之前,我能够找到我的Outbrain流量来自哪里,因为它们包含了一个URL参数" origSrc = 1534129 " (这是FoxNews.com)在这样的推荐人中:
http://paid.outbrain.com/network/redir?key=ba8d39805de79b21e0a2fcffd446bcb9&rdid=821633827&type=RPM_/NA_ch2&in-site=false&idx=0&pc_id=21501924&req_id=5b740ff295227c1753749adc72bbb725&agent=blog_JS_rec&recMode=7&reqType=1&wid=150&adsCats=1708,-1,-1&refPub=296&scp=false&reqIdx=2&fcapElementId=22824&origSrc=1534129&did=714910702&pv_id=78d716e32bec0124bcb424aa2eddaabf&uuid=2c2af39f-d968-4e88-8e88-ab230fcd7b33
他们最近编码了他们的URL,现在看起来像这样(取自FoxNews上的模块):
http://paid.outbrain.com/network/redir?p=feJ7Nr753ZKUyzw%2BkQlkGkqo5h6KSzmqBURelKOHYrNFhpUzeNFwXTxpvZ9lBtLT%2FgisNu6dS9DPr4g73pQz4w9YK0W5LSzfsnlqPupuJb3Mcq4pJ7X9LIlPVyzR4QOTRGDIeznBTsTvVl9vPhOW9QJOZPzmQpAK7Q5yMiMwwXaPwzL78WZrc%2BC0bpWCIRwHsJSjqcMVcK%2FN6d8scrmnCAPlDwQVXudXKBRynneq02%2FD9Uqx%2F5zL501Asq0%2BTukd4UBkYdAS21EOSP7AkBn2dJl1G5HXtdURXZst%2F%2F%2B0TcQkRoZ98%2BO8qxKH87AX0uw5a2svIsbL9AmGnX3%2BlLVuMYZFTZRt0LbUnFUWuXFSkvT0oDfO93yhU5Kfcw%2BgpclDQe7NSaHu2ylLobiHuldabM%2B5DslhvZRSG7a4KZkYj%2BRAerkozmIuzDhbydgWPItX3pFDtt0e0tgwZ7Gen%2FT2lmA0qr1%2BLLs%2FPwx098SSR58%3D&v=2
http://paid.outbrain.com/network/redir?p=309deACtZtKjR3dLT6Bj9O0z08jGMvbDzb%2Fd8oIFnvZXEP7XkkjGe6ZhdKc0g2SYaXZfed7Xd9%2BGTy4%2B%2F%2BPxhWGXYoj5Acl9Vu7d3UPDnTZyzq9q%2BjzRXMMPnFezyYZ4swDqWJf1lRqOpBJhG%2Fmoge0OSSvdL2TdKpTvkf1Nj05z%2BL%2BthUPKVXZJ5cx%2BpSeUDsi4SfKr1VkY8hd6HWmspnwghK6KDuKwUjtzesbzYmp%2Bh9keRCCKUwciJ6LU2R17Wnj6BVm7onAsV4INFNPI2Q9lOb%2B%2FX4QRvPxlQXiV5anx9%2BEz%2B1rGtDUdN%2Fy9wYn%2FdUggxWvYNeEbkP2c3fBhnOFEbonbMjPKILpuJB6736QDoyoMuA1ajf4ol%2FbcIhr4p0JXnqd3NPgiQY1%2Fr69z5tiNucv5FkU9v0ndUP%2FyN4FLg2dzo2GxednAZemvGtveCwXbIYGaCAEuWRUvleHgjWKBq5oD0c4cXvTrF%2BiYvmg%3D&v=2
http://paid.outbrain.com/network/redir?p=MYWXGHfkM0sqd18Ui%2BFev3GftAAm1Kb6pMI5j7F0ajSSxG9%2F9iYBjIOsnuqKi9vYijInoR1WxEhljCj8x13h0DIq7tN2dbhbJ9XnZUatWQgEifNWdRSD8ctvH2Y7CLvFnn8jLVovdJLyEVhAgbbOp55WiaEBPfKySR6pMUSPxlViQKLqGvpWRihGnl0STT1dpZqXSdYPixEg69pYB1Ug25u%2BQWrqZh9nI2mQe%2FfClHU6RO8DjiJfBLybujkSCa3aZcB9BeQPgsD6ZF824ymK%2FuyhF7TbR4XUsj7VzM06UjHxwOf4yyG%2FKnRja%2Bn7TOctwZlQJS4NM1Hcd9VEUOjZXVstFrUL6eIxw7nyVSfEkHxOr%2FRZFbbuigxQTei%2BhOExXozKbdfVjZlM8DyQEC0vSOk65NZoZH6sqDdS82Kzq3tCo7StJfv7vJqX9M3jHCizFu8H7IrLZ8%2FI3DhNYDWWY5hv1ECQXjrBdBDJvdQmP8c%3D&v=2
http://paid.outbrain.com/network/redir?p=6iwOm%2B%2BX4zGj74w0QWgyt4ix6H27RiHYp1gQ4qWa3mx90Q2MqZOZTjjiwepqeJpnA9aSwVgJpr9hB0Cy5CM9bBxCVmS%2FGOLl%2BtEc%2B567MNWivjSXAU2KTbV39EqwhOTfCcQAvqtShB%2BM2GtsUyxT63Wt16Q%2B1pMOH17JscejlYAcOjz%2BIkZDQXsKQi3%2FG%2FBzQDTl1suimn3DA63sE230KwmoZPLrgQuSaQENsq9bmcOFHq%2BOGqMLFg9AUKFeXyObjktfdmvPvBCCXH3zNZcYxMAv%2FHCHNGBEzvDHo58h4%2BG15ME%2FriHgPoVbZAVGzpKGspCwPJ8FKOHCjEw%2BZ7PDL%2BeO%2F3MYpqNH5VWVhYna2Tv0zIHrWpRtFSrxqM%2B73DR7gGOogNF32zayMdqHPbUOR2AAkOaW2gLZIn6Z%2F%2F8yh7ms77fgxdeQr8N0IaLOkxhE93UiK9dP216xOaUc64AKcPm7s2qGlW7b3QyG33CBmzY%3D&v=2
这四个网址中的某个地方是一个将网站标识为FoxNews.com或origSrc id的参数。
有谁知道如何找出新网址中origSrc的内容?
