极验2代破解(二)

  • 2018-10-09
  • 7,051
  • 197
  • 3

还是老规矩 请勿用于非法用途


上篇文章讲的是 RSA 加密

极验2代破解(一)

这一次 讲的就是 AES 加密部分了

也就是这一行代码 加密的数据如下

{
    "userresponse": "66bac01", 
    "passtime": 450, 
    "imgload": 665, 
    "aa": "?/Bm/01/0(!!:t(!)(!)(!*bsyts(!!(jd8?H:8d@M9O$)q", 
    "ep": {
        "v": "6.0.9"
    }, 
    "rp": "bfa0586f70f833654665b7239fd9129c"
}

定义处在

aa -> 轨迹

rp -> 校验

userresponse -> x 和 challenge 生成 (下篇讲吧)

重点!!!

AES KEY 生成

(65536 * (1 + Math.random()) | 0).toString(16).substring(1);

那么服务器怎么知道AES加密的密钥是多少?

答: 将Key用RSA加密 发送到服务器

也就是H7z部分

跳入后是

这样的

Pkcs7+CBC+IV:(0000000000000000)

然后用了某种方法专成 bytes

那么 AES加密部分 解析完成

但是此时数据还是bytes

接下来是 通过

这一行来转换

跟入

就是这个函数了

(为了方便演示 我用浏览器直接跑了 没有放反混淆的代码… 你们自己重写吧)

验证可用

那么 AES 只剩下 JSON部分的加密

整体上 还差一个轨迹加密(Easy…)


请勿用于非法用途

 

评论

  • Halley Sanchez回复

    These are in fact enormous ideas in concerning blogging.
    You have touched some fastidious things here.
    Any way keep up wrinting.

  • Candace Wilson回复

    I am sure this post has touched all the internet people,
    its really really fastidious paragraph on building up new
    webpage.

  • Randolph Castello回复

    Hello there, I do believe your site could be having web browser compatibility problems.
    Whenever I look at your website in Safari, it looks fine however when opening
    in I.E., it’s got some overlapping issues. I simply wanted to provide you with a quick heads
    up! Besides that, wonderful site!

  • Jaime Stanley回复

    I am sure this post has touched all the internet users,
    its really really fastidious post on building up new weblog.

  • Elaine Bolin回复

    It’s perfect time to make some plans for the future and it is time to be
    happy. I have learn this post and if I may just
    I desire to counsel you some attention-grabbing things or tips.

    Maybe you can write subsequent articles referring to this
    article. I wish to learn even more things approximately it!

  • Clayton Smith回复

    I am sure this article has touched all the internet
    visitors, its really really pleasant paragraph on building up new web site.

  • Gale Anderson回复

    One thing is that often one of the most common incentives for using your credit cards is a cash-back as well as rebate offer. Generally, you will get 1-5 back on various acquisitions. Depending on the card, you may get 1 again on most acquisitions, and 5 back on expenditures made from convenience stores, gas stations, grocery stores as well as ‘member merchants’.

  • Margarita Danforth回复

    I seriously love your blog.. Pleasant colors & theme.
    Did you develop this site yourself? Please reply back as
    I’m attempting to create my own personal site and want to find out where you
    got this from or what the theme is named. Appreciate it!

  • Peggy Atlas回复

    I’ve been surfing online more than 3 hours today,
    yet I never found any interesting article like yours.

    It is pretty worth enough for me. In my view, if all site owners
    and bloggers made good content as you did,
    the web will be a lot more useful than ever before.

  • Kenneth Norris回复

    I visited several web pages however the audio quality for audio songs present at this site
    is really wonderful.

  • Richard Muse回复

    I will immediately clutch your rss as I can’t in finding your email subscription hyperlink or newsletter
    service. Do you’ve any? Please allow me realize so that I could subscribe.

    Thanks.

  • Tiera Morgan回复

    I am glad to be a visitor of this stark website, thanks for this rare information!

  • Danny Jardine回复

    I absolutely love your blog and find a lot of your post’s to be precisely what I’m looking for.
    can you offer guest writers to write content for you?
    I wouldn’t mind producing a post or elaborating on a lot of
    the subjects you write with regards to here.
    Again, awesome web log!

