qq空间post中的badcdg是怎么生成的，找不到js也找不到返回的

jj1234567

小七先生

就是个AES加密 明文：

{"mousemove":[{"t":1,"x":139,"y":136},{"t":2,"x":170,"y":98},{"t":4,"x":5,"y":96},{"t":5,"x":197,"y":67},{"t":8,"x":198,"y":65},{"t":9,"x":215,"y":105}],"mouseclick":[{"t":5,"x":196,"y":67}],"keyvalue":[5,6,7,7,8],"user_Agent":"firefox/35.0","resolutionx":1366,"resolutiony":768,"winSize":[300,152],"url":"https://ssl.captcha.qq.com/cap_union_new_show","refer":"https://xui.ptlogin2.qq.com/cgi-bin/xlogin","begintime":1501484220,"endtime":1501484229,"platform":1,"os":"other","keyboards":5,"flash":1,"pluginNum":32,"index":1,"ptcz":"","tokenid":1197592441,"a":1197592441,"btokenid":null,"tokents":1501484221,"ips":{"in":["192.168.232.1","192.168.144.1","192.168.0.3"]},"colorDepth":24,"cookieEnabled":true,"timezone":8,"wDelta":1,"keyUpCnt":5,"keyUpValue":[5,6,7,7,8],"mouseUpValue":[{"t":5,"x":196,"y":67},{"t":9,"x":221,"y":119}],"mouseUpCnt":2,"mouseDownValue":[{"t":4,"x":196,"y":67},{"t":9,"x":221,"y":119}],"mouseDownCnt":2,"orientation":[],"bSimutor":0,"focusBlur":{"in":[1501484225007],"out":[1501484225007],"t":[4226]},"fVersion":26,"charSet":"UTF-8","resizeCnt":0,"errors":[],"screenInfo":"1366-768-728-24-*-*-*","elapsed":1000,"ft":"iH76Pbn7H","clientType":"2","trycnt":1,"refreshcnt":0}




补充内容 (2017-7-31 15:00):
加密key   0123456789  模式CBC   填充Nopadding

1171707139

计算的cdata

熊猫巴布

就是JS计算的。和collect 算法一样，而且里面包含的好多浏览器的信息。不容易计算

w648505183

看大神开源的JS手法表演 https://bbs.125.la/forum.php?mod=viewthread&tid=14043894&highlight=%CA%D6%B7%A8

jj1234567

小七烤地瓜 发表于 2017-7-31 14:59
就是个AES加密 明文：

{"mousemove":[{"t":1,"x":139,"y":136},{"t":2,"x":170,"y":98},{"t":4,"x": ...

关键我想知道，从哪里获取的，不然知道是aes加密，也不知道是对啥的加密呀

小七先生

jj1234567 发表于 2017-7-31 15:35
关键我想知道，从哪里获取的，不然知道是aes加密，也不知道是对啥的加密呀

混淆的JS  有能力你就找吧 另外 明文已经发给你了

jj1234567

E族x天天软件 发表于 2017-7-31 14:57
就是JS计算的。和collect 算法一样，而且里面包含的好多浏览器的信息。不容易计算

主要找不到地方呀，collect是以前的了，现在也找不到了

jj1234567

jj1234567 发表于 2017-7-31 15:35
关键我想知道，从哪里获取的，不然知道是aes加密，也不知道是对啥的加密呀

这个明文怎么用呀，我才学js不久