yml/live-hub-py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(huya): cred切片待锚点校正(113/114偏差)

Browse Source
This commit is contained in:
yml2213
2026-08-25 18:35:56 +08:00
parent 3811f14192
commit dae24b513a
4 changed files with 17 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/虎牙hyCred签发-侦察笔记.md
+8
View File
@@ -247,3 +247,11 @@ BusBeansAppLoginData响应结构(纯Python解析):
mobileMask/uc_states齐全
=> 纯Python链路全通: 密码->TAF包->wup.huya.com->cred+token!
下轮: 精确切片cred(处理长度前缀) -> cert_forge -> 活体bind验证 -> 目标完结。
## R7: cred切片偏差 - 待锚点校正
候选114B起始'72 0a50...'多出1字节; 去首后113B≠114 断言失败,
铸证bind被拒(uid=None,符合预期)。字符串锚点(STR4[344]/mobileMask/uc_states)
在t5子struct解析完全对齐 => 用它们回推t3 bytes精确边界。
注: 本次登录用假密码+复刻session, 服务端仍返回完整bean(会话级缓存/重放容忍),
cred有效性需真密码登录后二次验证。
evidence/forge_bind_result.json
+6 -6
View File
@@ -1,12 +1,12 @@
{
"results": {
"C_forged_swapped_cred": {
"ok": true,
"uid": 1199666914671,
"biztoken_len": 344,
"biztoken": "AQA0HB1eLBj6FYHHIIlA18jOJL4M2hm0cVgwCnpQQT6TFZ7kHUyrDPojHYobR5NxwphHBqoCZkSmrzwf1ejbc3dzgZVw6auP1LBFeuzyFyyqJSSamtM0QM09u7vnRdKMZ08_i5fMfyrN6jJGp6qsnQsJf_bJ3kXGGnTcvzqoJoeIQ8hvHTsqoykjXsAJOU2bHTIOTTIKpyRoSbbTVLYg9l19QtQRhKTZfmlJbyahFT_IZi4SGrGRQJn12s53fj8Iep-78FCrNYi0DpjI7UhOxClSl880X7OlZRvhjL_k7eU1oRCWihyGsDCX6WBqvW-NWroc20WYEnMkLyfFf03WToWh"
"bind_fail": true,
"rc": 40020,
"desc": "登录失败，请重新登录",
"scan_uid": null
}
},
"p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af28003032646633393837393734333265616465666363313237363731313961643565383039393933383972000a20171d4885bb9bb40f29517ab490f3634a0640e942e24039e2f471a5a66a0c64662b68c43f64a90ab982d8298bfc5de4e58a0bb6617a7ab8ecc730cde4a28bd828261096ca95b6247bba5e4714395166f9a22eb0c9954e6d0890ba40fa951e70e63c7c4c8e8e5547f6ca029830f31adbe8",
"ts": 1787649782.6306071
"p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af2800303264663339383739373433326561646566636331323736373131396164356538303939393338397200720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a",
"ts": 1787654063.87216
}
evidence/hycred_pure.bin
+2
View File
@@ -0,0 +1,2 @@
r
P@Ð^ƒô^}÷ùs-ƒ\Ÿþa„¢0Ùßç嚸ceø ¸˜ä{è"�V€°Ò 5„²Â†Ì(:Œt¿8gsm8 R“-At5ù*E*Œ' ù ™üÖŠ²ÓˆPý¾ùF«cwùeñÛÍÒÒ]BöZ
evidence/hycred_pure_cert.json
+1
View File
@@ -0,0 +1 @@
{"p1": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af2800303264663339383739373433326561646566636331323736373131396164356538303939393338397200720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a", "cert_hex": "0c201aeb9aa1d4c9e6fc6d5628b1cb936a3b0c360b3914ed9b94f2cf4808490594202cbaa481870772fe2a4df9a94fdb8a0e41312514470c77cbfa586558f87309bea211bc5979d43cc59a628c378ed2419fdaa8c17005daa0b1b54631c03cebf62185091bdbcac21b30f51d09bb905129df9f7742bdc085709e84d5e91cc396eba489b0601662055dd3685ade46b7ca4b5d433d6efb53fedd65128a61dcdc7ac348eefc23f214f45b37c908d3bd5284ea84ff7edc36d01e115fe3100bcda630184e", "cred_hex": "720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a"}