devbox
菜鸟追梦旅行
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

易盾逆向分析（滑块、点选、无感知）_易盾滑块

作者：菜鸟追梦旅行 | 2024-05-02 02:41:52

赞

踩

易盾滑块

易盾破解过两个版本，2.19.1和2.21.3，都是之前整过的，现在升级了，由于工作也不需要，就没有再整过了。2.19.1版本，无感知、滑块、点选都整了一遍，写成公共提供调用。

先看下JAVA代码

  1. package com.xxxx.cccc.web;
  2.  
  3. import lombok.extern.log4j.Log4j;
  4. import lombok.extern.log4j.Log4j2;
  5.  
  6. import java.io.IOException;
  7. import java.util.HashMap;
  8. import java.util.Map;
  9. import java.util.UUID;
  10.  
  11. import org.apache.http.HttpException;
  12. import org.jsoup.helper.StringUtil;
  13. import org.springframework.beans.factory.annotation.Autowired;
  14. import org.springframework.util.StringUtils;
  15. import org.springframework.web.bind.annotation.RequestBody;
  16. import org.springframework.web.bind.annotation.RequestMapping;
  17. import org.springframework.web.bind.annotation.RequestMethod;
  18. import org.springframework.web.bind.annotation.RestController;
  19.  
  20. import com.xxxx.cccc.model.CommonRequest;
  21. import com.xxxx.cccc.model.ResultModel;
  22. import com.xxxx.cccc.service.ProxyService;
  23. import com.xxxx.cccc.util.ExceptionUtil;
  24. import com.xxxx.cccc.util.YidunCheckRpcUtil;
  25. import com.xxxx.cccc.util.YidunCheckUtil;
  26. import com.xxxx.cccc.util.YidunCheckUtil2;
  27. import com.xxxx.cccc.util.YidunCheckUtil_2_19_1;
  28. import com.xxxx.cccc.util.YidunCheckUtil_2_21_3;
  29. //公共服务
  30. @RestController
  31. @RequestMapping("/common")
  32. @Log4j
  33. public class CommonController {
  34. 	
  35. 	@Autowired
  36. 	ProxyService proxyService;
  37. 	
  38.  
  39. 	/**
  40.      * 易盾-获取滑块验证后的数据-点选
  41.      * 
  42.      * @param papercheckRequest
  43. 	 * @return
  44.      */
  45.     @RequestMapping(value ="/yidun/getCheckData" , method = RequestMethod.POST)
  46.     public ResultModel getCheckData(@RequestBody CommonRequest commonRequest){
  47.     	
  48.     	ResultModel resultModel = null;
  49.     	
  50.         try {
  51.             log.info("易盾-获取滑块验证后的数据-点选,请求入参："+commonRequest);
  52.             if(!commonRequest.checkParam()){
  53.             	 return new ResultModel("-1","输入参数不完整");
  54.             }
  55.             
  56.             int len = 1;//循环次数
  57.             for(int i=0;i<len;i++){
  58.             	log.info("yidun getCheckData 次数："+i);
  59.             	
  60.             	try {
  61.             		resultModel = YidunCheckUtil_2_21_3.getCheckData(null,null);
  62. 					if(resultModel != null && "0".equals(resultModel.getCode())){
  63. 	            		return resultModel;
  64. 	            	}
  65. 				} catch (Exception e) {
  66. 					log.error("error:"+e);
  67. 					log.error(ExceptionUtil.getMessage(e));
  68. 					if(i == 2){
  69. 						return new ResultModel("-1","未知错误");
  70. 					}
  71. 				}
  72.             	
  73.             }
  74.             
  75.             return resultModel;
  76.         } catch (Exception e) {
  77.             log.error(ExceptionUtil.getMessage(e));
  78.             return new ResultModel("-1","未知错误");
  79.         }
  80.     }
  81.     
  82. 	/**
  83.      * 易盾-获取滑块验证后的数据-无感知
  84.      * 
  85.      * @param papercheckRequest
  86. 	 * @return
  87.      */
  88.     @RequestMapping(value ="/yidun/getWgzData" , method = RequestMethod.POST)
  89.     public ResultModel getWgzData(@RequestBody CommonRequest commonRequest){
  90.     	
  91.     	ResultModel resultModel = null;
  92.     	
  93.         try {
  94.             log.info("易盾-获取滑块验证后的数据-无感知,请求入参："+commonRequest);
  95.             if(!commonRequest.checkParam()){
  96.             	 return new ResultModel("-1","输入参数不完整");
  97.             }
  98.             
  99.             int len = 1;//循环次数
  100.             for(int i=0;i<len;i++){
  101.             	log.info("yidun getWgzData 次数："+i);
  102.             	
  103.             	try {
  104.             		resultModel = YidunCheckUtil.getWgzData(proxyService);
  105. 					if(resultModel != null && "0".equals(resultModel.getCode())){
  106. 	            		return resultModel;
  107. 	            	}
  108. 				} catch (Exception e) {
  109. 					log.error(ExceptionUtil.getMessage(e));
  110. 					if(i == 2){
  111. 						return new ResultModel("-1","未知错误");
  112. 					}
  113. 				}
  114.             	
  115.             }
  116.             
  117.             return resultModel;
  118.         } catch (Exception e) {
  119.             log.error(ExceptionUtil.getMessage(e));
  120.             return new ResultModel("-1","未知错误");
  121.         }
  122.     }
  123.     
  124. 	/**
  125.      * 易盾-获取滑块验证后的数据-滑块
  126.      * 
  127.      * @param papercheckRequest
  128. 	 * @return
  129.      */
  130.     @RequestMapping(value ="/yidun/getHuaKuaiData" , method = RequestMethod.POST)
  131.     public ResultModel getHuaKuaiData(@RequestBody CommonRequest commonRequest){
  132.     	
  133.     	ResultModel resultModel = null;
  134.     	
  135.         try {
  136.             log.info("易盾-获取滑块验证后的数据-滑块,请求入参："+commonRequest);
  137.             if(!commonRequest.checkParam()){
  138.             	 return new ResultModel("-1","输入参数不完整");
  139.             }
  140.             
  141.             int len = 1;//循环次数
  142.             for(int i=0;i<len;i++){
  143.             	log.info("yidun getHuaKuaiData 次数："+i);
  144.             	
  145.             	try {
  146.             		resultModel = YidunCheckUtil.getHuaKuaiData(proxyService);
  147. 					if(resultModel != null && "0".equals(resultModel.getCode())){
  148. 	            		return resultModel;
  149. 	            	}
  150. 				} catch (Exception e) {
  151. 					log.error(ExceptionUtil.getMessage(e));
  152. 					if(i == 2){
  153. 						return new ResultModel("-1","未知错误");
  154. 					}
  155. 				}
  156.             	
  157.             }
  158.             
  159.             return resultModel;
  160.         } catch (Exception e) {
  161.             log.error(ExceptionUtil.getMessage(e));
  162.             return new ResultModel("-1","未知错误");
  163.         }
  164.     }
  165.  
  166. }
  1.  
  2. import java.io.FileOutputStream;
  3. import java.net.URLDecoder;
  4. import java.net.URLEncoder;
  5. import java.util.ArrayList;
  6. import java.util.HashMap;
  7. import java.util.List;
  8. import java.util.Map;
  9. import java.util.UUID;
  10.  
  11. import org.apache.commons.io.IOUtils;
  12. import org.apache.http.Header;
  13. import org.apache.http.HttpEntity;
  14. import org.apache.http.client.methods.CloseableHttpResponse;
  15. import org.apache.http.client.methods.HttpGet;
  16. import org.apache.http.impl.client.CloseableHttpClient;
  17. import org.apache.http.util.EntityUtils;
  18. import org.eclipse.jetty.util.StringUtil;
  19. import org.springframework.util.StringUtils;
  20.  
  21. import com.alibaba.fastjson.JSONObject;
  22. import com.baidu.aip.util.Base64Util;
  23.  
  24. import lombok.extern.log4j.Log4j;
  25.  
