2.某书网js逆向部分总结

单纯技术分享分析思路，不提供源代码

1.vl5x与guid

文书1.PNG

打上断点，进行刷新然后如下图所示

文书2.PNG

文书4.PNG

文书5.PNG

上图的文书解密中我们看到，458行第一次解密完成后，还具有eval那么，第二次再进行解密之后eval消失，换为最纯碎的js,那么此时解密完成

剩下的459,460,461,462,463,464，解密怡然如458所示~由于重复 不再进行操作

文书6.PNG

然后我们将其格式化

var cookie = getCookie('vjkl5');
var arrFun = [makeKey_0, makeKey_1, makeKey_2, makeKey_3, makeKey_4, makeKey_5, makeKey_6, makeKey_7, makeKey_8, makeKey_9, makeKey_10, makeKey_11, makeKey_12, makeKey_13, makeKey_14, makeKey_15, makeKey_16, makeKey_17, makeKey_18, makeKey_19, makeKey_20, makeKey_21, makeKey_22, makeKey_23, makeKey_24, makeKey_25, makeKey_26, makeKey_27, makeKey_28, makeKey_29, makeKey_30, makeKey_31, makeKey_32, makeKey_33, makeKey_34, makeKey_35, makeKey_36, makeKey_37, makeKey_38, makeKey_39, makeKey_40, makeKey_41, makeKey_42, makeKey_43, makeKey_44, makeKey_45, makeKey_46, makeKey_47, makeKey_48, makeKey_49, makeKey_50, makeKey_51, makeKey_52, makeKey_53, makeKey_54, makeKey_55, makeKey_56, makeKey_57, makeKey_58, makeKey_59, makeKey_60, makeKey_61, makeKey_62, makeKey_63, makeKey_64, makeKey_65, makeKey_66, makeKey_67, makeKey_68, makeKey_69, makeKey_70, makeKey_71, makeKey_72, makeKey_73, makeKey_74, makeKey_75, makeKey_76, makeKey_77, makeKey_78, makeKey_79, makeKey_80, makeKey_81, makeKey_82, makeKey_83, makeKey_84, makeKey_85, makeKey_86, makeKey_87, makeKey_88, makeKey_89, makeKey_90, makeKey_91, makeKey_92, makeKey_93, makeKey_94, makeKey_95, makeKey_96, makeKey_97, makeKey_98, makeKey_99, makeKey_100, makeKey_101, makeKey_102, makeKey_103, makeKey_104, makeKey_105, makeKey_106, makeKey_107, makeKey_108, makeKey_109, makeKey_110, makeKey_111, makeKey_112, makeKey_113, makeKey_114, makeKey_115, makeKey_116, makeKey_117, makeKey_118, makeKey_119, makeKey_120, makeKey_121, makeKey_122, makeKey_123, makeKey_124, makeKey_125, makeKey_126, makeKey_127, makeKey_128, makeKey_129, makeKey_130, makeKey_131, makeKey_132, makeKey_133, makeKey_134, makeKey_135, makeKey_136, makeKey_137, makeKey_138, makeKey_139, makeKey_140, makeKey_141, makeKey_142, makeKey_143, makeKey_144, makeKey_145, makeKey_146, makeKey_147, makeKey_148, makeKey_149, makeKey_150, makeKey_151, makeKey_152, makeKey_153, makeKey_154, makeKey_155, makeKey_156, makeKey_157, makeKey_158, makeKey_159, makeKey_160, makeKey_161, makeKey_162, makeKey_163, makeKey_164, makeKey_165, makeKey_166, makeKey_167, makeKey_168, makeKey_169, makeKey_170, makeKey_171, makeKey_172, makeKey_173, makeKey_174, makeKey_175, makeKey_176, makeKey_177, makeKey_178, makeKey_179, makeKey_180, makeKey_181, makeKey_182, makeKey_183, makeKey_184, makeKey_185, makeKey_186, makeKey_187, makeKey_188, makeKey_189, makeKey_190, makeKey_191, makeKey_192, makeKey_193, makeKey_194, makeKey_195, makeKey_196, makeKey_197, makeKey_198, makeKey_199, makeKey_200, makeKey_201, makeKey_202