答案 0 :(得分:5)
网站 paid.outbrain.com 按照点击链接的次数获得付款。绝对符合他们的最佳利益,使得无法确定链接的原始源是什么,而无需实际单击它,从而从其服务器获取重定向。如果他们已经正确地完成了他们的工作,那么就不应该有办法确定URL中参数中编码的数据实际包含的内容,当然也不是原始来源(没有花费大量的时间,金钱和更多的数据)。他们希望人们不得不点击链接,无法解码链接并绕过记录点击。
但是,我们可以做一些分析,看看是什么。有助于进行此类分析的一件事是,还有已知不包含所需信息的链接。
传递了两个参数:p
和v
。 v=2
每个都相同;有一个值似乎包含非常有限的信息,可能只是向服务器指示它是一个新的样式链接。它可以被忽略。
考虑到p
参数的长度,可能存在编码的数据。另一种实现方式是让他们只将索引发送到存储在其服务器上的数据。这将阻止接收链接的人获得关于链接可能是什么的任何信息。然而,他们似乎没有这样做。
链接的p
参数为:
feJ7Nr753ZKUyzw%2BkQlkGkqo5h6KSzmqBURelKOHYrNFhpUzeNFwXTxpvZ9lBtLT%2FgisNu6dS9DPr4g73pQz4w9YK0W5LSzfsnlqPupuJb3Mcq4pJ7X9LIlPVyzR4QOTRGDIeznBTsTvVl9vPhOW9QJOZPzmQpAK7Q5yMiMwwXaPwzL78WZrc%2BC0bpWCIRwHsJSjqcMVcK%2FN6d8scrmnCAPlDwQVXudXKBRynneq02%2FD9Uqx%2F5zL501Asq0%2BTukd4UBkYdAS21EOSP7AkBn2dJl1G5HXtdURXZst%2F%2F%2B0TcQkRoZ98%2BO8qxKH87AX0uw5a2svIsbL9AmGnX3%2BlLVuMYZFTZRt0LbUnFUWuXFSkvT0oDfO93yhU5Kfcw%2BgpclDQe7NSaHu2ylLobiHuldabM%2B5DslhvZRSG7a4KZkYj%2BRAerkozmIuzDhbydgWPItX3pFDtt0e0tgwZ7Gen%2FT2lmA0qr1%2BLLs%2FPwx098SSR58%3D
309deACtZtKjR3dLT6Bj9O0z08jGMvbDzb%2Fd8oIFnvZXEP7XkkjGe6ZhdKc0g2SYaXZfed7Xd9%2BGTy4%2B%2F%2BPxhWGXYoj5Acl9Vu7d3UPDnTZyzq9q%2BjzRXMMPnFezyYZ4swDqWJf1lRqOpBJhG%2Fmoge0OSSvdL2TdKpTvkf1Nj05z%2BL%2BthUPKVXZJ5cx%2BpSeUDsi4SfKr1VkY8hd6HWmspnwghK6KDuKwUjtzesbzYmp%2Bh9keRCCKUwciJ6LU2R17Wnj6BVm7onAsV4INFNPI2Q9lOb%2B%2FX4QRvPxlQXiV5anx9%2BEz%2B1rGtDUdN%2Fy9wYn%2FdUggxWvYNeEbkP2c3fBhnOFEbonbMjPKILpuJB6736QDoyoMuA1ajf4ol%2FbcIhr4p0JXnqd3NPgiQY1%2Fr69z5tiNucv5FkU9v0ndUP%2FyN4FLg2dzo2GxednAZemvGtveCwXbIYGaCAEuWRUvleHgjWKBq5oD0c4cXvTrF%2BiYvmg%3D
MYWXGHfkM0sqd18Ui%2BFev3GftAAm1Kb6pMI5j7F0ajSSxG9%2F9iYBjIOsnuqKi9vYijInoR1WxEhljCj8x13h0DIq7tN2dbhbJ9XnZUatWQgEifNWdRSD8ctvH2Y7CLvFnn8jLVovdJLyEVhAgbbOp55WiaEBPfKySR6pMUSPxlViQKLqGvpWRihGnl0STT1dpZqXSdYPixEg69pYB1Ug25u%2BQWrqZh9nI2mQe%2FfClHU6RO8DjiJfBLybujkSCa3aZcB9BeQPgsD6ZF824ymK%2FuyhF7TbR4XUsj7VzM06UjHxwOf4yyG%2FKnRja%2Bn7TOctwZlQJS4NM1Hcd9VEUOjZXVstFrUL6eIxw7nyVSfEkHxOr%2FRZFbbuigxQTei%2BhOExXozKbdfVjZlM8DyQEC0vSOk65NZoZH6sqDdS82Kzq3tCo7StJfv7vJqX9M3jHCizFu8H7IrLZ8%2FI3DhNYDWWY5hv1ECQXjrBdBDJvdQmP8c%3D
6iwOm%2B%2BX4zGj74w0QWgyt4ix6H27RiHYp1gQ4qWa3mx90Q2MqZOZTjjiwepqeJpnA9aSwVgJpr9hB0Cy5CM9bBxCVmS%2FGOLl%2BtEc%2B567MNWivjSXAU2KTbV39EqwhOTfCcQAvqtShB%2BM2GtsUyxT63Wt16Q%2B1pMOH17JscejlYAcOjz%2BIkZDQXsKQi3%2FG%2FBzQDTl1suimn3DA63sE230KwmoZPLrgQuSaQENsq9bmcOFHq%2BOGqMLFg9AUKFeXyObjktfdmvPvBCCXH3zNZcYxMAv%2FHCHNGBEzvDHo58h4%2BG15ME%2FriHgPoVbZAVGzpKGspCwPJ8FKOHCjEw%2BZ7PDL%2BeO%2F3MYpqNH5VWVhYna2Tv0zIHrWpRtFSrxqM%2B73DR7gGOogNF32zayMdqHPbUOR2AAkOaW2gLZIn6Z%2F%2F8yh7ms77fgxdeQr8N0IaLOkxhE93UiK9dP216xOaUc64AKcPm7s2qGlW7b3QyG33CBmzY%3D
立即跳出的是%
个字符。我们可以假设%
表示分离一个字段。为了简单分析,我们对那些在不同链接上相同的字段感兴趣,因此我们计算出现次数:
Count Field
4 %3D
4 %2F
3 %2B
1 feJ7Nr753ZKUyzw
1 MYWXGHfkM0sqd18Ui
1 6iwOm
1 309deACtZtKjR3dLT6Bj9O0z08jGMvbDzb
