web qq 获取好友列表hash算法

web qq 获取好友列表hash算法

在使用web qq的接口进行好友列表获取的时候，需要post一个参数：hash

在对其js文件进行分析之后，发现计算hash的函数位于：

http://0.web.qstatic.com/webqqpic/pubapps/0/50/eqq.all.js

这个文件中：

		P = function(b, i) {
				for (var a = [], s = 0; s < i.length; s++) a[s % 4] ^= i.charCodeAt(s);
				var j = ["EC", "OK"],
				d = [];
				d[0] = b >> 24 & 255 ^ j[0].charCodeAt(0);
				d[1] = b >> 16 & 255 ^ j[0].charCodeAt(1);
				d[2] = b >> 8 & 255 ^ j[1].charCodeAt(0);
				d[3] = b & 255 ^ j[1].charCodeAt(1);
				j = [];
				for (s = 0; s < 8; s++) j[s] = s % 2 == 0 ? a[s >> 1] : d[s >> 1];
				a = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F"];
				d = "";
				for (s = 0; s < j.length; s++) d += a[j[s] >> 4 & 15],
				d += a[j[s] & 15];
				return d
		}

这样可以写一个python版本：

		a=[0,0,0,0]
		s=0
		for s in range(0,len(i)):
			a[s%4] = a[s%4] ^ ord(i[s])
		j = ["EC", "OK"]
		d = [0,0,0,0]
		d[0] = int(b) >> 24 & 255 ^ ord(j[0][0])
		d[1] = int(b) >> 16 & 255 ^ ord(j[0][1])
		d[2] = int(b) >> 8 & 255 ^ ord(j[1][0])
		d[3] = int(b) & 255 ^ ord(j[1][1])
		j = range(0,8)
		for s in range(0,8):
			if s % 2 == 0:
				j[s] = a[s >> 1]
			else:
				j[s] = d[s >> 1]
		a = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F"]
		d = ""
		for s in range(0,len(j)):
			d = d + a[j[s] >> 4 & 15]
			d = d + a[j[s] & 15]
		return d

但是第二天使用web qq接口获取好友列表时，却不能获取了。后来发现原来是这个hash函数变了：

		P = function(b, i) {
			for (var a = [], s = 0; s < b.length; s++) a[s] = b.charAt(s) - 0;  alert(a);//ago
			for (var j = 0, d = -1, s = 0; s < a.length; s++) {
				j += a[s];
				j %= 
				i.length;
				var c = 0;
				if (j + 4 > i.length) for (var l = 4 + j - i.length, x = 0; x < 4; x++) c |= x < l ? (i.charCodeAt(j + x) & 255) << (3 - x) * 8: (i.charCodeAt(x - l) & 255) << (3 - x) * 8;
				else for (x = 0; x < 4; x++) c |= (i.charCodeAt(j + x) & 255) << (3 - x) * 8;
				d ^= c
			}
			a = [];
			a[0] = d >> 24 & 255;
			a[1] = d >> 16 & 255;
			a[2] = d >> 8 & 255;
			a[3] = d & 255;
			d = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F"];
			s = "";
			for (j = 0; j < a.length; j++) s += d[a[j] >> 4 & 15],
			s += d[a[j] & 15];
			return s
		}

继续改写成python版：

		a=[]
		s=0
		for s in range(0,len(b)):
			t=int(b[s])
			a.append(t)	
		j = 0
		d = -1
		s = 0
		for s in range(0,len(a)):
			j = j + a[s]
			j = j % len(i)
			c = 0
			if (j + 4) > len(i): 
				l = 4 + j - len(i)
				for x in range(0,4):
					if x < l:
						c = c | (( ord(i[j + x]) & 255) << (3 - x) * 8 )
					else:
						c = c | ( ( ord(i[x - l]) & 255) << (3 - x) * 8 )
			else:
				for x in range(0,4):
					c = c | (( ord(i[j + x]) & 255) << (3 - x) * 8 )
			d = d ^ c	
			
		a = [0,0,0,0]
		a[0] = d >> 24 & 255
		a[1] = d >> 16 & 255
		a[2] = d >> 8 & 255
		a[3] = d & 255
		d = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F"]
		s = ""
		for j in range(0,len(a)):
			s = s + d[a[j] >> 4 & 15]
			s = s + d[a[j] & 15]
		return s

///

在之后，又发现其计算hash的函数P一直在变，总不能一直去手动修改三？

解决办法：动态获取这个js文件---》获取计算hash的js函数P的代码--》使用PyV8执行js代码获取hash

def hash_p(self,b='',i=''):

	if b=='' and i=='':
		b=self.qq
		i=self.ptwebqq
		
	data = urllib2.urlopen("http://0.web.qstatic.com/webqqpic/pubapps/0/50/eqq.all.js").read()
	data = data.split("P=function")[1].split(",r=function")[0]
	data = "P=function" + data

	import PyV8
	js = PyV8.JSContext()          # create a context with an implicit global object
	js.enter()                     # enter the context (also support with statement)   

	data = data + ';P("' + b + '","' + i + '");'
	print data
	
	s = js.eval(data)
	print  s
	return s