mirror of
https://github.com/Mr-xn/Penetration_Testing_POC.git
synced 2025-11-06 11:14:32 +00:00
541 lines
4.8 MiB
HTML
541 lines
4.8 MiB
HTML
|
<!DOCTYPE html> <html style><!--
|
|||
|
|
Page saved with SingleFile
|
|||
|
|
url: https://forum.butian.net/share/3019
|
|||
|
|
--><meta charset=utf-8>
|
|||
|
|
<meta http-equiv=X-UA-Compatible content="IE=edge">
|
|||
|
|
<meta name=viewport content="width=device-width, initial-scale=1">
|
|||
|
|
<meta name=csrf-token content=yRrMYZVGGRCYVi3hZLssNGcrIrc0EXsXnIxsXNXo>
|
|||
|
|
<title>浏览器中修改js文件+mitmproxy实现对加密请求的明文fuzz</title>
|
|||
|
|
<meta name=keywords content=奇安信,天眼,补天,漏洞,情报,攻防,安全>
|
|||
|
|
<meta name=description content='奇安信攻防社区-在渗透的"幽灵模式"中开启"透视"外挂'>
|
|||
|
|
<meta name=author content="QIANXIN Team">
|
|||
|
|
<meta name=copyright content="2021 QIANXIN.com">
|
|||
|
|
<style>@media(max-width:767px){}</style>
|
|||
|
|
<style>/*!
|
|||
|
|
* Bootstrap v3.4.1 (https://getbootstrap.com/)
|
|||
|
|
* Copyright 2011-2019 Twitter, Inc.
|
|||
|
|
* Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
|||
|
|
*//*! normalize.css v3.0.3 | MIT License | github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}footer,nav{display:block}a{background-color:transparent}a:active,a:hover{outline:0}strong{font-weight:700}img{border:0}hr{-webkit-box-sizing:content-box;-moz-box-sizing:content-box}button,input,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button{text-transform:none}button{-webkit-appearance:button}textarea{overflow:auto}/*! Source: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css */@font-face{font-family:"Glyphicons Halflings";src:url(data:font/woff2;base64,d09GMgABAAAAAEZsAA8AAAAAsVwAAEYJAAECTQAAAAAAAAAAAAAAAAAAAAAAAAAAP0ZGVE0cGiAGYACMcggEEQgKgqkkgeVlATYCJAOGdAuEMAAEIAWHIgeVUT93ZWJmBhtljDXsmI+A80Cgwj/+vggK2vaIIBusdPb/n5SghozBk8fY3CwzKw8ycQ3LRhauWU8b7AQmPrHpsWLSbaQ1gVqO5kgksapZihmcvXvsSAlqZIYL1YkM/LIl97nZp395IqcEA/f21yuNQLmMXb2rZZ/7e/rS+3aQoE5jiykOu275k8k/fj/okKRo8gD/nl/nJmkfxsrIHdGdBcGkiz+6PvzlXksg+3a0LRtj240x7fSAEokyS6Dhebf1LCdu5KvgAAco8DNFd2ngQgUXgqAmqf8L6c5UtGxo2DBNGtLY2tKGZOVZ2HLx77Kss250ad5d3Xl1cpW0vK77me4TVlhzag6hop7lZ01uGarTmUiBV5Wpw9QIIHIy9D5pVGBWN7jNUiixqMnPGuD/K6BvNvMnY8XIQrCP5gbrNOe31s653X+Hg4vjv5quVAldYVtRZDwzd3E4LI6F7nJUSRahOOESHI4wPkW4P/kqRajnl6aVI8/6NyeN7N39hlMJDAtvY/vKt+1fizcmIyrRKym9s6DQKzRhAbBBNrZjjOd5sdmjhmYoYhlG6ebk/+m0JDt7IFlBwzF2UC10R/j/jOHAsRXNIvuwldsBQ8JmLSBXgveuAprUmc51S9awSwjjI63tDuSs1ipLhjzb/AQgKNHf69T31/9a/mDZqwzltVuXJepZBVSKrHslr8mKJIitEKBze2/v7RmcF/KIgxjVu+92dCJw4Jw0YMjq36mKz6R9bwxg47PdFPonbhRl3D4K5EceNXMAevNfTvMKklBL06Z2bVXeC8m+e3q93PLu8/+fGfh/+IyHIjNgbA2SHAOWVyPUkL1eGEArjSwHY7nJa2+pjUFPG3AVbnW1p9R685Z6Sin13M6lHveY2zHHfeHh/0893n+ttoB4vlLGxGDBSolgp3GDFaWCVXMvvyv4a9J2xzF4bBrd3+dqEmwFlkVs7FxuRIzIw8a2r1aGseb/0Gpnm3taZOWJCHo3jwsUNf/fIQR4bcI1b8JbBxy9v3Xv+ya3rzHagkgQQmtB4uwIcXLqzlKQxA2jt7AWjyhcZ2j0EBTIN4ns0op5jz2GSLVa81VQaOnQJDgQUmfTBcQYgHrCZ82tyU46i+AAMXWsJNyFr6Shnj5S/V3l+hSXDqasIp/0Zje8lwv1S69efyeYquu9M5MrRS+8xF6JWVU1XahOQhcu3sqLpdI438Urzs2POI/5LHyJe018jEGKEeV1YXzQYYiSf+yO1d7LhdWdJQAKf2xLR6JQ7SwXTnUU5tzUa/5j7zhtWEDa02T/F8yYP3/x/NrzoudZ0ybP/nvq9pT4s8fPDj/bUNworhRHil22v8/G5K/kT+SP5Lfk1+SX5AZyLbmSXExGyQg5lywmp5N55DhyrPu0+zP3H9yfuD9wv+8+6n7b/br7FXPo5P8Fi54S0BCi00THCKR68zH6oT8SXFU1FnE9rdl00XrUkg6GJlqQbmqiJeltTbQifbyJ1nRr3kQbundooi09/22iHb1CE+3p9Tc28fSugyY60rvJcXQiC9YxOpMVrOvQlaypdTv0IktfoS9KZNZjMJZssvUcMB2yxSdeAxZCtvk4VkO21XpnsAayvawPBlsgO8r6ZOwK2VnWF2J/yIN1HQ6HvKl1O5xAnip9AQZ5iXwMLqmsJ0M+E1xnPRvyOeBW68WQrwG3W2+GfGfwoPVekB8MnrY+ivxkvAo5rc/H++QX7tjF+JQKKkV8QaUOj+MbKk2tW+NbKm1P3A7fUel6HD9Q6W7dGz9SKVmPwW9UJlvPAVUqi5U1EMBT2QxNQgv+7AShpfBbsxMKrYTfb1lEaK0Y1Xvs0Sx9MTxmjSYCNmikGIYnj4F/B8qlVSNWqAjeEa28H6GlRftEfyJUwaXeqdAGokFEOYP/ZUK5OqkHBhXEJQ8CT5zBINLQBBPxgofYRhJ1im4gFjc/JVIDRzQihLhmqWfHwUbquoEgDmE9gpEts9VRl+G9eStCvSzE+NAyw8sT1oU1opWH8JmEjHhuoQUVzqoEZiohobPm62zifEdYUfgg3oNVcJTkCsVFdSDCQJ4Bj6blLfCABB9Eby42WVr2gi0mYT5mEj+bAKuTTo9OnKIJXdRPL147XNoOwkrKDc9CBsdFc0pyGQSqkBkBoMSa9cYPFCfyhWcSL+Pj0UIXJZ+hHm8gH0P16rpulTeL3DoFfPV5g0t0sib3JKfYc698ufV3UIj5xFxpXb4kWhJAKwHNDLa21YA5MHhdu3K4rSW+yNUr9gdSVaxFbYcrFtywqqM7d6B1rMA5L0m8BdQ3yDfVprlR/mx1XKZ50A5XixBOKes4idywdlnuKnW0bQKUobG/6eKp4gS6bSgJZgbKRb3y/0c4sgyiaiNJrL1SjswX+XoMI3G437ffAQYJhClZoNckiwvh0JuGY18lv20teyEwLWALO+HlhazxFGh5VvXkwV1IdiEJzx90HGG9XEvvxRAeBqVbzDF7GgMi52ogNkDsljNUMCWlE78P6c6YIsfUmcZaSYZH5AabU5P3jYIusxHEzqNwB4HG06xTxjFl6fvZk8TYm535DFnBHv92uzgaCGSxXLFCoRdsoVP7/lIpBtIT04bn+a+WroALewJJitOG9NIlnZSvPvsw0I7aprNc8CeUY2e9MiU0oFGORKEKMM2SM0KyIslNjtWOJoDbimhJFcfC2qfSUmcQt01FpKGpobaaDUm9zigHqd7VNVWWRF0MffIdmQdi7Tgkl4fsOKg+8+FYIAGyB2iVImwetc6A4mocnS4liNuAGEhIxy0LSZqm3bgjMZIdQwE09d5Z3gE3hO3urhLtWd2WoVYMbwgaPlDKXaE2v7cHmPaZTzT/N2YaDb1+ABgeQUpkWUbVwoDKLpbeb/XD/nkpCcY4bMYLtjIyjmWKnB+m0jFIG6FbAXSJsEAhyIUMMlyAQLgINQbE2ZPKJVrX7vzba96SCAZh9Z2u3ED6LmBuqDPKT0aMohBSKPOFpbb3/71aAWtMawVGIO1IV2pZHw1JpOo11+cqE/E22s5ltVNiay6kvDVGLBfsLpUCTjDf1JmSuYB8lIZWpoB8fH4FTvSHKAkgNLed7NpdLOwaSnB8fvl4ZdPJQajUHKGvNYiIL7vau1Ok/QTk9JTQdvLX3Hk/m/myJ192fHLqhMtY3Ab47kjpUcoFsLUVBcSTQkA9C91YrN/6rEITGDnLNLOYq8NUqdhCiUKpY6CtwRirSJFQo84rgvKJgV+Tk9VZSNkjrCSqy8pgoOxG+KPxQjvjtcIr2xGUhUJQUrA0zL
|
|||
|
|
<style>/*!
|
|||
|
|
* Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome
|
|||
|
|
* License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License)
|
|||
|
|
*/@font-face{font-family:"FontAwesome";src:url(data:font/woff2;base64,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
|
|||
|
|
<style>@media(min-width:1200px){.navbar-form{width:235px}}@media(min-width:768px){.navbar-form .form-control{width:100%}}@media(max-width:767px){.global-nav{width:100%;text-align:center;z-index:1000}}@media(max-width:767px){}.global-nav .nav{height:44px;padding:0}.navbar-form .btn{position:absolute;top:8px;right:30px;color:#999;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none}.navbar-form .btn:hover,.navbar-form .btn:focus{color:#777}pre{white-space:pre-wrap}@media(min-width:768px){}@media(min-width:992px){}@media(min-width:1200px){}html{font-size:10px;-webkit-tap-highlight-color:transparent}body{font-family:-apple-system,"Helvetica Neue",Helvetica,Arial,"PingFang SC","Hiragino Sans GB","WenQuanYi Micro Hei","Microsoft Yahei",sans-serif;font-size:14px;line-height:1.5;color:#333;background-color:#f6f6f6;word-break:break-word}button,input,textarea{font-family:inherit;font-size:inherit;line-height:inherit}ul{padding:0}.wrap{padding-bottom:30px;position:relative}.main{background-color:#fff;border-radius:4px}.mb-10{margin-bottom:10px}.mb-20{margin-bottom:20px}.mb-50{margin-bottom:50px}.mt-10{margin-top:10px}.mt-15{margin-top:15px}.mt-20{margin-top:20px}.mt-30{margin-top:30px}.mt-60{margin-top:60px}.mr-5{margin-right:5px}.span-line{margin-left:8px;margin-right:8px;color:#999}.text-fmt{overflow:hidden;font-size:14px;line-height:1.6;word-wrap:break-word}.logo{float:left;margin:0;display:inline-block;width:150px}.logo a{display:block;height:50px;width:145px;background-image:url(data:image/svg+xml;base64,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
|
|||
|
|
<style>a{color:#009a61;text-decoration:none}a:focus,a:hover{color:#004e31;text-decoration:underline}.navbar-inverse{background-color:#2a8c70;border-color:#2b7a5c}.navbar-inverse .navbar-nav>li>a{color:#fff;padding-left:6px;padding-right:6px}.navbar-inverse .navbar-collapse,.navbar-inverse .navbar-form{border-color:#008151}@media(max-width:767px){}@media(max-width:767px){}.tag{display:inline-block;padding:0 8px;color:#017e66;background-color:#e7f2ed;height:24px;line-height:24px;font-weight:400;font-size:13px;text-align:center}.tag[href]:focus,.tag[href]:hover{background-color:#017e66;color:#fff;text-decoration:none}.btn-success{border-color:#4cae4c;background-color:#5cb85c;color:#fff}</style>
|
|||
|
|
<style>@-moz-keyframes blink{50%{background-color:transparent}}@-webkit-keyframes blink{50%{background-color:transparent}}@keyframes blink{50%{background-color:transparent}}pre code.hljs{overflow-x:auto}.hljs{color:#000}.hljs-comment{color:green}.hljs-built_in,.hljs-keyword{color:#00f}.hljs-string,.hljs-title{color:#a31515}.markdown-body{color-scheme:light;--color-prettylights-syntax-comment:#6e7781;--color-prettylights-syntax-constant:#0550ae;--color-prettylights-syntax-entity:#8250df;--color-prettylights-syntax-storage-modifier-import:#24292f;--color-prettylights-syntax-entity-tag:#116329;--color-prettylights-syntax-keyword:#cf222e;--color-prettylights-syntax-string:#0a3069;--color-prettylights-syntax-variable:#953800;--color-prettylights-syntax-brackethighlighter-unmatched:#82071e;--color-prettylights-syntax-invalid-illegal-text:#f6f8fa;--color-prettylights-syntax-invalid-illegal-bg:#82071e;--color-prettylights-syntax-carriage-return-text:#f6f8fa;--color-prettylights-syntax-carriage-return-bg:#cf222e;--color-prettylights-syntax-string-regexp:#116329;--color-prettylights-syntax-markup-list:#3b2300;--color-prettylights-syntax-markup-heading:#0550ae;--color-prettylights-syntax-markup-italic:#24292f;--color-prettylights-syntax-markup-bold:#24292f;--color-prettylights-syntax-markup-deleted-text:#82071e;--color-prettylights-syntax-markup-deleted-bg:#ffebe9;--color-prettylights-syntax-markup-inserted-text:#116329;--color-prettylights-syntax-markup-inserted-bg:#dafbe1;--color-prettylights-syntax-markup-changed-text:#953800;--color-prettylights-syntax-markup-changed-bg:#ffd8b5;--color-prettylights-syntax-markup-ignored-text:#eaeef2;--color-prettylights-syntax-markup-ignored-bg:#0550ae;--color-prettylights-syntax-meta-diff-range:#8250df;--color-prettylights-syntax-brackethighlighter-angle:#57606a;--color-prettylights-syntax-sublimelinter-gutter-mark:#8c959f;--color-prettylights-syntax-constant-other-reference-link:#0a3069;--color-fg-default:#24292f;--color-fg-muted:#57606a;--color-fg-subtle:#6e7781;--color-canvas-default:#fff;--color-canvas-subtle:#f6f8fa;--color-border-default:#d0d7de;--color-border-muted:hsl(210,18%,87%);--color-neutral-muted:rgba(175,184,193,0.2);--color-accent-fg:#0969da;--color-accent-emphasis:#0969da;--color-attention-subtle:#fff8c5;--color-danger-fg:#cf222e}.markdown-body{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;margin:0;color:var(--color-fg-default);background-color:var(--color-canvas-default);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:16px;line-height:1.5;word-wrap:break-word}.markdown-body