post提交表单问题

Zeaf · 发表于 2020-5-28 18:05

本帖最后由 Zeaf 于 2020-5-29 13:07 编辑

提交表单发现这数据有点问题，pj06xh出现多次，导致最后只有一个有效

[Asm] 纯文本查看 复制代码

issubmit: 0
pj09id: A6A06EA729B95B53E0530100007FF831
pj01id: F01B4426639E4CD8A44C18B8F88A8F27
pj0502id: A4F1C9C5863C44519223E7CF90C34C02
jg0101id: 2006129
jx0404id: 00410167524
xsflid: 
xnxq01id: 2019-2020-2
jx02id: 130004
pj02id: A54A105D6EAD4DD98CDC1243E9018E3C
lstPj06gs: 9
pj06xh: 5
pj0601id_5: FFF640570B6F463BB78FEDCB2681B7CA
pj0601fz_5_FFF640570B6F463BB78FEDCB2681B7CA: 9.5
pj0601fz_5_760CFBCF11CD47389B36CECD4563D03D: 8.2
pj0601fz_5_1553ED95F7A04C8F9C81C16E5E309F14: 6.7
pj0601fz_5_B81162CCDBF74A7FBD9EF607F743F76D: 3
pj06xh: 6
pj0601id_6: 95A335D621524A4D903B540F30A3C391
pj0601fz_6_95A335D621524A4D903B540F30A3C391: 9.5
pj0601fz_6_9E93B6F2FBD54474B7CB9CDD97FED7D7: 8.2
pj0601fz_6_4FBA16667FB74D809FFA842FA4A0DCB1: 6.7
pj0601fz_6_569D7C1A62CB4FD499F202E7604D8A20: 3
pj06xh: 1
pj0601id_1: F4E48D2543384AA1A6CF00D90E7A69CA
pj0601fz_1_F4E48D2543384AA1A6CF00D90E7A69CA: 9.5
pj0601fz_1_F79D171977A04C5C83A73A73E17662B2: 8.2
pj0601fz_1_A252EF44A02A491ABB145B6765375158: 6.7
pj0601fz_1_0767C9A657914F4694E2F2550ADAF1F9: 3
pj06xh: 7
pj0601id_7: A7695FA510B1445196AE8797BCCE1DF4
pj0601fz_7_A7695FA510B1445196AE8797BCCE1DF4: 9.5
pj0601fz_7_DBF0B24D46734DCBB4CFEA4008E1496D: 8.2
pj0601fz_7_5F236292F0BF4A129E1B27F837645642: 6.7
pj0601fz_7_1C8BC4A712564134B972839D40821AFC: 3
pj06xh: 2
pj0601id_2: C434D40EEF0C49BFB1BD30C98BBEC093
pj0601fz_2_C434D40EEF0C49BFB1BD30C98BBEC093: 9.5
pj0601fz_2_0507C17A69D04C93A82CCEDB36629422: 8.2
pj0601fz_2_077175A57ED844FB974AE9BFD5C0A8D1: 6.7
pj0601fz_2_1F1599525E584714A9331BF28B7DB3E5: 3
pj06xh: 8
pj0601id_8: 83E69204BA864AF1B59A779507CAEB10
pj0601fz_8_83E69204BA864AF1B59A779507CAEB10: 9.5
pj0601fz_8_65BD6C6C4CB345A2B717D568D2BFEAA0: 8.2
pj0601fz_8_E19C0D46FB7A49468397DD6DA92D4020: 6.7
pj0601fz_8_3D40FC2BF57046EFA8C22CE878D0E928: 3
pj06xh: 9
pj0601id_9: 80F879B6CC1C472684302DFEA0BF8135
pj0601fz_9_80F879B6CC1C472684302DFEA0BF8135: 9.5
pj0601fz_9_30CE2F49EFD54B928C965F655C8378D6: 8.2
pj0601fz_9_440B356C44E1458FBEFD90109E5AD352: 6.7
pj0601fz_9_D2BBBC8D1DB5489BBCE69241A4E27D2C: 3
pj06xh: 3
pj0601id_3: 27FF76AA81B34588B76E1EF7580BF93A
pj0601fz_3_27FF76AA81B34588B76E1EF7580BF93A: 14.25
pj0601fz_3_E8643E7A818A4C1C8147433D9246DB24: 12.3
pj0601fz_3_97A5FF3C4AC3405F99EDD1BEF2F883CA: 10.05
pj0601fz_3_A5377A1E30CC4A9296377D667416EA2B: 4.5
pj06xh: 4
pj0601fz_4_CAB73F5F9F4F46F184432ACA908C3EE7: 14.25
pj0601id_4: F9B01714667F4E76A7BD452FD9F08546
pj0601fz_4_F9B01714667F4E76A7BD452FD9F08546: 12.3
pj0601fz_4_C50D4A5E539B479793513930C81D8664: 10.05
pj0601fz_4_07F169B9A8434BB4BCB0389829DA5516: 4.5

