破解反爬虫策略 /_guard/auto.js（二）实战

这次我们用上篇文章讲到的方法来真正破解一下反爬虫策略，这两个案例是两个不同的网站，一个用的是 /_guard/auto.js，另一个用的是/_guard/delay_jump.js。经过解析发现这两个网站用的反爬虫策略基本是一模一样，只不过在js混淆和生成guardret的算法上有很细微的差别，由此看来，以后请求其他网站，如果也是这种不返回正确的数据而是返回了一个js，那么也可以直接套用下面的代码做一些细微的调整即可。

案例一

js内容

var _0xod4 = 'v1';
var _0x15af65 = _0x2155;
(function (_0x2e67e3, comparisonValue, stringArrayFunctionName, rightNum, checkVersion, shift, _0x465098) {
    return _0x2e67e3 = _0x2e67e3 >> 0x1, shift = 'hs', _0x465098 = 'hs', function (stringArrayFunction, comparisonValue, _0x27a225, temp, _0x3316f1) {
        var _0x160215 = _0x2155;
        temp = 'tfi', shift = temp + shift, _0x3316f1 = 'up', _0x465098 += _0x3316f1, shift = _0x27a225(shift), _0x465098 = _0x27a225(_0x465098), _0x27a225 = 0x0;
        var stringArray = stringArrayFunction();
        while (!![] && --rightNum + comparisonValue) {
            try {
                temp = -parseInt(_0x160215(0x16c, '88G9')) / 0x1 + parseInt(_0x160215(0x14b, '4qz]')) / 0x2 + parseInt(_0x160215(0x133, '(9CA')) / 0x3 + -parseInt(_0x160215(0x196, 'qGDC')) / 0x4 + -parseInt(_0x160215(0x112, '2IOp')) / 0x5 + -parseInt(_0x160215(0x145, 'Uvtk')) / 0x6 * (-parseInt(_0x160215(0x13e, '(*tt')) / 0x7) + parseInt(_0x160215(0x116, '%mpD')) / 0x8 * (parseInt(_0x160215(0x176, '[gv0')) / 0x9);
            } catch (_0x2280d7) {
                temp = _0x27a225;
            } finally {
                _0x3316f1 = stringArray[shift]();
                if (_0x2e67e3 <= rightNum) _0x27a225 ? checkVersion ? temp = _0x3316f1 : checkVersion = _0x3316f1 : _0x27a225 = _0x3316f1; else {
                    if (_0x27a225 == checkVersion['replace'](/[gVLixNQYGUptydrelmb=]/g, '')) {
                        if (temp === comparisonValue) {
                            stringArray['un' + shift](_0x3316f1);
                            break;
                        }
                        stringArray[_0x465098](_0x3316f1);
                    }
                }
            }
        }
    }(stringArrayFunctionName, comparisonValue, function (_0x1980fb, _0x2f3155, c, _0x16e044, _0x44a646, _0x277563, _0x3364d6) {
        return _0x2f3155 = '\x73\x70\x6c\x69\x74', _0x1980fb = arguments[0x0], _0x1980fb = _0x1980fb[_0x2f3155](''), c = '\x72\x65\x76\x65\x72\x73\x65', _0x1980fb = _0x1980fb[c]('\x76'), _0x16e044 = '\x6a\x6f\x69\x6e', (0x161525, _0x1980fb[_0x16e044](''));
    });
}(0x17a, 0xaa70c, _0x582a, 0xbf), _0x582a) && (_0xod4 = 0xbf);
var oooo = 0xf23d4, ooe;

