美团滑块(1-18，js逆向)
2024-06-08 10:04:45
网址：aHR0cHM6Ly9wYXNzcG9ydC5tZWl0dWFuLmNvbS9hY2NvdW50L3VuaXRpdmVsb2dpbg==
整体流程：
1、获取主页参数
2、逆向pwd、h5Fingerprint
3、请求page_data链接
4、逆向Authencation、behavior、token_
5、最终请求验证
一、获取主页参数
url_ = "https://passport.meituan.com" + re.search(r'id="J-normal-form" action="(.*?)"', response).group(1).replace('=', '=').replace('amp;', '')
csrf = re.search(r'"csrf" value="(.*?)"', response).group(1)
uuid = re.search(r'uuid=(.*?)&', url_).group(1)
token_id = re.search(r'token_id=(.*?)&', url_).group(1)
continues = url_.split('continue=')[1]
二、逆向pwd、h5Fingerprint
（1）pwd，跟进去发现是个rsa,简单扣下就ok
（2） h5Fingerprint，定位：
继续跟进这个混淆后的js，看到是通过n生成sign的，n是主页返回的一些东西
再往后跟就会发现是btoa,直接改写下就ok
然后到这里，将sign赋值给C，再加密，ts和cts稍微改下，其他固定即可（注意这里的环境值，后面滑块也会有，需要保持一致）
注：这个js如果觉得看得麻烦可以用ast反混淆下变量名，代码如下：
// 这个文件是run.js，demo.js放需要需要解混淆的js,decrypt_func.js是解密函数
const fs = require('fs');
const {parse} = require("@babel/parser");
const traverse = require("@babel/traverse").default;
const types = require("@babel/types");
const generator = require("@babel/generator").default;
const _0x24f5 = require("./decrypt_func");let jscode = fs.readFileSync("./demo.js", {encoding: "utf-8"
});
let ast = parse(jscode);// 十六进制转换
function delete_unicode(path){if (path.node.extra == undefined){return;}delete path.node.extrapath.skip()
}// 找到需要替换的调用函数，push到数组
name_array = ['a7_0x3a83']
function find_decode_name(path){let node = path.node;if (!node.declarations || node.declarations[0].init == null || node.declarations[0].init.name == undefined){return}let call_name = node.declarations[0].id.name;let binding = path.scope.getBinding(call_name);if (call_name == '_0x41c885' || binding.references<=0){return}if (name_array.indexOf(call_name) == -1){name_array.push(call_name)}
}// 替换字符串
function replace_name(path){let node = path.node;if (!node.arguments[0]){return}if(node.arguments[0].type == 'NumericLiteral' && node.callee.type == 'Identifier'){const key = node.callee.name;const value = node.arguments[0].value;if (key == '_0x24f5'){let value_new = _0x24f5(value);console.log(value_new,"<-->",key,"<-->",value)let string_node = types.stringLiteral(value_new)path.replaceWith(string_node)}}
}traverse(ast,{"NumericLiteral|StringLiteral": delete_unicode})
console.log("十六进制还原结束~~")
traverse(ast,{"CallExpression": replace_name})
console.log("变量名还原结束~~")let {code} = generator(ast,opts = {jsescOption:{"minimal":true}});
fs.writeFile('decode.js', code, (err)=>{});//这个文件是decrypt_func.js
function _0x5b47() {var _0x25463d = ["Freefrm721 Blk BT", "postInfo", "slice", "NETWORK_FAILURE_TIP", "</p>\n ", "Vivaldi", "YodaKNB", "RISK_GET_VERIFYINFO_LIMIT", "Date", "getUniformIndices", "121011", "OscillatorNode", "121042", "HIGH_FLOAT", "Vagabond", "SimSun-ExtB", "FrankRuehl", "127032", "setTimeout", "fill", "Bradley Hand", "isMobile", "AvantGarde Md BT", "Float32Array", "FRUTIGER", "Adobe Garamond", "pay", "request_code", "constructor,hasOwnProperty,isPrototypeOf,propertyIsEnumerable,toLocaleString,toString,valueOf", "Tw Cen MT", "Geeza Pro", "_yoda_riskLevel", "NEVIS", "cts", "assign", "-9999px", "MAX_COMBINED_UNIFORM_BLOCKS", " : null", "globalLoadModel", "GOTHAM BOLD", "getActiveUniformBlockName", "toFixed", "TRIANGLES", "Cambria", "121125", "_timelimit", "resetVariable", "root", "yodaCommonThemeColor", "failCallbackFun", "__core-js_shared__", "name", "Serifa BT", "RISK_FACE_POLICE_DATABASE_NOT_FOUND", "RISK_MOBILE_NOT_VALID", "isNeedLoad", "quickapp_miniProgram", "yodaMoveingBar", "rejected", "getContext", "MT Extra", "Bradley Hand ITC", "Arial", "write", "AliApp", "decode", "boxError", "_selenium", "classof", "COMPILE_STATUS", "isLoading", "sliderMaxLenth", "bindEvents", "MS Reference Specialty", "buttonName", "Lithograph Light", "setValueAtTime", "TypoUpright BT", "symbol-registry", "getExtension", "121005", "Khmer UI", "uniform4uiv", "byteOffset", "RISK_USER_NOT_LOAD", "2.2.2", "Vladimir Script", "toDataURL", "MS PGothic", "getUniformBlockIndex", "abnormal", "checkRiskLevel", "EUROSTILE", "customElements", "succCallbackFun", "last", "Noteworthy", "121053", "111", "wRU", "findChild", "00101", "substr", "b_techportal_property_mv", "language", "return (function() ", "bind", "waimai", "precision", "RISK_GET_VERIFY_INFO_ERROR_RETRY", "scrollLeft", "Freestyle Script", "A promise cannot be resolved with itself.", "CordiaUPC", "Footlight MT Light", "Centaur", "121064", "121133", "setResult", "MY_miniProgram", "passive", "padding: .3em .8em; border: 1px solid #999; border-radius: .3em; background: transparent; margin: .6em auto; outline: none; color: ", "floor", "MingLiU_HKSCS-ExtB", "getQuery", "navigator", "_bytes", " \n 请求地址", "51d7c9ad", "apply", "Gill Sans", "Timestamp", "function", "options", "pathname", "[object]", "removeHandler", "MAX_COMBINED_FRAGMENT_UNIFORM_COMPONENTS", "makeDOMException", "121001", "Raavi", "切换验证方式", "RISK_VERIFY_REQUEST_TIME_OUT", "pageX", "NewsGoth BT", "key", "#A4A3A3", "Mrs Eaves", "title", "request_null", "GeoSlab 703 Lt BT", "Pickwick", "121057", "getProgramParameter", "delta", "Iskoola Pota", "' src='https://s3plus.meituan.net/v1/mss_f231eb419c414559a1837748d11d4312/yoda-resources/help_icon.png'>\n </div>\n <p class='slider-title ", "min", "stop", "circle3", "group", "ZapfHumnst Dm BT", "NETWORK_REDIRECT_TIP", "data", "getbyte", "uniform2ui", "pcHtml", ">\n <div class='boxStatic ", "callPhantom", "lwc", "/v2/ext_api/", "shaderSource", "getDate", "121154", "121123", "close", "ネットワークがリダイレクトしました、後でもう一度やり直してください", "925458AfqHQn", "getBufferSubData", "0-0-0-0", "rangeMax", "boxStatic", "Party LET", "ontouchmove", "'>\n ", "enableVertexAttribArray", "wsh", "Goudy Stout", "bindBuffer", "RISK_NOT_VERIFY_BY_ORDER", "wordBreak", "121112", "mouseout", "symbols", "setPrototypeOf", "新版签名正常", "drag", "40zdFOiH", "\n ", "header", "callHandle", "RISK_BOOM_PROOF_DENY", "defenseForm", "style", "no support webgl", "maxContainer", "moveingBar ", "__driver_unwrapped", "Content-MD5", "utf8", "globalCompositeOperation", "getFonts", "formDataPost", "RISK_PARAMS_INVALID_FORMART", "Trident", "isSync", "'>\n <div class='cententWrapper ", "background-color: ", "setUint32", "offsetX", "circle6", "Unicorn", "getWebglVendorUnmasked", "创建XMLHttpRequest对象失败", "request_timeout", "vendor", "MingLiU_HKSCS", "'></div>\n </div>\n </div>", "customStyle", "ALPHA", "Harrington", "Aparajita", "getInt32", "MUSEO", "exponentialRampToValueAtTime", "</span>\n <span class='subtitle ", "Euphemia UCAS", "Ayuthaya", "v_c", "'></div>\n <div class='circle3 ", "_yoda_category_", "CU_PRESIGN_FAIL", "High Tower Text", "MAX_DRAW_BUFFERS", "Gujarati Sangam MN", "RISK_VERIFY_ERROR_RETRY", "Incised901 BT", "sign", "PADCHAR", "getElementsByTagName", "ARRAY_BUFFER", "setInt32", "invalid