js reverse-analysis of a certain tax website chinatax

1. Website as shown in the picture

Insert image description here

Insert image description here

2. Study the anti-crawling parameters of the landing page

1. datagram parameters
  • datagram parameters used by many interfaces
    Insert image description here
2. Request interface relationship
  • getPublicKey、sendSm4、sendSmsCodeByUuid
    Insert image description here

3. Study the anti-crawling parameters of the details page

1. urlyzm, ruuid and x-b3-spanid parameters
  • As shown in the figure, the ruuid generated position and the urlyzm position are relatively simple parameters. Just search and locate and directly deduct the js code.
    Insert image description here
    Insert image description here

  • As shown in the figure x-b3-spanid parameters, these parameters are relatively simple. Just search and locate and directly deduct the js code.
    Insert image description here

2. los28199 parameters
  • As shown in the link below, these los28199 parameters are relatively simple. Just search and locate and directly deduct the js code.
    Insert image description here
  • Generate location
    Insert image description here
3. lzkqow23819 parameters
  • As shown in the figure, it is easier to fill in the environment and pass the lzkqow23819 parameter, but the algorithm is very difficult.
    Insert image description here
4. jmbw parameters
  • As shown in the figure, the jmbw parameter is OK
    Insert image description here
  • Search positioning research
    Insert image description here
  • real spawn location
    Insert image description here

4. Final result

  • As shown in the figure, after the parameters are resolved, the data interface returns normally. If you have any questions, please send a private message. There will be no answers in the comment area.
    Insert image description here

Guess you like

Origin blog.csdn.net/weixin_43411585/article/details/133235171