{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Hyrje<\/h1>\n<p><\/p>\n<p>Kompani q\u00eb nuk kishin organizuar sistemet e qasjes n\u00eb distanc\u00eb, me urgjenc\u00eb i vendos\u00ebn ato disa muaj m\u00eb par\u00eb. Nuk t\u00eb gjith\u00eb administrator\u00ebt ishin t\u00eb p\u00ebrgatitur p\u00ebr nj\u00eb \u201cver\u00eb\u201d t\u00eb till\u00eb, si rezultat \u2014 neglizhenca n\u00eb siguri: konfigurimi i gabuar i sh\u00ebrbimeve ose madje instalimi i versioneve t\u00eb vjetra t\u00eb softuerit me shkall\u00ebzime t\u00eb njohura m\u00eb par\u00eb. Disa prej k\u00ebtyre neglizhencave tashm\u00eb u kthyen si nj\u00eb bumerang, t\u00eb tjer\u00ebt pat\u00ebn m\u00eb shum\u00eb fat, por p\u00ebrfundimet me siguri duhen b\u00ebr\u00eb nga t\u00eb gjith\u00eb. Besnik\u00ebria ndaj pun\u00ebs n\u00eb distanc\u00eb \u00ebsht\u00eb rritur ndjesh\u00ebm, dhe gjithnj\u00eb e m\u00eb shum\u00eb kompani e pranojn\u00eb pun\u00ebn n\u00eb distanc\u00eb si nj\u00eb format t\u00eb pranuesh\u00ebm n\u00eb p\u00ebrhershm\u00ebri.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Pra, opsionet p\u00ebr sigurimin e qasjes n\u00eb distanc\u00eb jan\u00eb t\u00eb shumta: VPN t\u00eb ndryshme, RDS dhe VNC, TeamViewer dhe t\u00eb tjera. Administrator\u00ebt kan\u00eb nga \u00e7far\u00eb t\u00eb zgjedhin, duke u bazuar n\u00eb specifik\u00ebn e nd\u00ebrtimit t\u00eb rrjetit korporativ dhe pajisjeve brenda tij. Zgjidhjet VPN mbeten m\u00eb popullor, megjithat\u00eb, shum\u00eb kompani t\u00eb vogla zgjedhin RDS (Sh\u00ebrbimet e Desktopit n\u00eb Distanc\u00eb), ato jan\u00eb m\u00eb t\u00eb thjeshta dhe m\u00eb t\u00eb shpejta p\u00ebr tu vendosur.<\/p>\n<p><\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull do t\u00eb flasim m\u00eb n\u00eb detaje p\u00ebr sigurin\u00eb RDS. Do t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb shkurt\u00ebr t\u00eb vulnerabiliteteve t\u00eb njohura dhe do t\u00eb shqyrtojm\u00eb disa skenar\u00eb t\u00eb fillimit t\u00eb sulmit ndaj infrastruktur\u00ebs s\u00eb rrjetit t\u00eb bazuar n\u00eb Active Directory. Shpresojm\u00eb q\u00eb artikulli yn\u00eb t\u00eb ndihmoj\u00eb disa n\u00eb identifikimin e gabimeve dhe p\u00ebrmir\u00ebsimin e siguris\u00eb.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Vulnerabilitetet e koh\u00ebve t\u00eb fundit RDS\/RDP<\/h1>\n<p><\/p>\n<p>\u00c7do softuer p\u00ebrmban defekte dhe vulnerabilitete q\u00eb shfryt\u00ebzohen nga keqb\u00ebr\u00ebsit, dhe RDS nuk \u00ebsht\u00eb p\u00ebrjashtim. Koh\u00ebt e fundit Microsoft ka raportuar shpesh p\u00ebr vulnerabilitete t\u00eb reja, ndaj kemi vendosur t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb shkurter t\u00eb tyre:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Ky vulnerabilitet rrezikon p\u00ebrdoruesit q\u00eb lidhen me nj\u00eb server t\u00eb komprometuar. Keqb\u00ebr\u00ebsi mund t\u00eb fitoj\u00eb kontroll mbi pajisjen e p\u00ebrdoruesit ose t\u00eb vendoset n\u00eb sistem p\u00ebr t\u00eb pasur akses t\u00eb vazhduesh\u00ebm n\u00eb distanc\u00eb.