QQ群信息爬取-------抓包破解接口(2)

超、凢脫俗 2022-04-13 09:17 1150阅读 0赞

[QQ群信息爬取-------使用模拟登陆(1)][QQ_-------_1]  
这个比之前的爬取效率更高，爬取的网站https://qun.qq.com/member.html，简单说一下思路

1.  首先首先使用模拟登陆获取cookie
2.  经过抓包，我发现了Q群的数据接口为https://qun.qq.com/cgi-bin/qun\_mgr/search\_group\_members，使用requests模块向该网站发送post请求，需要post的数据格式为：\{‘gc’: qqGroupNum, ‘st’: 0, ‘end’: 100, ‘sort’: 0, ‘bkn’: self.bkn\}，返回结果为json数据
3.  拿到json数据就可以保存到文本或者数据库。

## 1.模拟登陆 ##

还是使用selenium模拟登陆即可

url = "https://qun.qq.com/member.html"
    driver = webdriver.Chrome()
    driver.delete_all_cookies()
    driver.get(url)
    
    time.sleep(1)
    driver.switch_to.frame("login_frame")  # 进入登录iframe
    time.sleep(1)
    change = driver.find_element_by_id("switcher_plogin")
    change.click()
    driver.find_element_by_id('u').clear()  # 选择用户名框
    driver.find_element_by_id('u').send_keys(qq)
    driver.find_element_by_id('p').clear()
    driver.find_element_by_id('p').send_keys(passwd)
    driver.find_element_by_class_name("login_button").click()

获取到一些关键的cookie值即可关闭浏览器了，关键的cookie值有skey，p\_skey  
下面详解抓包破解

## 2.抓包破解接口 ##

打开网页https://qun.qq.com/member.html用户密码登陆和fiddler  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70]  
输入正确QQ号和密码成功登录后，查看一下fiddler  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 1]  
为了看得更清楚这个请求，操作如下  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 2]  
右上角有个 Execute可以执行这个post请求，可以自己琢磨一下  
经过我的测试，想通过这个请求获取到正确的数据必须需要cookie中的uin，skey，p\_skey以及请求数据gc，st，end，sort，bkn。  
对这些参数进行一个一个分析，如下：

*  uin:这个一眼就可以看出来是，字符o拼上自己的QQ号即可
 *  skey和p\_skey：不太清楚是啥，但可以从cookie中直接获取到，所以才需要进行模拟登陆获取cookie的步骤
 *  gc：QQ群的号码
 *  st：应该是start的意思，Q群成员的序号
 *  end：和st对应，Q群成员的序号，通过st和end就可以获取到从第st个到第end个成员这个意思
 *  sort：不用管，就给个值为0就行了
 *  bkn：这个数据是经过特别计算的值，应该是为了验证登录之类的，相当于小小的加密了吧，我研究了一段时间，不管从哪里都获取不到这个值，最后是在一段JavaScript代码里面，发现这个值的计算方式，嗯，我果然是天才，哈哈哈，我们回到浏览器，F12一下，查看都有哪些js，如下  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 3]  
    把js复制到notepad++，来一探究竟吧  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 4]  
    所以我们知道bkn值的计算是和cookie值中的skey有关的，把这些数据都拿出来，愉快的编程吧

skey = driver.get_cookie('skey')['value']
    p_skey = driver.get_cookie('p_skey')['value']
    cookie = "uin=o" + qq + "; skey=" + self.skey + "; p_skey=" + self.p_skey
    headers = { 
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36",
        "Cookie": self.cookie
    }
    e = skey
    t = 5381
    for n in range(0, len(e)):
        t += (t << 5) + ord(e[n])
        t &= sys.maxint
    bkn = t
    driver.quit()

## 3. 发送post请求，拿到json数据 ##

data = { 'gc': qqGroupNum, 'st': 0, 'end': 100, 'sort': 0, 'bkn': bkn}
    response = requests.post("https://qun.qq.com/cgi-bin/qun_mgr/search_group_members", data=data, headers=headers,
                             verify=False)
    qqJson = json.loads(response.text)
    self.qqGroupCount = qqJson['count']
    members = qqJson['mems']

最后我想要一千个赞  
完整代码如下：

#coding=utf-8
    import time
    from selenium import webdriver
    import requests
    import json
    import sys
    import codecs
    
    class qqGroupSpider():
        ''' Q群爬虫类 '''
        def __init__(self, qq,passwd):
            self.qqGroupCount=0
            self.nextCount=0
            self.members=[]
            self.qqGroupNum=0
            url = "https://qun.qq.com/member.html"
            driver = webdriver.Chrome()
            driver.delete_all_cookies()
            driver.get(url)
    
            time.sleep(1)
            driver.switch_to.frame("login_frame")  # 进入登录iframe
            time.sleep(1)
            change = driver.find_element_by_id("switcher_plogin")
            change.click()
            driver.find_element_by_id('u').clear()  # 选择用户名框
            driver.find_element_by_id('u').send_keys(qq)
            driver.find_element_by_id('p').clear()
            driver.find_element_by_id('p').send_keys(passwd)
            driver.find_element_by_class_name("login_button").click()
    
            time.sleep(3)
            self.skey = driver.get_cookie('skey')['value']
            self.p_skey = driver.get_cookie('p_skey')['value']
            self.cookie = "uin=o" + qq + "; skey=" + self.skey + "; p_skey=" + self.p_skey
            self.headers = { 
                "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36",
                "Cookie": self.cookie
            }
            e = self.skey
            t = 5381
            for n in range(0, len(e)):
                t += (t << 5) + ord(e[n])
                t &= sys.maxint
            self.bkn = t
            driver.quit()
    
