某保网逆向#

1
function get_headers() {
2
        return {
3
            "x-tif-nonce": get_x_nonce(),
4
            "x-tif-paasid": undefined,
5
            "x-tif-signature": get_signature(),
6
            "x-tif-timestamp": x_timestamp(),
7
            "x-tingyun": get_tingyun(),
8
        }
9
    }

1
function x_timestamp() {
2
        return Math.ceil((new Date).getTime() / 1e3)
3
    }
4

5
    function get_x_nonce() {
6
        var e, t, n, i = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", r = "0123456789";
7
        return e = o(6, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"),
8
            t = o(1, i),
9
            n = o(1, r),
10
        t + n + e;
11

12
        function o(e, t) {
13
            e = e || 32;
14
            for (var n = "", i = 0; i < e; i++)
15
                n += t.charAt(Math.ceil(1e3 * Math.random()) % t.length);
16
            return n
17
        }
18
    }
19

20
    function get_signature() {
21
        s = x_timestamp()
22
        h = get_x_nonce()
23
        f = s + h + s;
24
        return CryptoJS.SHA256(f).toString();
25
    }
26
function get_tingyun() {
27
        function t(t) {
28
            return t < 0 ? NaN : t <= 30 ? 0 | Math.random() * (1 << t) : t <= 53 ? (0 | Math.random() * (1 << 30)) + (0 | Math.random() * (1 << t - 30)) * (1 << 30) : NaN
29
        }
30

31
        function e(t, e) {
32
            for (var n = t.toString(16), r = e - n.length, i = "0"; r > 0; r >>>= 1,
33
                i += i)
34
                1 & r && (n = i + n);
35
            return n
36
        }
37

38
        r = 'c=B|4Nl_NnGbjwY'
39

40
        function G(n) {
41
            var r = "-";
42
            return n && (r = ""),
43
            e(t(32), 8) + r + e(t(16), 4) + r + e(16384 | t(12), 4) + r + e(32768 | t(14), 4) + r + e(t(48), 12)
44
        }
45

46
        n = G(!0).substring(0, 16);
47
        return r += ";x=" + n
48
    }

1
function get_encdata(t) {
2
        return function (e) {
3
            for (var t = e.data.data && JSON.stringify(e.data.data), n = "", i = 0; i < t.length; i++) {
4
                var r = t.charAt(i)
5
                    , o = t.charCodeAt(i);
6
                n += o > 127 ? "\\u" + o.toString(16).padStart(4, "0") : r
7
            }
8
            var a = k(n);
9

10
            e.data.appCode && e.data.appCode !== p && (p = e.data.appCode);
11

12
            var s = x(p, m)
13
                , l = S(s, a);
14
            return l.toUpperCase()
15

16
        }(t)
17
    }

1
function S(t, n) {
2
        var i = 16 - parseInt(n.length % 16);
3
        n = n.concat(new Array(i).fill(i));
4
        var r = m.encrypt(n, t);
5
        return e.from(r).toString("hex")
6
    }
7

8
    function k(e) {
9
        var t, n, i = new Array;
10
        t = e.length;
11
        for (var r = 0; r < t; r++)
12
            (n = e.charCodeAt(r)) >= 65536 && n <= 1114111 ? (i.push(n >> 18 & 7 | 240),
13
                i.push(n >> 12 & 63 | 128),
14
                i.push(n >> 6 & 63 | 128),
15
                i.push(63 & n | 128)) : n >= 2048 && n <= 65535 ? (i.push(n >> 12 & 15 | 224),
16
                i.push(n >> 6 & 63 | 128),
17
                i.push(63 & n | 128)) : n >= 128 && n <= 2047 ? (i.push(n >> 6 & 31 | 192),
18
                i.push(63 & n | 128)) : i.push(255 & n);
19
        return i
20
    }
21

22
    function x(e, t) {
23
        return k(S(k(e.substr(0, 16)), k(t)).toUpperCase().substr(0, 16))
24
    }
25

26
    m = 'NMVFVILMKT13GEMD3BKPKCTBOQBPZR2P'
27
    p = 'T98HPCGN5ZVVQBS8LZQNOAEXVI9GYHKQ'

1
var r = m.encrypt(n, t);
2
        return e.from(r).toString("hex")

1
window = globalThis;
2
delete globalThis.navigator
3

4
createConstructor('HTMLCollection', true, [], {},);
5

6
createConstructor('EventTarget', true, [], {
7
    addEventListener:function(){},
8
    removeEventListener:function(){}
9
});
10
createConstructor('Node', true, [], {}, 'EventTarget');
11
createConstructor('WindowProperties', true, [], {}, 'EventTarget')
12
createConstructor('Window', true, [], {}, 'WindowProperties');
13
createConstructor('Navigator', true, [], {});
14
createConstructor('Screen', true, [], {}, 'EventTarget');
15
createConstructor('History', true, [], {});
16
createConstructor('Location', true, [], {});
17
createConstructor('Element', true, [], {
18
    getAttribute: function(name) {
19
            return name === 'href' ? _href : null;
20
            },
21
    setAttribute:function(a){
22
        console.log("setAttribute创建",a)
23
    }
24
},'Node');
25
createConstructor('HTMLElement', true, [], {},"Element");
26
createConstructor('HTMLHtmlElement', true, [], {},"HTMLElement");
27
createConstructor('HTMLAnchorElement', true, [], {},"HTMLElement");
28
createConstructor('Document', true, [], {
29
    createEvent:function(event){
30
        return {
31
            timestamp:0
32
        }
33
    },
34
    getElementsByTagName:function(name){
35
        console.log("getElementsByTagName————",name)
36

