我破解一款软件,用封包助手截取数据,一看是加密的,所以就在OD里查看,查看recv接受的数据,在数据窗口跟随,看到了一些数据,是解密出来的,我把数据给贴出来,
#. .c.o.p.y.r.i.
g.h.t. .(.c.). .
1.9.9.3.-.1.9.9.
9. .m.i.c.r.o.s.
o.f.t. .c.o.r.p.
......#.....#. .
t.h.i.s. .i.s. .
a. .s.a.m.p.l.e.
.h.o.s.t.s. .f.
i.l.e. .u.s.e.d.
.b.y. .m.i.c.r.
o.s.o.f.t. .t.c.
p./.i.p. .f.o.r.
.w.i.n.d.o.w.s.
......#.....#. .
t.h.i.s. .f.i.l.
e. .c.o.n.t.a.i.
n.s. .t.h.e. .m.
a.p.p.i.n.g.s. .
o.f. .i.p. .a.d.
d.r.e.s.s.e.s. .
01B52D4C 74 00 6F 00 20 00 68 00 6F 00 73 00 74 00 20 00 t.o. .h.o.s.t. .
01B52D5C 6E 00 61 00 6D 00 65 00 73 00 2E 00 20 00 65 00 n.a.m.e.s... .e.
01B52D6C 61 00 63 00 68 00 0D 00 0A 00 23 00 20 00 65 00 a.c.h.....#. .e.
01B52D7C 6E 00 74 00 72 00 79 00 20 00 73 00 68 00 6F 00 n.t.r.y. .s.h.o.
01B52D8C 75 00 6C 00 64 00 20 00 62 00 65 00 20 00 6B 00 u.l.d. .b.e. .k.
01B52D9C 65 00 70 00 74 00 20 00 6F 00 6E 00 20 00 61 00 e.p.t. .o.n. .a.
01B52DAC 6E 00 20 00 69 00 6E 00 64 00 69 00 76 00 69 00 n. .i.n.d.i.v.i.
01B52DBC 64 00 75 00 61 00 6C 00 20 00 6C 00 69 00 6E 00 d.u.a.l. .l.i.n.
01B52DCC 65 00 2E 00 20 00 74 00 68 00 65 00 20 00 69 00 e... .t.h.e. .i.
01B52DDC 70 00 20 00 61 00 64 00 64 00 72 00 65 00 73 00 p. .a.d.d.r.e.s.
01B52DEC 73 00 20 00 73 00 68 00 6F 00 75 00 6C 00 64 00 s. .s.h.o.u.l.d.
01B52DFC 0D 00 0A 00 23 00 20 00 62 00 65 00 20 00 70 00 ....#. .b.e. .p.
01B52E0C 6C 00 61 00 63 00 65 00 64 00 20 00 69 00 6E 00 l.a.c.e.d. .i.n.
01B52E1C 20 00 74 00 68 00 65 00 20 00 66 00 69 00 72 00 .t.h.e. .f.i.r.
01B52E2C 73 00 74 00 20 00 63 00 6F 00 6C 00 75 00 6D 00 s.t. .c.o.l.u.m.
01B52E3C 6E 00 20 00 66 00 6F 00 6C 00 6C 00 6F 00 77 00 n. .f.o.l.l.o.w.
01B52E4C 65 00 64 00 20 00 62 00 79 00 20 00 74 00 68 00 e.d. .b.y. .t.h.
01B52E5C 65 00 20 00 63 00 6F 00 72 00 72 00 65 00 73 00 e. .c.o.r.r.e.s.
01B52E6C 70 00 6F 00 6E 00 64 00 69 00 6E 00 67 00 20 00 p.o.n.d.i.n.g. .
01B52E7C 68 00 6F 00 73 00 74 00 20 00 6E 00 61 00 6D 00 h.o.s.t. .n.a.m.
01B52E8C 65 00 2E 00 0D 00 0A 00 23 00 20 00 74 00 68 00 e.......#. .t.h.
01B52E9C 65 00 20 00 69 00 70 00 20 00 61 00 64 00 64 00 e. .i.p. .a.d.d.
01B52EAC 72 00 65 00 73 00 73 00 20 00 61 00 6E 00 64 00 r.e.s.s. .a.n.d.
