Java中伪造referer来获取数据

2019独角兽企业重金招聘Python工程师标准>>>

伪造方法，参考代码：

public class HelloA {
	private String large = new String(new char[100000]);   
	  
	public String getSubString() {   
		return this.large.substring(0,2);   
	}   
	@Test
	public void test(){
		InputStream in = responseInputStream();
		try {
			if(in != null){
				FileOutputStream out = new FileOutputStream("C:\\Users\\User\\Desktop\\test.zip");
				writeInTxt(in,out);
			}
		} catch (FileNotFoundException e) {
			e.printStackTrace();
		}		
	}
	
	public void writeInTxt(InputStream in, FileOutputStream out) {
		//char[] bytes = new char[1024];
		byte[] bytes = new byte[1024];
		int len = 0;
		try {
			//InputStreamReader isr = new InputStreamReader(in,"UTF-8");
			//OutputStreamWriter osw = new OutputStreamWriter(out,"UTF-8");
			while((len = in.read(bytes)) !=-1){
				out.write(bytes, 0, len);
			}
		} catch (IOException e) {
			e.printStackTrace();
		}
	}
	public InputStream responseInputStream(){
		InputStream in = null;
		/*String cookie="BAIDUID=4AB62207ED7EE9F7D5639F99FD2C93FB:FG=1; PSTM=1460857252; "+
				"BIDUPSID=187A5BC1E5DD0DEF05E21F73A29835EF; _5t_trace_sid=1ea40703c286c635041c90d9a5f70580; "+
				"_5t_trace_tms=1; H_PS_645EC=5b3dg%2Bo1fZjiciiEjCjOit34qHNoqmVzbHSdPYr%2FQo9iGTj%2BpjOjY0%2FE7%2Bo; "+
				"BD_CK_SAM=1; BD_HOME=0; H_PS_PSSID=19638_19289_1439_19713_19806_19559_19808_19843_19902_17001_15557_11849; BD_UPN=12314353";
		*/
		try {
			
			HttpURLConnection   conn = (HttpURLConnection) new URL("http://www.baidu.com/").openConnection();
			conn.setRequestProperty("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36)");
			conn.setRequestProperty("Accept-Encoding", "gzip, deflate, sdch");
			conn.setRequestProperty("referer", "http://www.baidu.com/");
			//conn.setRequestProperty("Cookie", cookie);
			conn.setRequestProperty("Accept-Language", "zh-CN,zh;q=0.8");
			conn.setRequestProperty("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8");
			conn.setRequestMethod("GET");
			conn.setDoInput(true);
			
			int respcode=conn.getResponseCode();
			if(respcode == 200)
				in = conn.getInputStream();
			
		} catch (MalformedURLException e) {
			e.printStackTrace();
		} catch (IOException e) {
			e.printStackTrace();
		}
		return in;
	}
}

    通过上述代码就可以实现与HttpClient工具相似的功能，伪造referer来发送请求，获取响应，这里要注意的是返回的数据是zip格式的。或者直接写C:\\Users\\User\\Desktop\\test，test后面不带zip等任何后缀，最后也能得到自己想要的响应的数据。

    因此，分步走的页面，比如员工注册，分为三步走，第一步：校验识别号和用户名，校验完成以后调到第二个页面，校验手机号，手机号校验完成后，跳到第三个页面输入会员名的页面完成注册。为防止模拟器模拟参数请求，直接进到第二个页面，那么可以在后台处理方法里面使用map来存储，用户名作为key，1或2作为value，再写一个拦截第二个和第三个页面的过滤器。在doFilter方法里面，根据这个map的value值来判断是不是第一个页面转过来的。

转载于:https://my.oschina.net/wliming/blog/673401