js逆向-导出md5加密方法实战（简单）

本文链接：https://blog.csdn.net/weixin_46468720/article/details/127397316

简单的随机找一个网站密码加密方法；

1.先在登陆页面随便输入账号密码，发送个包，看提交的数据，有password，发现是加密；

而且密文是32位，初步猜测是md5，如图：

2，复制标记：password，搜索，如图：

排除掉hm.js（这个是百度统计js）,jquery开头的js；

直观在login.js，点击进去：发现，下断点：

3，刷新网页，重新输入账号密码，断下来了，发现经过：md5.hex_md5(password)之后，password是加密了，如图：

4，所以确定，hex_md5就是加密函数，鼠标放上去，点击hex_md5所在js：

5，发现这个js就是需要扣的js文件：

define(function(require, exports, module) {
    function c(s) {
        return D(a(B(s), s.length * F)).toUpperCase()
    }
    function a(x, c) {
        x[c >> 5] |= 128 << c % 32,
        x[(c + 64 >>> 9 << 4) + 14] = c;
        for (var a = 1732584193, h = -271733879, b = -1732584194, d = 271733878, i = 0; i < x.length; i += 16) {
            var B = a
              , D = h
              , E = b
              , F = d;
            a = v(a, h, b, d, x[i + 0], 7, -680876936),
            d = v(d, a, h, b, x[i + 1], 12, -389564586),
            b = v(b, d, a, h, x[i + 2], 17, 606105819),
            h = v(h, b, d, a, x[i + 3], 22, -1044525330),
            a = v(a, h, b, d, x[i + 4], 7, -176418897),
            d = v(d, a, h, b, x[i + 5], 12, 1200080426),
            b = v(b, d, a, h, x[i + 6], 17, -1473231341),
            h = v(h, b, d, a, x[i + 7], 22, -45705983),
            a = v(a, h, b, d, x[i + 8], 7, 1770035416),
            d = v(d, a, h, b, x[i + 9], 12, -1958414417),
            b = v(b, d, a, h, x[i + 10], 17, -42063),
            h = v(h, b, d, a, x[i + 11], 22, -1990404162),
            a = v(a, h, b, d, x[i + 12], 7, 1804603682),
            d = v(d, a, h, b, x[i + 13], 12, -40341101),
            b = v(b, d, a, h, x[i + 14], 17, -1502002290),
            h = v(h, b, d, a, x[i + 15], 22, 1236535329),
            a = A(a, h, b, d, x[i + 1], 5, -165796510),
            d = A(d, a, h, b, x[i + 6], 9, -1069501632),
            b = A(b, d, a, h, x[i + 11], 14, 643717713),
            h = A(h, b, d, a, x[i + 0], 20, -373897302),
            a = A(a, h, b, d, x[i + 5], 5, -701558691),
            d = A(d, a, h, b, x[i + 10], 9, 38016083),
            b = A(b, d, a, h, x[i + 15], 14, -660478335),
            h = A(h, b, d, a, x[i + 4], 20, -405537848),
            a = A(a, h, b, d, x[i + 9], 5, 568446438),
            d = A(d, a, h, b, x[i + 14], 9, -1019803690),
            b = A(b, d, a, h, x[i + 3], 14, -187363961),
            h = A(h, b, d, a, x[i + 8], 20, 1163531501),
            a = A(a, h, b, d, x[i + 13], 5, -1444681467),
            d = A(d, a, h, b, x[i + 2], 9, -51403784),
            b = A(b, d, a, h, x[i + 7], 14, 1735328473),
            h = A(h, b, d, a, x[i + 12], 20, -1926607734),
            a = g(a, h, b, d, x[i + 5], 4, -378558),
            d = g(d, a, h, b, x[i + 8], 11, -2022574463),
            b = g(b, d, a, h, x[i + 11], 16, 1839030562),
            h = g(h, b, d, a, x[i + 14], 23, -35309556),
            a = g(a, h, b, d, x[i + 1], 4, -1530992060),
