了解http字段之cookie

（1）打开网页链接，题目如下

（2）将提示解码

   dXNlcl9sb2dpbj0yMTIzMmYyOTdhNTdhNWE3NDM4OTRhMGU0YTgwMWZjMzsgcGFzc3dvcmQ9NGM3ODM4NDVkM2E0ODk0ZmFmYTNhMWJmOGE4ZDRlN2U7IGFzZGNhc2M7IFBIUFNFU1NJRD02bzA3Z3E1a2szOXE2NnI5NmFvMmQ4OWo3MDsgcGF0aD0v]

user_login=21232f297a57a5a743894a0e4a801fc3; password=4c783845d3a4894fafa3a1bf8a8d4e7e; asdcasc; PHPSESSID=6o07gq5kk39q66r96ao2d89j70; path=/

（3）我们看到提示中有path和phpsessid这两个值，我们判定这个为cookie字段的值。于是，我们将其加入获取的报文中看是不是可以成功

GET /login.php HTTP/1.1Host: b73bef3389f1a266.yunyansec.comContent-Length: 45Cache-Control: max-age=0Origin: http://b73bef3389f1a266.yunyansec.comUpgrade-Insecure-Requests: 1Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8Referer: http://b73bef3389f1a266.yunyansec.com/index.htmlAccept-Language: zh-CN,zh;q=0.9cookie: user_login=21232f297a57a5a743894a0e4a801fc3; password=4c783845d3a4894fafa3a1bf8a8d4e7e; asdcasc; PHPSESSID=6o07gq5kk39q66r96ao2d89j70; path=/Connection: close

至此，没有什么有价值的。。。。

（4）开始上工具扫目录
发现有文件

（5）尝试链接

我们把包抓下来，按刚才的方法，加上cookie

得到了