Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

账号密码等信息都加密的情况下可以用吗 #12

Open
Lotfocus opened this issue Jun 12, 2020 · 1 comment
Open

账号密码等信息都加密的情况下可以用吗 #12

Lotfocus opened this issue Jun 12, 2020 · 1 comment

Comments

@Lotfocus
Copy link

大佬,像下面这种情况,账号密码等信息都通过jsencrypt进行加密,可以用吗。
var json = {"name":name, "pwd":pwd, "rand":rand, "verify":verify, "auto_sign":auto};
var crypt = new JSEncrypt();
crypt.setKey(pubkey);
var cipher = crypt.encrypt(JSON.stringify(json));
在burp里面测试了下,模拟的字符串加密后数据和网站加密后的数据不一致。

@c0ny1
Copy link
Owner

c0ny1 commented Jun 16, 2020

应该是可以的,phantomjs执行的使用的函数和浏览器可能不太一样。最好在phantomjs打印下每一步输出的值和浏览器执行对比下。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants