【教程】华南理工大学校园网登录抓包和协议模拟

小锋学长生活大爆炸

发布于 2023-08-21 08:22:29

2920

发布于 2023-08-21 08:22:29

文章被收录于专栏：小锋学长生活大爆炸

抓包分析

办公区域网络的登录地址：https://172.25.31.129:9444/

对于Base64的编码，可以看这里：Base64 在线编码解码 | Base64 加密解密 - Base64.us

提取主要信息：

请求 URL:
https://172.25.31.129:9444/byod/byodrs/login/defaultLogin

请求方法:
POST

请求头:
cookie=testcookie=yes; userip=分给你的IP,连上WiFi就会给你

请求负载:(为方便展示，实际请求时候不要有空格或者换行)
{
    "username":"你的学号",
    "userPassword":"登录密码并使用base64编码",
    "serviceSuffixId":"-1",
    "dynamicPwdAuth":false,
    "code":"",
    "codeTime":"",
    "validateCode":"",
    "licenseCode":"",
    "userGroupId":0,
    "validationType":0,
    "guestManagerId":0,
    "shopIdE":null,
    "wlannasid":null
}

Postman测试请求

Python模拟

import requests
import socket

def get_local_ip():
    ip_address = ''
    try:
        hostname = socket.gethostname()
        ip_address = socket.gethostbyname(hostname)
    except:
        pass
    return ip_address


url = r'https://172.25.31.129:9444/byod/byodrs/login/defaultLogin'
data = {"userName":"学号","userPassword":"密码的base64编码","serviceSuffixId":"-1","dynamicPwdAuth":False,"code":"","codeTime":"","validateCode":"","licenseCode":"","userGroupId":0,"validationType":0,"guestManagerId":0,"shopIdE":None,"wlannasid":None}
headers = {"cookie":"testcookie=yes; userip="+get_local_ip()}


res = requests.post(url, json=data, headers=headers, verify=False).text
print(res)

本文参与腾讯云自媒体同步曝光计划，分享自作者个人站点/博客。

原始发表：2023-08-20，如有侵权请联系 cloudcommunity@tencent.com 删除

编码