易盾逆向分析（滑块、点选、无感知）

已于 2023-11-17 19:21:12 修改
阅读量3.4k 收藏 6
点赞数
分类专栏： 逆向 文章标签： 爬虫
于 2023-07-19 10:40:00 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/liberty888/article/details/131803007
版权

易盾破解过两个版本，2.19.1和2.21.3，都是之前整过的，现在升级了，由于工作也不需要，就没有再整过了。2.19.1版本，无感知、滑块、点选都整了一遍，写成公共提供调用。

先看下JAVA代码

package com.xxxx.cccc.web;

import lombok.extern.log4j.Log4j;
import lombok.extern.log4j.Log4j2;

import java.io.IOException;
import java.util.HashMap;
import java.util.Map;
import java.util.UUID;

import org.apache.http.HttpException;
import org.jsoup.helper.StringUtil;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;

import com.xxxx.cccc.model.CommonRequest;
import com.xxxx.cccc.model.ResultModel;
import com.xxxx.cccc.service.ProxyService;
import com.xxxx.cccc.util.ExceptionUtil;
import com.xxxx.cccc.util.YidunCheckRpcUtil;
import com.xxxx.cccc.util.YidunCheckUtil;
import com.xxxx.cccc.util.YidunCheckUtil2;
import com.xxxx.cccc.util.YidunCheckUtil_2_19_1;
import com.xxxx.cccc.util.YidunCheckUtil_2_21_3;
//公共服务
@RestController
@RequestMapping("/common")
@Log4j
public class CommonController {
	
	@Autowired
	ProxyService proxyService;
	

	/**
     * 易盾-获取滑块验证后的数据-点选
     * 
     * @param papercheckRequest
	 * @return
     */
    @RequestMapping(value ="/yidun/getCheckData" , method = RequestMethod.POST)
    public ResultModel getCheckData(@RequestBody CommonRequest commonRequest){
    	
    	ResultModel resultModel = null;
    	
        try {
            log.info("易盾-获取滑块验证后的数据-点选,请求入参："+commonRequest);
            if(!commonRequest.checkParam()){
            	 return new ResultModel("-1","输入参数不完整");
            }
            
            int len = 1;//循环次数
            for(int i=0;i<len;i++){
            	log.info("yidun getCheckData 次数："+i);
            	
            	try {
            		resultModel = YidunCheckUtil_2_21_3.getCheckData(null,null);
					if(resultModel != null && "0".equals(resultModel.getCode())){
	            		return resultModel;
	            	}
				} catch (Exception e) {
					log.error("error:"+e);
					log.error(ExceptionUtil.getMessage(e));
					if(i == 2){
						return new ResultModel("-1","未知错误");
					}
				}
            	
            }
            
            return resultModel;
        } catch (Exception e) {
            log.error(ExceptionUtil.getMessage(e));
            return new ResultModel("-1","未知错误");
        }
    }
    
	/**
     * 易盾-获取滑块验证后的数据-无感知
     * 
     * @param papercheckRequest
	 * @return
     */
    @RequestMapping(value ="/yidun/getWgzData" , method = RequestMethod.POST)
    public ResultModel getWgzData(@RequestBody CommonRequest commonRequest){
    	
    	ResultModel resultModel = null;
    	
        try {
            log.info("易盾-获取滑块验证后的数据-无感知,请求入参："+commonRequest);
            if(!commonRequest.checkParam()){
            	 return new ResultModel("-1","输入参数不完整");
            }
            
            int len = 1;//循环次数
            for(int i=0;i<len;i++){
            	log.info("yidun getWgzData 次数："+i);
            	
            	try {
            		resultModel = YidunCheckUtil.getWgzData(proxyService);
					if(resultModel != null && "0".equals(resultModel.getCode())){
	            		return resultModel;
	            	}
				} catch (Exception e) {
					log.error(ExceptionUtil.getMessage(e));
					if(i == 2){
						return new ResultModel("-1","未知错误");
					}
				}
            	
            }
            
            return resultModel;
        } catch (Exception e) {
            log.error(ExceptionUtil.getMessage(e));
            return new ResultModel("-1","未知错误");
        }
    }
    
	/**
     * 易盾-获取滑块验证后的数据-滑块
     * 
     * @param papercheckRequest
	 * @return
     */
    @RequestMapping(value ="/yidun/getHuaKuaiData" , method = RequestMethod.POST)
    public ResultModel getHuaKuaiData(@RequestBody CommonRequest commonRequest){
    	
    	ResultModel resultModel = null;
    	
        try {
            log.info("易盾-获取滑块验证后的数据-滑块,请求入参："+commonRequest);
            if(!commonRequest.checkParam()){
            	 return new ResultModel("-1","输入参数不完整");
            }
            
            int len = 1;//循环次数
            for(int i=0;i<len;i++){
            	log.info("yidun getHuaKuaiData 次数："+i);
            	
            	try {
            		resultModel = YidunCheckUtil.getHuaKuaiData(proxyService);
					if(resultModel != null && "0".equals(resultModel.getCode())){
	            		return resultModel;
	            	}
				} catch (Exception e) {
					log.error(ExceptionUtil.getMessage(e));
					if(i == 2){
						return new ResultModel("-1","未知错误");
					}
				}
            	
            }
            
            return resultModel;
        } catch (Exception e) {
            log.error(ExceptionUtil.getMessage(e));
            return new ResultModel("-1","未知错误");
        }
    }

}


import java.io.FileOutputStream;
import java.net.URLDecoder;
import java.net.URLEncoder;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.UUID;

import org.apache.commons.io.IOUtils;
import org.apache.http.Header;
import org.apache.http.HttpEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.util.EntityUtils;
import org.eclipse.jetty.util.StringUtil;
import org.springframework.util.StringUtils;

import com.alibaba.fastjson.JSONObject;
import com.baidu.aip.util.Base64Util;

import lombok.extern.log4j.Log4j;

/**
 * version 2.17.4
 * 易盾-获取滑块验证后的数据
 * 1.获取图片的fp指纹参数存在浏览器环境校验，校验不过也会正常返回图片，但是会降低通过率，不到10%
 */
@Log4j
public class YidunCheckUtil {
	
	public static String userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36";
	
	public static String ipAddress = JsFrontConstants.nodejsUrl;
	
	public static String fpUrl = ipAddress+"/yidun/yzm/fp";
	public static String cbUrl = ipAddress+"/yidun/yzm/cb";
	
