某兑换诈骗的上传接口

Faxlok

早上接到诈骗短信：
余额提示：您手机号内261800分将于明日全做废，请尽快戳 f.o6r.cn/DOSiML 换好物！拒收请回复R【优品兑】

用的是crypto-js的md5加密的头请求字段accept-locale

这个诈骗份子应该有很多域名，但是图片上传地址一直没变，三个月了加密也没换过
https://52.ht/thread-1199359-1-1.html




Bun运行时，node运行时拿gpt转换一下

1. function generateRandomString(length) {
   
2.   const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
   
3.   let result = '';
   
4.   const charactersLength = characters.length;
   
5. 
   
6.   for (let i = 0; i < length; i++) {
   
7.     const randomIndex = Math.floor(Math.random() * charactersLength);
   
8.     result += characters.charAt(randomIndex);
   
9.   }
   
10. 
    
11.   return result;
    
12. }
    
13. 
    
14. const md5 = new Bun.CryptoHasher("md5");
    
15. // 图片路径
    
16. const imgFile = Bun.file("1.png");
    
17. const fd = new FormData()
    
18. const nonce = generateRandomString(8);
    
19. const timestamp = (new Date).getTime() + ""
    
20. fd.append("file", imgFile)
    
21. fd.append("nonce", nonce);
    
22. fd.append("timestamp", timestamp);
    
23. 
    
24. md5.update(`nonce=${nonce}&timestamp=${timestamp}fuck-your-mother-three-thousand-times-apes-not-kill-apes`)
    
25. const acceptLocale = md5.digest("hex")
    
26. 
    
27. fetch("https://api.weixinyanxuan.com/mall/api/img/upload", {
    
28.   "headers": {
    
29.     "accept": "application/json, text/plain, */*",
    
30.     "accept-language": "zh-CN,zh;q=0.9",
    
31.     "accept-locale": acceptLocale,
    
32.     "cache-control": "no-cache",
    
33.     "pragma": "no-cache",
    
34.     "sec-fetch-dest": "empty",
    
35.     "sec-fetch-mode": "cors",
    
36.     "sec-fetch-site": "cross-site"
    
37.   },
    
38.   "referrer": "https://e.zxhpmy.cn/",
    
39.   body: fd,
    
40.   "method": "POST",
    
41.   "mode": "cors",
    
42.   "credentials": "omit"
    
43. }).then(res => res.json()).then(res => {
    
44.   console.log(res)
    
45.   // 图片地址
    
46.   const imgUrl = res.data
    
47.   console.log("图片地址", imgUrl)
    
48. })

复制代码

waiwaiwq

坐等成品白**

winsunz

waiwaiwq 发表于 2023-11-24 10:19
坐等成品白**

https://resurl.cn/upload

jqbaobao

{'code': 401, 'message': 'qmrz请求失败'}

winsunz

Benladen

winsunz 发表于 2023-11-24 10:22
https://resurl.cn/upload

能分享下上传的源码吗？

jqbaobao

搞定了
root@debian:~# python3 weixinyanxuan.py
{'code': 200, 'data': 'https://img.58duihuan.com/2662636322111595', 'extend': None, 'message': 'SUCCESS'}
图片地址 https://img.58duihuan.com/2662636322111595


代码 https://img.58duihuan.com/2662648770822150

winsunz

Benladen 发表于 2023-11-24 10:25
能分享下上传的源码吗？

html不存在什么源码直接右键看

zhongziso

卟想起床

这是刷他的上传接口吗，家用的宽带上传本来就小啊。