易盾v3 JS逆向

循迹 · 发表于 2022-9-26 08:14:13

网站:https://member.roewe.com.cn/#/login
求提交数据的d值
d=NU01.6mCOD45u%2BsEn4p.e27jXPrBMET28TxFt1ZOPUOscu4Q6dKv6C6LeE%2FjsoA9RdIMiQ0eNvRIMR9AG9KTlNgEDvpy5195QjJh6SoyRQbxA%2F5.80FHX0A%2B%2F1UovnaDnmd97vJqqPWsc%2BOfDFKmPJz1GuU6vIQ6%2Bb0lqKoK%2FUOlrtBXxe%2BAMxJA4JikdnceWmNBp1ZgZyWhkbFJq065qIFFecyYtG6JOmd.OtgldeMfE02nBIKeGNXVnqnW2YMuELbqkELZYPHjHOcP0QO9PxPcAGm7WpQ.rI2Fo5cWXLZP%2Brqlxn1pFOfatezy8UyWyXa9YqYAFMx6VrV%2BArTVfzFCkOCvR9vmHt%2B80vIdCghbUVdvHovYCOaNTFalpB9%2BVkiRJo2N6kZ%2FfsD8gL8w9E%2FaVc2%2FcpkxC5NE07fQGG1MYTGbNy8UDSlgGoO2NSYnBK7ZOJvk1IBO67cg4ouiExQ89ujZJ6xH.lhDpuwjKuRAMU9ANKOmHqwhSEyEi0a8x%2FgROESco%2BsF8vKJLBu%2F0JPao%2FVXaxsdqfynUOn4y20ktyh9PnHvFnu2jdsAtnSJyo8C.kBaLfs6Xp5kds7GTfJ9t%2FSRYwbWrgNGb120dma%2F9IFvZmes6.NJ%2BOt09H0UXhCHyLlOObOepT5ye%2BEOg4BiET%2BfKllCk.1h7c.48G4wpXJHOacYn0KTi.20STxsB%2BAyPfsCxhN4kVJuvfiNRWdLcQNMA.TODQ%2FWiUxlkKY9%2Fj7XSWYGBvFUAWCI8TIMbc%2Bi409Ru18%2FeiAOrQRv8qVQ2pfiNVWpDjdNHMrtM%2BHpE.%2FzJnxyRAH2AKMJdph6%2BYSfSxPICBNbsgdvQnIIL08EqCAmYQbeQ%2FvL91sJemSym1pj806Rg0eRrg%2B5zMSCJ6N5SH1xdFSRLOZiayX%2FUsGA8Jyj6bZrjyQbUDKRjySYcrhK&v=602a5ad7&cb=__wmjsonp_5a6de80
要第一次访问才会生成

跟值跟到这下面就找不到了

l.prototype.ha = function(b) {
                  void 0 === b && (b = W);
                  var e = $a();
                  hd(Ec, a[21])(function(d) {
                     var g = ca(!0);
                     f[0];
                     f[0];
                     f[0];
                     d = ka(kb, a[691], void 0)(e.concat(d, g));
                     C.h(xc, d, b)
                  })
            }

求demo

落雪无尘 · 发表于 2022-9-26 08:58:51

, _0x1e0593 = {
         'onVerify': function(_0x3978aa, _0x20a163) {
            var _0x3200fb = _0x59079c;
            if (_0x3978aa) {
                  var _0x3149d4 = _0x3978aa[_0x3200fb(0x51b)];
                  if (_0x3149d4 && _0x3149d4[_0x3200fb(0x33b)] > _0x25299a[_0x3200fb(0xb35)]) {
                     var _0x5a6e55 = new _0x387436(_0x42bdac,_0x3200fb(0x1d1) + _0x25299a[_0x3200fb(0xb35)] + _0x3200fb(0xb3a) + _0x3978aa[_0x3200fb(0x8ce)],Object[_0x3200fb(0xb55)]({
                        'token': _0x3149d4[_0x3200fb(0x7a4)]
                     }, _0x3978aa[_0x3200fb(0x51b)]));
                     return void _0x406ccc[_0x3200fb(0x41d)](_0x5a6e55);
                  }
                  return void (_0x3978aa[_0x3200fb(0x954)] === _0x34e519 && _0x406ccc['collectErr'](_0x3978aa));
            }
            var _0x1521ab = _0x20a163['validate'];
            _0x1acba2(_0x25299a[_0x3200fb(0x87f)], _0x1521ab),
            _0x406ccc[_0x3200fb(0x2ad)]();
         },
         'onError': function(_0x3cb197) {
            var _0x244b7a = _0x59079c;
            _0x3cb197 && 'get' === _0x3cb197[_0x244b7a(0x51b)][_0x244b7a(0x653)] && _0x3cb197[_0x244b7a(0x954)] === _0x34e519 && _0x406ccc[_0x244b7a(0x41d)](_0x3cb197);
         }
      };
      this[_0x59079c(0x984)] = _0x30413d['state'][_0x59079c(0x984)],
      this[_0x59079c(0x855)] = _0x25299a[_0x59079c(0x855)],
      this[_0x59079c(0x18d)] = _0x30413d[_0x59079c(0x272)][_0x59079c(0x18d)],
      this[_0x59079c(0x139)] = _0x25299a[_0x59079c(0x139)],
      this[_0x59079c(0xaed)] = _0x25299a['theme'],
      this['protocol'] = _0x25299a[_0x59079c(0x98e)],
      this[_0x59079c(0x7fe)] = _0x25299a[_0x59079c(0x7fe)];
      var _0x1365f0 = _0x30413d[_0x59079c(0x301)](function(_0x4b721b, _0x34c6fd) {
         var _0x10ed19 = _0x59079c
            , _0x47c324 = _0x4b721b[_0x10ed19(0x4df)]
            , _0x3f3fd0 = _0x4b721b['payload'];
         switch (_0x47c324) {
         case _0x5ce30e:
            _0x394444[_0x10ed19(0x18d)] = _0x34c6fd[_0x10ed19(0x18d)];
            break;
         case _0x217c5b:
         case _0x1eaf8d:
            _0x1acba2(_0x25299a[_0x10ed19(0x87f)], '');
            break;
         case _0xfe8074:
            var _0x4696a4 = _0x3f3fd0['name']
               , _0x39e444 = _0x3f3fd0[_0x10ed19(0x227)];
            window[_0x10ed19(0x463)](function() {
                  var _0x47a08a = _0x10ed19
                  , _0x18b885 = _0x1e0593[_0x4696a4];
                  !_0x39e444 && (_0x39e444 = [_0x394444]),
                  _0x18b885 && _0x18b885[_0x47a08a(0x1c6)](null, _0x39e444),
                  _0x47a08a(0x646) == typeof _0x25299a[_0x4696a4] && _0x25299a[_0x4696a4][_0x47a08a(0x1c6)](null, _0x39e444);
            });
         }
      });
混淆算法需要money