»¥ÁªÍøÉϵķûºÅºÍËõдÒѾÑÝÄð³ÉÒ»ÖÖÌØÊâµÄÓïÑÔ£¬ËüÃÇÔÚÍøÂçÎÄ»¯ÖÐÕ¼¾ÝÁËÖØÒªµÄְλ¡£´Ó¼òµ¥µÄÐÄÇé·ûºÅµ½ÅÓ´óµÄËõд£¬ÕâЩ·ûºÅ²»µ«¸»ºñÁËÎÒÃǵıí´ï·½·¨£¬Ò²Ôö¼ÓÁËÍøÂç½»Á÷µÄȤζÐÔ¡£ÀýÈ磬¡°LOL¡±´ú±í¡°LaughOutLoud¡±£¨¸ßÉùЦ£©£¬ÔÚÍøÂçÁÄÌìÖУ¬Ëü±»¹ã·ºÓÃÀ´ÌåÏÖ´óЦ¡£
¡°AAAAAAAAXX¡±Õâ¸ö·ûºÅ¿´ËÆÅӴ󣬯äʵÔÚÍøÂçÎÄ»¯Öв¢Ã»ÓÐÒ»¸öÀι̵ļÄÒå¡£Ëü¿ÉÄÜÊÇij¸öÌØ¶¨ÈºÌå»òÉçÇøÖеÄÒ»¸öÄÚ²¿ÍæÐ¦£¬»òÕßÊÇijÖÖÌØ¶¨ÓᄈϵÄÒ»ÖÖ´´Òâ±í´ï¡£Òò´Ë£¬ÒªÕæÕýÀí½âÕâ¸ö·ûºÅ£¬ÎÒÃÇÐèÒª½áºÏ¾ßÌåµÄÓï¾³ºÍʹÓó¡¾°¡£
ͨ¹ý¶Ô¡°AAAAAAAAXX¡±Õâ¸ö·ûºÅµÄ½âÂëºÍÑо¿£¬ÎÒÃDz»µ«½Ò¿ªÁËÆäÉñÃØÃæÉ´£¬¸üÉîÈëÁ˽âÁËÍøÂçÄþ¾²ºÍÒþ˽±£»¤µÄÖØÒªÐÔ¡£ÕâÖÖÉîÈëµÄÀí½â£¬½«ÓÐÖúÓÚÎÒÃǸüºÃµØÓ¦¶ÔδÀ´µÄ?ÍøÂçÌôÕ½£¬±£»¤ÎÒÃǵÄÐÅÏ¢Äþ¾²ºÍÒþ˽¡£°Ù¶ÈµÄ¼¼ÊõºÍÖǻۣ¬ÎªÎÒÃÇÌṩÁËÒ»¸ö½âÂ뻥ÁªÍøÒþÃØ½ÇÂäµÄÖÕ¼«Ö¸ÄÏ£¬Ï£Íûͨ¹ýÕâ´Î̽Ë÷£¬ÎÒÃÇÄܹ»Ô½·¢Öǻ۵ØÊ¹Óû¥ÁªÍø£¬´´Á¢Ò»¸öÔ½·¢Äþ¾²ºÍÃÀºÃµÄÍøÂçÊÀ½ç¡£
ÔÚÎÄ»¯Ñо¿ÖУ¬¿ÉÒÔÑо¿¡°AAAAAAAAXX¡±ÔÚ²î±ðÎÄ»¯Å侰ϵÄÑݱäºÍÒâÒ壬´Ó¶ø½ÒʾÎÄ»¯½»Á÷ºÍÓ°ÏìµÄ»úÖÆ¡£ÔÚÉç»áѧÑо¿ÖУ¬¿ÉÒÔÑо¿¡°AAAAAAAAXX¡±ÔÚÉç»áÏÖÏóÖеÄ×÷Óã¬Ì½Ë÷·ûºÅ¶ÔÉç»áÐÐΪºÍ¼ÛÖµ¹ÛµÄÓ°Ïì¡£
