spider/rs-reverse
1
0
Fork 0
mirror of https://github.com/pysunday/rs-reverse.git synced 2025-04-05 00:09:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8 from pysunday/develop

Browse Source 
feat: 1. makecode子命令增加-j入参，用于还原$_ts.l__处理的js代码 2.生成目标文件调整 3. readme更新
This commit is contained in:
pysunday 2024-04-21 21:37:59 +08:00 committed by GitHub
commit 3ce1bc0f3a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
9 changed files with 164 additions and 126 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
README.md
View File

@ -35,34 +35,41 @@ npm包不能保证最新代码，最新代码以仓库代码为准!
```console
$ npx rs-reverse makecode -h
rs-reverse makecode
rs-reverse makecode
生成动态代码
接收ts.json文件生成immucfg、ts、ts-full文件，如果传入的是url则还会生成html、主代
码、动态代码文件，还可通过-j命令接收多个$_ts.l__处理的文件url并生成该js文件及解
密后的js文件。
**`-j`参数需要注意，链接地址必须带上查询参数，不带的话返回的是未经过瑞数处理的文件，可以从浏览器控制台查看带参数的完整地址，如果待解密的js文件存在多个时，为了保证结果中变量名与瑞数解析的变量名一致，需要按浏览器的解析顺序依序传入（因为变量名存在复用逻辑）。**
Options:
-h 显示帮助信息 [boolean]
-f, --file 含有nsd, cd值的json文件 [string]
-l, --level 日志打印等级，参考log4js，默认为info [string]
-u, --url 瑞数返回204状态码的请求地址 [string]
-v, --version 显示版本号 [boolean]
Examples:
rs-reverse makecode -f example/codes/1-$_ts.json
rs-reverse makecode -u http://url/path
-a, --adapt 已经做了适配的网站名称，不传则为cnipa [string]
-j, --jsurls $_ts.__l方法执行的js文件链接(必须带上查询参数)，多个时需要按顺
序传入，如：-j "https://host/chunk.js?4VGu1xaT=a728b2" -j
"https://host/app.js?4VGu1xaT=a728b2" [array]
-v, --version 显示版本号
```
调用示例：
```bash
$ npx rs-reverse makecode -u https://wcjs.sbj.cnipa.gov.cn/sgtmi
$ npx rs-reverse makecode -u https://wcjs.sbj.cnipa.gov.cn/sgtmi -j 'https://wcjs.sbj.cnipa.gov.cn/js/chunk-vendors.66e24864.js?查询参数' -j 'https://wcjs.sbj.cnipa.gov.cn/js/app.9f7a91c9.js?查询参数'
url方式提取的ts：/path/to/output/makecode_input_ts.json
url方式提取的静态文本：/path/to/output/makecode_input_immucfg.json
url方式提取的javascript代码：/path/to/output/makecode_input_js.js
url方式提取的html代码：/path/to/output/makecode_input_html.html
程序生成的ts：/path/to/output/makecode_output_ts.json
程序生成的动态代码：/path/to/output/makecode_output_code.js
url方式提取的ts：output/makecode/ts.json
url方式提取的静态文本：output/makecode/immucfg.json
程序生成的ts：output/makecode/ts-full.json
url方式提取的html代码：output/makecode/sgtmi.html
url方式提取的javascript代码：output/makecode/cCdzB9ZjDFks.a728b22.js
cCdzB9ZjDFks.a728b22.js生成的动态代码：output/makecode/cCdzB9ZjDFks.a728b22-dynamic.js
url方式提取的javascript代码：output/makecode/chunk-vendors.66e24864.js
chunk-vendors.66e24864.js生成的解密代码：output/makecode/chunk-vendors.66e24864-decrypt.js
url方式提取的javascript代码：output/makecode/app.9f7a91c9.js
app.9f7a91c9.js生成的解密代码：output/makecode/app.9f7a91c9-decrypt.js
```
@ -79,7 +86,7 @@ Examples:
$ npx rs-reverse makecookie -h
rs-reverse makecookie
生成动态代码
生成cookie值并打印
Options:
-h 显示帮助信息 [boolean]
@ -88,10 +95,6 @@ Options:
-u, --url 瑞数返回204状态码的请求地址 [string]
-a, --adapt 已经做了适配的网站名称，不传则为cnipa [string]
-v, --version 显示版本号 [boolean]
Examples:
rs-reverse makecookie -f example/codes/1-$_ts.json
