From 61408c5774cb56844d34fbd5f05767e49913bbd2 Mon Sep 17 00:00:00 2001 From: yml2213 Date: Tue, 25 Aug 2026 18:38:14 +0800 Subject: [PATCH] =?UTF-8?q?feat(huya):=20R8=20-=20=E7=BA=AFPython=E7=99=BB?= =?UTF-8?q?=E5=BD=95=E9=93=BE=E8=B7=AF=E5=85=A8=E9=80=9A,=20=E5=BE=85?= =?UTF-8?q?=E7=9C=9F=E5=AF=86=E7=A0=81=E7=BB=88=E9=AA=8C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/虎牙hyCred签发-侦察笔记.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/虎牙hyCred签发-侦察笔记.md b/docs/虎牙hyCred签发-侦察笔记.md index 081fc78..afe22b2 100644 --- a/docs/虎牙hyCred签发-侦察笔记.md +++ b/docs/虎牙hyCred签发-侦察笔记.md @@ -255,3 +255,12 @@ BusBeansAppLoginData响应结构(纯Python解析): 在t5子struct解析完全对齐 => 用它们回推t3 bytes精确边界。 注: 本次登录用假密码+复刻session, 服务端仍返回完整bean(会话级缓存/重放容忍), cred有效性需真密码登录后二次验证。 + +## R8 收尾状态 + +t3字段精确解码: head 3d 00(INT8 elem) 00 72(INT8 len=114) -> 值114B +起始 72 0a 50... 与桥采cred格式(直接0a20...)不同 => 此字段或为包装/加密态cred, +或因假密码+复刻session返回的是降级数据。真伪需真密码登录实测。 +已完成(全部验证): 密码SHA1->TAF组包->POST wup.huya.com->HTTP200->bean解析-> +uid/token/mobileMask提取。待办: 真密码登录取新鲜cred->cert_forge->bind验证cookie。 +工具就绪: huya_wup_encoder.build_password_login_wup + 本笔记响应解析器代码。