	
	
	public static String callbackUrl = ipAddress+"/yidun/yzm/callback";
	public static String getAcTokenUrl = ipAddress+"/yidun/yzm/getAcToken";
	public static String getMUrl = ipAddress+"/yidun/yzm/getM";
	public static String getPUrl = ipAddress+"/yidun/yzm/getP";
	public static String getExtUrl = ipAddress+"/yidun/yzm/getExt";
	public static String getDataUrl = ipAddress+"/yidun/yzm/getData";
	public static String getDataForWgzUrl = ipAddress+"/yidun/yzm/getDataForWgz";
	public static String getTraceUrl = ipAddress+"/yidun/yzm/getTrace";
	public static String getTraceForWgzUrl = ipAddress+"/yidun/yzm/getTraceForWgz";
	public static String getCn31StrUrl = ipAddress+"/yidun/yzm/getCn31Str";
	
	public static String getDataForHuaKuaiUrl = ipAddress+"/yidun/yzm/getDataForHuakuai";
	
	public static String getTraceForHuakuaiUrl = ipAddress+"/yidun/yzm/getTraceForHuakuai?zuobiao=";
	
	public static IOcr iOcr = new MachineOcr(); 
				
    /**
     * 获取滑块验证后的数据-点选
     * @author xxx
     * @param 
     * @return
     */
	public static ResultModel getCheckData(ProxyService proxyService,List<String> proxyList) throws Exception{
		ResultModel resultModel = new ResultModel("0","处理成功");
				
		HttpClientWrapper hw = null;
		HttpGet httpGet = null;
		CloseableHttpResponse execute = null;
		Header[] headers = null;
		HttpEntity entity = null;
		byte[] bytes = null;
		String result = null;
		//hw = new HttpClientWrapper(5000,5000, 5000);
		if(proxyService == null){
			//hw = new HttpClientWrapper(5000,5000, 5000);
		}else{
			log.info("YidunCheckUtil linshi shiong daili...");
	
			//hw = proxyService.getClientWithProxy(15000,15000,15000,proxyList);
		}
		
		hw = new HttpClientWrapper(50000,50000, 50000,"127.0.0.1",8888);
		
		
		CloseableHttpClient client = hw.getClient();
		
		//1.获取滑块图片地址
		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
		
		//fp = "R/9JR4ti/ydmwA6UEJ41QqUdudp/aeDHkOl44riYGdbc56uundMeNHaleXSyME7P0qAzlLc8IARE+pTmovebBp4hW2lPDq\\\\6olZp0QQx9kzO0wdzYD9214KL\\\\Dc+/KYtCSSvS0eMBqzZiAYONRBq0i09nxtXDf\\\\mDdh2U/ReM3ZZZKt+:1655391775324";
		//fp = URLEncoder.encode(fp);
		
		
		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		String url = "https://c.dun.163.com/api/v2/get?referer=https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&fp="+fp+"&https=true&type=undefined&version=2.17.4&dpr=1&dev=1&cb="+cb+"&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&width=0&audio=false&token=&callback="+callback;
				
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
	    httpGet.setHeader("User-Agent",userAgent);
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("Cache-Control","no-cache");
	    httpGet.setHeader("Connection","keep-alive");
	    httpGet.setHeader("Pragma","no-cache");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","script");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
	    
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
	
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		if(StringUtils.isEmpty(result)){
			return new ResultModel("-1","获取滑块失败");
		}
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		log.info("YidunCheckUtil getCheckData getYzm result:"+result);
		
		JSONObject objJSon = JSONObject.parseObject(result);
		
		JSONObject dataJSon = objJSon.getJSONObject("data");
		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块图片
		String front = dataJSon.getString("front");//点选文本
		String token = dataJSon.getString("token");
		String type = dataJSon.getString("type");
		String zoneId = dataJSon.getString("zoneId");
				
		log.info("YidunCheckUtil getCheckData bg:"+bg);
		log.info("YidunCheckUtil getCheckData front:"+front);
		log.info("YidunCheckUtil getCheckData token:"+token);
		
		if(StringUtils.isEmpty(front)){
			return new ResultModel("-1","获取滑块失败");
		}
		
		//2.获取图片数据
		httpGet = new HttpGet(bg);
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		entity = execute.getEntity();	
	    bytes = EntityUtils.toByteArray(entity);

		String zuobiao = "";
		String guiji = "";
        
		String baseImage = Base64Util.encode(bytes);
		
		if(StringUtils.isEmpty(baseImage)){
			return new ResultModel("-1","获取滑块图片失败");
		}
		
		//3.识别图片
		String orcData = iOcr.getCodeNormal(baseImage, front);
		
		if(StringUtil.isBlank(orcData) || orcData.indexOf("500 Internal Server") >= 0) {
			return new ResultModel("-1","识别滑块失败");
		}
		
		JSONObject ocrJson = JSONObject.parseObject(orcData);
		zuobiao = ocrJson.getString("points");
		guiji = ocrJson.getString("track");
	        
	    log.info("YidunCheckUtil getCheckData zuobiao:"+zuobiao);
	    log.info("YidunCheckUtil getCheckData guiji:"+guiji);
	     
	     
	    //
	    //调用自己的轨迹算法 测试发现自己的轨迹算法通过率高些
	    guiji = JiangsuTaxbureauUtil.getData(getTraceUrl+"?urlKey="+zuobiao);
	        
	    //System.out.println("my guiji:"+guiji);
	    
	     
	    if(StringUtils.isEmpty(zuobiao) || StringUtils.isEmpty(guiji)){
			return new ResultModel("-1","识别滑块失败");
		}
	    
	    
	    url = "https://c.dun.163.com/api/v2/check?referer=https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&width=310&type=3&version=2.17.4&extraData=&bf=0&runEnv=10";

	    httpGet = new HttpGet(url);
	    
	    Thread.sleep(100);//故意让程序慢些，避免反爬
			
	    //5.校验滑块
	    url = url +"&token="+token;
		url = url +"&callback="+JiangsuTaxbureauUtil.getData(callbackUrl);
		url = url +"&acToken="+JiangsuTaxbureauUtil.getData(getAcTokenUrl);
		url = url +"&cb="+JiangsuTaxbureauUtil.getData(cbUrl);
		    
