【酷狗音乐】逆向登录参数分析

mid、uuid参数

从cookie里面取值kg_mid，没有就生成
dfid也是从cookie里面取的kg_dfid
清空cookie
dfid = "-"也是可以的

md5加密了一个随机uuid

import uuid
import hashlibuuid1 = str(uuid.uuid4())def md5_encrypt(text):return hashlib.md5(text.encode()).hexdigest()mid = md5_encrypt(uuid1)

signature

"NVPh5oo715z5DIWAeQlhMDsWXXQV4hwt"是固定的

params = {"appid": "1014","clienttime": "1730363913844","clientver": "1000","dfid": "3x6rwl1p3FRa34PNyh0VPqM0","mid": "c593d6e540a2b7b4f765147c81f14145","srcappid": "2919","uuid": "c593d6e540a2b7b4f765147c81f14145",
}# 按key进行排序
params_str = ''.join([f"{key}={params[key]}" for key in sorted(params.keys())])data = {"plat": 4,"clienttime_ms": 1730363913844,"businessid": 5,"pk": "2bd2832d16043742378d985e1aa51e200646801bc37b27ea3eaaec709381488dcd8661e392a69ae3aa2d6cc3ff095602e8e2b0e61233c14bf2d417affb2a35efdf686dbf5ec1e469da38cdd780ba4b2a5fff2a8add479c20d706ac6e56836270c564aac53bfd2a50c27a9f672b803bdc0b888dbba338d0d13eb8035987a2231e","params": "ee7f87e5c3f33dd79680c78019fafbf2b20d52eeadb29936e50e0f2132c26a3c","mobile": "17********6"
}
data_str = json.dumps(data, separators=(',', ':'))y = "NVPh5oo715z5DIWAeQlhMDsWXXQV4hwt"signature = md5_encrypt(y + params_str + data_str + y).upper()
print(signature)

结果完全没有问题

data参数

const CryptoJS = require('crypto-js');// md5加密
function MD5encrypt(text) {return CryptoJS.MD5(text).toString();
}function AES_encrypt(e, t, r, i) {return t = t || function(e) {for (var t = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"], r = "", i = 0; i < e; i++)r += t[Math.ceil(35 * Math.random())];return r}(16),r = r || MD5encrypt(t).substring(0, 32),i = i || r.substring(r.length - 16, r.length),{key: t,encryptedStr: CryptoJS.AES.encrypt(e, CryptoJS.enc.Utf8.parse(r), {iv: CryptoJS.enc.Utf8.parse(i),padding: CryptoJS.pad.Pkcs7}).ciphertext.toString()}
}t = AES_encrypt(JSON.stringify('17788123456'))
console.log(t);

本地实现RSA加密好像不行
那就用网页的源代码的rsa加密