蓝奏网盘带密码文件分享下载链接分析思路

2023-10-14 01:57| 来源: 网络整理| 查看: 265

蓝奏网盘带密码文件分享下载链接分析思路

先准备准备一个 lanzou链接

链接(自己准备一个该链接只作为演示)： https://wwd.lanzouw.com/i3Ya2065bn0b 密码:6ye7

打开浏览器抓包(开发者工具或者 F12切换出来 ,浏览器都一个样子自己随便选)

切换到network ，抓包数据

在这里插入图片描述

然后输入密码

在这里插入图片描述

通过分析得到重要的页面只有两个【下载页面和提交密码得到下载地址的接口】

下载页面代码

DOCTYPE html> 文件 ::-webkit-scrollbar{background:rgba(0,0,0,0.01);height: 6px;width:6px}::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.1)}::-webkit-scrollbar-thumb:hover {background:rgba(0,0,0,0.5);} ::-webkit-scrollbar-track{background: #f0f0f0;border-radius: 10px;} ::-webkit-scrollbar-thumb{border-radius: 10px;background-color: #c5c5c5;} body{font: 14px Arial,\5FAE\8F6F\96C5\9ED1,sans-serif;margin: auto;color: #333;} a{text-decoration: none;color: #111;} a:hover{color: #FF3311;} .n_hd{ height: 30px;padding: 10px;border-bottom: 1px solid #eee;position: fixed;background: rgba(255, 255, 255, .9);z-index: 8;right: 0;left: 0;} .n_hd a{-webkit-transition: 0.1s;float: right;border-radius: 3px;} .n_hd a:hover{opacity: .7;} .user-ico{float: left;min-width: 300px;text-align: left;line-height: 30px;} .user-name{color:#ff6740;margin-left: 10px;} .user-name-txt{margin-left: 10px;} .user-ico-img{width: 30px;height: 30px;border-radius: 50%;position: absolute;} .user-ico-div{background: #bbb;width: 30px;height: 25px;border-radius: 50%;padding-top: 5px;float: left;} .user-ico-div-1{background: #777;width: 10px;height: 10px;border-radius: 50%;margin: auto;} .user-ico-div-2{background: #777;width: 20px;height: 10px;border-radius: 50%;margin: auto;margin-top: 1px;} .n_login{background: #ffd1c5;padding: 0px 12px;font-size: 12px; line-height: 30px;} .n_login font{color: #fff;} .n_box{width: 593px;margin-right: auto;margin-left: auto;height: auto;padding-top: 150px;} .n_box_ico{border-radius: 10px;width: 100px;height: 100px;margin: auto;} .n_box_ico img{border-radius: 20px; width: 100%;} .n_file_info{text-align: center;color: #888; padding-bottom: 30px;} .n_file_infos{margin-left: 10px;} .n_box_fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;} .n_box_2fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;} .n_box_des{padding: 30px 0;margin: auto;line-height: 30px;min-height: 100px;font-size: 16px;} .n_box_3fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;} .n_file{background: #e1e7ea;font-size: 12px;width: 200px;border-radius: 50px;height: 40px;line-height: 40px;margin: auto;padding: 0 20px;} .n_filesize{position: absolute;} .n_downlink{position: absolute;height: 34px;width: 300px;margin-top: 4px;z-index: 9;} .n_bot{background: #f7f7f7;text-align: center;padding: 50px;} #code{margin: auto;width: 190px;margin-top: 30px;} .n_foot{font-size: 12px;color: #999;padding: 20px;text-align: center;background: #f7f7f7;} .n_copy{} #downajax{text-align: center;float: right;padding: 5px 0;} #downajax a{background: #0af;box-shadow: 0 1px 1px rgba(0,0,0,.15);color: #fff;text-decoration: none;display: block;width: 50px;text-align: center;border-radius: 50px;font-size: 14px;height: 30px;line-height: 