去哪儿旅行 Bella Pre 分析

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

逆向过程

with open('Pre.js', 'r', encoding='utf-8') as fp:
text = fp.read()
cp2 = execjs.compile(text)
pre = cp2.call('getPre')
print(pre)
headers["pre"] = pre
print(response)
shirley = ""
url = "/api/domestic/wbdflightlist"data = {"departureCity": departureCity,"arrivalCity": arrivalCity,"departureDate": departureDate,"ex_track": "","__m__": "","st": str(int(time.time()*1000)),"sort": ""
}
cp = execjs.compile(open('Bella.js','r',encoding='utf-8').read())
Bella = cp.call('getBella', data,shirley)
data["Bella"]= Bella
data["_v"] = "4"
response = session.post(url, headers=headers, cookies=cookies, data=data)
print(response.text)
print(response)

结果

总结

  1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。