h1{margin:.67em 0;padding-bottom:.3em;font-size:2em;border-bottom:1px solid var(--color-border-muted)}.markdown-body img{border-style:none;max-width:100%;-webkit-box-sizing:content-box;box-sizing:content-box;background-color:var(--color-canvas-default)}.markdown-body hr{-webkit-box-sizing:content-box;box-sizing:content-box;overflow:hidden;background:transparent;border-bottom:1px solid var(--color-border-muted);height:.25em;padding:0;margin:24px 0;background-color:var(--color-border-default);border:0}.markdown-body ::-webkit-input-placeholder{color:inherit;opacity:.54}.markdown-body ::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}.markdown-body hr::before{display:table;content:""}.markdown-body hr::after{display:table;clear:both;content:""}.markdown-body h1,.markdown-body h2{margin-top:24px;margin-bottom:16px;font-weight:600;line-height:1.25}.markdown-body h2{font-weight:600;padding-bottom:.3em;font-size:1.5em;border-bottom:1px solid var(--color-border-muted)}.markdown-body code{font-family:ui-monospace,SFMono-Regular,SF Mono,Menlo,Consolas,Liberation Mono,monospace}.markdown-body pre{font-family:ui-monospace,SFMono-Regular,SF Mono,Menlo,Consolas,Liberation Mono,monospace;word-wrap:normal}.markdown-body ::-webkit-input-placeholder{color:var(--color-fg-subtle);opacity:1}.markdown-body ::placeholder{color:var(--color-fg-subtle);opacity:1}.markdown-body::before{display:table;content:""}.markdown-bod
|
|||
|
|
<style>#md_view{padding:0 20px}#md_view img:hover{cursor:pointer}</style>
|
|||
|
|
<!--[if lt IE 9]>
|
|||
|
|
<script src="/static/js/html5shiv.min.js"></script>
|
|||
|
|
<script src="/static/js/respond.min.js"></script>
|
|||
|
|
<![endif]-->
|
|||
|
|
<style>html #layuicss-skinlayercss{display:none;position:absolute;width:1989px}@-webkit-keyframes bounceIn{0%{opacity:0;-webkit-transform:scale(.5);transform:scale(.5)}100%{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@keyframes bounceIn{0%{opacity:0;-webkit-transform:scale(.5);-ms-transform:scale(.5);transform:scale(.5)}100%{opacity:1;-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}}@-webkit-keyframes zoomInDown{0%{opacity:0;-webkit-transform:scale(.1) translateY(-2000px);transform:scale(.1) translateY(-2000px);-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateY(60px);transform:scale(.475) translateY(60px);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@keyframes zoomInDown{0%{opacity:0;-webkit-transform:scale(.1) translateY(-2000px);-ms-transform:scale(.1) translateY(-2000px);transform:scale(.1) translateY(-2000px);-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateY(60px);-ms-transform:scale(.475) translateY(60px);transform:scale(.475) translateY(60px);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@-webkit-keyframes fadeInUpBig{0%{opacity:0;-webkit-transform:translateY(2000px);transform:translateY(2000px)}100%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes fadeInUpBig{0%{opacity:0;-webkit-transform:translateY(2000px);-ms-transform:translateY(2000px);transform:translateY(2000px)}100%{opacity:1;-webkit-transform:translateY(0);-ms-transform:translateY(0);transform:translateY(0)}}@-webkit-keyframes zoomInLeft{0%{opacity:0;-webkit-transform:scale(.1) translateX(-2000px);transform:scale(.1) translateX(-2000px);-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateX(48px);transform:scale(.475) translateX(48px);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@keyframes zoomInLeft{0%{opacity:0;-webkit-transform:scale(.1) translateX(-2000px);-ms-transform:scale(.1) translateX(-2000px);transform:scale(.1) translateX(-2000px);-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateX(48px);-ms-transform:scale(.475) translateX(48px);transform:scale(.475) translateX(48px);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@-webkit-keyframes rollIn{0%{opacity:0;-webkit-transform:translateX(-100%) rotate(-120deg);transform:translateX(-100%) rotate(-120deg)}100%{opacity:1;-webkit-transform:translateX(0) rotate(0);transform:translateX(0) rotate(0)}}@keyframes rollIn{0%{opacity:0;-webkit-transform:translateX(-100%) rotate(-120deg);-ms-transform:translateX(-100%) rotate(-120deg);transform:translateX(-100%) rotate(-120deg)}100%{opacity:1;-webkit-transform:translateX(0) rotate(0);-ms-transform:translateX(0) rotate(0);transform:translateX(0) rotate(0)}}@keyframes fadeIn{0%{opacity:0}100%{opacity:1}}@-webkit-keyframes shake{0%,100%{-webkit-transform:translateX(0);transform:translateX(0)}10%,30%,50%,70%,90%{-webkit-transform:translateX(-10px);transform:translateX(-10px)}20%,40%,60%,80%{-webkit-transform:translateX(10px);transform:translateX(10px)}}@keyframes shake{0%,100%{-webkit-transform:translateX(0);-ms-transform:translateX(0);transform:translateX(0)}10%,30%,50%,70%,90%{-webkit-transform:translateX(-10px);-ms-transform:translateX(-10px);transform:translateX(-10px)}20%,40%,60%,80%{-webkit-transform:translateX(10px);-ms-transform:translateX(10px);transform:translateX(10px)}}@-webkit-keyframes fadeIn{0%{opacity:0}100%{opacity:1}}@-webkit-keyframes bounceOut{100%{opacity:0;-webkit-transform:scale(.7);transform:scale(.7)}30%{-webkit-transform:scale(1.05);transform:scale(1.05)}0%{-webkit-transform:scale(1);transform:scale(1)}}@keyframes bounceOut{100%{opacity:0;-webkit-transform:scale(.7);-ms-transform:scale(.7);transform:scale(.
|
|||
|
|
* Waves v0.7.5
|
|||
|
|
* http://fian.my.id/Waves
|
|||
|
|
*
|
|||
|
|
* Copyright 2014-2016 Alfiana E. Sibuea and other contributors
|
|||
|
|
* Released under the MIT license
|
|||
|
|
* https://github.com/fians/Waves/blob/master/LICENSE
|
|||
|
|
*/</style><style>@media(max-height:620px){}@media(max-height:783px){}@-webkit-keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@-webkit-keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}@keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}</style><style>@-webkit-keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@media(pointer:coarse){}</style><style>:root{--sr-annote-color-0:#b4d9fb;--sr-annote-color-1:#ffeb3b;--sr-annote-color-2:#a2e9f2;--sr-annote-color-3:#a1e0ff;--sr-annote-color-4:#a8ea68;--sr-annote-color-5:#ffb7da}</style><style>@-webkit-keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@-webkit-keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@-webkit-keyframes fadeOut{0%{opacity:1}to{opacity:0}}@keyframes fadeOut{0%{opacity:1}to{opacity:0}}@-webkit-keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes fadeIn{0%{opacity:0}to{opacity:1}}@-webkit-keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:transl
|
|||
|
|
<body>
|
|||
|
|
<div class="global-nav mb-50">
|
|||
|
|
<nav class="navbar navbar-inverse navbar-fixed-top">
|
|||
|
|
<div class="container nav">
|
|||
|
|
<div class="visible-xs header-response sf-hidden">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<div class="row hidden-xs">
|
|||
|
|
<div class="col-sm-8 col-md-8 col-lg-8">
|
|||
|
|
<div class=navbar-header>
|
|||
|
|
<button type=button class="navbar-toggle collapsed sf-hidden" data-toggle=collapse data-target=#global-navbar>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</button>
|
|||
|
|
<div class=logo><a class="navbar-brand logo" href=https://forum.butian.net/ data-ss1716816264=1></a></div>
|
|||
|
|
</div>
|
|||
|
|
<div class="collapse navbar-collapse" id=global-navbar>
|
|||
|
|
<ul class="nav navbar-nav">
|
|||
|
|
<li><a href=https://forum.butian.net/ data-ss1716816264=1>首页 <span class=sr-only>(current)</span></a></li>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<li><a href=https://forum.butian.net/questions data-ss1716816264=1>问答</a></li>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<li><a href=https://forum.butian.net/shop data-ss1716816264=1>商城</a></li>
|
|||
|
|
|
|||
|
|
<li><a href=https://forum.butian.net/community data-ss1716816264=1>实战攻防技术</a></li>
|
|||
|
|
<li><a href=https://forum.butian.net/movable data-ss1716816264=1>活动</a></li>
|
|||
|
|
<li><a href=https://forum.butian.net/questions/Play data-ss1716816264=1>摸鱼办</a>
|
|||
|
|
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
