学习js逆向（yuan人学第二题）

没事瞎琢磨

经过1天多摸鱼时间，终于攻克了第二题  地址是（match.yuanrenxue.cn/match/2）
马上来分享给大家 下边是流程




一、首先开F12 翻页看包
       有个debugger  老规矩一律不在此暂停 解决它
然后翻页 分析 这个包   发现 请求参数 和返回都是明文  没有加密
那么问题来了，加密在哪？？？
答案：请求头里 仔细找  


这个网页的cookie时间真变态 一会就失效  经过多次对比 发现 就是cookie里的 参数  ”m“
第一步可以确定 是cookie 加密 参数是  m




二、 一般请求头的加密参数  我都是 直接定位 xhr断点  然后堆栈往上找
这个玩意 我翻了半天 没找到


然后用不太精通的hook大法断这个m 参数，然后发现 也断不到


这样咋整？？？




三、 无奈 只能拿出我的抓包 小工具 在仔细分析（毕竟F12 有些 不显示返回数据，实际是请求一下大佬询问来的思路）


经过我多次实验发现cookie 过期之后再次载入 会有一个文档的请求 返回的是一堆 混淆函数


在这堆函数里搜一下cookie  发现有这个词  好了 基本确定 就是这堆玩意 生成的 m 参数




四、 把这堆函数 全扣下来
根本执行不了 肯定是混淆的  这时候就要拿出我们的小BD 一顿搜 解混淆的玩意 挨个试


最后发现 这是OB什么玩意混淆  反正是解出来了  然后在搜cookie 发现有这句代码： ”document["cookie"] = "m" + _0x2336ba() + "=" + _0x54aa22(_0x427bcf) + "|" + _0x427bcf + "; path=/";“




好了可以肯定就是这个玩意 对比 请求头里 m参数  他的格式 是 m=******|数字   所以这里我们先把 等于号后边的拿出来试验也就是： _0x54aa22(_0x427bcf) + "|" + _0x427bcf


五、到这就简单了 由于代码不是很多  我们就直接扣


新建个js  把这几个扣过来 ，运行 提示 缺哪个函数 就扣过来哪个  直到运行之后 正常 就ok了


看结果 和 m 参数差不多  直接开个网页请求 把参数写进去 发现有正常返回  ok 说明就是这个


但是这个参数一会就过期了  所以要请求5页的数据 最好 是请求一次 计算一次参数  


到这就全ok了  






最后 抠出来的代码 我放下边了 回复 可见 不用下载

[JavaScript] 纯文本查看 复制代码

qz = [10, 99, 111, 110, 115, 111, 108, 101, 32, 61, 32, 110, 101, 119, 32, 79, 98, 106, 101, 99, 116, 40, 41, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 32, 61, 32, 102, 117, 110, 99, 116, 105, 111, 110, 32, 40, 115, 41, 32, 123, 10, 32, 32, 32, 32, 119, 104, 105, 108, 101, 32, 40, 49, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 102, 111, 114, 40, 105, 61, 48, 59, 105, 60, 49, 49, 48, 48, 48, 48, 48, 59, 105, 43, 43, 41, 123, 10, 32, 32, 32, 32, 32, 32, 32, 32, 104, 105, 115, 116, 111, 114, 121, 46, 112, 117, 115, 104, 83, 116, 97, 116, 101, 40, 48, 44, 48, 44, 105, 41, 10, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 125, 10, 32, 32, 32, 32, 125, 10, 10, 125, 10, 99, 111, 110, 115, 111, 108, 101, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 91, 111, 98, 106, 101, 99, 116, 32, 79, 98, 106, 101, 99, 116, 93, 39, 10, 99, 111, 110, 115, 111, 108, 101, 46, 108, 111, 103, 46, 116, 111, 83, 116, 114, 105, 110, 103, 32, 61, 32, 39, 402, 32, 116, 111, 83, 116, 114, 105, 110, 103, 40, 41, 32, 123, 32, 91, 110, 97, 116, 105, 118, 101, 32, 99, 111, 100, 101, 93, 32, 125, 39, 10];

