*简壁纸 返回数据解密

网址: aHR0cHM6Ly9iei56enptaC5jbi9pbmRleA==

正文:

1:打开网页进行翻页可以看到返回的数据包数据是加密的
在这里插入图片描述
2.直接下段跟
在这里插入图片描述
3.在520处下断点
![在这里插入图片描述](https://img-blog.csdnimg.cn/940e3816b3fe4eb7ab4e8685a73b2108.png![在这里插入图片描述](

4.回到网页点击翻页再次断下,分析改断点附近代码,可以发现显眼的字眼
在这里插入图片描述

5.在523处下断点,可以发现_0x3c6b83[‘data’][‘result’]为密文,JSON’parse’则是解密好的明文
在这里插入图片描述在这里插入图片描述

6.重新回到代码,看到_0xf79b3e[‘a’][‘decipher’]则是解密方法,跟进去看下
在这里插入图片描述
7.最终经过三个方法解密成明文,扣下三个方法即可。
在这里插入图片描述
8.代码如下:

 var a = {
     base64EncodeChars:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",
     base64DecodeChars:new Array(-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1, -1, -1, -1, -1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1, -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1),
     keyStr:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",
    /**
     * base64编码 
     * @param {Object} str 
     */
    base64encode(str) {
        var out, i, len;
        var c1, c2, c3;
        len = str.length;
        i = 0;
        out = "";
        while (i < len) {
            c1 = str.charCodeAt(i++) & 0xff;
            if (i == len) {
                out += this.base64EncodeChars.charAt(c1 >> 2);
                out += this.base64EncodeChars.charAt((c1 & 0x3) << 4);
                out += "==";
                break;
            }
            c2 = str.charCodeAt(i++);
            if (i == len) {
                out += this.base64EncodeChars.charAt(c1 >> 2);
                out += this.base64EncodeChars.charAt(((c1 & 0x3) << 4) | ((c2 & 0xF0) >> 4));
                out += this.base64EncodeChars.charAt((c2 & 0xF) << 2);
                out += "=";
                break;
            }
            c3 = str.charCodeAt(i++);
            out += this.base64EncodeChars.charAt(c1 >> 2);
            out += this.base64EncodeChars.charAt(((c1 & 0x3) << 4) | ((c2 & 0xF0) >> 4));
            out += this.base64EncodeChars.charAt(((c2 & 0xF) << 2) | ((c3 & 0xC0) >> 6));
            out += this.base64EncodeChars.charAt(c3 & 0x3F);
        }
        return out;
    },
    /** 
     * base64解码 
     * @param {Object} str 
     */
    base64decode(str) {
        var c1, c2, c3, c4;
        var i, len, out;
        len = str.length;
        i = 0;
        out = "";
        while (i < len) {
            /* c1 */
            do {
                c1 = this.base64DecodeChars[str.charCodeAt(i++) & 0xff];
            }
            while (i < len && c1 == -1);
            if (c1 == -1)
                break;
            /* c2 */
            do {
                c2 = this.base64DecodeChars[str.charCodeAt(i++) & 0xff];
            }
            while (i < len && c2 == -1);
            if (c2 == -1)
                break;
            out += String.fromCharCode((c1 << 2) | ((c2 & 0x30) >> 4));
            /* c3 */
            do {
                c3 = str.charCodeAt(i++) & 0xff;
                if (c3 == 61)
                    return out;
                c3 = this.base64DecodeChars[c3];
            }
            while (i < len && c3 == -1);
            if (c3 == -1)
                break;
            out += String.fromCharCode(((c2 & 0XF) << 4) | ((c3 & 0x3C) >> 2));
            /* c4 */
            do {
                c4 = str.charCodeAt(i++) & 0xff;
                if (c4 == 61)
                    return out;
                c4 = this.base64DecodeChars[c4];
            }
            while (i < len && c4 == -1);
            if (c4 == -1)
                break;
            out += String.fromCharCode(((c3 & 0x03) << 6) | c4);
        }
        return out;
    },

