(HttpClient技术)(58同城系列)58同城登录

已经有很长时间，想开发一个58同城的系列软件了，对于HttpClient技术的钻研和进步，我觉得，我觉得自己还是有能力胜任的，终于有一个契机（至于什么原因呢，暂且保密，说出来，太俗了），这一星期来，抓了不少包，终于搞定了58同城，从登陆到发帖的代码，那么下面，我分享一个58同城的登录代码。（文章里面，用到了这么多的58同城的关键字），会不会被封杀呢，暂且不议，下面开始进入正题：

技术：HttpClient(易语言的只能做参考了)

抓包工具:HttpClient

抓包对象:58同城

首先:进入登录页面:http://passport.58.com/login?path=http://my.58.com,开始抓包，进入后发现，密码被进行了三次加密，分别是p1,p2,p3，这三次加密，前面的2次还是比较简单的，加密代码，都在js里面可以找到，后面的p3字段的加密，一直没搞明白，开始研究...，经过一小时奋战，终于发现，原来是老的rsa加密啊，那么就简单了，rsa加密算法，我这里存了一大堆了，很多网站，都用了这个加密技术，那么总体来讲，就没啥难度了，下面贴登录代码主体部分：

public class Login_58 {
public Map get(String username,String password,String ip ,int port,String uuname,String uuword,boolean isByuu){

List list = new ArrayList() ;
boolean re = false ;
String cookiess = "" ;
String sid = "" ;
Map remap = new HashMap();

int codeID01 = -1 ;

String ret = "" ;
String errorinfo = "" ;
DefaultHttpClient httpClient = null ;
DefaultHttpClient defaultClient;
HttpParams httpParams = new BasicHttpParams();
// HttpConnectionParams.
ConnManagerParams.setMaxTotalConnections(httpParams, 80);
ConnManagerParams.setTimeout(httpParams, 25000);
//每个路由的最大链接个数,标志对同一站点的并发请求
ConnPerRouteBean connPerRoute = new ConnPerRouteBean(100);
ConnManagerParams.setMaxConnectionsPerRoute(httpParams, connPerRoute);

HttpConnectionParams.setConnectionTimeout(httpParams,25000);
HttpConnectionParams.setSoTimeout(httpParams, 50000);
SchemeRegistry registry = new SchemeRegistry();
registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
registry.register(new Scheme("https", SSLSocketFactory.getSocketFactory(), 443));
ClientConnectionManagerconnectionManager = new ThreadSafeClientConnManager(httpParams,registry);
// httpParams.setParameter(ClientPNames.HANDLE_REDIRECTS,false);
defaultClient = new DefaultHttpClient(connectionManager, httpParams);
defaultClient.getParams().setIntParameter(HttpConnectionParams.SOCKET_BUFFER_SIZE, 20*1024);
HttpClientParams.setCookiePolicy(defaultClient.getParams(),CookiePolicy.BROWSER_COMPATIBILITY);
//defaultClient.getParams().setCookiePolicy();
httpClient = defaultClient ;

if(ip!=null && !ip.equals("")){
HttpHost proxy = new HttpHost(ip,port);
httpClient.getParams().setParameter(ConnRouteParams.DEFAULT_PROXY, proxy);
}

HttpGet g1 = null;
HttpPost g3 = null;


try {
g1 = new HttpGet("http://passport.58.com/login?path=http://my.58.com") ;

g1.setHeader("Accept", "text/html, application/xhtml+xml, */*") ;
g1.setHeader("Accept-Language", "zh-CN") ;
g1.setHeader("Proxy-Connection", "Keep-Alive") ;
g1.setHeader("Host", "passport.58.com") ;//Proxy-Connection: keep-alive
g1.setHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)") ;
//g1.setRequestHeader("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8") ;
HttpResponse response2 = httpClient.execute(g1);

String sg1 = dump(response2.getEntity(),"utf-8") ;
// sg1 = new String(sg1.getBytes("ISO-8859-1"),"GBK");

