当前位置:网站首页>Little red book timestamp2 (2022 / 04 / 22)
Little red book timestamp2 (2022 / 04 / 22)
2022-04-23 14:52:00 【Li Xi】
Received group friend message , The little red book timestamp2 Updated .
Slider problem
It is recommended to delete... During debugging timestamp2 Just go , Don't put all of cookie All deleted , Otherwise, enter the infinite slider . Although only delete timestamp2, The generated parameter values are the same .
When you turn on the console , Put this div Delete and drag .
If you still enter the infinite slider link , Replace IP, It will be unsealed later .
Interface Analysis
Previous registerCanvas The interface has also been updated ,FormData Medium sign Encrypted .
timestamp2 Now the server returns , When you request, you only need to carry timestamp2.
Sign analysis
Take out the ancestral XHR The breakpoint . Input : /v2/shield/registerCanvas , Delete timestamp2 Refresh the page
Take two steps back , You can see the parameters i and u.
Corresponding id and sign.
stay call stack Middle down debugging .
eureka u = I.qrTqB(l, I.PNXDL, JSON[r(1347)](i)) , Print out all the parameters and have a look .
namely :
So the deduction process should be like this
After a while of analysis , Find the key position in I[o(1159)](function(n, t, e) {} here .
I.“uPhZo” = function(n, t, e, r) { return n(t, e, r) },
So the final call is shown in the figure below :
eyJ1c2VyQWdlbnQiOiJNb3ppbGxh yes Browser parameters base64 Later results .
'{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36","webdriver":false,"language":"zh-CN","colorDepth":24,"deviceMemory":8,"hardwareConcurrency":8,"screenResolution":"1920;1080","availableScreenResolution":"1920;1040","timezoneOffset":-480,"timezone":"Asia/Shanghai","sessionStorage":1,"localStorage":1,"indexedDb":1,"openDatabase":1,"cpuClass":"unknown","platform":"Win32","plugins":["PDF Viewer::Portable Document Format::application/pdf~pdf,text/pdf~pdf","Chrome PDF Viewer::Portable Document Format::application/pdf~pdf,text/pdf~pdf","Chromium PDF Viewer::Portable Document Format::application/pdf~pdf,text/pdf~pdf","Microsoft Edge PDF Viewer::Portable Document Format::application/pdf~pdf,text/pdf~pdf","WebKit built-in PDF::Portable Document Format::application/pdf~pdf,text/pdf~pdf"],"canvas":"10cfbbb02b2606dbc2ccb15a3cd2b558","adBlock":false,"hasLiedLanguages":false,"hasLiedResolution":false,"hasLiedOs":false,"hasLiedBrowser":false,"touchSupport":"0;false;false","fonts":"4;7;8","audio":"124.04347527516074"}'
Deduction code supplement environment
H There are encryption and decryption related variable names in .
In the parameter, it will be judged that encrypt still decrypt, The encryption method will eventually come to case 9 in return T in .
On the problem of complement variable name , You can write a regular unified replacement .
Process summary
Sign The generation process is to put the browser information first base64, Then encrypt to get k,s, And then k and s adopt FbmlO The method is spliced to get b, Then on b Then encrypt to get the final sign value .
版权声明
本文为[Li Xi]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/04/202204231450357901.html
边栏推荐
- 【Servlet】Servlet 详解(使用+原理)
- SVN详细使用教程
- do(Local scope)、初始化器、内存冲突、Swift指针、inout、unsafepointer、unsafeBitCast、successor、
- Vscode Chinese plug-in doesn't work. Problem solving
- Is asemi ultrafast recovery diode interchangeable with Schottky diode
- 2-GO variable operation
- DVWA之暴力破解(Brute Force)Low-->high
- Arduino for esp8266串口功能简介
- Achievements in science and Technology (21)
- 外包幹了四年,廢了...
猜你喜欢
LeetCode167-两数之和II-双指针-二分-数组-查找
Role of asemi rectifier module mdq100-16 in intelligent switching power supply
[untitled]
UML项目实例——抖音的UML图描述
A good tool: aardio
Using MATLAB programming to realize the steepest descent method to solve unconstrained optimization problems
[detailed explanation of factory mode] factory method mode
OC 转 Swift 条件编译、标记、宏、 Log、 版本检测、过期提示
Find daffodils - for loop practice
Chapter 7 of JVM series -- bytecode execution engine
随机推荐
Borui data and F5 jointly build the full data chain DNA of financial technology from code to user
一个月把字节,腾讯,阿里都面了,写点面经总结……
ASEMI整流模块MDQ100-16在智能开关电源中的作用
剑指 Offer II 019. 最多删除一个字符得到回文(简单)
Sqlserver transaction and lock problem
SQLSERVER事物与锁的问题
机器学习之逻辑回归(Logistic Regression)原理讲解和实例应用,果断收藏
Brute force of DVWA low -- > High
Don't you know the usage scenario of the responsibility chain model?
【STC8G2K64S4】比较器介绍以及比较器掉电检测示例程序
OC to swift conditional compilation, marking, macro, log, version detection, expiration prompt
8.4 循环神经网络从零实现
Using MATLAB programming to realize the steepest descent method to solve unconstrained optimization problems
大文件如何快速上传?
Ali developed three sides, and the interviewer's set of combined punches made me confused on the spot
DVWA之暴力破解(Brute Force)Low-->high
January 1, 1990 is Monday. Define the function date_ to_ Week (year, month, day), which realizes the function of returning the day of the week after inputting the year, month and day, such as date_ to
Bingbing learning notes: take you step by step to realize the sequence table
Introduction to Arduino for esp8266 serial port function
async void 导致程序崩溃