抓包Wireshark

lylink

未加密即可抓包，Wireshark ，直接可以爆出来账号密码 有的是base64加密了！


Frame 128: 535 bytes on wire (4280 bits), 535 bytes captured (4280 bits) on interface \Device\NPF_{3D601081-0CD2-4D83-9BEC-806C1F1EB911}, id 0
    Interface id: 0 (\Device\NPF_{3D601081-0CD2-4D83-9BEC-806C1F1EB911})
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 12, 2020 21:05:13.321489000 中国标准时间
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1591967113.321489000 seconds
    [Time delta from previous captured frame: 0.002638000 seconds]
    [Time delta from previous displayed frame: 0.002638000 seconds]
    [Time since reference or first frame: 14.452975000 seconds]
    Frame Number: 128
    Frame Length: 535 bytes (4280 bits)
    Capture Length: 535 bytes (4280 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80 || http2]
Ethernet II, Src: HonHaiPr_f7:b3:94 (a4:17:31:f7:b3:94), Dst: Tp-LinkT_08:fc:57 (bc:d1:77:08:fc:57)
    Destination: Tp-LinkT_08:fc:57 (bc:d1:77:08:fc:57)
    Source: HonHaiPr_f7:b3:94 (a4:17:31:f7:b3:94)
    Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.0.0.68, Dst: 192.0.0.1
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
    Total Length: 521
    Identification: 0x18b4 (6324)
    Flags: 0x4000, Don't fragment
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x5ff5 [validation disabled]
    [Header checksum status: Unverified]
    Source: 192.0.0.68
    Destination: 192.0.0.1
Transmission Control Protocol, Src Port: 64061, Dst Port: 80, Seq: 1, Ack: 1, Len: 481
    Source Port: 64061
    Destination Port: 80
    [Stream index: 22]
    [TCP Segment Len: 481]
    Sequence number: 1    (relative sequence number)
    Sequence number (raw): 1618878962
    [Next sequence number: 482    (relative sequence number)]
    Acknowledgment number: 1    (relative ack number)
    Acknowledgment number (raw): 3696383213
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x018 (PSH, ACK)
    Window size value: 513
    [Calculated window size: 131328]
    [Window size scaling factor: 256]
    Checksum: 0x8bf7 [unverified]
    [Checksum Status: Unverified]
    Urgent pointer: 0
    [SEQ/ACK analysis]
    [Timestamps]
    TCP payload (481 bytes)
Hypertext Transfer Protocol
    GET / HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET / HTTP/1.1\r\n]
            [GET / HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Host: 192.0.0.1\r\n
    Connection: keep-alive\r\n
    Cache-Control: max-age=0\r\n
    Authorization: Basic YWRtaW46ODg4ODg4\r\n
        Credentials: admin:888888
    Upgrade-Insecure-Requests: 1\r\n
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36\r\n
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\r\n
    Accept-Encoding: gzip, deflate\r\n
    Accept-Language: zh-CN,zh;q=0.9\r\n
    \r\n
    [Full request URI: http://192.0.0.1/]
    [HTTP request 1/1]
    [Response in frame: 133]