今日头条新闻爬虫，as、cp、_signature参数解析.zip

## 今日头条 【转行三重奏】-爬虫Js逆向复习-今日头条as、cp、_signature参数分析。 ## [回到总目录](https://github.com/LeoLin9527/ZSpider) ## 逆向简述 1、feed关键字XHR断点,Call Stack找到如下位置的代码，找到signature参数生成位置。 2、推测this._setParams这个方法生成as,cp参数，断点调试。 ![]() ```javascript function a() { var t = Math.floor((new Date).getTime() / 1e3) , e = t.toString(16).toUpperCase() , i = (0, o.default)(t).toString().toUpperCase(); if (8 != e.length) return { as: "479BB4B7254C150", cp: "7E0AC8874BB0985" }; for (var n = i.slice(0, 5), a = i.slice(-5), s = "", r = 0; r < 5; r++) s += n[r] + e[r]; for (var l = "", u = 0; u < 5; u++) l += e[u + 3] + a[u]; return { as: "A1" + s + e.slice(-3), cp: e.slice(0, 3) + l + "E1" } } var s = i(128) , o = n(s); t.exports = a } ``` 3、max_behot_time时间戳,初始为0,后续请求前一请求的返回值。 4、_signature 跟UA指纹有关,页面加载完毕全局搜索或从步骤一XHR追踪位置，发现由g.sign生成。 5、解决方案一、使用selenium执行JS代码 return window.TAC.sign(max_behot_time_tmp)。 6、调试g.sign，js的anonymous算法应用了控制流平坦方式，无法从g.sign得出结果，往上查找g对象寻找思路。 7、o对象涵盖一些已经生成好函数，那么下列代码个人理解为若该函数已经生成则直接调用，不存在则进行生成。 ```javascript function t(a) { if (o[a]) return o[a].exports; var r = o[a] = { exports: {}, id: a, loaded: !1 }; return e[a].call(r.exports, r, r.exports, t), r.loaded = !0, r.exports } ``` 8、那么a=87时候，e[a]表示的函数为下列 ``` function(e, t) { Function(function(e) { return 'e(e,a,r){(b[e]||(b[e]=t("x,y","x "+e+" y")(r,a)}a(e,a,r){(k[r]||(k[r]=t("x,y","new x[y]("+Array(r+1).join(",x[y]")(1)+")")(e,a)}r(e,a,r){n,t,s={},b=s.d=r?r.d+1:0;for(s["$"+b]=s,t=0;t<b;t)s[n="$"+t]=r[n];for(t=0,b=s=a;t<b;t)s[t]=a[t];c(e,0,s)}c(t,b,k){u(e){v[x]=e}f{g=,ting(bg)}l{try{y=c(t,b,k)}catch(e){h=e,y=l}}for(h,y,d,g,v=[],x=0;;)switch(g=){case 1:u(!)4:f5:u((e){a=0,r=e;{c=a<r;c&&u(e[a]),c}}(6:y=,u((y8:if(g=,lg,g=,y===c)b+=g;else if(y!==l)y9:c10:u(s(11:y=,u(+y)12:for(y=f,d=[],g=0;g<y;g)d[g]=y.charCodeAt(g)^g+y;u(String.fromCharCode.apply(null,d13:y=,h=delete [y]14:59:u((g=)?(y=x,v.slice(x-=g,y:[])61:u([])62:g=,k[0]=65599*k[0]+k[1].charCodeAt(g)>>>065:h=,y=,[y]=h66:u(e(t[b],,67:y=,d=,u((g=).x===c?r(g.y,y,g.z):g.apply(d,y68:u(e((g=t[b])<"<"?