From ec8fb880e3b226d6ef24832d0ea7a99c176e47ce Mon Sep 17 00:00:00 2001 From: yml2213 Date: Tue, 25 Aug 2026 18:23:34 +0800 Subject: [PATCH] =?UTF-8?q?feat(huya):=20=E7=BA=AFPython=E7=99=BB=E5=BD=95?= =?UTF-8?q?=E5=8C=85=E8=8E=B7=E6=9C=8D=E5=8A=A1=E5=99=A8=E8=BF=94=E5=9B=9E?= =?UTF-8?q?=E7=9C=9F=E5=AE=9E=E7=99=BB=E5=BD=95=E6=95=B0=E6=8D=AE(uid/toke?= =?UTF-8?q?n)!?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/虎牙hyCred签发-侦察笔记.md | 8 ++++++++ evidence/hypasswordlogin_resp.bin | Bin 0 -> 1571 bytes 2 files changed, 8 insertions(+) create mode 100644 evidence/hypasswordlogin_resp.bin diff --git a/docs/虎牙hyCred签发-侦察笔记.md b/docs/虎牙hyCred签发-侦察笔记.md index a26a0a4..a91edcf 100644 --- a/docs/虎牙hyCred签发-侦察笔记.md +++ b/docs/虎牙hyCred签发-侦察笔记.md @@ -213,3 +213,11 @@ TAF响应解析成功: _wup_data/_wup_header 双map, JSON上下文回显 另发现 ybEWdvkjGjPQa2ugireHJCLL 邻串。 下步: 反汇编AESkeyMgr::C2取全部钥表+id; 结合登录时bigaes钩子事件复刻sign算法。 注: 发包body=raw TAF字节(b64是旧文档误导); HTTP200帧已通。 + +## R3: 登录响应拿到真实数据! + +金样本逐字节复刻(仅差1B)重发 -> HTTP200 1571B! +响应含: uid=1199666914671, hy_300023887, mobileMask=001******7524, +b64url长串(AQA1Ie6L1o...疑似token/biztoken), uc_states。 +APP_SIGN_NOT_MATCH消失(此前系字段值不全所致)。 +无明文"cred"键 -> 字段为JCE二进制嵌套, 下轮完整解析_wup_data映射取cred。 diff --git a/evidence/hypasswordlogin_resp.bin b/evidence/hypasswordlogin_resp.bin new file mode 100644 index 0000000000000000000000000000000000000000..fe453c4e8c30931d62f9cd41a9bead82aa32aebd GIT binary patch literal 1571 zcmd^9?N3uz96klCLTf;Ds2e1Boot%c+JPK_NFp6wz=)<_GSAQcD|gPlke0vOb`!T`L&kJChB_njsnc`{Qt%(wQ_%v=D9!Mxqy7nMkZ zDYpWKVN^j7_(}lSoT^n<*LD_7u5J5ynv-{~-v0-+sTcn2_SawS?)TDp8NX!D?C-hL zIsxr)bQ~E?t2P}wyXDfe>Ms5?Q8Y8a#fakS*W?;rl{dXizhGI{GwEsR8#8{tvF+Hk zm$RxK4ow^0^(LqDXz{(zFOQC{(N4KSCLqcYXQ^PAD3k*c=*=j&F?2IMR`mAL+3kwS zyX&90G_-JFf(W*t#S+e57Lg{I14%OS=}I9X<14 z?i!|iUtb^E$JRSzCkwN$Y#k7d4ZS}+nYW2E9X$H#=qrvDm)#dn)NkmtZE;?@9XvB< z=BZ)i_^#6?Z&oX;I_buTKExWuy& zgd{NxBM~KrBL)AGvE-4Na6#)@ja7q~Xv~Z-G;1m4Dc&Boqn2cp3P&}eNHg!EsgT*g zE0cABfLj}N#A}U7qw@u$tIq4uYa=Ev7qsYAVRH(p)xu_DDTapQ2{|Q~W47{gm)zXa z;tS(sgweF<-5#S&Q(Z>tm8r%cld5hsYT|ATrK6DstJ#i`aD~-X$zf%TJcd`BY$;aD zA{=XLsxUAKU71sXXcJs>qRAUa^ie%U2Z>6wN|P$*?Xa~x2-ALR-06?7)*6`7+Q|rJ zKnYkCHu+3d%I3N-U7>498Ows0iw@K(npEyetu-FQb@~>YqsFOnAc2rF7D+~QI1zXF z&>FYKtZ=!aq}$jMGqG0A=W!YAI#+o#7O3IsN}D}lhD93!a<;s};5V2Xbn2d3r#2`Q}*%y%?nLbcM^O5FOg$1~jRYi`}V;5hm)|N1w!{`Gt6mz+C6 zS8Vv!#!dCDnrHY_k|rT03Vlx6Ix?!u0?{2doQ zeeuIt&y8p^A5MiPwhivHkXxVs;?Ty8Z+&p#-kQOMJ5Qpa;*(Dg-dwk59QV&vON+-x zezP2qlY@KY%YVAR)N*X|C&OS}+w~2b;YEiH6Y0T5m59!G8gh?kUdz literal 0 HcmV?d00001