JS 的一些零零碎碎笔记

r.prototype.request = function(e) {  // 定义一个名为 request 的函数，这个函数是 r 对象的原型方法
    "string" == typeof e ? (e = arguments[1] || {},  // 如果 e 是字符串（即第一个参数是 URL），则取第二个参数为配置对象，若没有则使用空对象
    e.url = arguments[0]) : e = e || {},  // 如果 e 不是字符串，则确保 e 为对象，若 e 为 null 或 undefined 则赋为空对象
    e = u(this.defaults, e),  // 合并默认配置和传入的配置（u 是一个合并函数）
    e.method = e.method ? e.method.toLowerCase() : "get";  // 如果配置中有 method 字段，则转换为小写，否则默认为 "get"
    
    var t = [a, void 0]  // 初始化一个数组 t，包含两个元素，a 和 undefined（a 可能是某个函数）
      , n = Promise.resolve(e);  // 使用 Promise.resolve 包裹配置对象 e，返回一个已解决的 Promise 对象

    // 遍历 request 拦截器，插入到 t 数组的前面（拦截器的作用是修改请求）
    for (this.interceptors.request.forEach(function(e) {
        t.unshift(e.fulfilled, e.rejected)  // 将拦截器的 fulfilled 和 rejected 函数添加到 t 数组的前面  --- > 往左边扔下去.
    }),

    // 遍历 response 拦截器，插入到 t 数组的后面（拦截器的作用是修改响应）
    this.interceptors.response.forEach(function(e) {
        t.push(e.fulfilled, e.rejected)  // 将拦截器的 fulfilled 和 rejected 函数添加到 t 数组的后面
    }); t.length; )  // 当 t 数组还有元素时继续执行以下代码

        n = n.then(t.shift(), t.shift());  // 依次取出 t 数组的元素，并作为 then() 的参数传递，形成 Promise 链

    return n  // 返回最终的 Promise 对象
}

function u(t) {
    for (var e = Object.keys(t).sort(l), n = "", a = 0; a < e.length; a++)
        if (void 0 !== t[e[a]])
            if (t[e[a]] && t[e[a]] instanceof Object || t[e[a]] instanceof Array) {
                var i = JSON.stringify(t[e[a]]);
                n += e[a] + i
            } else
                n += e[a] + t[e[a]];
    return n
}


function l(t, e) {
    return t.toString().toUpperCase() > e.toString().toUpperCase() ? 1 : t.toString().toUpperCase() == e.toString().toUpperCase() ? 0 : -1
}

function d(t) {
    for (var e in t)
        "" !== t[e] && void 0 !== t[e] || delete t[e];
    // var n = r["a"] + u(t);   // 这里的 webpack 的值是固定的. 所以直接给出使用即可.
    var n = "B3978D054A72A7002063637CCDF6B2E5" + u(t);

    cryptoJs = require("crypto-js")
// md5摘要
// 原始数据
//     const data = '123456';
// 生成MD5摘要
//     const md5Digest = cryptoJs.MD5(data).toString();
    // console.log("md5:", md5Digest)
    // return s(n).toLocaleLowerCase()
    return cryptoJs.MD5(n).toString().toLocaleLowerCase()   // 这里是 md5 , 通通都是本地 JS 构建的. 分分中,我不需要读取这些逻辑.
}


data = {
    "ts": 1745778580743,
    "type": "12",
    "IS_IMPORT": 1,
    "pageSize": 3
}


console.log(d(data))

import time
from hashlib import md5, sha1, sha256, sha512

# (1) 构建摘要对象
# hash_md5 = md5()
hash_md5 = sha1()     # 40位
hash_md5 = sha256()   # 64位
hash_md5 = sha512()   # 128位

# (2) 对内容进行摘要,update的参数字节
# data = "alex is a stupid donkey!!! "
data = "123456"
# data = "yuanlaoshi贼拉帅"
# data = str(time.time())
hash_md5.update(data.encode())

