解密payload

85de9332 · wang · a82d8542 · 85de9332 · 85de9332 · 85de9332
Commit 85de9332 authored Nov 01, 2023 by wang
Showing with 321 additions and 119 deletions

decodeResult.js ast/decodeResult.js +11 -1

index.html index.html +4 -4

main.py main.py +74 -63

step2.js step2.js +181 -23

test.py test.py +4 -2

test_url.py test_url.py +30 -26

tt.py tt.py +17 -0

No files found.
--- a/ast/decodeResult.js
+++ b/ast/decodeResult.js
@@ -39,6 +39,8 @@ try {
        }
        o[n] = u;
      }
+      // console.log('i', n, u)
+      if (u === 'PX12169')debugger
      return e(r), u;
    }
    var c = i;
@@ -329,7 +331,8 @@ try {
      } catch (t) {}
    }();
    function H(t) {
-      return l(U) === "function" ? U(t) : function (t) {
+      let res =  l(U) === "function" ? U(t) : function (t) {
+
        var e;
        var n;
        var r;
@@ -348,6 +351,9 @@ try {
          return null;
        }
      }(t);
+
+      // console.log('H', t, res)
+      return res
    }
    var J;
    var z;
@@ -1075,6 +1081,9 @@ try {
    }
    for (var ir = [], cr = {}, ur = 0; ur < 256; ur++) ir[ur] = (ur + 256).toString(16).substr(1), cr[ir[ur]] = ur;
    function lr(t, e, n, r) {
+      // uuid
+      return 'b8a39670-7866-11ee-9655-63a4f05cd5d1'
+
      var a = "";
      if (r) try {
        for (var o = (new Date().getTime() * Math.random() + "").replace(".", ".".charCodeAt()).split("").slice(-16), i = 0; i < o.length; i++) o[i] = parseInt(10 * Math.random()) * +o[i] || parseInt(Math.random() * 36);
@@ -4379,6 +4388,7 @@ try {
      return !(!e || "object" !== l(e)) && (e.do || e.ob);
    }
    function Sh(t, e) {
+      console.log(t)
      if (t) {
        for (var s, h = [], v = 0; v < t[ch(501)]; v++) {
          var d = t[v];

--- a/index.html
+++ b/index.html
@@ -9,19 +9,19 @@
 </head>
 <body>
    <script>
-        window._pxVid = '4290832e-77db-11ee-bdfb-76e73743688f';
-        window._pxUuid = 'b9e29d61-7040-1031-97f5-25e954c514e9';
+        window._pxVid = 'dd9f9ada-7879-11ee-91c7-8768a7117ce0';
+        window._pxUuid = 'deeb1bb0-7879-11ee-b544-b545eb1c6a33';
        window._pxAppId = 'PXVb73hTEg';
        window._pxHostUrl = 'https://collector-PXVb73hTEg.perimeterx.net';
        window._pxCustomLogo = '';
        window._pxJsClientSrc = '//client.perimeterx.net/PXVb73hTEg/main.min.js';
        window._pxFirstPartyEnabled = 'false';
        var script = document.createElement('script');
-        script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=&u=b9e29d61-7040-1031-97f5-25e954c514e9&v=4290832e-77db-11ee-bdfb-76e73743688f&m=0';
+        script.src = '//captcha.perimeterx.net/PXVb73hTEg/captcha.js?a=&u=deeb1bb0-7879-11ee-b544-b545eb1c6a33&v=dd9f9ada-7879-11ee-91c7-8768a7117ce0&m=0';
        document.head.appendChild(script);
        script.onerror = function () {
            script = document.createElement('script');
-            script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=&u=b9e29d61-7040-1031-97f5-25e954c514e9&v=4290832e-77db-11ee-bdfb-76e73743688f&m=0';
+            script.src = 'https://captcha.px-cloud.net/PXVb73hTEg/captcha.js?a=&u=deeb1bb0-7879-11ee-b544-b545eb1c6a33&v=dd9f9ada-7879-11ee-91c7-8768a7117ce0&m=0';
            script.onerror = window._pxDisplayErrorMessage;
            document.head.appendChild(script);
        };