<form role=search id=top-search-form action=https://forum.butian.net/search method=GET class="navbar-form hidden-sm hidden-xs pull-right">
|
|||
|
|
<span class="btn btn-link"><span class=sr-only>搜索</span><span class="glyphicon glyphicon-search"></span></span>
|
|||
|
|
<input type=text name=word id=searchBox class=form-control placeholder value>
|
|||
|
|
</form>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</nav>
|
|||
|
|
</div>
|
|||
|
|
<div class="top-alert mt-60 clearfix text-center">
|
|||
|
|
<!--[if lt IE 9]>
|
|||
|
|
<div class="alert alert-danger topframe" role="alert">你的浏览器实在<strong>太太太太太太旧了</strong>，放学别走，升级完浏览器再说
|
|||
|
|
<a target="_blank" class="alert-link" href="http://browsehappy.com">立即升级</a>
|
|||
|
|
</div>
|
|||
|
|
<![endif]-->
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<div class=wrap>
|
|||
|
|
<div class=container>
|
|||
|
|
<div class="row mt-10">
|
|||
|
|
<div class="col-xs-12 col-md-9 main" style=width:100%>
|
|||
|
|
<div class=widget-article>
|
|||
|
|
<h3 class="title word-wrap">在渗透的"幽灵模式"中开启"透视"外挂</h3>
|
|||
|
|
<ul class=taglist-inline>
|
|||
|
|
<li class=tagPopup><a class=tag href=https://forum.butian.net/topic/47 data-ss1716816264=1>渗透测试</a></li>
|
|||
|
|
</ul>
|
|||
|
|
<div class="content mt-10">
|
|||
|
|
<div class="quote mb-20">
|
|||
|
|
针对请求响应均加密的web网站的渗透测试解决方案
|
|||
|
|
</div>
|
|||
|
|
<textarea id=md_view_content style=display:none>在渗透的"幽灵模式"中开启"透视"外挂
|
|||
|
|
===================
|
|||
|
|
|
|||
|
|
起因：手头上的乱七八糟的事情处理基本接近尾声了，想着休息休息挖挖src吧，然后选中了几个资产，打开第一个，请求响应全加密，算了懒得搞，换！第二个，又是请求响应全加密，6，那我再换一个，又你\*请求响应全加密，干
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
功能页面如下所示
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
获取验证码请求如下图所示，其实不光发送验证码功能，网站的每个请求都将我们实际的参数进行了加密，然后赋值给了data，紧接着还有sign做验证，同样的响应体res也进行了加密，这样对我们渗透测试来说非常的不便
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
0x01 data加密分析
|
|||
|
|
-------------
|
|||
|
|
|
|||
|
|
在讲核心内容之前，我们首先要依次分析下data和sign的生成， 由于data字符串太过常见，sign相对生僻一些，我这里直接`sign:`，搜索出来了5处，挨个点开看一下，最终发现下方代码，不用说它就是我们请求的时候赋值的代码，我这里先看data，可以看到将变量t赋值给了data，我们往上翻找变量`t`
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
如图所示，逻辑不难看出，参数e一开始赋值给了变量t，紧接着对变量`t`进行了一个函数操作，将返回值重新赋值回了变量t，所以我大概率可以推断这个v就是加密函数
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
接下来我们在t = v(t)那块打上断点，然后重新发请求触发js，可以看到该站采用了xml的传参方式，而函数调用前的t就包含我们原始请求的值，如手机号，时间戳等
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
然后我们接着看看v函数，跟进到v函数里面，不用看了，一目了然，哎呦，还用的国密，sm4对称加密，加密模式为CBC
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
这里其实关于响应体我们就不用分析了，盲猜也是用上方的对称算法进行解密，接下来我们验证一下
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
一模一样吧
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
同样尝试解密响应也成功
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
0x02 sign分析
|
|||
|
|
-----------
|
|||
|
|
|
|||
|
|
sign的相关的代码在data加密的代码附近，这里可以看到，sign是a的值，而a是在t没被加密前，调用了getRequstSign(t)函数，那么我们看一下这个函数做了什么
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
代码如下，可以看到最后的返回值是将参数`i`进行了md5加密，而i的值，是t的值加上e（也就是我们的参数），外加字符串'VETRIP\_B2C'的组合，而t的值是对this.COMPID进行md5得到的，this.COMPID我已经打印了，也是个字符串CLYTB，既然this.COMPID是固定的，那么它的md5加密也就是t的值也是固定的为d4a开头的一串值，逻辑就有了
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
同样的我们可以尝试验证一下
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
一样
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
0x03 浏览器-&gt;Burp
|
|||
|
|
-----------------
|
|||
|
|
|
|||
|
|
上面的js分析很基础，接下来就到了本篇文章的核心内容了，针对于此网站，我测试的时候想达到在Burp测试的时候请求体的值是可视的也就是没有加密的，同样响应我也想要解密后的，这些条件满足的同时还不能影响实际使用，整体解决方案如下图所示
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
首先我们想要让想达到请求和响应都明文，第一关就是将浏览器到Burp的参数为未加密状态，怎么实现呢？可以通过hook，但是还有更简单的方式，浏览器选择本地覆盖，新建，
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
选择本地的一个空文件夹后，允许
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
右键代码处
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
这里因为我将上款的代码格式化了，不能直接用，这里面坑很多，最保险的做法是重新刷新一下，然后定位到对应js，注意千万不要格式化，右键选择保存并覆盖
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
这时候我们访问这个网站，这个网站加载这个js的时候就会加载我们本地的js
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
接下来去Overrides标签页选择对应js，这时候就可以放心大胆的格式化了（这里卖个关子，当然也不能100%放心，还有某些情况是不能格式化的，具体什么情况呢，我不说?），然后将t加密这行删掉，这样就保证请求时候的data字段不会被加密了（devtools也就是f12不要关），别忘了ctrl+s保存一下修改后的js
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
我们可以抓包看一下，请求中data的值是原值，没有被加密，这样我们就达到了Burp中的可视化目的
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
0x04 Burp上游加解密
|
|||
|
|
--------------
|
|||
|
|
|
|||
|
|
上面我们已经解决了请求中data字段将其变成了未加密前的原值，但是后续我们发包就是以原值发的所以是400，并且响应中的res解密操作也还没做
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
接下来我们就要用到之前写rpc文章里面mitmproxy了，让其成为Burp的上游，在发请求和收响应的时候都改一下我们的值，另其加密解密，以及确保sign值正确，代码写到下边了，懒得写注释了，自己研究吧
|
|||
|
|
|
|||
|
|
```python
|
|||
|
|
import base64
|
|||
|
|
import hashlib
|
|||
|
|
import json
|
|||
|
|
from gmssl import sm4
|
|||
|
|
from mitmproxy import ctx
|
|||
|
|
|
|||
|
|
encrypt_key = b'd6a785b93b6c0d4a'
|
|||
|
|
iv = b'2d91d2be3ad9e42c'
|
|||
|
|
gmsm4 = sm4.CryptSM4()
|
|||
|
|
def encryptSM4(value):
|
|||
|
|
gmsm4.set_key(encrypt_key, sm4.SM4_ENCRYPT)
|
|||
|
|
data_str = str(value)
|
|||
|
|
encrypt_value = gmsm4.crypt_cbc(iv,data_str.encode())
|
|||
|
|
text = base64.b64encode(encrypt_value)
|
|||
|
|
return text.decode('utf-8')
|
|||
|
|
|
|||
|
|
def decryptSM4(encrypt_value):
|
|||
|
|
encrypt_value = base64.b64decode(encrypt_value).hex()
|
|||
|
|
gmsm4.set_key(encrypt_key, sm4.SM4_DECRYPT)
|
|||
|
|
decrypt_value = gmsm4.crypt_cbc(iv,bytes.fromhex(encrypt_value))
|
|||
|
|
return decrypt_value.decode()
|
|||
|
|
|
|||
|
|
def sign(text):
|
|||
|
|
md5_hash = hashlib.md5()
|
|||
|
|
md5_hash.update(('d4a4a210ed3d3d367049d4d331883485'+text+'VETRIP_B2C').encode())
|
|||
|
|
return md5_hash.hexdigest()
|
|||
|
|
|
|||
|
|
#截获请求加密data，以及更新sign
|
|||
|
|
def request(flow):
|
|||
|
|
if flow.request.urlencoded_form:
|
|||
|
|
data_value = flow.request.urlencoded_form['data']
|
|||
|
|
flow.request.urlencoded_form['data'] = encryptSM4(data_value)
|
|||
|
|
flow.request.urlencoded_form['sign'] = sign(data_value)
|
|||
|
|
|
|||
|
|
def response(flow):
|
|||
|
|
content_type = flow.response.headers.get("Content-Type", "")
|
|||
|
|
if "application/json" in content_type:
|
|||
|
|
# 解析 JSON 响应体
|
|||
|
|
response_body = flow.response.get_text()
|
|||
|
|
json_data = json.loads(response_body)
|
|||
|
|
json_data['res'] = decryptSM4(json_data['res'])
|
|||
|
|
flow.response.set_text(json_data['res'])
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
利用mitmproxy开代理，设置为Burp的上游代理
|
|||
|
|
|
|||
|
|
```shell
|
|||
|
|
mitmproxy.exe -p 8081 -s .\mit.py
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
最终效果如下所示，这时候参数我们也可以放心大胆的修改了
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
- - - - - -
|
|||
|
|
|
|||
|
|
0x05 本地js修改
|
|||
|
|
-----------
|
|||
|
|
|
|||
|
|
晚上正睡觉呢，突然想起来不对，少点东西，就腾的一下爬起来，有了下文
|
|||
|
|
|
|||
|
|
上面遗漏了一步，就是虽然响应是明文了，但是返回到浏览器它肯定也是明文，正常浏览器肯定会提取res的值，然后使用之前，前面肯定有个解密的步骤所以现在这样肯定有问题，我们要去把浏览器获取响应后的数据处理代码改一下
|
|||
|
|
|
|||
|
|
其实这个步骤应该放在漆面sign分析后，因为那时候还没改浏览器本地覆盖调试比较简单，但是改完之后其实也没太大关系了，如果你真的理解操作起来也一样
|
|||
|
|
|
|||
|
|
这是我们响应包，可以看出是json格式，并且呢里面有res字段，所以我们在js中怎么快速定位到响应包处理的代码呢，其实很简单，正常逻辑它肯定要拿到我们响应中的res然后并进行解密吗，所以这里直接搜`"res"`即可，so easy
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
发现两处，将发现的两处都打上断点然后再次点击发送验证码触发断点，这里可以看到`t.data`就是我们从浏览器取出的json，然后它取了里面的res字段，将其赋值给了变量`i`，后边肯定有对其解密的代码，我们仔细看看
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
紧接着这行可以看到对`i`调用了函数`b`，那想都不用想那个`b`函数肯定是解密函数，然后解密后取出了里面res值，然后发现下边那行也调用了`b(i)`，所以这两处都需要改
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
然后我们想想我们这里怎么改，这是我们正常浏览器返回的json，它是解密后的，所以直接动两处代码就好了
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
然后这时候再触发，擦，抛异常了，然后研究了一通，发现问题所在，就是这块的JSON.parse，JSON.parse() 是 JavaScript 中的一个内置函数，用于将 JSON 字符串解析为 JavaScript 对象；而这里出错的原因就是`i`已经是JavaScript 对象了，所以就不用多此一举了
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
如下
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
成功，一切正常，继续睡觉
|
|||
|
|
|
|||
|
|
</textarea>
|
|||
|
|
<div id=layer-photos-demo>
|
|||
|
|
<div id=md_view><div class=markdown-body><h1 blockindex=0>在渗透的"幽灵模式"中开启"透视"外挂</h1>
|
|||
|
|
<p blockindex=1>起因：手头上的乱七八糟的事情处理基本接近尾声了，想着休息休息挖挖src吧，然后选中了几个资产，打开第一个，请求响应全加密，算了懒得搞，换！第二个，又是请求响应全加密，6，那我再换一个，又你*请求响应全加密，干</p>
|
|||
|
|
<p blockindex=2><img src=data:image/gif;base64,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
|
|||
|
|
<p blockindex=3>功能页面如下所示</p>
|
|||
|
|
<p blockindex=4><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=5>获取验证码请求如下图所示，其实不光发送验证码功能，网站的每个请求都将我们实际的参数进行了加密，然后赋值给了data，紧接着还有sign做验证，同样的响应体res也进行了加密，这样对我们渗透测试来说非常的不便</p>
|
|||
|
|
<p blockindex=6><img src="data:image/png;base64,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
|
|||
|
|
<h2 blockindex=7>0x01 data加密分析</h2>
|
|||
|
|
<p blockindex=8>在讲核心内容之前，我们首先要依次分析下data和sign的生成， 由于data字符串太过常见，sign相对生僻一些，我这里直接<code>sign:</code>，搜索出来了5处，挨个点开看一下，最终发现下方代码，不用说它就是我们请求的时候赋值的代码，我这里先看data，可以看到将变量t赋值给了data，我们往上翻找变量<code>t</code></p>
|
|||
|
|
<p blockindex=9><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=10>如图所示，逻辑不难看出，参数e一开始赋值给了变量t，紧接着对变量<code>t</code>进行了一个函数操作，将返回值重新赋值回了变量t，所以我大概率可以推断这个v就是加密函数</p>
|
|||
|
|
<p blockindex=11><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=12>接下来我们在t = v(t)那块打上断点，然后重新发请求触发js，可以看到该站采用了xml的传参方式，而函数调用前的t就包含我们原始请求的值，如手机号，时间戳等</p>
