大众点评 小程序 mtgsig 分析 mtgsig1.2

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析
 

cp = execjs.compile(open('run.js', 'r', encoding='utf-8').read())
result = cp.call('getMtgsig',data,openId,page)
mtgsig = result['header']['mtgsig']
print(mtgsig)
headers = {
    "Accept": "*/*",
    "Accept-Language": "zh-CN,zh;q=0.9",
    "Connection": "keep-alive",
    "Content-Type": "application/json",
    "Sec-Fetch-Dest": "empty",
    "Sec-Fetch-Mode": "cors",
    "Sec-Fetch-Site": "cross-site",
    "User-Agent": "",
    "channel": "weixin",
    "channelversion": "3.9.9",
    "dpid": "",
    "minaname": "dianping-wxapp",
    "minaversion": "9.80.1",
    "mtgsig": mtgsig,
    "openid": "",
    "openidPlt": "",
    "platform": "Android",
    "platformversion": "10 x64",
    "sdkversion": "3.3.5",
    "wechatversion": "3.9.9",
    "xweb_xhr": "1"
}
url = "/listFeeds"
params = {
    "yodaReady": "wx",
    "csecappid": "",
    "csecplatform": "3",
    "csecversionname": "9.80.1",
    "csecversion": "1.4.0",
    "selCityId": "4",
    "pageStart": "5",
    "pageSize": "10",
    "sourceId": "0",
    "os": "ios",
    "cityId": "4",
    "latitude": "23.1813907623291",
    "longitude": "113.48066711425781",
    "guangGaoPrivacyStatus": "1",
    "recPrivacyStatus": "1",
    "device_system": "",
    "wxmp_version": "9.80.1"
}
response = requests.get(url, headers=headers, params=params)

print(response.text)
print(response)

结果

总结

   1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。