kiper292
2 months ago
2 changed files with 687 additions and 96 deletions
@ -0,0 +1,325 @@ |
|||
// SPDX-FileCopyrightText: 2023 The Pion community <https://pion.ly>
|
|||
// SPDX-License-Identifier: MIT
|
|||
|
|||
package main |
|||
|
|||
import ( |
|||
"context" |
|||
"crypto/sha256" |
|||
"crypto/tls" |
|||
"encoding/base64" |
|||
"encoding/hex" |
|||
"encoding/json" |
|||
"fmt" |
|||
"io" |
|||
"log" |
|||
"math/rand" |
|||
"net/http" |
|||
"net/url" |
|||
"regexp" |
|||
"strconv" |
|||
"strings" |
|||
"time" |
|||
) |
|||
|
|||
const ( |
|||
vkCaptchaAPIVersion = "5.275" |
|||
vkCaptchaNotRobotVer = "5.131" |
|||
vkDebugInfo = "d44f534ce8deb56ba20be52e05c433309b49ee4d2a70602deeb17a1954257785" |
|||
) |
|||
|
|||
// VkCaptchaData holds captcha challenge data from VK error response
|
|||
type VkCaptchaData struct { |
|||
CaptchaSid string |
|||
CaptchaTs string |
|||
CaptchaAttempt string |
|||
RedirectURI string |
|||
SessionToken string |
|||
} |
|||
|
|||
// ExtractCaptchaData parses VK API error response for captcha info
|
|||
func ExtractCaptchaData(errResp map[string]interface{}) (*VkCaptchaData, bool) { |
|||
code, _ := errResp["error_code"].(float64) |
|||
if int(code) != 14 { |
|||
return nil, false |
|||
} |
|||
|
|||
redirectURI, _ := errResp["redirect_uri"].(string) |
|||
if redirectURI == "" { |
|||
return nil, false |
|||
} |
|||
|
|||
// Parse session_token from redirect_uri
|
|||
parsed, err := url.Parse(redirectURI) |
|||
if err != nil { |
|||
return nil, false |
|||
} |
|||
sessionToken := parsed.Query().Get("session_token") |
|||
if sessionToken == "" { |
|||
return nil, false |
|||
} |
|||
|
|||
// Extract captcha_sid
|
|||
captchaSid, _ := errResp["captcha_sid"].(string) |
|||
|
|||
// captcha_ts can be float64 or string
|
|||
var captchaTs string |
|||
if tsFloat, ok := errResp["captcha_ts"].(float64); ok { |
|||
captchaTs = fmt.Sprintf("%.0f", tsFloat) |
|||
} else if tsStr, ok := errResp["captcha_ts"].(string); ok { |
|||
captchaTs = tsStr |
|||
} |
|||
|
|||
// captcha_attempt
|
|||
var captchaAttempt string |
|||
if attFloat, ok := errResp["captcha_attempt"].(float64); ok { |
|||
captchaAttempt = fmt.Sprintf("%.0f", attFloat) |
|||
} else if attStr, ok := errResp["captcha_attempt"].(string); ok { |
|||
captchaAttempt = attStr |
|||
} |
|||
|
|||
return &VkCaptchaData{ |
|||
CaptchaSid: captchaSid, |
|||
CaptchaTs: captchaTs, |
|||
CaptchaAttempt: captchaAttempt, |
|||
RedirectURI: redirectURI, |
|||
SessionToken: sessionToken, |
|||
}, true |
|||
} |
|||
|
|||
// SolveVkCaptcha fetches captcha page, solves PoW, and calls captchaNotRobot API
|
|||
