解密payload

6c8b96a6 · wang · 74bbab65 · 6c8b96a6 · 6c8b96a6 · 6c8b96a6
Commit 6c8b96a6 authored Nov 03, 2023 by wang
9 changed files
--- a/ast/111.js
+++ b/ast/111.js
--- a/index.html
+++ b/index.html
@@ -9,19 +9,19 @@
 </head>
 <body>
    <script>
-        window._pxVid = '9953af5b-7995-11ee-b791-fed1868c2d17';
-        window._pxUuid = '990a9680-7995-11ee-839d-b3844b2d79da';
+        window._pxVid = '';
+        window._pxUuid = '061a9c00-79f0-11ee-a578-8e2ca0755a1d';
        window._pxAppId = 'PXVb73hTEg';
        window._pxHostUrl = 'https://collector-PXVb73hTEg.perimeterx.net';
        window._pxCustomLogo = '';
        window._pxJsClientSrc = '//client.perimeterx.net/PXVb73hTEg/main.min.js';
        window._pxFirstPartyEnabled = 'false';
        var script = document.createElement('script');
-        script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=c&u=990a9680-7995-11ee-839d-b3844b2d79da&v=9953af5b-7995-11ee-b791-fed1868c2d17&m=0';
+        script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=c&u=061a9c00-79f0-11ee-a578-8e2ca0755a1d&v=&m=0';
        document.head.appendChild(script);
        script.onerror = function () {
            script = document.createElement('script');
-            script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=c&u=990a9680-7995-11ee-839d-b3844b2d79da&v=9953af5b-7995-11ee-b791-fed1868c2d17&m=0';
+            script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=c&u=061a9c00-79f0-11ee-a578-8e2ca0755a1d&v=&m=0';
            script.onerror = window._pxDisplayErrorMessage;
            document.head.appendChild(script);
        };

