Foreign Ministry International Intelligence Agency12officialSecurity SpecialistLittle Group, Twenty-sevenpreparesSpecialistLittle Group, currentlyTokyo PrefectureSelf-Defense ForceCore Server, pesterswith[Endless Defense]resists, wish of lofty aspirations and high idealsseizes[Mr. M].外务省国际情报局的十二个正式安全专家小组,二十七个预备专家小组,正在东京都自卫队的核心服务器,与无尽防御纠缠对抗,雄心壮志的想要抓捕m先生。Buttheydo not knowthatthisradicallyis the trap that Shi Leisets up!
但他们不知道,这根本就是石磊设下的陷阱!
The [Endless Defense]defensemechanismis very simple, onlymeetstwomoves of mostfoundationsthing, the rejection and deletion.无尽防御的防御机制很简单,只会两招最基础的东西,拒绝与删除。Comes inthroughPort Invading, or the camouflagenormalvisit, thatdirectlywas rejected\;Trojan Horse, Virusandmaliciousdatapackageandtrashdatapackage, was deleteddirectly.
通过端口入侵进来,或者伪装正常访问,那就直接被拒绝\;木马、病毒、恶意数据包、垃圾数据包,则直接被删除。Althoughthisdefensewayis simple, butis very suitable.
这种防御的方式虽然简单,但十分适用。The Great Dao Is Simplicity, exactly as statedthistruth, a simplerway, takes the computerresources less, the reaction rateis faster, the ability of load pressureis higher!大道至简,便是这种道理,越简单的方式,占用计算机的资源越少,反应速度越快,负载压力的能力越高!Cites a simpleexample, at presentOrdinarymainstreamAntivirussoftware on market condition, a determineunknowndocumentwhetherisVirus, mainlyhasthreeways.
举一个简单的例子,目前市面上的普通主流杀毒软件,判断一个未知文件是否为病毒,主要有三种方式。
The Firsttypeismost common, isallAntivirussoftwarehasSignature Codestructuredetermine that. MajorSecurity Firm, fromarrangementnumerousHoneypot System, Seizeto the Virussample, have analyzedVirusSignature Code, thenbuilds the hugeVirusSignature Codedatastorehouse. Whendiscoveredsuspiciousdocument, firstanalyzes the unknownfile organization, including a seriespeeling off the shelltechnology, obtained the unknowndocumentSignature Code, VirusSignature CodecomparisonwithVirus Database, confirmedwhetheris the Virusdocument.第一种就是最常见,也是所有杀毒软件都有的特征码结构判断。各大安全厂商,从布置的大量蜜罐系统,捕捉到病毒样本,分析了病毒的特征码,然后建立庞大的病毒特征码数据库。当发现可疑文件的时候,首先分析未知文件结构,包括一系列脱壳技术等,获得未知文件的特征码,与病毒库的病毒特征码对照,确认是否为病毒文件。Thisway, inlater generationalsoveryhotcloudSafety, actually is also Antivirussoftwareuploads the unknowndocumentSignature Code, inServerendVirusSignature Database. Whether the contrastisVirus. Itas beforeis only the most foundationmost commonSignature Codecontrast, hypedanythingto saySafety. The boastdeceivesthing of person!
这种方式,在后世还有一种很火的云安全,其实也就是杀毒软件上传未知文件的特征码,在服务器端的病毒特征库。对比是否为病毒。它依旧只是一种最基础最常见的特征码对比而已,炒作成了什么云安全。吹嘘一些糊弄人的东西!
A SecondwayisGenetic Code, itis the Upgradesystem of Signature Code, actually is also Signature Code. EachSignature Code can only correspondVirus, butGenetic CodecancorrespondgeneseriesVirus.第二种方式是基因码,它是特征码的升级体系,其实也是特征码。每一个特征码只能对应一个病毒,但一个基因码可以对应一个基因系列病毒。Althoughwithis the Signature Codenature, butGenetic Codereduced the VirusSignature Databasedataquantityeffectively.
