{"id":55145,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","title":{"rendered":"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb testimi sociateknik","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb testimi sociateknik\" src=\"\/wp-content\/uploads\/2020\/01\/fa938cb2a5cb85adb395a1b2c3b14d4b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nImagjinoni nj\u00eb situat\u00eb t\u00eb till\u00eb. Nj\u00eb m\u00ebngjes t\u00eb ftoht\u00eb tetori, nj\u00eb institut projektimi n\u00eb nj\u00eb qend\u00ebr rajonale t\u00eb Rusis\u00eb. Nj\u00eb person nga departamenti i burimeve njer\u00ebzore hyn n\u00eb nj\u00ebr\u00ebn nga faqet e vendeve t\u00eb pun\u00ebs n\u00eb faqen e institutit, publikuar disa dit\u00eb m\u00eb par\u00eb, dhe sheh nj\u00eb fotografi muri. M\u00ebngjesi shpejt fillon t\u00eb mos jet\u00eb m\u00eb i m\u00ebrzitsh\u00ebm\u2026 <\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull, Pavel Suprunyk, udh\u00ebheq\u00ebsi teknik i departamentit t\u00eb auditimit dhe konsulenc\u00ebs n\u00eb Group-IB, diskuton vendin q\u00eb sulmet socioteknike z\u00ebn\u00eb n\u00eb projektet e vler\u00ebsimit t\u00eb mbrojtjes praktike, format e pazakonta q\u00eb mund t\u00eb marrin, si dhe m\u00ebnyrat se si t\u00eb mbrohemi nga k\u00ebto sulme. Autori sakt\u00ebson se artikulli ka nj\u00eb karakter p\u00ebrmbledh\u00ebs, megjithat\u00eb, n\u00ebse ndonj\u00eb aspekt e intereson lexuesin, ekspert\u00ebt e Group-IB do t\u00eb p\u00ebrgjigjen me gatishm\u00ebri n\u00eb komentet. <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex> <\/p>\n<h2>Pjesa 1. Pse kaq serioz?<\/h2>\n<p>\nKthehemi te macja jon\u00eb. Pas nj\u00eb kohe, departamenti i burimeve njer\u00ebzore fshin fotografin\u00eb (ekranet k\u00ebtu dhe m\u00eb posht\u00eb jan\u00eb pjes\u00ebrisht t\u00eb retushura p\u00ebr t\u00eb mos zbuluar emrat e v\u00ebrtet\u00eb), por ajo k\u00ebmbehet vazhdimisht, e fshijn\u00eb p\u00ebrs\u00ebri, dhe k\u00ebshtu ndodh disa her\u00eb. N\u00eb departamentin e burimeve njer\u00ebzore kuptojn\u00eb se q\u00ebllimet e maceve jan\u00eb shum\u00eb serioze, ai nuk d\u00ebshiron t\u00eb largohet, dhe th\u00ebrrasin p\u00ebr ndihm\u00eb nj\u00eb programues web-i \u2014 personi q\u00eb e b\u00ebri faqen dhe e njeh at\u00eb, dhe tani e administron. Programuesi hyn n\u00eb faqe, fshin p\u00ebrs\u00ebri macen e bezdisshme, zbulon se e kishin postuar n\u00eb em\u00ebr t\u00eb vet\u00eb departamentit t\u00eb burimeve njer\u00ebzore, dhe pastaj b\u00ebn hipotez\u00ebn se fjal\u00ebkalimi i departamentit t\u00eb burimeve njer\u00ebzore kishte rrjedhur te ndonj\u00eb huligan n\u00eb rrjet, dhe e ndryshon at\u00eb. Macja nuk shfaqet m\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb testimi sociateknik\" src=\"\/wp-content\/uploads\/2020\/01\/319d5d30d3b563897339362e0fac1a6e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00c7far\u00eb ndodhi me t\u00eb v\u00ebrtet\u00eb? N\u00eb lidhje me grupin e kompanive, ku p\u00ebrfshihej instituti, specialist\u00ebt e Group-IB kryen testimin e dep\u00ebrtimit n\u00eb nj\u00eb format t\u00eb ngjash\u00ebm me Red Teaming (pjes\u00ebrisht, kjo \u00ebsht\u00eb imitim i sulmeve t\u00eb targetuara ndaj kompanis\u00eb tuaj duke p\u00ebrdorur metodologjit\u00eb dhe mjetet m\u00eb t\u00eb avancuara nga arsenali i grupeve t\u00eb haker\u00ebve). Ne kemi folur n\u00eb detaje p\u00ebr Red Teaming. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/group-ib\/blog\/460461\/\">k\u00ebtu<\/a><\/noindex>. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb dihet se gjat\u00eb k\u00ebtij testi mund t\u00eb p\u00ebrdoren nj\u00eb gam\u00eb e gjer\u00eb sulmesh nga ato t\u00eb miratuara paraprakisht, p\u00ebrfshir\u00eb inxhinierin\u00eb sociale. E qart\u00eb \u00ebsht\u00eb se vet\u00eb vendosja e mac\u00ebs nuk ishte q\u00ebllimi p\u00ebrfundimtar. Por q\u00ebllimi ishte:<\/p>\n<ul>\n<li>faqja e internetit e institutit ishte vendosur n\u00eb nj\u00eb server n\u00eb vet\u00eb rrjetin e institutit, dhe jo n\u00eb servera t\u00eb jasht\u00ebm;<\/li>\n<li>kishim gjetur nj\u00eb rrjedhje t\u00eb llogaris\u00eb s\u00eb departamentit t\u00eb burimeve njer\u00ebzore (nj\u00eb skedar me log-e n\u00eb rr\u00ebnj\u00ebn e faqes). Administrimi i faqes me k\u00ebt\u00eb llogari nuk ishte i mundur, por mund t\u00eb redaktohej faqet e vendeve t\u00eb pun\u00ebs;<\/li>\n<li>duke ndryshuar faqet, mund t\u00eb vendosnim skripte n\u00eb gjuh\u00ebn JavaScript. Zakonisht ato b\u00ebjn\u00eb faqet interaktive, por n\u00eb k\u00ebt\u00eb situat\u00eb k\u00ebto skripte mund t\u00eb vidhnin nga shfletuesi i vizitorit identifikuesin e sesionit q\u00eb e dallonte departamentin e burimeve njer\u00ebzore nga programuesi, dhe programuesin nga nj\u00eb vizitor i zakonsh\u00ebm. Macja ishte nj\u00eb aktivizues i sulmit dhe nj\u00eb imazh p\u00ebr t\u00ebrhequr v\u00ebmendjen. N\u00eb gjuh\u00ebn e markup-it t\u00eb faqeve HTML, kjo dukej k\u00ebshtu: n\u00ebse ju ngarkohej nj\u00eb imazh, JavaScript kishte ekzekutuar dhe identifikuesi juaj i sesionit s\u00eb bashku me t\u00eb dh\u00ebnat p\u00ebr shfletuesin tuaj dhe IP-n\u00eb tuaj kishin qen\u00eb tashm\u00eb t\u00eb vjedhura.<\/li>\n<li> Me identifikuesin e sesionit t\u00eb administratorit q\u00eb do t\u00eb b\u00ebhej e mundur t\u00eb mendohej p\u00ebr qasje t\u00eb plot\u00eb n\u00eb faqe, t\u00eb vendosnim faqe ekzekutuese n\u00eb gjuh\u00ebn PHP, k\u00ebshtu n\u00eb fund do t\u00eb mund t\u00eb merrnim akses n\u00eb sistemin operativ t\u00eb serverit, dhe pastaj n\u00eb vet\u00eb rrjetin lokal, q\u00eb ishte q\u00ebllimi i r\u00ebnd\u00ebsish\u00ebm nd\u00ebrmjet\u00ebsor i projektit.<\/li>\n<\/ul>\n<p>\nSulmi p\u00ebrfundoi me nj\u00eb sukses t\u00eb pjessh\u00ebm \u2014 identifikuesi i sesionit t\u00eb administratorit u vodh, por ai ishte lidhur me adres\u00ebn IP. T\u00eb anashkalosh k\u00ebt\u00eb nuk ishte e mundur, ne nuk arrit\u00ebm t\u00eb rrisnim privilegjet n\u00eb faqe n\u00eb ato administrative, por rrit\u00ebm disponimin ton\u00eb. Rezultati p\u00ebrfundimtar e mor\u00ebm n\u00eb nj\u00eb tjet\u00ebr pjes\u00eb t\u00eb perimetrin t\u00eb rrjetit.<\/p>\n<h2>Pjesa 2. Po ju shkruaj \u2014 \u00e7far\u00eb tjet\u00ebr? Po ashtu po ju telefonoj dhe po q\u00ebndroj te zyra juaj, duke r\u00ebn\u00eb flash drive.<br \/>\n<\/h2>\n<p>\nAjo q\u00eb ndodhi n\u00eb situat\u00ebn me macen \u2014 \u00ebsht\u00eb nj\u00eb shembull i inxhinieris\u00eb sociale, edhe pse jo krejt\u00ebsisht klasik. N\u00eb t\u00eb v\u00ebrtet\u00eb, n\u00eb k\u00ebt\u00eb histori ndodhi m\u00eb shum\u00eb se kaq: kishte edhe macen, edhe institutin, edhe departamentin e burimeve njer\u00ebzore, edhe programuesin, por gjithashtu kishte edhe email-e me pyetje sqaruese, t\u00eb cilat u shkruan supozuar \"kandidat\u00eb\" p\u00ebr vet\u00eb departamentin e burimeve njer\u00ebzore dhe ndryshe p\u00ebr programuesin, p\u00ebr t\u00eb provokuar ata t\u00eb hynin n\u00eb faqen e internetit.<\/p>\n<blockquote><p>Kujtojm\u00eb p\u00ebr email-et. Nj\u00eb email i zakonsh\u00ebm \u2014 ndoshta transporti kryesor p\u00ebr realizimin e inxhinieris\u00eb sociale \u2014 nuk humbet r\u00ebnd\u00ebsin\u00eb e tij tash e disa dekada dhe ndonj\u00ebher\u00eb \u00e7on n\u00eb pasojat m\u00eb t\u00eb pazakonta. <\/p><\/blockquote>\n<p>Historin\u00eb tjet\u00ebr e tregojm\u00eb shpesh n\u00eb ngjarjet tona, pasi \u00ebsht\u00eb shum\u00eb ilustruese.