人人网登陆

一、2.17登陆爬虫1人人网

分析使用手机端

有两个ajax请求一个get,一个post
rkey和passward
密码是js加密

js解析

过程
	1.通过initlator列看谁触发了这个请求
	2.搜索关键字
	3.Eventlistener,通过元素绑定的时间监听找到js文件
定位js文件
找到关键js代码
模拟重现
	js2py:/pyv8
	创建js执行环境
	加载js文件使用requests模块js=requests.get().content.decode()
	context.execute(js)

# encoding:utf-8
"""
需求：使用python模拟登陆人人网
这里是通过手机端抓包分析
1.创建一个login类
2.使用session保存cookies
3.创建headers
4.使用get请求获取rkey
5.模拟js文件对密码进行加密
6.封装post的data
7.发送post请求
8.验证登陆情况
"""
import requests
import js2py
import json
# 1.创建一个login类
class Login(object):
    def __init__(self,usename,password):
# 2.使用session
        self.session = requests.session()
# 3.创建headers
        self.headers = {
            "User-Agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4040.5 Mobile Safari/537.36",
            "Referer": "http://activity.renren.com/livecell/log?c1=-100&c2=&c3=&c4=&from_uid=&isFull=&QRCodeRecharge=",
            "Cookie": "anonymid=k6oosjesp8yg78; depovince=GW; _r01_=1; ick_login=0fa8c0b3-2af0-4aab-a64d-442d9a0c444b; taihe_bi_sdk_uid=1b955e0c05f02a12f72b0b6ba1ba7b9a; taihe_bi_sdk_session=2d4fc17e745e910859ed75b8a088a926; first_login_flag=1; ln_uact=15274981840; ln_hurl=http://head.xiaonei.com/photos/0/0/women_main.gif; jebe_key=d97606ea-4077-4fe5-9c14-8e7fdf983d40%7C73a8c8b55e9d2fc6ee645755e392d637%7C1581858934155%7C1%7C1581858934120; loginfrom=syshome; ick=8b729f9d-b548-4a31-94d6-89bf940e85fe; __utma=151146938.314196357.1581860047.1581860047.1581860047.1; __utmc=151146938; __utmz=151146938.1581860047.1.1.utmcsr=renren.com|utmccn=(referral)|utmcmd=referral|utmcct=/; __utmb=151146938.1.10.1581860047; _de=274873309A1DE248A26C34AD3C012A9F; jebecookies=441797e1-4dd5-423c-a16c-3417ab097422|||||; _ga=GA1.2.314196357.1581860047; _gid=GA1.2.939470823.1581861296; Hm_lvt_07f79d4628d137beb4c64984faf7a207=1581861296; Hm_lpvt_07f79d4628d137beb4c64984faf7a207=1581861296; _c1=-100; JSESSIONID=DB0C217FC2DEAB699CAC14778B4A80F7"
        }
# 3.1保存headers
        self.session.headers = self.headers
        self.usename = usename
        self.password = password
# 4.使用get请求获取rkey
    def get_key(self):
        self.respone = self.session.get("http://activity.renren.com/livecell/rKey")
        # print(respone.content.decode())# request返回的数据一定要加content
# 5.模拟js文件对密码进行加密
    def encrypt(self):
        self.content = js2py.EvalJs()

        # 获取js文件
        self.content.n = json.loads(self.respone.content)['data'] #   转成字典
        self.content.t ={"password":self.password}
        js = '''t.password = t.password.split("").reverse().join(""),
                                            setMaxDigits(130);
                                            var o = new RSAKeyPair(n.e,"",n.n)
                                              , r = encryptedString(o, t.password);'''
        # 加载四个js文件，其中前三个使用字符串拼接
        for i in ['Barrett.js','BigInt.js','RSA.js', js]:
            if i == js:
                result = js
            else:
                result = self.session.get("http://s.xnimg.cn/a85738/wap/mobile/wechatLive/js/" + i).content.decode()
            self.content.execute(result)

# 6.封装post的data
    def post(self):
        self.data={
             "phoneNum": self.usename,
             "password": self.content.r,
            "c1": "-100",
            "rKey":self.content.n.rkey,
        }
# 7.发送post请求
        response = self.session.post("http://activity.renren.com/livecell/ajax/clog",data=self.data)
        print(response.content.decode())
        
# 运行函数
    def run(self):
        self.get_key()
        self.encrypt()
        self.post()
# 8.验证登陆情况
if __name__ == '__main__':
    username = input('请输入你的账号')
    password = input('请输入你的密码')
    login = Login(username, password)
    login.run()