|
|||
|
|
<p blockindex=13><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACPoAAAGqCAIAAAAXtC9sAAAgAElEQVR4nOzdd0AT5/sA8Pcul52QhAQIhLD33ghoFUEcqFWpu+7Z1vbbYdVat7auLrXaOmtrrXXvbR2ICjJFlrL3CBBCBll39/sjijhBa9X++n7+Cpf33nvvkkvIPfc8L0KSJHjZZDLZBx98AAAQCAQUCuW51m1sbAQAvPfee9HR0U9rQ5KkTqfDcZzJZKIo+jdHC0HQ/3tKpfJpn3UEQZSUlOTl5T2yvE+fPkwm82kd1tY3tipVoUF+L3OUb4zUjGyhucDJQfq6BwJB0BtNp9OtW7/h0qXL6374zsXFBUVRgiB0Ot2PGzedOnVm5dcrwsPDEAR53cN8yIkTp9asWfvVV8ujoiLf5P8hX+KxVavVm37afOzY8Q3rv/fz83uuvTbieGLi1S+/XDh58sQpkyc9sq5Go6mqqj5y9OjBg4fGjh374az3X/zlbrj9gitC0EtSJ5Ov+HF337eC+/cKw57zB+wrkFtY/suBs2MGRwd4uaBvwOcqASgqhu3TnlUqlYsWLWpubu64MCQkZNq0aQwG42lr3SkqE5rrnRzaXuZA/8O0ioYfP112nhG7ZXm8vTn1OdcmcV3LiVU7lh2lrj73Uazo8ecJTWPdxgWrt+R47jg4voeY9XIGDUEQBEHQf9KsyR+1P+YLrOYs3tfxWRRFTb80ZTIZlUrl8XhsNvsZvz2xf26gAIDly5dbWlo+1yojRozotI1erz90+IhcLp84YQKbDf+1giDoxZWWlj4e6wIAXL58OSwsTCgUvvohQRAE/SugKGplZVVf37B+w8aIbuEMBsNgNBYVFR0+fDS6V08nJ8c3Ldb1L/ISjy2bzR43bmxFRfnyFV8tWrjQx8e7i/eiEQRx+/btrVu3xcb2HjVyxONxskuXLn82e46jg8OY0aPGvTsGvtzQv5rInDegVxiKIkaj8Q0Md9nbWEUGehEESRIEePOG11F9ff22bdseiXUBANLS0lgs1tixY58R8YJeIgbXfOi4wekLrq7902n5dD/B81z4IYyG7DOXtia39F087fFYl6qq8MrNqrvp6YfTqQNndPMXwBcUgiAIgqB/EEEQAIDTp0//+eefHA7Hzc0tMjLSz89PJBI98Ufok//rUbS2Hjx0lHx65hcCQJ/YGDup5KUN/HkYjcZbt26RJEmCl5+aBkHQf0dubm5xcfETnzIYDJmZmYGBgTDiBUEQ9EQYhsXF9dHr9SdPnFp5+YparWazWa4urhPGjxs0KF4kevxucKirXu6xtbK0nD37s582/VxXV+fj493FtUiSbJQ1BgYEvPvuGC6X+3gDPz+/tWtWOTo6Ojs7wevX0L8dRkEHRIe97lE8FYfNGNav++seReeUSuW2bdvu3r37xGcTExPb2tpmzZr1ikf1H4Vijt0iPppR99HGfV8zaAvGe/C6HPFqzkn+bnOmTe9+H8baPP5s463EZauzLVx8x33RZ2BvTy79zU2VhiAIgiDo/w02mz1lyhTTY5IkNRqNwWCg0WiPt3zyvzxsFgtB0MSkpKdtwMfbi2fGeSljhSAIei1yc3NLSkqe0UCj0aSmpvbs2fMZVQ0hCIL+sxAEEVtZTRg/buiQIVqdliQIBEUZDAaXw6HRaG9mrk90dK+goACBQPBmDq/dyz22CILYSaULFszHMKzrxQxRFO3Ro3tkZCSL9eQvQanUVip9ajUzCIL+gxYuXCiXy5/RIDU1dcWKFQsWLHhlQ/ovQxncsBHDNun/PMjns58nJ5DCNQvqET14WpiY9YTrRZLo4YcCh9AYTJ4Zg4bBWBcEQRAEQa/CW2+99cgSnU5HkiSdTn9k+ZPDXRiGDRsysKikpLq65vFn+Txe3z4xZmZmL2Wsz+vU6TOzZ8/R6/UAgBMnTvH5/HU/fBcaGkIQRG1t7dGjxw8fPtIgk1Gp1LFjRw8cGO/s5GT6Yb9v34Fly5bfvHnj3PkLhw4eys6+7eXlNWbs6F4933p2wUcIgv5f8vb29vbu6k3uEARB0OMQBKHRaCLRvyYLls1m/VvqYL/cY4sgCIfzfHeqIQjy6nK2LH1f0YYgCHopCAKoVI8v/uGHH179WKBnoNA5oVOmhj7nWgLngE++eOqzVJaZ5N/xRQpBEARB0P9nJEnqdDqCIOh0esfbOp+a0M7lcgfH9/99zz6lUtlxOYZh3btHuLu5vEB8SKlU4jj+7Db+/v4AAAaD0dLS0r6QRqO1D9rB3u7z2Z+Wl1cAQNrb2zMYDJFIpNVq9Xr9wYOHy8vL3357sLOzU1VV1a1b2X/9dVEkFJoyM8Riq7i+cRWVlQUFBfHxAwYPHnTrVnZycrJEIvFwd+u4O7AeCwRBEARBEARBEARBEARBEARB0JvJYDAgCEKn09uDO08Nd6Eo6uPjFRzon5h03TQhmIm9nTSmV88nFkbsVFNTk1qtfnabIUOGmB5UV1e3LxSJRO2zaltaWg4aNPCRtVQqFQBgzJhR7UtCQ0OGDh2CIAhBEKaNent7eXt7AQCmTb1X5zE6upfpgUaj6dgbDHdBEARBEARBEARBEARBEARBEAS9sQwGA4qi7eGqZ01Xymax4gf0zc0vkMkaTUuoVOqEcWMEAv6LbZvP57/YFDiPpKR1EUEQJEm+wOYgCIIgCIIgCIIgCIIgCIIgCIKgN5apqiGFQjGlS3USQ7IQicaOHI5hGACAQqGMfGeo3d+YkppCoWAvhEKhoC8EeSEvvIMQBEEQBL0WJEnm5uYOGZowZuz4xsbGv9OVTCabOGnKtGkztVrtyxre60UQRGtra2tra8d8/TeEVqc7evRoTGycq5vnu+Mm5OTkdix8TRBEaWnpJ5/OdnP3CguP3LTpJ4VC8dLHUFJSEj9w8MRJU0pLy/7OnVJarXb69JkTJkyWyWQvcXivEUEQSqXynzjmb4JnnxckSWq12qamJoPB8OrHBgAoLCzq2au3o5Oro5Orr1/gyZOn2p/SKxRpH398wMKicPt2bUPD1eHD95ubN1y9+hK3ThiNOrlc39r6Evt8iQiDQdfcbHy4Pser2zqO61paDA8X/H8tjBrN9fHj0/73P/3LO0lJgtArFHqFgnzzvi8gCIIgCIIg6IlIkmz/4fas7C6TgAC/2N69Lvx1KcDfNyIi/B8eGwRB0P9fJKGR11VU16t0OEKhCa3tbCz5tMfvOiD0DZVlVbJWgNEkrn5W7IefNWjqaiplco3OiAMALFxD7Hnt/ZMGbWttVZVM0YZx7TzdLR8pO2tQycrKq1vbjADFmHxrZwcr+nPnzULQG4okycamZrlcXldXL5fLRSLR6x7RG6Spqemrr1c5OTnOmD6NTqe/7uE8gOP4yZOnli1b4e/n6+3tnZeX9/mceRs2/ODi7AwAIEmyprZ21eq1pSWlAwb0VygUv+z8jcliTRg/7gWS/p+hrr6+trYOAUhLixwA+5fY879dU1PTpk0/Yxj25ZdfvO6xvHzPPi+MRuPpM2f27t2/auXXDg6v513BYrG6R0VaWFoyGAyJRNK+HMUwjMMBKEoXCgGKokwmQBDK/RIausbG2vPn7zVFEJpAwHFy4tjbo1Qq6PJdfaqSkuwlSywiItw//PDFBq+Ty1vz8zU1NaTRyLC0NHN3Z4rFyP3q9H9Tc1ZW7sqVzhMn2g4e/FI67Mio1apLS1UlJYbWVozL5Tg6cp2dKR1q3WsqK3NXrTIPCHCdOfOlb/25tOTktOTk+C1dSuVyX1afusbGWwsXcl1c3D/8kPJwhf+2+npZUhKh1wMAUCaT37v3y9ooBEEQBEEQBP1Ner2eSqVSKJTOw10AgH5xsTiOh4YEsV6oFCEEQRAEAGguTDp9KaOoql6twxGUJrRxDesdG+kleSTi1dZUkXh6f1qJgsLm95/SMdxFqOvuJCWl3ykpbZCr9TgBAAifci/chbc1F2an3b5bXl5eKWvVcl3ednwo3IU3F2ddupaSX1TZqsVN4S7vgIjY2BDzLn0PQNCbDkGQAH+/JYsXYVSqnZ3d6x7Om0Wt1m
|
|||
|
|
<p blockindex=14>然后我们接着看看v函数，跟进到v函数里面，不用看了，一目了然，哎呦，还用的国密，sm4对称加密，加密模式为CBC</p>
|
|||
|
|
<p blockindex=15><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=16>这里其实关于响应体我们就不用分析了，盲猜也是用上方的对称算法进行解密，接下来我们验证一下</p>
|
|||
|
|
<p blockindex=17><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=18>一模一样吧</p>
|
|||
|
|
<p blockindex=19><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=20>同样尝试解密响应也成功</p>
|
|||
|
|
<p blockindex=21><img src="data:image/png;base64,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
|
|||
|
|
<h2 blockindex=22>0x02 sign分析</h2>
|
|||
|
|
<p blockindex=23>sign的相关的代码在data加密的代码附近，这里可以看到，sign是a的值，而a是在t没被加密前，调用了getRequstSign(t)函数，那么我们看一下这个函数做了什么</p>
|
|||
|
|
<p blockindex=24><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=25>代码如下，可以看到最后的返回值是将参数<code>i</code>进行了md5加密，而i的值，是t的值加上e（也就是我们的参数），外加字符串'VETRIP_B2C'的组合，而t的值是对this.COMPID进行md5得到的，this.COMPID我已经打印了，也是个字符串CLYTB，既然this.COMPID是固定的，那么它的md5加密也就是t的值也是固定的为d4a开头的一串值，逻辑就有了</p>
|
|||
|
|
<p blockindex=26><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=27>同样的我们可以尝试验证一下</p>
|
|||
|
|
<p blockindex=28><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=29>一样</p>
|
|||
|
|
<p blockindex=30><img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAnQAAACmCAIAAADcYoWVAAAgAElEQVR4nOydZ3xUxRbAzy3b+256XwihhdCLFKUKKIoCD0VUwF5BKaKC2BBBQARUsACCKB1RRFSaCMgmoSQhpJBk0zbZZDfb6+3vQwppSNCI+t79//Ihe8vM3Llzz5k5c2YOwnEc/C4URTmcbn8gQJIUQZIsy/7+9Tw8PDw8PP9joCgqEgqFQoFUItGoVQIB/vvXI9dVrjw8PDw8PDw3BPp3F4CHh4eHh+d/DV658vDw8PDwtDO8cuXh4eHh4WlneOXKw8PDw8PTzvDKlYeHh4eHp53hlSsPDw8PD087wytXHh4eHh6edoZXrjw8PDw8PO0Mr1x5eHh4eHjaGV658vDw8PDwtDNXlStBEFlZWSRJ/o2l4eHh4eHh+R+gbuthgiBOnz595coVm83Wp08fpVKJIMjfWzIeHh4eHp5/KVdHrsFgkGGY3Nzc06dP+3y+v7FMPDw8PDw8/2quRsUJBoNpaWlZWVkIgkRGRt55550ikeiPJUq4S779ZM3Xx3NstKzPqIeef+LuRK2g/crMw8PDw8Pzj6ZJyDmKogwGQ3Z2NsMwOp1uzJgxWq0WRW/I6YkjLKcX3f/0YYdcKRVhCBPw+jRdJ7793sKBMRKUtzTz8PDw8Pwf0ERxCgSCvn37JicnCwQCm8124sSJ6urqG4uOHqzavXTxjzDg5fVfH/3l5OkTh7evejas6tSuH876aD5wLA8PDw/P/wXNR6VSqbRz584SiQQArFZrRUXFDUVTD5Sc3Wlw9Zg8Z8rgDjIBgEDRecikO4ZrT2XleQJ0exach4eHh4fnnwre7Lfb7U5LS/N4PAAQGxublJR0Q2ZhqymrhvQXb3nu9l31KXOsz21z9LmFuaERMA8PDw8Pz7+WJsrV6/X+9ttvJSUlCIIkJiYOHTpULpffWHoUDRwHHMc1UqVShU6qVWD8jCsPDw8Pz/8HV5VrdXX1uXPniouLcRzv0qXLkCFDBIIbdvENjUtRCA92fm7L5hmdmg+KeXh4eHh4/j+oM/n6fL5Tp04VFxcLBIIePXoMGjToD2hWAJDE9xyvl17cvWrPr3nOAM1xwATdhedPp14uI3irMA8PDw/P/wd1S3EYhjl//vyFCxf69++fkpKC4/gf3KGJo725ux6e8ma+SKuSiVEUAZYhA7Ixz7/2yoOD5fxgloeHh4fn/4Am61yLi4v1ev2fTzRYfXnf1k92Hbts99HaxJRxd06fMr5vmJzfR4KHh4eH5/8C5IZW2vDw8PDw8PBcFz7kHA8PDw8PTzvDK1ceHh4eHp52hleuPDw8PDw87QyvXHl4eHh4eNoZXrny8PDw8PC0M7xy5eHh4eHhaWd45crDw8PDw9PO8MqVh4eHh4enneGVKw8PDw8PTzvDK1ceHh4eHp52hleuPDw8PDw87QyvXHl4eHh4eNoZXrny8PDw8PC0M7xy5eHh4eHhaWd45crDw8PDw9POYG+88cZfkS5lL3QdPeg1UNArWnhjtzJEYYbzx1M+i5PCpKhSiiHtWTB3+lb30Ux/ZqY/MzNQKEK7heLtmfzNgCVcnrRj7vRSOjJBLL6J3SPK4zl1wn3yDCGLl8gC7pNH3acMVGQPsfwmlYEpO2c7cCRAiEURumDeUecP5whMIwxVou3aQm4ObLDG8eMev1cuCtOiV+uP8WQdc5/Ko1VhQoUYuYnP9e+uW3+Z9esDfpMNC4vCfQXWPT8ELB4sMhYX/CtK3xx/zhHn2WIsNBKXCNpwdZn16wO1As2fmUlou0hU/yCRxpJe1687PL9W03ExQsTp+HGPN8fHxUUKBdhNyZ90G75xn8gkWA0eCd5933oysml5jFAjrm8ZAd/pk67fMgIOHy2WYzJRezZ4rgVer5em6ZbHbwhPxheZvcEAc003fGvQ/sXicwKJITbx/OjJVzb95PUwf7IwjSmaCwao+0uPW1fTjknfLPwFh7JHhxoU0Zd2F97UjAMlxfePMABk7CjlLJmFd/YxAOSkUjct/+B3Cw0A51/6lPCz5rXjDBCd+d7PBHnT8m9PSEt6Vn+4sGgzEWh8uCind7RBFpK17iB5c5/r3123NT+eAzDcMsmS7+YurDcApI99yGZuT7nhLzaU7NjtKnO1Y5rXwrx2nKHXeMvF6jZdXXkgDa7KtMwDbbvrZkE5y/Omag1wZ0GerbbNG3o9aqpy36z83UUL4gxi7aX3fvFzBXkJkQZV+JV9eY1aRnX5zDtTRQpDx+SLkx43/phFUWx75d18zOFyubKzs4uLi9tHdffT3ngnSqic9GL3nAz91jdQ5jf7Sy+V7kmn6PYpDgDEvmrsaTT2vLBXFKltt0RvLrgyShAZDdoOwg6hNzVjoRgXiREARCIGiRSVSAEAxZu+YTbouPB9zn9GZqT0Lz1ScqM5BMyXrrw1M0Ovz+g75NLb26zOYJPT2jAEABHggCDKyE4AGKAY/CsHJ9ciRDSiI6ijBfHRyM3p2Tdw7br15e7LnaDP/bG88eXkxS2Z+juL9uTSAGXv6DP0rf31uaX8ghsAALJzW5zNXLSZ9DFtLB1hKyvZsCjj1i4Z+sSMoVNzthxzBBoJBbUWB0BwDMExCI1EABAUQdD2NKi4f1pZtfYrwha8/qU3mdDRPYzGnkZj3KdTUOXfXZgWIJhQoIoDEKJCFBFo8AgAHMNunk1GJoxEAUVQqRABDT4CBwAUwxq1DF3Ee5+nXEqLfW8WazxgeeKl4gx7e+V9VTJyHOd0OrOyskiS9Hq9YWFhSuUff1e4Ig5XxINcdj2bMEu5HJxIIxA3DMcRTKHFFFpxYpK27zDj0xMcK9aZR38cF6v6w4VpjECnF+gA7NUofpOlV7shCOuVtO3i35AxioIQBQQwnRIQL6AowFj8qn4n7b/uKl+zPnjWiASdHITQ/hvoE3EcG8g+bHzseV+BF1dIEEsJteop409pwX3vR4cL6z4GgQAgAlVEAgYYLgJQC7Rq5B9kA/vzKDusPtlh9d+R87XrliO9VGUJNH2bHOEhSipFXhIAgGM5FgAAGD9ZYUNkOkwnRQGAZesvJ6mSUrLheC0s18ai0dXZRTPv8RjcuEKMIsCV/Op95sCVn9d12vaUttZuigkQESBiISIWAipAQIJI+qGSP1EbLeAIHwT/kf04XCbW6wFAGC5H/oEuNAiC4gLorhZIMAAcEWAQGaIU3LSPFkUEQsBxPESNA47IAHAcDWmsSjA8NAIPjYjq1FnVpatx1uP259ZVn3ozvN4ez1EBys/iCllbumocQ1BOAtMoa7V33UOyLFtTU5OXl0eSpEQiiYmJ+TOaFQAAQQABkMt+pxY5JujPPWN6dyk5cWPSlM6iFqXHFeGhd93r/vYz12UPxKqA9XvTzgSu2PDhE1RxdRN9jLvU8fMpiOmv6dsJHHl2Q6WsXzey6AJlAuGwW8USm/f0WRaPlQ4bIlP+yabHuA17iJpQxdAhYrW4/iDrzdofyOEko++Vh+AAwDG0vywncDmPswcgoqOoZy9ZuLxejdP+vDO+c1Lp9L5CR6X3QjpdSYC+q6xvD2mDzOHoYKXRdzmHNbtBqsO6pUg7R4vx+rO2XOv3aQ0FEk6YodI1KyTtNxX4s3I5qx+U4Wi3ZHnnSFH9OXf6dsrXVz4gOph3kbxSClgI1ruPUh+Ot3VaW4J2lYIYcKkYhGJMKEagcffMYv1oGcsNDf14PRRMtb5LtC3N+uf2V1k/ftvv6BKyfUXk2B4iym7/9sPyOSusr49TfzhBgQMAIJowHIQILgQEQKlEAEXgRmbkG+q2yg3aaEFKL2WMFq3r1JFuw3ekqbv07li6IIvIKAJQYn36KjrFNJMD/sp8f3YuZ3GBNBzv0VOmjxTiDcn7/UV5gbwczsVBaLwgOVkZrUEbzeGwtM+bk0HklUKAYoRe2nU1Wcpe6DlzhqnrNGsFQ4YoE7WN2mvQeXQ/Kx4m7SMJZF+kc82giBQM6KeM0jSer/UV5wQu5XKOwNX7dJ1ko/pL2zB192fqNm5xadxiAAA
