nj\u00eb shfryt\u00ebzim i suksessh\u00ebm i nj\u00eb mang\u00ebsie t\u00eb thjesht\u00eb n\u00eb konfigurimin e post\u00ebs. Ajo rregullisht diskutohet n\u00eb burime IT dhe sigurin\u00eb e informacionit, por ndon\u00ebse t\u00eb tilla kompani ende ekzistojn\u00eb. Sepse askush nuk \u00ebsht\u00eb i prirur t\u00eb kontrolloj\u00eb me kujdes titujt e sh\u00ebrbimeve t\u00eb protokollit t\u00eb post\u00ebs elettronike SMTP, emaili zakonisht kontrollohet p\u00ebr \"rrezik\" n\u00ebp\u00ebrmjet simboleve paralajm\u00ebruese t\u00eb nd\u00ebrfaqes s\u00eb post\u00ebs, t\u00eb cilat nuk e shfaqin gjithmon\u00eb t\u00ebr\u00ebsisht situat\u00ebn.<\/p>\n<blockquote><p>\u00cbsht\u00eb interesante q\u00eb nj\u00eb vunerabilitet i till\u00eb funksionon edhe n\u00eb drejtim t\u00eb kund\u00ebrt: nj\u00eb sulmues mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb email n\u00eb em\u00ebr t\u00eb kompanis\u00eb suaj p\u00ebr nj\u00eb marr\u00ebs t\u00eb tret\u00eb. P\u00ebr shembull, ai mund t\u00eb falsifikoj\u00eb nj\u00eb fatur\u00eb p\u00ebr pagesa t\u00eb rregullta n\u00eb emrin tuaj, duke treguar p\u00ebrve\u00e7 t\u00eb dh\u00ebnave tuaja t\u00eb tjera. N\u00ebse nuk shqyrtojm\u00eb \u00e7\u00ebshtjet e anti-fraud\u00ebs dhe t\u00ebrheqjes s\u00eb fondeve, k\u00ebt\u00eb e ndoshta \u00ebsht\u00eb nj\u00eb nga m\u00ebnyrat m\u00eb t\u00eb thjeshta p\u00ebr t\u00eb vjedhur para p\u00ebrmes inxhinieris\u00eb sociale.\n<\/p><\/blockquote>\n<p> P\u00ebrve\u00e7 vjedhjes s\u00eb fjal\u00ebkalimeve p\u00ebrmes phishing-ut, nj\u00eb klasike e sulmeve socioteknike \u00ebsht\u00eb d\u00ebrgimi i bashk\u00ebngjitjeve ekzekutive. N\u00ebse k\u00ebto bashk\u00ebngjitje arrijn\u00eb t\u00eb kalojn\u00eb t\u00eb gjitha masat e mbrojtjes, t\u00eb cilat zakonisht i kan\u00eb kompanit\u00eb moderne, krijohet nj\u00eb kanal p\u00ebr qasje t\u00eb larg\u00ebt n\u00eb kompjuterin e viktim\u00ebs. P\u00ebr t\u00eb demonstruar pasojat e sulmit, menaxhimi i m\u00ebposht\u00ebm t\u00eb larg\u00ebt mund t\u00eb zhvillohet deri n\u00eb akses n\u00eb informacione tep\u00ebr t\u00eb r\u00ebnd\u00ebsishme dhe konfidenciale. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se shumica d\u00ebrrmuese e sulmeve, me t\u00eb cilat media na frikson, fillojn\u00eb pik\u00ebrisht k\u00ebshtu. <\/p>\n<blockquote><p>N\u00eb departamentin ton\u00eb t\u00eb auditimit, ne p\u00ebr shkak t\u00eb interesit kemi llogaritur statistika p\u00ebraf\u00ebrsisht: sa \u00ebsht\u00eb vlera totale e aktiveve t\u00eb kompanive, t\u00eb cilat prit\u00ebm nivelin \"Administrator t\u00eb Domin\u00ebs\" kryesisht p\u00ebrmes phishing-ut dhe d\u00ebrgimit t\u00eb bashk\u00ebngjitjeve ekzekutive? K\u00ebt\u00eb vit ajo arriti t\u00eb jet\u00eb af\u00ebrsisht 150 miliard\u00eb euro.