rs-reverse makecookie -u http://url/path
```
调用示例：
@ -99,9 +102,6 @@ Examples:
```bash
$ npx rs-reverse makecookie -u https://wcjs.sbj.cnipa.gov.cn/sgtmi
url方式提取的ts：/path/to/output/makecookie_url_ts_1704391389883.json
url方式提取的静态文本：/path/to/output/makecookie_url_immutext_1704391389883.json
存在meta-content值：n5fQ9G1lGvUzfS_yMHx30yYAbp2_NDZI 解析结果：/sgtmi
Cookie值: 0yk64LrpoFnc8Wi4Mmu_rijgRRoC2SHY1bQlR2_QZ805_CqRd1uOgGRnlEvHvXSoQuwkx_fwn4iQnPDFrQigm1b4GnD61Pf9vU5XKtJtAWIoWeG_22OLiccUwGjI0lQaJ_jaYIBFygNsPSPf_0GnJyT1umFrFgAkAoqh1s0G9IDE1uPEM3PV8M1J.wbKdSgMLg8T3bGD5w2sHHohKfnwsT7bMNbb8xbjSxsn8qb8AvY0
@ -111,7 +111,7 @@ Examples:
### 2.3. makecode-high子命令
执行子命令`makecode-high`生成cookie，解码两次请求返回的网站代码(功能涵盖makecode子命令)，调用示例：
执行子命令`makecode-high`生成网站代码，解码两次请求返回的网站代码(功能涵盖makecode子命令)，调用示例：
1. npx方式：`npx rs-reverse makecode-high -u url`
2. 文件方式：`node main.js makecode-high -u url`
@ -130,7 +130,6 @@ rs-reverse makecode-high
Options:
-h 显示帮助信息 [boolean]
-f
-l, --level 日志打印等级，参考log4js，默认为info [string]
-u, --url 瑞数返回204状态码的请求地址 [string] [required]
-a, --adapt 已经做了适配的网站名称，不传则为cnipa [string]
@ -147,25 +146,25 @@ Examples:
第1次请求：
url方式提取的ts：/path/to/output/makecode-high/first/ts.json
url方式提取的静态文本：/path/to/output/makecode-high/first/immucfg.json
程序生成的ts：/path/to/output/makecode-high/first/ts-full.json
url方式提取的javascript代码：/path/to/output/makecode-high/first/cCdzB9ZjDFks.a728b22.js
url方式提取的html代码：/path/to/output/makecode-high/first/sgtmi.html
cCdzB9ZjDFks.a728b22.js生成的动态代码：/path/to/output/makecode-high/first/cCdzB9ZjDFks.a728b22-dynamic.js
url方式提取的ts：output/makecode-high/first/ts.json
url方式提取的静态文本：output/makecode-high/first/immucfg.json
程序生成的ts：output/makecode-high/first/ts-full.json
url方式提取的javascript代码：output/makecode-high/first/cCdzB9ZjDFks.a728b22.js
url方式提取的html代码：output/makecode-high/first/sgtmi.html
cCdzB9ZjDFks.a728b22.js生成的动态代码：output/makecode-high/first/cCdzB9ZjDFks.a728b22-dynamic.js
第2次请求：
url方式提取的ts：/path/to/output/makecode-high/second/ts.json
url方式提取的静态文本：/path/to/output/makecode-high/second/immucfg.json
程序生成的ts：/path/to/output/makecode-high/second/ts-full.json
url方式提取的javascript代码：/path/to/output/makecode-high/second/cCdzB9ZjDFks.a728b22.js
url方式提取的html代码：/path/to/output/makecode-high/second/sgtmi.html
cCdzB9ZjDFks.a728b22.js生成的动态代码：/path/to/output/makecode-high/second/cCdzB9ZjDFks.a728b22-dynamic.js
url方式提取的javascript代码：/path/to/output/makecode-high/second/chunk-vendors.66e24864.js
url方式提取的javascript代码：/path/to/output/makecode-high/second/app.9f7a91c9.js
chunk-vendors.66e24864.js生成的解密代码：/path/to/output/makecode-high/second/chunk-vendors.66e24864-decrypt.js
app.9f7a91c9.js生成的解密代码：/path/to/output/makecode-high/second/app.9f7a91c9-decrypt.js
url方式提取的ts：output/makecode-high/second/ts.json
url方式提取的静态文本：output/makecode-high/second/immucfg.json
程序生成的ts：output/makecode-high/second/ts-full.json
