该楼层疑似违规已被系统折叠 隐藏此楼查看此楼
重点2.
封包数据
*字节集:256{48,99,51,51,54,54,48,100,101,53,102,52,56,53,54,57,51,52,98,51,51,50,101,102,52,55,53,54,49,100,98,49,54,102,53,50,102,52,99,100,56,57,101,55,98,49,54,101,54,98,57,97,55,52,102,49,98,56,98,57,50,49,57,102,99,49,54,99,98,52,49,49,101,99,53,57,102,51,51,102,99,99,48,102,99,52,102,50,55,97,99,50,56,54,53,99,98,55,55,100,52,54,98,98,51,57,98,50,57,53,52,48,54,50,101,51,101,56,48,51,98,54,99,50,50,54,55,100,48,100,52,49,56,102,52,100,53,102,97,50,50,53,102,97,99,51,57,50,57,49,52,48,52,99,48,53,100,98,100,102,99,54,97,57,102,50,57,101,54,55,102,101,48,101,50,51,55,51,99,102,51,50,50,101,99,98,99,98,49,49,53,53,55,50,51,56,57,97,51,48,52,50,97,56,98,49,99,54,54,53,49,102,51,101,53,55,101,48,99,99,98,56,57,98,51,57,99,97,50,57,100,99,52,55,51,52,53,98,56,101,50,51,56,48,51,101,49,99,54,49,55,51,102,57,98,53}
以上是字节数据,也就是封包体。拦截的时候通常看到的就是这些。
当然,这还没完。
通常为了更快的处理数据和响应,通常在发送前都会加上包头。也就是在48,99之前加上带有含义的其他字节数据,例如,10,11或者更长,这取决于程序复杂难度,当你收到一个完整的包首先就是先读取包头,然后分配对应的函数处理,分配前需要解密并验证完整以下省略。