, makeKey_203, makeKey_204, makeKey_205, makeKey_206, makeKey_207, makeKey_208, makeKey_209, makeKey_210, makeKey_211, makeKey_212, makeKey_213, makeKey_214, makeKey_215, makeKey_216, makeKey_217, makeKey_218, makeKey_219, makeKey_220, makeKey_221, makeKey_222, makeKey_223, makeKey_224, makeKey_225, makeKey_226, makeKey_227, makeKey_228, makeKey_229, makeKey_230, makeKey_231, makeKey_232, makeKey_233, makeKey_234, makeKey_235, makeKey_236, makeKey_237, makeKey_238, makeKey_239, makeKey_240, makeKey_241, makeKey_242, makeKey_243, makeKey_244, makeKey_245, makeKey_246, makeKey_247, makeKey_248, makeKey_249, makeKey_250, makeKey_251, makeKey_252, makeKey_253, makeKey_254, makeKey_255, makeKey_256, makeKey_257, makeKey_258, makeKey_259, makeKey_260, makeKey_261, makeKey_262, makeKey_263, makeKey_264, makeKey_265, makeKey_266, makeKey_267, makeKey_268, makeKey_269, makeKey_270, makeKey_271, makeKey_272, makeKey_273, makeKey_274, makeKey_275, makeKey_276, makeKey_277, makeKey_278, makeKey_279, makeKey_280, makeKey_281, makeKey_282, makeKey_283, makeKey_284, makeKey_285, makeKey_286, makeKey_287, makeKey_288, makeKey_289, makeKey_290, makeKey_291, makeKey_292, makeKey_293, makeKey_294, makeKey_295, makeKey_296, makeKey_297, makeKey_298, makeKey_299, makeKey_300, makeKey_301, makeKey_302, makeKey_303, makeKey_304, makeKey_305, makeKey_306, makeKey_307, makeKey_308, makeKey_309, makeKey_310, makeKey_311, makeKey_312, makeKey_313, makeKey_314, makeKey_315, makeKey_316, makeKey_317, makeKey_318, makeKey_319, makeKey_320, makeKey_321, makeKey_322, makeKey_323, makeKey_324, makeKey_325, makeKey_326, makeKey_327, makeKey_328, makeKey_329, makeKey_330, makeKey_331, makeKey_332, makeKey_333, makeKey_334, makeKey_335, makeKey_336, makeKey_337, makeKey_338, makeKey_339, makeKey_340, makeKey_341, makeKey_342, makeKey_343, makeKey_344, makeKey_345, makeKey_346, makeKey_347, makeKey_348, makeKey_349, makeKey_350, makeKey_351, makeKey_352, makeKey_353, makeKey_354, makeKey_355, makeKey_356, makeKey_357, makeKey_358, makeKey_359, makeKey_360, makeKey_361, makeKey_362, makeKey_363, makeKey_364, makeKey_365, makeKey_366, makeKey_367, makeKey_368, makeKey_369, makeKey_370, makeKey_371, makeKey_372, makeKey_373, makeKey_374, makeKey_375, makeKey_376, makeKey_377, makeKey_378, makeKey_379, makeKey_380, makeKey_381, makeKey_382, makeKey_383, makeKey_384, makeKey_385, makeKey_386, makeKey_387, makeKey_388, makeKey_389, makeKey_390, makeKey_391, makeKey_392, makeKey_393, makeKey_394, makeKey_395, makeKey_396, makeKey_397, makeKey_398, makeKey_399];
var funIndex = strToLong(cookie) % arrFun.length;
var fun = arrFun[funIndex];
var result = fun(cookie);

代码如上图所示

我们把上方所有解密的代码放到一个js文件中然后用nodejs运行，

文书7.PNG

然后再次运行 发现cookie没定义，由于我们是在本地端进行操作，那么于是先复制个真实的vjkl5例如 "8a67cd94ffc28ebe013618e27f6529dfc0b0fa6c"

