yml2213
51dff870cf
做了什么:
- 新增 tcaptcha/tdc_values.py: 37 个语义名的取值生成器（静态画像 / 会话量 /
每次采集量三层）+ build_plain 四段组装 + generate_collect 纯离线出包
- crypto: 新增 generate_telemetry(mode="python_values")；轨迹生成统一到
trajectory_points()（首点绝对坐标 + 增量 + 固定收尾 [1,1,12]）
- crypto.split_collect_segments 重写: pad 只有 1 个空格时旧 ` {2,}` 判据会漏段，
且 UA 串里的普通空格会假阳性 —— 改为「模 24 算术 + 不落在 JSON 字符串内部 + 结构校验」
- tools/tdc_modules: trajectory 指纹原先指向只做 JSON.stringify 的模块，改为
mouseMoveEvent/touchStartEvent（真轨迹模块），37/37 不变
- client 默认 telemetry_mode 改为 python_values
- 新增 scripts/verify/{align_session,audit_names,verify_values,verify_offline,send_test}.py
与 tools/{cdp_collect,cdp_dump_scripts,tdc_profile}.py
为什么:
- 账本 #40「谁在发 HTTP 是 12 的剩余自变量」被推翻。同 aid/同客户端/同求解器、
答案都对，只换 collect 构造方式: 本次会话构建生成 -> 0 (4/4)，
旧模板回填 -> 12 (2/2)。真因是 collect 必须与本次会话构建同源。
怎么验证:
- .venv/bin/python -m tcaptcha.selftest 全绿（含新增四段切分与纯离线闭环回归）
- scripts/verify/verify_values.py 4 份真机明文 152/152 逐槽全等
- scripts/verify/verify_offline.py 逐槽全等 + 分段几何一致
- scripts/verify/send_test.py --mode python_values 1ms 签到页文字点选 errorCode=0 x4
105 lines
4.1 KiB
Python
105 lines
4.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""verify_values.py —— 用**真机同会话明文**校验取值生成器（tcaptcha/tdc_values.py）。
|
|
|
|
做法（不手工配平，全部从观测值反推）:
|
|
1. 解密 collect -> 切 4 段 -> 解析 cd
|
|
2. 按清单顺序把槽绑到语义名（itoken 占 2 槽）
|
|
3. 从观测值里读出「会话量」（itoken / 会话随机盐 / 页面加载时刻）
|
|
与「每次采集量」（当前时刻 / 采集计数 / 轨迹），塞进 Session
|
|
4. 让生成器重算一遍，逐槽对比
|
|
|
|
期望: 除「每次采集量」之外**必须逐槽全等**；而每次采集量被喂了观测值后也应全等
|
|
（等于证明生成器对这些量的建模是对的，而不是巧合）。
|
|
|
|
用法:
|
|
.venv/bin/python scripts/verify/verify_values.py \
|
|
--build /tmp/1ms_bridge/session_build.js \
|
|
--collects /tmp/1ms_bridge/session_collect.json /tmp/1ms_bridge/session_collect2.json
|
|
"""
|
|
import argparse
|
|
import base64
|
|
import json
|
|
import sys
|
|
from pathlib import Path
|
|
from urllib.parse import unquote
|
|
|
|
ROOT = Path(__file__).resolve().parents[2]
|
|
sys.path.insert(0, str(ROOT))
|
|
sys.path.insert(0, str(ROOT / "tools"))
|
|
|
|
import tdc_modules as tm # noqa: E402
|
|
from tcaptcha.crypto import split_collect_segments, xtea_decrypt_bytes # noqa: E402
|
|
from tcaptcha.tdc_key import extract_xtea_key_pure # noqa: E402
|
|
from tcaptcha.tdc_values import Session, generate_cd # noqa: E402
|
|
|
|
|
|
def slot_names(rows):
|
|
out = []
|
|
for r in rows:
|
|
base = str(r["name"]).split("#")[0]
|
|
out.extend([r["name"]] * (2 if base == "itoken" else 1))
|
|
return out
|
|
|
|
|
|
def decrypt_cd(path, key):
|
|
sess = json.load(open(path, encoding="utf-8"))
|
|
if "collect" not in sess and isinstance(sess.get("data"), dict):
|
|
sess = sess["data"]
|
|
plain = xtea_decrypt_bytes(base64.b64decode(unquote(sess["collect"])), key) \
|
|
.decode("latin1").rstrip("\x00")
|
|
c1, traj, c2, sd = split_collect_segments(plain)
|
|
obj = json.loads(c1 + traj + c2 + sd)
|
|
return obj["cd"], json.loads(traj), sd
|
|
|
|
|
|
def main() -> int:
|
|
ap = argparse.ArgumentParser(description="校验语义名取值生成器")
|
|
ap.add_argument("--build", default="/tmp/1ms_bridge/session_build.js")
|
|
ap.add_argument("--collects", nargs="+", required=True)
|
|
args = ap.parse_args()
|
|
|
|
js = open(args.build, encoding="utf-8", errors="replace").read()
|
|
key = extract_xtea_key_pure(js)["key"]
|
|
rows = tm.analyze(args.build)
|
|
names = slot_names(rows)
|
|
bases = [n.split("#")[0] for n in names]
|
|
|
|
total_ok = total = 0
|
|
for path in args.collects:
|
|
cd, traj, sd = decrypt_cd(path, key)
|
|
slots = list(zip(names, cd))
|
|
|
|
# 注意 itoken 占 2 槽且同名，所以用列表而不是 dict
|
|
itoken = [v for n, v in slots if n == "itoken"]
|
|
sess_rand = next(v for n, v in slots if n.startswith("struct_40_9#")
|
|
and not n.endswith("_empty"))
|
|
loaded = next(v for n, v in slots
|
|
if n.startswith("window_time#") and n.endswith("call_empty"))
|
|
now = next(v for n, v in slots
|
|
if n.startswith("window_time#") and not n.endswith("call_empty"))
|
|
calls = next(v for n, v in slots if n == "struct_46_9")
|
|
|
|
s = Session(now=loaded)
|
|
s.itoken = list(itoken)
|
|
s.session_rand = sess_rand
|
|
s.loaded_at = loaded
|
|
s.calls = calls - 1 # generate_cd 会 +1
|
|
s.set_trajectory(traj)
|
|
gen = generate_cd(rows, s, now=now)
|
|
|
|
bad = [(names[i], cd[i], gen[i]) for i in range(len(cd)) if cd[i] != gen[i]]
|
|
total += len(cd)
|
|
total_ok += len(cd) - len(bad)
|
|
print("%-46s cd=%d 不一致=%d" % (Path(path).name, len(cd), len(bad)))
|
|
for n, o, g in bad:
|
|
print(" %-38s 观测=%s 生成=%s"
|
|
% (n, json.dumps(o, ensure_ascii=False)[:44],
|
|
json.dumps(g, ensure_ascii=False)[:44]))
|
|
print()
|
|
print("逐槽全等: %d/%d" % (total_ok, total))
|
|
return 0 if total_ok == total else 1
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|