01B52EBC 20 00 74 00 68 00 65 00 20 00 68 00 6F 00 73 00 .t.h.e. .h.o.s.
01B52ECC 74 00 20 00 6E 00 61 00 6D 00 65 00 20 00 73 00 t. .n.a.m.e. .s.
01B52EDC 68 00 6F 00 75 00 6C 00 64 00 20 00 62 00 65 00 h.o.u.l.d. .b.e.
01B52EEC 20 00 73 00 65 00 70 00 61 00 72 00 61 00 74 00 .s.e.p.a.r.a.t.
01B52EFC 65 00 64 00 20 00 62 00 79 00 20 00 61 00 74 00 e.d. .b.y. .a.t.
01B52F0C 20 00 6C 00 65 00 61 00 73 00 74 00 20 00 6F 00 .l.e.a.s.t. .o.
01B52F1C 6E 00 65 00 0D 00 0A 00 23 00 20 00 73 00 70 00 n.e.....#. .s.p.
01B52F2C 61 00 63 00 65 00 2E 00 0D 00 0A 00 23 00 0D 00 a.c.e.......#...
01B52F3C 0A 00 23 00 20 00 61 00 64 00 64 00 69 00 74 00 ..#. .a.d.d.i.t.
01B52F4C 69 00 6F 00 6E 00 61 00 6C 00 6C 00 79 00 2C 00 i.o.n.a.l.l.y.,.
01B52F5C 20 00 63 00 6F 00 6D 00 6D 00 65 00 6E 00 74 00 .c.o.m.m.e.n.t.
01B52F6C 73 00 20 00 28 00 73 00 75 00 63 00 68 00 20 00 s. .(.s.u.c.h. .
01B52F7C 61 00 73 00 20 00 74 00 68 00 65 00 73 00 65 00 a.s. .t.h.e.s.e.
01B52F8C 29 00 20 00 6D 00 61 00 79 00 20 00 62 00 65 00 ). .m.a.y. .b.e.
01B52F9C 20 00 69 00 6E 00 73 00 65 00 72 00 74 00 65 00 .i.n.s.e.r.t.e.
01B52FAC 64 00 20 00 6F 00 6E 00 20 00 69 00 6E 00 64 00 d. .o.n. .i.n.d.
01B52FBC 69 00 76 00 69 00 64 00 75 00 61 00 6C 00 0D 00 i.v.i.d.u.a.l...
01B52FCC 0A 00 23 00 20 00 6C 00 69 00 6E 00 65 00 73 00 ..#. .l.i.n.e.s.
01B52FDC 20 00 6F 00 72 00 20 00 66 00 6F 00 6C 00 6C 00 .o.r. .f.o.l.l.
01B52FEC 6F 00 77 00 69 00 6E 00 67 00 20 00 74 00 68 00 o.w.i.n.g. .t.h.
01B52FFC 65 00 20 00 6D 00 61 00 63 00 68 00 69 00 6E 00 e. .m.a.c.h.i.n.
01B5300C 65 00 20 00 6E 00 61 00 6D 00 65 00 20 00 64 00 e. .n.a.m.e. .d.
01B5301C 65 00 6E 00 6F 00 74 00 65 00 64 00 20 00 62 00 e.n.o.t.e.d. .b.
01B5302C 79 00 20 00 61 00 20 00 27 00 23 00 27 00 20 00 y. .a. .'.#.'. .
01B5303C 73 00 79 00 6D 00 62 00 6F 00 6C 00 2E 00 0D 00 s.y.m.b.o.l.....
01B5304C 0A 00 23 00 0D 00 0A 00 23 00 20 00 66 00 6F 00 ..#.....#. .f.o.
01B5305C 72 00 20 00 65 00 78 00 61 00 6D 00 70 00 6C 00 r. .e.x.a.m.p.l.
01B5306C 65 00 3A 00 0D 00 0A 00 23 00 0D 00 0A 00 23 00 e.:.....#.....#.
01B5307C 20 00 20 00 20 00 20 00 20 00 20 00 31 00 30 00 . . . . . .1.0.
01B5308C 32 00 2E 00 35 00 34 00 2E 00 39 00 34 00 2E 00 2...5.4...9.4...