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>Kjo grup vulnerabilitetesh i lejon nj\u00eb sulmuesi t\u00eb paautorizuar t\u00eb ekzekutoj\u00eb kod t\u00eb rast\u00ebsish\u00ebm n\u00eb nj\u00eb server me RDS n\u00ebp\u00ebrmjet nj\u00eb k\u00ebrkese t\u00eb formuar posa\u00e7\u00ebrisht. Ato gjithashtu mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb krijuar worms \u2014 malware q\u00eb infekton automatikisht pajisjet e tjera n\u00eb rrjet. Pra, k\u00ebto vulnerabilitete mund t\u00eb rrezikojn\u00eb t\u00ebr\u00eb rrjetin e kompanis\u00eb, dhe vet\u00ebm p\u00ebrdit\u00ebsimi n\u00eb koh\u00eb mund t'i shp\u00ebtoj\u00eb nga to.<\/p>\n<p><\/p>\n<p>Software-i p\u00ebr akses t\u00eb larg\u00ebt ka marr\u00eb v\u00ebmendje t\u00eb madhe si nga hulumtuesit ashtu edhe nga sulmuesit, prandaj s\u00eb shpejti mund t\u00eb d\u00ebgjojm\u00eb p\u00ebr vulnerabilitete t\u00eb reja t\u00eb ngjashme.<\/p>\n<p><\/p>\n<p>Lajmi i mir\u00eb \u00ebsht\u00eb se jo t\u00eb gjitha vulnerabilitetet kan\u00eb eksploit\u00eb publik\u00eb n\u00eb dispozicion. Lajmi i keq \u2014 p\u00ebr nj\u00eb sulmues me ekspertiz\u00eb, nuk do t\u00eb jet\u00eb e v\u00ebshtir\u00eb t\u00eb shkruaj nj\u00eb eksploit p\u00ebr nj\u00eb vulnerabilitet bazuar n\u00eb p\u00ebrshkrimin, ose duke p\u00ebrdorur teknika si Patch Diffing (p\u00ebr t\u00eb cilin koleg\u00ebt tan\u00eb kan\u00eb shkruar n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">artikullin<\/a><\/noindex>). Prandaj, rekomandojm\u00eb q\u00eb t\u00eb p\u00ebrdit\u00ebsoni rregullisht softuerin dhe t\u00eb q\u00ebndroni n\u00eb gjendje p\u00ebr t'u njohur me raportet e reja mbi vulnerabilitetet e zbuluara.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. Sulmet<\/h1>\n<p><\/p>\n<p>Kalojm\u00eb n\u00eb pjes\u00ebn e dyt\u00eb t\u00eb artikullit, ku do t\u00eb tregojm\u00eb se si nisin sulmet ndaj infrastruktur\u00ebs rrjet\u00ebrore t\u00eb bazuar n\u00eb Active Directory. <\/p>\n<p><\/p>\n<p>Metodat e p\u00ebrshkruara jan\u00eb t\u00eb p\u00ebrshtatshme p\u00ebr modelin e m\u00ebposht\u00ebm t\u00eb sulmuesit: nj\u00eb sulmues me nj\u00eb llogari p\u00ebrdoruesi dhe qasje n\u00eb Remote Desktop Gateway \u2014 serverin e terminaleve (shpesh ai \u00ebsht\u00eb i aksesuesh\u00ebm, p\u00ebr shembull, nga rrjeti i jasht\u00ebm). Duke aplikuar k\u00ebto metoda, sulmuesi do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb vazhdoj\u00eb sulmin ndaj infrastruktur\u00ebs dhe t\u00eb konsolidoj\u00eb pranin\u00eb e tij n\u00eb rrjet.<\/p>\n<p><\/p>\n<p>Konfigurimi i rrjetit n\u00eb \u00e7do rast konkret mund t\u00eb ndryshoj\u00eb, por teknikat e p\u00ebrshkruara jan\u00eb mjaft universale.