https://uzcert.uz/cisa-ogohlantiradi-gitlabdagi-ssrf-zaifligi-real-hujumlarda-qollanilmoqda

Kiberxavfsizlik talablariga muvofiqlik boʼyicha ekspertiza nizomi

ozodbekdev.uz/404.html

<?php
header('Content-Type: application/json; charset=utf-8');
if (empty($_GET['url'])) {
    http_response_code(400);
    echo json_encode([
        'status' => 'error',
        'message' => 'Instagram URL berilmadi'
    ]);
    exit;
}
$instaUrl = $_GET['url'];
$ch = curl_init();
curl_setopt_array($ch, [
    CURLOPT_URL => 'https://api.instasave.website/media',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => http_build_query([
        'url' => $instaUrl,
        'lang' => 'en'
    ]),
    CURLOPT_HTTPHEADER => [
        'User-Agent: Mozilla/5.0 (Linux; Android 14)',
        'Content-Type: application/x-www-form-urlencoded',
        'origin: https://instasave.website',
        'referer: https://instasave.website/',
        'x-requested-with: XMLHttpRequest'
    ],
]);
$response = curl_exec($ch);
curl_close($ch);

if (!$response) {
    http_response_code(500);
    echo json_encode([
        'status' => 'error',
        'message' => 'Video olinmadi'
    ]);
    exit;
}
preg_match_all('/href=\\\\?"(https?:\/\/[^"\\\\]+)\\\\?"/', $response, $matches);

if (empty($matches[1])) {
    http_response_code(404);
    echo json_encode([
        'status' => 'error',
        'message' => 'Media topilmadi'
    ]);
    exit;
}
$media = [];

foreach ($matches[1] as $u) {
    $cleanUrl = rtrim($u, '\\');

    $type = 'file';
    if (str_contains($cleanUrl, '.mp4')) {
        $type = 'video';
    } elseif (preg_match('/\.(jpg|jpeg|png|webp)/i', $cleanUrl)) {
        $type = 'image';
    }

    $media[] = [
        'type' => $type,
        'url'  => $cleanUrl
    ];
}
echo json_encode([
    'status' => 'ok',
    'count'  => count($media),
    'media'  => $media
], JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT);
exit;

https://ozodbekdev.uz/api/insvid/index.php?url=post_url

Keylogger — bu kompyuter yoki smartfonda klaviaturada bosilgan tugmalarni yashirin qayd etadigan dastur yoki qurilma bo‘lib, u orqali login, parol, yozishmalar va boshqa kiritilgan ma’lumotlar yig‘ilishi mumkin. U dasturiy ko‘rinishda zararli fayl sifatida tizimga o‘rnatilishi yoki kamroq hollarda klaviatura bilan qurilma orasiga ulanadigan fizik moslama bo‘lishi mumkin. Keyloggerlar ko‘pincha phishing fayllar, pirat dasturlar va zararli havolalar orqali tarqaladi hamda foydalanuvchi sezmasdan fon rejimida ishlaydi. Ular nafaqat kiberjinoyatlarda, balki penetratsiya testlari, ota-ona nazorati va tashkilot xavfsizlik monitoringida ham qo‘llanadi. Asosiy xavfi — maxfiy ma’lumotlar sizib chiqishi va akkauntlar egallanishi. Himoyalanish uchun tizim va dasturlarni yangilab borish, antivirusdan foydalanish, ikki bosqichli autentifikatsiyani yoqish va faqat ishonchli manbalardan fayl yuklash tavsiya etiladi.