Spaces:
Running
Running
File size: 3,566 Bytes
6e41657 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 | import mitmproxy.http
import json
import threading
from http.server import SimpleHTTPRequestHandler, HTTPServer
from urllib.parse import urlparse, parse_qs
import random
import string
import time
class ExtractSetCookie:
def __init__(self):
self.cookies = {}
def response(self, flow: mitmproxy.http.HTTPFlow):
# 检查请求的 URL 是否符合过滤器
if flow.request.url.startswith("https://mp.weixin.qq.com/s?__biz="):
# 提取 __biz 参数
parsed_url = urlparse(flow.request.url)
query_params = parse_qs(parsed_url.query)
biz = query_params.get('__biz', [None])[0]
if biz:
# 提取响应头中的 Set-Cookie 数据
set_cookie_header = flow.response.headers.get("Set-Cookie")
if set_cookie_header:
timestamp = int(time.time() * 1000)
self.cookies[biz] = {
"url": flow.request.url,
"set_cookie": set_cookie_header,
"timestamp": timestamp,
}
# 将 cookies 数据保存到文件中
with open("credentials.json", "w") as file:
json.dump(list(self.cookies.values()), file, indent=4)
addons = [
ExtractSetCookie(),
]
# 生成一个长度为36的随机字符串作为会话密钥
session_key = ''.join(random.choices(string.ascii_letters + string.digits, k=32))
print(f"本次会话的密钥: {session_key}")
# 创建一个简单的 HTTP 服务器来提供 credentials.json 文件
def start_http_server():
class CustomHandler(SimpleHTTPRequestHandler):
def end_headers(self):
# 添加 CORS 头
self.send_header("Cache-Control", "no-store, no-cache, must-revalidate")
self.send_header("Pragma", "no-cache")
self.send_header("Expires", "0")
self.send_header("Access-Control-Allow-Origin", "*")
self.send_header("Access-Control-Allow-Methods", "GET, OPTIONS")
self.send_header("Access-Control-Allow-Headers", "Content-Type, Authorization")
super().end_headers()
def do_OPTIONS(self):
self.send_response(200)
self.end_headers()
def do_GET(self):
print(self.path)
auth_header = self.headers.get("Authorization")
if auth_header != session_key:
self.send_response(401)
self.send_header("Content-type", "text/html")
self.end_headers()
self.wfile.write(b"Unauthorized")
return
if self.path == "/authorize":
self.send_response(200)
self.end_headers()
return
elif self.path == "/credentials":
self.path = "/credentials.json"
return SimpleHTTPRequestHandler.do_GET(self)
else:
self.send_response(403)
self.send_header("Content-type", "text/html")
self.end_headers()
self.wfile.write(b"Forbidden")
return
server_address = ('', 8088)
httpd = HTTPServer(server_address, CustomHandler)
# print("API server listening *:8088")
httpd.serve_forever()
# 在一个单独的线程中启动 HTTP 服务器
threading.Thread(target=start_http_server, daemon=True).start()
|