223 lines
8.3 KiB
Python
223 lines
8.3 KiB
Python
#!/usr/bin/env python3
|
||
# -*- coding: utf-8 -*-
|
||
"""
|
||
mitmproxy Cookie捕获脚本
|
||
自动捕获百家号账号的Cookie并保存到JSON文件
|
||
|
||
使用方法：
|
||
mitmdump -s mitmproxy_capture.py -p 8888
|
||
|
||
在浏览器中设置代理：
|
||
HTTP代理: 127.0.0.1:8888
|
||
HTTPS代理: 127.0.0.1:8888
|
||
|
||
然后访问百家号页面，脚本会自动捕获Cookie
|
||
"""
|
||
|
||
import json
|
||
import os
|
||
from datetime import datetime
|
||
from mitmproxy import http
|
||
import requests
|
||
|
||
|
||
class BaijiahaoCapture:
|
||
"""百家号Cookie捕获器"""
|
||
|
||
def __init__(self):
|
||
self.script_dir = os.path.dirname(os.path.abspath(__file__))
|
||
self.output_file = os.path.join(self.script_dir, "captured_account_cookies.json")
|
||
self.captured_cookies = self.load_existing_cookies()
|
||
self.base_url = "https://baijiahao.baidu.com"
|
||
self.processed_cookies = set() # 记录已处理的Cookie，避免重复
|
||
|
||
print("\n" + "="*70)
|
||
print("百家号Cookie捕获脚本已启动")
|
||
print("="*70)
|
||
print(f"监听端口: 8888")
|
||
print(f"目标域名: baijiahao.baidu.com")
|
||
print(f"保存路径: {self.output_file}")
|
||
print("\n提示：")
|
||
print(" - 如果在浏览器中使用，请手动设置代理")
|
||
print(" - 如果在小火花客户端中使用，请设置系统代理")
|
||
print(" - Windows系统代理: 127.0.0.1:8888")
|
||
print("="*70 + "\n")
|
||
|
||
def load_existing_cookies(self):
|
||
"""加载已有的Cookie数据"""
|
||
try:
|
||
if os.path.exists(self.output_file):
|
||
with open(self.output_file, 'r', encoding='utf-8') as f:
|
||
return json.load(f)
|
||
except Exception as e:
|
||
print(f"[!] 加载已有Cookie失败: {e}")
|
||
return {}
|
||
|
||
def save_cookies(self):
|
||
"""保存Cookie到文件"""
|
||
try:
|
||
with open(self.output_file, 'w', encoding='utf-8') as f:
|
||
json.dump(self.captured_cookies, f, ensure_ascii=False, indent=2)
|
||
print(f"[OK] Cookie已保存到: {self.output_file}")
|
||
return True
|
||
except Exception as e:
|
||
print(f"[X] 保存Cookie失败: {e}")
|
||
return False
|
||
|
||
def parse_cookies(self, cookie_header: str) -> dict:
|
||
"""解析Cookie字符串为字典"""
|
||
cookies = {}
|
||
if not cookie_header:
|
||
return cookies
|
||
|
||
for item in cookie_header.split(';'):
|
||
item = item.strip()
|
||
if '=' in item:
|
||
name, value = item.split('=', 1)
|
||
cookies[name.strip()] = value.strip()
|
||
|
||
return cookies
|
||
|
||
def get_account_info(self, cookies: dict) -> dict | None:
|
||
"""调用百家号API获取账号信息"""
|
||
try:
|
||
# 获取token
|
||
token = cookies.get('bjhStoken') or cookies.get('devStoken')
|
||
if not token:
|
||
print(" [!] Cookie中未找到 bjhStoken 或 devStoken")
|
||
return None
|
||
|
||
# 构建请求
|
||
api_url = f"{self.base_url}/builder/app/appinfo"
|
||
headers = {
|
||
'Accept': 'application/json, text/plain, */*',
|
||
'Accept-Language': 'zh-CN',
|
||
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
|
||
'Referer': f'{self.base_url}/builder/rc/incomecenter',
|
||
'token': token,
|
||
}
|
||
|
||
# 构建Cookie字符串
|
||
cookie_str = '; '.join([f"{k}={v}" for k, v in cookies.items()])
|
||
headers['Cookie'] = cookie_str
|
||
|
||
# 创建一个新的session，不使用代理
|
||
import requests
|
||
session = requests.Session()
|
||
session.trust_env = False # 不使用系统代理
|
||
|
||
# 发送请求（直连，不走代理）
|
||
response = session.get(api_url, headers=headers, timeout=30, proxies={})
|
||
|
||
if response.status_code == 200:
|
||
