{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Hyrje<\/h1>\n<p><\/p>\n<p>Kompani q\u00eb nuk kishin organizuar sisteme t\u00eb qasjes n\u00eb distanc\u00eb, n\u00eb nj\u00eb m\u00ebnyr\u00eb urgjente i zhvilluan ato disa muaj m\u00eb par\u00eb. Nuk ishin t\u00eb gjith\u00eb administrator\u00ebt t\u00eb gatsh\u00ebm p\u00ebr nj\u00eb \"nxeht\u00ebsi\" t\u00eb till\u00eb, si pasoj\u00eb, pati mang\u00ebsi n\u00eb siguri: konfigurim i pasakt\u00eb i sh\u00ebrbimeve ose madje instalimi i versioneve t\u00eb vjetra t\u00eb softuerit me dob\u00ebsi t\u00eb njohura. Disa nga k\u00ebto mang\u00ebsi tashm\u00eb u kthyen si bumerang, disa t\u00eb tjer\u00eb kishin m\u00eb shum\u00eb fat, por p\u00ebrfundimet duhet t\u2019i b\u00ebjn\u00eb t\u00eb gjith\u00eb. Besnik\u00ebria ndaj pun\u00ebs nga distanca \u00ebsht\u00eb rritur shum\u00eb, dhe gjithnj\u00eb e m\u00eb shum\u00eb kompani e pranojn\u00eb pun\u00ebn n\u00eb distanc\u00eb si nj\u00eb format t\u00eb pranuesh\u00ebm n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrhershme.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Pra, ka shum\u00eb mund\u00ebsi p\u00ebr sigurimin e qasjes n\u00eb distanc\u00eb: VPN t\u00eb ndryshme, RDS dhe VNC, TeamViewer dhe t\u00eb tjera. Administrator\u00ebt kan\u00eb nga \u00e7far\u00eb t\u00eb zgjedhin, duke u bazuar n\u00eb specifikat e nd\u00ebrtimit t\u00eb rrjetit korporativ dhe pajisjeve n\u00eb t\u00eb. Zgjidhjet VPN mbeten m\u00eb t\u00eb njohurat, megjithat\u00eb, shum\u00eb kompani t\u00eb vogla zgjedhin RDS (Sh\u00ebrbimet e Desktopit n\u00eb Distanc\u00eb), pasi ato jan\u00eb m\u00eb t\u00eb thjeshta dhe m\u00eb t\u00eb shpejta p\u00ebr t\u2019u zhvilluar.<\/p>\n<p><\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull do t\u00eb flasim m\u00eb n\u00eb detaje p\u00ebr sigurin\u00eb e RDS. Do t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb dobishm\u00ebrive t\u00eb njohura, si dhe do t\u00eb shqyrtojm\u00eb disa skenar\u00eb t\u00eb fillimit t\u00eb nj\u00eb sulmi n\u00eb infrastruktur\u00ebn rrjetore, t\u00eb bazuar n\u00eb Active Directory. Shpresojm\u00eb se artikulli yn\u00eb do t\u2019i ndihmoj\u00eb dikujt t\u00eb b\u00ebj\u00eb pun\u00ebn mbi gabimet dhe t\u00eb rrit\u00eb sigurin\u00eb.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Dobia t\u00eb fundit t\u00eb RDS\/RDP<\/h1>\n<p><\/p>\n<p>\u00c7do softuer p\u00ebrmban gabime dhe dob\u00ebsi, t\u00eb cilat shfryt\u00ebzohen nga keqb\u00ebr\u00ebsit, dhe RDS nuk \u00ebsht\u00eb p\u00ebrjashtim. Koh\u00ebt e fundit, Microsoft ka raportuar shpesh p\u00ebr dob\u00ebsi t\u00eb reja, prandaj kemi vendosur t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb tyre:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Kjo dob\u00ebsi k\u00ebrc\u00ebnon p\u00ebrdoruesit q\u00eb lidhen me nj\u00eb server t\u00eb komprometuar. Keqb\u00ebr\u00ebsi mund t\u00eb fitoj\u00eb kontroll mbi pajisjen e p\u00ebrdoruesit ose t\u00eb stabilizohet n\u00eb sistem p\u00ebr t\u00eb pasur akses t\u00eb p\u00ebrhersh\u00ebm n\u00eb distanc\u00eb.