求大佬帮抓个包

j8018

url：http://bvw4r6pp.bylgixwxp9czxh1g.xingyun342.123.vote128.cn/app/N1AEl5uCvf/home
求这个网页的完整登录包

ltais

可以在模拟器里抓包

哆啦恶梦

Host: bvw4r6pp.bylgixwxp9czxh1g.xingyun342.123.vote128.cn Connection: keep-alive Accept: application/json, text/plain, */* X-Requested-With: XMLHttpRequest  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x63090621) XWEB/8461 Flue Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.9           加上这个UA就能访问了

j8018

哆啦恶梦 发表于 2023-11-16 13:30
Host: bvw4r6pp.bylgixwxp9czxh1g.xingyun342.123.vote128.cn Connection: keep-alive Accept: application ...

不行哇 还是授权登录失败 就很离谱

哆啦恶梦

j8018 发表于 2023-11-16 13:35
不行哇 还是授权登录失败 就很离谱

这个是让你能访问，授权登录需要其它操作

j8018

哆啦恶梦 发表于 2023-11-16 13:36
这个是让你能访问，授权登录需要其它操作

已经取出code跟secret 但是授权不上

瀚海

  

局_网址 = "http://sq.huifeng999.cn/app/oauth_callback?stage_code=N1AEl5uCvf&redirect_url=%2Fapp%2FN1AEl5uCvf%2Fhome&type=oauth&code=071JuhHa1ObknG00qUFa1cL6yL2JuhHg&state=f20daa597a37caddf54dc411b66c5777"
局_方式 = 0
局_提交协议头 = "Host: sq.huifeng999.cn” ＋ #换行符 ＋ “Connection: keep-alive” ＋ #换行符 ＋ “Upgrade-Insecure-Requests: 1” ＋ #换行符 ＋ “User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781 (0x6700143B) WindowsWechat (0x6309080f) XWEB/8461 Flue” ＋ #换行符 ＋ “Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9” ＋ #换行符 ＋ “Accept-Language: zh-CN,zh;q=0.9” ＋ #换行符 ＋ “Accept-Encoding: gzip, deflate"
局_返回 = 到文本 (编码_编码转换对象 (网页_访问_对象 (局_网址, 局_方式, , , , 局_提交协议头, , , , , , , , , , , )))
返回 (局_返回)

局_网址 = "http://sq.huifeng999.cn/app/oauth_callback?stage_code=N1AEl5uCvf&redirect_url=%2Fapp%2FN1AEl5uCvf%2Fhome&type=oauth&code=071JuhHa1ObknG00qUFa1cL6yL2JuhHg&state=f20daa597a37caddf54dc411b66c5777"<br /> 局_方式 = 0<br /> 局_提交协议头 = "Host: sq.huifeng999.cn” ＋ #换行符 ＋ “Connection: keep-alive” ＋ #换行符 ＋ “Upgrade-Insecure-Requests: 1” ＋ #换行符 ＋ “User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 NetType/WIFI MicroMessenger/7.0.20.1781(0x6700143B) WindowsWechat(0x6309080f) XWEB/8461 Flue” ＋ #换行符 ＋ “Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9” ＋ #换行符 ＋ “Accept-Language: zh-CN,zh;q=0.9” ＋ #换行符 ＋ “Accept-Encoding: gzip, deflate"<br /> <br /> 局_返回 = 到文本(编码_编码转换对象(网页_访问_对象 (局_网址, 局_方式, , , , 局_提交协议头, , , , , , , , , , , )))<br /> 返回(局_返回)

把code还有state换成你自己的就可以了

j8018

瀚海 发表于 2023-11-16 13:51
[e=1]局_网址 = "http://sq.huifeng999.cn/app/oauth_callback?stage_code=N1AEl5uCvf&redirect_url=%2Fapp ...

这一步只是到授权过后 但是还没真正登录上 后面还有个重定向

j8018

瀚海 发表于 2023-11-16 13:51
[e=1]局_网址 = "http://sq.huifeng999.cn/app/oauth_callback?stage_code=N1AEl5uCvf&redirect_url=%2Fapp ...

这个包 访问成功之后会在返回里有个链接 那个链接访问了才会出token  就那最后一个链接访问不了 把协议头ua网址统一一下也访问不了 说是授权登录失败

nha30

下载个VX开发者工具，就可以正常访问，调试，抓包了