|
|||
|
|
<h2 blockindex=31>0x03 浏览器->Burp</h2>
|
|||
|
|
<p blockindex=32>上面的js分析很基础，接下来就到了本篇文章的核心内容了，针对于此网站，我测试的时候想达到在Burp测试的时候请求体的值是可视的也就是没有加密的，同样响应我也想要解密后的，这些条件满足的同时还不能影响实际使用，整体解决方案如下图所示</p>
|
|||
|
|
<p blockindex=33><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=34>首先我们想要让想达到请求和响应都明文，第一关就是将浏览器到Burp的参数为未加密状态，怎么实现呢？可以通过hook，但是还有更简单的方式，浏览器选择本地覆盖，新建，</p>
|
|||
|
|
<p blockindex=35><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=36>选择本地的一个空文件夹后，允许</p>
|
|||
|
|
<p blockindex=37><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABFwAAABTCAIAAAAtAoRYAAAgAElEQVR4nO3dbVRTZ7o//q8P2WgJtYRTiZ0SXhDXHMKsRZhTcFrgLEGXTz8Bl4p/Hxj/YlUoVURgrFDrU60oA4qgKGrFn0esI+ISwk/UVQnnD7TH4K+QtYbkzDJ5QZipwR7DWDZVdnz4v0gIedgJAbHOlOvzCrJ3dvZOdnbua9/Xfd0TXrx4AUIIIYQQQggZrya+7h0ghBBCCCGEkNeJgiJCCCGEEELIuEZBESGEEEIIIWRco6CIEEIIIYQQMq5RUEQIIYQQQggZ1ya/7h0ghBBC/rn9Krfnde/CuPa3osARrX9P3/WK9oR4Y2ZI8OveBUJ4UFBECCGEkPGF2uWvC0Wk5B8Wpc8RQgghhBBCxjUKigghhBBCCCHjGgVFhBBCCCGEkHGNgiJCCCGEEELIuEZBESGEEEIIIWRco6CIEEIIIYQQMq5RUEQIIYQQQggZ1ygoIoQQQgghhIxrFBQRQgghhBBCxjUKigghhBBCCCHjGgVFhBBCCCGEkHGNgiJCCCGEEELIuEZBESGEEEIIIWRco6CIEEIIIYQQMq5RUEQIIYQQQggZ1ygoIoQQQgghhIxrDkFRn+rm1xrDgJtVBzTK642a+yw3+lfjjO2najpHvQGD8uThkmaDm6Wmtq9vaO6/xN4NMaqv39C4ex8csZ0qL9f0Sl9HjadjHE86T61JXbnmsualN8S2Xt5XcrnR7YnNa8BoGJtzycJ4s/SYsot1eOjORcUdjXEMT56xY7qnamtXtbUb2OHX9Vqfrq1d1dZlGnqVLlVbu0o9lu/zcAYMujF7OaPmjvur5Uiw7RcLT15sfTjcjvWpvrp2w/4NHC3O2Klqa9dZNmS8c1F5f5gdVDe7v7T2aZTtxpfYGd3N0os3O8f0TCOEEEJGYbLd36Y7F/+4V42YTy4XLBC5rMlprhQWKM3SjWcrV0tG9VqGaxvWF3dDJoqsWD6qLZjUVYr65PisWL5n96ku7T2kjgHvzluw7YfT8nVLz5Yvm+HhVTj1yYycql5fnbg6U8543qE7O9NyW1lpwsGT2eE+3h6GJ5yhqUqhdXeM3jLp2nW9rg+LpJHBIq5v+LCW8RN6PvCXY1SWnkPyjjhPnwIAtkfXA+NLN2HvnSspU7JzYtauGMmzdBfT0hVYc6QhXc7d71B7uRsiaWQwz9nH3jlVUq00d4pCKga/OwMdl4pO1xuDPrp83uPZ+BqwnYfT0hW9ABZ+di3Cq/PQeD0jtUqUVbR/vt2xWM60oXPJUJeXqUDyka8zrW9Rd+0nedUIzfuqbIbYcXummwcyzt8b5f6HrC/fF8t/DTA1H07fqxYs/Lw6P0bo5eYGWBZCoeu3+6HqRO4RLZNQfDs7fJR7at2p1sunb7WEhiav9rwep7nxZbEydHdNZPBLvR5gajv7yVFVQnFztqiv5cye003sFeXukn1z3XzWAx2K/ENNUO39ele00/vw8MaOFYfuIpS9XJ4QMKp96VKdrz7d08mEVki8/UQIIYSQV8EuKDK2NqgBwewV8XwNCq7tdosZCEqKGXVrXbJw0+yyz5o0p863J+6MGL7Vrbm88osGh30wAWjYt6bd4blxuZc2hMF054ba7c5bsPrmlh6290RKBnOhPMFtS5QJT82eXf1ZU/XhmqTzqzy2P0SzNq+NUh1VKXZkMsWlm2U+ADpKYrfVD3tsAIDQvK/KFok9rfHwxq7cc3qvNiZdW7R/vrVdYqjP/IRnH5KPfJ3J3dyz6qhqmP3aem20TRwv6C5nfVHdgzscU7orOgAATF0qvevt73sGALivaWvnCUgYsTx8BoMB1l2EN9gWN9acrOmF/9JkOdPHOt+NZvgauwAA9e0bZggWx8oBmNpP5RVovTo2uxb/kIGOM6VKM/wXZw7dCzA0HK43wjc52/156ID/LRo56/vmwf26vExFLwQCIcwNB/PksmFOUQAwajuMZoP2jykr1QfKt8+yvAPGm3tWHVWN7lxixLKoSDffZGO74q4GQXMSwt3sV5DI3QEalNVqQBC9MEo4GLMBYE26bhMHgL3foTawAGfs7OhmwRl7ei1nTNLn13NjnDZqam/UAoKk+PC+jpqqxu6RHaB8aXq89WS433ipBYiKD2VYto93ZUboxwDQ3VMBgR/MdH+FGxmWHQD8YnZe+JzJ3Xer8mLbrB2RfjzrcZrGVgBJ8ZGuX5aABVk5dSkF2vKyxug9Hq69g5tyuSOjbbjYA4QulItcv56DXvE9GkIIIQSAfVB0v+WqChAnLuUNVwZUygYzELR4lseYqE/XpvPQdmNC5/g2NfQ3XTgVjSj39wVFIRHSEf7yW5o7vj23j5XccVkojt+wRC6EMDyzfGvX2qMq7dH1WThb4rY96hOzdktQU3H3+arGhPx4j/cvxQkHCvXrt9VranIyMRgXjSGuV9fT49WaIufoQDr/D5nWZgp759QXVXrfocZi4Lzd2XF8TVXd5U++bBntznpHuqJk6521R1XK3ZnC4rPZ4T7WHgN+Lafz+PbH0r2grkjIcfPExSeVWWEwXt93RgWg92r6squ8G+Fv8Wtam81gEuLChh4KTP4ky03/AwA8bCzZe5Pvk+LUlfvqDfBP3rUhbPD972ssL+sG0F+9bZG7A7eI2nahOFEMj2/RSPB1y9gZ6CjJPaLl4J9cWJlq2r/k87sFa3OY88VzPcdF4rj884GSrJwK/a3clT055XuXSF/urr8wfInb7hd1qeKuBuHJ2VlhbtZw517deY31Esfd2bcoV+nVsxjfQNZkAhzfAlPbbTXgm7BQDq6uqUrhXdA8JM4aFHHq6nPdAFTH0xcd51/Veg4Y1Lf7wcTLPN6m8bJXk2UAaFqbVUwAACZu/TpRnwQ6VRtP2Gy5HSaYPUcOvrhFOGvdUsknSoY13mcZnk/dGtEBADrKF/HfMNIWb1xS7HZvLd9lMhrv+k/8a+/z170XhBDyz2HygFGtMXCA4fa5bsA3QtzfrmobXGr7gTQ1X2niAImMMaraeBLIB8MYS4bMsFQ1X6hq3C9OKG7OFgGyFZeqHFKeOkpit9Uv3FWVKXd6Atd55bwGQL+2lq91EiVduUQuBIZiGIP6aO5hydnscB+O7eNpQ4hmrV6cxM1LjeJrB9j/zAM+8qyTh5D+yU2O7WUBH3lWszLL/bFZGK9npHjT+RCQWNacaLi2cn1xT+jumrK5vI1yN31TIll4RJQYALjW23rAd/4sGWD58EShEVGRfEER0zz8Tr0026egyFmP4rPZ4WmKa6kua2kOL8lVIumza2lRPNtghAD8IxIWWz4KY0f97W7/mPnRwdaPJlwE3L/yRYHWLInbmrvAoUXL6WoOnL5r8g/hS3UDgHuNN43wTVtg3y4XSeWREe5jg4dGEXiCIrbz2P6qXiBkZbJ8sMVoUhYfvMtBIAl026UBgDP1GMy2/4aO1D3jHcVdHYCg99bI3e1oULD7aKVPVZL+Sb0B/kmfV2TKhcDO0o7UdIV6b8Yun/J9sZ7jIqEs5UyFKCOtQKsu3l4efH57xDB761bnqTVFjR6Wc0YAuHlgZZunNyT+08pNMsfntdbW9QNBaxJlAMSyUKnGcv9GHBYVJAQA7l7jLVV/YPJne9dEiRlPHYnW7h3xgtkzASwouB4//HE5nM+D4UPXlZLqfsgS/pAe4zbgZiQiAA87vtEBSVGhHl9kBL2a6Lm195Nbdv9fAuAaNve1KGrNYBISInTlHvrADUcyG47wPD4Y1dvxdH46sfQKklF6N9b/VpLgR/1PO06wTV49Y2Ji4hvTm9kzrsnXiSL9+5N++Ev/7879NNa7OV6ZeneXcZ1hU68sf/PlNtR3vnRgWuzU+RG+UxwXPGn74Xd/ev5+3Bsn/hdfHzAhxMVkVnUm84jtV7S/4XieXcba4A+kpR8GMNw8mnmTbzPWMMYqZmPBCumodkd3KfO02u5/Q/Phq522/4xqAJ0XS04OtZnCk7LjZhhqShX9gG/a8doUW0PIqMhZdbTDJePfR55VtE2fcs
|
|||
|
|
<p blockindex=38>右键代码处</p>
|
|||
|
|
<p blockindex=39><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=40>这里因为我将上款的代码格式化了，不能直接用，这里面坑很多，最保险的做法是重新刷新一下，然后定位到对应js，注意千万不要格式化，右键选择保存并覆盖</p>
|
|||
|
|
<p blockindex=41><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=42><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAn8AAAE1CAIAAAAZBxE7AAAgAElEQVR4nOzdeVxU1fsH8GcEdAbc2LKQJRcCFFAB0QzcIZdsUSCXikRL0+ynuZBZ5lfza9iiuZR9VcisTMAtFxRcENAAGUREBRGUASkVxI2ZUZb5/XHyer0zDMM2A/p5v/pj5t5z7z1zx3jmnPOcc0UqlYp0U11dXVlVVVVVXa1iqnU+FAAAoEY5F/OIyOmFboauSN2IRCQStRKJRK1EIiOjVsZGRq1atdLxWONaS6hUqgcVFRWVVdXV1Q2rJwAAwJNDpSKVqpqIqogqKomIWrVqZWJs1NrERCQSaT9WW/RVqVQPKiofVFTo3j4GAAB4alVXV99/UP2gorK1iUlrE2MtMbjG6FtRWam8/wBxFwAAoE5UKtX9Bw8eVFSI27Q2MdYcZzX3UN9/8EChvI/QCwAAUD8qlUqhvH//QYXGvcKYrCJSKu9XVFY2fcUAAACecPcfPKiurhaL2wj6oIVtX4ReAACARlRRWalU3hdsfCz63n/wAKEXAACgcVVUVgq6oFtp2QcAAACNQtC+/XfcV6VSKe8/MFCVAACgmVIqlTujoy9cOC8Wi3v06Dly9GixWGzoSj3m80WfNtGZly3/b+OeUHn/gbGREZuG9G/b90FFJTKcAQBAgIVeIlIqlenp0gP79xm6Ri0YW0WDvTZ++B59zgAAIMRC76O358/TOEPVRRv1diprE9ev/dp07ekHFRVsFY5W7A0avgAAAE2Na+62IqKKyipD1+fpdSkv/6PZ8w4eijV0ReCJNXTwoKGDBxm6Fg0SczA269w59e1xcUeysjRsh0bk4tLjsbc9etRUEnT0y6/biMi4urq6IY9POHgo9kDMY5HD0sLS0bHbyJf9zC3MG1rHlkb9bnDWrP6GiMpuloV9/Z1EYhq6YE5zy1wApqys7OiRI2cyMpKSEtmWkSNH9evf37uft1gsMWzdOGVlZbNmzrCwsFj5zTfNp1ZNJOZgbNa581nnzhORa8+e3PbDR49lZJ49czaLiFxde9Z4PDTM2IAALuvKpUePUaNfMXSNWrzrN0qu37hhXFnVCA1fWztbycNYkpt7qTSlNDPz7KRJ492eyv8l+Hej5Sq+WhyfkNS5s82ggT6Grov+xMQc+DosjL328fFt165dYaEsJuZATMwBV1fXTz5dZGNjY9gaPoXs7Dqz0BtzMI54AdjM1IyIVCrVwdjDhADcZMRi8cS33jJ0LZrcP3///exzz+ntcumnzxhXVTXCcwPHvv5q925d2WulUhl/POFATOxvv/2x5ItFT2ELj383BMwtzL9asUzP9amfzKys5JTUUSP9DV0R/dn6y5aI8HAbG5v3p03nt3TLysr27f0zIjx8wby5K7/5tjkEYHNz819/32boWugJC7cs9PID8Iv9vY2MjI4nJCIAQwMdPXLk2NEjjT6/SIsrBbJW1Y2dbyUWi0e87O/u7iZXKDIzsxr35ABNJCsri4Xeld98O3DQIH53rrm5+dvvBIet/Lq4uPir/y43YCWfWq49e44c4cdexxyM48aAvft6DhroSw9bwBgDhrq6cvnyt19/fezoET1f99at262aKNvZ3bUnEd0su9kUJwdodP/b8CMRaelb7uvtPXLkqKysrFOpqfqtGhBpDcDDhw0hBGCoI6VSGXNg/+ZNG2/dKtP/1W/dum2sUjVCz7M6C0sL/tuym2Uxh+Jyc/NKb5YSkaWFZb9+niNeFvZqsmKZmWflCoWpROLu7jb2jVc3bv45N/fSR7NmCLpzDx6Kzcw6X1RYRES2drYjX/ZrEcPMH82e5+jYfdbM6dqLnc06F388MTf3EtVwu5RK5cFDcWfOZLFbamtn26+v16CBPqmpab/+/oe7u9vUkGDBOY8nJO3YuXvokEGvvzZGyxn4uWMHYv59PWqkP78C2m/+pbz8NWt/GDXSf/CggTt3/cm+UFs7W65P/uCh2JQUaenNUu5bNuwIRXFxcVZWlo+Pr6urq5ZiI0ePjok5EH/sWF9v71OpqaEL5gcGBX0wY6ag2I7o6PXr1i75z9KBgwZx59+ze9eJpKTi4mIbG5uXR4wIDAriN6+/DguLiTlwNP54VlbW/zb8mJWVNT80dOTIUfl5eVOnhMwPDR0yZEhUZGREeDgRHY0/TkRDBw8aOXLU/NBQ/qXz8/IOHToYFRlJRK6uriNHjx45cpTGz6JUKqIiI0+lpmZlZRFRYFDQa6+/IfjlkZWVlZhwnJ3NxsbmJR+f8RMmmpsbLJuypi7oPr17EdHhI8fQBd0Umv9aV/Vw5fLlHdHRBom7zK1bt4ybaKLvpUuX+G+/WLqciBwduzs6dpMrFJdyLx2IiVUq77MwwBRfLV6z7kf2Z9rdxkauUGRmni0qLlY/uVKpXLN+Q1FhkaWFZf9+3uyEGzdFcHGlpft9W2RySiqLTKYSSW5u3oGY2Mys8wvmzmYFWO40u1dDew0qLLp6tehq5tmsQQN9vL29du7ak5l5tuxmmSDtPOVUGhEN8vXRfgYLcwtHx+43S8tKb5ZaWlhaWJoTkYX5vz+ndL/5SuX9Nes3EJG7u1tRcXFRYdGatT98Mv/j+ISkzMyz3R27d7a1uZR7KTkltfTmzVp/jjSpS7m5RPTiSwO0F2OxOSbmwPzQUDd3Nxsbm6jIyMkhIYKs4107dxCRdz9v9pbFaSIaOXLUG2PHncnIiAgPP3Tw4Nr1PwgiWXFx8UcfCmM5ExEezqKgFvwLde3WLT8v7+uwsJIbN9RLFhcXL5g3t7i42MfHd+aHs/Lz8qIiI6MiI9esW8/9/mC/IWxsbAKDgtq2bZt7MTcqMvLll0cYMPqS1gDcqlWr2LgjCMCNTrDWlYpUY8cFGLpS9adUKmP2709Plxq4GvfvC5/v2zjnVSpTUqRE1K9vX7bF3d1t3OuvcsFAqVQu+c/yo8eOj3jZj/2MUiqVLPS+NXG8t7cXV4z9oRec/9fftxcVFvXv5z1xQhBXMmzlqqPHjg/y9WnpM52OJyQlp6Ta2tl+NHM69xtzU/iWzMyzqalp7OYcT0ySKxTjxr7OJSQrlcrcS3nstbu7W3JKambWOX66ctnNsqLCIkfH7uz+aDmDt7eXt7cXawGrt7l1v/nJyanu7m5csd179h49dnzj5i0KhfyjDz+w6WxDD/8l5OZeKr5azLYYRLm8nIjs7OxrLenj48tmIonFkpdHjIgID09NSeXauESUlZVVXFzMheTi4uLQBfPZcDJrWY4LCEg4fnzJF4v37f3z7Xce65/Ys3vX5JAQQbOYiK5cvnwiKWnT5vCu3brVVDH1CxHRpLffXjBvrqCkUqn46r/Li4uLw1Z+3dfbmyv51sQJ/9vw45p161mZ9evWurq68mc05eflmVtYUDMmEomwcFCjaylrXeniwoXzO6OjlUqloStCpP583wZSKpVns86tWb+h9Gbp0CGDuL/FU0OC+X+XxWJxZ9vORFR09d+mbUpqmlyh6N/Pmwu9rNhHak2i4qvFmZlnHR27c3/WWUk2JnQ8MalxP1E9rFn7w0ez5/H/q9NiGjExh0wlEn7oJaJxr79KRPEPP11h0VUisnj8lnJ9v4MH+tDDli6H3Zl+fb10OUNN6nrz+cVGvOxHRKU3S8e+8RoXaMVisbu7GxHl5uVrv7QemEpqnzjbrl077vVLL/kQ0eG4OH6B0+lSbhcR7dm9i4iWLvuS36k7cNAgV1fXiPBwpVIhOP/b7wSrz9+Nioxc+c23WkIvd6H/mz2HfyEbG5tPPl0kKJmaksp6trnQy0pODgnJyspiHdHFV4uJqGNHc35lunbrZtiGLxFlnTvHmrxENHKEHzf76EzmWdbwFYlEI/yHo+ELzV/jtH3XrP1BsKV/P29BP2Tx1eLcvPyysrLCoqusV5O/l2t1Cc4jFosdHbuz4U8mMyuLiNzdhONzbKSZBRXDUp/vy3Xb1upSXr5coXB3dxOMrLDfLlw3gLuba27upZhDcRKJRH12k01nG1s726LCIn7n85kzWaYSCXeHtZ