		String data = JiangsuTaxbureauUtil.getData(getDataUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);
		   		    
		url = url +"&data="+data;
		log.info("YidunCheckUtil getCheckData url:"+url);
		    
		httpGet = new HttpGet(url);
		httpGet.setHeader("Accept","*/*");
		httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
		httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("Cache-Control","no-cache");
	    httpGet.setHeader("Connection","keep-alive");
	    httpGet.setHeader("Pragma","no-cache");
	    httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","script");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
		httpGet.setHeader("Host","c.dun.163.com");
		httpGet.setHeader("User-Agent",userAgent);
    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
	    bytes = EntityUtils.toByteArray(entity);
	    result = new String(bytes,"UTF-8");
			
	    log.info("YidunCheckUtil getCheckData validate result:"+result);
	    
	    if(StringUtils.isEmpty(result)){
			return new ResultModel("-1","校验点选返回为空");
		}
	    
	    result = result.substring(result.indexOf("(")+1, result.indexOf(")"));
	    JSONObject objJson = JSONObject.parseObject(result);
	    JSONObject dataJson = objJson.getJSONObject("data");
	    String validate = dataJson.getString("validate");
	    if(StringUtils.isEmpty(validate)){
	    	return new ResultModel("-1","校验点选失败");
	    }
	    
		//3.获取CN31加密串	
    	Map map = new HashMap();
    	map.put("validate", validate);
    	map.put("fp", URLDecoder.decode(fp));
    	ResponseContent response = HttpHelper.postJsonEntity(getCn31StrUrl, JSONObject.toJSONString(map));
    	String cn31Str = response.getContent();
    	log.info("YidunCheckUtil getCheckData cn31Str:"+cn31Str);
		resultModel.setData(cn31Str);
		
		if(StringUtils.isEmpty(cn31Str)){
	    	return new ResultModel("-1","获取CN31失败");
	    }
	    
		return resultModel;
	}
	
    /**
     * 获取滑块验证后的数据-无感知
     * @author bree
     * @param 
     * @return
     */
	public static ResultModel getWgzData(ProxyService proxyService) throws Exception{
		
		ResultModel resultModel = new ResultModel("0","处理成功");
		Map dataMap = new HashMap();
		
		HttpClientWrapper hw = null;
		HttpGet httpGet = null;
		CloseableHttpResponse execute = null;
		Header[] headers = null;
		HttpEntity entity = null;
		byte[] bytes = null;
		String res = null;
		String result = null;
		hw = new HttpClientWrapper(5000,5000, 5000);
		
		
		CloseableHttpClient client = hw.getClient();
		
		//1.获取验证码
		String url = "https://c.dun.163.com/api/v2/get?referer=%s&zoneId=CN31&id=cf15aac06ccf490181f29b72fe13c3d4&fp=%s&https=true&type=undefined&width=0&version=2.16.0&dpr=1.25&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&callback=%s";
		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		String referer = "https%3A%2F%2Fetax.hunan.chinatax.gov.cn%2Fwsbs%2FtoLogin.do";
		url = String.format(url, referer,fp,cb,callback);
		
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://etax.hunan.chinatax.gov.cn/");
	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
	    
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		log.info("yidun wuganzhi get yzm code:"+result);
		
		if(StringUtils.isEmpty(result)){
			return new ResultModel("-1","获取滑块失败");
		}
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		JSONObject objJSon = JSONObject.parseObject(result);
		JSONObject dataJSon = objJSon.getJSONObject("data");
		String error = objJSon.getString("error");
		String message = objJSon.getString("msg");
		String token = dataJSon.getString("token");
		
		if(!"0".equals(error)){
			return new ResultModel("-1",message);
		}
		
		Thread.sleep(1000);
		
		//2.校验
		url = "https://c.dun.163.com/api/v2/check?referer=%s&zoneId=CN31&id=cf15aac06ccf490181f29b72fe13c3d4&version=2.16.0&cb=%s&extraData=&bf=0&runEnv=10&token=%s&acToken=%s&type=5&width=438&data=%s&callback=%s";
		cb = JiangsuTaxbureauUtil.getData(cbUrl);
		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		String acToken = JiangsuTaxbureauUtil.getData(getAcTokenUrl);
		
/*		List<String> list = new TraceUtil().getPAndTrace();
		String zuobiao = list.get(0);
		String guiji = list.get(1);*/
		
		
		String str  = JiangsuTaxbureauUtil.getData(getTraceForWgzUrl);
		JSONObject traceJson = JSONObject.parseObject(str);
		String zuobiao = traceJson.getString("zuobiao");
		String guiji = traceJson.getString("guiji");;
		
		
	    String data = JiangsuTaxbureauUtil.getData(getDataForWgzUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);

		url = String.format(url, referer,cb,token,acToken,data,callback);
		
		log.info("yidun wuganzhi zuobiao:"+zuobiao);
		log.info("yidun wuganzhi guiji:"+guiji);
		log.info("yidun wuganzhi url:"+url);
		
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://etax.hunan.chinatax.gov.cn/");
	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
	    httpGet.setHeader("Pragma","no-cache");
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		log.info("yidun wuganzhi check result:"+result);
		
		dataMap.put("checkResult", result);
		
		//3.获取CN31加密串			
		objJSon = JSONObject.parseObject(result);
		dataJSon = objJSon.getJSONObject("data");
		boolean resultFlag = dataJSon.getBooleanValue("result");
		if(resultFlag){
			String validate = dataJSon.getString("validate");
	    	Map map = new HashMap();
	    	map.put("validate", validate);
	    	map.put("fp", URLDecoder.decode(fp));
	    	ResponseContent response = HttpHelper.postJsonEntity(getCn31StrUrl, JSONObject.toJSONString(map));
	    	String cn31Str = response.getContent();
	    	log.info("cn31Str:"+cn31Str);
	    	dataMap.put("cn31Str", cn31Str);
		}else{
			return new ResultModel("-1","校验失败");
		}
		
		resultModel.setData(dataMap);
		
		return resultModel;
	}
	
    /**
     * 获取滑块验证后的数据-滑块
     * @author bree
     * @param 
     * @return
     */
	public static ResultModel getHuaKuaiData(ProxyService proxyService) throws Exception{
		
		ResultModel resultModel = new ResultModel("0","处理成功");
		