然后既可以得到vl5x,

找到其对应的代码

function createGuid() {
    return (((1 + Math.random()) * 65536) | 0).toString(16).substring(1)
}
var guid = createGuid() + createGuid() + "-" + createGuid() + "-" + createGuid() + createGuid() + "-" + createGuid() + createGuid() + createGuid();

文书9.PNG

2.得到docid

[图片上传中...(文书11.PNG-9c4239-1561512432768-0)]

[{
    "RunEval": "w61Zw4tuwoMwEMO8FsKiHGxRw7UHUE7DucKEHlcWwopIw5pwaMKoHHrCisOyw68FSikPB8KcwoBdU0ZCG2HCr3dnZsOxwoLClcO1McOeH8OOwpHCjD/DksONSyrDo8OTw5vDs8KrTMOewrfDh8Kdw5wmw7sDw7M9wp8EwozDk8OmCSLDgCzDownDuQ9EFsKyXcORwpVQWxjDqA5lYVA9KMKGw6JCBFDChxIgDHXCoAnChAFrw6gEcsKgwoQKw4DDoEFww4XDsCAIN8KrKDnCnVPDuRnCpcKJXAUhwoUiwrsYw7Mvw5fDnMKtwrouV07DnyspM0LDuMOMKyY4NWPDphPDgzPDhcOtw7rDt8OvaGLDuXDDpkFePkPCgsKywp9Ww4LCpsK7Vy7CuMKdwqzChVvDqcObwovCqR5NPV7CpSpQdyXDqkBQcsOowoldwoHDlFPCtHY7CFvDk8OjHsK3wrt9H1swYsOVw5jCpcO6BX/DmHscwrbDqcKCOBvDqcO2bsKeUkHCo8OhJwVKZcKLwqbComXCmhLDnFjDjCbCjcOpN8KDfTJzwo5uFsO2wqxSw7Q0bsOjwr3DgcKsZBYqw7DCo8Kgw4bDh8KVY2lswokzwpzDjCoSWxnDp8OyWsKaw5XDq8OTw4nCtGVuw5Y6wpJoHcK4HMOSRnHCqsOqUMKiw4Ynwph6wrQewpBGwpwLw79cwrLCpcKiEMKcw7HDoAs=",
    "Count": "44715625"
}, {
    "裁判要旨段原文": "本院认为，山东省农业科学院中心实验室计量认证合格证书因未参加年检而过期，以及案涉樱桃园存在受气候因素影响而减产的事实，一、二审法院均已作出确认，山东省工业产品生产许可证办公室出具的《证明》以及中国农业新闻网的相关报道均无新的证明对象和证明内容，不构成“足以推翻",
    "案件类型": "2",
    "裁判日期": "2015-06-26",
    "案件名称": "山东富海实业股份有限公司、曲忠全与山东富海实业股份有限公司、曲忠全等环境污染责任纠纷再审复查与审判监督民事裁定书",
    "文书ID": "DcOOSRHDgEAIADBLw5wsT07Dv8KSWgPCmWQUGTXCksO7wojCscKKQ8OqwpDCm19yw5zCucOXW8OTw7fCpGZ2bcO0wpjDksOeQDVswrAnOygMw4JFI8KEAMOuQcO7JMK+aRlZe8Kkcwonw7jCjMKqw4DCon/CpcK4w4rCtcKRIcKOwrjDjXTClggzwqcZw5Uaw73CmicWTDPCizjCucOPG8O+w4NtPMKSKcKpwoV/wr0ueScFw4hjwrTDrcKuw68YYcOMIcOqAw==",
    "审判程序": "再审审查与审判监督",
    "案号": "(2014)民申字第1782号",
    "法院名称": "最高人民法院"
}, {
    "案件类型": "2",
    "裁判日期": "2014-06-23",
    "案件名称": "章瀚与厦门金原融资担保有限公司一般借款合同纠纷申请再审民事裁定书",