虽然同为特征码的性质,但基因码有效的减小了病毒特征库的数据量。
A Thirdwaycalledenlighten(ment), some principlesand[Endless Defense]connections of thisway. Itthrough the contrastunknown the difference between documentsandnormal procedures, comes a determinedocumentwhetheris the Virusprocedure.第三种方式叫启发,这种方式的原理和无尽防御有些关联。它通过对比未知文件和正常程序之间的差别,来判断一个文件是否为病毒程序。
The enlighten(ment)wayis divided intotwotypes, onetypeisDynamic Enlightenment. OnetypeisStatic Enlightenment. Static Enlightenmentthroughcarries ondecompileto the staticcodecommand sequences, thusunderstood that an unknownproceduretrue motive, comesdetermineitwhetherisVirus.启发的方式分为两种,一种为动态启发。一种为静态启发。静态启发就是通过对静态代码指令序列进行反编译,从而了解一个未知程序的真正动机,来判断它是否为病毒。
The Dynamic Enlightenmentexactly as statedSandboxtechnology, establishesSandbox EnvironmentthroughAntivirussoftware, making the unknowndocumentoperateinSandbox, examined that actually the unknownprocedurewill makeanybehavior, thusdetermineitwhetherisVirus.动态启发便是沙箱技术,通过杀毒软件建立一个沙箱环境,让未知文件在沙箱中运行,查看未知程序究竟会做出什么行为,从而判断它是否为病毒。Dynamic Enlightenmenthas a verybigshortcoming. EstablishesSandbox Environmentto consumenumeroussystem resources, causes the Computer Systemresourcesto be deficient, making the normal operationhave, the slow and unresponsivesituationsluggishly.动态启发有一个很大的缺点。建立沙箱环境会消耗大量的系统资源,造成计算机系统资源匮乏,使正常操作出现迟滞、卡顿的情况。Whatdoes very well inthisdomainisKaspersky, itsAntiviruseffectis best, butis similar toitsname is the same, alternate name‚cardexplodeshalts’!
在这个领域做得很好的是卡巴斯基,它的杀毒效果最好,但如同它的名字一样,别称‘卡爆死机’!Indicatedfrom the abovethreeways. A anyway, mustdo the work of numerous, can actually a determineunknowndocumentbe the Virusprocedure. Does the numerouswork, will takenumeroussystem resources, cpucomputing resources. The memorystorageresources, areothersystem resources.
从以上三种方式表明。无论是哪一种方式,均要做大量的工作,才能判断一个未知文件究竟是不是病毒程序。做大量工作,就会占用大量系统资源,无论是cpu计算资源。内存储存资源,还是其他的系统资源。Has takennumeroussystem resources. Causes the computer equipmentload capacityto be bad, strictheavier by a point, will let slightlycomputer equipmentslow and unresponsive, evenhalts!
占用了大量系统资源。造成计算机设备负载能力差,稍微严重一点,就会让计算机设备卡顿,甚至死机!But[Endless Defense]determined whether the unknowndocumentisVirus, hasonestep!
而无尽防御确定未知文件是否为病毒,只有一步!Onlyneedsto determineitprotecteddocument!
只需要确定它是不是被保护的文件!If not, deletesdirectly, needmanyoperations, did not reduceto the pressure that Systemresulted.
如果不是,直接予以删除,不需要更多的操作,对于系统造成的压力减小了很多。Therefore, facing39groups, Foreign Ministry International Intelligence AgencySecurity Specialist, [Endless Defense]has gone against!
所以,面对39组,外务省国际情报局的安全专家,无尽防御顶了下来!Foreign Ministry International Intelligence AgencyOfficial Website, after Shi Leiinspection, is based onNumber OneServer, unitesSupercomputer [Swallow]andNo. 3Server, Clustered Server that composes, attacksOfficial WebsitewebServertogether.外务省国际情报局的官方网站,石磊检查之后,以一号服务器为基础,联合超级计算机燕和三号服务器,组成的集群服务器,共同进攻官方网站web服务器。As a result ofForeign Ministry International Intelligence AgencyOfficial Website, has adoptedMicrosoftiisServer, uses the asp.technologyconstruction, Shi LeiregardingMicrosoftSystem, thathas the considerabledeepunderstanding!
由于外务省国际情报局官方网站,采取了微软的iis服务器,使用asp.技术构建,石磊对于微软的系统,那可是有相当深的了解!Is controllingSupercomputer [Swallow], has not initiatedanywarning, Shi LeigainedwebServerLow Gradeauthority. Thenbased onLow Gradeauthority, promotedauthorityslowly.
