devbox
很楠不爱3
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

京东联盟h5st(3.1)逆向分析_h5st 3.1

作者：很楠不爱3 | 2024-06-05 09:31:57

赞

踩

h5st 3.1

声明：本文仅作学习交流，请遵守法律法规，不要恶意爬取网站。

网址：'aHR0cHM6Ly91bmlvbi5qZC5jb20vcHJvTWFuYWdlci9pbmRleA=='

h5st是京东系的反爬方式，即在接口中加上一个叫h5st的参数，h5st加密有不同的版本。本文提到的网站不是京东网站，是和京东有关联的一个网站，也有h5st参数，是3.1版本。

分析接口

要分析的是一个‘全部商品’接口，找到接口后先分析必要的参数。逐个分析可以发现必要的参数有headers中的origin和user-agent；cookies中的thor，以及params

很容易发现 headers和params中的functionId、appid、loginType是固定值，_是时间戳

需要参数来源的是cookies中的thor；params中的uuid、x-api-eid-token、h5st以及body中的searchUUID

再进一步分析会发现thor、uuid和x-api-eid-token都来源于cookies，分别对应thor、__jdu和3AB9D23F7A4B3CSS

没必要较劲他的什么时候产生的，哪个接口返回的，直接写死得了

所以我们重点要逆向的是h5st和searchUUID

逆向参数

h5st在源代码中位置倒是挺少，点进去打上断点跟代码，你会发现，等到了断点处，h5st的值已经产生了

怎么定位到具体的代码位置是在是个难点，唯有大胆猜测小心求证，逐步调试，观察作用域中参数值的变化

这里直接上结果：

searchUUID是一个随机字符串，每次切换页面时会变化，很好抠，也可以固定；

body先经过加密得到一个64位字符串，然后和其他的字符串拼接组成了h5st

body加密的位置：

body: K()(k()(i)).toString()

h5st加密的位置：

var D = this["__genSignP" + d(0, 1516, 1351)](z, c, a, r);

 至此我们可以再去看一下h5st的组成：

  1. h5st: 20240226121601029;1733260139752348;586ae;tk03w04801dbb18nDfQXSjnTtkviyKrnh_npbbTrMXmrKSOfOfS6hSPJmKG_uyEocdAqBwHSNZYf4R8HHwT9MJBgpgyG;ac2846635dfb61c405b4ee623bccd274eb35866e3a3e9195013f2eeeb72f2db6;3.1;1708920961029;24c9ee85e67cf80746dd82817ecbeafc7a829b35c7f446a4c7d476cc9faa1d8834a93323ad7bce9bef1bba682b93d2e355076cc27b11bb228be53f32ed20565266eae147141141e0d154463e1733333213609f805a4de2ddf29a06541f6bb9892b80989b96d4724a0aaba834467cab40debef3f59396c2874c1a5d3ee361ffc6
  2.  
  3. //  yyyyMMddhhmmssSSS格式的日期字符串
  4. 20240226121601029;
  5. //  浏览器指纹  跟浏览器有关 可以是固定值
  6. 1733260139752348;
  7. //  appID 固定值
  8. 586ae;
  9. //  token 应该是某个接口的返回值  可以是固定值
  10. tk03w04801dbb18nDfQXSjnTtkviyKrnh_npbbTrMXmrKSOfOfS6hSPJmKG_uyEocdAqBwHSNZYf4R8HHwT9MJBgpgyG;
  11. //  加密字符串  跟body有关  需破解
  12. ac2846635dfb61c405b4ee623bccd274eb35866e3a3e9195013f2eeeb72f2db6;
  13. //  h5st版本号  固定值
  14. 3.1;
  15. //  时间戳
  16. 1708920961029;
  17. //  跟环境相关 可以是固定值
  18. 24c9ee85e67cf80746dd82817ecbeafc7a829b35c7f446a4c7d476cc9faa1d8834a93323ad7bce9bef1bba682b93d2e355076cc27b11bb228be53f32ed20565266eae147141141e0d154463e1733333213609f805a4de2ddf29a06541f6bb9892b80989b96d4724a0aaba834467cab40debef3f59396c2874c1a5d3ee361ffc6

