Shulou(Shulou.com)06/01 Report--

This article introduces the relevant knowledge of "what is the reverse method of JS". In the operation of actual cases, many people will encounter such a dilemma, so let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

Target website: aHR0cDovL3poYW9waW4uYmFpZHUuY29tLw==

Open the site and you can see that a request has been captured under the XHR filter in the NetWork panel.

One of the parameters for this request is a token parameter.

If you do too many crawlers, your hands will itch when you see such a string of ciphertext, but you will often be easily deceived by yourself.

According to the custom, I searched this string of ciphertext first and found that it didn't hit.

So he began to rub his hands and get ready to do a big job.

Location encryption

The normal analysis logic is:

Retrieve the parameter name token, and there are five results. If you are patient, you can find the following location. In fact, the analysis is over here, and the value is obvious.

That is, the value of window.zp_pc_nekot is reversed, and the value of window.zp_pc_nekot is in the source code of the home page.

Retrieval parameters can produce results, which is troublesome, but sometimes it is easy to use.

But!

Reverse beginners sometimes ignore the steps of parameter retrieval when they see a XHR request, regardless of whether they go directly to the xhr breakpoint, but they can't see the stack when they hit the breakpoint, complicating a very simple problem.

This is the end of the content of "what is the reverse method of JS". Thank you for your reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.