\n<\/p><\/blockquote>\n<p> \u00cbsht\u00eb e qart\u00eb se d\u00ebrgimi i email-eve provokues dhe vendosja e fotografive t\u00eb maceve n\u00eb faqe nuk jan\u00eb vet\u00ebm m\u00ebnyrat e inxhinieris\u00eb sociale. N\u00eb k\u00ebto shembuj, p\u00ebrpiqeshim t\u00eb tregojm\u00eb diversitetin e formave t\u00eb sulmit dhe pasojave t\u00eb tyre. P\u00ebrve\u00e7 email-eve, nj\u00eb sulmues potencial mund t\u00eb telefonoj\u00eb p\u00ebr t\u00eb marr\u00eb informacionin e nevojsh\u00ebm, t\u00eb shp\u00ebrndaj\u00eb media (p.sh. flash drive) me skedar\u00eb ekzekutiv\u00eb n\u00eb zyr\u00ebn e kompanis\u00eb s\u00eb synuar, t\u00eb punoj\u00eb si praktikant, t\u00eb fitoj\u00eb akses fizik n\u00eb rrjetin lokal n\u00ebn petkun e instaluesit t\u00eb kamerave t\u00eb siguris\u00eb. T\u00eb gjitha k\u00ebto, p\u00ebr m\u00eb tep\u00ebr, jan\u00eb shembuj nga projektet tona t\u00eb suksesshme.<\/p>\n<h2>Pjesa 3. M\u00ebsimi \u00ebsht\u00eb drit\u00eb, nd\u00ebrsa ata q\u00eb s'ka m\u00ebsuar jan\u00eb err\u00ebsir\u00eb.<\/h2>\n<p>\n\u00c7do pyetje e arsyeshme: mir\u00eb, ka ingjenierin\u00eb sociale, duket e rrezikshme, \u00e7far\u00eb t\u00eb b\u00ebjn\u00eb kompanit\u00eb me t\u00eb gjitha k\u00ebto? N\u00eb ndihm\u00eb vjen Kapiteni i Qart\u00eb: duhet t\u00eb mbrohemi, dhe kjo n\u00eb m\u00ebnyr\u00eb komplekse. Nj\u00eb pjes\u00eb e mbrojtjes do t\u00eb jet\u00eb e orientuar nga masat tradicionale t\u00eb siguris\u00eb, si\u00e7 jan\u00eb mjete teknike p\u00ebr mbrojtjen e informacionit, monitorimi, sigurimi ligjor-organizativ i proceseve, por sipas mendimit ton\u00eb, pjesa kryesore duhet t\u00eb orientohet n\u00eb pun\u00ebn e drejtp\u00ebrdrejt\u00eb me punonj\u00ebsit si lidhja m\u00eb e dob\u00ebt. Sepse sa her\u00eb q\u00eb forcon teknologjin\u00eb, sa her\u00eb q\u00eb shkruan rregullore t\u00eb rrepta, gjithmon\u00eb do t\u00eb ket\u00eb nj\u00eb p\u00ebrdorues q\u00eb do t\u00eb gjej\u00eb nj\u00eb m\u00ebnyr\u00eb fillestare p\u00ebr ta prishur gjith\u00e7ka. Dhe as rregulloret, as teknika nuk do t\u00eb arrijn\u00eb t\u00eb p\u00ebrballojn\u00eb fluturimin e krijimtaris\u00eb s\u00eb p\u00ebrdoruesit, ve\u00e7an\u00ebrisht n\u00ebse ai udh\u00ebhiqet nga nj\u00eb k\u00ebrc\u00ebnues i kualifikuar.<\/p>\n<blockquote><p> S\u00eb pari, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb trajnohet p\u00ebrdoruesi: t'i shpjegohet se edhe n\u00eb pun\u00ebn e tij rutinore mund t\u00eb ndodhin situata t\u00eb lidhura me inxhinierin\u00eb sociale. P\u00ebr klient\u00ebt tan\u00eb ne shpesh zhvillojm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.group-ib.ru\/cyber-education.html\">kurse<\/a><\/noindex> p\u00ebr higjien\u00ebn dixhitale - nj\u00eb ngjarje q\u00eb edukon aft\u00ebsit\u00eb baz\u00eb p\u00ebr t\u00eb kund\u00ebrshtuar sulmet n\u00eb p\u00ebrgjith\u00ebsi.