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">Shembuj t\u00eb daljes nga nj\u00eb mjedis t\u00eb kufizuar dhe rritjes s\u00eb privilegjeve<\/h2>\n<p><\/p>\n<p>Kur ka qasje n\u00eb Remote Desktop Gateway, sulmuesi me siguri do t\u00eb has\u00eb nj\u00eb mjedis t\u00eb kufizuar. Kur lidhet me serverin e terminalit, aty nis nj\u00eb aplikacion: dritarja e lidhjes p\u00ebr protokollin Remote Desktop p\u00ebr burimet e brendshme, eksploruesi, paketat zyrtare ose \u00e7do program tjet\u00ebr. <\/p>\n<p><\/p>\n<p>Q\u00ebllimi i sulmuesit do t\u00eb jet\u00eb t\u00eb marr\u00eb akses n\u00eb ekzekutimin e komandave, pra t\u00eb nis\u00eb cmd ose powershell. N\u00eb k\u00ebt\u00eb mund t\u00eb ndihmojn\u00eb disa teknika klasike shp\u00ebtimi nga \u201csandbox\u201d-i p\u00ebr Windows. Do t\u2019i shqyrtojm\u00eb ato m\u00eb posht\u00eb.<\/p>\n<p><\/p>\n<p><strong>Mund\u00ebsia 1<\/strong>. Sulmuesi ka akses n\u00eb dritaren e lidhjes Remote Desktop brenda Remote Desktop Gateway:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Menuja \u201cShow Options\u201d shfaqet. Shfaqen opsionet p\u00ebr manipulimin e skedar\u00ebve t\u00eb konfigurimit t\u00eb lidhjes:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nga kjo dritare \u00ebsht\u00eb e mundur t\u00eb hyhet pa pengesa n\u00eb Explorer duke klikuar n\u00eb \u00e7do buton \u201cOpen\u201d ose \u201cSave\u201d:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Explorer hapet. \u201cAdresa\u201d e tij ofron mund\u00ebsin\u00eb e ekzekutimit t\u00eb skedar\u00ebve t\u00eb lejuar, si dhe shfaqjen e dosjeve t\u00eb sistemit. Kjo mund t\u00eb jet\u00eb e dobishme p\u00ebr sulmuesin n\u00eb rast se disqet sistemore jan\u00eb t\u00eb fshehura dhe aksesi ndaj tyre \u00ebsht\u00eb i pamundur direkt:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Video demonstruese<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Nj\u00eb skenar t\u00eb till\u00eb mund t\u00eb riprodhohet, p\u00ebr shembull, duke p\u00ebrdorur Excel nga paketa Microsoft Office si software t\u00eb larg\u00ebt. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Video demonstruese<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, nuk duhet harruar makrot, t\u00eb cilat p\u00ebrdoren n\u00eb k\u00ebt\u00eb paket\u00eb zyre. Koleg\u00ebt tan\u00eb kan\u00eb shqyrtuar problemin e siguris\u00eb s\u00eb makrove n\u00eb k\u00ebt\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">artikullin<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Variant 2<\/strong>. Duke duke p\u00ebrdor t\u00eb nj\u00ebjtat hyrje si n\u00eb versionin e m\u00ebparsh\u00ebm, sulmuesi nis disa lidhje n\u00eb desktopin e larg\u00ebt n\u00ebn t\u00eb nj\u00ebjtin llogari. Me rinehsjen e lidhjes s\u00eb par\u00eb, ajo do t\u00eb mbyllet, dhe n\u00eb ekran do t\u00eb shfaqet nj\u00eb dritare me nj\u00eb njoftim p\u00ebr gabim. Butoni i ndihm\u00ebs n\u00eb k\u00ebt\u00eb dritare do t\u00eb th\u00ebrras\u00eb Internet Explorer n\u00eb server, pas s\u00eb cil\u00ebs sulmuesi mund t\u00eb kaloj\u00eb n\u00eb Eksplorues.