Chapter 7 Live Hackers, Live Invasions (Part 2)
"Winning the forum is not our ultimate goal. We have to rely on the identity of this forum administrator to get this server. Do you have any ideas?" Cobra is very good at using questions to motivate everyone.
Many people don’t even understand the previous demonstrations, so how can they put forward any suggestions now? If it will invade, everyone will not use it to listen to the report here.
"The forum has a function called uploading. You can upload some attachments such as pictures to the forum. You must know this!" Cobra smiled, "This is what we want to use! Now everyone looks at the administrator's interface and finds that? Administrators can set the type and size of upload attachments. I have a backdoor program on my hand, and the format is EXE type, so I will set the EXE file to be uploaded."
Cobra was successfully set up, opened the interface for posting new posts, uploaded an EXE file to the forum, which means that it placed a backdoor program on the hard drive of the website server.
"The backdoor program has been put on. Now we only need to know the specific location of the backdoor program on the other party's server, and we can use the database permissions or other means to run it!" Cobra did not explain what means to use to confirm the specific location of the backdoor program, but directly ran it with his own method.
Hu Yifei's level is very limited, and he didn't understand this step. However, Cobra can let another computer run a specified program on his own computer, which is very good in itself.
After Cobra opens the connection program to the backdoor and enters the IP address of the server, he quickly gets a dark window with no image display, but various commands can be entered. Cobra enters the simplest DOS command, which is a command used to display its own IP address.
The displayed IP address is the same as the address of that server, which proves that Cobra has entered that server and has obtained great permissions.
Cobra entered several more commands, compared the displayed results with the situation on his computer, and confirmed that this was the content on two different computers. Of course, Cobra had a more direct method. He directly typed in the command and asked the server to restart directly. Soon, the backdoor program lost the connection, and then entered the link of the BBS just now, which also prompted that the server could not be found. Although the people on the scene did not understand hacking, they also knew that Cobra had indeed had a successful intrusion.
"Just because of a small bug set up on the forum program on the server, the entire server was controlled. Now let's look back and see how big the loophole is!" Cobra looked at the people in the venue with a smile, picked up the cup, and slowly drank water. It took him two minutes before Cobra put down the cup, "Let's see if the server restarts it ended!"
Hu Yifei suddenly realized and thought to himself that Cobra had been drinking water for so long, but it turned out that he was waiting for the server to restart. No wonder Hu Yifei thought Cobra had some chronic problems just now.
Cobra re-entered the forum's URL, and the forum was displayed again. It seemed that the server was working normally again. "The theme of our report meeting was network security. The intrusion just now was just to tell everyone how important the security is. How to make your computer absolutely safe is the focus of it. Many students at the scene may have some questions, saying that looking at the intrusion you just now, it doesn't seem to be too troublesome, so is it easy to prevent intrusion?"
Cobra smiled, "Actually, this idea is correct at all. Safety is much simpler than invasion. Safety lies in every bit of it in daily life. These can be done by developing habits; but invasion requires extremely unusual inspiration and thousands of trials, which is not something that everyone can do."
As if I was afraid that everyone would not believe it, Cobra again demonstrated the problems of 1=1 and 1=2. The web page was the same as the one I just showed, and it was displayed normally at one time and prompted an error. "Now, please see how I fixed this vulnerability!"
Cobra used the backdoor to connect to the server again, found the source code file of the forum program, opened it, but only modified it one sentence. The people on the scene saw it clearly, and he added a few characters to it. But a miracle happened. After Cobra saved the forum code file, he opened the forum again. This time, no matter whether it was 1=1 or 1=2, the web pages were all displayed normally.
"The web pages are all displayed normally, what other information can you get?" Cobra asked everyone with a smile.
Hu Yifei's chin fell down, no, just these few characters, the loophole disappeared instantly, and the person who invaded was stunned. Not to mention admin, you just ask the administrator whether the account is "idiot", "intelligent" or "shy", and the web page will also be displayed normally.
"Of course, I can modify it like this!" Cobra opened the source file again, deleted the characters I just added, followed a few lines of code, and inserted a symbol there. This time it was even more amazing. When it was saved, then SQL injection was performed. Whether it was 1=1 or 1=2, the web pages all prompted errors. Only by entering the correct URL and not adding any extra statements behind the URL will the web page be displayed normally.
"You see, whether it is safe or not depends on whether you write more or less characters!" Cobra smiled, "That is why we often say: There is only one letter between safety and insecurity!"
