声明本文章中所有内容仅供学习交流使用不用于其他任何目的抓包内容、敏感网址、数据接口 等均已做脱敏处理严禁用于商业用途和非法用途否则由此产生的一切后果均与作者无关前言底部总结有彩蛋逆向分析signcp2.call(getSign,.........)token cp.call(getToken, ..................)print(token)print(sign)cp3 execjs.compile(open(w-payload-source.js,r,encodingutf-8).read())result cp3.call(getWPayloadSource,..............)w_payload_source result[w_payload_source]data result[data]headers {sessionid: 1,sign: sign,token: token,transactionid: transactionID,w-payload-source: w_payload_source,}response requests .post(search/api/search/batchSearch,paramsparams,cookiescookies,headersheaders,jsondata,)print(response.text [0:1000])# wx a15018601872signcp2.call(getSign,.........)token cp.call(getToken, ..................)print(token)print(sign)cp3 execjs.compile(open(w-payload-source.js,r,encodingutf-8).read())result cp3.call(getWPayloadSource,..............)w_payload_source result[w_payload_source]data result[data]headers {sessionid: 1,sign: sign,token: token,transactionid: transactionID,w-payload-source: w_payload_source,}response requests.post(search/api/search/batchSearch,paramsparams,cookiescookies,headersheaders,jsondata,)结果总结1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。