1 %2FyN4FLg2dzo2GxednAZemvGtveCwXbIYGaCAEuWRUvleHgjWKBq5oD0c4cXvTrF
1 %2Fy9wYn
1 %2FuyhF7TbR4XUsj7VzM06UjHxwOf4yyG
1 %2FriHgPoVbZAVGzpKGspCwPJ8FKOHCjEw
1 %2Fr69z5tiNucv5FkU9v0ndUP
1 %2Fmoge0OSSvdL2TdKpTvkf1Nj05z
1 %2FgisNu6dS9DPr4g73pQz4w9YK0W5LSzfsnlqPupuJb3Mcq4pJ7X9LIlPVyzR4QOTRGDIeznBTsTvVl9vPhOW9QJOZPzmQpAK7Q5yMiMwwXaPwzL78WZrc
1 %2FfClHU6RO8DjiJfBLybujkSCa3aZcB9BeQPgsD6ZF824ymK
1 %2FdUggxWvYNeEbkP2c3fBhnOFEbonbMjPKILpuJB6736QDoyoMuA1ajf4ol
1 %2Fd8oIFnvZXEP7XkkjGe6ZhdKc0g2SYaXZfed7Xd9
1 %2FbcIhr4p0JXnqd3NPgiQY1
1 %2FX4QRvPxlQXiV5anx9
1 %2FT2lmA0qr1
1 %2FRZFbbuigxQTei
1 %2FPwx098SSR58
1 %2FN6d8scrmnCAPlDwQVXudXKBRynneq02
1 %2FKnRja
1 %2FI3DhNYDWWY5hv1ECQXjrBdBDJvdQmP8c
1 %2FHCHNGBEzvDHo58h4
1 %2FGOLl
1 %2FG
1 %2FD9Uqx
1 %2FBzQDTl1suimn3DA63sE230KwmoZPLrgQuSaQENsq9bmcOFHq
1 %2F9iYBjIOsnuqKi9vYijInoR1WxEhljCj8x13h0DIq7tN2dbhbJ9XnZUatWQgEifNWdRSD8ctvH2Y7CLvFnn8jLVovdJLyEVhAgbbOp55WiaEBPfKySR6pMUSPxlViQKLqGvpWRihGnl0STT1dpZqXSdYPixEg69pYB1Ug25u
1 %2F8yh7ms77fgxdeQr8N0IaLOkxhE93UiK9dP216xOaUc64AKcPm7s2qGlW7b3QyG33CBmzY
1 %2F5zL501Asq0
1 %2F3MYpqNH5VWVhYna2Tv0zIHrWpRtFSrxqM
1 %2BthUPKVXZJ5cx
1 %2BtEc
1 %2BpSeUDsi4SfKr1VkY8hd6HWmspnwghK6KDuKwUjtzesbzYmp
1 %2Bn7TOctwZlQJS4NM1Hcd9VEUOjZXVstFrUL6eIxw7nyVSfEkHxOr
1 %2BlLVuMYZFTZRt0LbUnFUWuXFSkvT0oDfO93yhU5Kfcw
1 %2BkQlkGkqo5h6KSzmqBURelKOHYrNFhpUzeNFwXTxpvZ9lBtLT
1 %2BjzRXMMPnFezyYZ4swDqWJf1lRqOpBJhG
1 %2BiYvmg
1 %2BhOExXozKbdfVjZlM8DyQEC0vSOk65NZoZH6sqDdS82Kzq3tCo7StJfv7vJqX9M3jHCizFu8H7IrLZ8
1 %2Bh9keRCCKUwciJ6LU2R17Wnj6BVm7onAsV4INFNPI2Q9lOb
1 %2BgpclDQe7NSaHu2ylLobiHuldabM
1 %2BeO
1 %2BZ7PDL
1 %2BX4zGj74w0QWgyt4ix6H27RiHYp1gQ4qWa3mx90Q2MqZOZTjjiwepqeJpnA9aSwVgJpr9hB0Cy5CM9bBxCVmS
1 %2BTukd4UBkYdAS21EOSP7AkBn2dJl1G5HXtdURXZst
1 %2BRAerkozmIuzDhbydgWPItX3pFDtt0e0tgwZ7Gen
1 %2BQWrqZh9nI2mQe
1 %2BPxhWGXYoj5Acl9Vu7d3UPDnTZyzq9q
1 %2BOGqMLFg9AUKFeXyObjktfdmvPvBCCXH3zNZcYxMAv
1 %2BO8qxKH87AX0uw5a2svIsbL9AmGnX3
1 %2BM2GtsUyxT63Wt16Q
1 %2BLLs
1 %2BL
1 %2BIkZDQXsKQi3
1 %2BGTy4
1 %2BG15ME
1 %2BFev3GftAAm1Kb6pMI5j7F0ajSSxG9
1 %2BEz
1 %2BC0bpWCIRwHsJSjqcMVcK
1 %2B73DR7gGOogNF32zayMdqHPbUOR2AAkOaW2gLZIn6Z
1 %2B5DslhvZRSG7a4KZkYj
1 %2B567MNWivjSXAU2KTbV39EqwhOTfCcQAvqtShB
1 %2B1rGtDUdN
1 %2B1pMOH17JscejlYAcOjz
1 %2B0TcQkRoZ98
我们发现没有重复的%字段。由此,我们可以得出结论:%
字符是字段分隔符的假设是错误的,没有包含重复数据的字段,或者编码数据的方法在每个URL中都不会产生相同的输出对于任何相同的单个字段。这种情况有多种方式。可以很容易地在字符串中编码种子值。这样的种子值可能只是一个实际解码密钥列表的索引,它只存在于服务器上。
因此,假设%标记字段被抛出,因为它没有证明存在任何重复字段,我们会查看它以查看它可能是什么。
上面的输出清楚地表明只有3个不同的格式为%[0-9A-F] [0-9A-F]的字符串。我们知道,为了通过URL传输数据,需要以完全相同的格式编码许多字符。转换%2F = /
,%2B = +
使用的代码,当然还有评论中提到的%3D = =
。我们看到:
feJ7Nr753ZKUyzw+kQlkGkqo5h6KSzmqBURelKOHYrNFhpUzeNFwXTxpvZ9lBtLT/gisNu6dS9DPr4g73pQz4w9YK0W5LSzfsnlqPupuJb3Mcq4pJ7X9LIlPVyzR4QOTRGDIeznBTsTvVl9vPhOW9QJOZPzmQpAK7Q5yMiMwwXaPwzL78WZrc+C0bpWCIRwHsJSjqcMVcK/N6d8scrmnCAPlDwQVXudXKBRynneq02/D9Uqx/5zL501Asq0+Tukd4UBkYdAS21EOSP7AkBn2dJl1G5HXtdURXZst//+0TcQkRoZ98+O8qxKH87AX0uw5a2svIsbL9AmGnX3+lLVuMYZFTZRt0LbUnFUWuXFSkvT0oDfO93yhU5Kfcw+gpclDQe7NSaHu2ylLobiHuldabM+5DslhvZRSG7a4KZkYj+RAerkozmIuzDhbydgWPItX3pFDtt0e0tgwZ7Gen/T2lmA0qr1+LLs/Pwx098SSR58=