--- a/main.py
+++ b/main.py
--- a/step2.js
+++ b/step2.js
--- a/test.py
+++ b/test.py
@@ -57,10 +57,11 @@ a2 ="WVkHBwdZFDcYEFoUW1tYFA0RIlkhAgcBMiw5XCUvPVglEikcJhILHyYBWBAlPz4EJDwPEjI8MRw
 # a2 = "WVkHBwdZFDcYEFoUW1tYFA0RIlkhAgcBMT89EiUFIRExEikcJhIyBSYrWBAlPz4EJDwAAiUsLRwmPyIBJT8xHyUsLVgxAgwDIQEfAQwBIV4hBS4EMQI5XSYsDxIkPAtaMgI5HCU8LgQyO1hcMTwiBSQ8PVwxAg8SMgU6AyY8DxIyKyEbIQY5AScCMRElLCESJRIPXCUsKR8mER8BCSshXiECMVomPzIAJgI5ESUvOgIlWjFbMT8lWCU/JRInPyERJz8lECU8MgUxEiYAJzwpETE8IV0nPCkfJgI9Eic8KREmPzIFJS8mAyY8BAMmAioEJiw5XTI/LQEOOVVVFBwaHQ0UW1hYFhYWFgdZB1lZWRQLHQ=="


-a2 = "WVkHBwdZFDcYEFoUW1tYFA0RIlkhAgcBMTwPWyVaJVklPAMcJhIpWCUrWBAlLCUQJD8tECYCIRwlBT1aJiwyBCU8A10xEg8fIQEfAQwBIV4hAgNYJhImAiY8OREkPAtbMi8tHCU8LgQyO1hcJgIDWSQ8PgAlAiIEMTw5WjIvMVoyASEbIQY5AScCLVonPA9bJiwDWCU8AxEnLCUbIQUPAScBIVonPy1dJiwhWiU8JgAxEiIEJSwtXDE/LVkyPAwDJzw6Ayc8AxEmEgtaJywMBSUSPgAxAiYEMi8hXCZaJVsyBS1bJz8lHzESPgImPz1aJz8tEDI8IRIhBlhVFBwaHQ0UW1hYFhYWFgdZB1lZWRQLHQ=="
+a2 = "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"

 # 0III0I00 判断是否通过

+
 b2 = base64.b64decode(a2.encode())
 print(b2)
 for i in bytes(encrypt(b2, 872 % 128)).decode().split('~~~~'):
@@ -90,7 +91,8 @@ for i in cks:
    if tmp[0] == 'o11o11oo':
        cts = tmp[1]

-uuid = '1c6fcde0-77d6-11ee-90fc-991f96a1b272'
+uuid = 'b8a39670-7866-11ee-9655-63a4f05cd5d1'
+

 print( json.dumps([sid, vid, ts, num1, num2, str1, uuid]))


--- a/test_url.py
+++ b/test_url.py
@@ -23,34 +23,38 @@ headers = {
    "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
 }