--- a/js/encodepayload.js
+++ b/js/encodepayload.js
--- a/js/md5.js
+++ b/js/md5.js
+"use strict";
+
+function d(n, t) {
+    var r = (65535 & n) + (65535 & t);
+    return (n >> 16) + (t >> 16) + (r >> 16) << 16 | 65535 & r
+}
+
+function f(n, t, r, e, o, u) {
+    return d(function (n, t) {
+        return n << t | n >>> 32 - t
+    }(d(d(t, n), d(e, u)), o), r)
+}
+
+function l(n, t, r, e, o, u, c) {
+    return f(t & r | ~t & e, n, t, o, u, c)
+}
+
+function g(n, t, r, e, o, u, c) {
+    return f(t & e | r & ~e, n, t, o, u, c)
+}
+
+function v(n, t, r, e, o, u, c) {
+    return f(t ^ r ^ e, n, t, o, u, c)
+}
+
+function m(n, t, r, e, o, u, c) {
+    return f(r ^ (t | ~e), n, t, o, u, c)
+}
+
+function i(n, t) {
+    var r, e, o, u, c;
+    n[t >> 5] |= 128 << t % 32, n[14 + (t + 64 >>> 9 << 4)] = t;
+    var f = 1732584193, i = -271733879, a = -1732584194, h = 271733878;
+    for (r = 0; r < n.length; r += 16) i = m(i = m(i = m(i = m(i = v(i = v(i = v(i = v(i = g(i = g(i = g(i = g(i = l(i = l(i = l(i = l(o = i, a = l(u = a, h = l(c = h, f = l(e = f, i, a, h, n[r], 7, -680876936), i, a, n[r + 1], 12, -389564586), f, i, n[r + 2], 17, 606105819), h, f, n[r + 3], 22, -1044525330), a = l(a, h = l(h, f = l(f, i, a, h, n[r + 4], 7, -176418897), i, a, n[r + 5], 12, 1200080426), f, i, n[r + 6], 17, -1473231341), h, f, n[r + 7], 22, -45705983), a = l(a, h = l(h, f = l(f, i, a, h, n[r + 8], 7, 1770035416), i, a, n[r + 9], 12, -1958414417), f, i, n[r + 10], 17, -42063), h, f, n[r + 11], 22, -1990404162), a = l(a, h = l(h, f = l(f, i, a, h, n[r + 12], 7, 1804603682), i, a, n[r + 13], 12, -40341101), f, i, n[r + 14], 17, -1502002290), h, f, n[r + 15], 22, 1236535329), a = g(a, h = g(h, f = g(f, i, a, h, n[r + 1], 5, -165796510), i, a, n[r + 6], 9, -1069501632), f, i, n[r + 11], 14, 643717713), h, f, n[r], 20, -373897302), a = g(a, h = g(h, f = g(f, i, a, h, n[r + 5], 5, -701558691), i, a, n[r + 10], 9, 38016083), f, i, n[r + 15], 14, -660478335), h, f, n[r + 4], 20, -405537848), a = g(a, h = g(h, f = g(f, i, a, h, n[r + 9], 5, 568446438), i, a, n[r + 14], 9, -1019803690), f, i, n[r + 3], 14, -187363961), h, f, n[r + 8], 20, 1163531501), a = g(a, h = g(h, f = g(f, i, a, h, n[r + 13], 5, -1444681467), i, a, n[r + 2], 9, -51403784), f, i, n[r + 7], 14, 1735328473), h, f, n[r + 12], 20, -1926607734), a = v(a, h = v(h, f = v(f, i, a, h, n[r + 5], 4, -378558), i, a, n[r + 8], 11, -2022574463), f, i, n[r + 11], 16, 1839030562), h, f, n[r + 14], 23, -35309556), a = v(a, h = v(h, f = v(f, i, a, h, n[r + 1], 4, -1530992060), i, a, n[r + 4], 11, 1272893353), f, i, n[r + 7], 16, -155497632), h, f, n[r + 10], 23, -1094730640), a = v(a, h = v(h, f = v(f, i, a, h, n[r + 13], 4, 681279174), i, a, n[r], 11, -358537222), f, i, n[r + 3], 16, -722521979), h, f, n[r + 6], 23, 76029189), a = v(a, h = v(h, f = v(f, i, a, h, n[r + 9], 4, -640364487), i, a, n[r + 12], 11, -421815835), f, i, n[r + 15], 16, 530742520), h, f, n[r + 2], 23, -995338651), a = m(a, h = m(h, f = m(f, i, a, h, n[r], 6, -198630844), i, a, n[r + 7], 10, 1126891415), f, i, n[r + 14], 15, -1416354905), h, f, n[r + 5], 21, -57434055), a = m(a, h = m(h, f = m(f, i, a, h, n[r + 12], 6, 1700485571), i, a, n[r + 3], 10, -1894986606), f, i, n[r + 10], 15, -1051523), h, f, n[r + 1], 21, -2054922799), a = m(a, h = m(h, f = m(f, i, a, h, n[r + 8], 6, 1873313359), i, a, n[r + 15], 10, -30611744), f, i, n[r + 6], 15, -1560198380), h, f, n[r + 13], 21, 1309151649), a = m(a, h = m(h, f = m(f, i, a, h, n[r + 4], 6, -145523070), i, a, n[r + 11], 10, -1120210379), f, i, n[r + 2], 15, 718787259), h, f, n[r + 9], 21, -343485551), f = d(f, e), i = d(i, o), a = d(a, u), h = d(h, c);