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Video demonstruese<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Varianti 3<\/strong>. Me kufizimet e vendosura p\u00ebr ekzekutimin e skedar\u00ebve ekzekutiv\u00eb, sulmuesi mund t\u00eb p\u00ebrballet me nj\u00eb situat\u00eb ku politikat grupore ndalojn\u00eb ekzekutimin e cmd.exe nga administrator\u00ebt.<\/p>\n<p><\/p>\n<p>Ka nj\u00eb m\u00ebnyr\u00eb p\u00ebr ta anashkaluar k\u00ebt\u00eb duke ekzekutuar nj\u00eb skedar bat n\u00eb desktopin e larg\u00ebt me p\u00ebrmbajtje si cmd.exe \/K . Gabimi gjat\u00eb ekzekutimit t\u00eb cmd dhe nj\u00eb shembull i suksessh\u00ebm i ekzekutimit t\u00eb skedarit bat \u00ebsht\u00eb paraqitur n\u00eb figur\u00ebn m\u00eb posht\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Desktopi i Larg\u00ebt nga syt\u00eb e sulmuesit\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Opsioni 4<\/strong>. Ndalimi i ekzekutimit t\u00eb aplikacioneve p\u00ebrmes listave t\u00eb zeza sipas emrave t\u00eb skedar\u00ebve ekzekutiv\u00eb nuk \u00ebsht\u00eb nj\u00eb zgjidhje e plot\u00eb, ato mund t\u00eb anashkalohen. <\/p>\n<p><\/p>\n<p>T\u00eb shqyrtojm\u00eb skenarin n\u00eb vijim: kemi ndaluar aksesin n\u00eb komand\u00ebn e linj\u00ebs, kemi ndaluar ekzekutimin e Internet Explorer dhe PowerShell p\u00ebrmes politikave grupore. Sulmuesi p\u00ebrpiqet t\u00eb th\u00ebrras\u00eb ndihm\u00ebn - asnj\u00eb p\u00ebrgjigje. Ai p\u00ebrpiqet t\u00eb filloj\u00eb powershell p\u00ebrmes menus\u00eb kontekstuale t\u00eb dritares modale, e cila \u00ebsht\u00eb thirrur duke mbajtur t\u00eb shtypur \u00e7el\u00ebsin Shift - mesazhi p\u00ebr ndalimin e ekzekutimit nga administrator. Ai p\u00ebrpiqet t\u00eb filloj\u00eb powershell p\u00ebrmes shiritit t\u00eb adresave - s\u00ebrish asnj\u00eb p\u00ebrgjigje. Si mund t\u00eb anashkalohet ky kufizim? <\/p>\n<p><\/p>\n<p>Mjafton t\u00eb kopjoni powershell.exe nga dosja C:WindowsSystem32WindowsPowerShellv1.0 n\u00eb dosjen e p\u00ebrdoruesit, ta ndryshoni emrin n\u00eb di\u00e7ka tjet\u00ebr p\u00ebrve\u00e7 powershell.exe, dhe mund\u00ebsia e ekzekutimit do t\u00eb shfaqet.<\/p>\n<p><\/p>\n<p>Si parazgjedhje, kur lidhemi me desktopin e larg\u00ebt, ofrohet akses n\u00eb disqet lokale t\u00eb klientit, nga ku sulmuesi mund t\u00eb kopjoj\u00eb powershell.exe dhe pas rinovimit t\u00eb emrit ta nis\u00eb at\u00eb.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Video demonstruese<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Ne paraqit\u00ebm vet\u00ebm disa m\u00ebnyra p\u00ebr t\u00eb anashkaluar kufizimet, skenar\u00eb mund t\u00eb krijohen shum\u00eb t\u00eb tjer\u00eb, por t\u00eb gjith\u00eb ata ndajn\u00eb nj\u00eb pik\u00eb t\u00eb p\u00ebrbashk\u00ebt: dalje n\u00eb Eksploruesin e Windows. Ka shum\u00eb aplikacione q\u00eb p\u00ebrdorin mjetet standarde t\u00eb Windows p\u00ebr t\u00eb punuar me skedar\u00ebt, dhe duke i vendosur ato n\u00eb nj\u00eb mjedis t\u00eb kufizuar, mund t\u00eb p\u00ebrdoren teknika t\u00eb ngjashme.