Sina Weibo dynamics RSA analysis
- Tools used 1.ie browser (version 9 or above) 2.httpwatch (both Chinese and English are available) 3.js debugging tools
Target website: http://weibo.com (Sina Weibo)
- Capture packets
Let’s follow our last packet capture process and develop good habits. I won’t go into details here.
-
Analyze packet capture data
-
Confirm our login submission package
-
Flexible keyword search
-
js debugging 4. Finding keywords
-
You can search for keywords on HttpWatch You can also continue searching in F12 of ie
-
Find the pwencode keyword
-
This is different from last time. I copied the calling code and simply rewritten it first. The copied code is not a function() function like a subroutine in Yi Language. (The description here may be wrong) 3 parameters. We know that p is the password. Let’s take a look at the remaining two parameters in the developer tools.
-
Look specifically at graphic analysis
If there is anything wrong, please point it out.