小程序JS求助

langzinq · 发表于 2024-10-24 15:41:49

小程序：中国邮政商城
进入小程序授权后，右下角有个去抽奖，提交内容和返回内容都是密文，调试出来是AES加密，但KEY和IV不能显示明文，不会套用库来解密了，这样的应该怎么处理？是不是跟错地方了？求大佬指点。

black0216 · 发表于 2024-10-24 15:41:50

下次把这些值发出来，然后说一句没有人能够解开，保证一堆人给你弄开

小小鱿鱼 · 发表于 2024-10-24 15:45:58

那么大的 var s给谁看的

black0216 · 发表于 2024-10-24 15:45:59

key不就是s , iv随机生成的，但是会发送给后端，就是ivB64这个，已经写脸上了

錆叫ωo红领巾℡ · 发表于 2024-10-24 16:01:50

小程序怎么抓到这里呢，我用FD 只能看到是加密，但是没办法抓JS

langzinq · 发表于 2024-10-24 16:15:28

black0216 发表于 2024-10-24 15:45
key不就是s , iv随机生成的，但是会发送给后端，就是ivB64这个，已经写脸上了 ...

我把 P的值 KEY和IV的值放到解密工具中，解不出来文本，IV的值用BS64解码也解不出

一线之隔 · 发表于 2024-10-24 16:37:49

key选hex，iv选base64，配套的完全可以

FanLi · 发表于 2024-10-24 16:58:10

这不就是aes?

浅黑 · 发表于 2024-10-24 16:58:56

调试输出 (UTF8到文本 (对称解密 (编码_BASE64解码 (“Pgjts3vrAxdrY5iOIPQincOs5GBYQb5emCw6gnTSsJkwPAG/GIRPycT/EiBvBfTYwD4tGBTYdKfTZfz3LMJMi8WfgLcYlsvCv0ITFzLYyJ3a+JoIIDj9aM34Tr4BpNPrcqyWDmRVCAyjBj63CYaKsA6MrEh6Ut6kth0oVlpFwTxz4WH69kFvjHj4rjhxlFNDkbfY/XHFKgScJ13cI3BtjvxDZQ/GrmcDyNuNPzkJXlD0rMo27J3VhtWh5FIeccaK9uFd/L0Z3dkimrfJOsGbRTyBQB5LyYmXBWL867CJLDOvqVT/ZRO4NUxPCeP14BbWuPbcrC2BMML3QbyX1dH1rxkCUup2+HA9d0eXBOuo2R18ElAwSMlBTHeMZ3ii2og9QriNbwgLebygRMmaJnw0P1Djm6EsmOBzfquFFqmqOQFoAMj6nM+E+fTdZATpI4l1ida7AaQkniM+D1X4Pr9Gx5FfWEqp/wLqCoM3kLS3B09z68WRLbT4mQOPKhXrQ704AoWQ1Y2tG+sO/auNFRPwm6aS4XHlQ6qiLEh9IY76zThksZJgq51RRfXXhQMz7Ri/EUMtPkFznCNcPNHIMWPQovWMcjXIO2dpqosTcFbYwudcxlZbWBuOvZzi+YJSDiiCakeD6/156gz8GBf9GBAdJMbpZ+OukWI8GLdZhWsP+NQ+FVZF5LESh7fLNB3u4T0VcOzEHHpBOZ1Y3F1FXgUCmsUwQnCaSv+hRgExy7mcxijH7tCHaDquBnP7c8aWNnlUg/rTYk3f7UjNY/g8XtVnDJi6EL86BZCH0+44RqngwEAw86YrDnXEMPk48GMD/yfg/TMQ5sTcBpubZiNpIDtX4QXlSlD/rFzK0aSqIrRQ8MfcB/cndURRbwX2P2snW0uaOzbCrvJWP1KmZUuuBS/6RTJbxWYIn/1Qq8wfWixH5807/6wB81ZDvt88n0yM8xJrFIINNbRoLorWCESC+7VcXST2Fm7kKP9JiSPsSEMc/HitjPU/ECOQ69u2e5POtvpRw+2tiWrVwP2XNXliXq6Jv3xcMLkIMn5KDUcYbV+k9yGopBOXx9bm8NobTUVxRVcga5WeZ/lFi3DgbEyQO+Jfdo7l76Pr3/hGD+XgTpn3/8nnwPQfgteYDTmxcW6Vw9wyA4yf41Hp30qUYM936mmdptW7s9SSNUlagMdfCNNHKnykdAsVKSwrujRH0WfIQhp/RAl3QKfyow7oZ8ygf7Ph8mpFqxLEQs5stjInP4y5yBxxGfiWrOjHFlOPEwqpRLnHhvmpmw/fCiLQHIct/gXfaKqHvy4wohqYuETLzR4IXJ+o2zzMvT699J2GUw6Wrqc0H9RAdiufcqc1KMxwovjBXH1hf0oG2uVB993JV2JtYSYqyGxnxA8fCssYv/0nahKuQbJ7K12odeirrLBiM+q/xIPKIq696RDTrKkX6Fre+nf27XPusU2Vtnope+0CaE3ZDMoLcQHG+17m4m+QlyS9R8xuDiUkGMlOM7aOr6DxHYRytB7GkzqDbgdBAteXjcZIFTQaxLmWu9VJ0UMcu2g/n7VLV053dlcNHSpue1bYt7RGag8Yd1I2ThkmPeJfQ1IbLJm+W0m0mLNmO2F47D0ytBrdLIwQ8q0Y06ASJwep+0rvBx6uZFguuJs8cp8m74KOls6wVXIFezzAtCZFE3foEZVIZvSFhd8WpEVdBWagJfdWQ2Rctai7l4YcULsQB6+AncCAuaTMI6FE2kWpOERDh+7bhD+PxUB4Ex/idDPHUPdr76Wp5bc8II6h/XzPKGuwhyBa07hdPyxIrQlmcbM3Vd9vIJ/phr+eHuBcCOmQ6iDobrIB/joQwOXn60YhKiQJ7l4cUwqRHq6f/cm/BIabn4d/D1fdXMWZbgQdDCdNyiPDsNn8Op7QlcsKwvYYSvU9aLpflIwLg/gK4MOkTUsInxk3AHaFM6UdGPzCi8iFIPCZmlSmSXTBgg4A34eJihHg9blqU8va9QUiGrkG8NXIajfOxq6pA2Yc6gopFL8XIgGSeNEnaZiejyhs133b5lOSeFU7CwRm5Ge2X84qUAXQVRL+n2PSnHJhV+Wl+6gXHUuf8rKNPL9YpdbEVDH68ylz”), hex2bin (“CE8359331A4F1D3CE8C0987136C2773C”), #对称算法_AES_CBC, #数据填充_PKCS7_PADDING, 编码_BASE64解码 (“ArZTwnld1mZsueDa/A3hWw==”))))

调试输出 (UTF8到文本 (对称解密 (编码_BASE64解码 (“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”), hex2bin (“CE8359331A4F1D3CE8C0987136C2773C”), #对称算法_AES_CBC, #数据填充_PKCS7_PADDING, 编码_BASE64解码 (“ArZTwnld1mZsueDa/A3hWw==”))))

key是固定的，iv是动态的

		自动登录	找回密码
密码			注册

[完成] 小程序JS求助

最佳答案

评分