+    return [f, i, a, h]
+}
+
+function a(n) {
+    var t, r = "", e = 32 * n.length;
+    for (t = 0; t < e; t += 8) r += String.fromCharCode(n[t >> 5] >>> t % 32 & 255);
+    return r
+}
+
+function h(n) {
+    var t, r = [];
+    for (r[(n.length >> 2) - 1] = void 0, t = 0; t < r.length; t += 1) r[t] = 0;
+    var e = 8 * n.length;
+    for (t = 0; t < e; t += 8) r[t >> 5] |= (255 & n.charCodeAt(t / 8)) << t % 32;
+    return r
+}
+
+function e(n) {
+    var t, r, e = "0123456789abcdef", o = "";
+    for (r = 0; r < n.length; r += 1) t = n.charCodeAt(r), o += e.charAt(t >>> 4 & 15) + e.charAt(15 & t);
+    return o
+}
+
+function r(n) {
+    return unescape(encodeURIComponent(n))
+}
+
+function o(n) {
+    return function (n) {
+        return a(i(h(n), 8 * n.length))
+    }(r(n))
+}
+
+function u(n, t) {
+    return function (n, t) {
+        var r, e, o = h(n), u = [], c = [];
+        for (u[15] = c[15] = void 0, 16 < o.length && (o = i(o, 8 * n.length)), r = 0; r < 16; r += 1) u[r] = 909522486 ^ o[r], c[r] = 1549556828 ^ o[r];
+        return e = i(u.concat(h(t)), 512 + 8 * t.length), a(i(c.concat(e), 640))
+    }(r(n), r(t))
+}
+
+function t(n, t, r) {
+    return t ? r ? u(t, n) : function (n, t) {
+        return e(u(n, t))
+    }(t, n) : r ? o(n) : function (n) {
+        return e(o(n))
+    }(n)
+}
+
+var md5 = t
+"function" == typeof define && define.amd ? define(function () {
+    return t
+}) : "object" == typeof module && module.exports ? module.exports = t : n.md5 = t
+//# sourceMappingURL=md5.min.js.map
+let payload = '[{"t":"PX12095","d":{"PX11645":"https://www.flyfrontier.com/","PX12207":0,"PX12458":"MacIntel","PX11902":0,"PX11560":2415,"PX12248":3600,"PX11385":1693058324224,"PX12280":1693058324227,"PX11496":"ab7f61e0-4418-11ee-87a1-e51213af1917","PX12564":null,"PX12565":-1,"PX11379":false}}]'
+payload = '[{"t":"PX12095","d":{"PX11645":"https://www.flyfrontier.com/","PX12207":0,"PX12458":"MacIntel","PX11902":0,"PX11560":31629,"PX12248":3600,"PX11385":1698822700332,"PX12280":1698822700336,"PX11496":"b8a39670-7866-11ee-9655-63a4f05cd5d1","PX12564":null,"PX12565":-1,"PX11379":false}}]'
+let uuid = 'b8a39670-7866-11ee-9655-63a4f05cd5d1:v8.7.2:317'
+console.log(md5(payload,uuid))
+
+
+
+const CryptoJS = require("crypto-js");
+
+console.log(CryptoJS.MD5())
--- a/js/pcCreator.js
+++ b/js/pcCreator.js
@@ -152,6 +152,9 @@ module.exports = {
    N: N,
    D: D
 }
+let t = '[{"t":"PX12095","d":{"PX11645":"https://www.flyfrontier.com/","PX12207":0,"PX12458":"MacIntel","PX11902":0,"PX11560":31629,"PX12248":3600,"PX11385":1698822700332,"PX12280":1698822700336,"PX11496":"b8a39670-7866-11ee-9655-63a4f05cd5d1","PX12564":null,"PX12565":-1,"PX11379":false}}]'
+t = `[{"t":"PX12095","d":{"PX11645":"https://www.flyfrontier.com/","PX12207":0,"PX12458":"MacIntel","PX11902":0,"PX11560":36377,"PX12248":0,"PX11385":1698919311053,"PX12280":1698919311054,"PX11496":"b34a66a6-bfb5-40bb-9437-21ef917b8d0e","PX12564":null,"PX12565":-1,"PX11379":false}}]`

