很久没发帖子了， 上次发帖分享一下iOS 2023年如何上架html5包和VPN包的技巧，结果不但没有人赞反而还啰里八嗦的，这次分享给需要的人提供一些思路和参考吧。 首先贴一下app的下载地址：https://zpc91.com/ 估计很多人知晓也看过 
。
App是通过Flutter做的，网络协议以及图片（base64后）都是通过AES加密，首先贴出来解密实现PHP 逻辑具体效果：https://www.gpt666.online/91/ZhiPian91.php 另外这个app在宣传的时候通过iOS证书webclip的方式直接在桌面生成flutter web app，体验还是蛮好的。然后我自己做了一个测试地址：https://www.gpt666.online/91/
由于都是flutter写的App，通过网络抓取协议，改二进制，然后重新打包，动态调试，然后再解密一些列操作后
核心具体解密代码如下：
<?php
function request_post($url, $data, $headers)
{
echo "-----------Http Request--------------<br>";
echo $url . "<br>";
for ($i = 0; $i < count($headers); $i++) {
echo $headers[$i] . "<br>";
}
echo "<br>";
echo $data . "<br>";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($ch, CURLINFO_HEADER_OUT, true);
$res = curl_exec($ch);
curl_close($ch);
return $res;
}
function request_GET($url, $headers)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSLCERTTYPE, "P12");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($ch, CURLINFO_HEADER_OUT, true);
$res = curl_exec($ch);
curl_close($ch);//关闭
return $res;
}
//$key: 2acf7e91e9864673 $iv: 1c29882d3ddfcfd6
function data_encrypt($input)
{
$key = base64_decode("MmFjZjdlOTFlOTg2NDY3Mw==");
$iv = base64_decode("MWMyOTg4MmQzZGRmY2ZkNg==");
// echo '$key: '.$key.' ';
// echo '$iv: '.$iv;
return base64_encode(openssl_encrypt($input, 'AES-128-CBC', $key, $options = OPENSSL_RAW_DATA,
$iv));
}
function data_decrypt($data)
{
$key = base64_decode("MmFjZjdlOTFlOTg2NDY3Mw==");
$iv = base64_decode("MWMyOTg4MmQzZGRmY2ZkNg==");
// echo '$key: '.$key.' ';
// echo '$iv: '.$iv;
return openssl_decrypt(base64_decode($data), 'AES-128-CBC', $key, $options = OPENSSL_RAW_DATA, $iv);
}
function get_sign($input_data)
{
return md5(hash("sha256", $input_data));
}
function decrypt_image($image_data)
{
$key = base64_decode("ZjVkOTY1ZGY3NTMzNjI3MA==");
$iv = base64_decode("OTdiNjAzOTRhYmMyZmJlMQ==");
return openssl_decrypt($image_data, 'AES-128-CBC', $key, $options = OPENSSL_RAW_DATA, $iv);
}
function decrypt_video($video_data,$key,$iv)
{
// $key = base64_decode("ZjVkOTY1ZGY3NTMzNjI3MA==");
// $iv = base64_decode("OTdiNjAzOTRhYmMyZmJlMQ==");
return openssl_decrypt($video_data, 'AES-128-CBC', $key, $options = OPENSSL_RAW_DATA, $iv);
}
function http_test()
{
//https://api3.zpcpjapi.com/api.php/api/mv/list_construct
$req_url = "https://api3.zpcpjapi.com/api.php/api/mv/list_construct";
$nowTime = time();
$data = '{"oauth_id":"2f23cbb03fc20c233a4c607ccc6aa53f","bundleId":"com.pwa.zpcpj","version":"1.0.0","oauth_type":"web","language":"zh","via":"pwa","token":"","id":4,"_hash":1672635505,"page":200,"limit":15}';
$data = data_encrypt($data);
$sign = get_sign("client=pwa&data=" . $data . "×tamp=" . $nowTime . "5589d41f92a597d016b037ac37db243d");
$req_data = "client=pwa×tamp=" . $nowTime . "&data=" . $data . "&sign=" . $sign;