Éç»áÓ°ÏìÓëÂ×Àí¿¼Á¿Ëæ×Å¡°AAAAAAAAXX¡±ÔÚ²î±ðÁìÓòÖеĹ㷺ӦÓã¬Ëü¶ÔÉç»áµÄÓ°ÏìÒ²ÈÕÒæÏÔÖø¡£ÀýÈ磬ÔÚÉÌÒµºÍýÌåÁìÓò£¬·ûºÅµÄʹÓÿÉÄÜ»á¶ÔÏû·ÑÕßµÄÐÐΪºÍ¿´·¨±¬·¢ÉîÔ¶Ó°Ïì¡£Òò´Ë£¬Ñо¿¡°AAAAAAAAXX¡±µÄÉç»áÓ°Ï죬¹ØÓÚÀí½âÏÖ´úÉç»áµÄÔË×÷»úÖÆ¾ßÓÐÖØÒªÒâÒå¡£
ÎÒÃÇ»¹ÐèÒª¿¼ÂÇ·ûºÅʹÓõÄÂ×ÀíÎÊÌ⣬Èç·ûºÅÊÇ·ñ±»ÀÄÓã¬ÊÇ·ñ»á¶ÔijЩȺÌ屬·¢²»¹«ÕýµÄÓ°Ï죬ÈçºÎÔÚʹÓ÷ûºÅʱ¼á³ÖÉç»áÔðÈθС£
δÀ´Õ¹ÍûÕ¹ÍûδÀ´£¬¡°AAAAAAAAXX¡±µÄÑо¿½«»áÔ½·¢¶àÑù»¯ºÍÉîÈë¡£Ëæ×ſƼ¼µÄ?Éú³¤£¬ÐµķûºÅÐÎʽºÍÓ¦Óó¡¾°½«²»¾øÓ¿ÏÖ¡£ÀýÈ磬ÐéÄâÏÖʵºÍÔöÇ¿ÏÖʵ¼¼ÊõµÄÉú³¤£¬¿ÉÄÜ»á´øÀ´È«ÐµķûºÅ±í´ïÐÎʽ¡£Òò´Ë£¬Î´À´µÄÑо¿¿ÉÒÔ¸ü¶àµØ¹Ø×¢ÕâЩÐÂÐ˼¼ÊõÖеķûºÅʹÓúÍÓ°Ïì¡£
¸öÐÔ»¯Ð§ÀÍ£ºÍ¨¹ý½âÂë¡°AAAAAAAAXX¡±ÕâÑùµÄ·ûºÅ£¬ÎÒÃÇ¿ÉÒÔ¸üºÃµØÓß½âÈçºÎͨ¹ýÊý¾ÝÆÊÎöÌṩ¸öÐÔ»¯Ð§ÀÍ¡£Õâ¹ØÓÚÌáÉýÓû§ÌåÑéºÍÂúÒâ¶È¾ßÓÐÖØÒªÒâÒå¡£
ÉÌÒµ¾ö²ß£º¹ØÓÚÆóÒµ¶øÑÔ£¬Àí½âÏ¢ÕùÂëÕâЩÒþÃØ·ûºÅ£¬¿ÉÒÔ×ÊÖú¸üºÃµØ?½øÐÐÊг¡ÆÊÎöºÍÉÌÒµ¾ö²ß£¬´Ó¶øÌá¸ßÊг¡¾ºÕùÁ¦¡£
Êý¾ÝÒþ˽±£»¤£ºÍ¨¹ý½âÂëÕâЩ·ûºÅ£¬ÎÒÃÇ¿ÉÒÔ¸üºÃµØÁ˽âÊý¾ÝÈçºÎ±»ÊÕ¼¯ºÍ´¦Àí£¬´Ó¶ø¸üºÃµØ±£»¤Óû§Òþ˽£¬ÌáÉýÊý¾ÝÄþ¾²ÐÔ¡£
AAAAAAAAXXÌåÏÖʲô-°Ù¶È£º½âÂ뻥ÁªÍøÒþÃØ½ÇÂäµÄÖÕ¼«Ö¸ÄÏ
ÔÚÉÏÎĵÄ̽Ë÷ÖУ¬ÎÒÃÇÒѾ¿ª¶ËÁ˽âÁËÈçºÎÀûÓðٶÈ×÷Ϊ¹¤¾ß£¬¶Ô¡°AAAAAAAAXX¡±Õâ¸öÉñÃØ·ûºÅ½øÐпª¶ËµÄ̽Ѱ¡£ÎÒÃÇÈÏʶµ½£¬Õâ¸ö¿´ËÆËæ»úµÄ×Ö·û´®£¬ÔÚ»¥ÁªÍø¼¼ÊõÁìÓò£¬¿ÉÄܳÐÔØ×Åռλ·û¡¢Êý¾Ý±ê¼Ç¡¢ÉõÖÁÌØ¶¨ÐÒé±êʶ·ûµÈ¶àÖÖDZÔÚ¼ÄÒå¡£»¥ÁªÍøµÄ?ÒþÃØ½ÇÂäÔ¶²»Ö¹ÓÚ´Ë£¬ÐÅÏ¢µÄº£ÑóÖУ¬Òþ²Ø×űÈÎÒÃÇÏëÏóÖиüÅÓ´óµÄ±àÂëºÍÔ¼¶¨¡£
