Introduction to Alibaba Cloud Slider Verification:
Swipe verification is a verification code product that serves the front line of Alibaba's human-machine recognition. Users can pass verification without thinking by simply swiping right to interact.
Document link: https://help.aliyun.com/document_detail/66317.html
Product purchase link: https://yundun.console.aliyun.com/?p=afs#/person-machine
The general process of Alibaba Cloud slider verification code is as follows:
After the web page loads - > get the verification code - > the user slides the verification code - > obtain the csessionid and sig parameters from the Alibaba Cloud interface - > request it from our backend interface with csessionid, sig, nc_token, nc_login parameters - > get the parameters in the background to verify the > return to the front-end verification results
Renderings:
The html code is as follows:
The test.ashx interface code is as follows:
ip.ashx interface code:
When verifying in the background, there are 6 parameters,4 of the parameters are obtained from the foreground, and 2 parameters are filled in from the backgroundAs follows:
RemoteIp parameter, I have not found an explanation of this parameter from the official Alibaba Cloud documentation。。。。。 Literally, we can see that this parameter is the IP address of the requester...
web.config has a configuration:
When IsRemoteIp is true, I return the forged IP, which is 8.8.8.8, and if it is false, we return the real IP of the user, as shown in the figure below:
The test results, whether it is a fake request IP or a real requester IP, do not affect the verification results, which indicates that RemoteIP should have almost no effect on the verification results...
If the csessionid is forged, the verification will fail, and if the token is forged, the verification will also fail!
The following image shows the value of the forged token:
(End)
Source code download:
Tourists, if you want to see the hidden content of this post, please Reply
| 
Posted on 4/2/2018 1:30:39 PM
|
|
|
|
Posted on 1/11/2019 11:45:01 AM
|
Posted on 4/4/2018 2:13:44 PM
|
