Http Post注册QQ号码 分析流程图 更新时间20141206



C++/C#/JAVA软件开发 群号:31076959
 以下内容限内部编程参考,未经允许不得Ctrl+C&&Ctrl+V,请尊重劳动者成果   由于时间关系没有仔细分析每一步内容,不过流程已经出来,相信大家可以自己再分析下;


以下步骤按get post的顺序进行,其中很多后缀是随机数,最前面包含请求头的必要内容:
-----------------------------------------------------------------------------------------------------
Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0; QQBrowser/8.0.2878.400) like Gecko
---------------------------流程开始-----------------------------------------------------------------
get 重定向 304
http://zc.qq.com/chs/index.html
zc_uid=1417862649_1422665619;

hmenter=a;

machineCookie=442f13dddca68fabcc6b27f5a399e424bc1379c7628c8da5;

 piccnt=0;

 isCloseEnter=5; _act_lsig=DDF5B09435C295C4DB085FC2E766FA800D71C01C95CE5AE67DA441C1DC98E93BAA41A498BAB0EAC4FF58EB055F555849B1BCB770F503385FBB33B9EC97F20347;

 indexType=3;

 pgv_pvid=966366975;

 uin_cookie=3092002306;

euin_cookie=FA3009B1574F5DA3168A9176585BBCD0A1466C69AA6133A4;

 pt2gguin=o3092002306; (之前已经申请的qq的号码还在cookie中)

RK=WM0a5ttQmv;

 ptcz=dfb15a125dc2c1a210326f2eca812608ab518b901143920273318554828b6646;

 cuid=5815246503

Set-Cookie:
zc_uid=1399073734_488305634; Domain=zc.qq.com; Expires=Sat, 02 May 2015 23:35:34 GMT; Path=/;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4; Domain=zc.qq.com; Expires=Sat, 02 May 2015 23:35:34 GMT; Path=/;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3; Domain=zc.qq.com; Expires=Sat, 02 May 2015 23:35:34 GMT; Path=/;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D; Domain=zc.qq.com; Expires=Sat, 02 May 2015 23:35:34 GMT; Path=/;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60; Domain=zc.qq.com; Expires=Sat, 02 May 2015 23:35:34 GMT; Path=/;



//获取文件版本号,作为后面访问目录
get
http://zc.qq.com/chs/ver.js?v=0.29226872827198213
Accept:*/*
返回:g.cb(10062);

//请求头文件:
GET /chs/ver.js?v=0.29226872827198213 HTTP/1.1
Accept: application/javascript, */*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0; QQBrowser/8.0.2878.400) like Gecko
Referer: http://zc.qq.com/chs/index.html
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
Host: zc.qq.com
Connection: Keep-Alive
Cookie: zc_uid=1417862649_1422665619; hmenter=a; machineCookie=442f13dddca68fabcc6b27f5a399e424bc1379c7628c8da5; piccnt=0; isCloseEnter=5; _act_lsig=DDF5B09435C295C4DB085FC2E766FA800D71C01C95CE5AE67DA441C1DC98E93BAA41A498BAB0EAC4FF58EB055F555849B1BCB770F503385FBB33B9EC97F20347; indexType=3; pgv_pvid=966366975; uin_cookie=3092002306; euin_cookie=FA3009B1574F5DA3168A9176585BBCD0A1466C69AA6133A4; pt2gguin=o3092002306; RK=WM0a5ttQmv; ptcz=dfb15a125dc2c1a210326f2eca812608ab518b901143920273318554828b6646; cuid=5815246503


get

http://zc.qq.com/cgi-bin/common/attr?id=462972&r=0.0970836207509101

http://zc.qq.com/cgi-bin/common/attr?id=462972&r=0.9594724952768447

http://zc.qq.com/cgi-bin/common/attr?id=252190&r=0.7995404980621127


//初始化城市信息

get

http://zc.qq.com/cgi-bin/chs/numreg/init?r=0.9793067580325505&cookieCode=undefined

返回数据:

