只需要用MD5加密请求url即可,演示如下:
一个请求包:
GET /fe_api/burdock/weixin/v2/homefeed/categories?isMale=false HTTP/1.1
Host: www.xiaohongshu.com
Connection: keep-alive
X-Sign: Xfef73cc1ac17a580f911031469f7168f
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A372 Safari/604.1 wechatdevtools/1.05.2107221 MicroMessenger/8.0.5 Language/zh_CN webview/
content-type: application/json
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://servicewechat.com/wx484c371022129df7/devtools/page-frame.html
Accept-Encoding: gzip, deflate, br
/fe_api/burdock/weixin/v2/homefeed/categories?isMale=falseWSUDD
只需要把请求的url通过md5加密,即可获得X-sgin
WSUDD 是额外加密字符串,需要加上。
X-sign:Xfef73cc1ac17a580f911031469f7168f