function _0x582a() {
    var _0x28bbb2 = (function () {
        return [_0xod4, 'ULgvmpG1dQYbexNlGitVelexLlry==', 'nCk8oCkxdG', 'dCoeySof', 'W5NcP8oXW6BcHW', 'vCkeq8kLWO0', 'W4ZdHmo2WPSpWRNcLmkMaYewfa', 'FSkBp8oWW5W', 'mSobmY7cJW', 'W7dcGSohW6hcUq'].concat((function () {
            return ['W4tcPmowWOK', 'W5VcK8omW4NcTq', 'd8obBmonxW', 'mWDdWPlcSsKNk10', 'oCo1tSkfCCkdywq1gqJdPa', 'DCoFgSoEW5K', 'emkjo8kRiq', 'W4BcJ8oYWOro', 'lmoWuSkKWPq', 'qSorrNtcVCoDjmkFW7vUxrm'].concat((function () {
                return ['WROQW67cK30', 'W7/cT8oYWOqx', 'iZy/wSoeoW', 'v8ojiCoqW70', 'W5hcUCoNW6u', 'n8oAA8osxG', 'gSkJamkLW5y', 'W7xcLmobWQuJ', 'sSkmtCkp', 'CZ7dMru'].concat((function () {
                    return ['rayg', 'ymoOWOFdK8oNWOfhW4hdSW', 'W4ZcSmoNWP4X', 'WRNcJGRcH1m', 'Dmo1WQNdSSki', 'qvVdNqe1', 'WR9hWOGdBa', 'vmkvbmorWPO', 's8khjmo5W55EedS', 'W48pW5iiW78'].concat((function () {
                        return ['v8oHemoYW4m', 'p8k+omkFW4u', 'WOagW5FcJxJdUG', 'bbBdOsNcPq', 'kt4nWRGvd20GWQG', 'gcmzWQmK', 'gSkjnHVdPW', 'Amo8aem', 'C8o4heRdMCoq', 'h8k+mq'].concat((function () {
                            return ['d8otB8khamkfm1maqW', 'lcicWQ4', 'W4PvWO3dKcVcPSoDlSozjI/dMW', 'fmoBWPzXWOi', 'e8o4W5tcLCkj', 'jCowW6HQjq', 'wZ3cGIBdGa', 'W5VcNCksWRXE', 'n8oZBSkFyq', 'W4dcS8oDWOH2W7K'].concat((function () {
                                return ['aSoFASojzgRcM8k0WRZcVmoVWPHXw0mx', 'xCoBFSk0Eq', 'b8oxtCkiW5PrEd4pW6bxW4qB', 'umkJjmoVW4W', 'cSo7W6ne', 'W43cLSkYWPPd', 'W5BcPSoBWOTP', 'bCocq8keqa', 'lImHuCoj', 'aSo4DehcVSolW7LTWQ8BW4dcSW'].concat((function () {
                                    return ['m8oIDSkczq', 'v8kCmSohsutcRCk5W6K', 'WOa8WRpcTSkj', 'qmocaL/dGSomW4ddLCoW', 'm8oZuCkpWOC', 'W7xcVSkgWPz/', 'WQZcRCocpCkn', 'dSk3huNcGCogzeywW5lcJxy', 'W44QW6yKW4e', 'kmohkapcN8odiSkU'].concat((function () {
                                        return ['A8oKW4BdJ8oH', 'WOtcRSkNW6zW', 'hmkQivdcSmohA1m', 'fmoyF8kXWPW', 'fchdGYpcIa', 'jJKjWQW', 'WPb8WQaeua', 'pSoSW5/cRavFWO54WPqwrJW', 'z0quWO3cJa', 'WQxcL8o0imkhibO'].concat((function () {
                                            return ['dCoeDmoFza', 'W7pdGCkSdMq', 'uI3cMJ7dHa', 'W5FcR8o2WPOw', 'iMdcGuJdLSotW5esW4L2WPXlCW', 'bSoOE8k7sW', 'f8kpedhdQSkdlW', 'wSkjdmovWOa', 'sWypW7KtW7HOWQVdRb43', 'rSobWPVdT8knbchcSwpcRuu'].concat((function () {
                                                return ['ady9gCkR', 'FgDLdSkazrxdUCkQW6LXo3C', 'o8k1e8k2pW', 'WONcM8kvW5LoW6lcOmkn', 'nCocWR91WP8', 'W4/cVSosWP1bW77dUmoPW5lcGG', 'hauWFSog', 'w8oAW6xdJCoT', 'vqxcNrBdSG', 'W7ZcRConWReB'].concat((function () {
                                                    return ['W5mNW6yoW5/cJIrw', 'a8ouW77cLSkn', 'W7X7WRiRutBdPL7dGa', 'xmoxjfJdMG', 'W6P6WRG9qY3dVvJdKgar', 'W6D8WP4xvq', 'hSkpkGxdIq', 'cmoBy8k9WRm', 'W4qLFSk3nCkAW5FdI8oLWPyBW4HwWOlcGdpcSZpcKCk8B8oUa8kWF8kyWPldOCkIy2rLnYO', 'x8olW7VdIG'].concat((function () {
                                                        return ['WRJcOY7cLuK', 'A8o4avK', 'W6pcSCkMWP1x', 'WPvVWQqjx8kP', 'WPrdWPD/aa', 'vSolWOddLCkkfq', 'W4/cM8o8WPzx', 'FCoHWQ3dHmkT', 'W7TMq8oUvSoFWPVcKCkEWRK', 'W4BcO8kcWRjc'].concat((function () {
                                                            return ['W718umoZzW', 'WQOfW7BcIfi', 'W4X/WPxdIv4', 'ASopBCkWv0/dTmk/W44', 'WRmYW73cRNi', 'W63dR8kufKu', 'h8k5iSk9bt4NWP/dOSot', 'W5VcSSoXWR0NWORdMCkX', 'xmofW5RdKmoRWPNdVSkb', 'W544W7udW5i'].concat((function () {
                                                                return ['BmorzCk8rq', 'lmoAfapcGSoEnCk5WQy', 'BmovE8k8x0e', 'wmorWONdImoX', 'rCkkba', 't8ofWPJdLCoNWOfrW67dIq', 'W5/cPSoFWOz2', 'W5WJW4m5W54', 'W4r/WO4kvq', 'kmopCSo9wq'].concat((function () {
                                                                    return ['WO16WRvFWP3dNN50pq8HWQnp', 'gIWVhCkx', 'wuldIaia', 'W4jhqCoWyW', 'i8kUW5ZcLmk4W4mlW5JdSx/dK8oclW', 'W7ldKmkshL4', 'W5DAWOZdOI0', 'yY/dNXNcRq', 'umkAtCoIvvNcP8ka', 'W5XNWPZdMLu'].concat((function () {
                                                                        return ['lH8+zCo8', 'pHBdVctcMa', 'gJestmoc', 'jr3dMY/cQa', 'WOa5WPFcLSkW', 'ah7dU2JcPtGMW7KMW7ahWP5J', 'pCo6iJJcVW', 'W43cOCosW6BcRa', 'W5T4WQhdR3G', 'W4S6W6qmW44'].concat((function () {
                                                                            return ['g8oLxCk6qq', 'W6XTWRuRrYVdOvtdIG', 'z8kcdSoqWRm', 'c8oiBSopC3C', 'WOreWPfYhxC', 'W4VcSmkrWQ9W', 'b8kvhdhdSCkD', 'qCoHmCoqW7e', 'qCkwsCkBWPJdVCoSW6ZdMmou', 'WP0jWQtcKmkbWQFcTHRcLa'].concat((function () {
                                                                                return ['h8kKpmkUW74', 'emk+imkUmJGSWPq', 'WO1fWPOdFq', 'WPD3WQabrq', 'pmkRkaxdJW', 'omkHW5tdPGWrW5jgW6GVea', 'Bx/dSG4', 'W4/dI2ZdJs/cJfWaW7epd8kbAq', 'FrmpW6yV', 'qCkxjmo9W55F'].concat((function () {
                                                                                    return ['pSobfrm', 'cCoEaqpcPa', 'd8oQtmkzwq', 'Bf0BWPBcMW'];
                                                                                }()));
                                                                            }()));
                                                                        }()));
                                                                    }()));
                                                                }()));
                                                            }()));
                                                        }()));
                                                    }()));
                                                }()));
                                            }()));
                                        }()));
                                    }()));
                                }()));
                            }()));
                        }()));
                    }()));
                }()));
            }()));
        }()));
    }());
    _0x582a = function () {
        return _0x28bbb2;
    };
    return _0x582a();
};(function () {
    var _0x347e96 = _0x2155, OtvxHQ = {
            'LRvAS': 'undefined', 'adWoW': function (_0x1345e8, _0x25be49) {
                return _0x1345e8 === _0x25be49;
            }, 'olxhc': 'object', 'XfMjK': _0x347e96(0x15e, 'c]oM'), 'kvVRH': function (_0x3fe49b, _0x51352a) {
                return _0x3fe49b === _0x51352a;
            }
        },
        that = typeof window !== OtvxHQ['LRvAS'] ? window : OtvxHQ[_0x347e96(0x194, 'Q^Rn')](typeof process, OtvxHQ[_0x347e96(0x199, '[gv0')]) && typeof require === OtvxHQ[_0x347e96(0x1bb, '88G9')] && OtvxHQ[_0x347e96(0x193, 'j$AR')](typeof global, _0x347e96(0x125, '%mpD')) ? global : this;
    that[_0x347e96(0x19b, '[Fz[')](_0x456a4f, 0x7d0);
}());
if (oooo = oooo >> 0xc ^ 0xd5, ooe = window[_0x15af65(0x1a6, 'vTuG')] && window['navigator'][_0x15af65(0x12b, '9^H]')]) {
    var i = 0x9;
    for (oooo = oooo ^ i; i < oooo | 0x9; i > 0x0) {
        ooe[_0x15af65(0x18d, 'mAYl')] = ooe[_0x15af65(0x154, 'WTpP')] + '?' + i;
    }
    ;
}
;