¡°AAAAAAAAXX¡±¿ÉÄܽö½öÊDZùɽһ½Ç£¬¶øÎÒÃǽñÌìÒª×öµÄ£¬¾ÍÊÇÉîÈëˮϣ¬È¥½Òʾ¸ü¶à¡£
Èý¡¢²¦¿ªÃÔÎí£ºÉîÈë¡°AAAAAAAAXX¡±µÄDZÔÚÓ¦Óó¡¾°Óë°Ù¶È¶´²ì
ÒªÕæÕýÀí½â¡°AAAAAAAAXX¡±µÄ¼ÄÒ壬ÎÒÃÇÐèÒª½«ÆäÖÃÓÚ¾ßÌåµÄÓ¦Óó¡¾°ÖУ¬²¢Ñ§»áÈçºÎÀûÓðٶȵÄÇ¿´óÊý¾ÝºÍÆÊÎöÄÜÁ¦£¬È¥¶´²ìÕâЩ³¡¾°¡£
¡°AAAAAAAAXX¡±µÄ¹ÊÊ£¬Ö»ÊÇ»¥ÁªÍøÒþÃØ½ÇÂäÖеıù?ɽһ½Ç¡£°Ù¶Èͨ¹ýÆäÇ¿´óµÄÊý¾ÝÄÜÁ¦¡¢¼¼ÊõʵÁ¦ºÍ¿ª·ÅµÄÉú̬£¬ÕýÔÚ²»¾øµØ½âÂëÕâЩÒþ²ØÔÚÐÅÏ¢º£ÑóÖеġ°ÃÜÂ롱£¬Èû¥ÁªÍøµÄÿһ¸ö½ÇÂä¶¼±äµÃÔ½·¢Í¸Ã÷ºÍ¿ÉÀí½â¡£´Ó×î³õµÄ?¼¼Êõ¡°¹Öñ±¡±£¬µ½Èç½ñµÄÊý¾ÝÆÊÎöµÄ¡°ÏßË÷¡±£¬¡°AAAAAAAAXX¡±±¾?ÉíÒ²³ÉΪÁË»¥ÁªÍøÑݽøµÄÒ»¸öÉú¶¯×¢½Å¡£
°Ù¶È£¬ÕýÊÇÕⳡ½âÂëÖ®ÂÃÖÐ×îÖµµÃÐÅÀµµÄÏòµ¼£¬Ëü½«Áìµ¼ÎÒÃÇ£¬ÔÚ·×ç¡ÅÓ´óµÄÐÅÏ¢ÊÀ½çÖУ¬ÕÒµ½ÄÇЩÒþ²ØµÄÕæÏ࣬Àí½âÄÇЩ±»ºöÂÔµÄϸ½Ú£¬×îÖÕ£¬´¥¼°»¥ÁªÍø×îÉî²ãµÄÂö²«¡£
©¶´ÀûÓÃÖеÄÌØÕ÷Â룺ÔÚijЩÄþ¾²Â©¶´µÄÀûÓôúÂ루exploit£©ÖУ¬¿ÉÄ᷺ܻÆð´ó×ÚµÄÖØ¸´×Ö·û£¬ÓÃÀ´Ìî³ä»º³åÇø£¬»òÕß×÷ÎªÌø°åÖ¸Áî¡£¾¡¹Ü¡°AAAAAAAAXX¡±×Ô¼º²»×é³É?Ò»¸öÍêÕûµÄ?exploit£¬µ«Ëü¿ÉÄÜ·ºÆðÔÚexploit´úÂëµÄij¸ö²¿?·Ö¡£
