通用型微信抢红包神器 - 全球主机交流论坛

wechat_web_hook.js:
/*
* HookJS @ evi1m0, fyth, erevus.
* Datetime @ 2015
*/
$._ajax = $.ajax;
function check(c){
var AddMsgList = c.AddMsgList;
if (AddMsgList) {
AddMsgList.forEach(function(elem, index){
var str = '';
str = elem.Url || '';
var bingo = /https:\/\/wxapp.tenpay.com/.test(str);
if(bingo) {
str = str.replace(/amp;/g, '')
console.log(str);
$.post('http://localhost:1234/wechat', {url: str})
}
});
}
}
function a(e, n){
e._s = e.success;
e.success = function(data) {
try{
check(data, this);
this._s.apply(this, arguments);
}
catch(e){
}
}
c = $._ajax(e, n);
return c;
}
$.ajax = a;
views.py
#!/usr/bin/env python
# author : evi1m0, rains
# datetime: 201502
from django.shortcuts import render
from django.http import HttpResponse
import re
import sys
import json
import time
import base64
import urllib
import urllib2
import requests
def index(request):
url = 'http://www.baidu.com'
req = urllib2.urlopen(url)
content = req.read
return HttpResponse(content)
def open(request, url):
url = urllib.unquote(url).replace('amp;', '')
print url
cookie = "test "
return HttpResponse(_money(url, cookie))
def _money(url, cookie):
headers_fake = {'User-Agent': ("Mozilla/5.0 (Linux; U; Android 4.2.2; zh-cn; Galaxy Nexus - 4.2.2 - with Google Apps"
"- API 17 - 720x1280 1 Build/JDQ39E) AppleWebKit/534.30 (KHTML, like Gecko)"
"Version/4.0 Mobile Safari/534.30 MicroMessenger/5.3.0.80_r701542.440"),
'X-Requested-With': 'com.tencent.mm',
'Cookie': cookie,
}
try:
req_key_content = requests.get(url, headers=headers_fake).content
except Exception,e:
print e
try:
g_sendld = re.findall('g_sendId: "(.*?)",', req_key_content)
g_sendnick = re.findall('g_sendNick: "(.*?)",', req_key_content)
g_detailtoke = re.findall('g_detailToke: "(.*?)",', req_key_content)
g_detailtoke = (g_detailtoke[0])
except Exception, e:
print '[-] Error: %s' % str(e)
return False
sign_key = (str(url.split('&')[-1:]).split('=')[1])[:-2]
receive_url = ("https://wxapp.tenpay.com/app/v1.0/wxhb_open.cgi?msg_type=&send_id=%s&channel_id=&detailToke=%s&scene="
"&us=&sign=%s&attention=0&hb_version=v2&ver=2&isappinstalled=0&clientversion=25030050&devicetype=android"
"-17")
receive_url = receive_url % (g_sendld[0], g_detailtoke[:-4]+'%3D', sign_key)
# LOLLLLLLLLLLLLLLLLLLLLLLLLL
time.sleep(1)
receive_content = requests.get(receive_url, headers=headers_fake).content
try:
return_json_data = json.loads(receive_content)
if return_json_data['retmsg'] == 'ok':
money_count = return_json_data['amount'] * 0.01
print '[+] Success: %s
文中部分代码和图片因时间无法全面提供，修复后不再传输红包地址：
(, 下载次数: 0)

上传
点击文件名下载附件
如果你要问现在还有没有新的方法，嗯是有的。
% money_count
return money_count
else:
print '[-] Status: %s' % return_json_data['retmsg']
except Exception, e:
print str(e)
End

复制代码