There was thunderous applause in the venue, and Cobra's wonderful performance impressed everyone.
According to the original arrangement, Cobra originally had to perform the prevention of overflow attacks, but the emotions of the people at the scene were mobilized, and many questions were raised in this SQL injection alone.
The fat man sitting next to Cobra smiled so hard that his mouth couldn't close. The effect on the scene was much better than expected. After seeing that it was almost done, he stood up and interrupted the question on the scene. "Because the time of the report meeting is limited, this questioning session is over. Next, I will introduce to you the current situation of the network security industry and the prospects forecast!"
"I will introduce myself first. I am the general manager of Huafeng Network Security Technology Co., Ltd., my name is Yan Feng!" The fat man smiled and bowed to the audience. "I can barely be considered an insider in the industry, but I am still a little nervous when I give this report to everyone. Even if it is my superficial opinion, I will share it with you. If you have any different ideas, you can put it forward."
The fat man was very modest, but then he was really not polite. He blew the prospect of network security development into a flower, without exception, and the clichéd rhetoric of "huge market demand, serious shortage of practitioners, has formed a huge talent gap". He also took out data that he didn't know how to count, fooling the students on the scene. Finally, the fat man also made an analogy, saying that being safe is like being a doctor, who specializes in treating the Internet and treating the computer. From ancient times to the present, doctors have never been unemployed.
At present, employment pressure is so great, especially those who study computer science. It is really difficult to enter the kicking industry after graduation. There are too many people who want to be kicked now. A newly graduated college student cannot get a rank at all. How to find a stable and reliable job is the top priority that everyone began to consider as soon as they entered university. So the fat man's words made many students in the venue feel a little excited. Some people began to ask: "If we want to enter this industry, what do we need to learn?"
Fatty was waiting for this sentence, but he still coughed with a reserved cough before saying: "At present, there are many certifications for network security engineers in the market, such as Cisco, CIW, NISC, and CISSP. We have our own certifications and foreign certifications. The training is expensive, but truly professional training institutions are rare. Many training institutions recruit people under the guise, but the substitute teachers have never been in the security industry at all. How can this be used to cultivate qualified security engineers? So, we saw a very strange phenomenon. On the one hand, the training institutions have trained a large number of network security engineers, and on the other hand, the network security companies have to find talents by themselves, and then adopt the practice of bringing new ones to establish their own talent reserve system."
"We Huafeng also had this kind of trouble. Later, we simply conducted a training session for network security engineers, and the results were unexpectedly good. In addition to two students who stayed at our Huafeng, the rest were hired. There were professional network security companies, securities, banks, and e-commerce companies, and they also needed a large number of network security professionals."
The people below saw that the fat man couldn't talk about the topic for a long time, so they became anxious and asked directly: "Will your company's training still be done?"
"Do it! Of course! Why not!" Fatty's tone was very firm, "Now we have signed a commissioned training agreement for safety talents with many domestic companies, so we Huafeng will continue to hold such training classes in the future. Some students may ask, saying that the companies trained by others do not recognize them, so why do the students you trained rush to ask?" Fatty pointed at his fat face, "Of course there are reasons, but it is not because I, Yan Feng, have a big face, and I have a big face."
The scene suddenly burst into laughter.
"Why are the students we trained by ourselves popular? First, we Huafeng itself is a network security company, so we are very clear about what skills all practitioners need to master; second, because the teachers we hire are not ordinary. Think about it, can the apprentices taught by Cobra be the same as those so-called engineers who can buy certificates for a few thousand yuan in the market?"
Cobra's wonderful performance just now completely impressed the people on the scene, so as soon as these words came out, the students in the venue immediately became excited, "Is your students really trained by Cobra in person?"
"That's right!" The fat man nodded deeply, "Famous teachers produce great disciples, and others are rushing to use our students to recognize the gold sign Cobra. All our courses are taught by Mr. Cobra."
There was noisy at the scene, and many people had already begun to discuss whether they would participate in Huafeng's training class and be a personal disciple of Cobra. Not everyone can have the luck.
Hu Yifei looked at the venue coldly and thought to himself that the students were really simple, so they could easily be fooled by that fat man. After thinking about this, Hu Yifei felt something was wrong again. He seemed to be a student, and he was not fooled now, just because he had been fooled.
