2024-12-06 xueqiu md5__1038 加密破解

雪球请求列表页出了个新参数 md5__1038 看似 MD5 其实并不是。

import requests
import execjs
# 读取JavaScript文件内容
with open('test1.js', 'r') as file:
    js_code = file.read()
import time
# 编译JavaScript代码
ctx = execjs.compile(js_code)

def func(user_id,page):

    # 调用greet函数并打印结果
    result = ctx.call('gggg.sig', f'https://xueqiu.com/statuses/original/timeline.json?user_id={user_id}&page={page}')
    print(result)  # 输出: Hello, World!

    result2 = ctx.call('vvvv.ua', f'{result}|0|{int(time.time())}|1', True)
    print(result2)

    headers = {
        "Accept": "*/*",
        "Accept-Language": "zh-CN,zh;q=0.9",
        "Connection": "keep-alive",
        "Referer": "https://xueqiu.com/1250822095/column",
        "Sec-Fetch-Dest": "empty",
        "Sec-Fetch-Mode": "cors",
        "Sec-Fetch-Site": "same-origin",
        "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
        "X-Requested-With": "XMLHttpRequest",
        "elastic-apm-traceparent": "00-075b0a32285e45e79a8760f3869dfad1-23775937eb931adf-00",
        "sec-ch-ua": "\"Google Chrome\";v=\"131\", \"Chromium\";v=\"131\", \"Not_A Brand\";v=\"24\"",
        "sec-ch-ua-mobile": "?0",
        "sec-ch-ua-platform": "\"macOS\""
    }
    cookies = {
        "xq_a_token": "xxxxxxxxxxxx",

    }
    url = "https://xueqiu.com/statuses/original/timeline.json"
    params = {
        "user_id": f"{user_id}",
        "page": f"{page}",
        "md5__1038": f"{result2}"
    }
    response = requests.get(url, headers=headers, cookies=cookies, params=params)

    print(response.text)
    print(response)

func("3079173340",2)

加密是两步,第一步用URL获取一个数字,第二步加密得到的数字拼接时间戳在加密得到返回结果 需要补环境

最后编辑于
©著作权归作者所有,转载或内容合作请联系作者
平台声明:文章内容(如有图片或视频亦包括在内)由作者上传并发布,文章内容仅代表作者本人观点,简书系信息发布平台,仅提供信息存储服务。

推荐阅读更多精彩内容