\n<\/p><\/blockquote>\n<p> Mund t\u00eb shtoj se nj\u00eb nga masat m\u00eb t\u00eb mira t\u00eb mbrojtjes nuk do t\u00eb jet\u00eb thjesht memorizimi i rregullave p\u00ebr sigurin\u00eb e informacionit, por nj\u00eb vler\u00ebsim pak m\u00eb t\u00eb distancuar t\u00eb situat\u00ebs: <\/p>\n<ol>\n<li>Kush \u00ebsht\u00eb biseduesi im? <\/li>\n<li>Nga erdh\u00ebn propozimi ose k\u00ebrkesa e tij (sepse asnj\u00ebher\u00eb nuk ka pasur di\u00e7ka t\u00eb till\u00eb, dhe ja, tani doli)? <\/li>\n<li>\u00c7far\u00eb \u00ebsht\u00eb e pazakont\u00eb n\u00eb k\u00ebt\u00eb k\u00ebrkes\u00eb? <\/li>\n<\/ol>\n<p>\nMadje nj\u00eb tip i pazakont\u00eb i shkrimit ose nj\u00eb stil i pazakont\u00eb komunikimi nga d\u00ebrguesi mund t\u00eb aktivizoj\u00eb nj\u00eb zinxhir dyshimesh q\u00eb do t\u00eb ndaloj\u00eb nj\u00eb sulm. Udh\u00ebzimet e shkruara jan\u00eb t\u00eb nevojshme, por ato funksionojn\u00eb ndryshe dhe nuk mund t\u00eb specifikojn\u00eb t\u00eb gjitha situatat e mundshme. P\u00ebr shembull, administrator\u00ebt e siguris\u00eb s\u00eb informacionit i shkruajn\u00eb ato, duke th\u00ebn\u00eb se nuk duhet t\u00eb jepni fjal\u00ebkalimin tuaj n\u00eb burime t\u00eb treta. E n\u00ebse burimi k\u00ebrkon fjal\u00ebkalimin tuaj \"personal\" ose \"korporativ\"? P\u00ebrdoruesi mendon: \"N\u00eb kompanin\u00eb ton\u00eb ka tashm\u00eb dy duzina sh\u00ebrbimesh me nj\u00eb llogari t\u00eb vetme, pse t\u00eb mos shfaqet nj\u00eb tjet\u00ebr?\" Nga kjo rrjedh nj\u00eb rregull tjet\u00ebr: nj\u00eb proces pune i mir\u00eb i ndihmon drejtp\u00ebrdrejt sigurin\u00eb; n\u00ebse nj\u00eb departament fqinj mund t\u00eb k\u00ebrkoj\u00eb informacion vet\u00ebm me shkrim dhe vet\u00ebm p\u00ebrmes shefit tuaj, nj\u00eb person \"nga nj\u00eb partner i besuesh\u00ebm i kompanis\u00eb\" me siguri nuk do t\u00eb mund ta k\u00ebrkoj\u00eb at\u00eb n\u00eb telefon \u2014 p\u00ebr ju do t\u00eb ishte nj\u00eb nonsens. Ve\u00e7an\u00ebrisht duhet t\u00eb jeni t\u00eb kujdessh\u00ebm n\u00ebse bashk\u00ebbiseduesi juaj k\u00ebrkon t\u00eb b\u00ebni gjith\u00e7ka tani, ose \"ASAP\" si\u00e7 \u00ebsht\u00eb mod\u00eb t\u00eb shkruhet. Edhe n\u00eb pun\u00ebn e zakonshme, nj\u00eb situat\u00eb e till\u00eb shpesh nuk \u00ebsht\u00eb e sh\u00ebndetshme, dhe n\u00eb kushte sulmesh t\u00eb mundshme \u2014 \u00ebsht\u00eb nj\u00eb triger i fort\u00eb. Nuk ka koh\u00eb p\u00ebr t\u00eb shpjeguar, fillo skedarin tim!<\/p>\n<p>V\u00ebrejm\u00eb se p\u00ebrdoruesit si legjenda p\u00ebr sulmet socioteknike gjithmon\u00eb p\u00ebrballen me tema t\u00eb lidhura me parat\u00eb n\u00eb nj\u00eb form\u00eb ose n\u00eb tjet\u00ebr: premtime rritjesh, privilegjesh, dhuratash, si dhe informacione me thashetheme dhe intriga t\u00eb pretenduara lokale. Me fjal\u00eb t\u00eb tjera, funksionojn\u00eb m\u00ebkatet banale: lakmia, avarecia dhe kurioziteti i tepruar. <\/p>\n<p>Nj\u00eb trajnim i mir\u00eb gjithmon\u00eb duhet t\u00eb p\u00ebrfshij\u00eb praktik\u00ebn. K\u00ebtu mund t\u00eb ndihmojn\u00eb specialist\u00ebt e testimit t\u00eb dep\u00ebrtimit. Pyetja tjet\u00ebr \u00ebsht\u00eb: \u00e7far\u00eb dhe si do t\u00eb testojm\u00eb? Ne n\u00eb Group-IB propozoni qasjen e m\u00ebposhtme \u2014 menj\u00ebher\u00eb t\u00eb p\u00ebrzgjedhim fokusin e testimit: ose t\u00eb vler\u00ebsojm\u00eb gatishm\u00ebri p\u00ebr sulme vet\u00ebm t\u00eb p\u00ebrdoruesve, ose t\u00eb kontrollojm\u00eb sigurin\u00eb e kompanis\u00eb si nj\u00eb t\u00ebr\u00ebsi. Dhe t\u00eb testojm\u00eb me metoda inxhinierike sociale, duke imituar sulme reale \u2014 pra ato t\u00eb nj\u00ebjta si phishing, d\u00ebrgimi i dokumenteve ekzekutive, telefonatat dhe teknika t\u00eb tjera.<\/p>\n<p>N\u00eb rastin e par\u00eb, sulmi p\u00ebrgatitet me kujdes n\u00eb bashk\u00ebpunim me p\u00ebrfaq\u00ebsuesit e klientit, kryesisht me specialist\u00ebt e IT-s\u00eb dhe t\u00eb siguris\u00eb informacionit t\u00eb tij. B\u00ebhen marr\u00ebveshje p\u00ebr legjendat, mjetet dhe teknikat e sulmeve. Klienti vet\u00eb ofron grupet e fokusit dhe listat e p\u00ebrdoruesve p\u00ebr sulmin, t\u00eb cilat p\u00ebrfshijn\u00eb t\u00eb gjitha kontaktet e nevojshme. Krijohen p\u00ebrjashtime n\u00eb mjetet e mbrojtjes, pasi mesazhet dhe ngarkesat e ekzekutueshme duhet patjet\u00ebr t\u00eb arrijn\u00eb te marr\u00ebsi, pasi n\u00eb nj\u00eb projekt t\u00eb till\u00eb interesi p\u00ebrben vet\u00ebm reagimi i njer\u00ebzve. Si opsion, mund t\u00eb p\u00ebrfshihen n\u00eb sulm tregues, me t\u00eb cil\u00ebt p\u00ebrdoruesi mund t\u00eb kuptoj\u00eb se b\u00ebhet fjal\u00eb p\u00ebr nj\u00eb sulm \u2014 p\u00ebr shembull, mund t\u00eb b\u00ebhen disa gabime ortografike n\u00eb mesazhe ose t\u00eb lihen pasakt\u00ebsi n\u00eb kopjon e stilit t\u00eb mark\u00ebs. Pas p\u00ebrfundimit t\u00eb projektit, p\u00ebrftohet statistika e ashtuquajtur \"e that\u00eb\": cilat grupe fokusimi dhe n\u00eb \u00e7far\u00eb sasi kan\u00eb reaguar ndaj skenar\u00ebve.