Python crawler advanced essential | About a free IP publishing platform webpage encryption parameter logic analysis

Today website

aHR0cHM6Ly93d3cuYmFpYmlhbmlwLmNvbS9ob21lL2ZyZWUuaHRtbA==

Some of the previous simple website examples were either revised or the website was cold, so add an example of eval confusion

Packet capture and positioning

The display of the website opened is like this, but a simple confusion is made in the ip address

The ip column shows a function name in response here, which is obviously a decryption operation

By searching for the function name FFsheepishness

You can find the following js

You can see the following js code in the opened js file

But there is no specific logic in ddip here. The retrieved result ddip is in the eval in the second paragraph below

So you need to do a decryption here, and copy the decrypted code, check the specific logic of ddip

Decrypt the packaged code through console.log(xxx) printing

The xxx here is the code wrapped by eval in the webpage index.js

After the two pieces of eval confused code are solved, you can see ddip

Complete encryption

The next step is to make up what is missing, just like in the screenshot below, run the code directly to see what the code is missing (there are only two pieces of js code solved by eval in this file)

According to the prompt, what is missing is $

Let's go back to the index.js of the webpage and continue to find

Only found the following anonymous function

That should be this, we copy all this code and paste it above the code that just reported the error

It prompts that jQuery is not defined when running

Don’t do anything with jQuery at this time. Let’s take a look at the logic. The jQuery here is not used. It is only used by the above request. Change it to pass parameter $ and run again

Still the prompt is not defined, here is because our incoming parameters are not defined in this js file, so we have to define

Define $ as {} and run it again

The results of comparing the pages are consistent

Alright, today’s article is over here, we will meet again next time~

The article on the mixed development of Go and Python is still being written. It is the basics at the beginning. You can learn by yourself

Love&Share [Finish]By the way, after reading it, I remember one-key four-connection, this is really important to me.

Recommended Posts

Python crawler advanced essential | About a free IP publishing platform webpage encryption parameter logic analysis
Python crawler advanced essential | a live data analysis platform encryption parameter sign analysis
Python crawler advanced essential | Decryption logic analysis of an index analysis platform
Python crawler advanced essential | Signature encryption logic analysis of a financial information website (old site update)
Python crawler advanced must-have | Logical analysis of the encryption parameters of the jump link on a certain information publishing platform