1s，精准定位加密算法。

# -*- coding: utf-8 -*-''' @author : Captain0X @time : 2023/3/7 8:54 '''import base64import ddddocrfrom requests import Sessionfrom Crypto.Cipher import AES'''环境要求:python 3.7以上请安装以下依赖库pip install pycryptodome==3.9.9pip install ddddocr'''#初始化验证码识别模型dcr=ddddocr.DdddOcr()def pkcs7padding(text):    """明文使用PKCS7填充，padding：凑篇幅的文字 """    need_size = 16    text_length = len(text)    bytes_length = len(text.encode('utf-8'))    padding_size = text_length if (bytes_length == text_length) else bytes_length    padding = need_size - padding_size % need_size    padding_text = chr(padding) * padding    return text + padding_textdef AES_Encryption(secret_key=None,text=None):    if (secret_key is None) or len(secret_key) == 0:        secret_key = "1234567812345678"    text = pkcs7padding(text)    aes = AES.new(secret_key.encode("utf-8"), AES.MODE_ECB)    en_text = aes.encrypt(text.encode('utf-8'))    result = str(base64.b64encode(en_text), encoding='utf-8')    return resultdef get_code(sec):    '''获取并识别验证码'''    api="https://login.captainxu.repl.co/code?0.43988416665399943"    img_bytes=sec.get(api).content    code_text=dcr.classification(img_bytes=img_bytes)    print("验证码识别结果:",code_text)    return code_text,secdef login_encrypt(user, pwd):    # 设置 http和https访问都是用HTTP代理    proxy_url = "http://127.0.0.1:10809"    proxies = {        "http": proxy_url,        "https": proxy_url,    }    sec=Session()    #用代理就开启下面这个代码    # sec.proxies=proxies    sec.headers={'accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7', 'sec-ch-ua': '"Chromium";v="110", "Not A(Brand";v="24", "Google Chrome";v="110"', 'sec-ch-ua-mobile': '?0', 'sec-ch-ua-platform': '"Windows"', 'sec-fetch-dest': 'document', 'sec-fetch-mode': 'navigate', 'sec-fetch-site': 'same-origin', 'sec-fetch-user': '?1', 'upgrade-insecure-requests': '1', 'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36'}    #获取验证码识别结果    code_text,sec=get_code(sec)    #登录接口    api="https://login.captainxu.repl.co/login"    password = AES_Encryption(secret_key="passw00dpassw00d", text=pwd)    data={"username":user,"password":password,"auth_code":code_text}    print(data)    #发起登录请求    resp=sec.post(api,data=data)    #返回请求结果和响应头到burpsuite    return str(resp.headers)+"n"+resp.textfrom flask import Flask, requestapp = Flask(__name__)#定义一个登录接口@app.route("/login", methods=['GET'])def call_login():    user = request.args.get("user")    pwd = request.args.get("pwd")    result=login_encrypt(user, pwd)    return resultif __name__ == '__main__':    #本地服务 ip 端口    app.run('127.0.0.1', 5666)