某专业技术人员继续教育平台登录分析及模拟实践

pwp

网址：https://www.gszxjy.net/web/index

1、打开网站，调出F12:


2、输入账号17588580360密码aaa123456，拖动滑块，点击登录，查看网络请求情况：




3、发现数据加密的，猜测加密是aes，复制之前的aes:

[Python] 纯文本查看 复制代码

?

01 02 03 04 05 06 07 08 09 10 11

def encrypt(self,plaintext):     # 转换密钥和IV为bytes类型     key = "20180227110419WB".encode('utf-8')     iv = "ZZWBKJ_ZHIHUAWEI".encode('utf-8')     # 创建AES-CBC加密器     cipher = AES.new(key, AES.MODE_CBC, iv)     # 对明文进行PKCS7填充并加密     padded_data = pad(plaintext.encode('utf-8'), AES.block_size)     ciphertext = cipher.encrypt(padded_data)     # 返回Base64编码字符串     return base64.b64encode(ciphertext).decode('utf-8')

给账号加个密试试，简直一模一样啊：




4、撰写模拟登录函数：

[Python] 纯文本查看 复制代码

?

01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

def login(self,account, password):     url = "https://www.gszxjy.net/api/student.index/login.html"       headers = {         "accept": "application/json, text/plain, */*",         "accept-language": "zh-CN,zh;q=0.9",         "cache-control": "no-cache",         "content-type": "application/x-www-form-urlencoded",         "pragma": "no-cache",         "sec-ch-ua": '"Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"',         "sec-ch-ua-mobile": "?0",         "sec-ch-ua-platform": '"Windows"',         "sec-fetch-dest": "empty",         "sec-fetch-mode": "cors",         "sec-fetch-site": "cross-site",         "Referer": "https://www.gszxjy.net/web/index",         "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"     }     account_encoded = self.encrypt(account)     password_encoded = self.encrypt(password)     data = f"account={account_encoded}&password={password_encoded}&are_code=PLS"       response = requests.post(url, headers=headers, data=data)       print(f"Status Code: {response.status_code}")     print(f"Response Text: {response.text}")

运行看看，显示：登录成功，打工搞成！



完整代码如下：

[Python] 纯文本查看 复制代码

?

01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48

from Crypto.Cipher import AES import base64 from Crypto.Util.Padding import pad, unpad import requests   class Gszxjyhelper(object):     def __init__(self):         pass     def encrypt(self,plaintext):         # 转换密钥和IV为bytes类型         key = "20180227110419WB".encode('utf-8')         iv = "ZZWBKJ_ZHIHUAWEI".encode('utf-8')         # 创建AES-CBC加密器         cipher = AES.new(key, AES.MODE_CBC, iv)         # 对明文进行PKCS7填充并加密         padded_data = pad(plaintext.encode('utf-8'), AES.block_size)         ciphertext = cipher.encrypt(padded_data)         # 返回Base64编码字符串         return base64.b64encode(ciphertext).decode('utf-8')     def login(self,account, password):         url = "https://www.gszxjy.net/api/student.index/login.html"           headers = {             "accept": "application/json, text/plain, */*",             "accept-language": "zh-CN,zh;q=0.9",             "cache-control": "no-cache",             "content-type": "application/x-www-form-urlencoded",             "pragma": "no-cache",             "sec-ch-ua": '"Chromium";v="122", "Not(A:Brand";v="24", "Google Chrome";v="122"',             "sec-ch-ua-mobile": "?0",             "sec-ch-ua-platform": '"Windows"',             "sec-fetch-dest": "empty",             "sec-fetch-mode": "cors",             "sec-fetch-site": "cross-site",             "Referer": "https://www.gszxjy.net/web/index",             "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"         }         account_encoded = self.encrypt(account)         password_encoded = self.encrypt(password)         data = f"account={account_encoded}&password={password_encoded}&are_code=PLS"           response = requests.post(url, headers=headers, data=data)           print(f"Status Code: {response.status_code}")         print(f"Response Text: {response.text}") if __name__ == '__main__':     gs = Gszxjyhelper()     gs.login("17588580360", "aaa123456")

觉得写得好，不拖泥带水，好就给个评分吧，谢谢啦！

SVIP9大会员

记得改密码啊，我寻思着你模拟登录，你这账号密码不怕泄露嘛。

FCGkitty

铁子，你不能直接跳过AES密钥的获取过程，直接来一段代码啊

pwp

laixingcui 发表于 2025-3-16 17:28
只能是甘肃省的，有其他省的没有呢。

大同小异

ky_wei

续第二章《某专业技术人员继续教育平台登录分析及模拟实践之博主账号密码泄露：一个典型的错误示范》

经匹配，平台上系假姓名，现已将姓名改成张三
5119221**20803*3*0（四川省巴中市南江县）
175*8*8*3*0

wanglujiang

厉害了，

pwp

SVIP9大会员 发表于 2025-3-16 17:21
记得改密码啊，我寻思着你模拟登录，你这账号密码不怕泄露嘛。

我寻思着您拿去帮我买课刷学时啊

liyitong

SVIP9大会员 发表于 2025-3-16 17:21
记得改密码啊，我寻思着你模拟登录，你这账号密码不怕泄露嘛。

这泄露了就咋了？你上去帮他刷网课在线时长吗

cqloyo

这个有用，谢谢！

天真Aro

sfz泄露了吧