破解百度翻译页面api参数加密

我们的目标 https://fanyi.baidu.com/      找到获取翻译的请求

是这个 https://fanyi.baidu.com/v2transapi

查看一下post提交的表单，是这个

其中的en表示英文，zh表示中文，query是我们输入的，transtype与semple_means_flag的内容是固定的。现在就是差sign和token。

首先查找sign，在全局搜索搜索sign。出现这样

可以发现里面有很多，找到正确的那个，像下面

我们发现这个可能就是我们要找的，点击进去。

可以看出来这是应该ajax请求，p里面的参数就是我们要找的参数。在5828和5831序号哪里点一下，然后打开断点。刷新页面，输入一个字母，就会和下面一样。

这样然后鼠标放在m上面悬停一下会出现一个跳转，点击可以跳转到他的函数哪里。跳转过后我们看到m函数是

     function n(r, o) {
         for (var t = 0; t < o.length - 2; t += 3) {
             var a = o.charAt(t + 2);
             a = a >= "a" ? a.charCodeAt(0) - 87 : Number(a),
             a = "+" === o.charAt(t + 1) ? r >>> a : r << a,
             r = "+" === o.charAt(t) ? r + a & 4294967295 : r ^ a
         }
         return r
     }
     function e(r) {
         var o = r.match(/[\uD800-\uDBFF][\uDC00-\uDFFF]/g);
         if (null === o) {
             var t = r.length;
             t > 30 && (r = "" + r.substr(0, 10) + r.substr(Math.floor(t / 2) - 5, 10) + r.substr(-10, 10))
         } else {
             for (var e = r.split(/[\uD800-\uDBFF][\uDC00-\uDFFF]/), C = 0, h = e.length, f = []; h > C; C++)
                 "" !== e[C] && f.push.apply(f, a(e[C].split(""))),
                 C !== h - 1 && f.push(o[C]);
             var g = f.length;
             g > 30 && (r = f.slice(0, 10).join("") + f.slice(Math.floor(g / 2) - 5, Math.floor(g / 2) + 5).join("") + f.slice(-10).join(""))
         }
         var u = void 0
           , l = "" + String.fromCharCode(103) + String.fromCharCode(116) + String.fromCharCode(107);
         u = null !== i ? i : (i = window[l] || "") || "";
         for (var d = u.split("."), m = Number(d[0]) || 0, s = Number(d[1]) || 0, S = [], c = 0, v = 0; v < r.length; v++) {
             var A = r.charCodeAt(v);
             128 > A ? S[c++] = A : (2048 > A ? S[c++] = A >> 6 | 192 : (55296 === (64512 & A) && v + 1 < r.length && 56320 === (64512 & r.charCodeAt(v + 1)) ? (A = 65536 + ((1023 & A) << 10) + (1023 & r.charCodeAt(++v)),
             S[c++] = A >> 18 | 240,
             S[c++] = A >> 12 & 63 | 128) : S[c++] = A >> 12 | 224,
             S[c++] = A >> 6 & 63 | 128),
             S[c++] = 63 & A | 128)
         }
         for (var p = m, F = "" + String.fromCharCode(43) + String.fromCharCode(45) + String.fromCharCode(97) + ("" + String.fromCharCode(94) + String.fromCharCode(43) + String.fromCharCode(54)), D = "" + String.fromCharCode(43) + String.fromCharCode(45) + String.fromCharCode(51) + ("" + String.fromCharCode(94) + String.fromCharCode(43) + String.fromCharCode(98)) + ("" + String.fromCharCode(43) + String.fromCharCode(45) + String.fromCharCode(102)), b = 0; b < S.length; b++)
             p += S[b],
             p = n(p, F);
         return p = n(p, D),
         p ^= s,
         0 > p && (p = (2147483647 & p) + 2147483648),
         p %= 1e6,
         p.toString() + "." + (p ^ m)
     }

这是sign的加密函数，我们可以发现传的值就是我们在输入框输入的值。

把这些保存在一个.js的文件保持起来。里面的i = window[l] 这个window对象是浏览器才有的，如果我们使用python的js2py或者execjs会报错

我们查看到这个值是320305.131321201

var u = void 0
     , l = "" + String.fromCharCode(103) + String.fromCharCode(116) + String.fromCharCode(107);
      u = null !== i ? i : (i = window[l] || "") || "";
修改为
var u = void 0, i = null;
u = null !== i ? i : (i = "320305.131321201" || "") || "";

这样执行就不会出错

接下来还差token值了，我们搜索token发现如下

发现就在第一个，点进去

就在请求的html里面。现在需要的参数都找到了。

 import requests
 import js2py
 import re

 class BaiDuTranslateAPI(object):
     headers = {
         'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36'
     }
     def __init__(self):
         super(BaiDuTranslateAPI).__init__()
         self.GetReady()
     def GetReady(self):
         url_index = 'https://www.baidu.com'
         self.session = requests.session()
         self.session.get(url=url_index, headers=self.headers)
         self.headers['Referer'] = url_index
         url_html = 'https://fanyi.baidu.com/translate?aldtype=16047&query=&keyfrom=baidu&smartresult=dict&lang=auto2zh'
         html = self.session.get(url=url_html, headers=self.headers)
         comm = re.compile('token: \'(\w+)\'')
         self.token = comm.search(html.text).group(1)
         self.headers['Referer'] = url_html

     def Get_Js(self):
         with open(r'D:\vim\hello_data(1)\panyi.js', 'r', encoding='utf-8') as f:
             return f.read()
     def Translate(self,file):
         files = False
         file = str(file)
         for i in file:
             if '\u4e00' <= i.encode().decode('utf-8') <= '\u9fff':
                 files = True
             else:
                 files = False
             if files == False:
                 break
         return files

     def BaiDu(self,file):
         run_js = js2py.EvalJs({})
         run_js.execute(self.Get_Js())
         sign = run_js.e(file)
         url_api = 'https://fanyi.baidu.com/v2transapi'
         is_it = self.Translate(file)
         if is_it:
             iia = 'zh'
             iib = 'en'
         else:
             iia = 'en'
             iib = 'zh'
         data = {
             'from': iia,
             'to': iib,
             'query': file,
             'transtype': 'realtime',
             'simple_means_flag': '',
             'sign': sign,
             'token': self.token
         }
         html = self.session.post(url=url_api, headers=self.headers, data=data).json()
         return (html['trans_result']['data'][0]['dst'])
     def Start(self,file='i'):
         try:
             int(file)
             return file
         except:
             # self.zhunbei()
             files = self.BaiDu(file)
             return files

 if __name__ == '__main__':
     a = BaiDuTranslateAPI()
     print(a.Start('i'))
     print(a.Start('love'))
     print(a.Start('you'))

运行结果