-# headers['cookie'] = '_gcl_au=1.1.963045782.1698659101; _gid=GA1.2.297884565.1698659101; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A47%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; _fbp=fb.1.1698659101107.1293308129; pxcts=fed889bc-7708-11ee-ac10-e036b01709e2; _pxvid=fed8767f-7708-11ee-ac10-daadcbe32b84; _pin_unauth=dWlkPU5EUmlZak5qWmprdFpEUmhNeTAwTURNMUxUazBZamd0WWpSaVpETXhZV1V5WW1Saw; ORA_FPC=id=206781d1-8791-4bcd-9d13-b25999e30ff7; WTPERSIST=; _up=1.2.738217452.1698659104; wisepops_visits=%5B%222023-10-30T09%3A45%3A15.407Z%22%2C%222023-10-30T09%3A45%3A00.986Z%22%5D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-10-30T09%3A45%3A15.407Z%22%2C%22mtime%22%3A1698659118611%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _ga_XXXX=GS1.1.1698659101.1.1.1698659118.0.0.0; _ga=GA1.1.389354129.1698659101; _uetsid=fea8def0770811ee91a20bd33fe9c12d; _uetvid=fea8d5c0770811eeaa5ba75fb8581e79; _px2=eyJ1IjoiMDczYjQ1ODAtNzcwOS0xMWVlLTk3ZTctNDk3ZTRiYTM5OWMxIiwidiI6ImZlZDg3NjdmLTc3MDgtMTFlZS1hYzEwLWRhYWRjYmUzMmI4NCIsInQiOjYyMDIzMzg4MDAwNywiaCI6ImMzYjczNDNhMWVmNGZjZmE0M2MwOTI5NTliN2Q0ZTcwMjIxYTE4NmNmY2NlY2ViZDdlYWEwM2ZhZDk1NWNiN2YifQ==; _ga_P2WLKWBNNW=GS1.1.1698659101.1.1.1698659146.15.0.0'
+headers['cookie'] =  '_gcl_au=1.1.722464866.1698810357; _ga_XXXX=GS1.1.1698810356.1.0.1698810356.0.0.0; _pxvid=2a55550f-7869-11ee-acf5-c9203fdba316; pxcts=2a55663a-7869-11ee-acf5-f6b8cb093cb9; _ga=GA1.2.1295470390.1698810357; _gid=GA1.2.1707451477.1698810360; _gat_UA-2678252-1=1; _uetsid=2c02f3e0786911ee83f54b37555df671; _uetvid=2c032890786911eeb98ad1d36ffcc3dc; wisepops=%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A84%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D; wisepops_visits=%5B%222023-11-01T03%3A45%3A56.718Z%22%5D; wisepops_session=%7B%22arrivalOnSite%22%3A%222023-11-01T03%3A45%3A56.718Z%22%2C%22mtime%22%3A1698810360043%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D; _fbp=fb.1.1698810360050.1803367428; _px2=eyJ1IjoiYjhhMzk2NzAtNzg2Ni0xMWVlLTk2NTUtNjNhNGYwNWNkNWQxIiwidiI6IjJhNTU1NTBmLTc4NjktMTFlZS1hY2Y1LWM5MjAzZmRiYTMxNiIsInQiOjYyMDIzMzg4MDAwNywiaCI6ImM3ODFmMTVhMmVlZmUxYWMzZTBhNmQwYmQ4YzVhODA2NTFhNDhjOThmZTVmMmQ2MTIyMDc4YzUwYjYxYmU1YjIifQ==; _up=1.2.1818147287.1698810361; _tt_enable_cookie=1; _ttp=D3xep_DTwKRrOnkK63RwbIGqBC0; _ga_P2WLKWBNNW=GS1.1.1698810356.1.0.1698810363.53.0.0'
+