<\/p>\n<p>N\u00eb rastin e dyt\u00eb \u2014 sulmi realizohet me njohuri t\u00eb zero nga origjina, me metod\u00ebn \"e kutis\u00eb s\u00eb zez\u00eb\". Ne mbledhim vet\u00eb informacion n\u00eb lidhje me kompanin\u00eb, punonj\u00ebsit e saj, periferi rrjetore, formulojm\u00eb legjenda p\u00ebr sulmin, zgjedhim metoda, k\u00ebrkojm\u00eb mjete t\u00eb mundshme mbrojt\u00ebse t\u00eb aplikuara n\u00eb kompanin\u00eb e synuar, adaptojm\u00eb mjetet, p\u00ebrgatisim skenar\u00eb. Specialist\u00ebt tan\u00eb p\u00ebrdorin si metoda klasike t\u00eb zbardhjes n\u00eb burime t\u00eb hapura (OSINT), ashtu edhe produktin e zhvillimit ton\u00eb t\u00eb brendsh\u00ebm Group-IB \u2014 Threat Intelligence, nj\u00eb sistem q\u00eb n\u00eb p\u00ebrgatitjen p\u00ebr phishing mund t\u00eb veproj\u00eb si nj\u00eb agregator informacioni p\u00ebr kompanin\u00eb p\u00ebr nj\u00eb periudh\u00eb t\u00eb gjat\u00eb, duke p\u00ebrfshir\u00eb informacionin e mbyllur. Sigurisht, q\u00eb sulmi t\u00eb mos b\u00ebhet nj\u00eb surpriz\u00eb e pak\u00ebndshme, detajet e tij gjithashtu miratohen me klientin. Ajo rezulton si nj\u00eb test i plot\u00eb p\u00ebr dep\u00ebrtim, por n\u00eb thelb ka inxhinierin\u00eb sociale t\u00eb avancuar. Nj\u00eb mund\u00ebsi logjike n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb zhvillimi i sulmit brenda rrjetit, deri n\u00eb marrjen e t\u00eb drejtave m\u00eb t\u00eb larta n\u00eb sistemet e brendshme. P\u00ebr m\u00eb tep\u00ebr, n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme ne aplikojm\u00eb sulme socio-teknike edhe n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.group-ib.ru\/red-teaming.html\">Red Teaming<\/a><\/noindex>, si dhe n\u00eb disa teste p\u00ebr dep\u00ebrtim. Si rezultat, klienti do t\u00eb marr\u00eb nj\u00eb vizion t\u00eb pavarur dhe t\u00eb plot\u00eb t\u00eb siguris\u00eb s\u00eb tij nga nj\u00eb lloj i caktuar i sulmeve socio-teknike, si dhe nj\u00eb demonstrim t\u00eb efikasitetit (ose, p\u00ebrndryshe, t\u00eb paefikasitetit) t\u00eb linj\u00ebs s\u00eb tij mbrojt\u00ebse nga k\u00ebrc\u00ebnimet e jashtme.<\/p>\n<p>Ne rekomandojm\u00eb q\u00eb t\u00eb b\u00ebni nj\u00eb trajnim t\u00eb till\u00eb t\u00eb pakt\u00ebn dy her\u00eb n\u00eb vit. S\u00eb pari, n\u00eb \u00e7do kompani ka rotacion t\u00eb punonj\u00ebsve dhe p\u00ebrvoja e m\u00ebparshme gradualisht harrohet nga punonj\u00ebsit. S\u00eb dyti, m\u00ebnyrat dhe teknik\u00ebt e sulmeve ndryshojn\u00eb vazhdimisht, dhe kjo shkakton nevoj\u00ebn p\u00ebr adaptimin e proceseve t\u00eb siguris\u00eb dhe mjeteve t\u00eb mbrojtjes.<\/p>\n<p>N\u00ebse flasim p\u00ebr masat teknike t\u00eb mbrojtjes nga sulmet, ato ndihmojn\u00eb n\u00eb m\u00ebnyr\u00eb m\u00eb t\u00eb madhe:<\/p>\n<ul>\n<li>Prania e dyfaktor\u00ebs s\u00eb detyrueshme t\u00eb autentifikimit n\u00eb sh\u00ebrbimet e botuara n\u00eb internet. T\u00eb l\u00ebsh sh\u00ebrbime t\u00eb tilla n\u00eb vitin 2019 pa sisteme Single Sign On, pa mbrojtje nga provat e fjal\u00ebkalimeve dhe pa autentifikim t\u00eb dyfaktorit n\u00eb nj\u00eb kompani me disa qindra punonj\u00ebs \u00ebsht\u00eb ekuivalente me nj\u00eb thirrje t\u00eb hapur \"m\u00eb thyej.