所以接下来就重点抠出h5st中第5段字符串的加密即可

成果展示

  1. const CryptoJS = require('crypto-js');
  2. var wp;
  3. window = global;
  4.  
  5. var _ts = Date.now(),
  6.     _fp = '1733260139752348',
  7.     _appId = '586ae',
  8.     _token = "tk03wb3c91c5518nXSL2egI9QuTKOLXLWBjx5lwKOpslUAXudyJSt0AmNRFyy4si5VCp4NpZB8wclFWOpK07zoso0J6C",
  9.     _version = '3.1',
  10.     _unknown = '24c9ee85e67cf80746dd82817ecbeafc7a829b35c7f446a4c7d476cc9faa1d8834a93323ad7bce9bef1bba682b93d2e355076cc27b11bb228be53f32ed20565266eae147141141e0d154463e1733333213609f805a4de2ddf29a06541f6bb9892b80989b96d4724a0aaba834467cab40debef3f59396c2874c1a5d3ee361ffc6'
  11.  
  12. var _td = ts2format(_ts)
  13.  
  14. !function (o) {
  15.     "use strict";
  16.     var e, n, t, a = {};
  17.  
  18.     function r(e) {
  19.         var n = a[e];
  20.         if (void 0 !== n)
  21.             return n.exports;
  22.         var t = a[e] = {
  23.             id: e,
  24.             loaded: !1,
  25.             exports: {}
  26.         };
  27.         // console.log(e)
  28.         return o[e].call(t.exports, t, t.exports, r),
  29.             t.loaded = !0,
  30.             t.exports
  31.     }
  32.  
  33.     r.m = o,
  34.         e = [],
  35.         r.O = function (n, t, o, a) {
  36.             if (!t) {
  37.                 var c = 1 / 0;
  38.                 for (u = 0; u < e.length; u++) {
  39.                     t = e[u][0],
  40.                         o = e[u][1],
  41.                         a = e[u][2];
  42.                     for (var i = !0, f = 0; f < t.length; f++)
  43.                         (!1 & a || c >= a) && Object.keys(r.O).every((function (e) {
  44.                                 return r.O[e](t[f])
  45.                             }
  46.                         )) ? t.splice(f--, 1) : (i = !1,
  47.                         a < c && (c = a));
  48.                     if (i) {
  49.                         e.splice(u--, 1);
  50.                         var d = o();
  51.                         void 0 !== d && (n = d)
  52.                     }
  53.                 }
  54.                 return n
  55.             }
  56.             a = a || 0;
  57.             for (var u = e.length; u > 0 && e[u - 1][2] > a; u--)
  58.                 e[u] = e[u - 1];
  59.             e[u] = [t, o, a]
  60.         }
  61.         ,
  62.         r.n = function (e) {
  63.             var n = e && e.__esModule ? function () {
  64.                     return e.default
  65.                 }
  66.                 : function () {
  67.                     return e
  68.                 }
  69.             ;
  70.             return r.d(n, {
  71.                 a: n
  72.             }),
  73.                 n
  74.         }
  75.         ,
  76.         r.d = function (e, n) {
  77.             for (var t in n)
  78.                 r.o(n, t) && !r.o(e, t) && Object.defineProperty(e, t, {
  79.                     enumerable: !0,
  80.                     get: n[t]
  81.                 })
  82.         }
  83.         ,
  84.         r.f = {},
  85.         r.e = function (e) {
  86.             return Promise.all(Object.keys(r.f).reduce((function (n, t) {
  87.                     return r.f[t](e, n),
  88.                         n
  89.                 }
  90.             ), []))
  91.         }
  92.         ,
  93.         r.u = function (e) {
  94.             return {
  95.                 34: "biservicefee",
  96.                 81: "promotion",
  97.                 378: "user",
  98.                 410: "marketActivities",
  99.                 621: "entire",
  100.                 685: "lineReport",
  101.                 869: "createShop",
  102.                 917: "agreement",
  103.                 929: "common-731babaf",
  104.                 973: "common-43dd7041",
  105.                 1131: "appMng",
  106.                 1276: "shopActPromotion",
  107.                 1288: "myApi",
  108.                 1621: "investmentEffect",
  109.                 1666: "planDetails",
  110.                 1806: "officalPromotion",
  111.                 1884: "taskDetail",
  112.                 1913: "jdauthentication",
  113.                 1970: "newWithdraw",
  114.                 1992: "cashDetail",
  115.                 2337: "withdraw",
  116.                 2412: "socialMediaMng",
  117.                 2479: "marketingCalendar",
  118.                 2481: "realTimeScreen",
  119.                 2527: "withdrawRecord",
  120.                 2690: "couponList",
  121.                 2795: "cashGiftCreate",
  122.                 2832: "taskSquare",
  123.                 2951: "RewardActivity",
  124.                 2970: "articlePromotion",
  125.                 2992: "myTask",
  126.                 3012: "subCommission",
  127.                 3386: "cashGiftDeposit",
  128.                 3513: "trafficMediaMng",
  129.                 3583: "webExtension",
  130.                 3712: "openplatform-9a53bcac",
  131.                 3756: "shopPromotion",
  132.                 3761: "openplatform-9a6b8f1e",
  133.                 3765: "skuAnalyse",
  134.                 3779: "active",
  135.                 3888: "external",
  136.                 3940: "cashCoupon",
  137.                 4163: "InterfaceManagement",
  138.                 4256: "channel",
  139.                 4565: "common-d91a9049",
  140.                 4738: "cpcMedia",
  141.                 4843: "openplatform-d91a9049",
  142.                 4962: "common-8912b8e4",
  143.                 5001: "groupList",
  144.                 5075: "planList",
  145.                 5142: "reverseInvestment",
  146.                 5177: "home",
  147.                 5313: "myStarEnlist2",
  148.                 5413: "recommendMng",
  149.                 5512: "accounting",
  150.                 5549: "jingPlanMng",
  151.                 5724: "common-69b0bd4f",
  152.                 5769: "appMedia",
  153.                 5847: "socialMediaExtension",
