学习通登录逆向
學習通是大家經常使用的工具,里面也有許多功能,不過都需要登錄才能使用,所以逆向登錄就很有必要了。
首先我們來分析一下登錄數據。
?
?我們發現uname和password都是加密的,我們重新發送一個新的登錄請求發現,雖然是加密但是加密結果是不會變的,那么登錄就變得輕而易舉了。當我們帶上參數,用程序發送請求時,發現登錄失敗。到底是什么原因呢,小編使用fd抓包工具抓取瀏覽器的請求和程序的請求對比。
發現瀏覽器上看到的請求頭和發送的請求頭順序不同,那么小編按照該請求頭請求,最后成功請求。?
import requests session=requests.session()headers={"Host": "passport2.chaoxing.com","Connection": "keep-alive","Content-Length": "248","sec-ch-ua": "\"Chromium\";v=\"106\", \"Microsoft Edge\";v=\"106\", \"Not;A=Brand\";v=\"99\"","Accept": "application/json, text/javascript, */*; q=0.01","Content-Type": "application/x-www-form-urlencoded; charset=UTF-8","X-Requested-With": "XMLHttpRequest","sec-ch-ua-mobile": "?0","User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Edg/106.0.1370.52","sec-ch-ua-platform": "\"Windows\"","Origin": "https://passport2.chaoxing.com","Sec-Fetch-Site": "same-origin","Sec-Fetch-Mode": "cors","Sec-Fetch-Dest": "empty","Referer": "https://passport2.chaoxing.com/login?fid=&newversion=true&refer=https://i.chaoxing.com","Accept-Encoding": "gzip, deflate, br","Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","Cookie": "fid=23194; route=52ffa9af7a380e114204ed76732d509c; JSESSIONID=F7C40528A60B7D04420D26319385CD5A; source=\"\"" } url = "https://passport2.chaoxing.com/fanyalogin" data = {"fid": "9332","uname": "you uname","password": "you password","refer": "https^%^253A^%^252F^%^252Fi.chaoxing.com","t": "true","forbidotherlogin": "0","validate": "","doubleFactorLogin": "0","independentId": "0" } session.headers=headers response = session.post(url, headers=headers, data=data)print(response.text) print(response)?
總結
- 上一篇: 求纸张的计算方法
- 下一篇: 微客侠:解决微信内直接打开淘宝链接