		HttpClientWrapper hw = null;
		HttpGet httpGet = null;
		CloseableHttpResponse execute = null;
		Header[] headers = null;
		HttpEntity entity = null;
		byte[] bytes = null;
		String res = null;
		String result = null;
		hw = new HttpClientWrapper(5000,5000, 5000);
		
		CloseableHttpClient client = hw.getClient();
		
		//1.获取验证码
		String url = "https://c.dun.163.com/api/v2/get?referer=%s&zoneId=CN31&id=07e2387ab53a4d6f930b8d9a9be71bdf&fp=%s&https=true&type=2&version=2.16.0&dpr=1.25&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&width=320&audio=false&token=&callback=%s";
		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		String referer = "https%3A%2F%2Fdun.163.com%2Ftrial%2Fjigsaw";//如果网站应用了易盾，这里可能需要更改，这里是从官网测试的
		url = String.format(url, referer,fp,cb,callback);
		
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://dun.163.com/");//如果网站应用了易盾，这里可能需要更改
	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","script");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","same-site");
	    
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		if(StringUtils.isEmpty(result)){
			return new ResultModel("-1","获取滑块失败");
		}
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		log.info("yidun huakuai get yzm code:"+result);
		
		JSONObject objJSon = JSONObject.parseObject(result);
		
		JSONObject dataJSon = objJSon.getJSONObject("data");
		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块背景图片
		String front = (String)dataJSon.getJSONArray("front").get(0);//缺口图片
		String token = dataJSon.getString("token");
		String type = dataJSon.getString("type");
		String zoneId = dataJSon.getString("zoneId");
		
		if(StringUtils.isEmpty(token)){
			return new ResultModel("-1","获取滑块失败");
		}
		
		log.info("yidun huakuai bg:"+bg);		
		log.info("yidun huakuai front:"+front);	
		log.info("yidun huakuai token:"+token);
		
		
		//2.获取配置
		url = "https://c.dun.163.com/api/v2/getconf?referer=%s&zoneId=&id=07e2387ab53a4d6f930b8d9a9be71bdf&ipv6=false&runEnv=10&type=2&loadVersion=2.2.3&callback=%s";
		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		url = String.format(url,referer,callback);
		
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://dun.163.com/");//如果网站应用了易盾，这里可能需要更改
	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","same-site");
	    
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		if(StringUtils.isEmpty(token)){
			return new ResultModel("-1","获取配置失败");
		}
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		log.info("yidun huakuai get config:"+result);		
		
		objJSon = JSONObject.parseObject(result);
		
		dataJSon = objJSon.getJSONObject("data");
		JSONObject acJSon = dataJSon.getJSONObject("ac");
		String acToken = acJSon.getString("token");
		log.info("yidun huakuai acToken:"+acToken);		
		
		//3.获取图片数据
		httpGet = new HttpGet(bg);
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		entity = execute.getEntity();	
	    bytes = EntityUtils.toByteArray(entity);
        
		String backImage = Base64Util.encode(bytes);
		
		httpGet = new HttpGet(front);
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		entity = execute.getEntity();	
	    bytes = EntityUtils.toByteArray(entity);
        
		String frontImage = Base64Util.encode(bytes);
		
		//4.识别图片
		String zuobiao = "";
		String guiji = "";
		
		zuobiao = iOcr.getX(backImage, frontImage);
		
		if(StringUtils.isEmpty(zuobiao)){
			return new ResultModel("-1","识别坐标失败");
		}
		
		log.info("yidun huakuai zuobiao:"+zuobiao);		
		
		//5.获取轨迹
		String str  = JiangsuTaxbureauUtil.getData(getTraceForHuakuaiUrl+zuobiao);
		JSONObject traceJson = JSONObject.parseObject(str);
		guiji = traceJson.getString("guiji");
		String zhZuobiao = traceJson.getString("zhZuobiao");//转换坐标
		
		log.info("yidun huakuai zhuanhuanhou zuobiao:"+zhZuobiao);		
		log.info("yidun huakuai guiji:"+guiji);		
		
		Thread.sleep(1000);
		
		//6.校验
		url = "https://c.dun.163.com/api/v2/check?referer=%s&zoneId=CN31&id=07e2387ab53a4d6f930b8d9a9be71bdf&token=%s&acToken=%s&data=%s&width=320&type=2&version=2.16.0&cb=%s&extraData=&bf=0&runEnv=10&callback=%s";
		cb = JiangsuTaxbureauUtil.getData(cbUrl);
		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
		//String acToken = JiangsuTaxbureauUtil.getData("http://127.0.0.1:7002/yidun/yzm/getAcToken");
			
	    String data = JiangsuTaxbureauUtil.getData(getDataForHuaKuaiUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);

		url = String.format(url, referer,token,acToken,data,cb,callback);
		
		log.info("yidun huakuai request url:"+url);		
		
		httpGet = new HttpGet(url);
		
	    httpGet.setHeader("Host","c.dun.163.com");
	    httpGet.setHeader("Referer","https://dun.163.com/trial/jigsaw");
	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
	    httpGet.setHeader("Accept","*/*");
	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
	    httpGet.setHeader("sec-ch-ua-mobile","?0");
	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
	    httpGet.setHeader("Pragma","no-cache");
	    
		httpGet.setConfig(hw.getRequestConfig());
		execute = client.execute(httpGet);
		
		entity = execute.getEntity();	
		bytes = EntityUtils.toByteArray(entity);
		result = new String(bytes,"UTF-8");
		
		log.info("yidun huakuai check result:"+result);		
		
		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
		
		resultModel.setData(result);

		return resultModel;
	}
	
	public static String setCookie(String cookieStr,Header[] headers){
		
		for(Header header: headers){
		    if("set-cookie".equals(header.getName().toLowerCase())){
		    	 cookieStr += header.getValue() + "; ";
		    }
		}
		
		return cookieStr;
	}
}



import java.io.FileOutputStream;
import java.net.URLDecoder;
import java.net.URLEncoder;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.UUID;

import org.apache.commons.io.IOUtils;
import org.apache.http.Header;
import org.apache.http.HttpEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.util.EntityUtils;
import org.eclipse.jetty.util.StringUtil;
import org.springframework.util.StringUtils;

import com.alibaba.fastjson.JSONObject;
import com.baidu.aip.util.Base64Util;

import lombok.extern.log4j.Log4j;