\" Mbrojtja e implementuar n\u00eb m\u00ebnyr\u00eb t\u00eb sakt\u00eb do ta b\u00ebj\u00eb t\u00eb pamundur p\u00ebrdorimin e shpejt\u00eb t\u00eb fjal\u00ebkalimeve t\u00eb vjedhura dhe do t\u00eb ofroj\u00eb koh\u00eb p\u00ebr t\u00eb adresuar pasojat e sulmit phishing.<\/li>\n<li>Kontrolli i ndarjes s\u00eb aksesit, minimizimi i t\u00eb drejtave t\u00eb p\u00ebrdoruesve n\u00eb sisteme dhe respektimi i udh\u00ebzimeve p\u00ebr konfigurimin e sigurt t\u00eb produkteve q\u00eb l\u00ebshon \u00e7do prodhues i madh. K\u00ebto shpesh jan\u00eb masa t\u00eb thjeshta n\u00eb thelb, por shum\u00eb efektive dhe t\u00eb komplikuara n\u00eb implementimin praktik, t\u00eb cilat t\u00eb gjitha n\u00eb nj\u00eb far\u00eb m\u00ebnyre injorohen p\u00ebr shkak t\u00eb shpejt\u00ebsis\u00eb s\u00eb pun\u00ebs. Disa jan\u00eb aq t\u00eb nevojshme, saq\u00eb pa to asnj\u00eb mjet mbrojt\u00ebs nuk do t\u00eb shp\u00ebtoj\u00eb.<\/li>\n<li>Nj\u00eb linj\u00eb mir\u00eb e filtrimit t\u00eb post\u00ebs elektronike. Antispam, kontroll total i t\u00eb gjitha bashk\u00ebngjitjeve p\u00ebr prani t\u00eb kodeve t\u00eb d\u00ebmshme, p\u00ebrfshir\u00eb testimin dinamik p\u00ebrmes kutive t\u00eb r\u00ebr\u00ebs. Nj\u00eb sulm i miratuar mir\u00eb n\u00ebnkupton se bashk\u00ebngjitja ekzekutiv nuk do t\u00eb zbulohen nga mjetet antivirus. Nd\u00ebrsa, kutia e r\u00ebr\u00ebs do t\u00eb kontrolloj\u00eb gjith\u00e7ka vet\u00eb, duke p\u00ebrdorur skedar\u00ebt si\u00e7 i p\u00ebrdor nj\u00eb njeri. Si rezultat, ndonj\u00eb p\u00ebrb\u00ebr\u00ebs i mundsh\u00ebm d\u00ebmsh\u00ebm do t\u00eb zbulohet p\u00ebrmes ndryshimeve q\u00eb ndodhin brenda kutis\u00eb s\u00eb r\u00ebr\u00ebs.<\/li>\n<li>Mjetet e mbrojtjes nga sulmet e synuara. Si\u00e7 \u00ebsht\u00eb p\u00ebrmendur tashm\u00eb, mjetet klasike antivirus nuk do t\u00eb zbulojn\u00eb skedar\u00ebt e d\u00ebmsh\u00ebm gjat\u00eb nj\u00eb sulmi t\u00eb mir\u00ebp\u00ebrgatitur. Produktet m\u00eb t\u00eb avancuara duhet t\u00eb ndjekin automatikisht mbledhjen e ngjarjeve q\u00eb ndodhin n\u00eb rrjet \u2014 si n\u00eb nivelin e nj\u00eb host-i t\u00eb ve\u00e7ant\u00eb, ashtu edhe n\u00eb nivelin e trafikut brenda rrjetit. N\u00eb rastin e sulmeve shfaqen zinxhir\u00eb shum\u00eb karakteristik\u00eb ngjarjesh, t\u00eb cilat mund t\u00eb ndjekin dhe t\u00eb ndalen, n\u00ebse ka nj\u00eb monitorim t\u00eb fokusuar mbi ngjarje t\u00eb k\u00ebtij lloji.