  154.                 5863: "projectDetail",
  155.                 6026: "InvestmentData",
  156.                 6103: "common-b4fa4e1a",
  157.                 6419: "batchMng",
  158.                 6596: "404",
  159.                 6653: "DataPromotion",
  160.                 6659: "common-4720890c",
  161.                 6682: "appExtension",
  162.                 6810: "common-c7713fe4",
  163.                 7012: "shopPromotionDetail",
  164.                 7066: "secretOrder",
  165.                 7253: "shopAnalyse",
  166.                 7468: "openOrder",
  167.                 7815: "chatExtension",
  168.                 7899: "custompromotion",
  169.                 7991: "webMng",
  170.                 8022: "cashGiftDepositResult",
  171.                 8273: "actAnalyse",
  172.                 8277: "cashGift",
  173.                 8300: "msg",
  174.                 8429: "helpcenter",
  175.                 8442: "moreProductList",
  176.                 8608: "channelPromotion",
  177.                 8722: "common-fb051ecb",
  178.                 8924: "initRevGroup",
  179.                 8983: "report",
  180.                 8989: "common-a07e9f05",
  181.                 9206: "trafficMediaExtension",
  182.                 9223: "initiate",
  183.                 9557: "couponPromotion",
  184.                 9621: "myInvoice",
  185.                 9664: "taskEffectData",
  186.                 9704: "batchDetail",
  187.                 9734: "myShop",
  188.                 9830: "darenBank",
  189.                 9847: "userTask",
  190.                 9851: "common-c0d952d5",
  191.                 9920: "operate",
  192.                 9940: "promotionSite",
  193.                 9974: "myStarEnlist"
  194.             }[e] + "." + {
  195.                 34: "884dabbf",
  196.                 81: "516fbf65",
  197.                 378: "4fa7f455",
  198.                 410: "f3b3ce65",
  199.                 621: "779cbc2d",
  200.                 685: "635b41c3",
  201.                 869: "6e91e04e",
  202.                 917: "8931b075",
  203.                 929: "3c7249c4",
  204.                 973: "dd604fd9",
  205.                 1131: "5c758086",
  206.                 1276: "4afef4b0",
  207.                 1288: "efd9ca56",
  208.                 1621: "dd68ef97",
  209.                 1666: "15ddc024",
  210.                 1806: "2ce9aabc",
  211.                 1884: "26a69c37",
  212.                 1913: "7cf33bc8",
  213.                 1970: "2f4e7bbb",
  214.                 1992: "ede710f5",
  215.                 2337: "ed174f32",
  216.                 2412: "35ff0de8",
  217.                 2479: "a21c8c42",
  218.                 2481: "6fed6857",
  219.                 2527: "6a37ef3c",
  220.                 2690: "64ddf7cc",
  221.                 2795: "a674eb69",
  222.                 2832: "feecd3be",
  223.                 2951: "93b3e34d",
  224.                 2970: "0384070e",
  225.                 2992: "be5042ce",
  226.                 3012: "2347219c",
  227.                 3386: "1a1f7d84",
  228.                 3513: "c04a31fc",
  229.                 3583: "f5d3ef48",
  230.                 3712: "e2f73577",
  231.                 3756: "7a6444be",
  232.                 3761: "53e3439b",
  233.                 3765: "a4ec0efd",
  234.                 3779: "38223816",
  235.                 3888: "fce9007a",
  236.                 3940: "6e0a2517",
  237.                 4163: "f5764a34",
  238.                 4256: "d71746f3",
  239.                 4565: "38532a63",
  240.                 4738: "d5a92ea5",
  241.                 4843: "ac578919",
  242.                 4962: "46dd7b93",
  243.                 5001: "6ffabe1f",
  244.                 5075: "bf8fe0b0",
  245.                 5142: "f02f701e",
  246.                 5177: "95d0d33a",
  247.                 5313: "81217ce7",
  248.                 5413: "c7fd2e9a",
  249.                 5512: "9f7c1dc7",
  250.                 5549: "b90e6eb0",
  251.                 5724: "fae8a443",
  252.                 5769: "3026d89e",
  253.                 5847: "88f445a5",
  254.                 5863: "26a850a1",
  255.                 6026: "d554b6c8",
  256.                 6103: "9a594517",
  257.                 6419: "8a5d5b4f",
  258.                 6596: "43477835",
  259.                 6653: "e904d280",
  260.                 6659: "c79c71eb",
  261.                 6682: "9a980d14",
  262.                 6810: "767f177d",
  263.                 7012: "310763bf",
  264.                 7066: "0930edea",
  265.                 7253: "093b1d51",
  266.                 7468: "abc74f1b",
  267.                 7815: "7176c4b5",
  268.                 7899: "e3745e3e",
  269.                 7991: "bf2e88d9",
  270.                 8022: "0b3b8d2b",
  271.                 8273: "7597ef4f",
  272.                 8277: "4abc271d",
  273.                 8300: "386bd6f1",
  274.                 8429: "0a43b716",
  275.                 8442: "866be077",
  276.                 8608: "ce7516bf",
  277.                 8722: "d3db8be6",
  278.                 8924: "e678bf90",
  279.                 8983: "0eb1ef70",
  280.                 8989: "ba78e6ab",
  281.                 9206: "178b940f",
  282.                 9223: "bfda0e2b",
  283.                 9557: "a25c4ce7",
  284.                 9621: "56164042",
  285.                 9664: "fa4795b0",
  286.                 9704: "5721dc0a",
  287.                 9734: "74dcc744",
  288.                 9830: "de870bad",
  289.                 9847: "2b8f9834",
  290.                 9851: "cf04e91b",
  291.                 9920: "f2cde753",
  292.                 9940: "eb35820c",
  293.                 9974: "a83b6246"
  294.             }[e] + ".js"
  295.         }
  296.         ,
  297.         r.g = function () {
  298.             if ("object" == typeof globalThis)
  299.                 return globalThis;
