### 对cx考试出现的滑块验证分析
本人曾差点因为这玩意考上编号(不是编制)，只做分析学习
听说考试进入出现了验证码，我对此进行一顿分析
经过一顿刷新测试，发现主要验证 captchaKey，token这两个参数
请求成功返回两张图片，滑块验证码
接下来对滑块验证码进行js分析
文件: https://captcha.chaoxing.com/load.min.js
很明显，ast混淆了，不过问题不大，根据请求堆栈，添加断点
到这里captchaKey，token这两个参数就出来了
captchaKey是由这个方法生成的，_0x166888是最开始的一个时间戳
```
_0x166888 时间戳从这里来的，当然也可以瞎几把写一个
https://captcha.xxxxxxx.com/captcha/get/conf?callback=jQuery19009642676316939065_1705078898768&captchaId=Ew0z9skxsLzVKQjmeObQiRVLxkxbPkRF&_=1705078898826
jQuery19009642676316939065\_1705078898768({"t":1705085097439,"captchaId":"Ew0z9skxsLzVKQjmeObQiRVLxkxbPkRF"})
```
```
_0x14b341(_0x166888 + (function() {
var _0x415042 = _0x330e;
for (var _0x2bcd8d = [], _0x591474 = _0x415042(0x143), _0xe73778 = 0x0; _0xe73778 < 0x24; _0xe73778++)
_0x2bcd8d[_0xe73778] = _0x591474[_0x415042(0x15e)](Math[_0x415042(0x167)](0x10 * Math[_0x415042(0xee)]()), 0x1);
return _0x2bcd8d[0xe] = '4',
_0x2bcd8d[0x13] = _0x591474[_0x415042(0x15e)](0x3 & _0x2bcd8d[0x13] | 0x8, 0x1),
_0x2bcd8d[0x8] = _0x2bcd8d[0xd] = _0x2bcd8d[0x12] = _0x2bcd8d[0x17] = '-',
_0x2bcd8d[_0x415042(0x121)]('');
}()))
```
到这里captchaKey拿捏了。
接下来分析 token 这个参数的来源，到这里_0x166888被重新赋值
```
_0x166888 = _0x14b341(_0x166888 + _0x8fad4e + _0xafd5f3 + _0x596961) + ':' + (parseInt(_0x166888) + 0x493e0) || ''
分析括号里面的参数
_0x166888 时间戳
_0x8fad4e captchaId可以请求接口，可以前端页面截取
_0xafd5f3 常量 可以直接写死 slide
_0x596961 captchaKey 前面已经搞定
(parseInt(_0x166888) + 0x493e0) 一个计算题 时间戳加上 300000 应该没啥用
```
到这里就已经拿捏了
测试：
```
_0x166888：1705085807000
_0x14b341("1705085807000" + (function() {
var _0x415042 = _0x330e;
for (var _0x2bcd8d = [], _0x591474 = _0x415042(0x143), _0xe73778 = 0x0; _0xe73778 < 0x24; _0xe73778++)
_0x2bcd8d[_0xe73778] = _0x591474[_0x415042(0x15e)](Math[_0x415042(0x167)](0x10 * Math[_0x415042(0xee)]()), 0x1);
return _0x2bcd8d[0xe] = '4',
_0x2bcd8d[0x13] = _0x591474[_0x415042(0x15e)](0x3 & _0x2bcd8d[0x13] | 0x8, 0x1),
_0x2bcd8d[0x8] = _0x2bcd8d[0xd] = _0x2bcd8d[0x12] = _0x2bcd8d[0x17] = '-',
_0x2bcd8d[_0x415042(0x121)]('');
}()))
captchaKey：a20f6bb4539c30b1f2ba580c9d10bc7e
_0x166888 = _0x14b341("1705085807000" + "Ew0z9skxsLzVKQjmeObQiRVLxkxbPkRF" + "slide" + "a20f6bb4539c30b1f2ba580c9d10bc7e") + ':' + (parseInt(1705085807000) + 300000) || ''
token :d6243d3e95484df8f38142542a73ffb7:1705086107000
测试url：https://captcha.xxxxxx.com/captcha/get/verification/image?callback=jQuery190039273425500241355_1705085807000&captchaId=Ew0z9skxsLzVKQjmeObQiRVLxkxbPkRF&type=slide&version=1.1.15&captchaKey=a20f6bb4539c30b1f2ba580c9d10bc7e&token=d6243d3e95484df8f38142542a73ffb7:1705086107000&referer=https://mooc1.chaoxing.com/exam-ans/exam/phone/start?courseId=237191002&classId=82978267&examId=3952335&source=0&examAnswerId=103577581&faceDetection=1&keyboardDisplayRequiresUserAction=1&faceDetection=1&faceDetectionResult=&captchavalidate=&jt=0#INNER&_=1705085807000
