遵紀(jì)守法
任何個(gè)人和組織使用網(wǎng)絡(luò)應(yīng)當(dāng)遵守憲法法律,遵守公共秩序,尊重社會(huì)公德,不得危害網(wǎng)絡(luò)安全,不得利用網(wǎng)絡(luò)從事危害國家安全、榮譽(yù)和利益。
目標(biāo):羊了個(gè)羊小程序
使用工具:HTTP Debugger Pro 9.11(公眾號(hào)回復(fù)0916獲?。?/span>
環(huán)境:微信任意版本
思路
點(diǎn)擊開始游戲后用HTTP Debugger Pro 9.11抓取數(shù)據(jù)包,發(fā)現(xiàn)特別的兩個(gè)請(qǐng)求文件分析了一下這是請(qǐng)求關(guān)卡數(shù)據(jù),得到關(guān)卡id分別為80001和90016,分析了一下確定90016是第二關(guān)也就是難度比較高的關(guān)卡
數(shù)據(jù)包抓取,這里使用HTTP Debugger Pro 9.11可輕松抓取

獲取token

第一關(guān)數(shù)據(jù)包
GET /sheep/v1/game/map_info?map_id=80001 HTTP/2
Host: cat-match.easygame2021.com
Xweb_xhr: 1
T: TOKEN
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/81.0.4044.138 Safari/537.36 MicroMessenger/7.0.4.501 NetType/WIFI MiniProgramEnv/Windows WindowsWechat/WMPF
Content-Type: application/json
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://servicewechat.com/wx141bfb9b73c970a9/15/index.html
Accept-Encoding: gzip, deflate
Accept-Language: en-us,en
返回?cái)?shù)據(jù)包
HTTP/2 200 OK
Date: Fri, 16 Sep 2022 00:20:54 GMT
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: GET, POST
{"err_code":0,"err_msg":"","data":{"id":"62ccde7d3dd1931da84a84e2","created_at":"2022-07-12T02:37:49.515Z","updated_at":"2022-09-
14T15:53:23.508Z","map_option":2,"map_id":80001,"map_data":"{\"widthNum\":8,\"heightNum\":10,\"levelKey\":80001,\"blockTypeData\":{\"1\":2,\"4\":1,\"13\":2},\"levelData\":{\"1\":[{\"id\":\"1-16-16\",\"type\":0,\"rolNum\":16,\"rowNum\":16,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-28-16\",\"type\":0,\"rolNum\":28,\"rowNum\":16,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-40-16\",\"type\":0,\"rolNum\":40,\"rowNum\":16,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-16-32\",\"type\":0,\"rolNum\":16,\"rowNum\":32,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-28-32\",\"type\":0,\"rolNum\":28,\"rowNum\":32,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-40-32\",\"type\":0,\"rolNum\":40,\"rowNum\":32,\"layerNum\":1,\"moldType\":1,\"blockNode\":null},{\"id\":\"1-16-48\",\"type\":0,\"rolNum\":16,\"rowNum\":48,\"layerNum\":1,\"moldType\":2,\"blockNode\":null},{\"id\":\"1-28-48\",\"type\":0,\"rolNum\":28,\"rowNum\":48,\"layerNum\":1,\"moldType\":2,\"blockNode\":null},{\"id\":\"1-40-48\",\"type\":0,\"rolNum\":40,\"rowNum\":48,\"layerNum\":1,\"moldType\":2,\"blockNode\":null}],\"2\":[{\"id\":\"2-16-49\",\"type\":0,\"rolNum\":16,\"rowNum\":49,\"layerNum\":2,\"moldType\":2,\"blockNode\":null},{\"id\":\"2-28-49\",\"type\":0,\"rolNum\":28,\"rowNum\":49,\"layerNum\":2,\"moldType\":2,\"blockNode\":null},{\"id\":\"2-40-49\",\"type\":0,\"rolNum\":40,\"rowNum\":49,\"layerNum\":2,\"moldType\":2,\"blockNode\":null},{\"id\":\"2-16-20\",\"type\":1,\"rolNum\":16,\"rowNum\":20,\"layerNum\":2,\"moldType\":1,\"blockNode\":null},{\"id\":\"2-28-20\",\"type\":1,\"rolNum\":28,\"rowNum\":20,\"layerNum\":2,\"moldType\":1,\"blockNode\":null},{\"id\":\"2-40-20\",\"type\":1,\"rolNum\":40,\"rowNum\":20,\"layerNum\":2,\"moldType\":1,\"blockNode\":null},{\"id\":\"2-16-36\",\"type\":0,\"rolNum\":16,\"rowNum\":36,\"layerNum\":2,\"moldType\":1,\"blockNode\":null},{\"id\":\"2-28-36\",\"type\":0,\"rolNum\":28,\"rowNum\":36,\"layerNum\":2,\"moldType\":1,\"blockNode\":null},{\"id\":\"2-40-36\",\"type\":0,\"rolNum\":40,\"rowNum\":36,\"layerNum\":2,\"moldType\":1,\"blockNode\":null}]}}"}}
第二關(guān)請(qǐng)求包
GET /sheep/v1/game/game_over?rank_score=1&rank_state=1&rank_time=24&rank_role=1&skin=1 HTTP/2
Host: cat-match.easygame2021.com
Xweb_xhr: 1
T: token
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36 MicroMessenger/7.0.4.501 NetType/WIFI MiniProgramEnv/Windows WindowsWechat/WMPF
Content-Type: application/json
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://servicewechat.com/wx141bfb9b73c970a9/15/index.html
Accept-Encoding: gzip, deflate
Accept-Language: en-us,en
POC&EXP
「python」
import requests
headers = {
"Accept-Encoding": "gzip,compress,br,deflate",
"Accept": "*/*",
"Connection": "keep-alive",
"t": "你的token",
'User-Agent': "Mozilla/5.0 (iPhone; CPU iPhone OS 15_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.26(0x18001a34) NetType/WIFI Language/zh_CN"
}
cookies = {}
def testRequest():
url = 'https://cat-match.easygame2021.com/sheep/v1/game/game_over?rank_score=1&rank_state=1&rank_time=0&rank_role=1&skin=1'
wb_data = requests.get(url, headers=headers)
print("code:", wb_data.status_code)
if __name__ == '__main__':
for lp in range(520):
testRequest()
「易語言」
來自神奇的論壇
https://wwi.lanzoup.com/b00q4pgif 密碼:5ajq
想刷多少次就多次

- 關(guān)鍵詞標(biāo)簽:
- 天融信 小程序抓包工具 網(wǎng)絡(luò)安全