Chapter 217: Matryoshka dolls

When Hu Yifei arrived in the computer room, there were already a lot of people inside, and all the data analysis experts that Dongyang could mobilize were present. Cobra was there, too, but sitting on the sidelines, napping against an empty server rack.

"Xiaohu!" Captain Li beckoned to Hu Yifei, "You can try it!" ”

"How's it going?" Hu Yifei asked.

"It's not ideal, from last night to now, there has been no progress in data analysis, and it is impossible to determine the origin of the hacker!" Captain Li is really good, he has survived until now, his face is tired, but he is still very energetic.

"What do you need me to help with?"

"One is to figure out the other party's intrusion methods and find out where the loopholes are; The second is to determine the origin of the hacker! Captain Li frowned, "Until now, I don't know who the opponent is!" ”

"Okay, I'll try!" Hu Yifei nodded, data analysis is indeed not his strong point, and it is much slower to do than others, "You go and rest for a while, if you find anything, I will inform you!" ”

Captain Li arranged for Hu Yifei to be on the server, and then turned around to summarize clues with those data analysis experts, during which the phone kept ringing, and he also had to remotely direct the city's network deployment.

Hu Yifei didn't delay, called up the tools, and began to analyze the website server, the tools used for data analysis in his hand were all provided by the tarantula, which belonged to Spark's weapon, which was not his strong point, so he didn't make a special data analysis tool himself.

After analyzing for a while, Cobra woke up and saw Hu Yifei there, so he walked over and asked, "How is it?" Did you find anything? ”

"I haven't finished analyzing it yet." Hu Yifei smiled, "This tool is very slow to analyze, does Mr. Hui have any clues?" ”

Cobra shook his head, "I didn't get anything, my head hurts when I think about it, maybe the other party's methods are too clever!" ”

"You go to the rest meeting again, I'll call you if I have a clue!" Hu Yifei said.

"Can't sleep! Worried! Cobra found a chair and sat behind Hu Yifei, "This is the most serious hacking I have ever encountered, I really can't imagine who will do it, do you have any ideas?" ”

"If you can make Teacher Hui unable to find clues, I think the other party may be a person at the level of a super hacker." Hu Yifei thought for a while, "Maybe it's even more powerful!" The other party's intrusion may have taken advantage of an unknown vulnerability on the system, and it should be an instantaneous incursion, a tooling operation, and a quick manipulation of the website after obtaining permission. ”

"It's about the same as I thought!" Cobra nodded, "But I didn't find any traces of the other party's attack in the data analysis!" ”

"Teacher Hui still remembers the secret theft method analyzed yesterday, right?" Hu Yifei asked rhetorically.

Cobra nodded, "What's wrong?" ”

"The other party divided a simple act of stealing secrets into several links, each link has done anti-detection and camouflage, if you only look at one of the links alone, we don't know what the other party's purpose is!" Hu Yifei thought for a while, "If you look at it this way, it is very likely that the other party will also decompose the process of invasion, and the entire attack process may be like a matryoshka doll, one by one, and when they are combined, they will launch a real attack!" ”

Cobra thought about it immediately, and after a moment, slapped his thigh, "Why didn't I think of that!" After speaking, he immediately stood up, "Team Li, Team Li!" ”

"Are you awake?" Captain Li saw that Cobra was awake, so he hurriedly walked over, "What's the matter?" ”

"If you send a few more experts to dig into the loopholes of the website program, our attention cannot only be on the server data, but also on the website program!" Cobra patted Hu Yifei on the shoulder, "It's still Xiaohu's brain, and it woke me up in one fell swoop!" ”

"What's going on?" Captain Lee asked.

"You transfer someone over first, and I'll tell you more later!" Cobra waved his hand and returned to his computer, he now has a new investigation idea, it is possible that the hacker has sent the attack code to the server before the attack, and then combined it into a complete attack program locally on the server.

The biggest possibility that the attack code can be unknowingly and unconsciously put on the server is that there is a vulnerability in the website program itself, so that hackers can upload the attack code to the server sentence by sentence for preservation.

If the program is executed locally, then the previous data analysis is in vain, because the Cobra gang has been analyzing external attack data in an attempt to find suspicious clues, and completely ignoring the threat of the local program.

Cobra acted quickly, looking for clues to the execution of some local programs during this time in the records and data.

The network supervisor quickly mobilized three experts in the vulnerability mining of website procedures, and the program of the entire website of the Organization Department of the Provincial Party Committee was placed in front of the three people, and each of them took a copy, made a division of labor, and began to analyze.