func SolveVkCaptcha(ctx context.Context, captchaData *VkCaptchaData) (string, error) { |
|||
log.Printf("[Captcha] Solving Not Robot Captcha...") |
|||
|
|||
// HAR: Token 2 error → Captcha HTML = 2.72s (browser page load + user perception)
|
|||
time.Sleep(1500*time.Millisecond + time.Duration(rand.Intn(1000))*time.Millisecond) |
|||
|
|||
// Fetch captcha HTML (browser redirect)
|
|||
powInput, difficulty, cookies, err := fetchCaptchaPowInput(ctx, captchaData.RedirectURI) |
|||
if err != nil { |
|||
return "", fmt.Errorf("failed to fetch powInput: %w", err) |
|||
} |
|||
log.Printf("[Captcha] PoW input: %s, difficulty: %d", powInput, difficulty) |
|||
|
|||
// Solve PoW
|
|||
hash := solveCaptchaPoW(powInput, difficulty) |
|||
log.Printf("[Captcha] PoW solved: hash=%s", hash) |
|||
|
|||
// Call captchaNotRobot API with cookies from captcha page
|
|||
successToken, err := callCaptchaNotRobotAPI(ctx, captchaData.SessionToken, hash, cookies) |
|||
if err != nil { |
|||
return "", fmt.Errorf("captchaNotRobot API failed: %w", err) |
|||
} |
|||
|
|||
log.Printf("[Captcha] Success! Got success_token") |
|||
return successToken, nil |
|||
} |
|||
|
|||
func fetchCaptchaPowInput(ctx context.Context, redirectURI string) (string, int, string, error) { |
|||
req, err := http.NewRequestWithContext(ctx, "GET", redirectURI, nil) |
|||
if err != nil { |
|||
return "", 0, "", err |
|||
} |
|||
req.Header.Set("User-Agent", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36") |
|||
req.Header.Set("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8") |
|||
req.Header.Set("Accept-Language", "en-US,en;q=0.9") |
|||
|
|||
client := &http.Client{ |
|||
Timeout: 20 * time.Second, |
|||
Transport: &http.Transport{ |
|||
TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, |
|||
}, |
|||
} |
|||
|
|||
resp, err := client.Do(req) |
|||
if err != nil { |
|||
return "", 0, "", err |
|||
} |
|||
defer resp.Body.Close() |
|||
|
|||
// Capture Set-Cookie headers
|
|||
var cookieValues []string |
|||
for _, setCookie := range resp.Header.Values("Set-Cookie") { |
|||
// Extract just the cookie name=value part (before ; expires= or ; path=)
|
|||
cookieParts := strings.Split(setCookie, ";") |
|||
cookieValues = append(cookieValues, strings.TrimSpace(cookieParts[0])) |
|||
} |
|||
cookies := strings.Join(cookieValues, "; ") |
|||
if cookies != "" { |
|||
log.Printf("[Captcha] Captcha page set %d cookie(s)", len(cookieValues)) |
|||
} |
|||
|
|||
body, err := io.ReadAll(resp.Body) |
|||
if err != nil { |
|||
return "", 0, "", err |
|||
} |
|||
|
|||
html := string(body) |
|||
|
|||
// Extract powInput: const powInput = "..."
