diff --git a/大麦网/README.md b/大麦网/README.md new file mode 100644 index 0000000..4f395a0 --- /dev/null +++ b/大麦网/README.md @@ -0,0 +1,67 @@ +# 知识点: webpack打包 + +凡是遇到webpack打包的js项目,直接全局导出解密模块去执行,通过在浏览器环境测试成功后在改写成node环境下的执行。 + +## 登陆页面 + +**参数:password2** + +请求登陆页面 + +![请求](./img/1.png) + +发现`password2`参数加密 + +![请求](./img/2.png) + +全局搜索`password2`,找到加密点,不难发现`password2`是通过函数`e = this.rsaPassword(this.passwordNode.value())`得到 + +![请求](./img/3.png) + +进入函数调试,发现类似RSA加密 + +![请求](./img/4.png) + +这公钥没有做base64,不能确定是否存在魔改的情况 + +![请求](./img/5.png) + +先不管他,直接导出模块执行。把index.js全部复制到浏览器源代码中执行,头部加上`var getToken`; + +![请求](./img/6.png) + +尾部加上`getToken = __webpack_module_cache__` + +![请求](./img/7.png) + +在补全`window`全局变量参数 + + window.PAGE_START_LOAD_TIME = new Date().getTime(); + window.LOGIN_UMID_LOAD = true; + window.viewConfig = {....}, + window.viewData = {.....}; + window._lang = {.....}; + +控制台测试 + + new getToken[1641].exports.default((0)).rsaPassword('123456') + +![请求](./img/8.png) + +能成功打印出加密后的值。 + +**参数:password2** + +## 订单确认页面 + +存在`sign`加密参数 + +![请求](./img/9.png) + +断点定位加密参数位置 + +![请求](./img/10.png) + +这里直接告诉你答案:就是原生md5加密 + +![请求](./img/11.png) diff --git a/大麦网/img/1.png b/大麦网/img/1.png new file mode 100644 index 0000000..83f17f3 Binary files /dev/null and b/大麦网/img/1.png differ diff --git a/大麦网/img/10.png b/大麦网/img/10.png new file mode 100644 index 0000000..d2c6a46 Binary files /dev/null and b/大麦网/img/10.png differ diff --git a/大麦网/img/11.png b/大麦网/img/11.png new file mode 100644 index 0000000..cc1b1cf Binary files /dev/null and b/大麦网/img/11.png differ diff --git a/大麦网/img/2.png b/大麦网/img/2.png new file mode 100644 index 0000000..68dcc50 Binary files /dev/null and b/大麦网/img/2.png differ diff --git a/大麦网/img/3.png b/大麦网/img/3.png new file mode 100644 index 0000000..f12f082 Binary files /dev/null and b/大麦网/img/3.png differ diff --git a/大麦网/img/4.png b/大麦网/img/4.png new file mode 100644 index 0000000..b8e2582 Binary files /dev/null and b/大麦网/img/4.png differ diff --git a/大麦网/img/5.png b/大麦网/img/5.png new file mode 100644 index 0000000..37c866e Binary files /dev/null and b/大麦网/img/5.png differ diff --git a/大麦网/img/6.png b/大麦网/img/6.png new file mode 100644 index 0000000..51064bf Binary files /dev/null and b/大麦网/img/6.png differ diff --git a/大麦网/img/7.png b/大麦网/img/7.png new file mode 100644 index 0000000..1596f73 Binary files /dev/null and b/大麦网/img/7.png differ diff --git a/大麦网/img/8.png b/大麦网/img/8.png new file mode 100644 index 0000000..19220ec Binary files /dev/null and b/大麦网/img/8.png differ diff --git a/大麦网/img/9.png b/大麦网/img/9.png new file mode 100644 index 0000000..71d4163 Binary files /dev/null and b/大麦网/img/9.png differ