CodingGo control technology street community democracy and freedom of programming self-study Internet Platform Responsibility Editor Translator ❈ Translator:Moon.com, DD91 Door No.: https://www.jianshu.com/u/ 680e0e38ddc9 ❈ eagerly awaiting shi out ah, tencent demo login finally to be presented in our moment, a period of time before the hard work, and in the morning have to rest quickly, this poem was written for a good two days before the successful completion. After the success of this, I was eager to try Tencent notepad other USB at the same time to see if you can upload the server documents to notepad, alas, there are also a few T of internal space to log on to the Tencent first to clear the application memory, shut down Charles, log on to a Tencent web page, intercepted to log on to the operation process. Originally wanted to change huh poetry creation document format, durable some, but after thinking about it, or in accordance with the order of prediction to write, which helps us to introduce a prediction of the way to read the last NetEase blog PC demo into the occupation of if you know, specifically to find out to log in the promise, usually post, door number login. promise to find out, module ...... Too much TM first review huh module, usually out of order, chaotic number, there is no guideline module may be a change module, the other is usually generally speaking module in short, can also be several times to log in Tourbe, against the huh about can also be confirmed so we confirm huh change module: token, tt (timestamp), codestring, gid, The module prediction confirms the module that needs to be predicted, but what about the other modules to start predicting? casually usually a lot of modules are close to each other, for example, the promise of the token module must be gid module here I do not go one by one to predict the intimacy of the module, directly to the ah module gid on the one hand, other modules need it, in addition to this module is completely generated by the local js. First, look at the module to search for the value of the huh, no. So we then search huh this name, that is, gid, said before we usually look for xxx = this kind of, first of all to search huh gid = click loginv4_9f3632a.js, and then in the JavaScript tab search gid = there are a number of, I circled this getqrcode?promise, why pinch? I circled the getqrcode? promise, why? Look at the picture, let's find this promise and see the gid value in the promise? With our login gid is the same, then confirm that this is the place, gid = e.guideRandom, and then in this script search huh guideRandom and then translate huh this js, which ...... On their own to figure out the module token first search token's worth to allow the door number: https://passport.baidu.com/v2/api/?getapi&tpl=mn&apiver=v3&tt=1520951400830&class= login&gid=E8ED064-D480-4F3E-A5CE-BCF25F8DD1E2&loginversion=v4&logintype=dialogLogin&traceid=&callback=bd__cbs __6l1agx left callback, other promises also need callback this search huh bd__cbs__, why search this? This is really painful, callback search out a large, and did not see what valid data, the value of the search can not, then search half of it, you ask me why? Sixth sense, whether you believe it or not, anyway, I believe it in fact, there are several promises have this module callback, and then we review the laws of these callback, basically this bd __cbs__ did not change, so you can search huh it try, searched two predictions huh this identifier, basically c.getUniqueId this function, search! Oh this function oj8k, to find out, the identifier posted below, why so written? Check js to go, in short, there are simpler pyv8 or psexecjsToken here I have to say again huh, module we predicted finished, you think promise on the success of the Oh!yeah, before we are to get all the promise module on the access to the success of the here stuck me for a long time. So encountered this situation to start from that a few points, specifically I think of cookies and then go up to find Set Cookie place to visit the home page to get four cookie values, H_PS_PSSID, BIDUPSID, PSTM, BAIDUID here to find out a BDORZ, the home page is very simple, there is no module, pay attention to this! Several modules, just above the four cookies, t is a timestamp, the module are done, so the Token cookies are also done, finally can get success, Tu Piao Tucheng, or not MMP, cookies to get done are not working, I still have a trick, Yuno head! I've got a trick up my sleeve. Rango .... count you hard, but I will not easily admit defeat debugging his mother, over and over again, two times three times four or five times, a variety of postures have tried, finally the climax is coming, damn promise is not the same first on the map application of the normal promise procedure to send the promise to see not the same right, why is it? We use requests library, get promise I am more accustomed to use.get(url, params=data), the module with the params of the way to pass, and then look at huh Token promise module getapi is empty, it is clear that data = { "getapi":"", "tpl": "mn", .... } session.get(url, params=data) then the promise sent is /v2/api/?getapi=&tpl=mn&.... The normal promise is /v2/api/?getapi&tpl=mn&... I can't believe there's this kind of operation, it's really the first time I've encountered it, change huh data = { "tpl": "mn", ... } url = "... /v2/api/?getapi&{ }".format(urlencode(data)) session.get(url) to here is considered OK, finally summed up huh, the promise of that pit, the promise of the header in the Referer, cookies, finally you can say a word about the OJ8K module dv why to say first this dv, specifically this I did not fully crack, in addition, even if you use the value in general, it does not affect the results, this can not be said in detail, otherwise have to be several posts, we first search for dv = switch to the javascript tab we can search for huh dv_Input this control, it is not, I do not show, and then if it is window.LG_DV_ARG here have dvjsinput, the above picture we also see this, switch to the javascript tab to see huh and then close the application, clear the memory, close the incognito window, close the developer tools, visit the Tencent home page to review the characteristics of huh dv value, you can look for some of the more distinctive part of the search for huh, such as tk, @, so that as far as possible to minimise the debugging of our js operation process, because it is really painful in the console inside the implementation of huh this calculation, with our dv front value is not similar, that is it, whether you are not I think it is. Then search again huh @ just calculated Token + @ + Ue (xx), this is certainly dv, as for Ue Well, I did not get it done, but found that there is no point in writing in general the value can also be, and do not have to bother to find this. Summer is coming, recommend a hip T-shirt! Click below to read the original text, to join the programme design mutual self-study community!