  300.             try {
  301.                 return this || new Function("return this")()
  302.             } catch (e) {
  303.                 if ("object" == typeof window)
  304.                     return window
  305.             }
  306.         }(),
  307.         r.o = function (e, n) {
  308.             return Object.prototype.hasOwnProperty.call(e, n)
  309.         }
  310.         ,
  311.         n = {},
  312.         t = "JDUnion:",
  313.         r.l = function (e, o, a, c) {
  314.             if (n[e])
  315.                 n[e].push(o);
  316.             else {
  317.                 var i, f;
  318.                 if (void 0 !== a)
  319.                     for (var d = document.getElementsByTagName("script"), u = 0; u < d.length; u++) {
  320.                         var b = d[u];
  321.                         if (b.getAttribute("src") == e || b.getAttribute("data-webpack") == t + a) {
  322.                             i = b;
  323.                             break
  324.                         }
  325.                     }
  326.                 i || (f = !0,
  327.                     (i = document.createElement("script")).charset = "utf-8",
  328.                     i.timeout = 120,
  329.                 r.nc && i.setAttribute("nonce", r.nc),
  330.                     i.setAttribute("data-webpack", t + a),
  331.                     i.src = e),
  332.                     n[e] = [o];
  333.                 var s = function (t, o) {
  334.                     i.onerror = i.onload = null,
  335.                         clearTimeout(l);
  336.                     var a = n[e];
  337.                     if (delete n[e],
  338.                     i.parentNode && i.parentNode.removeChild(i),
  339.                     a && a.forEach((function (e) {
  340.                             return e(o)
  341.                         }
  342.                     )),
  343.                         t)
  344.                         return t(o)
  345.                 }
  346.                     , l = setTimeout(s.bind(null, void 0, {
  347.                     type: "timeout",
  348.                     target: i
  349.                 }), 12e4);
  350.                 i.onerror = s.bind(null, i.onerror),
  351.                     i.onload = s.bind(null, i.onload),
  352.                 f && document.head.appendChild(i)
  353.             }
  354.         }
  355.         ,
  356.         r.r = function (e) {
  357.             "undefined" != typeof Symbol && Symbol.toStringTag && Object.defineProperty(e, Symbol.toStringTag, {
  358.                 value: "Module"
  359.             }),
  360.                 Object.defineProperty(e, "__esModule", {
  361.                     value: !0
  362.                 })
  363.         }
  364.         ,
  365.         r.nmd = function (e) {
  366.             return e.paths = [],
  367.             e.children || (e.children = []),
  368.                 e
  369.         }
  370.         ,
  371.         r.p = "//storage.360buyimg.com/pubfree-bucket/unionpc/b7e5298d5/",
  372.         function () {
  373.             var e = {
  374.                 6700: 0
  375.             };
  376.             r.f.j = function (n, t) {
  377.                 var o = r.o(e, n) ? e[n] : void 0;
  378.                 if (0 !== o)
  379.                     if (o)
  380.                         t.push(o[2]);
  381.                     else if (6700 != n) {
  382.                         var a = new Promise((function (t, a) {
  383.                                 o = e[n] = [t, a]
  384.                             }
  385.                         ));
  386.                         t.push(o[2] = a);
  387.                         var c = r.p + r.u(n)
  388.                             , i = new Error;
  389.                         r.l(c, (function (t) {
  390.                                 if (r.o(e, n) && (0 !== (o = e[n]) && (e[n] = void 0),
  391.                                     o)) {
  392.                                     var a = t && ("load" === t.type ? "missing" : t.type)
  393.                                         , c = t && t.target && t.target.src;
  394.                                     i.message = "Loading chunk " + n + " failed.\n(" + a + ": " + c + ")",
  395.                                         i.name = "ChunkLoadError",
  396.                                         i.type = a,
  397.                                         i.request = c,
  398.                                         o[1](i)
  399.                                 }
  400.                             }
  401.                         ), "chunk-" + n, n)
  402.                     } else
  403.                         e[n] = 0
  404.             }
  405.                 ,
  406.                 r.O.j = function (n) {
  407.                     return 0 === e[n]
  408.                 }
  409.             ;
  410.             var n = function (n, t) {
  411.                 var o, a, c = t[0], i = t[1], f = t[2], d = 0;
  412.                 if (c.some((function (n) {
  413.                         return 0 !== e[n]
  414.                     }
  415.                 ))) {
  416.                     for (o in i)
  417.                         r.o(i, o) && (r.m[o] = i[o]);
  418.                     if (f)
  419.                         var u = f(r)
  420.                 }
  421.                 for (n && n(t); d < c.length; d++)
  422.                     a = c[d],
  423.                     r.o(e, a) && e[a] && e[a][0](),
  424.                         e[a] = 0;
  425.                 return r.O(u)
  426.             }
  427.                 , t = window.webpackChunkJDUnion = window.webpackChunkJDUnion || [];
  428.             t.forEach(n.bind(null, 0)),
  429.                 t.push = n.bind(null, t.push.bind(t))
  430.         }(),
  431.         r.nc = void 0
  432.     wp = r
  433. }({
  434.     78249: function (t, n, e) {
  435.         var i;
  436.         t.exports = (i = i || function (t, n) {
  437.             var i;