控制着超级计算机燕,没有引发任何警报,石磊获取了web服务器的低级权限。然后在低级权限的基础上,慢慢的提升权限。FirstgainsLow Gradeauthority, thenraisespowerUpgrade, compared withdirectonestepgainsSuper Authority, sometimesSafetysome. EspeciallyForeign Ministry International Intelligence AgencywebServer, justShi Leiscanningtime, discovered that connects the alert mechanism of internallocal area network, moreoveris the independentcontrol, to relieveis very difficult.
先获取低级权限,然后提权升级,比直接一步获取超级权限,在某些时候更安全一些。特别是外务省国际情报局的web服务器,刚刚石磊扫描的时候,发现一个连接内部局域网的报警机制,而且是单独控制,如果想要解除很难。Foreign Ministry International Intelligence Agency, as the Wo Sang Nationbiggestintelligence related activity, theybelongs toInternal Network, only thenextremelyfewnodesandExternal Internethave the link.外务省国际情报局,作为沃桑国最大的情报机构,他们属于内部网络,只有极少节点与外部互联网有链接。
a webServerconnectionexactly as statednode.
web服务器的连接便是一个节点。Afterjust, Shi LeiobtainedSuper Authority, hefinallydiscoversbigissue!
只不过,当石磊获得了超级权限之后,他终于发现一个大问题!‚Damn, unexpectedlyisUnidirectional Data!’Shi Leiin the heartcoldsnort|hum.
‘该死的,居然是单向数据!’石磊心中冷哼一声。So-calledUnidirectional Data, is a derivation of one-way linkageweb pagetechnology. Iftreats asaForeign Ministry International Intelligence AgencyOfficial WebsitewebServer, Foreign Ministry International Intelligence AgencyinternalData Servertreats asb.
所谓的单向数据,是一种单向链接网页技术的衍生。如果将外务省国际情报局官方网站web服务器当做a,外务省国际情报局的内部数据服务器当做b。Unidirectional Dataisbcanvisita, cantransmitdatato givea, canglance overaallsituations, butacannottransmitdatato giveb, cannotglance overb.单向数据就是b可以访问a,可以传输数据给a,可以浏览a的所有情况,但a不能传输数据给b,也不能浏览b。dataservice request of even thougha , can only stay the preservationina, arrives inato carry on the visitreadbyb, thenreplies the datarequest of correspondence.即便是a的数据服务请求,也只能停留保存在a,由b抵达a进行访问读取,然后回复对应的数据请求。
If generalHacker, meetsthisUnidirectional Data, simplydoes not have the means that after allwebServera, cannottoInternal Serverb, transmitanydata, can only investigatebyServerbindependently.
如果是一般的黑客,遇见这种单向数据,根本没有办法,毕竟web服务器a,不能向内部服务器b,发送任何数据,只能由服务器b自主探查。HowShi LeiisWorld Summit GradeHacker, even if Unidirectional Datacanpreventmanypeople, inperson but who prevents, does not includeShi Leiabsolutely!
奈何石磊是世界巅峰级黑客,哪怕是单向数据可以阻挡很多人,但阻挡的人中,绝对不包括石磊!Shi LeiinwebServer, has input more than 100lines of codesdirectly. Thenchooses the implementcode.石磊直接在web服务器中,输入了100多行代码。然后选择执行代码。This more than 100lines of implementcodes, altogetherare more than tendatarequested. Thesedatarequestscancreatememoryoverflow, letsForeign Ministry International Intelligence Agency, Data Server of internallocal area network, has the situation that the servicestopsinstantaneously.
这100多行执行代码,总共是十多条数据请求。这些数据请求会造成内存溢出,让外务省国际情报局,内部局域网的数据服务器,瞬间出现服务中止的情况。
The instance that the servicestops, Unidirectional Datarestriction(s)naturallyalsorelieved, resumed the Bidirectional Datacommunication.
服务中止的瞬间,单向数据限制自然也解除,恢复了双向数据通信。This time the processis very short, because of the Data Servermemory, is differenttogeneralindividualcomputer. Butis the eccmemory, has the error checkandcorrects the function.
