Fiddler抓包自动解密aes

胖客强

732人浏览 · 2024-02-20 09:47:08

胖客强 · 2024-02-20 09:47:08 发布

修改该文件，找到 OnBeforeResponse 方法并修改

import System;
import System.Windows.Forms;
import Fiddler;
import System.Security.Cryptography;
	

static function OnBeforeResponse(oSession: Session) {
		if (m_Hide304s && oSession.responseCode == 304) {
			oSession["ui-hide"] = "true";
		}

        if(oSession.host == "xxx.cn"){
            var responseStringOriginal = oSession.GetResponseBodyAsString();
            var responseJSON = Fiddler.WebFormats.JSON.JsonDecode(responseStringOriginal);
			if (responseJSON.JSONObject['data'] != "") {
				var data = AesDecrypt(responseJSON.JSONObject['data'], "key", "iv");
				responseJSON.JSONObject['ecrypt_data'] = Fiddler.WebFormats.JSON.JsonDecode(data).JSONObject;
				var result = Fiddler.WebFormats.JSON.JsonEncode(responseJSON.JSONObject)
				oSession.utilSetResponseBody(result)
			}
        }
        
		if(oSession.host == "xxx.cn"){
			var responseStringOriginal = oSession.GetResponseBodyAsString();
			var res = System.Text.Encoding.UTF8.GetString(Convert.FromBase64String(responseStringOriginal));
			oSession.utilSetResponseBody(res);
		}
	}
	
	static function AesDecrypt(decryptStr, aesKey, aesIV) {
		var byteKEY = System.Text.Encoding.UTF8.GetBytes(aesKey);
		var byteIV = System.Text.Encoding.UTF8.GetBytes(aesIV);
	
		var byteDecrypt = System.Convert.FromBase64String(decryptStr);
	
		var _aes = new RijndaelManaged();
		_aes.Padding = PaddingMode.PKCS7;
		_aes.Mode = CipherMode.CBC;
	             
		_aes.Key = byteKEY;
		_aes.IV = byteIV;
	
		var _crypto = _aes.CreateDecryptor(byteKEY, byteIV);
		var decrypted = _crypto.TransformFinalBlock(
		byteDecrypt, 0, byteDecrypt.Length);
	
		_crypto.Dispose();
	
		return System.Text.Encoding.UTF8.GetString(decrypted);
	}