Some students could no longer bear it and did not care about the end of the report meeting. They rushed to the front and surrounded the fat man, asking if they could sign up now. They had to book a seat in the next training class first. Even the people from the Computer Association, which is responsible for maintaining order, came over and looked very interested.
Cobra sat next to him, drinking water calmly. Everyone was in awe of him, but there were no ones who went up to surround him.
Seeing that it was a good opportunity, Hu Yifei took out a piece of paper from his pocket and came to Cobra, looking humble and taught, "Teacher Cobra, I have some questions and I want to ask you for advice!"
Cobra had an impression of Hu Yifei, so he put down the water cup and smiled and said, "Please tell me!"
Hu Yifei spread the paper on the desktop, which was filled with professional terms he excerpted from his hard drive notes. "I want to learn these techniques, but I don't know where to start. I hope Mr. Cobra can give me some advice."
Cobra took the paper, picked it up and looked at it, and then looked at Hu Yifei and said, "Where did you hear about these things?"
"Wolf Neighbor Base Camp!" Hu Yifei bit his mouth tightly, "Some people said that these technologies are the most cutting-edge technologies. I want to learn them, but after asking about them for a long time, no one can tell me where to start!"
"Oh, that's it..." Cobra pondered, folded the piece of paper and put it in his pocket. "There are six techniques you mentioned above. I wonder which one you want to study?"
"Six items?" Hu Yifei's eyes fell out. He searched the Internet for a long time before he confirmed that it was four items. Why did it become six items? "If I want to study them all, where should I start?"
Cobra laughed. Looking at Hu Yifei's performance, he might not be clear. "Young man, it's a good thing to be studious, but you must remember to chew too much. To be honest, I don't know any of the things you mentioned above. According to my own understanding, no one in China knows these technologies at present. Only three people have mastered the alternative technologies of three of these six technologies. If you can find one of them, I think your annual salary will start at least 10 million yuan!" Cobra's smiled expression did not seem to be a false statement.
Hu Yifei was very discouraged. After finishing the game, he couldn't find anyone in China. Although there were three people who knew it, they could still have some alternative technology. Cobra said it was very attractive, with a salary of tens of millions of yuan, but he had to learn this technology first. Hu Yifei remembered the notes on the hard drive again, and didn't know what the original owner of the hard drive was doing. He was so powerful that he could be so perverted. Cobra knew all the amazing technology in his mouth. He was proficient in all of them. He had just read two of his notes. If he looked through more, he didn't know what new technology would emerge.
"That's the matter..." Hu Yifei sighed, "That's it, please trouble Teacher Cobra!"
Cobra looked at Hu Yifei's discouraged look and said, "In the field of computers, no matter what technology it is, it cannot be separated from the basic knowledge structure. People who can research these technologies are just more creative and inspiring than others. If you really like the computer industry, you might as well lay a solid foundation first!"
"Thank you, Teacher Cobra, where should I start if I lay the foundation?" Hu Yifei asked again. Cobra's words still inspired him. Just like the SQL injection just now, the different displays in the case of 1=1 and 1=2 are in the eyes of ordinary people. It seems that there is no problem. It is impossible for someone to try to add those characters behind the URL, but in the eyes of hackers, it immediately becomes a weapon of attack. What is not the foundation, but the thinking mode and inspiration.
"I'll list you a book!" Cobra took out the paper and pen and wrote it to Hu Yifei on the spot. He still had a good impression of Hu Yifei, not because this guy had heard of him, but because others had gone to consult Yan Feng about the training class. Only Hu Yifei came over to consult technical issues. Although this guy was a little too ambitious, if he could correct his attitude, he might not be unable to learn safety technology.
Hu Yifei's idea was different. He thought of laying a solid foundation and having those notes as guidance. Maybe he could really develop those techniques, a salary of tens of millions of yuan, what a thick stack of money. He would no longer have to worry about his wallet. When he got rich, he would pay Duan Yu's money first. This kid nagged every day, fearing that he would not pay back the money. Then he would add two more zeros to him later and kill Grandet.
Cobra wrote the bibliography and took out a business card from his pocket, "You buy these books back and read them carefully. If you have any questions, you can ask me again!"
"Thank you, thank you!" Hu Yifei thanked him so much and put his business card and book in his pocket. Hu Yifei was very moved by the famous hacker of Cobra, who was so enthusiastic about him.
Hu Yifei asked for the signature book and network security tool set that Yan Feng had promised him just now, and sneaked out of the stairs classroom while the old pig was not paying attention.
Chapter completed!