|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
Connection: Keep-Alive
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D3 FF B3 89 74 3D 0D F7 2A B2 E6 8A 68 3A 72 57 40 27 D2 FB 79 2E 7E C0 B7 BD 9E 39 C0 94
|
|
|
"Time": 2106/1/4 13:42:52
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:07.674
|
|
|
Connection: close
|
|
|
EndTime: 09:06:07.792
|
|
|
ClientToServerBytes: 1396
|
|
|
ServerToClientBytes: 672
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D3 FF 12 37 F1 7F 4E 72 4C 6C 88 83 CC F1 64 09 91 CC AD D2 78 AB 94 CA 94 A4 7D DD F1 84
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D3 FF 2C 17 59 61 C6 CC F8 33 00 59 E6 2B C3 33 D3 C5 2F F3 EF BD AE F3 19 7D 77 34 7B A1
|
|
|
"Time": 2106/1/4 13:42:52
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:07.812
|
|
|
Connection: close
|
|
|
EndTime: 09:06:07.851
|
|
|
ClientToServerBytes: 922
|
|
|
ServerToClientBytes: 3179
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D3 FF B4 D3 2D 9B 75 0D 11 64 C3 B3 5D 14 94 D8 49 07 F9 7F C7 32 85 7C 17 68 E8 FC 87 24
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT kyfw.12306.cn:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: kyfw.12306.cn
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D3 FF 12 1B 86 5C 16 E9 D6 DD 1E E9 CB 6D 3B 3A 87 1D D8 63 BD F9 BA 52 0B 76 ED 80 3E 72
|
|
|
"Time": 2106/1/4 13:42:52
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:07.872
|
|
|
Connection: close
|
|
|
EndTime: 09:06:07.954
|
|
|
ClientToServerBytes: 970
|
|
|
ServerToClientBytes: 1120
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D3 FF 03 E6 D4 42 C0 EA 14 11 F3 85 A6 E2 3C 56 A5 E2 FB 21 C6 9C 97 2C 48 F7 4F 5C 92 C5
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D3 FF 2E 0F 9F 43 5C 3C BD 44 B5 13 49 F9 31 43 C7 D0 C0 09 1B 28 5F A9 60 AB AC 9D 21 45
|
|
|
"Time": 2106/1/4 13:42:52
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:07.970
|
|
|
Connection: close
|
|
|
EndTime: 09:06:08.013
|
|
|
ClientToServerBytes: 1050
|
|
|
ServerToClientBytes: 7088
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D3 FF 75 18 9D 5D E3 B4 74 FD 59 69 4F 77 D5 89 90 78 A9 07 75 16 CA 9E 70 86 50 40 84 31
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 00 A4 08 64 72 CE 09 85 E8 F8 B7 45 28 08 66 4B D2 18 07 36 15 9F 22 A0 61 7D 6C A9 3B
|
|
|
"Time": 1970/6/11 5:47:08
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:08.046
|
|
|
Connection: close
|
|
|
EndTime: 09:06:08.369
|
|
|
ClientToServerBytes: 1066
|
|
|
ServerToClientBytes: 14985
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 00 4C 12 1F AA 73 8D 9D EC 46 C2 6A 7E C8 42 63 55 91 A2 40 EC E9 E8 26 9F 8A BA EB 27
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
Connection: Keep-Alive
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 04 C2 8A BC 47 40 4B 32 9D AF 68 B5 06 93 D7 51 AF D7 69 62 21 E1 FA B5 06 53 B4 C5 63
|
|
|
"Time": 1972/7/26 23:08:12
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:12.636
|
|
|
Connection: close
|
|
|
EndTime: 09:06:12.862
|
|
|
ClientToServerBytes: 1412
|
|
|
ServerToClientBytes: 672
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 04 52 3B 76 51 2E 0E EF 2F D5 96 84 7D 95 6E 97 C6 4A 40 33 24 C9 66 72 95 55 BA 99 32
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 04 1F 0F 0B C4 7C 6C 3D C2 CD A4 2B 36 E0 66 BD B2 F8 F1 28 E7 77 9E B8 32 86 56 E5 16
|
|
|
"Time": 1972/7/26 23:08:12
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:12.880
|
|
|
Connection: close
|
|
|
EndTime: 09:06:13.119
|
|
|
ClientToServerBytes: 1396
|
|
|
ServerToClientBytes: 859
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 04 96 C9 9D 4B 43 3F 6C CF 6A 2F E1 16 C3 0C C4 FF 58 10 88 96 71 13 AB E9 51 DE A4 30
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
POST http://www.12306bypass.com/CloudCognition.ashx HTTP/1.1
|
|
|
Accept: */*
|
|
|
Accept-Language: zh-CN,zh;q=0.9
|
|
|
Accept-Encoding: gzip, deflate, br
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Referer: https://112.90.133.253/otn/resources/login.html
|
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