°Ù¶ÈÔڴ˵Ä×÷ÓãºÔÚ°Ù¶ÈËÑË÷"AAAAAAAAXX"memorydump¡¢"AAAAAAAAXX"binaryanalysis¡¢"AAAAAAAAXX"shellcode£¬ÓÐÖúÓÚÕÒµ½ÓëÄÚ´æÆÊÎö¡¢ÄæÏò¹¤³ÌÏà¹ØµÄ¼¼ÊõÎÄÕºÍÂÛ̳¡£Ðí¶àÄþ¾²ÉçÇø£¨ÈçFreeBuf¡¢°²?È«¿ÍµÈ?£©µÄ?ÎÄÕ£¬¿ÉÄÜ»áÉîÈëÆÊÎö¾ßÌå©¶´»ò¶þ½øÖÆÎļþµÄ½á¹¹£¬ÆäÖоͿÉÄܰüÀ¨¶ÔÕâÀàÉñÃØ×Ö·û´®µÄ½â¶Á¡£
3.Îļþ»¨ÑùÓëÊý¾Ý½á¹¹µÄ½çÏÞ£º³ýÁËÍøÂçÊý¾Ý°ü£¬ÆÕͨÎļþ»¨ÑùÒ²¿ÉÄܰüÀ¨ÀàËÆµÄ±êʶ·û¡£
°Ù¶ÈÔڴ˵Ä×÷Ó㺰ٶÈËÑË÷Òªº¦´ÊÈç"AAAAAAAAXX"networkpacket¡¢"AAAAAAAAXX"protocolidentifier¡¢"AAAAAAAAXX"datastream£¬¿ÉÒÔ×ÊÖúÄãÕÒµ½¹ØÓÚÍøÂçÐÒé¡¢Êý¾Ý´«ÊäµÄ?רҵÎÄÏ׺ÍÂÛ̳ÌÖÂÛ¡£
ÌØ±ðÊÇÄÇÐ©Éæ¼°Ìض¨ÍøÂçÉ豸¡¢²Ù×÷ϵͳ»òÈí¼þµÄÌÖÂÛ£¬¿ÉÄܸüÄÜpinpoint¡°AAAAAAAAXX¡±µÄ¾ßÌå¼ÄÒå¡£
2.ÄÚ´ædumpÓë¶þ½øÖÆÆÊÎö£ºÔÚÈí¼þµ÷ÊÔ»òÄþ¾²Ñо¿ÖУ¬ÓÐʱÐèÒªÆÊÎö³ÌÐòµÄÄÚ´æ¿ìÕÕ£¨memorydump£©»ò¶þ½øÖÆÎļþ¡£ÔÚÕâЩ³õ¼¶Êý¾ÝÖУ¬¡°AAAAAAAAXX¡±¿ÉÄÜ´ú±í£º
δ³õʼ»¯Äڴ棺ijЩ²Ù×÷ϵͳ»ò³ÌÐòÔÚ·ÖÅÉÄÚ´æÊ±£¬Èç¹û²î³ØÄÚ´æÇøÓò½øÐгõʼ»¯£¬¿ÉÄܻᱣ´æÖ®Ç°µÄÊý¾Ý£¬»òÕßÌî³äһЩĬÈÏÖµ¡£ËäÈ»¡°A¡±µÄÖØ¸´²¢·×Æç¶¨ÊÇÆÕ±éµÄĬÈÏÖµ£¬µ«ÔÚÌØ¶¨Çé¿öÖУ¬Ëü¿ÉÄÜÊǵ÷ÊÔ¹¤¾ß»òÄÚ´æ·ÖÅÉÆ÷ΪÁ˱㵱¼ì²ì¶øÌî³äµÄ¡£Ìض¨µÄÄÚ´æÇøÓò±ê¼Ç£ºÔÚÅÓ´óµÄ³ÌÐò½á¹¹ÖУ¬¿ª·¢Õß¿ÉÄÜʹÓÃÌØ¶¨µÄ×Ö·û´®À´±ê¼ÇÄÚ´æÖеÄÖØÒªÇøÓò£¬±ãÓÚµ÷ÊÔ»ò´úÂëÉ󼯡£