  26. /**
  27.  * version 2.17.4
  28.  * 易盾-获取滑块验证后的数据
  29.  * 1.获取图片的fp指纹参数存在浏览器环境校验，校验不过也会正常返回图片，但是会降低通过率，不到10%
  30.  */
  31. @Log4j
  32. public class YidunCheckUtil {
  33. 	
  34. 	public static String userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36";
  35. 	
  36. 	public static String ipAddress = JsFrontConstants.nodejsUrl;
  37. 	
  38. 	public static String fpUrl = ipAddress+"/yidun/yzm/fp";
  39. 	public static String cbUrl = ipAddress+"/yidun/yzm/cb";
  40. 	
  41. 	
  42. 	
  43. 	public static String callbackUrl = ipAddress+"/yidun/yzm/callback";
  44. 	public static String getAcTokenUrl = ipAddress+"/yidun/yzm/getAcToken";
  45. 	public static String getMUrl = ipAddress+"/yidun/yzm/getM";
  46. 	public static String getPUrl = ipAddress+"/yidun/yzm/getP";
  47. 	public static String getExtUrl = ipAddress+"/yidun/yzm/getExt";
  48. 	public static String getDataUrl = ipAddress+"/yidun/yzm/getData";
  49. 	public static String getDataForWgzUrl = ipAddress+"/yidun/yzm/getDataForWgz";
  50. 	public static String getTraceUrl = ipAddress+"/yidun/yzm/getTrace";
  51. 	public static String getTraceForWgzUrl = ipAddress+"/yidun/yzm/getTraceForWgz";
  52. 	public static String getCn31StrUrl = ipAddress+"/yidun/yzm/getCn31Str";
  53. 	
  54. 	public static String getDataForHuaKuaiUrl = ipAddress+"/yidun/yzm/getDataForHuakuai";
  55. 	
  56. 	public static String getTraceForHuakuaiUrl = ipAddress+"/yidun/yzm/getTraceForHuakuai?zuobiao=";
  57. 	
  58. 	public static IOcr iOcr = new MachineOcr(); 
  59. 				
  60.     /**
  61.      * 获取滑块验证后的数据-点选
  62.      * @author xxx
  63.      * @param 
  64.      * @return
  65.      */
  66. 	public static ResultModel getCheckData(ProxyService proxyService,List<String> proxyList) throws Exception{
  67. 		ResultModel resultModel = new ResultModel("0","处理成功");
  68. 				
  69. 		HttpClientWrapper hw = null;
  70. 		HttpGet httpGet = null;
  71. 		CloseableHttpResponse execute = null;
  72. 		Header[] headers = null;
  73. 		HttpEntity entity = null;
  74. 		byte[] bytes = null;
  75. 		String result = null;
  76. 		//hw = new HttpClientWrapper(5000,5000, 5000);
  77. 		if(proxyService == null){
  78. 			//hw = new HttpClientWrapper(5000,5000, 5000);
  79. 		}else{
  80. 			log.info("YidunCheckUtil linshi shiong daili...");
  81. 	
  82. 			//hw = proxyService.getClientWithProxy(15000,15000,15000,proxyList);
  83. 		}
  84. 		
  85. 		hw = new HttpClientWrapper(50000,50000, 50000,"127.0.0.1",8888);
  86. 		
  87. 		
  88. 		CloseableHttpClient client = hw.getClient();
  89. 		
  90. 		//1.获取滑块图片地址
  91. 		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
  92. 		
  93. 		//fp = "R/9JR4ti/ydmwA6UEJ41QqUdudp/aeDHkOl44riYGdbc56uundMeNHaleXSyME7P0qAzlLc8IARE+pTmovebBp4hW2lPDq\\\\6olZp0QQx9kzO0wdzYD9214KL\\\\Dc+/KYtCSSvS0eMBqzZiAYONRBq0i09nxtXDf\\\\mDdh2U/ReM3ZZZKt+:1655391775324";
  94. 		//fp = URLEncoder.encode(fp);
  95. 		
  96. 		
  97. 		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
  98. 		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  99. 		String url = "https://c.dun.163.com/api/v2/get?referer=https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&fp="+fp+"&https=true&type=undefined&version=2.17.4&dpr=1&dev=1&cb="+cb+"&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&width=0&audio=false&token=&callback="+callback;
  100. 				
  101. 		httpGet = new HttpGet(url);
  102. 		
  103. 	    httpGet.setHeader("Host","c.dun.163.com");
  104. 	    httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
  105. 	    httpGet.setHeader("User-Agent",userAgent);
  106. 	    httpGet.setHeader("Accept","*/*");
  107. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  108. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  109. 	    httpGet.setHeader("Cache-Control","no-cache");
  110. 	    httpGet.setHeader("Connection","keep-alive");
  111. 	    httpGet.setHeader("Pragma","no-cache");
  112. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  113. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  114. 	    httpGet.setHeader("Sec-Fetch-Dest","script");
  115. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  116. 	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
  117. 	    
  118. 	    
  119. 		httpGet.setConfig(hw.getRequestConfig());
  120. 		execute = client.execute(httpGet);
  121. 	
  122. 		entity = execute.getEntity();	
  123. 		bytes = EntityUtils.toByteArray(entity);
  124. 		result = new String(bytes,"UTF-8");
  125. 		
  126. 		if(StringUtils.isEmpty(result)){
  127. 			return new ResultModel("-1","获取滑块失败");
  128. 		}
  129. 		
  130. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  131. 		
  132. 		log.info("YidunCheckUtil getCheckData getYzm result:"+result);
  133. 		
  134. 		JSONObject objJSon = JSONObject.parseObject(result);
  135. 		
  136. 		JSONObject dataJSon = objJSon.getJSONObject("data");
  137. 		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块图片
  138. 		String front = dataJSon.getString("front");//点选文本
  139. 		String token = dataJSon.getString("token");
  140. 		String type = dataJSon.getString("type");
  141. 		String zoneId = dataJSon.getString("zoneId");
  142. 				
  143. 		log.info("YidunCheckUtil getCheckData bg:"+bg);
  144. 		log.info("YidunCheckUtil getCheckData front:"+front);
  145. 		log.info("YidunCheckUtil getCheckData token:"+token);
  146. 		
  147. 		if(StringUtils.isEmpty(front)){
  148. 			return new ResultModel("-1","获取滑块失败");
  149. 		}
  150. 		
  151. 		//2.获取图片数据
  152. 		httpGet = new HttpGet(bg);
  153. 		httpGet.setConfig(hw.getRequestConfig());
  154. 		execute = client.execute(httpGet);
  155. 		entity = execute.getEntity();	
  156. 	    bytes = EntityUtils.toByteArray(entity);
  157.  
  158. 		String zuobiao = "";
  159. 		String guiji = "";
  160.         
  161. 		String baseImage = Base64Util.encode(bytes);
  162. 		
  163. 		if(StringUtils.isEmpty(baseImage)){
  164. 			return new ResultModel("-1","获取滑块图片失败");
  165. 		}
  166. 		
  167. 		//3.识别图片
  168. 		String orcData = iOcr.getCodeNormal(baseImage, front);
  169. 		
  170. 		if(StringUtil.isBlank(orcData) || orcData.indexOf("500 Internal Server") >= 0) {
  171. 			return new ResultModel("-1","识别滑块失败");
  172. 		}
  173. 		
  174. 		JSONObject ocrJson = JSONObject.parseObject(orcData);
  175. 		zuobiao = ocrJson.getString("points");
  176. 		guiji = ocrJson.getString("track");
  177. 	        
  178. 	    log.info("YidunCheckUtil getCheckData zuobiao:"+zuobiao);
  179. 	    log.info("YidunCheckUtil getCheckData guiji:"+guiji);
  180. 	     
  181. 	     
  182. 	    //
  183. 	    //调用自己的轨迹算法 测试发现自己的轨迹算法通过率高些
  184. 	    guiji = JiangsuTaxbureauUtil.getData(getTraceUrl+"?urlKey="+zuobiao);
  185. 	        