Host: www.12306bypass.com
|
|
|
Content-Length: 20445
|
|
|
Connection: Close
|
|
|
|
|
|
type=add&rand=WQfssmAAKtMdzjnCekKIQg%3d%3d&code=Ey5w%2bjRhMj1cuvcDbP1V%2fg%3d%3d&base=%2f9j%2f4AAQSkZJRgABAgAAAQABAAD%2f2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL%2f2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL%2fwAARCAC%2bASUDASIAAhEBAxEB%2f8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL%2f8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4%2bTl5ufo6erx8vP09fb3%2bPn6%2f8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL%2f8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3%2bPn6%2f9oADAMBAAIRAxEAPwD3%2bivPNS1bUJdPlW2XWIJZ550EExgZ4mwMplZDkA5IIJwGA7Vd8P63d2Wi39zqC3k32C3VmR9gYkKSQPmJyeMZxQB21FcPqV14igvb%2fVfs2qWlklsh8qKS1fGzeWbDk9iOnpU%2br6tqVsohtdYij2W48w3GiT3DuxGdweJ0QcEcAcEHnsADsaK4Xwrq2p3un6fBd6zHIk1oqjydGuIpQxQYbzndkyPUrg0zXZdR0fxLpVqmq65c2k9rdTTpbpC8i%2bW0IDAbMkASNkAEnjAoA72iuH1C6iNlpk1tr11d2lxcPula7WDpE%2bFLoF24YDIIyCMYzxXKXOoapB4f1W4k1PUY5LfT7qaOctcxqZlVygjJkZWA25ywGRt4OTgA9jorh%2fEev3507xBFb3OnWwtN0S75mWU%2fu1bcMdPvcfSpdS8RahBZ6lEtxYNLHps1zHNZuWKMm0DIOR%2fF%2blKTsrl04OpNQW7djs6K8t%2fte%2bWGCAXOvLM9zsuws0MsxHkGUeWfuKMEE%2b2e9Ra%2f4hktvDVguma1qkEt%2bgWOC9MJdkZjmV5D90EHAO4AYHTBrneJik3Y9eOSVZTjBSXvPz89dL9vu7Hq9FeZaHrl5LqmnaWNcvCsjeWn76yuOFUthim5uQOp596ojxbq41DUzFqFrK90lwDAWZfsQh%2bVW64GRljgZJFH1mNr2BZHWcnFSW1%2bvd%2bWmz%2b63VHrdc74q8Tnw3bibyrJl2M5N1ei3zjso2sWPsBVbwje6kby80q%2bvYL1LG3tzFcxq2ZQ6sdzEscnCjn3rjvG13O3iqQRQR3UZlhjkZY%2fN8qOINMyBcjJJHzAHoFHU1vCXMrnmYig6FR0277fc1dfgzrvDfi6fUbe0bUo7BPtTbI5bK7E6mTBfyyAPlIUEnnHHXmui0vUodX02G%2ft1kWCYbo%2fMABZc8N16Ecj2Neb3tm0cUjQXH2gT24Ed2kZRZJr2bYzIMnGxBwMnANdNqU9zDqUGkQCGK0to0lVUZgSqjgNgfdzxgdfpVGB11FcLoWtXt74gkkvPOYl3RIIQZViXJADFSFTpnLLkg8Eiu6oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA5G48H3F7qPm3d5E1r9rluFiECNsDLgffVgxPc4GOMdyYdN8K6jFp2pWlxFp0SahOiyxLtlTyAMOMCKNSzDIwVwM5ycYrrvOk%2f59pfzX%2fwCKo86T%2fn2l%2fNf%2fAIqgDjR8NdFJKPpOiGJmuFJGlwBgj8xkEJ95PujsR1ya0zp%2bvxypOh0%2baV7CO2nDSPGokUsSygKeDu6e1b%2fnSf8APtL%2ba%2f8AxVHnSf8APtL%2ba%2f8AxVAHP6RpetW13pK3q2QtrCye3LQTOzO2IwCVKgfwHv3q9d6VPP4s0vVVaMQWlpdQOpJ3FpGhKkDGMfu2zz3HWtLzpP8An2l%2fNf8A4qjzpP8An2l%2fNf8A4qgDK1vS7y7ksX0428TQTSPJ5hZcho3UkFed2WBzXM33gzX5dO1i3t7%2byLajYzWjLMowS6kBi4Tfxk9SRz0ru%2fOk%2fwCfaX81%2fwDiqPOk%2fwCfaX81%2fwDiqAMrXPD9rqOk6jFBZ2v2q6jYeY8YyXIABJxnoBz7U3WfD0N7o99bWENra3VzbtAJvKAwrYyDjscVr%2bdJ%2fwA%2b0v5r%2fwDFUedJ%2fwA%2b0v5r%2fwDFUmrqzLpzdOanHdanOv4St4dRtpbCC2trW3gmxFGm0vM6hAxx227vzqvceEprnwxo2mloUubRrYTyqSCUjPzBTjrycZFdV50n%2fPtL%2ba%2f%2fABVHnSf8%2b0v5r%2f8AFVHsYanUswxC5Xzar%2fg%2f5s5KHwheQeKrK9S5DWFo7OvmzF5GJQrjbtAHJPOTUOm%2bEdXs9Vt7ie5sJraE3m2EI2R5xyAT%2fEPXpjtmuz86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qp9hD%2bv68i3mmIas7bW29fx95mD4Y0K80u6v7q9Wyia5SGJILLd5caRggYLAHJ3GtGDw%2fp1tPaywwbGtfMMYB4y%2f3ifUn1NXfOk%2f59pfzX%2f4qjzpP%2bfaX81%2f%2bKrSMVFWRyV60q83Unvp%2bCsZl74btL%2fVYL%2bWe7BhdZFgWX90WXoSv%2bGKZf%2bHluPN8iWQNOx8wyyu4VT12qTj%2fAA7VredJ%2fwA%2b0v5r%2fwDFUedJ%2fwA%2b0v5r%2fwDFVRkYuhaVNp2qXmy2NrYqixxJ5gcSkfx%2bo9McfSugqHzpP%2bfaX81%2f%2bKo86T%2fn2l%2fNf%2fiqAJqKh86T%2fn2l%2fNf%2fAIqjzpP%2bfaX81%2f8AiqAJqKh86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qgCaiofOk%2f59pfzX%2fwCKo86T%2fn2l%2fNf%2fAIqgCaiofOk%2f59pfzX%2f4qjzpP%2bfaX81%2f%2bKoAmoqHzpP%2bfaX81%2f8AiqPOk%2f59pfzX%2fwCKoAmoqHzpP%2bfaX81%2f%2bKo86T%2fn2l%2fNf%2fiqAJqKh86T%2fn2l%2fNf%2fAIqjzpP%2bfaX81%2f8AiqAJqKh86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qgCaiofOk%2f59pfzX%2fwCKooAmorkPiLeXVl4ft5bS5mt5DdKpaKQoSNj8ZHbgV5mPEGt%2f9BjUP%2fAl%2fwDGuqlhXUjzJnLVxSpy5Wj3uivBv%2bEg1r%2foL3%2f%2fAIEv%2fjQNf1r%2fAKC9%2fwD%2bBL%2f41p9Rl3M%2fr0ex7zRXhH9v6z%2f0F7%2f%2fAMCX%2fwAaP7e1rtq%2bof8AgS%2f%2bNH1GXcPr0ex7vRXhX%2fCQ6yfvapfH3Fy4%2frR%2fb2rnprOoL7NcP%2fjR9Rl3D69Hse60V4S2t66Bn%2b1r8%2b63L%2f410nx61bUdH8DWVxpmoXVjO2pRo0lrM0TFfKlOCVIOMgHHsKwr0HStd7m9Cuq17LY9Sor4lHjnxd%2f0NWuf%2bDCX%2fwCKpf8AhOfF%2fwD0NWuf%2bDCX%2fwCKrnudfs2fbNFfE%2f8AwnHi%2fr%2fwlOuf%2bDCX%2fwCKpT438XgZ%2fwCEp1zn%2fqIS%2fwDxVHMP2TPteivib%2fhOfF3%2fAENWuf8Agwl%2f%2bKpD468XD%2fmatc%2f8GEv%2fAMVRcTptH21RXxGfHfi7%2foatc%2f8ABhL