plaintext size (must be 16 bytes)", "Matisse ITC", "abs", "></div>\n <div class='globalPCCombinationWrapper ", "__selenium_evaluate", "none", "Serifa Th BT", "121050", "call", "Cuckoo", "pageY", "allSettled", "webgl", "moveTo", "RISK_COMMON_PARAMS_LOST", "Lucida Calligraphy", "localStorage", "DFKai-SB", "_setter", "Viner Hand ITC", "Onyx BT", "isKNBEnv", "Kalinga", "getBoundingClientRect", "boxOk ", "arc", "setUint8", "'>\n <div class='slider-help-wrapper' id='", "createQuery", "'>\n <div class='circle ", "'>为了完成验证，需要您提供多项信息</span>\n </div>\n <button type='button'\n class='btn ", "Cooper Black", "Array", "Offset plus length of array is out of range", "_yoda_listIndex", "shadowOffsetY", "whiteSpace", "Bitstream Vera Sans Mono", "DataView", "buttons", "createbgImage", "MAX_3D_TEXTURE_SIZE", "beginQuery", "Lucida Sans", "duration", "</button>\n </div>", "Gill Sans MT Condensed", "Niagara Solid", "fontSize", "Tubular", "Internet Explorer", "normal", "103", "Error: ", "Century Schoolbook", "Bookshelf Symbol 7", "RISK_AUTHORIZE_CODE_EXPIRE", "charCodeAt", "Marion", "Bodoni 72 Smallcaps", "nativeSign sign fail", "Sketch Rockwell", "targetTouches", "新版签名异常", "ネットワークのつなぎ状態が不安定です", "'>\n <span class='title ", "protocol", "RISK_LOCAL_PHONE_FAILED", "waitSync", "miniprogram", "117", "prompt", "handlerClick", "127051", "indexOf", "wordSpacing", "TimesTamp", "func", "MAX_ARRAY_TEXTURE_LAYERS", "inline", "symbol", "NETWORK_REDIRECT_CODE", "list", "fastKey", "&Date=", "Euphemia", "BlairMdITC TT", "Hoefler Text", "msg", "Undefined", "Hiragino Kaku Gothic ProN", "trys", "getOrigin", "hex", "#FFBD00", "Bremen Bd BT", "BLUE_BITS", "Safari", "AvantGarde Bk BT", "&YodaKNB=1", "RISK_FACE_IDENTITY_NOT_MATCHED", "gzip", "hasAttribute", "textContent", "121124", "Perpetua", " is not an object!", "getWebglVendor", "UPSMS", "c_techportal_verify", "_state", "></div>\n <div class='moveingBar ", "rangeMin", "getStringHashMD5", "availWidth", "Bernard MT Condensed", "drawArrays", "jump", "https://s3plus.meituan.net/v1/mss_f231eb419c414559a1837748d11d4312/yoda-resources/slider/m_loading.png", "invalidateFramebuffer", "top", "Uint16Array", "loadSource", "moveingBarError ", "Vrinda", "withCredentials", "Heiti SC", "label", "Wingdings 3", "Kannada Sangam MN", "[null]", "not a function", "Curlz MT", "Forte", "Constantia", "Amazone BT", "iterator", "动态签名", "121002", "Bandy", "op-symbols", "Pegasus", "RISK_NO_SUCH_METHOD", "getShaderPrecisionFormat", "getwd", "hash", "done", "succCallbackUrl", "Can't call method on ", "MONO", "Tahoma", "BankGothic Md BT", "MAX_COLOR_ATTACHMENTS", "forEach", "safari", "127021", "code=", "FILLPHONENUMBER", "Old English Text MT", "startX", "Bodoni 72", "'></div>\n <div class='circle4 ", "MAX_TEXTURE_LOD_BIAS", "Traditional Arabic", "Humanst521 BT", "MAX_DRAW_BUFFERS_WEBGL", "'></div>\n <div class='circle9 ", "sessionStorage", "defineProperty", "plugins", "versionCode", "changedTouches", "move", "VERSION", "data-listindex", "boxLoading", "VisualUI", "127031", "getSupportedExtensions", "zh-CN", "CM_TOKEN_FAIL", "callUrl", "html", "getFloat32", "Array index out of range", "clientY", "Perpetua Titling MT", "Lucida Sans Typewriter", "Showcard Gothic", "e58ee51eebaa25f3", "_Ke", "pauseTransformFeedback", "request_", "isDegrade", "NETWORK_SERVER_TIP", "121044", "clearBufferfv", "2.6.12", "Mistral", "experimental-webgl", "bindBufferBase", "12149608HJKMSb", "Colonna