// System.out.println(sg1) ;

if(response2.getStatusLine().getStatusCode() == 200 && sg1.indexOf("id=\"ptk\"")!=-1 && sg1.indexOf("id=\"cd\"")!=-1 && sg1.indexOf("name=\"path\"")!=-1 && sg1.indexOf("$(\"#p3\").val(encryptString(")!=-1){
String cookiesimage01 = "" ;

System.out.println(cookiesimage01) ;

String ptk = "" ;
String cd = "" ;
String path = "" ;


String v3 = "" ;
String v4 = "" ;

sg1 = sg1.substring(sg1.indexOf("name=\"path\"")) ;
sg1 = sg1.substring(sg1.indexOf("value=\"")+7) ;
path = sg1.substring(0, sg1.indexOf("\""));

sg1 = sg1.substring(sg1.indexOf("id=\"ptk\"")) ;
sg1 = sg1.substring(sg1.indexOf("value=\"")+7) ;
ptk = sg1.substring(0, sg1.indexOf("\""));

sg1 = sg1.substring(sg1.indexOf("id=\"cd\"")) ;
sg1 = sg1.substring(sg1.indexOf("value=\"")+7) ;
cd = sg1.substring(0, sg1.indexOf("\""));




sg1 = sg1.substring(sg1.indexOf("$(\"#p3\").val(encryptString(")) ;
if(sg1.indexOf("val()),")!=-1){
sg1 = sg1.substring(sg1.indexOf("val()),")) ;
sg1 = sg1.substring(sg1.indexOf("\"")+1) ;
v3 = sg1.substring(0, sg1.indexOf("\"")) ;

sg1 = sg1.substring(sg1.indexOf(", \"")+3) ;
v4 = sg1.substring(0, sg1.indexOf("\"")) ;

}


System.out.println(ptk+":"+cd+":"+path) ;
System.out.println(v3+":"+v4) ;


String stime = System.currentTimeMillis()+"" ;

Password p = new Password() ;
String p1 = p.encryp1(password, stime) ;
String p2 = p.encryp2(password, stime) ;
String p3 = p.encry(stime+URLEncoder.encode(password),v3,v4) ;

System.out.println(p1+":"+p2+":"+p3) ;

g3 = new HttpPost("http://passport.58.com/dounionlogin") ;

g3.setHeader("Accept", "text/html, application/xhtml+xml, */*") ;
g3.setHeader("Accept-Language", "zh-CN") ;
g3.setHeader("Connection", "Keep-Alive") ;
g3.setHeader("Host", "passport.58.com") ;
g3.setHeader("Referer", "http://passport.58.com/login?path=http://my.58.com") ;
g3.setHeader("User-Agent", "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)") ;
g3.setHeader("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8") ;
//g3.setHeader("Cookie", cookiesimage01) ;

List<NameValuePair> qparams = new ArrayList<NameValuePair>();

qparams.add(new BasicNameValuePair("cd",cd));
qparams.add(new BasicNameValuePair("isweak","0"));
qparams.add(new BasicNameValuePair("mcresult","undefined"));
qparams.add(new BasicNameValuePair("p1",p1));
qparams.add(new BasicNameValuePair("p2",p2));
qparams.add(new BasicNameValuePair("p3",p3));
qparams.add(new BasicNameValuePair("password","password"));
qparams.add(new BasicNameValuePair("path",path));
qparams.add(new BasicNameValuePair("pptmobilecodeloginmobile","请输入手机号"));
qparams.add(new BasicNameValuePair("pptmobilecodeloginmobilecode",""));
qparams.add(new BasicNameValuePair("ptk",ptk));
qparams.add(new BasicNameValuePair("source","pc-login")); //图片
qparams.add(new BasicNameValuePair("timesign",stime));
qparams.add(new BasicNameValuePair("username",username));


UrlEncodedFormEntity params = new UrlEncodedFormEntity(qparams, "UTF-8");
g3.setEntity(params);

HttpResponse response4 = httpClient.execute(g3);
String sg3 = dump(response4.getEntity(),"utf-8") ;

// System.out.println(sg3) ;
if(response4.getStatusLine().getStatusCode() == 200 && sg3.indexOf("http://my.58.com?pts=")!=-1){

String cookiesimage02 = "" ;


