大众点评 mtgsig1.2 分析

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
wx a15018601872 q 2766958292
逆向过程
部分python代码
cp = execjs.compile(open('mtgsig.js','r',encoding='utf-8').read())
result = cp.call('getMtgsig', data1)
mtgsig = result['header']['mtgsig']
print(mtgsig)
headers = {
"Accept": "/",
"Accept-Language": "zh-CN,zh;q=0.9",
"Cache-Control": "no-cache",
"Connection": "keep-alive",
"Content-Type": "application/json",
"Pragma": "no-cache",
"Sec-Fetch-Dest": "empty",
"Sec-Fetch-Mode": "cors",
"Sec-Fetch-Site": "cross-site",
"channel": "weixin",
"channelversion": "4.0.5.18",
"dpid": openid,
"minaname": "dianping-wxapp",
"minaversion": "9.85.2",
"mtgsig": mtgsig,
"openid": openid,
"platform": "Android",
}
url = "wxmapi/wxsearch/search"
response = requests.get(url, headers=headers, params=params)

print(response.text)
print(response)

结果

总结
1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。