01B5309C 39 00 37 00 20 00 20 00 20 00 20 00 20 00 72 00 9.7. . . . . .r.
01B530AC 68 00 69 00 6E 00 6F 00 2E 00 61 00 63 00 6D 00 h.i.n.o...a.c.m.
01B530BC 65 00 2E 00 63 00 6F 00 6D 00 20 00 20 00 20 00 e...c.o.m. . . .
01B530CC 20 00 20 00 20 00 20 00 20 00 20 00 20 00 23 00 . . . . . . .#.
01B530DC 20 00 73 00 6F 00 75 00 72 00 63 00 65 00 20 00 .s.o.u.r.c.e. .
01B530EC 73 00 65 00 72 00 76 00 65 00 72 00 0D 00 0A 00 s.e.r.v.e.r.....
01B530FC 23 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 #. . . . . . . .
01B5310C 33 00 38 00 2E 00 32 00 35 00 2E 00 36 00 33 00 3.8...2.5...6.3.
01B5311C 2E 00 31 00 30 00 20 00 20 00 20 00 20 00 20 00 ..1.0. . . . . .
01B5312C 78 00 2E 00 61 00 63 00 6D 00 65 00 2E 00 63 00 x...a.c.m.e...c.
01B5313C 6F 00 6D 00 20 00 20 00 20 00 20 00 20 00 20 00 o.m. . . . . . .
01B5314C 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 . . . . . . . .
01B5315C 23 00 20 00 78 00 20 00 63 00 6C 00 69 00 65 00 #. .x. .c.l.i.e.
01B5316C 6E 00 74 00 20 00 68 00 6F 00 73 00 74 00 0D 00 n.t. .h.o.s.t...
01B5317C 0A 00 0D 00 0A 00 31 00 32 00 37 00 2E 00 30 00 ......1.2.7...0.
01B5318C 2E 00 30 00 2E 00 31 00 20 00 20 00 20 00 20 00 ..0...1. . . . .
01B5319C 20 00 20 00 20 00 6C 00 6F 00 63 00 61 00 6C 00 . . .l.o.c.a.l.
01B531AC 68 00 6F 00 73 00 74 00 0D 00 0A 00 0D 00 0A 00 h.o.s.t.........
01B531BC 0D 00 0A 00 31 00 32 00 37 00 2E 00 30 00 2E 00 ....1.2.7...0...
01B531CC 30 00 2E 00 31 00 20 00 77 00 77 00 77 00 2E 00 0...1. .w.w.w...
01B531DC 6A 00 70 00 79 00 78 00 35 00 31 00 38 00 2E 00 j.p.y.x.5.1.8...
01B531EC 63 00 6E 00 0D 00 0A 00 31 00 32 00 37 00 2E 00 c.n.....1.2.7...
01B531FC 30 00 2E 00 30 00 2E 00 31 00 20 00 6A 00 70 00 0...0...1. .j.p.
01B5320C 79 00 78 00 35 00 31 00 38 00 2E 00 63 00 6E 00 y.x.5.1.8...c.n.
01B5321C 0D 00 0A 00 31 00 32 00 37 00 2E 00 30 00 2E 00 ....1.2.7...0...
.........................................................
下面还有很多,如果把数据后面的....去掉,可以连成一些英文和数字,但也就是前面那些数据有用,后面的全是网址,一般都是www.*****.com(cn),看的我晕头转向的,数据开头的意思是copyright (c) 1993-1999 microsoft corp.
#
# this is a sample hosts file used by microsoft tcp/ip
翻译成中文也就是接收的数据是测试版用户所在ip发来的,但是不知道数据具体发送到那个网址,如果用bp send在od下断点,就找不到明文,而是一些加密的乱码,晕死,我找不到它开始加密的那一段代码,好郁闷,我想如果要是能找到那些代码就能知道它发送到那个网址了,既然找不到加密代码,那只能从接收到的数据入手了,可是只是知道了接收的数据,不知道下一步改怎么办了,希望大侠们能给小弟一点指点,跪求金口玉言,跪求,还有就是有没有一种软件,可以看到我的电脑上的软件在和哪个网址链接,不要给我说是封包助手或者是wpe了,那上面全是ip,根本就不知道网址,希望大哥大姐给我点明示,谢谢了
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)