309deACtZtKjR3dLT6Bj9O0z08jGMvbDzb/d8oIFnvZXEP7XkkjGe6ZhdKc0g2SYaXZfed7Xd9+GTy4+/+PxhWGXYoj5Acl9Vu7d3UPDnTZyzq9q+jzRXMMPnFezyYZ4swDqWJf1lRqOpBJhG/moge0OSSvdL2TdKpTvkf1Nj05z+L+thUPKVXZJ5cx+pSeUDsi4SfKr1VkY8hd6HWmspnwghK6KDuKwUjtzesbzYmp+h9keRCCKUwciJ6LU2R17Wnj6BVm7onAsV4INFNPI2Q9lOb+/X4QRvPxlQXiV5anx9+Ez+1rGtDUdN/y9wYn/dUggxWvYNeEbkP2c3fBhnOFEbonbMjPKILpuJB6736QDoyoMuA1ajf4ol/bcIhr4p0JXnqd3NPgiQY1/r69z5tiNucv5FkU9v0ndUP/yN4FLg2dzo2GxednAZemvGtveCwXbIYGaCAEuWRUvleHgjWKBq5oD0c4cXvTrF+iYvmg=
MYWXGHfkM0sqd18Ui+Fev3GftAAm1Kb6pMI5j7F0ajSSxG9/9iYBjIOsnuqKi9vYijInoR1WxEhljCj8x13h0DIq7tN2dbhbJ9XnZUatWQgEifNWdRSD8ctvH2Y7CLvFnn8jLVovdJLyEVhAgbbOp55WiaEBPfKySR6pMUSPxlViQKLqGvpWRihGnl0STT1dpZqXSdYPixEg69pYB1Ug25u+QWrqZh9nI2mQe/fClHU6RO8DjiJfBLybujkSCa3aZcB9BeQPgsD6ZF824ymK/uyhF7TbR4XUsj7VzM06UjHxwOf4yyG/KnRja+n7TOctwZlQJS4NM1Hcd9VEUOjZXVstFrUL6eIxw7nyVSfEkHxOr/RZFbbuigxQTei+hOExXozKbdfVjZlM8DyQEC0vSOk65NZoZH6sqDdS82Kzq3tCo7StJfv7vJqX9M3jHCizFu8H7IrLZ8/I3DhNYDWWY5hv1ECQXjrBdBDJvdQmP8c=
6iwOm++X4zGj74w0QWgyt4ix6H27RiHYp1gQ4qWa3mx90Q2MqZOZTjjiwepqeJpnA9aSwVgJpr9hB0Cy5CM9bBxCVmS/GOLl+tEc+567MNWivjSXAU2KTbV39EqwhOTfCcQAvqtShB+M2GtsUyxT63Wt16Q+1pMOH17JscejlYAcOjz+IkZDQXsKQi3/G/BzQDTl1suimn3DA63sE230KwmoZPLrgQuSaQENsq9bmcOFHq+OGqMLFg9AUKFeXyObjktfdmvPvBCCXH3zNZcYxMAv/HCHNGBEzvDHo58h4+G15ME/riHgPoVbZAVGzpKGspCwPJ8FKOHCjEw+Z7PDL+eO/3MYpqNH5VWVhYna2Tv0zIHrWpRtFSrxqM+73DR7gGOogNF32zayMdqHPbUOR2AAkOaW2gLZIn6Z//8yh7ms77fgxdeQr8N0IaLOkxhE93UiK9dP216xOaUc64AKcPm7s2qGlW7b3QyG33CBmzY=
由此我们认识到它们可以使用base64进行编码。事实上,它们都解码为368字节的数据。二进制文件通常分为固定长度的字段。如果数据包含一个简单的数字地图,表明它指向一个特定的网站,我们希望在所有四个368字节长的序列中找到一个区域,这个区域在所有四个中都是相同的。因此,我们打破了多文件数据比较器。它产生:
0x000 7d df 31 ea 1 multi-diff
0x001 e2 4f 85 2c O multi-diff
0x002 7b 5d 97 0e ] multi-diff
0x003 36 78 18 9b 6 x multi-diff
0x004 be 00 77 ef w multi-diff
0x005 f9 ad e4 97 multi-diff
0x006 dd 66 33 e3 f 3 multi-diff
0x007 92 d2 4b 31 K 1 multi-diff
0x008 94 a3 2a a3 multi-diff
0x009 cb 47 77 ef G w multi-diff
0x00a 3c 77 5f 8c < w _ multi-diff
0x00b 3e 4b 14 34 > K 4 multi-diff
0x00c 91 4f 8b 41 O A multi-diff
0x00d 09 a0 e1 68 h multi-diff
0x00e 64 63 5e 32 d c ^ 2 multi-diff
0x00f 1a f4 bf b7 multi-diff
0x010 4a ed 71 88 J q multi-diff
0x011 a8 33 9f b1 3 multi-diff
0x012 e6 d3 b4 e8 multi-diff
0x013 1e c8 00 7d multi-diff
0x014 8a c6 26 bb multi-diff
0x015 4b 32 d4 46 K 2 F multi-diff
0x016 39 f6 a6 21 9 multi-diff
0x017 aa c3 fa d8 multi-diff
0x018 05 cd a4 a7 multi-diff
0x019 44 bf c2 58 D X multi-diff
0x01a 5e dd 39 10 ^ 9 multi-diff
0x01b 94 f2 8f e2 multi-diff
