js逆向之--python有道翻译接口JavaScript解密

迈不过友情╰ 2022-12-04 09:18 313阅读 0赞

### **js逆向之python有道翻译接口JavaScript解密** ###

*  工具：chrome

1.  打开有道翻译http://fanyi.youdao.com/
2.  F12打开开发者工具或鼠标右击->检查，找到Network一栏
3.  输入字符串进行抓包
4.  在Search中输入第三步的字符串，进行数据包关键词的搜索  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center]

*  此时可以猜测Form Data中ts：是时间戳，salt：时间戳+随机一位数字，sign和bv有加密，其它为固定值

i: 中国
        from: AUTO
        to: AUTO
        smartresult: dict
        client: fanyideskweb
        salt: 15916148182391
        sign: e2a7986f3466d33c120c7e34c8d25659
        ts: 1591614818239
        bv: c74c03c52496795b65595fdc27140f0f
        doctype: json
        version: 2.1
        keyfrom: fanyi.web
        action: FY_BY_REALTlME

*  经过以下堆栈追踪调试，定位到JavaScript加密的关键代码  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 1]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 2]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 3]
 *  JavaScript加密的核心代码

var r = function(e) { 
            var t = n.md5(navigator.appVersion)
              , r = "" + (new Date).getTime()
              , i = r + parseInt(10 * Math.random(), 10);
            return { 
                ts: r,
                bv: t,
                salt: i,
                sign: n.md5("fanyideskweb" + e + i + "Nw(nmmbP%A-r6U3EUn]Aj")
            }
        };

*  python 代码两种实现方式一：使用python模拟实现JavaScript加密的核心代码

import requests
    from random import randint
    import time
    import hashlib
    
    def youdaofanyi(word):
        url = 'http://fanyi.youdao.com/translate_o?smartresult=dict&smartresult=rule'
    
        ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36'
        ts = format(time.time() , '.3f').replace('.', '')
        salt = ts + str(randint(1, 10))
        bv = hashlib.md5(ua.encode('utf-8'))
        sign_temp = "fanyideskweb" + str(word) + str(salt) + "mmbP%A-r6U3Nw(n]BjuEU"
        sign = hashlib.md5(sign_temp.encode('utf-8'))
    
        header = { 
            'Cookie': 'OUTFOX_SEARCH_USER_ID=-1334003568@10.108.160.17; OUTFOX_SEARCH_USER_ID_NCOO=670129948.8810779; _ga=GA1.2.63385724.1582769633; JSESSIONID=aaaTqfgI67jLlcro_ztmx; ___rl__test__cookies=1593761131267',
            'Referer': 'http://fanyi.youdao.com/',
            'User-Agent': ua,
        }
        data = { 
            'i': f'{word}',
            'from': 'AUTO',
            'to': 'AUTO',
            'smartresult': 'dict',
            'client': 'fanyideskweb',
            'salt': f'{salt}',
            'sign': f'{sign.hexdigest()}',
            'ts': f'{ts}',
            'bv': f'{bv.hexdigest()}',
            'doctype': 'json',
            'version': '2.1',
            'keyfrom': 'fanyi.web',
            'action': 'FY_BY_REALTlME',
        }
        res = requests.post(url=url, data=data, headers=header).json()
        if res['errorCode'] != 0:
            return res['errorCode']
        for i in res['translateResult'][0]:
            return i['tgt']
    
    if __name__ == '__main__':
        data = youdaofanyi(input('Please input the content of the translation you need:'))
        print('翻译结果为:' + data)

*  python 代码两种实现方式二：使用execjs执行JavaScript加密的核心代码
    
        import requests
        import execjs
        
        def youdaofanyi(word):
            url = 'http://fanyi.youdao.com/translate_o?smartresult=dict&smartresult=rule'
            header = { 
                'Cookie': 'OUTFOX_SEARCH_USER_ID=-1334003568@10.108.160.17; OUTFOX_SEARCH_USER_ID_NCOO=670129948.8810779; _ga=GA1.2.63385724.1582769633; JSESSIONID=aaaTqfgI67jLlcro_ztmx; ___rl__test__cookies=1593761131267',
                'Referer': 'http://fanyi.youdao.com/',
                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36',
            }
        
            js_code = ''' var md5 = function(content) { var crypto = require('crypto'); var result = crypto.createHash('md5').update(content).digest("hex") console.log(result); return result }; var r = function(e) { var t = md5("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36") , r = "" + (new Date).getTime() , i = r + parseInt(10 * Math.random(), 10); return { ts: r, bv: t, salt: i, sign: md5("fanyideskweb" + e + i + "Nw(nmmbP%A-r6U3EUn]Aj") } }; '''
            ctx = execjs.compile(js_code)
            result = ctx.call('r', word)
            
            data = { 
                'i': f'{word}',
                'from': 'AUTO',
                'to': 'AUTO',
                'smartresult': 'dict',
                'client': 'fanyideskweb',
                'salt': f'{result["salt"]}',
                'sign': f'{result["sign"]}',
                'ts': f'{result["ts"]}',
                'bv': f'{result["bv"]}',
                'doctype': 'json',
                'version': '2.1',
                'keyfrom': 'fanyi.web',
                'action': 'FY_BY_REALTlME',
            }
            res = requests.post(url=url, data=data, headers=header).json()
            if res['errorCode'] != 0:
                return res['errorCode']
            for i in res['translateResult'][0]:
                return i['tgt']
        
        if __name__ == '__main__':
            data = youdaofanyi(input('Please input the content of the translation you need:'))
            print('翻译结果为:' + data)

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center]: /images/20221123/326f880c291d434581ea25f282d29cdf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221123/0f9bd63356504d0f9f3d8d5e90db1882.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221123/f0bba01485064e5b9c79ce5e30c753ab.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIxNTMxNjgx_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20221123/483f3b1a864d4f9f83df4258f99d5119.png