某信开发者平台登录页面js逆向分析

某信开发者平台登录页面js逆向分析
网址：https://mp.weixin.qq.com/
微信公众平台密码逆向：


打开搜索：输入pwd


但是我们只传进来一个参数e，实际参数e，没有用到的话为NULL或者undefied，找到离其最近的大括号，这里面是相同类型的函数

如果未定义，将其设置为{},或者undefied即可

t= {}
n=undefined

代码如下：

js代码：

 function getwd(e, t, n) {
                return t ? n ? i(t, e) : o(i(t, e)) : n ? r(e) : o(r(e))
            }
t= {}
n=undefined
            function l(e, t) {
                var n = (65535 & e) + (65535 & t);
                return (e >> 16) + (t >> 16) + (n >> 16) << 16 | 65535 & n
            }
            function a(e, t, n, o, r, i) {
                return l((t = l(l(t, e), l(o, i))) << r | t >>> 32 - r, n)
            }
            function d(e, t, n, o, r, i, s) {
                return a(t & n | ~t & o, e, t, r, i, s)
            }
            function f(e, t, n, o, r, i, s) {
                return a(t & o | n & ~o, e, t, r, i, s)
            }
            function m(e, t, n, o, r, i, s) {
                return a(t ^ n ^ o, e, t, r, i, s)
            }
            function g(e, t, n, o, r, i, s) {
                return a(n ^ (t | ~o), e, t, r, i, s)
            }
            function s(e, t) {
                e[t >> 5] |= 128 << t % 32,
                e[14 + (t + 64 >>> 9 << 4)] = t;
                for (var n, o, r, i, s = 1732584193, a = -271733879, c = -1732584194, u = 271733878, p = 0; p < e.length; p += 16)
                    s = d(n = s, o = a, r = c, i = u, e[p], 7, -680876936),
                    u = d(u, s, a, c, e[p + 1], 12, -389564586),
                    c = d(c, u, s, a, e[p + 2], 17, 606105819),
                    a = d(a, c, u, s, e[p + 3], 22, -1044525330),
                    s = d(s, a, c, u, e[p + 4], 7, -176418897),
                    u = d(u, s, a, c, e[p + 5], 12, 1200080426),
                    c = d(c, u, s, a, e[p + 6], 17, -1473231341),
                    a = d(a, c, u, s, e[p + 7], 22, -45705983),
                    s = d(s, a, c, u, e[p + 8], 7, 1770035416),
                    u = d(u, s, a, c, e[p + 9], 12, -1958414417),
                    c = d(c, u, s, a, e[p + 10], 17, -42063),
                    a = d(a, c, u, s, e[p + 11], 22, -1990404162),
                    s = d(s, a, c, u, e[p + 12], 7, 1804603682),
                    u = d(u, s, a, c, e[p + 13], 12, -40341101),
                    c = d(c, u, s, a, e[p + 14], 17, -1502002290),
                    s = f(s, a = d(a, c, u, s, e[p + 15], 22, 1236535329), c, u, e[p + 1], 5, -165796510),
                    u = f(u, s, a, c, e[p + 6], 9, -1069501632),
                    c = f(c, u, s, a, e[p + 11], 14, 643717713),
                    a = f(a, c, u, s, e[p], 20, -373897302),
                    s = f(s, a, c, u, e[p + 5], 5, -701558691),
                    u = f(u, s, a, c, e[p + 10], 9, 38016083),
                    c = f(c, u, s, a, e[p + 15], 14, -660478335),
                    a = f(a, c, u, s, e[p + 4], 20, -405537848),
                    s = f(s, a, c, u, e[p + 9], 5, 568446438),
                    u = f(u, s, a, c, e[p + 14], 9, -1019803690),
                    c = f(c, u, s, a, e[p + 3], 14, -187363961),
                    a = f(a, c, u, s, e[p + 8], 20, 1163531501),
                    s = f(s, a, c, u, e[p + 13], 5, -1444681467),
                    u = f(u, s, a, c, e[p + 2], 9, -51403784),
                    c = f(c, u, s, a, e[p + 7], 14, 1735328473),
                    s = m(s, a = f(a, c, u, s, e[p + 12], 20, -1926607734), c, u, e[p + 5], 4, -378558),
                    u = m(u, s, a, c, e[p + 8], 11, -2022574463),
                    c = m(c, u, s, a, e[p + 11], 16, 1839030562),
                    a = m(a, c, u, s, e[p + 14], 23, -35309556),
