阿里系v2_cookie获取

阿里系v2_cookie获取

目标网址：https://xueqiu.com/today

1、如何判断为阿里系v2 cookie

2、如何解决debugger问题

3、分析cookie生成，找到生成方法

4、扣取的js代码块

String['prototype']['hexXor'] = function (_0x4e08d8) {
    var _0x5a5d3b = '';
    for (var _0xe89588 = 0x0; _0xe89588 < this['length'] && _0xe89588 < _0x4e08d8['length']; _0xe89588 += 0x2) {
        var _0x401af1 = parseInt(this['slice'](_0xe89588, _0xe89588 + 0x2), 0x10);
        var _0x105f59 = parseInt(_0x4e08d8['slice'](_0xe89588, _0xe89588 + 0x2), 0x10);
        var _0x189e2c = (_0x401af1 ^ _0x105f59)['toString'](0x10);
        if (_0x189e2c['length'] == 0x1) {
            _0x189e2c = '\x30' + _0x189e2c;
        }
        _0x5a5d3b += _0x189e2c;
    }
    return _0x5a5d3b;
}
String['prototype']['unsbox'] = function () {
    var _0x4b082b = [0xf, 0x23, 0x1d, 0x18, 0x21, 0x10, 0x1, 0x26, 0xa, 0x9, 0x13, 0x1f, 0x28, 0x1b, 0x16, 0x17, 0x19, 0xd, 0x6, 0xb, 0x27, 0x12, 0x14, 0x8, 0xe, 0x15, 0x20, 0x1a, 0x2, 0x1e, 0x7, 0x4, 0x11, 0x5, 0x3, 0x1c, 0x22, 0x25, 0xc, 0x24];
    var _0x4da0dc = [];
    var _0x12605e = '';
    for (var _0x20a7bf = 0x0; _0x20a7bf < this['length']; _0x20a7bf++) {
        var _0x385ee3 = this[_0x20a7bf];
        for (var _0x217721 = 0x0; _0x217721 < _0x4b082b['length']; _0x217721++) {
            if (_0x4b082b[_0x217721] == _0x20a7bf + 0x1) {
                _0x4da0dc[_0x217721] = _0x385ee3;
            }
        }
    }
    _0x12605e = _0x4da0dc['join']('');
    return _0x12605e;
}


function getCookie(arg1) {
    var _0x23a392 = arg1['unsbox']();

    arg2 = _0x23a392['hexXor']("3000176000856006061501533003690027800375");

    return arg2
}

总结：

1、分析cookie生成，第一次请求返还一个cookie,和生成v2_cookie的js代码块，该代码块会在VM中运行

分析v2_cookie的生成，可以跟栈找到生成方法位置，扣取js代码块运行调试即可。

2、在网页调试中会出现debugger问题，根据上述步骤过掉即可。

3、本文章仅供学习使用，上述代码请不要违规使用，所造成的一切不良后果与作者无关；如有侵权，请联系删除！！！