返回：jQuery190039273425500241355\_1705085807000({"token":"11471389F69A860EA3C648600FFF6F14","imageVerificationVo":{"type":"slide","shadeImage":"https://captcha-b.chaoxing.com/slide/big/C015713685D67B442BD5C4439096C2AB.jpg","cutoutImage":"https://captcha-b.chaoxing.com/slide/small/C015713685D67B442BD5C4439096C2AB.jpg"}})
```
轻松拿捏，剩下就是扣_0x14b341加密方法，或者还原算法
```
function _0x330e(_0xb44687, _0x1d4f1a) {
var _0x4dd8e1 = _0x4dd8();
return _0x330e = function(_0x330e0e, _0x47a26f) {
_0x330e0e = _0x330e0e - 0x7c;
var _0x6cd7fe = _0x4dd8e1[_0x330e0e];
return _0x6cd7fe;
}
,
_0x330e(_0xb44687, _0x1d4f1a);
}
var _0x44102f = _0x330e
, _0x1a7e4f = _0x4dd8();
while (!![]) {
try {
var _0x59fa9c = parseInt(_0x44102f(0x97)) / 0x1 * (parseInt(_0x44102f(0x13a)) / 0x2) + -parseInt(_0x44102f(0xf1)) / 0x3 + parseInt(_0x44102f(0xf2)) / 0x4 * (parseInt(_0x44102f(0x9e)) / 0x5) + -parseInt(_0x44102f(0x131)) / 0x6 + -parseInt(_0x44102f(0x8b)) / 0x7 * (-parseInt(_0x44102f(0xde)) / 0x8) + parseInt(_0x44102f(0x139)) / 0x9 + -parseInt(_0x44102f(0x93)) / 0xa;
if (_0x59fa9c === 0x869da)
break;
else
_0x1a7e4f['push'](_0x1a7e4f['shift']());
} catch (_0x13693f) {
_0x1a7e4f['push'](_0x1a7e4f['shift']());
}
}
var _0x1c5dc8 = _0x330e;
function _0x1b37c3(_0xea9895, _0x49d35a) {
var _0x4328c4 = (0xffff & _0xea9895) + (0xffff & _0x49d35a);
return (_0xea9895 >> 0x10) + (_0x49d35a >> 0x10) + (_0x4328c4 >> 0x10) << 0x10 | 0xffff & _0x4328c4;
}
function _0x10b3bf(_0x237274, _0x5ec158, _0x255291, _0x5e18bc, _0x6f6f73, _0x2f69c2) {
return _0x1b37c3((_0x5ec158 = _0x1b37c3(_0x1b37c3(_0x5ec158, _0x237274), _0x1b37c3(_0x5e18bc, _0x2f69c2))) << _0x6f6f73 | _0x5ec158 >>> 0x20 - _0x6f6f73, _0x255291);
}
function _0x27897a(_0x3c62f2, _0x40f5c3, _0x40fbb6, _0x32af27, _0x1f36cd, _0x4c3c98, _0x1bbf8d) {
return _0x10b3bf(_0x40f5c3 & _0x40fbb6 | ~_0x40f5c3 & _0x32af27, _0x3c62f2, _0x40f5c3, _0x1f36cd, _0x4c3c98, _0x1bbf8d);
}
function _0x10c280(_0x3f77df, _0x52b8fe, _0x1595a6, _0x193b7e, _0x7234fc, _0x4a8606, _0x4daa5d) {
return _0x10b3bf(_0x52b8fe & _0x193b7e | _0x1595a6 & ~_0x193b7e, _0x3f77df, _0x52b8fe, _0x7234fc, _0x4a8606, _0x4daa5d);
}
function _0x1024e5(_0x44a249, _0x4d7df8, _0x4bea9f, _0x1b3c9c, _0x28d4ab, _0x3e5726, _0x43a5e8) {
return _0x10b3bf(_0x4d7df8 ^ _0x4bea9f ^ _0x1b3c9c, _0x44a249, _0x4d7df8, _0x28d4ab, _0x3e5726, _0x43a5e8);
}
function _0x1a7029(_0xd53f45, _0x5ac9a8, _0x37d36d, _0x55f64c, _0x55fe26, _0xf76268, _0x55f130) {
return _0x10b3bf(_0x37d36d ^ (_0x5ac9a8 | ~_0x55f64c), _0xd53f45, _0x5ac9a8, _0x55fe26, _0xf76268, _0x55f130);
}
function _0x4bdbe5(_0x1ffe2c, _0x3a77ac) {
var _0x1a04d2 = _0x1c5dc8;
_0x1ffe2c[_0x3a77ac >> 0x5] |= 0x80 << _0x3a77ac % 0x20,
_0x1ffe2c[0xe + (_0x3a77ac + 0x40 >>> 0x9 << 0x4)] = _0x3a77ac;
