外挂截取到的封包...如何本地验证呢?
在使用挂机功能的时候也会向服务器发送请求,并返回数据.我用了注册用户和未注册用户做了下对比,请问有没有办法做出本地验证来?
发送数据:
POST /Service.ashx HTTP/1.1..Content-Type: application/x-www-form-urlencoded..User-Agent: IE..Host: 112.140.186.250..Content-Length: 397..Cache-Control: no-cache....?..9...............wyf1320...wyf1320..............Y.........4.]L.ww...>ww.,....p:...E....U=6gwF/.....3...nr:|bTp..}`0....|t.E.1 ..,..6V~f.8m.......i.U.b+Z.E..SB].g..FQ.....M.. ........k.p..nO..V%.u@ux7%..?.5Lw.6...&Ap3......{...1..^8.j.iM.BgF......pn..u%c|i}Y...{.... .We./}.~}a..m.i=.q~e.<2..&.B...................................................R.7.(u........'E<.=d...K.w.....T..>`#^[..3..;..`..
返回数据:
HTTP/1.1 200 OK..Connection: close..Date: Wed, 29 Jul 2009 14:03:44 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-AspNet-Version: 2.0.50727..Cache-Control: private..Content-Type: application/ octet-stream..Content-Length: 118.......6.........:........,................,....................8.........................................................
以上是未注册用户返回的数据
--------------------------------------------------------------------------------------------------------
下面给出注册用户发送的数据和返回的数据
发送数据:
POST /Service.ashx HTTP/1.1..Content-Type: application/x-www-form-urlencoded..User-Agent: IE..Host: 112.140.186.250..Content-Length: 391..Cache-Control: no-cache....?..9...............wyf1320...wyf1320...Y..u.0\B-...4$.B.9.B.B....5.W........:.M..Y.OkFP...*R...2...x....$o..4.P....2{...G.xm2..B.H.h..f\..T..o{}.~..2n|.0..v_\...a5M4S.]......./..&.Z....fd..&.6vM..$.BAl#..{.D#.&.......2...B.w.&l~2..\.M.../&.....,:...$..........3.......}.Y..L...|m{B/JE...................................................."UQqf.a.G.....#...=.\.hg....Z......ze.a..K...P....
返回数据:
HTTP/1.1 200 OK..Connection: close..Date: Wed, 29 Jul 2009 14:47:56 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-AspNet-Version: 2.0.50727..Cache-Control: private..Content-Type: application/ octet-stream..Content-Length: 110.................:........,........:2009-8-19 23:46:42..8.....$.u..*.m.70.EG_......ve8..r.Ic....P{..=._.n./....'..
我修改了host文件把112.140.186.250指向本地,架设IIS并且支持.net,建立了service.ashx文件返回"OK",代码如下:
<% @ webhandler language="C#" class="AverageHandler" %>
using System;
using System.Web;
public class AverageHandler : IHttpHandler
{
public bool IsReusable
{ get { return true; } }
public void ProcessRequest(HttpContext ctx)
{
ctx.Response.Write("ok");
}
}
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
