喜闻乐见,我破我自己lol

总之就是来逆向下freecookie的账号获取逻辑 闲的没事干了

前期准备

首先先给网页整个下载下来

.
│  FreeCookie.htm
│
└─FreeCookie_files
        eduser.css
        kico.css
        kico.js
        main.css
        obf.js
        sha256.min.js
        simple-ad.js

所以通过瞪眼法发现 获取账号的逻辑位于 obf.js

接下来对他进行一个 DEOBF?

脱离浏览器实现获取。。。

绝赞逆向中

通过抓阄成功破甲🤪🎉🎉

PoW: challenge=79193d1ca5e2b185137747c9a48b3d5a:1762835379, difficulty=4
1000/10000000
2000/10000000
3000/10000000
4000/10000000
5000/10000000
6000/10000000
7000/10000000
8000/10000000
9000/10000000
10000/10000000
11000/10000000
12000/10000000
13000/10000000
14000/10000000
15000/10000000
16000/10000000
17000/10000000
18000/10000000
19000/10000000
20000/10000000
21000/10000000
22000/10000000
23000/10000000
24000/10000000
25000/10000000
26000/10000000
27000/10000000
28000/10000000
29000/10000000
30000/10000000
31000/10000000
32000/10000000
33000/10000000
34000/10000000
35000/10000000
36000/10000000
37000/10000000
38000/10000000
39000/10000000
40000/10000000
41000/10000000
42000/10000000
43000/10000000
44000/10000000
done: nonce=44933 time: 0.43
get
acc FWEpRSoRClJ2
pass SqNryfpBIXwW
cookie {"sauth_json":"{\"gameid\":\"x19\",\"login_channel...

标签: none

添加新评论