    "文书ID": "FcOOwrkRRDEIA8OQwpbDgMKIK8OEGMO6L2nDvyZKwp5mwqQawq1JWnnCpMKWw6jDnmTCpV7CksKWLsKYeX7CksO6woRhwo3DvcOyIsOSwqkewoQcKGbCjsOaw7PCkcK8wpoZLsKOw6MuVMKLwo/DmMKxwofDhzjClMOKI09XwqXDiHvCscOwbSJfwpDDhRzCkMOgK8Ktwo7DslJacUlUw4HCnS/DmMKvw6lNeMO7FRk9w5ZKT8O/OxZXw455Q8OfF3JywrV7w6vCrlpnCH4=",
    "审判程序": "再审审查与审判监督",
    "案号": "(2014)民申字第966号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院认为：本案申请再审的焦点是库柏公司超额交付的金额为1471162元增值税发票是否构成税务损失。根据国家税务总局2006年10月17日修订的《增值税专用发票使用规定》第十四条第一款“一般纳税人取得专用发票后，发生销货退回、开票有误等情形但不符合作废条件的，或",
    "案件类型": "2",
    "裁判日期": "2014-12-17",
    "案件名称": "厦门聚亿电气设备有限公司与库柏电气(上海)有限公司一般买卖合同纠纷申请再审民事裁定书",
    "文书ID": "DcKOwrcNw4BADMOEVlIOw6Urw60/wpJdHkHCgMOHbQLChDF9OCLCpGo5DDLCrTXCnsKnwqt+MFFLw5ASByTDq8Oyw5jDrC0kal1HWDHDhW4Kw7dECnrClz7CucKQwrkGb8O5wpVSw4LCn03CmcO9wpsiw7XDlcOeccOyA8KER8Kkw61HwprDpcOAw7bCn3gJwrVjCADCuD7CtmDCkMKMXsKGwr3Dm8KPwpvDn8KkwojDmB/Cm8OTeFZEeMKOw5bDmcKkCEYnw4Mf",
    "审判程序": "再审审查与审判监督",
    "案号": "(2014)民申字第454号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院认为：一、关于胡素娟、许春红是否为适格原告的问题。虽然《房地产买卖协议书》并非胡素娟、许春红亲笔所签，从协议签订到履行均由胡素娟之父胡国安代为办理，但是胡素娟、许春红对协议内容并无异议，在一、二审以及再审审查阶段均明确认可胡国安的代理行为，胡国安亦认可该事",
    "案件类型": "2",
    "裁判日期": "2014-08-28",
    "案件名称": "襄阳市房屋租赁修缮公司与胡素娟、许春红一般买卖合同纠纷申请再审民事裁定书",
    "文书ID": "DcKONQHDgEAMAC3ChWEMfMO8S2oFHFxrLMOjCAMwHsOpw4Uaw6bDnHVPwp4jRz0bwoHDqlV5M8KAEsKtaBPCqcK0wqHCk3Rvw5XChxDCnMOcacK3w6PDohdQPDlgwrnCvsKRDFhFw5DDvsOZEMKwwqrDrg7CocOuwrUzbVRLX0nCkcKXwo/DqcK9e8OgU2I2wrXDlcOWw5wrdcO/BHpRwrvDpjoxBsKzE8OBwpzCtgzDlsKfZMOYYcO+f8OyR0U+",
    "审判程序": "再审审查与审判监督",
    "案号": "(2014)民申字第227号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院认为，虽然案涉房屋尚未完成竣工验收备案，不具备《昆山市商品房购销合同》中约定的交付条件。但是，根据缪永红于购房当日与东方广场公司签订的《租赁及委托经营管理合同》的约定，缪永红已经将其所购买的房屋出租给东方广场公司经营使用，并在支付装修费用后将收房、装修事项",
    "案件类型": "2",
    "裁判日期": "2014-10-23",
    "案件名称": "缪永红 昆山红枫房地产有限公司 昆山东方云顶广场有限公司与中信信托有限责任公司其他合同纠纷二审民事判决书5",
