破解反爬虫策略 /_guard/auto.js（二）实战

这次我们用上篇文章讲到的方法来真正破解一下反爬虫策略，这两个案例是两个不同的网站，一个用的是 /_guard/auto.js，另一个用的是/_guard/delay_jump.js。经过解析发现这两个网站用的反爬虫策略基本是一模一样，只不过在js混淆和生成guardret的算法上有很细微的差别，由此看来，以后请求其他网站，如果也是这种不返回正确的数据而是返回了一个js，那么也可以直接套用下面的代码做一些细微的调整即可。

案例一

js内容

var _0xod4 = 'v1';
var _0x15af65 = _0x2155;
(function (_0x2e67e3, comparisonValue, stringArrayFunctionName, rightNum, checkVersion, shift, _0x465098) {return _0x2e67e3 = _0x2e67e3 >> 0x1, shift = 'hs', _0x465098 = 'hs', function (stringArrayFunction, comparisonValue, _0x27a225, temp, _0x3316f1) {var _0x160215 = _0x2155;temp = 'tfi', shift = temp + shift, _0x3316f1 = 'up', _0x465098 += _0x3316f1, shift = _0x27a225(shift), _0x465098 = _0x27a225(_0x465098), _0x27a225 = 0x0;var stringArray = stringArrayFunction();while (!![] && --rightNum + comparisonValue) {try {temp = -parseInt(_0x160215(0x16c, '88G9')) / 0x1 + parseInt(_0x160215(0x14b, '4qz]')) / 0x2 + parseInt(_0x160215(0x133, '(9CA')) / 0x3 + -parseInt(_0x160215(0x196, 'qGDC')) / 0x4 + -parseInt(_0x160215(0x112, '2IOp')) / 0x5 + -parseInt(_0x160215(0x145, 'Uvtk')) / 0x6 * (-parseInt(_0x160215(0x13e, '(*tt')) / 0x7) + parseInt(_0x160215(0x116, '%mpD')) / 0x8 * (parseInt(_0x160215(0x176, '[gv0')) / 0x9);} catch (_0x2280d7) {temp = _0x27a225;} finally {_0x3316f1 = stringArray[shift]();if (_0x2e67e3 <= rightNum) _0x27a225 ? checkVersion ? temp = _0x3316f1 : checkVersion = _0x3316f1 : _0x27a225 = _0x3316f1; else {if (_0x27a225 == checkVersion['replace'](/[gVLixNQYGUptydrelmb=]/g, '')) {if (temp === comparisonValue) {stringArray['un' + shift](_0x3316f1);break;}stringArray[_0x465098](_0x3316f1);}}}}}(stringArrayFunctionName, comparisonValue, function (_0x1980fb, _0x2f3155, c, _0x16e044, _0x44a646, _0x277563, _0x3364d6) {return _0x2f3155 = '\x73\x70\x6c\x69\x74', _0x1980fb = arguments[0x0], _0x1980fb = _0x1980fb[_0x2f3155](''), c = '\x72\x65\x76\x65\x72\x73\x65', _0x1980fb = _0x1980fb[c]('\x76'), _0x16e044 = '\x6a\x6f\x69\x6e', (0x161525, _0x1980fb[_0x16e044](''));});
}(0x17a, 0xaa70c, _0x582a, 0xbf), _0x582a) && (_0xod4 = 0xbf);
var oooo = 0xf23d4, ooe;function _0x582a() {var _0x28bbb2 = (function () {return [_0xod4, 'ULgvmpG1dQYbexNlGitVelexLlry==', 'nCk8oCkxdG', 'dCoeySof', 'W5NcP8oXW6BcHW', 'vCkeq8kLWO0', 'W4ZdHmo2WPSpWRNcLmkMaYewfa', 'FSkBp8oWW5W', 'mSobmY7cJW', 'W7dcGSohW6hcUq'].concat((function () {return ['W4tcPmowWOK', 'W5VcK8omW4NcTq', 'd8obBmonxW', 'mWDdWPlcSsKNk10', 'oCo1tSkfCCkdywq1gqJdPa', 'DCoFgSoEW5K', 'emkjo8kRiq', 'W4BcJ8oYWOro', 'lmoWuSkKWPq', 'qSorrNtcVCoDjmkFW7vUxrm'].concat((function () {return ['WROQW67cK30', 'W7/cT8oYWOqx', 'iZy/wSoeoW', 'v8ojiCoqW70', 'W5hcUCoNW6u', 'n8oAA8osxG', 'gSkJamkLW5y', 'W7xcLmobWQuJ', 'sSkmtCkp', 'CZ7dMru'].concat((function () {return ['rayg', 'ymoOWOFdK8oNWOfhW4hdSW', 'W4ZcSmoNWP4X', 'WRNcJGRcH1m', 'Dmo1WQNdSSki', 'qvVdNqe1', 'WR9hWOGdBa', 'vmkvbmorWPO', 's8khjmo5W55EedS', 'W48pW5iiW78'].concat((function () {return ['v8oHemoYW4m', 'p8k+omkFW4u', 'WOagW5FcJxJdUG', 'bbBdOsNcPq', 'kt4nWRGvd20GWQG', 'gcmzWQmK', 'gSkjnHVdPW', 'Amo8aem', 'C8o4heRdMCoq', 'h8k+mq'].concat((function () {return ['d8otB8khamkfm1maqW', 'lcicWQ4', 'W4PvWO3dKcVcPSoDlSozjI/dMW', 'fmoBWPzXWOi', 'e8o4W5tcLCkj', 'jCowW6HQjq', 'wZ3cGIBdGa', 'W5VcNCksWRXE', 'n8oZBSkFyq', 'W4dcS8oDWOH2W7K'].concat((function () {return ['aSoFASojzgRcM8k0WRZcVmoVWPHXw0mx', 'xCoBFSk0Eq', 'b8oxtCkiW5PrEd4pW6bxW4qB', 'umkJjmoVW4W', 'cSo7W6ne', 'W43cLSkYWPPd', 'W5BcPSoBWOTP', 'bCocq8keqa', 'lImHuCoj', 