拼多多滑块分析

声明

本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

关键代码

function getAntiContent(){
   run=new (sign(291))({
            serverTime: Date.now()
        })
  return run.messagePack()
}

self = top = window = globalThis
delete global
delete Buffer

APP_VERSION = '4e23111a'
HTMLElement = function () {
}
MediaSource = function MediaSource() {

}
MediaSource.prototype.isTypeSupported = function () {
    console.log('MediaSource.prototype.isTypeSupported', arguments)
    if (arguments[0] === "audio/mp3") {
        return false
    }
}
window.toString = function toString() {
    return '[object Window]'
}
requestAnimationFrame = function requestAnimationFrame() {
}
cancelAnimationFrame = function cancelAnimationFrame() {
}
PluginArray = function PluginArray() {
    return [{}, {}, {}, {}, {}]
}
MouseEvent = function () {
}
DOMRect = function () {
    this.bottom = 483
    this.height = 198
    this.left = 166
    this.right = 438
    this.top = 285
    this.width = 272
    this.x = 166
    this.y = 285
}
navigator = {
    plugins: new PluginArray(),
    languages: [
        "zh-CN"
    ],
    vendor: 'Google Inc.',
    webdriver: false,
    userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0',
    appVersion: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0',
    platform: 'Win32',
}
history = {
    back: function () {
    },
    go: function () {
    }
}
document = {}
document.documentElement = {
    hasAttribute: function () {
        console.log('document.documentElement.hasAttribute')
    }
}

结果

总结

1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。