0x01c a3 82 b1 a5 multi-diff
0x01d 87 05 74 9a t multi-diff
0x01e 62 9e 6a de b j multi-diff
0x01f b3 f6 34 6c 4 l multi-diff
0x020 45 57 92 7d E W multi-diff
0x021 86 10 c4 d1 multi-diff
0x022 95 fe 6f 0d o multi-diff
0x023 33 d7 7f 8c 3 multi-diff
0x024 78 92 f6 a9 x multi-diff
0x025 d1 48 26 93 H multi-diff
0x026 70 c6 01 99 p multi-diff
0x027 5d 7b 8c 4e ] N multi-diff
0x028 3c a6 83 38 < 8 multi-diff
0x029 69 61 ac e2 i a multi-diff
0x02a bd 74 9e c1 t multi-diff
0x02b 9f a7 ea ea multi-diff
0x02c 65 34 8a 6a e 4 j multi-diff
0x02d 06 83 8b 78 x multi-diff
0x02e d2 64 db 9a d multi-diff
0x02f d3 98 d8 67 g multi-diff
0x030 fe 69 8a 03 i multi-diff
0x031 08 76 32 d6 v 2 multi-diff
0x032 ac 5f 27 92 _ multi-diff
0x033 36 79 a1 c1 6 y multi-diff
0x034 ee de 1d 58 X multi-diff
0x035 9d d7 56 09 V multi-diff
0x036 4b 77 c4 a6 K w multi-diff
0x037 d0 df 48 bf H multi-diff
0x038 cf 86 65 61 e a multi-diff
0x039 af 4f 8c 07 O multi-diff
0x03a 88 2e 28 40 @ multi-diff
0x03b 3b 3e fc b2 ; > multi-diff
0x03c de ff c7 e4 multi-diff
0x03d 94 e3 5d 23 ] multi-diff
0x03e 33 f1 e1 3d 3 = multi-diff
0x03f e3 85 d0 6c l multi-diff
0x040 0f 61 32 1c a 2 multi-diff
0x041 58 97 2a 42 X B multi-diff
0x042 2b 62 ee 56 b V multi-diff
0x043 45 88 d3 64 E d multi-diff
0x044 b9 f9 76 bf v multi-diff
0x045 2d 01 75 18 u multi-diff
0x046 2c c9 b8 e2 multi-diff
0x047 df 7d 5b e5 [ multi-diff
0x048 b2 56 27 fa V multi-diff
0x049 79 ee d5 d1 y multi-diff
0x04a 6a dd e7 1c j multi-diff
0x04b 3e dd 65 fb > e multi-diff
0x04c ea 43 46 9e C F multi-diff
0x04d 6e c3 ad bb n multi-diff
0x04e 25 9d 59 30 Y 0 multi-diff
0x04f bd 36 08 d5 6 multi-diff
0x050 cc 72 04 a2 r multi-diff
0x051 72 ce 89 be r multi-diff
0x052 ae af f3 34 4 multi-diff
0x053 29 6a 56 97 j V multi-diff
0x054 27 fa 75 01 u multi-diff
0x055 b5 3c 14 4d < M multi-diff
0x056 fd d1 83 8a multi-diff
0x057 2c 5c f1 4d \ M multi-diff
0x058 89 c3 cb b5 multi-diff
0x059 4f 0f 6f 77 O o w multi-diff
0x05a 57 9c 1f f4 W multi-diff
0x05b 2c 57 66 4a W f J multi-diff
0x05c d1 b3 3b b0 ; multi-diff
0x05d e1 c9 08 84 multi-diff
0x05e 03 86 bb e4 multi-diff
0x05f 93 78 c5 df x multi-diff
0x060 44 b3 9e 09 D multi-diff
0x061 60 00 7f c4 ` multi-diff
0x062 c8 ea 23 00 multi-diff
0x063 7b 58 2d be X multi-diff
0x064 39 97 5a ab 9 Z multi-diff
0x065 c1 f5 2f 52 R multi-diff
0x066 4e 95 74 84 N t multi-diff
0x067 c4 1a 92 1f multi-diff
0x068 ef 8e f2 8c multi-diff
0x069 56 a4 11 d8 V multi-diff
0x06a 5f 12 58 6b _ X k multi-diff
0x06b 6f 61 40 6c o a @ l multi-diff
0x06c 3e 1b 81 53 > S multi-diff
0x06d 13 f9 b6 2c multi-diff
0x06e 96 a8 ce 53 S multi-diff
0x06f f5 81 a7 eb multi-diff
0x070 02 ed 9e 75 u multi-diff
0x071 4e 0e 56 ad N V multi-diff
0x072 64 49 89 d7 d I multi-diff
