From d51d361314cadf74057ee904359e2917c87b3659 Mon Sep 17 00:00:00 2001 From: luzhisheng Date: Mon, 6 Mar 2023 11:24:57 +0800 Subject: [PATCH] =?UTF-8?q?16js=E5=8A=A0=E5=AF=86=E8=A1=A8=E6=83=85?= =?UTF-8?q?=E5=8C=85+sojson6.0-aa=E6=B7=B7=E6=B7=86-setInterval=E5=AE=9A?= =?UTF-8?q?=E6=97=B6=E4=BB=BB=E5=8A=A1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../main.py | 45 ++++ .../readme.md | 7 + .../server.js | 18 ++ .../test.js | 219 ++++++++++++++++++ 4 files changed, 289 insertions(+) create mode 100644 猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/main.py create mode 100644 猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/readme.md create mode 100644 猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/server.js create mode 100644 猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/test.js diff --git a/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/main.py b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/main.py new file mode 100644 index 0000000..3093e61 --- /dev/null +++ b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/main.py @@ -0,0 +1,45 @@ +import requests +import time + + +def get_safe(): + timestamp = int(time.time()) + data = {"timestamp": str(timestamp)} + url = f"http://0.0.0.0:3005/sign_16" + session = requests.session() + headers = { + 'content-type': 'application/x-www-form-urlencoded; charset=UTF-8' + } + session.headers = headers + response = session.request("POST", url, data=data) + return response.text + + +def challenge16(page, safe): + url = "https://www.python-spider.com/api/challenge16" + payload = f"page={page}" + session = requests.session() + headers = { + 'content-type': 'application/x-www-form-urlencoded; charset=UTF-8', + 'safe': safe + } + session.headers = headers + response = session.request("POST", url, data=payload) + return response.json() + + +def run(): + data_num = 0 + for page in range(1, 101): + safe = get_safe() + print(safe) + response_json = challenge16(page, safe) + data_list = response_json.get('data') + print(data_list) + for data in data_list: + data_num += int(data.get('value')) + print(data_num) + + +if __name__ == '__main__': + run() diff --git a/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/readme.md b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/readme.md new file mode 100644 index 0000000..0506fe9 --- /dev/null +++ b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/readme.md @@ -0,0 +1,7 @@ +# 知识点： js fuck和CryptoJS + +## 解题思路 + +查看请求链接 + +![请求](./img/1.png) diff --git a/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/server.js b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/server.js new file mode 100644 index 0000000..cd7bf1c --- /dev/null +++ b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/server.js @@ -0,0 +1,18 @@ +const express = require('express'); +const app = express(); +const encryption = require("./test"); +var bodyParser = require('body-parser'); +app.use(bodyParser()); + + +app.post('/sign_16', function (req, res) { + let result = ''; + let timestamp = req.body.timestamp; + result = encryption.safe(timestamp); + res.send(result.toString()); +}); + + +app.listen(3005, () => { + console.log("开启服务，端口 3005") +}); diff --git a/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/test.js b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/test.js new file mode 100644 index 0000000..0c68a09 --- /dev/null +++ b/猿人学练习/16js加密表情包+sojson6.0-aa混淆-setInterval定时任务/test.js @@ -0,0 +1,219 @@ +var hexcase = 0; +var b64pad = ""; +var chrsz = 8; + +window = global; +global.Buffer = global.Buffer || require('buffer').Buffer; + +if (typeof btoa === 'undefined') { + global.btoa = function (str) { + return new Buffer.from(str).toString('base64'); + }; +} + +if (typeof atob === 'undefined') { + global.atob = function (b64Encoded) { + return new Buffer.from(b64Encoded, 'base64').toString(); + }; +} + + +function hex_sha1(lIIii1) { + return binb2hex(core_sha1(str2binb(lIIii1), lIIii1.length * chrsz)); +} + +function b64_sha1(lili1) { + return binb2b64(core_sha1(str2binb(lili1), lili1.length * chrsz)); +} + +function str_sha1(lliiii) { + return binb2str(core_sha1(str2binb(lliiii), lliiii.length * chrsz)); +} + +function hex_hmac_sha1(IIll1, ll1il) { + return binb2hex(core_hmac_sha1(IIll1, ll1il)); +} + +function b64_hmac_sha1(Illl1I, lliiiI) { + return binb2b64(core_hmac_sha1(Illl1I, lliiiI)); +} + +function str_hmac_sha1(ii1lI, I1ilIl) { + return binb2str(core_hmac_sha1(ii1lI, I1ilIl)); +} + +function