{"city":"深圳","cityid":"3","country":"中国","countryid":"1","ec":0,"elevel":"1","localdate":"2014-12-6","province":"广东","provinceid":"44"}


get

http://zc.qq.com/cgi-bin/common/attr?id=173276&r=0.8347831209431201


get

http://a.zc.qq.com/s.js?t=0.9921193032463353

返回内容

==============================================================================================

var zcSec = {
 u : "http://a.zc.qq.com/Cgi-bin/SecCheck",
    nf : "OiiHVnQKtaTcC4vrNKtr6R7UcOy2nin1EL7XyLhgm16otrW61D",
r : "",
zPWMKf : function(){
var LQgtB = [36,2,10,45,39,47,0,33,43,14];
var RhbwO = [22,2,28,38,20,34,8,12,3,14];
var hQfNl = [38,37,44,9,43,33,22,14,7,9];
var ls = zcSec.nf;
zcSec.r = "";
zcSec.r += ls.charAt(hQfNl[3]) + ls.charAt(LQgtB[6]) + ls.charAt(RhbwO[7]) + ls.charAt(RhbwO[9]) + ls.charAt(LQgtB[9]) + ls.charAt(hQfNl[4]) + ls.charAt(hQfNl[6]) + ls.charAt(LQgtB[7]) + ls.charAt(hQfNl[9]) + ls.charAt(LQgtB[3]);
return zcSec.r;
},
check: function(){
zcSec.r = zcSec.zPWMKf();
var url = zcSec.u;
url += "?";
url += zcSec.r;
url += "&";
url += Math.random();
var s = document.createElement("img");
s.src = url;
}
};

setTimeout("zcSec.check()",2000);

=================================================================================================================


get

http://zc.qq.com/cgi-bin/common/attr?id=260714&r=0.1522527127081414


get

http://zc.qq.com/cgi-bin/common/attr?id=278037&r=0.09027045555439261


get

http://zc.qq.com/cgi-bin/common/attr?id=173279&r=0.8525526941747251


get

http://captcha.qq.com/getimage?aid=1007901&r=0.7146846395326278

验证码出现


get

http://zc.qq.com/cgi-bin/common/attr?id=58030&timeused=0&seed=0.8952972943061447


get

http://a.zc.qq.com/Cgi-bin/SecCheck?aOCvvo7Lar&0.37715174593678574    (验证秒和前面的s.js文件对应)


get

http://zc.qq.com/chs/m.js?v=0.11029035044190394

加密文件

var core_md5=function(e,h){function g(b,a,c,d,e,f,g){return safe_add(bit_rol(safe_add(safe_add(b,a&c|~a&d),safe_add(e,g)),f),a)}e=e||"";h=h||0;e[h>>5]|=128<<h%32;e[(h+64>>>9<<4)+14]=h;var b=1732584193,a=-271733879,c=-1732584194,d=271733878;A('u5e0i','q9e9t6');for(var f=0;f<e.length;f+=16)b=g(b,a,c,d,e[f+0],7,-680876936),d=g(d,b,a,c,e[f+1],12,-389564586),c=g(c,d,b,a,e[f+2],17,606105819),a=g(a,c,d,b,e[f+3],22,-1044525330),b=g(b,a,c,d,e[f+4],7,-176418897),d=g(d,b,a,c,e[f+5],12,1200080426),c=g(c,d,b,a,e[f+
6],17,-1473231341),a=g(a,c,d,b,e[f+7],22,-45705983),b=g(b,a,c,d,e[f+8],7,1770035416),d=g(d,b,a,c,e[f+9],12,-1958414417),c=g(c,d,b,a,e[f+10],17,-42063),a=g(a,c,d,b,e[f+11],22,-1990404162),b=g(b,a,c,d,e[f+12],7,1804603682),d=g(d,b,a,c,e[f+13],12,-40341101),c=g(c,d,b,a,e[f+14],17,-1502002290),a=g(a,c,d,b,e[f+15],22,1236535329),b=md5_gg(b,a,c,d,e[f+1],5,-165796510),d=md5_gg(d,b,a,c,e[f+6],9,-1069501632),c=md5_gg(c,d,b,a,e[f+11],14,643717713),a=md5_gg(a,c,d,b,e[f+0],20,-373897302),b=md5_gg(b,a,c,d,e[f+
5],5,-701558691),d=md5_gg(d,b,a,c,e[f+10],9,38016083),c=md5_gg(c,d,b,a,e[f+15],14,-660478335),a=md5_gg(a,c,d,b,e[f+4],20,-405537848),b=md5_gg(b,a,c,d,e[f+9],5,568446438),d=md5_gg(d,b,a,c,e[f+14],9,-1019803690),c=md5_gg(c,d,b,a,e[f+3],14,-187363961),a=md5_gg(a,c,d,b,e[f+8],20,1163531501),b=md5_gg(b,a,c,d,e[f+13],5,-1444681467),d=md5_gg(d,b,a,c,e[f+2],9,-51403784),c=md5_gg(c,d,b,a,e[f+7],14,1735328473),a=md5_gg(a,c,d,b,e[f+12],20,-1926607734)}();

