解密脚本编写

ast/decode.js

@@ -508,7 +508,7 @@ for (let i = 0; i < keys.length; i++) {
 var map2 = {};
 // 开始还原
 let funcTemp = {}
-for (let j = 0; j < 3; j++) {
+for (let j = 0; j < 20; j++) {
     traverse(ast, {
         VariableDeclaration(path) {
             let {declarations} = path.node;
@@ -518,9 +518,9 @@ for (let j = 0; j < 3; j++) {
             let {id, init} = declaration;
             if (!init) return
             if (!types.isIdentifier(init)) return;
-            // if (init.name === '$d') {
-            //     debugger;
-            // }
+            if (init.name === 'Bo') {
+                debugger;
+            }
 
             if (keys2.includes(init.name)) {
                 let t = newMap[init.name];
@@ -540,10 +540,10 @@ for (let j = 0; j < 3; j++) {
                 let binding = scope.getBinding(id.name);
 
                 if (!binding) return;
-                console.log(id.name, init.name, keys2.includes(init.name), binding.references)
+                // console.log(id.name, init.name, keys2.includes(init.name), binding.references)
 
 
-                if (id.name === 'xc') {
+                if (id.name === 'Bo') {
                     // console.log(id.name, init.name, keys2.includes(init.name), binding.references)
                     debugger
                 }
@@ -558,9 +558,9 @@ for (let j = 0; j < 3; j++) {
                         }
                         if (arguments.length === 1 && types.isNumericLiteral(arguments[0])) {
                             let res = funcTemp[t.name](arguments[0].value)
-                            if (id.name === 'zo') {
+                            if (init.name === 'Bo') {
 
-                                // console.log(arguments[0].value, res)
+                                console.log(init.name, id.name, arguments[0].value, res)
                             }
                             referencePath.parentPath.replaceWith(types.StringLiteral(res))
                         }
@@ -638,7 +638,7 @@ traverse(ast, {
                 debugger
             }
             if (!binding) return;
-            // console.log(id.name, init.name, binding.references)
+            console.log(id.name, init.name, binding.references)
 
             for (const referencePath of binding.referencePaths) {
                 // console.log(referencePath);

main.py

@@ -76,20 +76,21 @@ class PxBypass():
         self.seq = 0
         self.rsc = 1
         self._step_1()
-        time.sleep(3)
+        time.sleep(2)
         self.inc()
         self.seq += 1
         self._step_11()
         self.inc()
         self._step_2(True)
-        time.sleep(3)
+        time.sleep(2)
         self._step_2(False)
-        time.sleep(4)
+        time.sleep(2)
         self.inc()
+        if self.session.cookies.get_dict().get('_px2', None) == None:
             self._step_3()
             # time.sleep(3)
-
             self.inc()
+            time.sleep(2)
         self.__token()
 
     def _init(self):

test_url.py

@@ -34,8 +34,7 @@ headers = {
     "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
 }
 
-# headers['cookie'] =  '_gcl_au=1.1.2301953.1699261434; _pxvid=69227ff8-7c83-11ee-b901-6d18399e935f; pxcts=69228fdf-7c83-11ee-b901-9bd93d3fa2d4; _gid=GA1.2.1362314117.1699261446; _gat_UA-2678252-1=1; _ga_XXXX=GS1.1.1699261446.1.0.1699261446.0.0.0; _ga=GA1.1.701413066.1699261446; wisepops_visits=%5B%222023-11-06T09%3A03%3A53.587Z%22%5D; _uetsid=7073ea207c8311ee8ce8df31f5cea7b2; _uetvid=7073d2707c8311ee9a96cf34dd248886; _up=1.2.209110602.1699261446; _fbp=fb.1.1699261446991.905500895; _pin_unauth=dWlkPVpqVTVaV0UyT1RndE1HWXdNUzAwWkRaaUxXSXdZV0V0TkRFMllXSXlOelpsWW1Neg; _tt_enable_cookie=1; _ttp=zcp0bE93Om63tadHwNUajOAdZIL; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A%7B%22dc%22%3A1%2C%22d%22%3A1699261450572%7D%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A76%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-11-06T09%3A03%3A53.587Z%22%2C%22mtime%22%3A1699261450572%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A0%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _ga_P2WLKWBNNW=GS1.1.1699261446.1.0.1699261476.30.0.0; _px2=eyJ1IjoiYjhhMzk2NzAtNzg2Ni0xMWVlLTk2NTUtNjNhNGYwNWNkNWQxIiwidiI6IjY5MjI3ZmY4LTdjODMtMTFlZS1iOTAxLTZkMTgzOTllOTM1ZiIsInQiOjE2OTkyNjE3ODgyMDEsImgiOiI4NzI2YTE4MmNjNTJlOTgxNGFiYTM4N2M5MjliOTk5MzkyODU0MjFhNWFmM2QxMWRlODIzYTA4ZTc2OGVmZjM3In0='
-
+headers['cookie'] =  '_gcl_au=1.1.2003685075.1699338031; pxcts=238eb403-7d36-11ee-a378-ab37025b0b7a; _pxvid=238ea67a-7d36-11ee-a378-9d364b2d49e5; _px2=eyJ1IjoiZjcxOTQwNzAtN2QzNS0xMWVlLTk0OWYtN2JhNmJmODcwZDllIiwidiI6IjIzOGVhNjdhLTdkMzYtMTFlZS1hMzc4LTlkMzY0YjJkNDllNSIsInQiOjYyMDIzMzg4MDAwNywiaCI6IjkzMTA1NTY3ZjdmNzdkNGIwNDBkY2U0NWFiYWVjMzFmNDIxNTJlYTRhNDU5NWU5YzExMmM4Y2M5NjZmZWRlMTQifQ==; _ga_XXXX=GS1.1.1699338199.1.0.1699338199.0.0.0; _uetsid=253ae0b07d3611ee9a7dbdbc64e1853a; _uetvid=253aff907d3611eebd7aebbb6d317592; _ga=GA1.2.1758561366.1699338200; _gid=GA1.2.1765445025.1699338200; _gat_UA-2678252-1=1; wisepops_visits=%5B%222023-11-07T06%3A23%3A17.104Z%22%5D; _fbp=fb.1.1699338201686.948301047; _pin_unauth=dWlkPU1EWXdPRGc0WVRFdE1HWTBNQzAwWTJOa0xUZzRORFV0TVRFM1pXSmlZalJtTUROag; _tt_enable_cookie=1; _ttp=cp0KTyDaHYsk4PR-QF-OiODmhPb; _up=1.2.1740726236.1699338204; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A%7B%22dc%22%3A1%2C%22d%22%3A1699338203960%7D%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A56%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-11-07T06%3A23%3A17.104Z%22%2C%22mtime%22%3A1699338203961%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%22429858%22%3A0%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _ga_P2WLKWBNNW=GS1.1.1699338199.1.0.1699338205.54.0.0'
 