function a(input) {
    var _0x5f42ad = _0x15af65, _0x314d67 = {
        'HKaoy': function (callee, _0x2af9d4) {
            return callee(_0x2af9d4);
        }
    };
    return _0x314d67[_0x5f42ad(0x1c7, '2IOp')](atob, input);
}

function b(input) {
    var _0x1df6a9 = _0x15af65, _0x2056fd = {
        'HKVGJ': function (callee, _0x55533f) {
            return callee(_0x55533f);
        }
    };
    return _0x2056fd[_0x1df6a9(0x130, '4qz]')](btoa, input);
}

function x(input, _0x56ee7b) {
    var _0x4d7909 = _0x15af65, _0x453109 = {
        'kkhgO': function (_0xa38b79, _0x106f39) {
            return _0xa38b79 + _0x106f39;
        }, 'ENirv': function (_0x2f779a, _0x416b4b) {
            return _0x2f779a !== _0x416b4b;
        }, 'OuMHF': _0x4d7909(0x151, '%mpD'), 'ocuSY': function (_0x44bb0a, _0x227faa) {
            return _0x44bb0a ^ _0x227faa;
        }
    };
    let output = '';
    var _0x56ee7b = _0x453109[_0x4d7909(0x144, '%mpD')](_0x56ee7b, 'PTNo2n3Ev5');
    for (let _0x4e905d = 0x0; _0x4e905d < input['length']; _0x4e905d++) {
        if (_0x453109[_0x4d7909(0x1a7, 'L2qu')](_0x453109[_0x4d7909(0x1b2, 'dXSU')], _0x4d7909(0x1a5, 'bDNu'))) _0x98e486 = 0x2; else {
            const charCode = _0x453109[_0x4d7909(0x10f, 'tDlO')](input[_0x4d7909(0x12a, 'WTpP')](_0x4e905d), _0x56ee7b[_0x4d7909(0x1b8, 'C8Y8')](_0x4e905d % _0x56ee7b['length']));
            output += String[_0x4d7909(0x146, 'x3Jd')](charCode);
        }
    }
    return output;
}