MT", "RESULT_OK", "sliderPCPoint", "moveingBar", "uniform2uiv", "121006", "success", "Object.defineProperty called on non-object", "Firefox", "offsetY", "origin_request_code", "availHeight", "Promise.race accepts an array", "charAt", "成功回调丢失参数", "drag the slider ", "value", "Minion Pro", "application/x-www-form-urlencoded", "Not_Bridge", "127", "Available", "uniform1uiv", "__API_URL__", "Angsana New", "\n <div class='yoda-slider-wrapper ", "Jester", "constructor", "Browallia New", "String", "121129", "session", "OPR", "121049", "count", "getSourcePath", "Bauer Bodoni", "freeze", "99999", " class='sel ", "then", "UNIFORM_BUFFER_OFFSET_ALIGNMENT", "FRAGMENT_SHADER", "{}.constructor(\"return this\")( )", "keyboardEvent", "onFulfilled", "Wingdings", "MAX_UNIFORM_BLOCK_SIZE", "textDecoration", "Lao UI", "Microsoft Edge", "MingLiU", "handlerHelp", "time", "BatangChe", "Andalus", "CopperplGoth Bd BT", "Matura MT Script Capitals", "clientWaitSync", "race", "loading", "data-verifyid", "utils", "Book Antiqua", "callee", "Yes, D3D9", "_deferreds", "MAX_PROGRAM_TEXEL_OFFSET", "doms", "touchstart", "compileShader", "ceil", "uniformMatrix2x4fv", "isDrag", "setItem", "Rockwell", "createElement", "Kaito", "RISK_PARAMS_LOST", "bufferData", "getOwnPropertySymbols", "Nyala", "WX_miniProgram", "click", "configurable", "Microsoft JhengHei", "clientHeight", "promise", "DOM Exception 5", "#FD9B29", "您的请求出现了异常", "Bank Gothic", "Segoe Print", "chrome", "listenwd", "Fixedsys", "Tw Cen MT Condensed", "globalTimer", "PC上显示了i版的滑动", "RISK_AUTHORIZE_CODE_FAIL", "actualMove", "buffer", "b_techportal_7nezp2sy_mc", "American Typewriter", "Microsoft Yi Baiti", "Corbel", "ChelthmITC Bk BT", "YODA_Bridge", "AES must be instanitated with `new`", "setFloat64", "NETWORK_FAILURE_CODE", "Not available", "Antique Olive", "connect", "Palatino", "Wingdings 2", "GulimChe", "MingLiU-ExtB", "isFrozen", "replace", "English 111 Vivace BT", "dianping", "Url", "\n precision mediump float;\n varying vec4 v_color;\n void main() {\n gl_FragColor = v_color; // return reddish-purple\n }\n ", "RISK_NAME_IDENTITY_INFO_NOT_FOUND", "getElementById", "texImage3D", "Kokila", "MV Boli", "riskLevelInfo", "lowp", "Korinna BT", "render", "加载图片失败", "sendBatch", "#490F44", "121046", "reduce", "circle9", "tagName", "Magneto", "Reflect", "knbFun", "Sinhala Sangam MN", "HIGH_INT", "onVerifySuccess", "PKCS#7 invalid padding byte", "Helvetica Neue", "_getter", "webdriver-evaluate", "Malformed string", "Zurich Ex BT", "editFinishedTimeStamp", "DELICIOUS", "BANKCARDREALNAME", "Rockwell Extra Bold", "Accessors not supported!", "'>\n <p class='title ", "KaiTi", "uniformMatrix4x2fv", "ShelleyVolante BT", "Shonar Bangla", "TT_miniProgram", "getWdLength", "renderbufferStorageMultisample", "LUCIDA GRANDE", "absolute", "detachShader", "Santa Fe LET", "AudioContext", "KodchiangUPC", "sliderStopDrag", "string", "ADOBE CASLON PRO", "use", "__lastWatirAlert", "ajaxError", "CAT", "cookieChromeDriver", "FACE", "shadowBlur", "121058", "121000", "Nadeem", "webdriver-evaluate-response", "RISK_MOBILE_NOT_EXIST", "\n </div>\n </div>\n ", "Poster", "Levenim MT", "setUint16", "VERTEX_SHADER", "Network is redirecting, please try again later", "copyTexSubImage3D", "'>立即验证</button>\n </div>", "webdriverScriptFn", "Gloucester MT Extra