某旗智* login算法 sign算法

懒虫Obj · 发表于 2023-8-17 14:50:23

此app好像是双向证书直接post返回400

<html>
<head><title>400 No required SSL certificate was sent</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>No required SSL certificate was sent</center>
<hr><center>nginx/1.20.2</center>
</body>
</html>

APP难点 360壳双向证书

POST [url=https://fawtsp-appgw.faw.cn/user/account/thi/login?deviceId=0C33F4312E9F5121EAF83BF32C7B80244BF7A92Dtsp2&appId=M001]**/user ... A92Dtsp2&appId=M001[/url] HTTP/1.1
sign: 0aca0ea88591b6aff8f5c5cec6be41f6
[color= #ff0000] (加密明文: sign user/account/thi/login_appId=M001_deviceId=0C33F4312E9F5121EAF83BF32C7B80244BF7A92Dtsp2_l5kbjogu9z2wre0kxiuxyfjywwjy0zmy)[/color]
[color= #ff0000]{url地址参数部分进行排序 + md5key 5kbjogu9z2wre0kxiuxyfjywwjy0zmy}[/color]
signt: 1692253418699
simAudit: SUCCEED
token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.**
appkey: 7261076202
nonce: 9f1d21535ba9463aa50ae9938c94f80a
Content-Type: application/x-www-form-urlencoded
Content-Length: 68
Host: fawtsp-appgw.faw.cn
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: okhttp/3.11.0
password=lHejQN9aAqTBSIEE%2Fnz8vw%3D%3D (明文密码aa123456)&mobile=17628827****&version=1
[color= #ff0000] (password加密算法:AES/CBC/PKCS7Padding key: MTJBNjNFREJBNzRGNzdDRg== (base64) iv: (NTFDMUExMUZGQjAwNkMxMA==) )[/color]

qw155 · 发表于 2024-7-4 14:43:18

证书密码是多少呢

		自动登录	找回密码
密码			注册

[技术文章] 某旗智* login算法 sign算法

评分