2-js混淆-动态cookie1分析
1、 已知为 cookie 加密
2、 打开控制台会进入循环 debugger, 在行号处右键点击(控制台为中文) ‘添加条件断点’,在弹出的输入框中填入 ‘false’,刷新页面即可
(function anonymous(
) {
debugger
})
3、 点击第二页查看请求接口
# 接口地址
https://match.yuanrenxue.cn/api/match/2?page=2
# 加密参数
cookie: m=e59be532ed9eab1326f7acf78d2bef2d|1682500346000;
# 响应值
{"status": "1", "state": "success", "data": [{"value": 5993}, {"value": 9462}, {"value": 4820}, {"value": 7555}, {"value": 1805}, {"value": 445}, {"value": 3457}, {"value": 6417}, {"value": 6855}, {"value": 6841}]}
分析后发现 m 为加密参数,且 m 已在请求前生成,通过查找资料,可以使用 hook 的方式来断点住 cookie 的生成位置
参考链接:
https://blog.csdn.net/EXIxiaozhou/article/details/128794705
4、 通过 fiddler hook cookie 参数,使用编程猫插件
插件下载链接: https://pan.baidu.com/s/1SP8xHoDpugssFRpu-nLxPw?pwd=zhou
在这里尝试了好几次才成功断点住
// hook 代码
(function () {
'use strict';
var cookieTemp = '';
Object.defineProperty(document, 'cookie', {
set: function (val) {
if (val.indexOf('m') != -1) {
debugger;
}
console.log('Hook捕获到cookie设置->', val);
cookieTemp = val;
return val;
},
get: function () {
return cookieTemp;
},
});
})();
5、 清除浏览器 cookie 值,刷新页面,成功断点,查看调用堆栈找 m 生成位置,考虑如下方法为生成位置
document['\x63\x6f\x6f' + $dbsm_0x21cd('\x30\x78\x33\x66\x61', '\x5e\x5d\x29\x35')] = _0x57a600[$dbsm_0x21cd('\x30\x78\x34\x31\x30', '\x62\x61\x39\x32') + '\x41\x4a'](_0x57a600[$dbsm_0x21cd('\x30\x78\x34\x39\x37', '\x5e\x5d\x29\x35') + '\x49\x43'](_0x57a600[$dbsm_0x21cd('\x30\x78\x61\x63', '\x63\x4b\x66\x26') + '\x41\x6d'](_0x57a600['\x56\x6e\x44' + '\x50\x58'](_0x57a600['\x69\x6f\x73' + '\x6a\x62'](_0x57a600[$dbsm_0x21cd('\x30\x78\x32\x63\x62', '\x68\x21\x5a\x38') + '\x6a\x62']('\x6d', _0x57a600['\x69\x5a\x78' + '\x4b\x4d'](_0x471527)), '\x3d'), _0x57a600[$dbsm_0x21cd('\x30\x78\x33\x36\x64', '\x52\x40\x75\x53') + '\x4d\x68'](_0x15f0f5, _0x216603)), '\x7c'), _0x216603), _0x57a600['\x45\x76\x7a' + '\x73\x50']);
location[$dbsm_0x21cd('\x30\x78\x33\x30\x34', '\x52\x40\x75\x53') + $dbsm_0x21cd('\x30\x78\x64\x66', '\x4c\x5b\x55\x25')]();
6、 将该 js 文件整段复制下载,尝试进行补环境发现无法继续下去,考虑代码是否进行了混淆
7、 使用猿人学爬虫工具解 ob 混淆,tool.yuanrenxue.com
8、 第一次解混淆采用的模式1,解出来的代码 1800多行,补环境总是失败,遂放弃
9、第二次解混淆采用模式2,解混淆出来的代码200多行,且较为清晰
// 采用模式2解混淆的代码,只剩2百多行,可以进行补环境操作,在具体补环境中,断点执行发现有多个隐藏的坑文件
setInterval(function () {
$dbsm_0xe58538();
}, 4000);
(function $dbsm_0x4a18b1(_0x376f58) {
var _0x2b074a = function () {
var _0x213e98 = true;
return function (_0x199231, _0x345703) {
var _0x7b142 = _0x213e98 ? function () {
if (_0x345703) {
var _0x4960e7 = _0x345703["apply"](_0x199231, arguments);
_0x345703 = null;
return _0x4960e7;
}
} : function () {};
_0x213e98 = false;
return _0x7b142;
};
}();
var _0x1d43fa = function () {
var _0x56c7df = true;
return function (_0x34a7bb, _0x348972) {
var _0xc8d9c3 = _0x56c7df ? function () {
if (_0x348972) {
var _0x2a1b54 = _0x348972["apply"](_0x34a7bb, arguments);
_0x348972 = null;
return _0x2a1b54;
}
} : function () {};
_0x56c7df = false;
return _0xc8d9c3;
};
}();
function _0x110a43(_0x1d0465, _0xa52ede) {
var _0xc9c1e5 = (65535 & _0x1d0465) + (65535 & _0xa52ede);
return (_0x1d0465 >> 16) + (_0xa52ede >> 16) + (_0xc9c1e5 >> 16) << 16 | 65535 & _0xc9c1e5;
}
function _0x144c2e(_0x45c7a7, _0x347c6f) {
return _0x45c7a7 << _0x347c6f | _0x45c7a7 >>> 32 - _0x347c6f;
}
function _0x211953(_0x4efad7, _0x3f11b9, _0x2745ff, _0x370c5d, _0x33a6a8, _0xe08df0) {
return _0x110a43(_0x144c2e(_0x110a43(_0x110a43(_0x3f11b9, _0x4efad7), _0x110a43(_0x370c5d, _0xe08df0)), _0x33a6a8), _0x2745ff);
}
function _0x4199be(_0x2b41d8, _0x535d61, _0x5d1d92, _0x721fe5, _0x52c5ec, _0x2da3f2, _0x48270e) {
return _0x211953(_0x535d61 & _0x5d1d92 | ~_0x535d61 & _0x721fe5, _0x2b41d8, _0x535d61, _0x52c5ec, _0x2da3f2, _0x48270e);
}
function _0x4e097c(_0x391d8e, _0x11dd84, _0x59cd03, _0x2c8d13, _0x50258a, _0x281687, _0x59d96a) {
