有没有大佬教教

Kssssssss

目标网址：https://www.us168.com/#/localServiceIndex?modulesCode=service_zxgs
目的是抓取页面数据。
js代码如下：

[JavaScript] 纯文本查看 复制代码

const xa = require('crypto-js')
var KEY = xa.enc.Utf8.parse('c38cn38c372b48c4')
var IV = xa.enc.Utf8.parse('c38cn38c372b48c4')
function getRealJsonData(baseStr) {
            if (baseStr && "string" == typeof baseStr) {
                var jsonData = null;
                try {
                    jsonData = JSON.parse(baseStr)
                } catch (err) {
                    return null
                }
                var needReplaceStrs = []
                  , returnJson = (loopFindArrOrObj(jsonData, needReplaceStrs),
                needReplaceStrs.forEach(function(replaceInfo) {
                    var matchArr = baseStr.match(eval('/"' + replaceInfo.key + '":[0-9]{15,}/')), str, replaceStr;
                    matchArr && (str = matchArr[0],
                    replaceStr = str.replace('"' + replaceInfo.key + '":', '"' + replaceInfo.key + '":"'),
                    replaceStr += '"',
                    baseStr = baseStr.replace(str, replaceStr))
                }),
                null);
                try {
                    returnJson = JSON.parse(baseStr)
                } catch (err) {
                    return null
                }
                return returnJson
            }
        }
function Decrypt(e,t,n) {
            var i = KEY
              , r = IV
              , e = xa.enc.Hex.parse(e)
              , e = xa.enc.Base64.stringify(e);
            return getRealJsonData(xa.AES.decrypt(e, i, {iv: r, mode: xa.mode.CBC,padding: xa.pad.Pkcs7}).toString(xa.enc.Utf8).toString())
}
var ke = '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'
console.log(Decrypt(ke))

执行代码后抛出异常：Error: Malformed UTF-8 data。
请问大佬们该如何解决？？？

ChangHJ

用python不是更好吗

Kssssssss

ChangHJ 发表于 2023-8-12 21:04
用python不是更好吗

我pip install pycryptodomex，一直报错，没找到解决办法。

ccber

报错感觉是字符串编码的问题

shiquda

字符串base64解析好像有点问题，37行那个真的没问题吗

ljl9090

function Decrypt(e,t,n) {
            var i = KEY
              , r = IV
            result = xa.AES.decrypt(e, i, {iv: r, mode: xa.mode.CBC,padding: xa.pad.Pkcs7}).toString(xa.enc.Utf8).toString();
            console.log(result)
            return getRealJsonData(xa.AES.decrypt(e, i, {iv: r, mode: xa.mode.CBC,padding: xa.pad.Pkcs7}).toString(xa.enc.Utf8).toString())
}

结果：
{"resCode":"SUCCESS","code":0,"route":null,"data":{"records":[{"id":1683672335712120833,"type":null,"modulesCode":"service_zxgs","title":"室内装修","citiesIdChineseTe
xt":"法拉盛","icon":"https://cn-minio.us168168.com/pro/images/us168/b680405587ca43048e6cc7140e8f7e341683672103154352128.jpg","address":"73 182nd st","hgooglePlay":nul
l},{"id":1409890952574418946,"type":null,"modulesCode":"service_zxgs","title": .......

对key 不做处理应该是可以出现结果的；另外getRealJsonData中的loopFindArrOrObj 方法没有，我觉得这个方法应该是可以用Python 实现的吧。

Kssssssss

shiquda 发表于 2023-8-12 21:37
字符串base64解析好像有点问题，37行那个真的没问题吗

就是e值传错了，谢谢

Kssssssss

shiquda 发表于 2023-8-12 21:37
字符串base64解析好像有点问题，37行那个真的没问题吗

有问题，就是e值传错了，谢谢

Kssssssss

ljl9090 发表于 2023-8-12 21:57
function Decrypt(e,t,n) {
            var i = KEY
              , r = IV

我接口找错了，所以e值也错了。初学者就是这么容易出错，感谢！

dggy8888

一个小错误，要找半天，太难了啊