JS introduction to reverse the recycling business network of learning, simple encryption mobile phone number

️ Actual combat scene

The target site to be collected this time is

huishoushang.com/

,Its data details page has a public contact number, and the page is encrypted with front-end JS. During the test, I thought it was a font anti-crawling, but the result was not.

Randomly opened a piece of data in the second-hand market, we saw a familiar mobile phone number again, and then quickly switched to the font tab of the developer tools, but nothing was captured.

Psychologically happy, I thought I encountered a new form of font encryption, but I was slapped in the face.

The rendering effect is as follows, you can see that the source code of the webpage does not return any number-related information, but there is a

decrypt

Come into view, such an obvious encryption prompt?

️ Actual code

Since the encrypted information is in the attributes of the HTML element, you can directly retrieve the keyword

decrypt

.

First extract an encrypted string for testing

(((((((((a01 % a03) % g02) % g08)% a08) % g04) % a09) % c07) % c00) % b09) %
b08;


After searching, the following decryption code is obtained:

var str = $(th).attr("decrypt");
if (str != null || str != undefined || str != '') {
$(th).attr("decryptok", "");
// str = str.replace(/-/g, ",").replace(/ /g, ",");
let strArray = str.split('%');
var newArray = [];
for (var i = 0; i < strArray.length; i++) {
let _rTemp=this.model.rArray.filter((a) => a.l == strArray[i]);
if (_rTemp.length > 0) {
newArray.push(_rTemp[0].v);
} else {
newArray.push(strArray[i]);
}
}
$(th).html(newArray.join(''));


A key point is found, that is, by

str.split('%')

, intercepted the string, and

this.model.rArray

also became a problembreakthrough point.

Retrieve

rArray

in the source code again, and find its defined position again.

/*Number Decrypt */
var NumberDecrypt = {
model: {
rArray: [
{ l: 'a01', v: '1' }, { l: 'b02', v: '1' }, { l: 'c03', v: '1' }, { l: 'f04', v: '1' }, { l: 'g01', v: '1' },
{ l: 'a02', v: '2' }, { l: 'b03', v: '2' }, { l: 'c04', v: '2' }, { l: 'f05', v: '2' }, { l: 'g00', v: '2' },...
],
refreshTime:null,
refreshCount: 0
},


At this point, I believe you already know the solution, that is, the encrypted string is passed

%

is cut, then the resulting value, for example

a01

is converted toNumber

1

.

This case is not as simple as I thought, I hope everyone can easily grasp it.

You are reading

[Dream Eraser]

After reading the blog, you can click and like it.If there is a mistake, please correct me in the comment area. Eraser's 675 original blog