<\/p>\n<p>N\u00eb p\u00ebrgjith\u00ebsi, pas projekteve t\u00eb inxhinieris\u00eb sociale, ne p\u00ebrpilojm\u00eb statistik\u00eb, e cila \u00ebsht\u00eb nj\u00eb gj\u00eb e njohur p\u00ebr t'u th\u00ebn\u00eb se \u00ebsht\u00eb e that\u00eb dhe e m\u00ebrzitshme. Nj\u00eb p\u00ebrqindje e caktuar e marr\u00ebsve hapi shtes\u00ebn n\u00eb email, nj\u00eb p\u00ebrqindje tjet\u00ebr kaloi n\u00eb lidhje, dhe k\u00ebta tre madje fut\u00ebn emrin dhe fjal\u00ebkalimin e tyre. N\u00eb nj\u00eb projekt, ne arrit\u00ebm m\u00eb shum\u00eb se 100% futjeje t\u00eb fjal\u00ebkalimeve \u2014 dmth, dol\u00ebn m\u00eb shum\u00eb se sa i d\u00ebrguam. <\/p>\n<p>Kjo ndodhi k\u00ebshtu: u d\u00ebrgua nj\u00eb email phishing, pretenduar nga CISO i nj\u00eb korporate shtet\u00ebrore, me nj\u00eb k\u00ebrkes\u00eb \"urgjente p\u00ebr t\u00eb testuar ndryshimet n\u00eb sh\u00ebrbimin e post\u00ebs\". Emaili i shp\u00ebrndau nj\u00eb drejtuesi t\u00eb nj\u00eb n\u00ebnnd\u00ebrmarrjeje t\u00eb madhe q\u00eb merrej me mb\u00ebshtetje teknike. Drejtuesi ishte shum\u00eb i p\u00ebrkushtuar n\u00eb p\u00ebrmbushjen e k\u00ebrkesave nga lart\u00eb dhe e d\u00ebrgoi at\u00eb n\u00eb t\u00eb gjith\u00eb n\u00ebnshkruesit e tij. Qendra e thirrjeve ishte mjaft e madhe. N\u00eb p\u00ebrgjith\u00ebsi, situatat kur dikush d\u00ebrgon \"interesant\" email phishing tek koleg\u00ebt e tij dhe ata gjithashtu bien pre p\u00ebrb\u00ebjn\u00eb nj\u00eb fenomen mjaft t\u00eb zakonsh\u00ebm. P\u00ebr ne, kjo \u00ebsht\u00eb nd\u00ebr t\u00eb dh\u00ebnat m\u00eb t\u00eb mira p\u00ebr cil\u00ebsin\u00eb e p\u00ebrgatitjes s\u00eb emailit.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb testimi sociateknik\" src=\"\/wp-content\/uploads\/2020\/01\/2af30148f4b5d22033c5137625f421ab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPak m\u00eb von\u00eb na zbuluan (emaili u mor nga nj\u00eb kutin\u00eb postare t\u00eb komprometuar):<\/p>\n<p><img decoding=\"async\" alt=\"M\u00eb mashtro, n\u00ebse mundesh: ve\u00e7orit\u00eb e zhvillimit t\u00eb nj\u00eb testimi sociateknik\" src=\"\/wp-content\/uploads\/2020\/01\/1d36db3cb55d0e6d6061fb002d5f987a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNj\u00eb sukses i till\u00eb i sulmit u shkaktua nga p\u00ebrdorimi i disa dob\u00ebsive teknike n\u00eb sistemin e post\u00ebs s\u00eb klientit. Ajo ishte e konfiguruar n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb d\u00ebrgoheshin \u00e7do email nga emri i \u00e7do d\u00ebrguesi t\u00eb organizat\u00ebs pa autorizim, madje edhe nga interneti. Do t\u00eb thot\u00eb, ishte e mundur t\u00eb imitohej CISO, ose drejtor i mb\u00ebshtetjes teknike, ose dikush tjet\u00ebr. M\u00eb shum\u00eb se kaq, nd\u00ebrfaqja e post\u00ebs, duke par\u00eb emailet nga \"domeni\" i saj, me kujdes vendoste fotografi nga libri i adreseve, \u00e7ka i shtonte natyrshm\u00ebri d\u00ebrguesit.<\/p>\n<p>Me t\u00eb v\u00ebrtet\u00eb, nj\u00eb sulm i till\u00eb nuk p\u00ebrb\u00ebn teknologji ve\u00e7an\u00ebrisht t\u00eb komplikuar, por \u00ebsht\u00eb nj\u00eb shfryt\u00ebzim i suksessh\u00ebm i nj\u00eb gabimi shum\u00eb themelor n\u00eb konfigurimin e post\u00ebs. Ai rregullisht diskutohen n\u00eb burime t\u00eb specializuara IT dhe sigurie t\u00eb informacionit, por megjithat\u00eb akoma ekzistojn\u00eb kompani q\u00eb kan\u00eb k\u00ebto probleme. Duke pasur parasysh se askush nuk \u00ebsht\u00eb i prirur t\u00eb kontrolloj\u00eb me kujdes titujt e sh\u00ebrbimit t\u00eb protokollit t\u00eb post\u00ebs SMTP, emaili zakonisht kontrollohet p\u00ebr \"rrezik\" sipas simboleve paralajm\u00ebruese t\u00eb nd\u00ebrfaqes s\u00eb post\u00ebs, t\u00eb cilat nuk i tregojn\u00eb gjithmon\u00eb t\u00eb gjitha.