return _0x211953(_0x11dd84 & _0x2c8d13 | _0x59cd03 & ~_0x2c8d13, _0x391d8e, _0x11dd84, _0x50258a, _0x281687, _0x59d96a);
}
function _0x50fb23(_0x51c8d5, _0x2531d2) {
let _0x20bf7e = [99, 111, 110, 115, 111, 108, 101];
let _0x140536 = "";
for (let _0x55d545 = 0; _0x55d545 < _0x20bf7e["length"]; _0x55d545++) {
_0x140536 += String["fromCharCode"](_0x20bf7e[_0x55d545]);
}
return _0x140536;
}
function _0x549e33(_0x3ec38e, _0x255370, _0x31ede9, _0x36fd04, _0x18907a, _0x157832, _0x42d029) {
return _0x211953(_0x255370 ^ _0x31ede9 ^ _0x36fd04, _0x3ec38e, _0x255370, _0x18907a, _0x157832, _0x42d029);
}
function _0x43b4bb(_0x5f40e0, _0x256047, _0x159cae, _0x1986af, _0x22e739, _0x18c1ae, _0x118b92) {
return _0x211953(_0x159cae ^ (_0x256047 | ~_0x1986af), _0x5f40e0, _0x256047, _0x22e739, _0x18c1ae, _0x118b92);
}
function _0x3dd18d(_0x36a3a0, _0x3f650c) {
if (_0x3f650c) {
return _0x43b4bb(_0x36a3a0);
}
return _0x50fb23(_0x36a3a0);
}
function _0x1fb165(_0x135b2c, _0xd39cdb) {
let _0x297cbe = "";
for (let _0x2f5c3a = 0; _0x2f5c3a < _0x135b2c["length"]; _0x2f5c3a++) {
_0x297cbe += String["fromCharCode"](_0x135b2c[_0x2f5c3a]);
}
return _0x297cbe;
}
function _0x2ca5e8(_0x3d97dc, _0x5190c1) {
var _0x2efe58 = _0x2b074a(this, function () {
var _0x2ca619 = function () {
var _0x100ca3 = _0x2ca619["constructor"]("return /\" + this + \"/")()["compile"]("^([^ ]+( +[^ ]+)+)+[^ ]}");
return !_0x100ca3["test"](_0x2efe58);
};
return _0x2ca619();
});
_0x2efe58();
(function () {
_0x1d43fa(this, function () {
var _0x4ae621 = new RegExp("function *\\( *\\)");
var _0x1c1ce7 = new RegExp("\\+\\+ *(?:[a-zA-Z_$][0-9a-zA-Z_$]*)", "i");
var _0x33ce88 = $dbsm_0xe58538("init");
if (!_0x4ae621["test"](_0x33ce88 + "chain") || !_0x1c1ce7["test"](_0x33ce88 + "input")) {
_0x33ce88("0");
} else {
$dbsm_0xe58538();
}
})();
})();
_0x3dd18d();
qz = [10, 99, 111, 110, 115, 111, 108, 101, 32, 61, 32, 110, 101, 119, 32, 79, 98, 106, 101, 99, 116, 40, 41, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 32, 61, 32, 102, 117, 110, 99, 116, 105, 111, 110, 32, 40, 115, 41, 32, 123, 10, 32, 32, 32, 32, 119, 104, 105, 108, 101, 32, 40, 49, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 102, 111, 114, 40, 105, 61, 48, 59, 105, 60, 49, 49, 48, 48, 48, 48, 48, 59, 105, 43, 43, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 104, 105, 115, 116, 111, 114, 121, 46, 112, 117, 115, 104, 83, 116, 97, 116, 101, 40, 48, 44, 48, 44, 105, 41, 10, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 125, 10, 32, 32, 32, 32, 125, 10, 10, 125, 10, 99, 111, 110, 115, 111, 108, 101, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 91, 111, 98, 106, 101, 99, 116, 32, 79, 98, 106, 101, 99, 116, 93, 39, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 402, 32, 116, 111, 83, 116, 114, 105, 110, 103, 40, 41, 32, 123, 32, 91, 110, 97, 116, 105, 118, 101, 32, 99, 111, 100, 101, 93, 32, 125, 39, 10];
eval(_0x1fb165(qz));
try {
if (global) {
console["log"]("人生苦短,何必python?");
} else {
while (1) {
console["log"]("人生苦短,何必python?");
debugger;
}
}
} catch (_0x1a68b3) {
return navigator["vendorSub"];
}
}
setInterval(_0x2ca5e8(), 500);
function _0x2d331e(_0x3f78b8, _0x235d5f) {
_0x3f78b8[_0x235d5f >> 5] |= 128 << _0x235d5f % 32, _0x3f78b8[14 + (_0x235d5f + 64 >>> 9 << 4)] = _0x235d5f;
if (qz) {
var _0x1a1d39,
_0xdf1a1b,
_0x56dedf,
_0x8cf06d,
_0x2793dd,
_0x39af4c = 1732584193,
_0x2a7608 = -271733879,
_0x2719f3 = -1732584194,
_0x23e4a1 = 271733878;
} else {
var _0x1a1d39,
_0xdf1a1b,
_0x56dedf,
_0x8cf06d,
_0x2793dd,
_0x39af4c = 0,
_0x2a7608 = -0,
_0x2719f3 = -0,
_0x23e4a1 = 0;
}
