这是我的浏览器在登录某个站点时发送的内容:
POST http://www.some.site/login.php HTTP/1.0 User-Agent: Opera/8.26 (X2000; Linux i686; Z; en) Host: www.some.site Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1 Accept-Language: en-US,en;q=0.9 Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0 Referer: http://www.some.site/ Proxy-Connection: close Content-Length: 123 Content-Type: application/x-www-form-urlencoded lots_of_stuff=here&e2ad811=my_login_name&e327696=my_password&lots_of_stuff=here
我是否可以声明任何人都可以嗅探该网站的登录名和密码？也许就在我的局域网上？
如果是这样(即使只在局域网上)那么我很震惊.我想过要用
<input type="password">
做了更多的事情而不是让所有角色看起来像'*'
ps如果重要的话我玩netcat(在linux上)并建立连接
浏览器<=> netcat(在这里loged)<=>代理<=> remote_site