216 lines
8.1 KiB
Python
216 lines
8.1 KiB
Python
#!/usr/bin/env python3
|
||
# -*- coding: utf-8 -*-
|
||
|
||
"""
|
||
DuoPlus 注册页面网络请求检查器
|
||
用于分析和记录注册过程中的所有网络请求
|
||
"""
|
||
|
||
import requests
|
||
import json
|
||
from colorama import init, Fore, Style
|
||
import time
|
||
|
||
# 初始化 colorama
|
||
init(autoreset=True)
|
||
|
||
class NetworkInspector:
|
||
"""网络请求检查器"""
|
||
|
||
def __init__(self):
|
||
self.session = requests.Session()
|
||
self.base_url = "https://my.duoplus.cn"
|
||
self.api_url = "https://api.duoplus.cn"
|
||
|
||
def inspect_registration_apis(self):
|
||
"""检查注册相关的 API 端点"""
|
||
|
||
print(f"{Fore.CYAN}{'='*60}")
|
||
print(f"{Fore.CYAN}DuoPlus 注册 API 端点检查")
|
||
print(f"{Fore.CYAN}{'='*60}\n")
|
||
|
||
# 1. 检查腾讯验证码配置 API
|
||
self._check_captcha_config()
|
||
|
||
# 2. 检查注册页面
|
||
self._check_signup_page()
|
||
|
||
# 3. 尝试获取其他可能的 API 端点
|
||
self._check_common_apis()
|
||
|
||
def _check_captcha_config(self):
|
||
"""检查验证码配置 API"""
|
||
print(f"{Fore.YELLOW}[1] 检查验证码配置 API...")
|
||
|
||
url = f"{self.api_url}/common/tencentConfig"
|
||
|
||
headers = {
|
||
'pragma': 'no-cache',
|
||
'cache-control': 'no-cache',
|
||
'sec-ch-ua-platform': '"Windows"',
|
||
'authorization': '',
|
||
'lang': 'zh-CN',
|
||
'sec-ch-ua': '"Not)A;Brand";v="8", "Chromium";v="138", "Google Chrome";v="138"',
|
||
'sec-ch-ua-mobile': '?0',
|
||
'content-type': 'application/json',
|
||
'duoplus-fp': 'e8014cf598dd4c021f2d08abef905801',
|
||
'origin': 'https://my.duoplus.cn',
|
||
'sec-fetch-site': 'same-site',
|
||
'sec-fetch-mode': 'cors',
|
||
'sec-fetch-dest': 'empty',
|
||
'referer': 'https://my.duoplus.cn/',
|
||
'accept-language': 'zh-CN,zh;q=0.9,en;q=0.8',
|
||
'priority': 'u=1, i',
|
||
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36'
|
||
}
|
||
|
||
try:
|
||
response = self.session.get(url, headers=headers)
|
||
print(f"{Fore.GREEN}URL: {url}")
|
||
print(f"{Fore.GREEN}Status: {response.status_code}")
|
||
|
||
if response.status_code == 200:
|
||
data = response.json()
|
||
print(f"{Fore.GREEN}Response: {json.dumps(data, indent=2, ensure_ascii=False)}")
|
||
|
||
if data.get('code') == 200:
|
||
captcha_app_id = data['data']['captcha_app_id']
|
||
print(f"{Fore.CYAN}✓ Captcha App ID: {captcha_app_id}")
|
||
else:
|
||
print(f"{Fore.RED}Failed: HTTP {response.status_code}")
|
||
|
||
except Exception as e:
|
||
print(f"{Fore.RED}Error: {str(e)}")
|
||
|
||
print()
|
||
|
||
def _check_signup_page(self):
|
||
"""检查注册页面"""
|
||
print(f"{Fore.YELLOW}[2] 检查注册页面...")
|
||
|
||
url = f"{self.base_url}/sign-up"
|
||
|
||
try:
|
||
response = self.session.get(url)
|
||
print(f"{Fore.GREEN}URL: {url}")
|
||
print(f"{Fore.GREEN}Status: {response.status_code}")
|
||
|
||
# 获取 cookies
|
||
cookies = self.session.cookies.get_dict()
|
||
if cookies:
|
||
print(f"{Fore.GREEN}Cookies received:")
|
||
for key, value in cookies.items():
|
||
print(f" - {key}: {value[:20]}..." if len(value) > 20 else f" - {key}: {value}")
|
||
|
||
except Exception as e:
|
||
print(f"{Fore.RED}Error: {str(e)}")
|
||
|
||
print()
|
||
|
||
def _check_common_apis(self):
|
||
"""检查常见的 API 端点"""
|
||
print(f"{Fore.YELLOW}[3] 检查可能的 API 端点...")