Hu Yifei still hasn't made any progress there, and the brainless data analysis software is like an old cow breaking a car, squeaking and slowly pushing the progress bar forward, and it is estimated that it will take nearly an hour to complete the entire data analysis.

However, the website analysis side quickly found that the website program of the Organization Department of the Provincial Party Committee was not large, and the three of them divided labor, and soon, one person found a loophole.

"What vulnerability? Can I upload a code? Cobra asked.

"It's just a bug that allows you to upload code!" The man was a little surprised that he was a prophet of cobra.

"Tell me the details, where do you expect the code to be uploaded?" Cobra continued.

"This vulnerability can do some database!" The man paused, "Hackers can't traverse the hard drive, so it's impossible to know the partitions and paths on the hard drive, I think the most likely thing is to upload the code to the database, and then execute the data backup command, combine the uploaded code, and store it as a file of your own designation." ”

"Okay, hard work!" Cobra immediately found a clear data analysis object to find the backup command of the database, and soon he detected that the data had been backed up five days ago.

"Xiao Wang!" Captain Li immediately called out to the administrator of the server, "Look at this time, have you made a data backup at this time?" ”

The network administrator shook his head when he saw it, "Data backup is once a week, and every time it is done at half past three on Friday afternoon, this time is not right, it is not a backup made by me!" ”

"That's right!" Cobra nodded, continued to analyze, and soon, found more than 20 consecutive database operations in the data, and the remarks column of the database was written into the data, but Cobra opened the database again at this time, and there was no code in the remarks column, all of which were added by the webmaster.

Flipping through the data again, after the other party successfully backed up, there was a time to clean up the remarks as "No code found, it's a pity!" Cobra looked at Captain Li, "But I have already found the other party's way in, and I believe that I will soon be able to find out where the server vulnerability is!" The permission of the website vulnerability is not enough, and the other party uploads these codes, which must be to open the backdoor of the server! ”

Captain Li frowned, "More than 20 sentences of code can open the back door?" ”

"Enough!" Hu Yifei interjected at this time, "In Z language, the simplest backdoor program only needs 7 lines!" ”

A room full of stupefies.

"Are you saying that the code uploaded by the other party is in Z?" Captain Lee asked.

"Chances are, yesterday we knew that the other party was very good at writing the Z language!" Hu Yifei nodded, "Besides, no matter what code it is, even if the back door can be opened, the other party can't combine it into an executable program, take a step back, even if it is combined into an executable program, as long as the program is executed, it will be discovered by the monitoring tool." ”

"Z code can be run directly?" Captain Li asked.

"Yes! Code in Z can be executed in a variety of forms! Hu Yifei nodded, but his heart was a little churning, at that time, ZM only announced the writing environment and grammar system of the Z language, but did not publish the details of the Z language, this function, it is difficult to be discovered, because it needs to make a statement at the beginning of the code, otherwise the code will not be executed.

"Someone discovered the secret of the Z language so soon?"

Hu Yifei wondered very much in his heart, he was the only one who knew this secret, and maybe those experts in the United States also knew, could it be that the United States was really retaliating this time?

Everyone in the room is a little stupid, the code of the z language can be executed in any form, it is really weird, it is simply a weapon of invasion, all the monitoring software, will not be boring to monitor the execution of text files, if the code is executed in text form, it really can't be monitored!

"Mr. Hui, please do further analysis, confirm it, see if it is the possibility that Xiaohu guessed, and then find out where the server vulnerability is!" Captain Li immediately made a new arrangement, "Xiaohu, you are familiar with the Z language, you can assist Mr. Hui!" ”

"Okay, no problem!" Hu Yifei nodded.

"There is one more doubt!" The person who did the website vulnerability mining asked again, "The administrator has added a lot of backups to the database himself, so how did the other party make this code combination?" ”

Captain Li didn't know if this person was pretending to be smart or being wise and foolish, and said, "You make a unique mark at the beginning of the code, such as adding a letter a, won't it be different from the administrator's notes?" ”

The man suddenly realized, scratching the four inside!

Captain Li picked up the phone and gave Hei Tian a quick report on the new discoveries on his side.

"Hu Yifei found out?" Hei Tian immediately asked, the first thing he thought of was this, there was no progress nationwide, but Dongyang made progress soon after Hu Yifei participated.

"It's Xiaohu's idea, and Mr. Hui is fully responsible!" Captain Li didn't dare to be greedy for this merit, to tell the truth.

"Thank you for your hard work, Team Lee! I have to trouble you to sort out what you just found and send it over, and I will immediately send it to the whole country, so that everyone can investigate according to this idea! ”

(To be continued)