30px;} #downajax a:hover{background: #0377ff;} #downajax a:active{box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.25);} #passwddiv{position: fixed;background: #fff;background: rgba(255, 255, 255, .96);width: 100%;height: 100%;top: 0;bottom: 0;z-index: 99;} .passwddiv-center{width: 300px;height: 300px;position: absolute;bottom: 50%;margin-bottom: -100px;left: 50%;margin-left: -150px;} .passwddiv-userico{margin: auto;width: 90px;} .passwddiv-userico-img{width: 90px;height: 90px;border-radius: 50%;position: absolute;} .passwddiv-userico-0{background: #e9edef;width: 90px;height: 75px;border-radius: 50%;padding-top: 15px;} .passwddiv-userico-1{background: #fff;width: 30px;height: 30px;border-radius: 50%;margin: auto;} .passwddiv-userico-2{background: #fff;width: 59px;height: 26px;border-radius: 50%;margin: auto;margin-top: 3px;} .passwddiv-user{text-align: center;margin-top: 20px;} .passwddiv-user span{color: #000000;padding: 0 5px;} .passwddiv-input{width: 200px;margin: auto;padding:10px;border-radius:5px;margin-top: 20px;background: #e9edef;} .passwddiv-input:hover{background: #e1e7ea;} .passwdinput{font-size: 14px;border: 0;background: #e9edef;background: #ffffff\9;line-height: 30px;height: 30px;outline: 0;padding: 0;text-indent: 5px;width: 160px;} .passwdinput:focus{background: #e1e7ea;} .passwddiv-btn{width: 30px;height: 30px;background: #0af;box-shadow: 0 1px 1px rgba(0,0,0,.15);border-radius: 50%;float: right;cursor: pointer;} .passwddiv-btn:hover{background: #0377ff;} .passwddiv-btn:active{box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.25);} .passwddiv-btn-1{border-bottom: 1px solid #fff;width: 15px;margin-top: 14px;margin-left: 6px;} .passwddiv-btn-2{border-bottom: 1px solid #fff;border-right: 1px solid #fff;width: 10px;height: 10px;transform: rotate(-45deg);margin-top: -6px;margin-left: 8px;} #info{text-align:center;padding-top: 10px;} .n_box_des{display:none} .filter{filter: blur(5px);} 13**的分享文件谨防刷单兼职，网贷，金融，裸聊敲诈，赌博等诈骗，请立即举报文件昨天18:50 Win桌面大小：4.0 B 巴克压力。手机下载请扫二维码版权声明：不得利用云存储发布，存储，淫秽，诈骗等违法信息。或者投诉邮箱：[email protected]© 2022 Lanzou 获取13**的文件 //回车事件 $(document).keyup(function (e) { if (e.keyCode == 13) { down_p(); } }); function down_p(){ var pwd =document.getElementById('pwd').value; if (pwd == '' || pwd == undefined || pwd == null) { $(".passwdinput").focus(); return false; } $.ajax({ type : 'post', url : '/ajaxm.php', data : 'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd, dataType : 'json', success:function(msg){ var date = msg; if(date.zt == '1'){ $("#downajax").html("下载"); $("#passwddiv").hide(); $("#filenajax").text(date.inf); document.title = date.inf; $(".n_box_des").show(); $("#file").removeClass("filter"); }else{ $("#info").text(date.inf); }; }, error:function(){ $("#info").html("失败，请刷新"); } }); } document.getElementById('rpt').innerHTML='举报'; var urls =window.location.href + '?cp=qc9w8ud.0.0'; var qrcode = new QRCode('code', { text: urls, width: 190, height: 190, colorDark : '#3f3f3f', colorLight : '#ffffff', correctLevel : QRCode.CorrectLevel.H });

