Data collection for an auction room

Data collection for an auction room

statement

All content in this article is for learning and communication only. The content of captured packets, sensitive URLs, and data interfaces have been desensitized, and it is strictly prohibited to be used for commercial and illegal purposes. Otherwise, all consequences arising therefrom have nothing to do with the author. If there is any infringement , please contact me to delete immediately!

1. Reverse target

Click to turn the page to send the package and find that the sign parameter is encrypted

2. Find the encrypted location

Through the global search keyword, it is found that there are too many sign parameters, and it is difficult to find the encryption position we need. You can search by finding the required js file in the initiator program in the package.

After entering the js file search, set a breakpoint to debug, and the Ali encryption token is also a keyword