朴朴超市小程序 sign-v2 分析

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

部分python代码

cp = execjs.compile(open('run.js','r',encoding='utf-8').read())
result = cp.call('getSign',unique_id)
print(result)
headers = {"accept": "application/json","accept-language": "zh-CN,zh;q=0.9","cache-control": "no-cache","chart_ab": "4","content-type": "application/json","is_show_classification_word": "1","label_assembly_ab": "1","open-id": "","pp-os": "0","pp-placeid": unique_id,"pp-suid": unique_id,"pp_storeid": unique_id,"pragma": "no-cache","priority": "u=1, i","sec-fetch-dest": "empty","sec-fetch-mode": "cors","sec-fetch-site": "cross-site","shopping_car_hint_banner_module": "1","sign-v2": result['sign'],"spu_shopping_guide_link_ab": "1","timestamp": str(result["timestamp"]),
}
url = "product/recall"
data = {"card_line": 1,"page": 1,"size": 20,"area_list": [],"area_second_id": "","is_top": 0
}
data = json.dumps(data, separators=(',', ':'))
response = requests.post(url, headers=headers, data=data)print(response.text)
print(response)

cp = execjs.compile(open('run.js','r',encoding='utf-8').read())
result = cp.call('getSign',unique_id)
print(result)
headers = {"accept": "application/json","accept-language": "zh-CN,zh;q=0.9","cache-control": "no-cache","chart_ab": "4","content-type": "application/json","is_show_classification_word": "1","label_assembly_ab": "1","open-id": "","pp-os": "0","pp-placeid": unique_id,"pp-suid": unique_id,"pp_storeid": unique_id,"pragma": "no-cache","priority": "u=1, i","sec-fetch-dest": "empty","sec-fetch-mode": "cors","sec-fetch-site": "cross-site","shopping_car_hint_banner_module": "1","sign-v2": result['sign'],"spu_shopping_guide_link_ab": "1","timestamp": str(result["timestamp"]),
}
url = "product/recall"
data = {"card_line": 1,"page": 1,"size": 20,"area_list": [],"area_second_id": "","is_top": 0
}
data = json.dumps(data, separators=(',', ':'))
response = requests.post(url, headers=headers, data=data)print(response.text)
print(response)

结果

总结

1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。