# (3) 查询摘要结果
print(hash_md5.hexdigest(), len(hash_md5.hexdigest()))
print(hash_md5.digest(), len(hash_md5.digest()))

Math.random  = function (){
    return 0.1
}

Date.prototype.getTime =  function (){
    return 1719407831657
}

window.jsSHA = jsSHA;
$.jCryption.setkey = function(e, n, maxdigits) {
    var chars = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz";
    var string_length = 128;
    var randomstring = '';
    for (var i = 0; i < string_length; i++) {
        var rnum = Math.floor(Math.random() * chars.length);
        randomstring += chars.substring(rnum, rnum + 1);
    }
    $.jCryption.key0 = (new jsSHA(randomstring,"ASCII")).getHash("SHA-512", "HEX");
    $.jCryption.key1 = "";
    var jCryptionKeyPair = function(encryptionExponent, modulus, maxdigits) {
        setMaxDigits(parseInt(maxdigits, 10));
        this.e = biFromHex(encryptionExponent);
        this.m = biFromHex(modulus);
        this.chunkSize = 2 * biHighIndex(this.m);
        this.radix = 16;
        this.barrett = new BarrettMu(this.m);
    };
    $.jCryption.encryptKey($.jCryption.key0, new jCryptionKeyPair(e,n,maxdigits), function(key) {    // 它的这里面使用了一个回调的值,使用了一个值, 是key0, key0 产生了.key1, 
        $.jCryption.key1 = key;
    });
}

var crypt = keyPair.barrett.powMod(block, keyPair.e);
                var text = keyPair.radix == 16 ? biToHex(crypt) : biToString(crypt, keyPair.radix);  // text来自拼接 ---> 这里做了 三目运算,生成的.
                encrypted += text + " ";   // encrypted来自拼接的
                charCounter += keyPair.chunkSize; 
                if (charCounter < encryptObject.length) {
                    encryptChar();
                } else {
                    var encryptedString = encrypted.substring(0, encrypted.length - 1);
                    if ($.isFunction(callback)) {
                        callback(encryptedString);   //  encryptedString 来自于被 encrypted.substring 截断的.
                    } else {
                        return encryptedString;
                    }

const pe = e => {
    let n = ""
      , t = e.url;
    if (e.params) {
        let t = {}
          , r = JSON.stringify(e.params)
          , o = JSON.parse(r)
          , a = Object.keys(o).sort();
        for (let e = 0; e < a.length; e++) {
            let n = o[a[e]];
            null != n && (t[a[e]] = String(o[a[e]]))
        }
        n = JSON.stringify(t)
    } else if ("post" === e.method || "put" === e.method)
        n = JSON.stringify(e.data);
    else {
        let {params: e, reqUrl: r} = be(t);
        "" != e && (n = e),
        "" != r && (t = r)
    }
    let r = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (e => {
        const n = 16 * Math.random() | 0;
        return ("x" == e ? n : 3 & n | 8).toString(16)
    }
    ))
      , o = (new Date).getTime()
      , a = de(n);
    return {
        signature: fe("-----BEGIN PRIVATE KEY-----\n  MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCdgJNfUFPDNJsL\n  HObB1JMu7E1+nuwkFHmXnBU2AOM2dweE+tpmViZo90w+YQIuIS8MoVz60AGHbLE8\n  BYcdxQEKmPsqq0Lq/1ltIdp1YcO9W60qSxwpZS+7o73ljRrrtOXcE1UUpH5l07Fh\n  ziCIRDI/4ODCA8AJ1kV6IyfPNM2Fes3BEqhMOgw4Z5i4pZHnb4Nm+4kEXmyM+UgQ\n  cShcXZA/dx5MXKA2Bbb0I0G6HS3D4nMhnm6IgYWEyT8ngenMOyy+ysBuHWt2j9Cp\n  AGLWRyqHigFcKTlP5BSIkU+8sqssab1jvDg2F8MXWuupwF43OVARgHofiwQBAHPo\n  PfTfPlMvAgMBAAECggEBAJKQpZNasrfCak0LFgllgZl2uB6OUPy6OPRGgM6CQO3c\n  EhlDPp1gqdmf10ltCJRYuOmt91JG4kVddgh+tF+VhgSQm5n3SQxZlqQhjqMQ2Q+L\n  Ejd7Mberu6GHHB1TE6wn6IbFTrUo5Z5oQnbbVBa6L3CWGVEyIDCHPpwLvu3pGx+L\n  083dNQUiF8WcSGybl1h4ZapAGdndPYJReKYccNBYu5IzTEjtG3VpMHl56hD8fPV8\n  SStYv4sEffyCbze5/KvG3WlG+8n1WzBRMAN1U8Qk3JlMM/g5Y2tL1elI2pQRmjH8\n  EVxNUzB9Ob/qk2N6pF4KwhDWjILkHdoXilHMgP5x0gECgYEAy9O9ShtRNwXdFzHe\n  v+buyjvWWvwTVRUBehe8BWO1QaZ4c/INw1Ks4pgoKvXyU1DRx5OloIx6BWDbs00O\n  1W1cDue2I/Ymvx5Q/XJmZK4eR2U3a2dmKLKVhCXhJ3y02R/OZ2xQHV3NZXqz88kf\n  rEmEKYTW9q2gVsZa82XpQhKnBYECgYEAxdFJ55AkU7VfzpV1x68NUetomB3OWxyq\n  Cugn3STLNx7Jw6FaK3dwRz0eKIbwCRxtlluZmxWX0jWSvj3cyLRBIKTD8atUfJW2\n  +ESKZb/i961HhhQjXqNfGQpmMdEazNqv0sDzQ5jHHIjc63oty/FjckcC+AaDGZIJ\n  VGCet5J5kK8CgYBm2R/Bfgk792R5KLvaHz/MoebmoB1tKB1HqyQ/n/E9AC/1aWUS\n  cuwzpk1WaCXvbm98Af9oBJopjpctYSuj+/ugtcDNYo5oj3aUfJ44HTfAFM2jD1iY\n  HoydUrPKxf1HNepje17tgoB6vTCCSbEGsU3T2WjSrgei4ZHREVJi+aB3gQKBgEy8\n  rm2sxdrPHjZWVlU6+/DOYEm6LkW77d7DRkuMLWTZha1lF0SLVbvc4qkYB1+RbpWI\n  PSMjEj0SWTWBa/dTrXwLTpOeQez+avcOJ53m/RXVW0yQ3VOmDor5NMGYe0wCfXhF\n  L1kGmB7inMigIcnefxRipa0vYYX217WqsYdGw++zAoGBALKswyV5j1GjVjN+fS1t\n  N9R0x+S7cKBqW6Bwj6aAdo4+spmRn9WK4h9Zk2k7BMUiqJKTce6RdW0Ep+aTErRs\n  LL0sBHArhQdaQvq0yS57BJUZm3ASrOpp3wkQdDejS3YEKiIQSG2kNFRanh8RbtbA\n  ac7pfLikyQm795/qF0H9YHgF\n  -----END PRIVATE KEY-----", "Timestamp&" + o + "&" + t + "&" + r + "&" + a),
        timestamp: o,
        nonce: r
    }
}