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Rekomandime dhe p\u00ebrfundime<\/h1>\n<p><\/p>\n<p>Si\u00e7 shohim, edhe n\u00eb nj\u00eb mjedis t\u00eb kufizuar ka hap\u00ebsir\u00eb p\u00ebr zhvillimin e sulmeve. Megjithat\u00eb, \u00ebsht\u00eb e mundur t\u00eb v\u00ebshtir\u00ebsohet jeta p\u00ebr sulmuesin. M\u00eb posht\u00eb jepemi disa rekomandime q\u00eb do t\u00eb ndihmojn\u00eb si n\u00eb rastet q\u00eb shqyrtuam, ashtu edhe n\u00eb raste t\u00eb tjera.<\/p>\n<p><\/p>\n<ul>\n<li>Kufizoni ekzekutimin e programeve me lista t\u00eb zeza\/bardh\u00eb, duke p\u00ebrdorur politikat grupe.<br \/>\nMegjithat\u00eb, n\u00eb shumic\u00ebn e rasteve mbetet mund\u00ebsia p\u00ebr ekzekutimin e kodit. Rekomandojm\u00eb t\u00eb njiheni me projektin <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, p\u00ebr t\u00eb pasur nj\u00eb ide mbi m\u00ebnyrat e pa dokumentuara t\u00eb manipulimit t\u00eb skedar\u00ebve dhe ekzekutimin e kodit n\u00eb sistem.<br \/>\nRekomandojm\u00eb kombinimin e t\u00eb dy tipeve t\u00eb kufizimeve: p\u00ebr shembull, mund t\u00eb lejoni ekzekutimin e skedar\u00ebve ekzekutues t\u00eb n\u00ebnshkruar nga kompania Microsoft, por t\u00eb kufizoni ekzekutimin e cmd.exe.<\/li>\n<li>\u00c7aktivizoni skedat e cil\u00ebsimeve t\u00eb Internet Explorer-it (mund t\u00eb b\u00ebhet lokalisht n\u00eb regjistrin e sistemit). <\/li>\n<li>\u00c7aktivizoni n\u00ebp\u00ebrmjet regedit thirrjen e ndihm\u00ebs s\u00eb p\u00ebrfshire t\u00eb Windows.<\/li>\n<li>\u00c7aktivizoni mund\u00ebsin\u00eb e montimit t\u00eb disqeve lokale p\u00ebr lidhjet e larg\u00ebta, n\u00ebse nj\u00eb kufizim i till\u00eb nuk \u00ebsht\u00eb kritik p\u00ebr p\u00ebrdoruesit.<\/li>\n<li>Kufizoni qasjen n\u00eb disqet lokale t\u00eb makin\u00ebs s\u00eb larg\u00ebt, l\u00ebreni qasjen vet\u00ebm n\u00eb dosjet e p\u00ebrdoruesve.<\/li>\n<\/ul>\n<p><\/p>\n<p>Shpresojm\u00eb se ju ka qen\u00eb t\u00eb pakt\u00ebn interesante, e m\u00eb s\u00eb shumti \u2014 ky artikull do t'ju ndihmoj\u00eb ta b\u00ebni pun\u00ebn n\u00eb distanc\u00eb m\u00eb t\u00eb sigurt p\u00ebr kompanin\u00eb tuaj.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Remote Desktop n\u00eb syt\u00eb e sulmuesit | ProHoster","description":"1. Hyrje Kompanit\u00eb, t\u00eb cilat nuk kishin organizuar sisteme t\u00eb qasjes n\u00eb distanc\u00eb, me urgjenc\u00eb i vendos\u00ebn ato disa muaj m\u00eb par\u00eb. Jo t\u00eb gjith\u00eb administrator\u00ebt ishin t\u00eb p\u00ebrgatitur p\u00ebr nj\u00eb \u201czhg\u00ebnjim\u201d t\u00eb till\u00eb, si rezultat \u2014 mungesa n\u00eb siguri: konfigurim i pasakt\u00eb i sh\u00ebrbimeve ose madje instalimi i versioneve t\u00eb vjetra t\u00eb softuerit me gjithashtu vulnerabilitete t\u00eb njohura m\u00eb par\u00eb. Disa prej k\u00ebtyre mungesave i ishin kthyer si nj\u00eb bumerang, t\u00eb tjer\u00ebve iu kishte p\u00eblqyer m\u00eb shum\u00eb,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}