for (_0x1a1d39 = 0; _0x1a1d39 < _0x3f78b8["length"]; _0x1a1d39 += 16) _0xdf1a1b = _0x39af4c, _0x56dedf = _0x2a7608, _0x8cf06d = _0x2719f3, _0x2793dd = _0x23e4a1, _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39], 7, -680876936), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 1], 12, -389564586), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 2], 17, 606105819), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 3], 22, -1044525330), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 4], 7, -176418897), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 5], 12, 1200080426), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 6], 17, -1473231341), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 7], 22, -45705983), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 8], 7, 1770010416), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 9], 12, -1958414417), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 10], 17, -42063), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 11], 22, -1990404162), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 12], 7, 1804603682), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 13], 12, -40341101), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 14], 17, -1502882290), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 15], 22, 1236535329), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 1], 5, -165796510), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 6], 9, -1069501632), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 11], 14, 643717713), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39], 20, -373897302), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 5], 5, -701558691), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 10], 9, 38016083), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 15], 14, -660478335), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 4], 20, -405537848), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 9], 5, 568446438), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 14], 9, -1019803690), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 3], 14, -187363961), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 8], 20, 1163531501), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 13], 5, -1444681467), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 2], 9, -51403784), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 7], 14, 1735328473), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 12], 20, -1926607734), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 5], 4, -378558), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 8], 11, -2022574463), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 11], 16, 1839030562), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 14], 23, -35309556), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 1], 4, -1530992060), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 4], 11, 1272893353), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 7], 16, -155497632), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 10], 23, -1094730640), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 13], 4, 681279174), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39], 11, -358537222), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 3], 16, -722521979), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 6], 23, 76029189), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 9], 4, -640364487), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 12], 11, -421815835), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 15], 16, 530742520), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 2], 