京东购物小程序 h5st 分析

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

逆向分析

rl = "/client.action"
cp = execjs.compile(open('run.js','r',encoding='utf-8').read())
result = cp.call('getH5st')
print(result)
params = {
    "appid": "jdmini-wx-search",
    "loginType": "11",
    "clientVersion": "1.0.0",
    "t": result['t'],
    "functionId": "searchFloorKeyword",
    "client": "windows",
    "osVersion": "",
    "screen": "736*415",
    "networkType": "true",
    "d_brand": "microsoft",
    "d_model": "microsoft",
    "lang": "zh_CN",
    "sdkVersion": "3.3.5",
    "body": result['body'],
    "uuid": "",
    "h5st": result['h5st'],
    "x-api-eid-token": ""
}
response = requests.get(url, headers=headers, cookies=cookies, params=params)

print(response.text)
print(response)

结果

总结

  1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。