    //将Ansi编码的字符串进行Base64编码
     encode64(input) {
        var output = "";
        var chr1, chr2, chr3 = "";
        var enc1, enc2, enc3, enc4 = "";
        var i = 0;
        do {
            chr1 = input.charCodeAt(i++);
            chr2 = input.charCodeAt(i++);
            chr3 = input.charCodeAt(i++);
            enc1 = chr1 >> 2;
            enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
            enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
            enc4 = chr3 & 63;
            if (isNaN(chr2)) {
                enc3 = enc4 = 64;
            } else if (isNaN(chr3)) {
                enc4 = 64;
            }
            output = output + this.keyStr.charAt(enc1) + this.keyStr.charAt(enc2)
            + this.keyStr.charAt(enc3) + this.keyStr.charAt(enc4);
            chr1 = chr2 = chr3 = "";
            enc1 = enc2 = enc3 = enc4 = "";
        } while (i < input.length);
        return output;
    },
    //将Base64编码字符串转换成Ansi编码的字符串
     decode64(input) {
        var output = "";
        var chr1, chr2, chr3 = "";
        var enc1, enc2, enc3, enc4 = "";
        var i = 0;


        if (input.length % 4 != 0) {
            return "";
        }
        var base64test = /[^A-Za-z0-9\+\/\=]/g;
        if (base64test.exec(input)) {
            return "";
        }
        do {
            enc1 = this.keyStr.indexOf(input.charAt(i++));
            enc2 = this.keyStr.indexOf(input.charAt(i++));
            enc3 = this.keyStr.indexOf(input.charAt(i++));
            enc4 = this.keyStr.indexOf(input.charAt(i++));
            chr1 = (enc1 << 2) | (enc2 >> 4);
            chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
            chr3 = ((enc3 & 3) << 6) | enc4;


            output = output + String.fromCharCode(chr1);
            if (enc3 != 64) {
                output += String.fromCharCode(chr2);
            }
            if (enc4 != 64) {
                output += String.fromCharCode(chr3);
            }
            chr1 = chr2 = chr3 = "";
            enc1 = enc2 = enc3 = enc4 = "";
        } while (i < input.length);
        return output;
    },
    utf16to8(str) {
        var out, i, len, c;


        out = "";
        len = str.length;
        for (i = 0; i < len; i++) {
            c = str.charCodeAt(i);
            if ((c >= 0x0001) && (c <= 0x007F)) {
                out += str.charAt(i);
            } else if (c > 0x07FF) {
                out += String.fromCharCode(0xE0 | ((c >> 12) & 0x0F));
                out += String.fromCharCode(0x80 | ((c >> 6) & 0x3F));
                out += String.fromCharCode(0x80 | ((c >> 0) & 0x3F));
            } else {
                out += String.fromCharCode(0xC0 | ((c >> 6) & 0x1F));
                out += String.fromCharCode(0x80 | ((c >> 0) & 0x3F));
            }
        }
        return out;
    },
    utf8to16(str) {
        var out, i, len, c;
        var char2, char3;


        out = "";
        len = str.length;
        i = 0;
        while (i < len) {
            c = str.charCodeAt(i++);
            switch (c >> 4) {
                case 0: case 1: case 2: case 3: case 4: case 5: case 6: case 7:
                    // 0xxxxxxx
                    out += str.charAt(i - 1);
                    break;
                case 12: case 13:
                    // 110x xxxx   10xx xxxx
                    char2 = str.charCodeAt(i++);
                    out += String.fromCharCode(((c & 0x1F) << 6) | (char2 & 0x3F));
                    break;
                case 14:
                    // 1110 xxxx  10xx xxxx  10xx xxxx
                    char2 = str.charCodeAt(i++);
                    char3 = str.charCodeAt(i++);
                    out += String.fromCharCode(((c & 0x0F) << 12) |
                    ((char2 & 0x3F) << 6) |
                    ((char3 & 0x3F) << 0));
                    break;
            }
        }
        return out;
    }
}