  186. 	    //System.out.println("my guiji:"+guiji);
  187. 	    
  188. 	     
  189. 	    if(StringUtils.isEmpty(zuobiao) || StringUtils.isEmpty(guiji)){
  190. 			return new ResultModel("-1","识别滑块失败");
  191. 		}
  192. 	    
  193. 	    
  194. 	    url = "https://c.dun.163.com/api/v2/check?referer=https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&width=310&type=3&version=2.17.4&extraData=&bf=0&runEnv=10";
  195.  
  196. 	    httpGet = new HttpGet(url);
  197. 	    
  198. 	    Thread.sleep(100);//故意让程序慢些，避免反爬
  199. 			
  200. 	    //5.校验滑块
  201. 	    url = url +"&token="+token;
  202. 		url = url +"&callback="+JiangsuTaxbureauUtil.getData(callbackUrl);
  203. 		url = url +"&acToken="+JiangsuTaxbureauUtil.getData(getAcTokenUrl);
  204. 		url = url +"&cb="+JiangsuTaxbureauUtil.getData(cbUrl);
  205. 		    
  206. 		String data = JiangsuTaxbureauUtil.getData(getDataUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);
  207. 		   		    
  208. 		url = url +"&data="+data;
  209. 		log.info("YidunCheckUtil getCheckData url:"+url);
  210. 		    
  211. 		httpGet = new HttpGet(url);
  212. 		httpGet.setHeader("Accept","*/*");
  213. 		httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  214. 		httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  215. 	    httpGet.setHeader("Cache-Control","no-cache");
  216. 	    httpGet.setHeader("Connection","keep-alive");
  217. 	    httpGet.setHeader("Pragma","no-cache");
  218. 	    httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
  219. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  220. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  221. 	    httpGet.setHeader("Sec-Fetch-Dest","script");
  222. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  223. 	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
  224. 		httpGet.setHeader("Host","c.dun.163.com");
  225. 		httpGet.setHeader("User-Agent",userAgent);
  226.     
  227. 		httpGet.setConfig(hw.getRequestConfig());
  228. 		execute = client.execute(httpGet);
  229. 		
  230. 		entity = execute.getEntity();	
  231. 	    bytes = EntityUtils.toByteArray(entity);
  232. 	    result = new String(bytes,"UTF-8");
  233. 			
  234. 	    log.info("YidunCheckUtil getCheckData validate result:"+result);
  235. 	    
  236. 	    if(StringUtils.isEmpty(result)){
  237. 			return new ResultModel("-1","校验点选返回为空");
  238. 		}
  239. 	    
  240. 	    result = result.substring(result.indexOf("(")+1, result.indexOf(")"));
  241. 	    JSONObject objJson = JSONObject.parseObject(result);
  242. 	    JSONObject dataJson = objJson.getJSONObject("data");
  243. 	    String validate = dataJson.getString("validate");
  244. 	    if(StringUtils.isEmpty(validate)){
  245. 	    	return new ResultModel("-1","校验点选失败");
  246. 	    }
  247. 	    
  248. 		//3.获取CN31加密串	
  249.     	Map map = new HashMap();
  250.     	map.put("validate", validate);
  251.     	map.put("fp", URLDecoder.decode(fp));
  252.     	ResponseContent response = HttpHelper.postJsonEntity(getCn31StrUrl, JSONObject.toJSONString(map));
  253.     	String cn31Str = response.getContent();
  254.     	log.info("YidunCheckUtil getCheckData cn31Str:"+cn31Str);
  255. 		resultModel.setData(cn31Str);
  256. 		
  257. 		if(StringUtils.isEmpty(cn31Str)){
  258. 	    	return new ResultModel("-1","获取CN31失败");
  259. 	    }
  260. 	    
  261. 		return resultModel;
  262. 	}
  263. 	
  264.     /**
  265.      * 获取滑块验证后的数据-无感知
  266.      * @author bree
  267.      * @param 
  268.      * @return
  269.      */
  270. 	public static ResultModel getWgzData(ProxyService proxyService) throws Exception{
  271. 		
  272. 		ResultModel resultModel = new ResultModel("0","处理成功");
  273. 		Map dataMap = new HashMap();
  274. 		
  275. 		HttpClientWrapper hw = null;
  276. 		HttpGet httpGet = null;
  277. 		CloseableHttpResponse execute = null;
  278. 		Header[] headers = null;
  279. 		HttpEntity entity = null;
  280. 		byte[] bytes = null;
  281. 		String res = null;
  282. 		String result = null;
  283. 		hw = new HttpClientWrapper(5000,5000, 5000);
  284. 		
  285. 		
  286. 		CloseableHttpClient client = hw.getClient();
  287. 		
  288. 		//1.获取验证码
  289. 		String url = "https://c.dun.163.com/api/v2/get?referer=%s&zoneId=CN31&id=cf15aac06ccf490181f29b72fe13c3d4&fp=%s&https=true&type=undefined&width=0&version=2.16.0&dpr=1.25&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&callback=%s";
  290. 		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
  291. 		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
  292. 		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  293. 		String referer = "https%3A%2F%2Fetax.hunan.chinatax.gov.cn%2Fwsbs%2FtoLogin.do";
  294. 		url = String.format(url, referer,fp,cb,callback);
  295. 		
  296. 		httpGet = new HttpGet(url);
  297. 		
  298. 	    httpGet.setHeader("Host","c.dun.163.com");
  299. 	    httpGet.setHeader("Referer","https://etax.hunan.chinatax.gov.cn/");
  300. 	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
  301. 	    httpGet.setHeader("Accept","*/*");
  302. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  303. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  304. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  305. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  306. 	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
  307. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  308. 	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
  309. 	    
  310. 	    
  311. 		httpGet.setConfig(hw.getRequestConfig());
  312. 		execute = client.execute(httpGet);
  313. 		
  314. 		entity = execute.getEntity();	
  315. 		bytes = EntityUtils.toByteArray(entity);
  316. 		result = new String(bytes,"UTF-8");
  317. 		
  318. 		log.info("yidun wuganzhi get yzm code:"+result);
  319. 		
  320. 		if(StringUtils.isEmpty(result)){
  321. 			return new ResultModel("-1","获取滑块失败");
  322. 		}
  323. 		
  324. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  325. 		
  326. 		JSONObject objJSon = JSONObject.parseObject(result);
  327. 		JSONObject dataJSon = objJSon.getJSONObject("data");
  328. 		String error = objJSon.getString("error");
  329. 		String message = objJSon.getString("msg");
  330. 		String token = dataJSon.getString("token");
  331. 		
  332. 		if(!"0".equals(error)){
  333. 			return new ResultModel("-1",message);
  334. 		}
  335. 		
  336. 		Thread.sleep(1000);
  337. 		
  338. 		//2.校验
  339. 		url = "https://c.dun.163.com/api/v2/check?referer=%s&zoneId=CN31&id=cf15aac06ccf490181f29b72fe13c3d4&version=2.16.0&cb=%s&extraData=&bf=0&runEnv=10&token=%s&acToken=%s&type=5&width=438&data=%s&callback=%s";
  340. 		cb = JiangsuTaxbureauUtil.getData(cbUrl);
  341. 		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  342. 		String acToken = JiangsuTaxbureauUtil.getData(getAcTokenUrl);
  343. 		
  344. /*		List<String> list = new TraceUtil().getPAndTrace();
  345. 		String zuobiao = list.get(0);
  346. 		String guiji = list.get(1);*/
  347. 		
  348. 		
  349. 		String str  = JiangsuTaxbureauUtil.getData(getTraceForWgzUrl);
  350. 		JSONObject traceJson = JSONObject.parseObject(str);
  351. 		String zuobiao = traceJson.getString("zuobiao");
  352. 		String guiji = traceJson.getString("guiji");;
  353. 		
  354. 		
  355. 	    String data = JiangsuTaxbureauUtil.getData(getDataForWgzUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);
  356.  
  357. 		url = String.format(url, referer,cb,token,acToken,data,callback);
  358. 		