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Kjo grup dobishm\u00ebrish lejon nj\u00eb keqb\u00ebr\u00ebs t\u00eb paautorizuar t\u00eb ekzekutoj\u00eb kod t\u00eb rast\u00ebsish\u00ebm n\u00eb serverin me RDS n\u00eb m\u00ebnyr\u00eb t\u00eb distancuar, duke p\u00ebrdorur nj\u00eb k\u00ebrkes\u00eb t\u00eb formuar posa\u00e7\u00ebrisht. Ato mund t\u00eb p\u00ebrdoren gjithashtu p\u00ebr t\u00eb krijuar krimba \u2013 softuer t\u00eb d\u00ebmsh\u00ebm, q\u00eb infekton pajisjet fqinje n\u00eb rrjet n\u00eb m\u00ebnyr\u00eb autonome. Si pasoj\u00eb, k\u00ebto dob\u00ebsi mund t\u00eb k\u00ebrc\u00ebnojn\u00eb t\u00eb gjith\u00eb rrjetin e kompanis\u00eb, dhe vet\u00ebm p\u00ebrdit\u00ebsimi n\u00eb koh\u00eb mund t'i shp\u00ebtoj\u00eb ato.<\/p>\n<p><\/p>\n<p>Softueri p\u00ebr akses t\u00eb larg\u00ebt ka marr\u00eb v\u00ebmendje t\u00eb shtuar nga hulumtuesit dhe sulmuesit, k\u00ebshtu q\u00eb s\u00eb shpejti mund t\u00eb d\u00ebgjojm\u00eb p\u00ebr dob\u00ebsi t\u00eb reja t\u00eb ngjashme.<\/p>\n<p><\/p>\n<p>Lajmi i mir\u00eb \u00ebsht\u00eb se jo t\u00eb gjitha dob\u00ebsit\u00eb kan\u00eb eksploite publike t\u00eb disponueshme. Lajmi i keq \u00ebsht\u00eb se nj\u00eb sulmues me ekspertiz\u00eb do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb shkruaj\u00eb nj\u00eb exploit p\u00ebr dob\u00ebsin\u00eb e p\u00ebrshkruar, ose duke p\u00ebrdorur teknika t\u00eb tilla si Patch Diffing (p\u00ebr t\u00eb cilin kan\u00eb shkruar koleg\u00ebt tan\u00eb n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">artikulli yn\u00eb<\/a><\/noindex>). Prandaj, rekomandojm\u00eb ta azhurnoni rregullisht softuerin dhe t\u00eb ndiqni shfaqjen e mesazheve t\u00eb reja t\u00eb lidhura me dob\u00ebsit\u00eb e zbuluara.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Sulmet<\/h1>\n<p><\/p>\n<p>Ne kalojm\u00eb n\u00eb pjes\u00ebn e dyt\u00eb t\u00eb artikullit, ku do t\u00eb tregojm\u00eb se si fillojn\u00eb sulmet n\u00eb infrastruktur\u00ebn rrjet\u00ebsore t\u00eb bazuar n\u00eb Active Directory. <\/p>\n<p><\/p>\n<p>Metodat e p\u00ebrshkruara jan\u00eb t\u00eb aplikueshme p\u00ebr modelin e m\u00ebposht\u00ebm t\u00eb shkel\u00ebsit: nj\u00eb sulmues me nj\u00eb llogari p\u00ebrdoruesi dhe akses n\u00eb Remote Desktop Gateway \u2013 serverin e terminalit (shpesh ai \u00ebsht\u00eb i aksesuesh\u00ebm, p\u00ebr shembull, nga rrjeti i jasht\u00ebm). Duke p\u00ebrdorur k\u00ebto metoda, sulmuesi mund t\u00eb vazhdoj\u00eb sulmin n\u00eb infrastruktur\u00eb dhe t\u00eb konsolidoj\u00eb pranin\u00eb e tij n\u00eb rrjet.