function _0x1ce9a6(_0x5cd53e) {
    for (var _0x1823fa = a.base64decode(_0x5cd53e), _0x2d7ae1 = new Int8Array(_0x1823fa['length']), _0x589139 = 0x0; _0x589139 < _0x1823fa['length']; _0x589139++)
        _0x2d7ae1[_0x589139] = _0x1823fa['charCodeAt'](_0x589139);
    return _0x2d7ae1;
}

        function _0x4c8bf9(_0x519912) {
            for (var _0x116147 = [-0x6f, 0x34, 0x5b, 0x41, -0x41, 0x74, 0x77, 0x6a, -0x79, -0x52, -0x5, 0x50, 0x33, 0x61, 0x44, -0x53, -0x70, -0x33, 0x17, -0x2e, -0x22, -0x72, -0x37, -0xb, -0x7f, 0x5a, 0x21, 0x16, -0x1f, 0x32, -0x11, 0x14, -0x2c, 0xf, -0x5e, -0x7b, 0x76, -0x17, -0x3d, 0x72, 0x47, -0x68, -0x7e, -0x75, -0x51, -0x36, -0x12, -0x6e, -0x4, -0x5f, -0x5b, 0x5e, -0x50, -0xe, 0x78, 0x69, 0x55, 0x68, -0x56, -0x6c, 0x43, 0x19, 0x65, 0x6c, 0x10, -0x69, 0x6f, -0xa, 0x75, -0x49, 0x4d, 0x59, -0x1d, -0x62, -0x44, 0x70, 0x6b, -0x1, 0x56, 0x79, 0x58, -0x65, -0x7c, 0x45, -0x1e, -0x8, -0x71, -0x4a, -0x76, 0x39, -0x19, 0xc, -0x73, -0x6a, 0x5f, 0x7f, 0x54, 0x7c, -0x66, -0x1c, 0x49, 0x2b, -0x3c, 0x1c, 0x2e, 0x73, 0x1e, 0x7a, -0x4b, 0x7d, -0x43, -0x4d, 0x3, -0x7, -0x35, -0xd, 0x35, 0x4e, -0x48, 0x1, 0xb, -0x47, -0x27, -0x4f, -0x3, 0x13, 0x29, 0x7e, -0x2b, -0x7d, -0x1b, 0x22, 0x3f, 0x8, 0x48, -0x23, -0x29, -0x3f, 0x3c, -0x18, 0x66, 0x2f, -0x77, -0x67, -0x16, 0x2d, 0x3b, 0x40, -0x60, 0x31, 0x53, -0x6b, -0x78, -0x39, -0x46, 0x0, -0x26, -0x54, -0x28, 0x18, 0xe, 0x30, 0x1d, 0x2c, -0x24, -0x2f, 0x38, -0x5c, 0x26, 0x25, 0x4, -0x32, 0x67, 0xa, -0x59, 0x37, 0x71, -0x1a, 0x6e, 0x36, 0x24, -0x14, -0x4e, -0xc, -0x74, 0x46, -0x25, 0x5, -0x3e, -0x4c, -0x30, -0x40, 0x4f, 0x64, 0x28, 0x6, -0x3a, -0x5a, -0x13, -0x9, 0x27, 0x5d, -0x63, 0x15, 0x7, 0x1a, -0x2, 0x1b, -0x2d, 0x51, 0x3a, -0x7a, 0x4c, -0x42, 0x2, 0x5c, -0x2a, 0x62, -0x10, 0x9, 0x3d, 0x3e, -0xf, 0x63, -0x15, 0x1f, -0x38, 0x57, 0x11, -0x34, -0x45, -0x21, -0x3b, -0x55, 0x42, 0x4a, 0x12, -0x5d, -0x80, -0x57, -0x20, 0x2a, 0x20, -0x58, 0x6d, 0x60, 0xd, -0x6, 0x4b, -0x64, -0x31, 0x23, -0x61, 0x52, -0x6d, 0x7b], _0x2cde30 = 0x0, _0x33054d = 0x0, _0x5f5d82 = 0x0, _0x508aee = new Array(), _0x5bafcd = 0x0; _0x5bafcd < _0x519912['length']; _0x5bafcd++) {
                _0x2cde30 = _0x2cde30 + 0x1 & 0xff,
                _0x33054d = (0xff & _0x116147[_0x2cde30]) + _0x33054d & 0xff;
                var _0x58a8df = _0x116147[_0x2cde30];
                _0x116147[_0x2cde30] = _0x116147[_0x33054d],
                _0x116147[_0x33054d] = _0x58a8df,
                _0x5f5d82 = (0xff & _0x116147[_0x2cde30]) + (0xff & _0x116147[_0x33054d]) & 0xff,
                _0x508aee['push'](_0x519912[_0x5bafcd] ^ _0x116147[_0x5f5d82]);
            }
            return _0x508aee;
        }