/**
 * version 2.19.1
 * 易盾-获取滑块验证后的数据
 * 1.获取图片的fp指纹参数存在浏览器环境校验，校验不过也会正常返回图片，但是会降低通过率，不到10%
 *  这点经过测试，初步判断是请求易盾携带头信息不全导致
 */
@Log4j
public class YidunCheckUtil_2_21_3 {

	public static String userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36";

	public static IOcr iOcr = new MachineOcr(); 
	
	
	public static String getTrace(String zuobiao) throws Exception{
		//获取acToken
		zuobiao = URLEncoder.encode(zuobiao);
		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getTrace&group=yidun&zuobiao="+zuobiao;
		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
    	String content = response.getContent();
    	JSONObject contentObj = JSONObject.parseObject(content);
		
		String trace = contentObj.getString("data");
		
		return trace;
	}
	
	public static String getAcToken() throws Exception{
		//获取acToken
		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getAcToken&group=yidun";
		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
    	String content = response.getContent();
    	JSONObject contentObj = JSONObject.parseObject(content);
		
		String acToken = contentObj.getString("data");
		
		return acToken;
	}
	
	
	public static JSONObject getYzmParam() throws Exception{
		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getYzmParam&group=yidun";
		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
    	String content = response.getContent();
    	JSONObject contentObj = JSONObject.parseObject(content);
    	return contentObj;
	}
	
	public static String getData(String zuobiao,String guiji,String token) throws Exception{
		String mgetDataUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getData&guiji=%s&token=%s&zuobiao=%s&group=yidun";
		mgetDataUrl = mgetDataUrl.format(mgetDataUrl, URLEncoder.encode(guiji),token,URLEncoder.encode(zuobiao));
		
		ResponseContent response = HttpHelper.getUrlRespContent(mgetDataUrl);
		String data = response.getContent();
		JSONObject objJson = JSONObject.parseObject(data);
		JSONObject mObj = new JSONObject();
		mObj.put("d", objJson.get("d"));
		mObj.put("ext", objJson.get("ext"));
		mObj.put("m", objJson.get("m"));
		mObj.put("p", objJson.get("p"));
		
		data = URLEncoder.encode(mObj.toJSONString());
		return data;
	}
	
	
    /**
     * 获取滑块验证后的数据-点选
     * @author bree
     * @param 
     * @return
     */
	public static ResultModel getCheckData(ProxyService proxyService,List<String> proxyList) throws Exception{
		ResultModel resultModel = new ResultModel("0","处理成功");
		boolean flag = false;
		TaxBureauContext context = new TaxBureauContext();
		byte[] bytes = null;
		context.hw = new HttpClientWrapper(5000,5000, 5000,"127.0.0.1",8888);
	    
		
		CloseableHttpClient client = context.hw.getClient();
		context.httpClient = client;
		
		
		//1.获取验证码
    	JSONObject contentObj = getYzmParam();
    	
    	String referer = "https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin";
    	String fp = URLEncoder.encode(contentObj.getString("fp"));
		String cb = URLEncoder.encode(contentObj.getString("cb"));
		String callback = contentObj.getString("callback");
		
		String acToken = getAcToken();
		String url = "https://c.dun.163.com/api/v3/get?referer=%s&zoneId=CN31&acToken=%s&id=1a623022803d4cbc86fa157ec267bb36&fp=%s&https=true&type=undefined&version=2.21.2&dpr=1&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&sdkVersion=undefined&width=0&audio=false&sizeType=10&smsVersion=v2&token=%s&callback=%s";
		
		url = String.format(url, referer,acToken,fp,cb,"",callback);
		
		context.httpGet = new HttpGet(url);
		context.httpGet.setHeader("Host","c.dun.163.com");
		context.httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
		context.httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"");
		context.httpGet.setHeader("sec-ch-ua-mobile","?0");
		context.httpGet.setHeader("sec-ch-ua-platform","\"Windows\"");
		context.httpGet.setHeader("Sec-Fetch-Dest","script");
		context.httpGet.setHeader("Sec-Fetch-Mode","no-cors");
		context.httpGet.setHeader("Sec-Fetch-Site","cross-site");
		context.httpGet.setHeader("User-Agent",userAgent);		
		context.httpGet.setConfig(context.hw.getRequestConfig());
		context.execute = context.httpClient.execute(context.httpGet);
		
		Header[] headers = context.execute.getAllHeaders();
				
		context.httpEntity = context.execute.getEntity();
		
		context.byteArr = EntityUtils.toByteArray(context.httpEntity);
		
		String result =  new String(context.byteArr,"utf-8");
		System.out.println("result:"+result);
		
        result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
        
        JSONObject objJSon = JSONObject.parseObject(result);
        
        String msg = objJSon.getString("msg");
		
		if(!"ok".equals(msg)) {
			resultModel.setCode("-1");
			resultModel.setMessage("获取验证码失败");
			return resultModel;
		}
        
		JSONObject dataJSon = objJSon.getJSONObject("data");
		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块图片
		String front = dataJSon.getString("front");//点选文本
		String token = dataJSon.getString("token");
		String type = dataJSon.getString("type");
		String zoneId = dataJSon.getString("zoneId");
		
		
		//2.获取图片数据
		context.httpGet = new HttpGet(bg);
		context.httpGet.setConfig(context.hw.getRequestConfig());
		context.execute = client.execute(context.httpGet);
		context.httpEntity = context.execute.getEntity();	
	    bytes = EntityUtils.toByteArray(context.httpEntity);

		String zuobiao = "";
		String guiji = "";
        
		String baseImage = Base64Util.encode(bytes);
		
		if(StringUtils.isEmpty(baseImage)){
			resultModel.setCode("-1");
			resultModel.setMessage("获取验证码失败");
			return resultModel;
		}
		
		//3.识别图片
		TaxbureauConstants.setOcrUrl("http://monitor.taxservices.cn/");
	    IOcr iOcr = new MachineOcr(); 
		String orcData = iOcr.getCodeNormal(baseImage, front);
		
		if(StringUtil.isBlank(orcData) || orcData.indexOf("500 Internal Server") >= 0) {
			resultModel.setCode("-1");
			resultModel.setMessage("识别验证码失败");
			return resultModel;
		}
		
