当前位置:网站首页>Web Reverse Lilac Garden
Web Reverse Lilac Garden
2022-08-10 21:26:00 【Spank code programmers】
文章目录
1.比较常规的web逆向流程,找关键词sign,Find more traces,换noncestr
2.找到sign=o,进入api()函数
3. 缺什么补什么,No need to supplement the environment
4.nodeRight-click on the environment to run ready-made code
function wordsToBytes(e) {
for (var t = [], n = 0; n < 32 * e.length; n += 8)
t.push(e[n >>> 5] >>> 24 - n % 32 & 255);
return t
}
n = {
utf8: {
stringToBytes: function stringToBytes(e) {
return n.bin.stringToBytes(unescape(encodeURIComponent(e)))
},
bytesToString: function bytesToString(e) {
return decodeURIComponent(escape(n.bin.bytesToString(e)))
}
},
bin: {
stringToBytes: function stringToBytes(e) {
for (var t = [], n = 0; n < e.length; n++)
t.push(255 & e.charCodeAt(n));
return t
},
bytesToString: function bytesToString(e) {
for (var t = [], n = 0; n < e.length; n++)
t.push(String.fromCharCode(e[n]));
return t.join("")
}
}
};
r = n;
a = r.utf8;
i = r.bin;
function bytesToWords(e) {
for (var t = [], n = 0, r = 0; n < e.length; n++,
r += 8)
t[r >>> 5] |= e[n] << 24 - r % 32;
return t
}
l = function sha1(e) {
e.constructor == String ? e = a.stringToBytes(e) : "undefined" !== typeof t && "function" == typeof t.isBuffer && t.isBuffer(e) ? e = Array.prototype.slice.call(e, 0) : Array.isArray(e) || (e = e.toString());
var n = bytesToWords(e)
, r = 8 * e.length
, i = []
, l = 1732584193
, s = -271733879
, c = -1732584194
, u = 271733878
, f = -1009589776;
n[r >> 5] |= 128 << 24 - r % 32,
n[15 + (r + 64 >>> 9 << 4)] = r;
for (var d = 0; d < n.length; d += 16) {
for (var p = l, h = s, y = c, m = u, b = f, v = 0; v < 80; v++) {
if (v < 16)
i[v] = n[d + v];
else {
var g = i[v - 3] ^ i[v - 8] ^ i[v - 14] ^ i[v - 16];
i[v] = g << 1 | g >>> 31
}
var k = (l << 5 | l >>> 27) + f + (i[v] >>> 0) + (v < 20 ? 1518500249 + (s & c | ~s & u) : v < 40 ? 1859775393 + (s ^ c ^ u) : v < 60 ? (s & c | s & u | c & u) - 1894007588 : (s ^ c ^ u) - 899497514);
f = u,
u = c,
c = s << 30 | s >>> 2,
s = l,
l = k
}
l += p,
s += h,
c += y,
u += m,
f += b
}
return [l, s, c, u, f]
}
function bytesToHex(e) {
for (var t = [], n = 0; n < e.length; n++)
t.push((e[n] >>> 4).toString(16)),
t.push((15 & e[n]).toString(16));
return t.join("")
}
function api(e, t) {
var n = wordsToBytes(l(e));
return t && t.asBytes ? n : t && t.asString ? i.bytesToString(n) : bytesToHex(n)
};
function randomWords() {
for (var e = arguments.length > 0 && void 0 !== arguments[0] ? arguments[0] : 8, t = arguments.length > 1 && void 0 !== arguments[1] ? arguments[1] : "alphabet", n = "", r = {
alphabet: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",
number: "0123456789"
}[t], o = 0; o < e; o++)
n += r.charAt(Math.floor(Math.random() * r.length));
return n
}
noncestr = randomWords(8, "number")
console.log(noncestr)
timestamp = Date.now()
console.log(timestamp)
c = "xxx"+noncestr+"&serverTimestamp=0×tamp="+timestamp
sign = api(c)
console.log(sign)
边栏推荐
猜你喜欢
突破次元壁垒,让身边的玩偶手办在屏幕上动起来!
我的世界整合包 云服务器搭建方法(ECS)
带你一文读懂SaaS版多租户商城系统对多品牌企业的应用价值
LeetCode-498-对角线遍历
npm warn config global `--global`, `--local` are deprecated. use `--location=global` instead.
着力提升制造业核心竞争力,仪器仪表产业迎高质量发展
A fullGC problem troubleshooting caused by groovy
直播课堂系统08-腾讯云对象存储和课程分类管理
Knowledge map Knowledge Graph
ACM解题笔记——HDU 1401 Solitaire(DBFS)
随机推荐
LeetCode-36-二叉搜索树与双向链表
图扑智慧电力可视化大屏,赋能虚拟电厂精准减碳
【go】依赖注入
Rider调试ASP.NET Core时报thread not gc-safe的解决方法
石油化工行业商业供应链管理系统:标准化供应商管理,优化企业供应链采购流程
ArcPy读取Excel时序数据、批量反距离加权IDW插值与掩膜
如何提交一个PR?【OpenHarmony成长计划】【OpenHarmony开源社区】
[Golang]如何优雅管理系统中的几十个UDF(API)
[Golang]从0到1写一个web服务(上)
Before implementing MES management system, these three questions to consider
Redis命令手册
C. Even Picture
【golang map】 深入了解map内部存储协议
组合导航精度分析
sklearn 笔记 TSNE
流程控制结构——《mysql 从入门到内卷再到入土》
ACM模板笔记:八数码问题——使用BFS+康托展开打表解决
将视图模型转换为使用 Hilt 依赖注入
直播课堂系统08补-腾讯云对象存储和课程分类管理
npm warn config global `--global`, `--local` are deprecated. use `--location=global` instead.