%2fAPFU0%2bO%2fF%2f8A0NWuf%2bDGX%2f4qmQ0fb1FZmuSvDZI0bshMgBKsRxg%2blYUd7dqci6mI92JqXKzsVGDkrnYUVyv267brcSfQcVg6v44ttJZ4ftU9xcKSGjik%2b6fck49al1EtzSOHlPSOp6RRXicvxQ1Vn3RW5ijPTe7Sf%2bgkH8hU9t8R9TmKvmKSMH51V2BHt16%2fy9Kxli6a3OqOV15LQ9lorznTPHEV6%2flTyXFrMDjDuWU%2bmDx%2fKuhFzORkXEhHqHJFawrRn8JzVMNOnpPQ6WiucFxcH%2flvL%2f32a0dalkis0aN2RjIBlTjsa0g%2bYz9m%2bZRNKiuOW7uxgfa5iB1JkNQDU7mSV4EvJjIgIceYcjPT%2bY%2fKtOQ3%2bqS7ncUV5zr%2brX1lpN3Kl5OvlwsVbzypLYxjOeOenvXjE3jLxHbafsbX9WadVYu%2f22Q4fdyMhuwUD%2fgVNU9L3Ilhmup9W0V5L4N1PWJdLuY7zUrq4aOcxRTNOzFgqRqTnP8Ae3fjn3qz4v16903wubqK%2bukmlkjVCkrAglwx79Nu78qFC7sV9VaV7nqNFfO%2bueIvEUUP2UaxqMU9qIVkdLtwXPlsMcHrkZP1Fel6Tdaj%2fZVmZ724kl8tfMYyHJOPr9aqVFxdrlfU3a9zvaKKKxOM4v4nDPhu2%2f6%2fF%2f8AQHryoLXq3xL%2fAORctv8Ar7X%2fANAevLAOMeletg%2f4R5WMX70TFGKdijFdRy2ExQBTsUoWi4WGEUYp%2b2l20XCxHiup%2faL%2fAOSfWH%2fYVj%2f9FS1zO2u4%2bOGnR6n4LsoZJ%2fJC6ij7tu7J8uQY6j1rzMxmoxUn5%2foepldOVSbhHd2%2fU%2bYrLSri9jeSGJnVASxCnioGt%2fKYCQ4OOnevXPCV6nhix1G2Ey3H2yAxbnhAKk9xyc%2fSuU1fw7aR2F1ew3TtJCA%2bzygN2WA%2fDrXgRxkJT5Uz6aWW4iKba2OWtbU3DrFjG84U1qaj4Zv7C3hkurZ4VZdxZwQOpGPfoa9F%2bH3gC11LTLDW5db8jzGZpLYW4JwrkY3FuMhf7td94z0W28SWtrbT6pFbCGPac2ofccdR8wK%2fTJ%2fTmp1JJ3TOaNKT0SPlyVVRiqnOO9Qn611njfQLfw3q0VnBe%2fbA8IlMnk%2bXgkkYxk%2bn61yp611wlzRTMqsHF2ZFj3pCKeaaa0uczifc3iH%2fAI8I%2fwDrqP5GudXB6DntW94mbbpsZ%2f6bD%2bRrjNQ1JdP06e6JGY0JUEZBbsD9TxWNRpM3oRckkupjeLvFhs92m6fIRcf8tpRxsB5AHv0%2fz04CPcXG4kknk4qCeee5uZGVd8hOZJpDlQSTnn%2bI%2fl3z04emlrK264LXB6hX%2b6f%2bA9P5n3rgqST1bPosNS9mrRWpYTULCEHzbiHCtgqrBiOfQZNMnvkhnhurdZw5KpKPJcLIp4z9zr0P6Vp20KxxokCCLZySigAD%2bX%2bcHrmrgYzLHEI03bx5hHJ2qQx%2bhzj8ehrlUoN6I3rKdld6lNruEX9tNHcR7JHMLBvlYAgkHHXqoHIx82K6zw%2f4jbT79tNuVJtgFbJ6xFiw%2fL5eR%2bVZ97aBxFG6bisyloyOMc84%2fP8AOqD6YsOpo1nm1EkTBiq5UspBAK%2f8CJ45%2fWojJQfPHRnLUj7T3JrQ9fC8A%2f5%2bv%2bfQ1o66M2Uf%2fXUfyNcn4VvnutKEMuBNBhGUNnA7fh1A74HPPTq9f%2f48E%2f66j%2bRr3sNNTSkup4M6bhWUOxx8rzHVI7eNzFG0ZJYEY3ccc9TjPArL2Sx6zI9vARIPmwZMqq7eOegyc%2fp14FWtbvDaLFtcork5AzubHOBx6A1xsfiS4h1FpZdigjymFtiKQgYzj1PQ%2b%2f5Cu6MHJ6Hr06btc3dQ1CK50bUotTjMkQtnkfauMKq549cdiM4PfNZPhjw%2fp1rplprWqypHcSRhtrbYUC5G0E8Fui9SRz07nfimjvNHSXR5I5WONzn7%2fPXODn0GOOnX14PW7y50zUo2CC4umySska7XIOA3A65ycdsZJpwXRmdSnGf7w9Li1zQxsih1OxG1dqIlxHxjoAM9Pp%2bVcxr3iDS5Hhuri4WaApmyssNtc%2f8APR9p78qA2V27ic9ucvPEmqTW0TGcW9rcuCViwgkHT5cHePmBB7%2bhOanvLnzNEuNUgiTzElcXSwnyzHhcBsgALlhnA4O8jryNFBI4pc10mZkTXPirWI7m3huFE12rZVSUVcYY7uTwAOvPPWvYpXNtZSOke9kX5VBOT%2bQJ%2fIE%2bx6V514Yu2XWomtWP2edFjAePO7ggk4xj2HI4Iye%2fpuQMYBH8Oe3uP8%2bvas6mrN7OK1O4ooorlPGOM%2bJukW2t%2bGIbW5mgixdK8fnrlWcK4Az0Xgnk8ce9eH39jqXh%2b6ETPcRIw43MXUeyg5AH04r3L4kDPh63%2fwCvtf8A0B685iuQbdbS8hS7s8%2f6qT%2bHnJ2sOVNdVOjJw54PU5alaKnyTWhykGr3UGBcBJo88twrY%2bo46e341s2t5b3oAikG%2fGSh4boOx6jntx9asT6JpM202d3cWbHLMlxGGVTgHbuU8%2b3yjH5mufvbK40y9aGa3aNlXd5i8KfQg98%2bx9ferhXqU9JoiVClU%2bBnQgUuKy9J1tba4mOoQ%2fbIhAywoxKgyY%2bUsVIbHr1PP4irf%2bKHj1eY2tvai1whRHDEZKDcB8%2bfvE9z6dq2%2btxvqYPCT6G9tPalCZxjv0z3rnLSTxHqoaK1SaQbt2I4VBH%2fAALGQPxrUHha5lSIaxqryRodyQLOZCOOeOdpH4dTzU%2fW7u0UV9UsryZK1%2fYq5jN1AZMgGNZAXJJxgAHP5V2X7QFy9p4EsZEOCdTjH%2fkKWuas4YtPVfsUKQMP%2bWijLnnruyTnpW3%2b0d%2fyTzT%2fAPsKx%2f8AoqWsMXzTiuc6cFJU5N0%2bh8%2fLrsyrt3de4Jq5Z6lNqEMlgjZM42qGboew%2fMCuWyQc5ORUsNxLBIrxOyOpyrKcEGvNlh4W93c9mnmFTm996HrHh3V5dE0mKwmfY8RbgMD1YnqPrU114oDFiZM%2fjXk7X9wzl5Jndz1YsSTSG9kYYLk%2fU1xSy9zleUj1aedQhFRhHY2vFOorqF7HKrZ2xhf1J%2frXPMxpHdnOSTTa9GlTVOCijw8TiHWqOfcXcaQk0lFaHPdn274yfy9HhP8A08D%2fANBavLvE9w0mk%2bSshQSSAMR6cn%2bgr0vx3%2fyA4f8Ar5X%2fANBavLdXjMliSDjYwY%2fTp%2fWuPEOzPSwCTaucxHEFOI1XaBxtXgCp40YZXnnsMf5%2fzjvQI8kgH6etLJNHENu0yO3ypGp%2b%2bf8APftXlv3mfT8ygrk73K2rIXRpLmRtkUCHDSN1H0AGM%2bnPXjN%2bzT7OVkl%2ba4YgOIwdoGfuAAH%2b936kgnk5Obb2zxyCWRt13LwZCBhBydoH90dff%2bWpayeXiQRgs5O1c8DHP5nn149NxzjOSirR%2bZnyym%2baZrlQV2vhSvI3Dk%2bn1OBz9RjvVbUBGYYZztJilWQ8Ywp%2bVjj2Bz%2bAqtBNG10I4lYlFLeoBJx6j0boT06dqtuiyo4Zco4KsSSD6cDp6%2f8A1zmonK1kZKOsmdN4UdhdTRFeHjDZPfBxx7c122vjOnqP%2bmg%2fka4zwWjSRS3Eg%2bYooyBwT3%2fpXaa8M2MfIH70dfoa9zLU1SSZ4WLaeJTOTu7C2vSnnReZ5ZBGMj%2bXUex49q8t1iy8jUr6BAUiDs27ajKf4gPmXOcEcZ6%2b3NesuPlPOQe3Y1yPjOytI4RqLTyQ3G5QpQgKfQnoegYZz3Fe3RlZnbh5Pm5GcPoOt3Wka8Z0Uy2suPMRU%2fg45xjOfU89DycV6ZNaafqa2