他非法用途

完整JS加密代码五、python实现代码总结提示以下是本篇文章正文内容下面案例可供参考

一、资源推荐

常见混淆EVAL、AA、JJ、JSFUCKhttps://blog.csdn.net/EXIxiaozhou/article/details/128767669

网洛者

反反爬虫训练平台网址https://wangluozhe.com/

JS逆向加密解密工具Crypto

下载使用:https://blog.csdn.net/EXIxiaozhou/article/details/128034062

二、逆向目标

采用的是JSFuck混淆加密方式是CryptoJS.AES由于混淆代码过长本文仅演示一种解决方式并介绍多种解决方式

三、抓包分析

1、POSThttps://wangluozhe.com/challenge/api/4

2、逆向加密参数_signature可以发现加密参数的长度是32

3.2

1、通过浏览器开发者模式/网络/XHR进行抓包通过启动器进入代码定义处

3、翻页刷新网站则会断下

1、在线解密工具不实用https://lelinhtinh.github.io/de4js/2、针对

Function

的情况复制最外层倒数第二个括号内的代码在浏览器控制台打印即可看到源码3、针对

eval

的情况复制最后一个括号内的代码在浏览器控制台打印即可看到源码4、使用

Hook

2、通过重造eval的方法来拦截在window.get_sign();断住并在控制台输入hook代码即可

eval_

defined需要复制CryptoJS(可通过工具生成)模块的代码

2、补充了window和CryptoJS再次运行代码可以发现在if判断处做了两次环境检测

4.2

{subtype.$super.init.apply(this,

arguments);};}subtype.init.prototype

this;return

this.extend();instance.init.apply(instance,

arguments);return

(properties.hasOwnProperty(propertyName))

{this[propertyName]

(properties.hasOwnProperty(toString))

{this.toString

this.init.prototype.extend(this);}};}());var

WordArray

wordArray.sigBytes;this.clamp();if

(thisSigBytes

Base.clone.call(this);clone.words

clone;},random:

4).toString(16));hexChars.push((bite

function(hexStr)

0xff;latin1Chars.push(String.fromCharCode(bite));}return

function(latin1Str)

decodeURIComponent(escape(Latin1.stringify(wordArray)));}

catch

Latin1.parse(unescape(encodeURIComponent(utf8Str)));}};var

Base.extend({reset:

WordArray.init();this._nDataBytes

0;},_append:

Utf8.parse(data);}this._data.concat(data);this._nDataBytes

function(doFlush)

{this._doProcessBlock(dataWords,

offset);}var

Base.clone.call(this);clone._data

0});var

BufferedBlockAlgorithm.extend({cfg:

Base.extend(),init:

this.cfg.extend(cfg);this.reset();},reset:

function()

{BufferedBlockAlgorithm.reset.call(this);this._doReset();},update:

{this._append(messageUpdate);this._process();return

this;},finalize:

{this._append(messageUpdate);}var

hash

hasher.init(cfg).finalize(message);};},_createHmacHelper:

function(hasher)

key).finalize(message);};}});var

C_algo

this._map;wordArray.clamp();var

base64Chars

{base64Chars.push(map.charAt((triplet

j)))

{base64Chars.push(paddingChar);}}return

function(base64Str)

base64Str.indexOf(paddingChar);if

(paddingIndex

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789/};function

parseLoop(base64Str,

reverseMap[base64Str.charCodeAt(i

1)]

reverseMap[base64Str.charCodeAt(i)]

2);words[nBytes

0x10325476]);},_doProcessBlock:

function(M,

nBitsTotal;dataWords[(((nBitsLeft

64)

0xff00ff00));dataWords[(((nBitsLeft

64)

Hasher.clone.call(this);clone._hash

clone;}});function

Hasher._createHelper(MD5);C.HmacMD5

Hasher._createHmacHelper(MD5);}(Math));(function()

{var

0xc3d2e1f0]);},_doProcessBlock:

function(M,

0x100000000);dataWords[(((nBitsLeft

64)

Hasher.clone.call(this);clone._hash

clone;}});C.SHA1

Hasher._createHelper(SHA1);C.HmacSHA1

Hasher._createHmacHelper(SHA1);}());(function(Math)

{var

WordArray.init(H.slice(0));},_doProcessBlock:

function(M,

0x100000000);dataWords[(((nBitsLeft

64)

Hasher.clone.call(this);clone._hash

clone;}});C.SHA256

Hasher._createHelper(SHA256);C.HmacSHA256

Hasher._createHmacHelper(SHA256);}(Math));(function()

{var

0xffff;utf16Chars.push(String.fromCharCode(codePoint));}return

function(utf16Str)

0xffff);utf16Chars.push(String.fromCharCode(codePoint));}return

function(utf16Str)

swapEndian(utf16Str.charCodeAt(i)

(16

arguments);}};subInit.prototype

{var

0xC3D2E1F0]);},_doProcessBlock:

function(M,

Hasher.clone.call(this);clone._hash

clone;}});function

Hasher._createHelper(RIPEMD160);C.HmacRIPEMD160

Hasher._createHmacHelper(RIPEMD160);}(Math));(function()