0x073 fc 2b a1 a4 multi-diff
0x074 e6 dd 01 3e > multi-diff
0x075 42 2f 3d d6 B = multi-diff
0x076 90 64 f2 93 d multi-diff
0x077 0a dd b2 0e multi-diff
0x078 ed 2a 49 1f I multi-diff
0x079 0e 94 1e 5e ^ multi-diff
0x07a 72 ef a9 c9 r multi-diff
0x07b 32 91 31 b1 2 1 multi-diff
0x07c 23 fd 44 c7 D multi-diff
0x07d 30 4d 8f a3 0 M multi-diff
0x07e c1 8f c6 95 multi-diff
0x07f 76 4e 55 80 v N U multi-diff
0x080 8f 73 62 1c s b multi-diff
0x081 c3 f8 40 3a @ : multi-diff
0x082 32 bf a2 3c 2 < multi-diff
0x083 fb ad ea fe multi-diff
0x084 f1 85 1a 22 multi-diff
0x085 66 43 fa 46 f C F multi-diff
0x086 6b ca 56 43 k V C multi-diff
0x087 73 55 46 41 s U F A multi-diff
0x088 e0 76 28 7b v multi-diff
0x089 b4 49 46 0a I F multi-diff
0x08a 6e e5 9e 42 n B multi-diff
0x08b 95 cc 5d 2d ] multi-diff
0x08c 82 7e 12 ff multi-diff
0x08d 21 a5 4d 1b M multi-diff
0x08e 1c 27 3d f0 = multi-diff
0x08f 07 94 5d 73 ] s multi-diff
0x090 b0 0e a5 40 @ multi-diff
0x091 94 c8 9a 34 4 multi-diff
0x092 a3 b8 97 e5 multi-diff
0x093 a9 49 49 d6 I I multi-diff
0x094 c3 f2 d6 cb multi-diff
0x095 15 ab 0f a2 multi-diff
0x096 70 d5 8b 9a p multi-diff
0x097 af 59 11 7d Y multi-diff
0x098 cd 18 20 c3 multi-diff
0x099 e9 f2 eb 03 multi-diff
0x09a df 17 da ad multi-diff
0x09b 2c 7a 58 ec z X multi-diff
0x09c 72 1d 07 13 r multi-diff
0x09d b9 69 55 6d i U m multi-diff
0x09e a7 ac 20 f4 multi-diff
0x09f 08 a6 db 2b multi-diff
0x0a0 03 7c 9b 09 multi-diff
0x0a1 e5 20 be a8 multi-diff
0x0a2 0f 84 41 64 A d multi-diff
0x0a3 04 ae 6a f2 j multi-diff
0x0a4 15 8a ea eb multi-diff
0x0a5 5e 0e 66 81 ^ f multi-diff
0x0a6 e7 e2 1f 0b multi-diff
0x0a7 57 b0 67 92 W g multi-diff
0x0a8 28 52 23 69 R i multi-diff
0x0a9 14 3b 69 01 ; i multi-diff
0x0aa 72 73 90 0d r s multi-diff
0x0ab 9e 7a 7b b2 z multi-diff
0x0ac 77 c6 f7 af w multi-diff
0x0ad aa f3 c2 5b [ multi-diff
0x0ae d3 62 94 99 b multi-diff
0x0af 6f 6a 75 c3 o j u multi-diff
0x0b0 c3 7e 3a 85 : multi-diff
0x0b1 f5 87 44 1e D multi-diff
0x0b2 4a d9 ef af J multi-diff
0x0b3 b1 1e 03 8e multi-diff
0x0b4 ff 44 8e 1a D multi-diff
0x0b5 9c 20 22 a3 multi-diff
0x0b6 cb 8a 5f 0b _ multi-diff
0x0b7 e7 53 04 16 S multi-diff
0x0b8 4d 07 bc 0f M multi-diff
0x0b9 40 22 9b 40 @ @ multi-diff
0x0ba b2 27 ba 50 P multi-diff
0x0bb ad a2 39 a1 9 multi-diff
0x0bc 3e d4 12 5e > ^ multi-diff
0x0bd 4e d9 09 5f N _ multi-diff
0x0be e9 1d ad 23 multi-diff
0x0bf 1d 7b da 9b multi-diff
0x0c0 e1 5a 65 8e Z e multi-diff
0x0c1 40 78 c0 4b @ x K multi-diff
0x0c2 64 fa 7d 5f d _ multi-diff
0x0c3 61 05 05 76 a v multi-diff
0x0c4 d0 59 e4 6b Y k multi-diff
0x0c5 12 bb 0f cf multi-diff
0x0c6 db a2 82 bc multi-diff
0x0c7 51 70 c0 10 Q p multi-diff
0x0c8 0e 2c fa 82 multi-diff
0x0c9 48 57 64 5c H W d \ multi-diff
0x0ca fe 82 5f 7d _ multi-diff