'aSo4DehcVSolW7LTWQ8BW4dcSW'].concat((function () {return ['m8oIDSkczq', 'v8kCmSohsutcRCk5W6K', 'WOa8WRpcTSkj', 'qmocaL/dGSomW4ddLCoW', 'm8oZuCkpWOC', 'W7xcVSkgWPz/', 'WQZcRCocpCkn', 'dSk3huNcGCogzeywW5lcJxy', 'W44QW6yKW4e', 'kmohkapcN8odiSkU'].concat((function () {return ['A8oKW4BdJ8oH', 'WOtcRSkNW6zW', 'hmkQivdcSmohA1m', 'fmoyF8kXWPW', 'fchdGYpcIa', 'jJKjWQW', 'WPb8WQaeua', 'pSoSW5/cRavFWO54WPqwrJW', 'z0quWO3cJa', 'WQxcL8o0imkhibO'].concat((function () {return ['dCoeDmoFza', 'W7pdGCkSdMq', 'uI3cMJ7dHa', 'W5FcR8o2WPOw', 'iMdcGuJdLSotW5esW4L2WPXlCW', 'bSoOE8k7sW', 'f8kpedhdQSkdlW', 'wSkjdmovWOa', 'sWypW7KtW7HOWQVdRb43', 'rSobWPVdT8knbchcSwpcRuu'].concat((function () {return ['ady9gCkR', 'FgDLdSkazrxdUCkQW6LXo3C', 'o8k1e8k2pW', 'WONcM8kvW5LoW6lcOmkn', 'nCocWR91WP8', 'W4/cVSosWP1bW77dUmoPW5lcGG', 'hauWFSog', 'w8oAW6xdJCoT', 'vqxcNrBdSG', 'W7ZcRConWReB'].concat((function () {return ['W5mNW6yoW5/cJIrw', 'a8ouW77cLSkn', 'W7X7WRiRutBdPL7dGa', 'xmoxjfJdMG', 'W6P6WRG9qY3dVvJdKgar', 'W6D8WP4xvq', 'hSkpkGxdIq', 'cmoBy8k9WRm', 'W4qLFSk3nCkAW5FdI8oLWPyBW4HwWOlcGdpcSZpcKCk8B8oUa8kWF8kyWPldOCkIy2rLnYO', 'x8olW7VdIG'].concat((function () {return ['WRJcOY7cLuK', 'A8o4avK', 'W6pcSCkMWP1x', 'WPvVWQqjx8kP', 'WPrdWPD/aa', 'vSolWOddLCkkfq', 'W4/cM8o8WPzx', 'FCoHWQ3dHmkT', 'W7TMq8oUvSoFWPVcKCkEWRK', 'W4BcO8kcWRjc'].concat((function () {return ['W718umoZzW', 'WQOfW7BcIfi', 'W4X/WPxdIv4', 'ASopBCkWv0/dTmk/W44', 'WRmYW73cRNi', 'W63dR8kufKu', 'h8k5iSk9bt4NWP/dOSot', 'W5VcSSoXWR0NWORdMCkX', 'xmofW5RdKmoRWPNdVSkb', 'W544W7udW5i'].concat((function () {return ['BmorzCk8rq', 'lmoAfapcGSoEnCk5WQy', 'BmovE8k8x0e', 'wmorWONdImoX', 'rCkkba', 't8ofWPJdLCoNWOfrW67dIq', 'W5/cPSoFWOz2', 'W5WJW4m5W54', 'W4r/WO4kvq', 'kmopCSo9wq'].concat((function () {return ['WO16WRvFWP3dNN50pq8HWQnp', 'gIWVhCkx', 'wuldIaia', 'W4jhqCoWyW', 'i8kUW5ZcLmk4W4mlW5JdSx/dK8oclW', 'W7ldKmkshL4', 'W5DAWOZdOI0', 'yY/dNXNcRq', 'umkAtCoIvvNcP8ka', 'W5XNWPZdMLu'].concat((function () {return ['lH8+zCo8', 'pHBdVctcMa', 'gJestmoc', 'jr3dMY/cQa', 'WOa5WPFcLSkW', 'ah7dU2JcPtGMW7KMW7ahWP5J', 'pCo6iJJcVW', 'W43cOCosW6BcRa', 'W5T4WQhdR3G', 'W4S6W6qmW44'].concat((function () {return ['g8oLxCk6qq', 'W6XTWRuRrYVdOvtdIG', 'z8kcdSoqWRm', 'c8oiBSopC3C', 'WOreWPfYhxC', 'W4VcSmkrWQ9W', 'b8kvhdhdSCkD', 'qCoHmCoqW7e', 'qCkwsCkBWPJdVCoSW6ZdMmou', 'WP0jWQtcKmkbWQFcTHRcLa'].concat((function () {return ['h8kKpmkUW74', 'emk+imkUmJGSWPq', 'WO1fWPOdFq', 'WPD3WQabrq', 'pmkRkaxdJW', 'omkHW5tdPGWrW5jgW6GVea', 'Bx/dSG4', 'W4/dI2ZdJs/cJfWaW7epd8kbAq', 'FrmpW6yV', 'qCkxjmo9W55F'].concat((function () {return ['pSobfrm', 'cCoEaqpcPa', 'd8oQtmkzwq', 'Bf0BWPBcMW'];}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}()));}());_0x582a = function () {return _0x28bbb2;};return _0x582a();
};(function () {var _0x347e96 = _0x2155, OtvxHQ = {'LRvAS': 'undefined', 'adWoW': function (_0x1345e8, _0x25be49) {return _0x1345e8 === _0x25be49;}, 'olxhc': 'object', 'XfMjK': _0x347e96(0x15e, 'c]oM'), 'kvVRH': function (_0x3fe49b, _0x51352a) {return _0x3fe49b === _0x51352a;}},that = typeof window !== OtvxHQ['LRvAS'] ? window : OtvxHQ[_0x347e96(0x194, 'Q^Rn')](typeof process, OtvxHQ[_0x347e96(0x199, '[gv0')]) && typeof require === OtvxHQ[_0x347e96(0x1bb, '88G9')] && OtvxHQ[_0x347e96(0x193, 'j$AR')](typeof global, _0x347e96(0x125, '%mpD')) ? global : this;that[_0x347e96(0x19b, '[Fz[')](_0x456a4f, 0x7d0);
}());
if (oooo = oooo >> 0xc ^ 0xd5, ooe = window[_0x15af65(0x1a6, 'vTuG')] && window['navigator'][_0x15af65(0x12b, '9^H]')]) {var i = 0x9;for (oooo = oooo ^ i; i < oooo | 0x9; i > 0x0) {ooe[_0x15af65(0x18d, 'mAYl')] = ooe[_0x15af65(0x154, 'WTpP')] + '?' + i;};
