记一次解决某SRC加密传输问题+对接Burp进行Fuzz

"0627": function (e, t, n) {        "use strict";        n.d(t, "a", (function () {            return C        }));        n("d3b7"), n("25f0");        var o = n("6510"),            i = n.n(o),            a = i.a.enc.Utf8.parse("1234588888823456"),            r = i.a.enc.Utf8.parse("1234588888823456");        function C(e, t, n) {            var o = a,                C = r;            var s = i.a.enc.Utf8.parse(e),                c = i.a.AES.encrypt(s, o, {                    iv: C,                    mode: i.a.mode.CBC,                    padding: i.a.pad.ZeroPadding                });                return i.a.enc.Base64.stringify(c.ciphertext)        }

encrypt(code(明文), key(秘钥), {                    iv: iv(偏移量),                    mode: 模式,                    padding: 填充方式                }

var webserver = require('webserver');server = webserver.create();var host = '127.0.0.1';var port = '1664';// 加载实现加密算法的js脚本var wasSuccessful = phantom.injectJs('aes.js') && phantom.injectJs('pad-zeropadding.js');//所需Js文件 下载地址:https://codeload.github.com/sytelus/CryptoJS/zip/master// 处理函数function js_encrypt(payload){/*********************************************************/    var AesKey = "1234588888823456";    var CBCIV = "1234588888823456";    var CBCOptions = {        iv: CryptoJS.enc.Utf8.parse(CBCIV),        mode:CryptoJS.mode.CBC,        padding: CryptoJS.pad.ZeroPadding    }             var key = CryptoJS.enc.Utf8.parse(AesKey);        var secretData = CryptoJS.enc.Utf8.parse(payload);        var encrypted = CryptoJS.AES.encrypt(            secretData,            key,            CBCOptions        );        return encrypted.toString();/*********************************************************/}if(wasSuccessful){    console.log("[*] load js successful");    console.log("[!] ^_^");    console.log("[*] jsEncrypterJS start!");    console.log("[+] address: http://"+host+":"+port);}else{    console.log('[*] load js fail!');}var service = server.listen(host+':'+port,function(request, response){     try{        if(request.method == 'POST'){            var payload = request.post['payload'];            var encrypt_payload = js_encrypt(payload);            console.log('[+] ' + payload + ':' + encrypt_payload);            response.statusCode = 200;            response.write(encrypt_payload.toString());            response.close();        }else{              response.statusCode = 200;              response.write("^_^nrhello jsEncrypter!");              response.close();        }    }catch(e){        console.log('n-----------------Error Info--------------------')        var fullMessage = "Message: "+e.toString() + ':'+ e.line;        for (var p in e) {            fullMessage += "n" + p.toUpperCase() + ": " + e
;        }        console.log(fullMessage);        console.log('---------------------------------------------')        console.log('[*] phantomJS exit!')        phantom.exit();    }    });