Condensed", "valueOf", "'>为了您的账号安全请选择一种方式完成验证</p>\n </div>\n <div id=", "ALPHA_BITS", "INPUT", "toBytes", "121139", "writable", "getHash", "table", "\n <div style='height: 90vh; text-align: center; font-size: 16px;\n background: url(https://s3plus.meituan.com/v1/mss_f231eb419c414559a1837748d11d4312/yoda-resources/errorBg.png) center center no-repeat;'>\n <div style=\"padding-top: 50%;\">\n <p style=\"line-height: 32px;font-size: 1.2em;font-weight: bold; color: #333;\">出错了</p>\n <p style=\"line-height:32px; font-size: 1em; color: #333;\">", "drawArraysInstanced", "preventExtensions", "Snap ITC", "get", "PTBarnum BT", "<div style=\"text-align: center;\">\n <button type='button' id='toggleBtn'\n style='", "Segoe UI Light", "endQuery", "121043", "strip", "history", "SILKSCREEN", "keyCode", "RENDERER", "pixelDepth", "$chrome_asyncScriptInfo", "72px", "Gulim", "join", "crypto", "(((.+)+)+)+$", "document", "__defineGetter__", "Malgun Gothic", "layer", "MAX_VERTEX_UNIFORM_VECTORS", "Utsaah", "circle8", "decodeURIComponent", "a_position", "Bodoni 72 Oldstyle", "Courier New", "您的网络状况不好", "113", "_value", "Promise", "boxStatic ", "loadCircle", "linearRampToValueAtTime", "Ribbon131 Bd BT", "clientX", "getFloat64", "127041", "Letter Gothic", " : undefined", "span", "121065", "__webdriver_unwrapped", "knbGroup", "Uint32Array", "Narkisim", "vertexAttribI4uiv", "Futura", "toPrimitive", "deleteShader", "fontend sign error", "length", "スライダを右にドラッグする", "121088", "RISK_VERIFY_PAYPWD_USE_PAY_ERROR_LIMIT", "Arrus BT", "findIndex", "Monaco", "Bookman Old Style", "signal", "MULTIPLE", "MAX_VARYING_COMPONENTS", "round", "boxWrapper", "color: ", "</p>\n <div class='box-wrapper ", "Incised901 Lt BT", "121067", "BrowalliaUPC", "deleteSampler", "global", "trajectory", "setRequestHeader", "Informal Roman", "deleteProgram", "NOT_TELECOM_OPERATORS", "RISK_DEFAULT_ERROR", "MAX_TEXTURE_MAX_ANISOTROPY_EXT", "MAX_RENDERBUFFER_SIZE", "121003", "navigateBack", "createAnalyser", "MAX_UNIFORM_BUFFER_BINDINGS", "response_code", "invalid ciphertext size (must be multiple of 16 bytes)", "Fruitger", "Univers", "Not implemented", "texSubImage3D", "Herald", "keydown", "padding", "Batang", "uniqueId", "Niagara Engraved", "FrnkGothITC Bk BT", "FuturaBlack BT", "search", "リクエストがエラー発生しました", "succModule", "deleteTransformFeedback", "MS UI Gothic", "system", "getPrototypeOf", "NETWORK_TIMEOUT_TIP", "s_s_c", "Trajan", "PRINCETOWN LET", "Leelawadee", "removeChild", "delLastItem", "IDREALNAME", "onFreeze", "121007", "_yoda_config", "__selenium_unwrapped", "RISK_LEVEL_DENY", "121055", "metric", "map", "listindex", "wapi", "random", "Brush Script MT", "boxError ", "EAT BETTER LIVE BETTER", "FONTIN", "getCanvasFp", "host", "#dd403b", "KS_miniProgram", "Dauphin", "Eat Better, Live Better", "__driver_evaluate", "_WEBDRIVER_ELEM_CACHE", "meituan", "strokeText", "seed", "Didot", "response", "pkcs7", "yodaButtonTextColor", "btoa", "ADOBE GARAMOND PRO", "pow", "mediump/", "isSampler", "_lastCipherblock", "meta", "cookie", "News Gothic", "Algerian", "MoolBoran", "PMingLiU-ExtB", "webdriverElemCache", "getOwnPropertyDescriptor", "未找到Native通信桥", "AES", " | ", "https://verify.inf.test.meituan.com/feedback/manmachine/#/?requestCode=", "getFragDataLocation", "versions", "&Url=", "Baskerville Old Face", "clearBufferfi", "inspectSource", "Kunstler Script", "request_status", "POST", "Imprint