<\/p>\n<blockquote><p>\u00cbsht\u00eb interesante se nj\u00eb dob\u00ebsi e till\u00eb funksionon edhe n\u00eb drejtimin e kund\u00ebrt: nj\u00eb keqb\u00ebr\u00ebsi mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb email nga emri i kompanis\u00eb suaj te nj\u00eb marr\u00ebs i jasht\u00ebm. P\u00ebr shembull, ai mund t\u00eb falsifikoj\u00eb nj\u00eb fatur\u00eb p\u00ebr pages\u00eb t\u00eb rregullt nga emri juaj, duke vendosur n\u00eb vend t\u00eb t\u00eb dh\u00ebnave tuaja t\u00eb tjera. N\u00ebse nuk merret parasysh \u00e7\u00ebshtjet e antitrafikimit dhe t\u00eb nxjerrjes s\u00eb parave, kjo, ndoshta, \u00ebsht\u00eb nj\u00eb nga m\u00ebnyrat m\u00eb t\u00eb thjeshta t\u00eb vjedhjes s\u00eb parave p\u00ebrmes inxhinieris\u00eb sociale.\n<\/p><\/blockquote>\n<p> P\u00ebrve\u00e7 vjedhjes s\u00eb fjal\u00ebkalimeve n\u00ebp\u00ebrmjet phishing, klasik\u00ebt e sulmeve sociot\u00e9cnike jan\u00eb d\u00ebrgimi i shtesave t\u00eb ekzekutueshme. N\u00ebse k\u00ebto shtesa kalojn\u00eb t\u00eb gjith\u00eb masat e mbrojtjes, t\u00eb cilat zakonisht kompanit\u00eb moderne kan\u00eb shum\u00eb, krijohet nj\u00eb kanal qasjeje t\u00eb larg\u00ebt n\u00eb kompjuterin e viktim\u00ebs. P\u00ebr t\u00eb demonstruar pasojat e sulmit, kontrolli i marr\u00eb nga distanca mund t\u00eb zhvillohet deri n\u00eb qasje n\u00eb informacionin e ve\u00e7ant\u00eb t\u00eb r\u00ebnd\u00ebsish\u00ebm konfidencial. Vlen t\u00eb theksohet se shumica d\u00ebrrmuese e sulmeve, t\u00eb cilat i tmerruan mediat, fillojn\u00eb pik\u00ebrisht k\u00ebshtu. <\/p>\n<blockquote><p>N\u00eb departamentin ton\u00eb t\u00eb auditit, p\u00ebr shkak t\u00eb interesit, ne llogarisim statistik\u00ebn p\u00ebrkat\u00ebse: cila \u00ebsht\u00eb vlera totale e aktiveve t\u00eb kompanive, te t\u00eb cilat ne kemi arritur nivelin \"Administrator i Domainit\" kryesisht p\u00ebrmes phishingut dhe d\u00ebrgimit t\u00eb shtesave t\u00eb ekzekutueshme? K\u00ebt\u00eb vit, ajo arriti af\u00ebrsisht n\u00eb 150 miliard euro.\n<\/p><\/blockquote>\n<p> \u00cbsht\u00eb e qart\u00eb se d\u00ebrgimi i emailave provokuese dhe vendosja e fotografive t\u00eb maceve n\u00eb faqe nuk jan\u00eb m\u00ebnyrat e vetme t\u00eb inxhinieris\u00eb sociale. N\u00eb k\u00ebto shembuj, ne tentuam t\u00eb tregojm\u00eb larmishm\u00ebrin\u00eb e formave t\u00eb sulmit dhe pasojat e tyre. P\u00ebrve\u00e7 emailave, nj\u00eb sulmues t\u00eb mundsh\u00ebm mund t\u00eb telefonoj\u00eb p\u00ebr t\u00eb marr\u00eb informacionin e nevojsh\u00ebm, t\u00eb shp\u00ebrndaj\u00eb media (p.sh., USB) me skedar\u00eb ekzekutues n\u00eb zyr\u00ebn e kompanis\u00eb s\u00eb synuar, t\u00eb pun\u00ebsohet si praktikant, t\u00eb marr\u00eb akses fizik n\u00eb rrjetin lokal duke u b\u00ebr\u00eb si nj\u00eb montues kamerash t\u00eb videove. T\u00eb gjitha k\u00ebto, p\u00ebr t\u00eb th\u00ebn\u00eb t\u00eb v\u00ebrtet\u00ebn, jan\u00eb shembuj nga projektet tona t\u00eb p\u00ebrfunduara me sukses.<\/p>\n<h2>Pjesa 3. M\u00ebsimi \u00ebsht\u00eb drit\u00eb, nd\u00ebrsa ata q\u00eb nuk m\u00ebsojn\u00eb jan\u00eb err\u00ebsir\u00eb.