这个时间过程很短,因为数据服务器的内存,与一般个人计算机不一样。而是ecc内存,拥有错误检查和纠正功能。
After memorydataoverflows, the eccmemoryautothatic ermr correction, Shi Leimustbefore the eccmemoryrestores, enters the Foreign Ministry International Intelligence Agencyinteriorlocal area network.
内存数据溢出后,ecc内存会自动纠错,石磊必须在ecc内存恢复之前,进入外务省国际情报局内部局域网。Shi LeihasSupercomputer [Swallow], but also is connectingUniversal Air CompanyNo. 3Server, passesNumber OneServerspecialClusterSystem. TwoExceed Gradecomputing resourcesaboutvolumeinsame place, has invaded the Foreign Ministry International Intelligence Agencyinteriorlocal area networkrapidly.石磊拥有超级计算机燕,还连接着普空公司的三号服务器,通过一号服务器的特殊集群系统。将两台超级计算资源合集在一起,迅速侵入了外务省国际情报局内部局域网。EntersForeign Ministry International Intelligence Agency, Shi Leihas not acted rashly, has not attemptedto tamper withdata, the Back Doorprocedure that butwill compileahead of time, has implantedForeign Ministry International Intelligence AgencySystem Ground Level.
进入到外务省国际情报局,石磊没有轻举妄动,也没有企图篡改数据,而是将提前编写的后门程序,植入了外务省国际情报局的系统底层。As a result ofprevioustime. PermittedforRobotplanauthoritythatShi Leiformerlyhas enteredForeign Ministry International Intelligence Agency, clearknows the Foreign Ministry International Intelligence AgencyServersituation.
由于上一次。为了robot计划的权限许可,石磊曾经进入过外务省国际情报局,清楚的知道外务省国际情报局的服务器情况。Therefore, Back Doorprocedure of Shi Leithiscompilation, assembly language of use. Sinks toSystembottom leveldirectly, hiding of ten pointsis common. Facilitatesnexttimeto enterForeign Ministry International Intelligence Agency.
所以,石磊这次编写的后门程序,使用的汇编语言。直接沉入系统的底层,十分的隐蔽不起眼。方便下一次进入外务省国际情报局。
After processing the Back Doorprocedure, the Shi LeipreparationinForeign Ministry International Intelligence Agency, the top-secretdatastorehouse of intelligence service, having a look atthemto haveanyneeddata.
处理完后门程序之后,石磊准备在外务省国际情报局,情报部门的绝密资料库,看看他们有没有什么需要的资料。However, whileShi Leipreparesto examine the top-secretdatastorehouse the time, Foreign Ministry International Intelligence AgencywebServer, has encountered unexpectedlyattack!
然而,正当石磊准备查看绝密资料库的时候,外务省国际情报局的web服务器,竟然又遭到了攻击!
If only the attackonforget about it, butthatIdiotHacker, attackswebServerunexpectedlyforcefully, withoutanyconcealsownbehavior.
如果只是进攻就算了,但那个白痴黑客,居然强行进攻web服务器,没有任何掩饰自己的行为。Not onlyso, newly arrivedHacker, after having obtainedLow Gradeauthority, unexpectedlytampers withForeign Ministry International Intelligence AgencyOfficial Websitedirectly, the open to the publicmessageprovocation!
不仅仅如此,新来的黑客,取得了低级权限后,居然直接篡改外务省国际情报局的官方网站,公开留言挑衅!‚[Mr. M], aren't youthatflamboyant? Howto be siegedbyForeign Ministry International Intelligence Agency? Great[Raphael]hereis waiting foryou, daresto come?’[Raphael]
‘m先生,你不是那么牛逼吗?怎么被外务省国际情报局围困了?伟大的拉斐尔就在这里等着你,敢不敢来?’拉斐尔Shi Leilooks atthismessage, is nearly madspits blood!石磊看着这个留言,险些气得吐血!Whatis the enemies often cross each other's path, whatisoutsmarts oneself, this momentexactly as stated!