-cookies = {
-    "_gcl_au": "1.1.414833160.1698747403",
-    "pxcts": "970e4f63-77d6-11ee-a9eb-78e6fe245189",
-    "_pxvid": "970e4172-77d6-11ee-a9eb-d94cbf89ca92",
-    "_gid": "GA1.2.680187526.1698747449",
-    "_ga_XXXX": "GS1.1.1698747449.1.0.1698747449.0.0.0",
-    "_ga": "GA1.1.1167861038.1698747449",
-    "wisepops": "%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A99%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D",
-    "wisepops_visits": "%5B%222023-10-31T10%3A16%3A43.178Z%22%5D",
-    "wisepops_session": "%7B%22arrivalOnSite%22%3A%222023-10-31T10%3A16%3A43.178Z%22%2C%22mtime%22%3A1698747449168%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D",
-    "_uetsid": "b239cc6077d611eeaab83f2f47c2a229",
-    "_uetvid": "b23a019077d611ee95d4a1ffbf4c148d",
-    "_pin_unauth": "dWlkPVlUUmhaRE0yT1dRdFpXRXpZUzAwTkRGakxXRmtNbUl0TW1FeVkyTTNPVFV4TkRJdw",
-    "_up": "1.2.1716056127.1698747450",
-    "_fbp": "fb.1.1698747450567.801236987",
-    "_tt_enable_cookie": "1",
-    "_ttp": "gqklM1LVE3nGzGdLVvg2tobFsVx",
-    "_ga_P2WLKWBNNW": "GS1.1.1698747449.1.0.1698748313.60.0.0",
-    "_gat_UA-2678252-1": "1",
-    "_px2": "eyJ1IjoiMWM2ZmNkZTAtNzdkNi0xMWVlLTkwZmMtOTkxZjk2YTFiMjcyIiwidiI6Ijk3MGU0MTcyLTc3ZDYtMTFlZS1hOWViLWQ5NGNiZjg5Y2E5MiIsInQiOjE2OTg3NDg2MTQxNDUsImgiOiJmNzRlZWYwNmI3NTU0OTMwYzdlYzQxZmU0Y2VmYjZhNDgzMDZhMWY4NzZhMWQ4NDI5YzgwZDg0ZTEzYzFiZWVhIn0="
-}

-cookies.update(
-# {'_pxhd': '728b2d129b5a075513034298f8e2d4ce004425c1f307bd2baa8e9525fa6bb510:4290832e-77db-11ee-bdfb-76e73743688f', '_pxvid': '4290832e-77db-11ee-bdfb-76e73743688f', '_px2': 'eyJ1IjoiYjllMjlkNjEtNzA0MC0xMDMxLTk3ZjUtMjVlOTU0YzUxNGU5IiwidiI6IjQyOTA4MzJlLTc3ZGItMTFlZS1iZGZiLTc2ZTczNzQzNjg4ZiIsInQiOjE2OTg3NDk3MTE3OTksImgiOiIwZmZiOTUwNjRhODJiNzg4Yjg5YzQ1NDMzZThhMWQ5ZjQwNTY3NzcxNjU5MGY5Mjc0ZGNmYWIxY2MwN2RhMzZhIn0=', 'pxcts': '43453788-77db-11ee-a37b-78e6fe245189'}
+# cookies = {
+#     "_gcl_au": "1.1.1938228348.1698808359",
+#     "_ga_XXXX": "GS1.1.1698808358.1.0.1698808358.0.0.0",
+#     "_ga": "GA1.2.710562005.1698808359",
+#     "_gid": "GA1.2.1404246996.1698808359",
+#     "_gat_UA-2678252-1": "1",
+#     "wisepops": "%7B%22csd%22%3A1%2C%22popups%22%3A%7B%7D%2C%22sub%22%3A0%2C%22ucrn%22%3A66%2C%22cid%22%3A%2278471%22%2C%22v%22%3A4%2C%22bandit%22%3A%7B%22recos%22%3A%7B%7D%7D%7D",
+#     "wisepops_visits": "%5B%222023-11-01T03%3A12%3A38.539Z%22%5D",
+#     "wisepops_session": "%7B%22arrivalOnSite%22%3A%222023-11-01T03%3A12%3A38.539Z%22%2C%22mtime%22%3A1698808359003%2C%22pageviews%22%3A1%2C%22popups%22%3A%7B%7D%2C%22bars%22%3A%7B%7D%2C%22sticky%22%3A%7B%7D%2C%22countdowns%22%3A%7B%7D%2C%22src%22%3Anull%2C%22utm%22%3A%7B%7D%2C%22testIp%22%3Anull%7D",
+#     "_uetsid": "835aeac0786411eeba1bbf0eac362321",
+#     "_uetvid": "835b16f0786411eea91589125ff51ffb",
+#     "_pxvid": "835d9018-7864-11ee-8a4c-b7359a3f130c",
+#     "pxcts": "835d9c74-7864-11ee-8a4c-0a056b567f7d",
+#     "_fbp": "fb.1.1698808397941.389590519",
+#     "_tt_enable_cookie": "1",
+#     "_ttp": "LkMVd7UMPqKBQTla-e3Ax5ijAm6",
+#     "_up": "1.2.1531375415.1698808398",
+#     "_pin_unauth": "dWlkPVpEUm1NekV3Wm1FdFpHVm1NUzAwTVRRd0xUbGlOamd0WVdObFpqYzRZekJpWW1FeQ",
+#     "ORA_FPC": "id=4986ac22-8ff9-4d19-ad31-66dd8163958e",
+#     "WTPERSIST": "",
+#     "_ga_P2WLKWBNNW": "GS1.1.1698808358.1.0.1698808402.16.0.0",
+#     "_px2": "eyJ1IjoiNjE3MmIwODEtNzA0MC0xMDMxLTljYTgtNDRlNjE5NGFkMDlhIiwidiI6IjgzNWQ5MDE4LTc4NjQtMTFlZS04YTRjLWI3MzU5YTNmMTMwYyIs"
+# }