url方式提取的javascript代码：output/makecode-high/second/cCdzB9ZjDFks.a728b22.js
url方式提取的html代码：output/makecode-high/second/sgtmi.html
cCdzB9ZjDFks.a728b22.js生成的动态代码：output/makecode-high/second/cCdzB9ZjDFks.a728b22-dynamic.js
url方式提取的javascript代码：output/makecode-high/second/chunk-vendors.66e24864.js
url方式提取的javascript代码：output/makecode-high/second/app.9f7a91c9.js
chunk-vendors.66e24864.js生成的解密代码：output/makecode-high/second/chunk-vendors.66e24864-decrypt.js
app.9f7a91c9.js生成的解密代码：output/makecode-high/second/app.9f7a91c9-decrypt.js
```

24
main.js
View File

@ -14,6 +14,8 @@ const pkg = require(paths.package);
const log4js = require('log4js');
const adapt = require('@src/adapt');
const gv = require('@src/handler/globalVarible');
const _merge = require('lodash/merge');
const _omit = require('lodash/omit');
function debugLog(level) {
if (level) {
@ -67,11 +69,8 @@ const commandHandler = (command, argv) => {
logger.trace(`传入的$_ts.cd: ${ts.cd}`);
gv._setAttr('argv', argv);
try {
if (argv.url) {
command(ts, adapt(argv.url, argv.adapt), argv.url);
} else {
command(ts);
}
const immucfg = argv.url ? adapt(argv.url, argv.adapt) : undefined;
command(ts, immucfg, _merge(argv.url || {}, argv.jsurls || {}));
} catch (err) {
logger.error(err.stack);
}
@ -84,16 +83,23 @@ module.exports = yargs
.usage('使用: node $0 <commond> [options]')
.command({
command: 'makecode',
describe: '生成动态代码',
builder: commandBuilder,
describe: '接收ts.json文件生成immucfg、ts、ts-full文件，如果传入的是url则还会生成html、主代码、动态代码文件，还可通过-j命令接收多个$_ts.l__处理的文件url并生成该js文件及解密后的js文件',
builder: {
...commandBuilder,
j: {
alias: 'jsurls',
describe: '$_ts.__l方法执行的js文件链接(必须带上查询参数)，多个时需要按顺序传入，如：-j "https://host/chunk.js?4VGu1xaT=a728b2" -j "https://host/app.js?4VGu1xaT=a728b2"',
type: 'array',
coerce: getCode,
}
},
handler: commandHandler.bind(null, makeCode),
})
.command({
command: 'makecode-high',
describe: '解码两次请求返回的网站代码(功能涵盖makecode子命令)',
builder: {
...commandBuilder,
f: undefined,
..._omit(commandBuilder, ['f']),
u: {
...commandBuilder.u,
demandOption: true,

4
package.json
View File

@ -1,6 +1,6 @@
{
"name": "rs-reverse",
"version": "1.7.1",
"version": "1.7.2",
"description": "瑞数算法逆向,website reverse engineering",
"main": "main.js",
"directories": {
@ -36,7 +36,7 @@
"registry": "https://registry.npmjs.org/"
},
"author": "pysunday",
"license": "ISC",
"license": "BSD 3-Clause",
"dependencies": {
"cheerio": "^1.0.0-rc.12",
"fs-extra": "^11.2.0",

28
src/handler/AppCode.js
View File

@ -1,5 +1,7 @@
const gv = require('@src/handler/globalVarible');
let maxLen = 0; // 用于与瑞数代码逻辑一致，瑞数逻辑是当数组长度少于上一次生成的数组则复用上一次的数组
module.exports = class {
constructor(params, idx) {
this.oper = 0;
@ -38,15 +40,18 @@ module.exports = class {
getKeys(len) {
const keys = [];
for(let i = 0; i <= len; i++) {
const j = Math.floor((this.random || Math.random()) * 4294967295) % len + 0;
const j = Math.floor((Math.random()) * 4294967295) % len + 0;
const temp = keys[i];