}
;function a(input) {var _0x5f42ad = _0x15af65, _0x314d67 = {'HKaoy': function (callee, _0x2af9d4) {return callee(_0x2af9d4);}};return _0x314d67[_0x5f42ad(0x1c7, '2IOp')](atob, input);
}function b(input) {var _0x1df6a9 = _0x15af65, _0x2056fd = {'HKVGJ': function (callee, _0x55533f) {return callee(_0x55533f);}};return _0x2056fd[_0x1df6a9(0x130, '4qz]')](btoa, input);
}function x(input, _0x56ee7b) {var _0x4d7909 = _0x15af65, _0x453109 = {'kkhgO': function (_0xa38b79, _0x106f39) {return _0xa38b79 + _0x106f39;}, 'ENirv': function (_0x2f779a, _0x416b4b) {return _0x2f779a !== _0x416b4b;}, 'OuMHF': _0x4d7909(0x151, '%mpD'), 'ocuSY': function (_0x44bb0a, _0x227faa) {return _0x44bb0a ^ _0x227faa;}};let output = '';var _0x56ee7b = _0x453109[_0x4d7909(0x144, '%mpD')](_0x56ee7b, 'PTNo2n3Ev5');for (let _0x4e905d = 0x0; _0x4e905d < input['length']; _0x4e905d++) {if (_0x453109[_0x4d7909(0x1a7, 'L2qu')](_0x453109[_0x4d7909(0x1b2, 'dXSU')], _0x4d7909(0x1a5, 'bDNu'))) _0x98e486 = 0x2; else {const charCode = _0x453109[_0x4d7909(0x10f, 'tDlO')](input[_0x4d7909(0x12a, 'WTpP')](_0x4e905d), _0x56ee7b[_0x4d7909(0x1b8, 'C8Y8')](_0x4e905d % _0x56ee7b['length']));output += String[_0x4d7909(0x146, 'x3Jd')](charCode);}}return output;
}function getCookie(_0x3b7f01) {var _0x364780 = _0x15af65, _0x3beb3d = {'KFdkZ': function (_0x2180e3, _0x1a4794) {return _0x2180e3 + _0x1a4794;},'YqPjx': function (_0x2636a6, _0x556bbf) {return _0x2636a6 / _0x556bbf;},'CNOkx': 'length','ZIclv': function (_0x2f182f, _0x56ed22) {return _0x2f182f === _0x56ed22;},'OONhB': function (_0x5beff8, _0x1299db) {return _0x5beff8 % _0x1299db;},'AwkWR': _0x364780(0x118, 'KYIJ'),'jYAkL': _0x364780(0x1cb, 'vTuG'),'VQaRh': _0x364780(0x14d, 'bDNu'),'NMAkx': 'vjIlM','fLPGa': function (_0x2e0f5e, _0x38e106) {return _0x2e0f5e !== _0x38e106;},'UvztI': 'RwimX','AQFLk': _0x364780(0x1a8, '6pp^'),'HbuOQ': _0x364780(0x1b3, 'N@4a'),'jghBr': 'function','LevWI': _0x364780(0x1ba, 'C8Y8'),'MDeJg': _0x364780(0x123, '6pp^'),'Pmmqk': _0x364780(0x121, 'vTuG'),'pGWgT': function (_0x42ad32, _0x5e853a) {return _0x42ad32 < _0x5e853a;},'ImzXH': 'fmhyk','YzmCn': _0x364780(0x1ae, 'C8Y8'),'Siujv': function (callee, _0x5ed63e) {return callee(_0x5ed63e);},'niHYb': function (_0x559093, _0x31986b) {return _0x559093 + _0x31986b;},'cHoBO': _0x364780(0x161, '0uvs'),'EdjQY': function (_0x2eeaa9, _0x357945) {return _0x2eeaa9 === _0x357945;},'BzwaH': _0x364780(0x1b6, 'Tp6i'),'uasJp': function (callee, _0x17e6e3, _0x2e237a) {return callee(_0x17e6e3, _0x2e237a);},'ewLbp': _0x364780(0x16a, 'x3Jd'),'pJXZY': function (_0x4177e6, _0x535674) {return _0x4177e6 % _0x535674;},'jqnhl': 'AchTl','lXxdg': function (_0x227829, _0x3d5e25) {return _0x227829 === _0x3d5e25;},'msqjZ': _0x364780(0x1a2, 'KYIJ'),'uXnJi': function (callee, _0x4f23d9) {return callee(_0x4f23d9);},'XfSjO': _0x364780(0x186, 'vTuG'),'HEBzN': function (_0x2e7163, _0x372a75) {return _0x2e7163 === _0x372a75;},'cmEWd': _0x364780(0x150, '!MEF'),'tdCPw': _0x364780(0x177, 'QGJv'),'dDgnK': _0x364780(0x131, 'I^i0'),'gtzza': function (callee) {return callee();},'uvSlR': function (_0x3f7747, _0x358f25) {return _0x3f7747 == _0x358f25;}}, _0x2d8df0 = (function () {var _0x430740 = _0x364780;if (_0x3beb3d['fLPGa'](_0x3beb3d[_0x430740(0x137, '&H0m')], _0x3beb3d['UvztI'])) {if (BeBXaA['KFdkZ']('', BeBXaA[_0x430740(0x119, 'jC3%')](counter, counter))[BeBXaA[_0x430740(0x188, 'n5M^')]] !