$reqHeader = ["accept: */*", "accept-language: zh-CN,zh;q=0.9,en;q=0.8", "content-type: application/x-www-form-urlencoded;charset=utf-8",
"origin: https://p1.zpc007.co", "pragma: no-cache", "referer: https://p1.zpc007.co/", "user-agent: Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.91 Mobile Safari/537.36"
, 'sec-ch-ua-platform: "Android"', "sec-fetch-dest: empty", "sec-fetch-mode: cors", "sec-fetch-site: cross-site"
, "sec-ch-ua-mobile: ?1", 'sec-ch-ua: "Not?A_Brand";v="8", "Chromium";v="108", "Google Chrome";v="108"'];
return request_post($req_url, $req_data, $reqHeader);
}
$test_data = "O2W6C/bX+Cz10KiKZRSYlfFO+BxIBeswqM6FpmlXSngUb0PGvaseio8LgygTppVmaOAuy5XiLvI3lELQYLco+mZlsTIdFSpXCmApNFQWGCfufqkbGdJVG8D2uwfChe/WrzCi8wICP6K4VJe92oiM3T07LuEpZ72hi+rPLVGcfaTF4o0YOEezPBPvEArn26+wTj+6LS8/uvJ48nbPP/ifMePb1wPDgJMCLDgfSnL55hzCdzg/Ni7QDdT8rbUFiKnOameITNpYBWJvBQyV0GXTQg==";
$test_data = "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";
$test_data = "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";
$test_data = "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";
$test_data = "GL1ZXoee3Q3M2UWjIMFGj7sGVuGbyodC07acq68UgX5mZaVDhhAl5c+yRojxErYy6CGLXF4Fl8RcUi9KyzrdiL/CFVe5Xg89DnT3IWBNTwxahBBCYCkIC6LMS1o48DeoBiNeMkPSI6FhDSf5HCPAnG71W7qV81Mmuts5Jp57y8m3bjlEJ2Mc/6waXZ4qLhQD";
echo "<h4>请求解密:</h4><p style=word-break:break-all>" . $test_data . "</p>";
echo "<h4>解密结果:</h4><p style=word-break:break-all>" . data_decrypt($test_data) . "</p>";
echo "<h4>加密结果:</h4><p style=word-break:break-all>" . data_encrypt(data_decrypt($test_data)) . "</p>";
$test_sign_data = "client=pwa&data=NYbiVdgLAZQ5JzjQfEF86bnZ0b8zeVmIAgRcBdvl+oqiaTusVgEEkKKdSifjDhQ3Z+o/am5EHvkYF5QIOsCScI+s8lm7hVRkNpjjlM1pATSk+pnzfDkX2oj2KQwTyPdd6E7iJN2YHLlo77pNXiSEx8AsUY9wdNPdaWqphNQK8yOv9l47RG12oMVZLyEsXxx7Q/vIVFBHZ7QpCWpDmXuRYw4u10gLzpgYIqGhVdXo2kmlK5nMaozGZ7hELPUfrNK9FOoChVVWvMvOZEHbH+Q1fA==×tamp=16726572015589d41f92a597d016b037ac37db243d";
echo "<h4>Sign计算结果:</h4><p style=word-break:break-all>" . get_sign($test_sign_data) . "</p>";
//请求实例
$response_text = http_test();
echo "<h4>请求返回:</h4><p style=word-break:break-all>" . $response_text . "</p>";
$res_data = json_decode($response_text, true)["data"];
echo "<h4>解密响应数据：</h4><p style=word-break:break-all>" . data_decrypt($res_data) . "</p>";
//解密图片
echo "获取图片：<br>";
//$image_url = "https://new.cnzuqiu.mobi/new/upload/20220727/2022072720021873683!720x0.jpeg";
$image_url="https://new.cnzuqiu.mobi/new/xiao/20230103/2023010314535191347.jpg";
//$image_url = "https://long.fuhuida.ltd//watch8/742c57263839a9e449c48554c48e9f4d/742c57263839a9e449c48554c48e9f4d.m3u8?auth_key=1672665154-0-0-2b0143e306feb3ec348283e60cd91417";
$reqHeader = ["accept: */*", "accept-language: zh-CN,zh;q=0.9,en;q=0.8", "content-type: application/x-www-form-urlencoded;charset=utf-8",
