京东h5st

京东h5st参数逆向

首先是根据body的值进行sha256

关键代码如下：

var w = JSON.parse(JSON.stringify(C));
w.body = SHA256(v).toString(),
window.PSign.sign(w).then(function(e) {
    C.h5st = encodeURI(e.h5st);
    try {
        getJsToken(function(e) {
            e && e.jsToken ? (C["x-api-eid-token"] = e.jsToken,
            C.loginType = "3",
            C.uuid = getCookie("__jda") || "",
            j(C)) : (C.loginType = "3",`
            C.uuid = getCookie("__jda") || "",
            j(C))
        }, 600)
    } catch (e) {
        C.loginType = "3",
        C.uuid = getCookie("__jda") || "",
        j(C)
    }
})

例如批量获取京东价格的body如下：

{"area":"19_1601_50258_129167","pin":"","fields":"11100000","skuIds":"10069536818059,10070374802956,10028908760777,10047915938530,10070044453799,10075522074991,10072529060836,10072550672118,10063333884614,10065187000404,10040467578999,10069597850559,10069754882933,10032026859033,10066317239764","source":"pc-item"}

sha256加密后的值为

cb150b0a1e35f48506fa2f920c99e5c59ff3e5da009764078e04a96ddb618b9b

w的其余参数分别是：

appid:"item-v3"
body:"cb150b0a1e35f48506fa2f920c99e5c59ff3e5da009764078e04a96ddb618b9b"
client:"pc"
clientVersion:"1.0.0"
functionId:"pctradesoa_getprice"
t:1686043883042

return function test(tk,fp,ts,ai,algo)
{
    var rd='KcZ5hunENaK3';
    var str=`${tk}${fp}${ts}${ai}${rd}`;
    return algo.HmacSHA256(str,tk)
}

获取tk以及rd

https://cactus.jd.com/request_algo?g_ty=ajax

POST

curl --location --request POST 'https://cactus.jd.com/request_algo?g_ty=ajax' \
--header 'Content-Type: application/json' \
--data-raw '{
    "version": "3.1",
    "fp": "9132872475451096",
    "appId": "fb5df",
    "timestamp": 1686103848914,
    "platform": "web",
    "expandParams": "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",
    "fv": "v3.2.0"
}'