    "文书ID": "DcKNSQ4AMQjDg8K+w4QOPQLCncO8w79Jw5NbLMOLwopSRcKuwq5lwrLDmQUFwrDDhcK2RDjDuCDDisOwwqDDm8KhbDzCoMO7MBtsLVfDnGvCsHTDrCnCjsKMEcOTPSLCulTDsGF2AMOfwpd0UiTDpcK8OUt2GhlFPsO5w6V+OMKLPsOPfH7DucK1w613ZMKXfcKnwqHDqcKBbX83MA3ChTTDjVApTcOKR8OXZ3lvw7ckUnXCql4dQkbDp2Znw6kP",
    "审判程序": "二审",
    "案号": "(2014)民一终字第122号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院审查认为，(一)关于处理本案当事人争议的合同依据问题。双方签订的《1.47亿元施工合同》表明，华兴公司承包了整个“天成国贸中心”的土建及安装工程；双方签订的《天成国贸中心工程施工补充协议》(以下简称《补充协议》)表明华兴公司承包“天成国贸中心”整个土建及安",
    "案件类型": "2",
    "裁判日期": "2014-03-27",
    "案件名称": "天成润华集团有限公司与中国核工业华兴建设有限公司建设工程施工合同纠纷申请再审审查民事裁定书",
    "文书ID": "DcONSRHDgEAIADBLw4ByPjnDvUtqBWRCaxTCiMKXwpHCrMKuw4FVw4EZTDdKwrI4w5UsVcK3wqnDk8OnwoQoMzXDthhNwrLCrsOILHvDnMKlwp8+w5p+wrDCksKbIwQ9w5nDlcOQwqVywodFwrvDumvDoGYTUnR6QAcbCMKRw4/Dv8KSw79NMn0EwqN7GlMvFsK9wrADTS/CucODwofDih/CqMOjw6LDk8OZwqfDp8O5Y8OqXcKAw6HCmsOrwrEwUz3ClMO8AA==",
    "审判程序": "再审",
    "案号": "(2013)民申字第1929号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院认为，执行异议之诉的关键是审查购房者享有的实体权利是否足以阻却执行措施。\n其一，“二轻大厦”系繁荣公司与二轻联社共同开发建设，繁荣公司依约可取得“二轻大厦”中49％的权益。而阜承公司因受让繁荣公司在“二轻大厦”项目中所享有的49％权益分得“二轻大厦”第6",
    "案件类型": "2",
    "裁判日期": "2014-11-14",
    "案件名称": "方希源、蔡福英等民间借贷纠纷、案外人执行异议之诉民事判决书",
    "文书ID": "DcKNwrkRADEIw4RaMmDCvsOQLMOQf0l3worCpVHCvysewqzDgHkzwpfDscKMKU0Nw5LDokYVb8KTQXvCkMOOwrdVQHUdQSEIWWDDs8ONwr0RwpLDuTbCjMOrDMOywprDqjHCpcKlbDnDs8KsTMO7wrzDm0Zawq5kQcKdHMOVKHgfbz7CvznCnFbDo8Oywr/DvhNfdVjCmMOEesKRw6bDoxTDvMK0eh3CvkvCtx1Ow5PDm38KGUPDhSxVwqEIB8K6M8O8AQ==",
    "审判程序": "二审",
    "案号": "(2014)民一终字第174号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "综上，四海公司的上诉理由缺乏事实和法律依据，本院不予支持。原审判决认定事实清楚，适用法律正确，依法应予维持。本院依照《中华人民共和国民事诉讼法》第一百七十条第一款第(一)项之规定，判决如下",
    "案件类型": "2",
    "裁判日期": "2014-12-20",
    "案件名称": "中国信达资产管理股份有限公司黑龙江省分公司与哈尔滨四海数控科技股份有限公司、刘安丽金融借款合同纠纷二审民事判决书",
    "文书ID": "DcOOwrcRw4AwDMOAw4DClcKYw4RQMsOuP8KSw53CosO4Q8KSdldzXlQDXsKZVUzDvC0ZwqJtwp5sF8KSwrDDswrDsGvDkcONGsOjw5XCiMODcEZLw6LDhQN6dFLDlMOewql9wqrCpnbDh0TDvmDDgMOLw67DvQrClsOTw7QQw4zDjXUew79KwozCtGnDhw1iwpzCpMO+E8Ocw5DCpXUbwoYowoIqIcK+QDbCncO+LsOzdcO5SsKTF8OkXFXDmcKKwp/CuGJuw79MVsOJw5MP",