== 0x1 || BeBXaA['ZIclv'](BeBXaA[_0x430740(0x197, 'E&UR')](counter, 0x14), 0x0)) debugger; else debugger;} else {var firstCall = !![];return function (context, _0x2b530e) {var _0x4d5edd = _0x430740, _0x10f5e3 = {'uioiU': function (callee, _0x252f8d) {return callee(_0x252f8d);},'PAFGQ': function (_0x449472, _0x85930d) {return _0x449472 !== _0x85930d;},'RBhiH': _0x3beb3d['AwkWR'],'CUqKa': _0x3beb3d[_0x4d5edd(0x149, 'Tp6i')],'uygWe': _0x3beb3d[_0x4d5edd(0x1a0, 'u4t3')],'wHToA': _0x3beb3d[_0x4d5edd(0x15b, '2bO3')]}, _0x3a3092 = firstCall ? function () {var _0x5e0003 = _0x4d5edd;if (_0x10f5e3['PAFGQ'](_0x10f5e3[_0x5e0003(0x122, 'E&UR')], _0x10f5e3['CUqKa'])) {if (_0x2b530e) {if (_0x10f5e3[_0x5e0003(0x19c, 'tDlO')] === _0x10f5e3[_0x5e0003(0x12e, 'N@4a')]) return debuggerProtection; else {var _0x3f64a4 = _0x2b530e[_0x5e0003(0x1c3, 'vTuG')](context, arguments);return _0x2b530e = null, _0x3f64a4;}}} else return _0x10f5e3['uioiU'](atob, input);} : function () {};return firstCall = ![], _0x3a3092;};}}());(function () {var _0x526d8b = _0x364780, EtqxRI = {'CJVuw': function (_0x3b8fa6, _0x542732) {var _0x328051 = _0x2155;return _0x3beb3d[_0x328051(0x1a4, 'Q^Rn')](_0x3b8fa6, _0x542732);},'jPuBz': _0x3beb3d[_0x526d8b(0x15a, '[Fz[')],'wzkLV': function (_0x35d245, _0x5a09e9) {var _0x42ba02 = _0x526d8b;return _0x3beb3d[_0x42ba02(0x153, 'bDNu')](_0x35d245, _0x5a09e9);},'UbCqr': _0x3beb3d[_0x526d8b(0x14a, 'E6p8')],'jgigS': function (_0x598f2b, _0x6d5198) {return _0x598f2b === _0x6d5198;},'etzTJ': _0x3beb3d[_0x526d8b(0x113, 'j$AR')],'sMSvn': _0x3beb3d[_0x526d8b(0x10d, '%mpD')],'gThCO': _0x3beb3d['MDeJg'],'yZaKL': _0x3beb3d[_0x526d8b(0x138, 'x3Jd')],'bkGag': function (_0x47bf95, _0x50aa72) {var _0x5344bb = _0x526d8b;return _0x3beb3d[_0x5344bb(0x15f, 'vTuG')](_0x47bf95, _0x50aa72);},'wHHVu': '4|2|0|5|3|1','cDMCK': function (_0x3688d9, _0x49faf6) {var _0x3db0e7 = _0x526d8b;return _0x3beb3d[_0x3db0e7(0x111, 'C8Y8')](_0x3688d9, _0x49faf6);},'htOwS': _0x3beb3d[_0x526d8b(0x13a, '$l]E')],'joTGL': _0x3beb3d[_0x526d8b(0x183, 'dXSU')],'ulsGA': function (callee, _0x60a759) {var _0x56f17d = _0x526d8b;return _0x3beb3d[_0x56f17d(0x13f, 'c]oM')](callee, _0x60a759);},'zXYFU': 'init','sFomh': function (_0x24b61e, _0x1f1403) {var _0x417254 = _0x526d8b;return _0x3beb3d[_0x417254(0x140, '&H0m')](_0x24b61e, _0x1f1403);},'dQBdl': 'chain','EJFoP': _0x526d8b(0x184, '$8l3'),'WavdB': _0x3beb3d['cHoBO'],'ITsBz': function (callee) {return callee();}};if (_0x3beb3d['EdjQY'](_0x3beb3d[_0x526d8b(0x11b, 'jC3%')], _0x3beb3d[_0x526d8b(0x175, ')LSI')])) _0x3beb3d['uasJp'](_0x2d8df0, this, function () {var _0x568a75 = _0x526d8b;if (EtqxRI[_0x568a75(0x143, '!MEF')](EtqxRI[_0x568a75(0x172, 'x3Jd')], EtqxRI[_0x568a75(0x170, 'Q^Rn')])) {var _0x17b829 = new RegExp(_0x568a75(0x174, '%mpD')),_0x5f432a = new RegExp(EtqxRI[_0x568a75(0x1ac, '4qz]')], 'i'),result = EtqxRI[_0x568a75(0x1bc, 'j5H]')](_0x456a4f, EtqxRI[_0x568a75(0x160, 'q6^b')]);!_0x17b829[_0x568a75(0x1b1, '$]4*')](EtqxRI[_0x568a75(0x18c, 'jC3%')](result, EtqxRI['dQBdl'])) || !