迅雷cookies的deviceid值，解密过程

h6435749

url :https://xluser-ssl.xunlei.com/risk?cmd=report
post:xl_fp_raw=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%3D%3D&xl_fp=49c38faf419bd40a3e18fe077a33fea0&xl_fp_sign=8703470ffc0e34e13f48add73553f020&cachetime=1566319856771
访问后返回：cookies的deviceid值

post数据来源：Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36###zh-CN###24###1080x1920###-480###true###true###true###undefined###function######Win32######Chrome PDF Plugin::Portable Document Format::application/x-google-chrome-pdf~pdf;Chrome PDF Viewer::::application/pdf~pdf;Native Client::::application/x-nacl~,application/x-pnacl~###706b387aa6041714698124e1103d4573 此数据进行base64编码是xl_fp_raw值

xl_fp_raw（未url编码）进行md5加密则是xl_fp
xl_fp_sign是xl_fp_raw（未url编码）的js加密值，最下面是加密算法

而706b387aa6041714698124e1103d4573这个跟在协议头+各种东西屁股后面的值就很有意思了，它是一张图片的base64编码后的md5签名，基本这种图片是不会变了吧，下面是那张图片的base64编码数据。
data:image/png;base64,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

function xl_al(xl) {
    function i(a, b) {
        a[b >> 5] |= 128 << b % 32,
        a[(b + 64 >>> 9 << 4) + 14] = b;
        for (var c = 1732584193, d = -271733879, e = -1732584194, f = 271733878, g = 0; a.length > g; g += 16) {
            var h = c
              , i = d
              , j = e
              , o = f;
            c = k(c, d, e, f, a[g + 0], 7, -680876936),
            f = k(f, c, d, e, a[g + 1], 12, -389564586),
            e = k(e, f, c, d, a[g + 2], 17, 606105819),
            d = k(d, e, f, c, a[g + 3], 22, -1044525330),
            c = k(c, d, e, f, a[g + 4], 7, -176418897),
            f = k(f, c, d, e, a[g + 5], 12, 1200080426),
            e = k(e, f, c, d, a[g + 6], 17, -1473231341),
            d = k(d, e, f, c, a[g + 7], 22, -45705983),
            c = k(c, d, e, f, a[g + 8], 7, 1770035416),
            f = k(f, c, d, e, a[g + 9], 12, -1958414417),
            e = k(e, f, c, d, a[g + 10], 17, -42063),
            d = k(d, e, f, c, a[g + 11], 22, -1990404162),
            c = k(c, d, e, f, a[g + 12], 7, 1804603682),
            f = k(f, c, d, e, a[g + 13], 12, -40341101),
            e = k(e, f, c, d, a[g + 14], 17, -1502002290),
            d = k(d, e, f, c, a[g + 15], 22, 1236535329),
            c = l(c, d, e, f, a[g + 1], 5, -165796510),
            f = l(f, c, d, e, a[g + 6], 9, -1069501632),
            e = l(e, f, c, d, a[g + 11], 14, 643717713),
            d = l(d, e, f, c, a[g + 0], 20, -373897302),
            c = l(c, d, e, f, a[g + 5], 5, -701558691),
            f = l(f, c, d, e, a[g + 10], 9, 38016083),
            e = l(e, f, c, d, a[g + 15], 14, -660478335),
            d = l(d, e, f, c, a[g + 4], 20, -405537848),
            c = l(c, d, e, f, a[g + 9], 5, 568446438),
            f = l(f, c, d, e, a[g + 14], 9, -1019803690),
            e = l(e, f, c, d, a[g + 3], 14, -187363961),
            d = l(d, e, f, c, a[g + 8], 20, 1163531501),
            c = l(c, d, e, f, a[g + 13], 5, -1444681467),
            f = l(f, c, d, e, a[g + 2], 9, -51403784),
            e = l(e, f, c, d, a[g + 7], 14, 1735328473),
            d = l(d, e, f, c, a[g + 12], 20, -1926607734),
            c = m(c, d, e, f, a[g + 5], 4, -378558),
            f = m(f, c, d, e, a[g + 8], 11, -2022574463),