"origin: https://p1.zpc007.co", "pragma: no-cache", "referer: https://p1.zpc007.co/", "user-agent: Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.91 Mobile Safari/537.36"
, 'sec-ch-ua-platform: "Android"', "sec-fetch-dest: empty", "sec-fetch-mode: cors", "sec-fetch-site: cross-site"
, "sec-ch-ua-mobile: ?1", 'sec-ch-ua: "Not?A_Brand";v="8", "Chromium";v="108", "Google Chrome";v="108"'];
$image=base64_encode(decrypt_image(request_GET($image_url, $reqHeader)));
echo $image;
echo '<img src="data:image/jpg;base64,'.$image.'"></img>';
//解密 视频
echo "获取Video：<br>";
$videom3u8 = 'https://a.jiebaoshipin.xyz/watch8/742c57263839a9e449c48554c48e9f4d/crypt.key?auth_key=1671003585-0-0-0d812acd44a5a826b84a65014ec9f0c5';
$videoKey = base64_encode(request_GET($videom3u8,$reqHeader)); //decrypt_video
echo $videoKey;
$videoIV = base64_encode('0xca308434975cf10e76eb7759df273769');
$videTS ='https://a.jiebaoshipin.xyz/watch8/742c57263839a9e449c48554c48e9f4d/742c57263839a9e449c48554c48e9f4d1.ts?auth_key=1671003585-0-0-b98af2b38482c59e9f6b09450b0b65fd';
// $ts = request_GET($videTS,$reqHeader);
// echo $ts;
?>
具体视频抓去Python脚本：
import requests
import time, os
import hashlib
import base64
from Cryptodome.Cipher import AES
# 获取key ，二进制流格式
key=requests.get('https://a.jiebaoshipin.xyz/watch8/742c57263839a9e449c48554c48e9f4d/crypt.key?auth_key=1671003585-0-0-0d812acd44a5a826b84a65014ec9f0c5').content
cryptkey = base64.b64encode(key).decode()
print(key)
print(cryptkey)
# iv是一个二进制字符串，没有明确说明就按照这个写即可，注意位数
iv=b'0000000000000000'
# 获取aes对象,key已获取
cipher = AES.new(key, AES.MODE_CBC, iv)
# 进行解密,res1就是媒体流（二进制）字符串
res1=requests.get('https://a.jiebaoshipin.xyz/watch8/742c57263839a9e449c48554c48e9f4d/742c57263839a9e449c48554c48e9f4d17.ts?auth_key=1671003585-0-0-551e1d2781585f420fe874ecf5cc04bc').content
plain_data = cipher.decrypt(res1)
with open('hebing1.ts','ab+') as w:
w.write(plain_data) # 写入解密后的内容
# 获取key ，二进制流格式，key的地址具体网站自己看
# res=requests.get('https://a.jiebaoshipin.xyz/watch8/742c57263839a9e449c48554c48e9f4d/crypt.key?auth_key=1671003585-0-0-0d812acd44a5a826b84a65014ec9f0c5').content
# for i in res:
# try:
# print(i)
# # res1 = requests.get(i,timeout=5).content
# # iv=b'0000000000000000'
# # # 获取aes对象
# # cipher = AES.new(key, AES.MODE_CBC, iv)
# # # 进行解密
# # plain_data = cipher.decrypt(res1)
# # with open('合并.ts','ab+') as w:
# # w.write(plain_data) # 写入解密后的内容
# except:
# pass
# cryptkey22 = base64.b64encode("U1MjU1M0FDOUZ.Qz").decode()
# #print(cryptkey22)
# key2="U1MjU1M0FDOUZ.Qz"
# cipher2=AES.new(cryptkey22, AES.MODE_CBC, iv)
# plain_data22 = cipher2.decrypt("guy/obBxg2XaqJkOyjVNgMhWkLdOukPXYLjARLp7gsY9HucfBQOTfYLxq09QKIfqHGa3a1CLqLjylJL1PTd4CtnD4NeX50zH4dWFCaRdJs9I4AFCbsK8QidPmSp346s8gN+yXhiDZkVADFsn0YWIsQ==")
# print(plain_data22)
由于这个站点质量太大，爬下来的资源TS文件太大了，资源不齐全，后面我给你们介绍下haosexiansheng 的抓取和解密。