注意:和之前的加密一样,这个文件中的A('u5e0i','q9e9t6')已经增加到了6位数,所以判读的时候要注意下;作为后面提交所用


POST

该部分数据是提交的post数据部分,最后的u5e0i=q9e9t6是从刚刚m.js文件中提取那个6位数字而来

&verifycode=xvtu&qzone_flag=0&country=1&province=44&city=3&isnongli=0&year=1992&month=2&day=2&isrunyue=0&password=5ec9b65a6d2ada2c6285e4d52e864cbc971a9033f24cb1c70d54ddf87d1c62b72cca70a8fc6dd9597e6b1cee85ce6131b61a2ffdf0fe3d0e15dee5ef2b4de9b9ecd7109852e25e825df7c11dc894bf7a524a433dbd2d84e282ce1171805f881399e45971d01a9462cb882ac3c8a00c96a8270cd583ef1d94782537212870ebc2&nick=abc&email=false&other_email=false&elevel=1&sex=1&qzdate=&jumpfrom=58030&csloginstatus=3&u5e0i=q9e9t6



=====================以下为5月份的时候版本,部分做参考================================================================

提交成功的话会返回数据:

{"ec":0,"safeverifyResult":"0","type":"0","uin":"1027867***"}    其中uin就是已经申请到的qq号码


下面4个语句的黄色部分是index.html写定了的参数,无需探测具体内容;
//根据发回的cookie 获取js文件参数
get
http://4.url.cn/zc/chs/js/10062/simple.js?zc_identifier=000D117646CC9B0FD063BA642840C598B379802E4E7F4167FA55AA45

//核心密码RSA加密文件
get
http://4.url.cn/zc/chs/js/10062/rsa.js?zc_identifier=000D117646CC9B0FD063BA642840C50104EA07EC7B8B67DA216763A457

get
http://4.url.cn/zc/chs/js/10062/autocomplete.js?zc_identifier=000D117646CC9B0FD063BA642840C517252B611A1F02068CA96249D8

//RSA加密公钥存放文件,可以提取出来
get
http://4.url.cn/zc/chs/js/10062/index.js?zc_identifier=000D117646CC9B0FD063BA642840C5375440293CAF93AD594106EDEA&v=1

get
http://zc.qq.com/cgi-bin/common/attr?id=252190&r=0.9575077380855023
返回:{"ec":0,"id":"252190"}
请求cookie:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60


//这个地方添加了本机machinecookie和sessioncookie,同时返回默认初始化(默认当天你电脑所在公网IP位置)的国家、省份、城市以及具体日期
get
http://zc.qq.com/cgi-bin/chs/numreg/init?r=0.3737081105649256&cookieCode=undefined
发送之前的请求cookie
然后:
Set-cookie:
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549; Domain=zc.qq.com; Expires=Mon, 27 Apr 2015 23:35:34 GMT; Path=/
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c; Domain=zc.qq.com; Path=/
返回内容:{"city":"成都","cityid":"1","country":"中国","countryid":"1","ec":0,"elevel":"1","localdate":"2014-5-3","province":"四川","provinceid":"51"}

get
http://zc.qq.com/cgi-bin/common/attr?id=173276&r=0.024621259358883873
返回数据:{"ec":0,"id":"173276"}
请求cookie:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60

//返回一个加密部分,估计可能是时间的某个运算检测
get
http://a.zc.qq.com/s.js?t=0.8752765266487873
请求cookie:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60
返回s.js内容如下:
---------------------------------------开始----------------------------------------------
var zcSec = {
    u : "http://a.zc.qq.com/Cgi-bin/SecCheck",
    uJ :

"k1tD4IKOfAWRG3NfovNt8wYBluVhAXniMWmHdwV6vrO1jZUNKf",
r : "",
wJUaYp : function(){
var NsIUn =