23, -995338651), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39], 6, -198630844), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 7], 10, 1126891415), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 14], 15, -1416354905), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 5], 21, -57434055), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 12], 6, 1700485571), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 3], 10, -1894986606), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 10], 15, -1051523), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 1], 21, -2054922799), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 8], 6, 1873313359), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 15], 10, -30611744), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 6], 15, -1560198380), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 13], 21, 1309151649), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 4], 6, -145523070), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 11], 10, -1120210379), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 2], 15, 718787259), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 9], 21, -343485441), _0x39af4c = _0x110a43(_0x39af4c, _0xdf1a1b), _0x2a7608 = _0x110a43(_0x2a7608, _0x56dedf), _0x2719f3 = _0x110a43(_0x2719f3, _0x8cf06d), _0x23e4a1 = _0x110a43(_0x23e4a1, _0x2793dd);
return [_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1];
}
function _0x457e92(_0xac7cd4) {
var _0x16293c,
_0x5a3e1d = "",
_0x334daf = 32 * _0xac7cd4["length"];
for (_0x16293c = 0; _0x16293c < _0x334daf; _0x16293c += 8) _0x5a3e1d += String["fromCharCode"](_0xac7cd4[_0x16293c >> 5] >>> _0x16293c % 32 & 255);
return _0x5a3e1d;
}
function _0x49a992(_0x29965d) {
var _0x5e486a,
_0xd267e0 = [];
for (_0xd267e0[(_0x29965d["length"] >> 2) - 1] = undefined, _0x5e486a = 0; _0x5e486a < _0xd267e0["length"]; _0x5e486a += 1) _0xd267e0[_0x5e486a] = 0;
var _0x5c4026 = 8 * _0x29965d["length"];
for (_0x5e486a = 0; _0x5e486a < _0x5c4026; _0x5e486a += 8) _0xd267e0[_0x5e486a >> 5] |= (255 & _0x29965d["charCodeAt"](_0x5e486a / 8)) << _0x5e486a % 32;
return _0xd267e0;
}
function _0x39e4c3(_0x24e7e5) {
return _0x457e92(_0x2d331e(_0x49a992(_0x24e7e5), 8 * _0x24e7e5["length"]));
}
function _0xf0aaf2(_0x3ea0ff) {
var _0x4c78f4,
_0x753952,
_0x451f22 = "0123456789abcdef",
_0x30aefa = "";
for (_0x753952 = 0; _0x753952 < _0x3ea0ff["length"]; _0x753952 += 1) _0x4c78f4 = _0x3ea0ff["charCodeAt"](_0x753952), _0x30aefa += _0x451f22["charAt"](_0x4c78f4 >>> 4 & 15) + _0x451f22["charAt"](15 & _0x4c78f4);
return _0x30aefa;
}
function _0x5e8aba(_0x2ed1d7) {
return unescape(encodeURIComponent(_0x2ed1d7));
}
function _0x50a950(_0x144a09) {
return _0x39e4c3(_0x5e8aba(_0x144a09));
}
function _0x7af805(_0x2d0ddf) {
return _0xf0aaf2(_0x50a950(_0x2d0ddf));
}
function _0x232e02(_0x38080c, _0xba8ee8, _0x33aad0) {
_0x2ca5e8();
return _0xba8ee8 ? _0x33aad0 ? _0x50fb23(_0xba8ee8, _0x38080c) : y(_0xba8ee8, _0x38080c) : _0x33aad0 ? _0x50a950(_0x38080c) : _0x7af805(_0x38080c);
}
function _0x5c7f1e(_0x5a84af, _0x430742) {
document["cookie"] = "m" + _0x2ca5e8() + "=" + _0x232e02(_0x5a84af) + "|" + _0x5a84af + "; path=/";
location["reload"]();
}
function _0x3f05aa(_0x5aa6fd, _0x316d33) {
return Date["parse"](new Date());
}
_0x5c7f1e(_0x3f05aa());
})();
function $dbsm_0xe58538(_0x5bc11e) {
function _0x1bd11a(_0x31bec3) {
if (typeof _0x31bec3 === "string") {
return function (_0xc7e846) {}["constructor"]("while (true) {}")["apply"]("counter");
} else {
if (("" + _0x31bec3 / _0x31bec3)["length"] !== 1 || _0x31bec3 % 20 === 0) {
(function () {
return true;
})["constructor"]("debugger")["call"]("action");
} else {
(function () {
return false;