  438.             if ("undefined" != typeof window && window.crypto && (i = window.crypto),
  439.             "undefined" != typeof self && self.crypto && (i = self.crypto),
  440.             "undefined" != typeof globalThis && globalThis.crypto && (i = globalThis.crypto),
  441.             !i && "undefined" != typeof window && window.msCrypto && (i = window.msCrypto),
  442.             !i && void 0 !== e.g && e.g.crypto && (i = e.g.crypto),
  443.                 !i)
  444.                 try {
  445.                     i = e(42480)
  446.                 } catch (t) {
  447.                 }
  448.             var r = function () {
  449.                 if (i) {
  450.                     if ("function" == typeof i.getRandomValues)
  451.                         try {
  452.                             return i.getRandomValues(new Uint32Array(1))[0]
  453.                         } catch (t) {
  454.                         }
  455.                     if ("function" == typeof i.randomBytes)
  456.                         try {
  457.                             return i.randomBytes(4).readInt32LE()
  458.                         } catch (t) {
  459.                         }
  460.                 }
  461.                 throw new Error("Native crypto module could not be used to get secure random number.")
  462.             }
  463.                 , s = Object.create || function () {
  464.                 function t() {
  465.                 }
  466.  
  467.                 return function (n) {
  468.                     var e;
  469.                     return t.prototype = n,
  470.                         e = new t,
  471.                         t.prototype = null,
  472.                         e
  473.                 }
  474.             }()
  475.                 , o = {}
  476.                 , u = o.lib = {}
  477.                 , f = u.Base = {
  478.                 extend: function (t) {
  479.                     var n = s(this);
  480.                     return t && n.mixIn(t),
  481.                     n.hasOwnProperty("init") && this.init !== n.init || (n.init = function () {
  482.                             n.$super.init.apply(this, arguments)
  483.                         }
  484.                     ),
  485.                         n.init.prototype = n,
  486.                         n.$super = this,
  487.                         n
  488.                 },
  489.                 create: function () {
  490.                     var t = this.extend();
  491.                     return t.init.apply(t, arguments),
  492.                         t
  493.                 },
  494.                 init: function () {
  495.                 },
  496.                 mixIn: function (t) {
  497.                     for (var n in t)
  498.                         t.hasOwnProperty(n) && (this[n] = t[n]);
  499.                     t.hasOwnProperty("toString") && (this.toString = t.toString)
  500.                 },
  501.                 clone: function () {
  502.                     return this.init.prototype.extend(this)
  503.                 }
  504.             }
  505.                 , h = u.WordArray = f.extend({
  506.                 init: function (t, n) {
  507.                     t = this.words = t || [],
  508.                         this.sigBytes = null != n ? n : 4 * t.length
  509.                 },
  510.                 toString: function (t) {
  511.                     return (t || l).stringify(this)
  512.                 },
  513.                 concat: function (t) {
  514.                     var n = this.words
  515.                         , e = t.words
  516.                         , i = this.sigBytes
  517.                         , r = t.sigBytes;
  518.                     if (this.clamp(),
  519.                     i % 4)
  520.                         for (var s = 0; s < r; s++) {
  521.                             var o = e[s >>> 2] >>> 24 - s % 4 * 8 & 255;
  522.                             n[i + s >>> 2] |= o << 24 - (i + s) % 4 * 8
  523.                         }
  524.                     else
  525.                         for (var u = 0; u < r; u += 4)
  526.                             n[i + u >>> 2] = e[u >>> 2];
  527.                     return this.sigBytes += r,
  528.                         this
  529.                 },
  530.                 clamp: function () {
  531.                     var n = this.words
  532.                         , e = this.sigBytes;
  533.                     n[e >>> 2] &= 4294967295 << 32 - e % 4 * 8,
  534.                         n.length = t.ceil(e / 4)
  535.                 },
  536.                 clone: function () {
  537.                     var t = f.clone.call(this);
  538.                     return t.words = this.words.slice(0),
  539.                         t
  540.                 },
  541.                 random: function (t) {
  542.                     for (var n = [], e = 0; e < t; e += 4)
  543.                         n.push(r());
  544.                     return new h.init(n, t)
  545.                 }
  546.             })
  547.                 , c = o.enc = {}
  548.                 , l = c.Hex = {
  549.                 stringify: function (t) {
  550.                     for (var n = t.words, e = t.sigBytes, i = [], r = 0; r < e; r++) {
  551.                         var s = n[r >>> 2] >>> 24 - r % 4 * 8 & 255;
  552.                         i.push((s >>> 4).toString(16)),
  553.                             i.push((15 & s).toString(16))
  554.                     }
  555.                     return i.join("")
  556.                 },
  557.                 parse: function (t) {
  558.                     for (var n = t.length, e = [], i = 0; i < n; i += 2)
  559.                         e[i >>> 3] |= parseInt(t.substr(i, 2), 16) << 24 - i % 8 * 4;
  560.                     return new h.init(e, n / 2)
  561.                 }
  562.             }
  563.                 , a = c.Latin1 = {
