抓包
在抓到的數據包里面,看到一個http get請求,右鍵選中,然后follow stream
wireshark自動進行數據包過濾tcp.stream eq 1340,並且可以看到完整的數據通訊
GET /Hero/zhCN/client/alert?build=zhCN&targetRegion=0&homeCountry= HTTP/1.1
User-Agent: Blizzard Web Client
Host: nydus.battle.net
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sat, 25 Nov 2017 03:15:30 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Cache-Control: max-age=3600
Location: http://INVALID.launcher.battle.net/service/Hero/alert/zh-cn
Content-Length: 243
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="http://INVALID.launcher.battle.net/service/Hero/alert/zh-cn">here</a>.</p>
</body></html>
在TLSv1.2的數據流中看到
crl4.digicert.com
DigiCert is the go-to provider of identity, authentication, and encryption solutions for the web and IoT devices.
We help enterprises of every size deploy PKI security that aligns with industry standards and best practices.
Our SSL tools and enterprise-grade platform simplify management, automate certificate tasks, and give organizations the power to customize workflows to best fit their needs.
可以用如下語法過濾和指定ip的ssl
ssl and ip.dst== 24.105.29.76
然后選擇一個clien thello,follow tcp stream
正在等待游戲模式下載完成
1.win10系統中,搜索allow an app through windows firewall
2.然后選擇里面的allow another app
3.瀏覽這個路徑C:\Program Files (x86)\Heroes of the Storm\Versions\某一個版本\HeroesOfTheStorm_x64.exe,然后add