t3cQ2l3bnCgzIr5LYwVyDzu2jHHXvgCvKi8DlonmlQyDJGwAMcYJ3HnB4wee%2fWtO18UahosUGmIxuPJkMsm3G7YAfl5HHPOcc84Oa0qU03oKdPlujsPEfhn%2b1pU8mHCQxq3ljKI3DAAEenGQQBgdeTVTwl4dmit76O8KyQzgrIu0%2fOxxuJUjBxyD25x2wM0%2fEa5WKZoNMWOKNW%2f10j79%2fIxkj5jwPzFWtC%2bIFky%2bXc20kQDEvISWxkn6%2fz71k4yRDinobEXhW30hvtNmZ5VSUOy7RIzL3wRgn5hv%2bueucHqIz5ig5OCoI38NjtkHGOvcVVs7621CBZ7adZowchlPT68DmrWdwyCCtZkTb2Z3FFFFcx4pyHxHGfD1v8A9fa%2f%2bgPXmJGR19ua9P8AiIM%2bH7f%2fAK%2bl%2fwDQHrzaJ3hlSWNtrowZSRnH4d69PC3VK6PLxSTq6j4NPuZtrRwsqMch3G1cfX8D71k%2bJ72EWiWUU1w%2f2dtwMp%2bUg9AqfwkZ6ZOefbPU3V9%2fam5zdG1nIxh9zREEjkADIwOcY7daxjHbWF5YTM0d5dvdHDPFhcCGRujdCHCt0z8p9a5qs61SXK1odNKnSgr31OLtIp7%2b7jtIQUZxl2ZThV459%2bMdO5613MEGmW1tBHb6NbGSMHdNLucuT3IPGfbp%2fIVbOFlvNQdgBmVQhIx8nlpj8M7v1q8FGOSK3p4aCXvamNSvO9ojpLy5mTynnbywABGmFQY%2f2RwKi2D0qQIDxvA%2btSeQMZ81P1%2fwroSiuhzu76kGK0%2f2jv8Aknmn%2fwDYVj%2f9FS1SMJHcH6Grv7R3%2fJPNP%2f7Csf8A6KlrjxbvynbhFa58wUUU5Mbhu6d64jsEopzgZ%2bXOO3NNxQNoKSnY4ptAgooooA%2b2PHX%2fACBIf%2bvlf%2fQWrzqSMSIyHowwa9J8apv0aIf9PC%2f%2bgtXnjoVNcta3NqehhW1G6OTuE%2bxyN5gxt4JHf0xUFtGVmeW4A8wggj%2b6vcfWujvrKO5AJGJF%2b4wrHlhlRsFefZa82pFxXunv0aqq25ugyMoJC%2b7AUhjgZ6d%2f5VOm1yoJkUMf4T94E9OOMcmq4ypA5%2bnepvnlRUQ8vxuzggHuPpXHy6nZKXuk2mFHeedchZvljw3RF4HTgZO5v%2bBVsQKS4KqSx%2fhAyew%2fP6VWs7VnCQwRFm4CqoJOB2x19fwrudD8Om1Zbm82tKMFU7KfU%2bp%2fzzVU6EqtS%2fQ4a1eFKna%2bpo6Hp%2f8AZ2lxQH%2fWAAvz%2fFgcfyH4Vs69%2fwAeKf8AXUfyNRLyvUkdql17%2fjxTr%2frB0B9DX0VCKjoj5zmcqqbOZeREIUsN5yQM9cVxvjYMqWsgLLGN43HKhSccn%2fPb1qHV764uNZnR4zmM%2fwCjSA4MbY6cY43Kc59R1%2fh2L921a0t7BYwLi5wS5XKxABSxHQnhgO3XqK9NR5Gm2exTXs5Kb2PLbDT5dT1eCOPCRMfnwDyd2DzjOMHv2DdPu1qXsKQW1%2bXVl8vUFtrXAwFRRjI444YEkdc5xmu70nw3ZaHIZWdZJeFjkZQu0deM5568%2fX3zy%2fj8yyXoB4hjRSGGCGBPU%2bnVufatFJuQW5p%2b50OaMUF%2bqSmNfOQ7g%2fque%2fvwfxHTmntYlH8xXOQevKseehOc%2fwBegOetaeg6PLc6lbxJBhFcbgnIVABkk9j8mAfavTYNG0%2b2uftMNrHHKw6qOPwHQHjqPWqnVUNzeVSNNXa1OR8HaRfRXyXwEaWj7t3ABfjHIHuM13wzwQo%2buaFwgwBj05pVH94D8K5ZT5nc46tV1JXO2ooorkPCOT%2bIXOgQf9fS%2fwDoL15qFzXsHiDRf7esI7X7QYNkok3BN2cAjGMj1rn2%2bH7OXLanHl8Z22YXH0w3FdtCtCELNnFXoynO6RwQXOfU%2btVrnS4rnUbK%2baWVZLMuYwhGG3DByMV6L%2fwrwf8AQU%2f8l%2f8A7Kl%2f4V7%2fANRP%2fwAl%2fwD7KtniKT3ZmqFRbI8s0i11CLxFrMt7taOURG3ZMlfLG%2fAzjqOM%2b5963dtdv%2fwr%2fwD6in%2fkv%2f8AZUf8K%2f8A%2bon%2fAOS%2f%2fwBlUqvTXUcqNRu9jidtOWIuwUAZPqcV2v8AwgH%2fAFE%2f%2fIH%2fANlQPAPOf7T%2fAPIH%2fwBlQ69PuJUKnY4z7NhwGdAOMkHOPyNT%2ftHf8k80%2fwD7Csf%2fAKKlrrR4Bx%2fzE%2f8AyB%2f9lVnx%2fwCC08daBDpclzHbiK5W4DyQtIOFZcYV0%2fvdc%2fh3HNXnGVuVnTQhKN%2bZHxVTlUk9O1fRs%2f7OtrLA0aaxaQOTkSx2EpZec4w1wRjt0qVf2e7VSx%2ftSxyXDD%2fQJsAAYK%2f8fPQ9T344IHB5jpSXU%2bfodNmngSRFJByP1pJNMmj%2b8hr6Xs%2fgnbWkPlrqqD52balodqgsSAN0jHABxySeOSade%2fBW1utuzVvKwAD%2fAKLuyfX79cbniOd2jp6o9SKwfIrz19H%2fAJHyzNC0TYYYNR19F6h%2bzml7MsieKPKAXGP7Pzn3%2fwBYKp%2f8Mzf9Td%2f5Tf8A7bXXG9lfc86ry8z5HofP9Fe%2f%2fwDDMv8A1N3%2fAJTf%2fttH%2fDMv%2fU3f%2bU3%2fAO21RmezeJ4vN0xF9JQf0Ncc9iT25r0K%2btPtsAjL7MNuzjPr%2fjWf%2fYC4%2fwCPj%2fxz%2fwCvWM4OTudNKqoqzOCfTSe1VzpYc4ZNwHqK9D%2f4R5f%2bfgf9%2b%2f8A69KPD4H%2fAC8D%2fv3%2fAPXrJ0GzojilHZnnq%2bF4ZSNysPXBrTs%2fCFij73WVxjkMeP0Fdmuibf8Al4%2f8c%2f8Ar1Kulbf%2bW3%2fjn%2f16Fh0ugSxsn1Mqy061sY9tvAkYxjKjqPc96uDNXRp%2fH%2bs%2f8d%2f%2bvS%2fYP%2bmn%2fjtaqFtkc0qvM7tlQDNQeLrtbLRllYr%2fAK0ABmwCcHvz%2fI%2fStMWWP%2bWn%2fjtU%2fEOhJ4gsIrV5RH5colBKbxkAjpkf3q3o2U05bBTlBVIuT0PEJo2Ek1ykbOksrSfMocNuJLDgA4I43cElsZwAa1bjX5rCwSPBkniBQSmJ8cADdkAgk5JxkcE5NdjD8MQl59ol1ffxtKLahQFwRgDccdaafhZb%2beJl1BUkHIdbb5s4A5%2bbkcYxXXKpTk7N6HsfW8Na3N%2bD%2fwAjzmeRnAnuIZ7sEkmQy8J0H%2fLPoMgnk%2fjXUajotncrpFpOp3uSg6sXjVSxBPJx6c966iL4b29vdrdQ32yTZsZPIzG3qSN2fXvWg%2fhS7MIMeqRJchjiUWmQV24wV3564PUVU68PsmMsbS0cHYw9N0e00xGS0gEQY7mbJYnHPJPPHYe5qW6vrWyj3XNzFAG5ALAZ5x%2bPP8qsX3gnWLuxlhi8SrazShVaSKyOABvztBk%2bUncvIOfl9%2bM%2b%2b%2bFcl4bcnXnzDF5QZ4XLHJLE5WRf4mY%2bmNo7ZOMKkZO8zH6xSbvKX5ktjqVrfxmazuY51xyUbP49sD8KuluhAB%2bnSjQPh6mhRTgarLcyzbd8kkSjpnGMH3PUmtr%2fAIR%2f5sm5z%2f2z%2fwDr0SnC%2bjFKvS6M26KKK5zzANJQ3SuU8R%2bLrTRrr7K8ymbyzIYg2DtAJJz69DjI%2btTKSirscU29Dqs89aM%2b9eYj4j6VO80EouS8S7hj5t2OOhwwOc8EdP0zV%2bIdnJK4tEuYtgbcGOxxgE%2fdPPYj8BU%2b1h3G00z2GivGYvil5F20CXc5IYiQyqWCYHfOSOw7cnnHNdfp3jxbhQ0sCvGQG3RkhgCMjg9%2bncdatSTdkKx29FULHVrLUR%2fo