jd

[sniper-Li]

4.9.2的算法有吗，4.9.1已经挂了

[TokenScience01]

大佬4.9.4的有吗 他们说https://dr.jd.com/ 都用4.9.4了

[TokenScience01]

代码生成:20241129150122404;fyvehlh5ereziir4;35fa0;tk03wc1361cd518nTvJZsFGuoH6IsS91LQvsik-CmAMzEVvQiKlpejNTFXRB7bXNWtrKmtAK0khilOXXBdiovnCkaC08;35b4ebac861ab81950d45ab10348c772;4.9;1732863682404;pjbMhjpe5GVRxWFPGWoR-KVS1GESJrJdJrESJrpjh7pdLDIj9e1TJrpjh7Jj0rYdGmISzflS4TFeKGodyXFfIGoe4n4e4jFS0HofzXFjLDIj7SnQEiVS0ipjLDrgJbIS0bVf5PIS0j1THOIf6r4e5XYSKiVf3nIe1T1fGOoeJrJdJfUT1yVTIipjLDrgJfIgyzpe1uWS-GFSMWoRJrJdJTEjLrJp-jpfziWeMemR0K2Ub_HjLDIj_ulS9mFPJrpjh7Jj3ToRIiUTKqpN2yVRfipjxjJS7ipjLDrguqpjhrojxjpd2iFjLrpjLDrgJjpjxj5e2iFjLrpjLDrg0nojxjJe2iFjLrpjLDrg7rJdJXYOJipjLrpjh7pfLDIj3XETJrpjLrJp-fIeLDIj4XETJrpjLrJp-jYgLDIj5XETJrpjLrJp-jZe9nIg7vWS3GlQJrJdJnYOJipjLrpjh7pfLDIjAOEjLrpjLDrg7rJdJfkQJrpjLrJp-rojxjpQJrpjLrJp-rojxjpS0ipjLrpjh-kjxjpS9WlOzWFjLrJp-30NLDIj7qEjLrJp-jJO0q5d6nof9Xofyr4f5zZb6rWW8blQCWEbLfXen_HXzPof4jojwbYfLbVR8ikS9mnjwLUO9GlYJrJdJnVO4ipjLD7N;0ce42001ac4213f097a5776a0e363b86

抓包:
20241127171733874;5lv0qey0irzklz95;20bbf;tk04w6c28e29641lMysxKzN4MmZ3pjbeyDkQACEPCqYNGmkf16VerrbrY5VxMi4hgWkNHjlZYmoZVeViIiYf2j4TJeYd;b6db54a04054042735489c44257b4c679557dba2bc67c8c8ba2ce0ab861fd670;4.9;1732699053874;pjbMhjpf9jIg7jpjxjZf2iFjLrJp-jZeyDkQACEPCqYNGmkf16VeJrJdJrESJrpjh7JeLDIj9e1TJrpjh7Jj7TleyPoeznYf7jIT1jlSGe4fImFS4LoSHaISISYf1XFjLDIj7SnQEiVS0ipjLDrgJTFeyjoe4LYeIS1eKe4f5HYS7TVfFale2fVeHW1eyH4fJrJdJfUT1yVTIipjLDrgJbIgyzpe1uWS-GFSMWoRJrJdJTEjLrJp-jJQ3iEYcu3a-OVeEmHjLDIj_ulS9mFPJrpjh7Jj-WlO9G3TK2HjLDIjFqEjLrJp-3kjLDrfLDIjzXETJrpjLrJp-jJjLDIj0XETJrpjLrJp-HYfLDIj1XETJrpjLrJp-rojxjZe2iFjLrpjLDrg7rJdJbYOJipjLrpjh7Zf1rJdJfYOJipjLrpjh7Jf_rJdJjYOJipjLrpjh7JjyzZf9rIjLDIj6XETJrpjLrJp-rojxj5R0ipjLrpjh7ZeLDIj46FjLrpjLDrg7rJdJ7FjLrpjLDrg7rJdJb1OJrpjLrJpwqJdJbFQGakNGipjLDrguqpjhjZfyb4T7X1fzTYfGqoeMaFRJrJdJjoPJrpjLrJpwqJdJrkPJrpjh7Jj0vWe6vmf6rpVLf2YLfVTeqpQGaEQiq5dDe0Q3yVRImVYJrJdJnVO4ipjLD7N;3c1c24cee5e7d266bd76813ea681b7e595d07af3d230497ca8663de7fc5e09bc