<\/p>\n<p><\/p>\n<p>Konfigurimi i rrjetit n\u00eb \u00e7do rast konkret mund t\u00eb ndryshoj\u00eb, por metodat e p\u00ebrshkruara jan\u00eb mjaft universale.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Shembuj t\u00eb daljes nga nj\u00eb mjedis i kufizuar dhe ngritjes s\u00eb privilegjeve<\/h2>\n<p><\/p>\n<p>Me akses n\u00eb Remote Desktop Gateway, sulmuesi ndoshta do t\u00eb p\u00ebrballet me nj\u00eb mjedis t\u00eb kufizuar. Kur lidhet me serverin e terminalit, ekzekutohet nj\u00eb aplikacion: nj\u00eb dritare p\u00ebr lidhje me protokollin Remote Desktop p\u00ebr burimet e brendshme, eksploruesi, paketat zyrtare ose ndonj\u00eb softuer tjet\u00ebr. <\/p>\n<p><\/p>\n<p>Q\u00ebllimi i sulmuesit do t\u00eb jet\u00eb t\u00eb fitoj\u00eb akses p\u00ebr ekzekutimin e komandave, dometh\u00ebn\u00eb p\u00ebr t\u00eb nisur cmd ose powershell. Disa teknika klasike p\u00ebr shp\u00ebrthim nga \u201csandbox-i\u201d p\u00ebr Windows mund ta ndihmojn\u00eb k\u00ebt\u00eb. Le t'i shqyrtojm\u00eb ato m\u00eb posht\u00eb.<\/p>\n<p><\/p>\n<p><strong>Varianti 1<\/strong>. Sulmuesi ka akses n\u00eb dritaren e lidhjes Remote Desktop brenda Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Menuja \"Show Options\" zbulohet. Shfaqen opsionet p\u00ebr manipulimin e skedar\u00ebve t\u00eb konfigurimit t\u00eb lidhjes:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nga kjo dritare \u00ebsht\u00eb e mundur t\u00eb hyhet pa pengesa n\u00eb Eksplorues, duke klikuar n\u00eb \u00e7do buton \"Open\" ose \"Save\":<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Shtypi hapet. Shtesa e tij \"bara adres\u00ebs\" ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb ekzekutuar skedar\u00eb ekzekutiv\u00eb t\u00eb lejuar, si dhe p\u00ebr t\u00eb listuar sistemin e skedareve. Kjo mund t\u00eb jet\u00eb e dobishme p\u00ebr nj\u00eb sulmues n\u00eb rastin kur disk\u00ebt sistemor\u00eb jan\u00eb t\u00eb fshehur dhe aksesimi i tyre direkt \u00ebsht\u00eb i pamundur:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Video demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Nj\u00eb skenar i till\u00eb mund t\u00eb riprodhohet, p\u00ebr shembull, duke p\u00ebrdorur si softuer t\u00eb larg\u00ebt Excel nga paketa Microsoft Office. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Video demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, nuk duhet harruar makro t\u00eb p\u00ebrdorura n\u00eb k\u00ebt\u00eb paket\u00eb zyre. Koleget tan\u00eb kan\u00eb shqyrtuar problemin e siguris\u00eb s\u00eb makrove n\u00eb k\u00ebt\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">artikulli yn\u00eb<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Varianti 2<\/strong>. Duke p\u00ebrdorur t\u00eb nj\u00ebjtat t\u00eb dh\u00ebna si n\u00eb variantin e kaluar, sulmuesi hap disa lidhje n\u00eb desktopin e larg\u00ebt n\u00ebn t\u00eb nj\u00ebjtin llogari. Kur lidhja t\u00eb p\u00ebrs\u00ebritet, e para do t\u00eb mbyllet, dhe n\u00eb ekran do t\u00eb shfaqet nj\u00eb dritare me nj\u00eb njoftim p\u00ebr gabimin. Butoni i ndihm\u00ebs n\u00eb k\u00ebt\u00eb dritare do t\u00eb th\u00ebrras\u00eb Internet Explorer n\u00eb server, pas s\u00eb cil\u00ebs sulmuesi mund t\u00eb kaloj\u00eb n\u00eb Shtypi.