通过firefox插件firebug获取webqq群和群成员的javascript脚本(转)

文章出处：http://www.zuidaima.com/share/1594373707844608.htm

注意：本文只做技术交流，请勿用于违法乱纪的方面，造成其他后果和本人无关！

网上有很多通过分析pc版本的qq协议来卖qq群发软件或者qq机器人的，想起珊瑚虫的下场就知道触犯了腾讯的利益的下场，做个遵纪守法的攻城狮。

下面是步骤截图：

1.登录http://qun.qzone.qq.com/的网站。

2.打开firebug，获取到连接g_tk的值，如下图：

http://qun.qzone.qq.com/cgi-bin/get_group_list?groupcount=4&count=4&callbackFun=_GetGroupPortal&uin=1758317551&g_tk=2002785566&ua=Mozilla%2F5.0%20(Windows%20NT%206.1%3B%20WOW64%3B%20rv%3A25.0)%20Gecko%2F20100101%20Firefox%2F25.0

3.修改var g_tk=2002785566;的值，然后复制代码到firebug的console中

01 function ajax_request(url,callback,args){
02     //declare the variable at the top, even though it will be null at first
03     var req = null;
04     //figure out what kind of support we have for the XMLHttpRequest object
05     if (window.XMLHttpRequest){
06          //modern browsers
07          req = newXMLHttpRequest();
08     } else {
09         //good ol' lousy IE
10         req = new ActiveXObject("Microsoft.XMLHTTP");
11     };
12
13     //setup the readystatechange listener
14     req.onreadystatechange = function(){
15         //right now we only care about a successful and complete response
16         if (req.readyState === 4 && req.status === 200){
17             //inject the returned HTML into the DOM
18             if(callback){
19                 callback(req.responseText,args);
20             }
21         };
22     };
23
24     //open the XMLHttpRequest connection
25     req.open("GET",url,true);
26
27     //send the XMLHttpRequest request (nothing has actually been sent until this very line)
28     req.send(false);  //false为同步请求
29 };
30
31 var uin=1758317551;
32 var g_tk=2002785566;
33 get_groups();
34
35 function get_groups(){
36     varurl="http://qun.qzone.qq.com/cgi-bin/get_group_list?uin="+uin+"&ua=Mozilla%2F5.0%20(Windows%20NT%206.1%3B%20WOW64%3B%20rv%3A24.0)%20Gecko%2F20100101%20Firefox%2F24.0&random=0.029393406423685486&g_tk="+g_tk;
37     ajax_request(url,callback_parse_groups);
38 }
39
40 function callback_parse_groups(response){
41     var groups=[];
42     var re = /groupid":(.*?),"groupname":"(.*?)"}/ig;
43     var arr;
44     while ((arr = re.exec(response)) != null){
45         var id=arr[1];
46         var name=arr[2];
47         var group={};
48         group.id=id;
49         group.name=name;
50         groups.push(group);
51         var groupid=id;
52         var id=group.id;
53         var name=group.name;
54         get_group_members(id);
55     }
56 }
57
58 function get_group_members(group){
59     varurl="http://qun.qzone.qq.com/cgi-bin/get_group_member?uin="+uin+"&groupid="+group+"&random=0.7269802233668716&g_tk="+g_tk;
60     ajax_request(url,callback_parse_group_members,group);
61 }
62
63 function callback_parse_group_members(response,groupid){
64     var re = /nick":"(.*?)","uin":(.*?)}/ig;
65     var arr;
66     var result="";
67     var groupmembers=[];
68     while ((arr = re.exec(response)) != null){
69         var name=arr[1];
70         var id=arr[2];
71         var groupmember={};
72         groupmember.id=id;
73         groupmember.name=name;
74         groupmember.groupid=groupid;
75         console.info(name+" "+id);
76     }
77 }

4.点击运行即可输出所有获取到的群信息和群成员

 

利用这种方式可以很方便的处理需要登录的网站的信息，包括https的同理。

（有任何问题可以点击文章出处查看)