    "审判程序": "二审",
    "案号": "(2014)民二终字第251号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "本院认为，本案再审争议的焦点问题为：(一)郑少春与中医院之间法律关系的性质与效力；(二)郑少春应否将案涉土地退还给中医院，应否以及如何支付土地占用费。\n(一)关于郑少春与中医院之间法律关系的性质与效力问题。《中华人民共和国城镇国有土地使用权出让转让暂行条例》",
    "案件类型": "2",
    "裁判日期": "2014-11-15",
    "案件名称": "莆田市中医院与福建省莆田市闽中田野汽车贸易有限公司、莆田市志强汽车贸易有限公司建设用地使用权纠纷审判监督民事判决书",
    "文书ID": "DcKNwrkRADEIw4RaAgzChg0xT8O/JcOdwqXDkmjDpMO8w67DhsOtw6vDrcKPVC1yJnMXB8K8MjXDgcKWVw18MTrCtsOhw50sdlhaG8OcXMK5HMOXwrBUwoHDlcOOwqfCljFmwqHCu8K2w6R0QMODw55sUcKMw5fDnsKWGMKqbsKKwrrCv8Kmw7IYDMK0wqvDk8KPwpjCvTzDvMKCEX92wrV+w7jCol/DqTrCrMOIwrcXRgHCvcOHFMKpLcKCFcOvPRDCkMOxw79lDXHDlAc=",
    "审判程序": "再审",
    "案号": "(2014)民提字第125号",
    "法院名称": "最高人民法院"
}, {
    "裁判要旨段原文": "综上，腾远公司的再审申请不符合《中华人民共和国民事诉讼法》第二百条第六项规定的情形。本院依照《中华人民共和国民事诉讼法》第二百零四条第一款之规定，裁定如下",
    "案件类型": "2",
    "裁判日期": "2015-04-29",
    "案件名称": "许昌市腾远房地产开发有限公司、郑州市第二建筑工程有限责任公司与许昌市腾远房地产开发有限公司、郑州市第二建筑工程有限责任公司建设工程施工合同纠纷申请再审民事裁定书",
    "文书ID": "DcKOw4cRAEEIw4NaIsKzPDlCw78lHW9rLFEiwrM5w6M0MsKRYMKDA8KGwrfDljfCuMKTwqtBw705woQCAGNmU8Oka8KZw5HCt8Kvwp7ClT7Cg2Abwq5Gw5JBw4bCrcOyw4MTw5g/DsOzAk3DisKTBFlSw5PCjjZQeMKREDTDpsK5DMO1U3rCssO3w6jCuy3DplcSw41VwoQvSsKYw7Qrw7huGgHClEnCkcOBw4TCi8Odw7DCnHEqdwrDo8OkdsObw5DDncKrw4kf",
    "审判程序": "再审审查与审判监督",
    "案号": "(2015)民申字第739号",
    "法院名称": "最高人民法院"
}]

然后我们到列表框单击事件，有以下图中所示的函数方法

文书11.PNG

文书12.PNG

function Navi(id, keyword) {
    var unzipid = unzip(id);
    try {
        var realid = com.str.Decrypt(unzipid);
        if (realid == "") {
            setTimeout("Navi('" + id + "','" + keyword + "')", 1000);
        } else {
            var url = "/content/content?DocID=" + realid + "&KeyWord=" + encodeURI(keyword); 
            openWin(url);
        }
    } catch (ex) {
        setTimeout("Navi('" + id + "','" + keyword + "')", 1000);
    }
}