+let e = 'b34a66a6-bfb5-40bb-9437-21ef917b8d0e:v8.7.2:317'

-
+console.log(genPC2(genPC1(N(D(e, t)))))
\ No newline at end of file
--- a/main.py
+++ b/main.py
@@ -53,12 +53,12 @@ class PxBypass():
    # }
    prox = 'http://b6b6b6b6-zone-custom-region-us-session-130oj36t4-sessTime-5:bpoMDFG5oD@na.ipidea.io:2333'

-    prox = 'http://user-uni001-region-us-sessid-1111-sesstime-5-keep-true:q39CEBTs5A5YQXor@pr.roxlabs.cn:4600'
-    prox = 'http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:9000'
-    session.proxies = {
-        'http': prox,
-        'https': prox,
-    }
+    # prox = 'http://user-uni001-region-us-sessid-1111-sesstime-5-keep-true:q39CEBTs5A5YQXor@pr.roxlabs.cn:4600'
+    # prox = 'http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:9000'
+    # session.proxies = {
+    #     'http': prox,
+    #     'https': prox,
+    # }
    tag = "v8.7.2"
    ft = "317"
    def __init__(self, target_url):
@@ -83,7 +83,7 @@ class PxBypass():
        self._step_2(True)
        time.sleep(3)
        self._step_2(False)
-        time.sleep(3)
+        time.sleep(4)
        self.inc()
        self._step_3()
        # time.sleep(3)
@@ -547,7 +547,6 @@ class PxBypass():
        return data

    def _step_3(self):
-        time.sleep(3)
        self.log.info(self.m)
        self.log.info(self.uuid)
        # sid, vid,ts, num1 ,num2,str1,  uuid
@@ -574,6 +573,7 @@ class PxBypass():
            "rsc": self.rsc
        }
        body = self.update_sid_vid(body)
+        print(json.dumps(body, separators=(',', ':')))
        url = "https://collector-pxvb73hteg.px-cloud.net/b/s"
        headers = {
            "authority": "collector-PXVb73hTEg.px-cloud.net",

--- a/package-lock.json
+++ b/package-lock.json
@@ -10,6 +10,7 @@
      "license": "ISC",
      "dependencies": {
        "acorn": "^8.10.0",
+        "crypto-js": "^4.2.0",
        "md5": "^2.3.0"
      },
      "devDependencies": {
@@ -464,6 +465,11 @@
        "node": "*"
      }
    },
+    "node_modules/crypto-js": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
+    },
    "node_modules/debug": {
      "version": "4.3.4",
      "resolved": "https://registry.npmmirror.com/debug/-/debug-4.3.4.tgz",

--- a/package.json
+++ b/package.json
@@ -10,6 +10,7 @@
  "license": "ISC",
  "dependencies": {
    "acorn": "^8.10.0",
+    "crypto-js": "^4.2.0",
    "md5": "^2.3.0"
  },
  "devDependencies": {

--- a/test_url.py
+++ b/test_url.py
@@ -6,12 +6,13 @@ session.proxies = {
    'https': 'http://127.0.0.1:7890',
 }

-prox = 'http://user-uni001-region-us-sessid-1111-sesstime-5-keep-true:q39CEBTs5A5YQXor@pr.roxlabs.cn:4600'
-prox = 'http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:9000'
-session.proxies = {
-    'http': prox,
-    'https': prox,
-}
+
+# prox = 'http://user-uni001-region-us-sessid-1111-sesstime-5-keep-true:q39CEBTs5A5YQXor@pr.roxlabs.cn:4600'
+# prox = 'http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:9000'
+# session.proxies = {
+#     'http': prox,
+#     'https': prox,
+# }
 # session.proxies = {
 #     'http': "http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:11400",
 #     'https': "http://unfflcc:76cc14-47b8dd-1f8ace-827836-0c740e@usa.rotating.proxyrack.net:11400",
@@ -33,7 +34,7 @@ headers = {
    "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
 }