大佬我把sign换成了HmacMD5 但是和我直接抓包的还是不一样 还是少一段

[Gwen0x4c3]

大佬4.9.4的有吗 他们说https://dr.jd.com/ 都用4.9.4了

请问具体版本号在哪里看

[TokenScience01]

大佬4.9.4的有吗 他们说https://dr.jd.com/ 都用4.9.4了

请问具体版本号在哪里看

不知道哪里看 只能看到4.9这样子

[KingFuRong]

大佬4.9.4的有吗 他们说 https://dr.jd.com/ 都用4.9.4了

请问具体版本号在哪里看

不知道哪里看 只能看到4.9这样子

h5st其中一部分环境相关加密包含版本，现在最新是4.9.6

[KingFuRong]

@TokenScience01 @sniper-Li @Gwen0x4c3
你只能期望它不再更新小版本，大版本更新前我将不再更新，目前是最新版是4.9.6，这是代码，祝你愉快

import base64
import datetime
import hashlib
import hmac
import json
import random
import re
import string
import struct
import time

from curl_cffi import requests

JD_H5_RANK_BUILD = {
    "appid": "wh5",
    "api_appid": "35fa0",
    "client": "wh5",
    "version": "4.9",
    "client_version": "1.0.0",
    "v": "h5_file_v4.9.6",
    "function_id": "qryH5BabelFloors",
    "url": "https://pro.m.jd.com/mall/active/2AtWT3nUsYKt9uXycPVMG8XAM9fA/index.html",
    "og": "https://pro.m.jd.com",
    'dtime_append': '08',
    'salt': 'd74&yW',
    'first_key':'2F',
    'second_key':'3L%G6Oz1LeTY',
    'token_slice_index': 9,
    'key_slice_index': 0,
    'enc_cut_index': 8,
    "encrypt_type": "sha256",
    "bizId": "jd-babelh5",
    "o": "pro.m.jd.com/mall/active/2AtWT3nUsYKt9uXycPVMG8XAM9fA/index.html",
    "qs": "siteClient=wh5&siteClientVersion=2.0.0&tabId=1&subTabType=1&queryType=1&pageNum=1&tabType=1&fromName=morerank&hideAd=1&bbtf=&preventPV=1&forceCurrentView=1",
    'base64_table': 'rqponmlkjihgfedcbaZYXWVUTSRQPONMLKJIHGFEDCBA-_9876543210zyxwvuts'
}


def process_string(text, slice_index):
    return ''.join([text[i] + text[i + 1] for i in range(0, slice_index, 2)][::-1]) + text[slice_index:]


def custom_base64_encode(text, new_table):
    reverse_string = text + ''.join(chr(3 - len(text) % 3) for _ in range(3 - len(text) % 3))
    ciphertext_base64_bytes = base64.b64encode(reverse_string.encode('latin1'))
    ciphertext = ciphertext_base64_bytes.decode()
    raw_table = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
    dictionary_decode = str.maketrans(new_table, raw_table)
    dictionary_encode = dict(zip(dictionary_decode.values(), dictionary_decode.keys()))
    new_result_b64 = ciphertext.translate(dictionary_encode)
    return new_result_b64


def custom_md5_encode(text, slice_index, cut_index):
    ciphertext = hashlib.new('md5', text.encode('latin1')).hexdigest()
    return process_string(ciphertext, slice_index)[0:cut_index]


def finger_print_4_9_6(key='z4rekl9i1u', choice_num=4, size_index=12, slice_index=8):
    chars = "0123456789abcdefghijklmnopqrstuvwxyz"
    middle = ''.join(random.sample(key, k=choice_num))
    temp = ''.join([char for char in key if char not in middle])
    random_num = random.randint(0, 9)
    first = ''.join(random.choices(temp, k=random_num))
    last = ''.join(random.choices(temp, k=size_index - random_num - 1))

    finger_print = first + middle + last + str(random_num)
    final_finger_print = []
    for i in finger_print[0:slice_index][::-1]:
        final_finger_print.append(chars[35 - int(i, 36)])
    final_finger_print.extend(finger_print[slice_index:16])

    return ''.join(final_finger_print)


