v2.7.0: dual-sign case + experience library upgrade + MCP v0.6.0 alignment
- case: add jsvmp-dual-sign-xhr-intercept-cacheOpts-jsdom-firefox (behavior type) Fingerprints: webmssdk/byted_acrawler/cacheOpts/X-Bogus+X-Gnarly dual sign Core tech: jsdom Firefox env emulation + XHR/fetch dual-channel intercept + cacheOpts init Pitfalls: 12 gotchas documented - SKILL.md: 9 changes - env emulation step 0.5: confirm sign function entry before patching - experience rules expanded 32 -> 40 - scene 10/11: navigate params + CSP pre-check - core weapon: MCP v0.5.0 -> v0.6.0 (68 tools) - error handling: 3 new failure patterns - cases/_template.md: add anti-bot type + key experience sections - cases/README.md: add fingerprint matching table + variant diagram - sanitize: remove all site names from all files
This commit is contained in:
@@ -4,6 +4,7 @@
|
||||
> 还原方案:[A: 纯算法还原 / B: 沙箱执行 / C: WASM 加载 / D: 浏览器自动化 / E: jsdom 环境模拟]
|
||||
> 实现语言:[Node.js / Python / 双语言]
|
||||
> 最后验证日期:YYYY-MM-DD
|
||||
> 平台类型:[如:短视频平台 / 电商平台 / 社交平台 / 通用]
|
||||
|
||||
---
|
||||
|
||||
@@ -40,6 +41,23 @@
|
||||
|
||||
---
|
||||
|
||||
## 反爬类型判定(v2.7.0 新增)
|
||||
|
||||
> 在进入加密方案分析之前,必须先判定反爬类型。参考 SKILL.md「反爬类型识别与工具选择」章节。
|
||||
|
||||
```
|
||||
判定步骤:
|
||||
1. navigate(url) 不加任何 hook → 观察 redirect_chain
|
||||
2. 按三分法判断:签名型 / 行为型 / 纯混淆
|
||||
3. 记录判定结果和依据
|
||||
|
||||
判定结果:[签名型 / 行为型 / 纯混淆]
|
||||
判定依据:[如 "redirect_chain 直接 200,页面后续 XHR 带 X-Bogus 签名参数 → 行为型"]
|
||||
工具路径:[如 "四板斧全开" / "仅源码级插桩" / "任意组合"]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 加密方案
|
||||
|
||||
- **算法**:[具体算法名称和模式]
|
||||
@@ -118,3 +136,15 @@
|
||||
| 检测点 | 真实浏览器值 | 模拟环境原始值 | 修复方式 |
|
||||
|--------|-------------|---------------|---------|
|
||||
| | | | |
|
||||
|
||||
---
|
||||
|
||||
## 关键经验总结(v2.7.0 新增)
|
||||
|
||||
> 本次逆向分析中最有价值的经验,供后续类似场景参考
|
||||
|
||||
### 1. [经验标题]
|
||||
[经验描述]
|
||||
|
||||
### 2. [经验标题]
|
||||
[经验描述]
|
||||
|
||||
Reference in New Issue
Block a user