        function _0x3093a6(_0x1e2ea5) {
            for (var _0x223f55, _0x5c974b, _0x1c0275 = '', _0x40d000 = 0x0; _0x40d000 < _0x1e2ea5['length']; )
                _0x223f55 = _0x1e2ea5[_0x40d000],
                _0x5c974b = 0x0,
                _0x223f55 >>> 0x7 === 0x0 ? (_0x1c0275 += String['fromCharCode'](_0x1e2ea5[_0x40d000]),
                _0x40d000 += 0x1) : 0xfc === (0xfc & _0x223f55) ? (_0x5c974b = (0x3 & _0x1e2ea5[_0x40d000]) << 0x1e,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x1]) << 0x18,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x2]) << 0x12,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x3]) << 0xc,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x4]) << 0x6,
                _0x5c974b |= 0x3f & _0x1e2ea5[_0x40d000 + 0x5],
                _0x1c0275 += String['fromCharCode'](_0x5c974b),
                _0x40d000 += 0x6) : 0xf8 === (0xf8 & _0x223f55) ? (_0x5c974b = (0x7 & _0x1e2ea5[_0x40d000]) << 0x18,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x1]) << 0x12,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x2]) << 0xc,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x3]) << 0x6,
                _0x5c974b |= 0x3f & _0x1e2ea5[_0x40d000 + 0x4],
                _0x1c0275 += String['fromCharCode'](_0x5c974b),
                _0x40d000 += 0x5) : 0xf0 === (0xf0 & _0x223f55) ? (_0x5c974b = (0xf & _0x1e2ea5[_0x40d000]) << 0x12,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x1]) << 0xc,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x2]) << 0x6,
                _0x5c974b |= 0x3f & _0x1e2ea5[_0x40d000 + 0x3],
                _0x1c0275 += String['fromCharCode'](_0x5c974b),
                _0x40d000 += 0x4) : 0xe0 === (0xe0 & _0x223f55) ? (_0x5c974b = (0x1f & _0x1e2ea5[_0x40d000]) << 0xc,
                _0x5c974b |= (0x3f & _0x1e2ea5[_0x40d000 + 0x1]) << 0x6,
                _0x5c974b |= 0x3f & _0x1e2ea5[_0x40d000 + 0x2],
                _0x1c0275 += String['fromCharCode'](_0x5c974b),
                _0x40d000 += 0x3) : 0xc0 === (0xc0 & _0x223f55) ? (_0x5c974b = (0x3f & _0x1e2ea5[_0x40d000]) << 0x6,
                _0x5c974b |= 0x3f & _0x1e2ea5[_0x40d000 + 0x1],
                _0x1c0275 += String['fromCharCode'](_0x5c974b),
                _0x40d000 += 0x2) : (_0x1c0275 += String['fromCharCode'](_0x1e2ea5[_0x40d000]),
                _0x40d000 += 0x1);
            return _0x1c0275;
        };
        function decrypt(data){
	return _0x3093a6(_0x4c8bf9(_0x1ce9a6(data)))
}

9.python调用结果
在这里插入图片描述

  • 1
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值