System.out.println(cookiesimage02) ;


String urls = "" ;
sg3 = sg3.substring(sg3.indexOf("http://my.58.com?pts=")) ;
urls = sg3.substring(0, sg3.indexOf("\"")) ;

g1 = new HttpGet(urls) ;

g1.setHeader("Accept", "text/html, application/xhtml+xml, */*") ;
g1.setHeader("Accept-Language", "zh-CN") ;
g1.setHeader("Proxy-Connection", "Keep-Alive") ;
g1.setHeader("Host", "my.58.com") ;//Proxy-Connection: keep-alive
g1.setHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)") ;
//g1.setHeader("Cookie", cookiesimage02) ;

response2 = httpClient.execute(g1);
String sg31 = dump(response2.getEntity(),"utf-8") ;

// System.out.println(sg31) ;
if(response2.getStatusLine().getStatusCode()==200 && sg31.indexOf("用户中心")!=-1){


System.out.println("--"+cookiesimage03) ;

cookiess = cookiesimage03 ;
re = true ;

}else{
System.out.println("2");
}

}else{
System.out.println("用户密码不对");

}


}else{
System.out.println("1");

}

}catch(Exception e){
System.out.println(e.toString());
//e.printStackTrace() ;
}finally{
if(httpClient !=null){
// httpClient.getConnectionManager().shutdown();


}

}

remap.put("re",re+ "");
//remap.put("errorinfo",errorinfo);
remap.put("cookiess",cookiess);
remap.put("httpClient",httpClient);

return remap ;
}
/**
* 正常解决io流成字符串
*
* @param entity
* @throws IOException
*/
private String dump(HttpEntity entity, String encoding) {
BufferedReader br = null;
StringBuilder sb = null;
try {
br = new BufferedReader(new InputStreamReader(entity.getContent(),
encoding));
sb = new StringBuilder();
String temp = null;
while ((temp = br.readLine()) != null) {
sb.append(temp);
}
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
} catch (IllegalStateException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
} finally {
try {
br.close();
} catch (IOException e) {
e.printStackTrace();
}
}
return sb.toString();
}
public String convert(String utfString){
StringBuilder sb = new StringBuilder();
int i = -1;
int pos = 0;

while((i=utfString.indexOf("\\u", pos)) != -1){
sb.append(utfString.substring(pos, i));
if(i+5 < utfString.length()){
pos = i+6;
sb.append((char)Integer.parseInt(utfString.substring(i+2, i+6), 16));
}
}

return sb.toString();
}
public static String RandomString(int length) {
String str = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
Random random = new Random();
StringBuffer buf = new StringBuffer();


for (int i = 0; i < length; i++) {
int num = random.nextInt(62);
buf.append(str.charAt(num));
}


return buf.toString();
}

public static String RandomStringSm(int length) {
String str = "abcdef0123456789";
Random random = new Random();
StringBuffer buf = new StringBuffer();


for (int i = 0; i < length; i++) {
int num = random.nextInt(str.length());
buf.append(str.charAt(num));
}


return buf.toString();
}


public static String RandomNumber(int numinput) {
String str = "";
str += (int) (Math.random() * 9 + 1);
for (int i = 0; i < numinput; i++) {
str += (int) (Math.random() * 10);
}


return str;
}
public String GetEnValue(String envvalue)
{
String ret = "" ;

ScriptEngineManager manager = new ScriptEngineManager();
ScriptEngine engine = manager.getEngineByName("javascript");
String jsFileName = "lib/env.js";
FileReader reader;
try {
reader = new FileReader(jsFileName);
engine.eval(reader);

if (engine instanceof Invocable) {
Invocable invoke = (Invocable) engine;
ret = (String)invoke.invokeFunction("env", envvalue);
}
reader.close();
} catch (Exception e) {
// TODO Auto-generated catch block
e.printStackTrace();
}




return ret ;
}
/**
* @param args
*/
public static void main(String[] args) {
// TODO Auto-generated method stub