  • Diane Davis回复

    I am sure this paragraph has touched all the internet visitors,
    its really really pleasant article on building up new blog.

  • Stephen Dowling回复

    Hello, i read your blog from time to time and i own a similar one and i was just wondering if you get a
    lot of spam feedback? If so how do you protect against it,
    any plugin or anything you can recommend? I get so much lately it’s driving me crazy so any assistance is very
    much appreciated.

  • Steven Perez回复

    Definitely believe that which you said. Your favourite
    reason seemed to be at the web the easiest factor to remember of.

    I say to you, I definitely get irked at the same time as people think about worries that they plainly don’t recognize about.
    You controlled to hit the nail upon the top as smartly as defined
    out the whole thing with no need side effect , folks could take a signal.
    Will probably be back to get more. Thank you

  • Lisa Weller回复

    It is appropriate time to make some plans for the future and it’s time to be happy.
    I’ve read this post and if I could I desire to suggest you few interesting
    things or suggestions. Maybe you could write
    next articles referring to this article. I wish to read even more things about it!

  • Vicky Espiritu回复

    Hey would you mind letting me know which hosting company you’re working with?

    I’ve loaded your blog in 3 completely different browsers and I must say this blog loads a lot
    quicker then most. Can you suggest a good internet
    hosting provider at a honest price? Many thanks,
    I appreciate it!

  • Michael Zientek回复

    Ahaa, its fastidious discussion concerning this post here at this weblog, I have read all that, so
    at this time me also commenting here.

  • Maria Olsen回复

    I have been surfing online more than three hours lately, yet I by no means
    discovered any attention-grabbing article like yours. It is
    lovely worth enough for me. In my view, if all site owners and bloggers
    made just right content as you did, the internet
    will likely be much more useful than ever before.

  • Jonathon Blatz回复

    I will immediately take hold of your rss as I can not to find
    your e-mail subscription link or e-newsletter service.
    Do you have any? Please let me recognize in order that I could subscribe.

    Thanks.

  • Debra Moore回复

    Its such as you read my mind! You seem to know so much about this, like you
    wrote the e book in it or something. I believe that you simply
    can do with a few p.c. to force the message house a little bit,
    however instead of that, that is excellent blog.
    A fantastic read. I will certainly be back.

  • Joy Fissel回复

    I have been surfing online more than 3 hours today, yet I never found any interesting article like yours.
    It’s pretty worth enough for me. In my opinion, if all webmasters and bloggers made good content as you did, the web will be much
    more useful than ever before.

  • Michael Mowles回复

    I am writing to let you know of the perfect encounter my girl developed using your webblog. She picked up several issues, which included how it is like to possess a great giving mood to make the mediocre ones completely understand specified tortuous subject matter. You really did more than people’s expected results. Thanks for displaying such interesting, trusted, edifying and unique tips on that topic to Emily.

  • Veronica Buote回复

    Just want to say your article is as surprising.
    The clearness in your post is just excellent and i could assume you are an expert on this subject.
    Well with your permission allow me to grab your feed to keep up to date with forthcoming post.

    Thanks a million and please continue the gratifying work.

  • Kristina Thomas回复

    My coder is trying to convince me to move to .net from PHP.
    I have always disliked the idea because of the expenses.

    But he’s tryiong none the less. I’ve been using Movable-type on various websites for about a year
    and am nervous about switching to another platform.
    I have heard fantastic things about blogengine.net.
    Is there a way I can import all my wordpress posts into it?
    Any help would be greatly appreciated!

  • George Whisler回复

    Ahaa, its good discussion regarding this post at this place at
    this blog, I have read all that, so now
    me also commenting at this place.

  • Viola Rodriguez回复

    Hello there! This blog post couldn’t be written much better!
    Reading through this post reminds me of my previous roommate!
    He constantly kept talking about this. I am going to
    forward this article to him. Fairly certain he’ll have a very
    good read. Many thanks for sharing!

  • Geneva Beauvais回复

    I’m really impressed with your writing skills as well as with
    the format on your weblog. Is that this a paid
    subject matter or did you customize it yourself?
    Anyway keep up the excellent quality writing, it is uncommon to peer a great blog like this one nowadays..