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Video demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Varianti 3<\/strong>. Me kufizime t\u00eb vendosura mbi ekzekutimin e skedar\u00ebve, sulmuesi mund t\u00eb p\u00ebrballet me nj\u00eb situat\u00eb ku politikat grupore ndalojn\u00eb ekzekutimin e cmd.exe nga administratori.<\/p>\n<p><\/p>\n<p>Ka nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb anashkaluar k\u00ebt\u00eb duke ekzekutuar nj\u00eb skedar bat n\u00eb desktopin e larg\u00ebt me p\u00ebrmbajtje si cmd.exe \/K . Gabimi n\u00eb ekzekutimin e cmd dhe shembulli i suksessh\u00ebm i ekzekutimit t\u00eb skedarit bat \u00ebsht\u00eb treguar n\u00eb figur\u00ebn m\u00eb posht\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Remote Desktop nga k\u00ebndv\u00ebshtrimi i nj\u00eb sulmuesi\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Varianti 4<\/strong>. Ndalimi i ekzekutimit t\u00eb aplikacioneve p\u00ebrmes listave t\u00eb zeza sipas emrave t\u00eb skedar\u00ebve ekzekutiv\u00eb nuk \u00ebsht\u00eb nj\u00eb panacea, ato mund t\u00eb anashkalohen. <\/p>\n<p><\/p>\n<p>Le t\u00eb shqyrtojm\u00eb skenarin e m\u00ebposht\u00ebm: ne ndaluam qasje n\u00eb komand\u00ebn e linj\u00ebs, ndaluam ekzekutimin e Internet Explorer dhe PowerShell p\u00ebrmes politikave grupore. Sulmuesi p\u00ebrpiqet t\u00eb th\u00ebrras\u00eb ndihm\u00ebn - nuk ka p\u00ebrgjigje. Ai p\u00ebrpiqet t\u00eb marr\u00eb powershell p\u00ebrmes menus\u00eb kontekstuale t\u00eb dritares modale, e cila \u00ebsht\u00eb th\u00ebrritur duke mbajtur butonin Shift - mesazhi p\u00ebr ndalimin e ekzekutimit nga administratori. Ai p\u00ebrpiqet t\u00eb hap\u00eb powershell p\u00ebrmes bar\u00ebs s\u00eb adres\u00ebs - p\u00ebrs\u00ebri pa ndonj\u00eb p\u00ebrgjigje. Si mund t\u00eb anashkalohet kufizimi? <\/p>\n<p><\/p>\n<p>B\u00ebn mjaft t\u00eb kopjosh powershell.exe nga dosja C:WindowsSystem32WindowsPowerShellv1.0 n\u00eb dosjen e p\u00ebrdoruesit, t\u00eb ndryshosh emrin n\u00eb di\u00e7ka tjet\u00ebr nga powershell.exe, dhe mund\u00ebsia e ekzekutimit do t\u00eb jet\u00eb aty.<\/p>\n<p><\/p>\n<p>N\u00eb default, kur lidhemi me desktopin e larg\u00ebt, jepet qasje n\u00eb disk\u00ebt lokal\u00eb t\u00eb klientit, nga ku sulmuesi mund t\u00eb kopjoj\u00eb powershell.exe dhe pas rinamesimit ta ekzekutoj\u00eb.