for (var _0x3d1f25, _0x18f8ea, _0x476f44, _0x5f2889, _0x55240f = 0x67452301, _0x4f596e = -0x10325477, _0x19d601 = -0x67452302, _0x23c5ca = 0x10325476, _0x3e3401 = 0x0; _0x3e3401 < _0x1ffe2c[_0x1a04d2(0x13f)]; _0x3e3401 += 0x10)
_0x55240f = _0x27897a(_0x3d1f25 = _0x55240f, _0x18f8ea = _0x4f596e, _0x476f44 = _0x19d601, _0x5f2889 = _0x23c5ca, _0x1ffe2c[_0x3e3401], 0x7, -0x28955b88),
_0x23c5ca = _0x27897a(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x1], 0xc, -0x173848aa),
_0x19d601 = _0x27897a(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x2], 0x11, 0x242070db),
_0x4f596e = _0x27897a(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x3], 0x16, -0x3e423112),
_0x55240f = _0x27897a(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x4], 0x7, -0xa83f051),
_0x23c5ca = _0x27897a(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x5], 0xc, 0x4787c62a),
_0x19d601 = _0x27897a(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x6], 0x11, -0x57cfb9ed),
_0x4f596e = _0x27897a(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x7], 0x16, -0x2b96aff),
_0x55240f = _0x27897a(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x8], 0x7, 0x698098d8),
_0x23c5ca = _0x27897a(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x9], 0xc, -0x74bb0851),
_0x19d601 = _0x27897a(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xa], 0x11, -0xa44f),
_0x4f596e = _0x27897a(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xb], 0x16, -0x76a32842),
_0x55240f = _0x27897a(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0xc], 0x7, 0x6b901122),
_0x23c5ca = _0x27897a(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xd], 0xc, -0x2678e6d),
_0x19d601 = _0x27897a(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xe], 0x11, -0x5986bc72),
_0x55240f = _0x10c280(_0x55240f, _0x4f596e = _0x27897a(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xf], 0x16, 0x49b40821), _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x1], 0x5, -0x9e1da9e),
_0x23c5ca = _0x10c280(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x6], 0x9, -0x3fbf4cc0),
_0x19d601 = _0x10c280(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xb], 0xe, 0x265e5a51),
_0x4f596e = _0x10c280(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401], 0x14, -0x16493856),
_0x55240f = _0x10c280(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x5], 0x5, -0x29d0efa3),
_0x23c5ca = _0x10c280(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xa], 0x9, 0x2441453),
_0x19d601 = _0x10c280(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xf], 0xe, -0x275e197f),
_0x4f596e = _0x10c280(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x4], 0x14, -0x182c0438),
_0x55240f = _0x10c280(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x9], 0x5, 0x21e1cde6),