<\/h2>\n<p>\nShqet\u00ebsimi natyrsh\u00ebm \u00ebsht\u00eb: mir\u00eb, ka inxhinieri sociale, duket e rrezikshme, \u00e7far\u00eb duhet t\u00eb b\u00ebjn\u00eb kompanit\u00eb me t\u00eb gjitha k\u00ebto? Kapiteni i K\u00ebtyre Situatave ka nj\u00eb p\u00ebrgjigje: duhet t\u00eb mbrohemi, dhe kjo n\u00eb m\u00ebnyr\u00eb t\u00eb gj\u00ebr\u00eb. Nj\u00eb pjes\u00eb e mbrojtjes do t\u00eb p\u00ebrqendrohet n\u00eb masat klasike t\u00eb siguris\u00eb, si\u00e7 jan\u00eb mjetet teknike p\u00ebr mbrojtjen e informacionit, monitorimi dhe mb\u00ebshtetje ligjore e procedurave, por sipas mendimit ton\u00eb, pjesa m\u00eb e madhe duhet t\u00eb fokusohet n\u00eb pun\u00ebn pa direkt me punonj\u00ebsit, si pjesa m\u00eb e dob\u00ebt e zinxhirit. Sa m\u00eb shum\u00eb t\u00eb forcojm\u00eb teknik\u00ebn, e sa m\u00eb shum\u00eb rregulla t\u00eb shkruajm\u00eb, gjithmon\u00eb do t\u00eb ket\u00eb nj\u00eb p\u00ebrdorues q\u00eb do t\u00eb hap\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb prishur gjith\u00e7ka. Sidomos se rregullat dhe teknika nuk do t\u00eb arrij\u00eb kurr\u00eb t\u00eb ndjekin kreativitetin e p\u00ebrdoruesit, ve\u00e7an\u00ebrisht kur ai k\u00ebshillohet nga nj\u00eb kriminel t\u00eb aft\u00eb.<\/p>\n<blockquote><p> S\u00eb pari, \u00ebsht\u00eb thelb\u00ebsore t\u00eb edukosh p\u00ebrdoruesin: t\u00eb shpjegosh se edhe n\u00eb pun\u00ebn e tij rutin\u00eb mund t\u00eb ndodhin situata t\u00eb lidhura me inxhinierin\u00eb sociale. P\u00ebr klient\u00ebt tan\u00eb shpesh organizojm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.group-ib.ru\/cyber-education.html\">kurs<\/a><\/noindex> p\u00ebr higjien\u00ebn digjitale \u2013 nj\u00eb aktivitet q\u00eb m\u00ebson aft\u00ebsi baz\u00eb p\u00ebr t'iu kund\u00ebrv\u00ebn\u00eb sulmeve n\u00eb p\u00ebrgjith\u00ebsi.\n<\/p><\/blockquote>\n<p> Mund t\u00eb shtoj se nj\u00eb nga masat m\u00eb t\u00eb mira t\u00eb mbrojtjes do t\u00eb jet\u00eb krejt ndryshe nga memorizimi i rregullave t\u00eb siguris\u00eb s\u00eb informacionit, por nj\u00eb vler\u00ebsim paksa t\u00ebr\u00ebsor t\u00eb situat\u00ebs: <\/p>\n<ol>\n<li>Kush \u00ebsht\u00eb biseduesi im? <\/li>\n<li>Nga ka ardhur oferta ose k\u00ebrkesa e tij (nuk ka ndodhur ndonj\u00ebher\u00eb k\u00ebt\u00eb, dhe tani ndodhi)? <\/li>\n<li>\u00c7far\u00eb \u00ebsht\u00eb e pazakont\u00eb n\u00eb k\u00ebt\u00eb k\u00ebrkes\u00eb? <\/li>\n<\/ol>\n<p>\nEdhe nj\u00eb tip i pazakont\u00eb i fontit t\u00eb email-it ose nj\u00eb stil i pazakont\u00eb i t\u00eb folurit nga d\u00ebrguesi mund t\u00eb nxis\u00eb nj\u00eb zinxhir dyshimesh q\u00eb do t\u00eb ndaloj\u00eb sulmin. Instruksionet e shkruara gjithashtu jan\u00eb t\u00eb nevojshme, por ato funksionojn\u00eb ndryshe, dhe nuk mund t\u00eb konkretizojn\u00eb t\u00eb gjitha situatat e mundshme. P\u00ebr shembull, administrator\u00ebt e siguris\u00eb s\u00eb informacionit shkruajn\u00eb n\u00eb to se nuk duhet t\u00eb futni fjal\u00ebkalimin tuaj n\u00eb burime t\u00eb jashtme. Por \u00e7far\u00eb n\u00ebse fjal\u00ebkalimi i k\u00ebrkohet nga nj\u00eb burim i 'tij', 'korporativ'? P\u00ebrdoruesi mendon: 'N\u00eb kompanin\u00eb ton\u00eb ka tashm\u00eb dy duzina sh\u00ebrbimesh me nj\u00eb llogari t\u00eb vetme, p\u00ebrse t\u00eb mos shfaqet nj\u00eb tjet\u00ebr?' Nga kjo nxirret nj\u00eb tjet\u00ebr rregull: nj\u00eb proces i mir\u00eborganizuar n\u00eb pun\u00eb ndikon gjithashtu drejtp\u00ebrdrejt n\u00eb siguri: n\u00ebse departamenti fqinj mund t\u00eb k\u00ebrkoj\u00eb informacion vet\u00ebm me shkrim dhe vet\u00ebm p\u00ebrmes menaxherit tuaj, ai person 'nga partneri i besuesh\u00ebm i kompanis\u00eb' me siguri nuk do t\u00eb mund ta k\u00ebrkoj\u00eb at\u00eb me telefon \u2013 p\u00ebr ju do t\u00eb ishte nj\u00eb absurd. P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme t\u00eb jesh vigjilent n\u00ebse biseduesi juaj k\u00ebrkon q\u00eb gjith\u00e7ka t\u00eb b\u00ebhet pik\u00ebrisht tani, ose 'ASAP', si\u00e7 \u00ebsht\u00eb mode. Edhe n\u00eb pun\u00ebn e zakonshme, nj\u00eb situat\u00eb e till\u00eb shpesh nuk \u00ebsht\u00eb e sh\u00ebndetshme, dhe n\u00eb kushte sulmesh t\u00eb mundshme, ky \u00ebsht\u00eb nj\u00eb nxit\u00ebs i fort\u00eb. Nuk ka koh\u00eb p\u00ebr t\u00eb shpjeguar, filloni skedarin tim!