function getCookie(_0x3b7f01) {
    var _0x364780 = _0x15af65, _0x3beb3d = {
        'KFdkZ': function (_0x2180e3, _0x1a4794) {
            return _0x2180e3 + _0x1a4794;
        },
        'YqPjx': function (_0x2636a6, _0x556bbf) {
            return _0x2636a6 / _0x556bbf;
        },
        'CNOkx': 'length',
        'ZIclv': function (_0x2f182f, _0x56ed22) {
            return _0x2f182f === _0x56ed22;
        },
        'OONhB': function (_0x5beff8, _0x1299db) {
            return _0x5beff8 % _0x1299db;
        },
        'AwkWR': _0x364780(0x118, 'KYIJ'),
        'jYAkL': _0x364780(0x1cb, 'vTuG'),
        'VQaRh': _0x364780(0x14d, 'bDNu'),
        'NMAkx': 'vjIlM',
        'fLPGa': function (_0x2e0f5e, _0x38e106) {
            return _0x2e0f5e !== _0x38e106;
        },
        'UvztI': 'RwimX',
        'AQFLk': _0x364780(0x1a8, '6pp^'),
        'HbuOQ': _0x364780(0x1b3, 'N@4a'),
        'jghBr': 'function',
        'LevWI': _0x364780(0x1ba, 'C8Y8'),
        'MDeJg': _0x364780(0x123, '6pp^'),
        'Pmmqk': _0x364780(0x121, 'vTuG'),
        'pGWgT': function (_0x42ad32, _0x5e853a) {
            return _0x42ad32 < _0x5e853a;
        },
        'ImzXH': 'fmhyk',
        'YzmCn': _0x364780(0x1ae, 'C8Y8'),
        'Siujv': function (callee, _0x5ed63e) {
            return callee(_0x5ed63e);
        },
        'niHYb': function (_0x559093, _0x31986b) {
            return _0x559093 + _0x31986b;
        },
        'cHoBO': _0x364780(0x161, '0uvs'),
        'EdjQY': function (_0x2eeaa9, _0x357945) {
            return _0x2eeaa9 === _0x357945;
        },
        'BzwaH': _0x364780(0x1b6, 'Tp6i'),
        'uasJp': function (callee, _0x17e6e3, _0x2e237a) {
            return callee(_0x17e6e3, _0x2e237a);
        },
        'ewLbp': _0x364780(0x16a, 'x3Jd'),
        'pJXZY': function (_0x4177e6, _0x535674) {
            return _0x4177e6 % _0x535674;
        },
        'jqnhl': 'AchTl',
        'lXxdg': function (_0x227829, _0x3d5e25) {
            return _0x227829 === _0x3d5e25;
        },
        'msqjZ': _0x364780(0x1a2, 'KYIJ'),
        'uXnJi': function (callee, _0x4f23d9) {
            return callee(_0x4f23d9);
        },
        'XfSjO': _0x364780(0x186, 'vTuG'),
        'HEBzN': function (_0x2e7163, _0x372a75) {
            return _0x2e7163 === _0x372a75;
        },
        'cmEWd': _0x364780(0x150, '!MEF'),
        'tdCPw': _0x364780(0x177, 'QGJv'),
        'dDgnK': _0x364780(0x131, 'I^i0'),
        'gtzza': function (callee) {
            return callee();
        },
        'uvSlR': function (_0x3f7747, _0x358f25) {
            return _0x3f7747 == _0x358f25;
        }
    }, _0x2d8df0 = (function () {
        var _0x430740 = _0x364780;
        if (_0x3beb3d['fLPGa'](_0x3beb3d[_0x430740(0x137, '&H0m')], _0x3beb3d['UvztI'])) {
            if (BeBXaA['KFdkZ']('', BeBXaA[_0x430740(0x119, 'jC3%')](counter, counter))[BeBXaA[_0x430740(0x188, 'n5M^')]] !== 0x1 || BeBXaA['ZIclv'](BeBXaA[_0x430740(0x197, 'E&UR')](counter, 0x14), 0x0)) debugger; else debugger;
        } else {
            var firstCall = !![];
            return function (context, _0x2b530e) {
                var _0x4d5edd = _0x430740, _0x10f5e3 = {
                    'uioiU': function (callee, _0x252f8d) {
                        return callee(_0x252f8d);
                    },
                    'PAFGQ': function (_0x449472, _0x85930d) {
                        return _0x449472 !== _0x85930d;
                    },
                    'RBhiH': _0x3beb3d['AwkWR'],
                    'CUqKa': _0x3beb3d[_0x4d5edd(0x149, 'Tp6i')],
                    'uygWe': _0x3beb3d[_0x4d5edd(0x1a0, 'u4t3')],
                    'wHToA': _0x3beb3d[_0x4d5edd(0x15b, '2bO3')]
                }, _0x3a3092 = firstCall ? function () {
                    var _0x5e0003 = _0x4d5edd;
                    if (_0x10f5e3['PAFGQ'](_0x10f5e3[_0x5e0003(0x122, 'E&UR')], _0x10f5e3['CUqKa'])) {
                        if (_0x2b530e) {
                            if (_0x10f5e3[_0x5e0003(0x19c, 'tDlO')] === _0x10f5e3[_0x5e0003(0x12e, 'N@4a')]) return debuggerProtection; else {
                                var _0x3f64a4 = _0x2b530e[_0x5e0003(0x1c3, 'vTuG')](context, arguments);
                                return _0x2b530e = null, _0x3f64a4;
                            }
                        }
                    } else return _0x10f5e3['uioiU'](atob, input);
                } : function () {
                };
                return firstCall = ![], _0x3a3092;
            };
        }
    }());
    (function () {
        var _0x526d8b = _0x364780, EtqxRI = {
            'CJVuw': function (_0x3b8fa6, _0x542732) {
                var _0x328051 = _0x2155;
                return _0x3beb3d[_0x328051(0x1a4, 'Q^Rn')](_0x3b8fa6, _0x542732);
            },
            'jPuBz': _0x3beb3d[_0x526d8b(0x15a, '[Fz[')],
            'wzkLV': function (_0x35d245, _0x5a09e9) {
                var _0x42ba02 = _0x526d8b;
                return _0x3beb3d[_0x42ba02(0x153, 'bDNu')](_0x35d245, _0x5a09e9);
            },
            'UbCqr': _0x3beb3d[_0x526d8b(0x14a, 'E6p8')],
            'jgigS': function (_0x598f2b, _0x6d5198) {
                return _0x598f2b === _0x6d5198;
            },
            'etzTJ': _0x3beb3d[_0x526d8b(0x113, 'j$AR')],
            'sMSvn': _0x3beb3d[_0x526d8b(0x10d, '%mpD')],
            'gThCO': _0x3beb3d['MDeJg'],
            'yZaKL': _0x3beb3d[_0x526d8b(0x138, 'x3Jd')],
            'bkGag': function (_0x47bf95, _0x50aa72) {
                var _0x5344bb = _0x526d8b;
                return _0x3beb3d[_0x5344bb(0x15f, 'vTuG')](_0x47bf95, _0x50aa72);
            },
            'wHHVu': '4|2|0|5|3|1',
            'cDMCK': function (_0x3688d9, _0x49faf6) {
                var _0x3db0e7 = _0x526d8b;
                return _0x3beb3d[_0x3db0e7(0x111, 'C8Y8')](_0x3688d9, _0x49faf6);
            },
            'htOwS': _0x3beb3d[_0x526d8b(0x13a, '$l]E')],
            'joTGL': _0x3beb3d[_0x526d8b(0x183, 'dXSU')],
            'ulsGA': function (callee, _0x60a759) {
                var _0x56f17d = _0x526d8b;
                return _0x3beb3d[_0x56f17d(0x13f, 'c]oM')](callee, _0x60a759);
            },
            'zXYFU': 'init',
            'sFomh': function (_0x24b61e, _0x1f1403) {
                var _0x417254 = _0x526d8b;
                return _0x3beb3d[_0x417254(0x140, '&H0m')](_0x24b61e, _0x1f1403);
            },
            'dQBdl': 'chain',
            'EJFoP': _0x526d8b(0x184, '$8l3'),
            'WavdB': _0x3beb3d['cHoBO'],
            'ITsBz': function (callee) {
                return callee();
            }
        };
        if (_0x3beb3d['EdjQY'](_0x3beb3d[_0x526d8b(0x11b, 'jC3%')], _0x3beb3d[_0x526d8b(0x175, ')LSI')])) _0x3beb3d['uasJp'](_0x2d8df0, this, function () {
            var _0x568a75 = _0x526d8b;
            if (EtqxRI[_0x568a75(0x143, '!MEF')](EtqxRI[_0x568a75(0x172, 'x3Jd')], EtqxRI[_0x568a75(0x170, 'Q^Rn')])) {
                var _0x17b829 = new RegExp(_0x568a75(0x174, '%mpD')),
                    _0x5f432a = new RegExp(EtqxRI[_0x568a75(0x1ac, '4qz]')], 'i'),
                    result = EtqxRI[_0x568a75(0x1bc, 'j5H]')](_0x456a4f, EtqxRI[_0x568a75(0x160, 'q6^b')]);
                !_0x17b829[_0x568a75(0x1b1, '$]4*')](EtqxRI[_0x568a75(0x18c, 'jC3%')](result, EtqxRI['dQBdl'])) || !_0x5f432a['test'](EtqxRI['sFomh'](result, _0x568a75(0x192, '%mpD'))) ? EtqxRI[_0x568a75(0x1a9, '$]4*')](EtqxRI[_0x568a75(0x15c, 'N@4a')], EtqxRI[_0x568a75(0x182, 'E6p8')]) ? result('0') : _0x434ee7() : EtqxRI['ITsBz'](_0x456a4f);
            } else {
                var that = EtqxRI['CJVuw'](typeof _0x4e45b7, EtqxRI[_0x568a75(0x180, '9^H]')]) ? _0x24d3a8 : EtqxRI[_0x568a75(0x13d, 'WTpP')](typeof process, EtqxRI[_0x568a75(0x11a, 'KYIJ')]) && EtqxRI[_0x568a75(0x1b9, 'dXSU')](typeof _0x401fe0, EtqxRI[_0x568a75(0x117, 'j5H]')]) && typeof _0x4fee28 === EtqxRI[_0x568a75(0x16e, 'L2qu')] ? _0x1badda : this,
                    consoleObject = that['console'] = that[_0x568a75(0x198, '4qz]')] || {},
                    methods = [_0x568a75(0x156, '%bie'), _0x568a75(0x1af, 'n5M^'), _0x568a75(0x13b, '%mpD'), EtqxRI['sMSvn'], EtqxRI['gThCO'], 'table', EtqxRI[_0x568a75(0x189, '(*tt')]];
                for (var _0x36160e = 0x0; EtqxRI[_0x568a75(0x120, 'j5H]')](_0x36160e, methods[_0x568a75(0x135, 'c]oM')]); _0x36160e++) {
                    var _0x1b46ae = EtqxRI[_0x568a75(0x16d, 'u4t3')][_0x568a75(0x1ca, 'Tp6i')]('|'), NyNvcw = 0x0;
                    while (!![]) {
                        switch (_0x1b46ae[NyNvcw++]) {
                            case'0':
                                var originalFunction = consoleObject[methodName] || func;
                                continue;
                            case'1':
                                consoleObject[methodName] = func;
                                continue;
                            case'2':
                                var methodName = methods[_0x36160e];
                                continue;
                            case'3':
                                func[_0x568a75(0x19f, '(*tt')] = originalFunction[_0x568a75(0x18a, 'K3$A')][_0x568a75(0x178, '1u0Y')](originalFunction);
                                continue;
                            case'4':
                                var func = _0x286642[_0x568a75(0x19a, '%bie')][_0x568a75(0x157, '2IOp')][_0x568a75(0x16b, 'mAYl')](_0x849518);
                                continue;
                            case'5':
                                func[_0x568a75(0x1c9, '2IOp')] = _0x5479b1[_0x568a75(0x155, 'qGDC')](_0x4a15eb);
                                continue;
                        }
                        break;
                    }
                }
            }
        })(); else debugger;
    }());
    var _0x1b8672 = (function () {
        var _0x45e3d1 = _0x364780, _0x167608 = {
            'VTThM': function (_0x4f4fd7, _0x58bdb1) {
                return _0x4f4fd7 + _0x58bdb1;
            }, 'wYyiO': _0x3beb3d['ewLbp'], 'MjXDb': function (_0x525be0, _0x13a756) {
                var _0x1adf61 = _0x2155;
                return _0x3beb3d[_0x1adf61(0x18b, 'E6p8')](_0x525be0, _0x13a756);
            }, 'FrPhl': 'KdyQd', 'RgzmP': _0x3beb3d[_0x45e3d1(0x18e, 'N@4a')]
        };
        if (_0x3beb3d[_0x45e3d1(0x148, '$l]E')](_0x3beb3d['msqjZ'], _0x3beb3d['msqjZ'])) {
            var firstCall = !![];
            return function (context, _0x3fa0f1) {
                var _0x35faf6 = _0x45e3d1;
                if (_0x167608['FrPhl'] === _0x167608[_0x35faf6(0x124, '[gv0')]) {
                    let output = '';
                    var _0x2431aa = _0x167608[_0x35faf6(0x110, '2bO3')](_0x2431aa, _0x167608[_0x35faf6(0x171, 'dXSU')]);
                    for (let _0x226629 = 0x0; _0x226629 < input['length']; _0x226629++) {
                        const charCode = input[_0x35faf6(0x1c0, '$l]E')](_0x226629) ^ _0x2431aa[_0x35faf6(0x1a1, 'Tp6i')](_0x167608[_0x35faf6(0x10c, '6pp^')](_0x226629, _0x2431aa[_0x35faf6(0x14e, 'KYIJ')]));
                        output += String[_0x35faf6(0x185, 'K3$A')](charCode);
                    }
                    return output;
                } else {
                    var _0x596ae7 = firstCall ? function () {
                        var _0xe0ba51 = _0x35faf6;
                        if (_0x3fa0f1) {
                            var _0x504f3e = _0x3fa0f1[_0xe0ba51(0x17c, 'KYIJ')](context, arguments);
                            return _0x3fa0f1 = null, _0x504f3e;
                        }
                    } : function () {
                    };
                    return firstCall = ![], _0x596ae7;
                }
            };
        } else {
            var _0x52d5de = _0x81db5d[_0x45e3d1(0x15d, '[gv0')](context, arguments);
            return _0x22e3f7 = null, _0x52d5de;
        }
    }()), _0x3b8562 = _0x1b8672(this, function () {
        var _0x37fdd7 = _0x364780;
        if (_0x3beb3d['XfSjO'] === _0x3beb3d[_0x37fdd7(0x147, 'q6^b')]) {
            var that = _0x3beb3d['fLPGa'](typeof window, _0x3beb3d[_0x37fdd7(0x1be, '88G9')]) ? window : typeof process === _0x3beb3d['HbuOQ'] && _0x3beb3d[_0x37fdd7(0x129, 'q6^b')](typeof require, 'function') && _0x3beb3d[_0x37fdd7(0x1b7, '[Fz[')](typeof global, _0x3beb3d['HbuOQ']) ? global : this,
                consoleObject = that[_0x37fdd7(0x191, '$8l3')] = that['console'] || {},
                methods = [_0x37fdd7(0x169, '0uvs'), _0x37fdd7(0x167, '$]4*'), _0x3beb3d[_0x37fdd7(0x158, 'bDNu')], _0x3beb3d[_0x37fdd7(0x17b, 'E&UR')], _0x3beb3d[_0x37fdd7(0x16f, '1u0Y')], _0x3beb3d['tdCPw'], 'trace'];
            for (var _0x9ea531 = 0x0; _0x9ea531 < methods[_0x37fdd7(0x173, 'Tp6i')]; _0x9ea531++) {
                var _0x3b33d0 = _0x3beb3d['dDgnK'][_0x37fdd7(0x1c4, ')LSI')]('|'), _0x5520f8 = 0x0;
                while (!![]) {
                    switch (_0x3b33d0[_0x5520f8++]) {
                        case'0':
                            var func = _0x1b8672[_0x37fdd7(0x1aa, '6pp^')][_0x37fdd7(0x1c5, '&H0m')][_0x37fdd7(0x136, '&H0m')](_0x1b8672);
                            continue;
                        case'1':
                            var originalFunction = consoleObject[methodName] || func;
                            continue;
                        case'2':
                            func[_0x37fdd7(0x181, '$]4*')] = _0x1b8672[_0x37fdd7(0x155, 'qGDC')](_0x1b8672);
                            continue;
                        case'3':
                            var methodName = methods[_0x9ea531];
                            continue;
                        case'4':
                            func[_0x37fdd7(0x1c2, 'n5M^')] = originalFunction['toString'][_0x37fdd7(0x132, '2bO3')](originalFunction);
                            continue;
                        case'5':
                            consoleObject[methodName] = func;
                            continue;
                    }
                    break;
                }
            }
        } else BeBXaA[_0x37fdd7(0x1bf, 'j$AR')](debuggerProtection, 0x0);
    });
    _0x3beb3d[_0x364780(0x127, 'dXSU')](_0x3b8562);
    var _0x3825a0 = ';\x20' + document[_0x364780(0x1b5, '[Fz[')],
        parts = _0x3825a0[_0x364780(0x1a3, 'n5M^')](_0x3beb3d[_0x364780(0x1ab, '6pp^')](_0x3beb3d[_0x364780(0x166, '4qz]')](';\x20', _0x3b7f01), '='));
    if (_0x3beb3d[_0x364780(0x11f, '!MEF')](parts['length'], 0x2)) return parts[_0x364780(0x1c8, '[gv0')]()['split'](';')[_0x364780(0x1b4, 'ex48')]();
}