            e = m(e, f, c, d, a[g + 11], 16, 1839030562),
            d = m(d, e, f, c, a[g + 14], 23, -35309556),
            c = m(c, d, e, f, a[g + 1], 4, -1530992060),
            f = m(f, c, d, e, a[g + 4], 11, 1272893353),
            e = m(e, f, c, d, a[g + 7], 16, -155497632),
            d = m(d, e, f, c, a[g + 10], 23, -1094730640),
            c = m(c, d, e, f, a[g + 13], 4, 681279174),
            f = m(f, c, d, e, a[g + 0], 11, -358537222),
            e = m(e, f, c, d, a[g + 3], 16, -722521979),
            d = m(d, e, f, c, a[g + 6], 23, 76029189),
            c = m(c, d, e, f, a[g + 9], 4, -640364487),
            f = m(f, c, d, e, a[g + 12], 11, -421815835),
            e = m(e, f, c, d, a[g + 15], 16, 530742520),
            d = m(d, e, f, c, a[g + 2], 23, -995338651),
            c = n(c, d, e, f, a[g + 0], 6, -198630844),
            f = n(f, c, d, e, a[g + 7], 10, 1126891415),
            e = n(e, f, c, d, a[g + 14], 15, -1416354905),
            d = n(d, e, f, c, a[g + 5], 21, -57434055),
            c = n(c, d, e, f, a[g + 12], 6, 1700485571),
            f = n(f, c, d, e, a[g + 3], 10, -1894986606),
            e = n(e, f, c, d, a[g + 10], 15, -1051523),
            d = n(d, e, f, c, a[g + 1], 21, -2054922799),
            c = n(c, d, e, f, a[g + 8], 6, 1873313359),
            f = n(f, c, d, e, a[g + 15], 10, -30611744),
            e = n(e, f, c, d, a[g + 6], 15, -1560198380),
            d = n(d, e, f, c, a[g + 13], 21, 1309151649),
            c = n(c, d, e, f, a[g + 4], 6, -145523070),
            f = n(f, c, d, e, a[g + 11], 10, -1120210379),
            e = n(e, f, c, d, a[g + 2], 15, 718787259),
            d = n(d, e, f, c, a[g + 9], 21, -343485551),
            c = p(c, h),
            d = p(d, i),
            e = p(e, j),
            f = p(f, o)
        }
        return [c, d, e, f]
    }
    function j(a, b, c, d, e, f) {
        return p(q(p(p(b, a), p(d, f)), e), c)
    }
    function k(a, b, c, d, e, f, g) {
        return j(b & c | ~b & d, a, b, e, f, g)
    }
    function l(a, b, c, d, e, f, g) {
        return j(b & d | c & ~d, a, b, e, f, g)
    }
    function m(a, b, c, d, e, f, g) {
        return j(b ^ c ^ d, a, b, e, f, g)
    }
    function n(a, b, c, d, e, f, g) {
        return j(c ^ (b | ~d), a, b, e, f, g)
    }
    function p(a, b) {
        var c = (a & 65535) + (b & 65535)
          , d = (a >> 16) + (b >> 16) + (c >> 16);
        return d << 16 | c & 65535
    }
    function q(a, b) {
        return a << b | a >>> 32 - b
    }
    function r(a) {
        for (var b = [], d = (1 << c) - 1, e = 0; a.length * c > e; e += c)
            b[e >> 5] |= (a.charCodeAt(e / c) & d) << e % 32;
        return b
    }
    function t(b) {
        for (var c = a ? "0123456789ABCDEF" : "0123456789abcdef", d = "", e = 0; b.length * 4 > e; e++)
            d += c.charAt(b[e >> 2] >> e % 4 * 8 + 4 & 15) + c.charAt(b[e >> 2] >> e % 4 * 8 & 15);
        return d
    }
    var a = 0
      , c = 8
      , xa = "a12247ffc2d9"
      , xc = xa + xl;
    return t(i(r(xc), xc.length * c))
}

d9516233

正好你开咯这样的帖

weiyu

大佬，你这个其他都没有问题，我测试过了，但是唯独base64里面的这个: 706b387aa6041714698124e1103d4573 是会变的，并不是不变的，好像并不是固定的图片，希望你有时间看一下，他是怎么生成的，我不会，希望大佬解决。 我抓包好几次，手机端、电脑端，这个值都不一样。