Login_58 cc = new Login_58() ;
String cookies = "" ;
DefaultHttpClient httpClient = null ;
String ret = "" ;

for(int i=0;i<10;i++){
Map map = cc.get("用户","密码", "", 0,"1","1",true) ;
if(map !=null){
cookies = map.get("cookiess") == null ? "" :(String) map.get("cookiess") ;
ret = map.get("re") == null ? "" :(String) map.get("re") ;
httpClient = map.get("httpClient") == null ? null :(DefaultHttpClient) map.get("httpClient") ;

if(ret.equals("true")){
break ;
}
}
}

System.out.println(ret) ;
System.out.println(httpClient) ;
System.out.println(cookies) ;




}


}

整体部分出来了，很多人就想问了，整体部分是有了，那加密部分呢，呵呵，别急，下面就贴加密部分的代码了：

public class Password {
public static final String HEXSTRING = "0123456789ABCDEF";
public String encryp1(String v1,String v2){
String ret = "" ;

ScriptEngineManager manager = new ScriptEngineManager();
ScriptEngine engine = manager.getEngineByName("javascript");
String jsFileName = "lib/encry.js";
FileReader reader;
try {


reader = new FileReader(jsFileName);
engine.eval(reader);


String jsstr = "function getm32strss(){"+
" var keyValue = getm32str('"+v1+"', '"+v2+"'); "+
" return keyValue ; "+
"} " ;

engine.eval(jsstr);

if (engine instanceof Invocable) {
Invocable invoke = (Invocable) engine;
ret = (String)invoke.invokeFunction("getm32strss");
}
reader.close();
} catch (Exception e) {
// TODO Auto-generated catch block
e.printStackTrace();
}




return ret ;
}

public String encryp2(String v1,String v2){
String ret = "" ;

ScriptEngineManager manager = new ScriptEngineManager();
ScriptEngine engine = manager.getEngineByName("javascript");
String jsFileName = "lib/encry.js";
FileReader reader;
try {


reader = new FileReader(jsFileName);
engine.eval(reader);


String jsstr = "function getm16strss(){"+
" var keyValue = getm16str('"+v1+"', '"+v2+"'); "+
" return keyValue ; "+
"} " ;

engine.eval(jsstr);

if (engine instanceof Invocable) {
Invocable invoke = (Invocable) engine;
ret = (String)invoke.invokeFunction("getm16strss");
}
reader.close();
} catch (Exception e) {
// TODO Auto-generated catch block
e.printStackTrace();
}




return ret ;
}
public String encry(String v1,String v2,String v3){
String ret = "" ;

ScriptEngineManager manager = new ScriptEngineManager();
ScriptEngine engine = manager.getEngineByName("javascript");
String jsFileName = "lib/jquery.js";
FileReader reader;
try {

// reader = new FileReader("lib/jquery.js");
// engine.eval(reader);

// reader = new FileReader(jsFileName);
// engine.eval(reader);

// reader = new FileReader("lib/main.js");
// engine.eval(reader);
// reader = new FileReader("lib/rsa-v114890.js");
// engine.eval(reader);
reader = new FileReader("lib/rsa.pack.js");
engine.eval(reader);


String jsstr = "function Encrypt(password){"+
" "+
" setMaxDigits(131);"+
" var encrypted = encryptedString(new RSAKeyPair('"+v2+"','','"+v3+"'),password); " +
" return encrypted ; "+
"} " ;

engine.eval(jsstr);

if (engine instanceof Invocable) {
Invocable invoke = (Invocable) engine;
ret = (String)invoke.invokeFunction("Encrypt", v1);
}
reader.close();
} catch (Exception e) {
// TODO Auto-generated catch block
e.printStackTrace();
}




return ret ;
}

/**
* @param args
*/
public static void main(String[] args) {
// TODO Auto-generated method stub

}


}

好的,p1,p2,p3的加密算法，都已经贴了，很多人估计还很贪心，还会说，这里光加密算法，怎么没有加密的js啊，好吧，这个我后面提供下载地址，需要的人，都可以去下载啊

这部分，主要是想讲58的登录算法，后面，我还会继续更新58的发帖代码，这个发帖的地方，58做的很坑爹的，我也是被坑了很久，才研究出来的，希望大家多多支持啊