keys[i] = keys[j] || `$_${j}`;
keys[j] = `$_${i}`;
keys[j] = temp || `$_${i}`;
}
return keys;
}
decrypt() {
const keys = this.getKeys(this.getLength());
decrypt(isMerge = false) {
// isMerge：是否将变量数组合并到代码中
maxLen = Math.max(this.getLength(), maxLen);
const keys = this.getKeys(maxLen);
const name = `$$_${this.idx}`;
const num = this.getLength();
const ret = new Array(num), res = [];
@ -71,16 +76,14 @@ module.exports = class {
ret[i] = val;
break;
case 4:
// ret[i] = `${name}[${next}]`;
ret[i] = `"${staticText[next]}"`;
ret[i] = isMerge ? `"${staticText[next]}"` : `${name}[${next}]`;
break;
case 5:
ret[i] = this.params[2][next]
break;
}
}
// return `window[${name}]=${JSON.stringify(staticText)};${ret.join('')}`;
return ret.join('');
return isMerge ? ret.join('') : `window.${name}=${JSON.stringify(staticText)};\n${ret.join('')}`;
}
run() {
@ -91,4 +94,13 @@ module.exports = class {
};
return code;
}
static getParams(code) {
// 去除外层的$_ts.l__方法
if (typeof code !== 'string' || code.indexOf('$_ts.l__') !== 0) {
throw new Error('解码网站渲染代码未发现$_ts.l__前缀，请检查!');
}
const $_ts = { l__: (...params) => params };
return eval(code);
}
}

105
src/makeCode.js
View File

@ -1,56 +1,73 @@
const AppCode = require('./handler/AppCode');
const Coder = require('./handler/Coder');
const paths = require('@utils/paths');
const fs = require('fs');
const fse = require('fs-extra');
const logger = require('@utils/logger');
const { init } = require('@src/handler/parser/');
function filenameAddDesc(name, desc) {
const arr = name.split('.');
if (arr.length < 2) throw new Error(`文件名不正确: ${name}`);
arr[arr.length - 2] += desc;
return arr.join('.');
}
function writeFile(ts, immucfg, { jscode, html, appcode = [] }, $_ts, code) {
const files = [
{
name: 'ts.json',
desc: immucfg ? 'url方式提取的ts：' : '程序接收的ts：',
text: JSON.stringify(ts),
},
immucfg ? {
name: 'immucfg.json',
desc: 'url方式提取的静态文本：',
text: JSON.stringify(immucfg),
} : null,
{
name: 'ts-full.json',
desc: '程序生成的ts：',
text: JSON.stringify($_ts),
},
html,
jscode,
{
name: jscode ? filenameAddDesc(jscode.name, '-dynamic') : 'dynamic.js',
desc: `${jscode?.name || '程序'}生成的动态代码：`,
text: '// 该行标记来源，非动态代码生成: ' + JSON.stringify(ts) + '\n\n' + code,
},
...appcode.reduce((ans, it) => {
ans.push(it);
if (it.decryptCode) {
ans.push({
name: filenameAddDesc(it.name, '-decrypt'),
desc: `${it.name}生成的解密代码：`,
text: it.decryptCode,
});
}
return ans;
}, []),
].filter(Boolean).map(it => ({ ...it, filepath: paths.outputResolve('makecode', it.name) }))
if (!fs.existsSync(paths.outputResolve('makecode'))) fse.ensureDirSync(paths.outputResolve('makecode'));
files.forEach(({ filepath, text, code }) => filepath && fs.writeFileSync(filepath, text || code));
return files;
}
module.exports = function (ts, immucfg, mate = {}) {
const startTime = new Date().getTime();
if (fs.existsSync(paths.outputResolve('makecode'))) {