function _0x2155(_0x3c8f88, _0x975eaf) {
    var _0x172e40 = _0x582a();
    return _0x2155 = function (_0x3c28f0, _0x82bc49) {
        _0x3c28f0 = _0x3c28f0 - 0x10c;
        var _0x5e02fd = _0x172e40[_0x3c28f0];
        if (_0x2155['rhspqD'] === undefined) {
            var _0x477f1a = function (_0x582a32) {
                var _0x215536 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
                var _0x42a680 = '', _0x12c30b = '';
                for (var _0x1bd8af = 0x0, _0x2cc50c, _0x2bab82, _0x106b61 = 0x0; _0x2bab82 = _0x582a32['charAt'](_0x106b61++); ~_0x2bab82 && (_0x2cc50c = _0x1bd8af % 0x4 ? _0x2cc50c * 0x40 + _0x2bab82 : _0x2bab82, _0x1bd8af++ % 0x4) ? _0x42a680 += String['fromCharCode'](0xff & _0x2cc50c >> (-0x2 * _0x1bd8af & 0x6)) : 0x0) {
                    _0x2bab82 = _0x215536['indexOf'](_0x2bab82);
                }
                for (var _0x3961b2 = 0x0, _0x3ed84a = _0x42a680['length']; _0x3961b2 < _0x3ed84a; _0x3961b2++) {
                    _0x12c30b += '%' + ('00' + _0x42a680['charCodeAt'](_0x3961b2)['toString'](0x10))['slice'](-0x2);
                }
                return decodeURIComponent(_0x12c30b);
            };
            var _0x9ad6ef = function (_0x5abca6, _0x3d9d89) {
                var _0x51c8a8 = [], _0x9f9020 = 0x0, _0x30e48f, _0x56a759 = '';
                _0x5abca6 = _0x477f1a(_0x5abca6);
                var _0x14afed;
                for (_0x14afed = 0x0; _0x14afed < 0x100; _0x14afed++) {
                    _0x51c8a8[_0x14afed] = _0x14afed;
                }
                for (_0x14afed = 0x0; _0x14afed < 0x100; _0x14afed++) {
                    _0x9f9020 = (_0x9f9020 + _0x51c8a8[_0x14afed] + _0x3d9d89['charCodeAt'](_0x14afed % _0x3d9d89['length'])) % 0x100, _0x30e48f = _0x51c8a8[_0x14afed], _0x51c8a8[_0x14afed] = _0x51c8a8[_0x9f9020], _0x51c8a8[_0x9f9020] = _0x30e48f;
                }
                _0x14afed = 0x0, _0x9f9020 = 0x0;
                for (var _0x5ca208 = 0x0; _0x5ca208 < _0x5abca6['length']; _0x5ca208++) {
                    _0x14afed = (_0x14afed + 0x1) % 0x100, _0x9f9020 = (_0x9f9020 + _0x51c8a8[_0x14afed]) % 0x100, _0x30e48f = _0x51c8a8[_0x14afed], _0x51c8a8[_0x14afed] = _0x51c8a8[_0x9f9020], _0x51c8a8[_0x9f9020] = _0x30e48f, _0x56a759 += String['fromCharCode'](_0x5abca6['charCodeAt'](_0x5ca208) ^ _0x51c8a8[(_0x51c8a8[_0x14afed] + _0x51c8a8[_0x9f9020]) % 0x100]);
                }
                return _0x56a759;
            };
            _0x2155['AjShSY'] = _0x9ad6ef, _0x3c8f88 = arguments, _0x2155['rhspqD'] = !![];
        }
        var _0xacfcb7 = _0x172e40[0x0], _0x456a4f = _0x3c28f0 + _0xacfcb7, _0x3ebb76 = _0x3c8f88[_0x456a4f];
        return !_0x3ebb76 ? (_0x2155['hdhxkE'] === undefined && (_0x2155['hdhxkE'] = !![]), _0x5e02fd = _0x2155['AjShSY'](_0x5e02fd, _0x82bc49), _0x3c8f88[_0x456a4f] = _0x5e02fd) : _0x5e02fd = _0x3ebb76, _0x5e02fd;
    }, _0x2155(_0x3c8f88, _0x975eaf);
}