|
|||
|
|
<p blockindex=43>这时候我们访问这个网站，这个网站加载这个js的时候就会加载我们本地的js</p>
|
|||
|
|
<p blockindex=44><img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAl8AAAHYCAIAAAD8gBq3AAAgAElEQVR4nOzde1xUdf4/8DfmhRnMVi7VKg6CsJEi+Q2E2uSSBApeMmVQqxVBd1UMV7AkU4lIc8kVWAnr+0tA2m4yaK2uYJDKxe8mONMqgo2BKCOyW6CWKzOsmfz++OjpeGYYBhhmGOb1fPgHc+Yzn/M5Z3BefC7njE1nZycZ5vbt27d+/vnnn2/f7mRuG/xSAAAAU7OxIRubITY2NkNsbO67b8jQ++4bMmSIoa/tNh07Oztv/vTTT7d+vn37dp+bCgAAYDZDhgwZNvS+4cOG2djY6C+pLx07Oztv/nTr5k8/Gd6/BAAAGOBsbGyGDxs2fNhQPRnZZTr+dOtWx39vIhcBAGBQsrGxsR0xfNjQobqf1Zl//7158783f+rnhgEAAJjZiOHDRwwfpr1dmI6dRB0d//3p1i1TNQwAAMCchg0dams7QjDGKkxHDaIRACzZoyk3zN0EoG9SRpq7CT0zbOhQke0I/pZ7xlsv/+u7ln99Z9omAQAY10PmbgDQuW/Pm7sJPTb21w+N+fUvvzy/XPlx7YcfEY0AAGCdLv/ru2s//Mg9vDOy2tnZeUOtwQpVAAAwPdbXfOQ3E8zbDBsbm5FiEbvM407f8eZPtxCNAABgzdhV/uznIXcf4/oNAACwdtwNcIbwHwAAAFgzrrs4hIh+uvWzudsDAAAwILBMHHL79m3cXhwAAIBhsTjk1s/oOAIAAPzi1s8/D/n5Z3QcAQAAfvHzz7eH4CuMAQAA+Do7O4dgtSoAAADf7c7OIZ2dGFkFAAD4Bes7mrsVAAAAA0lnZ+eQ7ksBAABYGaQjAACA0NDuiwAAgLXq6OjYX1j4zTdnbW1tJ06cFD5rlq2trbkbdY/NG1/rj2rRdwQAgC6xaCSijo6Or79WFB36u7lbZCLoOwIAQJdYNP7y8OxZWmCutujz5ta3BFtYn1J7uyE2b3wNfUcAAAAhpKOZNZxvXLP25cNflJi7ITBorVn78pq1L5u7FX1SfLiktq5Oe3tp6ZHaWh3bwYgefXTiPQ8nTuyq5CDT15HV4uKi7Wlp/C1eXl5T/fxmz5k7evToPlZucQ5/UVJUrDvndmb+mYiuXb2Wtj1dJBInrU8YaDPbwFy7eq288vi3DeebLzWzLR4e7t6Tvfz9fAfOW2ZVv0jFh0tq687W1p0lIq9Jk7jtXx49dqrmzOkztUTk5TWpy9dD38yPjORW5Tw6cWLErNnmbpGJGGfecdq0gPvvv5/9XFxcVFtb+8Xhw6++ttHLy8so9VsW53HOIsv/wGq53FJWcXzs2DFBgdPM3RbT4f99w97Hq1eu1dc31Nc3lJVV/n5Z9JixY8zbQis0btxYFo3Fh0uJF5B2Yjsi6uzsPFzyJSEg+42tre3zL75o7lb0u3//618P//rX/C3GScelMTFuEyawn+P/uObYsWPb09L+9NbW3bm5trYio+zCgsyfN9d9gpvOp0bbj/7TtjdN3J7eqamtPVFVHREeZu6GmM7HnxScqKoWi0Th4TP4PcVrV68Vf1F6oqp65zvvrnlp1UAISAv6Reo7FocsGvkB+eQTfvfdd195RSUCEvro6JEjx44eEazfMf68o62tKDw8QhoV1dLScqbmjNHrB+gPZ2rrWDSueWlVUOA0/nDlaPvRzy+OevH5RWqN5v2cfDM20mp5TZoUPjOU/Vx8uJSbg/Sb6hMUGEB3e5CYg4Seunjhwo7t248dPaL9VH+tyvH1nUpEbVfa+ql+AOPav/8AEb3wwqKuuoZ+fr4eHu5Xrl6prpabtmlApDcgnwl5mhCQ0EMdHR3FRYdydr//ww/XdBbor+sdHRwc+A+vXbv294MHTlZX19ayKXSv8FmzwsMjBK9ixb44fLilpWXMmDEzZs6URkVl/WVncXHR7pxcbvCWKS4u+ur//nH8eCURTZsWELVokUVMc65Z+7KHh3v86pX6i52prSsrr6yvbyAiB3sHf3+fmTPuGeTs6Og4/EXp6dO1V65eISLncc7+U32DAqdVV8s//PhTb+/Jy2OjBXWWVxzft//z6U8HzXt2jp4a+HNvRcV3fo4ID+M34PAXJTW1Z9m6FedxzuEzQifzBrUazjfuzNoVER4WHBS4/7MDNTVn1BqN8zhnbsz58BclVVWKK1eviEUib+/J85+ba96lJS2XW65cveI8znmy3qG54KCA+vqGqpNyPz9fPef5878dPHqsfMH8edyUbcvllqIvShvqG9Qajc5Dzsp+r76+YWfmn8/U1u3ff+DK1SvshAvO5Imqarq7wkvnL1LD+cay8sqamjPUxa8Np6OjY/9nB+rrz7N339t7csSMUMFfBmdq66qq5aw2sUjk7uG+YN7c0fZmW23X1RDr/0x5jIi+PHIMQ6z9YeDfK6cXLl64sK+wsKtcZPorHc99e47/cMFz84goPDxiqp/fjRs3/u/48e1paep29YLISK5MS0vL+pfXtbS0TJsWMGPmzBs3bnxx+HD9t/XalXd0aN7asvX48UovL6+Y2FhW4ZqXVq9+KZ5foeXiJsC8vSeLRaL6+vNFxSU1tWfXr1vLCrAliyxypj8WdKn58uXmyzVnaoMCp/n5+e7/7G81NWeuXb0m+CCrOiknoqCAafprsB9t7+HhfvXKtStXrzjYO9g7jCYi+9H2rJKOjo6d2e81X2p2sHd4wt9PrdE01De8vzuPC11OR8d/d2a/R0Te3pObW1qaLzXvzNr16iuJZRXHa2rOuHu4j3Ue01DfcKKq+srVq93+udCv6s83EpG3VzdL1Vl2sj9ZvL29xJ+JamrOdHR0CD4sTpyoJiJ/P1/2kOUoEXl4uI9zHvttw/kTVdU1NWeSXkkUvEEtl1ve352nc9cffry3prt5CsGOLjVfLiouuXr1B+2SLZdbdr7zLv/dr6k5U1Nz5vfLY7i/D1jGc7+EzS0tNTVngoMCzJiOpDcghwwZUlJ6BAFpdIJ75XRS5/wFFvwx29HRUXzo0NdfK7ot2S/p2NGhKT50iIieeOJJtkUaFbVo8fPcNR4xsbHLY2Oz38maNXsWW7bT0aFh0Zj29vapfn5cMZaCgvrzcnOPH6+MiY393ZJoruT6l1/OfidrekiIpV9JUl5x/ERVtfM45zWrV3Ifu7tz82tqzlRXy/38fImovPK4WqPh9046OjrqG86zn729J5+oqq6preMvN7129VrzpWYPD3f26aanBj8/Xz8/X9aD1O58fPjx3uZLzU/4+z2/OIp7YdrbGUePlQcFTON/dJ44Ue3tPZkrxj5t38/J12jU3NqWjo6OlDe21tc3tFxuMeNqF41GTURjx47ttqTzOGfWY7a1tWXnuapazj/PZ2rr1BrNE/5+7L1rudzy4cefsulM7gBZJ774i1Lu5DBFX5Q+4e+n3ZNuvvyvhvqGNfFxXa326mpHLAUFJTs6Ot7PyVdrNC8+v8jvboS3XG750/b0/fsPsHTs6Og4eqzcwd6Bf8VIw/lGh4H9n8vGxgZf5250lnKvHEN8883Z/YWFHR0dhhQ28rxjR4emtrb2rS1ba2trV78UzwXVqrjV/NCytRU99tgUImq53MK2VFdVt7S0xMTGctHIir22aaNgFy0tLbKCgvDwCC4aWUn28OgRHZOrJrYzaxe7/pr716OL/YuLvxCLRPxoJKIF8+YSUVnlcfbwUvNlIrK3559SW+6v/uDAaXS3p8gprzxORP5TfQ2poSstl1tqas54eLjzP9ZtbW3ZhFD53eZx+MVmzggloitXr8x/7lnu45tlDN3tvZmXSNT9+mr+tTosWgTn+cyZOu4pIir6opSIli+P4Wd/UOA0B3uHE1XV2v9Ln18cpT1sVVNzZs1Lq/REI7cj/rklojFjx7zwwiJByapqORu55RrJSj7h73fl6pUztXVE1Hy5hYhEdiJ+Y9wnuJm340hEtXV1rMtIROEzQ7mrO07XnGEdRxsbm5lhz6DjCH1nnL7j8mWxgi0xsbGCQc6WlpaG+vrW1tbG8+cvXVKxCUhOXV0tET3
|
|||
|
|
<p blockindex=45>接下来去Overrides标签页选择对应js，这时候就可以放心大胆的格式化了（这里卖个关子，当然也不能100%放心，还有某些情况是不能格式化的，具体什么情况呢，我不说?），然后将t加密这行删掉，这样就保证请求时候的data字段不会被加密了（devtools也就是f12不要关），别忘了ctrl+s保存一下修改后的js</p>
|
|||
|
|
<p blockindex=46><img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABFkAAAGFCAIAAACpO7uaAAAgAElEQVR4nOy9d3gc13nofabubO99sYu26J3ohSTAXkTJlmX1uCSxc+2bfCk3yfMlubm5yb3/xU6+a1mOZF93y7ZkikWkChtIkEQlCRIgei8LYBfb6/T5/hgSgkASIiVKVOT9PXz4YGfPzpyZOeV9z1sOJAgCuDccxzMcz3GcIPA8zwsCv2nxNGk+D4SSwlzw97GhyzCQbYBQBHrUFUmTJk2aNGnSpPkoQBAEwzAMQRAMowiKojAMbSbYoHc9KghCMpmKJZKpFMkwzCdT1TRpPqNcmIb/6RTxqGvxCCg2c/9rL6WRPup6pEmTJk2aNGnSfGwgCMJxTEoQKqVCIsGhuylF0J12IZ7nkySVSCRSJLW51ShNms8li1HkyuLvoy6kk7J1GZTk7iskgOf5aDRGEARBSD7deqVJkyZNmjRp0nxEIAiSy2UKuYzA76IObdSFeJ5PUTTLsp9iDdOk+WwhCID/fV0EgCFwL0syy3FLSytqlUqtVn66lUqTJk2aNGnSpPlYQBCEoShxh3XoAyvAHM+nSIrn+buakNKk+T0BggD8qOvwGQSCIPG/9PiQJk2aNGnSpPlPB8OygiAQhGR9BNH7Ip8gCCRF8zz/KOqWJk2aNGnSpEmTJk2aNJ8gLMeRJLVe37mlC/GCkCJJjuMeUcXSpEmTJk2aNGnSpEmT5pOF5TiaYdaCIW7pQjTNsFzaIpQmTZo0adKkSZMmTZrPMzTDriVHgAEAHMenLUJp0qRJkyZNmjRp0qT5fYBhWDF/HAwAYDkuvYVqmjRp0qRJkyZNmjRpfh9gOU40BcGCILAsm95HKE2aNGnSpEmTJk2aNL8n0AwDAEBZTuDSuePSpPk9gGGYq319KTKVl5dvtdlg+BPJHB4KBgcHB5LJ5IP+EMOwyqotOp3uk6hVmjRp0vzeEo1Gj7z55uTkxNoRBEGamlu2b9+OYdgjrFiaNJ8Oi4sLJEne9auiwiKUYZlPuUJp0qR5JHRcuNBx4bwgCBPj48+98KJCofgkrhKNRa9eucIwDIwgAACe5+OxGEFIcQm+ya94nmcZNicnN60LpUmTJs3D5fz59n/55/9JEIT4kWVZr9d76r1T//Of/3l7a2taHUrzucfn9UYiEYmEuPMrjUaL3nn0cw/P8/F4AkFguVz+qOvye00sFqNpWqvVfkIGik3geZ5mGAxFEQQRj6RSJIoin+8pYX5+Tkyo7/V619KnfEL88Te+qdXpAADJROL7L720b//+ktLSTcpHI5GXvve9j3Ytmqbj8YRGo/70G1KajwDDsIlEXCaT4fhm6vHnAJph4vG4WqVaG2c+Jv5AUKmQSySSh3K2B4VluXg8jmHo52bqjMViMAxLZTL4875/dDgcTiaTk9Mz4kePx1NfW9Pa1vqb3/yaZdnWtrY1NelhwTBMNBpVyOWSh33mh0soFIIgSKPRPOqKPHpYlmVZViKRiNupcxzHMAyO45+biVWlUm+prr7zOIai6P1srioIQigcnpmZpWkaACDBJXa7zWg0fDYfEMdxM7Nzq6ura0dwHK+sKPf5fMvL3tLSYo7junt6VEplfX3dI6znI4RlWe/KyuzsbCQSUalU2Tk5ZrP5Yc3W6+E4bmpqKhoJV1ZtufP8fb29MzPTz7/w4kMfhTdHEIRgMDQ6NuZ0ZjgzMgAAkUjkWv91s8nkdud+jtWh4pIS78oKRVE5ue7Pkxjq861e6Lj4hScOyWSyDV8JghCNRufmFhLJhFKpdDkzFAoFtKncQ1HU9Mys0Wg06D+uhYphmOmZWRiC3O7cTYqxLLu8vLK8sgJDsM1mMZvN4XBkZWUlMytTvu6OOI6bn19kGDo7O8vjWfL6VrOyXAa9fu12YvH46Oh4bk6WVqulKGpkdMydmyOKrSzLTkxOITCcnZ2Foh+yBOb3ByYmJ9c+arXagvy8eDw+PjFFUR/wMVAqFbk5OTAMT0xMRmMx8SCCIHnu3E1ki2g0eq79fFNTo81q2fhVLDY0NPzBY5DNanG5nDzPBwLB+fkFhmUsFovdZl3rqvF4fGZ2Lh6Pq9XqTJfzzmbwqPD5Vjs6Lj12cJ9SqXwoJzx8+Oiuna3Z2VkP5WwPSjKZPHeu3WazPvSpk+M4j8ez4vXxHK836Ny5H+gvyWRyeGRUr9dnZbrEIzRNLyws+gMBgiCyMl0qlep+rkLT9NzcnNPpXFMm+65clcnkW6oqYeyencLr9VI0Lc4U98Pqqt/r9WZnZ3122uFdQVF0x85dDMMcffNwIpE49Pjjm0wKN27cwDAsLy/vQ0ePNUKh0PFjR7du256Xl/eRK7m0tDRw48aamKrWaJqamsS/Y7HY2Oio3+93ZGS43e61d0qS5MTExNKSx2g0FRYWSqVS8TjP88vLyxPj47wgFBQUWCwWUYI9c+oUimFf+OIX77w6wzALCwsT4+M4jrvdbqvNJooxiURi4MaNUCgkFlOp1TU1NetXKARBWJifn5ubq6isXN/3OY6bnZ0VBCErK+teEhfDMFNTUyajUafXb/5wYrHY8vJKVlbm2kjI87zP54NhxGg0bD7N3QnHcdMzsysrKyUlxTqtluf5paWlqamZoqJCk8n4QKf6TwfH86gg3JcutLLibT/fAUEQBEHxeFyC4wcPHiguKvgUavmgcBzX3399ZGxceVvoUSoVFeVlMzNzHRcvFxbmC4Kwuur/RNOIx+Pxa/03srMyHQ77J3eVjwbDMCfeeuv4sWMQBJnNZq93BcPxJ5/80vbW1ocuH/M839vTPT01VVZecWfP9/v983Pz96ONP3Tiifjo2PjQ8MiB/XsddnsoFBkeGR0fn4RhxO3ORZDPopL/8Skvr7DbHRzLKlWqT1n/vBcMw7AsuzZdfTRIilr0LN21IUUikSNHj3t9qziOJ+KJgnz33r27NxdMU6lUV1dPbW31x9eFaJrp672CoMgmuhDP8wMDN9957z2ZTJ5KpmAYev7Zp3leONd+4ZBCIXc5152NvnDxosVsysrKHBoeuXips7amev++3WtzcCQSPfn2u19+6otarTaVIk+fOWcyGkVdaPDmzTNnz2/f1nI/E6RnafmtE+8YDHpRVsjNyS7Iz0smkwMDA+FI9FYhQYhEoznZ2dnZ2QxNX7zUGQiG5HIZAEAikZiMxk10IYZhlpeXKYq686t4LNbTe2XtI0VSiUT80GMHXC7n3Nz8WyfeoWkagiGapne2tVZWVqAoEgqH33339NT0tFarjUaiubk5jx3c9xlp3iRJepaWWPahzTVz8/PJVOphne1B4Th2ecUrlX2s3nq303LnL1zs7e1DURTDcRkh3aALXb8+eOLk2/X1taIuxHFcx8VLV65exzA0kUhazcZnn3laofwQj1+apvuuXjtz5tz/86ffWusygWCQppl75Y7ieX5qavrYWyfy8/LuXxeaX1jo6u41GI2fcV0oGo3+w9/9nUwmnZub6+/vb9vRptPdU/g+d+aMUqnMyvrwlZQ1aJqen5tLJBIfp5JTk5M//cmPi4qKxY92h0PUhRKJxMvf/75/dZUgiIWF+T379j/55JM4jpMk+aMfvjoxPq5UqT2exZxc95/92Z+JqvL4+Phrv/qlwPPJFPnm4cN//ud/nut2AwCWl5fRuy2AMgxz+tR7R48eNZvMqVSSYdnnX3ixuroahuFIJHLy5AmGpuVyBQDAYDRWlJev14Uoijp2/NjY6GhWVtYGXaj/2jWe5zIyMu6lC7Ese72/v6S0ZHNdiGGYkyfffv311//rt7/dtqNNPBgMBr/3vZcYmv77f/h7tVr9IE8aCIKw6vP1X78RDIV2tG6XyWQr3tWBwZuLS569u3cbDB+imP3nIpVKrZc6BEFA7zOBnMDzGQ7H3j07VSpVJBJ56+Q7bx4+4nL+6ScUcvAxYVmuvramrXXb+n7b0FDX0FAHAEh98nPJomfp7Lnzxqef/KQv9KDQNP3W8WMnT5z48tNPb29tlUqlJEmeOvXe8WPHcImkubn5/ke6+wHDsBd
|
|||
|
|
<p blockindex=47>我们可以抓包看一下，请求中data的值是原值，没有被加密，这样我们就达到了Burp中的可视化目的</p>
|
|||
|
|
<p blockindex=48><img src=data:image/png;base64,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
|
|||
|
|
<h2 blockindex=49>0x04 Burp上游加解密</h2>
|
|||
|
|
<p blockindex=50>上面我们已经解决了请求中data字段将其变成了未加密前的原值，但是后续我们发包就是以原值发的所以是400，并且响应中的res解密操作也还没做</p>
|
|||
|
|
<p blockindex=51><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=52>接下来我们就要用到之前写rpc文章里面mitmproxy了，让其成为Burp的上游，在发请求和收响应的时候都改一下我们的值，另其加密解密，以及确保sign值正确，代码写到下边了，懒得写注释了，自己研究吧</p>
|
|||
|
|
<pre blockindex=53><code class="hljs language-python"><span class=hljs-keyword>import</span> base64