_0x23c5ca = _0x10c280(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xe], 0x9, -0x3cc8f82a),
_0x19d601 = _0x10c280(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x3], 0xe, -0xb2af279),
_0x4f596e = _0x10c280(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x8], 0x14, 0x455a14ed),
_0x55240f = _0x10c280(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0xd], 0x5, -0x561c16fb),
_0x23c5ca = _0x10c280(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x2], 0x9, -0x3105c08),
_0x19d601 = _0x10c280(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x7], 0xe, 0x676f02d9),
_0x55240f = _0x1024e5(_0x55240f, _0x4f596e = _0x10c280(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xc], 0x14, -0x72d5b376), _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x5], 0x4, -0x5c6be),
_0x23c5ca = _0x1024e5(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x8], 0xb, -0x788e097f),
_0x19d601 = _0x1024e5(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xb], 0x10, 0x6d9d6122),
_0x4f596e = _0x1024e5(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xe], 0x17, -0x21ac7f4),
_0x55240f = _0x1024e5(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x1], 0x4, -0x5b4115bc),
_0x23c5ca = _0x1024e5(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x4], 0xb, 0x4bdecfa9),
_0x19d601 = _0x1024e5(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x7], 0x10, -0x944b4a0),
_0x4f596e = _0x1024e5(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xa], 0x17, -0x41404390),
_0x55240f = _0x1024e5(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0xd], 0x4, 0x289b7ec6),
_0x23c5ca = _0x1024e5(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401], 0xb, -0x155ed806),
_0x19d601 = _0x1024e5(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x3], 0x10, -0x2b10cf7b),
_0x4f596e = _0x1024e5(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x6], 0x17, 0x4881d05),
_0x55240f = _0x1024e5(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x9], 0x4, -0x262b2fc7),
_0x23c5ca = _0x1024e5(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xc], 0xb, -0x1924661b),
_0x19d601 = _0x1024e5(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xf], 0x10, 0x1fa27cf8),
_0x55240f = _0x1a7029(_0x55240f, _0x4f596e = _0x1024e5(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x2], 0x17, -0x3b53a99b), _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401], 0x6, -0xbd6ddbc),
_0x23c5ca = _0x1a7029(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x7], 0xa, 0x432aff97),
_0x19d601 = _0x1a7029(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xe], 0xf, -0x546bdc59),
_0x4f596e = _0x1a7029(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x5], 0x15, -0x36c5fc7),
_0x55240f = _0x1a7029(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0xc], 0x6, 0x655b59c3),
_0x23c5ca = _0x1a7029(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0x3], 0xa, -0x70f3336e),
_0x19d601 = _0x1a7029(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0xa], 0xf, -0x100b83),
_0x4f596e = _0x1a7029(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x1], 0x15, -0x7a7ba22f),
_0x55240f = _0x1a7029(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x8], 0x6, 0x6fa87e4f),
_0x23c5ca = _0x1a7029(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xf], 0xa, -0x1d31920),
_0x19d601 = _0x1a7029(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x6], 0xf, -0x5cfebcec),
_0x4f596e = _0x1a7029(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0xd], 0x15, 0x4e0811a1),
_0x55240f = _0x1a7029(_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca, _0x1ffe2c[_0x3e3401 + 0x4], 0x6, -0x8ac817e),
_0x23c5ca = _0x1a7029(_0x23c5ca, _0x55240f, _0x4f596e, _0x19d601, _0x1ffe2c[_0x3e3401 + 0xb], 0xa, -0x42c50dcb),
_0x19d601 = _0x1a7029(_0x19d601, _0x23c5ca, _0x55240f, _0x4f596e, _0x1ffe2c[_0x3e3401 + 0x2], 0xf, 0x2ad7d2bb),
_0x4f596e = _0x1a7029(_0x4f596e, _0x19d601, _0x23c5ca, _0x55240f, _0x1ffe2c[_0x3e3401 + 0x9], 0x15, -0x14792c6f),
_0x55240f = _0x1b37c3(_0x55240f, _0x3d1f25),
_0x4f596e = _0x1b37c3(_0x4f596e, _0x18f8ea),
_0x19d601 = _0x1b37c3(_0x19d601, _0x476f44),
_0x23c5ca = _0x1b37c3(_0x23c5ca, _0x5f2889);
return [_0x55240f, _0x4f596e, _0x19d601, _0x23c5ca];
}
function _0x4fa76f(_0x2cff15) {
var _0x58b025 = _0x1c5dc8;
for (var _0x5e510c = '', _0xe3cc25 = 0x20 * _0x2cff15[_0x58b025(0x13f)], _0x42471d = 0x0; _0x42471d < _0xe3cc25; _0x42471d += 0x8)
_0x5e510c += String[_0x58b025(0xc3)](_0x2cff15[_0x42471d >> 0x5] >>> _0x42471d % 0x20 & 0xff);
return _0x5e510c;
}
function _0x3b0dd1(_0x32be3b) {
var _0x3b33c0 = _0x1c5dc8
, _0xba3a7d = [];
for (_0xba3a7d[(_0x32be3b[_0x3b33c0(0x13f)] >> 0x2) - 0x1] = void 0x0,
_0x2d711b = 0x0; _0x2d711b < _0xba3a7d[_0x3b33c0(0x13f)]; _0x2d711b += 0x1)
_0xba3a7d[_0x2d711b] = 0x0;
for (var _0x5937b5 = 0x8 * _0x32be3b['length'], _0x2d711b = 0x0; _0x2d711b < _0x5937b5; _0x2d711b += 0x8)
_0xba3a7d[_0x2d711b >> 0x5] |= (0xff & _0x32be3b[_0x3b33c0(0x8d)](_0x2d711b / 0x8)) << _0x2d711b % 0x20;
return _0xba3a7d;
}
function _0x2debb2(_0x41d291) {
var _0x362f3a = _0x1c5dc8;
for (var _0x26a2af, _0x1a5c83 = '0123456789abcdef', _0x4229cd = '', _0x451c02 = 0x0; _0x451c02 < _0x41d291[_0x362f3a(0x13f)]; _0x451c02 += 0x1)
_0x26a2af = _0x41d291[_0x362f3a(0x8d)](_0x451c02),
_0x4229cd += _0x1a5c83[_0x362f3a(0xb0)](_0x26a2af >>> 0x4 & 0xf) + _0x1a5c83[_0x362f3a(0xb0)](0xf & _0x26a2af);
return _0x4229cd;
}
function _0x2bac45(_0x20d776) {
return unescape(encodeURIComponent(_0x20d776));
}
function _0xfd9a3d(_0x1b8cb4) {