(b--,f):g+g,,70:u(!1)71:n72:+f73:u(parseInt(f,3675:if(){bcase 74:g=<<16>>16g76:u(k[])77:y=,u([y])78:g=,u(a(v,x-=g+1,g79:g=,u(k["$"+g])81:h=,[f]=h82:u([f])83:h=,k[]=h84:!085:void 086:u(v[x-1])88:h=,y=,h,y89:u({e{r(e.y,arguments,k)}e.y=f,e.x=c,e.z=k,e})90:null91:h93:h=0:;default:u((g<<16>>16)-16)}}n=this,t=n.Function,s=Object.keys||(e){a={},r=0;for(c in e)a[r]=c;a=r,a},b={},k={};r'.replace(/[-]/g, function(t) { return e[15 & t.charCodeAt(0)] }) }("v[x++]=v[--x]t.charCodeAt(b++)-32function return ))++.substrvar .length(),b+=;break;case ;break}".split("")))()('g,$@drbms!l!n Иb/s"g,&Usz`dlms#g,.}jcb{|zFbxjx}~ms$g,(lfi~ah`{ms%g,)gk}ejo{cms&g,&qnfme|ms\',!^s(,)|doikgauus),,jabSysaWzrrs*,(|fY~d`hs+,&jbfn~cs,,\'nfmosCks-,*icmM`ttSgs.,&eoi{Ks/,)ziy|f~vs0l#l*ms10s2yWl ._b&s o ]1l l Jb<k$.aj;l .Tb<k$.gj/l .^b<k&i"-4j!+& s3yPo ]3s!l!l Hd>&l!l Bd>&+l!l <d>&+l!l 6d>&+l!l &+ s4y=o o ]7q"21o l q"18o ]4l 2d>& s6{s5yMo o ]8q"21o ]2Ld<l 4d#>>>b|s!o l q"18o ]4l!& s7yIo o ]6q"21o ]4o ]2Jd<l 6d#>>>b|&o ]3l &+ s8yǽ,`*&3#-r:\tt}a6\'%`b\rf\nkop\v\b3%\bU-(\t1=%;);
\r\rO?.>/\t=s!$ s"0s$l o ],ml$3+d">=kÝl vo ].mxl$v1+s$[!cįb&@d<l vo ].mxl$v1+s$[!cįb&8d<b|l vo ].mxl$v1+s$[!cįb&b|s#l"l!vo ]/mxl#i%9tz40b&Bd>[!c+s"l"l!vo ]/mxl#i$5j40b&<d>[!c+s"l"l!vo ]/mxl#࿰b&6d>[!c+s"l"l!vo ]/mxl#._b&[!c+s"jｒl o ],ml$b-0b>kÑl vo ].mxl$v1+s$[!cįb&@d<l o ],ml$b>k6l vo ].mxl$[!cįb&8d<j!0b|s#l"l!vo ]/mxl#i%9tz40b&Bd>[!c+s"l"l!vo ]/mxl#i$5j40b&<d>[!c+s"l"l o ],ml$b>k6l!vo ]/mxl#࿰b&6d>[!cj#$!=+s"l"$!=+s"l" s9yĶo ]%v,-n|jqewVxp{rvmmx,&effkx[!cs"l",%roc|a.Pal",&nbanb@al"v,*mnxNaadtjg[!mx$"2d[!cs#l#,$bjhs,*;?|u.|uc{ual#v,(n`fgXhv{mx$$龘ฑภ경2<[#c}l#,*ycmiaxR}ga2al#,+xdby@vwav`M1al#,)zbd{Nacc,$hlkbal#v,#bvfmx88802[%c}l#v,&uszfanmx[ c}l"v,)}eOmyoZB]mx[ cs!0s$l$Pb<k4l l!o ],mb%^l$1+s$jl s:y:(1o ]:i\'1ps9wxb& ) %{s / s;y>0s"l"l!o ],mb<k+l"^l"1+s"j\bl s<y¶o ]!n s l vr\'setDatex1[!c}l vr(setMonthx5[!c}0l v,1vwg@|{rbvt~S{xlEUmx[ cb-s!l vr(setMonthx;[!c}0l v,1vwg@|{rbvt~S{xlEUmx[ cb-s"gr$Mathvr#minxl!l"["c s=yď(ąo ]%v,-n|jqewVxp{rvmmx,&effkx[!cs l v,*mnxNaadtjgmx,%rceoe[!cs!l!v,,khzJhew}g|yymx,9N_Y[QA{ECWD{WCILLXN^rGAV^[!cs"l!v,,khz_qcs~qasemxl",5@XZYJQ^XBHZnemq{rceoem[!cs#l!v,,khz_qcs~qasemxl",7BVT[HWXZ@rdlgawcuw~oikam[!cs$l#$!/+l$+ ) &{s $ s>yĩ[ s o ]&,\'wd|mbb~ms!l!v!k#}[ s"0s#l#l"o ],mb<ké(Þl"l#ms$[ s%0s&l&l$o ],mb<k\\l$vr$itemxl&[!ckCl%vr$pushxl$vr$itemxl&[!cr$type[!c}l&1+s&jￗl$r$name$ +s&l$r\'versionk3l&l$r\'version$ ++s&l&l$r(filename$ ++s&l&l%vr$joinx$ [!c+s&l vr$pushxl&[!c}) l#1+s#jｊl vr$joinx$!_[!c s?yᱫ,)deec~~nst,*yjb~#|uc{u,%vcuao[#s gr&Objectn s!gr&Objectn s"l %s#l#u&kās$o ]%v,-n|jqewVxp{rvmmx,$wugi[!cs%l%,)`deiF[]],-`cb}|~yx{{tpal%,%vr~dlm,(nfd_dtj,$37val%,%vr~dlm,*ldbyHn}x~jl$ao ]%,$fjb~mv,+j|}katRzzxqmxl%[!c}l!l$l%r+offsetWidthal"l$l%r,offsetHeightao ]%,$fjb~mv,+yi`ayuRzzxqmxl%[!c}jＹ,+Jbiocu1_|zz,%Dtnie,+J~doc0S~rw~,,Mgn|1Zvvgs`,(I{cj`-C[,,Mgn|1\\rfgy`,5Td~yu:Ishp{EEnpdHDM,0Qc{rx5Cyqzuy=SL,8Zpnhho{~M
