feat(huya): 真密码登录成功返回数据 - cred字段识别待精确化

docs/虎牙hyCred签发-侦察笔记.md

@@ -264,3 +264,12 @@ t3字段精确解码: head 3d 00(INT8 elem) 00 72(INT8 len=114) -> 值114B
 已完成(全部验证): 密码SHA1->TAF组包->POST wup.huya.com->HTTP200->bean解析->
 uid/token/mobileMask提取。待办: 真密码登录取新鲜cred->cert_forge->bind验证cookie。
 工具就绪: huya_wup_encoder.build_password_login_wup + 本笔记响应解析器代码。
+
+## 真密码实测(R8末)
+
+hy_300023887/aa778899 SHA1=金样本哈希(同一账号历史登录)。
+真密码登录: HTTP200 1571B, 响应含新鲜114B字段(0a40开头, 每次登录变化)。
+铸证bind -> 40020 CERT_BIZERR_CREATE_ERROR 被拒。
+=> 该t3 bytes[114]与桥采cred格式有差异(桥采0a20开头), 或非plain cred
+   (可能为加密态/hyid), 需对照BusBeansAppLoginData精确tag定位真cred字段。
+纯Python链路已通到最后一环; 差异点已锁定在响应bean的cred字段识别。

evidence/forge_bind_result.json

@@ -7,6 +7,6 @@
    "scan_uid": null
   }
  },
- "p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af2800303264663339383739373433326561646566636331323736373131396164356538303939393338397200720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a",
- "ts": 1787654063.87216
+ "p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af28003032646633393837393734333265616465666363313237363731313961643565383039393933383972000a4003ef982e01399335f13e9ae294ebdf18a91fc43e6be883c67a7e19784689ec2d38b5c55b79048d8bec1ab66e55749605a86eb6eae62805a708910655b0be91056b9d7159d2bf116eaed44ded41d7b7fe810d0fbd6e3a689dcd2daa8477c304a49ab2b17d2512b9bc99e33f7d6e99daec",
+ "ts": 1787654460.378764
 }

evidence/hycred_real.bin

@@ -0,0 +1,2 @@
+
+@ُ�.
9�5ّ>�ق�ً��ؤ>kو�ئz~xF�ٌ-8�إ[y��ٌ�nUt��n�ين(��U���k�qYز؟n�شMٍAط���␍�n:h�ح-��wأ¤���}%���ك?}n�غٌ

evidence/hycred_real_cert.json

@@ -0,0 +1 @@
+{"p1": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af28003032646633393837393734333265616465666363313237363731313961643565383039393933383972000a4003ef982e01399335f13e9ae294ebdf18a91fc43e6be883c67a7e19784689ec2d38b5c55b79048d8bec1ab66e55749605a86eb6eae62805a708910655b0be91056b9d7159d2bf116eaed44ded41d7b7fe810d0fbd6e3a689dcd2daa8477c304a49ab2b17d2512b9bc99e33f7d6e99daec", "cert_hex": "0c201aeb9aa1d4c9e6fc6d5628b1cb936a3b0c360b3914ed9b94f2cf4808490594202cbaa481870772fe2a4df9a94fdb8a0e41312514470c77cbfa586558f87309beb2b589f1bbf2525d5e923160b44986640f1b396e0a8ccb54ac0098dc9600ec17ffdd7cffebfab130cd3c2de0f9237b6b987e114996076e9b902dc91968ffd7489e099358d3e3c2bc03e957065afe88957a96e65bcc4b5a83e3832c66d92b41db9cbefe52baa2811e2d4befbbaa532a320bff5c13f3184e373fea8004b1ec7cbf", "cred_hex": "0a4003ef982e01399335f13e9ae294ebdf18a91fc43e6be883c67a7e19784689ec2d38b5c55b79048d8bec1ab66e55749605a86eb6eae62805a708910655b0be91056b9d7159d2bf116eaed44ded41d7b7fe810d0fbd6e3a689dcd2daa8477c304a49ab2b17d2512b9bc99e33f7d6e99daec"}