function _0x1a4fa8(_0x51bd51, _0xaf54c7, _0xff5c3d, _0x259409, _0x1e130b, _0x4091ae, _0x375941) {
    return _0x44d977(_0xff5c3d ^ (_0xaf54c7 | ~_0x259409), _0x51bd51, _0xaf54c7, _0x1e130b, _0x4091ae, _0x375941);
}
function _0x9e3e41(_0x4f9d5c, _0x43df46, _0x3f8d54, _0xfcb2f9, _0x46b8fd, _0x5f03b2, _0x1af4a1) {
    return _0x44d977(_0x43df46 ^ _0x3f8d54 ^ _0xfcb2f9, _0x4f9d5c, _0x43df46, _0x46b8fd, _0x5f03b2, _0x1af4a1);
}
function _0x36405e(_0x32709e, _0x42c109, _0x4e4771, _0x251e37, _0x4a70f0, _0x82b7f4, _0x4c7448) {
    return _0x44d977(_0x42c109 & _0x251e37 | _0x4e4771 & ~_0x251e37, _0x32709e, _0x42c109, _0x4a70f0, _0x82b7f4, _0x4c7448);
}
function _0x75aa99(_0x5e68b6, _0x2220a7) {
    return _0x5e68b6 << _0x2220a7 | _0x5e68b6 >>> 32 - _0x2220a7;
}
function _0x1359df(_0x6f3b70, _0x26117e) {
    var _0x3a4b6e = (65535 & _0x6f3b70) + (65535 & _0x26117e);

    return (_0x6f3b70 >> 16) + (_0x26117e >> 16) + (_0x3a4b6e >> 16) << 16 | 65535 & _0x3a4b6e;
}
function _0x44d977(_0x4651ac, _0xcefffa, _0x37b382, _0x3c40c3, _0x167209, _0x27c509) {
    return _0x1359df(_0x75aa99(_0x1359df(_0x1359df(_0xcefffa, _0x4651ac), _0x1359df(_0x3c40c3, _0x27c509)), _0x167209), _0x37b382);
}
function _0x391046(_0x50bc81, _0x5eec23, _0x2b3094, _0x24625d, _0x119cfa, _0x140694, _0x1efa0d) {
    return _0x44d977(_0x5eec23 & _0x2b3094 | ~_0x5eec23 & _0x24625d, _0x50bc81, _0x5eec23, _0x119cfa, _0x140694, _0x1efa0d);
}
function _0x479c4c(_0x2fa9a1) {
    var _0xb4fd35,
        _0x54134d = [];

    for (_0x54134d[(_0x2fa9a1["length"] >> 2) - 1] = undefined, _0xb4fd35 = 0; _0xb4fd35 < _0x54134d["length"]; _0xb4fd35 += 1) _0x54134d[_0xb4fd35] = 0;

    var _0x44de26 = 8 * _0x2fa9a1["length"];

    for (_0xb4fd35 = 0; _0xb4fd35 < _0x44de26; _0xb4fd35 += 8) _0x54134d[_0xb4fd35 >> 5] |= (255 & _0x2fa9a1["charCodeAt"](_0xb4fd35 / 8)) << _0xb4fd35 % 32;

    return _0x54134d;
}
function _0x5da14f(_0x564727, _0x559642) {
    _0x564727[_0x559642 >> 5] |= 128 << _0x559642 % 32, _0x564727[14 + (_0x559642 + 64 >>> 9 << 4)] = _0x559642;

    if (qz) {
        var _0x51dfd2,
            _0x3d3290,
            _0x17553a,
            _0x3872e9,
            _0xd7a181,
            _0x484756 = 1732584193,
            _0x104810 = -271733879,
            _0x331cf9 = -1732584194,
            _0x2a454e = 271733878;
    } else {
        var _0x51dfd2,
            _0x3d3290,
            _0x17553a,
            _0x3872e9,
            _0xd7a181,
            _0x484756 = 0,
            _0x104810 = -0,
            _0x331cf9 = -0,
            _0x2a454e = 0;
    }