var _0x15094a = _0x1c5dc8;
return _0x4fa76f(_0x4bdbe5(_0x3b0dd1(_0x1b8cb4 = _0x2bac45(_0x1b8cb4)), 0x8 * _0x1b8cb4[_0x15094a(0x13f)]));
}
function _0x3d976b(_0x2ab83a, _0x1e2f71) {
var _0x11e7d5 = _0x1c5dc8, _0x2ddcb6, _0x2ab83a = _0x2bac45(_0x2ab83a), _0x1e2f71 = _0x2bac45(_0x1e2f71), _0x5f1264 = _0x3b0dd1(_0x2ab83a), _0x83d595 = [], _0x1f7b17 = [];
for (_0x83d595[0xf] = _0x1f7b17[0xf] = void 0x0,
0x10 < _0x5f1264['length'] && (_0x5f1264 = _0x4bdbe5(_0x5f1264, 0x8 * _0x2ab83a[_0x11e7d5(0x13f)])),
_0x2ddcb6 = 0x0; _0x2ddcb6 < 0x10; _0x2ddcb6 += 0x1)
_0x83d595[_0x2ddcb6] = 0x36363636 ^ _0x5f1264[_0x2ddcb6],
_0x1f7b17[_0x2ddcb6] = 0x5c5c5c5c ^ _0x5f1264[_0x2ddcb6];
return _0x2ab83a = _0x4bdbe5(_0x83d595[_0x11e7d5(0x12a)](_0x3b0dd1(_0x1e2f71)), 0x200 + 0x8 * _0x1e2f71[_0x11e7d5(0x13f)]),
_0x4fa76f(_0x4bdbe5(_0x1f7b17['concat'](_0x2ab83a), 0x280));
}
function _0x14b341(_0x31caf5, _0xa0d506, _0x4ed92f) {
return _0xa0d506 ? _0x4ed92f ? _0x3d976b(_0xa0d506, _0x31caf5) : _0x2debb2(_0x3d976b(_0xa0d506, _0x31caf5)) : _0x4ed92f ? _0xfd9a3d(_0x31caf5) : _0x2debb2(_0xfd9a3d(_0x31caf5));
}
function _0x4dd8() {
var _0x5527ff = ['onreadystatechange', '失败过多，点此重试', 'touchend', 'mouseup', '.cx_max_error\x20.cx_fallback_tip', 'querySelector', 'popup', 'max_error', 'cx_success', 'interative', 'init_icon_click', 'timeout', 'scripts', 'object', 'css', 'captcha.chaoxing.com', 'Please\x20complete\x20security\x20verification', 'charAt', 'onVerify', 'FZDBSJW', 'getAttribute', 'cx_icon_error', 'cx_error', '.cx_imgBtn', '请依次点击\x20', 'width', 'CAPTCHA_SERVER', '.mode-img-status', '1.1.15', 'CAPTCHA_MODE', '.cx_icon-point', 'mode-btn', 'SLIDE_EVENT', 'src', 'createElement', 'attr', 'fromCharCode', 'CXCaptcha_theme_light', '#52ccba', '160px', 'url(\x22', 'extraData', 'get', 'captcha/check/verification/result', 'stringify', 'imageVerificationVo', 'getElementsByTagName', 'WEB', 'verify_failed', '.cx_hkinnerWrap', '.cx_imgBg', 'setItem', '请完成安全验证', 'onerror', 'readyState', 'push', 'head', 'CAPTCHA_TYPE', 'DISTANCE', 'token', 'html', 'status-success', '0px', '824hUJNxb', 'GET_CAPTCHA', 'verify_pass', 'SLIDE', 'Drag\x20the\x20slider\x20right\x20to\x20fill\x20the\x20puzzle', '#fff\x20url(\x22', '.cx_slider_tip', 'hidden', 'location', 'init_text_click', 'GET_SERVER_TIME', 'serverTime', 'createEvent', 'event', 'mousedown', 'mousemove', 'random', 'sourceURL', '验证失败，请重试', '670764ojdQhz', '12hLQgZe', 'none', 'amd', '传入的\x20element\x20不正确', 'initCXCaptcha\x20requires\x20a\x20window\x20with\x20a\x20document', 'getTime', '<b\x20style=\x22font-weight:bold;\x22>', 'cx_click_success', 'initCXCaptcha', 'mode', 'document', 'offsetY', '向右拖动滑块填充拼图', 'START_EVENT', 'trim', '\x22\x20style=\x22left:\x20', 'Drag\x20the\x20slider\x20to\x20straighten\x20the\x20picture', 