sha1_vm_test() { + return hex_sha1("abc") == "a9993e364706816aba3e25717850c26c9cd0d89d"; +} + +function core_sha1(liliI, ll1lI) { + liliI[ll1lI >> 5] |= 128 << 24 - ll1lI % 32; + liliI[(ll1lI + 64 >> 9 << 4) + 15] = ll1lI; + var ii1I11 = Array(80); + var liIi1 = 1732584193; + var lI11II = -271733879; + var l1llI1 = -1732584194; + var llIIll = 271733878; + var IillIi = -1009589776; + + for (var lii = 0; lii < liliI.length; lii += 16) { + var liIl1 = liIi1; + var llliil = lI11II; + var II1lll = l1llI1; + var II1lli = llIIll; + var ii1I1I = IillIi; + + for (var lil = 0; lil < 80; lil++) { + if (lil < 16) { + ii1I11[lil] = liliI[lii + lil]; + } else { + ii1I11[lil] = rol(ii1I11[lil - 3] ^ ii1I11[lil - 8] ^ ii1I11[lil - 14] ^ ii1I11[lil - 16], 1); + } + + var IillIl = safe_add(safe_add(rol(liIi1, 5), sha1_ft(lil, lI11II, l1llI1, llIIll)), safe_add(safe_add(IillIi, ii1I11[lil]), sha1_kt(lil))); + IillIi = llIIll; + llIIll = l1llI1; + l1llI1 = rol(lI11II, 30); + lI11II = liIi1; + liIi1 = IillIl; + } + + liIi1 = safe_add(liIi1, liIl1); + lI11II = safe_add(lI11II, llliil); + l1llI1 = safe_add(l1llI1, II1lll); + llIIll = safe_add(llIIll, II1lli); + IillIi = safe_add(IillIi, ii1I1I); + } + + return Array(liIi1, lI11II, l1llI1, llIIll, IillIi); +} + +function sha1_ft(IiIi, iI1ll1, IlI1Il, l1il1l) { + if (IiIi < 20) { + return iI1ll1 & IlI1Il | ~iI1ll1 & l1il1l; + } + + if (IiIi < 40) { + return iI1ll1 ^ IlI1Il ^ l1il1l; + } + + if (IiIi < 60) { + return iI1ll1 & IlI1Il | iI1ll1 & l1il1l | IlI1Il & l1il1l; + } + + return iI1ll1 ^ IlI1Il ^ l1il1l; +} + +function sha1_kt(i11I11) { + return i11I11 < 20 ? 1518500249 : i11I11 < 40 ? 1859775393 : i11I11 < 60 ? -1894007588 : -899497514; +} + +function core_hmac_sha1(llI, llliI) { + var iil1iI = str2binb(llI); + + if (iil1iI.length > 16) { + iil1iI = core_sha1(iil1iI, llI.length * chrsz); + } + + var IlIllI = Array(16); + var il1i1I = Array(16); + + for (var iI11II = 0; iI11II < 16; iI11II++) { + IlIllI[iI11II] = iil1iI[iI11II] ^ 909522486; + il1i1I[iI11II] = iil1iI[iI11II] ^ 1549556828; + } + + var lI1li1 = core_sha1(IlIllI.concat(str2binb(llliI)), 512 + llliI.length * chrsz); + return core_sha1(il1i1I.concat(lI1li1), 672); +} + +function safe_add(iIII1I, ilil1i) { + var lI1liI = (iIII1I & 65535) + (ilil1i & 65535); + var i1i1Ii = (iIII1I >> 16) + (ilil1i >> 16) + (lI1liI >> 16); + return i1i1Ii << 16 | lI1liI & 65535; +} + +function rol(lllii, iI11Ii) { + return lllii << iI11Ii | lllii >>> 32 - iI11Ii; +} + +function str2binb(il1i11) { + var iil1ii = Array(); + var IlIlli = (1 << chrsz) - 1; + + for (var il1i1i = 0; il1i1i < il1i11.length * chrsz; il1i1i += chrsz) { + iil1ii[il1i1i >> 5] |= (il1i11.charCodeAt(il1i1i / chrsz) & IlIlli) << 24 - il1i1i % 32; + } + + return iil1ii; +} + +function binb2str(i11ilI) { + var lil11I = ""; + var Iliii1 = (1 << chrsz) - 1; + + for (var iIiIi = 0; iIiIi < i11ilI.length * 32; iIiIi += chrsz) { + lil11I += String.fromCharCode(i11ilI[iIiIi >> 5] >>> 24 - iIiIi % 32 & Iliii1); + } + + return lil11I; +} + +function binb2hex(iil1ll) { + if (hexcase) { + var lI1lll = "0123456789ABCDEF"; + } else { + var lI1lll = "0123456789abcdef"; + } + + var iIiII = ""; + + for (var iil1lI = 0; iil1lI < iil1ll.length * 4; iil1lI++) { + iIiII += lI1lll.charAt(iil1ll[iil1lI >> 2] >> (3 - iil1lI % 4) * 8 + 4 & 15) + lI1lll.charAt(iil1ll[iil1lI >> 2] >> (3 - iil1lI % 4) * 8 & 15); + } + + return iIiII; +} + +function binb2b64(iiiliI) { + var IIIII1 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; + var I1lIlI = ""; + + for (var ii1ill = 0; ii1ill < iiiliI.length * 4; ii1ill += 3) { + var II1iI = (iiiliI[ii1ill >> 2] >> 8 * (3 - ii1ill % 4) & 255) << 16 | (iiiliI[ii1ill + 1 >> 2] >> 8 * (3 - (ii1ill + 1) % 4) & 255) << 8 | iiiliI[ii1ill + 2 >> 2] >> 8 * (3 - (ii1ill + 2) % 4) & 255; + + for (var llI1II = 0; llI1II < 4; llI1II++) { + if (ii1ill * 8 + llI1II * 6 > iiiliI.length * 32) { + I1lIlI += b64pad; + } else { + I1lIlI += IIIII1.charAt(II1iI >> 6 * (3 - llI1II) & 63); + } + } + } + + return I1lIlI; +} + + +// a = '1678067697'; +// b64_sha1_a = b64_sha1(a); +// console.log(b64_sha1_a); +// +// binb2b64_a = binb2b64(hex_sha1(window.btoa(core_sha1(a)))); +// console.log(binb2b64_a); +// +// btoa_a = window.btoa(a); +// console.log(btoa_a); + + +function safe(timestamp) { + let a; + a = window.btoa(timestamp) + ('|') + binb2b64(hex_sha1(window.btoa(core_sha1(timestamp)))) + b64_sha1(timestamp); + return a; +} + + +module.exports = + { + safe + };