吾爱破解 - LCG - LSG |安卓破解|病毒分析|www.52pojie.cn

 找回密码
 注册[Register]

QQ登录

只需一步,快速开始

查看: 2474|回复: 3
收起左侧

[已解决] CryptoJS中AES加密Python实现的问题

[复制链接]
天黑我隐身 发表于 2020-4-27 19:58
本帖最后由 天黑我隐身 于 2020-4-27 21:59 编辑

encrypt.png
JS加密代码如上图,使用CryptoJS AES加密,我对加解密算法是个门外汉,一番google百度之后大致分析出t是key(固定的),e是要加密的数据

然后使用pycrypto编写加密函数
from Crypto.Cipher import AES
import base64
def encrypt(text):
    BS = AES.block_size
    pad = lambda s: s + (BS - len(s) % BS) * chr(BS - len(s) % BS)
    key = '1c52a966appsapi0'
    encryptor = AES.new(key, AES.MODE_ECB)
    ciphertext = encryptor.encrypt(pad(text))
    ciphertext = base64.b64encode(ciphertext)
    return ciphertext


但是当我输入加密文本e后,Python得出的结果和JS并不相同,所以请教一下各位,Python加密代码哪里不对吗
完整JS代码地址https://wappass.baidu.com/static/machine/js/api/mkd.js
测试加密文本
{"cl":[{"x":180,"y":260,"t":1587987234248},{"x":196,"y":410,"t":1587987235576}],"mv":[{"fx":213,"fy":25,"t":1587987233059},{"fx":213,"fy":26,"t":1587987233436},{"fx":206,"fy":45,"t":1587987233680},{"fx":220,"fy":92,"t":1587987233834},{"fx":196,"fy":232,"t":1587987234015},{"fx":180,"fy":260,"t":1587987234166},{"fx":180,"fy":260,"t":1587987234372},{"fx":180,"fy":260,"t":1587987234803},{"fx":181,"fy":264,"t":1587987234976},{"fx":187,"fy":361,"t":1587987235152},{"fx":180,"fy":429,"t":1587987235318},{"fx":187,"fy":422,"t":1587987235483},{"fx":197,"fy":410,"t":1587987235771}],"sc":[],"kb":[{"key":"a","t":1587987234920},{"key":"a","t":1587987234979},{"key":"a","t":1587987235101},{"key":"a","t":1587987235191},{"key":"a","t":1587987235224},{"key":"a","t":1587987235314}],"cr":{"screenTop":23,"screenLeft":0,"clientWidth":323,"clientHeight":582,"screenWidth":1280,"screenHeight":800,"availWidth":1280,"availHeight":708,"outerWidth":1280,"outerHeight":708,"scrollWidth":1100,"scrollHeight":1100},"simu":0,"ac_c":0}

Python加密结果
[Asm] 纯文本查看 复制代码
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

JS加密结果
[Asm] 纯文本查看 复制代码
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

发帖前要善用论坛搜索功能,那里可能会有你要找的答案或者已经有人发布过相同内容了,请勿重复发帖。

 楼主| 天黑我隐身 发表于 2020-4-27 20:04
对不起各位,当我发完帖子的时候突然发现到key并不是固定的...使用一致的key得到的加密结果一致,打扰了
RemMai 发表于 2020-4-27 20:12
看着那么眼熟,原来我以前解密别人api的时候用过。python的代码和js的代码差不多。
 楼主| 天黑我隐身 发表于 2020-4-27 20:21
RemMai 发表于 2020-4-27 20:12
看着那么眼熟,原来我以前解密别人api的时候用过。python的代码和js的代码差不多。

哈哈哈,我快被百度二十多个请求参数和恶心的JS混淆搞疯了
您需要登录后才可以回帖 登录 | 注册[Register]

本版积分规则 警告:本版块禁止回复与主题无关非技术内容,违者重罚!

快速回复 收藏帖子 返回列表 搜索

RSS订阅|小黑屋|处罚记录|联系我们|吾爱破解 - LCG - LSG ( 京ICP备16042023号 | 京公网安备 11010502030087号 )

GMT+8, 2024-5-3 22:19

Powered by Discuz!

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表