微信扫码自动群发消息给所有人技术分析 之通过https请求获取微信网页版登录二维码图

来源:互联网 发布:windows shift后门 编辑:程序博客网 时间:2024/04/29 13:54

功能:别人一扫码登陆,就会发一条指定消息给他的所有好友。


1.通过https请求获取微信网页版登录二维码图


发送

GET https://login.weixin.qq.com/qrcode/QfqHXCUuYA== HTTP/1.1
Host: login.weixin.qq.com
Connection: keep-alive
Cache-Control: max-age=0
Accept: image/webp,image/*,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Referer: https://wx.qq.com/?&lang=zh_CN
Accept-Encoding: gzip, deflate, sdch
Accept-Language: zh-CN,zh;q=0.8
Cookie: RK=iBvX37j6Zy; pgv_pvi=4180714496; o_cookie=345139427; pgv_pvid=9480612577; pac_uid=0_9e6b7eaee72b5; ptcz=ffe266fab848f73816cd014804174c9bfc4ab9b000ddc5d1cd9284ca430d543d; pt2gguin=o0345139427






返回
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: image/jpeg
Content-Length: 38173


这里是二维码图片数据

结果:通过https请求获取微信网页版登录二维码图成功。


2.获得所有好友及群组列表

扫描后显示下图,在手机上点登录。此时显示的是聊天列表。再点通信录列表,会得到所有好友及群组列表。这个只可以在登录后获得。



3.向一个好友发送消息,监听发送请求

我发送的信息是hellochenhao0568


发送

POST https://wx.qq.com/cgi-bin/mmwebwx-bin/webwxsendmsg?lang=zh_CN&pass_ticket=fs5TQVxUZ3rWYChIsys%252Bq4xlIfJbCrFtQAz58U8uuCbqqIcd2QKLeZ9E5r6IQYpo HTTP/1.1
Host: wx.qq.com
Connection: keep-alive
Content-Length: 431
Accept: application/json, text/plain, */*
Origin: https://wx.qq.com
User-Agent: Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Content-Type: application/json;charset=UTF-8
Referer: https://wx.qq.com/?&lang=zh_CN
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8
Cookie: RK=iBvX37j6Zy; pgv_pvi=4180714496; webwxuvid=b106f5212a56855e80e97e47f262685b00e5962bc35a97b2f825b8b5500c946fecf88610be7b0312bb5c0444b5af4d64; o_cookie=345139427; pgv_pvid=9480612577; pac_uid=0_9e6b7eaee72b5; ptcz=ffe266fab848f73816cd014804174c9bfc4ab9b000ddc5d1cd9284ca430d543d; pt2gguin=o0345139427; refreshTimes=3; MM_WX_NOTIFY_STATE=1; MM_WX_SOUND_STATE=1; mm_lang=zh_CN; webwx_auth_ticket=CIsBEMy3oIUHGoABdMC0LPRp2XtYfNN1LGlhAYimYzEKTEu+LKqG7egkvIKVZS1IA3/8T+nDj44RuFZJWFVLjvaVtUMcsqo6CRNkhouZyWjqy1XD5eBbWSpahDw7ziCNGtHE+pcdt4C63KGSF4mvUgZ9NAjIeH4+oZxAg48X3R9T528+JNTHlXkGH2Q=; login_frequency=1; last_wxuin=1803673302; wxloadtime=1505362394_expired; wxpluginkey=1505349001; wxuin=1803673302; wxsid=I3m7AQtf1JQyfvj4; webwx_data_ticket=gScyywc7PvoKzu/Mn4qeKtEb


{"BaseRequest":{"Uin":1803673302,"Sid":"I3m7AQtf1JQyfvj4","Skey":"@crypt_ff14e4db_5709693a78c642746f5dd8564684a0af","DeviceID":"e732673053007638"},"Msg":{"Type":1,"Content":"hellochenhao0568","FromUserName":"@e543b6b81bf203b0f23709762bb0d3a41d57d3393eef8f537988cf546bb9f0aa","ToUserName":"@2bd83f2a300fbad64eff2005c4931e75b814f7c404c69d44d053fc9636357d7e","LocalID":"15053631993630155","ClientMsgId":"15053631993630155"},"Scene":0}


返回

HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: text/plain
Content-Length: 112


{
"BaseResponse": {
"Ret": 0,
"ErrMsg": ""
}
,
"MsgID": "2900954074062329656",
"LocalID": "15053631993630155"
}



4.向所有好友及群组发送消息

循环发送



阅读全文
2 0
原创粉丝点击