})["constructor"]("debugger")["apply"]("stateObject");
}
}
_0x1bd11a(++_0x31bec3);
}
try {
if (_0x5bc11e) {
return _0x1bd11a;
} else {
_0x1bd11a(0);
}
} catch (_0x338d7b) {}
}
10、找到核心代码进行补环境
// 这段可以确认为 m 的生成位置,现在只需要补环境即可
document["cookie"] = "m" + _0x2ca5e8() + "=" + _0x232e02(_0x5a84af) + "|" + _0x5a84af + "; path=/";
先创建一个简单的方法
function get_m() {
var m = ''
m = "m" + _0x2ca5e8() + "=" + _0x232e02(_0x5a84af) + "|" + _0x5a84af + "; path=/";
console.log(m)
}
get_m()
执行代码看报错信息中所缺的环境,并逐条补上,如有问题,就断点执行看卡在了哪里,对具体的代码位置进行分析
/* 碰见的问题
* 如:
* 一、
* setInterval(function () {
$dbsm_0xe58538();
}, 4000);
* setInterval 方法是一个定时器,会影响执行,将该段执行注释掉即可
*
* 二、有部分代码在执行过程中会卡住,断点后分析后该段代码无意义,注释掉即可
*
* 三、有代码将 console.log 方法进行了无意义的重写,导致打印报错,进行删除即可
*
* */
11、最终补完环境的 js 代码
function _0x2ca5e8(_0x3d97dc, _0x5190c1) {
// var _0x2efe58 = _0x2b074a(this, function () {
// var _0x2ca619 = function () {
// var _0x100ca3 = _0x2ca619["constructor"]("return /\" + this + \"/")()["compile"]("^([^ ]+( +[^ ]+)+)+[^ ]}");
//
// return !_0x100ca3["test"](_0x2efe58);
// };
//
// return _0x2ca619();
// });
//
// _0x2efe58();
(function () {
_0x1d43fa(this, function () {
var _0x4ae621 = new RegExp("function *\\( *\\)");
var _0x1c1ce7 = new RegExp("\\+\\+ *(?:[a-zA-Z_$][0-9a-zA-Z_$]*)", "i");
// var _0x33ce88 = $dbsm_0xe58538("init");
//
// if (!_0x4ae621["test"](_0x33ce88 + "chain") || !_0x1c1ce7["test"](_0x33ce88 + "input")) {
// _0x33ce88("0");
// } else {
// $dbsm_0xe58538();
// }
})();
})();
_0x3dd18d();
qz = [10, 99, 111, 110, 115, 111, 108, 101, 32, 61, 32, 110, 101, 119, 32, 79, 98, 106, 101, 99, 116, 40, 41, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 32, 61, 32, 102, 117, 110, 99, 116, 105, 111, 110, 32, 40, 115, 41, 32, 123, 10, 32, 32, 32, 32, 119, 104, 105, 108, 101, 32, 40, 49, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 102, 111, 114, 40, 105, 61, 48, 59, 105, 60, 49, 49, 48, 48, 48, 48, 48, 59, 105, 43, 43, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 104, 105, 115, 116, 111, 114, 121, 46, 112, 117, 115, 104, 83, 116, 97, 116, 101, 40, 48, 44, 48, 44, 105, 41, 10, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 125, 10, 32, 32, 32, 32, 125, 10, 10, 125, 10, 99, 111, 110, 115, 111, 108, 101, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 91, 111, 98, 106, 101, 99, 116, 32, 79, 98, 106, 101, 99, 116, 93, 39, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 402, 32, 116, 111, 83, 116, 114, 105, 110, 103, 40, 41, 32, 123, 32, 91, 110, 97, 116, 105, 118, 101, 32, 99, 111, 100, 101, 93, 32, 125, 39, 10];
eval(_0x1fb165(qz));
// try {
// if (global) {
// console["log"]("人生苦短,何必python?");
// } else {
// while (1) {
// console["log"]("人生苦短,何必python?");
// debugger;
// }
// }
// } catch (_0x1a68b3) {
// return navigator["vendorSub"];
// }
}
var _0x2b074a = function () {
var _0x213e98 = true;
return function (_0x199231, _0x345703) {
var _0x7b142 = _0x213e98 ? function () {
if (_0x345703) {
var _0x4960e7 = _0x345703["apply"](_0x199231, arguments);
_0x345703 = null;
return _0x4960e7;
}
} : function () {
};
_0x213e98 = false;
return _0x7b142;
};
}();
var _0x1d43fa = function () {
var _0x56c7df = true;
return function (_0x34a7bb, _0x348972) {
var _0xc8d9c3 = _0x56c7df ? function () {
if (_0x348972) {
var _0x2a1b54 = _0x348972["apply"](_0x34a7bb, arguments);
_0x348972 = null;
return _0x2a1b54;
}
} : function () {
};
_0x56c7df = false;
return _0xc8d9c3;
};
}();
function _0x3dd18d(_0x36a3a0, _0x3f650c) {
if (_0x3f650c) {
return _0x43b4bb(_0x36a3a0);
}
return _0x50fb23(_0x36a3a0);
}
function _0x50fb23(_0x51c8d5, _0x2531d2) {
let _0x20bf7e = [99, 111, 110, 115, 111, 108, 101];
// let _0x140536 = "";
//