  564.                 stringify: function (t) {
  565.                     for (var n = t.words, e = t.sigBytes, i = [], r = 0; r < e; r++) {
  566.                         var s = n[r >>> 2] >>> 24 - r % 4 * 8 & 255;
  567.                         i.push(String.fromCharCode(s))
  568.                     }
  569.                     return i.join("")
  570.                 },
  571.                 parse: function (t) {
  572.                     for (var n = t.length, e = [], i = 0; i < n; i++)
  573.                         e[i >>> 2] |= (255 & t.charCodeAt(i)) << 24 - i % 4 * 8;
  574.                     return new h.init(e, n)
  575.                 }
  576.             }
  577.                 , d = c.Utf8 = {
  578.                 stringify: function (t) {
  579.                     try {
  580.                         return decodeURIComponent(escape(a.stringify(t)))
  581.                     } catch (t) {
  582.                         throw new Error("Malformed UTF-8 data")
  583.                     }
  584.                 },
  585.                 parse: function (t) {
  586.                     return a.parse(unescape(encodeURIComponent(t)))
  587.                 }
  588.             }
  589.                 , p = u.BufferedBlockAlgorithm = f.extend({
  590.                 reset: function () {
  591.                     this._data = new h.init,
  592.                         this._nDataBytes = 0
  593.                 },
  594.                 _append: function (t) {
  595.                     "string" == typeof t && (t = d.parse(t)),
  596.                         this._data.concat(t),
  597.                         this._nDataBytes += t.sigBytes
  598.                 },
  599.                 _process: function (n) {
  600.                     var e, i = this._data, r = i.words, s = i.sigBytes, o = this.blockSize, u = s / (4 * o),
  601.                         f = (u = n ? t.ceil(u) : t.max((0 | u) - this._minBufferSize, 0)) * o, c = t.min(4 * f, s);
  602.                     if (f) {
  603.                         for (var l = 0; l < f; l += o)
  604.                             this._doProcessBlock(r, l);
  605.                         e = r.splice(0, f),
  606.                             i.sigBytes -= c
  607.                     }
  608.                     return new h.init(e, c)
  609.                 },
  610.                 clone: function () {
  611.                     var t = f.clone.call(this);
  612.                     return t._data = this._data.clone(),
  613.                         t
  614.                 },
  615.                 _minBufferSize: 0
  616.             })
  617.                 , g = (u.Hasher = p.extend({
  618.                 cfg: f.extend(),
  619.                 init: function (t) {
  620.                     this.cfg = this.cfg.extend(t),
  621.                         this.reset()
  622.                 },
  623.                 reset: function () {
  624.                     p.reset.call(this),
  625.                         this._doReset()
  626.                 },
  627.                 update: function (t) {
  628.                     return this._append(t),
  629.                         this._process(),
  630.                         this
  631.                 },
  632.                 finalize: function (t) {
  633.                     return t && this._append(t),
  634.                         this._doFinalize()
  635.                 },
  636.                 blockSize: 16,
  637.                 _createHelper: function (t) {
  638.                     return function (n, e) {
  639.                         return new t.init(e).finalize(n)
  640.                     }
  641.                 },
  642.                 _createHmacHelper: function (t) {
  643.                     return function (n, e) {
  644.                         return new g.HMAC.init(t, e).finalize(n)
  645.                     }
  646.                 }
  647.             }),
  648.                 o.algo = {});
  649.             return o
  650.         }(Math),
  651.             i)
  652.     },
  653.     52153: function (t, n, e) {
  654.         var i;
  655.         t.exports = (i = e(78249),
  656.             function (t) {
  657.                 var n = i
  658.                     , e = n.lib
  659.                     , r = e.WordArray
  660.                     , s = e.Hasher
  661.                     , o = n.algo
  662.                     , u = []
  663.                     , f = [];
  664.                 !function () {
  665.                     function n(n) {
  666.                         for (var e = t.sqrt(n), i = 2; i <= e; i++)
  667.                             if (!(n % i))
  668.                                 return !1;
  669.                         return !0
  670.                     }
  671.  
  672.                     function e(t) {
  673.                         return 4294967296 * (t - (0 | t)) | 0
  674.                     }
  675.  
  676.                     for (var i = 2, r = 0; r < 64;)
  677.                         n(i) && (r < 8 && (u[r] = e(t.pow(i, .5))),
  678.                             f[r] = e(t.pow(i, 1 / 3)),
  679.                             r++),
  680.                             i++
  681.                 }();
  682.                 var h = []
  683.                     , c = o.SHA256 = s.extend({
  684.                     _doReset: function () {
  685.                         this._hash = new r.init(u.slice(0))
  686.                     },
  687.                     _doProcessBlock: function (t, n) {
  688.                         for (var e = this._hash.words, i = e[0], r = e[1], s = e[2], o = e[3], u = e[4], c = e[5], l = e[6], a = e[7], d = 0; d < 64; d++) {
  689.                             if (d < 16)
  690.                                 h[d] = 0 | t[n + d];
  691.                             else {
  692.                                 var p = h[d - 15]
  693.                                     , g = (p << 25 | p >>> 7) ^ (p << 14 | p >>> 18) ^ p >>> 3