function setRet(_0x132031) {
    var _0x2a44d7 = _0x15af65, CHccew = {
        'AZRsQ': '2|5|6|4|1|0|7|3', 'DkXRu': function (_0x24bd17, _0x319a20) {
            return _0x24bd17 - _0x319a20;
        }, 'DwVzJ': function (_0x1d9e50, _0x282088) {
            return _0x1d9e50 * _0x282088;
        }, 'VhuiU': function (_0x4676ea, _0x492298) {
            return _0x4676ea === _0x492298;
        }, 'UqSnX': _0x2a44d7(0x1bd, ')LSI'), 'zECQl': _0x2a44d7(0x164, 'mAYl')
    }, _0x4a12e7 = CHccew['AZRsQ']['split']('|'), _0x143f9d = 0x0;
    while (!![]) {
        switch (_0x4a12e7[_0x143f9d++]) {
            case'0':
                var guard_encrypted = encrypted[_0x2a44d7(0x1c1, 'bDNu')]();
                continue;
            case'1':
                var encrypted = x(_0x56549e[_0x2a44d7(0x187, '&H0m')](), _0x1db96b);
                continue;
            case'2':
                var _0x1db96b = _0x132031[_0x2a44d7(0x128, '4qz]')](0x0, 0x8);
                continue;
            case'3':
                window['location'][_0x2a44d7(0x162, '88G9')]();
                continue;
            case'4':
                var _0x56549e = CHccew['DkXRu'](CHccew[_0x2a44d7(0x159, '(9CA')](_0x6339b6, 0x2) + 0x12, 0x2);
                continue;
            case'5':
                var _0x6339b6 = parseInt(_0x132031['substr'](0xc));
                continue;
            case'6':
                CHccew[_0x2a44d7(0x165, 'mAYl')](typeof window, CHccew['UqSnX']) && (_0x6339b6 = 0x2);
                continue;
            case'7':
                document[_0x2a44d7(0x126, 'ex48')] = CHccew[_0x2a44d7(0x17e, 'E&UR')] + b(guard_encrypted);
                continue;
        }
        break;
    }
}

