Dr.com -- encryption (webpage) and dr.com Encryption

Dr.com -- encryption (webpage) and dr.com Encryption

Dr.com is a broadband billing system developed by city hotspot companies. It can control network management, authentication, billing, and speed limit ...... Many colleges and enterprises use this function.

I am very interested in drcom (I think everyone understands the reasons ...)

Drcom login (authentication) methods are different. Here we will talk about the web terminal login encryption methods.

Before that, I checked a lot of materials and used them as follows:

Log on to Dr.com: http://blog.csdn.net/cugbabybear/article/details/34106537 with python

Nanjing University of Posts and Telecommunications dedicated to the Drcom login software: https://git.oschina.net/labrusca/NUPT_Drcom_loginer

The https://git.oschina.net/neophack/drcom that is also searched from the coder cloud

Bjut campus network automatic login: http://blog.csdn.net/x_iya/article/details/52752860

A piece of python code:

Def calpwd (init_pwd): # use md5 for password encryption pid = '1' calg = '000000' tmp = pid + init_pwd + calg pwd = md5 (tmp ). hexdigest () + calg + pid return pwd

Call:

Def login (usr, passwd, url = school_url, force = 0 ): data ={}# initialize the form data ["DDDDD"] = usr data ["upass"] = calpwd (passwd) # password conversion data ["R1"] = "0" data ["R2"] = "1" data ["para"] = "00" data ["0 MKKey"] = "123456" data = urlencode (data) # Encoding

From the above we can clearly see that the encryption method is actually

MD5 (pid + password + calg) + calg + pid
// Both pid and calg are constants, but the two values may be different in different regions.

If the web-side data submission method is Post, you can capture a package to obtain the useful information.

Mobile phone I use directly (no computer is available)

The software I use here is

No Root Packet Capture: Packet Capture

A piece of data captured:

// Account 1234567890 used // password 567890 DDDDD = 12345678 & upass = Success & R1 = 0 & R2 = 1 & para = 00 & 0 MKKey = 123456 & R6 = 1 // from the above data, we can clearly see that // DDDDD is the account // upass is the password // (that is, 256789012345678 after md5 encryption value plus 123456782) // confirm pid = 2 calg = 12345678

In this way, the submission method is obtained, and the encryption method is obtained. If the account exists and the password has certain rules, the Code becomes ez (~~ ^^ )〜)...