-)
+# cookies.update(
+# # {'_pxhd': '728b2d129b5a075513034298f8e2d4ce004425c1f307bd2baa8e9525fa6bb510:4290832e-77db-11ee-bdfb-76e73743688f', '_pxvid': '4290832e-77db-11ee-bdfb-76e73743688f', '_px2': 'eyJ1IjoiYjllMjlkNjEtNzA0MC0xMDMxLTk3ZjUtMjVlOTU0YzUxNGU5IiwidiI6IjQyOTA4MzJlLTc3ZGItMTFlZS1iZGZiLTc2ZTczNzQzNjg4ZiIsInQiOjE2OTg3NDk3MTE3OTksImgiOiIwZmZiOTUwNjRhODJiNzg4Yjg5YzQ1NDMzZThhMWQ5ZjQwNTY3NzcxNjU5MGY5Mjc0ZGNmYWIxY2MwN2RhMzZhIn0=', 'pxcts': '43453788-77db-11ee-a37b-78e6fe245189'}
+#
+# )

 url = "https://booking.flyfrontier.com/Flight/InternalSelect"
 params = {
@@ -62,7 +66,7 @@ params = {
    "mon": "true",
    "adt": "1"
 }
-response = session.get(url, headers=headers, cookies=cookies, params=params)
+response = session.get(url, headers=headers, params=params)

 print(response.text)
 print(response)
--- a/tt.py
+++ b/tt.py
+import random
+import json
+import time
+
+
+t1 = int(time.time() * 1000)
+t2 = t1 + random.randint(3, 12)
+_uuid = "1db23de0-7863-11ee-bc18-3baabf3cbb42"
+# "[{"t":"PX12095","d":{"PX11645":"https://www.flyfrontier.com/","PX12207":0,"PX12458":"MacIntel","PX11902":0,"PX11560":3781,"PX12248":3600,
+# "PX11385":1698649702900,"PX12280":1698649702913,"PX11496":"1ce53d20-76f3-11ee-8971-a3e00c89b2ff","PX12564":null,"PX12565":-1,"PX11379":false}}]"
+data = [{"t": "PX12095",
+     "d": {"PX11645": "https://www.flyfrontier.com/", "PX12207": 0, "PX12458": "MacIntel", "PX11902": 0,
+           "PX11560": random.randint(24846, 24846 * 2), "PX12248": 3600, "PX11385": t1, "PX12280": t2,
+           "PX11496": _uuid, "PX12564": None, "PX12565": -1,
+           "PX11379": False}}]
+data_str = json.dumps(data, separators=(',', ':'))
+print(data_str)
\ No newline at end of file