84LkZMbfKw6dj9R04q93piFrn%2fGNxPbaRE9vNJC5nALRuVJG1uOK6CsTxRam9s7SDnDXS7iD0AViacdxS2OGGq6mf%2bYjd%2f8Af9v8acNU1P8A6CF3%2fwB%2fm%2fxroT4WsyMJPMPc4P8AhUb%2bEnCkx3YLdg0WB%2bea2ujGzMT%2b1dS%2f5%2f7s%2fwDbZv8AGj%2b1dR%2f5%2fwC7%2fwC%2fzf41YvNGvLIZkjDIP40OR%2fjVArimrMWqJjqupf8AQQu%2f%2b%2fzf4006rqf%2fAEEbv%2fv83%2bNQkUxhwaLILkjatqn%2fAEEbz%2fv%2b3%2bNQnWNVz%2fyE7z%2fv%2b3%2bNRuDURWiwXPSfF9xPbaTE9vLJE5nAJjcqcbW9K4z%2b19RI%2fwCQhdZ%2f67N%2fjXX%2bNc%2f2NDg4%2fwBIX%2f0Fq4UZA9a5zctf2tqO3nULvP8A12b%2fABpp1bU8%2fwDIQu%2f%2b%2fwA3%2bNVTz1FT29lLcoWRkOHAKltp255I4OTjOB3PGR1ACHnV9S%2f6CF3%2fAN%2fm%2fwAaUatqXH%2fEwu%2f%2b%2fwA3%2bNT2nh%2b7ZJUmvbSSRlAidLZwEJ6E%2fvPnHPTg%2fwA6zmsNRt5VSe1%2b8SFkhcyITk8HgFeFySQFGcZJ4pFNFv8AtbUuf%2bJhd%2f8Af5v8aRdW1LP%2fACELv%2fv83%2bNUg2Rk5we%2f%2bf8AP0pchSKZJabV9S3%2fAPIQu%2f8Av83%2bNei6zM8NpGY3ZS0gXKnHY15ceWzXpuvf8ecP%2fXZf5GplsNbmW93cgkC4l6cYc5rOGvXEeoJazSzo0h%2bQByRtycEmnzhtxC9SvBrBlinhuy8sqPvTa373G4k%2fLkdsc46daKceZFSdjq2u7kHH2iXj%2fbNRG%2buQR%2fpM34yH1rPtLuDzI7RrpZbgRbz7gEAnI7DI%2fMVT1TU1jimgtS7Tp990xiIE4y2e%2fPAFKSaZV1Y0dSvbpgixalJAysWyZiNwxyOvuPxqrpGq6iJjaTXdw8inMrSOXO49gRwBx2%2fxrL1C2g%2fsmO6gImiFthA6cspHL%2fU5BzjJ9ecG3ps0xZLeYxSusasZI0KAE%2buSckncSf5ZrVfwzO95nSfbbg4xcS8f7dI13c5Y%2faZR%2fwADNUwQMgZ3AUvmHBGAeKwbNWjtaKKK1MivfXCWto80hwiAsT7AZr5m8Ua0Na8T6jcLIU8xtylXXOFABT15UDA7njvXtfxV1U6T4KlkVgpmlWLOcfwscfjtx%2bNfOjF4rWS%2fKvtkuAhLjOT1zhTnOd3AA4HUd8KzuuUpF29uDCgaNi33iZ0lZFkEj4O9Oq%2fKOdpxnjPq2K5SL5wzRwsQl3C%2bSWmOeRkZU%2fKM7eevNQLCZg87BbieMI4UgmTfkjBzyc5z8p6nJBwaswXf2a9SG2uFWOXbHubBSQ4JOScrt3bFbB5wemTXJbQq1yOKI2Esd3KI5cIsuN5UOGwAwLffwc546gjtVyKa5ia9ubVpYxJJKwmYhAnJcZwecqDwMdzmo3kyitMtuimEtvSMI2du8AqvyhWMhGMbeBxwcxAMJmSzuQjZ3ybow%2bVGHG3Iw%2bMKSxxkseMDki3fRjaO1tfFVx56wxtAs0eCWyTuJwcjkEdffjmvWvCWuPqtqUn3mRM8t169DwM9eD%2bfIr5tBmRciFVkjZRKobJICALsOORxnPPUV7Z8O5lEcEgkLCViPwxgD%2bX%2fANeuqlKbeopWtY9LqpqIBgQns%2bR%2bRq2OlU9T%2fwCPZf8AfH8jXStzJ7FNWqUNgZqqjZqUtgVTIRDdyZQrnqMVUstOtEBZoUk3Hd86ggZ9KfcuOangwAoHYU9kMfLplhJHta0hA%2f2U2n8xWZc%2bGrSTcYJHiz2%2b8MfzrZZqiZutCBo4vUtHn09BI7xvGW2gqf8APpWUa7DXplXT2DgMScjI6c4%2frXIcetaGbR6B42JGjQ4%2f5%2bF%2f9BauFJzgZFdp4%2bsrm%2b0KCO11FbCRblXMjhdpXa2QSwOOuenbHevI2j1OaaS3TVJb2WBi0kdsoXJABxuCg4%2b6eOOeSQRXObnRrLF54t%2fMUTshcJu%2bYj1AParttJNbSrLyUYHOCOmOcVyOiWGoXYXFstrb78BnXy1lIJzjnrz69umc1sX2lQQxC6a5eSdT8xZ9ygkFcjHAOCR64JpIdkjrND1m31G8dFLghio3j7%2fuOemMUarq8UJeCBg8nRj2X%2f69ctolwLNTgrnJGSc9R6Vc1C%2bWCS3Y28csR%2f1xDbCOwOecckU2PSxF945DjnrwOaCB6ZqtPe%2bSzkQtMi%2ff8pfnQ56bepGAeRz6LzU0cscqiSKWOSNhlWjbII9QRkfrQTaw45%2fhWvUdbz9jTAB%2feDv7GvL2YDqeK9Q1uTyrJG9ZAP0NKWw1ucrNNEk6JK2HccDqOoAHA9TXOeIdJe5czrJD5MxHnwuDucLggKQcg5GPo3cgCtjUy7GMh1UZIUkgEN2xn8axvtKyJLFMszLJmPZzkZx84z0Izx%2bmOtTSfKzpVHnjoXtKghi1O6nZm%2b0OsfmAuCATnkAcDp%2bOOgOatv8AZYoZwessmJDgsXz2P6genTvisVLK00y1iENqS9zteVpSXd3H94jqfmOBxye3YOzULD7MCHlff%2b7lTIYbTuAYZK9Rk8kjoM5qpSTYo0ZcupLdG5WBLOK1iRVMcaFpN0hQA4%2bXABIGDgEjqecHJfyahLbwSWlyI1yTOzqF%2bXgl1HUgcjB5OR7GqlpYyi4SJ4MeSu13csGYMM5RgQMqd2P7oY4I5JbO72scQltzAnlyBkb593KMxwo4BIbt3zjNVCpBu0SakLI0NH1e%2fvCtrewGKcp5u8DaNnBB6kHOQOOnoDxW6kh3EnjP44ritF1gG5ma4jVLnoZVQRgBs9C3U%2fLj5iAMDPGSens0ZISwiWFNxyG3Oxzg5LHjP0yOnPWitGz2MoS6HpVFFFIk83%2bNe4eDLTa8a%2f6en%2bs%2b6f3cnByRXgeYGjjDoiFGfLsDllwuCRkZwBjGOcn3Ne9%2fG448DQAswQ30e4KMlgEc4H5V4RbNsktViaSKcuW3hcqPlIBHGT0OfpxXNWtcqJdke3vbl8KXldlEcbAMFUgDcCX25YAZXOOuMcVWcKIJHeeOconlspj8zG5F2kDHGCu3ceh28cYDrBjdMwVo7eKT5mVZP3idG3bRgyDKjAPTp1INSKZFkkSRTBfRSvcRKY2Xy%2bdpwvRcY3nIONmK5jQdHJG09tbrN5RUFN%2flI7KyrlQcYXDM7HPXp3FWWt1sb2fyioa3cqsbOSXG5QAreh3KQecA4PTNVpVEVzBb2KxJvQltz5R0HykBywyDtLEEA4YdjViEkC0trOZnFw%2fkpMy%2bWUgVwU68ckOT7dCaWzBkdtC00cdvHMy3KyFcRKZPNYAbSuAQWBBU9fvADOa9O%2bF1y14IYhEI0ifI2kkHHJ%2fl6mvNbeXzt%2bfJ8wSsWeaMDCEH7u0%2fKCq88ZG1cEV6%2fwDDO3d7eKaQFZCGkZm%2b9JkYJ%2fNv89%2brD7mbPTKq6gu62A%2f2v6GrIqG8KiJQWALNgZPU4PFdK3IexiKSrYqR3%2bWkmTa5I6VBLJxWpBBIxaQD3q5E3vWerZmz6c1diagbLLNULtgUjNUTNnPNFhGL4jkAgQf3vl%2fXP9K5vdn862vEkmXjUn0I%2fWsHj1q0Qz0bxswXRoSen2hf%2fQWrg%2fm27cjA4wT2rsPiQZR4chMSux%2b1LkI5U42t6V5O%2bpXKxbmlubb5tn7xA35nriuc3OkSOMKTGPY54FQX0MlxY3EcaK8hjYRq3PzYOP1rATVbktFMZYJlXEfzb4y5J6A9CePSr1peup2yF0YsSxJ8xQMAYJ3E9QcEYHt1yAYelT3OoxJBC7oxILOBnaB3rqW099m2K5mRs%2feYhtw%2bmPYevSqOgxRJaDyPK2ITGCgAPDEZODwOB19M9SSdd2kQDyiuD%2feH9elJDuYsNrqFhqkcMCArPlFEaFgjHnO0cAdST%2bNX5dK1KCZ7nTLcgkLLcWEiDOWwM7gflbjByCMj1yauNG7LkkNxyrdKILh4ZYygeOWI5SRf4TjHH4DH0osNS0KVvqDyzJbzW7210RzBKDlsYzsbo3JI7H5TwO%2frXiNgunxZGczDHOOxrzu81e%2fvUMF3cK8Zzy1vGwOf95T09q9F8REjT48OF%2fejJIyMYNAlucfcXtuqZZlJVgrqP4cnHPHoRzXN6k1tpyM8E6A7SMeZyrH5hgAZJ4A69D9K1NZjjlkjZJo3mDBsOA%2bfXnoMKtYt7aMrfbLtpJ%2fKgHkqkZKO%2b3HUjGMgY7nIrOsuWGh14SpepZksv2mKyWW4mnku03YbOcMRyuckcYIOPTpgcaGmTW6q0QjVHCKpkVSwdQWxznj7oPbNY2UYy3MbtKVkMKecACmQcEc%2bx79unNK%2bovHCY0nl2F1KzsQynHXGM9%2fQVEYc9Jp%2fed1SlOVRJOwt3e6musLbhise8spICqwySeR6Ag8ccY6ir%2bqjMKNIwihRcSY%2b%2bGyMbSRjjPHrk1Xk1e42FkjJGfLeYPku%2fT5Vx1yc0t7D9uCM10GlBCrGvCk4%2fgPpn1x9a5KKSqJ6K34iq0nJqM1oV9OGlQ3azxoyyhd0kTNtQnkc5yT0J6ckjpmtW8uhc6eGt3ZDcF4ijSk7X5bt0OfcDBHHTFG20Oe4YYjmCK5AabjZk5Py8ZxwPXt1zXR2i%2fZrtbeJokIHEewthRnBznrn%2bnpXpOq003qcVelSjG0D0miiimcZ5x8a03%2bCbc7tm2%2bRt3p8knt%2bH414G0ciW8pc7JgwVEwcgYJDB%2bSAM9Mfl0P1L4w8PxeJdBewlIHzh1Y9iAef1rwfWvAGreH7GSSa2jNvKyqjFk3LyM85IBPY5784rmqqV9i0la5hPMqrDKTFBsSOVVmcNvZMrgoVxn5h%2bA46kCO5VI7tDa2727TKyxru3chAeGGSx3MxOSR0BwOKsTzyxwzoXmdCHedCDuQnMaxHOeOQAQMjJ6Y5rQT28N7mXyVhkC%2bcAuVROR5RYZB4wQcFiQBwQTXNYsus4YtKrt5MrF3aV3TKspLlQAThijbj7cZFS29tJdXxaaRJEkRPn3AFCGCnCY7kk8jkMTy3FUfLmktPNwu6SVGjVl2k8A8ADgkuQAR%2fFx0zVuWY3OFgfJ2yoRHhg4LEqCAADgKpz0%2b7gYHM2BF7QbCbUNRQwymORmM3mFNrQqGYBRjr9f8ACvdPB9iltaSFECqmI1G3GP4ic985H5V5v4J0W2gtxNFC32kt5a%2fN94dhngA4xz%2fKvZLC1WztI7dSCYxyR0JPJIGeOc16FJJRuZSvfUtVw3xVvjp3hqyuVn8iRL9Cj7tpB2SdK7mvMPjuu7wPZD%2fqJJ%2f6LlrVbiMKy%2bK8bRLFfG1lYceasvlnHvngn8q6Gw8Y6Pq3EF0gYnAywIz9QSK%2bcmj%2fAM4p0PmRyiSF3WQcgocH86u9hcqPqCFwzMQeOMH1Bq5G%2fvXg174y8R2mlWdssvlMY8mZR8zen9ePes2Dx74lhbLajLKPRyR%2bikfzp3FY%2bjWeoi1eOad8Vr1SFvVYY4%2b6GH8s%2fqa6%2fTfHtpeqCRHJjr5L8j%2fgJ5ouS0y34hl3XcYz90EfyrI3DFS6reJc3KyoCEdAw3dfTn8qoiUHuKtEs9T8bY%2fsaHP%2fAD8L%2fwCgtXAPEsmc9PTOK73xwwXRoM45uV7%2fAOy1cErqxCjhvQjmuc2KtxptlckGe3hlI%2fvKKPsCoCYt5H8Kg4C%2f4VbJAzwcj%2b6pOa57xPqhXTTBbxtIJsqz9kHuCDSuBqRWtu9tE6xFkceZggkjd8x69DknipY1lUj94QnQLyf50%2b0kWe0imVg25Adw75H1NPGBwMj6UwGI5BJyNuemKUfM4cAADrg8GlOW%2bXBApBgEhsH3oAcdokyOR%2fd7V6d4hiWawjVhkeaOM%2bxrzADnDYx2wK9R144sU%2f66jtnsaT2GtzkrqwQgCICI9iF6N0z154yPxrG1a2e91C1ghCrsBd3kAwq5GPxyM8fyro3bK%2fdUgdgMVSdgX3H5frWc0pLlZtCThK6MAW0dtNfAWjSLG4KlgCxI5VFHfClvU4C1UMGxYpbgL5UmCqLGQSTzjGPQ9z36VrajZXNzMStvDGijClmx5pJ%2bZT068diM7uajtbIPCjXEv2lslmKueOTjbz6Dp6%2btP2bjTtAuOJnze%2fsUrPTRcGW4U79qvmNm5yTw38%2bTU9xELe4VWmjZkkAMJBVRnG3ccHI6ZIrUtrW3tw5hTBY5fLNk4%2fUcH%2bdVr6EXwihdB87Allbp3bGOxweTjqKxjh43TluOWIltF6F%2b2mlRy1zLA0T4ZHjznPcdfUZ4A%2fqdBRG0gfAZl%2fjGKydLs54ZYWkiILxgSjgtG%2bdxG7OSATjp%2bNb2FRTnt6mt5WtYyvfc7CiiirMRCMjFU305QP3D%2bUP7hXcnTA%2bXsPZcVdooA5XV%2fh9oesx%2fvraOKUHd5kKBDn19%2fwAa5Of4JWpjuEtNbktxOV3k24ckDty2OuD07CvVqKlwi90O7PLx8GbXzYnbWZSsRDInk8A4AJHzZ52jv2HpV5%2fhXbiYyQ6iI89QbbP%2fALMK9CoqfZQtaw1JrVHP6D4Vh0Nwwn8%2faPlJjwQx6nqe3HbjPWt%2fFLRVpJCbvuGK53xn4UTxho8OnvdfZhHcCff5e%2fOFZcYyP736V0VFMR5EfgVbHrrf%2fkn%2fAPZ1LbfA%2b0t5A51ffj1tP%2fs69YoquZisjzW%2f%2bEUF%2fCI5NVxgYB%2bzZx%2f4%2fWC%2fwAjJO3xGVHp9hz%2f7Ur2iijmYJJHiw%2fZ%2fUf8AMy5%2f7cP%2fALZT1%2bASgg%2f8JH0%2f6cf%2fALZXs1FLmYzzy1%2bF729tHC%2buvKYxgM9uScen36m%2f4VqCedW%2f8lv%2fALKu9op8zJ5UZHiPRG1%2fTUs1uvs2JQ5fy9%2bQARjqPX9K5lPhswUK%2btSHHQJCVH4jfzXe0VJRw6fDiJBxqGCe4gx%2f7NWTqPwjbUpd8uuqFX7g%2bx%2fd%2fHfXp1FAHCWPw6ltbVIJNa80Iu0EWu3j%2fvo1J%2fwr5zMrnVzgDG0QEZ%2bvz4rt6KAON%2f4QIdf7S5%2f64f8A2VH%2fAAgX%2fUS%2f8gf%2fAGVdlRQBxbeASwx%2fahA%2f64f%2fAGVdVf2ZvYFiEnl4bdnGex%2fxq1RQBh%2f8I8f%2bfv8A8h%2f%2fAF6Y3hkMc%2fa8f9sv%2fr1v0VPKiuZnNt4TUxsqX0i7j83y7gR6YJxUc3g1JH3R3mwEcjys8%2bv3q6iiqSsJts5X%2fhC0KAG85GMHyiP%2fAGan2vhH7OSz3qu%2fRSsG3avoBurp6KHqF2YS%2bHNq4F0Mf9c%2f%2fr0reHiwIN31%2fwCmf%2f163KKVkHMwooopiABwKABxKB3hCQR%2fKAEYGR2xAP%2fZCgo%3d&remark=云识别结果回传
|
|
|
HTTP/1.1 200 OK
|
|
|
Date: Wed, 26 Dec 2018 01:06:12 GMT
|
|
|
Content-Length: 0
|
|
|
Connection: close
|
|
|
Cache-Control: private
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 05 8D 13 69 4C 5D 32 DF 57 BC 6D 31 1C AC 89 AC D4 30 CE 4D 17 99 20 F2 4D B5 08 86 1A
|
|
|
"Time": 1973/2/6 3:28:28
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:13.137
