关于同一个帐号和密码，post两次抓包获取数据不一样的问题

我叫ゝ刘小杰

大家好：以下是我登陆界面用用一个帐号密码登录抓取的post信息

帐号为s10549793
密码：lxj598358262


POST /jsp/common/system/login.jsp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://109.117.14.16:1201/jsp/common/system/login.jsp
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; MS-RTC LM 8)
Host: 109.117.14.16:1201
Content-Length: 582
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: JSESSIONID=Os2LN0b1RYpeuRJ22VytUF5tsLSJeBgapyFmNNxIhVDUnLiLT82Y!1010883205



提交地址：http://109.117.14.16:1201/jsp/common/system/login.jsp
提交数据：ENCSYMM=iLb0YBJrwPOwF9jwLEJd6Q0QjV%2BQoAGBujpYuTKzY4GrSc41P%2FQYjF9dSA8i%2Feh2sp47Fb5D8ljC5BswHLZDZ3UUHZxADtAHVioWWMyAkx8vmdhITEaN9S44Qb4A%2FHEXwSfdAfC7%2FbjQjdp%2BXvCrZKDe2x%2FM5Zm6rTJz9EG5z2E%3D&SIGNCERT=&ENCDATA=5v5M37EgBP3%2FSIYb9mJX2pmm4yVJzdO1nfJIbCokrU8h0obGEVUED5rYT7HBcK3PL0idY7ZWAa0s0%2BHlHQ0dUC7RMgaEj1fUWcyRf3ceYDgraluU6lqOG%2BZhnzybBOiuqgkNfe4NMlUOVgQ0essVvsscjjZLez0Pz8U9BW4tVjcWzCRuMyCsTGyOHsWbJxI4KRZFmhiELMysbxEqiNtAcgwP%2FyVaqYQPXkLERnEOxO%2F93Zp3vDuirS%2Bdb5Kh8HdnKQ2%2FCt20kaBI6gkevVwI0I48usWoL1A%2BHkwwP8nteY8vUHaHLg%2BQlg%3D%3D&ENCALGO=DES&SIGNALGO=&SIGNVALUE=



UTF-8解码：ENCSYMM=iLb0YBJrwPOwF9jwLEJd6Q0QjV+QoAGBujpYuTKzY4GrSc41P/QYjF9dSA8i/eh2sp47Fb5D8ljC5BswHLZDZ3UUHZxADtAHVioWWMyAkx8vmdhITEaN9S44Qb4A/HEXwSfdAfC7/bjQjdp+XvCrZKDe2x/M5Zm6rTJz9EG5z2E=&SIGNCERT=&ENCDATA=5v5M37EgBP3/SIYb9mJX2pmm4yVJzdO1nfJIbCokrU8h0obGEVUED5rYT7HBcK3PL0idY7ZWAa0s0+HlHQ0dUC7RMgaEj1fUWcyRf3ceYDgraluU6lqOG+ZhnzybBOiuqgkNfe4NMlUOVgQ0essVvsscjjZLez0Pz8U9BW4tVjcWzCRuMyCsTGyOHsWbJxI4KRZFmhiELMysbxEqiNtAcgwP/yVaqYQPXkLERnEOxO/93Zp3vDuirS+db5Kh8HdnKQ2/Ct20kaBI6gkevVwI0I48usWoL1A+HkwwP8nteY8vUHaHLg+Qlg==&ENCALGO=DES&SIGNALGO=&SIGNVALUE=




再次提交：
ENCSYMM=WTL8XGEeyIM03WuEnLkwmmt8qjsoXxKJv0nCTxxIZ4zlcOv3dUccFzcTwKChOVfhVRP54kkcF%2BW37fFqZpTOPAF6rzmUITAvzErfEj8QTaI8dLk04nVWPxqbh02Z64n13PN6QoeU%2Bow0ScZ0ntacaiaKj6fSExAc8adEdCuwpUU%3D&SIGNCERT=&ENCDATA=x8e9wDtQftzMQk3Pa44BkGQi6%2BLfYCHbt6IIS3EmI1FMFxCQ7RRoySH81oh2FXAyVECN%2B45V11NpGovYIcz%2BAfJ6QmWbStGkGKytr3p4aqqNxNPvpPcqTwT2kYFrDGSoWjpXQzXqcYVDjh2l5RpPqz8MjyJL%2BiE26KxvLb3ngaNYvgX%2FRngSvZDb%2BPIWe3zvSu2mcliMcnV9wFMl0PzT8Ss7c2%2BycKWyqmDuooyvC58b3wNdG8vwhr3%2BTofsjNFrD41mn84vYEPDZBVtZAVK3ydApN2Vk6l4D2BiMD10X%2BEh48Qc58Sb2w%3D%3D&ENCALGO=DES&SIGNALGO=&SIGNVALUE=



UTF-8解码：
ENCSYMM=WTL8XGEeyIM03WuEnLkwmmt8qjsoXxKJv0nCTxxIZ4zlcOv3dUccFzcTwKChOVfhVRP54kkcF+W37fFqZpTOPAF6rzmUITAvzErfEj8QTaI8dLk04nVWPxqbh02Z64n13PN6QoeU+ow0ScZ0ntacaiaKj6fSExAc8adEdCuwpUU=&SIGNCERT=&ENCDATA=x8e9wDtQftzMQk3Pa44BkGQi6+LfYCHbt6IIS3EmI1FMFxCQ7RRoySH81oh2FXAyVECN+45V11NpGovYIcz+AfJ6QmWbStGkGKytr3p4aqqNxNPvpPcqTwT2kYFrDGSoWjpXQzXqcYVDjh2l5RpPqz8MjyJL+iE26KxvLb3ngaNYvgX/RngSvZDb+PIWe3zvSu2mcliMcnV9wFMl0PzT8Ss7c2+ycKWyqmDuooyvC58b3wNdG8vwhr3+TofsjNFrD41mn84vYEPDZBVtZAVK3ydApN2Vk6l4D2BiMD10X+Eh48Qc58Sb2w==&ENCALGO=DES&SIGNALGO=&SIGNVALUE=



所以我很疑惑，为什么同一个帐号密码post两次抓取的数据完全不一样？
求指教，求指导

{:soso_e101:}

wARtist

问题在COOKIE上
Cookie: JSESSIONID=Os2LN0b1RYpeuRJ22VytUF5tsLSJeBgapyFmNNxIhVDUnLiLT82Y!1010883205

看到没有？"JSESSIONID"
这是线程ID
说明POST的数据会同COOKIE一同比对，不用管这个SESSION怎么加密到数据包
只需要将这个COOKIE同数据一起发出去就行了，可以用精易的客户端子程序，自己看看
比本身自带的客户端好

chunge1

有点乱。。。。。。。。。。

inrblf

很正常呀。。这很容易测试出来

我叫ゝ刘小杰

inrblf 发表于 2011-11-2 15:30
很正常呀。。这很容易测试出来

？能不能给我详细的说下，谢谢了