[31,49,39,34,45,40,47,4,40,44];
var mQGbB = [29,35,22,46,36,41,32,25,45,9];
var hsmpo =

[26,46,37,23,1,12,5,22,47,48];
var ls = zcSec.uJ;
zcSec.r = "";
zcSec.r += ls.charAt(mQGbB[8]) + ls.charAt

(mQGbB[1]) + ls.charAt(hsmpo[3]) + ls.charAt(mQGbB[7]) + ls.charAt(hsmpo[5]) + ls.charAt(NsIUn[7]) +

ls.charAt(mQGbB[9]) + ls.charAt(hsmpo[4]) + ls.charAt(hsmpo[7]) + ls.charAt(NsIUn[1]);
return zcSec.r;
},
check: function(){
zcSec.r = zcSec.wJUaYp();
var url = zcSec.u;
url += "?";
url += zcSec.r;
url += "&";
url +=

Math.random();
var s = document.createElement("img");
s.src = url;
}
};

setTimeout("zcSec.check()",2000);

---------------------------------------结束----------------------------------------------


//请求验证码 收到大小130*53的图片验证码 并且根据验证码设置verifysession值
get
http://captcha.qq.com/getimage?aid=1007901&r=0.13156665311989368
Accept=image/png,image/*;q=0.8,*/*;q=0.5
Set-cookie:
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

//验证数据1
get
http://zc.qq.com/cgi-bin/common/attr?id=58030&timeused=0&seed=0.9812409070302965
返回数据:{"ec":0,"id":"58030"}
需要请求头:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c

//验证数据2
get
http://zc.qq.com/cgi-bin/common/attr?id=260714&r=0.9855785254676719
返回数据:{"ec":0,"id":"260714"}
需要请求头:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed


//验证数据3
get
http://zc.qq.com/cgi-bin/common/attr?id=278037&r=0.02731298273089411
返回数据:{"ec":0,"id":"278037"}
需要请求头:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

//验证数据4
get
http://zc.qq.com/cgi-bin/common/attr?id=173279&r=0.1452141520125867
需要请求头:{"ec":0,"id":"173279"}
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

//验证数据上一个id=17329数据
get
http://a.zc.qq.com/Cgi-bin/SecCheck?ZHBuG4A1Yf&0.546217107370904
需要请求头:{"ec":0,"id":"173279"}
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

//进行加密 其中在post提交数据的最后的****=****是从m.js中红色的A('r6e0', 'g6p7');的得出来的
get
http://zc.qq.com/chs/m.js?v=0.9970047133475792
需要请求头:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

返回js加密部分
--------------------------------------------------------------------------------------------------
var core_md5 = function(e, h) {
    function g(b, a, c, d, e, f, g) {
        return safe_add(bit_rol(safe_add(safe_add(b, a & c | ~a & d), safe_add(e, g)), f), a)
    }
    e = e || "";
    h = h || 0;
    e[h >> 5] |= 128 << h % 32;
    e[(h + 64 >>> 9 << 4) + 14] = h;
    var b = 1732584193,
    a = -271733879,
    c = -1732584194,
    d = 271733878;
    A('r6e0', 'g6p7');
    for (var f = 0; f < e.length; f += 16) b = g(b, a, c, d, e[f + 0], 7, -680876936),
    d = g(d, b, a, c, e[f + 1], 12, -389564586),
    c = g(c, d, b, a, e[f + 2], 17, 606105819),
    a = g(a, c, d, b, e[f + 3], 22, -1044525330),
    b = g(b, a, c, d, e[f + 4], 7, -176418897),
    d = g(d, b, a, c, e[f + 5], 12, 1200080426),
    c = g(c, d, b, a, e[f + 6], 17, -1473231341),
    a = g(a, c, d, b, e[f + 7], 22, -45705983),
    b = g(b, a, c, d, e[f + 8], 7, 1770035416),
    d = g(d, b, a, c, e[f + 9], 12, -1958414417),
    c = g(c, d, b, a, e[f + 10], 17, -42063),
    a = g(a, c, d, b, e[f + 11], 22, -1990404162),
    b = g(b, a, c, d, e[f + 12], 7, 1804603682),
    d = g(d, b, a, c, e[f + 13], 12, -40341101),
    c = g(c, d, b, a, e[f + 14], 17, -1502002290),
    a = g(a, c, d, b, e[f + 15], 22, 1236535329),
    b = md5_gg(b, a, c, d, e[f + 1], 5, -165796510),
    d = md5_gg(d, b, a, c, e[f + 6], 9, -1069501632),
    c = md5_gg(c, d, b, a, e[f + 11], 14, 643717713),
    a = md5_gg(a, c, d, b, e[f + 0], 20, -373897302),
    b = md5_gg(b, a, c, d, e[f + 5], 5, -701558691),
    d = md5_gg(d, b, a, c, e[f + 10], 9, 38016083),
    c = md5_gg(c, d, b, a, e[f + 15], 14, -660478335),
    a = md5_gg(a, c, d, b, e[f + 4], 20, -405537848),
    b = md5_gg(b, a, c, d, e[f + 9], 5, 568446438),
    d = md5_gg(d, b, a, c, e[f + 14], 9, -1019803690),
    c = md5_gg(c, d, b, a, e[f + 3], 14, -187363961),
    a = md5_gg(a, c, d, b, e[f + 8], 20, 1163531501),
    b = md5_gg(b, a, c, d, e[f + 13], 5, -1444681467),
    d = md5_gg(d, b, a, c, e[f + 2], 9, -51403784),
    c = md5_gg(c, d, b, a, e[f + 7], 14, 1735328473),
    a = md5_gg(a, c, d, b, e[f + 12], 20, -1926607734)
} ();
--------------------------------------------------------------------------------------------------
初始化表单完成,开始进行填表
//把所有本地的cookie全部发送 时间进行延迟x秒 具体参见时间戳  以下monikey全部get方式