    for (_0x51dfd2 = 0; _0x51dfd2 < _0x564727["length"]; _0x51dfd2 += 16) _0x3d3290 = _0x484756, _0x17553a = _0x104810, _0x3872e9 = _0x331cf9, _0xd7a181 = _0x2a454e, _0x484756 = _0x391046(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2], 7, -680876936), _0x2a454e = _0x391046(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 1], 12, -389564586), _0x331cf9 = _0x391046(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 2], 17, 606105819), _0x104810 = _0x391046(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 3], 22, -1044525330), _0x484756 = _0x391046(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 4], 7, -176418897), _0x2a454e = _0x391046(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 5], 12, 1200080426), _0x331cf9 = _0x391046(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 6], 17, -1473231341), _0x104810 = _0x391046(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 7], 22, -45705983), _0x484756 = _0x391046(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 8], 7, 1770010416), _0x2a454e = _0x391046(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 9], 12, -1958414417), _0x331cf9 = _0x391046(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 10], 17, -42063), _0x104810 = _0x391046(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 11], 22, -1990404162), _0x484756 = _0x391046(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 12], 7, 1804603682), _0x2a454e = _0x391046(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 13], 12, -40341101), _0x331cf9 = _0x391046(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 14], 17, -1502882290), _0x104810 = _0x391046(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 15], 22, 1236535329), _0x484756 = _0x36405e(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 1], 5, -165796510), _0x2a454e = _0x36405e(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 6], 9, -1069501632), _0x331cf9 = _0x36405e(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 11], 14, 643717713), _0x104810 = _0x36405e(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2], 20, -373897302), _0x484756 = _0x36405e(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 5], 5, -701558691), _0x2a454e = _0x36405e(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 10], 9, 38016083), _0x331cf9 = _0x36405e(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 15], 14, -660478335), _0x104810 = _0x36405e(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 4], 20, -405537848), _0x484756 = _0x36405e(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 9], 5, 568446438), _0x2a454e = _0x36405e(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 14], 9, -1019803690), _0x331cf9 = _0x36405e(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 3], 14, -187363961), _0x104810 = _0x36405e(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 8], 20, 1163531501), _0x484756 = _0x36405e(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 13], 5, -1444681467), _0x2a454e = _0x36405e(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 2], 9, -51403784), _0x331cf9 = _0x36405e(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 7], 14, 1735328473), _0x104810 = _0x36405e(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 12], 20, -1926607734), _0x484756 = _0x9e3e41(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 5], 4, -378558), _0x2a454e = _0x9e3e41(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 8], 11, -2022574463), _0x331cf9 = _0x9e3e41(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 11], 16, 1839030562), _0x104810 = _0x9e3e41(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 14], 23, -35309556), _0x484756 = _0x9e3e41(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 1], 4, -1530992060), _0x2a454e = _0x9e3e41(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 4], 11, 1272893353), _0x331cf9 = _0x9e3e41(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 7], 16, -155497632), _0x104810 = _0x9e3e41(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 10], 23, -1094730640), _0x484756 = _0x9e3e41(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 13], 4, 681279174), _0x2a454e = _0x9e3e41(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2], 11, -358537222), _0x331cf9 = _0x9e3e41(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 3], 16, -722521979), _0x104810 = _0x9e3e41(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 6], 23, 76029189), _0x484756 = _0x9e3e41(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 9], 4, -640364487), _0x2a454e = _0x9e3e41(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 12], 11, -421815835), _0x331cf9 = _0x9e3e41(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 15], 16, 530742520), _0x104810 = _0x9e3e41(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 2], 23, -995338651), _0x484756 = _0x1a4fa8(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2], 6, -198630844), _0x2a454e = _0x1a4fa8(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 7], 10, 1126891415), _0x331cf9 = _0x1a4fa8(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 14], 15, -1416354905), _0x104810 = _0x1a4fa8(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 5], 21, -57434055), _0x484756 = _0x1a4fa8(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 12], 6, 1700485571), _0x2a454e = _0x1a4fa8(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 3], 10, -1894986606), _0x331cf9 = _0x1a4fa8(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 10], 15, -1051523), _0x104810 = _0x1a4fa8(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 1], 21, -2054922799), _0x484756 = _0x1a4fa8(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 8], 6, 1873313359), _0x2a454e = _0x1a4fa8(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 15], 10, -30611744), _0x331cf9 = _0x1a4fa8(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 6], 15, -1560198380), _0x104810 = _0x1a4fa8(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 13], 21, 1309151649), _0x484756 = _0x1a4fa8(_0x484756, _0x104810, _0x331cf9, _0x2a454e, _0x564727[_0x51dfd2 + 4], 6, -145523070), _0x2a454e = _0x1a4fa8(_0x2a454e, _0x484756, _0x104810, _0x331cf9, _0x564727[_0x51dfd2 + 11], 10, -1120210379), _0x331cf9 = _0x1a4fa8(_0x331cf9, _0x2a454e, _0x484756, _0x104810, _0x564727[_0x51dfd2 + 2], 15, 718787259), _0x104810 = _0x1a4fa8(_0x104810, _0x331cf9, _0x2a454e, _0x484756, _0x564727[_0x51dfd2 + 9], 21, -343485441), _0x484756 = _0x1359df(_0x484756, _0x3d3290), _0x104810 = _0x1359df(_0x104810, _0x17553a), _0x331cf9 = _0x1359df(_0x331cf9, _0x3872e9), _0x2a454e = _0x1359df(_0x2a454e, _0xd7a181);

