美团商家版验证码分析

声明: 本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！ 逆向分析 response = session.post('/page_data', params=params, headers=headers, data=data,proxies=proxies) data = response.json()['data'] timestamp = data['timestamp'] if verifyType == 'SLIDER': cp1 = execjs pile(open('slider.js', 'r', encoding='utf-8').read()) result = cp1.call('getData', data) _token = result['_token'] behavior = result['behavior'] numberList = result['numberList'] result = cp1.call('getSign', verifyRequestCode, behavior, _token, timestamp) data = result['body'] sign = result['sign'] headers = { "Authencation": sign, "TimesTamp": str(timestamp), "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0", "sec-ch-ua": "\"Microsoft Edge\";v=\"129\", \"Not=A?Brand\";v=\"8\", \"Chromium\";v=\"129\"", "sec-ch-ua-mobile": "?0", "sec-ch-ua-platform": "\"Windows\"" } url = "/merchantlogin/verify" params = { "yodaReady": "h5", "csecplatform": "4", "csecversion": "2.4.0", } print(data) response = session.post(url, headers=headers, params=params, data=data) print(response.json()) 结果

总结 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。