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Video demo<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Ne kemi listuar vet\u00ebm disa m\u00ebnyra p\u00ebr t\u00eb kaluar kufizimet, mund t\u00eb krijohen shum\u00eb skenar\u00eb t\u00eb tjer\u00eb, por t\u00eb gjith\u00eb ata bashkohen me dalje n\u00eb Eksploruesin e Windows. Ka shum\u00eb aplikacione q\u00eb p\u00ebrdorin mjetet standarde t\u00eb Windows p\u00ebr t\u00eb punuar me skedar\u00ebt, dhe duke i vendosur ato n\u00eb nj\u00eb mjedis t\u00eb kufizuar, mund t\u00eb aplikoni teknika t\u00eb ngjashme.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Rekomandimet dhe p\u00ebrfundimi<\/h1>\n<p><\/p>\n<p>Si\u00e7 e shohim, edhe n\u00eb nj\u00eb mjedis t\u00eb kufizuar ka hap\u00ebsir\u00eb p\u00ebr zhvillimin e sulmit. Megjithat\u00eb, \u00ebsht\u00eb e mundur t\u00eb v\u00ebshtir\u00ebsohet jeta e sulmuesit. Po japim rekomandime t\u00eb p\u00ebrgjithshme q\u00eb do t'ju ndihmojn\u00eb si n\u00eb rastet q\u00eb kemi shqyrtuar, ashtu edhe n\u00eb raste t\u00eb tjera.<\/p>\n<p><\/p>\n<ul>\n<li>Kufizoni ekzekutimin e programeve p\u00ebrmes listave t\u00eb bardha\/zeza, duke p\u00ebrdorur politikat e grupit.<br \/>\nMegjithat\u00eb, n\u00eb shumic\u00ebn e rasteve mbetet mund\u00ebsia p\u00ebr t\u00eb ekzekutuar kod. Ju rekomandojm\u00eb t\u00eb p\u00ebrfitoni nga projekti <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, p\u00ebr t\u00eb pasur nj\u00eb ide mbi m\u00ebnyrat e pa dokumentuara t\u00eb manipulimit t\u00eb skedar\u00ebve dhe ekzekutimit t\u00eb kodit n\u00eb sistem.<br \/>\nJu rekomandojm\u00eb t\u00eb kombinoni t\u00eb dyja tipe kufizimesh: p\u00ebr shembull, mund t\u00eb lejoni ekzekutimin e skedar\u00ebve ekzekutiv\u00eb t\u00eb n\u00ebnshkruar nga kompania Microsoft, por t\u00eb kufizoni ekzekutimin e cmd.exe.<\/li>\n<li>\u00c7aktivizoni skedat e cil\u00ebsimeve t\u00eb Internet Explorer (mund t\u00eb b\u00ebhet lokal n\u00eb regjistrin e sistemit). <\/li>\n<li>\u00c7aktivizoni thirrjen e ndihm\u00ebs s\u00eb integruar t\u00eb Windows p\u00ebrmes regedit.<\/li>\n<li>\u00c7aktivizoni mund\u00ebsin\u00eb e montimit t\u00eb disqeve lokale p\u00ebr lidhje t\u00eb larg\u00ebta, n\u00ebse ky kufizim nuk \u00ebsht\u00eb kritik p\u00ebr p\u00ebrdoruesit.<\/li>\n<li>Kufizoni qasjen n\u00eb disqet lokale t\u00eb makin\u00ebs s\u00eb larg\u00ebt, l\u00ebrini qasje vet\u00ebm p\u00ebr skedat e p\u00ebrdoruesve.<\/li>\n<\/ul>\n<p><\/p>\n<p>Shpresojm\u00eb q\u00eb ju ka qen\u00eb s\u00eb paku interesante, e si maksimumi \u2014 ky artikull do t'ju ndihmoj\u00eb t\u00eb b\u00ebni pun\u00ebn e larg\u00ebt t\u00eb kompanis\u00eb suaj m\u00eb t\u00eb sigurt\u00eb.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit | ProHoster","description":"1. Hyrje Kompanit\u00eb q\u00eb nuk kishin organizuar sisteme qasjeje t\u00eb larg\u00ebt, i kishin vendosur ato me shpejt\u00ebsi disa muaj m\u00eb par\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}