'LIGHT', 'hide', 'tokenId', 'indexOf', 'removeEventListener', '\x22\x20class=\x22mode-vcode-img\x22><img\x20class=\x22mode-reference-img\x22\x20src=\x22', 'cx_click', 'USE_LANGUAGE', 'left', '.cx_rightBtn', 'clientX', 'offset', 'isMobile', '.cx_fallback_tip', 'background', 'sessionStorage', '.cx_refresh', 'cx_success_refresh', 'MOVE_EVENT', 'cx_moving', '<div\x20num=\x22', 'cx_max_error', '.mode-vcode-img', 'onload', 'init_slider', 'init_rotate', 'num', 'offsetX', 'stopPropagation', '.cx_tip_text', 'join', 'callback', 'stacktrace', 'display', 'complete', 'remove', 'returnValue', 'textclick', 'isInteger', 'concat', '.cx_max_error\x20.cx_refresh', 'PATH', 'TEMPLATE_IMAGE_WIDTH', 'en_', '#f57a7a', '.rotate-img', '310260syjRlA', 'browserLocale', 'addEventListener', 'BUTTON_IMAGE_WIDTH', 'HTML_STRING', 'slide', 'px;\x22></div>', 'ICON_CLICK', '3340611fAxaDl', '22HScgMq', 'exports', 'light.js?t=', 'sTime', 'parse', 'length', 'cx_rightBtnAni', 'Please\x20click\x20in\x20order\x20', 'EMBED', '0123456789abcdef', '.u-opacity', 'click', 'coordinate', 'element', 'cx_tips__answer_div', '.cx_modal_close', 'clickArr', 'find', 'type', 'cx_tips__answer_img', '\x20\x20<div\x20class=\x22cx_comImageValidate\x22\x20>\x0a\x09\x09\x09<div\x20class=\x22cx_modal_title\x22><span\x20id=\x22prompt\x22>请完成安全验证</span>\x20<span\x20class=\x22cx_modal_close\x22><span\x20class=\x22cx_icon-close\x22></span></span></div>\x0a\x09\x09\x09<div\x20class=\x22cx_image_margin\x22\x20>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22cx_imgBg\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22cx_imgBtn\x22\x20>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<img\x20alt=\x22\x22\x20src=\x22\x22\x20draggable=\x22false\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x09\x09\x09\x09<span\x20class=\x22cx_refresh\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20</span>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22rotate-img\x22></div>\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22cx_hkinnerWrap\x20\x22>\x0a\x09\x09\x20\x09\x20<div\x20class=\x22cx_slider_indicator\x22></div>\x0a\x09\x09\x09\x20<div\x20class=\x22cx_rightBtn\x22\x20><span\x20class=\x22notSel\x22></span></div>\x0a\x09\x09\x09\x20<div\x20class=\x22cx_slider_tip\x22\x20>\x0a\x09\x09\x09\x20\x09<span\x20class=\x22cx_tip_icon\x22></span>\x0a\x09\x09\x09\x20\x09<span\x20class=\x22cx_tip_text\x20cx_fallback_tip\x22></span>\x0a\x09\x09\x09\x20\x09<div\x20class=\x22cx_tip_answer\x20hide\x22>\x0a\x09\x09\x09\x20\x09\x09<span\x20class=\x22cx_tip_point\x22></span>\x0a\x09\x09\x09\x20\x09\x09<img\x20class=\x22cx_tip_img\x22>\x0a\x09\x09\x09\x20\x09</div>\x0a\x09\x09\x09\x20</div>\x0a\x09\x09\x09\x20<div\x20class=\x22cx_click-tip\x22>\x0a\x09\x09\x09\x09\x20<span\x20class=\x22cx_tip_icon\x22></span>\x0a\x09\x09\x09\x09\x20<span\x20class=\x22cx_tip_text\x20cx_fallback_tip\x22>验证成功</span>\x0a\x09\x09\x09\x09\x20<div\x20class=\x22cx_tips__answer\x22></div>\x09\x09\x09\x20</div>\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20</div>\x0a', '#45494c', 