"Winning the forum is not our ultimate goal, we are going to rely on the identity of this forum administrator to take down this server, do you have any ideas?" Cobra is very good at using questions to mobilize people's positive surnames.

A lot of people didn't even understand the previous presentation, so how can they put forward any opinions now, and if there is an invasion, everyone will not come here to listen to the presentation.

"The forum has a function, called uploading, you can upload some pictures and other attachments to the forum, everyone must know this!" Cobra laughed, "That's what we're going to take advantage of!" Now let's take a look at the interface of the administrator, and find that there is any? The administrator can set the type and size of the uploaded attachment, I have a backdoor in my hand, the format is the exe type, then I set the exe file to be uploadable. ”

Cobra set it up, played the interface for developing a new post, and uploaded an exe file to the forum, that is, he put a backdoor program on the hard drive of the website server.

"Now we only need to know the specific location of this backdoor program on the other party's server, and we can use the database permissions or other means to run it!" Cobra didn't explain what means it was going to use to confirm the exact location of this backdoor, but ran it in its own way.

Hu Yifei's level is very limited, and he didn't understand this step, but Cobra can make another computer run a specified program on his own computer, which is very powerful in itself.

After Cobra opened the connection program of the backdoor and entered the IP address of that server, it quickly got a black window with no image display, but various commands could be entered. Cobra inputs a simplest DOS command, which is a command that displays its own IP address.

The displayed IP address is the same as the address of that server, which proves that Cobra has entered that server and has obtained a lot of permissions.

Cobra entered a few more commands and compared the displayed results with the situation on his own computer, confirming that it was the content of two different computers. Of course, Cobra has a more direct method, he directly typed in the command, let the server restart directly, and soon, the backdoor program lost the connection, and then entered the link of BBS just now, and it also prompted that the server could not be found. Although the people at the scene did not understand hackers, they also knew that Cobra had indeed successfully invaded.

"Just because of a small bug in the forum program set up on the server, the whole server was controlled, now let's go back and see how big a vulnerability this is!" Cobra looked at the people in the venue with a smile, picked up the cup, and drank the water slowly, for a full two minutes, Cobra put down the cup, "Let's see if the server reboot is over!" ”

Hu Yifei suddenly realized, and said that cobra drank water for so long, it turned out that he was waiting for the server to be restarted, no wonder, Hu Yifei just thought that cobra had something wrong with his slow surname.

Cobra re-entered the URL of the forum, and this time the forum showed up again, and it seemed that the server was working normally again, "The topic of our report is network security, and the intrusion just now is just to tell everyone how important security is." How to make your computer absolutely secure, that's what I'm going to talk about. Maybe many students at the scene will have some questions, saying that looking at the invasion you just now, it doesn't seem to be too troublesome, so will it be very simple to prevent the invasion? ”

Cobra smiled, "Actually, there is nothing wrong with this idea, security is much simpler than intrusion, security lies in the usual bits and pieces, these can be done by forming habits; Invasion, on the other hand, requires extraordinary inspiration and thousands of experiments, which not everyone can do. ”

As if afraid that everyone would not believe it, Cobra demonstrated the problem of 1=1 and 1=2 again, and the web page was the same as the display just now, once it was displayed normally, and once it prompted an error. "Now, let's see how I fixed this vulnerability!"

Cobra used the backdoor to connect to the server again, found the source code file of the forum program, opened it, but only modified one sentence, and the people on the scene saw it clearly, he just added a few characters to it. But a miracle happened, after Cobra saved the code file of the forum, he reopened the forum, and this time whether it was 1=1 or 1=2, the web page was all displayed normally.

"The pages are all displayed normally, what other information can you get?" Cobra asked everyone with a smile.

Hu Yifei's jaw fell, no, just these few characters, the loophole disappeared in an instant, and the intruder will be dumbfounded, don't say it's admin, you just ask the administrator's account if it's an "idiot", "mentally retarded" and "shit", and the webpage will also be displayed normally.

"Of course, I can modify it like this!" Cobra opened the source file again, deleted the characters that had just been added, and followed a few lines of code down to insert a symbol there. This time it's even more magical, wait for him to save it, and then go to SQL injection, whether it's 1=1, or 1=2, the web page all prompts errors, only enter the correct URL, don't add any extra sentences behind the URL, the web page will be displayed normally.

"You see, whether it's safe or not is just that you write more or fewer characters!" Cobra smiled, "That's why we often say: there's only one letter between safe and unsafe!" ”

The applause in the venue was thunderous, and everyone was very impressed by Cobra's wonderful performance.

