美团mtgsig1.1 分析 mtgsig

声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

逆向过程

mtgsig有问题的请求3次左右就会风控。

cp = execjs.compile(open('finall-mtgsig.js', 'r', encoding='utf-8',errors='ignore').read())
result = cp.call('getSpuListCommon', mtgsig_data,WEBDFPID)
mtgsig = result['headers']['mtgsig']
print(mtgsig)
headers = {
    "Connection": "keep-alive",
    "Accept": "application/json, text/plain, */*",
    "mtgsig": mtgsig,
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36",
    "Content-Type": "application/x-www-form-urlencoded",
    "Sec-Fetch-Site": "same-origin",
    "Sec-Fetch-Mode": "cors",
    "Sec-Fetch-Dest": "empty",
    "Referer": "/product",
    "Accept-Language": "zh-CN",
    "Cookie": ""
}
url = "food/r/getSpuListCommon"
params = {
    "yodaReady": "h5",
    "csecplatform": "4",
    "csecversion": "2.4.0"
}
response = requests.post(url, headers=headers, params=params, data=data)

print(response.text)

结果

总结

 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。