{var

hasher.finalize(key);}key.clamp();var

oKey

hasherBlockSizeBytes;this.reset();},reset:

function()

this._hasher;hasher.reset();hasher.update(this._iKey);},update:

{this._hasher.update(messageUpdate);return

this;},finalize:

hasher.finalize(messageUpdate);hasher.reset();var

hmac

hasher.finalize(this._oKey.clone().concat(innerHash));return

{var

this.cfg.extend(cfg);},compute:

function(password,

WordArray.create([0x00000001]);var

derivedKeyWords

hmac.update(salt).finalize(blockIndex);hmac.reset();var

blockWords

hmac.finalize(intermediate);hmac.reset();var

intermediateWords

intermediateWords[j];}}derivedKey.concat(block);blockIndexWords[0];}derivedKey.sigBytes

keySize

PBKDF2.create(cfg).compute(password,

{var

this.cfg.extend(cfg);},compute:

function(password,

hasher.update(password).finalize(salt);hasher.reset();for

(var

hasher.finalize(block);hasher.reset();}derivedKey.concat(block);}derivedKey.sigBytes

keySize

EvpKDF.create(cfg).compute(password,

{var

SHA256._doFinalize.call(this);hash.sigBytes

4;return

SHA256._createHelper(SHA224);C.HmacSHA224

SHA256._createHmacHelper(SHA224);}());(function(undefined)

{var

x64Words[i];x32Words.push(x64Word.high);x32Words.push(x64Word.low);}return

function()

X64Word.create(roundConstantMsw,

[];(function()

Hasher.cfg.extend({outputLength:

512}),_doReset:

T[PI_INDEXES[laneIndex]];TPiLane.high

tMsw;TPiLane.low

ROUND_CONSTANTS[round];lane.high

roundConstant.low;;}},_doFinalize:

function()

32);dataWords[((Math.ceil((nBitsLeft

blockSizeBits)

0xff00ff00));hashWords.push(laneLsw);hashWords.push(laneMsw);}return

new

Hasher._createHelper(SHA3);C.HmacSHA3

Hasher._createHmacHelper(SHA3);}(Math));(function()

{var

0x137e2179)]);},_doProcessBlock:

function(M,

0x100000000);dataWords[(((nBitsLeft

128)

Hasher.clone.call(this);clone._hash

clone;},blockSize:

Hasher._createHelper(SHA512);C.HmacSHA512

Hasher._createHmacHelper(SHA512);}());(function()

{var

SHA512._doFinalize.call(this);hash.sigBytes

16;return

SHA512._createHelper(SHA384);C.HmacSHA384

SHA512._createHmacHelper(SHA384);}());CryptoJS.lib.Cipher

(function(undefined)

C_lib.BufferedBlockAlgorithm;var

C_enc

BufferedBlockAlgorithm.extend({cfg:

function(key,

this.create(this._ENC_XFORM_MODE,

key,

this.create(this._DEC_XFORM_MODE,

key,

this.cfg.extend(cfg);this._xformMode

xformMode;this._key

{BufferedBlockAlgorithm.reset.call(this);this._doReset();},process:

function(dataUpdate)

{this._append(dataUpdate);return

function(dataUpdate)

selectCipherStrategy(key).encrypt(cipher,

message,

selectCipherStrategy(key).decrypt(cipher,

ciphertext,

finalProcessedBlocks;},blockSize:

1});var

BlockCipherMode.extend();CBC.Encryptor

function(words,

cipher.blockSize;xorBlock.call(this,

words,

blockSize);cipher.encryptBlock(words,

words.slice(offset,

blockSize);cipher.decryptBlock(words,

words,

{paddingWords.push(paddingWord);}var

padding

nPaddingBytes);data.concat(padding);},unpad:

function(data)

mode.createDecryptor;this._minBufferSize

1;}if

modeCreator;}},_doProcessBlock:

function(words,

{this._mode.processBlock(words,

function()

flush);padding.unpad(finalProcessedBlocks);}return

finalProcessedBlocks;},blockSize:

128

{this.mixIn(cipherParams);},toString:

function(formatter)

this.formatter).stringify(this);}});var

C_format

0x65645f5f]).concat(salt).concat(ciphertext);}

else

wordArray.toString(Base64);},parse:

function(openSSLStr)

WordArray.create(ciphertextWords.slice(2,

16;}return

CipherParams.create({ciphertext:

ciphertext,salt:

encryptor.finalize(message);var

cipherCfg

CipherParams.create({ciphertext:

ciphertext,key:

this.cfg.extend(cfg);ciphertext

cfg.format);var

cfg).finalize(ciphertext.ciphertext);return

plaintext;},_parse:

WordArray.create(key.words.slice(keySize),

ivSize

SerializableCipher.extend({cfg:

SerializableCipher.cfg.extend({kdf:

function(cipher,

SerializableCipher.encrypt.call(this,

cipher,

cfg);ciphertext.mixIn(derivedParams);return

function(cipher,

this.cfg.extend(cfg);ciphertext

cfg.format);var

SerializableCipher.decrypt.call(this,

cipher,

plaintext;}});}());CryptoJS.mode.CFB

(function()