<\/li>\n<\/ul>\n<p>\nOrigjinali i artikullit <noindex><a rel=\"nofollow\" href=\"http:\/\/lib.itsec.ru\/articles2\/Oborandteh\/obmani-menya--esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\">u publikua<\/a><\/noindex> n\u00eb revist\u00ebn \u00abInformation Security\/ Informacioni mbi Sigurin\u00eb\u00bb #6, 2019.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/group-ib\/blog\/483652\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0441\u0435\u0431\u0435 \u0442\u0430\u043a\u0443\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e. \u0425\u043e\u043b\u043e\u0434\u043d\u043e\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0435 \u0443\u0442\u0440\u043e, \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u043d\u043e\u043c \u0446\u0435\u043d\u0442\u0440\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0440\u0435\u0433\u0438\u043e\u043d\u043e\u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u041a\u0442\u043e-\u0442\u043e \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u043a\u0430\u0434\u0440\u043e\u0432 \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0430\u043a\u0430\u043d\u0441\u0438\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u0443\u044e \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434, \u0438 \u0432\u0438\u0434\u0438\u0442 \u0442\u0430\u043c \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u044e \u043a\u043e\u0442\u0430. \u0423\u0442\u0440\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u0443\u0447\u043d\u044b\u043c\u2026 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u041f\u0430\u0432\u0435\u043b \u0421\u0443\u043f\u0440\u0443\u043d\u044e\u043a, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u0430 Group-IB, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55145","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043c\u0430\u043d\u0438 \u043c\u0435\u043d\u044f, \u0435\u0441\u043b\u0438 \u0441\u043c\u043e\u0436\u0435\u0448\u044c: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0446\u0438\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00eb mashtro, n\u00ebse mundesh: karakteristikat e kryerjes s\u00eb nj\u00eb testimi socioteknik | ProHoster","description":"Para\ufb01lloni.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043c\u0430\u043d\u0438 \u043c\u0435\u043d\u044f, \u0435\u0441\u043b\u0438 \u0441\u043c\u043e\u0436\u0435\u0448\u044c: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0446\u0438\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55145","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-09-29 07:35:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55145"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55145\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}