|
|||
|
|
<span class=hljs-keyword>import</span> hashlib
|
|||
|
|
<span class=hljs-keyword>import</span> json
|
|||
|
|
<span class=hljs-keyword>from</span> gmssl <span class=hljs-keyword>import</span> sm4
|
|||
|
|
<span class=hljs-keyword>from</span> mitmproxy <span class=hljs-keyword>import</span> ctx
|
|||
|
|
|
|||
|
|
encrypt_key = <span class=hljs-string>b'd6a785b93b6c0d4a'</span>
|
|||
|
|
iv = <span class=hljs-string>b'2d91d2be3ad9e42c'</span>
|
|||
|
|
gmsm4 = sm4.CryptSM4()
|
|||
|
|
<span class=hljs-function><span class=hljs-keyword>def</span> <span class=hljs-title>encryptSM4</span>(<span class=hljs-params>value</span>):</span>
|
|||
|
|
gmsm4.set_key(encrypt_key, sm4.SM4_ENCRYPT)
|
|||
|
|
data_str = <span class=hljs-built_in>str</span>(value)
|
|||
|
|
encrypt_value = gmsm4.crypt_cbc(iv,data_str.encode())
|
|||
|
|
text = base64.b64encode(encrypt_value)
|
|||
|
|
<span class=hljs-keyword>return</span> text.decode(<span class=hljs-string>'utf-8'</span>)
|
|||
|
|
|
|||
|
|
<span class=hljs-function><span class=hljs-keyword>def</span> <span class=hljs-title>decryptSM4</span>(<span class=hljs-params>encrypt_value</span>):</span>
|
|||
|
|
encrypt_value = base64.b64decode(encrypt_value).<span class=hljs-built_in>hex</span>()
|
|||
|
|
gmsm4.set_key(encrypt_key, sm4.SM4_DECRYPT)
|
|||
|
|
decrypt_value = gmsm4.crypt_cbc(iv,<span class=hljs-built_in>bytes</span>.fromhex(encrypt_value))
|
|||
|
|
<span class=hljs-keyword>return</span> decrypt_value.decode()
|
|||
|
|
|
|||
|
|
<span class=hljs-function><span class=hljs-keyword>def</span> <span class=hljs-title>sign</span>(<span class=hljs-params>text</span>):</span>
|
|||
|
|
md5_hash = hashlib.md5()
|
|||
|
|
md5_hash.update((<span class=hljs-string>'d4a4a210ed3d3d367049d4d331883485'</span>+text+<span class=hljs-string>'VETRIP_B2C'</span>).encode())
|
|||
|
|
<span class=hljs-keyword>return</span> md5_hash.hexdigest()
|
|||
|
|
|
|||
|
|
<span class=hljs-comment>#截获请求加密data，以及更新sign</span>
|
|||
|
|
<span class=hljs-function><span class=hljs-keyword>def</span> <span class=hljs-title>request</span>(<span class=hljs-params>flow</span>):</span>
|
|||
|
|
<span class=hljs-keyword>if</span> flow.request.urlencoded_form:
|
|||
|
|
data_value = flow.request.urlencoded_form[<span class=hljs-string>'data'</span>]
|
|||
|
|
flow.request.urlencoded_form[<span class=hljs-string>'data'</span>] = encryptSM4(data_value)
|
|||
|
|
flow.request.urlencoded_form[<span class=hljs-string>'sign'</span>] = sign(data_value)
|
|||
|
|
|
|||
|
|
<span class=hljs-function><span class=hljs-keyword>def</span> <span class=hljs-title>response</span>(<span class=hljs-params>flow</span>):</span>
|
|||
|
|
content_type = flow.response.headers.get(<span class=hljs-string>"Content-Type"</span>, <span class=hljs-string>""</span>)
|
|||
|
|
<span class=hljs-keyword>if</span> <span class=hljs-string>"application/json"</span> <span class=hljs-keyword>in</span> content_type:
|
|||
|
|
<span class=hljs-comment># 解析 JSON 响应体</span>
|
|||
|
|
response_body = flow.response.get_text()
|
|||
|
|
json_data = json.loads(response_body)
|
|||
|
|
json_data[<span class=hljs-string>'res'</span>] = decryptSM4(json_data[<span class=hljs-string>'res'</span>])
|
|||
|
|
flow.response.set_text(json_data[<span class=hljs-string>'res'</span>])
|
|||
|
|
</code></pre>
|
|||
|
|
<p blockindex=54>利用mitmproxy开代理，设置为Burp的上游代理</p>
|
|||
|
|
<pre blockindex=55><code class="hljs language-shell">mitmproxy.exe -p 8081 -s .\mit.py
|
|||
|
|
</code></pre>
|
|||
|
|
<p blockindex=56>最终效果如下所示，这时候参数我们也可以放心大胆的修改了</p>
|
|||
|
|
<p blockindex=57><img src="data:image/png;base64,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
|
|||
|
|
<hr blockindex=58>
|
|||
|
|
<h2 blockindex=59>0x05 本地js修改</h2>
|
|||
|
|
<p blockindex=60>晚上正睡觉呢，突然想起来不对，少点东西，就腾的一下爬起来，有了下文</p>
|
|||
|
|
<p blockindex=61>上面遗漏了一步，就是虽然响应是明文了，但是返回到浏览器它肯定也是明文，正常浏览器肯定会提取res的值，然后使用之前，前面肯定有个解密的步骤所以现在这样肯定有问题，我们要去把浏览器获取响应后的数据处理代码改一下</p>
|
|||
|
|
<p blockindex=62>其实这个步骤应该放在漆面sign分析后，因为那时候还没改浏览器本地覆盖调试比较简单，但是改完之后其实也没太大关系了，如果你真的理解操作起来也一样</p>
|
|||
|
|
<p blockindex=63>这是我们响应包，可以看出是json格式，并且呢里面有res字段，所以我们在js中怎么快速定位到响应包处理的代码呢，其实很简单，正常逻辑它肯定要拿到我们响应中的res然后并进行解密吗，所以这里直接搜<code>"res"</code>即可，so easy</p>
|
|||
|
|
<p blockindex=64><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=65>发现两处，将发现的两处都打上断点然后再次点击发送验证码触发断点，这里可以看到<code>t.data</code>就是我们从浏览器取出的json，然后它取了里面的res字段，将其赋值给了变量<code>i</code>，后边肯定有对其解密的代码，我们仔细看看</p>
|
|||
|
|
<p blockindex=66><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABDUAAADdCAIAAAAkSt5KAAAgAElEQVR4nOydd3xUxfbAZ27bvptNNr333nsIhBI6KgKKCqj4LIjt4fO9pz7bw9/TZ1dQFAREEQVRQBCk11CSUFIhvffsJtm+e9v8/tiwhEAgQVT07ffDH+TeuXPP3L0zd86cc+ZAhBAYPvrqzd/sKW1xuuf1+VH2g4jrOvvzxj2n6Oh5T013Ofz+u3mMW86853IDLhboO/fFyu0VMP25f0xxvXq9qHHnWyvP4Gmzn5gZLR6uMFzv3o/ePGb2Hzt/0QR/fPBJjjtbXC6XScNDg0bQQAcOHPwCWJbdtOm7t95+l2EYHMdtRwiCeGLxooULHxQKhdetwWQBWiM4emT/qs8+6GhvRTyiaevonNx/vfymRCqzF7NaLe+/vfT06ZOJSelHD+9jOQZCyNCMq5v7S6/8Nz4xFcMwhBDLMufO5q9c8UF1VQVJkhBCAACGYS++/ObY8ZMH3bqk6MwTi+bdPfeBx554lqIE9uMXykuffHz++AlTn3v+NYFACABgWWbHts3btm5ctPhv6RnZEMNYhiksOP7xsrdbW5oIgoAQIoSstJUgiBUrv4mKjrM9iqNH9q/69IPOjjYMwwAAPM85u7gueuK5ceMnEwQBAOA47ued295+82WCIGxlEOJDQiOfWfJiRFQshmGeLgAAwPP8qfyCd999Pzs76y9/eUghl/+SX42zWBo3b65bty7yr3/1mjYN4v3DKUKIZ5juY8eKX3tNX1WFkSTEMIAQz7Jjtmxxzcy0XVu3fn3FRx8xWq3t8fIcBwHwnjEjbulSkbs7AKCvvPzE/PkuKSkcy7b//DNGUYjneZp2Hzs2/t//loWHN2/bdmbJEoQQYhiepiFJ4hQFIAQAiDw9szZskAcH2+Qx1teXv/VW665dgOchhiEAMIryvfPOuNdeI6VSnqYrP/mkYeNG35kz6778kjUYIIQ8ywpcXKJeeMFv9mxCKAQAmFpb8+bNM1RX21pqE0bi75+xerUyPv4GHiDLsl99tf7Lr75+8cV/TszNtf1ww8RkMm3e/MOKTz+bMWN6YkL8p5+tUqvVy5d/mJaaai+j1+uXLf9406bNTz35REhI8NLX/yOXy155+aWkpETbMx8OCCGDwfDdd9+vXLnKYDTahGQYxt/ff/nyD8NCQ4dTVY8O6AyW999Zerrw1Ljxk3bt3GoxmyEGWYZVKJT/eGFpRtYYgiB6ezXvv7O0u6tzyXMvh0dE265taqx/9pm/jMnJXfTE3yhKwPN80bnCD9/7T3NTPYZhti6jcHKav+DR22beTZKkTeaamsoX/r5Y3d1JEP1HJFLp4if/Pj53qq2T9vX2LF/21pFDexBCDE17efu+tvS98IhoePFXYFn2yKG933y92svb78L50p6ebgghz/E4gd92+10PPfykTK4AANA0veGrz9etXYHjuH30SErJfOKpfwQFh9qOaLV9X679dMv3G2xlAAA8z2WNGv/Sa/8VCkU28TSa7jWff3xg708cx9kaheF4alrWs8+9onJ1AwCcPX3q9X//09vH/9//955S6XLVt0Wn077+ynNqTfdrr7/vH9A/h7lwvvTJx+fPvXfho4v+aruX0aDf8sM3m75dZzTocZwAECCEgoPDX3r1LdtVCCGjUb/682Wbv/2KogS2MZnn+QkTpz3y2DNu7p4AAI7jTp048t7bS3t61LZRiGVZpdLlldffSUhItb0VZrNpx4+bv17/uUGnu9hw3sXF9c23PwkJi7CJ19vT8+H7rx85vJ+wdSuEeJ7PnTj9scXPqlzdVApAEgAAYLFYNm3a/O3GjX995umJE3PxAaNNS0vLa68tLSgs5DjearVCCAUCynY7iUSy8MEHFi58kKKogQ+KZdmvvvr6y6++evGF5ydOHNz1GIY5ePDQK6++xjDskr8+M2fOLJFIdN2XfEgQD7rLr3qG5/m802WffLUDIcRxHMtxBIHjGG57ei5O8n8uutvfx31YN0HISjM8z1/1rIAi7U9smFitzKpvd7Z1af71xH1SyWXNRwh1a7QfrN1SUdNEkv2fLZbjWJZ76oGZ47LiCRxnWPbk2QtrvtttMlkwDAIAeZ6nGTYlPvSZB2ZJJcKyyob1W/c3tXU/9fSTcXFxQ4kBIcQwDMMwgiBwvP/JXHvMIUbSTN7aVt3Q3WEV+UovtY+zdpUdP3OhV5x0b7YfiZuGvJo1qjs7eQAAxAiSEonFQorE+mXrq6rqFQhifNz5Xk03w/IIAIARQolMLiKHaABrLN5ztBNXxqYkXaGcOHDg4LcHIVRaWrps+SdhYWHP/e2vSUlJCKH8/MKPli375tuNqWmpKcnJw6xqTE7umJxcAEBTY/1fn3poqGLtbS1ms/GOWXPvuW8hRQm2bN6w6dt1Z8/kx8QmYhQFAGhpbtq08ave3p6HH3tm2vSZzi6uZrOpvLRIIPwFX6mr0drW8u03X1AU9fJrb2eOyhGJxBpN9/vvLD154oitAEKoob7mxy0b5XLFs397KTElAwBw7kzBmlUf7fjxu8DA4OCQcAhhX1/Pjh83BwWHv/Tqm4FBoQCg7q7OigtlcoXTwNtZrdbq6mqOY6MiIyXiYa/pXA2EEK3Vdh8/LvL2VsTHw8s/fsaGhorly3mzOfbll/3uukvo6srq9R1HjpBOF+WBUBoUFP/vf7ukp4s8PCCG6aqqip5/XlNQoCks9J42zT5NbPrhB0lgYPLy5T7Tp9N9fVUff9z8449dJ06IAwL8Zs3ymzWLo+mWH3+88O67QQ8+GLxwIT5Im0WI7ump27Ch8+hRn9tuC1u8WBEZiThOX1urr6uDA+Yl1s7OyuXLvaZOjf7nP8W+vu1795a/8Ybm5EnP8eMJT08AAEZRfrNmuY8ZIwsLw4VCq0ZTvWJFzdq1TVu3OsXGwpFoFzYwDIuNixWLxSXFpdmjsiWSEfwiIpEoLT31wMGDa9d+QVFUdHTU8mUfpqakDCwjlUonTZy4f9/+N978L0VRWVmZTz31REJ8/PCVEwAAx3FFRcVbt21LSU1Z/PiiiIhwi8W6c+eud959b9Wq1a++8pJ8JFpue1vzrp+2TJ1+511z71c4KQ/u371uzSe7f/4xLiFZLlcMpwazyXjqxFGe519d+l5W9liSJA0GfeWFcgCRvVkcx+37eUdvb8/Lr709OieXIEiDXldaes5Z6QJh/8/kpHR++dW3Xn71rb7enlWffVhWVnTV2+l02prqvQmJaW++/XFwcNiFC2UfvPv6+fKS1pamiKhYnucLC45v/GbtqOxxjz2+xMcvQK/T7vl5++bvvtq3d8e8BY/IZHIAUEtTw+nCk9NmzH7woUWubh4cxzY11J0/X2r/IRBCVRXny0uLps+Ydd/9D6tU7hzHNjXWN9TX2qb+AAD/gOD4+JRDh3a/+9a/75v/kLePn1Qqt6+eDB+WZY4fP/zzzq2+voEL7n8kNSObIIjuro7qqgvCi+Mby7I7tn+/fdvmxOT0hx99JjomDgDY2tLU2dluX4Lp6mpf/+UqZ5Xqny++npiczvN8wam8lZ++v2bV8tff+FCpdAEAdHS05Z88Ghoa+ejjS0JCwiGEGnXX2TMFogGDT2npmXNnCmbfNX/hXxZLJFKattbVVvf1akiKtJdBCBmNxuKSEhcXl+DgoIFTbQihr6/vmjWfAwDOnz+/9PX/ODs7v/bqy25ubtd4CBiGxcXHisWS4uKS7OzBXQ9CSFECsVhM07RILLK/MzcdDMPGpMWNSYujGXbvsTM7D+XPmTp6dGosRY5ojg0AAEaz5b+fbiq5UHflKaWT7F9P3BsW6DP82hBCFittstAkgYMrXjCzld7406H65va5M3Im56QoZFKj2fLz4YLt+07ay0AAXZ0V8+8YHxsRqHJWYABr6exe9e2uc2W1F2qa0hMj4iKD3ol8FABgIl3Za0rCcRzHcQzDAABwHCdJ0r4Md1VG8OwYQ9fpkhqjlQiZlOJ38SBn0ZSdOVvdLUyZkeGrkGBwaP2kL/+L9/IBAB
|
|||
|
|
<p blockindex=67>紧接着这行可以看到对<code>i</code>调用了函数<code>b</code>，那想都不用想那个<code>b</code>函数肯定是解密函数，然后解密后取出了里面res值，然后发现下边那行也调用了<code>b(i)</code>，所以这两处都需要改</p>
|
|||
|
|
<p blockindex=68><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=69>然后我们想想我们这里怎么改，这是我们正常浏览器返回的json，它是解密后的，所以直接动两处代码就好了</p>
|
|||
|
|
<p blockindex=70><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=71><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=72>然后这时候再触发，擦，抛异常了，然后研究了一通，发现问题所在，就是这块的JSON.parse，JSON.parse() 是 JavaScript 中的一个内置函数，用于将 JSON 字符串解析为 JavaScript 对象；而这里出错的原因就是<code>i</code>已经是JavaScript 对象了，所以就不用多此一举了</p>
|
|||
|
|