|
|
|
Connection: close
|
|
|
EndTime: 09:06:13.362
|
|
|
ClientToServerBytes: 1210
|
|
|
ServerToClientBytes: 475
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 05 B7 26 EC 52 56 32 5B 2D F3 93 D2 43 B7 14 5C 3B E2 B6 1D E1 8D 7D 9E CE 7D CC 55 28
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 05 28 52 B4 59 8A 2C 4D C7 D9 E4 B0 94 F0 33 0A 33 8D 73 49 1A 28 39 C8 5C 90 22 64 3D
|
|
|
"Time": 1973/2/6 3:28:28
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:13.379
|
|
|
Connection: close
|
|
|
EndTime: 09:06:13.526
|
|
|
ClientToServerBytes: 1114
|
|
|
ServerToClientBytes: 15700
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 05 E7 02 45 BA 63 CF 4E 6B BB 04 0B A1 17 B3 78 15 81 FD 55 2C 05 37 60 F8 B2 17 AE 3D
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 05 9C C1 64 B7 18 B8 95 6F C3 5E 49 7F 52 E7 92 FF 93 E5 96 8A A4 F6 47 31 A7 95 2E 45
|
|
|
"Time": 1973/2/6 3:28:28
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:13.545
|
|
|
Connection: close
|
|
|
EndTime: 09:06:13.639
|
|
|
ClientToServerBytes: 1364
|
|
|
ServerToClientBytes: 816
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 05 3A 5A 82 0F 0D A5 47 20 37 AF 01 BB 02 87 51 7E 59 CA FB 06 5C 34 0B EE CA 94 E2 AF
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 05 94 77 7B E8 95 FE C4 D5 30 1E 45 A6 FE 75 27 03 D6 EE 40 37 87 02 87 47 45 4F 03 10
|
|
|
"Time": 1973/2/6 3:28:28
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:13.664
|
|
|
Connection: close
|
|
|
EndTime: 09:06:13.934
|
|
|
ClientToServerBytes: 1332
|
|
|
ServerToClientBytes: 720
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 05 F5 B2 85 89 64 C3 BF D0 DD 83 DE 7F F7 72 4D 53 18 8A 52 90 42 B1 98 9C 0E 61 EB B4
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
Connection: Keep-Alive
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 05 86 88 B0 0F 0E 50 73 03 01 6E 64 35 F2 62 A5 88 97 9D 05 9F B3 A8 06 90 16 14 FE B3
|
|
|
"Time": 1973/2/6 3:28:28
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:13.952
|
|
|
Connection: close
|
|
|
EndTime: 09:06:14.183
|
|
|
ClientToServerBytes: 1274
|
|
|
ServerToClientBytes: 491
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 05 F0 7A C3 62 5E 45 92 5E B2 7D 19 88 5D 45 AB 50 DE A6 A1 DC 33 3B 6E 4A BE 53 75 97
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 06 1A 06 DC B9 7A 71 19 A1 FF 90 C8 B3 03 C3 64 68 6F 70 58 B0 93 6D 08 6E 35 DB 20 C5
|
|
|
"Time": 1973/8/19 7:48:44
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:14.201
|
|
|
Connection: close
|
|
|
EndTime: 09:06:14.259
|
|
|
ClientToServerBytes: 1130
|
|
|
ServerToClientBytes: 33715
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 06 0A 08 42 6D B9 DC EA 86 F4 D2 E6 42 54 6B 1D 99 70 B9 30 FD D4 24 00 35 40 D9 44 6A
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 06 AB E4 E9 01 EC 9C BA FE 14 82 48 0F 09 8C 58 DC 6B 1F FA E5 0A 0C 1A 7A 10 E9 16 A0
|
|
|
"Time": 1973/8/19 7:48:44
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:14.279
|
|
|
Connection: close
|
|
|
EndTime: 09:06:14.376
|
|
|
ClientToServerBytes: 1210
|
|
|
ServerToClientBytes: 1056
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 06 89 D0 A0 7F 7B 93 81 19 EC 00 7E 07 D0 33 55 CF 37 AF BD 70 5C B7 75 1C 5E 5A 26 3E
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 06 58 F7 72 19 E3 FA 34 CF A1 99 3C BB DE 51 4B 7B 01 C3 BA BE 85 19 6A 57 74 31 58 75
|
|
|
"Time": 1973/8/19 7:48:44
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:14.410
|
|
|
Connection: close
|
|
|
EndTime: 09:06:14.701
|
|
|
ClientToServerBytes: 1162
|
|
|
ServerToClientBytes: 5317
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 06 7B 72 B3 3C 3A 2B 9B 81 82 62 A8 87 2E 8B F6 F2 A0 A8 8F D5 3C A1 7F 91 1B CA C3 8B
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 06 89 26 CC 4D E2 07 66 26 DA BF 01 A0 96 0B CE 5D 14 36 6D 6A 1A A6 ED DC 79 62 66 AF
|
|
|
"Time": 1973/8/19 7:48:44
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:14.720
|
|
|
Connection: close
|
|
|
EndTime: 09:06:14.947
|
|
|
ClientToServerBytes: 1162
|
|
|
