foreword

The content of this article is only for learning and communication, and it is strictly prohibited for commercial and illegal purposes. If there is any infringement, please contact to delete! ! !

1. Goals

.Destination URL:https://www.wangluozhe.com/
.Request address:https://www.wangluozhe.com/challenge/api/2
.Encryption parameters:_signature

2. Parameter analysis

insert image description here
It can be found that _signature is encrypted, and then search for this key statement in search](https://img-blog.csdnimg.cn/4f5b2fc345364bd296f52f1917e37409.jpeg#pic_center)

Click to find that the keyword position

is at the break point on line 224, click The page change is stuck here, follow the stack
insert image description here
to get confused, you can use the deobfuscation tool or remove the last () in the console and run it

, you can see the encrypted position, click to
pull out the code and run the test and it will be ok

3. Run the test

write python

import execjs
import requests
base_url='https://www.wangluozhe.com/challenge/api/2'
body=open('2.js','r',encoding='utf-8').read()
obj=execjs.compile(body)
header={
    
    
    "content-type": "application/x-www-form-urlencoded; charset=UTF-8",
    "cookie": "你的cookie",
    "origin": "https://www.wangluozhe.com",
    "referer": "https://www.wangluozhe.com/challenge/2",
    "sec-fetch-dest": "empty",
    "sec-fetch-mode": "cors",
    "sec-fetch-site": "same-origin",
    "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.54",
    "x-requested-with": "XMLHttpRequest"
}
def get_sign():
    sign=obj.call('get_sign')
    return sign

data={
    
    
'page':1,
"count":10,
"_signature":get_sign()

}
resp=requests.post(url=base_url,data=data,headers=header).json()
print(resp)

The operation is successful
insert image description here
, and finally add a loop to calculate the sum

Summarize

This reverse is relatively simple, just find the key parameters and follow the stack. If you need all the code, you can contact me in the background.
I hope you will support us a lot, study hard together, and share more novel and interesting things in the future

【JS Reverse】Networker Reverse Encryption Question 2

Article directory