Font
Large
Medium
Small
Night
Prev Index    Favorite Next

Chapter 24 Security Incidents

Liu Cheng asked straight to the point: "Are you doing operational activities recently?"

"No. What's wrong? Today's traffic is very high. Did our game suddenly become popular?" Shao Mingying said happily.

Who doesn’t like making money? Sudden increase in traffic is of course a good thing.

"Idiot, that's a hacker dragging the library!"

"It's your database that is being downloaded, which has caused a surge in traffic during the download process!" Liu Cheng said with the phone clamped on his shoulder: "Has Gao Wenlong got off work?"

"It's time to get off work." Shao Mingying answered blankly, why was he suddenly dragged the database by a hacker?

How did the hacker drag the library silently enter their servers and complete this feat?

Liu Cheng's hands were flying on the keyboard and whispered: "Call him and ask him to come back immediately. I'll find out how the hacker came in before he comes back."

"Okay." Shao Mingying hung up the phone and quickly invited someone.

Liu Cheng checked for a long time and today, almost all the government websites, public security, transportation, finance, catering, hotels, and operators have seen a peak traffic of up to 5G.

This is a web framework vulnerability, and it is a vulnerability that hackers have mastered on a small scale, but they have launched an attack.

Security incident!

A super dangerous loophole has appeared.

Liu Cheng's eyes were filled with excitement!

"Sister, buy me a cup of coffee. I'm going to stay up late today." Liu Cheng shouted, turned on the computer for a few days, and prepared to do a big deal.

Liu Cheng opened several hacking forums, but it was indeed as expected.

"The databases of these major hotels have been downloaded, and more than 15 million pieces of personal information have been leaked. Those who are engaged in social work databases have already started to have a carnival."

He first needs to find this loophole.

Transportation, finance, restaurants and hotels, and operators, he was familiar with it, and he immediately confirmed that it was the Struts framework.

There are many types of web application frameworks, and transportation, finance, catering, hotels and operators all like to use the Struts framework to support their website construction.

He began to constantly adjust the vulnerability scanner, screen the Struts framework, and when he went to the Jakarta plug-in, he found the problem.

When using the file upload function based on the Jakarta plug-in, remote command execution exists, resulting in the system being hacked.

He immediately started to analyze the vulnerability and started patching another computer he opened.

Ding, ding, ding ding ding ding, ding, ding...

Liu Cheng's phone suddenly rang.

"Hey, I'm Gao Wenlong." Gao Wenlong's voice came from Shao Mingying's phone, panting, and it seemed that he had run to the company at the fastest speed.

Liu Cheng said with the phone clamped on his shoulder: "Listen to me, now change the settings immediately. Jakarta is enabled by default. You can turn it off first to ensure that you will not lose further."

"Then I'll send you a vulnerability report and a Gantt chart in a while. You can help me make the contents on the schedule as fast as possible. I'll want it before dawn."

"Okay, no problem. Are we suffering a lot?" Gao Wenlong asked at the worried Shao Mingying.

Liu Cheng smiled and said, "No, don't worry, these hackers attacked you because they were completely accidental. They did not drag your core user database away, but dragged the art library away. There was no big problem."

"If you turn off this plug-in, there will be no problem, but there will be patches, and this plug-in will still be enabled. We will make the patch for this vulnerability before dawn."

He worked hard until dawn, put the patch on his website and provided it with his users to download it. He updated the patch when the three customers were still sleeping today.

"Huh! I'm finally finished." Liu Cheng breathed.

"Little brother, you are very awesome." Shao Mingying naturally couldn't stay up late with them. It was Gao Wenlong's text message that woke her up and she made such a call.

Liu Cheng tried to correct: "I'm not young."

"I haven't seen it before." Shao Mingying smiled.

Liu Cheng said without hesitation: "Can you know just try?"

"Ha! You!" Shao Mingying opened the curtains and let the sunlight spread on her body, her face full of smiles.

Liu Cheng stayed up all night and said exhaustedly: "Is there anything else? Is there nothing left to die..."

"Does the consultation fee need to be paid?" Shao Mingying said the important matter.

"If you want to give it, please give Gao Wenlong a bonus. After all, I took the initiative to deliver it to you, so it is not considered consultation." Liu Cheng did not ask for the 20,000 yuan, and he would gain greater benefits from this loophole.

Shao Mingying shook his hair, turned on his laptop and said, "Did you just put the patches you worked hard all night online for free for people to download? Are you so greedy for money and don't even pay for download?"

Liu Cheng was in a very good mood. Although he stayed up all night, he was still very energetic. He said loudly: "Everyone has the responsibility for network security!"

"As cybersecurity practitioners, of course, we must publish the vulnerability analysis report as soon as possible and provide patches."

"Let all Internet users enjoy the convenience of the Internet, rather than being in danger at any time."

"Let all Internet users keep abreast of the network security situation and the risks they face in a timely manner, and improve network security prevention and emergency response capabilities."

"Enhanced the reliable environment for network security and created a pure Internet."

"This is the professional ethics of a cybersecurity person and the professional ethics of every cybersecurity person!"

After hearing Liu Cheng's generous speech, Shao Mingying almost bent over with a smile. This guy who fell into the eyes of money was so righteous.

She interrupted Liu Cheng's spell casting and said with a smile: "Speak human words."

"It's not something valuable. If Qihoo makes it out, it won't take twelve hours."

"This thing is a free download of character, which means it is a free advertisement. Whether others know it or not, the personal webmaster and corporate technology department know our Kuway information and have the ability to solve the 0day loopholes."

The 0day vulnerability is a vulnerability that has been discovered (maybe not disclosed) and the official has not had any relevant patches.

This time, the Struts framework is one of the Java open source frameworks. It maintains its foundation and is another non-profit foundation, without loophole bounty plans.

"I believe I will be very busy today." Liu Cheng said with a smile.

Bathed in the morning sun, Shao Mingying said with a smile: "I really find that you are not only good-looking, but also amazing."

Liu Cheng replied calmly: "It's normal."

"You are fat, you are still panting. To be honest, I have something to ask you." Shao Mingying looked out the window in a daze.

Liu Cheng said with a smile: "Twenty thousand at a time. We have a consultation contract."

"You guy!"
Chapter completed!
Prev Index    Favorite Next