微信买钻投票系统··怎么突破每天只投一次

huan21ni

投票链接如下【此链接只是作为演示】：
http://www.yanxipretty.com/app/video/3e1536050c829058b08270b9bb0361ff?invite_=&id=87045&code=0015Na6c1hFoxt0u7j5c1MlW5c15Na6F&invite_id=12874090
微信打开后需要授权获取相关信息
我抓包最后得到的数据如下
POST：
提交数据：

  

{"callback":"/app/wechat/ctm_pay_vote","video_id":19854,"vote_id":1739,"uid":87045,"index":0,"g_name":"1赞","number":1,"scores":0,"room_id":"54396635381762","type":1004,"money":0,"content":"买了1个1赞，一个共花费0钻","total":1}

{"callback":"/app/wechat/ctm_pay_vote","video_id":19854,"vote_id":1739,"uid":87045,"index":0,"g_name":"1赞","number":1,"scores":0,"room_id":"54396635381762","type":1004,"money":0,"content":"买了1个1赞，一个共花费0钻","total":1}

COOK：

  

PHPSESSID=50djvllpiae606s7ud9hltr1gt; Hm_lvt_7b05bea3f2906f7b580f542863ea3792=1531448810; Hm_lpvt_7b05bea3f2906f7b580f542863ea3792=1531448810

PHPSESSID=50djvllpiae606s7ud9hltr1gt; Hm_lvt_7b05bea3f2906f7b580f542863ea3792=1531448810; Hm_lpvt_7b05bea3f2906f7b580f542863ea3792=1531448810

协议头：

  

Connection: keep-alive
Content-Length: 239
Accept: application/json, text/plain, */*
Content-Type: application/json;charset=UTF-8
Origin: http://www.yanxipretty.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 MicroMessenger/6.5.2.501 NetType/WIFI WindowsWechat QBCore/3.43.884.400 QQBrowser/9.0.2524.400
X-Requested-With: XMLHttpRequest

Connection: keep-alive<br /> Content-Length: 239<br /> Accept: application/json, text/plain, */*<br /> Content-Type: application/json;charset=UTF-8<br /> Origin: http://www.yanxipretty.com<br /> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36 MicroMessenger/6.5.2.501 NetType/WIFI WindowsWechat QBCore/3.43.884.400 QQBrowser/9.0.2524.400<br /> X-Requested-With: XMLHttpRequest

第二次投票返回数据：

  

{"code":201,"data":0,"msg":"您今天的免费次数已用完了"}

{"code":201,"data":0,"msg":"您今天的免费次数已用完了"}

每天只能投一次
·······判断的关键值应该是COOK中的PHPSESSID 怎么突破？

╰仅冇旳執著

PHPSESSID 说明这个网站是php写的 这个cookie在php用了session记录用户信息或者其他的信息的时候就会返回，破J思路就是你抓包看 哪条链接返回了这个cookie ，看看能不能提交这个请求返回的cookie能不能用，这个cookie无法伪造 伪造了没用的

huan21ni

╰仅冇旳執著 发表于 2018-7-13 11:06
PHPSESSID 说明这个网站是php写的 这个cookie在php用了session记录用户信息或者其他的信息的时候就会返回， ...

嗯  开始也是这么想的，好像行不通 ，进入页面前 调用了微信OAuth2.0 获取用户信息 估计使用用OPID 计算的出来的值 然后写入数据库··伪造没用 数据库中没有也失败，还有其他办法么