Shulou(Shulou.com)06/01 Report--

This article mainly introduces "JS reverse how to achieve Air China login". In the daily operation, I believe that many people have doubts about how to achieve Air China login in JS reverse. The editor consulted all kinds of materials and sorted out simple and easy-to-use operation methods. I hope it will be helpful to answer the doubt of "JS reverse how to achieve Air China login". Next, please follow the editor to study!

Grab the bag

The following is the login capture package:

Obviously, the userName and password parameters are encrypted.

Global search parameter userType or upassword. Because the JS code generally takes the corresponding value according to the id tag of the input box, and then encrypts it!

Id tag

The search results are as follows:

Result

Guess should be RSA encryption!

Analysis.

Make a breakpoint at the encrypted location and resend the request:

Where RSAUtils is an object and encryptedString is a function in this object, so let's first find out the definition of this object.

Click this function to enter, and you can find that the definition of RSAUtils and its corresponding functions are all in this JS file. Copy all the JS codes in this file directly with a shuttle:

Notice that the bodyRSA () function is executed before encrypting userName and password.

So also copy the JS code corresponding to the bodyRSA function. The final local JS file is as follows:

Finally, write a JS function, execute it, and compare it with the data captured by the package to verify the result:

At this point, the study on "JS reverse how to achieve Air China login" is over. I hope to be able to solve everyone's doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.