According to the original arrangement, Cobra was supposed to perform the prevention of overflow attacks, but as a result, the emotions of the people on the scene were mobilized, and many questions were raised on this SQL injection alone.

The fat man sitting next to Cobra couldn't close his mouth with a smile, the effect of the scene was much better than expected, and he stood up and interrupted the on-site questioning, "Because the time for the report meeting is limited, this question session is over, next, let me introduce the current situation of the network security industry, as well as the prospect forecast!" ”

"Let me introduce myself first, I am the general manager of Huafeng Network Security Technology Co., Ltd., my name is Yan Feng!" The fat man smiled and bowed to the audience, "I am barely an industry insider, but I am still a little apprehensive to make this report for everyone, even if it is a little bit of my superficial opinion, take it out and communicate with you, if you have any different ideas, you can put it forward." ”

The fat man is very modest on his lips, but then he is really not polite, he blew the development prospect of network security into a flower, without exception, and it is the old-fashioned rhetoric of "huge market demand, and the serious shortage of practitioners, forming a huge talent gap", he also took out the data that he didn't know how to count, and the students on the scene were stunned. In the end, the fat man also made an analogy, saying that being safe is like being a doctor, specializing in treating patients on the Internet and computers, from ancient times to the present, doctors are a profession that has never been unemployed.

At present, the employment pressure is so great, especially for those who study computers, it is really difficult to enter the kicked industry after graduation, and now there are too many people who want to be kicked, and a college student who has just graduated cannot be ranked at all. How to find a stable and reliable job is the top priority that everyone begins to consider as soon as they enter the university, so the fat man's words made many students in the venue a little moved, and some people began to ask: "Then if we want to enter this industry, what do we need to learn?" ”

The fat man was waiting for this sentence, but he coughed pretending to be reserved, and then said: "At present, there are many certifications for network security engineers in the market, such as Cisco, such as CIW, NISC, CISSP, our own certification, and foreign certifications, and the training price is expensive, but it is rare to find truly professional training institutions." Many training institutions are recruiting people under the guise of recruitment, but the substitute teachers have not been engaged in the security industry at all, how can this train qualified security engineers, so we see a very strange phenomenon, on the one hand, the training institutions have trained a large number of network security engineers, on the other hand, the network security companies have to find their own talents, and then take the old with the new to establish their own talent reserve system. ”

"We Huafeng also have this trouble, and then we simply did our own network security engineer training, the result was unexpectedly good, that batch of students, except for two who stayed in our Huafeng to work, the rest were all hired, there are professional network security companies, there are also securities, banking, e-commerce enterprises, they also need a large number of network security professionals."

Seeing that the fat man couldn't talk about the topic for a long time, the people below were a little anxious, and asked directly: "Then can your company's training still be done?" ”

"! Of course you do! Why not! The fat man's tone was very firm, "Now we have signed entrusted training agreements for safety talents with many domestic enterprises, so we Huafeng will continue to hold such training courses in the future." Some students may be about to ask, saying that the students trained by others are not recognized by the company, why do the students you trained rush to ask for it? The fat man pointed to his fat face, "Of course there are reasons, but it is not because my Yan Feng's face is big, and my face is big." ”

The scene burst into laughter.

"Why are our self-trained trainees so popular? First, we are a cyber security company, so we know very well what skills practitioners need to master; The second is that the teachers we invite are not ordinary, think about it, can the apprentices taught by Cobra himself be the same as those so-called engineers who can buy certificates for a few thousand dollars on the market? ”

Cobra's wonderful performance just now has completely impressed the people on the scene, so as soon as these words came out, the students in the venue immediately became excited, "Your students, are you really trained by Cobra himself?" ”

"Absolutely!" The fat man nodded deeply, "Famous teachers produce high apprentices, and others rush to use our students, and they recognize the golden signboard of cobra, and all our courses are taught by cobra teachers." ”

There was a lot of noise at the scene, and many people had already begun to discuss whether to participate in Hua Feng's training class, and it was not everyone's luck to be able to be a disciple of Cobra.

Hu Yifei looked at the venue coldly, thinking that the students were really innocent, so it was easy to be fooled by that fat man, thinking about it like this, Hu Yifei felt that it was wrong, he seemed to be a student, and he was not fooled now, just because he had been fooled.

Some students couldn't bear the surname anymore, and they didn't care about the end of the report meeting, so they rushed to the front to surround the fat man, and asked if they could sign up now, they had to book a seat in the next training class first, and even the people from the computer association who were responsible for maintaining order also came over a few, and they were very interested.

Cobra sat next to him, drinking water with a nonchalant face, everyone was in awe of him, but there were no people who went up to surround him.