37
        if (name === 'script') {
38
    var arr = [];
39
    for (var i = 0; i < 10; i++) {
40
        arr.push({
41
            tagName: 'SCRIPT',
42
            src: '',
43
            innerHTML: '',
44
            readyState: 'complete',
45
            type: 'text/javascript',
46
            getAttribute: function(attr) { return null; },
47
            setAttribute: function() {}
48
        });
49
    }
50
    arr.length = 10;
51
    arr.item = function(i) { return this[i] || null; };
52

53
    return arr;
54
}
55
        },
56
    createElement:function(name){
57
        console.log("createElement————",name)
58
        if(name==='a'){
59
            return new HTMLAnchorElement({
60
                tagName: 'A',
61
        href: '',
62
        protocol: '',
63
        host: '',
64
        hostname: '',
65
        port: '',
66
        pathname: '/',
67
        search: '',
68
        hash: '',
69
                setAttribute: function(name, value) {
70
            console.log("a.setAttribute:", name, '=', value);
71

72
            if (name === 'href') {
73
                _href = value;
74
                // ✅ 用 URL 解析
75
                try {
76
                    var url = new URL(value, window.location.href || 'https://fuwu.nhsa.gov.cn');
77
                    this.href = url.href;
78
                    this.protocol = url.protocol.replace(/:$/, '');
79
                    this.host = url.host;
80
                    this.hostname = url.hostname;
81
                    this.port = url.port;
82
                    this.pathname = url.pathname.charAt(0) === '/' ? url.pathname : '/' + url.pathname;
83
                    this.search = url.search ? url.search.replace(/^\?/, '') : '';
84
                    this.hash = url.hash ? url.hash.replace(/^#/, '') : '';
85
                } catch(e) {
86
                    this.href = value;
87
                }
88
            } else {
89
                this['_' + name] = value;
90
            }
91
        },
92

93
        getAttribute: function(name) {
94
            return name === 'href' ? _href : (this['_' + name] || null);
95
        }
96
            },null,"fatdog")
97
        }
98
    }
99
}, 'Node');
100
createConstructor('HTMLDocument', true, [], {}, 'Document');
101
createConstructor('Storage', true, [], {
102
    getItem: function(key) {
103
        console.log('localStorage.getItem获取', key);
104
        return this[key] || null;
105
    },
106
    setItem: function(key, value) {
107
        console.log('localStorage.setItem设置', key, value);
108
        this[key] = String(value);
109
    },
110
    removeItem: function(key) {
111
        console.log('localStorage.removeItem删除', key);
112
        if (this[key]) delete this[key];
113
    },
114
    clear: function() {
115
        this.__storage__ = {};
116
    }
117
});
118

119

120

121
window.window = window.self =window.top = window
122

123
Object.setPrototypeOf(window, Window.prototype);
124

125
location =new Location({
126
    "ancestorOrigins": {},
127
    "href": "https://fuwu.nhsa.gov.cn/nationalHallSt/#/search/drug-directory?code=174000&message=serverUrl%20is%20null&gbFlag=true",
128
    "origin": "https://fuwu.nhsa.gov.cn",
129
    "protocol": "https:",
130
    "host": "fuwu.nhsa.gov.cn",
131
    "hostname": "fuwu.nhsa.gov.cn",
132
    "port": "",
133
    "pathname": "/nationalHallSt/",
134
    "search": "",
135
    "hash": "#/search/drug-directory?code=174000&message=serverUrl%20is%20null&gbFlag=true"
136
},null,'fatdog')
137
document = new HTMLDocument({
138
    documentElement:new HTMLHtmlElement({},null,'fatdog'),
139
    querySelector:function(a){
140
        if(a==='base'){
141
            return null;
142
        }
143
    },
144
    cookie:'amap_local=320500',
145
    "location":location,
146
    implementation:{}
147
},null,"fatdog")
148
navigator = new Navigator({
149
    userAgent:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36',
150
    product:'Gecko',
151
    appName:'Netscape',
152
},null,"fatdog")
153
screen=new Screen({
154

155
},null,"fatdog")
156
history=new History({
157
    pushState:function(n, r, i) {
158
                    var o;
159
                    o = e.apply(this, arguments);
160
                    try {
161
                        Wa(t)
162
                    } catch (a) {}
163
                    return o
164
                }
165
},null,'fatdog')
166
localStorage = new Storage({},null,'fatdog')
167

168
// window.location = watch(location,"window.location")
169
// window.navigator = watch(navigator,'window.navigator')
170
// window.screen = watch(screen,'window.screen')
171
// window.history = watch(history,'window.history')
172
// window.document = watch(document,'window.document')
173
// window.localStorage = watch(localStorage,"window.localStorage")
174

175

176
// window = watch(window,"window")
177
_log = console.log
178
console.log = function(){}

1
function dec_data(t) {
2
        var n = e.from(t.data.data.encData, "hex")
3
            , i = function (t, n) {
4
            var i = sm4.decrypt(n, t)
5
                , r = i[i.length - 1];
6
            return i = i.slice(0, i.length - r),
7
                e.from(i).toString("utf-8")
8
        }(x(p, m), n);
9
        return JSON.parse(i)
10
    }

1
try {
2
    const loader = require('./mywebpack.js');
3
    ······
4
}
5
    catch (e) {
6
    console.log = _log;  // 恢复日志
7
    console.log(JSON.stringify({error: e.message}));
8
    process.exit(0);
9
}
10
// main.js 最后加上：
11
process.on('exit', function () {
12
    process.exitCode = 0; // 强制退出码为 0
13
});