diff --git a/docs/虎牙hyCred签发-侦察笔记.md b/docs/虎牙hyCred签发-侦察笔记.md index 6403f80..081fc78 100644 --- a/docs/虎牙hyCred签发-侦察笔记.md +++ b/docs/虎牙hyCred签发-侦察笔记.md @@ -247,3 +247,11 @@ BusBeansAppLoginData响应结构(纯Python解析): mobileMask/uc_states齐全 => 纯Python链路全通: 密码->TAF包->wup.huya.com->cred+token! 下轮: 精确切片cred(处理长度前缀) -> cert_forge -> 活体bind验证 -> 目标完结。 + +## R7: cred切片偏差 - 待锚点校正 + +候选114B起始'72 0a50...'多出1字节; 去首后113B≠114 断言失败, +铸证bind被拒(uid=None,符合预期)。字符串锚点(STR4[344]/mobileMask/uc_states) +在t5子struct解析完全对齐 => 用它们回推t3 bytes精确边界。 +注: 本次登录用假密码+复刻session, 服务端仍返回完整bean(会话级缓存/重放容忍), +cred有效性需真密码登录后二次验证。 diff --git a/evidence/forge_bind_result.json b/evidence/forge_bind_result.json index a42541f..7e8b704 100644 --- a/evidence/forge_bind_result.json +++ b/evidence/forge_bind_result.json @@ -1,12 +1,12 @@ { "results": { "C_forged_swapped_cred": { - "ok": true, - "uid": 1199666914671, - "biztoken_len": 344, - "biztoken": "AQA0HB1eLBj6FYHHIIlA18jOJL4M2hm0cVgwCnpQQT6TFZ7kHUyrDPojHYobR5NxwphHBqoCZkSmrzwf1ejbc3dzgZVw6auP1LBFeuzyFyyqJSSamtM0QM09u7vnRdKMZ08_i5fMfyrN6jJGp6qsnQsJf_bJ3kXGGnTcvzqoJoeIQ8hvHTsqoykjXsAJOU2bHTIOTTIKpyRoSbbTVLYg9l19QtQRhKTZfmlJbyahFT_IZi4SGrGRQJn12s53fj8Iep-78FCrNYi0DpjI7UhOxClSl880X7OlZRvhjL_k7eU1oRCWihyGsDCX6WBqvW-NWroc20WYEnMkLyfFf03WToWh" + "bind_fail": true, + "rc": 40020, + "desc": "登录失败,请重新登录", + "scan_uid": null } }, - "p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af28003032646633393837393734333265616465666363313237363731313961643565383039393933383972000a20171d4885bb9bb40f29517ab490f3634a0640e942e24039e2f471a5a66a0c64662b68c43f64a90ab982d8298bfc5de4e58a0bb6617a7ab8ecc730cde4a28bd828261096ca95b6247bba5e4714395166f9a22eb0c9954e6d0890ba40fa951e70e63c7c4c8e8e5547f6ca029830f31adbe8", - "ts": 1787649782.6306071 + "p1_new_hex": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af2800303264663339383739373433326561646566636331323736373131396164356538303939393338397200720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a", + "ts": 1787654063.87216 } \ No newline at end of file diff --git a/evidence/hycred_pure.bin b/evidence/hycred_pure.bin new file mode 100644 index 0000000..cdf41c4 --- /dev/null +++ b/evidence/hycred_pure.bin @@ -0,0 +1,2 @@ +r +P@^^}s-\a0嚸ce {"VҠ5†(:t8gsm8 R-At5*E*' ֊ӈPFcwe]BZ \ No newline at end of file diff --git a/evidence/hycred_pure_cert.json b/evidence/hycred_pure_cert.json new file mode 100644 index 0000000..fee8065 --- /dev/null +++ b/evidence/hycred_pure_cert.json @@ -0,0 +1 @@ +{"p1": "010400353030381400c25220f81f60cf64ee54e83ef1eab6bdd047b5af2800303264663339383739373433326561646566636331323736373131396164356538303939393338397200720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a", "cert_hex": "0c201aeb9aa1d4c9e6fc6d5628b1cb936a3b0c360b3914ed9b94f2cf4808490594202cbaa481870772fe2a4df9a94fdb8a0e41312514470c77cbfa586558f87309bea211bc5979d43cc59a628c378ed2419fdaa8c17005daa0b1b54631c03cebf62185091bdbcac21b30f51d09bb905129df9f7742bdc085709e84d5e91cc396eba489b0601662055dd3685ade46b7ca4b5d433d6efb53fedd65128a61dcdc7ac348eefc23f214f45b37c908d3bd5284ea84ff7edc36d01e115fe3100bcda630184e", "cred_hex": "720a5040d05e831df45e7df7f9732d835c9ffe6184a230d9dfe7e59ab863651002f80907b898e47be8228f5680b0d2a03584b2c286cc283a8c74bf381d0767736d382052932d41743510f92a45182a8c27a0f90c9905fcd68ab2d3880450fdbef946ab6377f9106506f1dbcdd2d25d42f65a"} \ No newline at end of file