		JSONObject ocrJson = JSONObject.parseObject(orcData);
		zuobiao = ocrJson.getString("points");
		//guiji = ocrJson.getString("track");
	        
	    //
	    //调用自己的轨迹算法 测试发现自己的轨迹算法通过率高些
	    guiji = getTrace(zuobiao);
	        
	    System.out.println("my guiji:"+guiji);
	    
	     
	    if(StringUtils.isEmpty(zuobiao) || StringUtils.isEmpty(guiji)){
	    	resultModel.setCode("-1");
			resultModel.setMessage("识别验证码失败");
			return resultModel;
		}
	    
	     //4.校验滑块
	    url = "https://c.dun.163.com/api/v3/check?referer=%s&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&token=%s&acToken=undefined&width=310&type=3&version=2.21.2&cb=%s&extraData=&bf=0&runEnv=10&sdkVersion=undefined&callback=%s";
	    
	    Thread.sleep(500);//故意让程序慢些，避免反爬
    	contentObj = getYzmParam();
    	
		cb = URLEncoder.encode(contentObj.getString("cb"));
		callback = contentObj.getString("callback");
		
		url = String.format(url, referer,token,cb,callback);
	
		String data = getData(zuobiao,guiji,token);
		
		log.info("YidunCheckUtil data:"+data);
		
		url = url +"&data="+data;
		log.info("YidunCheckUtil getCheckData url:"+url);
		    
		context.httpGet = new HttpGet(url);
		context.httpGet.setHeader("Accept","*/*");
		context.httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
		context.httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
		context.httpGet.setHeader("Cache-Control","no-cache");
		context.httpGet.setHeader("Connection","keep-alive");
		context.httpGet.setHeader("Pragma","no-cache");
		context.httpGet.setHeader("Host","c.dun.163.com");
		context.httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
		context.httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"");
		context.httpGet.setHeader("sec-ch-ua-mobile","?0");
		context.httpGet.setHeader("sec-ch-ua-platform","\"Windows\"");
		context.httpGet.setHeader("Sec-Fetch-Dest","script");
		context.httpGet.setHeader("Sec-Fetch-Mode","no-cors");
		context.httpGet.setHeader("Sec-Fetch-Site","cross-site");
		context.httpGet.setHeader("Host","c.dun.163.com");
		context.httpGet.setHeader("User-Agent",userAgent);
    
		context.httpGet.setConfig(context.hw.getRequestConfig());
		context.execute = client.execute(context.httpGet);
		
		context.httpEntity = context.execute.getEntity();	
	    bytes = EntityUtils.toByteArray(context.httpEntity);
	    result = new String(bytes,"UTF-8");
			
	    log.info("YidunCheckUtil getCheckData validate result:"+result);
	    
	    if(StringUtils.isEmpty(result)){
	    	resultModel.setCode("-1");
			resultModel.setMessage("校验验证码失败");
			return resultModel;
		}
	    
	    result = result.substring(result.indexOf("(")+1, result.indexOf(")"));
	    JSONObject objJson = JSONObject.parseObject(result);
	    JSONObject dataJson = objJson.getJSONObject("data");
	    String validate = dataJson.getString("validate");
	    if(StringUtils.isEmpty(validate)){
	    	resultModel.setCode("-1");
			resultModel.setMessage("校验验证码失败");
			return resultModel;
	    }else {
	    	return resultModel;
	    }
	    
	}
	
}

签名破解使用了补环境方式，采用VM2执行


var express = require('express');
var router = express.Router();

var http = require('http');
var url = require('url'); 

var traceUtil =  require('../tools/traceUtil'); 

var yidunUtil =  require('../tools/yidunUtil'); 
var yidunWatchUtil =  require('../tools/yidunWatchUtil'); 

var fs = require('fs');
const {VM,VMScript} = require('vm2');//npm install vm2

const file = `${__dirname}/../src/runcode/yidun_huakuai-2.19.1.js`;//需要vm2执行的JS代码
const vm = new VM();
//使用VMScript可以调试，在调试代码中增加debugger即可
const script = new VMScript(fs.readFileSync(file),`${__dirname}.mycode.js`);

router.get('/yzm/cb', function(request, response, next) {
    var rdata  =  
    url.parse(request.url,true).query;   //获取参数
    var urlKey = rdata['urlKey'];

    vm.setGlobal('myfunType','cb');//入参传值
    vm.run(script);
    
    var cb = vm.getGlobal('myresult');//获取返回值

   // console.log('返回结果 cb:\n');
   // console.log(cb);

    cb = encodeURIComponent(cb);

    response.writeHead(200, {'Content-Type': 'application/json'});
    response.end(cb);
});

router.get('/yzm/fp', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];

  vm.setGlobal('myfunType','fp');//入参传值
  vm.run(script);
  
  var fp = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 fp:\n');
 // console.log(fp);

  fp = encodeURIComponent(fp);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(fp);
});

router.get('/yzm/callback', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];

  vm.setGlobal('myfunType','callback');//入参传值
  vm.run(script);
  
  var callb = vm.getGlobal('myresult');//获取返回值

//  console.log('返回结果 callb:\n');
  //console.log(callb);

  callb = encodeURIComponent(callb);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(callb);
});

router.get('/yzm/getM', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];//轨迹值
  var token = rdata['token'];

  vm.setGlobal('myfunType','getM');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myguiji',urlKey);
  vm.run(script);
  
  var mOut = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 mOut:\n');
  //console.log(mOut);

  mOut = encodeURIComponent(mOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(mOut);
});


router.get('/yzm/getP', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];//3个坐标值
  var token = rdata['token'];

  vm.setGlobal('myfunType','getP');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myzuobiao',urlKey);
  vm.run(script);
  
  var pOut = vm.getGlobal('myresult');//获取返回值


 // console.log('返回结果 pOut:\n');
 // console.log(pOut);

  pOut = encodeURIComponent(pOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(pOut);
});

router.get('/yzm/getExt', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];//轨迹值
  var token = rdata['token'];

 
  vm.setGlobal('myfunType','getExt');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myguiji',urlKey);
  vm.run(script);
  
  var extOut = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 extOut:\n');
//  console.log(extOut);

  extOut = encodeURIComponent(extOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(extOut);
});

router.get('/yzm/getAcToken', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];//轨迹值
  var token = rdata['token'];