    return [_0x484756, _0x104810, _0x331cf9, _0x2a454e];
}
function _0x39e510(_0x155a44) {
    var _0x1acff3,
        _0x2fc189 = "",
        _0x7fba2c = 32 * _0x155a44["length"];

    for (_0x1acff3 = 0; _0x1acff3 < _0x7fba2c; _0x1acff3 += 8) _0x2fc189 += String["fromCharCode"](_0x155a44[_0x1acff3 >> 5] >>> _0x1acff3 % 32 & 255);

    return _0x2fc189;
}
function _0x8d59d1(_0x58c5aa) {
    return unescape(encodeURIComponent(_0x58c5aa));
}
function _0x5e7de3(_0xc8b5c) {
    var _0x3ec67b,
        _0x374759,
        _0x585686 = "0123456789abcdef",
        _0x213d33 = "";

    for (_0x374759 = 0; _0x374759 < _0xc8b5c["length"]; _0x374759 += 1) _0x3ec67b = _0xc8b5c["charCodeAt"](_0x374759), _0x213d33 += _0x585686["charAt"](_0x3ec67b >>> 4 & 15) + _0x585686["charAt"](15 & _0x3ec67b);

    return _0x213d33;
}
function _0x510c61(_0x5a3052) {
    return _0x39e510(_0x5da14f(_0x479c4c(_0x5a3052), 8 * _0x5a3052["length"]));
}
function _0x17978a(_0x505998) {
    return _0x510c61(_0x8d59d1(_0x505998));
}
function _0x17a323(_0x23f94e) {
    return _0x5e7de3(_0x17978a(_0x23f94e));
}
function _0x5b4e70(_0x8141e9, _0x3d69a2) {
    return Date["parse"](new Date());
}
function _0x54aa22(_0x10b550, _0x46297f, _0x20678c) {
    //_0x2336ba();

    return _0x46297f ? _0x20678c ? _0x5a9235(_0x46297f, _0x10b550) : y(_0x46297f, _0x10b550) : _0x20678c ? _0x17978a(_0x10b550) : _0x17a323(_0x10b550);
}
function _0x3d79a6(_0x427bcf, _0x449f3c) {
    //document["cookie"] = "m" + _0x2336ba() + "=" + _0x54aa22(_0x427bcf) + "|" + _0x427bcf + "; path=/";
    //location["reload"]();
    return _0x54aa22(_0x427bcf) + "|" + _0x427bcf;
}
cookie_m = _0x3d79a6(_0x5b4e70())

console.log(cookie_m);

lxq301

来学习的，大神请赐教

小志威武

红红火火恍恍惚惚哈哈哈哈哈哈哈哈哈哈哈哈

nimingdi

来学习的，大神请赐教

heshilove

厉害，，，学习

陆小白

开源精神必须支持~

anyiy

持开源~！感谢分享

396384183

谢谢分享学习下

a393555242

1144624562

持开源~！感谢分享