  694.                                     , m = h[d - 2]
  695.                                     , y = (m << 15 | m >>> 17) ^ (m << 13 | m >>> 19) ^ m >>> 10;
  696.                                 h[d] = g + h[d - 7] + y + h[d - 16]
  697.                             }
  698.                             var v = i & r ^ i & s ^ r & s
  699.                                 , w = (i << 30 | i >>> 2) ^ (i << 19 | i >>> 13) ^ (i << 10 | i >>> 22)
  700.                                 ,
  701.                                 $ = a + ((u << 26 | u >>> 6) ^ (u << 21 | u >>> 11) ^ (u << 7 | u >>> 25)) + (u & c ^ ~u & l) + f[d] + h[d];
  702.                             a = l,
  703.                                 l = c,
  704.                                 c = u,
  705.                                 u = o + $ | 0,
  706.                                 o = s,
  707.                                 s = r,
  708.                                 r = i,
  709.                                 i = $ + (w + v) | 0
  710.                         }
  711.                         e[0] = e[0] + i | 0,
  712.                             e[1] = e[1] + r | 0,
  713.                             e[2] = e[2] + s | 0,
  714.                             e[3] = e[3] + o | 0,
  715.                             e[4] = e[4] + u | 0,
  716.                             e[5] = e[5] + c | 0,
  717.                             e[6] = e[6] + l | 0,
  718.                             e[7] = e[7] + a | 0
  719.                     },
  720.                     _doFinalize: function () {
  721.                         var n = this._data
  722.                             , e = n.words
  723.                             , i = 8 * this._nDataBytes
  724.                             , r = 8 * n.sigBytes;
  725.                         return e[r >>> 5] |= 128 << 24 - r % 32,
  726.                             e[14 + (r + 64 >>> 9 << 4)] = t.floor(i / 4294967296),
  727.                             e[15 + (r + 64 >>> 9 << 4)] = i,
  728.                             n.sigBytes = 4 * e.length,
  729.                             this._process(),
  730.                             this._hash
  731.                     },
  732.                     clone: function () {
  733.                         var t = s.clone.call(this);
  734.                         return t._hash = this._hash.clone(),
  735.                             t
  736.                     }
  737.                 });
  738.                 n.SHA256 = s._createHelper(c),
  739.                     n.HmacSHA256 = s._createHmacHelper(c)
  740.             }(Math),
  741.             i.SHA256)
  742.     },
  743. });
  744.  
  745. function ts2format(ts) {
  746.     const date = new Date(ts);
  747.     const y = date.getFullYear(),
  748.         m = String(date.getMonth() + 1).padStart(2, '0'),
  749.         d = String(date.getDate()).padStart(2, '0'),
  750.         h = String(date.getHours()).padStart(2, '0'),
  751.         mi = String(date.getMinutes()).padStart(2, '0'),
  752.         s = String(date.getSeconds()).padStart(2, '0'),
  753.         ms = String(date.getMilliseconds()).padStart(3, '0')
  754.     return `${y}${m}${d}${h}${mi}${s}${ms}`;
  755. }
  756.  
  757. function body(obj) {
  758.     const F = wp(52153),
  759.         K = wp.n(F),
  760.         args_str = JSON.stringify(obj)
  761.     return K()(args_str).toString()
  762. }
  763.  
  764. function secret_str() {
  765.     var rd = '4LP439v0MSSD';
  766.     var str = "".concat(_token).concat(_fp).concat(_td).concat(_appId).concat(rd);
  767.     return CryptoJS.SHA256(str).toString(CryptoJS.enc.Hex);
  768. }
  769.  
  770. function encrypt_data(r, i) {
  771.     function convertToQueryString(data) {
  772.         return data.map(item => `${item.key}:${item.value}`).join('&');
  773.     }
  774.  
  775.     const c = convertToQueryString(i)
  776.     return CryptoJS.HmacSHA256(c, r).toString(CryptoJS.enc.Hex)
  777. }
  778.  
  779. function h5st(p) {
  780.     const b = body(p)
  781.     const jsonArray = [
  782.         {
  783.             "key": "appid",
  784.             "value": "unionpc"
  785.         },
  786.         {
  787.             "key": "body",
  788.             "value": b
  789.         },
  790.         {
  791.             "key": "functionId",
  792.             "value": "unionSearch"
  793.         }
  794.     ]
  795.     const secret = secret_str()
  796.     const _encrypt = encrypt_data(secret, jsonArray)
  797.  
  798.     const dt = "".concat(_td),
  799.         fp = "".concat(_fp),
  800.         appId = "".concat(_appId),
  801.         tk = "".concat(_token),
  802.         encrypt = "".concat(_encrypt),
  803.         version = "".concat(_version),
  804.         ts = "".concat(_ts),
  805.         unknown = "".concat(_unknown)
  806.     return [dt, fp, appId, tk, encrypt, version, ts, unknown].join(";")
  807. }
  808.  
  809.  
  810. e = {
  811.     "funName": "search",
  812.     "version": "v3",
  813.     "source": 20310,
  814.     "param": {
  815.         "pageNo": 2,
  816.         "pageSize": 60,
  817.         "searchUUID": "e7fb274ce31247e689982c7375d29f5e",
  818.         "bonusIds": null,
  819.         "category1": null,
  820.         "category2": null,
  821.         "category3": null,
  822.         "deliveryType": null,
  823.         "wlRate": null,
  824.         "maxWlRate": null,
  825.         "fromPrice": null,
  826.         "toPrice": null,
  827.         "hasCoupon": null,
  828.         "isHot": null,
  829.         "isNeedPreSale": null,
  830.         "isPinGou": null,
  831.         "isZY": null,
  832.         "isCare": null,
  833.         "lock": null,
  834.         "orientationFlag": null,
  835.         "sort": null,
  836.         "sortName": null,
  837.         "keyWord": "",
  838.         "searchType": "st3",
  839.         "keywordType": "kt0"
  840.     },
  841.     "clientPageId": "jingfen_pc"
  842. }
  843. hs = h5st(e)
  844. console.log("h5st:", hs);
  845.  