  359. 		log.info("yidun wuganzhi zuobiao:"+zuobiao);
  360. 		log.info("yidun wuganzhi guiji:"+guiji);
  361. 		log.info("yidun wuganzhi url:"+url);
  362. 		
  363. 		httpGet = new HttpGet(url);
  364. 		
  365. 	    httpGet.setHeader("Host","c.dun.163.com");
  366. 	    httpGet.setHeader("Referer","https://etax.hunan.chinatax.gov.cn/");
  367. 	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
  368. 	    httpGet.setHeader("Accept","*/*");
  369. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  370. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  371. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  372. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  373. 	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
  374. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  375. 	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
  376. 	    httpGet.setHeader("Pragma","no-cache");
  377. 	    
  378. 		httpGet.setConfig(hw.getRequestConfig());
  379. 		execute = client.execute(httpGet);
  380. 		
  381. 		entity = execute.getEntity();	
  382. 		bytes = EntityUtils.toByteArray(entity);
  383. 		result = new String(bytes,"UTF-8");
  384. 		
  385. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  386. 		
  387. 		log.info("yidun wuganzhi check result:"+result);
  388. 		
  389. 		dataMap.put("checkResult", result);
  390. 		
  391. 		//3.获取CN31加密串			
  392. 		objJSon = JSONObject.parseObject(result);
  393. 		dataJSon = objJSon.getJSONObject("data");
  394. 		boolean resultFlag = dataJSon.getBooleanValue("result");
  395. 		if(resultFlag){
  396. 			String validate = dataJSon.getString("validate");
  397. 	    	Map map = new HashMap();
  398. 	    	map.put("validate", validate);
  399. 	    	map.put("fp", URLDecoder.decode(fp));
  400. 	    	ResponseContent response = HttpHelper.postJsonEntity(getCn31StrUrl, JSONObject.toJSONString(map));
  401. 	    	String cn31Str = response.getContent();
  402. 	    	log.info("cn31Str:"+cn31Str);
  403. 	    	dataMap.put("cn31Str", cn31Str);
  404. 		}else{
  405. 			return new ResultModel("-1","校验失败");
  406. 		}
  407. 		
  408. 		resultModel.setData(dataMap);
  409. 		
  410. 		return resultModel;
  411. 	}
  412. 	
  413.     /**
  414.      * 获取滑块验证后的数据-滑块
  415.      * @author bree
  416.      * @param 
  417.      * @return
  418.      */
  419. 	public static ResultModel getHuaKuaiData(ProxyService proxyService) throws Exception{
  420. 		
  421. 		ResultModel resultModel = new ResultModel("0","处理成功");
  422. 		
  423. 		HttpClientWrapper hw = null;
  424. 		HttpGet httpGet = null;
  425. 		CloseableHttpResponse execute = null;
  426. 		Header[] headers = null;
  427. 		HttpEntity entity = null;
  428. 		byte[] bytes = null;
  429. 		String res = null;
  430. 		String result = null;
  431. 		hw = new HttpClientWrapper(5000,5000, 5000);
  432. 		
  433. 		CloseableHttpClient client = hw.getClient();
  434. 		
  435. 		//1.获取验证码
  436. 		String url = "https://c.dun.163.com/api/v2/get?referer=%s&zoneId=CN31&id=07e2387ab53a4d6f930b8d9a9be71bdf&fp=%s&https=true&type=2&version=2.16.0&dpr=1.25&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&width=320&audio=false&token=&callback=%s";
  437. 		String fp = JiangsuTaxbureauUtil.getData(fpUrl);
  438. 		String cb = JiangsuTaxbureauUtil.getData(cbUrl);
  439. 		String callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  440. 		String referer = "https%3A%2F%2Fdun.163.com%2Ftrial%2Fjigsaw";//如果网站应用了易盾，这里可能需要更改，这里是从官网测试的
  441. 		url = String.format(url, referer,fp,cb,callback);
  442. 		
  443. 		httpGet = new HttpGet(url);
  444. 		
  445. 	    httpGet.setHeader("Host","c.dun.163.com");
  446. 	    httpGet.setHeader("Referer","https://dun.163.com/");//如果网站应用了易盾，这里可能需要更改
  447. 	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
  448. 	    httpGet.setHeader("Accept","*/*");
  449. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  450. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  451. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  452. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  453. 	    httpGet.setHeader("Sec-Fetch-Dest","script");
  454. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  455. 	    httpGet.setHeader("Sec-Fetch-Site","same-site");
  456. 	    
  457. 	    
  458. 		httpGet.setConfig(hw.getRequestConfig());
  459. 		execute = client.execute(httpGet);
  460. 		
  461. 		entity = execute.getEntity();	
  462. 		bytes = EntityUtils.toByteArray(entity);
  463. 		result = new String(bytes,"UTF-8");
  464. 		
  465. 		if(StringUtils.isEmpty(result)){
  466. 			return new ResultModel("-1","获取滑块失败");
  467. 		}
  468. 		
  469. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  470. 		
  471. 		log.info("yidun huakuai get yzm code:"+result);
  472. 		
  473. 		JSONObject objJSon = JSONObject.parseObject(result);
  474. 		
  475. 		JSONObject dataJSon = objJSon.getJSONObject("data");
  476. 		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块背景图片
  477. 		String front = (String)dataJSon.getJSONArray("front").get(0);//缺口图片
  478. 		String token = dataJSon.getString("token");
  479. 		String type = dataJSon.getString("type");
  480. 		String zoneId = dataJSon.getString("zoneId");
  481. 		
  482. 		if(StringUtils.isEmpty(token)){
  483. 			return new ResultModel("-1","获取滑块失败");
  484. 		}
  485. 		
  486. 		log.info("yidun huakuai bg:"+bg);		
  487. 		log.info("yidun huakuai front:"+front);	
  488. 		log.info("yidun huakuai token:"+token);
  489. 		
  490. 		
  491. 		//2.获取配置
  492. 		url = "https://c.dun.163.com/api/v2/getconf?referer=%s&zoneId=&id=07e2387ab53a4d6f930b8d9a9be71bdf&ipv6=false&runEnv=10&type=2&loadVersion=2.2.3&callback=%s";
  493. 		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  494. 		url = String.format(url,referer,callback);
  495. 		
  496. 		httpGet = new HttpGet(url);
  497. 		
  498. 	    httpGet.setHeader("Host","c.dun.163.com");
  499. 	    httpGet.setHeader("Referer","https://dun.163.com/");//如果网站应用了易盾，这里可能需要更改
  500. 	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
  501. 	    httpGet.setHeader("Accept","*/*");
  502. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  503. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  504. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  505. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  506. 	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
  507. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  508. 	    httpGet.setHeader("Sec-Fetch-Site","same-site");
  509. 	    
  510. 	    
  511. 		httpGet.setConfig(hw.getRequestConfig());
  512. 		execute = client.execute(httpGet);
  513. 		
  514. 		entity = execute.getEntity();	
  515. 		bytes = EntityUtils.toByteArray(entity);
  516. 		result = new String(bytes,"UTF-8");
  517. 		
  518. 		if(StringUtils.isEmpty(token)){
  519. 			return new ResultModel("-1","获取配置失败");
  520. 		}
  521. 		
  522. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  523. 		
  524. 		log.info("yidun huakuai get config:"+result);		
  525. 		
  526. 		objJSon = JSONObject.parseObject(result);
  527. 		
  528. 		dataJSon = objJSon.getJSONObject("data");
  529. 		JSONObject acJSon = dataJSon.getJSONObject("ac");
  530. 		String acToken = acJSon.getString("token");
  531. 		log.info("yidun huakuai acToken:"+acToken);		
  532. 		
  533. 		//3.获取图片数据
  534. 		httpGet = new HttpGet(bg);
  535. 		httpGet.setConfig(hw.getRequestConfig());
  536. 		execute = client.execute(httpGet);
  537. 		entity = execute.getEntity();	
  538. 	    bytes = EntityUtils.toByteArray(entity);
  539.         
  540. 		String backImage = Base64Util.encode(bytes);
  541. 		