ServerToClientBytes: 18969
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 06 F7 E9 FF 24 77 B9 71 CE 08 8F 18 ED 38 B8 F5 E1 8C 1A 38 7E B2 98 10 BE 7B 5A FD 3E
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 06 BA A4 4D 72 1A 43 8E DF 0A 50 EF 84 9E 0A 35 7D F3 70 AB 26 8A 72 16 6B F8 35 2F 83
|
|
|
"Time": 1973/8/19 7:48:44
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:14.966
|
|
|
Connection: close
|
|
|
EndTime: 09:06:15.059
|
|
|
ClientToServerBytes: 1210
|
|
|
ServerToClientBytes: 523
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 06 12 00 B2 31 EA AA BE BF 4A 48 77 5B 41 2C 90 8B BE 29 77 C5 2B D9 84 5A F5 8A 85 21
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
CONNECT 112.90.133.253:443 HTTP/1.1
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Host: 112.90.133.253
|
|
|
|
|
|
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
Random: 5C 22 D4 07 FD 20 7F 88 D0 6C A1 FD CE 3E FC 40 64 66 22 EA 9C 20 C4 05 8B DF 5F 49 40 FD 92 5E
|
|
|
"Time": 1974/3/1 12:09:00
|
|
|
SessionID: empty
|
|
|
Extensions:
|
|
|
server_name kyfw.12306.cn
|
|
|
elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
|
|
|
ec_point_formats uncompressed [0x0]
|
|
|
SessionTicket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
|
|
|
extended_master_secret empty
|
|
|
renegotiation_info 00
|
|
|
Ciphers:
|
|
|
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
|
|
|
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
|
|
|
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
|
|
|
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
|
|
|
[0035] TLS_RSA_AES_256_SHA
|
|
|
[002F] TLS_RSA_AES_128_SHA
|
|
|
[000A] SSL_RSA_WITH_3DES_EDE_SHA
|
|
|
|
|
|
Compression:
|
|
|
[00] NO_COMPRESSION
|
|
|
|
|
|
|
|
|
|
|
|
HTTP/1.1 200 Connection Established
|
|
|
FiddlerGateway: Direct
|
|
|
StartTime: 09:06:15.148
|
|
|
Connection: close
|
|
|
EndTime: 09:06:15.259
|
|
|
ClientToServerBytes: 1290
|
|
|
ServerToClientBytes: 1424
|
|
|
|
|
|
这是一个连接隧道,它加密 HTTPS 流量。
|
|
|
要查看此隧道内的加密会话,请启用工具>选项> HTTPS>解密 HTTPS 流量选项。
|
|
|
|
|
|
A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below.
|
|
|
|
|
|
Version: 3.1 (TLS/1.0)
|
|
|
SessionID: empty
|
|
|
Random: 5C 22 D4 07 74 D5 DA 71 CD 1E AC 9C D7 89 50 F0 B3 DD 13 C8 09 3D 6A 25 AA 4E C3 22 BF 9D FD 04
|
|
|
Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014]
|
|
|
CompressionSuite: NO_COMPRESSION [0x00]
|
|
|
Extensions:
|
|
|
renegotiation_info 00
|
|
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
POST http://www.12306bypass.com/Regist.ashx HTTP/1.1
|
|
|
Accept: */*
|
|
|
Accept-Language: zh-CN,zh;q=0.9
|
|
|
Accept-Encoding: gzip, deflate, br
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
Host: www.12306bypass.com
|
|
|
Content-Length: 150
|
|
|
Connection: Close
|
|
|
|
|
|
CdKey=BF08CAA9695D249062DD6894EAFF7B98FB0C3249&TradeNumber=&NickName=&Status=Get&UserName=13163251726&RealUserName=vacancyee&Remark=注册信息认证
|
|
|
HTTP/1.1 200 OK
|
|
|
Date: Wed, 26 Dec 2018 01:06:15 GMT
|
|
|
Content-Type: text/plain; charset=utf-8
|
|
|
Content-Length: 148
|
|
|
Connection: close
|
|
|
Cache-Control: private
|
|
|
|
|
|
{ "CdKey":"", "NickName":"","TradeNumber":"","UserName":"","Status":"","Message":"","Grade":"0","ExpireTime":"0001-01-01","Check":"","RealUser":"" }
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
|
POST http://www.12306bypass.com/Cdn.ashx HTTP/1.1
|
|
|
Accept: */*
|
|
|
Accept-Language: zh-CN,zh;q=0.9
|
|
|
Accept-Encoding: gzip, deflate, br
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
|
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
Host: www.12306bypass.com
|
|
|
Content-Length: 140
|
|
|
Connection: Close
|
|
|
|
|
|
IP=z3LpOoI%2bU4Xq2PMlWFk8ivV0DroNe7OCWD0errvkN10MAeuKjlp%2ffNSURRXWmXxXOjcjkt1CUYcv5Y%2fu%2bhiw%2bw%3d%3d&Obtain=1&Remark=CDN反馈与获取
|
|
|
HTTP/1.1 200 OK
|
|
|
Date: Wed, 26 Dec 2018 01:06:15 GMT
|
|
|
Content-Type: text/plain; charset=utf-8
|
|
|
Transfer-Encoding: chunked
|
|
|
Connection: close
|
|
|
Vary: Accept-Encoding
|
|
|
Cache-Control: private
|
|
|
Content-Encoding: gzip
|
|
|
|
|
|
1c52
|
|
|
<1F> |