- hook WUP序列化层抓取TLS加密前明文,确认密码登录走 servant=huyaudbwebui / func=hypasswordLogin (msgType=0x1001) - 逆向JCE RequestPacket帧格式(1015字节TAF二进制),定稿三层结构: WUP header(tag1-10) -> sBuffer Map -> _wup_data业务struct - 澄清两个疑点字节: 0x66/0x7d 是TAF字段头(非分隔符) - 实现 tools/huya_wup_encoder.py,逐字节复现金标准 - 实测纯Python动态构造登录成功(返回uid+token),TLS指纹不阻断 - userAction随机坐标/时间戳同样通过,内置make_user_action辅助函数 - 新增证据金标准 + 协议文档
1 line
1.3 KiB
Plaintext
1 line
1.3 KiB
Plaintext
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 |