ajaxm.php响应代码

{"zt":1,"dom":"https:\/\/developers.lanzoug.com","url":"?AGYBPww9UGEIAQU9BTAGagM8V28CbFBjBzFWfgYuUSgHcwV0XmUBPAM5U2AGDVA4BzkGPlM7V2dRYwYxUDUBOAA0AWcMd1BiCC0FbgVlBiEDKVciAmBQYAcwVmIGaFF\/BzcFZF4sAWUDbFMqBmBQMgdqBjNTaFdtUTMGOVBqAWMAYgEyDDNQPQhpBTIFNAZlA2pXZAI\/UDQHMFZkBmlRaAcwBWReOwExAzRTNQZ8UCUHJQZ3UypXIFElBmVQfgFpAGQBawxpUDcIbAVqBWIGNwN\/VyYCNFA\/B2VWNgZnUWEHMQVnXjcBbANmUzcGZlBlB2oGLVMiV3NRMAZsUHsBPQAwAXAMJFB0CCkFbgVgBjEDbFdmAmpQZQcxVmgGalFgByEFJ15qASUDaFM0BmNQYgdzBjZTO1d7UWAGNlAiATIAMgFi","inf":"111.txt"}

ajaxm.php请求协议头

:authority: wwd.lanzouw.com :method: POST :path: /ajaxm.php :scheme: https accept: application/json, text/javascript, */* accept-encoding: gzip, deflate, br accept-language: zh-CN,zh;q=0.9 content-length: 114 content-type: application/x-www-form-urlencoded cookie: origin: https://wwd.lanzouw.com referer: https://wwd.lanzouw.com/i3Ya2065bn0b sec-fetch-mode: cors sec-fetch-site: same-origin user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Core/1.77.119.400 QQBrowser/10.9.4817.400 x-requested-with: XMLHttpRequest

提交信息

action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p=6ye7

格式化提交信息方便查看

action: downprocess sign: VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c p: 6ye7

先分析下载页面的主要代码

提交信息给 ajaxm接口然后拿到下载地址

重要代码

$.ajax({ type : 'post', url : '/ajaxm.php', data : 'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd, dataType : 'json', success:function(msg){ var date = msg; if(date.zt == '1'){ $("#downajax").html("下载");

可以看到提交代码，向接口ajaxm提交数据，提交数据=data+pwd,pwd是手动输入的密码。

'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd,

所以我们手动拼接还原提交数据

action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p=6ye7

抓包数据和拼接的提交数据是一致的，最后就是提交数据然后获取响应信息

先判断 zt值是否为1，为1则拼接下载地址

if(date.zt == '1'){

然后拼接信息得到下载地址

date.dom+"/file/"+ date.url

下载地址

https://developers.lanzoug.com/file/?AGYBPww9UGEIAQU9BTAGagM8V28CbFBjBzFWfgYuUSgHcwV0XmUBPAM5U2AGDVA4BzkGPlM7V2dRYwYxUDUBOAA0AWcMd1BiCC0FbgVlBiEDKVciAmBQYAcwVmIGaFF/BzcFZF4sAWUDbFMqBmBQMgdqBjNTaFdtUTMGOVBqAWMAYgEyDDNQPQhpBTIFNAZlA2pXZAI/UDQHMFZkBmlRaAcwBWReOwExAzRTNQZ8UCUHJQZ3UypXIFElBmVQfgFpAGQBawxpUDcIbAVqBWIGNwN/VyYCNFA/B2VWNgZnUWEHMQVnXjcBbANmUzcGZlBlB2oGLVMiV3NRMAZsUHsBPQAwAXAMJFB0CCkFbgVgBjEDbFdmAmpQZQcxVmgGalFgByEFJ15qASUDaFM0BmNQYgdzBjZTO1d7UWAGNlAiATIAMgFi

最后需要注意的是，访问协议头中带有一个 Referer

Referer: https://wwd.lanzouw.com/i3Ya2065bn0b

自此整个流程分析完了,相比较下，有密码的下载链接获取方式比无密码的更加简单。

【本文地址】

公司简介

联系我们