tiktok web X-Bogus X-Gnarly 分析
声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向过程
部分python代码
import requests
import urllib.parseheaders = {"accept": "*/*","accept-language": "zh-CN,zh;q=0.9","cache-control": "no-cache","pragma": "no-cache","priority": "u=1, i",
}
cookies = {
}
url = "recommend/item_list/"
params = {"WebIdLastTime": "","aid": "1988","app_language": "zh-Hans","app_name": "tiktok_web","browser_language": "zh-CN","browser_name": "Mozilla","browser_online": "true","browser_platform": "Win32","browser_version": "","channel": "tiktok_web","clientABVersions": "70508271,73343441,73406214,73590516,73635175,73639822,73641234,73650548,73658737,73662753,73686099,73692431,73699598,73713736,73720541,73723490,73736861,73739073,73759867,73773905,73798192,73798270,73810364,70405643,71057832,71200802,73004916,73171280,73208420,73385640,73574728,73628214","cookie_enabled": "true","count": "9","coverFormat": "2","cpu_core_number": "8","dark_mode": "false","data_collection_enabled": "true","day_of_week": "4","device_platform": "web_pc","device_type": "web_h264","enable_cache": "false","focus_state": "true","from_page": "fyp","history_len": "2","isNonPersonalized": "false","is_fullscreen": "false","is_page_visible": "true","itemID": "","language": "zh-Hans","priority_region": "","pullType": "1","region": "TW","screen_height": "864","screen_width": "1536","showAboutThisAd": "true","showAds": "false","time_of_day": "14","tz_name": "Asia/Shanghai","vv_count": "7","vv_count_fyp": "6","webcast_language": "zh-Hans",
}
cp = execjs.compile(open('2025-5.js','r',encoding='utf-8').read())
Gnarly = cp.call('X-Gnarly',params)
''''''''''
params['X-Gnarly']=Gnarly
.........
print(url)
response = requests.get(url, headers=headers, cookies=cookies,proxies=proxies,params=params)print(response.text)
print(response)
结果
正确携带加密参数
不携带加密
