破解＊秀直播登录

登录接口汇编伪代码：

void -[QXLoginViewController loginAction](void * self, void * _cmd) {‘

r7 = (sp – 0x4 – 0x4 – 0x4 – 0x4 – 0x4) + 0xc;

sp = sp – 0x4 – 0x4 – 0x4 – 0x4 – 0x4 – 0x4 – 0x4 – 0x4 – 0x44;

r8 = self;

r10 = *0x1a86288;

r11 = @selector(text);

r0 = *(r8 + r10);

loc_e0b008(r0, r11);

r7 = r7;

r5 = loc_e0b02c();

r6 = @selector(isEqualToString:);

if ((loc_e0b008(r5, r6, @”“) & 0xff) != 0x0) {

}

else {

@selector(longin2QiYi:passwd:vcode:completionBlockWithSuccess:completionBlockWithFailure:), stack[2051], stack[2052], r6, sp + 0x2c, sp + 0x14);

}

return;
}

抓包请求：

https://passport.iqiyi.com/apis/reglogin/mobile_login.action

request:

PTID 0203301

QC005 C9B9F2E0-

agenttype 120

device_id C9B9F2E0-

email 159

passwd nK/M39kRG6XWiDt0

textKey 1

vcode

cokie:

P00004 -899118908.14733 QC005 da0a84de35f835

respond:

{ “data”: { “guid”: { “privilege_content”: “绑定手机 ，可以更好地保护您的账 安全，保护个人信息和记录不被侵害。”, “choose_content”: “我愿意接收短信，了解最新资讯”, “bind_type”: 3, “accept_notice”: 0 }, “qiyi_vip_info”: { “name”: “159*”, “level”: “2”, “vipType”: “1”, “autoRenew”: “0”, “payType”: “0”, “status”: “1”, “type”: “1”, “mobile”: “159”, “surplus”: “48”, “deadline”: { “t”: 14770, “date”: “2016年10月” } }, “authcookie”: “42”, “token”: null, “level_info”: null, “pps_vip_info”: { “vip_type”: 0, “level_moon”: “00”, “level_star”: “01”, “level_sun”: “00”, “pps_bean”: 0, “pps_level”: 1, “vip_expire”: “”, “user_id”: 1675, “vip_remain_day”: 0, “skip_ad”: 1 }, “userinfo”: { “email”: “”, “phone”: “159”, “uid”: “120”, “user_name”: “159”, “macid”: null, “nickname”: “159***”, “real_name”: null, “work”: null, “pwdScore”: 35, “activated”: 0, “pru”: 126, “birthday”: null, “suid”: “1265”, “jointime”: “1445”, “regip”: “138”, “accountType”: 11, “city”: null, “province”: null, “self_intro”: null, “gender”: null, “edu”: null, “income”: null, “industry”: null, “idCard”: null, “find_pass_email”: null, “icon”: “http://www.qiyipic.com/common/fix/headicons/male-70.png“, “status”: null }, “guide_to_bind_phone”: false }, “code”: “A00000”, “msg”: null }

破解请求参数结果：

1.passwd:

密码RSA加密(RSA在线工具：http://tool.chacuo.net/cryptrsapubkey)：

公钥：

—–BEGIN PUBLIC KEY—–

MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKvaYJcKtjtQHOyv//JkrT/zOB9q5pN8 hfAZdqy0kh/PGym8/t3zO58HAzBtDDPzvHPOgL4T8yELh3aRhZbNlbkCAwEAAQ==

—–END PUBLIC KEY—–

2.device_id：

手机device id

3.QC005字段：

“device_id”+”_Unix时间戳”

4.agenttype

120(写死)

5.email

手机 码／邮箱

6.textKey

1(写死)

7.vcode

空

8.PTID

02033011010000000000 (平台ID)