|
|||
powInputRe := regexp.MustCompile(`const\s+powInput\s*=\s*"([^"]+)"`) |
|||
powInputMatch := powInputRe.FindStringSubmatch(html) |
|||
if len(powInputMatch) < 2 { |
|||
return "", 0, "", fmt.Errorf("powInput not found in captcha HTML") |
|||
} |
|||
powInput := powInputMatch[1] |
|||
|
|||
// Extract difficulty: '0'.repeat(N)
|
|||
diffRe := regexp.MustCompile(`startsWith\('0'\.repeat\((\d+)\)\)`) |
|||
diffMatch := diffRe.FindStringSubmatch(html) |
|||
difficulty := 2 // default
|
|||
if len(diffMatch) >= 2 { |
|||
if d, err := strconv.Atoi(diffMatch[1]); err == nil { |
|||
difficulty = d |
|||
} |
|||
} |
|||
|
|||
return powInput, difficulty, cookies, nil |
|||
} |
|||
|
|||
func solveCaptchaPoW(powInput string, difficulty int) string { |
|||
target := strings.Repeat("0", difficulty) |
|||
for nonce := 1; nonce <= 10000000; nonce++ { |
|||
data := powInput + strconv.Itoa(nonce) |
|||
hash := sha256.Sum256([]byte(data)) |
|||
hexHash := hex.EncodeToString(hash[:]) |
|||
if strings.HasPrefix(hexHash, target) { |
|||
return hexHash |
|||
} |
|||
} |
|||
return "" |
|||
} |
|||
|
|||
func callCaptchaNotRobotAPI(ctx context.Context, sessionToken, hash, cookies string) (string, error) { |
|||
vkReq := func(method string, postData string) (map[string]interface{}, error) { |
|||
requestURL := fmt.Sprintf("https://api.vk.ru/method/%s?v=%s", method, vkCaptchaNotRobotVer) |
|||
|
|||
req, err := http.NewRequestWithContext(ctx, "POST", requestURL, strings.NewReader(postData)) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
// Headers matching HAR capture exactly
|
|||
req.Header.Set("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36") |
|||
req.Header.Set("Content-Type", "application/x-www-form-urlencoded") |
|||
req.Header.Set("Accept", "*/*") |
|||
req.Header.Set("Accept-Language", "en-US,en;q=0.9") |
|||
req.Header.Set("Origin", "https://id.vk.ru") |
|||
req.Header.Set("Referer", "https://id.vk.ru/") |
|||
req.Header.Set("sec-ch-ua-platform", `"Windows"`) |
|||
req.Header.Set("sec-ch-ua", `"Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"`) |
|||
req.Header.Set("sec-ch-ua-mobile", "?0") |
|||
req.Header.Set("Sec-Fetch-Site", "same-site") |
|||
req.Header.Set("Sec-Fetch-Mode", "cors") |
|||
req.Header.Set("Sec-Fetch-Dest", "empty") |
|||
req.Header.Set("DNT", "1") |
|||
req.Header.Set("Priority", "u=1, i") |
|||
// Add cookies captured from captcha page
|
|||
if cookies != "" { |
|||
req.Header.Set("Cookie", cookies) |
|||
} |
|||
|
|||
client := &http.Client{ |
|||
Timeout: 20 * time.Second, |
|||
Transport: &http.Transport{ |
|||
TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, |
|||
}, |
|||
} |
|||
|
|||
resp, err := client.Do(req) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
defer resp.Body.Close() |
|||
|
|||
body, err := io.ReadAll(resp.Body) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
var result map[string]interface{} |
|||
if err := json.Unmarshal(body, &result); err != nil { |
|||
return nil, err |
|||
} |
|||
return result, nil |
|||
} |
|||
|
|||
domain := "vk.com" |
|||
baseParams := fmt.Sprintf("session_token=%s&domain=%s&adFp=&access_token=", |
|||
url.QueryEscape(sessionToken), url.QueryEscape(domain)) |
|||
|
|||
// Step 1: settings
|
|||
log.Printf("[Captcha] Step 1/4: settings") |
|||
_, err := vkReq("captchaNotRobot.settings", baseParams) |
|||
if err != nil { |
|||
return "", fmt.Errorf("settings failed: %w", err) |
|||
} |
|||
// HAR: settings → componentDone = 0.19s
|
