证券简称:天融信 证券代码:002212
全天候7x24小时服务: 400-777-0777

实战 | 羊了个羊(小程序抓包工具推荐)-凯发k8国际首页登录

任何个人和组织使用网络应当遵守宪法法律,遵守公共秩序,尊重社会公德,不得危害网络安全,不得利用网络从事危害国家安全、荣誉和利益。
发布时间:2022-09-16
浏览次数:5664
分享:

遵纪守法

任何个人和组织使用网络应当遵守宪法法律,遵守公共秩序,尊重社会公德,不得危害网络安全,不得利用网络从事危害国家安全、荣誉和利益。

目标:羊了个羊小程序

使用工具:http debugger pro 9.11(公众号回复0916获取)

环境:微信任意版本

思路

点击开始游戏后用http debugger pro 9.11抓取数据包,发现特别的两个请求文件分析了一下这是请求关卡数据,得到关卡id分别为80001和90016,分析了一下确定90016是第二关也就是难度比较高的关卡

数据包抓取,这里使用http debugger pro 9.11可轻松抓取

获取token

第一关数据包

get /sheep/v1/game/map_info?map_id=80001 http/2

host: cat-match.easygame2021.com

xweb_xhr: 1

t: token

user-agent: mozilla/5.0 (windows nt 6.1; wow64) applewebkit/537.36 (khtml, like gecko)chrome/81.0.4044.138 safari/537.36 micromessenger/7.0.4.501 nettype/wifi miniprogramenv/windows windowswechat/wmpf

content-type: application/json

accept: */*

sec-fetch-site: cross-site

sec-fetch-mode: cors

sec-fetch-dest: empty

referer: https://servicewechat.com/wx141bfb9b73c970a9/15/index.html

accept-encoding: gzip, deflate

accept-language: en-us,en

返回数据包

http/2 200 ok

date: fri, 16 sep 2022 00:20:54 gmt

content-type: application/json; charset=utf-8

access-control-allow-credentials: true

access-control-allow-headers: origin, x-requested-with, content-type, accept

access-control-allow-methods: get, post

{"err_code":0,"err_msg":"","data":{"id":"62ccde7d3dd1931da84a84e2","created_at":"2022-07-12t02:37:49.515z","updated_at":"2022-09-

14t15:53:23.508z","map_option":2,"map_id":80001,"map_data":"{\"widthnum\":8,\"heightnum\":10,\"levelkey\":80001,\"blocktypedata\":{\"1\":2,\"4\":1,\"13\":2},\"leveldata\":{\"1\":[{\"id\":\"1-16-16\",\"type\":0,\"rolnum\":16,\"rownum\":16,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-28-16\",\"type\":0,\"rolnum\":28,\"rownum\":16,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-40-16\",\"type\":0,\"rolnum\":40,\"rownum\":16,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-16-32\",\"type\":0,\"rolnum\":16,\"rownum\":32,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-28-32\",\"type\":0,\"rolnum\":28,\"rownum\":32,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-40-32\",\"type\":0,\"rolnum\":40,\"rownum\":32,\"layernum\":1,\"moldtype\":1,\"blocknode\":null},{\"id\":\"1-16-48\",\"type\":0,\"rolnum\":16,\"rownum\":48,\"layernum\":1,\"moldtype\":2,\"blocknode\":null},{\"id\":\"1-28-48\",\"type\":0,\"rolnum\":28,\"rownum\":48,\"layernum\":1,\"moldtype\":2,\"blocknode\":null},{\"id\":\"1-40-48\",\"type\":0,\"rolnum\":40,\"rownum\":48,\"layernum\":1,\"moldtype\":2,\"blocknode\":null}],\"2\":[{\"id\":\"2-16-49\",\"type\":0,\"rolnum\":16,\"rownum\":49,\"layernum\":2,\"moldtype\":2,\"blocknode\":null},{\"id\":\"2-28-49\",\"type\":0,\"rolnum\":28,\"rownum\":49,\"layernum\":2,\"moldtype\":2,\"blocknode\":null},{\"id\":\"2-40-49\",\"type\":0,\"rolnum\":40,\"rownum\":49,\"layernum\":2,\"moldtype\":2,\"blocknode\":null},{\"id\":\"2-16-20\",\"type\":1,\"rolnum\":16,\"rownum\":20,\"layernum\":2,\"moldtype\":1,\"blocknode\":null},{\"id\":\"2-28-20\",\"type\":1,\"rolnum\":28,\"rownum\":20,\"layernum\":2,\"moldtype\":1,\"blocknode\":null},{\"id\":\"2-40-20\",\"type\":1,\"rolnum\":40,\"rownum\":20,\"layernum\":2,\"moldtype\":1,\"blocknode\":null},{\"id\":\"2-16-36\",\"type\":0,\"rolnum\":16,\"rownum\":36,\"layernum\":2,\"moldtype\":1,\"blocknode\":null},{\"id\":\"2-28-36\",\"type\":0,\"rolnum\":28,\"rownum\":36,\"layernum\":2,\"moldtype\":1,\"blocknode\":null},{\"id\":\"2-40-36\",\"type\":0,\"rolnum\":40,\"rownum\":36,\"layernum\":2,\"moldtype\":1,\"blocknode\":null}]}}"}}

第二关请求包

get /sheep/v1/game/game_over?rank_score=1&rank_state=1&rank_time=24&rank_role=1&skin=1 http/2

host: cat-match.easygame2021.com

xweb_xhr: 1

t: token

user-agent: mozilla/5.0 (windows nt 6.1; wow64) applewebkit/537.36 (khtml, like gecko) chrome/81.0.4044.138 safari/537.36 micromessenger/7.0.4.501 nettype/wifi miniprogramenv/windows windowswechat/wmpf

content-type: application/json

accept: */*

sec-fetch-site: cross-site

sec-fetch-mode: cors

sec-fetch-dest: empty

referer: https://servicewechat.com/wx141bfb9b73c970a9/15/index.html

accept-encoding: gzip, deflate

accept-language: en-us,en

poc&exp

「python」

import requests

headers = {

"accept-encoding": "gzip,compress,br,deflate",

"accept": "*/*",

"connection": "keep-alive",

"t": "你的token",

'user-agent': "mozilla/5.0 (iphone; cpu iphone os 15_6 like mac os x) applewebkit/605.1.15 (khtml, like gecko) mobile/15e148 micromessenger/8.0.26(0x18001a34) nettype/wifi language/zh_cn"

}

cookies = {}

def testrequest():

url = 'https://cat-match.easygame2021.com/sheep/v1/game/game_over?rank_score=1&rank_state=1&rank_time=0&rank_role=1&skin=1'

wb_data = requests.get(url, headers=headers)

print("code:", wb_data.status_code)

if __name__ == '__main__':

for lp in range(520):

testrequest()

「易语言」

来自神奇的论坛

https://wwi.lanzoup.com/b00q4pgif 密码:5ajq

想刷多少次就多次

关键词标签:
天融信 小程序抓包工具 网络安全
在线咨询





在线留言





客户服务热线

400-777-0777
7*24小时服务

联系邮箱

servicing@topsec.com.cn

扫码关注
网站地图