<p blockindex=73><img src="data:image/png;base64,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
|
|||
|
|
<p blockindex=74>如下</p>
|
|||
|
|
<p blockindex=75><img src=data:image/png;base64,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
|
|||
|
|
<p blockindex=76>成功，一切正常，继续睡觉</p>
|
|||
|
|
<p blockindex=77><img src="data:image/png;base64,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
|
|||
|
|
</div>
|
|||
|
|
<div class="post-opt mt-30">
|
|||
|
|
<ul class="list-inline text-muted">
|
|||
|
|
<li>
|
|||
|
|
<i class="fa fa-clock-o"></i>
|
|||
|
|
发表于 2024-05-27 09:56:58
|
|||
|
|
</li>
|
|||
|
|
<li>阅读 ( 256 )</li>
|
|||
|
|
<li>分类：<a href=https://forum.butian.net/community/Pen_Testing target=_blank rel="noopenner noreferrer" data-ss1716816264=1>渗透测试</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<div class="text-center mt-30 mb-20">
|
|||
|
|
<button id=support-button class="btn btn-success btn-lg mr-5" data-loading-text=加载中... data-source_type=community data-source_id=3019 data-support_num=3> 3 推荐</button>
|
|||
|
|
|
|||
|
|
<button id=collect-button class="btn btn-default btn-lg" data-loading-text=加载中... data-source_type=community data-source_id=3019> 收藏</button>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="widget-answers mt-15">
|
|||
|
|
<h2 class="h4 post-title">1 条评论</h2>
|
|||
|
|
<div class=comment>
|
|||
|
|
<div class=media>
|
|||
|
|
<div class=media-left>
|
|||
|
|
<a href=https://forum.butian.net/people/13586 class="avatar-link user-card" target=_blank rel="noopenner noreferrer" data-ss1716816264=1>
|
|||
|
|
<img class="avatar-40 hidden-xs" src="data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAlgCWAAD/7QAsUGhvdG9zaG9wIDMuMAA4QklNA+0AAAAAABAAlgAAAAEAAQCWAAAAAQAB/+E+rWh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8APD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4KPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNi4wLWMwMDQgNzkuMTY0NTcwLCAyMDIwLzExLzE4LTE1OjUxOjQ2ICAgICAgICAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iCiAgICAgICAgICAgIHhtbG5zOnhtcEdJbWc9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9nL2ltZy8iCiAgICAgICAgICAgIHhtbG5zOmRjPSJodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMvMS4xLyI+CiAgICAgICAgIDx4bXA6Q3JlYXRvclRvb2w+QWRvYmUgSWxsdXN0cmF0b3IgMjUuMiAoTWFjaW50b3NoKTwveG1wOkNyZWF0b3JUb29sPgogICAgICAgICA8eG1wOkNyZWF0ZURhdGU+MjAyMS0wOC0yM1QxNjo1NjowNSswODowMDwveG1wOkNyZWF0ZURhdGU+CiAgICAgICAgIDx4bXA6VGh1bWJuYWlscz4KICAgICAgICAgICAgPHJkZjpBbHQ+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8eG1wR0ltZzp3aWR0aD4yNTY8L3htcEdJbWc6d2lkdGg+CiAgICAgICAgICAgICAgICAgIDx4bXBHSW1nOmhlaWdodD4yNTY8L3htcEdJbWc6aGVpZ2h0PgogICAgICAgICAgICAgICAgICA8eG1wR0ltZzpmb3JtYXQ+SlBFRzwveG1wR0ltZzpmb3JtYXQ+CiAgICAgICAgICAgICAgICAgIDx4bXBHSW1nOmltYWdlPi85ai80QUFRU2taSlJnQUJBZ0VBU0FCSUFBRC83UUFzVUdodmRHOXphRzl3SURNdU1BQTRRa2xOQSswQUFBQUFBQkFBU0FBQUFBRUEmI3hBO0FRQklBQUFBQVFBQi8rNEFEa0ZrYjJKbEFHVEFBQUFBQWYvYkFJUUFCZ1FFQkFVRUJnVUZCZ2tHQlFZSkN3Z0dCZ2dMREFvS0N3b0smI3hBO0RCQU1EQXdNREF3UURBNFBFQThPREJNVEZCUVRFeHdiR3hzY0h4OGZIeDhmSHg4Zkh3RUhCd2NOREEwWUVCQVlHaFVSRlJvZkh4OGYmI3hBO0h4OGZIeDhmSHg4Zkh4OGZIeDhmSHg4Zkh4OGZIeDhmSHg4Zkh4OGZIeDhmSHg4Zkh4OGZIeDhmSHg4Zi84QUFFUWdCQUFFQUF3RVImI3hBO0FBSVJBUU1SQWYvRUFhSUFBQUFIQVFFQkFRRUFBQUFBQUFBQUFBUUZBd0lHQVFBSENBa0tDd0VBQWdJREFRRUJBUUVBQUFBQUFBQUEmI3hBO0FRQUNBd1FGQmdjSUNRb0xFQUFDQVFNREFnUUNCZ2NEQkFJR0FuTUJBZ01SQkFBRklSSXhRVkVHRTJFaWNZRVVNcEdoQnhXeFFpUEImI3hBO1V0SGhNeFppOENSeWd2RWxRelJUa3FLeVkzUENOVVFuazZPek5oZFVaSFREMHVJSUpvTUpDaGdaaEpSRlJxUzBWdE5WS0JyeTQvUEUmI3hBOzFPVDBaWFdGbGFXMXhkWGw5V1oyaHBhbXRzYlc1dlkzUjFkbmQ0ZVhwN2ZIMStmM09FaFlhSGlJbUtpNHlOam8rQ2s1U1ZscGVZbVomI3hBO3FibkoyZW41S2pwS1dtcDZpcHFxdXNyYTZ2b1JBQUlDQVFJREJRVUVCUVlFQ0FNRGJRRUFBaEVEQkNFU01VRUZVUk5oSWdaeGdaRXkmI3hBO29iSHdGTUhSNFNOQ0ZWSmljdkV6SkRSRGdoYVNVeVdpWTdMQ0IzUFNOZUpFZ3hkVWt3Z0pDaGdaSmpaRkdpZGtkRlUzOHFPend5Z3AmI3hBOzArUHpoSlNrdE1UVTVQUmxkWVdWcGJYRjFlWDFSbFptZG9hV3ByYkcxdWIyUjFkbmQ0ZVhwN2ZIMStmM09FaFlhSGlJbUtpNHlOam8mI3hBOytEbEpXV2w1aVptcHVjblo2ZmtxT2twYWFucUttcXE2eXRycSt2L2FBQXdEQVFBQ0VRTVJBRDhBOVFZcTdGWFlxN0ZYWXE3RlhZcTcmI3hBO0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0YmI3hBO1hZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlgmI3hBO1lxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFkmI3hBO3E3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXEmI3hBOzdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTcmI3hBO0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcXBYZDNhV2R2SmMzYzBkdmJSRGxMUEt3UkZIaXpNUUJpcVc2RDUmI3hBO3U4cStZQklkQzFpeTFUMHFpVVdkeEZPVm9hZkVJMllqNmNWVGZGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXEmI3hBOzdGWFlxN0ZYWXE3RlhZcTdGWFlxN0ZYWXE3RlhZcWtYbUx6MTVNOHRxVHIydDJXbXNCeUVWeE9pU2tmNU1kZWJmUU1WZVJlZWYrY3UmI3hBO1BKT202YzYrVTRaZGMxV1U4TE5wSW5ndGExb1hibndtWUE5QXFEa2R1UXhWaXVqZmtUK2IzNXF6UjY5K1ordVhHbGFkSTNxVzJrY2YmI3hBOzN5b2VuQzNxc1Z0c2FWWUYvd0NZWXFqL0FEci9BTTRuM25sMktQekYrVm1yM3NPdDZjdnFDem5sWDFaU2czOUNhTlk2TzFQc01PTGUmI3hBO0k2WXFpL3kvL3dDY3R0Ri9SYVdIbjYxdWJIWExKakJmM2tFSEtJbFR4OVNXRlNKSW01Yk1xb1J5OEtoY1ZlditXdnpWL0xuek54WFImI3hBO1BNTmxkU3ZUamJtUVJUbXYvRk12Q1gvaGNWWlhpcnNWZGlyc1ZkaXJzVmRpcnNWZGlyc1ZkaXJzVmRpcnNWZGlyc1ZkaXJzVmRpcnMmI3hBO1ZkaXJzVmFabFZTekVLcWlyTWRnQU1WZWVlYlArY2dQeW04czhrdk5laHU3cGFqNnBwLytseVZIVUV4VmpRLzY3REZYalBtci9uTmEmI3hBOzRibEY1VTh2TEdQMkx2VkpDe
|
|||
|
|
</div>
|
|||
|
|
<div class=media-body>
|
|||
|
|
<div class=media-heading>
|
|||
|
|
<strong>
|
|||
|
|
<a href=https://forum.butian.net/people/13586 class="mr-5 user-card" data-ss1716816264=1>china_sean</a>
|
|||
|
|
</strong>
|
|||
|
|
<span class="answer-time text-muted hidden-xs">9小时前</span>
|
|||
|
|
</div>
|
|||
|
|
<div class=content>
|
|||
|
|
<div class="text-fmt mt-10 mb-10">太强了</div>
|
|||
|
|
</div>
|
|||
|
|
<div class=media-footer>
|
|||
|
|
<ul class="list-inline mb-20">
|
|||
|
|
<li><a class="comments first-comment-reply" data-toggle=collapse href=#comment-1934 data-source=1934 data-source_id=1934 data-to_user_id=13586 data-source_type=comment data-message="回复 china_sean" data-ss1716816264=1><i class="fa fa-comment-o"></i> 0 条评论</a></li>
|
|||
|
|
<li class=pull-right>
|
|||
|
|
<button class="btn btn-default btn-sm btn-support" data-source_id=1934 data-source_type=comment data-support_num=0><i class="fa fa-thumbs-o-up"></i> 0</button>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="collapse widget-comments sf-hidden" id=comment-1934>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="widget-comment-form row mt-20 mb-20">
|
|||
|
|
<div class=col-md-12>
|
|||
|
|
请先 <a class=a_unLogin href=https://forum.butian.net/login data-ss1716816264=1>登录</a> 后评论
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class=text-center>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<footer id=footer>
|
|||
|
|
<div class=container>
|
|||
|
|
<div class=text-center>
|
|||
|
|
<a href=https://forum.butian.net/ data-ss1716816264=1>奇安信攻防社区</a><span class=span-line>|</span>
|
|||
|
|
<a href=mailto:butian_report@qianxin.com target=_blank rel=noreferrer data-ss1716816264=1>联系我们</a><span class=span-line>|</span>
|
|||
|
|
<a href=https://forum.butian.net/sitemap data-ss1716816264=1>sitemap</a>
|
|||
|
|
</div>
|
|||
|
|
<div class="copyright mt-10">
|
|||
|
|
Copyright © 2013-2023 BUTIAN.NET 版权所有 <a href=https://beian.miit.gov.cn/#/Integrated/index rel=noreferrer data-ss1716816264=1>京ICP备18014330号-2</a>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</footer>
|
|||
|
|
<div class="modal fade sf-hidden" id=sendTo_message_model tabindex=-1 role=dialog aria-labelledby=exampleModalLabel>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<div class="modal fade sf-hidden" id=send_report_model role=dialog aria-labelledby=exampleModalLabel>
|
|||
|
|
|
|||
|
|
</div> <div class="modal fade in sf-hidden" id=payment-qrcode-modal-article-3019 tabindex=-1 role aria-labelledby=exampleModalLabel aria-hidden=false>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div style="display:none;position:fixed;top:40%;left:50%;z-index:9999;transform:translate(-50%,-50%);padding:3px 15px;border-radius:8px;background:rgba(120,120,120,0.7);box-shadow:1px 1px 3px 1px rgba(160,160,160,0.6);text-align:center;font-size:12px;color:#fff"></div><div id=windowLoading class="modal fade sf-hidden" tabindex=-1 role=dialog>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<span id=cnzz_stat_icon_1279782571></span>
|
|||
|
|
<div style="padding:0px;margin:3px 3px 20px;background:padding-box padding-box #f8f8ff;border:3px solid rgba(242,242,242,0.6);border-radius:2px;box-shadow:#666666 0px 0px 2px;visibility:visible;display:none;z-index:2147483647;inset:336px auto auto 0px;width:0px;height:0px;position:fixed !important;box-sizing:content-box !important;max-width:none !important;max-height:none !important"></div><img alt draggable=false src=data:, style="padding:5px;background-clip:padding-box;width:38px;height:38px;z-index:2147483647;display:none;inset:auto;margin:0px;transition:background-color .5s ease 0s,opacity .2s ease 0s,top .15s ease-out 0s,left .15s ease-out 0s;border-radius:50% !important;box-shadow:#a6a6a6 0px 0px 5px 1px !important;position:fixed !important;box-sizing:border-box !important;opacity:0">
|