Skip to content

P
px3
Commit 08e156c4 authored by wang's avatar wang
Browse files
Options

解密payload

parent 2083f36f
Expand all Show whitespace changes
Inline Side-by-side
Showing with 81 additions and 58 deletions
ast/decodeResult.js
View file @ 08e156c4
......@@ -2136,7 +2136,7 @@ try {
s.ts = new Date()[so(414)]();
var h = nf();
s[f(so(468))] = h && parseInt(h);
var v = Tr((ba(fa[Je]) || so(328))[so(398)](",")[so(242)](function (t) {
var v = Tr((ba(fa[Je]) || so(328))['split'](",")[so(242)](function (t) {
return +t;
}), 2);
ho = v[0], vo = v[1];
......@@ -2324,10 +2324,10 @@ try {
function xo(t) {
var Q = i;
try {
if (t[Q(so(519))] = yl, t[Q(so(570))] = jl, t[Q(so(519))]) t[Q(so(519))] = t[Q(so(519))][so(547)](0, 80), t[Me(t[Q(so(570))] || t[Q(so(519))], t[Q(so(468))] % 10 + 2)] = Me(t[Q(so(570))] || t[Q(so(519))], t[Q(so(468))] % 10 + 1);
t[Q(so(570))] && (t[Q(so(570))] = t[Q(so(570))][so(547)](0, 80)), t[Q(so(431))] = bl, t[Q(so(431))] && (t[Q(so(431))] = parseInt(t[Q(so(431))]) || 0);
var N = Tr((ba(fa[Ue]) || "")[so(398)](","), 2);
N[0] && (t[Q(so(434))] = (N[1] || "")[so(547)](0, 40)), t[Q(so(452))] = wl;
if (t['PX11701'] = yl, t['PX12420'] = jl, t['PX11701']) t['PX11701'] = t['PX11701']['substring'](0, 80), t[Me(t['PX12420'] || t['PX11701'], t['PX11431'] % 10 + 2)] = Me(t['PX12420'] || t['PX11701'], t['PX11431'] % 10 + 1);
t['PX12420'] && (t['PX12420'] = t['PX12420']['substring'](0, 80)), t['PX12454'] = bl, t['PX12454'] && (t['PX12454'] = parseInt(t['PX12454']) || 0);
var N = Tr((ba(fa[Ue]) || "")['split'](","), 2);
N[0] && (t[Q(so(434))] = (N[1] || "")['substring'](0, 40)), t['PX12377'] = wl;
} catch (t) {}
}
function _o(t) {
......
index.html
View file @ 08e156c4
......@@ -9,19 +9,19 @@
</head>
<body>
<script>
window._pxVid = 'fe4b87f5-7706-11ee-bc81-9f60a73e65c2';
window._pxUuid = '7fd64821-7040-1031-9863-bcc2f26d0e1d';
window._pxVid = 'd9dc69d3-770c-11ee-84ea-a5385e199980';
window._pxUuid = '15c9c371-7040-1031-a382-23186d2b42a0';
window._pxAppId = 'PXVb73hTEg';
window._pxHostUrl = 'https://collector-PXVb73hTEg.perimeterx.net';
window._pxCustomLogo = '';
window._pxJsClientSrc = '//client.perimeterx.net/PXVb73hTEg/main.min.js';
window._pxFirstPartyEnabled = 'false';
var script = document.createElement('script');
script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=&u=7fd64821-7040-1031-9863-bcc2f26d0e1d&v=fe4b87f5-7706-11ee-bc81-9f60a73e65c2&m=0';
script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=&u=15c9c371-7040-1031-a382-23186d2b42a0&v=d9dc69d3-770c-11ee-84ea-a5385e199980&m=0';
document.head.appendChild(script);
script.onerror = function () {
script = document.createElement('script');
script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=&u=7fd64821-7040-1031-9863-bcc2f26d0e1d&v=fe4b87f5-7706-11ee-bc81-9f60a73e65c2&m=0';
script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=&u=15c9c371-7040-1031-a382-23186d2b42a0&v=d9dc69d3-770c-11ee-84ea-a5385e199980&m=0';
script.onerror = window._pxDisplayErrorMessage;
document.head.appendChild(script);
};
......
js/decodePayload.js
View file @ 08e156c4
This diff is collapsed.