_0x5f432a['test'](EtqxRI['sFomh'](result, _0x568a75(0x192, '%mpD'))) ? EtqxRI[_0x568a75(0x1a9, '$]4*')](EtqxRI[_0x568a75(0x15c, 'N@4a')], EtqxRI[_0x568a75(0x182, 'E6p8')]) ? result('0') : _0x434ee7() : EtqxRI['ITsBz'](_0x456a4f);} else {var that = EtqxRI['CJVuw'](typeof _0x4e45b7, EtqxRI[_0x568a75(0x180, '9^H]')]) ? _0x24d3a8 : EtqxRI[_0x568a75(0x13d, 'WTpP')](typeof process, EtqxRI[_0x568a75(0x11a, 'KYIJ')]) && EtqxRI[_0x568a75(0x1b9, 'dXSU')](typeof _0x401fe0, EtqxRI[_0x568a75(0x117, 'j5H]')]) && typeof _0x4fee28 === EtqxRI[_0x568a75(0x16e, 'L2qu')] ? _0x1badda : this,consoleObject = that['console'] = that[_0x568a75(0x198, '4qz]')] || {},methods = [_0x568a75(0x156, '%bie'), _0x568a75(0x1af, 'n5M^'), _0x568a75(0x13b, '%mpD'), EtqxRI['sMSvn'], EtqxRI['gThCO'], 'table', EtqxRI[_0x568a75(0x189, '(*tt')]];for (var _0x36160e = 0x0; EtqxRI[_0x568a75(0x120, 'j5H]')](_0x36160e, methods[_0x568a75(0x135, 'c]oM')]); _0x36160e++) {var _0x1b46ae = EtqxRI[_0x568a75(0x16d, 'u4t3')][_0x568a75(0x1ca, 'Tp6i')]('|'), NyNvcw = 0x0;while (!![]) {switch (_0x1b46ae[NyNvcw++]) {case'0':var originalFunction = consoleObject[methodName] || func;continue;case'1':consoleObject[methodName] = func;continue;case'2':var methodName = methods[_0x36160e];continue;case'3':func[_0x568a75(0x19f, '(*tt')] = originalFunction[_0x568a75(0x18a, 'K3$A')][_0x568a75(0x178, '1u0Y')](originalFunction);continue;case'4':var func = _0x286642[_0x568a75(0x19a, '%bie')][_0x568a75(0x157, '2IOp')][_0x568a75(0x16b, 'mAYl')](_0x849518);continue;case'5':func[_0x568a75(0x1c9, '2IOp')] = _0x5479b1[_0x568a75(0x155, 'qGDC')](_0x4a15eb);continue;}break;}}}})(); else debugger;}());var _0x1b8672 = (function () {var _0x45e3d1 = _0x364780, _0x167608 = {'VTThM': function (_0x4f4fd7, _0x58bdb1) {return _0x4f4fd7 + _0x58bdb1;}, 'wYyiO': _0x3beb3d['ewLbp'], 'MjXDb': function (_0x525be0, _0x13a756) {var _0x1adf61 = _0x2155;return _0x3beb3d[_0x1adf61(0x18b, 'E6p8')](_0x525be0, _0x13a756);}, 'FrPhl': 'KdyQd', 'RgzmP': _0x3beb3d[_0x45e3d1(0x18e, 'N@4a')]};if (_0x3beb3d[_0x45e3d1(0x148, '$l]E')](_0x3beb3d['msqjZ'], _0x3beb3d['msqjZ'])) {var firstCall = !![];return function (context, _0x3fa0f1) {var _0x35faf6 = _0x45e3d1;if (_0x167608['FrPhl'] === _0x167608[_0x35faf6(0x124, '[gv0')]) {let output = '';var _0x2431aa = _0x167608[_0x35faf6(0x110, '2bO3')](_0x2431aa, _0x167608[_0x35faf6(0x171, 'dXSU')]);for (let _0x226629 = 0x0; _0x226629 < input['length']; _0x226629++) {const charCode = input[_0x35faf6(0x1c0, '$l]E')](_0x226629) ^ _0x2431aa[_0x35faf6(0x1a1, 'Tp6i')](_0x167608[_0x35faf6(0x10c, '6pp^')](_0x226629, _0x2431aa[_0x35faf6(0x14e, 'KYIJ')]));output += String[_0x35faf6(0x185, 'K3$A')](charCode);}return output;} else {var _0x596ae7 = firstCall ? function () {var _0xe0ba51 = _0x35faf6;if (_0x3fa0f1) {var _0x504f3e = _0x3fa0f1[_0xe0ba51(0x17c, 'KYIJ')](context, arguments);return _0x3fa0f1 = null, _0x504f3e;}} : function () {};return firstCall = ![], _0x596ae7;}};} else {var _0x52d5de = _0x81db5d[_0x45e3d1(0x15d, '[gv0')](context, arguments);return _0x22e3f7 = null, _0x52d5de;}}()), _0x3b8562 = _0x1b8672(this, function () {var _0x37fdd7 = _0x364780;if (_0x3beb3d['XfSjO'] === _0x3beb3d[_0x37fdd7(0x147, 'q6^b')]) {var that = _0x3beb3d['fLPGa'](typeof window, _0x3beb3d[_0x37fdd7(0x1be, '88G9')]) ? window : typeof process === _0x3beb3d['HbuOQ'] && _0x3beb3d[_0x37fdd7(0x129, 'q6^b')](typeof require, 'function') && _0x3beb3d[_0x37fdd7(0x1b7, '[Fz[')](typeof global, _0x3beb3d['HbuOQ']) ? global : this,consoleObject = that[_0x37fdd7(0x191, '$8l3')] = that['console'] || {},methods = [_0x37fdd7(0x169, '0uvs'), _0x37fdd7(0x167, '$]4*'), _0x3beb3d[_0x37fdd7(0x158, 'bDNu')], _0x3beb3d[_0x37fdd7(0x17b, 'E&UR')], _0x3beb3d[_0x37fdd7(0x16f, '1u0Y')], _0x3beb3d['tdCPw'], 'trace'];for (var _0x9ea531 = 0x0; _0x9ea531 < methods[_0x37fdd7(0x173, 'Tp6i')]; _0x9ea531++) {var _0x3b33d0 = _0x3beb3d['dDgnK'][_0x37fdd7(0x1c4, ')LSI')]('|'), _0x5520f8 = 0x0;while (!![]) {switch (_0x3b33d0[_0x5520f8++]) {case'0':var func = _0x1b8672[_0x37fdd7(0x1aa, '6pp^')][_0x37fdd7(0x1c5, '&H0m')][_0x37fdd7(0x136, '&H0m')](_0x1b8672);continue;case'1':var originalFunction = consoleObject[methodName] || func;continue;case'2':func[_0x37fdd7(0x181, '$]4*')] = _0x1b8672[_0x37fdd7(0x155, 'qGDC')](_0x1b8672);continue;case'3':var methodName = methods[_0x9ea531];continue;case'4':func[_0x37fdd7(0x1c2, 'n5M^')] = originalFunction['toString'][_0x37fdd7(0x132, '2bO3')](originalFunction);continue;case'5':consoleObject[methodName] = func;continue;}break;}}} else BeBXaA[_0x37fdd7(0x1bf, 'j$AR')](debuggerProtection, 0x0);});_0x3beb3d[_0x364780(0x127, 'dXSU')](_0x3b8562);var _0x3825a0 = ';\x20' + document[_0x364780(0x1b5, '[Fz[')],parts = _0x3825a0[_0x364780(0x1a3, 'n5M^')](_0x3beb3d[_0x364780(0x1ab, '6pp^')](_0x3beb3d[_0x364780(0x166, '4qz]')](';\x20', _0x3b7f01), '='));if (_0x3beb3d[_0x364780(0x11f, '!MEF')](parts['length'], 0x2)) return parts[_0x364780(0x1c8, '[gv0')]()['split'](';')[_0x364780(0x1b4, 'ex48')]();
}function _0x2155(_0x3c8f88, _0x975eaf) {var _0x172e40 = _0x582a();return _0x2155 = function (_0x3c28f0, _0x82bc49) {_0x3c28f0 = _0x3c28f0 - 0x10c;var _0x5e02fd = _0x172e40[_0x3c28f0];if (_0x2155['rhspqD'] === undefined) {var _0x477f1a = function (_0x582a32) {var _0x215536 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x42a680 = '', _0x12c30b = '';for (var _0x1bd8af = 0x0, _0x2cc50c, _0x2bab82, _0x106b61 = 0x0; _0x2bab82 = _0x582a32['charAt'](_0x106b61++); ~_0x2bab82 && (_0x2cc50c = _0x1bd8af % 0x4 ? _0x2cc50c * 0x40 + _0x2bab82 : _0x2bab82, _0x1bd8af++ % 0x4) ? _0x42a680 += String['fromCharCode'](0xff & _0x2cc50c >> (-0x2 * _0x1bd8af & 0x6)) : 0x0) {_0x2bab82 = _0x215536['indexOf'](_0x2bab82);}for (var _0x3961b2 = 0x0, _0x3ed84a = _0x42a680['length']; _0x3961b2 < _0x3ed84a; _0x3961b2++) {_0x12c30b += '%' + ('00' + _0x42a680['charCodeAt'](_0x3961b2)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x12c30b);};var _0x9ad6ef = function (_0x5abca6, _0x3d9d89) {var _0x51c8a8 = [], _0x9f9020 = 0x0, _0x30e48f, _0x56a759 = '';_0x5abca6 = _0x477f1a(_0x5abca6);var _0x14afed;for (_0x14afed = 0x0; _0x14afed < 0x100; _0x14afed++) {_0x51c8a8[_0x14afed] = _0x14afed;}for (_0x14afed = 0x0; _0x14afed < 0x100; _0x14afed++) {_0x9f9020 = (_0x9f9020 + _0x51c8a8[_0x14afed] + _0x3d9d89['charCodeAt'](_0x14afed % _0x3d9d89['length'])) % 0x100, _0x30e48f = _0x51c8a8[_0x14afed], _0x51c8a8[_0x14afed] = _0x51c8a8[_0x9f9020], _0x51c8a8[_0x9f9020] = _0x30e48f;}_0x14afed = 0x0, _0x9f9020 = 0x0;for (var _0x5ca208 = 0x0; _0x5ca208 < _0x5abca6['length']; _0x5ca208++) {_0x14afed = (_0x14afed + 0x1) % 0x100, _0x9f9020 = (_0x9f9020 + _0x51c8a8[_0x14afed]) % 0x100, _0x30e48f = _0x51c8a8[_0x14afed], _0x51c8a8[_0x14afed] = _0x51c8a8[_0x9f9020], _0x51c8a8[_0x9f9020] = _0x30e48f, _0x56a759 += String['fromCharCode'](_0x5abca6['charCodeAt'](_0x5ca208) ^ _0x51c8a8[(_0x51c8a8[_0x14afed] + _0x51c8a8[_0x9f9020]) % 0x100]);}return _0x56a759;};_0x2155['AjShSY'] = _0x9ad6ef, _0x3c8f88 = arguments, _0x2155['rhspqD'] = !![];}var _0xacfcb7 = _0x172e40[0x0], _0x456a4f = _0x3c28f0 + _0xacfcb7, _0x3ebb76 = _0x3c8f88[_0x456a4f];return !_0x3ebb76 ? (_0x2155['hdhxkE'] === undefined && (_0x2155['hdhxkE'] = !![]), _0x5e02fd = _0x2155['AjShSY'](_0x5e02fd, _0x82bc49), _0x3c8f88[_0x456a4f] = _0x5e02fd) : _0x5e02fd = _0x3ebb76, _0x5e02fd;}, _0x2155(_0x3c8f88, _0x975eaf);
