声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析
美团网页、小程序、app全是指纹检测。app的只会补老版本的，新版本一直初始化失败4096。直接放弃先了补补基础。小程序和app都差不多都是云函数都需要hook。我这个是"a6":"w1.3开头的。w1.2之后在分析。
cp = execjs.compile(open('phf.js', 'r', encoding='utf-8').read()) result = cp.call('getMtgsig',data,openId,page) mtgsig = result['header']['mtgsig'] print(mtgsig) headers = { "Accept": "*/*", "Accept-Language": "zh-CN,zh;q=0.9", "Connection": "keep-alive", "Content-Type": "application/x-www-form-urlencoded", "Referer": "", "Sec-Fetch-Dest": "empty", "Sec-Fetch-Mode": "cors", "Sec-Fetch-Site": "cross-site", "User-Agent": "", "X-Requested-With": "XMLHttpRequest", "content-personalized-switch": "0", "csecuserid": "", "swimlane;": "", "wm-user-id-deregistration": "-1", "wm-uuid-deregistration": "-1", "x-env": "online", "xweb_xhr": "1" } url = "v1/search/detail" params = { "ui": "", "region_id": "", } data = { "loc_addr_name": "", "page_size": "20", "page_num": "0", "keyword": "饺子", "rc_app": "4", "rc_platform": "13", "optimusCode": "20", "riskLevel": "71", "partner": "4", "waimai_sign": "/" } response = requests.post(url, headers=headers, params=params, data=data) print(response.text) print(response)结果
挺多坑的，我就不细说了。
![]()
总结
1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。
