"taking down the forum is not our ultimate goal. We are going to rely on the identity of the forum administrator to take down this server. Do you have any ideas?" Cobra is very good at using questions to motivate people.
Many people do not even understand the previous demonstration, how can they put forward any suggestions now? if there is an invasion, we do not have to come here to listen to the lecture.
"the forum has a function, called upload, you can upload some pictures and other attachments to the forum, you must know this!"Cobra smiled. "that's what we're going to take advantage of!" Now let's take a look at the administrator's interface, have you found it? The administrator can set the type and size of the upload attachment. I have a backdoor program in hand and the format is EXE, so I will set the EXE file to be uploaded. "
Cobra set up successfully, hit the interface to develop new posts, and uploaded an EXE file to the forum, that is, he put a backdoor program on the hard drive of the website server.
"the backdoor program has been put on it, and now as long as we know the specific location of the backdoor program on the other side's server, we can use the permissions of the database or other means to run it!" Instead of explaining what it takes to confirm the exact location of the backdoor, Cobra runs it directly in its own way.
Hu Yifei's level is very limited, he did not understand this step, but Cobra can get another computer to run the specified program on his own computer, which in itself is very powerful.
Cobra opens the connection program at the back door, enters the IP address of the server, and quickly gets a black window with no image display, but you can enter a variety of commands. Cobra enters the simplest DOS command, which is used to display its own IP address.
The IP address shown is the same as that of the server, which proves that Cobra has entered the server and got a lot of permissions.
Cobra typed a few more commands to compare the results displayed with the situation on his own computer to confirm that it was from two different computers. Of course, Cobra also has a more direct way, he directly typed in the command, let the server directly restart, soon, the backdoor program lost the connection, and then enter the link just BBS, also indicated that the server cannot be found.
Although the people on the scene do not understand hackers, they also know that the Cobra intrusion is indeed a success.
"just because a small BUG, set up on the forum program on the server caused the whole server to be controlled, now let's go back and see how big a loophole it is!" Cobra smiled at the people at the meeting, picked up the cup and drank slowly for two minutes before Cobra put down the cup and said, "Let's see if the server restart is over!"
Hu Yifei suddenly realized that when he said that Cobra had been drinking water for so long, he was waiting for the server to restart. No wonder Hu Yifei thought there was something wrong with Cobra.
Cobra re-entered the web address of the forum, and this forum was shown again, and it seems that the server is working normally again. "the theme of our report meeting is network security, and the intrusion just now is just to tell you how important security is." How to make your computer absolutely safe? that's what I want to talk about.
Maybe many students at the scene will have some questions, saying that it doesn't seem too troublesome to look at your intrusion just now, so will it be very easy to prevent the invasion? "
Cobra smiled. "in fact, this idea is absolutely right. Security is much easier than intrusion. Security depends on the usual bit by bit, which can be done with habits. But intrusion requires extremely unusual inspiration and thousands of experiments, which not everyone can do."
As if afraid that people would not believe it, Cobra once again demonstrated the problems of 1: 1 and 1: 2, and the web page was displayed normally and prompted for an error, just like the previous display. "now, please take a look at how I fix this loophole!"
Cobra once again used the back door to connect to the server, found the forum program source code file, opened, but only modified a sentence, the people at the scene saw very clearly, he just added a few characters to it. But a miracle happened. after Cobra saved the forum code file, he reopened the forum, and this time, whether it was 1x1 or 1x2, the web page showed normal.
"all the pages show up normally. What other information can you get?" Cobra asked everyone with a smile.
Hu Yifei's chin fell off, no way, just a few characters, the loophole disappeared instantly, this intruder will be dumbfounded, not to mention admin, you are asking the administrator's account is "idiot", "retarded", "shit", the web page will also show normal.
"of course, I can modify it like this!" Cobra opens the source file again, deletes the characters you just added, goes down a few lines of code, and inserts a symbol there. This time is even more magical, wait for him to save, then go to SQL injection, whether it is 1: 1 or 1: 2, the web page all prompts an error, only enter the correct URL, do not add any extra words after the URL, the web page will display normally.
"as you can see, whether it is safe or not depends on whether you write more or less characters!" Cobra smiled. "that's why we often say that there is only one letter between security and insecurity!"
There was thunderous applause in the venue, and everyone was very impressed by Cobra's wonderful performance.
According to the original arrangement, Cobra would have to perform the prevention of overflow attacks, but as a result, the emotions of the people at the scene were mobilized, and a lot of questions were raised on this SQL injection alone.