<\/p>\n<p>V\u00ebrejm\u00eb se p\u00ebrdoruesit gjithmon\u00eb bien pre e tema q\u00eb lidhen me para n\u00eb nj\u00eb form\u00eb ose nj\u00eb tjet\u00ebr: premtimi i ngritjeve n\u00eb pag\u00eb, preferencave, dhuratave, si dhe informacione sipas joshjeve dhe intrigave lokale. Me fjal\u00eb t\u00eb tjera, funksionojn\u00eb m\u00ebkatet e thjeshta: lakmia p\u00ebr fitim, lakmia dhe kurioziteti i tepruar. <\/p>\n<p>Nj\u00eb edukim i mir\u00eb gjithmon\u00eb duhet t\u00eb p\u00ebrfshij\u00eb praktik\u00eb. N\u00eb k\u00ebt\u00eb kuptim, mund t\u00eb ndihmojn\u00eb specialist\u00ebt e testimit t\u00eb dep\u00ebrtimit. Pyetja e ardhshme \u00ebsht\u00eb: \u00e7far\u00eb dhe si do ta testojm\u00eb? Ne n\u00eb Group-IB ofrojm\u00eb qasjen e m\u00ebposhtme \u2013 t\u00eb zgjedhim menj\u00ebher\u00eb fokusin e testimit: ose t\u00eb vler\u00ebsojm\u00eb gatishm\u00ebrin\u00eb p\u00ebr sulme vet\u00ebm t\u00eb vet\u00eb p\u00ebrdoruesve, ose t\u00eb kontrollojm\u00eb mbrojtjen e kompanis\u00eb n\u00eb t\u00ebr\u00ebsi. Dhe t\u00eb testojm\u00eb me metoda t\u00eb inxhinieris\u00eb sociale, duke imituar sulme reale \u2013 pra me phishing, d\u00ebrgesa dokumentesh ekzekutues, telefonata dhe teknika t\u00eb tjera.<\/p>\n<p>N\u00eb rastin e par\u00eb, sulmi p\u00ebrgatitet me kujdes s\u00eb bashku me p\u00ebrfaq\u00ebsuesit e klientit, kryesisht me specialist\u00ebt e TI dhe siguris\u00eb s\u00eb informacionit. Merren vesh legjendat, mjetet dhe teknikat e sulmeve. Klienti vet\u00eb siguron grupet fokale dhe listat e p\u00ebrdoruesve p\u00ebr sulmin, t\u00eb cilat p\u00ebrfshijn\u00eb t\u00eb gjitha kontaktet e nevojshme. Krijohen p\u00ebrjashtime n\u00eb mjetet e mbrojtjes, pasi mesazhet dhe ngarkesat ekzekutuese duhet patjet\u00ebr t\u00eb arrijn\u00eb tek marr\u00ebsi, sepse n\u00eb nj\u00eb projekt t\u00eb till\u00eb interesi p\u00ebrb\u00ebn vet\u00ebm reagimi i njer\u00ebzve. Mund\u00ebsisht, mund t\u00eb planifikohen n\u00eb sulm tregues, t\u00eb cilat p\u00ebrdoruesi mund t\u00eb kuptoj\u00eb se \u00ebsht\u00eb nj\u00eb sulm \u2013 p\u00ebr shembull, mund t\u00eb b\u00ebhen disa gabime ortografike n\u00eb mesazhe ose t\u00eb lihen pasakt\u00ebsira n\u00eb kopjimin e stilit t\u00eb mark\u00ebs. N\u00eb p\u00ebrfundim t\u00eb projektit, rezulton ai 'statistika e that\u00eb': cilat grupe fokale dhe n\u00eb \u00e7far\u00eb sasi reaguan ndaj skenar\u00ebve.<\/p>\n<p>N\u00eb rastin e dyt\u00eb \u2014 sulmi kryhet pa njohuri t\u00eb m\u00ebparshme, duke p\u00ebrdorur metod\u00ebn e \"kutis\u00eb s\u00eb zez\u00eb\". Ne mbledhim informacion n\u00eb lidhje me kompanin\u00eb, punonj\u00ebsit e saj, p\u00ebrimetrin rrjetor, formulojm\u00eb legjenda p\u00ebr sulmin, zgjedhim metoda, k\u00ebrkojm\u00eb mjete t\u00eb mundshme mbrojt\u00ebse q\u00eb p\u00ebrdoren n\u00eb kompanin\u00eb e synuar, p\u00ebrshtasim mjetet, hartojm\u00eb skenar\u00eb. Specialist\u00ebt tan\u00eb p\u00ebrdorin si metodat klasike t\u00eb inteligjenc\u00ebs nga burime t\u00eb hapura (OSINT), ashtu edhe produktin e zhvilluar vet\u00eb nga Group-IB \u2014 Threat Intelligence, nj\u00eb sistem q\u00eb gjat\u00eb p\u00ebrgatitjes p\u00ebr phishing mund t\u00eb sh\u00ebrbej\u00eb si nj\u00eb agregator informacioni p\u00ebr kompanin\u00eb p\u00ebr nj\u00eb periudh\u00eb t\u00eb gjat\u00eb, duke p\u00ebrfshir\u00eb informacionin e mbyllur. Natyrisht, q\u00eb sulmi t\u00eb mos b\u00ebhet nj\u00eb surpriz\u00eb e pak\u00ebndshme, detajet e tij gjithashtu konfirmohen me klientin. K\u00ebshtu kemi nj\u00eb test t\u00eb plot\u00eb t\u00eb dep\u00ebrtimit, por baza e tij do t\u00eb jet\u00eb