let  e = {
    "transitional": {
        "silentJSONParsing": true,
        "forcedJSONParsing": true,
        "clarifyTimeoutError": false
    },
    "adapter": [
        "xhr",
        "http"
    ],
    "transformRequest": [
        null
    ],
    "transformResponse": [
        null
    ],
    "timeout": 30000,
    "xsrfCookieName": "XSRF-TOKEN",
    "xsrfHeaderName": "X-XSRF-TOKEN",
    "maxContentLength": -1,
    "maxBodyLength": -1,
    "env": {},
    "headers": {
        "Accept": "application/json, text/plain, */*",
        "Content-Type": "application/json;charset=utf-8"
    },
    "baseURL": "/",
    "url": "/byairport-flight/flight/list",
    "method": "post",
    "data": {
        "type": "1",
        "terminal": "",
        "day": 0,
        "depOrArr": "1",
        "pageNum": 1,
        "pageSize": 15
    }
}

console.log(pe(e))

/home/calleng/PycharmProjects1-py390/Project_6T/JS-reverse-6th/Day23：JS逆向实战案例解析四/baiyun_airport_step2.js:47
    const t = x.getKey(e)
              ^

ReferenceError: x is not defined
    at fe (/home/calleng/PycharmProjects1-py390/Project_6T/JS-reverse-6th/Day23：JS逆向实战案例解析四/baiyun_airport_step2.js:47:15)
    at pe (/home/calleng/PycharmProjects1-py390/Project_6T/JS-reverse-6th/Day23：JS逆向实战案例解析四/baiyun_airport_step2.js:29:20)
    at Object.<anonymous> (/home/calleng/PycharmProjects1-py390/Project_6T/JS-reverse-6th/Day23：JS逆向实战案例解析四/baiyun_airport_step2.js:96:13)
    at Module._compile (node:internal/modules/cjs/loader:1730:14)
    at Object..js (node:internal/modules/cjs/loader:1895:10)
    at Module.load (node:internal/modules/cjs/loader:1465:32)
    at Function._load (node:internal/modules/cjs/loader:1282:12)
    at TracingChannel.traceSync (node:diagnostics_channel:322:14)
    at wrapModuleLoad (node:internal/modules/cjs/loader:235:24)
    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:170:5)