滴滴出行 wsgsig逆向

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向过程

部分python代码

cp = execjs.compile(open('wsgsig.js','r',encoding='utf-8', errors='ignore').read())
data = {
"page": 1,
"page_size": 10,
"scene": 1,
"order_status_str": "1,2,3",
"order_by": 2
}
wsgsig = cp.call('get_result',{
"body": data,
"contentType": "application/json"
})
print(wsgsig)

headers = {
"Accept-Language": "zh-CN,zh;q=0.9",
"Cache-Control": "no-cache",
"Connection": "keep-alive",
"wsgsig": wsgsig
}
cookies = {

}

url = "ota/rental/scm/order/list/v2"

data = json.dumps(data, separators=(',', ':'))
response = requests.post(url, headers=headers, cookies=cookies, data=data)

cp = execjs.compile(open('vm.js','r',encoding='utf-8', errors='ignore').read()) data = { "page": 1, "page_size": 10, "scene": 1, "order_status_str": "1,2,3", "order_by": 2 } wsgsig = cp.call('get_result',{ "body": data, "contentType": "application/json" }) print(wsgsig) headers = { "Accept-Language": "zh-CN,zh;q=0.9", "Cache-Control": "no-cache", "Connection": "keep-alive", "wsgsig": wsgsig } cookies = { } url = "ota/rental/scm/order/list/v2" data = json.dumps(data, separators=(',', ':')) response = requests.post(url, headers=headers, cookies=cookies, data=data)

结果

总结

1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。