MT Shadow", "hasOwnProperty", "Impact", "Chalkboard SE", "initTimeStamp", "; border-color: ", "clearBufferuiv", "atob", "Arial Narrow", "121010", "isArray", "error", "requestAnimationFrame", "sliderMoveDrag", "MEDIUM_FLOAT", "MS PMincho", "catch", "RISK_USER_RESETPWD_CODE_EXPIRE", "getParameter", "Palatino Linotype", "isNative", "enumerable", "Lydian BT", "request", "Andale Mono", "121099", "pop", "9845046xsMoly", "RISK_VERIFY_ERROR_TIMES_LIMIT_ONE_DAY", "frequencyBinCount", "wwt", "失败回调丢失参数", "Marlett", "getUint32", "16px xxx", "MS Outlook", "OzHandicraft BT", "webGroup", "cbc", "GoudyOLSt BT", "byteOffset and length reference an area beyond the end of the buffer", "createBuffer", "BinnerD", "timeout", "AmerType Md BT", "HEAD", "beginPath", "Kristen ITC", "sliderH5Point", "postMessage", "verifyMethodVersion", "Kartika", "target", " : function", "closePath", "some", "RISK_INFERENCE_VERFY_FAILED", "使用了touchstart事件触发了滑块", "fontWeight", "getFloatFrequencyData", "GET", "__dsc__", "moveDrag", "NETWORK_ERROR", "HTTP请求失败", "serif", "MAX_FRAGMENT_INPUT_COMPONENTS", "MS Serif", "844216KxeYsB", "requestCode", "glVersion", "#3974CC", "RISK_VERIFY_ERROR_TIMES_LIMIT", "contentEncoding", "RISK_PARAM_INVALID", "body", "Savoye LET", "frequency", "uniform3ui", "beginTransformFeedback", "Array too large for polyfill", "121130", "getShaderParameter", "domReady", "RISK_UP_SMS_PHONE_NO_NOT_SUPPORT", "concat", "yodaSliderTip", "origin", "vertexAttribI4i", "ontimeout", "121056", "KNB_Bridge_publish swap", "className", "Array contains invalid value: ", "invalid plaintext size (must be multiple of 16 bytes)", "closePage", "unable to locate global object", "RISK_USER_NOT_SUPPORT", "Albertus Extra Bold", "ISPREALNAME", " is not a function!", "请向右拖动滑块", "referrer", "split", "Zapfino", "[object Window]", "framebufferTextureLayer", "define", "document.F=Object", "121145", "Script", "Aharoni", "Apple SD Gothic Neo", "INVALID_CHARACTER_ERR", "RISK_AUTH_TIME_OUT", "Charlesworth", "copyWithin", "__fxdriver_evaluate", "version", "unsupported array-like object", "Futura ZBlk BT", "Denmark", "mtaction", "Marigold", "></div>\n <label class='bg-tip'>", "Copperplate Gothic Bold", "send", "utf8Decode", "env", "isTitans", "config", "Microsoft PhagsPa", "blur", "getSearch", "OCR A Extended", "globalPCCombinationWrapper", "Castellar", "COLOR_BUFFER_BIT", "Old Century", "_pack", "Arguments", "SLIDER", "ZapfHumnst BT", "Times New Roman", " class='btn' data-listIndex='", "status", "Blackadder ITC", "_yoda_options", "setFloat32", "__wxjs_environment", "getTime", "stroke", "getWebglRenderer", "#ff6633", "Unexpected argument type(s)", "startY", "offsetWidth", "Times New Roman PS", "'></div>\n <div class='circle2 ", "setBoxPosition", "Modern No. 20", "number", "lwe", "isDPApp", "domAutomationController", "addRequestSignature", "fp_", "isVertexArray", "></div>\n <div class='globalCombinationWrapper'>\n <div class='titleWrapper'>\n <p class='title'>为了您的账号安全</p>\n <p class='title'>请选择一种方式完成验证</p>\n </div>\n <div id=", "_immediateFn", "moveingBarError", "getSyncParameter", "163", "monospace", "__sc__", "YODA_Bridge_publish swap", "WEBKIT_EXT_texture_filter_anisotropic", "Malayalam Sangam MN", "
美团滑块(1-18，js逆向)相关推荐
- 极验滑块4代js逆向
极验4代滑块验证与三代相比少了底图还原,请求也便捷了很多,混淆还是ob混淆,大致上没啥变化. 滑动失败会重新返回两个包,一个是新的图片信息,另一个是加密js的地方.加密入口在,头发多的可以慢慢跟. 左 ...
