一个有点难度的问题，有兴趣的过来研究研究。

Question

很明显，这个cookie是用来传sessionid的,当然要被服务端每次验证了。
当然，这些信息有可能被黑客获得，这个只有通过改变iis认证方式或使用ssl等方法解决了。

Answer 1

hydnoahark(诺亚方舟),老兄，你好啊。下面是原贴。
http://www.csdn.net/expert/topic/119/119717.shtm

Answer 2

<%@ Language=VBScript %>
<% Option Explicit %>
<!--#include file="adovbs.inc"-->
<!--#include file="ServerCfg.inc"-->
<%
Response.Expires=-1000'************************设置工具函数************************************************'清除NULL
Function HtmlEncode(strA)
  If isNull(strA) OR strA="" Then
         HtmlEncode="&nbsp"
  Else
     HtmlEncode=server.HTMLEncode(strA)
  End If
End Function  
'确定下一页
Function NextPage(CurrentPage,TotalPages)    If CurrentPage>=TotalPages Then
         NextPage=TotalPages
    Else
         NextPage=CurrentPage+1
    End If          
End Function
'返回前一页
Function PrePage(CurrentPage)
   If CurrentPage<=1 Then
      PrePage=1
   Else
      PrePage=CurrentPage-1
   End If  
End Function
Sub PageBar(intCurrentpage,TotalPages,TotalRecords,CurrentStart,CurrentFinish)
       Response.Write "<table border='0' width='100%'><tr>"
         If intCurrentpage<=1 Then
              Response.Write "<td width='15%' nowrap><span style='FONT-SIZE: 9pt'><font color='#C0C0C0'>上一页</font></span></td>"
         ElseIf intCurrentpage>1 Then
              Response.Write "<td width='15%' nowrap><a href='" & Request.ServerVariables("SCRIPT_NAME") & "?Page=" & PrePage(intCurrentPage) & "'><span style='FONT-SIZE: 9pt'>上一页</span></a></td>"
         End If 
         Response.Write "<td width='70%'nowrap>"
         Response.Write "<p align='center'><span style='FONT-SIZE: 9pt'><b>" & TotalRecords & "</b>个符合条件的记录--显示为<b>" & CurrentStart &"</b>-<b>" & CurrentFinish & "</b></span></td>"
         Response.Write "<td width='15%' nowrap>"
         Response.Write "<p align='right'>"
      
         If intCurrentpage>=totalpages Then
             Response.Write "<span style='FONT-SIZE: 9pt'><font color='#C0C0C0'>下一页</font></span></p>"
         ElseIf intCurrentpage<totalpages Then
             Response.Write "<a color='#ffffff' href='" & Request.ServerVariables("SCRIPT_NAME") & "?Page=" & NextPage(intCurrentPage,TotalPages) & "'><span style='FONT-SIZE: 9pt'>下一页</span></a></p>"
         End If
        Response.Write "</td></tr></table>"End Sub
'***********************************************************************************'/////////////////////////////////创建无连接条件记录集//////////////////////////////////////////
Dim strConditionExpress,strConditionValue,strCondition,SelectedUser,SelectedDate,SelectedMonth
Dim blnFlag,blnPosted,iCount,rsString
Dim objcnMarket,objrsTraceInfo,objrsUser
Dim strConnection,strRecordset
Dim intCurrentPage,TotalPages,TotalRecords,CurrentStart,CurrentFinish
Dim i,str
Const intPageSize=5Set objcnMarket=Server.CreateObject("ADODB.Connection")
Set objrsTraceInfo=Server.CreateObject("ADODB.Recordset")
Set objrsUser=Server.CreateObject("ADODB.Recordset")strConnection="Provider=" & m_Provider & ";Server=" _
              & m_ServerName & ";Database=Isure-PublicUser;UID=" _
              & m_UID & ";PWD=" & m_PWD
objcnMarket.Open strConnection
strRecordset="Select TrueName From [User] Where UID>0"
objrsUser.CursorLocation=adUseClient
objrsUser.Open strRecordset,objcnMarket,adOpenForwardOnly,adLockReadOnly,adCmdText '*******************************生成条件查询语句****************************************
     SelectedUser=Request.Form("SelectedUser")
     SelectedDate=Request.Form("SelectedDate")
     SelectedMonth=Request.Form("SelectedMonth")
     If (SelectedMonth="" OR SelectedMonth="没有限制") And (SelectedUser="" OR SelectedUser="没有限制") And (SelectedDate="" OR SelectedDate="没有限制") Then '没有提交查询,仅是翻页
          rsString=Session("M_rsString")
          If rsString="" Then rsString="Select * From viewTraceInfo order by createdate DESC" '第一次进入页面      blnPosted=False
     Else
          rsString="Select * From viewTraceInfo Where 1=1"
       
