Giter Club home page Giter Club logo

rane_rce_test's Introduction

燃鹅向前冲逆向测试记录暨风险警示

警示:后端在对用户身份进行校验时仅校验uid,且uid不发生变化,从而可能导致冒用账号

To 经纬科技&腾讯

此仓库仅为逆向学习过程中的一个测试,禁止任何人用于商业用途,请严格遵守开源协议

如果有帮助,请给我一个star!⭐

文件结构

postcode.py为实现请求发送的python文件

deceode.js为实现加密解密的js源码

game.js为游戏源代码

使用说明

经过查看源代码,可以轻松找到加密方式及提供的接口,在文件中已做详细注释,请勿利用该测试记录干扰游戏进程

在windows下运行需要改python目录下lib目录里的subprocess.py文件的编码,init的encoding改为utf-8

心得

qq小程序源代码保存与Data/data/com.tencent.mobileqq/files/minigame,以文件夹存储,无需解密

qq小程序源代码为混淆过的js文件,但混淆程度较低,容易破解,搜索接口即可找到发送数据的函数,过程中用到的函数只需要搜索.functionname(即可找到其定义位置,逆向难度较低

rane_rce_test's People

Contributors

zro2bit avatar atongmu-love avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.