- JS逆向之美团网模拟登录h5Fingerprint、password（RSA）加密参数解析
文章目录 前言 一.页面分析 二.加密解析 1.password解析 加密定位 参数解密 2.h5Fingerprint解析 加密定位 参数解密 3.python调用模拟请求 总结 前言 最近和几位大 ...
- AST(抽象语法树)实战入门：js逆向中滑块加密if语句转化
概述:AST 抽象语法树 实战 入门 案例 js逆向 js滑块 js加密 极验 瑞数 阿里滑块 5秒盾 引言: AST算得上是高端技能.如果把爬虫技能分为初中高三个阶段的话.常规的JS逆向找找参数, ...
- Js逆向教程17-极验滑块 实现加密算法的逻辑
Js逆向教程17-极验滑块 实现加密算法的逻辑 还是和上节课一样,针对这个网址 https://www.geetest.com/demo/slide-float.html 一.加密算法的结果查看 计算 ...
- 纯js逆向淘宝阿里云滑块破解
小小淘宝的滑块风控也敢班门弄斧,纯js逆向直接安排
- 凡科网JS逆向后跳出的滑块验证（base64图片解码之后的破解滑块验证）
目录 1.前提和大概思路概述 2. 转换思路selenium和验证滑块图片的获取处理 3.总结 1.前提和大概思路概述 只是学习的途中有一些新的发现,分享给大家,希望对你们有帮助. 凡科网的JS逆向的 ...
- 12.10 快手 滑块js逆向 did 设备注册 滑块验证 技术交流
某手滑块 js逆向 did设备注册参数 高通过率 技术向探讨 需要学习交流的可以联系我 技术讨论不构成任何违法行为,如有造成任何不良影响联系删除
- 知乎登录js逆向及文章爬取js逆向
知乎登录js逆向及文章爬取js逆向 **在此声明:**本文章仅仅用于学习交流,不得用于商业活动. 登录支持账号密码登录及知乎移动端软件扫码登录. 文章爬取是把原文章的原样近似爬取,包括图片,链接,及评 ...
- js 模拟点击_爬虫js逆向之无限debugger--抖音第三方数据分析平台的坑
爬虫js逆向系列 我会把做爬虫过程中,遇到的所有js逆向的问题分类展示出来,以现象,解决思路,以及代码实现,这三方面解析,供大家参考爬虫认知 在程序猿所有的方向中,爬虫是离money最近的一个方向,你 ...
最新文章
- 【MongoDB学习之一】初始MongoDB
- 百度推送 android7.1,【SDK版本更新】Android SDK 5.7.1
- Hibernate执行原生SQL
- Keras 实现 LSTM
- 纯Python模块发布setup脚本编写示例
- linux查看 idt日志,实现RCP的日志管理
- [蓝桥杯][算法提高VIP]质数的后代-质数筛
- 关闭Xcode警告 (强迫症还在等什么!)
- 小腿肌肉该怎么练？有哪些训练动作？
- JQ简单二级导航，加子导航栏
- Android连接网络立即同步时区
- python自动化运维工程师面试题_运维面试题(含答案)
- 【渗透测试】编辑器漏洞
- Java读取图片 cmyk转rgb
- ASP.NET MVC后台判断是否是手机登录以及是否是微信公众号登陆
- 【JAVA程序设计】基于JavaWeb技术的医疗管理系统-有报告
- AutoHotKey：Shift+ijkl实现方向键
- 计算机开不了机反复重启,电脑一直重启就是开不了机怎么样解决
- 这里有20万个虎年微信红包封面免费领取！
- ssl证书过期该怎么办？域名未过期证书却过期，该怎么办？
热门文章