习讯云-实习管理平台协议登录与逆向分析

1
const schoolId = "学校代码";
2
const account = "账户";
3
const password = "密码";
4

5
// 1. 拼接认证数据并进行 Base64 编码
6
const raw = `${account};${password};1`;
7
const jData = Buffer.from(raw, "utf8").toString("base64");
8

9
console.log("账号:", account);
10
console.log("j_data:", jData);
11

12
// 2. 发起登录请求
13
const response = await fetch("https://api.xixunyun.com/login/admin", {
14
    method: "POST",
15
    headers: {
16
        "Accept": "application/json, text/javascript, */*; q=0.01",
17
        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
18
        "Referer": "https://www.xixunyun.com/"
19
    },
20
    body: new URLSearchParams({
21
        school_id: schoolId,
22
        j_data: jData,
23
        type: "web",
24
        alg: "en001"
25
    }).toString()
26
});
27

28
// 3. 处理并打印响应数据
29
const text = await response.text();
30
try {
31
    const result = JSON.parse(text);
32
    console.log(JSON.stringify(result, null, 2));
33
    console.log("message:", result.message);
34
    console.log("data:", result.data);
35
} catch {
36
    console.log("返回内容不是 JSON");
37
}

1
import base64
2
import requests
3

4
def login_xixun(school_id: str, account: str, password: str) -> dict:
5
    url = "https://api.xixunyun.com/login/admin"
6

7
    # 1. 拼接并进行 Base64 编码
8
    raw_str = f"{account};{password};1"
9
    j_data = base64.b64encode(raw_str.encode("utf-8")).decode("utf-8")
10

11
    headers = {
12
        "Accept": "application/json, text/javascript, */*; q=0.01",
13
        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
14
        "Referer": "https://www.xixunyun.com/"
15
    }
16

17
    payload = {
18
        "school_id": school_id,
19
        "j_data": j_data,
20
        "type": "web",
21
        "alg": "en001"
22
    }
23

24
    response = requests.post(url, headers=headers, data=payload)
25
    try:
26
        return response.json()
27
    except Exception:
28
        return {"error": "返回内容不是 JSON", "raw": response.text}
29

30
if __name__ == "__main__":
31
    result = login_xixun("学校代码", "账户", "密码")
32
    print(result)