0x0cb c0 0d 36 f3 6 multi-diff
0x0cc 90 14 e3 35 5 multi-diff
0x0cd 19 d3 29 97 multi-diff
0x0ce f6 c8 8a 18 multi-diff
0x0cf 74 d9 fe c4 t multi-diff
0x0d0 99 0f ec c0 multi-diff
0x0d1 75 65 a1 2f u e multi-diff
0x0d2 1b 39 17 fc 9 multi-diff
0x0d3 91 bf b4 70 p multi-diff
0x0d4 d7 bf db 87 multi-diff
0x0d5 b5 5f 47 34 _ G 4 multi-diff
0x0d6 d5 84 85 60 ` multi-diff
0x0d7 11 11 d4 44 D multi-diff
0x0d8 5d bc b2 ce ] multi-diff
0x0d9 9b fc 3e f0 > multi-diff
0x0da 2d 65 d5 c7 e multi-diff
0x0db ff 41 cc a3 A multi-diff
0x0dc ff 78 cd 9f x multi-diff
0x0dd b4 95 3a 21 : multi-diff
0x0de 4d e5 52 e3 M R multi-diff
0x0df c4 a9 31 e1 1 multi-diff
0x0e0 24 f1 f1 b5 multi-diff
0x0e1 46 f7 c0 e4 F multi-diff
0x0e2 86 e1 e7 c1 multi-diff
0x0e3 7d 33 f8 3f 3 ? multi-diff
0x0e4 f3 fb cb ae multi-diff
0x0e5 e3 5a 21 21 Z multi-diff
0x0e6 bc c6 bf e0 multi-diff
0x0e7 ab b4 2a 3e > multi-diff
0x0e8 12 35 74 85 5 t multi-diff
0x0e9 87 1d 63 5b c [ multi-diff
0x0ea f3 37 6b 64 7 k d multi-diff
0x0eb b0 fc e9 05 multi-diff
0x0ec 17 bd fb 46 F multi-diff
0x0ed d2 c1 4c ce L multi-diff
0x0ee ec 89 e7 92 multi-diff
0x0ef 39 ff 2d 86 9 multi-diff
0x0f0 6b 75 c1 b2 k u multi-diff
0x0f1 6b 48 99 90 k H multi-diff
0x0f2 2f 20 50 b0 P multi-diff
0x0f3 22 c5 25 3c < multi-diff
0x0f4 c6 6b 2e 9f k multi-diff
0x0f5 cb d8 0d 05 multi-diff
0x0f6 f4 35 33 28 5 3 multi-diff
0x0f7 09 e1 51 e1 Q multi-diff
0x0f8 86 1b dc c2 multi-diff
0x0f9 9d 90 77 8c w multi-diff
0x0fa 7d fd d5 4c L multi-diff
0x0fb fe 9c 44 3e D > multi-diff
0x0fc 94 dd 50 67 P g multi-diff
0x0fd b5 f0 e8 b3 multi-diff
0x0fe 6e 61 d9 c3 n a multi-diff
0x0ff 31 9c 5d 2f 1 ] multi-diff
0x100 86 e1 5b e7 [ multi-diff
0x101 45 44 2d 8e E D multi-diff
0x102 4d 6e 16 ff M n multi-diff
0x103 94 89 b5 73 s multi-diff
0x104 6d db 0b 18 m multi-diff
0x105 d0 32 e9 a6 2 multi-diff
0x106 b6 33 e2 a3 3 multi-diff
0x107 d4 ca 31 47 1 G multi-diff
0x108 9c 20 c3 e5 multi-diff
0x109 55 ba b9 55 U U multi-diff
0x10a 16 6e f2 95 n multi-diff
0x10b b9 24 55 85 U multi-diff
0x10c 71 1e 27 89 q multi-diff
0x10d 52 bb c4 da R multi-diff
0x10e 92 df 90 d9 multi-diff
0x10f f4 a4 7c 3b ; multi-diff
0x110 f4 03 4e f4 N multi-diff
0x111 a0 a3 af cc multi-diff
0x112 37 2a f4 81 7 multi-diff
0x113 ce 0c 59 eb Y multi-diff
0x114 f7 b8 15 5a Z multi-diff
0x115 7c 0d b6 94 multi-diff
0x116 a1 5a ee 6d Z m multi-diff
0x117 53 8d 8a 15 S multi-diff
0x118 92 fe 0c 2a multi-diff
0x119 9f 28 50 f1 P multi-diff
0x11a 73 97 4d a8 s M multi-diff
0x11b 0f f6 e8 cf multi-diff
0x11c a0 dc be bb multi-diff
0x11d a5 22 84 dc multi-diff
0x11e c9 1a e1 34 4 multi-diff
0x11f 43 f8 31 7b C 1 multi-diff
0x120 41 a7 5e 80 A ^ multi-diff
0x121 ee 42 8c 63 B c multi-diff
0x122 cd 57 ca a8 W multi-diff