               If SelectedUser<>"没有限制"  Then strCondition=" And TrueName='" & SelectedUser & "'"
               If SelectedDate<>"没有限制" Then
                    Select Case SelectedDate
                          Case "today"
                          
                          strCondition=strCondition & " And DATEDIFF(day,CreateDate,GetDate())=0"
                          
                          Case "yesterday"
                          strCondition=strCondition & " And DATEDIFF(day,CreateDate,GetDate())=1"                          
                          Case "week"
                          strCondition=strCondition & " And DATEDIFF(day,CreateDate,GetDate())<=7"                          
                          
                          Case "month"
                          strCondition=strCondition & " And DATEDIFF(day,CreateDate,GetDate())<=30"                          Case Else
                     End Select
                End If
                
                If SelectedMonth<>"没有限制" Then strCondition=strCondition & " And DATEPART(month,CreateDate)=" & Cint(SelectedMonth)
     
      blnPosted=True
      rsString=rsString & strCondition & "  Order By CreateDate Desc"
      Session("M_rsString")=rsString
      End IF                       
 
                       
 '********************结束条件****************************************************************
strRecordset=rsString
objrsTraceInfo.CursorLocation=adUseClient
objrsTraceInfo.Open strRecordset,objcnMarket,adOpenForwardOnly,adLockReadOnly,adCmdTextSet objrsTraceInfo.ActiveConnection=Nothing
Set objrsUser.ActiveConnection=Nothing
objcnMarket.Close 
Set objcnMarket=Nothing
  '取得当前页码
  If Request.QueryString("Page")=""  Then 
     intCurrentPage=1
  Else        
     intCurrentPage=Cint(Request.QueryString("Page"))
  End If                 
                   Session("CurrentPage")=intCurrentPage
                   objrsTraceInfo.PageSize=intPageSize
                   TotalPages=objrsTraceInfo.PageCount
                   TotalRecords=objrsTraceInfo.RecordCount 
                   
                   '控制手动输入页码出错
                        If intCurrentPage<=1 Then intCurrentPage=1
                        If intCurrentPage>=TotalPages Then intCurrentPage=TotalPages
                   
                   
                   
                   If Not (objrsTraceInfo.EOF) Then 
                   blnFlag=True
                   objrsTraceInfo.AbsolutePage=intCurrentPage
                   CurrentStart=(intCurrentPage-1)*intPageSize+1
                      If intCurrentPage=TotalPages Then
                           CurrentFinish=TotalRecords-(intCurrentPage-1)*intPageSize+CurrentStart-1
                      Else
                           CurrentFinish=intCurrentPage*intPageSize
                      End If
                   Else
                      CurrentStart=0
                      CurrentFinish=0
                      blnFlag=False
                   End If
'/////////////////////////////////记录集创建完毕//////////////////////////////////////%>

Answer 3

针对http的内容:
    这样的内容,其实是很容易取到的.你自己做一个tcp的服务程序,在80端口上监听.
然后用你的IE程序访问某一个网站.访问到一定时候,配置你的dns,将访问的网站的域名指向某机,这时候,你的服务程序就会收到IE发来的消息,将消息记录下来,就是前面所看到的内容.