CryptoJS.lib.BlockCipherMode.extend();CFB.Encryptor

function(words,

cipher.blockSize;generateKeystreamAndEncrypt.call(this,

words,

blockSize);generateKeystreamAndEncrypt.call(this,

words,

generateKeystreamAndEncrypt(words,

offset,

this._prevBlock;}cipher.encryptBlock(keystream,

0);for

CryptoJS.lib.BlockCipherMode.extend();ECB.Encryptor

function(words,

{this._cipher.encryptBlock(words,

function(words,

{this._cipher.decryptBlock(words,

offset);}});return

1;data.clamp();data.words[lastBytePos

nPaddingBytes

nPaddingBytes;}};CryptoJS.pad.Iso10126

{pad:

blockSizeBytes;data.concat(CryptoJS.lib.WordArray.random(nPaddingBytes

1)).concat(CryptoJS.lib.WordArray.create([nPaddingBytes

24],

nPaddingBytes;}};CryptoJS.pad.Iso97971

{pad:

{data.concat(CryptoJS.lib.WordArray.create([0x80000000],

1));CryptoJS.pad.ZeroPadding.pad(data,

blockSize);},unpad:

{CryptoJS.pad.ZeroPadding.unpad(data);data.sigBytes--;}};CryptoJS.mode.OFB

(function()

CryptoJS.lib.BlockCipherMode.extend();var

Encryptor

undefined;}cipher.encryptBlock(keystream,

0);for

keystream[i];}}});OFB.Decryptor

Encryptor;return

OFB;}());CryptoJS.pad.NoPadding

{pad:

cipherParams.ciphertext.toString(Hex);},parse:

function(input)

CipherParams.create({ciphertext:

ciphertext});}};}());(function()

{var

BlockCipher._createHelper(AES);}());(function()

{var

this._invSubKeys);},_doCryptBlock:

function(M,

0x0f0f0f0f);exchangeLR.call(this,

16,

0x0000ffff);exchangeRL.call(this,

0x33333333);exchangeRL.call(this,

0x00ff00ff);exchangeLR.call(this,

0x55555555);for

0x55555555);exchangeRL.call(this,

0x00ff00ff);exchangeRL.call(this,

0x33333333);exchangeLR.call(this,

16,

0x0000ffff);exchangeLR.call(this,

32,ivSize:

BlockCipher._createHelper(DES);var

TripleDES

DES.createEncryptor(WordArray.create(keyWords.slice(0,

2)));this._des2

DES.createEncryptor(WordArray.create(keyWords.slice(2,

4)));this._des3

DES.createEncryptor(WordArray.create(keyWords.slice(4,

6)));},encryptBlock:

offset);this._des2.decryptBlock(M,

offset);this._des3.encryptBlock(M,

function(M,

offset);this._des2.encryptBlock(M,

offset);this._des1.decryptBlock(M,

offset);},keySize:

BlockCipher._createHelper(TripleDES);}());(function()

{var

generateKeystreamWord.call(this);},keySize:

256

StreamCipher._createHelper(RC4);var

RC4Drop

{generateKeystreamWord.call(this);}}});C.RC4Drop

StreamCipher._createHelper(RC4Drop);}());CryptoJS.mode.CTRGladman

(function()

CryptoJS.lib.BlockCipherMode.extend();function

incWord(word)

CTRGladman.extend({processBlock:

function(words,

undefined;}incCounter(counter);var

keystream

counter.slice(0);cipher.encryptBlock(keystream,

0);for

keystream[i];}}});CTRGladman.Decryptor

Encryptor;return

{nextState.call(this);}}},_doProcessBlock:

function(M,

this._X;nextState.call(this);S[0]

X[0]

StreamCipher._createHelper(Rabbit);}());CryptoJS.mode.CTR

(function()

CryptoJS.lib.BlockCipherMode.extend();var

Encryptor

counter.slice(0);cipher.encryptBlock(keystream,

0);counter[blockSize

keystream[i];}}});CTR.Decryptor

Encryptor;return

{nextState.call(this);}}},_doProcessBlock:

function(M,

this._X;nextState.call(this);S[0]

X[0]

StreamCipher._createHelper(RabbitLegacy);}());CryptoJS.pad.ZeroPadding

{pad:

CryptoJS.enc.Utf8.parse(key_tmp);var

CryptoJS.enc.Utf8.parse(iv_tmp);return

(function

CryptoJS.enc.Utf8.parse(word);let

encrypted

encrypted.ciphertext.toString().toUpperCase();}return

window.sign

application/x-www-form-urlencoded;

Mozilla/5.0

https://wangluozhe.com/challenge/api/4self.count_number

0def

self.js_obj.call(getSign)}return

form_datadef

self.getParams(page)print(当前参数,

form_data)response

response.json()[data]:print(f当前值:{self.count_number}

{items[value]}

{self.count_numberitems[value]})self.count_number

items[value]def

1001):self.request_server(pagepage)time.sleep(1.5)print(f100页的所有数据并加和{self.count_number})if

__name__

https://blog.csdn.net/kdl_csdn/article/details/122084863