0x123 49 9e 6d 80 I m multi-diff
0x124 a1 a7 d7 d1 multi-diff
0x125 ee 77 d5 77 w w multi-diff
0x126 db 34 8d db 4 multi-diff
0x127 29 f8 99 36 6 multi-diff
0x128 4b 22 4c b2 K L multi-diff
0x129 a1 41 f0 31 A 1 multi-diff
0x12a b8 8d 3c da < multi-diff
0x12b 87 7f 90 87 multi-diff
0x12c ba af 10 3d = multi-diff
0x12d 57 af 2d b5 W multi-diff
0x12e 5a 73 2f 0e Z s multi-diff
0x12f 6c e6 48 47 l H G multi-diff
0x130 cf d8 e9 60 ` multi-diff
0x131 b9 8d 3a 00 : multi-diff
0x132 0e b9 e4 90 multi-diff
0x133 c9 cb d6 e6 multi-diff
0x134 61 f9 68 96 a h multi-diff
0x135 bd 16 64 da d multi-diff
0x136 94 45 7e 02 E multi-diff
0x137 52 3d ac d9 R = multi-diff
0x138 1b bf a8 22 multi-diff
0x139 b6 49 37 7e I 7 multi-diff
0x13a b8 dd 52 99 R multi-diff
0x13b 29 50 f3 ff P multi-diff
0x13c 99 ff 62 ff b multi-diff
0x13d 18 f2 b3 32 2 multi-diff
0x13e 8f 37 ab 87 7 multi-diff
0x13f e4 81 7b b9 multi-diff
0x140 40 4b 42 ac @ K B multi-diff
0x141 7a 83 a3 ef z multi-diff
0x142 b9 67 b4 b7 g multi-diff
0x143 28 73 ad e0 s multi-diff
0x144 ce a3 25 c5 multi-diff
0x145 62 61 fb d7 b a multi-diff
0x146 2e b1 fb 90 multi-diff
0x147 cc 79 bc af y multi-diff
0x148 38 d9 9a c3 8 multi-diff
0x149 5b c0 97 74 [ t multi-diff
0x14a c9 65 f4 21 e multi-diff
0x14b d8 e9 cd a2 multi-diff
0x14c 16 af e3 ce multi-diff
0x14d 3c 1a 1c 93 < multi-diff
0x14e 8b db 28 18 multi-diff
0x14f 57 de b3 44 W D multi-diff
0x150 de 0b 16 f7 multi-diff
0x151 91 05 ef 75 u multi-diff
0x152 43 db 07 22 C multi-diff
0x153 b6 21 ec 2b multi-diff
0x154 dd 81 8a d7 multi-diff
0x155 1e 9a cb 4f O multi-diff
0x156 d2 08 67 db g multi-diff
0x157 d8 01 cf 5e ^ multi-diff
0x158 30 2e c8 b1 0 multi-diff
0x159 67 59 dc 39 g Y 9 multi-diff
0x15a b1 15 38 a5 8 multi-diff
0x15b 9e 2f 4d 1c M multi-diff
0x15c 9f 95 60 eb ` multi-diff
0x15d f4 e1 35 80 5 multi-diff
0x15e f6 e0 96 0a multi-diff
0x15f 96 8d 63 70 c p multi-diff
0x160 60 62 98 f9 ` b multi-diff
0x161 34 81 6f bb 4 o multi-diff
0x162 aa ab d4 b3 multi-diff
0x163 bd 9a 40 6a @ j multi-diff
0x164 7e 03 90 86 multi-diff
0x165 2c d1 5e 95 ^ multi-diff
0x166 bb ce 3a 6e : n multi-diff
0x167 3f 1c c1 db ? multi-diff
0x168 3f 5e 74 dd ? ^ t multi-diff
0x169 0c f4 10 0c multi-diff
0x16a 74 eb c9 86 t multi-diff
0x16b f7 17 bd df multi-diff
0x16c c4 e8 d4 70 p multi-diff
0x16d 92 98 26 81 multi-diff
0x16e 47 be 3f 9b G ? multi-diff
0x16f 9f 68 c7 36 h 6 multi-diff
从这里我们看到数据中没有字节位置匹配所有四个数据,假设它是base64编码的,这很可能。因此,看起来所需信息不是在固定长度和位置的二进制字段中编码的。
基本上,我们可以通过快速而肮脏的方式得出结论,或者假设他们正确地完成了他们的工作,并使用一种编码来阻止我们解码,而不会在他们的服务器上保存数据。
即使解码时需要服务器上的数据,也可以确定该信息。然而,这样做的技术通常需要获得大量编码消息,以便最终重复用于编码的数据值。由此可以确定解码消息所需的未知数据。
我有很多未涉及的内容。破解编码/加密领域是巨大的,并且投入了大量资金。这里的内容只是非常简单查看数据。
大多数加密的目的是使原始数据的成本(时间,精力,CPU,资金)比原始数据的价值更高。似乎 paid.outbrain.com 已成功使用通过该栏的编码/加密。