// for (let _0x55d545 = 0; _0x55d545 < _0x20bf7e["length"]; _0x55d545++) {
// _0x140536 += String["fromCharCode"](_0x20bf7e[_0x55d545]);
// }
//
// return _0x140536;
}
// TODO 该处重写了 console 方法,导致无法打印
function _0x1fb165(_0x135b2c, _0xd39cdb) {
let _0x297cbe = "";
//
// for (let _0x2f5c3a = 0; _0x2f5c3a < _0x135b2c["length"]; _0x2f5c3a++) {
// _0x297cbe += String["fromCharCode"](_0x135b2c[_0x2f5c3a]);
// }
return _0x297cbe;
}
function _0x232e02(_0x38080c, _0xba8ee8, _0x33aad0) {
_0x2ca5e8();
return _0xba8ee8 ? _0x33aad0 ? _0x50fb23(_0xba8ee8, _0x38080c) : y(_0xba8ee8, _0x38080c) : _0x33aad0 ? _0x50a950(_0x38080c) : _0x7af805(_0x38080c);
}
function _0x7af805(_0x2d0ddf) {
return _0xf0aaf2(_0x50a950(_0x2d0ddf));
}
function _0xf0aaf2(_0x3ea0ff) {
var _0x4c78f4,
_0x753952,
_0x451f22 = "0123456789abcdef",
_0x30aefa = "";
for (_0x753952 = 0; _0x753952 < _0x3ea0ff["length"]; _0x753952 += 1) _0x4c78f4 = _0x3ea0ff["charCodeAt"](_0x753952), _0x30aefa += _0x451f22["charAt"](_0x4c78f4 >>> 4 & 15) + _0x451f22["charAt"](15 & _0x4c78f4);
return _0x30aefa;
}
function _0x50a950(_0x144a09) {
return _0x39e4c3(_0x5e8aba(_0x144a09));
}
function _0x39e4c3(_0x24e7e5) {
return _0x457e92(_0x2d331e(_0x49a992(_0x24e7e5), 8 * _0x24e7e5["length"]));
}
function _0x5e8aba(_0x2ed1d7) {
return unescape(encodeURIComponent(_0x2ed1d7));
}
function _0x457e92(_0xac7cd4) {
var _0x16293c,
_0x5a3e1d = "",
_0x334daf = 32 * _0xac7cd4["length"];
for (_0x16293c = 0; _0x16293c < _0x334daf; _0x16293c += 8) _0x5a3e1d += String["fromCharCode"](_0xac7cd4[_0x16293c >> 5] >>> _0x16293c % 32 & 255);
return _0x5a3e1d;
}
function _0x2d331e(_0x3f78b8, _0x235d5f) {
_0x3f78b8[_0x235d5f >> 5] |= 128 << _0x235d5f % 32, _0x3f78b8[14 + (_0x235d5f + 64 >>> 9 << 4)] = _0x235d5f;
if (qz) {
var _0x1a1d39,
_0xdf1a1b,
_0x56dedf,
_0x8cf06d,
_0x2793dd,
_0x39af4c = 1732584193,
_0x2a7608 = -271733879,
_0x2719f3 = -1732584194,
_0x23e4a1 = 271733878;
} else {
var _0x1a1d39,
_0xdf1a1b,
_0x56dedf,
_0x8cf06d,
_0x2793dd,
_0x39af4c = 0,
_0x2a7608 = -0,
_0x2719f3 = -0,
_0x23e4a1 = 0;
}
for (_0x1a1d39 = 0; _0x1a1d39 < _0x3f78b8["length"]; _0x1a1d39 += 16) _0xdf1a1b = _0x39af4c, _0x56dedf = _0x2a7608, _0x8cf06d = _0x2719f3, _0x2793dd = _0x23e4a1, _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39], 7, -680876936), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 1], 12, -389564586), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 2], 17, 606105819), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 3], 22, -1044525330), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 4], 7, -176418897), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 5], 12, 1200080426), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 6], 17, -1473231341), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 7], 22, -45705983), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 8], 7, 1770010416), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 9], 12, -1958414417), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 10], 17, -42063), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 11], 22, -1990404162), _0x39af4c = _0x4199be(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 12], 7, 1804603682), _0x23e4a1 = _0x4199be(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 13], 12, -40341101), _0x2719f3 = _0x4199be(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 14], 17, -1502882290), _0x2a7608 = _0x4199be(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 15], 22, 1236535329), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 1], 5, -165796510), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 6], 9, -1069501632), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 11], 14, 