Hu Yifei saw that it was a good opportunity, so he took out a piece of paper from his pocket and approached Cobra, looking humble and taught, "Teacher Cobra, I have some questions, I want to ask you for advice!" ”

Cobra had an impression of Hu Yifei, so he put down the water glass and said with a smile: "Please speak!" ”

Hu Yifei spread out the paper on the table, which was full of professional terms he had copied from his hard drive notes, "I want to learn these techniques, but I don't know where to start, I hope Mr. Cobra can give me some guidance." ”

Cobra took the paper, picked it up and looked at it, and then showed a very surprised look, looked at Hu Yifei and said, "Where did you hear about these things?" ”

"Wolf's Den Base Camp!" Hu Yifei's mouth was clenched, "Some people above say that these technologies are the most cutting-edge technologies, and I want to learn them, but after asking about the wolf's den base camp for a long time, no one can tell me where to start!" ”

"Oh, that's right......," Cobra groaned, folding the piece of paper and putting it in his pocket, "There are six of the techniques you've mentioned, I don't know which one you're going to work on?" ”

"Six?" Hu Yifei's eyeballs fell out, and he searched the Internet for a long time before he was sure that it was four, and how did it become six, "Then if I want to study everything, where do I need to start?" ”

Cobra laughed, looking at Hu Yifei's performance, he may really not know, "Young man, it's a good thing to be studious, but you must remember to be greedy and chew more." To tell the truth, I don't know any of the things you mentioned above, and according to my own understanding, no one in China knows these technologies at present, and only three people have mastered the alternative technologies for three of the six technologies. If you can research one of them, I think your annual salary will start at least 10 million per year! Cobra's smiling expression doesn't seem like a lie.

Hu Yifei is very discouraged, this is over, I can't find anyone who understands in China, although there are three people who will, but what alternative technology will be, cobra said very temptingly, tens of millions of annual salaries, but you have to learn this technology first. Hu Yifei remembered the notes on the hard drive again, and he didn't know what the original owner of the hard drive did, it was so strong that it was so perverted, Cobra knew a technology that was already very great, and he was proficient in all of them. I only flipped through his two notes, and if I read more, I don't know what new technology will come out.

"That's the case...... Hu Yifei sighed, "Then forget it, trouble Mr. Cobra!" ”

Cobra looked at Hu Yifei's discouraged appearance, and said: "In the computer field, no matter what technology it is, it can't be separated from the basic knowledge structure, and the people who can study these technologies just have more creativity and inspiration than others." If you really like computing, you might as well lay the basics first! ”

"Thank you Mr. Cobra for your advice, where should I start to lay the foundation?" Hu Yifei asked again, Cobra's words still inspired him a little, just like the SQL injection just now, the different displays in the case of 1=1 and 1=2, in the eyes of ordinary people, there seems to be no problem, and it is even impossible for anyone to try to add those characters behind the URL, but in the eyes of hackers, it immediately became a weapon of attack, and the difference is not the foundation, but the thinking mode and inspiration.

"I'll give you a bibliography!" Cobra took out a pen and paper and wrote it to Hu Yifei on the spot, he still had a good impression of Hu Yifei, not because this guy had heard of him, but because others had gone to consult Yan Feng about the training class, only Hu Yifei came to consult about technical problems, although this guy was a little ambitious, but if he could correct his attitude, he might not be able to learn safety technology.

Hu Yifei's thoughts are different, he thinks that he has laid a good foundation, and has those notes as a guide, maybe he can really study those techniques, tens of millions of annual salary, what a pile of money it must be, he no longer has to worry about his purse, and when he makes a fortune, he will pay back Duan Yu's money first, this kid nagging every day, for fear that he will not pay back the money, and when the time comes, he will add two more zeros to him and smash this Grande to death.

Cobra finished writing the bibliography and took out a business card from his pocket, "You can go back and buy these books and read them carefully, if you have any questions, you can ask me again!" ”

"Thank you, thank you!" Hu Yifei thanked him a thousand times and put his business cards and bibliography into his pocket, and Hu Yifei was very moved by the fact that the well-known hackers of the Cobra generation were so enthusiastic about him.

Hu Yifei asked for the signed book and network security tool set that Yan Feng promised him just now, and sneaked out of the ladder classroom while the old pig was not paying attention.

The old pig has been thinking about eating with beautiful women, and when the report was over, he stared at the door, looking for Hu Yifei's figure, but when the last person came out, he didn't see a single hair of Hu Yifei, and the phone was turned off when he called Hu Yifei. Realizing that he had been fooled, the old pig stood there and scolded his mother, "Hu Yifei of the dog, you wait, Lao Tzu must put you in the grass a hundred times!" ”

;