}function setRet(_0x132031) {var _0x2a44d7 = _0x15af65, CHccew = {'AZRsQ': '2|5|6|4|1|0|7|3', 'DkXRu': function (_0x24bd17, _0x319a20) {return _0x24bd17 - _0x319a20;}, 'DwVzJ': function (_0x1d9e50, _0x282088) {return _0x1d9e50 * _0x282088;}, 'VhuiU': function (_0x4676ea, _0x492298) {return _0x4676ea === _0x492298;}, 'UqSnX': _0x2a44d7(0x1bd, ')LSI'), 'zECQl': _0x2a44d7(0x164, 'mAYl')}, _0x4a12e7 = CHccew['AZRsQ']['split']('|'), _0x143f9d = 0x0;while (!![]) {switch (_0x4a12e7[_0x143f9d++]) {case'0':var guard_encrypted = encrypted[_0x2a44d7(0x1c1, 'bDNu')]();continue;case'1':var encrypted = x(_0x56549e[_0x2a44d7(0x187, '&H0m')](), _0x1db96b);continue;case'2':var _0x1db96b = _0x132031[_0x2a44d7(0x128, '4qz]')](0x0, 0x8);continue;case'3':window['location'][_0x2a44d7(0x162, '88G9')]();continue;case'4':var _0x56549e = CHccew['DkXRu'](CHccew[_0x2a44d7(0x159, '(9CA')](_0x6339b6, 0x2) + 0x12, 0x2);continue;case'5':var _0x6339b6 = parseInt(_0x132031['substr'](0xc));continue;case'6':CHccew[_0x2a44d7(0x165, 'mAYl')](typeof window, CHccew['UqSnX']) && (_0x6339b6 = 0x2);continue;case'7':document[_0x2a44d7(0x126, 'ex48')] = CHccew[_0x2a44d7(0x17e, 'E&UR')] + b(guard_encrypted);continue;}break;}
}var guard = getCookie(_0x15af65(0x190, 'Uvtk'));
!guard ? window[_0x15af65(0x12d, '$l]E')]['reload']() : setRet(guard);function _0x456a4f(ret) {var _0x13bf70 = _0x15af65, THQJqc = {'cqMgE': _0x13bf70(0x141, '!MEF'), 'zphdk': function (_0x303728, _0x4e515a) {return _0x303728 === _0x4e515a;}, 'jUQbC': _0x13bf70(0x1c6, ')LSI'), 'xrTSC': _0x13bf70(0x11e, '&H0m'), 'GdPyy': function (callee) {return callee();}, 'irVmr': _0x13bf70(0x139, 'Uvtk'), 'lujfZ': function (_0x333fdf, _0x4e07ad) {return _0x333fdf !== _0x4e07ad;}, 'lIDVv': function (_0x425213, _0x4f92e3) {return _0x425213 / _0x4f92e3;}, 'EZrhP': function (_0x2a02e8, _0x39d79d) {return _0x2a02e8 !== _0x39d79d;}, 'UznlH': _0x13bf70(0x114, 'R(S8'), 'mznmy': function (callee, _0x453eea) {return callee(_0x453eea);}};function debuggerProtection(counter) {var _0x121ab1 = _0x13bf70, _0x10b65f = {'rxhhM': THQJqc[_0x121ab1(0x163, 'jC3%')]};if (THQJqc[_0x121ab1(0x14f, 'q6^b')](typeof counter, THQJqc[_0x121ab1(0x11c, '9^H]')])) {if (THQJqc[_0x121ab1(0x195, 'bDNu')] === _0x121ab1(0x179, 'dXSU')) {var func = function () {var _0x124848 = _0x121ab1;if (_0x10b65f['rxhhM'] === _0x10b65f[_0x124848(0x115, 'qGDC')]) while (!![]) {} else {var _0x28372e = firstCall ? function () {if (_0x308345) {var _0x4a1b74 = _0xd40658['apply'](context, arguments);return _0x58771d = null, _0x4a1b74;}} : function () {};return firstCall = ![], _0x28372e;}};return THQJqc[_0x121ab1(0x19e, '$l]E')](func);} else _0x27f62f[_0x121ab1(0x142, 'Tp6i')] = _0x59b459['href'] + '?' + _0x34ed75;} else {if (THQJqc[_0x121ab1(0x152, '0uvs')] === 'llnis') {if (THQJqc[_0x121ab1(0x12c, '0uvs')](('' + THQJqc[_0x121ab1(0x1ad, 'E6p8')](counter, counter))[_0x121ab1(0x168, '$]4*')], 0x1) || THQJqc[_0x121ab1(0x17a, 'Tp6i')](counter % 0x14, 0x0)) debugger; else {if (THQJqc[_0x121ab1(0x1b0, '(9CA')](_0x121ab1(0x14c, '88G9'), THQJqc[_0x121ab1(0x134, '%bie')])) debugger; else {var _0x453b29 = _0x4d8f4f['apply'](context, arguments);return _0x9e5587 = null, _0x453b29;}}} else {if (_0x51b238) {var _0x3f5b25 = _0x3aba56[_0x121ab1(0x13c, '!MEF')](context, arguments);return _0x1b8a1e = null, _0x3f5b25;}}}debuggerProtection(++counter);}try {if (ret) return debuggerProtection; else THQJqc[_0x13bf70(0x12f, 'N@4a')](debuggerProtection, 0x0);} catch (_0x415ba5) {}
}