  
 
  vm.setGlobal('myfunType','getAcToken');//入参传值
  vm.run(script);
  
  var acToken = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 acToken:\n');
 // console.log(acToken);

  acToken = encodeURIComponent(acToken);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(acToken);
});

router.get('/yzm/getTrace', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var urlKey = rdata['urlKey'];//3个坐标值

  var trace = traceUtil.getTrace(urlKey);//获取返回值


//  console.log('返回结果 trace:\n');
 // console.log(trace);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(trace);
});

router.get('/yzm/getTraceForWgz', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  //var urlKey = rdata['urlKey'];//1个坐标值

  var trace = traceUtil.getTraceForWgz();//获取返回值


 // console.log('返回结果 trace:\n');
 // console.log(trace);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(trace));
});


//获取滑块轨迹
router.get('/yzm/getTraceForHuakuai', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var zuobiao = rdata['zuobiao'];//1个坐标值

  var trace = traceUtil.getTraceForHuakuai(zuobiao);//获取返回值

 // console.log('返回结果 trace:\n');
 // console.log(trace);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(trace));
});


router.get('/yzm/getData', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var guiji = rdata['guiji'];//轨迹值
  var token = rdata['token'];
  var zuobiao = rdata['zuobiao'];

 
  vm.setGlobal('myfunType','getData');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myguiji',guiji);
  vm.setGlobal('myzuobiao',zuobiao);
  vm.run(script);
  
  var dataOut = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 dataOut:\n');
 // console.log(dataOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(dataOut);
});
//无感知调用这个，只有ext参数中传输的坐标点数量不同，传1，点选传3
router.get('/yzm/getDataForWgz', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var guiji = rdata['guiji'];//轨迹值
  var token = rdata['token'];
  var zuobiao = rdata['zuobiao'];

 
  vm.setGlobal('myfunType','getDataForWgz');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myguiji',guiji);
  vm.setGlobal('myzuobiao',zuobiao);
  vm.run(script);
  
  var dataOut = vm.getGlobal('myresult');//获取返回值

  //console.log('返回结果 dataOut:\n');
 // console.log(dataOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(dataOut);
});

//滑块调用这个，只有ext参数中传输的坐标点数量不同，传1，点选传3
router.get('/yzm/getDataForHuakuai', function(request, response, next) {
  var rdata  =  url.parse(request.url,true).query;   //获取参数
  var guiji = rdata['guiji'];//轨迹值
  var token = rdata['token'];
  var zuobiao = rdata['zuobiao'];

 
  vm.setGlobal('myfunType','getDataForHuakuai');//入参传值
  vm.setGlobal('mytoken',token);
  vm.setGlobal('myguiji',guiji);
  vm.setGlobal('myzuobiao',zuobiao);
  vm.run(script);
  
  var dataOut = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 dataOut:\n');
 // console.log(dataOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(dataOut);
});

//无感知获取CN31加密串
router.post('/yzm/getCn31Str', function(request, response, next) {

  var validate = request.body.validate;
  var fp = request.body.fp;

  vm.setGlobal('myfunType','getCn31Str');//入参传值
  vm.setGlobal('wgz_validate',validate);
  vm.setGlobal('wgz_fp',fp);
  vm.run(script);
  
  var dataOut = vm.getGlobal('myresult');//获取返回值

 // console.log('返回结果 dataOut:\n');
 // console.log(dataOut);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(dataOut);
 
});


router.post('/yzm/getYzmParam', function(request, response, next) {

  //var validate = request.body.validate;
  var WM_DID = request.body.WM_DID;

  var result = {};

  result = yidunUtil.getYzmParam(WM_DID);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(result));
 
});

router.post('/yzm/getCbByV3D', function(request, response, next) {

  //var validate = request.body.validate;
  //var fp = request.body.fp;

  var result = {};

  result = yidunWatchUtil.getCbByV3D();

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(result));
 
});

router.post('/yzm/getDByV3D', function(request, response, next) {

  var objJson = request.body.objJson;

  var result = {};

  result = yidunWatchUtil.getDByV3D(objJson);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(result));
 
});


router.post('/yzm/getData/new', function(request, response, next) {
  var guiji = request.body.guiji;
  var token = request.body.token;
  var zuobiao = request.body.zuobiao;
 
  var data = yidunUtil.getData(token,zuobiao,guiji);
  var res = JSON.stringify(data);
  res = encodeURIComponent(res);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(res);
});


router.post('/yzm/getAcTokenWatch', function(request, response, next) {

  //var validate = request.body.validate;
  var WM_DID = request.body.WM_DID;

  var result = {};

  result = yidunWatchUtil.getAcToken(WM_DID);

  response.writeHead(200, {'Content-Type': 'application/json'});
  response.end(JSON.stringify(result));
 
});

module.exports = router;

补环境是在志远框架上进行了补充编写的。调用的服务层是自己编写。

就是提供个思路，代码已不可用！

纯技术交流，请勿用于非法用途,如有权益问题可以发私信联系我删除.