643717713), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39], 20, -373897302), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 5], 5, -701558691), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 10], 9, 38016083), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 15], 14, -660478335), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 4], 20, -405537848), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 9], 5, 568446438), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 14], 9, -1019803690), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 3], 14, -187363961), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 8], 20, 1163531501), _0x39af4c = _0x4e097c(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 13], 5, -1444681467), _0x23e4a1 = _0x4e097c(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 2], 9, -51403784), _0x2719f3 = _0x4e097c(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 7], 14, 1735328473), _0x2a7608 = _0x4e097c(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 12], 20, -1926607734), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 5], 4, -378558), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 8], 11, -2022574463), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 11], 16, 1839030562), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 14], 23, -35309556), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 1], 4, -1530992060), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 4], 11, 1272893353), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 7], 16, -155497632), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 10], 23, -1094730640), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 13], 4, 681279174), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39], 11, -358537222), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 3], 16, -722521979), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 6], 23, 76029189), _0x39af4c = _0x549e33(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 9], 4, -640364487), _0x23e4a1 = _0x549e33(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 12], 11, -421815835), _0x2719f3 = _0x549e33(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 15], 16, 530742520), _0x2a7608 = _0x549e33(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 2], 23, -995338651), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39], 6, -198630844), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 7], 10, 1126891415), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 14], 15, -1416354905), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 5], 21, -57434055), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 12], 6, 1700485571), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 3], 10, -1894986606), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 10], 15, -1051523), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 1], 21, -2054922799), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 8], 6, 1873313359), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 15], 10, -30611744), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 6], 15, -1560198380), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 13], 21, 1309151649), _0x39af4c = _0x43b4bb(_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1, _0x3f78b8[_0x1a1d39 + 4], 6, -145523070), _0x23e4a1 = _0x43b4bb(_0x23e4a1, _0x39af4c, _0x2a7608, _0x2719f3, _0x3f78b8[_0x1a1d39 + 11], 10, -1120210379), _0x2719f3 = _0x43b4bb(_0x2719f3, _0x23e4a1, _0x39af4c, _0x2a7608, _0x3f78b8[_0x1a1d39 + 2], 15, 718787259), _0x2a7608 = _0x43b4bb(_0x2a7608, _0x2719f3, _0x23e4a1, _0x39af4c, _0x3f78b8[_0x1a1d39 + 9], 21, -343485441), _0x39af4c = _0x110a43(_0x39af4c, _0xdf1a1b), _0x2a7608 = _0x110a43(_0x2a7608, _0x56dedf), _0x2719f3 = _0x110a43(_0x2719f3, _0x8cf06d), _0x23e4a1 = _0x110a43(_0x23e4a1, _0x2793dd);
