京东cfe滑块 分析

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析

headers = {"accept": "application/json, text/plain, */*","accept-language": "zh-CN,zh;q=0.9","cache-control": "no-cache","content-type": "application/x-www-form-urlencoded;charset=UTF-8","origin": "",'cookie':f'',"pragma": "no-cache","priority": "u=1, i","referer": "","sec-ch-ua": "\"Chromium\";v=\"130\", \"Microsoft Edge\";v=\"130\", \"Not?A_Brand\";v=\"99\"","sec-ch-ua-mobile": "?0","sec-ch-ua-platform": "\"Windows\"","sec-fetch-dest": "empty","sec-fetch-mode": "cors","sec-fetch-site": "same-site","user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0","x-rp-client": "h5_1.0.0"
}
with open('b1.jpg','rb') as fp:background_bytes = fp.read()
with open('b2.png','rb') as fp:target_bytes = fp.read()
res = det.slide_match(target_bytes, background_bytes, simple_target=True)
distance = round(res['target'][0])
result = cp.call('verify',distance,sid,imgJsonStr,st)
data = result['data']
url = "/api/check"response = session.post(url, headers=headers, data=data)
data = response.json()
print(data)

结果

总结

  1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。