def token_4_9_6(fp, first_key, second_key, salt, new_table, slice_index, cut_index):
    def get_expr():
        choice_num = 2 + random.randint(0, 3)
        random_mode_max = ''.join(random.choices(string.digits + string.ascii_letters + '_-', k=32))
        num_list = ["1", "2", "3"]
        ope_list = ["+", "x"]
        ori_text = ''
        for i in range(choice_num):
            ori_text += random.choice(num_list)
            if choice_num - 1 > i:
                ori_text += random.choice(ope_list)
        ori_text += random_mode_max[0:9 - len(ori_text)]
        return base64.b64encode(ori_text.encode('utf-8')).decode("utf-8").replace('+', '-').replace('/', '_').replace("=", "")

    def get_cipher():
        timestamp = int(time.time() * 1000)
        endian_timestamp = ''.join(chr(chars) for chars in int_to_little_endian_bytes(timestamp))
        enc_text = custom_md5_encode(first_key + second_key + endian_timestamp + fp, slice_index, cut_index)
        return custom_base64_encode(enc_text + first_key + second_key + endian_timestamp + fp, new_table=new_table)[::-1]

    def int_to_little_endian_bytes(num, length=8):
        return list(struct.pack('<Q', num)[:length])

    tk_expr = get_expr()
    tk_cipher = get_cipher()
    fake_tk = 'tk04w41l' + tk_expr + tk_cipher
    real_tk = 'tk04w' + custom_md5_encode(fake_tk + salt, slice_index, cut_index) + '41l' + tk_expr + tk_cipher
    return real_tk


def token_and_algo(user_agent, fp, build_params):
    version = build_params["version"]
    api_appid = build_params["api_appid"]
    url = build_params["url"]
    og = build_params["og"]
    v = build_params["v"]
    first_key = build_params["first_key"]
    second_key = build_params["second_key"]
    salt = build_params["salt"]
    slice_index = build_params["key_slice_index"]
    cut_index = build_params["enc_cut_index"]
    base64_table = build_params["base64_table"]

    w = random.randint(300, 500)
    h = random.randint(600, 900)
    av = user_agent.replace("Mozilla/", "")
    sua = re.search(r'5\.0 \((.*?)\)', user_agent).group(1)
    random_params = ''.join(random.choices(string.digits + string.ascii_letters + '_-', k=11))
    params = json.dumps({
        "wc": 1,
        "wd": 0,
        "l": "zh-CN",
        "ls": "zh-CN,en-US",
        "ml": 0,
        "pl": 0,
        "av": av,
        "ua": user_agent,
        "sua": sua,
        "pp": {},
        "extend": {
            "wd": 0,
            "l": 0,
            "ls": 0,
            "wk": 0,
            "bu1": "lite_0.1.5",
            "bu2": 0,
            "bu3": 58,
            "bu4": 0,
            "bu5": 0,
            "bu6": 3,
            "bu7": "",
            "bu8": 0
        },
        "pp1": "",
        "bu1": "",
        "w": w,
        "h": h,
        "ow": w,
        "oh": h,
        "url": url,
        "og": og,
        "pf": "Linux aarch64",
        "pr": 3,
        "re": "",
        "random": random_params,
        "referer": "",
        "v": v,
        "bu2": "    at n (https://storage.360buyimg.com/babelnode/jd-jssdk/4.5.2/jd-jssdk.js:3:27296)",
        "canvas": "",
        "canvas1": "47e3f66141bae5270127dcb7f721d7f4",
        "webglFp": "",
        "webglFp1": "e8097fb371349c2e989a6f3dc8f1e907",
        "ccn": 8,
        "ai": api_appid,
        "fp": fp
    }, indent=2)
    extend_params = custom_base64_encode(text=params, new_table=base64_table)[::-1]

    headers = {
        "authority": "cactus.jd.com",
        "accept": "application/json",
        "accept-language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6",
        "cache-control": "no-cache",
        "content-type": "application/json",
        "origin": "https://item.m.jd.com",
        "pragma": "no-cache",
        "referer": "https://item.m.jd.com/",
        "user-agent": user_agent
    }
    url = "https://cactus.jd.com/request_algo"
    data = {
        "version": version,
        "fp": fp,
        "appId": api_appid,
        "timestamp": int(time.time() * 1e3),
        "platform": "web",
        "expandParams": extend_params,
        "fv": v,
        "localTk": token_4_9_6(fp, first_key, second_key, salt, base64_table, slice_index, cut_index),
    }
    data = json.dumps(data, separators=(',', ':'))
    response = requests.post(url, headers=headers, data=data)

    token = response.json()["data"]["result"]["tk"]
    algo = response.json()["data"]["result"]["algo"]
    return token, algo


def h5st_4_9_6(body, user_agent, fp, token, algo, build_params, t=None):
    def get_key(token, fp, format_date, dtime_append, api_appid, algo, salt, token_slice_index, key_slice_index):
        rd = re.search(r"rd=.(.*?).;", algo).group(1)
        hmac_text = token + fp + format_date + dtime_append + api_appid + rd + salt
        hmac_key = ''.join(chr(158 - ord(chars)) for chars in token[0:token_slice_index][::-1]) + token[token_slice_index::]

        key = hmac.new(hmac_key.encode('latin1'), hmac_text.encode('latin1'), hashlib.md5).hexdigest()
        return process_string(key, key_slice_index)

    v = build_params["v"]
    appid = build_params["appid"]
    client = build_params["client"]
    version = build_params["version"]
    api_appid = build_params["api_appid"]
    function_id = build_params["function_id"]
    client_version = build_params["client_version"]
    dtime_append = build_params['dtime_append']
    salt = build_params['salt']
    token_slice_index = build_params['token_slice_index']
    key_slice_index = build_params['key_slice_index']
    base64_table = build_params['base64_table']

    sua = re.search(r'5\.0 \((.*?)\)', user_agent).group(1)
    random_params = ''.join(random.choices(string.digits + string.ascii_letters + '_-', k=12))
    env_info = json.dumps({
        "sua": sua,
        "pp": {},
        "extend": {
            "wd": 0,
            "l": 0,
            "ls": 0,
            "wk": 0,
            "bu1": "lite_0.1.5",
            "bu2": -2,
            "bu3": 63,
            "bu4": 0,
            "bu5": 0,
            "bu6": 17,
            "bu7": "",
            "bu8": 0
        },
        "pf": "Linux aarch64",
        "random": random_params,
        "v": v,
        "canvas": "47e3f66141bae5270127dcb7f721d7f4",
        "webglFp": "e8097fb371349c2e989a6f3dc8f1e907",
        "ccn": 8,
        "fp": fp
    }, indent=2)

    date_now = datetime.datetime.now()
    format_date = date_now.strftime("%Y%m%d%H%M%S%f")[:-3]
    current_time = str(int(datetime.datetime.timestamp(date_now) * 1e3))

    key = get_key(token, fp, format_date, dtime_append, api_appid, algo, salt, token_slice_index, key_slice_index)
    body = json.dumps(body, separators=(",", ":"), ensure_ascii=False)
    body_str = hashlib.new('sha256', body.encode()).hexdigest()

    if t:
        text = f"{key}appid:{appid}&body:{body_str}&client:{client}&clientVersion:{client_version}&functionId:{function_id}&t:{t}{key}{salt}"
    else:
        text = f"{key}appid:{appid}&body:{body_str}&client:{client}&clientVersion:{client_version}&functionId:{function_id}{key}{salt}"
    sign = process_string(hashlib.new('sha256', text.encode()).hexdigest(), key_slice_index)
    text1 = f"{key}appid:{appid}&functionId:{function_id}{key}{salt}"
    sign1 = process_string(hashlib.new('sha256', text1.encode()).hexdigest(), key_slice_index)
    env_info_enc = custom_base64_encode(env_info, new_table=base64_table)[::-1]

    return f"{format_date};{fp};{api_appid};{token};{sign};{version};{current_time};{env_info_enc};{sign1}"

[TokenScience01]

谢谢大佬 现在已经5.0了

[KingFuRong]

谢谢大佬 现在已经5.0了

厚礼蟹，这更新真快，有时间我看看

[KingFuRong]

谢谢大佬 现在已经5.0了

更新喽

[TokenScience01]

谢谢大佬我去学习学习

[347114839]

5.0.5了。这更新速度也太快了吧

[qicaiyun]

大佬能出个视频教学一下么

[KingFuRong]

大版本不变的情况下，后面的小版本变，基本上就是换个salt，base64换个表，所以更新的快

[lionkingc]

大版本不变的情况下，后面的小版本变，基本上就是换个salt，base64换个表，所以更新的快

5.0.4 运行出现<Response [403]> ，请问需要修改文件中的配置么，谢谢。

[KingFuRong]

大版本不变的情况下，后面的小版本变，基本上就是换个salt，base64换个表，所以更新的快

5.0.4 运行出现<Response [403]> ，请问需要修改文件中的配置么，谢谢。

因为现在是5.0.7了 QwQ