京东创作者平台 旋转验证码 t27 分析

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

部分Python代码

result = data['result']
sessionId = result['sessionId']
url = "/api/fp"
cp = execjs.compile(open('run.js', 'r', encoding='utf-8').read())
data = cp.call('getFp', sessionId)
data = response.json()
print(data)
img = data['img']
b1 = json.loads(img)['b1']
b2 = json.loads(img)['b2']
base_b1 = b1.replace('data:image/png;base64,', '').replace('data:image/jpg;base64,', '')
base_b2 = b2.replace('data:image/png;base64,', '').replace('data:image/jpg;base64,', '')
print(base_b2)
with open(f'./bg.png', 'wb') as fp:
    fp.write(base64.b64decode(base_b2))
with open(f'./fg.png', 'wb') as fp:
    fp.write(base64.b64decode(base_b1))

# 加载模型
....................
model.load_state_dict(torch.load("best_rotation_model.pth", map_location=device))
image_path = f'./fg.png'
..................
result = cp.call('verify', st, sessionId, img, distance)
url = "cgi-bin/api/check"
response = session.post(url, headers=headers, data=data)
data = response.json()
print(data)

result = data['result']
sessionId = result['sessionId']
url = "/api/fp"
cp = execjs.compile(open('run.js', 'r', encoding='utf-8').read())
data = cp.call('getFp', sessionId)
data = response.json()
print(data)
img = data['img']
b1 = json.loads(img)['b1']
b2 = json.loads(img)['b2']
base_b1 = b1.replace('data:image/png;base64,', '').replace('data:image/jpg;base64,', '')
base_b2 = b2.replace('data:image/png;base64,', '').replace('data:image/jpg;base64,', '')
print(base_b2)
with open(f'./bg.png', 'wb') as fp:
    fp.write(base64.b64decode(base_b2))
with open(f'./fg.png', 'wb') as fp:
    fp.write(base64.b64decode(base_b1))

# 加载模型
....................
model.load_state_dict(torch.load("best_rotation_model.pth", map_location=device))
image_path = f'./fg.png'
..................
result = cp.call('verify', st, sessionId, img, distance)
url = "cgi-bin/api/check"
response = session.post(url, headers=headers, data=data)
data = response.json()
print(data)

结果

总结

  1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。