盼之代售 234滑块 csessionid 分析
·
声明
本文章中所有内容仅供学习交流使用,不用于其他任何目的,抓包内容、敏感网址、数据接口等均已做脱敏处理,严禁用于商业用途和非法用途,否则由此产生的一切后果均与作者无关!
逆向分析
部分python代码
url = "/nocaptcha/analyze.jsonp"
cp = execjs.compile(open('231.61.js','r',encoding='utf-8').read())
n = cp.call('get231')
print(n)
params = {
"a": "CF_APP_WAF",
"asyn": "0",
"lang": "cn",
"v": "1",
"callback": f"jsonp_{int(time.time()*1000)}"
}
response = requests.get(url, headers=headers, params=params)
print(response.text)
print(response)
url = "/nocaptcha/analyze.jsonp"
cp = execjs.compile(open('231.61.js','r',encoding='utf-8').read())
n = cp.call('get231')
print(n)
params = {
"a": "CF_APP_WAF",
"asyn": "0",
"lang": "cn",
"v": "1",
"callback": f"jsonp_{int(time.time()*1000)}"
}
response = requests.get(url, headers=headers, params=params)
print(response.text)
print(response)
结果

总结
1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。
更多推荐
所有评论(0)