x-api-eid-token逆向分析之jsTk.do算法中a和d参数

目标接口地址

http://jra.*.com/jsTk.do

抓包

POST http://jra.*.com/jsTk.do HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: keep-alive
Content-Length: 8549
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Host: jra.*.com
Origin: http://pay.m.*.com
Referer: http://pay.m.*.com/
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.54(0x1800363a) NetType/WIFI Language/zh_CN

a=7TJI7TceW0Pu7Tce7TZ37Tce7Tce7T7L7TcezlP47Tce7TZ37Tce7Tce7T7L7TceiQPmSg6PwHcPwj<PwH7T6ekTgf6PwHcPw4wPwH7QieAewGAB6SAew4WefB6jwk7FTfiBTLJvAAbN6jpLgAP1fT6lZNb0TTfyTjE<AfbLZAJTR<E<Rfckwj9Of<seRBZNZAbOAPFcfAbcfA6BfPJRg4Ziw47vA<NhANZvfHZIRjf3TSAewGAe6eAewQkXF0APwHcPwj<PwH7BJ17pit6PwHcPw4wPwH7*7Tce7TZ37TceyIAewGAe6eAewQF*7Tce7TZ37TceFHakiQikiHWkZQFGiHRQZH2Ew0AkZlcDOTwDwgiBw0wPwHcPw4wPwH7HJ1P*FSAewGAB6T<Pw4wPwH7l7Tce7TZ37TceZIDevHauwIAewGAe6eAewd3l7Tce7TZ37TcewL7VzhRVZAxiSk8lwLikwB4twLADOSAewGAe6eAewQiPwHcPwj<PwHcB7Tce7T7L7TceWeAewGAB6SAewH2xFg6tZBcDFgijZHieFT7HZ0<jOLFGOT3PFT6kiH7H7Tce7T7L7TcezeAewGAB6SAewd3bqSECvQp4vQZXzSAeRd3bqSAeRQ9jy0fevh3bqSkUF13bqSEoJ0ks7Tce7T7L7TceWhwPwHcPwj<PwH7bW137FIABR0p4hlNuF17XygRVih3*ZIAeZd3bqAP47TZ<wlZHw0fHilwxwL3PZLPbiQcDwl<xZQckiQNHOT7bFTaPwHFHzlRP7TZ<wLAxRf4ewT2*RAbUJf6xy0CdwB2*ygFGz44*Rf4ewAAPwHFBJ0NjFSABRL<eweAewGAe6eAewQpBf0sPwHcPwj<PwH7UF06*wjWefB6jwk7FTfiBTLJvAAbN6jpLgAP1fT6lZNb0TTfyTjE<AfbLZAJTR<E<Rfckwj9Of<seRBZNZAbOAPFcfAbcfA6BfPJRg4Ziw47vA<NhANZvfHZIRjf3TAN36ANZfAJSS<itf4N36AN36AZLwkROSTwkRjZLffR7gIAewGAe6eAewdNp7Tce7TZ37Tce7Tce7TJ</&d=7TJI7TceJ1wPwHcPwj<PZjcPwH74FhFpilfAygkP7Tce7TZ3wTWBZH2jZL6lOTAEwSAe6eAewQRPJQPHFAfuFNRpzgAPwHcPwj<xZBwlwL6jZLiEZT4t7TJ<7T7L7Tceil<PwHcPwj<PZjcPwH7jF<bbWlaPwHcPwj<PwHcEigiDFTNHiHfQwQ<EZL4*OTbGwlitwL<xFgRPO0iliSAewGAe6eAewQZXzdRPq1ROigkP7Tce7TZ37TceJlfGFl*Pw4ZPq13PWQPCFgEjig*CJlfGFl*Pw4ZtFg7ryh6Cwl6PwHcPw4wPwH7tFg7dz1FPWdZpzlDPwHcPwj<PwH7hFg71TIAewL<uwIAewGAe6eAewdZoigRpzQJwfGAewGAB6SAewPJPi4Jw7Tc*RjxTTIAew<fT7Tc*wSD*7Tc*KL<uwI4PwHcPw4wPwH7lFgE4ztcPwHcPwj<PwH7hFg7vyh6PwHcPw4wPwH7eFgE4Fh7PWGAewGAB6SAewPJPi4CpJIAewNJPi4Jw7Tce7T7L7TceFhbjFgEByg9uWeAewGAB6SAk6GAew4NORjxNhlPuWtRbzQZPFN9bWd7bqhwPwHcPw4wPwH7NgNRViQxPzQRVzgPuzgND7Tce7T7L7TceRfbAhlZsyh3Vil9uJ17XzIAewGAe6eAew4fifN9HzlxXWP9GJgFQFh7Vy0NsFP9Qz09bJIAewGAe6eAew4fifN94Fh3jyN9Hz0NCWIAewGAe6eAew4fifN9QWQNdhlRPW1Ro7Tce7T7L7TceRfbAht3Xz1PdzlEVzlFQWlfjhlZsigk*7Tce7T7L7TceRfbAhtZoigRPWP9jFhbjJh7PhlxXFIAewGAe6eAew4fifN9jFhbjJh7PhlFpz1RPWP9bzQPBztRezt3pieAewGAe6eAew4fifN9jFhbjJh7PhlkpWd7XWP9Hz0NCWN9jzk9PF0JP7Tce7T7L7TceRfbAhtZSRjcPwHcPw4wPwH7vSN7VW0NeigxsFgxVWlbbF0fehlZXzh3pz0APwHcPw4wPwH75RfZVFgxPzgfuJN9pzQRPqN9kygEj7Tce7T7L7TceTjfThlFGzk9eFgE4Fh7VzgP*zgN*7Tce7T7L7TceTjfThtZjigE4ih74hlRPWQPlihRpJQfB7Tce7T7L7TceTjfThtRPq1RkWQfVFQxXih6PwHcPw4wPwH75RfZVJ0fDJ1feFf9oigxQhlFszlNj7Tce7T7L7TceTjfThtRPq1RkWQfVy0NsFP9Qz09bJN9sygEPihcPwHcPw4wPwH75RfZVJQfeJ0fDhlNeWQNEhl9GyQfHJIAewGAe6eAewPJN64Jwhl7sFgE4hlFkzQZVFhbjFgE4Fg6PwHcPw4wPwH7hRA71TN9HzlxXWP9GJgFQFh7VFQxXih6PwHcPw4wPwH7hRA71TN9Hzlk*WQfBWlf4htRPq1RkWQfVihZjieAewGAe6eAewPJN64JwhlZXzh3eFhZBFgRVJ0fDJ1feFf9PJ0wPwHcPw4wPwH7hRA71TN9Hzlk*WQfBWlf4htRPq1RkWQfVFhRHwSAewGAe6eAewPJN64JwhlZXzh3eFhZBFgRVJ0fDJ1feFf9*Jd7jieAewGAe6eAewPJN64C7fN9hRA71TN9Hzlk*WQfBWlf4htRPq1RkWQfVW1FeJ0wPwHcPw4wPwH7hRA71TN94Fg7kFk9eFgE4Fh7PWP9pzQFX7Tce7T7L7TcefjfIRjxVF0fGJgJVWlbbF0feWeAewGAe6eAewPJN64JwhlRPW1RohtRPq1RkWQAPwHcPw4wPwH7hRA71TN94WQNthl7kFQFPWdwPwHcPw4wPwH7hRA71TN9sztZPhlZXzdRPq16PwHcPw4wPwH7hRA71TN9CJgxjyf94WQNt7Tce7T7L7TcefjfIRjxVW09sqgJXzP9CzlRP7Tce7Tf<7T7L7TceJtfl7Tce7TZ37Tce6h3*z0APwH37zQwu7Tce7T7L7TceJtfe7Tce7TZ37Tce6h3*z0APwH31ANAPwHcPZj6Pw4wPwH7C7Tce7TZ37TJI7Tceil9CW0NjTg94FSAewGAB6SAew4ZTABNLzlk*ih6PwHcPZj6Pw4wPwH7u7Tce7TZ37TJI7TceWtRbzQRbz09uFSAewGAB6gFbz1ZP7T7L7Tcey0NeF1JbWQfLzlEHJh7eFgEHqSAewGAB6T6Pw4wPwH7tFg74WQPlFhcPwHcPwjNQigxBFSAe6eAewQkbqNRXJgZoA09pzdRB7Tce7TZ3ZSAe6eAewQZXzlCpFAfuig7sFg6PwHcPwjNjWdfP7T7L7Tceih3*6l94FAEbzgAPwHcPwj<PwH7Zztppz0xb7Tce7T7L7Tceih3*TQNCFSAewGAB6SAew4EPJ1ZHih3P7Tce7T7L7Tceih3*fQfeWlPXzGAewGAB6SAewHAuwIAewIbpA0bXzQAPwjcPwH3LANAPwH3pA0bXzQAPwH35AeAewL<DhB<PwH3sygCP7Tc*TgNH7Tc*TkwPwH3iKSAew<N*W0xPflfGSlPj7T70ZH2kvH<uwTAPwH2oSjbATA*Pw4wPwH3sygCP7Tc*RlfHyl8p7Tc*Tg9GygxP7T70wTfNwT6D7Tc*TgPHWQ9ZFhZBFgEdFhcPw4iDvH2uZT6ow1axOL2*wBiBiS4PwH3OFhRAqh3P7T70fjP0SSAew<xbzQJkigJP7T70qQbV6jDPwHcPw4wPwH7*z0NjFQ9ezSAewGAB6SAewQP6y09uFSAewGAe6eAewd3ezlRkit6PwHcPwj<PwH71FgZrzeAewGAe6eAewd3ezlRkitRTJgcPwHcPwj<PwHcewL2BwL<*ZeAewGAe6eAewdfBFh73FlfuJIAewGAB6SAew4kXqQPsz0<Pw4ikvH2PwH2oyf3ozlEP7TZI7Tc*6k3f7Tc*yf3ozlEP7Tc*TkwPwH2xON8x7Tc*z0PrFSAew<kbieAew<9T7Tc*gI4PwH33W13sFfJPi4CpJIAeRHi*ZSDxvH<k7Tc*K<Ccf<kw7T7L7Tc*z0PrFSAew<JPilCXKSAew<kXiQPsFSAeRH<kRT<jOIAew<kpit7XTgfBWlfuFlfe7T70OID*vHAjKL3DwTa*wLwlwl<p7Tc*TQfjf1P*FSAeRPJ7R44PwH3wigEdJgNdFSAeRdpohjZO7Tce7T7L7TceJQfuF09e7Tce7TZ37Tce6h3*z0APwH3Lzlk*JhRPWGAe6eAew<PuieDPwHcPw4wPwH7lFgE4zt7TJgcPwHcPwj<PwHcPwHcPw4wPwH7sigEdJgNdFSAewGAB6SAewQfuvffT7Tce7T7L7TcezlEwygEP7Tce7TZ3J17kFSAe6eAewd34FPFpFhJPW4fuig7sFg6PwHcPwjNjWdfP7T7L7TceyQNliAfuig7sFg6PwHcPwjNQigxBFSAe6eAewQfuJgkPWQNjyg9uTt74FhcPwHcPwj<PZAcPwH7BJ0NuF0NszlEP7Tce7T7L7Tcey0NeF1JbWQfLzlEHJh7eFgEHqSAewGAe6eAewQNkF0PXAlfBWlPXzGAewGAe6eAewQJPzlxXilNjyg9u7Tce7T7L7Tcezgf4ygNLih3biQPsyhRpFhwPwHcPw4wPwH7CFgRpifZPWtZpzlDPwHcPw4wPwH7*Fh7CyhZByg9uWeAewGAe6eAewdJPiQReyhFPWGAewGAe6eAewQkbqNRXJgZoA09pzdRB7Tce7T7L7TceJhZPW4NHJ0PlihRpzlDPwHcPw4wPwH7Hzl9rygfNzQNGz0f47Tce7T7L7Tceih3*6l94FAEbzgAPwHcPw4wPwH7bW13OigkP7Tce7T7L7Tceih3*fQfeWlPXzGAewGAe6eAewd3sihRQzt7C7Tce7T7L7TceW17XF1fHJIAewGAe6eAewd3ezlRkitRTJgcPwHcPw4wPwH7kWlfe6gJPzd6PwHcPw4wPwH7lFgE4ztcPwHcPw4wPwH7lFgE4zt7TJgcPwHcPw4wPwH7sigEdJgNdFSAewGAe6eAewQxbzQJkigJPWeAewGAe6eAewQ9uT0PuFSAewGAe6eAewd3sJgJpzdwPwHcPw4wPwH7CygkPf1P*FhwPwHcPw4wPwH7*F0FgygftFh7NzQNGz0f47Tce7T7L7TceWlfuF<7PigZXzGAewGAe6eAewd7PWhfPWtRZFgRpiACPqfZEWtRPzANHilfBWeAewGAe6eAewQJPJ<Jbzgf*igRB7Tce7T7L7TceyQNliAfuig7sFg6PwHcPZA6PZj6Pw4wPwH7*7Tce7TZ37TfI7TJI7TcezQNCFSAewGAB6SAewP3<RGAewNFpFhJPWGAewGAtRIAe6eAt6GAewQEbzgAPwHcPwj<PwH7Ly17XzgAPwH36R<iPwH3gygftFhcPwHcPZj6Pw4wPZjcPwH7uigkP7Tce7TZ37Tce6lbezlkpJgjPwH36R<iPwH3gygftFhcPwHcPZj6Pw4wPZjcPwH7uigkP7Tce7TZ37TceTgPHWQ9BzlFj7Tc*RgRdFSAewN3<RGAewNFpFhJPWGAewGAtRIAe6eAt6GAewQEbzgAPwHcPwj<PwH7hFg7vyh6PwH3GJgPsJIkpzGAewN3<RGAewGAtRIAkRIAe6eAewdWPwHcPwj<PZjcPwH74FhFpilf6yhbPzN7bJ0PX7Tce7TZ3weAe6eAewdZHWQfPzPRXWIAewGAB6T2Pw4wPwH7Bit7PFgEwFgFj7Tce7TZ3wIAtRIAe6eAewdwPwHcPwj<PZjcPwH7bJQNpz<bPygJoJIAewGAB6TajZIAe6eAewQNligPsflP4J0aPwHcPwj<BOT2Pw4wPwH7HzlxXW4RPW1Ro7Tce7TZ3wH6Pw4wPwH7oFgPdy16PwHcPwj<DZL6Pw4wPwH7tygRjyIAewGAB6TwEwIAe6eAewd3pq0fsR0f*J0aPwHcPwj<eZIAtRIAe6eAewdZH7Tce7TZ37TJI7Tce6gZjyhFP6Q9eF0fe7Tce7TZ37TceWQJGKLckZSAe6eAewLckZSAe6eAewLckZS4PwHcPw4wPwH73itRpJQfLih3jyg9u7Tce7TZ37TceWQJGKL2Pw4wPwH2*7T7L7Tc*wI4PwHcPw4wPwH73W13hzt7rWt3bilAPwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAew47bilCdWQ9kzQ6PwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAew47kJ1RXz4FbilAPwHcPwj<PwH7eFlcowT4e7T7L7Tc*wT4e7T7L7Tc*wT4eKSAewGAe6eAew47kJ1RXz4bpFlbsygJoJIAewGAB6SAewd7diGaxOTcPw4wPwH2xOTcPw4wPwH2xOTcp7Tce7T7L7Tce6dfjJ09uAlbbF09t7Tce7TZ37TceWQJGKL<EwGAe6eAewL<EwGAe6eAewL<EwG4PwHcPw4wPwH7IJhRjzlEAFhbj7Tce7TZ37TceWQJGKL2Pw4wPwH2*7T7L7Tc*wI4PwHcPw4wPwH7Lih3jyg9uf0fDJIAewGAB6SAewd7diGa*7T7L7Tc*wIAe6eAewL2p7Tce7T7L7TceRt7bqfRPq16PwHcPwj<PwH7eFlcowTcD7T7L7Tc*wTcD7T7L7Tc*wTcDKSAewGAe6eAew4bpFlbsygJoJIAewGAB6SAewd7diGaxOL<Pw4wPwH2ewTwPw4wPwH2eZTAp7Tce7T7L7TceS0Pdy0xpFlbjf0fDJIAewGAB6SAewd7diGa*7T7L7Tc*wIAe6eAewL2p7Tce7T7L7TceSgEbitRpJQfIzt74FhcPwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAew4PuigZjyhFP6lN*J0PXzGAewGAB6SAewd7diGaeZTAPw4wPwH2eZTAPw4wPwH2eZTAp7Tce7T7L7TceSgEbitRpJQfLih3jyg9uf0fDJIAewGAB6SAewd7diGaxwHaPw4wPwH2xwHaPw4wPwH2xwHap7Tce7T7L7TceSgEQzj7bilCdWQ9kzQ6PwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAew4PuFQ9AFhbj7Tce7TZ37TceWQJGKL2Pw4wPwH2*7T7L7Tc*wI4PwHcPw4wPwH7ZFgEk7Tce7TZ37TceWQJGKLckZSAe6eAewLckZSAe6eAewLckZS4PwHcPw4wPwH7ZFgEkf0fDJIAewGAB6SAewd7diGa*7T7L7Tc*wIAe6eAewL2p7Tce7T7L7TceAlZezlxsiQNe7Tce7TZ37TceWQJGKLckZSAe6eAewLckZSAe6eAewLckZS4PwHcPw4wPwH7Ay17PFAR<ih7rAlbbF09t7Tce7TZ37TceWQJGKLckZSAe6eAewLckZSAe6eAewLckZS4PwHcPw4wPwH7Ay17PFAR0igZP7Tce7TZ37TceWQJGKL<EwGAe6eAewL<EwGAe6eAewL<EwG4PwHcPw4wPwH7Ay17PFARcygJoz0Pdy16PwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAewPRoWQfPR<xpFlbjAlbbF09t7Tce7TZ37TceWQJGKLckZSAe6eAewLckZSAe6eAewLckZS4PwHcPw4wPwH7Ay17PFARTy0N4ztWPwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAewPJpzQRXJeAewGAB6SAewd7diGaeZTAPw4wPwH2eZTAPw4wPwH2eZTAp7Tce7T7L7TceflPuF09tRd7bzgAPwHcPwj<PwH7eFlcowHAk7T7L7Tc*wHAk7T7L7Tc*wHAkKSAewGAe6eAewPJpzQRXJkRPq16PwHcPwj<PwH7eFlcowIAe6eAewL2Pw4wPwH2*KSAewGAtRIAe6eAewdZB7Tce7TZ37TJI7Tceil9XylPP7Tce7TZ3J17kFSAe6eAewQxXilNsAtRXWQNdFSAewGAB6hReJgAPw4wPwH7BFhZByg9uAtRXWQNdFSAewGAB6hReJgAPw4wPwH7dz09GigxTJ09eigJP7Tce7TZ3FQNsWlAPw4wPwH7pzQRPq0f4R<cPwHcPwjNjWdfP7TJ<7T7L7TceJ1oPwHcPwj<CZLa*7T7L7Tcez0Ps7Tce7TZ37Tce7Tce7T7L7TceJlPs7Tce7TZ37Tce7Tce7T7L7TceJl4PwHcPwj<PZjcPwH7XJeAewGAB6TwEwIAe6eAewQ9o7Tce7TZ3ZHW*7T7L7TceyhWPwHcPwj<BOT2Pw4wPwH7pyIAewGAB6TitwIAe6eAewQfjzGAewGAB6SAewdfuF0fQygEPFIAewGAtRIAtR2/

我们的目标就是其中的a和d了

解密

还是比较轻松的

总结

x-api-eid-token 其实就来自jsTk.do 这个接口返回的内容，而jsTk.do 接口中a和d又来自同一个加密算法，所以总体来说还是难度很低的。适合新手。

探讨

欢迎同道中人一起探讨

dGcgQGludm9rZXlvdQ== (base64decode后查看联系方式)