data = response.json()
|
||
if data.get('errno') == 0:
|
||
return data.get('data', {})
|
||
|
||
return None
|
||
|
||
except Exception as e:
|
||
print(f" [!] 获取账号信息失败: {e}")
|
||
return None
|
||
|
||
def request(self, flow: http.HTTPFlow) -> None:
|
||
"""处理HTTP请求"""
|
||
# 调试：显示所有请求
|
||
print(f"[ALL] {flow.request.method} {flow.request.pretty_url[:100]}")
|
||
|
||
# 只处理百家号域名的请求
|
||
if "baijiahao.baidu.com" not in flow.request.pretty_host:
|
||
return
|
||
|
||
# 调试：显示所有百家号请求
|
||
print(f"[DEBUG] 检测到百家号请求: {flow.request.pretty_url}")
|
||
|
||
# 获取Cookie
|
||
cookie_header = flow.request.headers.get("Cookie", "")
|
||
if not cookie_header:
|
||
print("[DEBUG] 请求中没有Cookie")
|
||
return
|
||
|
||
# 解析Cookie
|
||
cookies = self.parse_cookies(cookie_header)
|
||
print(f"[DEBUG] Cookie数量: {len(cookies)}")
|
||
|
||
# 检查是否包含关键Cookie（bjhStoken或devStoken）
|
||
if 'bjhStoken' not in cookies and 'devStoken' not in cookies:
|
||
print("[DEBUG] 缺少关键Cookie: bjhStoken或devStoken")
|
||
return
|
||
|
||
# 检查是否包含BDUSS（百度登录凭证）
|
||
if 'BDUSS' not in cookies:
|
||
print("[DEBUG] 缺少BDUSS登录凭证")
|
||
return
|
||
|
||
# 生成Cookie指纹，避免重复处理
|
||
cookie_fingerprint = cookies.get('BDUSS', '')[:20] # 使用BDUSS前20位作为指纹
|
||
if cookie_fingerprint in self.processed_cookies:
|
||
print(f"[DEBUG] Cookie已处理过，跳过 (指纹: {cookie_fingerprint})")
|
||
return
|
||
|
||
print("\n" + "-"*70)
|
||
print(f"[√] 捕获到Cookie")
|
||
print(f" URL: {flow.request.pretty_url}")
|
||
print(f" Cookie数量: {len(cookies)}")
|
||
print(f" 来源: {flow.request.headers.get('User-Agent', 'Unknown')[:50]}...")
|
||
|
||
# 获取账号信息
|
||
print(" 正在获取账号信息...")
|
||
account_info = self.get_account_info(cookies)
|
||
|
||
if account_info:
|
||
user_info = account_info.get('user', {})
|
||
account_id = user_info.get('name', '') or user_info.get('username', '')
|
||
|
||
if not account_id:
|
||
print(" [!] 无法获取账号昵称，跳过保存")
|
||
return
|
||
|
||
# 标记为已处理
|
||
self.processed_cookies.add(cookie_fingerprint)
|
||
|
||
# 准备保存的数据
|
||
account_data = {
|
||
'cookies': cookies,
|
||
'capture_time': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
|
||
'capture_domain': 'baijiahao.baidu.com',
|
||
'nick': user_info.get('name', ''),
|
||
'username': user_info.get('username', ''),
|
||
'app_id': str(user_info.get('shoubai_c_appid', '')),
|
||
'user_id': user_info.get('userid', 0),
|
||
'level': user_info.get('status_cn', ''),
|
||
'domain': user_info.get('domain', ''),
|
||
'wishes': user_info.get('wishes', ''),
|
||
'media_type': user_info.get('media_type', ''),
|
||
}
|
||
|
||
# 保存到字典
|
||
self.captured_cookies[account_id] = account_data
|
||
|
||
# 保存到文件
|
||
self.save_cookies()
|
||
|
||
print(f"\n [OK] 账号信息已保存")
|
||
print(f" 账号ID: {account_id}")
|
||
print(f" 昵称: {account_data['nick']}")
|
||
print(f" 用户名: {account_data['username']}")
|
||
print(f" App ID: {account_data['app_id']}")
|
||
print(f" 等级: {account_data['level']}")
|
||
print(f" 领域: {account_data['domain']}")
|
||
else:
|
||
print(" [!] 获取账号信息失败，Cookie未保存")
|
||
print(" 原因：可能是Cookie已失效或网络问题")
|
||
print(" 建议：")
|
||
print(" 1. 确认已在小火花客户端中成功登录账号")
|
||
print(" 2. 刷新页面或重新切换账号")
|
||
print(" 3. 检查网络连接是否正常")
|
||
|
||
print("-"*70 + "\n")
|
||
|
||
|
||
# 创建捕获器实例
|
||
addons = [BaijiahaoCapture()]
|