web逆向之某利威视频逆向

前言

目标网站 aHR0cHM6Ly93d3cuaXRiYWl6aGFuLmNvbS92aWRlby81NjMyLmh0bWw=

网站视频是使用了保利威视频加密技术

文本提供所有资料仅供学习，如果违规，联系删除

逆向步骤

定位m3u8

请求目标页面，页面中返回了保利威初始化时的一些参数信息，vid就是视频主键，playsafe后面对视频解密时会用到。

紧接着网站请求了 /{vid}.json 这个接口，这个接口返回了一些视频的源数据信息

可以看到这个返回是加密的，跟栈寻找加密位置，或者直接hook JSON.parse 

可以看到解密方法就是a.decryptVideoJson(t); 

这个代码扣起来比较简单，直接缺啥扣啥就好了，本文直接跳过，解密后结果大概长下面这样子

{
    "permit_questionnaire": 1,
    "validUrl2_backup": "",
    "fullmp4": "0",
    "setting_type": 0,
    "timeoutflow": "false",
    "preload": "true",
    "playMode": 0,
    "httpDns": -1,
    "weburl": "",
    "provider": "AFBA61F50E8906716471BB27307E02DAA028B948",
    "nkv": 13,
    "validUrl": "",
    "validUrl_backup": "",
    "teaser_time": "0",
    "hlsLevel": "web",
    "enableOfficialHost": 1,
    "disable_host": "",
    "openDanmu": 0,
    "validUrl2": "//www.itbaizhan.com/index/test/polyv",
    "outflow": "false",
    "wcBanSeekSpecial": 0,
    "enable_host": "polyv.net,polyv.cn,plvideo.cn,plvideo.net,",
    "playerList": [],
    "previewDuration": 180,
    "hls302": "0",
    "audio_fp": 0,
    "protect_mode": 0,
    "hlsDrmVersion": 11,
    "keep_play": 0,
    "first_image_b": "https://img.videocc.net/uimage/6/64901470c4/0/64901470c4f12f5f95f76795afd011b0_0_b.jpg!l1280Q85",
    "codesharing": 1,
    "httpdns-ttl": 600,
    "akeysharing": 1,
    "webLevel": "video",
    "realtimeSlicing": 0,
    "videolink": "https://hls.videocc.net/64901470c4/0/64901470c4f12f5f95f76795afd011b0.pdx",
    "resolution": [
        "640x360",
        "960x540",
        "1280x720"
    ],
    "tail_url": "",
    "seed_const": 22,
    "hls2": [
        "https://hw-mts.videocc.net/64901470c4/0/64901470c4f12f5f95f76795afd011b0_1.pdx",
        "https://hw-mts.videocc.net/64901470c4/0/64901470c4f12f5f95f76795afd011b0_2.pdx",
        "https://hw-mts.videocc