fse.moveSync(paths.outputResolve('makecode'), paths.outputResolve('makecode-old'), { overwrite: true });
}
const coder = new Coder(ts, immucfg);
const { code, $_ts } = coder.run();
const files = [
immucfg ? {
name: 'makecode_input_ts',
desc: 'url方式提取的ts：',
text: JSON.stringify(ts),
extend: 'json',
} : null,
immucfg ? {
name: 'makecode_input_immucfg',
desc: 'url方式提取的静态文本：',
text: JSON.stringify(immucfg),
extend: 'json',
} : null,
mate.jscode ? {
name: 'makecode_input_js',
desc: 'url方式提取的javascript代码：',
text: mate.jscode.code,
extend: 'js',
} : null,
mate.html ? {
name: 'makecode_input_html',
desc: 'url方式提取的html代码：',
text: mate.html.code,
extend: 'html',
newLine: true,
} : null,
{
name: 'makecode_output_ts',
desc: '程序生成的ts：',
text: JSON.stringify($_ts),
extend: 'json',
},
{
name: 'makecode_output_code',
desc: '程序生成的动态代码：',
text: '// 该行标记来源，非动态代码生成: ' + JSON.stringify(ts) + '\n\n' + code,
extend: 'js',
},
].filter(Boolean).map(it => ({ ...it, filepath: `${paths.outputResolve(it.name)}.${it.extend}` }))
if (!fs.existsSync(paths.outputPath)) fs.mkdirSync(paths.outputPath);
files.forEach(({ filepath, text }) => fs.writeFileSync(filepath, text))
init($_ts);
mate.appcode?.forEach((appcode, idx) => {
appcode.decryptCode = new AppCode(AppCode.getParams(appcode.code)).run();
});
const files = writeFile(ts, immucfg, mate, $_ts, code);
logger.info([
`生成动态代码成功！用时：${new Date().getTime() - startTime}ms\n`,
...files.reduce((ans, it, idx) => ([...ans, `${it.desc}${it.filepath}${idx === files.length - 1 || it.newLine ? '\n' : ''}`]), []),
`代码还原成功！用时：${new Date().getTime() - startTime}ms\n`,
...files.reduce((ans, it, idx) => ([...ans, typeof it === 'string' ? it : `${it.desc}${paths.relative(it.filepath)}${idx === files.length - 1 || it.newLine ? '\n' : ''}`]), []),
].join('\n '));
}

21
src/makeCodeHigh.js
View File

@ -18,13 +18,6 @@ function parseR2mka(text) {
return unescape(text.substr(start, end));
}
function mkdirsSync(dirPath) {
if (!fs.existsSync(dirPath)) {
mkdirsSync(path.dirname(dirPath));
fs.mkdirSync(dirPath);
}
}
function filenameAddDesc(name, desc) {
const arr = name.split('.');
if (arr.length < 2) throw new Error(`文件名不正确: ${name}`);
@ -63,16 +56,10 @@ function writeFile(step, ts, immucfg, { jscode, html, appcode = [] }, $_ts, code
text: it.decryptCode,
}))
].filter(Boolean).map(it => ({ ...it, filepath: paths.outputResolve('makecode-high', step, it.name) }))
if (!fs.existsSync(paths.outputResolve('makecode-high', step))) mkdirsSync(paths.outputResolve('makecode-high', step));
if (!fs.existsSync(paths.outputResolve('makecode-high', step))) fse.ensureDirSync(paths.outputResolve('makecode-high', step));
return files;
}
function decryptAppCode(appcode, idx) {
const $_ts = { l__: (...params) => params };
const codeParams = eval(appcode.code);
appcode.decryptCode = new AppCode(codeParams, idx + 1).run();
}
function firstStep(ts, immucfg, mate) {