'halfDv', 'changedTouches', 'rotate', 'jsonp', 'text', 'status-error', 'round', '#fff\x20url(', 'appendChild', 'now', 'show', 'END_EVENT', 'protocol', 'TouchEvent', 'substr', 'block', 'captchaId', 'runEnv', 'exec', 'off', '拖动滑块，使图片角度为正', 'captcha/get/conf', 'language', 'floor', 'verifyResult', 'touchmove', 'preventDefault', 'localTime', 'ROTATE', 'cancelBubble', 'originImage', '\x22><div\x20class=\x22mode-img-status\x22></div>', 'cutoutImage', '<img\x20src=\x22', 'touchstart', 'CHECK_CAPTCHA', '</div>', '<img\x20src=', 'href', 'function', '.cx_tips__answer', 'https', 'result', '.u-layer', 'ajax', 'mode-vcode-imgbox', 'Failed\x20to\x20load\x20', '<i></i>', '验证通过', 'Validation\x20failed,\x20please\x20try\x20again', 'captcha/get/verification/image', '44779wvWdfu', 'removeClass', 'charCodeAt', 'split', 'rotate(', '14px', 'currentScript', 'max', '12205800DNlmud', 'staticServer', '#prompt', 'http', '36481QXPErA', 'TEXT_CLICK', 'RUN_ENV', 'img', 'addClass', 'POPUP', 'getItem', '1026505jlhJhG'];
_0x4dd8 = function() {
return _0x5527ff;
}
;
return _0x4dd8();
}
console.log(_0x14b341("17051082450271b1cd022-708b-4330-9207-76f67342e951",undefined,undefined))
console.log(_0x14b341("1705108975345Ew0z9skxsLzVKQjmeObQiRVLxkxbPkRFslideb74a3df5a2c1118d1a7b5adf2526d261",undefined,undefined))
console.log(
(function() {
var _0x415042 = _0x330e;
for (var _0x2bcd8d = [], _0x591474 = _0x415042(0x143), _0xe73778 = 0x0; _0xe73778 < 0x24; _0xe73778++)
_0x2bcd8d[_0xe73778] = _0x591474[_0x415042(0x15e)](Math[_0x415042(0x167)](0x10 * Math[_0x415042(0xee)]()), 0x1);
return _0x2bcd8d[0xe] = '4',
_0x2bcd8d[0x13] = _0x591474[_0x415042(0x15e)](0x3 & _0x2bcd8d[0x13] | 0x8, 0x1),
_0x2bcd8d[0x8] = _0x2bcd8d[0xd] = _0x2bcd8d[0x12] = _0x2bcd8d[0x17] = '-',
_0x2bcd8d[_0x415042(0x121)]('');
}())
)
```
- 并发研究
- 爬虫工具
- 在线工具
- JS逆向
- 浏览器使用
- 安装nodejs调试js代码
- node 报错解决方法
- 技巧
- 小黄鸟ca证书
- iframe过禁F12
- js自加载函数调用
- ast 解混淆大数组
- 浏览器替换js文件
- webpack cb参数
- 油猴hook window中的方法
- proxy补环境
- nodejs使用vm
- 滑块验证码分析轨迹
- Ajax-Hook
- 浏览器 hook 通杀算法
- cookie-hook
- 内存漫游
- v_jstools 工具
- 绕过无限debuger
- TLS指纹
- hook 请求参数
- Fiddler对APP进行抓包
- 易盾大数组解密失败
- 某xt 人脸思路
- webpack 例子
- 微信小程序强开控制台
- eval解混淆
- webpack自吐
- 补环境框架
- ob解混淆
- 案例
- 对cx滑块验证分析
- 分析网易滑块验证码
- 大佬的资料
- 易盾滑块
- 某网站逆向
- 某网站的加密算法
- 验证码接口调用
- cx分析2
- 某网站手机接口分析
- yidun 2.26.1 逆向 2
- yidun 2.26.1 逆向 1
- 某某通 评论回复uuid
- 某平台app接口
- yidun增强版滑块
- yidun增强版滑块2
- 实例
- 影视综ranklist
- 中国五矿集团采购信息
- 天翼云登录
- 百度登录
- 1号店登录
- 财新登录
- 中国电信登录
- 99安全中心登录
- 护世界