关于python解密AES加密的json文件的问题

agooo

我尝试解密一个网站的json文件，该文件的内容已经采用aes加密了。
json文件是：https://www.up678.com/dataserver/school/v2/enrollment/list?pageNo=1&yxdm=5001&year=2024&kldm=5&pcdm=2&scode=3d9ee40c3928c2211b7dc0d9641458cc&subjects=&_t=1741002154697

{

    "code": 200,

    "data": "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",

    "encryption": true,

    "ext": "",

    "pageCount": 0,

    "pagesize": "0",

    "rowCount": "0",

    "size": "0",

    "status": 200,

    "total": "0"

}

我用过网络调试，找到了地址的请求头是：

:authority:
www.up678.com
:method:
GET
:path:
/dataserver/school/v2/enrollment/list?pageNo=1&yxdm=5001&year=2024&kldm=5&pcdm=2&scode=3d9ee40c3928c2211b7dc0d9641458cc&subjects=&_t=1741002154697
:scheme:
https
accept:
application/json, text/plain, */*
accept-encoding:
gzip, deflate, br, zstd
accept-language:
zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
cookie:
SERVERID=f31ad592e1895f9125f4a182920f4003|1741002154|1740996082
dnt:
1
platformid:
1
priority:
u=1, i
referer:
https://www.up678.com/school/3d9ee40c3928c2211b7dc0d9641458cc/enrollment
rk:
1cecbcd6cabbd51f
rs:
aeedb9b9c58f3e88==
rt:
1741002154698
sec-fetch-dest:
empty
sec-fetch-mode:
cors
sec-fetch-site:
same-origin
seckey:
6bffd8b40bb234aaacdea45de12058cd
terminalid:
1
user-agent:
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15 Edg/133.0.0.0
userid:
11506937
wish_cache_key:
x-kl-kfa-ajax-request:
Ajax_Request

AES加密，解密的的相关JS代码地址：https://cdn.static.up678.com/res/js/lib.1567735116066.js

想请教一下：
seckey是不是密匙？
seckey: 6bffd8b40bb234aaacdea45de12058cd


初始化向量是不是scode？
scode=3d9ee40c3928c2211b7dc0d9641458cc

目前json文件的加密内容无法解密。

谢谢。

爱飞的猫

需要分析发起请求的 JS 脚本。大概率蒙不出来它的算法。

agooo

爱飞的猫 发表于 2025-3-4 06:00
需要分析发起请求的 JS 脚本。大概率蒙不出来它的算法。

看来这个问题目前无解了，搜索了一下论坛，也没有发现相关的内容。

就往丶

key是 0$0H_3p4$567890F0Kd0?123456789$@
iv是0012345900000678

agooo

就往丶 发表于 2025-3-10 08:37
key是 0$0H_3p4$567890F0Kd0?123456789$@
iv是0012345900000678

大佬，你太牛了。
能教教我是怎么获取的吗？