[分享] 某科网登录模块RSA加密分析

import json
from RSA_jiami import encryption
import execjs,re
import requests
def getjs():
    cookie=open("cookie.txt","r").read()
    url="https://sso.zxxk.com/login"
    header={
    "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
    "Accept-Encoding": "gzip, deflate, br",
    "Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6",
    "Cache-Control": "no-cache",
    "Connection": "keep-alive",
    "Host": "sso.zxxk.com",
    "Pragma": "no-cache",
    "Sec-Fetch-Dest": "document",
    "Sec-Fetch-Mode": "navigate",
    "Sec-Fetch-Site": "same-origin",
    "Sec-Fetch-User": "?1",
    "Upgrade-Insecure-Requests": "1",
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 Edg/118.0.2088.76",
    "sec-ch-ua": '''"Chromium";v="118", "Microsoft Edge";v="118", "Not=A?Brand";v="99"''',
    "sec-ch-ua-mobile": "?0",
    "sec-ch-ua-platform": "Windows",
    "Cookie":cookie
    }
    html=requests.get(url=url,headers=header).text
    # html_headers=requests.get(url=url,headers=header).headers
    js=re.findall('eval\("(.*?)"\);',html)[0]
    flowId=re.findall('<input type="hidden" name="flowId" value="(.*?)">',html)[0]
    execution=re.findall('<input type="hidden" name="execution" value="(.*?)"/>',html)[0]
    hanshu=re.findall("function (.*?)\(.*?\){",js)[0]
    canshu=re.findall("\((.*?)\){",js)[0]
    return flowId,execution,hanshu,canshu,js