有人知道这是什么验证吗 求大佬看看 目前是抓包是GET请求

别在乎泽崽

大概分成了四步加上心跳   目前OD得出了RC4加解密密钥
初始化是 http://***.***.***.***:333/a.php?wtype=1&appid=7&secretKey=D7F31CA465BD02DD6B97395415ACFC7C&macCode=25DAB8E1C71154DA7D466ADC05762***&timestamp=1766217222&sign=f4896414e68c9122c5c8edebdc7b8419

登录验证http://***.***.**.***:333/a.php?wtype=8&appid=7&secretKey=D7F31CA465BD02DD6B97395415ACFC7C&macCode=25DAB8E1C71154DA7D466ADC0****D&timestamp=1765129880&sign=6b824f65c445896e14b2e3977fd14c3f&account=&password=&yonghuip=****
返回的数据是十六进制文本类似于
247EC3AFEDD86DF9692968E78F1BCAD4917D3267CFF989AC05A4ED3A5A190FDFDB105515D5100E6910F39F9AC2E60C9BDFC1CBC178986CFF94B9C324C7F6A9F71907BD2BDCF98C4F955C386BBD56511D8658A3D6C05A0AE07B1A709B1E7A5A6FF44979058BD7319644455E79D5436E7FD54B6A7D862DE9184AC1F8E769D64ED90B65FD6DD9B8DAFE9BD60BC9A5AD60085A6867B5C9478C1C46C77A07A314513677A319615ED414154AB16BE765A686126060E1DA18730698CBD04CBD79B717EC18C20675BDC28D5BFF653CB264087D2D39D98493C86B61659FFC201D45ABEE99141DAD5DE78A6142D7658108E545718DF8D1492E54


采用RC4加解密解密后是这种
code=1000|x|msg=success|x|timestamp=1769167097|x|number=1|x|state=0|x|ExpirationTime=2025-12-13 14:54:51|x|point=|x|RealName=0|x|remarks=|x|Usergroup=未分组|x|UsergroupId=0|x|invitingCode=|x|agent=|x|rmb=|x|token=25DAB8E1C71154DA7D466ADC0576****

返回都是十六进制文本

但是第二波验证是
http://***.***.***.***:333/a.php?wtype=177&appid=7&secretKey=D7F31CA465BD02DD6B97395415ACFC7C&macCode=25DAB8E1C71154DA7D466ADC05****&timestamp=1765129913&sign=30962d6b2e528923e22cf38b29092452&account=&usergroupid=0&token=25DAB8E1C71154DA7D466ADC***&keyName={67,121,66,116,109,78,68,80,87,114,56,54,117,47,82,82,72,53,69,71,50,101,115,89,82,67,66,83,47,98,48,86,78,69,54,114,122,108,76,54,70,55,76,74,53,55,80,47,98,73,57,80,100,75,79,97,114,52,48,52,57,98,101,48,90,118,110,65,47,49,101,110,49,73,70,73,118,102,87,100,52,65,77,86,104,81,61,61}
&keyKK=1765129930002

返回数据解密后是
code=1000|x|msg=success|x|timestamp=1769167113|x|variable={48,81,68,83,118,115,87,113,113,116,102,72,50,68,83,70,97,87,90,47,55,109,79,108,88,81,69,79,112,70,52,116,71,115,119,98,70,53,117,57,68,54,122,69,53,112,87,84,79,73,103,52,75,71,71,47,121,103,86,87,100,84,72,87,48,47,88,88,122,57,55,88,116,88,56,61}

这个variable貌似采用了DES加解密 用的好像是V8那个js的加解密

看了好多网络验证找不到一个像的 这个服务端不知道是怎么样的不挑协议用PUT协议照样返回正常数据