Objective
An important part of this article:
1, grab bag to obtain QQ space or mailbox landing address, analysis parameters, user name, password, authentication code, GTK, and then number.
2, obtain each login needs of the verification code
3, user name, password, authentication code encryption get login password
4, HTTP analog landing to get cookies
This article the idea of the experiment can also be changed to another way, grab the landing of the acquisition of JS, with code operation JS to calculate passwords, GTK and so on to achieve landing.
Grab Bag
1, we visit the QQ space address http://i.qq.com/, open the website, we can see the landing of the dialog box, first we enter a wrong account and password, grabbed the address submitted.
2, enter the user name and password, we use the grab Bag tool to see 2 background request address, the following figure