gv._setAttr('_ts', ts);
const coder = new Coder(ts, immucfg);
@ -88,7 +75,9 @@ function secondStep(ts, immucfg, mate) {
gv._setAttr('_ts', ts);
const coder = new Coder(ts, immucfg);
const { code, $_ts } = coder.run();
mate.appcode.map(decryptAppCode);
mate.appcode.forEach((appcode, idx) => {
appcode.decryptCode = new AppCode(AppCode.getParams(appcode.code)).run();
});
return writeFile('second', ts, immucfg, mate, $_ts, code);
}
@ -104,7 +93,7 @@ module.exports = async function (ts, immucfg, mate) {
files.forEach(({ filepath, text, code }) => filepath && fs.writeFileSync(filepath, text || code));
logger.info([
`代码还原成功！用时：${new Date().getTime() - startTime}ms\n`,
...files.reduce((ans, it, idx) => ([...ans, typeof it === 'string' ? it : `${it.desc}${it.filepath}${idx === files.length - 1 || it.newLine ? '\n' : ''}`]), []),
...files.reduce((ans, it, idx) => ([...ans, typeof it === 'string' ? it : `${it.desc}${paths.relative(it.filepath)}${idx === files.length - 1 || it.newLine ? '\n' : ''}`]), []),
].join('\n '));
}

2
src/makeCookie.js
View File

@ -34,7 +34,7 @@ function writefile(ts, immucfg) {
module.exports = function (ts, immucfg) {
gv._setAttr('_ts', ts);
if (immucfg) writefile(ts, immucfg);
// if (immucfg) writefile(ts, immucfg);
const startTime = new Date().getTime();
const coder = new Coder(ts, immucfg);
const { code, $_ts } = coder.run();

24
utils/getCode.js
View File

@ -26,7 +26,7 @@ function nameHandle(name, extend) {
return name.split('.').pop() === extend ? name : `${name}.${extend}`;
}
module.exports = async function getCode(url, cookieStr) {
async function getCodeByHtml(url, cookieStr) {
if (cookieStr) {
cookieJar.setCookie(request.cookie(cookieStr), url);
}
@ -53,8 +53,14 @@ module.exports = async function getCode(url, cookieStr) {
appcode: [],
url,
}
for(let src of remotes) {
const jsurl = urlresolve(url, src);
await getCodeByJs(remotes.map(it => urlresolve(url, it)), ret);
if (ret.jscode) return ret;
throw new Error('js外链中没有瑞数的代码文件');
}
async function getCodeByJs(urls, ret = { appcode: [] }) {
for(let url of urls) if (!isValidUrl(url)) throw new Error(`输入链接不正确：${url}`);
for(let jsurl of urls) {
const name = jsurl.split('?')[0].split('/').pop();
const jscode = await request(addRequestHead(jsurl));
const data = {
@ -69,6 +75,14 @@ module.exports = async function getCode(url, cookieStr) {
ret.jscode = data;
}
}
if (ret.jscode) return ret;
throw new Error('js外链中没有瑞数的代码文件');
return ret;
}
module.exports = function getCode(url, ...params) {
if (typeof url === 'string') {
return getCodeByHtml(url, ...params);
}
if (Array.isArray(url)) {
return getCodeByJs(url);
}
}

1
utils/paths.js
View File

@ -23,4 +23,5 @@ module.exports = {
outputResolve: (...p) => path.resolve('output', ...p),
examplePath: resolveApp('example'),
exampleResolve: (...p) => resolveApp('example', ...p),
relative: (p) => path.relative(path.resolve(), p),
};