ez自动签到

ez要证书，证书以前免费，现在要积分申请了。积分还不能充值，只有签到和交poc能获得积分。poc交一个才10-20，一个月的证书都要50积分了，所以只能签到。但是天天签到太麻烦了，所以写了个脚本挂着。

去云码注册个账号，加客服扫码白嫖300积分，够用好长时间的了。

然后写个crontab挂服务器上就行了。最好挂俩账号，一个号俩月60积分，换个证书50积分，两个号轮着用。

crontab -e

0 9 * * * cd /checkin;python3 ez_checkin.py>>checkin.log 2>&1

ez_checkin.py:

import json
import time
import requests


def headers(dict={}):
    headers = {
        "Sec-Ch-Ua-Platform": '"Windows"',
        "User-Agent": 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36',
        "Sec-Ch-Ua": '"Not)A;Brand";v="8", "Chromium";v="138", "Google Chrome";v="138"',
        "Content-Type": 'application/json',
        "Sec-Ch-Ua-Mobile": '?0',
        "Accept": '*/*',
        "Origin": 'https://msec.nsfocus.com',
        "Sec-Fetch-Site": 'same-origin',
        "Sec-Fetch-Mode": 'cors',
        "Sec-Fetch-Dest": 'empty',
        "Referer": 'https://msec.nsfocus.com/vuln',
        "Accept-Encoding": 'gzip, deflate, br',
        "Accept-Language": 'zh-CN,zh;q=0.9',
        "Priority": 'u=1, i',
    }
    headers.update(dict)
    return headers


def verify(token, type, image):
    url = "http://api.jfbym.com/api/YmServer/customApi"
    data = {
        "token": token,
        "type": type,
        "image": image
    }
    _headers = {
        "Content-Type": "application/json"
    }
    response = requests.request("POST", url, headers=_headers, json=data).json()
    if response['code'] == 10000:
        return response['data']['data']
    else:
        return False


def get_config():
    return json.load(open("ez_checkin_config.json", "r", encoding="utf-8"))


def update_config(config):
    json.dump(config, open("ez_checkin_config.json", "w", encoding="utf-8"), indent=4, ensure_ascii=False)


def check_in(Authorization):
    resp = requests.post("https://msec.nsfocus.com/backend_api/checkin/checkin",
                         headers=headers({"Authorization": Authorization}), json={}).json()
    print("签到响应:", resp)
    return resp


if __name__ == '__main__':
    config = get_config()
    for user in config["users"]:
        username = user.get('username')
        password = user.get('password')
        Authorization = user.get('Authorization')
        if Authorization != None:
            result = check_in(Authorization)
            if result['status'] == 200:
                print(f"{username}签到成功")
                continue
            elif result['data'] == '今天已经签到过了':
                print(f"{username}今日已签到")
                continue
        print(f"{username}Authorization失效，尝试登录")
        for i in range(1, 11):
            print(f"第{i}次尝试")
            time.sleep(5)
            captcha = requests.post("https://msec.nsfocus.com/backend_api/account/captcha", headers=headers(),
                                    json={}).json().get('data')
            captcha_id = captcha.get('id')
            captcha_img = captcha.get('captcha').split(",")[-1]

            captcha = verify(config["token"], 10103, captcha_img)
            if not captcha or len(captcha) != 5:
                print(f"用户{username}验证码识别失败")
                continue
            print("验证码识别成功:", captcha)
            auth = requests.post("https://msec.nsfocus.com/backend_api/account/login", headers=headers(), json={
                "captcha_answer": captcha,
                "captcha_id": captcha_id,
                "password": password,
                "username": username
            }).json()
            if auth['status'] != 200:
                print(f"{username}登录失败")
                continue
            Authorization = auth['data']['token']
            break
        user["Authorization"] = Authorization
        update_config(config)
        result = check_in(Authorization)
        if result['status'] == 200:
            print(f"{username}签到成功")
            continue
        elif result['data'] == '今天已经签到过了':
            print(f"{username}今日已签到")
            continue
        else:
            print(f"{username}签到失败")

ez_checkin_config.json:

{
    "token": "云码的token",
    "users": [
        {
            "username": "用户名",
            "password": "密码",
            "Authorization": "保存的token，不用管"
        },
        {
            "username": "第二个用户的用户名",
            "password": "第二个用户的密码",
            "Authorization": "保存的token，不用管"
        }
    ]
}