step2.js
View file @ 08e156c4
const md5 = require('md5');
function randomInt(a, b) {
return Math.floor(((b - a) * Math.random()) + a)
}
function R(t, e, n, r, o, i, l) {
return B(e ^ n ^ r, t, e, o, i, l);
......@@ -94,7 +99,11 @@ function getNoPX(data) {
}
let ua = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36';
let performanceNowTime = randomInt(40000, 45000);
function performanceNow(tt) {
return performanceNowTime + tt;
}
function genPayload2(sid, vid,ts, num1 ,num2,str1, uuid) {
// let vid = m['I000I0']
......@@ -121,7 +130,7 @@ function genPayload2(sid, vid,ts, num1 ,num2,str1, uuid) {
"PX12501": md5(vid), // vid md5
"PX12169": 2,
"PX11902": 1,
"PX11560": 19398, // performance.now()
"PX11560": performanceNow(parseInt(Math.random() * 500 + 500)), // performance.now()
// "PX11332": 1692944411272,
"PX11332": Date.now(),
"PX12248": 3600,
......@@ -342,3 +351,9 @@ console.log(genPayload2('687979f8-76f5-11ee-b39d-18b84cf7345b', '66f49836-76f5-1
console.log(createPx2('Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36',
'a6177960-76f7-11ee-b667-533223f88adb'))
console.log(getNoPX({
'PX11701': '10971214037846440851',
'PX11431': '1698660989876',
}))
\ No newline at end of file
test_url.py
View file @ 08e156c4
......@@ -6,8 +6,6 @@ session.proxies = {
'https': 'http://127.0.0.1:7890',
}
headers = {
"authority": "booking.flyfrontier.com",
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
......@@ -24,39 +22,41 @@ headers = {
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
}
# headers['cookie'] = '_gcl_au=1.1.963045782.1698659101; _gid=GA1.2.297884565.1698659101; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A47%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; _fbp=fb.1.1698659101107.1293308129; pxcts=fed889bc-7708-11ee-ac10-e036b01709e2; _pxvid=fed8767f-7708-11ee-ac10-daadcbe32b84; _pin_unauth=dWlkPU5EUmlZak5qWmprdFpEUmhNeTAwTURNMUxUazBZamd0WWpSaVpETXhZV1V5WW1Saw; ORA_FPC=id=206781d1-8791-4bcd-9d13-b25999e30ff7; WTPERSIST=; _up=1.2.738217452.1698659104; wisepops_visits=%5B%222023-10-30T09%3A45%3A15.407Z%22%2C%222023-10-30T09%3A45%3A00.986Z%22%5D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-10-30T09%3A45%3A15.407Z%22%2C%22mtime%22%3A1698659118611%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _ga_XXXX=GS1.1.1698659101.1.1.1698659118.0.0.0; _ga=GA1.1.389354129.1698659101; _uetsid=fea8def0770811ee91a20bd33fe9c12d; _uetvid=fea8d5c0770811eeaa5ba75fb8581e79; _px2=eyJ1IjoiMDczYjQ1ODAtNzcwOS0xMWVlLTk3ZTctNDk3ZTRiYTM5OWMxIiwidiI6ImZlZDg3NjdmLTc3MDgtMTFlZS1hYzEwLWRhYWRjYmUzMmI4NCIsInQiOjYyMDIzMzg4MDAwNywiaCI6ImMzYjczNDNhMWVmNGZjZmE0M2MwOTI5NTliN2Q0ZTcwMjIxYTE4NmNmY2NlY2ViZDdlYWEwM2ZhZDk1NWNiN2YifQ==; _ga_P2WLKWBNNW=GS1.1.1698659101.1.1.1698659146.15.0.0'
cookies = {
"_pxhd": "22d212df719dee891560a19dd1fcf693763a5313e14dceaceeffeadd74c1ed9a:a668952e-76f1-11ee-86c3-0367edfc9861",
"ASP.NET_SessionId": "jeqduql3iyaomqpqad3blyfw",
"pxcts": "c601a88a-76f9-11ee-a217-123ca718c5c4",
"_pxvid": "c60194cc-76f9-11ee-a217-d27f573e9749",
"_gcl_au": "1.1.172898835.1698653064",
"_gid": "GA1.2.1894558624.1698653067",
"_pin_unauth": "dWlkPU1URXhNVFZsTWpBdE9ETTFOQzAwWVdJeExXRmhNVE10TXpobFpUVTRNR0pqTnpnMw",
"wisepops": "%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A24%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D",
"_tt_enable_cookie": "1",
"_ttp": "_fzLoXXlmYl-CRlM2RC1A9KkABZ",
"_fbp": "fb.1.1698653068494.1798735043",
"_up": "1.2.744732504.1698653069",