            d = g(d, a, h, b, x[i + 4], 11, 1272893353),
            b = g(b, d, a, h, x[i + 7], 16, -155497632),
            h = g(h, b, d, a, x[i + 10], 23, -1094730640),
            a = g(a, h, b, d, x[i + 13], 4, 681279174),
            d = g(d, a, h, b, x[i + 0], 11, -358537222),
            b = g(b, d, a, h, x[i + 3], 16, -722521979),
            h = g(h, b, d, a, x[i + 6], 23, 76029189),
            a = g(a, h, b, d, x[i + 9], 4, -640364487),
            d = g(d, a, h, b, x[i + 12], 11, -421815835),
            b = g(b, d, a, h, x[i + 15], 16, 530742520),
            h = g(h, b, d, a, x[i + 2], 23, -995338651),
            a = C(a, h, b, d, x[i + 0], 6, -198630844),
            d = C(d, a, h, b, x[i + 7], 10, 1126891415),
            b = C(b, d, a, h, x[i + 14], 15, -1416354905),
            h = C(h, b, d, a, x[i + 5], 21, -57434055),
            a = C(a, h, b, d, x[i + 12], 6, 1700485571),
            d = C(d, a, h, b, x[i + 3], 10, -1894986606),
            b = C(b, d, a, h, x[i + 10], 15, -1051523),
            h = C(h, b, d, a, x[i + 1], 21, -2054922799),
            a = C(a, h, b, d, x[i + 8], 6, 1873313359),
            d = C(d, a, h, b, x[i + 15], 10, -30611744),
            b = C(b, d, a, h, x[i + 6], 15, -1560198380),
            h = C(h, b, d, a, x[i + 13], 21, 1309151649),
            a = C(a, h, b, d, x[i + 4], 6, -145523070),
            d = C(d, a, h, b, x[i + 11], 10, -1120210379),
            b = C(b, d, a, h, x[i + 2], 15, 718787259),
            h = C(h, b, d, a, x[i + 9], 21, -343485551),
            a = y(a, B),
            h = y(h, D),
            b = y(b, E),
            d = y(d, F)
        }
        return Array(a, h, b, d)
    }
    function h(q, c, a, x, s, t) {
        return y(b(y(y(c, q), y(x, t)), s), a)
    }
    function v(c, a, v, d, x, s, t) {
        return h(a & v | ~a & d, c, a, x, s, t)
    }
    function A(c, a, v, d, x, s, t) {
        return h(a & d | v & ~d, c, a, x, s, t)
    }
    function g(c, a, v, d, x, s, t) {
        return h(a ^ v ^ d, c, a, x, s, t)
    }
    function C(c, a, v, d, x, s, t) {
        return h(v ^ (a | ~d), c, a, x, s, t)
    }
    function y(x, c) {
        var a = (65535 & x) + (65535 & c)
          , h = (x >> 16) + (c >> 16) + (a >> 16);
        return h << 16 | 65535 & a
    }
    function b(c, a) {
        return c << a | c >>> 32 - a
    }
    function B(c) {
        for (var a = Array(), h = (1 << F) - 1, i = 0; i < c.length * F; i += F)
            a[i >> 5] |= (c.charCodeAt(i / F) & h) << i % 32;
        return a
    }
    function D(c) {
        for (var a = E ? "0123456789ABCDEF" : "0123456789abcdef", h = "", i = 0; i < 4 * c.length; i++)
            h += a.charAt(c[i >> 2] >> i % 4 * 8 + 4 & 15) + a.charAt(c[i >> 2] >> i % 4 * 8 & 15);
        return h
    }
    var E = 0
      , F = 8;
    module.exports = {
        hex_md5: c
    }
});

6，把js文件改成自执行，然后定一个全局变量，用来接收导出hex_md5（也就是c函数）方法

var _hex_md5 = "";//定义全局变量
(function(require, exports, module) {
    function c(s) {
        return D(a(B(s), s.length * F)).toUpperCase()
    }
    function a(x, c) {
        x[c >> 5] |= 128 << c % 32,
        x[(c + 64 >>> 9 << 4) + 14] = c;
        for (var a = 1732584193, h = -271733879, b = -1732584194, d = 271733878, i = 0; i < x.length; i += 16) {
            var B = a
              , D = h
              , E = b
              , F = d;
            a = v(a, h, b, d, x[i + 0], 7, -680876936),
            d = v(d, a, h, b, x[i + 1], 12, -389564586),
            b = v(b, d, a, h, x[i + 2], 17, 606105819),
            h = v(h, b, d, a, x[i + 3], 22, -1044525330),
            a = v(a, h, b, d, x[i + 4], 7, -176418897),
            d = v(d, a, h, b, x[i + 5], 12, 1200080426),
            b = v(b, d, a, h, x[i + 6], 17, -1473231341),
            h = v(h, b, d, a, x[i + 7], 22, -45705983),
            a = v(a, h, b, d, x[i + 8], 7, 1770035416),
            d = v(d, a, h, b, x[i + 9], 12, -1958414417),
            b = v(b, d, a, h, x[i + 10], 17, -42063),
            h = v(h, b, d, a, x[i + 11], 22, -1990404162),
            a = v(a, h, b, d, x[i + 12], 7, 1804603682),
            d = v(d, a, h, b, x[i + 13], 12, -40341101),
            b = v(b, d, a, h, x[i + 14], 17, -1502002290),
            h = v(h, b, d, a, x[i + 15], 22, 1236535329),
            a = A(a, h, b, d, x[i + 1], 5, -165796510),
            d = A(d, a, h, b, x[i + 6], 9, -1069501632),
            b = A(b, d, a, h, x[i + 11], 14, 643717713),
            h = A(h, b, d, a, x[i + 0], 20, -373897302),
            a = A(a, h, b, d, x[i + 5], 5, -701558691),
            d = A(d, a, h, b, x[i + 10], 9, 38016083),
            b = A(b, d, a, h, x[i + 15], 14, -660478335),
            h = A(h, b, d, a, x[i + 4], 20, -405537848),
            a = A(a, h, b, d, x[i + 9], 5, 568446438),
            d = A(d, a, h, b, x[i + 14], 9, -1019803690),
            b = A(b, d, a, h, x[i + 3], 14, -187363961),
            h = A(h, b, d, a, x[i + 8], 20, 1163531501),
            a = A(a, h, b, d, x[i + 13], 5, -1444681467),
            d = A(d, a, h, b, x[i + 2], 9, -51403784),
            b = A(b, d, a, h, x[i + 7], 14, 1735328473),
            h = A(h, b, d, a, x[i + 12], 20, -1926607734),
            a = g(a, h, b, d, x[i + 5], 4, -378558),
            d = g(d, a, h, b, x[i + 8], 11, -2022574463),
            b = g(b, d, a, h, x[i + 11], 16, 1839030562),
            h = g(h, b, d, a, x[i + 14], 23, -35309556),
            a = g(a, h, b, d, x[i + 1], 4, -1530992060),
            d = g(d, a, h, b, x[i + 4], 11, 1272893353),
            b = g(b, d, a, h, x[i + 7], 16, -155497632),
            h = g(h, b, d, a, x[i + 10], 23, -1094730640),
            a = g(a, h, b, d, x[i + 13], 4, 681279174),
            d = g(d, a, h, b, x[i + 0], 11, -358537222),
            b = g(b, d, a, h, x[i + 3], 16, -722521979),
            h = g(h, b, d, a, x[i + 6], 23, 76029189),
            a = g(a, h, b, d, x[i + 9], 4, -640364487),
            d = g(d, a, h, b, x[i + 12], 11, -421815835),
            b = g(b, d, a, h, x[i + 15], 16, 530742520),
            h = g(h, b, d, a, x[i + 2], 23, -995338651),
            a = C(a, h, b, d, x[i + 0], 6, -198630844),
            d = C(d, a, h, b, x[i + 7], 10, 1126891415),
            b = C(b, d, a, h, x[i + 14], 15, -1416354905),
            h = C(h, b, d, a, x[i + 5], 21, -57434055),
            a = C(a, h, b, d, x[i + 12], 6, 1700485571),
            d = C(d, a, h, b, x[i + 3], 10, -1894986606),
            b = C(b, d, a, h, x[i + 10], 15, -1051523),
            h = C(h, b, d, a, x[i + 1], 21, -2054922799),
            a = C(a, h, b, d, x[i + 8], 6, 1873313359),
            d = C(d, a, h, b, x[i + 15], 10, -30611744),
            b = C(b, d, a, h, x[i + 6], 15, -1560198380),
            h = C(h, b, d, a, x[i + 13], 21, 1309151649),
            a = C(a, h, b, d, x[i + 4], 6, -145523070),
            d = C(d, a, h, b, x[i + 11], 10, -1120210379),
            b = C(b, d, a, h, x[i + 2], 15, 718787259),
            h = C(h, b, d, a, x[i + 9], 21, -343485551),
            a = y(a, B),
            h = y(h, D),
            b = y(b, E),
            d = y(d, F)
        }
        return Array(a, h, b, d)
    }
    function h(q, c, a, x, s, t) {
        return y(b(y(y(c, q), y(x, t)), s), a)
    }
    function v(c, a, v, d, x, s, t) {
        return h(a & v | ~a & d, c, a, x, s, t)
    }
    function A(c, a, v, d, x, s, t) {
        return h(a & d | v & ~d, c, a, x, s, t)
    }
    function g(c, a, v, d, x, s, t) {
        return h(a ^ v ^ d, c, a, x, s, t)
    }
    function C(c, a, v, d, x, s, t) {
        return h(v ^ (a | ~d), c, a, x, s, t)
    }
    function y(x, c) {
        var a = (65535 & x) + (65535 & c)
          , h = (x >> 16) + (c >> 16) + (a >> 16);
        return h << 16 | 65535 & a
    }
    function b(c, a) {
        return c << a | c >>> 32 - a
    }
    function B(c) {
        for (var a = Array(), h = (1 << F) - 1, i = 0; i < c.length * F; i += F)
            a[i >> 5] |= (c.charCodeAt(i / F) & h) << i % 32;
        return a
    }
    function D(c) {
        for (var a = E ? "0123456789ABCDEF" : "0123456789abcdef", h = "", i = 0; i < 4 * c.length; i++)
            h += a.charAt(c[i >> 2] >> i % 4 * 8 + 4 & 15) + a.charAt(c[i >> 2] >> i % 4 * 8 & 15);
        return h
    }
    var E = 0
      , F = 8;
	_hex_md5 = c;//把c函数导给全局变量
})();

7，完成，直接_hex_md5('密码'),成功输出加密密文