tFVDtIGY\vaB@@,,Nbad0P|g}dcv,1S}|xwy8Vv<NjfLD,\'Dieci~d,\'Didhyel,,Olcmbxs3Ytb,\'Dmg~~~t,.Mj~egam5Qxlqsx,2Qvzacea9IxtrqsBNMH,*Idadm/Cp|`,-Nabyr2@u{e7UJ,(Kfdxcao|,\'Dg|xbi,+Hcx|fuc2]qb,(Ohxjab`k,&Abfl|j,\'@mfxlel,)Aogzhzfsp,.Fj|gwg}vw7V|o~,&Ojxhi,-A{lyus3Vgppm,2^fw|rv8Z{wptymAQJZ,.Bzsxvr4Vyykvv~,*F~odjn0Wsk,-A[LYUS3SGWY\\\\,2^fw|rv8Q{uxjlvTHLD,+Gyngkq1Arzf,6Zb{p~z<NqS
vZT@QUA]OY,3_avsy9Izrn>JNHAL@@,4Y|uewju}h=M~NRpAWOA,&Khfhid,0]~||`lfr8Zuioth~,)DY+Kbzgyr,*GX,B{{|~}x,*GX,]I`dy{p,7ZK9H~zxlzNBGwDHT\bzOYEK,-@]/Cp|`4Fseq,(EZ*Xigi,&K^Z@KO,*GR^DOK0A@\\,(Xhfjxd``,1Asuayw9VrrrjfPD,+Xijaj0A`zza,,_hi`u1Apf|fc,([lmdi-[F,.]jw~w3A\\6[q~ro,1Bwt{p6BQ9I~qt|pLE,/\\uv}v4@_7K`wysq,&Rf`fgj,%Qojmz,/[y|w`4[s`8Kuv}s,2Fzype7V|m;Nrs~N
rp,,Xkmerzv`5[D,\'Qm{njbl,)^cekigawb,+\\ecikyu`4\',+\\ecikyu`4&,8Y{{u=SK\0bMM@@HTMM\ngEJF[,4Uvws}tc;YsymAWGGics,0QU]QQ5UVKUUU<MLP,.Oksw3Stdvuvt,2SW[WS7_XHZQRP[\0qpl,)Hmnbnw/VS,\'F`hxdbd,3Rxwselli;YejmA
`LHA,/N|swa``e7U|~rip,(Iemn~doa,*Kfmwaau1PG,3Rypd~{xt;HdnzWSKWAW,=\\szRHABJr^XL]YEYK]r]]PPXD]],.ObucFjdp6Z|9XO,\'Ffmkgy~,+Jbj}n~p2]qb,*Kek~oaqDBP,-L`{y`gv4Zz~n|,)Hzj~ldfdp,.O`}w3W}wy{|hb,1Pbcxp6Twuui<XspJH,3Rdezr8J^;[rjwIBmAJ,2Sauwt8Mckyn{kTHLD,&GUKAOY,(I[DD,]\\@,(I{x~-L[,,Mx|`bp2Pz5TC,0Qgs}`Rwe||:Yw=\\K,0Qgs}`Rwe||:Vx=\\K,&GQMGCY,(Ipdlwn,%Ggilp,0Rp|txt6Dyw}zq=SQ,+Imce/W~f{}v,0Rp|xSzbqz:Vx=\\K,+Im~ejbg{xp,4Vte|}klrpq{?oMFbDEB,&Df|hdl,)KkmciLxt,,Nl{jb1P|pzx~,*Hjyeozc1+ ,\'Eisedgl,\'Emef+AY,%Gcjjf,.Lj~vgzua6Us9XO,.Ljb}{}4Fwyk9\\Y,3Qqgz~v9Izrn>Yb
fFIL,4Vpdyyk~;QI>\\OOFFJVCC,2Pvf{~vj}\\zouwpN
`w,.Ljbzrfq[x|9XO,*Hbk-Mnc}}},\'Eagdn~I,.Lcqryrpqse8PNX,-Obnyc_w]AU7LM,)Keoccg/\'#,2P|pzx~8.(;SqzlTXNF,3Q{qyyq9-)<Ns~LMABTV,)Keoccg/]E,/Mu}}}5[C8[vzv,3Q{qyyq9WO<^qqDDLPAA,;YsyqqI
owuIT\\LX\voBC_BTA@QQ,2P|{~e}u|;Ods}OM,\'Eg|foi,,Nok|tk3\\txs,0Rcswxpo7Pxt<TJ\\,,Nkbu2Qp5TC,.L}yes}z|u7Zvv,(J{ejhzov,-O|`gp~}t6Y}n,,Naxq}~zu@FT,/Mbda{4Fueqin;QI,.Mn|xt|f{vv9\\Y,*Ij`d}{1_G,,Olbcyv`rd}se,\'Dignj~l,0Spa{{Ygv{xy=\\K,)Jkxxhbcqc,\'Dmg~jy,\'Dmskebh,(KN*Dahin,(KN*_e`k|,*Icmaemp`w,-Nf