  542. 		httpGet = new HttpGet(front);
  543. 		httpGet.setConfig(hw.getRequestConfig());
  544. 		execute = client.execute(httpGet);
  545. 		entity = execute.getEntity();	
  546. 	    bytes = EntityUtils.toByteArray(entity);
  547.         
  548. 		String frontImage = Base64Util.encode(bytes);
  549. 		
  550. 		//4.识别图片
  551. 		String zuobiao = "";
  552. 		String guiji = "";
  553. 		
  554. 		zuobiao = iOcr.getX(backImage, frontImage);
  555. 		
  556. 		if(StringUtils.isEmpty(zuobiao)){
  557. 			return new ResultModel("-1","识别坐标失败");
  558. 		}
  559. 		
  560. 		log.info("yidun huakuai zuobiao:"+zuobiao);		
  561. 		
  562. 		//5.获取轨迹
  563. 		String str  = JiangsuTaxbureauUtil.getData(getTraceForHuakuaiUrl+zuobiao);
  564. 		JSONObject traceJson = JSONObject.parseObject(str);
  565. 		guiji = traceJson.getString("guiji");
  566. 		String zhZuobiao = traceJson.getString("zhZuobiao");//转换坐标
  567. 		
  568. 		log.info("yidun huakuai zhuanhuanhou zuobiao:"+zhZuobiao);		
  569. 		log.info("yidun huakuai guiji:"+guiji);		
  570. 		
  571. 		Thread.sleep(1000);
  572. 		
  573. 		//6.校验
  574. 		url = "https://c.dun.163.com/api/v2/check?referer=%s&zoneId=CN31&id=07e2387ab53a4d6f930b8d9a9be71bdf&token=%s&acToken=%s&data=%s&width=320&type=2&version=2.16.0&cb=%s&extraData=&bf=0&runEnv=10&callback=%s";
  575. 		cb = JiangsuTaxbureauUtil.getData(cbUrl);
  576. 		callback = JiangsuTaxbureauUtil.getData(callbackUrl);
  577. 		//String acToken = JiangsuTaxbureauUtil.getData("http://127.0.0.1:7002/yidun/yzm/getAcToken");
  578. 			
  579. 	    String data = JiangsuTaxbureauUtil.getData(getDataForHuaKuaiUrl+"?guiji="+guiji+"&token="+token+"&zuobiao="+zuobiao);
  580.  
  581. 		url = String.format(url, referer,token,acToken,data,cb,callback);
  582. 		
  583. 		log.info("yidun huakuai request url:"+url);		
  584. 		
  585. 		httpGet = new HttpGet(url);
  586. 		
  587. 	    httpGet.setHeader("Host","c.dun.163.com");
  588. 	    httpGet.setHeader("Referer","https://dun.163.com/trial/jigsaw");
  589. 	    httpGet.setHeader("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36");
  590. 	    httpGet.setHeader("Accept","*/*");
  591. 	    httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  592. 	    httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  593. 	    httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"92\", \" Not A;Brand\";v=\"99\", \"Google Chrome\";v=\"92\"");
  594. 	    httpGet.setHeader("sec-ch-ua-mobile","?0");
  595. 	    httpGet.setHeader("Sec-Fetch-Dest","*/*");
  596. 	    httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  597. 	    httpGet.setHeader("Sec-Fetch-Site","cross-site");
  598. 	    httpGet.setHeader("Pragma","no-cache");
  599. 	    
  600. 		httpGet.setConfig(hw.getRequestConfig());
  601. 		execute = client.execute(httpGet);
  602. 		
  603. 		entity = execute.getEntity();	
  604. 		bytes = EntityUtils.toByteArray(entity);
  605. 		result = new String(bytes,"UTF-8");
  606. 		
  607. 		log.info("yidun huakuai check result:"+result);		
  608. 		
  609. 		result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  610. 		
  611. 		resultModel.setData(result);
  612.  
  613. 		return resultModel;
  614. 	}
  615. 	
  616. 	public static String setCookie(String cookieStr,Header[] headers){
  617. 		
  618. 		for(Header header: headers){
  619. 		    if("set-cookie".equals(header.getName().toLowerCase())){
  620. 		    	 cookieStr += header.getValue() + "; ";
  621. 		    }
  622. 		}
  623. 		
  624. 		return cookieStr;
  625. 	}
  626. }
  1.  
  2.  
  3. import java.io.FileOutputStream;
  4. import java.net.URLDecoder;
  5. import java.net.URLEncoder;
  6. import java.util.ArrayList;
  7. import java.util.HashMap;
  8. import java.util.List;
  9. import java.util.Map;
  10. import java.util.UUID;
  11.  
  12. import org.apache.commons.io.IOUtils;
  13. import org.apache.http.Header;
  14. import org.apache.http.HttpEntity;
  15. import org.apache.http.client.methods.CloseableHttpResponse;
  16. import org.apache.http.client.methods.HttpGet;
  17. import org.apache.http.impl.client.CloseableHttpClient;
  18. import org.apache.http.util.EntityUtils;
  19. import org.eclipse.jetty.util.StringUtil;
  20. import org.springframework.util.StringUtils;
  21.  
  22. import com.alibaba.fastjson.JSONObject;
  23. import com.baidu.aip.util.Base64Util;
  24.  
  25. import lombok.extern.log4j.Log4j;
  26.  
  27. /**
  28.  * version 2.19.1
  29.  * 易盾-获取滑块验证后的数据
  30.  * 1.获取图片的fp指纹参数存在浏览器环境校验，校验不过也会正常返回图片，但是会降低通过率，不到10%
  31.  *  这点经过测试，初步判断是请求易盾携带头信息不全导致
  32.  */
  33. @Log4j
  34. public class YidunCheckUtil_2_21_3 {
  35.  
  36. 	public static String userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36";
  37.  
  38. 	public static IOcr iOcr = new MachineOcr(); 
  39. 	
  40. 	
  41. 	public static String getTrace(String zuobiao) throws Exception{
  42. 		//获取acToken
  43. 		zuobiao = URLEncoder.encode(zuobiao);
  44. 		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getTrace&group=yidun&zuobiao="+zuobiao;
  45. 		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
  46.     	String content = response.getContent();
  47.     	JSONObject contentObj = JSONObject.parseObject(content);
  48. 		
  49. 		String trace = contentObj.getString("data");
  50. 		
  51. 		return trace;
  52. 	}
  53. 	
  54. 	public static String getAcToken() throws Exception{
  55. 		//获取acToken
  56. 		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getAcToken&group=yidun";
  57. 		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
  58.     	String content = response.getContent();
  59.     	JSONObject contentObj = JSONObject.parseObject(content);
  60. 		
  61. 		String acToken = contentObj.getString("data");
  62. 		
  63. 		return acToken;
  64. 	}
  65. 	
  66. 	
  67. 	public static JSONObject getYzmParam() throws Exception{
  68. 		String signUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getYzmParam&group=yidun";
  69. 		ResponseContent response = HttpHelper.getUrlRespContent(signUrl);
  70.     	String content = response.getContent();
  71.     	JSONObject contentObj = JSONObject.parseObject(content);
  72.     	return contentObj;
  73. 	}
  74. 	
  75. 	public static String getData(String zuobiao,String guiji,String token) throws Exception{
  76. 		String mgetDataUrl = "http://127.0.0.1:5620/business-demo/invoke?action=getData&guiji=%s&token=%s&zuobiao=%s&group=yidun";
  77. 		mgetDataUrl = mgetDataUrl.format(mgetDataUrl, URLEncoder.encode(guiji),token,URLEncoder.encode(zuobiao));
  78. 		
  79. 		ResponseContent response = HttpHelper.getUrlRespContent(mgetDataUrl);
  80. 		String data = response.getContent();
  81. 		JSONObject objJson = JSONObject.parseObject(data);
  82. 		JSONObject mObj = new JSONObject();
  83. 		mObj.put("d", objJson.get("d"));
  84. 		mObj.put("ext", objJson.get("ext"));
  85. 		mObj.put("m", objJson.get("m"));
  86. 		mObj.put("p", objJson.get("p"));
  87. 		
