tiktok web登录分析

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析

部分代码

response = requests.post(url, headers=headers, data=data,proxies=proxies)print(response.json()['data'])
verify_center_decision_conf = json.loads(response.json()['data']["verify_center_decision_conf"])
mode = verify_center_decision_conf["subtype"]
detail = verify_center_decision_conf["detail"]
fp = verify_center_decision_conf["fp"]url = "/captcha/get"
params = {"lang": "zh-Hans","app_name": "","h5_sdk_version": "2.33.10","h5_sdk_use_type": "cdn","sdk_version": "","iid": "0","ch": "web_text","aid": "1459","os_type": "2","mode": "whirl","tmp": int(time.time()*1000),"platform": "pc","webdriver": "false","fp": fp,"type": "verify","detail": detail,"server_sdk_env": "{\"idc\":\"useast5\",\"region\":\"US-TTP\",\"server_type\":\"passport\"}","imagex_domain": "","subtype": "whirl","challenge_code": "99996","os_name": "windows","h5_check_version": "3.8.25","region": "ttp","triggered_region": "ttp","cookie_enabled": "true","screen_width": "1536","screen_height": "864","browser_language": "zh-CN","browser_platform": "Win32","browser_name": "Mozilla","browser_version": "5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0",
}
response = requests.get(url, headers=headers, params=params,proxies=proxies)
data = response.json()['data']
# print(data)
print(data['challenges'][0])
verify_id = data['verify_id']
mode = data['challenges'][0]['mode']
cyfreso = data['cyfreso']
id = data['challenges'][0]['id']
base_url = "user/login"
data = {"mix_mode": "1","username": "","password": "","aid": "1459","is_sso": "false","account_sdk_source": "web","region": "US","language": "zh-Hant","did": "","fixed_mix_mode": "1"
}
url = requests.get('http://127.0.0.1:3000/url').text
print(url)
response = requests.post(url, headers=headers,data=data,proxies=proxies)
print(response.text)