海尔小程序逆向分析

本案例中所有内容仅供个人学习交流，抓包内容、敏感网址、数据接口均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关。

公共请求头参数

{"U-Request-Id":o,"U-Timestamp":a.toString(),"U-Signature":g,"U-Device-Id":l,"U-Device-Type":c,"U-App-Code":Sc,"U-Language":u,"U-Version":d}"U-Request-Id":为uuidv4().replace(/-/g,"")"U-Timestamp":Date.now()"U-Signature":"".concat(CryptoJS.MD5("".concat(o,"|").concat(a,"|").concat(d,"|").concat(Sc,"|").concat(s,"|").concat(l,"|").concat(f,"|").concat(p)).toString());"U-Device-Id":Date.now()+""+Math.floor(1e7*Math.random())"U-Device-Type":"windows""U-App-Code":"HaierBrosWXMP""U-Language":"zh-CN""U-Version":"v1.1.105.0"

短信认证接口

req_body={"username":username,"password":password,"nvcVal":btoa(nvcVal),"sceneId":SceneId,"multiportflag":deviceId}"username":RSA("手机号")"password":RSA("短信验证码")"nvcVal":阿里v2无感返回结果"sceneId":可固定"multiportflag":和请求头中的"U-Device-Id"为一个值

效果

咨询、沟通、合作
2227669390