昨晚获得的信息，似乎用cookie登陆不了，登陆的时候还需要token，但我只是想直接打卡。。不能做到么，必须要先登录才能提交表单么。。。还有验证码感觉好麻烦

[Asm] 纯文本查看 复制代码

ept: application/json, text/plain, */*
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Connection: keep-alive
Content-Length: 137
Content-Type: application/json;charset=UTF-8
Cookie: ***
Host: fangkong.hnu.edu.cn
Origin: [url=https://fangkong.hnu.edu.cn]https://fangkong.hnu.edu.cn[/url]
Referer: [url=https://fangkong.hnu.edu.cn/app/]https://fangkong.hnu.edu.cn/app/[/url]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Mobile Safari/537.36

python的代码：

[Python] 纯文本查看 复制代码

# -*- coding: utf-8 -*-
"""
Created on Fri May 29 00:21:55 2020

@author: Zeaf
"""
import requests,json

headers = {
    'Host': 'fangkong.hnu.edu.cn',
    'content-type': 'application/json',
    'Cookie': '***',
    'Accept-Encoding': 'gzip, deflate, br',
    'Connection': 'keep-alive',
    'user-agent': 'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Mobile Safari/537.36'
}




url = "https://fangkong.hnu.edu.cn/api/v1/clockinlog/add"
data = {
    'RealProvince': "湖南省",
    'RealCity': "长沙市",
    'RealCounty': "岳麓区",
    'RealAddress': "略",
    'IsUnusual': "0",
    'UnusualInfo': "",
    'IsTouch': "0",
    'IsInsulated': "0",
    'IsSuspected': "0",
    'IsDiagnosis': "0",
    'dailyinfo': {'IsVia': "0", 'DateTrip': ""},
    'IsInCampus': "0",
    'IsViaHuBei': "0",
    'IsViaWuHan': "0",
    'InsulatedAddress': "",
    'TouchInfo': "",
    'IsNormalTemperature': "1",
}
r = requests.post(url=url, data=data, headers=headers, verify=False)
#html = json.loads(r.text)
#print(html)
print(r.status_code)

返回401...大佬们如何解决？

这不是学校要求每天要打卡嘛，想通过python的requests.post提交表单完成打卡（打卡就是一个按钮）
但是吧，不会抓包，fiddler也看不出什么名堂（是不是看raw里面的post？但没发现有）
有没有大佬指导一下本萌新，谢谢

这是fiddler中该网站的raw

[Asm] 纯文本查看 复制代码

CONNECT fangkong.hnu.edu.cn:443 HTTP/1.1
Host: fangkong.hnu.edu.cn:443
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36

A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.

