zpstoken分析

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析
部分python代码

result = ctx.call("getToken", n, e)
print(result)
cookies = {
    "__zp_stoken__": result,
}
url = "/wapi/zpgeek/search/joblist.json"

data = {
    "page": "1",
    "pageSize": "15",
    "query": "ai工程师",
    "multiSubway": "",
    "position": "",
    "jobType": "",
    "salary": "",
    "experience": "",
    "degree": "",
    "industry": "",
    "scale": "",
    "stage": "",
    "scene": "1",
    "encryptExpectId": ""
}
response = requests.post(url, headers=headers, cookies=cookies, params=params, data=data,)

print(response.text)
print(response)

result = ctx.call("getToken", n, e)
print(result)
cookies = {
"__zp_stoken__": result,
}
url = "/wapi/zpgeek/search/joblist.json"

data = {
"page": "1",
"pageSize": "15",
"query": "ai工程师",
"multiSubway": "",
"position": "",
"jobType": "",
"salary": "",
"experience": "",
"degree": "",
"industry": "",
"scale": "",
"stage": "",
"scene": "1",
"encryptExpectId": ""
}
response = requests.post(url, headers=headers, cookies=cookies, params=params, data=data,)

print(response.text)
print(response)

结果

总结

 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。