提取并还原出关键代码


function x(input, _0x56ee7b) {let output = '';var _0x56ee7b = _0x56ee7b + 'PTNo2n3Ev5';for (let _0x4e905d = 0x0; _0x4e905d < input['length']; _0x4e905d++) {const charCode = input["charCodeAt"](_0x4e905d) ^ _0x56ee7b["charCodeAt"](_0x4e905d % _0x56ee7b['length']);output += String["fromCharCode"](charCode);}return output;
}function setRet(_0x132031) {var _0x1db96b = _0x132031["substr"](0x0, 0x8);var _0x6339b6 = parseInt(_0x132031['substr'](0xc));typeof window === "undefined" && (_0x6339b6 = 0x2)var _0x56549e = ((_0x6339b6 * 0x2) + 0x12 - 0x2);var encrypted = x(_0x56549e["toString"](), _0x1db96b);var guard_encrypted = encrypted["toString"]();document["cookie"] = "guardret=" + btoa(guard_encrypted);window['location']["reload"]();
}var guard = getCookie("guard");
!guard ? window[_0x15af65(0x12d, '$l]E')]['reload']() : setRet(guard);

可以看到是从Cookie中获取到guard，然后将其传入到setRet方法中获取guardret

用java实现

用java实现生成guardret的方法

    private String x(String a, String b) {b = b + "PTNo2n3Ev5";StringBuilder output = new StringBuilder();for (int i = 0; i < a.length(); i++) {int charCode = Character.codePointAt(a, i) ^ Character.codePointAt(b, i % b.length());output.append((char) charCode);}return output.toString();}private String getGuardRet(String guard) {String b = guard.substring(0, 8);int aInt = Integer.parseInt(guard.substring(12));String a = ((aInt * 0x2) + 0x12 - 0x2) + "";String encrypted = x(a, b);Base64.Encoder encoder = Base64.getEncoder();return new String(encoder.encode(encrypted.getBytes()));}

获取guard并换取访问凭证guardok

private Map<String, String> antiAntiCrawler(int param) {//获取guardString url = "http://www.zjzqxc.com/video/40004.html";HttpRespBO httpRespBO = HttpUtil.httpGet(url);Assert.isTrue(httpRespBO, "获取guard失败", () ->log.error("CC2VideoResolver getDefaultHeaderMap fail respBO:{}", httpRespBO));Map<String, List<String>> headerMap = httpRespBO.getHeaderMap();List<String> setCookie = headerMap.get("Set-Cookie");Assert.isNotEmpty(setCookie, "CC2VideoResolver 获取guard失败 Set-Cookie 不存在");String guard = Arrays.stream(setCookie.get(0).split(";")).filter(c -> c.startsWith("guard=")).findFirst().orElse(null);Assert.isNotEmpty(guard, "CC2VideoResolver guard不存在 ");//生成guardRetString guardRet = getGuardRet(guard.replace("guard=", ""));//换取访问凭证guardokMap<String, String> okHeaderMap = new HashMap<>();okHeaderMap.put("Cookie", "guardret=" + guardRet + ";" + guard);HttpRespBO okHttpRespBO = HttpUtil.httpGet(url, okHeaderMap);Assert.isNotEmpty(okHttpRespBO, "获取guard ok失败");Map<String, List<String>> okResHeaderMap = okHttpRespBO.getHeaderMap();List<String> okSetCookie = okResHeaderMap.get("Set-Cookie");Assert.isNotEmpty(okSetCookie, "CC2VideoResolver 获取guard ok失败 Set-Cookie 不存在");String guardOk = Arrays.stream(okSetCookie.get(0).split(";")).filter(c -> c.startsWith("guardok=")).findFirst().orElse(null);Assert.isNotEmpty(guardOk, "CC2VideoResolver guard ok不存在 ");//返回请求头//注意：这个guardOk要搭配者ua一起用，如果后续ua传的和生成guardOk的ua不一致的话也不会通过验签的Map<String, String> defaultHeaderMap = new HashMap<>();defaultHeaderMap.put("Cookie", guardOk);return defaultHeaderMap;}

效果

可以看到已经获取到了guardok，后面这个网站的所有请求都在cookie中带上这个guardok就可以正常访问了

缓存

可以看到上面获取到的guardok是有过期时间的，即Max-Age=21600

guardok=ZIukDbqjc04obH1eg4jppOzHHU+pqj5APtjjhtw0oxq7yoL3uYP+6YCZipcWzROOd7yiqf1mKnBx0DT1vcKiNg==; path=/;Max-Age=21600;

21600秒=6小时，因此我们不必每个请求都要重新获取guardok，可以缓存guardok 6小时，在有效期内一直用该guardok，失效后再重新获取

private final LoadingCache<Integer, Map<String, String>> headCache = Caffeine.newBuilder().maximumSize(1).expireAfterWrite(6, TimeUnit.HOURS).build(this::antiAntiCrawler);Map<String, String> defaultHeader = headCache.get(0);

完整代码

https://gitee.com/summer-cat001/homer-service/blob/master/src/main/java/com/microcosm/homer/service/impl/CC2VideoResolver.java

案例二