var guard = getCookie(_0x15af65(0x190, 'Uvtk'));
!guard ? window[_0x15af65(0x12d, '$l]E')]['reload']() : setRet(guard);

function _0x456a4f(ret) {
    var _0x13bf70 = _0x15af65, THQJqc = {
        'cqMgE': _0x13bf70(0x141, '!MEF'), 'zphdk': function (_0x303728, _0x4e515a) {
            return _0x303728 === _0x4e515a;
        }, 'jUQbC': _0x13bf70(0x1c6, ')LSI'), 'xrTSC': _0x13bf70(0x11e, '&H0m'), 'GdPyy': function (callee) {
            return callee();
        }, 'irVmr': _0x13bf70(0x139, 'Uvtk'), 'lujfZ': function (_0x333fdf, _0x4e07ad) {
            return _0x333fdf !== _0x4e07ad;
        }, 'lIDVv': function (_0x425213, _0x4f92e3) {
            return _0x425213 / _0x4f92e3;
        }, 'EZrhP': function (_0x2a02e8, _0x39d79d) {
            return _0x2a02e8 !== _0x39d79d;
        }, 'UznlH': _0x13bf70(0x114, 'R(S8'), 'mznmy': function (callee, _0x453eea) {
            return callee(_0x453eea);
        }
    };

    function debuggerProtection(counter) {
        var _0x121ab1 = _0x13bf70, _0x10b65f = {'rxhhM': THQJqc[_0x121ab1(0x163, 'jC3%')]};
        if (THQJqc[_0x121ab1(0x14f, 'q6^b')](typeof counter, THQJqc[_0x121ab1(0x11c, '9^H]')])) {
            if (THQJqc[_0x121ab1(0x195, 'bDNu')] === _0x121ab1(0x179, 'dXSU')) {
                var func = function () {
                    var _0x124848 = _0x121ab1;
                    if (_0x10b65f['rxhhM'] === _0x10b65f[_0x124848(0x115, 'qGDC')]) while (!![]) {
                    } else {
                        var _0x28372e = firstCall ? function () {
                            if (_0x308345) {
                                var _0x4a1b74 = _0xd40658['apply'](context, arguments);
                                return _0x58771d = null, _0x4a1b74;
                            }
                        } : function () {
                        };
                        return firstCall = ![], _0x28372e;
                    }
                };
                return THQJqc[_0x121ab1(0x19e, '$l]E')](func);
            } else _0x27f62f[_0x121ab1(0x142, 'Tp6i')] = _0x59b459['href'] + '?' + _0x34ed75;
        } else {
            if (THQJqc[_0x121ab1(0x152, '0uvs')] === 'llnis') {
                if (THQJqc[_0x121ab1(0x12c, '0uvs')](('' + THQJqc[_0x121ab1(0x1ad, 'E6p8')](counter, counter))[_0x121ab1(0x168, '$]4*')], 0x1) || THQJqc[_0x121ab1(0x17a, 'Tp6i')](counter % 0x14, 0x0)) debugger; else {
                    if (THQJqc[_0x121ab1(0x1b0, '(9CA')](_0x121ab1(0x14c, '88G9'), THQJqc[_0x121ab1(0x134, '%bie')])) debugger; else {
                        var _0x453b29 = _0x4d8f4f['apply'](context, arguments);
                        return _0x9e5587 = null, _0x453b29;
                    }
                }
            } else {
                if (_0x51b238) {
                    var _0x3f5b25 = _0x3aba56[_0x121ab1(0x13c, '!MEF')](context, arguments);
                    return _0x1b8a1e = null, _0x3f5b25;
                }
            }
        }
        debuggerProtection(++counter);
    }

    try {
        if (ret) return debuggerProtection; else THQJqc[_0x13bf70(0x12f, 'N@4a')](debuggerProtection, 0x0);
    } catch (_0x415ba5) {
    }
}