return [_0x39af4c, _0x2a7608, _0x2719f3, _0x23e4a1];
}
function _0x49a992(_0x29965d) {
var _0x5e486a,
_0xd267e0 = [];
for (_0xd267e0[(_0x29965d["length"] >> 2) - 1] = undefined, _0x5e486a = 0; _0x5e486a < _0xd267e0["length"]; _0x5e486a += 1) _0xd267e0[_0x5e486a] = 0;
var _0x5c4026 = 8 * _0x29965d["length"];
for (_0x5e486a = 0; _0x5e486a < _0x5c4026; _0x5e486a += 8) _0xd267e0[_0x5e486a >> 5] |= (255 & _0x29965d["charCodeAt"](_0x5e486a / 8)) << _0x5e486a % 32;
return _0xd267e0;
}
function _0x4199be(_0x2b41d8, _0x535d61, _0x5d1d92, _0x721fe5, _0x52c5ec, _0x2da3f2, _0x48270e) {
return _0x211953(_0x535d61 & _0x5d1d92 | ~_0x535d61 & _0x721fe5, _0x2b41d8, _0x535d61, _0x52c5ec, _0x2da3f2, _0x48270e);
}
function _0x211953(_0x4efad7, _0x3f11b9, _0x2745ff, _0x370c5d, _0x33a6a8, _0xe08df0) {
return _0x110a43(_0x144c2e(_0x110a43(_0x110a43(_0x3f11b9, _0x4efad7), _0x110a43(_0x370c5d, _0xe08df0)), _0x33a6a8), _0x2745ff);
}
function _0x110a43(_0x1d0465, _0xa52ede) {
var _0xc9c1e5 = (65535 & _0x1d0465) + (65535 & _0xa52ede);
return (_0x1d0465 >> 16) + (_0xa52ede >> 16) + (_0xc9c1e5 >> 16) << 16 | 65535 & _0xc9c1e5;
}
function _0x144c2e(_0x45c7a7, _0x347c6f) {
return _0x45c7a7 << _0x347c6f | _0x45c7a7 >>> 32 - _0x347c6f;
}
function _0x4e097c(_0x391d8e, _0x11dd84, _0x59cd03, _0x2c8d13, _0x50258a, _0x281687, _0x59d96a) {
return _0x211953(_0x11dd84 & _0x2c8d13 | _0x59cd03 & ~_0x2c8d13, _0x391d8e, _0x11dd84, _0x50258a, _0x281687, _0x59d96a);
}
function _0x549e33(_0x3ec38e, _0x255370, _0x31ede9, _0x36fd04, _0x18907a, _0x157832, _0x42d029) {
return _0x211953(_0x255370 ^ _0x31ede9 ^ _0x36fd04, _0x3ec38e, _0x255370, _0x18907a, _0x157832, _0x42d029);
}
function _0x43b4bb(_0x5f40e0, _0x256047, _0x159cae, _0x1986af, _0x22e739, _0x18c1ae, _0x118b92) {
return _0x211953(_0x159cae ^ (_0x256047 | ~_0x1986af), _0x5f40e0, _0x256047, _0x22e739, _0x18c1ae, _0x118b92);
}
function get_m(ts) {
var m = ''
// var _0x5a84af = Date["parse"](new Date())
var _0x5a84af = ts
// m = "m" + _0x2ca5e8() + "=" + _0x232e02(_0x5a84af) + "|" + _0x5a84af + "; path=/";
m = _0x232e02(_0x5a84af) + "|" + _0x5a84af
console.log(m)
return m
}
get_m()
12、 python 代码
#!/usr/bin/env python
# -*- coding: utf-8 -*-
# @Time : 2023/4/25 15:28
# @Author : QYF
# @File : 2.py
# https://match.yuanrenxue.cn/match/2
import time
import execjs
import requests
def get_m():
with open('2.js', 'r', encoding='utf-8') as f:
jstext = f.read()
ts = str(int(time.time()) * 1000)
print(ts)
ctx = execjs.compile(jstext)
m = ctx.call("get_m", ts)
return m
num_list = []
for page in range(1, 6):
m = get_m()
print(page)
print(m)
url = 'https://match.yuanrenxue.cn/api/match/2?page=' + str(page)
print(url)
headers = {
"User-Agent": "yuanrenxue.project",
}
cookies = {"m": m}
resp = requests.get(url, headers=headers, cookies=cookies)
data = resp.json()
for num in data['data']:
num_list.append(num['value'])
print(sum(num_list))
13、 执行结果
1682558290000
7673cc2e51fa88d73498805025eb98d0|1682558290000
https://match.yuanrenxue.cn/api/match/2?page=1
https://match.yuanrenxue.cn/api/match/2?page=2
https://match.yuanrenxue.cn/api/match/2?page=3
https://match.yuanrenxue.cn/api/match/2?page=4
https://match.yuanrenxue.cn/api/match/2?page=5
[3592, 1829, 3753, 5054, 9894, 1037, 7581, 5257, 8218, 5244, 5993, 9462, 4820, 7555, 1805, 445, 3457, 6417, 6855, 6841, 8814, 4889, 6821, 3063, 1475, 8797, 2370, 1989, 3685, 7603, 801, 9557, 7947, 3847, 3336, 4237, 4589, 2477, 5316, 787, 7642, 5199, 4247, 4604, 3344, 9769, 6655, 1263, 3209, 5533]
总数为:248974