yml2213
51dff870cf
做了什么:
- 新增 tcaptcha/tdc_values.py: 37 个语义名的取值生成器（静态画像 / 会话量 /
每次采集量三层）+ build_plain 四段组装 + generate_collect 纯离线出包
- crypto: 新增 generate_telemetry(mode="python_values")；轨迹生成统一到
trajectory_points()（首点绝对坐标 + 增量 + 固定收尾 [1,1,12]）
- crypto.split_collect_segments 重写: pad 只有 1 个空格时旧 ` {2,}` 判据会漏段，
且 UA 串里的普通空格会假阳性 —— 改为「模 24 算术 + 不落在 JSON 字符串内部 + 结构校验」
- tools/tdc_modules: trajectory 指纹原先指向只做 JSON.stringify 的模块，改为
mouseMoveEvent/touchStartEvent（真轨迹模块），37/37 不变
- client 默认 telemetry_mode 改为 python_values
- 新增 scripts/verify/{align_session,audit_names,verify_values,verify_offline,send_test}.py
与 tools/{cdp_collect,cdp_dump_scripts,tdc_profile}.py
为什么:
- 账本 #40「谁在发 HTTP 是 12 的剩余自变量」被推翻。同 aid/同客户端/同求解器、
答案都对，只换 collect 构造方式: 本次会话构建生成 -> 0 (4/4)，
旧模板回填 -> 12 (2/2)。真因是 collect 必须与本次会话构建同源。
怎么验证:
- .venv/bin/python -m tcaptcha.selftest 全绿（含新增四段切分与纯离线闭环回归）
- scripts/verify/verify_values.py 4 份真机明文 152/152 逐槽全等
- scripts/verify/verify_offline.py 逐槽全等 + 分段几何一致
- scripts/verify/send_test.py --mode python_values 1ms 签到页文字点选 errorCode=0 x4
80 lines
3.1 KiB
JavaScript
80 lines
3.1 KiB
JavaScript
// 在真 Chrome(9222) 里拉起 1ms 的腾讯验证码。
|
|
// 用法: node tools/cdp_show_captcha.js
|
|
function arg(name, def) {
|
|
const i = process.argv.indexOf('--' + name);
|
|
if (i < 0) return def;
|
|
const v = process.argv[i + 1];
|
|
return (v === undefined || v.startsWith('--')) ? true : v;
|
|
}
|
|
const sleep = ms => new Promise(r => setTimeout(r, ms));
|
|
|
|
class Cdp {
|
|
constructor(ws) { this.ws = ws; this.id = 0; this.waits = new Map(); this.handlers = []; }
|
|
static async connect(url) {
|
|
const ws = new WebSocket(url);
|
|
await new Promise((res, rej) => { ws.onopen = res; ws.onerror = rej; });
|
|
const c = new Cdp(ws);
|
|
ws.onmessage = ev => {
|
|
const m = JSON.parse(ev.data);
|
|
if (m.id && c.waits.has(m.id)) {
|
|
const { res, rej } = c.waits.get(m.id);
|
|
c.waits.delete(m.id);
|
|
m.error ? rej(new Error(JSON.stringify(m.error))) : res(m.result);
|
|
} else if (m.method) { for (const h of c.handlers) h(m); }
|
|
};
|
|
return c;
|
|
}
|
|
send(method, params = {}) {
|
|
const id = ++this.id;
|
|
this.ws.send(JSON.stringify({ id, method, params }));
|
|
return new Promise((res, rej) => this.waits.set(id, { res, rej }));
|
|
}
|
|
on(fn) { this.handlers.push(fn); }
|
|
close() { try { this.ws.close(); } catch (e) {} }
|
|
}
|
|
|
|
async function listTargets(port) {
|
|
const r = await fetch(`http://127.0.0.1:${port}/json/list`);
|
|
return r.json();
|
|
}
|
|
|
|
(async () => {
|
|
const port = parseInt(arg('port', '9222'), 10);
|
|
const aid = arg('aid', '195672344');
|
|
const pageUrl = arg('url', 'https://1ms.run/');
|
|
|
|
const targets = await listTargets(port);
|
|
let page = targets.find(t => t.type === 'page' && !(t.url || '').startsWith('chrome'));
|
|
if (!page) throw new Error('没有可用页面 target');
|
|
|
|
const cdp = await Cdp.connect(page.webSocketDebuggerUrl);
|
|
await cdp.send('Page.enable');
|
|
await cdp.send('Runtime.enable');
|
|
|
|
console.log(`[1] 导航到 ${pageUrl}`);
|
|
await cdp.send('Page.navigate', { url: pageUrl });
|
|
await sleep(4000);
|
|
|
|
console.log(`[2] 注入 TCaptcha SDK 并 show(aid=${aid})`);
|
|
const expr = `(async () => {
|
|
const load = (src) => new Promise((res, rej) => {
|
|
const s = document.createElement('script');
|
|
s.src = src; s.onload = () => res(true); s.onerror = () => rej(new Error('fail'));
|
|
document.head.appendChild(s);
|
|
});
|
|
if (typeof window.TencentCaptcha !== 'function') await load('https://ssl.captcha.qq.com/TCaptcha.js');
|
|
window.__capres = null;
|
|
window.__cap = new window.TencentCaptcha('${aid}', function (r) { window.__capres = r; }, {});
|
|
window.__cap.show();
|
|
return {ok: true};
|
|
})()`;
|
|
const r = await cdp.send('Runtime.evaluate', { expression: expr, awaitPromise: true, returnByValue: true });
|
|
console.log(' ', JSON.stringify(r.result && r.result.value));
|
|
|
|
await sleep(2500);
|
|
const t2 = await listTargets(port);
|
|
console.log('[3] 当前 targets:');
|
|
for (const t of t2) console.log(` ${t.type}\t${(t.url || '').slice(0, 100)}`);
|
|
cdp.close();
|
|
})().catch(e => { console.error('ERR', e.message); process.exit(1); });
|