        class Mylist():
            ''' 自定义列表，自定义迭代器 '''
            def __init__(self,members,qqGroupNum,qqGroupCount):
                self.nextCount=0
                self.qqGroupCount=qqGroupCount
                self.qqGroupNum=qqGroupNum
                self.members=members
                self.spider=None
    
            def __iter__(self):
                return self
    
            def next(self):
                if self.nextCount >= self.qqGroupCount:
                    raise StopIteration
                elif self.nextCount==0:
                    self.nextCount += 1
                    return self.members[0]
                elif (self.nextCount)%100==0:
                    members = self.spider.getMembers(self.qqGroupNum,start=self.nextCount)
                    self.members=members
                    self.nextCount += 1
                    return members[0]
                else:
                    self.nextCount += 1
                    return self.members[(self.nextCount-1)%100]
    
        def getGroupList(self):
            ''' 获取QQ对应的所有Q群号 :return: '''
            headers = { 
                "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36",
                "Cookie": self.cookie
            }
    
            groupInfoR = requests.post('https://qun.qq.com/cgi-bin/qun_mgr/get_group_list', data='bkn=' + str(self.bkn),
                                       headers=headers, verify=False)
            groupInfo = json.loads(groupInfoR.text)
            groupList = groupInfo['create'] + groupInfo['join']
            return groupList
    
        def getMembers(self,qqGroupNum,start=0,count=100):
            ''' 获取Q群成员列表的方法，返回json数组 :param qqGroupNum: Q群号 :param start: Q群成员的开始下标索引 :param count: 获取Q群成员的个数，默认取100个，不足100个成员，则全部取出 :return: 返回Q群成员列表 '''
            self.qqGroupNum=qqGroupNum
            data = { 'gc': qqGroupNum, 'st': start, 'end': start+count, 'sort': 0, 'bkn': self.bkn}
            response = requests.post("https://qun.qq.com/cgi-bin/qun_mgr/search_group_members", data=data, headers=self.headers,
                                     verify=False)
            qqJson = json.loads(response.text)
            self.qqGroupCount = qqJson['count']
            members = qqJson['mems']
            return members
    
        def getMembers2(self, qqGroupNum):
            ''' 返回一个自定义的列表，列表可以返回QQ成员信息 :param qqGroupNum: Q群号 :return: '''
            self.qqGroupNum = qqGroupNum
            data = { 'gc': qqGroupNum, 'st': 0, 'end': 100, 'sort': 0, 'bkn': self.bkn}
            response = requests.post("https://qun.qq.com/cgi-bin/qun_mgr/search_group_members", data=data,
                                     headers=self.headers,
                                     verify=False)
            qqJson = json.loads(response.text)
            count = qqJson['count']
            members = qqJson['mems']
            mylist=self.Mylist(members, qqGroupNum, count)
            mylist.spider=self
            return mylist
    
    def main():
        qq=raw_input('请输入QQ号：')
        pwd=raw_input('请输入密码：')
        spider=qqGroupSpider(qq,pwd)
        groupList =spider.getGroupList()
    
        print '请选择以下Q群进行爬取'
        for each in groupList:
            print each['gn'],":",each['gc']
        qqGroup=raw_input('请输入Q群号：')
    
        members =spider.getMembers2(qqGroup)
        # members=spider.getMembers(qqGroup)
    
        writefile = codecs.open(u'qqGroup.txt', 'w',encoding='utf-8')
        writefile.write(u'昵称,q号,性别,q龄,入群时间,等级(积分),最后发言\n')
        for one in members:
            lv=one['lv']
            g=one['g']
            gender=u'男'
            if g==255:
                gender=u'未知'
            elif g==0:
                pass
            elif g==1:
                gender=u'女'
            else:
                gender=g
    
            join_time = time.localtime(one['join_time'])
            join_time = str(join_time[0]) + u'年' + str(join_time[1]) + u'月' + str(
                join_time[2]) + u'日' + str(join_time[3]) + u'时' + str(join_time[4]) + u'分'
            last_speak_time = time.localtime(one['last_speak_time'])
            last_speak_time=str(last_speak_time[0]) + u'年' + str(last_speak_time[1]) + u'月' + str(last_speak_time[2]) + u'日' + str(last_speak_time[3]) + u'时' + str(last_speak_time[4]) + u'分'
            datatext = one['nick']+","+str(one['uin'])+","+gender+","+str(one['qage'])+","+join_time+","+\
                  str(lv['level'])+'('+str(lv['point'])+')'+","+last_speak_time+'\n'
            writefile.write(datatext)
        writefile.close()
    
    if __name__ == '__main__':
        main()

代码放在GitHub上，[python-learning][]  
以上具体代码在目录[other/qq\_group2.py][other_qq_group2.py]  
[我的GitHub][GitHub]

[QQ_-------_1]: https://blog.csdn.net/a_hui_tai_lang/article/details/82800286
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70]: /images/20220413/64f3b91cd5de46f0ab067eff90d22b38.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 1]: /images/20220413/ad17bd17537f404a98b8f4ffa78b7248.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 2]: /images/20220413/421ce2438e644713adb508fe2c512584.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 3]: /images/20220413/47f2e3dae90a45948d3a963ad3b3216e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2FfaHVpX3RhaV9sYW5n_size_16_color_FFFFFF_t_70 4]: /images/20220413/5492c167a62546c7a8849bd0671d6a3c.png
[python-learning]: https://github.com/LoyalWilliams/python-learning
[other_qq_group2.py]: https://github.com/LoyalWilliams/python-learning/blob/master/other/qq_group2.py
[GitHub]: https://github.com/LoyalWilliams