  88. 		data = URLEncoder.encode(mObj.toJSONString());
  89. 		return data;
  90. 	}
  91. 	
  92. 	
  93.     /**
  94.      * 获取滑块验证后的数据-点选
  95.      * @author bree
  96.      * @param 
  97.      * @return
  98.      */
  99. 	public static ResultModel getCheckData(ProxyService proxyService,List<String> proxyList) throws Exception{
  100. 		ResultModel resultModel = new ResultModel("0","处理成功");
  101. 		boolean flag = false;
  102. 		TaxBureauContext context = new TaxBureauContext();
  103. 		byte[] bytes = null;
  104. 		context.hw = new HttpClientWrapper(5000,5000, 5000,"127.0.0.1",8888);
  105. 	    
  106. 		
  107. 		CloseableHttpClient client = context.hw.getClient();
  108. 		context.httpClient = client;
  109. 		
  110. 		
  111. 		//1.获取验证码
  112.     	JSONObject contentObj = getYzmParam();
  113.     	
  114.     	String referer = "https%3A%2F%2Fetax.jiangsu.chinatax.gov.cn%2Fsso%2Flogin";
  115.     	String fp = URLEncoder.encode(contentObj.getString("fp"));
  116. 		String cb = URLEncoder.encode(contentObj.getString("cb"));
  117. 		String callback = contentObj.getString("callback");
  118. 		
  119. 		String acToken = getAcToken();
  120. 		String url = "https://c.dun.163.com/api/v3/get?referer=%s&zoneId=CN31&acToken=%s&id=1a623022803d4cbc86fa157ec267bb36&fp=%s&https=true&type=undefined&version=2.21.2&dpr=1&dev=1&cb=%s&ipv6=false&runEnv=10&group=&scene=&lang=zh-CN&sdkVersion=undefined&width=0&audio=false&sizeType=10&smsVersion=v2&token=%s&callback=%s";
  121. 		
  122. 		url = String.format(url, referer,acToken,fp,cb,"",callback);
  123. 		
  124. 		context.httpGet = new HttpGet(url);
  125. 		context.httpGet.setHeader("Host","c.dun.163.com");
  126. 		context.httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
  127. 		context.httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"");
  128. 		context.httpGet.setHeader("sec-ch-ua-mobile","?0");
  129. 		context.httpGet.setHeader("sec-ch-ua-platform","\"Windows\"");
  130. 		context.httpGet.setHeader("Sec-Fetch-Dest","script");
  131. 		context.httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  132. 		context.httpGet.setHeader("Sec-Fetch-Site","cross-site");
  133. 		context.httpGet.setHeader("User-Agent",userAgent);		
  134. 		context.httpGet.setConfig(context.hw.getRequestConfig());
  135. 		context.execute = context.httpClient.execute(context.httpGet);
  136. 		
  137. 		Header[] headers = context.execute.getAllHeaders();
  138. 				
  139. 		context.httpEntity = context.execute.getEntity();
  140. 		
  141. 		context.byteArr = EntityUtils.toByteArray(context.httpEntity);
  142. 		
  143. 		String result =  new String(context.byteArr,"utf-8");
  144. 		System.out.println("result:"+result);
  145. 		
  146.         result = result.substring(result.indexOf("(")+1,result.indexOf(")"));
  147.         
  148.         JSONObject objJSon = JSONObject.parseObject(result);
  149.         
  150.         String msg = objJSon.getString("msg");
  151. 		
  152. 		if(!"ok".equals(msg)) {
  153. 			resultModel.setCode("-1");
  154. 			resultModel.setMessage("获取验证码失败");
  155. 			return resultModel;
  156. 		}
  157.         
  158. 		JSONObject dataJSon = objJSon.getJSONObject("data");
  159. 		String bg = (String)dataJSon.getJSONArray("bg").get(0);//滑块图片
  160. 		String front = dataJSon.getString("front");//点选文本
  161. 		String token = dataJSon.getString("token");
  162. 		String type = dataJSon.getString("type");
  163. 		String zoneId = dataJSon.getString("zoneId");
  164. 		
  165. 		
  166. 		//2.获取图片数据
  167. 		context.httpGet = new HttpGet(bg);
  168. 		context.httpGet.setConfig(context.hw.getRequestConfig());
  169. 		context.execute = client.execute(context.httpGet);
  170. 		context.httpEntity = context.execute.getEntity();	
  171. 	    bytes = EntityUtils.toByteArray(context.httpEntity);
  172.  
  173. 		String zuobiao = "";
  174. 		String guiji = "";
  175.         
  176. 		String baseImage = Base64Util.encode(bytes);
  177. 		
  178. 		if(StringUtils.isEmpty(baseImage)){
  179. 			resultModel.setCode("-1");
  180. 			resultModel.setMessage("获取验证码失败");
  181. 			return resultModel;
  182. 		}
  183. 		
  184. 		//3.识别图片
  185. 		TaxbureauConstants.setOcrUrl("http://monitor.taxservices.cn/");
  186. 	    IOcr iOcr = new MachineOcr(); 
  187. 		String orcData = iOcr.getCodeNormal(baseImage, front);
  188. 		
  189. 		if(StringUtil.isBlank(orcData) || orcData.indexOf("500 Internal Server") >= 0) {
  190. 			resultModel.setCode("-1");
  191. 			resultModel.setMessage("识别验证码失败");
  192. 			return resultModel;
  193. 		}
  194. 		
  195. 		JSONObject ocrJson = JSONObject.parseObject(orcData);
  196. 		zuobiao = ocrJson.getString("points");
  197. 		//guiji = ocrJson.getString("track");
  198. 	        
  199. 	    //
  200. 	    //调用自己的轨迹算法 测试发现自己的轨迹算法通过率高些
  201. 	    guiji = getTrace(zuobiao);
  202. 	        
  203. 	    System.out.println("my guiji:"+guiji);
  204. 	    
  205. 	     
  206. 	    if(StringUtils.isEmpty(zuobiao) || StringUtils.isEmpty(guiji)){
  207. 	    	resultModel.setCode("-1");
  208. 			resultModel.setMessage("识别验证码失败");
  209. 			return resultModel;
  210. 		}
  211. 	    
  212. 	     //4.校验滑块
  213. 	    url = "https://c.dun.163.com/api/v3/check?referer=%s&zoneId=CN31&id=1a623022803d4cbc86fa157ec267bb36&token=%s&acToken=undefined&width=310&type=3&version=2.21.2&cb=%s&extraData=&bf=0&runEnv=10&sdkVersion=undefined&callback=%s";
  214. 	    
  215. 	    Thread.sleep(500);//故意让程序慢些，避免反爬
  216.     	contentObj = getYzmParam();
  217.     	
  218. 		cb = URLEncoder.encode(contentObj.getString("cb"));
  219. 		callback = contentObj.getString("callback");
  220. 		
  221. 		url = String.format(url, referer,token,cb,callback);
  222. 	
  223. 		String data = getData(zuobiao,guiji,token);
  224. 		
  225. 		log.info("YidunCheckUtil data:"+data);
  226. 		
  227. 		url = url +"&data="+data;
  228. 		log.info("YidunCheckUtil getCheckData url:"+url);
  229. 		    
