小红书 web x-s x-t X-Mns 分析

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析

cp = execjs.compile(open('vm.js','r',encoding='utf-8').read())
cp2 = execjs.compile(open('xhs.js', 'r', encoding='utf8', errors='ignore').read())
data = {
    "cursor_score": "",
    "num": 18,
    "refresh_type": 1,
    "note_index": 14,
    "unread_begin_note_id": "",
    "unread_end_note_id": "",
    "unread_note_count": 0,
    "category": "homefeed.movie_and_tv_v3",
    "search_key": "",
    "need_num": 8,
    "image_formats": [
        "jpg",
        "webp",
        "avif"
    ],
    "need_filter_image": False
}
result =cp.call('get_comment','',data,a1)
X_Mns = cp.call('getMns','',data)
print('X_Mns==>',X_Mns)
headers['x-mns'] = X_Mns
headers['x-s'] = result['X-s']
print('x-s ==>',result['X-s'])
headers['x-t'] = str(result['X-t'])
print('x-t ==>',result['X-t'])
common = cp2.call('getCommon', headers['x-t'], headers['x-s'],a1)
trace_id = cp2.call('he')
x_xray_traceid = cp2.call('getTraceId')
headers.update({"x-s-common": common})
headers.update({"x-b3-traceid": trace_id})
headers.update({"x-xray-traceid": x_xray_traceid})
url = "/v1/homefeed"
data = json.dumps(data, separators=(',', ':'))
response = requests.post(url, headers=headers, cookies=cookies, data=data)

print(response.text)
print(response)

结果

总结

 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。