漏洞8k？来学JS加解密

高温暑热送清凉

HOT WEATHER COOL

import time
import json
import requests
import hashlib
import random
from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad
from Crypto.Random import get_random_bytes
import base64
base64_encoded_iv = "MTIzNDU2Nzg5MTIzNDU2Nw=="  # 1234567891234567


def md5_encrypt(text):
    md5_obj = hashlib.md5()
    md5_obj.update(text.encode('utf-8'))
    encrypt_text = md5_obj.hexdigest()
    return encrypt_text


def generate_requestId():
    t = "0123456789abcdef"
    e = [random.choice(t) for _ in range(32)]
    e[14] = "4"
    e[19] = t[3 & int(e[19], 16) | 8]
    e[8] = e[13] = e[18] = e[23]
    return "".join(e)


headers = {
    'Accept': 'application/json, text/plain, */*',
    'Content-Type': 'application/json;charset=UTF-8',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36',
    'X-Requested-With': 'XMLHttpRequest',
}


def aes_encrypt(key, data):
    iv = get_random_bytes(AES.block_size)
    cipher = AES.new(key, AES.MODE_CBC, iv)
    padded_data = pad(data.encode(), AES.block_size)
    encrypted_data = cipher.encrypt(padded_data)
    encrypted_data_with_iv = base64.b64encode(iv + encrypted_data)
    return encrypted_data_with_iv.decode('utf-8')
def encrypt(plain_text, base64_encoded_key="MTIzNDU2Nzg5MTIzNDU2Nw=="):
    try:
        # 解码密钥
        decoded_key = base64.b64decode(base64_encoded_key)
        key_spec = AES.new(decoded_key, AES.MODE_CBC, base64.b64decode(base64_encoded_iv))

        # 加密
        padded_text = pad(plain_text.encode("utf-8"), AES.block_size)
        encrypted_bytes = key_spec.encrypt(padded_text)

        # 将加密后的字节数组和 Base64 编码的初始化向量一起返回
        return base64.b64encode(encrypted_bytes).decode("utf-8")
    except Exception as e:
        print(e)
        return None


if __name__ == '__main__':
    data = {
        "password": "admin",
        "username": "admin",
        "validCode": "fx9n"
    }
    jsondata = json.dumps(data)
    jsondata = jsondata.replace(" ", "")

    requestId = generate_requestId()
    headers["requestId"] = requestId
    print(requestId)

    # 时间戳
    timestamp = int(time.time() * 1000)
    headers["timestamp"] = str(timestamp)
    print(timestamp)

    sign = jsondata + requestId + str(timestamp)
    headers["sign"] = md5_encrypt(sign)
    print(sign)

    # send_data = aes_encrypt(b'1234567891234567', jsondata)
    send_data = encrypt(jsondata)

    print(send_data)

    resp = requests.post('http://39.98.108.20:8085/api/user/login', headers=headers, data=str(send_data),proxies={'http': 'http://127.0.0.1:8080'})

    print(resp.text)