                    s = m(s, a, c, u, e[p + 1], 4, -1530992060),
                    u = m(u, s, a, c, e[p + 4], 11, 1272893353),
                    c = m(c, u, s, a, e[p + 7], 16, -155497632),
                    a = m(a, c, u, s, e[p + 10], 23, -1094730640),
                    s = m(s, a, c, u, e[p + 13], 4, 681279174),
                    u = m(u, s, a, c, e[p], 11, -358537222),
                    c = m(c, u, s, a, e[p + 3], 16, -722521979),
                    a = m(a, c, u, s, e[p + 6], 23, 76029189),
                    s = m(s, a, c, u, e[p + 9], 4, -640364487),
                    u = m(u, s, a, c, e[p + 12], 11, -421815835),
                    c = m(c, u, s, a, e[p + 15], 16, 530742520),
                    s = g(s, a = m(a, c, u, s, e[p + 2], 23, -995338651), c, u, e[p], 6, -198630844),
                    u = g(u, s, a, c, e[p + 7], 10, 1126891415),
                    c = g(c, u, s, a, e[p + 14], 15, -1416354905),
                    a = g(a, c, u, s, e[p + 5], 21, -57434055),
                    s = g(s, a, c, u, e[p + 12], 6, 1700485571),
                    u = g(u, s, a, c, e[p + 3], 10, -1894986606),
                    c = g(c, u, s, a, e[p + 10], 15, -1051523),
                    a = g(a, c, u, s, e[p + 1], 21, -2054922799),
                    s = g(s, a, c, u, e[p + 8], 6, 1873313359),
                    u = g(u, s, a, c, e[p + 15], 10, -30611744),
                    c = g(c, u, s, a, e[p + 6], 15, -1560198380),
                    a = g(a, c, u, s, e[p + 13], 21, 1309151649),
                    s = g(s, a, c, u, e[p + 4], 6, -145523070),
                    u = g(u, s, a, c, e[p + 11], 10, -1120210379),
                    c = g(c, u, s, a, e[p + 2], 15, 718787259),
                    a = g(a, c, u, s, e[p + 9], 21, -343485551),
                    s = l(s, n),
                    a = l(a, o),
                    c = l(c, r),
                    u = l(u, i);
                return [s, a, c, u]
            }
            function c(e) {
                for (var t = "", n = 0; n < 32 * e.length; n += 8)
                    t += String.fromCharCode(e[n >> 5] >>> n % 32 & 255);
                return t
            }
            function u(e) {
                var t, n = [];
                for (n[(e.length >> 2) - 1] = void 0,
                t = 0; t < n.length; t += 1)
                    n[t] = 0;
                for (t = 0; t < 8 * e.length; t += 8)
                    n[t >> 5] |= (255 & e.charCodeAt(t / 8)) << t % 32;
                return n
            }
            function o(e) {
                for (var t, n = "0123456789abcdef", o = "", r = 0; r < e.length; r += 1)
                    t = e.charCodeAt(r),
                    o += n.charAt(t >>> 4 & 15) + n.charAt(15 & t);
                return o
            }
            function p(e) {
                return unescape(encodeURIComponent(e))
            }
            function r(e) {
                return c(s(u(e = p(e)), 8 * e.length))
            }
            function i(e, t) {
                var n, e = p(e), t = p(t), o = u(e), r = [], i = [];
                for (r[15] = i[15] = void 0,
                16 < o.length && (o = s(o, 8 * e.length)),
                n = 0; n < 16; n += 1)
                    r[n] = 909522486 ^ o[n],
                    i[n] = 1549556828 ^ o[n];
                return e = s(r.concat(u(t)), 512 + 8 * t.length),
                c(s(i.concat(e), 640))
            }

python代码：

import execjs
word=input("请输入要加密的密码")

ctx=execjs.compile(open("./01.js","r",encoding='utf-8').read())
result = ctx.call("getwd",word)
print(result)

ok 破解成功!.