AKamai破解初试

标准的TLS/AKamai绕过

ja3算法：

GitHub - salesforce/ja3: JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

tls设备指纹测试:

https://tls.browserleaks.com/json

akm指纹

https://tls.peet.ws/api/all

tls网站

取id后访问id得到随机ua头

https://client.tlsfingerprint.io/

https://tlsfingerprint.io/id/546da870f29a7313

使用第三方库绕过：curl_cffi  ,   pyhttpx , pycurl

伪造设备指纹：urllib   ssl

2.0

目标网站：JTIyaHR0cHMlM0EvL3d3dy5rb3JlYW5haXIuY29tLyUyMg==

https://www.koreanair.com/

找到  用xhr下断

第一段指纹还原 

'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36,uaend,12147,20030107,zh-CN,Gecko,5,0,0,0,420240,0,1536,824,1536,864,334,738,1536,,cpen:0,i1:0,dm:0,cwen:0,non:1,opc:0,fc:0,sc:0,wrc:1,isc:0,vib:1,bat:1,x11:0,x12:1,8101,0.441483404220,853982169960,0,0,loc:'

IZ4  浏览器各种信息 

特征：.apply(undefined 

fm(sx,[hn,kh,ref]),浏览器签名 

nf[ff.vk.apply(null, [qv, Jc, UV, kS])].bmak[ff.FB.apply(null, [cR, WR, Qc, NEf, Zl])] 时间搓除以2

nf[ff.Jk.call(null, DP, Rl, OX)][ff.Ck.call(null, rR, kX, wV)]()  随机数 

 补一个ua，设置一个插件数量为5

RSV80pt.parseHTML=true;       //v8编译
document.documentElement.innerHTML ='网页源码'
RSV80pt.userAgent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36'


location.href='https://www.koreanair.com/'
(function () {
    let old_plugig =navigator.plugins;
    Object.defineProperty(navigator, 'plugins', {
        get: function () {
            return new Proxy(old_plugig,{
                 get:(target,key) =>{
                     let value =Reflect.get(target,key);
                     if (key=='length') return 5;
                     if(value instanceof Function){
                         value =value.bind(target);
                     }
                     return value;
                 }
            });
        },
    });
})();

Object.defineProperty(window.speechSynthesis, 'speechSynthesis', {
    set: function (val) {
       this._tmp= val ;
    },
    get: function () {
      return this._tmp;
    }
});

navigator.plugins.length

第二段指纹还原

找到这个位置

两次在单步跟下去 

跟到PN出现参数 

'1,32,32,0,40102,0,40102,1386556,0,1707983760381,37,18271,0,0,3045,0,0,1443693,40102,0,4A9BC1C092A34FB6799FF02AC86144EF~0~YAAQJWl7dkSirFWNAQAATJSyqwsPOedkohNevoDB8MlRrzZMkfyVk+n+OaJTbRFXArT7dzu0QCJIGU1RkMXaDSHXwhH6P9dZNMgqY3xHQFvdcsVu0W43SCNybVy81zcloRScedlm+l2wpgzypb6W+Edy4yal6FaDONNg0875cgcM93f4rRAuZq7x65yLSOp9U6Vusy6zLwkBOCVt3mmWAcODKmA0oAerVhRjdgYxvKpKfvDYeOlzISwS0tZC5h2WxgvZdLwmMcgAeiuLSc4fkrosGkdCBM1YKJMCq7S4IC/mx6KWm9DoaOPIttzOGLXU+QLeOt6y0aRtF7IGVQ5hN308V+fKpSmkWM/yMLn13XqN+dDB5LwUkBAU5BxeSaXpNeng+W+SZwfY8EjlhsxL5zeDE2xL6BsSA8pk~-1~-1~-1,39192,547,1352306631,30261693,PiZtE,38507,85,0,0,0,,,7ba16ebac4ea29695c113a7c1022516c78ab68fb525e14c51470c89f7d817c8a,225'

 

https://www.saksfifthavenue.com

https://www.koreanair.com/

國泰航空 | 預訂航班及與躍升生活享 

 达美航空公司 | 航班与机票 + 酒店住宿与租车

1.数据第一条amk链接通过。

简单风控：UA，插件信息

中级风控：font字体指纹，显卡指纹，canvas指纹，权限指纹，权限列表白名单

 高级风控：开发者工具，鼠标轨迹

 特殊风控：http2指纹

linux tls 项目 GitHub - lwthiker/curl-impersonate: curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

项目地址

GitHub - Danny-Dasilva/Ja3-Http2