inxhinieria sociale e avancuar. Nj\u00eb opsion logjik n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb zhvillimi i sulmit brenda rrjetit, deri n\u00eb arritjen e privilegjeve m\u00eb t\u00eb larta n\u00eb sistemet e brendshme. P\u00ebr m\u00eb tep\u00ebr, n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme p\u00ebrdorim sulmet socio-teknike gjithashtu n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.group-ib.ru\/red-teaming.html\">Red Teaming<\/a><\/noindex>, dhe n\u00eb disa teste dep\u00ebrtimi. Si rezultat, klienti do t\u00eb marr\u00eb nj\u00eb pamje t\u00eb pavarur dhe gjith\u00ebp\u00ebrfshir\u00ebse t\u00eb mbrojtjes s\u00eb tij nga nj\u00eb lloj i caktuar i sulmeve socio-teknike, si dhe nj\u00eb demonstrim t\u00eb efikasitetit (ose, p\u00ebrndryshe, t\u00eb pakuptueshm\u00ebris\u00eb) s\u00eb linj\u00ebs mbrojt\u00ebse t\u00eb nd\u00ebrtuar ndaj k\u00ebrc\u00ebnimeve nga jasht\u00eb.<\/p>\n<p>Ne rekomandojm\u00eb q\u00eb nj\u00eb trajnim t\u00eb till\u00eb t\u00eb b\u00ebhet t\u00eb pakt\u00ebn dy her\u00eb n\u00eb vit. S\u00eb pari, n\u00eb \u00e7do kompani ka rotacion punonj\u00ebsish dhe p\u00ebrvoja e m\u00ebparshme gradualisht harrohet nga punonj\u00ebsit. S\u00eb dyti, metodat dhe teknikat e sulmeve ndryshojn\u00eb vazhdimisht dhe kjo nxit nevoj\u00ebn p\u00ebr adaptimin e proceseve t\u00eb siguris\u00eb dhe mjeteve t\u00eb mbrojtjes.<\/p>\n<p>N\u00ebse flasim p\u00ebr masat teknike t\u00eb mbrojtjes nga sulmet, ato q\u00eb ndihmojn\u00eb m\u00eb s\u00eb shumti jan\u00eb:<\/p>\n<ul>\n<li>Prania e autentifikimit me dy faktor\u00eb n\u00eb sh\u00ebrbimet q\u00eb jan\u00eb publikuar n\u00eb internet. T\u00eb l\u00ebsh sh\u00ebrbime t\u00eb tilla n\u00eb vitin 2019 pa sisteme Single Sign On, pa mbrojtje nga provat e fjal\u00ebkalimeve dhe pa autentifikim me dy faktor\u00eb n\u00eb nj\u00eb kompani me qindra punonj\u00ebs \u00ebsht\u00eb nj\u00eb thirrje e hapur \"thyeni m\u00eb\". Nj\u00eb mbrojtje e vendosur si\u00e7 duhet do t\u00eb b\u00ebj\u00eb t\u00eb pamundur aplikimin e shpejt\u00eb t\u00eb fjal\u00ebkalimeve t\u00eb vjedhura dhe do t\u00eb jap\u00eb koh\u00eb p\u00ebr t\u00eb adresuar pasojat e sulmit t\u00eb phishing.<\/li>\n<li>Kontrolli i ndarjes s\u00eb aksesit, minimizimi i t\u00eb drejtave t\u00eb p\u00ebrdoruesve n\u00eb sisteme dhe respektingi i udh\u00ebzimeve p\u00ebr konfigurimin e sigurt t\u00eb produkteve q\u00eb publikohen nga \u00e7do prodhues i madh. K\u00ebto jan\u00eb shpesh masa q\u00eb jan\u00eb t\u00eb thjeshta n\u00eb p\u00ebrb\u00ebrjen e tyre, por shum\u00eb efektive dhe t\u00eb v\u00ebshtira p\u00ebr t'u zbatuar n\u00eb praktik\u00eb, t\u00eb cilat t\u00eb gjith\u00eb n\u00eb nj\u00eb nivel ose nj\u00eb tjet\u00ebr i neglizhojn\u00eb p\u00ebr shkak t\u00eb shpejt\u00ebsis\u00eb s\u00eb pun\u00ebs. Disa jan\u00eb kaq t\u00eb nevojshme, saq\u00eb pa to asnj\u00eb mjet mbrojt\u00ebs nuk do t\u00eb shp\u00ebtoj\u00eb.<\/li>\n<li>Nj\u00eb linj\u00eb e mir\u00eb e filtrimit t\u00eb postave elektronike. Anti-spam, kontroll i plot\u00eb i bashk\u00ebngjitjeve p\u00ebr pranin\u00eb e kodit t\u00eb d\u00ebmsh\u00ebm, p\u00ebrfshir\u00eb testimin dinamik p\u00ebrmes sandboxes. Nj\u00eb sulm i mir\u00eb p\u00ebrgatitur n\u00ebnkupton se bashk\u00ebngjitja e ekzekutueshme nuk do t\u00eb zbuloheshin nga mjetet antivirus. Sandbox e verifikon t\u00eb gjith\u00eb, duke p\u00ebrdorur skedar\u00ebt n\u00eb t\u00eb nj\u00ebjt\u00ebn m\u00ebnyr\u00eb si\u00e7 do t'i p\u00ebrdorte nj\u00eb njeri. Si rezultat, komponenti potencialisht i d\u00ebmsh\u00ebm do t\u00eb zbulohet p\u00ebrmes ndryshimeve q\u00eb ndodhin brenda sandbox-it.