//开始输入昵称 URL编码UTF-8 其中regType=1是值使用默认注册qq号码方式 第二和第三是邮箱和手机注册
http://zc.qq.com/cgi-bin/chs/common/dirty_check?nick=%E5%BC%A0%E4%B8%89%E4%B8%B0&regType=1&r=0.9601001143472845
返回数据:{"ec":0}
get
http://a.zc.qq.com/Cgi-bin/MoniKey?17|1|1399073745678&0|1|1399073746232&9|1|1399073748762

//此处产生了MoniKey,该部分组成是密码的序号后面是13位时间戳 依次变大 多一位字符多一个时间戳(反正比前面的时间大就可以)

//密码
http://a.zc.qq.com/Cgi-bin/MoniKey?56|5|1399073749464&56|5|1399073751266&56|5|1399073752068&56|5|
1399073752458&56|5|1399073753148&56|5|1399073753335&56|5|1399073753524&56|5|1399073753823&56|5|
1399073754015&56|5|1399073754589&56|5|1399073754766&56|5|1399073754964&56|5|1399073755258&56|5|
1399073755790&56|5|1399073758704&56|5|1399073758899&56|5|1399073759161&56|5|1399073759382&56|5|
1399073759537&56|5|1399073759771&56|5|1399073759994&56|5|1399073760208&56|5|1399073760847

//确认密码
http://a.zc.qq.com/Cgi-bin/MoniKey?56|6|1399073762194&56|6|1399073763088&56|6|1399073763391&56|6|
1399073764001&56|6|1399073764188&56|6|1399073764391&56|6|1399073764574&56|6|1399073764738&56|6|
1399073764944&56|6|1399073765141&56|6|1399073765347&56|6|1399073765751

//性别
http://a.zc.qq.com/Cgi-bin/MoniKey?0|7|1398922930726  //男
http://a.zc.qq.com/Cgi-bin/MoniKey?0|8|1398923095149  //女

//公历、农历
http://a.zc.qq.com/Cgi-bin/MoniKey?0|9|1398923068005
http://a.zc.qq.com/Cgi-bin/MoniKey?0|9|1398923068966

//生日 年
http://a.zc.qq.com/Cgi-bin/MoniKey?0|10|1398922964560
http://a.zc.qq.com/Cgi-bin/MoniKey?0|10|1398922968117

//生日 月
http://a.zc.qq.com/Cgi-bin/MoniKey?0|11|1398922969872
http://a.zc.qq.com/Cgi-bin/MoniKey?0|11|1398922972050

//生日 日
http://a.zc.qq.com/Cgi-bin/MoniKey?0|12|1398923041416
http://a.zc.qq.com/Cgi-bin/MoniKey?0|12|1398923044134


