ali140补环境介绍

monkey_slh

已于 2025-03-01 17:48:18 修改

阅读量503

点赞数 10

分类专栏： JS逆向文章标签： js 爬虫 javascript python 网络爬虫

于 2025-02-28 21:37:46 首次发布

本文链接：https://blog.youkuaiyun.com/m0_56535661/article/details/145937999

版权

JS逆向专栏收录该内容

14 篇文章

订阅专栏

JS逆向实战——ali140滑块补环境

声明
网站
流程分析
结果展示
总结

声明

本文章中所有内容仅供学习交流，抓包内容、敏感网址、数据接口均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关，若有侵权，请联系我立即删除！

网站

aHR0cHM6Ly9wYXNzcG9ydC56Y29vbC5jb20uY24vbG9naW5BcHAuZG8/YXBwSWQ9MTAwNiZjYmFjaz1odHRwcyUzQSUyRiUyRnd3dy56Y29vbC5jb20uY24lMkY=

相比于231，140的环境相对少了很多，也更适合作为补环境练习，下面进入正题。

流程分析

抓包找到接口进行跟栈，也就几个栈，稍微跟一下就可以找到加密位置了

在这里插入图片描述

跟到上面这个加密入口，再往下走一步，进到collina.js就可以看到加密生成的位置。

在这里插入图片描述

将整个js扣下来，导出e就可以开始补环境了

在这里插入图片描述

挂上代理常规补环境即可，需要补的比较多的地方还是canvas，可以简单的像下面这样补一下即可，其它看着代理补下来没啥问题，就不过多介绍了

if (tag === 'canvas'){
    return {
        getContext: function (tag){
            if (tag === 'webgl'){
                return {
                    getExtension: function (tag){
                        if (tag === 'WEBGL_debug_renderer_info'){
                            return {
                                UNMASKED_VENDOR_WEBGL: 37445,
                                UNMASKED_RENDERER_WEBGL: 37446
                            }
                        }
                    },
                    getParameter: function (tag){
                        if (tag === 37445){
                            return "Google Inc. (Intel)"
                        }
                        if (tag === 37446){
                            return "ANGLE (Intel, Intel(R) Iris(R) Xe Graphics (0x00009A49) Direct3D11 vs_5_0 ps_5_0, D3D11)"
                        }
                    }
                }
            }
            if (tag === '2d'){
                return {
                    fillRect: function(){},
                    fillText: function(){}
                }
            }
        },
        getAttributeNames: function(){},
        style: {},
        toDataURL: function(){
            return 'data:image/png;base64,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'
        }
    }
}