<\/li>\n<li>Mjetet e mbrojtjes nga sulmet e q\u00ebllimshme. Si\u00e7 \u00ebsht\u00eb p\u00ebrmendur m\u00eb par\u00eb, mjetet klasike antivirus nuk do t\u00eb zbulojn\u00eb skedar\u00ebt e d\u00ebmsh\u00ebm gjat\u00eb nj\u00eb sulmi t\u00eb mir\u00eb p\u00ebrgatitur. Produktet m\u00eb t\u00eb avancuara duhet t\u00eb ndjekin automatikisht grupin e ngjarjeve q\u00eb ndodhin n\u00eb rrjet \u2014 si n\u00eb nivelin e nj\u00eb host-i t\u00eb ve\u00e7ant\u00eb, ashtu edhe n\u00eb nivelin e trafikut brenda rrjetit. N\u00eb rastet e sulmeve shfaqen shum\u00eb zinxhir\u00eb ngjarjesh karakteristik\u00eb, t\u00eb cilat mund t\u00eb ndjeken dhe ndalen, n\u00ebse kemi nj\u00eb monitorim t\u00eb fokusuara n\u00eb ngjarje t\u00eb k\u00ebtij lloji.<\/li>\n<\/ul>\n<p>\nOrigjinali i artikullit <noindex><a rel=\"nofollow\" href=\"http:\/\/lib.itsec.ru\/articles2\/Oborandteh\/obmani-menya--esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\">\u00ebsht\u00eb publikuar<\/a><\/noindex> n\u00eb revist\u00ebn \"Information Security\/ \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" #6, 2019.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/group-ib\/blog\/483652\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0441\u0435\u0431\u0435 \u0442\u0430\u043a\u0443\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e. \u0425\u043e\u043b\u043e\u0434\u043d\u043e\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0435 \u0443\u0442\u0440\u043e, \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u043d\u043e\u043c \u0446\u0435\u043d\u0442\u0440\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0440\u0435\u0433\u0438\u043e\u043d\u043e\u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u041a\u0442\u043e-\u0442\u043e \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u043a\u0430\u0434\u0440\u043e\u0432 \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0430\u043a\u0430\u043d\u0441\u0438\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u0443\u044e \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434, \u0438 \u0432\u0438\u0434\u0438\u0442 \u0442\u0430\u043c \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u044e \u043a\u043e\u0442\u0430. \u0423\u0442\u0440\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u0443\u0447\u043d\u044b\u043c\u2026 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u041f\u0430\u0432\u0435\u043b \u0421\u0443\u043f\u0440\u0443\u043d\u044e\u043a, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442\u0430 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u0430 Group-IB, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55145","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043c\u0430\u043d\u0438 \u043c\u0435\u043d\u044f, \u0435\u0441\u043b\u0438 \u0441\u043c\u043e\u0436\u0435\u0448\u044c: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0446\u0438\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00eb mashtroni, n\u00ebse mundeni: ve\u00e7orit\u00eb e kryerjes s\u00eb nj\u00eb p\u00ebntesti socio-teknik | ProHoster","description":"Imagini.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043c\u0430\u043d\u0438 \u043c\u0435\u043d\u044f, \u0435\u0441\u043b\u0438 \u0441\u043c\u043e\u0436\u0435\u0448\u044c: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0446\u0438\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obmani-menya-esli-smozhesh-osobennosti-provedeniya-sotsiotehnicheskogo-pentesta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55145","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-09-29 07:35:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55145"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55145\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}