//所在地 国家
http://a.zc.qq.com/Cgi-bin/MoniKey?0|13|1398923159391
http://a.zc.qq.com/Cgi-bin/MoniKey?0|13|1398923160077

//所在地 省份
http://a.zc.qq.com/Cgi-bin/MoniKey?0|14|1398923218015
http://a.zc.qq.com/Cgi-bin/MoniKey?0|14|1398923218932

//所在地 城市
http://a.zc.qq.com/Cgi-bin/MoniKey?0|15|1398923249208
http://a.zc.qq.com/Cgi-bin/MoniKey?0|15|1398923250333

//验证码
http://a.zc.qq.com/Cgi-bin/MoniKey?0|16|1398923311836
http://a.zc.qq.com/Cgi-bin/MoniKey?0|16|1398923322889

//验证码完成
http://a.zc.qq.com/Cgi-bin/MoniKey?90|16|1398923353687&90|16|1398923353945&65|16|1398923354206&65|16|1398923354379

//分析数据
get
http://zc.qq.com/cgi-bin/common/attr?id=256401&r=0.5560640859362248
返回:{"ec":0,"id":"256401"}
请求cookie:
zc_uid=1399073734_488305634;
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4;
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3;
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D;
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60;
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549;
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c;
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed

//开始进行post提交给服务端 返回结果uin为qq号码
post
http://zc.qq.com/cgi-bin/chs/numreg/get_acc?r=0.42815205127346184
返回数据:{"ec":0,"safeverifyResult":"0","type":"0","uin":"88888888"}
提交数据:
&verifycode=[验证码]&qzone_flag=0&country=[国家代码 1为中国]&province=[省份代码]&city=[城市代码]&isnongli=[是否是农历 0不是 1是]&year=[年份 4位数]&month=[月份]&day=[日期]&isrunyue=[判断2月是否为29天 一般很少 默认0]&
password=[256位RSA加密密码]&nick=[采用URL进行的默认UTF-8编码]&email=false&other_email=false&elevel=1&sex=1&qzdate=&jumpfrom=58030[来历方式:其他]&csloginstatus=[QQ客户端是否在线 1在线 0不在线]
&r6e0=g6p7

全部省份代码:11,12,13,14,15,21,22,23,31,32,33,34,35,36,37,41,42,43,44,45,46,50,51,52,53,54,61,62,63,64,65,71,81

发送cookie:
machineCookie=cafca62e324cc279afe93ddc171516eaca9e0807ed751549
sessionCookie=83ce0707b3d1b71834f9ad6d91fda1d11036ee5b7cb79d0c
uoc=3-0-9-0-9-0-0-21 //昵称长度-0-密码长度-0-密码长度-0-0-前面数值总长度和
verifysession=h0134300ab0204586e6ac8b0801affdbad4f99b821bdb0297daf2017177402eebdccfa29cbc5270f8ed
zc_chs_identifier=000CFE5DE7C0DC366C7ED456C5E1F25F2E43D823A93179B4DCA4B3
zc_cht_identifier=000CFE5DE7C0DC366C7ED456C5E1DAC3FE5B27209D7E5ABBA6C08D
zc_en_identifier=000CFE5DE7C0DC366C7ED456C5E117781A212ECCDB16D4F314DBB4
zc_phone_identifier=000CFE5DE7C0DC366C7ED456C5E1936FD38E5517CF8D8BC8355D60
zc_uid=1399073734_488305634

接受cookie:
_new_uin=新的QQ号码(已经写入cookie)
clientkey=9036dbe956f6c54dd1ef2e987931714e16af598af04cb30d
sessionCookie=
wdl=23bf7772a32bd37f39c99fe2d9ee2affcddd7493a934f2ed
------------- 流程结束-------------------------
返回JSON代码,可以用Switch进行判断:
case 0: 注册成功;
case 1: EMAIL注册成功;
case 2: 验证码错误;
case 4:case 5:case 6: 生日或省份错误;
case 8:case 9: EMAIL错误;
case 13:case 15:昵称错误;
case 20: 需要手机短信验证;原因:可能是COOKIE错误
case 21: 恶意注册,暂时禁止;原因:注册的账号过多,或RSA算法错误
case 26: 需要手机激活;原因:相同IP注册过多或提交的COOKIE已经过期,或SESSION超时
case 30: 浏览器不兼容;


  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 1
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值