"__RequestVerificationToken": "SiL39TrXCORrOWYMGAn1m9r_PJmUiaCgG2cBScexdb-e38HOXLlF5mufYteJfduU2GuMiP1lLsdu2s8E2DoMspPe5YlaeF2W0mUMzrXyxBslr1p1eWNnlR7IJSs9tJv1m-JWjQ2",
"dtCookie": "v_4_srv_-2D67_sn_C7GPTED5QRUELR1DT5M6B2TGBJC1TIGH",
"rxVisitor": "16986574689549LQJ2AUNM8FF9OIQ2DTEJ0CL31BEBTJC",
"ORA_FPC": "id=d20240f3-351a-458f-a5a2-3e2173f3b116",
"WTPERSIST": "sha_hash=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"_pin_unauth": "dWlkPU5EUmlZak5qWmprdFpEUmhNeTAwTURNMUxUazBZamd0WWpSaVpETXhZV1V5WW1Saw",
"_gcl_au": "1.1.963045782.1698659101",
"_gid": "GA1.2.297884565.1698659101",
"_gat_UA-2678252-1": "1",
"wisepops_visits": "%5B%222023-10-30T09%3A22%3A07.664Z%22%2C%222023-10-30T09%3A21%3A52.139Z%22%2C%222023-10-30T08%3A04%3A24.343Z%22%5D",
"wisepops_session": "%7B%22arrivalOnSite%22%3A%222023-10-30T09%3A22%3A07.664Z%22%2C%22mtime%22%3A1698657728144%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D",
"_ga_XXXX": "GS1.1.1698657468.2.1.1698657741.0.0.0",
"_ga_P2WLKWBNNW": "GS1.1.1698657468.2.1.1698657741.31.0.0",
"_ga": "GA1.2.822368327.1698653065",
"_uetsid": "326c5540770511ee94eb6568dc6aa1cb",
"_uetvid": "326c6070770511eea482d557d68a6269",
"rxvt": "1698659544101|1698657468956",
"_px2": 'eyJ1IjoiNjRiM2YyNjktNzA0MC0xMDMxLTkwOGQtNWFhNDkxNmZkMDlhIiwidiI6ImVmMDBlNGRiLTc3MDUtMTFlZS1iZmNjLWZjNWIzYWViMGFjMiIsInQiOjE2OTg2NTgwODcxNDMsImgiOiIyM2Q2NTY5YzZjYTI0MmUwMWY2NDJjNWY1M2YyNDQ2YTcwMjM5MzU5OWNjM2RkMDkxZTk5MjA1ZWZhMmYxMzBlIn0=',
"dtPC": "-67$57741890_72h1vFCNWPCKTBACEANENRPBAFKIQDNFPFHUJ-0e0",
"dtSa": "true%7CC%7C-1%7C%2419Mon%2012%2F4%7C-%7C1698657744630%7C57741890_72%7Chttps%3A%2F%2Fbooking.flyfrontier.com%2FFlight%2FSelect%7C%7C%7C%7C"
"wisepops": "%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A47%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D",
"_uetsid": "fea8def0770811ee91a20bd33fe9c12d",
"_uetvid": "fea8d5c0770811eeaa5ba75fb8581e79",
"_fbp": "fb.1.1698659101107.1293308129",
"pxcts": "fed889bc-7708-11ee-ac10-e036b01709e2",
"_pxvid": "fed8767f-7708-11ee-ac10-daadcbe32b84",
"_px2": "eyJ1IjoiZmU4Y2ZiNDAtNzcwOC0xMWVlLTg5MzUtZWZlNDZiMGU4OTBjIiwidiI6ImZlZDg3NjdmLTc3MDgtMTFlZS1hYzEwLWRhYWRjYmUzMmI4NCIsInQiOjE2OTg2NTk0MDI0ODIsImgiOiI3ODdmOGYyZDZhNjYyY2IwZTQzMDM5YTE4ODY0Y2VjMDYxMTU4ODZhOWI2N2ZjZjg1NzdiNjUwMGFkYWQ1YTczIn0=",
"ORA_FPC": "id=206781d1-8791-4bcd-9d13-b25999e30ff7",
"WTPERSIST": "",
"_up": "1.2.738217452.1698659104",
"wisepops_visits": "%5B%222023-10-30T09%3A45%3A15.407Z%22%2C%222023-10-30T09%3A45%3A00.986Z%22%5D",
"wisepops_session": "%7B%22arrivalOnSite%22%3A%222023-10-30T09%3A45%3A15.407Z%22%2C%22mtime%22%3A1698659118611%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D",
"_ga_XXXX": "GS1.1.1698659101.1.1.1698659118.0.0.0",
"_ga": "GA1.1.389354129.1698659101",
"_ga_P2WLKWBNNW": "GS1.1.1698659101.1.1.1698659118.43.0.0"
}
# cookies.update(
#
# {'_pxhd': '29599d17a26fd935cd95526fa24063252758acffd2f7b02453e3652e9287b2a6:83f63b50-7709-11ee-9484-341acdebc08b',
# 'pxcts': '8755dd4a-7709-11ee-9693-a9aaf6d5449c', '_pxvid': '83f63b50-7709-11ee-9484-341acdebc08b',
# '_px2': 'eyJ1IjoiYzA2NjMwYTktNzA0MC0xMDMxLTlmN2YtMWYyMmQyMWIzMTFhIiwidiI6IjgzZjYzYjUwLTc3MDktMTFlZS05NDg0LTM0MWFjZGViYzA4YiIsInQiOjE2OTg2NTk2MzA3OTMsImgiOiI1MGRjM2E3NGVkMjIxMWJkODEwYzVhN2JkMWU2MTg5Y2E0Yjk1MjM1MjNmY2RjM2U0N2MyNjkzMjUxNzU1N2NiIn0='}
#
# )
url = "https://booking.flyfrontier.com/Flight/InternalSelect"
params = {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment