xx客滑块
- 网址
- 流程
- 1、访问首页,得到网页源代码得到 sessionId
- 2、生成dInfo参数(getInfoTp接口使用到),是AES 加密(不校验)
- 3、访问 /captcha/getInfoTp 得到responseId (可以认为是图片id)和图片url
- 4、得到 滑块和背景图 /captcha/captcha_img?rid= responseId&it=xxxx,获取滑动距离和轨迹
- 5、访问 /captcha/checkInfoTp
- 6、提示校验失败就是轨迹问题,可以使用缩放法,或者生成本地轨迹库
网址
aHR0cHM6Ly9hcGkuYW5qdWtlLmNvbS93ZWIvZ2VuZXJhbC9jYXB0Y2hhTmV3Lmh0bWw/Y3Y9NS4wJnNlcmlhbElEPWNiNjBmNDE3ZDUxYjNlNTNlMjBkMTNiNWYxNTJlMzk1X2ViYTY5ODRhYWNmZTQ0MmZhZTNmYzc5YTc0YWViNjEyJm5hbWVfc3BhY2U9YW5qdWtlX2NfeGlhb2NoZW5neHUmX3VubGVzcz11bmxlc3M=
流程
1、访问首页,得到网页源代码得到 sessionId
2、生成dInfo参数(getInfoTp接口使用到),是AES 加密(不校验)
//将下面的对象(只有busurl需要修改),转json字符串后,进行aes加密,key和iv都是sessionid处理得到的
{
"sdkv": "3.0.1",
"busurl": "https://api.anjuke.com/web/general/captchaNew.html?cv=5.0&serialID=cb60f417d51b3e53e20d13b5f152e395_eba6984aacfe442fae3fc79a74aeb612&name_space=anjuke_c_xiaochengxu&_unless=unless",
"useragent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51",
"clienttype": "1"
}
3、访问 /captcha/getInfoTp 得到responseId (可以认为是图片id)和图片url
getInfoTp接口返回解密为:
{
"level": 310,
"isimgUrls": 1,
"bgImgUrl": "https://wos3.58cdn.com.cn/HimeDcBazHkN/captchaimg/14560a83-83d6-4b84-a7b8-bc4d4fbd9312.png",
"width": "280",
"tip": "请点击并将滑块拖动到指定位置",
"puzzleImgUrl": "https://wos3.58cdn.com.cn/HimeDcBazHkN/captchaimg/ced51c4d-fd6d-4835-ae2d-42c3ff1e29e9.png",
"type": "1"
}
4、得到 滑块和背景图 /captcha/captcha_img?rid= responseId&it=xxxx,获取滑动距离和轨迹
5、访问 /captcha/checkInfoTp
//data明文:
{
"x": 62,
"track": "28,18,0|29,18,62|30,18,66|31,18,69|32,18,73|33,18,76|34,18,76|35,18,80|36,18,82|37,18,84|38,18,85|39,18,87|40,18,90|41,18,91|42,18,93|43,18,95|44,18,98|45,18,98|46,18,102|47,18,102|48,18,104|49,18,106|49,19,107|50,19,108|51,19,111|52,19,115|53,19,116|54,19,117|55,19,120|55,20,121|56,20,123|57,20,125|58,20,128|59,20,132|60,20,137|61,20,141|62,20,145|62,20,215|",
"p": [
0,
0
]
}