-headers['cookie'] =  '_gcl_au=1.1.2079426440.1698939153; _ga_XXXX=GS1.1.1698939154.1.0.1698939154.0.0.0; _pxvid=0bc2b5aa-7995-11ee-87c9-3a66372395bf; pxcts=0bc2c78c-7995-11ee-87c9-1cb52a7a9b3d; _ga=GA1.2.141643440.1698939154; _gid=GA1.2.366986963.1698939204; _gat_UA-2678252-1=1; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A92%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; wisepops_visits=%5B%222023-11-02T15%3A32%3A33.328Z%22%5D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-11-02T15%3A32%3A33.328Z%22%2C%22mtime%22%3A1698939204112%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _uetsid=292b1420799511ee9484533773fe826c; _uetvid=292b2850799511ee9625997ed2590e95; _up=1.2.1322429587.1698939204; _pin_unauth=dWlkPVpUQXdNVGcwTTJRdE9XSTFOQzAwTmpReExUazJZVGt0WVdNek9EQmlZVE0yTnpVNQ; _fbp=fb.1.1698939226304.156336050; _tt_enable_cookie=1; _ttp=RYz6YoxVBgt6agGEBcxR97Ds6ES; _ga_P2WLKWBNNW=GS1.1.1698939204.1.0.1698939229.35.0.0; _px2=eyJ1IjoiYjhhMzk2NzAtNzg2Ni0xMWVlLTk2NTUtNjNhNGYwNWNkNWQxIiwidiI6IjBiYzJiNWFhLTc5OTUtMTFlZS04N2M5LTNhNjYzNzIzOTViZiIsInQiOjE2OTg5Mzk1NDgyNTAsImgiOiJiZjQyMmExOTcxMWJmZGNkMzczNjQzMDFmYmIyYzJlNWMxMmU3NjQ5MDRjZTkyYzI1ZWExMTA0OWM0MjYyMzZjIn0='
+headers['cookie'] =  '_ga_P2WLKWBNNW=GS1.1.1698977913.2.0.1698977936.37.0.0; _ga_XXXX=GS1.1.1698977913.2.0.1698977936.0.0.0; _gcl_au=1.1.351693116.1698977973; _pxvid=6dd9f7bc-79ef-11ee-8857-2304304e081e; pxcts=6dda052e-79ef-11ee-8857-1bebea5b07ba; wisepops_visits=%5B%222023-11-03T02%3A19%3A32.551Z%22%5D; _uetsid=7f652d2079ef11eeb01d4549606e029f; _uetvid=7f6552b079ef11ee9d52b37b3199cbff; _up=1.2.1919688123.1698978004; _fbp=fb.1.1698978007029.1335052028; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A%7B%22dc%22%3A1%2C%22d%22%3A1698978012485%7D%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A5%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-11-03T02%3A19%3A32.551Z%22%2C%22mtime%22%3A1698978012485%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A0%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _px2=eyJ1IjoiYjhhMzk2NzAtNzg2Ni0xMWVlLTk2NTUtNjNhNGYwNWNkNWQxIiwidiI6IjZkZDlmN2JjLTc5ZWYtMTFlZS04ODU3LTIzMDQzMDRlMDgxZSIsInQiOjE2OTg5Nzg0ODEzMTIsImgiOiI0MzMxMWMzYjgzM2E5ZjAxYzM5ZjE3MzY4ZjM5OWMwMDk4OTEwYmYyY2JhYmE5NGUyNmM2NTgxNWNhZGY0MDE1In0='

 # cks = {'_px2': 'eyJ1IjoiOTY0ODdjMzAtNzk4OC0xMWVlLTgxYTktMjUyZjY0MDdjMTYxIiwidiI6Ijk3NmYxYzBlLTc5ODgtMTFlZS1iODYwLTAyNTVmY2JmZTU2MCIsInQiOjYyMDIzMzg4MDAwNCwiaCI6ImViY2U4ZmQ2ZjA3ZGIxNTkxY2YzMmI0MTg3OTcwZWI5NGY5ZDZkN2I2YjY4NGUxZjJiMjE2MGZlZjQxYWI0MzQifQ==', '_pxvid': '976f1c0e-7988-11ee-b860-0255fcbfe560', 'pxcts': '976f338c-7988-11ee-b860-865043e6e7b4'}