The fat man sitting next to Cobra laughed so much that his mouth could not close his mouth. The effect of the scene was much better than expected. When he saw it, he stood up and interrupted the question at the scene. "because the time for the report meeting is limited, this question session is over. Next, let me introduce to you the current situation of the cyber security industry, as well as the prospect forecast!"
"first of all, I would like to introduce myself. I am the general manager of Huafeng Network Security Technology Co., Ltd. My name is Yan Feng!" The fat man smiled and bowed to the audience. "I'm kind of an industry insider, but I still feel a little nervous when I give you this report. Let's just take it as my superficial opinion and share it with you. If you have any different ideas, you can put forward them."
The fat man was very modest, but then he was really impolite. He blew the development prospect of network security into a flower, without exception, and it was the same set of "huge market demand, serious shortage of employees, forming a huge talent gap".
He also took out the data that did not know how to statistics, and fooled the students at the scene in a daze. Finally, the fat man also made an analogy, saying that being safe is like being a doctor, specializing in seeing and giving doctors to the Internet. From ancient times to the present, doctors have never been unemployed.
At present, the pressure of employment is so great, especially for computer students, it is really difficult to enter the kick industry after graduation. now there are so many people who want to be kicked that a recent graduate cannot rank at all. How to find a stable and reliable job is a top priority as soon as we enter the university, so Fatso's words moved many students at the meeting, and some people began to ask, "so if we want to get into this business, what do you need to learn?"
Fat man and so on is this sentence, can still pretend to be reserved coughing, just said: "at present, the market about the network security engineer certification, such as Cisco, such as CIW, NISC, CISSP, have our own certification, but also have foreign certification, training prices are not cheap, but the real professional training institutions are rare." Many training institutions recruit people under the guise, but the substitute teachers have never worked in the security industry at all.
How can this train qualified security engineers? therefore, we see a very strange phenomenon. On the one hand, training institutions train a large number of network security engineers, on the other hand, network security companies have to find talents on their own, and then adopt the old and new approach. Establish your own talent reserve system. "
"We Huafeng also had this kind of trouble. later, we simply conducted a training session for network security engineers ourselves, and the result was unexpectedly good. Apart from two students who stayed with us to work in Huafeng, the rest were hired empty.
There are professional network security companies, as well as securities, banking, and e-commerce enterprises. They also need a large number of network security professionals."
When the people below saw that the fat man could not get to the point for a long time, he became a little anxious and asked directly, "is there still any training in your company?"
"come on! Of course! Why don't you do it! " The fat man's tone is very firm. "now we have signed commissioned training agreements for security personnel with many domestic enterprises, so we Huafeng will continue to hold such training courses in the future." Maybe some students are about to ask, saying that the trainees trained by others do not recognize the company, so why do the trainees you train rush to get it? " The fat man pointed to his fat face, "of course there are reasons, but it's not because my Yan Feng's face is big."
The scene immediately laughed.
"Why are our own trainees popular? First, Huafeng itself is a network security company, so we know very well what skills our employees need to master; second, because the teachers we hire are unusual, let's think about it: can the apprentices taught by Cobra himself be the same as those so-called engineers who can buy certificates for just a few thousand yuan in the market? "
Cobra's wonderful performance just now has completely impressed the people at the scene, so as soon as these words came out, the students in the field immediately became excited, "is it true that your students are trained by Cobra himself?"
"exactly!" The fat man nodded deeply. "A famous teacher makes a great apprentice, and others rush to use our students. What they recognize is the gold signboard of Cobra. All our courses are taught by the teacher Cobra."
There was a lot of noise at the scene, and many people have begun to talk about whether to attend Huafeng's training course. It is not everyone's luck to be a disciple of Cobra.
Hu Yifei looked coldly at the court, thinking that the students were really simple, and it was so easy to be fooled by the fat man. Hu Yifei felt wrong again. He seemed to be a student. He was not fooled now, just because he had already been fooled.
Some students have lost their patience, and regardless of the end of the report, they rushed to the front to surround the fat man and asked if they could sign up now. They had to book a seat in the next training class, even the people from the computer association responsible for maintaining order. I was very interested.
Cobra sat beside him, drinking water calmly. Everyone was in awe of him, but no one went up to surround him.
Seeing that it was a good opportunity, Hu Yifei took a piece of paper out of his pocket and approached Cobra with an air of humility and education. "Mr. Cobra, I have some questions. I'd like to ask you for advice!"
Cobra was impressed by Hu Yifei, so he put down the water cup and said with a smile, "Please speak!"
Hu Yifei spread out the paper on the desktop, which was covered with professional terms he had extracted from his hard disk notes. "I want to learn these skills, but I don't know where to start. I hope Mr. Cobra can give me some advice."
Cobra took the paper, picked it up and looked at it with a look of surprise. He looked at Hu Yifei and said, "where did you hear about these things?"
"Wolf den stronghold!" Hu Yifei clenched his mouth. "some people up there say that these technologies are the most cutting-edge technologies. I want to learn them, but I've been inquiring about them for a long time at the wolf's nest stronghold, and no one can tell me where to start!"
"Oh, that's right." Cobra mused, folded the piece of paper and received it in his pocket. "there are six technologies you mentioned above. I don't know which one you want to study."
"six items?" Hu Yifei's eyeballs fell out. He searched the Internet for a long time before he determined that they were four items, but how did they become six? "then if I want to study them all, where do I need to start?"
Cobra laughed, looking at Hu Yifei's performance, he may not really know, "young man, studious is a good thing, but you must remember to eat more than to chew." To tell you the truth, I don't know any of the above. According to my own understanding, no one knows these technologies in China at present, and only three people have mastered the alternative technologies of three of the six technologies.
If you can figure out one of them, I think your annual salary is at least ten million yuan a year! " Cobra's smiling expression doesn't seem to be a lie.
Hu Yifei was very discouraged. After this, he could not find a sensible person in China. Although there were three people who could do it, it was still an alternative technology. Cobra said it was very attractive, with an annual salary of 10 million yuan, but he had to learn this technology first. Hu Yifei thought of the notes on the hard drive again, and he didn't know what the original owner of the hard drive did.
He was so strong that he was so sick that Cobra had a great technology in his mouth, and he was proficient in all of it. I just flipped through two of his notes. If I read more, I don't know what new technology will emerge.
"that's the way it is." Hu Yifei sighed, "then forget it. Don't bother Mr. Cobra!"
Cobra looked at Hu Yifei's frustrated look and said: "in the computer field, no matter what technology is, can not be separated from the basic knowledge structure, people who can develop these technologies, just have more creativity and inspiration than others." If you really like computers, you might as well lay the foundation first! "
"Thank you, Mr. Cobra, for your advice. Where should I start if I lay the foundation?" Hu Yifei also asked that Cobra's words still enlightened him a little bit. Just like the SQL injection just now, the difference between 1: 1 and 1: 2 shows that in the eyes of ordinary people, there seems to be no problem, and it is even impossible for anyone to try to add those characters after the URL, but in the eyes of hackers, it immediately becomes a sharp weapon of attack. What is bad is not the foundation, but the mode of thinking and inspiration.
"Let me give you a bibliography!" Cobra took out his pen and paper and wrote to Hu Yifei on the spot. He was still a little fond of Hu Yifei, not because this guy had heard of himself, but because others went to consult Yan Feng about the training course. Only Hu Yifei came to consult technical problems. Although this guy is a little too ambitious, he may not be able to learn safety technology if he can have a correct attitude.
Hu Yifei's idea is different again. He thinks that if he lays a good foundation and has those notes as a guide, he may really be able to study those technologies. With an annual salary of 10 million yuan, what a thick wad of money it has to be. He will no longer have to worry about his purse. When he gets rich, he will first pay back Duan Yu's money. This kid is nagging every day for fear that he will not pay back the money. When the time comes, he will add two zeros to him and smash this Grandet.
Cobra finished his bibliography and took out a business card from his pocket. "you can buy these books later and read them carefully. If you have any questions, you can ask me again!"
"Thank you, thank you!" Hu Yifei thanked Hu Yifei for putting his business card and bibliography in his pocket. Hu Yifei was very moved by the well-known hackers of the Cobra generation who were able to be so enthusiastic about themselves.
Hu Yifei asked for the signed book and network security tool set that Yan Feng promised to him just now, and sneaked out of the ladder classroom while the old pig was not paying attention.
The old pig has been thinking about having dinner with a beautiful woman. At the end of the report meeting, he stared at the door, looking for the figure of Hu Yifei. As a result, when the last person came out, he did not see a hair of Hu Yifei, and Hu Yifei's phone was turned off. Realizing that he had been fooled, the old pig stood there scolding his mother, "motherfucker Hu Yifei, you wait, I must grass you a hundred times!"