  230. 		context.httpGet = new HttpGet(url);
  231. 		context.httpGet.setHeader("Accept","*/*");
  232. 		context.httpGet.setHeader("Accept-Encoding","gzip, deflate, br");
  233. 		context.httpGet.setHeader("Accept-Language","zh-CN,zh;q=0.9");
  234. 		context.httpGet.setHeader("Cache-Control","no-cache");
  235. 		context.httpGet.setHeader("Connection","keep-alive");
  236. 		context.httpGet.setHeader("Pragma","no-cache");
  237. 		context.httpGet.setHeader("Host","c.dun.163.com");
  238. 		context.httpGet.setHeader("Referer","https://etax.jiangsu.chinatax.gov.cn/");
  239. 		context.httpGet.setHeader("sec-ch-ua","\"Chromium\";v=\"110\", \"Not A(Brand\";v=\"24\", \"Google Chrome\";v=\"110\"");
  240. 		context.httpGet.setHeader("sec-ch-ua-mobile","?0");
  241. 		context.httpGet.setHeader("sec-ch-ua-platform","\"Windows\"");
  242. 		context.httpGet.setHeader("Sec-Fetch-Dest","script");
  243. 		context.httpGet.setHeader("Sec-Fetch-Mode","no-cors");
  244. 		context.httpGet.setHeader("Sec-Fetch-Site","cross-site");
  245. 		context.httpGet.setHeader("Host","c.dun.163.com");
  246. 		context.httpGet.setHeader("User-Agent",userAgent);
  247.     
  248. 		context.httpGet.setConfig(context.hw.getRequestConfig());
  249. 		context.execute = client.execute(context.httpGet);
  250. 		
  251. 		context.httpEntity = context.execute.getEntity();	
  252. 	    bytes = EntityUtils.toByteArray(context.httpEntity);
  253. 	    result = new String(bytes,"UTF-8");
  254. 			
  255. 	    log.info("YidunCheckUtil getCheckData validate result:"+result);
  256. 	    
  257. 	    if(StringUtils.isEmpty(result)){
  258. 	    	resultModel.setCode("-1");
  259. 			resultModel.setMessage("校验验证码失败");
  260. 			return resultModel;
  261. 		}
  262. 	    
  263. 	    result = result.substring(result.indexOf("(")+1, result.indexOf(")"));
  264. 	    JSONObject objJson = JSONObject.parseObject(result);
  265. 	    JSONObject dataJson = objJson.getJSONObject("data");
  266. 	    String validate = dataJson.getString("validate");
  267. 	    if(StringUtils.isEmpty(validate)){
  268. 	    	resultModel.setCode("-1");
  269. 			resultModel.setMessage("校验验证码失败");
  270. 			return resultModel;
  271. 	    }else {
  272. 	    	return resultModel;
  273. 	    }
  274. 	    
  275. 	}
  276. 	
  277. }

签名破解使用了补环境方式，采用VM2执行

  1.  
  2. var express = require('express');
  3. var router = express.Router();
  4.  
  5. var http = require('http');
  6. var url = require('url'); 
  7.  
  8. var traceUtil =  require('../tools/traceUtil'); 
  9.  
  10. var yidunUtil =  require('../tools/yidunUtil'); 
  11. var yidunWatchUtil =  require('../tools/yidunWatchUtil'); 
  12.  
  13. var fs = require('fs');
  14. const {VM,VMScript} = require('vm2');//npm install vm2
  15.  
  16. const file = `${__dirname}/../src/runcode/yidun_huakuai-2.19.1.js`;//需要vm2执行的JS代码
  17. const vm = new VM();
  18. //使用VMScript可以调试，在调试代码中增加debugger即可
  19. const script = new VMScript(fs.readFileSync(file),`${__dirname}.mycode.js`);
  20.  
  21. router.get('/yzm/cb', function(request, response, next) {
  22.     var rdata  =  
  23.     url.parse(request.url,true).query;   //获取参数
  24.     var urlKey = rdata['urlKey'];
  25.  
  26.     vm.setGlobal('myfunType','cb');//入参传值
  27.     vm.run(script);
  28.     
  29.     var cb = vm.getGlobal('myresult');//获取返回值
  30.  
  31.    // console.log('返回结果 cb:\n');
  32.    // console.log(cb);
  33.  
  34.     cb = encodeURIComponent(cb);
  35.  
  36.     response.writeHead(200, {'Content-Type': 'application/json'});
  37.     response.end(cb);
  38. });
  39.  
  40. router.get('/yzm/fp', function(request, response, next) {
  41.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  42.   var urlKey = rdata['urlKey'];
  43.  
  44.   vm.setGlobal('myfunType','fp');//入参传值
  45.   vm.run(script);
  46.   
  47.   var fp = vm.getGlobal('myresult');//获取返回值
  48.  
  49.  // console.log('返回结果 fp:\n');
  50.  // console.log(fp);
  51.  
  52.   fp = encodeURIComponent(fp);
  53.  
  54.   response.writeHead(200, {'Content-Type': 'application/json'});
  55.   response.end(fp);
  56. });
  57.  
  58. router.get('/yzm/callback', function(request, response, next) {
  59.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  60.   var urlKey = rdata['urlKey'];
  61.  
  62.   vm.setGlobal('myfunType','callback');//入参传值
  63.   vm.run(script);
  64.   
  65.   var callb = vm.getGlobal('myresult');//获取返回值
  66.  
  67. //  console.log('返回结果 callb:\n');
  68.   //console.log(callb);
  69.  
  70.   callb = encodeURIComponent(callb);
  71.  
  72.   response.writeHead(200, {'Content-Type': 'application/json'});
  73.   response.end(callb);
  74. });
  75.  
  76. router.get('/yzm/getM', function(request, response, next) {
  77.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  78.   var urlKey = rdata['urlKey'];//轨迹值
  79.   var token = rdata['token'];
  80.  
  81.   vm.setGlobal('myfunType','getM');//入参传值
  82.   vm.setGlobal('mytoken',token);
  83.   vm.setGlobal('myguiji',urlKey);
  84.   vm.run(script);
  85.   
  86.   var mOut = vm.getGlobal('myresult');//获取返回值
  87.  
  88.  // console.log('返回结果 mOut:\n');
  89.   //console.log(mOut);
  90.  
  91.   mOut = encodeURIComponent(mOut);
  92.  
  93.   response.writeHead(200, {'Content-Type': 'application/json'});
  94.   response.end(mOut);
  95. });
  96.  
  97.  
  98. router.get('/yzm/getP', function(request, response, next) {
  99.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  100.   var urlKey = rdata['urlKey'];//3个坐标值
  101.   var token = rdata['token'];
  102.  
  103.   vm.setGlobal('myfunType','getP');//入参传值
  104.   vm.setGlobal('mytoken',token);
  105.   vm.setGlobal('myzuobiao',urlKey);
  106.   vm.run(script);
  107.   
  108.   var pOut = vm.getGlobal('myresult');//获取返回值
  109.  
  110.  
  111.  // console.log('返回结果 pOut:\n');
  112.  // console.log(pOut);
  113.  
  114.   pOut = encodeURIComponent(pOut);
  115.  
  116.   response.writeHead(200, {'Content-Type': 'application/json'});
  117.   response.end(pOut);
  118. });
  119.  
  120. router.get('/yzm/getExt', function(request, response, next) {
  121.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  122.   var urlKey = rdata['urlKey'];//轨迹值
  123.   var token = rdata['token'];
  124.  
  125.  
  126.   vm.setGlobal('myfunType','getExt');//入参传值
  127.   vm.setGlobal('mytoken',token);
  128.   vm.setGlobal('myguiji',urlKey);
  129.   vm.run(script);
  130.   
  131.   var extOut = vm.getGlobal('myresult');//获取返回值
  132.  
  133.  // console.log('返回结果 extOut:\n');
  134. //  console.log(extOut);
  135.  
  136.   extOut = encodeURIComponent(extOut);
  137.  
  138.   response.writeHead(200, {'Content-Type': 'application/json'});
  139.   response.end(extOut);
  140. });
  141.  
  142. router.get('/yzm/getAcToken', function(request, response, next) {
  143.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  144.   var urlKey = rdata['urlKey'];//轨迹值
  145.   var token = rdata['token'];
  146.  
  147.   
  148.  
  149.   vm.setGlobal('myfunType','getAcToken');//入参传值
  150.   vm.run(script);
  151.   
  152.   var acToken = vm.getGlobal('myresult');//获取返回值
  153.  
  154.  // console.log('返回结果 acToken:\n');
  155.  // console.log(acToken);
  156.  
  157.   acToken = encodeURIComponent(acToken);
  158.  