|||
time.Sleep(100*time.Millisecond + time.Duration(rand.Intn(100))*time.Millisecond) |
|||
|
|||
// Step 2: componentDone
|
|||
log.Printf("[Captcha] Step 2/4: componentDone") |
|||
browserFp := fmt.Sprintf("%032x", uint64(time.Now().UnixNano())) |
|||
deviceJSON := `{"screenWidth":1920,"screenHeight":1080,"screenAvailWidth":1920,"screenAvailHeight":1032,"innerWidth":1920,"innerHeight":945,"devicePixelRatio":1,"language":"en-US","languages":["en-US"],"webdriver":false,"hardwareConcurrency":16,"deviceMemory":8,"connectionEffectiveType":"4g","notificationsPermission":"denied"}` |
|||
componentData := baseParams + fmt.Sprintf("&browser_fp=%s&device=%s", browserFp, url.QueryEscape(deviceJSON)) |
|||
_, err = vkReq("captchaNotRobot.componentDone", componentData) |
|||
if err != nil { |
|||
return "", fmt.Errorf("componentDone failed: %w", err) |
|||
} |
|||
// HAR: componentDone → check ≈ 1.95s + statEvents delay ≈ 3.2s total
|
|||
time.Sleep(1500*time.Millisecond + time.Duration(rand.Intn(1000))*time.Millisecond) |
|||
|
|||
// Step 3: check
|
|||
log.Printf("[Captcha] Step 3/4: check") |
|||
cursorJSON := `[{"x":950,"y":500},{"x":945,"y":510},{"x":940,"y":520},{"x":938,"y":525},{"x":938,"y":525}]` |
|||
answer := base64.StdEncoding.EncodeToString([]byte("{}")) // e30=
|
|||
|
|||
// Generate random connectionDownlink values (simulating Network Information API)
|
|||
// HAR shows browser repeats the same value 7 times: [9.8,9.8,9.8,9.8,9.8,9.8,9.8]
|
|||
baseDownlink := 8.0 + rand.Float64()*4.0 // Random in [8.0, 12.0) for typical WiFi
|
|||
downlinkStr := fmt.Sprintf("%.1f", baseDownlink) |
|||
connectionDownlink := "[" + downlinkStr + "," + downlinkStr + "," + downlinkStr + "," + downlinkStr + "," + downlinkStr + "," + downlinkStr + "," + downlinkStr + "]" |
|||
|
|||
checkData := baseParams + fmt.Sprintf( |
|||
"&accelerometer=%s&gyroscope=%s&motion=%s&cursor=%s&taps=%s&connectionRtt=%s&connectionDownlink=%s"+ |
|||
"&browser_fp=%s&hash=%s&answer=%s&debug_info=%s", |
|||
url.QueryEscape("[]"), // accelerometer
|
|||
url.QueryEscape("[]"), // gyroscope
|
|||
url.QueryEscape("[]"), // motion
|
|||
url.QueryEscape(cursorJSON), // cursor
|
|||
url.QueryEscape("[]"), // taps
|
|||
url.QueryEscape("[]"), // connectionRtt
|
|||
url.QueryEscape(connectionDownlink), |
|||
browserFp, // browser_fp
|
|||
hash, // hash (PoW result)
|
|||
answer, // answer
|
|||
vkDebugInfo, // debug_info (static)
|
|||
) |
|||
|
|||
checkResp, err := vkReq("captchaNotRobot.check", checkData) |
|||
if err != nil { |
|||
return "", fmt.Errorf("check request failed: %w", err) |
|||
} |
|||
|
|||
respObj, ok := checkResp["response"].(map[string]interface{}) |
|||
if !ok { |
|||
return "", fmt.Errorf("invalid check response: %v", checkResp) |
|||
} |
|||
|
|||
status, _ := respObj["status"].(string) |
|||
if status != "OK" { |
|||
return "", fmt.Errorf("check response status: %s, full response: %v", status, checkResp) |
|||
} |
|||
|
|||
successToken, ok := respObj["success_token"].(string) |
|||
if !ok || successToken == "" { |
|||
return "", fmt.Errorf("success_token not found in check response: %v", checkResp) |
|||
} |
|||
// HAR: check → endSession = 0.48s
|
|||
time.Sleep(200*time.Millisecond + time.Duration(rand.Intn(300))*time.Millisecond) |
|||
|
|||
// Step 4: endSession
|
|||
log.Printf("[Captcha] Step 4/4: endSession") |
|||
vkReq("captchaNotRobot.endSession", baseParams) |
|||
|
|||
return successToken, nil |
|||
} |
|||
Loading…
Reference in new issue