02-22-2019, 05:12 PM
(This post was last modified: 02-22-2019, 05:15 PM by monminamon.)
(02-22-2019, 01:29 PM)philsmd Wrote: in the capture test.pcap
if first packet javascript with salt then hash packet after javascript is VERY GOOD
if first packet hash then javascript is VERY BAD
if last packet javascript and NO more hash is VERY BAD
lol i still don't understand the difference
the two of them are "if first packet javascript with salt then hash packet after javascript is VERY GOOD" (very good )
look i filter the packets with http.request.method == POST then click follow tcp stream on the post packet !!
the first one that you said that's bad
salt
https://i.ibb.co/3fGnbgn/image.png
javascript
https://i.ibb.co/wQqpg80/image.png
the second one that's very good that you cracked
salt
https://i.ibb.co/0ZVs9hH/image.png
javascript
https://i.ibb.co/wBJ5VCb/image.png
i don't really get what's missing !!!
sorry again