  159.   response.writeHead(200, {'Content-Type': 'application/json'});
  160.   response.end(acToken);
  161. });
  162.  
  163. router.get('/yzm/getTrace', function(request, response, next) {
  164.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  165.   var urlKey = rdata['urlKey'];//3个坐标值
  166.  
  167.   var trace = traceUtil.getTrace(urlKey);//获取返回值
  168.  
  169.  
  170. //  console.log('返回结果 trace:\n');
  171.  // console.log(trace);
  172.  
  173.   response.writeHead(200, {'Content-Type': 'application/json'});
  174.   response.end(trace);
  175. });
  176.  
  177. router.get('/yzm/getTraceForWgz', function(request, response, next) {
  178.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  179.   //var urlKey = rdata['urlKey'];//1个坐标值
  180.  
  181.   var trace = traceUtil.getTraceForWgz();//获取返回值
  182.  
  183.  
  184.  // console.log('返回结果 trace:\n');
  185.  // console.log(trace);
  186.  
  187.   response.writeHead(200, {'Content-Type': 'application/json'});
  188.   response.end(JSON.stringify(trace));
  189. });
  190.  
  191.  
  192. //获取滑块轨迹
  193. router.get('/yzm/getTraceForHuakuai', function(request, response, next) {
  194.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  195.   var zuobiao = rdata['zuobiao'];//1个坐标值
  196.  
  197.   var trace = traceUtil.getTraceForHuakuai(zuobiao);//获取返回值
  198.  
  199.  // console.log('返回结果 trace:\n');
  200.  // console.log(trace);
  201.  
  202.   response.writeHead(200, {'Content-Type': 'application/json'});
  203.   response.end(JSON.stringify(trace));
  204. });
  205.  
  206.  
  207. router.get('/yzm/getData', function(request, response, next) {
  208.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  209.   var guiji = rdata['guiji'];//轨迹值
  210.   var token = rdata['token'];
  211.   var zuobiao = rdata['zuobiao'];
  212.  
  213.  
  214.   vm.setGlobal('myfunType','getData');//入参传值
  215.   vm.setGlobal('mytoken',token);
  216.   vm.setGlobal('myguiji',guiji);
  217.   vm.setGlobal('myzuobiao',zuobiao);
  218.   vm.run(script);
  219.   
  220.   var dataOut = vm.getGlobal('myresult');//获取返回值
  221.  
  222.  // console.log('返回结果 dataOut:\n');
  223.  // console.log(dataOut);
  224.  
  225.   response.writeHead(200, {'Content-Type': 'application/json'});
  226.   response.end(dataOut);
  227. });
  228. //无感知调用这个，只有ext参数中传输的坐标点数量不同，传1，点选传3
  229. router.get('/yzm/getDataForWgz', function(request, response, next) {
  230.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  231.   var guiji = rdata['guiji'];//轨迹值
  232.   var token = rdata['token'];
  233.   var zuobiao = rdata['zuobiao'];
  234.  
  235.  
  236.   vm.setGlobal('myfunType','getDataForWgz');//入参传值
  237.   vm.setGlobal('mytoken',token);
  238.   vm.setGlobal('myguiji',guiji);
  239.   vm.setGlobal('myzuobiao',zuobiao);
  240.   vm.run(script);
  241.   
  242.   var dataOut = vm.getGlobal('myresult');//获取返回值
  243.  
  244.   //console.log('返回结果 dataOut:\n');
  245.  // console.log(dataOut);
  246.  
  247.   response.writeHead(200, {'Content-Type': 'application/json'});
  248.   response.end(dataOut);
  249. });
  250.  
  251. //滑块调用这个，只有ext参数中传输的坐标点数量不同，传1，点选传3
  252. router.get('/yzm/getDataForHuakuai', function(request, response, next) {
  253.   var rdata  =  url.parse(request.url,true).query;   //获取参数
  254.   var guiji = rdata['guiji'];//轨迹值
  255.   var token = rdata['token'];
  256.   var zuobiao = rdata['zuobiao'];
  257.  
  258.  
  259.   vm.setGlobal('myfunType','getDataForHuakuai');//入参传值
  260.   vm.setGlobal('mytoken',token);
  261.   vm.setGlobal('myguiji',guiji);
  262.   vm.setGlobal('myzuobiao',zuobiao);
  263.   vm.run(script);
  264.   
  265.   var dataOut = vm.getGlobal('myresult');//获取返回值
  266.  
  267.  // console.log('返回结果 dataOut:\n');
  268.  // console.log(dataOut);
  269.  
  270.   response.writeHead(200, {'Content-Type': 'application/json'});
  271.   response.end(dataOut);
  272. });
  273.  
  274. //无感知获取CN31加密串
  275. router.post('/yzm/getCn31Str', function(request, response, next) {
  276.  
  277.   var validate = request.body.validate;
  278.   var fp = request.body.fp;
  279.  
  280.   vm.setGlobal('myfunType','getCn31Str');//入参传值
  281.   vm.setGlobal('wgz_validate',validate);
  282.   vm.setGlobal('wgz_fp',fp);
  283.   vm.run(script);
  284.   
  285.   var dataOut = vm.getGlobal('myresult');//获取返回值
  286.  
  287.  // console.log('返回结果 dataOut:\n');
  288.  // console.log(dataOut);
  289.  
  290.   response.writeHead(200, {'Content-Type': 'application/json'});
  291.   response.end(dataOut);
  292.  
  293. });
  294.  
  295.  
  296. router.post('/yzm/getYzmParam', function(request, response, next) {
  297.  
  298.   //var validate = request.body.validate;
  299.   var WM_DID = request.body.WM_DID;
  300.  
  301.   var result = {};
  302.  
  303.   result = yidunUtil.getYzmParam(WM_DID);
  304.  
  305.   response.writeHead(200, {'Content-Type': 'application/json'});
  306.   response.end(JSON.stringify(result));
  307.  
  308. });
  309.  
  310. router.post('/yzm/getCbByV3D', function(request, response, next) {
  311.  
  312.   //var validate = request.body.validate;
  313.   //var fp = request.body.fp;
  314.  
  315.   var result = {};
  316.  
  317.   result = yidunWatchUtil.getCbByV3D();
  318.  
  319.   response.writeHead(200, {'Content-Type': 'application/json'});
  320.   response.end(JSON.stringify(result));
  321.  
  322. });
  323.  
  324. router.post('/yzm/getDByV3D', function(request, response, next) {
  325.  
  326.   var objJson = request.body.objJson;
  327.  
  328.   var result = {};
  329.  
  330.   result = yidunWatchUtil.getDByV3D(objJson);
  331.  
  332.   response.writeHead(200, {'Content-Type': 'application/json'});
  333.   response.end(JSON.stringify(result));
  334.  
  335. });
  336.  
  337.  
  338. router.post('/yzm/getData/new', function(request, response, next) {
  339.   var guiji = request.body.guiji;
  340.   var token = request.body.token;
  341.   var zuobiao = request.body.zuobiao;
  342.  
  343.   var data = yidunUtil.getData(token,zuobiao,guiji);
  344.   var res = JSON.stringify(data);
  345.   res = encodeURIComponent(res);
  346.  
  347.   response.writeHead(200, {'Content-Type': 'application/json'});
  348.   response.end(res);
  349. });
  350.  
  351.  
  352. router.post('/yzm/getAcTokenWatch', function(request, response, next) {
  353.  
  354.   //var validate = request.body.validate;
  355.   var WM_DID = request.body.WM_DID;
  356.  
  357.   var result = {};
  358.  
  359.   result = yidunWatchUtil.getAcToken(WM_DID);
  360.  
  361.   response.writeHead(200, {'Content-Type': 'application/json'});
  362.   response.end(JSON.stringify(result));
  363.  
  364. });
  365.  
  366. module.exports = router;

补环境是在志远框架上进行了补充编写的。调用的服务层是自己编写。

就是提供个思路，代码已不可用！

纯技术交流，请勿用于非法用途,如有权益问题可以发私信联系我删除.

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/菜鸟追梦旅行/article/detail/521807
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号