学习通登录逆向
學(xué)習(xí)通是大家經(jīng)常使用的工具,里面也有許多功能,不過都需要登錄才能使用,所以逆向登錄就很有必要了。
首先我們來分析一下登錄數(shù)據(jù)。
?
?我們發(fā)現(xiàn)uname和password都是加密的,我們重新發(fā)送一個(gè)新的登錄請(qǐng)求發(fā)現(xiàn),雖然是加密但是加密結(jié)果是不會(huì)變的,那么登錄就變得輕而易舉了。當(dāng)我們帶上參數(shù),用程序發(fā)送請(qǐng)求時(shí),發(fā)現(xiàn)登錄失敗。到底是什么原因呢,小編使用fd抓包工具抓取瀏覽器的請(qǐng)求和程序的請(qǐng)求對(duì)比。
發(fā)現(xiàn)瀏覽器上看到的請(qǐng)求頭和發(fā)送的請(qǐng)求頭順序不同,那么小編按照該請(qǐng)求頭請(qǐng)求,最后成功請(qǐng)求。?
import requests session=requests.session()headers={"Host": "passport2.chaoxing.com","Connection": "keep-alive","Content-Length": "248","sec-ch-ua": "\"Chromium\";v=\"106\", \"Microsoft Edge\";v=\"106\", \"Not;A=Brand\";v=\"99\"","Accept": "application/json, text/javascript, */*; q=0.01","Content-Type": "application/x-www-form-urlencoded; charset=UTF-8","X-Requested-With": "XMLHttpRequest","sec-ch-ua-mobile": "?0","User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Edg/106.0.1370.52","sec-ch-ua-platform": "\"Windows\"","Origin": "https://passport2.chaoxing.com","Sec-Fetch-Site": "same-origin","Sec-Fetch-Mode": "cors","Sec-Fetch-Dest": "empty","Referer": "https://passport2.chaoxing.com/login?fid=&newversion=true&refer=https://i.chaoxing.com","Accept-Encoding": "gzip, deflate, br","Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","Cookie": "fid=23194; route=52ffa9af7a380e114204ed76732d509c; JSESSIONID=F7C40528A60B7D04420D26319385CD5A; source=\"\"" } url = "https://passport2.chaoxing.com/fanyalogin" data = {"fid": "9332","uname": "you uname","password": "you password","refer": "https^%^253A^%^252F^%^252Fi.chaoxing.com","t": "true","forbidotherlogin": "0","validate": "","doubleFactorLogin": "0","independentId": "0" } session.headers=headers response = session.post(url, headers=headers, data=data)print(response.text) print(response)?
總結(jié)
- 上一篇: 求纸张的计算方法
- 下一篇: 微客侠:解决微信内直接打开淘宝链接