|
||
|
||
# 常见的注册相关 API 端点
|
||
possible_endpoints = [
|
||
f"{self.api_url}/auth/register",
|
||
f"{self.api_url}/auth/send-code",
|
||
f"{self.api_url}/auth/verify-code",
|
||
f"{self.api_url}/user/register",
|
||
f"{self.api_url}/account/register",
|
||
f"{self.api_url}/v1/auth/register",
|
||
f"{self.api_url}/api/auth/register",
|
||
]
|
||
|
||
headers = {
|
||
'origin': 'https://my.duoplus.cn',
|
||
'referer': 'https://my.duoplus.cn/',
|
||
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36'
|
||
}
|
||
|
||
for endpoint in possible_endpoints:
|
||
try:
|
||
# 使用 OPTIONS 请求检查端点是否存在
|
||
response = self.session.options(endpoint, headers=headers, timeout=3)
|
||
|
||
if response.status_code in [200, 204, 405]: # 405 表示方法不允许但端点存在
|
||
print(f"{Fore.GREEN}✓ Found: {endpoint} (Status: {response.status_code})")
|
||
|
||
# 检查允许的方法
|
||
allow_header = response.headers.get('Allow', '')
|
||
if allow_header:
|
||
print(f" Allowed methods: {allow_header}")
|
||
|
||
# 检查 CORS 头
|
||
cors_headers = {
|
||
'Access-Control-Allow-Origin': response.headers.get('Access-Control-Allow-Origin'),
|
||
'Access-Control-Allow-Methods': response.headers.get('Access-Control-Allow-Methods'),
|
||
'Access-Control-Allow-Headers': response.headers.get('Access-Control-Allow-Headers')
|
||
}
|
||
|
||
cors_info = [f"{k}: {v}" for k, v in cors_headers.items() if v]
|
||
if cors_info:
|
||
print(f" CORS: {', '.join(cors_info)}")
|
||
else:
|
||
print(f"{Fore.YELLOW}? Unknown: {endpoint} (Status: {response.status_code})")
|
||
|
||
except requests.exceptions.Timeout:
|
||
print(f"{Fore.RED}✗ Timeout: {endpoint}")
|
||
except requests.exceptions.ConnectionError:
|
||
print(f"{Fore.RED}✗ Connection Error: {endpoint}")
|
||
except Exception as e:
|
||
print(f"{Fore.RED}✗ Error: {endpoint} - {str(e)}")
|
||
|
||
time.sleep(0.5) # 避免请求过快
|
||
|
||
print()
|
||
|
||
def analyze_register_request(self):
|
||
"""分析注册请求的结构"""
|
||
print(f"{Fore.CYAN}{'='*60}")
|
||
print(f"{Fore.CYAN}预期的注册请求结构")
|
||
print(f"{Fore.CYAN}{'='*60}\n")
|
||
|
||
sample_request = {
|
||
"email": "user@example.com",
|
||
"password": "password123",
|
||
"confirmPassword": "password123",
|
||
"verificationCode": "123456",
|
||
"inviteCode": "",
|
||
"agreeToTerms": True,
|
||
"ticket": "从腾讯验证码获取",
|
||
"randstr": "从腾讯验证码获取"
|
||
}
|
||
|
||
print(f"{Fore.YELLOW}预期的注册请求体结构:")
|
||
print(json.dumps(sample_request, indent=2, ensure_ascii=False))
|
||
|
||
print(f"\n{Fore.YELLOW}关键请求头:")
|
||
key_headers = {
|
||
"Content-Type": "application/json",
|
||
"Origin": "https://my.duoplus.cn",
|
||
"Referer": "https://my.duoplus.cn/sign-up",
|
||
"duoplus-fp": "设备指纹（可能需要）",
|
||
"Authorization": "Bearer token（如果需要）"
|
||
}
|
||
|
||
for header, value in key_headers.items():
|
||
print(f" {header}: {value}")
|
||
|
||
def main():
|
||
"""主函数"""
|
||
inspector = NetworkInspector()
|
||
|
||
print(f"{Fore.CYAN}开始检查 DuoPlus 注册相关 API...\n")
|
||
|
||
# 检查 API 端点
|
||
inspector.inspect_registration_apis()
|
||
|
||
# 显示预期的请求结构
|
||
inspector.analyze_register_request()
|
||
|
||
print(f"{Fore.GREEN}\n检查完成！")
|
||
print(f"{Fore.YELLOW}提示：使用浏览器开发者工具或代理工具（如 mitmproxy）可以获取更准确的请求信息。")
|
||
|
||
if __name__ == "__main__":
|
||
main() |