目标网站
aHR0cHM6Ly93d3cuZ2Fva2FvLmNuL3NjaG9vbC9zZWFyY2g/cmVjb21zY2hwcm9wPSVFNSU4QyVCQiVFOCU4RCVBRg==
一、抓包分析
二、逆向分析
搜索定位加密参数
本地生成代码
var CryptoJS = require('crypto-js')
var crypto = require('crypto');f = "D23ABC@#56"function v(t) {var n = t.SIGN;t = t.str,t = decodeURI(t),n = CryptoJS.HmacSHA1(CryptoJS.enc.Utf8.parse(t), n),n = CryptoJS.enc.Base64.stringify(n).toString();var m = crypto.createHash('md5');m.update(n, 'utf8');// console.log(n)return m.digest('hex')
}function get_param(j) {l = v({SIGN: f,str: j.replace(/^\/|https?:\/\/\/?/, "")})return l
}// console.log(l)
成功获取数据
本文章仅提供技术分享交流学习,不可对目标服务器造成伤害!