Version: 3.3 (TLS/1.2)
Random: 80 07 19 E0 8D E9 6A 15 BD 33 7B 4B 83 32 83 F5 85 46 34 09 6F 80 91 4F AE F7 D4 B3 EB 6C 21 26
"Time": 2089/2/20 19:18:24
SessionID: 9E D0 3F 01 6D D9 5A 40 20 1C 15 75 77 D8 41 78 05 F0 11 29 1A FE 66 00 91 4C 94 14 C2 F5 D1 83
Extensions: 
        grease (0x3a3a)        empty
        server_name        fangkong.hnu.edu.cn
        extended_master_secret        empty
        renegotiation_info        00
        supported_groups        grease [0x5a5a], x25519 [0x1d], secp256r1 [0x17], secp384r1 [0x18]
        ec_point_formats        uncompressed [0x0]
        SessionTicket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
        ALPN                h2, http/1.1
        status_request        OCSP - Implicit Responder
        signature_algs        ecdsa_secp256r1_sha256, rsa_pss_rsae_sha256, rsa_pkcs1_sha256, ecdsa_secp384r1_sha384, rsa_pss_rsae_sha384, rsa_pkcs1_sha384, rsa_pss_rsae_sha512, rsa_pkcs1_sha512, rsa_pkcs1_sha1
        SignedCertTimestamp (RFC6962)        empty
        key_share        00 29 5A 5A 00 01 00 00 1D 00 20 43 81 5B E5 2B 96 D5 56 26 6D 0D B7 36 AD CE 59 44 DB 00 90 BE B2 F1 C3 94 3C 02 6E 39 40 B8 3E
        psk_key_exchange_modes        01 01
        supported_versions        grease [0x6a6a], Tls1.3, Tls1.2, Tls1.1
        0x001b                02 00 02
        grease (0x6a6a)        00
        padding                5 null bytes
Ciphers: 
        [EAEA]        Unrecognized cipher - See [url=https://www.iana.org/assignments/tls-parameters/]https://www.iana.org/assignments/tls-parameters/[/url]
        [1301]        TLS_AES_128_GCM_SHA256
        [1302]        TLS_AES_256_GCM_SHA384
        [1303]        TLS_CHACHA20_POLY1305_SHA256
        [C02B]        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        [C02F]        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        [C02C]        TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
        [C030]        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        [CCA9]        TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        [CCA8]        TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        [C013]        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
        [C014]        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
        [009C]        TLS_RSA_WITH_AES_128_GCM_SHA256
        [009D]        TLS_RSA_WITH_AES_256_GCM_SHA384
        [002F]        TLS_RSA_WITH_AES_128_CBC_SHA
        [0035]        TLS_RSA_WITH_AES_256_CBC_SHA
        [000A]        SSL_RSA_WITH_3DES_EDE_SHA

Compression: 
        [00]        NO_COMPRESSION

Zeaf · 发表于 2020-5-29 00:35

话说提交需要token，这个怎么办呀

Dumeng · 发表于 2020-5-28 18:19

985 211 你整这个

Zeaf · 发表于 2020-5-28 18:25

本帖最后由 Zeaf 于 2020-5-29 09:03 编辑

Dumeng 发表于 2020-5-28 18:19
985 211 你整这个

不是很明白。。
整这个咋了

x_kotaku · 发表于 2020-5-28 18:48

你这个应该是没设置好https抓包

Zeaf · 发表于 2020-5-28 18:53

小灰♀520 发表于 2020-5-28 18:48
你这个应该是没设置好https抓包

我后来设置了一下http解密。。
然后很多网址。。
是需要提交才能获得想要的那个是吗

puppy1980 · 发表于 2020-5-28 19:28

设置好https
提交表单的时候弹出来的第一个会话看body里应该有数据的

Zeaf · 发表于 2020-5-28 20:01

本帖最后由 Zeaf 于 2020-5-29 00:33 编辑

puppy1980 发表于 2020-5-28 19:28
设置好https
提交表单的时候弹出来的第一个会话看body里应该有数据的

好的，了解
登陆界面：https://fangkong.hnu.edu.cn/api/v1/account/login (Code:用户名；Password:密码;VerCode:验证码;Token:..)
后面需要提交的内容还是通过F12分析的。。。
打卡表单提交：https://fangkong.hnu.edu.cn/api/v1/clockinlog/add
需要提交的内容明天再分析看看

Zeaf · 发表于 2020-5-29 08:52

puppy1980 发表于 2020-5-28 19:28
设置好https
提交表单的时候弹出来的第一个会话看body里应该有数据的

大佬能帮我看看401怎么解决么

puppy1980 · 发表于 2020-5-29 10:28

打不开这网址啊 401认证问题啊 token或者useragent设置了没。。。
纯小白不是大佬。。

帐号		自动登录	找回密码
密码			注册[Register]

[求助] post提交表单问题

免费评分

免费评分