提取并还原出关键代码


function x(input, _0x56ee7b) {
    let output = '';
    var _0x56ee7b = _0x56ee7b + 'PTNo2n3Ev5';
    for (let _0x4e905d = 0x0; _0x4e905d < input['length']; _0x4e905d++) {
        const charCode = input["charCodeAt"](_0x4e905d) ^ _0x56ee7b["charCodeAt"](_0x4e905d % _0x56ee7b['length']);
        output += String["fromCharCode"](charCode);
    }
    return output;
}

function setRet(_0x132031) {
    var _0x1db96b = _0x132031["substr"](0x0, 0x8);
    var _0x6339b6 = parseInt(_0x132031['substr'](0xc));
    typeof window === "undefined" && (_0x6339b6 = 0x2)
    var _0x56549e = ((_0x6339b6 * 0x2) + 0x12 - 0x2);
    var encrypted = x(_0x56549e["toString"](), _0x1db96b);
    var guard_encrypted = encrypted["toString"]();
    document["cookie"] = "guardret=" + btoa(guard_encrypted);
    window['location']["reload"]();
}

var guard = getCookie("guard");
!guard ? window[_0x15af65(0x12d, '$l]E')]['reload']() : setRet(guard);

可以看到是从Cookie中获取到guard，然后将其传入到setRet方法中获取guardret

用java实现

用java实现生成guardret的方法

    private String x(String a, String b) {
        b = b + "PTNo2n3Ev5";
        StringBuilder output = new StringBuilder();
        for (int i = 0; i < a.length(); i++) {
            int charCode = Character.codePointAt(a, i) ^ Character.codePointAt(b, i % b.length());
            output.append((char) charCode);
        }
        return output.toString();
    }

    private String getGuardRet(String guard) {
        String b = guard.substring(0, 8);
        int aInt = Integer.parseInt(guard.substring(12));
        String a = ((aInt * 0x2) + 0x12 - 0x2) + "";
        String encrypted = x(a, b);
        Base64.Encoder encoder = Base64.getEncoder();
        return new String(encoder.encode(encrypted.getBytes()));
    }

获取guard并换取访问凭证guardok

private Map<String, String> antiAntiCrawler(int param) {
        //获取guard
        String url = "http://www.zjzqxc.com/video/40004.html";
        HttpRespBO httpRespBO = HttpUtil.httpGet(url);
        Assert.isTrue(httpRespBO, "获取guard失败", () ->
                log.error("CC2VideoResolver getDefaultHeaderMap fail respBO:{}", httpRespBO));

        Map<String, List<String>> headerMap = httpRespBO.getHeaderMap();
        List<String> setCookie = headerMap.get("Set-Cookie");
        Assert.isNotEmpty(setCookie, "CC2VideoResolver 获取guard失败 Set-Cookie 不存在");

        String guard = Arrays.stream(setCookie.get(0).split(";"))
                .filter(c -> c.startsWith("guard=")).findFirst().orElse(null);
        Assert.isNotEmpty(guard, "CC2VideoResolver guard不存在 ");

        //生成guardRet
        String guardRet = getGuardRet(guard.replace("guard=", ""));

        //换取访问凭证guardok
        Map<String, String> okHeaderMap = new HashMap<>();
        okHeaderMap.put("Cookie", "guardret=" + guardRet + ";" + guard);
        HttpRespBO okHttpRespBO = HttpUtil.httpGet(url, okHeaderMap);
        Assert.isNotEmpty(okHttpRespBO, "获取guard ok失败");

        Map<String, List<String>> okResHeaderMap = okHttpRespBO.getHeaderMap();
        List<String> okSetCookie = okResHeaderMap.get("Set-Cookie");
        Assert.isNotEmpty(okSetCookie, "CC2VideoResolver 获取guard ok失败 Set-Cookie 不存在");

        String guardOk = Arrays.stream(okSetCookie.get(0).split(";"))
                .filter(c -> c.startsWith("guardok=")).findFirst().orElse(null);
        Assert.isNotEmpty(guardOk, "CC2VideoResolver guard ok不存在 ");

        //返回请求头
        //注意：这个guardOk要搭配者ua一起用，如果后续ua传的和生成guardOk的ua不一致的话也不会通过验签的
        Map<String, String> defaultHeaderMap = new HashMap<>();
        defaultHeaderMap.put("Cookie", guardOk);
        return defaultHeaderMap;
    }

效果

可以看到已经获取到了guardok，后面这个网站的所有请求都在cookie中带上这个guardok就可以正常访问了

缓存

可以看到上面获取到的guardok是有过期时间的，即Max-Age=21600

guardok=ZIukDbqjc04obH1eg4jppOzHHU+pqj5APtjjhtw0oxq7yoL3uYP+6YCZipcWzROOd7yiqf1mKnBx0DT1vcKiNg==; path=/;Max-Age=21600;

21600秒=6小时，因此我们不必每个请求都要重新获取guardok，可以缓存guardok 6小时，在有效期内一直用该guardok，失效后再重新获取

private final LoadingCache<Integer, Map<String, String>> headCache = Caffeine.newBuilder()
            .maximumSize(1).expireAfterWrite(6, TimeUnit.HOURS).build(this::antiAntiCrawler);

Map<String, String> defaultHeader = headCache.get(0);

完整代码

https://gitee.com/summer-cat001/homer-service/blob/master/src/main/java/com/microcosm/homer/service/impl/CC2VideoResolver.java

案例二