js逆向_百度翻译

在上一篇 爬取有道翻译 的基础上来进行本次百度翻译的破解

前面步骤不变&＃xff0c;就不在赘述了。

直接跳到找fromdata里的sign元素

前面分析可以知道 变的只有sign和token&＃xff0c;token可以直接获取&＃xff0c;使用我们重点放在sign

同样的先全局查找&＃xff0c;在逐个分析&＃xff0c;然后内部查找&＃xff0c;最后逐步分析到上图所示&＃xff0c;打断点运行&＃xff0c;发现e就是传入的word&＃xff0c;把光标放在L上&＃xff0c;点击上面提示的f进行跳转

我们把这个函数体直接复制下来&＃xff0c;存储到js文件中&＃96;&＃xff0c;然后用import execjs库对其进行分析&＃xff0c;就可以得到sign的值

import execjs
def getSign(word):with open("baidufanyi.js", "r", encoding&＃61;&＃39;utf8&＃39;) as f:jscode &＃61; f.read()sign &＃61; execjs.compile(jscode).call(&＃39;e&＃39;, word)return sign


但是我们要把js里的内容补齐&＃xff0c;否则会一直报错未定义&＃xff0c;还需要一个i和一个函数n&＃xff0c;读者可以自己尝试找一下。

最后附完整代码

import requests
import execjsdef getSign(word):with open("baidufanyi.js", "r", encoding&＃61;&＃39;utf8&＃39;) as f:jscode &＃61; f.read()sign &＃61; execjs.compile(jscode).call(&＃39;e&＃39;, word)return signdef request(word):url &＃61; "https://fanyi.baidu.com/v2transapi?from&＃61;en&to&＃61;zh"headers &＃61; {&＃39;Accept&＃39;: &＃39;*/*&＃39;,&＃39;Accept-Encoding&＃39;: &＃39;gzip, deflate, br&＃39;,&＃39;Accept-Language&＃39;: &＃39;zh-CN,zh;q&＃61;0.9&＃39;,&＃39;Connection&＃39;: &＃39;keep-alive&＃39;,&＃39;Content-Length&＃39;: &＃39;136&＃39;,&＃39;Content-Type&＃39;: &＃39;application/x-www-form-urlencoded; charset&＃61;UTF-8&＃39;,&＃39;COOKIE&＃39;: &＃39;BIDUPSID&＃61;602A11E252B731A9757622309C3F89E5; PSTM&＃61;1626349844; BAIDUID&＃61;602A11E252B731A9D017D8914C6CF71D:FG&＃61;1; __yjs_duid&＃61;1_70ff7d08f671b7667da8a108172284571626349912834; REALTIME_TRANS_SWITCH&＃61;1; HISTORY_SWITCH&＃61;1; FANYI_WORD_SWITCH&＃61;1; SOUND_SPD_SWITCH&＃61;1; SOUND_PREFER_SWITCH&＃61;1; BAIDUID_BFESS&＃61;602A11E252B731A9D017D8914C6CF71D:FG&＃61;1; BDORZ&＃61;B490B5EBF6F3CD402E515D22BCDA1598; delPer&＃61;0; PSINO&＃61;3; H_PS_PSSID&＃61;34644_34067_34549_33848_34600_34584_26350_34627_34420_34469_34691; BA_HECTOR&＃61;21ah212l852l808lab1gkd6ij0q; BCLID&＃61;7900992051927074863; BDSFRCVID&＃61;2PLOJexroG0YyxOHO7bjhKIR3_weG7bTDYLtOwXPsp3LGJLVJeC6EG0Pts1-dEu-EHtdogKKLgOTHULF_2uxOjjg8UtVJeC6EG0Ptf8g0M5; H_BDCLCKID_SF&＃61;tR3aQ5rtKRTffjrnhPF3Dl8TXP6-hnjy3bRkX4nvWpAbHRcdyUrCDp4Wbttf5q3RymJJ2-39LPO2hpRjyxv4y4Ldj4oxJpOJ-bCL0p5aHl51fbbvbURvX--g3-7PWU5dtjTO2bc_5KnlfMQ_bf--QfbQ0hOhqP-jBRIE3-oJqCDhMC-93D; BCLID_BFESS&＃61;7900992051927074863; BDSFRCVID_BFESS&＃61;2PLOJexroG0YyxOHO7bjhKIR3_weG7bTDYLtOwXPsp3LGJLVJeC6EG0Pts1-dEu-EHtdogKKLgOTHULF_2uxOjjg8UtVJeC6EG0Ptf8g0M5; H_BDCLCKID_SF_BFESS&＃61;tR3aQ5rtKRTffjrnhPF3Dl8TXP6-hnjy3bRkX4nvWpAbHRcdyUrCDp4Wbttf5q3RymJJ2-39LPO2hpRjyxv4y4Ldj4oxJpOJ-bCL0p5aHl51fbbvbURvX--g3-7PWU5dtjTO2bc_5KnlfMQ_bf--QfbQ0hOhqP-jBRIE3-oJqCDhMC-93D; Hm_lvt_64ecd82404c51e03dc91cb9e8c025574&＃61;1631951765,1631951802,1631952172,1632016982; Hm_lpvt_64ecd82404c51e03dc91cb9e8c025574&＃61;1632016982; __yjs_st&＃61;2_M2I0MjI3ZTEwM2UyZjAwZDJhYjljMDdhNGFiNDhkZTg0OWNmZjZjNDI1ZDAwZmUxZDllNDkyYjczOWE5NzhkYjY0ZmE2NjdhMDkzZGNmMmJlODQ1MjcwOWQwOTBiY2E5YTA0MmZiNGQyYzU1NDgwYTIzZTVkNWZmMjUxNDViZjRiNGU0OWY3MmYwZTUxNmFmODRmMzJhN2JhN2RjNDY2YmU4ZGEyZDA2M2JhZWUzMjRiZThjNzI0NDU4OWRkZDhmYjdhZDdiZWRiMmJiY2IzMmM1NmI0YjBmMjBlNjA5M2E4NjQ4ZGM4ZmU2MDVkMzM0NzMzMjI4YTk4MTBhMmFlNV83XzllYzQwNTlj; ab_sr&＃61;1.0.1_NmU4Y2M3NGRiY2U3YWFiZjlkNDNjMjI2YjZkN2YwNTYyNDc2OTEyY2ZkY2FhZTJjMzU4YjVlZjk5NDZmZDMxOWRmZTJkMzM0YmNkNTY1MGI2MWFiMDEzMjRiY2FhNWRlZTFjN2Y2OTg0OTBlMjFhYzBlYmM1MDMzNzBlYmJkMmFmYzNhZjVhOGM4YmE2ODdjN2U4NmQ5MjE5Y2NiM2E4ZQ&＃61;&＃61;&＃39;,&＃39;Host&＃39;: &＃39;fanyi.baidu.com&＃39;,&＃39;Origin&＃39;: &＃39;https://fanyi.baidu.com&＃39;,&＃39;Referer&＃39;: &＃39;https://fanyi.baidu.com/translate?aldtype&＃61;16047&query&＃61;&keyfrom&＃61;baidu&smartresult&＃61;dict&lang&＃61;auto2zh&＃39;,&＃39;sec-ch-ua&＃39;: &＃39;"Google Chrome";v&＃61;"93", " Not;A Brand";v&＃61;"99", "Chromium";v&＃61;"93"&＃39;,&＃39;sec-ch-ua-mobile&＃39;: &＃39;?0&＃39;,&＃39;sec-ch-ua-platform&＃39;: &＃39;"Windows"&＃39;,&＃39;Sec-Fetch-Dest&＃39;: &＃39;empty&＃39;,&＃39;Sec-Fetch-Mode&＃39;: &＃39;cors&＃39;,&＃39;Sec-Fetch-Site&＃39;: &＃39;same-origin&＃39;,&＃39;User-Agent&＃39;: &＃39;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36&＃39;,&＃39;X-Requested-With&＃39;: &＃39;XMLHttpRequest&＃39;}sign &＃61; getSign(word)data &＃61; {&＃39;from&＃39;: &＃39;en&＃39; if word[0].upper() in [&＃39;A&＃39;, &＃39;B&＃39;, &＃39;C&＃39;, &＃39;D&＃39;, &＃39;E&＃39;, &＃39;F&＃39;, &＃39;G&＃39;, &＃39;H&＃39;, &＃39;I&＃39;, &＃39;J&＃39;, &＃39;K&＃39;, &＃39;L&＃39;, &＃39;M&＃39;, &＃39;N&＃39;, &＃39;O&＃39;, &＃39;P&＃39;, &＃39;Q&＃39;, &＃39;R&＃39;, &＃39;S&＃39;, &＃39;T&＃39;, &＃39;U&＃39;, &＃39;V&＃39;,&＃39;W&＃39;, &＃39;X&＃39;, &＃39;Y&＃39;, &＃39;Z&＃39;] else &＃39;zh&＃39;,&＃39;to&＃39;: &＃39;zh&＃39; or &＃39;en&＃39;,&＃39;query&＃39;: word,&＃39;transtype&＃39;: &＃39;realtime&＃39;,&＃39;simple_means_flag&＃39;: 3,&＃39;sign&＃39;: sign, # &＃39;63766.268839&＃39;&＃39;token&＃39;: &＃39;ceef41c83fe0d714278e1d1dca80a510&＃39;,&＃39;domain&＃39;: &＃39;common&＃39;}response &＃61; requests.post(url, headers&＃61;headers, data&＃61;data).json()print(response[&＃39;trans_result&＃39;][&＃39;data&＃39;][0][&＃39;dst&＃39;])if __name__ &＃61;&＃61; &＃39;__main__&＃39;:word &＃61; input("请输入翻译元素&＃xff1a;")request(word)

js的文件自己找找看。。。。。。。