当前位置：首页 > news >正文

美团商家版验证码分析

news 2025/7/3 15:50:43

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

逆向分析

response = session.post('/page_data', params=params, headers=headers, data=data,proxies=proxies)
data = response.json()['data']
timestamp = data['timestamp']
if verifyType == 'SLIDER':
    cp1 = execjs.compile(open('slider.js', 'r', encoding='utf-8').read())
    result = cp1.call('getData', data)
    _token = result['_token']
    behavior = result['behavior']
    numberList = result['numberList']
    result = cp1.call('getSign', verifyRequestCode, behavior, _token, timestamp)
    data = result['body']
    sign = result['sign']
    headers = {
        "Authencation": sign,
        "TimesTamp": str(timestamp),
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0",
        "sec-ch-ua": "\"Microsoft Edge\";v=\"129\", \"Not=A?Brand\";v=\"8\", \"Chromium\";v=\"129\"",
        "sec-ch-ua-mobile": "?0",
        "sec-ch-ua-platform": "\"Windows\""
    }
    url = "/merchantlogin/verify"
    params = {
        "yodaReady": "h5",
        "csecplatform": "4",
        "csecversion": "2.4.0",
    }
    print(data)
    response = session.post(url, headers=headers, params=params, data=data)
    print(response.json())