快手sig3参数分析

免责任声明:
任何可操作性的内容与本文无关,文章内容仅供参考学习,如有侵权, 损害贵公司利益,
请联系作者,会立刻马上进行删除

在对快手app抓包的时候,会发现有几个非常重要的参数: sig 和 sig3
在这里插入图片描述
然后sig参数的计算逻辑大概就是对请求url 后面的参数,先进行排序,然后再加一个盐值,最后在进行md5加密得到。

sig3 的计算逻辑就相对的复杂很多,在so层还有大量的反调试。(具体的代码就不公布了,毕竟对人家不太友好)

ks的sig3参数算法还原效果如下:
在这里插入图片描述
这里我们就以视频搜索接口为demo,看看搜索返回的数据:
在这里插入图片描述

sig3: 3165700419cb47b0040f2457fb57d23f816bdeb66a
{
    
    "result":1,"subCommentsMap":{
    
    },"visibleLimit":4,"rootComments":[{
    
    "likedCount":0,"authorVerified":false,"commentAuthorTags":[],"commentBottomTags":[],"type":0,"content":"[赞][赞][赞]","time":"2021-10-30 10:45:58","timestamp":1635561957920,"comment_id":394172851253,"headurls":[{
    
    "cdn":"tx2.a.kwimgs.com","url":"http://tx2.a.kwimgs.com/uhead/AB/2021/04/25/02/BMjAyMTA0MjUwMjI5NTNfMTU5MzIzMzg1XzJfaGQ5MTFfNzkx_s.jpg"},{
    
    "cdn":"js2.a.kwimgs.com","url":"http://js2.a.kwimgs.com/uhead/AB/2021/04/25/02/BMjAyMTA0MjUwMjI5NTNfMTU5MzIzMzg1XzJfaGQ5MTFfNzkx_s.jpg"}],"author_name":"Big魔王\uD83D\uDC3C","reply_to":0,"author_liked":false,"headurl":"http://tx2.a.kwimgs.com/uhead/AB/2021/04/25/02/BMjAyMTA0MjUwMjI5NTNfMTU5MzIzMzg1XzJfaGQ5MTFfNzkx_s.jpg","profilePagePrefetchInfo":{
    
    "profilePageType":1},"author_id":159323385,"photo_id":5208131550045104023,"user_sex":"M","user_id":159199603},{
    
    "likedCount":0,"authorVerified":false,"commentAuthorTags":[],"commentBottomTags":[],"type":0,"content":"[赞][赞][赞]","time":"2021-10-30 10:21:30","timestamp":1635560490091,"comment_id":394165594399,"headurls":[{
    
    "cdn":"tx2.a.kwimgs.com","url":"http://tx2.a.kwimgs

有兴趣的私聊 扣扣: 519545433

Guess you like

Origin blog.csdn.net/weixin_38819889/article/details/120253575