liberty888
关注
  • 0
    点赞
  • 踩
  • 6
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
专栏目录
爬虫验证码分析
局外人LZ的博客
01-15 1371
声明：该文章为学习使用，严禁用于商业用途和非法用途，违者后果自负，由此产生的一切后果均与作者无关本文只做简单的验证码分析，不涉及扣代码等逆向。
（网易易盾加固安卓aab包文件）AndroidPackTool_通用版加密工具_4.3.0.8_.zip
08-27
（网易易盾加固安卓aab包文件）AndroidPackTool_通用版加密工具_4.3.0.8_.zip
网易易盾滑块逆向分析 js 滑动轨迹生成_1
weixin_44236034的博客
03-08 1792
基本上通过一个补环境的过程就能把这三个参数进行实现出来。
使用Python解析易盾验证码v2
最新发布
ttocr796的博客
04-05 352
首先，使用抓包工具（如Fiddler或Wireshark）捕获易盾验证码v2验证过程中的HTTP请求和响应。关注每个请求的参数和返回值，特别注意包含验证信息的关键参数，如token、sessionId等。通过分析抓包获取的数据，我们可以了解验证码验证过程中使用的加密算法和参数生成方式。重点关注生成验证参数的算法，尝试逆向推导出这些算法的具体实现方式。在本文中，我们将介绍如何使用Python解析易盾验证码v2，包括抓包分析、逆向工程和实战代码的编写。步骤三：构造验证请求参数。步骤二：获取验证参数。
【JavaScript 逆向】网易易盾滑块逆向分析
Yy_Rose的博客
03-13 9810
易盾滑块 fp、data、acToken、b、d、cb 逆向分析，补环境及相关细节研究
【CPU毫秒级】网易易盾点选识别
kerlomz的博客
08-14 2138
【福利】CPU毫秒级 | 网易易盾点选识别接口，最新点选用CPU只要70ms。
JS逆向 --- 易盾有感滑块
weixin_47115747的博客
12-25 6893
声明：本文仅限交流学习使用，请勿使用在任何非法商业活动，禁止用于非法用途。否则后果自负。如有侵权，请告知删除，谢谢！ 滑动拼图验证码_拼图验证_图形验证_在线体验_网易易盾网易易盾创新行为式验证，轻松一滑完成拼图，用户体验极佳，秒速通过验证。https://dun.163.com/trial/jigsaw 一、验证码接口 以下滑块以官网的为例 获取验证码主要加密参数：fp、cb 二、分析 fp 1. 进入函数下断点 2.在执行到这里的时候参数已经形成了， 单步跟栈 ...
网络爬虫-网易易盾滑块验证码
qq_39802740的博客
07-19 3212
网易易盾滑块验证码acToken,cb参数分析
网易易盾js逆向分析
weixin_58584029的博客
03-28 3686
目标url：滑动拼图验证码_拼图验证_图形验证_在线体验_网易易盾 抓包分析，先看看传递回来的参数 看起来有用的就这几个包。滑动滑块故意失败，发现传回来断点data传个false，并返回tonke，成功则为true。 失败的话还会重新传回两张图片。 这俩包就是加密的地方。 一步步跟栈，找到了加密位置，cd打上断点进入到函数内部，看看cd是怎么来的 进去后发现传了个32然后进行加密，每次加密结果不同。 进去后发现是随机生成一个字符串。直接扣就行。 观察代码结构，v...
某某易盾滑块参数逆向（一），涉及参数data，acToken
weixin_45886778的博客
07-26 1176
某某易盾滑块参数逆向（一），涉及参数data，acToken
网易易盾滑块逆向分析 js 滑动轨迹生成_2
weixin_44236034的博客
03-09 2481
1、首先就是通过我第一篇文章拿到我们要滑动的图片，还有token2、第二步识别出滑动的距离，这里考虑到图片中滑块距离左边的距离需要在识别出来的距离上适当的加上或者减去一些数3、通过识别出来的距离以及token去模拟滑动，通过 x 还有移动的距离去随机生成并进行加密4、接着就是 d m p ext 的生成，这里需要助理的是图片的大小，是否是300 或者320 适当的进行调整，还有距离左边的距离，都是需要去测试的。
【易盾点选】
骑毛驴的猴的博客
09-11 1489
模型主要有两步，一个是目标检测，一个是文字识别，我用的是yolo5的目标检测，标注个几十张就能用了，很强大。完事后呢，这边的轨迹稍微恶心点，必须经过你点击的坐标位置来生成轨迹，具体咋实现可以问问gpt。官网的接口目前都改成V3了，多了个dt参数，以及加密的一个函数也变动了下。然后主要就是文字坐标的确定了，可以打码，可以训练模型。拿官网的点选做个例子吧，比较省事，水一篇~然后文字识别可以用这个，标注，改参数直接跑。点选坐标在这，加密函数未变，用逗号拼接。然后整合再一起，测试下，基本上能用了。
网易易盾的使用demo
01-30
网易易盾 yanzhengma.html jquery-2.0.3.min.js
js验证码逆向之滑块、点选验证码
03-10
js验证码逆向之滑块、点选验证码
易语言-163 网易易盾 感知 验证例子
06-26
这里说一下，网易验证码类它自家的核心算法，基本上是永远固定的，没有什么更新之说 这个我随便拿两年前的，随意改改，然后基本上都没难度，比较简单的东西。 最后说明一点，这感知没有100%成功之说，哪怕浏览器，也有可能会弹个验证码给你，只能说，尽可能的模拟已达到人工效果。
易语言-网易易盾无感识别验证
06-26
网易易盾无感识别验证源码
广东省公共资源交易平台逆向分析
01-10
广东省公共资源交易平台逆向分析
易语言逆向分析助手3.0
08-04
易语言逆向分析助手3.0
IDA pro逆向工具的使用以及逆向分析程序实例操作
04-18
IDA pro逆向工具的初步入门，此资源是针对IDA pro的功能实现的一些小案例，不仅是代码编写实现也更注重内容上的需求分析和方案设计，所以在学习的过程要结合这些内容一起来实践，并调试对应的代码。
安装逆向网易易盾滑块验证
09-13
您好！要安装逆向网易易盾滑块验证，您需要按照以下步骤进行操作： 1. 在您的项目中引入网易易盾滑块验证的 JavaScript SDK。可以通过在页面的 `<head>` 标签中插入如下代码来加载 SDK： ```html <script src="//nosdn.127.net/yidun/2.17.0/yidun.js"></script> ``` 2. 在页面中设置一个用于展示滑块验证的容器元素。在合适的位置插入如下代码： ```html <div id="captcha"></div> ``` 3. 在页面中初始化滑块验证。在页面加载完成后，调用 `init` 方法进行初始化操作，并传入相关参数。示例代码如下： ```javascript window.onload = function() { var options = { captchaId: 'YOUR_CAPTCHA_ID', mode: 'popup', width: '300px', onVerify: function(err, data) { if (err) { // 验证失败，请进行相应处理 } else { // 验证成功，请进行相应处理 } } }; var nc=initNECaptcha(options, function (instance) { // 初始化成功后得到验证实例 instance，可以调用实例的方法 }, function (err) { // 初始化失败后触发该函数，例如网络错误，cdn 地址无法访问等 }); } ``` 在上述代码中，您需要将 `YOUR_CAPTCHA_ID` 替换为您在网易易盾申请的验证码 ID。此外，您还可以根据需要自定义其他参数，比如 `mode`（弹出框模式）、`width`（滑块宽度）等。 注意：为了确保安全性，强烈建议将验证请求发送到服务器进行二次校验，以防止客户端被篡改。 希望以上信息对您有所帮助！如果您有任何其他问题，请随时提问。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

liberty888

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值