什么叫冤家路窄,什么叫弄巧成拙,此刻便是![Raphael]thinksShi Lei's[Mr. M]Sockpuppet, duringTokyo PrefectureSelf-Defense Forcewas besiegedby the Foreign Ministry International Intelligence Agencycollective. Whilethisopportunity, [Raphael]bluffs and blusters, fellForeign Ministry International Intelligence AgencyOfficial Websiteblack, but alsostayed behindhas shamed the [Mr. M]language.拉斐尔以为石磊的m先生马甲,在东京都自卫队被外务省国际情报局集体围攻之中。趁着这个机会,拉斐尔耀武扬威的,黑掉了外务省国际情报局的官方网站,还留下了羞辱m先生的语言。Who would have thoughtoutsmarts oneselflike this, has causedForeign Ministry International Intelligence Agency, the webServerwarning, making the Foreign Ministry International Intelligence AgencySpecialistvigilancecome, certainlywill return to basetheir[Old Nest].
岂知这样弄巧成拙,引起了外务省国际情报局,web服务器的警报,让外务省国际情报局的专家警觉过来,一定会回防他们的老巢。Then, Shi Leiinvades the matter of Foreign Ministry International Intelligence Agencyinteriorlocal area network, definitelywill be exposed.
如此一来,石磊入侵外务省国际情报局内部局域网的事情,也铁定会被曝光。Becoming angry out of shameShi Lei, returns to webServerrapidly, found the [Raphael]connectionipaddressrecord, preparesthisrecord retention, thenkeepsinwebServer, letsForeign Ministry International Intelligence Agency, copes[Raphael].
恼羞成怒的石磊,迅速回到web服务器中,找到拉斐尔的连接ip地址记录,准备把这个记录保存下来,然后留在web服务器中,让外务省国际情报局,去对付拉斐尔。However, [Raphael]thatcheap person, worthilyisWorld Summit GradeHacker, heis unexpectedly same as the Shi Lei'sidea, has been duplicatingShi Lei'sto connect the ipaddressrecord!
然而,拉斐尔那个贱人,不愧是世界巅峰级的黑客,他居然和石磊的想法一样,已经在复制石磊的连接ip地址记录!‚Damn[Raphael], youcompelmy!’Shi Leiin the heartis angry, has not alarmed[Raphael], butin the Foreign Ministry International Intelligence Agencyinternallocal area network, foundtop-secretdata of intelligence service, has chosen a named«SO Plan»file, camouflagesto attemptto examine, andoperation that duplicates.
‘狗日的拉斐尔,你逼我的!’石磊心中恼怒,没有惊动拉斐尔,而是在外务省国际情报局的内部局域网中,找到情报部门的绝密资料,在其中挑选了一个名为《so计划》的档案,伪装成企图查看,并且复制的操作。Thenconnectingipaddress, modifybecomes[Raphael]connectionipaddress!
然后把连接ip地址,修改成为拉斐尔的连接ip地址!that sidewebServer, Shi Leipretendsnot to discover that the motion of [Raphael], making[Raphael]connectipaddresshistemporary bot, reservesin the Systemrecord.
web服务器那边,石磊装作没有发现拉斐尔的行动,让拉斐尔把他的临时肉鸡连接ip地址,预留在系统记录中。[Raphael]alsothinksonedoflawlessly, had not been discoveredbyShi Lei.拉斐尔还以为自己做得天衣无缝,没有被石磊发现。But[Raphael]has made a fatalmistake!
只不过拉斐尔犯了一个致命的错误!
( To be continued. Ifyoulikethiswork, welcomeyouto come the beginning( 520 xs.) casts the recommendationticketandmonthly ticket, yoursupport, isIbiggestpower.)
(未完待续。如果您喜欢这部作品,欢迎您来起点(520xs.)投推荐票、月票,您的支持,就是我最大的动力。)ps: Requested earnestly for 24hours, subscribed«Hacker», gavemountainShanzheng the energy! This monthupdateway, odd-numbered days3, even-numbered days4, the time 0 points of old rule, 12points, 16points, 20points. Askedeverybody! Let«Hacker»walks! 【Hitsto enjoythanks】Orphanedwildeveningfan, the urgestarrain1, hitsto enjoy588. friend0402, the top-secretflight, eternlty, hitsto enjoy100.
ps:恳请24小时内,订阅《黑客》,给予山山正能量吧!本月更新方式,单日3更,双日4更,老规矩的时间0点,12点,16点,20点。拜托大家了!让《黑客》走得更远吧!【打赏感谢】孤野夕迷,叮咛星雨1,打赏588.朋友0402,绝密飞行,eternlty,打赏100.
To display comments and comment, click at the button