python3

代碼

import requests

import json

import time

from Crypto.Cipherimport AES

import base64

action_data = {

"score":666,

"times":400,

"game_data":"{}"

}

session_id ="XXX"

aes_key = session_id[0:16]

aes_iv? = aes_key

cryptor = AES.new(aes_key, AES.MODE_CBC, aes_iv)

str_action_data = json.dumps(action_data).encode("utf-8")

print("json_str_action_data ", str_action_data)

#Pkcs7

length =16 - (len(str_action_data) %16)

str_action_data +=bytes([length])*length

cipher_action_data = base64.b64encode(cryptor.encrypt(str_action_data)).decode("utf-8")

print("action_data ", cipher_action_data)

post_data = {

"base_req": {

"session_id": session_id,

"fast":1,

},

"action_data": cipher_action_data

}

headers = {

"charset":"utf-8",

"Accept-Encoding":"gzip",

"referer":"https://servicewechat.com/wx7c8d593b2c3a7703/3/page-frame.html",

"content-type":"application/json",

"User-Agent":"MicroMessenger/6.6.1.1200(0x26060130) NetType/WIFI Language/zh_CN",

"Content-Length":"0",

"Host":"mp.weixin.qq.com",

"Connection":"Keep-Alive"

}

url ="https://mp.weixin.qq.com/wxagame/wxagame_settlement"

response = requests.post(url,json=post_data,headers=headers,verify=False)

print(json.loads(response.text))

使用charles抓微信傳輸數據

微信抓iphone：http://www.lxweimin.com/p/595e8b556a60?from=timeline&isappinstalled=0

找到session_id