 
 
@@ -60,13 +59,13 @@ params = {
 }
 # , cookies=cks
 response = session.get(url, headers=headers, params=params
-                       ,cookies=
-                       {
-                           '__RequestVerificationToken': '0SHGOe4f43b29zgZYnRxBA2lZFc3lpz5MX2SVH78MeDFef47qMH7AEW1h8voDC0XHPbFSESHfY5He-0rThkYeqR3roURvNYFmcvQQMHrUCu0rshn5lESDWj4SpbUHTY-GYMi-g2',
-                           '_pxhd': 'aaa1b3264fd4b5ab4a7c71f00a9600d67ec44b23d36363987e74803ee0761062:c788bec9-7c84-11ee-9b50-9c961d24240a',
-                           'pxcts': 'c9c75df4-7c84-11ee-b6d3-f9c8cf98b5a0',
-                           '_pxvid': 'c788bec9-7c84-11ee-9b50-9c961d24240a',
-                           '_px2': 'eyJ1IjoiYzkxOTRkNzAtN2M4NC0xMWVlLWJlNTQtMDNiNTE4Y2Y5NGY1IiwidiI6ImM3ODhiZWM5LTdjODQtMTFlZS05YjUwLTljOTYxZDI0MjQwYSIsInQiOjYyMDIzMzg4MDAwNCwiaCI6IjFlNzYzMThjMGNlMDRjNjIyZTliNTUxMTdjNWFiN2M5MDU5YWQ3YTU1NmNkYjA2MTM3NjQyNjYxNDQ4Zjg4MzcifQ=='}
+                       # ,cookies=
+                       # {
+                       #     '__RequestVerificationToken': 'NSBimTJq2Tz3K7srdA06s9lx8FAyj-AaBR_mOIlyAFNsvRAlcJXNVR08UcrEteq0MIlB2uYSUu14781gmGWEwr_PBlkoM8-x0oEMAU7t2wJ5X4hJfiOXhNxRhJtoaSRj4wfTDw2',
+                       #     '_pxhd': '0e5d5c0858a1eabddde069b91a9a519dd55a7ac230233b565bd124ab687e524f:ab75d635-7d31-11ee-bae4-3977f8e1984d',
+                       #     'pxcts': 'adb0e6e6-7d31-11ee-a26c-f9b2b073737d',
+                       #     '_pxvid': 'ab75d635-7d31-11ee-bae4-3977f8e1984d',
+                       #     '_px2': 'eyJ1IjoiYWNmZmY4NzAtN2QzMS0xMWVlLWE1NDAtMTE1ZTY5YjY2MGM5IiwidiI6ImFiNzVkNjM1LTdkMzEtMTFlZS1iYWU0LTM5NzdmOGUxOTg0ZCIsInQiOjYyMDIzMzg4MDAwNCwiaCI6IjYxZGNlZGI2NDg3ZDFmNDQyZTdjNzdkMWVjMWYzNmJiNjM1YjRjMDkxODY4ZmFmNDdmNTRlY2JjYTE1N2Y2Y2IifQ=='}
 
                        , allow_redirects=False)