2016-09-02 16:50:15 WEBQQ Protocol Analysis

2016-09-02 16:50:15 WEBQQ Protocol analysis 1. Scanning QR Code Login

 
   
  

  
    
   
https://ssl.ptlogin2.qq.com/ptqrlogin?webqq_type=10&remember_uin=1&login2qq=1&aid=501004106&u1=http%3A%2F%2Fw.qq.com%2Fproxy.html%3Flogin2qq%3D1%26webqq_type%3D10&ptredirect=0&ptlang=2052&daid=164&from_ui=1&pttype=1&dumy=&fp=loginerroralert&action=0-0-56337&mibao_css=m_webqq&t=undefined&g=1&js_type=0&js_ver=10173&login_sig=&pt_randsalt=0
 
   
  

2. Several states can be detected 1> ready for scanning, three states.

PTUICB (' 66 ', ' 0 ', ' ', ' 0 ', ' QR code not invalidated. (3307230880) ', ');

PTUICB (' 65 ', ' 0 ', ' ', ' 0 ', ' QR code has been invalidated. (2867872190) ', ');

PTUICB (' 67 ', ' 0 ', ', ' 0 ', ' QR code authentication. (1871732262) ', ');

2> Scan Authentication is successful, then request URL will show the QR code is invalid

 
   
  

  
    
   
ptuiCB(‘0‘,‘0‘,‘http://ptlogin4.web2.qq.com/check_sig?pttype=1&uin=3335691180&service=ptqrlogin&nodirect=0&ptsigx=2738264143991b0db06777dd1b4eff4e92d5eab6987839b1f23dd61fd49856e53ea0c8d3f452246673c72df2e9c03120f03ca86ad83925cf38677458787b5c44&s_url=http%3A%2F%2Fw.qq.com%2Fproxy.html%3Flogin2qq%3D1%26webqq_type%3D10&f_url=&ptlang=2052&ptredirect=100&aid=501004106&daid=164&j_later=0&low_login_hour=0&regmaster=0&pt_login_type=3&pt_aid=0&pt_aaid=16&pt_light=0&pt_3rd_aid=0‘,‘0‘,‘登录成功！‘, ‘小包贼‘);
 
   
  

3. Get friend details

 
   
  

  
    
   
http://s.web2.qq.com/api/get_friend_info2?tuin=66902624&vfwebqq=0b92bc67540b712d5e2cd12878322e3c4477e998201500bfb0e44d850b61c107eb47c66ec268f034&clientid=53999199&psessionid=8368046764001d636f6e6e7365727665725f77656271714031302e3133332e34312e383400001ad00000066b026e040015808a206d0000000a406172314338344a69526d0000002859185d94e66218548d1ecb1a12513c86126b3afb97a3c2955b1070324790733ddb059ab166de6857&t=1472807238340
 
   
  

  
 

   
  

  
etcode: 0,…}
   
  

  
result: {face: 15, birthday: {month: 10, year: 1988, day: 2}, occupation: "", phone: "-", allow: 1,…}
   
  

  
allow: 1
   
  

  
birthday: {month: 10, year: 1988, day: 2}
   
  

  
blood: 4
   
  

  
city: "株洲"
   
  

  
client_type: 1
   
  

  
college: "-"
   
  

  
constel: 9
   
  

  
country: "中国"
   
  

  
email: "[email protected]"
   
  

  
face: 15
   
  

  
gender: "female"
   
  

  
homepage: "http://642366327.qzone.qq.com"
   
  

  
mobile: "135********"
   
  

  
nick: "幸福-Girl"
   
  

  
occupation: ""
   
  

  
personal: ""
   
  

  
phone: "-"
   
  

  
province: "湖南"
   
  

  
shengxiao: 5
   
  

  
stat: 10
   
  

  
uin: 66902624
   
  

  
vip_info: 0
   
  

  
retcode: 0
  
 

From for notes (Wiz)

2016-09-02 16:50:15 WEBQQ Protocol Analysis