  1. import json
  2. import requests
  3. import execjs
  4.  
  5.  
  6. thor = ''
  7. _jdu = ''
  8. _3AB9D23F7A4B3CSS = ''
  9.  
  10. url = "https://api.m.jd.com/api"
  11. headers = {
  12.     "Accept": "application/json, text/plain, */*",
  13.     "origin": "https://union.jd.com",
  14.     "Referer": "https://union.jd.com/",
  15.     "X-Referer-Page": "https://union.jd.com/proManager/index",
  16.     "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
  17. }
  18. cookies = {"thor": thor}
  19.  
  20.  
  21. class UnionJD:
  22.     def __init__(self):
  23.         self.js_code = execjs.compile(open('unionJD.js', 'r', encoding='utf-8').read())
  24.  
  25.     def get_params(self, page):
  26.         params = {
  27.             "functionId": "unionSearch",
  28.             "appid": "unionpc",
  29.             "loginType": "3",
  30.             "uuid": _jdu,
  31.             "x-api-eid-token": _3AB9D23F7A4B3CSS
  32.         }
  33.         body = {"funName": "search",
  34.                 "version": "v3",
  35.                 "source": 20310,
  36.                 "param": {"pageNo": page,
  37.                           "pageSize": 60,
  38.                           "searchUUID": "e47cfeb25c054a5886ca6f63449b0093",
  39.                           "bonusIds": None,
  40.                           "category1": None,
  41.                           "category2": None,
  42.                           "category3": None,
  43.                           "deliveryType": None,
  44.                           "wlRate": None,
  45.                           "maxWlRate": None,
  46.                           "fromPrice": None,
  47.                           "toPrice": None,
  48.                           "hasCoupon": None,
  49.                           "isHot": None,
  50.                           "isNeedPreSale": None,
  51.                           "isPinGou": None,
  52.                           "isZY": None,
  53.                           "isCare": None,
  54.                           "lock": None,
  55.                           "orientationFlag": None,
  56.                           "sort": None,
  57.                           "sortName": None,
  58.                           "keyWord": "",
  59.                           "searchType": "st3",
  60.                           "keywordType": "kt0"
  61.                       },
  62.                 "clientPageId": "jingfen_pc"
  63.             }
  64.         h5st = self.js_code.call('h5st', body)
  65.         ts = h5st.split(';')[6]
  66.         params['_'] = ts
  67.         params['h5st'] = h5st
  68.         params['body'] = json.dumps(body)
  69.         return params
  70.  
  71.     def request_data(self, page):
  72.         params = self.get_params(page)
  73.         response = requests.get(url, headers=headers, cookies=cookies, params=params)
  74.         return response
  75.  
  76.  
  77. if __name__ == '__main__':
  78.     u = UnionJD()
  79.     p = u.request_data(1)
  80.     print(p.text)
  81.     print(p.status_code)
  82.  
  83.  
  84.

本文重点是h5st的逆向，其他参数都使用的固定值，仅供参考；

 另外cookies值需要登陆后手动填写，接口能正常获取到相应，但有时会403，尤其是访问频率快时，可能是网站有些校验，有需要的可以再深入研究

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/很楠不爱3/article/detail/675906
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号