Web视频解析接口解密

xdzhou2006

看到有人在论坛里发视频下载工具，其实是商业推广。我也下载了一个，顺便把解析接口解密出来供大家使用，支持平台如截图所示。


视频解析接口：https://www.bestvideow.com/video/parseVideoUrl

https请求消息头参数：
Host: www.bestvideow.com
Connection: keep-alive
Content-Length: 166
sec-ch-ua-platform: "Windows"
authorization: null
cache-control: no-cache
accept-language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
pragma: no-cache
sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="138"
sec-ch-ua-mobile: ?0
x-requested-with: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ??????/1.0.0 Chrome/138.0.7204.185 Electron/37.2.6 Safari/537.36
Accept: application/json, text/javascript, */*; q=0.01
Content-Type: application/json
timestamg: 1754886776542
priority: u=1, i
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Accept-Encoding: gzip, deflate, br, zstd

{"url":"https://www.douyin.com/jingxuan?modal_id=7521609023839292730","platform":"douyin","params":"a138c6052fb7f47f77418c19258e295c6840a7eda65584b705b7fc194e2f4a68"}

我们具体看看红色部分JSON格式的post参数：url和platform这两个简单，比方要换个url：https://www.youtube.com/watch?v=IxEkt9Ky7xA
那对应的post参数就是{"url":"https://www.youtube.com/watch?v=IxEkt9Ky7xA","platform":"youtube","params":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}
关键是后面这个params参数怎么求？一数64位，大概率就是SHA算法，发现确实是SHA256，
params=SHA256("bf5941f27ee14d9ba9ebb72d89de5dea" + url + platform)
=SHA256(“bf5941f27ee14d9ba9ebb72d89de5deahttps://www.douyin.com/jingxuan?modal_id=7521609023839292730douyin”)
=“a138c6052fb7f47f77418c19258e295c6840a7eda65584b705b7fc194e2f4a68”
可以通过在线加密进行验证：https://www.jyshare.com/front-end/706/

发送https请求获取JSON解析结果：
{"status":200,"success":true,"message":"操作成功","remark":null,"data":{"code":200,"msg":null,"voideDeatilVoList":[{"url":"https://v3-cold4.douyinvod.com/9288930d7846266ed80e4873a01668cf/68999ea2/video/tos/cn/tos-cn-ve-15c000-ce/ok8GU9epIr7sIjLgQV8ANRDeSyf7CtBxEQJPpa/?a=1128&ch=0&cr=0&dr=0&cd=0%7C0%7C0%7C0&cv=1&br=1482&bt=1482&cs=0&ds=3&ft=BaXAWVVywhiRF_80mo~pK7pswApInr9UvrKfTr~~to0g3cI&mime_type=video_mp4&qs=0&rc=ZGdnZWRmNTQ2Zmc3ZGg6NkBpM3h0b3k5cm80NDMzbGkzNEA2YV81NjUuNjAxNTNeYGMtYSMybjFoMmRrcGVhLS1kLWJzcw%3D%3D&btag=c0010e000b8001&cquery=100y&dy_q=1754892190&feature_id=fea919893f650a8c49286568590446ef&l=2025081114031041841AA812A19CB502AC","title":"【我的世界】随机空岛生存一口气看完（蛤蟆篇） #我的世界 #我的世界生存 #minectaft","type":"video","author":null,"releaseTime":null}],"resultJson":null,"platform":"douyin","parseUrl":"https://www.douyin.com/jingxuan?modal_id=7521609023839292730","remark":null,"title":"【我的世界】随机空岛生存一口气看完（蛤蟆篇） #我的世界 #我的世界生存 #minectaft","coverUrls":"https://p26-sign.douyinpic.com/tos-cn-p-0015c000-ce/og5BJxt8BQAD8PcpaRHyieCKUgIfSCGBQIN7eL~tplv-dy-resize-walign-adapt-aq:720:q75.webp?lk3s=138a59ce&x-expires=1756101600&x-signature=OcCspxdkMPoIjfig%2F%2BbCN6h07y0%3D&from=327834062&s=PackSourceEnum_DOUYIN_REFLOW&se=false&sc=cover&biz_tag=aweme_video&l=2025081114030941D1F5A2F4ABEBDC489C","videoUrls":null,"leftTimes":null,"isVideo":null,"content":null,"topic":null,"like":6126,"comment":271,"collect":3563,"shareCount":95,"createTime":"2025-06-30 13:24:35","isCache":true},"time":"2025-08-11 14:03:29"}

data.voideDeatilVoList.url 就是对应的可下载地址
这个解析接口在服务端应该有解析频率限制，限制了过几分钟才能用。

gugouo163

应该教授一下怎么样获取到bf5941f27ee14d9ba9ebb72d89de5dea

huaconglan

老大，，为什么我请求的是这个？？？？{"timestamp":"2025-08-12T00:54:17.425+00:00","status":400,"error":"Bad Request","path":"/video/parseVideoUrl"}

[Python] 纯文本查看 复制代码

import requests

url = 'https://www.bestvideow.com/video/parseVideoUrl'

head = {
    "Host": "www.bestvideow.com",
    "Connection": "keep-alive",
    "Content-Length": "166",
    "sec-ch-ua-platform": "\"Windows\"",
    "authorization": "null",
    "cache-control": "no-cache",
    "accept-language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6",
    "pragma": "no-cache",
    "sec-ch-ua": "\"Not)A;Brand\";v=\"8\", \"Chromium\";v=\"138\"",
    "sec-ch-ua-mobile": "?0",
    "x-requested-with": "XMLHttpRequest",
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ??????/1.0.0 Chrome/138.0.7204.185 Electron/37.2.6 Safari/537.36",
    "Accept": "application/json, text/javascript, */*; q=0.01",
    "Content-Type": "application/json",
    "timestamg": "1754886776542",
    "priority": "u=1, i",
    "Sec-Fetch-Site": "cross-site",
    "Sec-Fetch-Mode": "cors",
    "Sec-Fetch-Dest": "empty",
    "Accept-Encoding": "gzip, deflate, br, zstd"
}

data1 = {
    "params": "a138c6052fb7f47f77418c19258e295c6840a7eda65584b705b7fc194e2f4a68",
    "platform": "douyin",
    "url": "https://www.douyin.com/jingxuan?modal_id=7521609023839292730",
}

resp = requests.post(url, headers=head, data=data1)

print(resp.text)

sanfengzhang

这个能做什么？

红叶落尽

这都能撞出来？

msmvc

https://www.bestvideow.com/
网页版入口

3pen

那，那种要付费的视频能下载吗

youyoulong

清晰度怎么样？视频格式是哪种？

devilpanama

应该是抓包发现有web端，从web端入手发现的加解密和key

xdzhou2006

sanfengzhang 发表于 2025-8-11 17:20
这个能做什么？

解析视频，麻烦事情很多，视频网站加密算法三天两头变化，还要租服务器。
直接用这个接口，相当于麻烦事情都帮你干了