gitsilence 的个人博客
Coding...
分析调试某qiyi直播源【未完成】
直播间例子：https://live.iqiyi.com/w/58000
前言
我尝试过在手机上抓包，由于他们做了防护，就只抓到了真实的直播源。
例如这个：
http://flv-bdplay.inter.71edge.com/liveugc/rqy_nxp2ojex.flv
正文
在web端上找到了一个入口。
网页内容
try{Qc19d39f63e6c1365ae4e4c92e8826d40({"_login_rate":false,"_pf":"14","code":"A00000","data":{"enable":true,"name":"【MZ】蜡笔小新。菲菲","cbUpdateType":"from live-api-server","id":2933586523,"pano":{"viewAngleY":0,"zoomRate":1,"viewAngleX":0},"liveEpisodeType":[5],"timestamp":"1583306184751","ctl":{"timestamp":"1583306184756","formatconfigs":{},"configs":{},"vip":{"types":[],"formats":{},"bids":[]}},"type":0,"epgUrl":"https://live.video.iqiyi.com\/live\/epg\/2933586523\/?endtime=0","isReplayReady":false,"duration":0,"maxPlayTime":"1582981870000","provider":1,"updateAt":"1583306118265","program":{"startTime":1582981870000,"exclusiveStatusIqiyi":false,"id":2933586523,"chatRoomEnable":true,"chatRights":1,"allowPopups":false,"sendFake":true,"progress":2,"qiyiProduced":false,"vipTypes":[0],"qitanId":0,"isProduced":false,"waterMarkFlag":false,"chatRoomShouldDisplay":true,"endTime":0,"shouldDisplay":false,"showPopups":true,"exclusive":false,"payMark":0,"logoHidden":[1,2,3],"vodList":[],"publicLevel":0,"type":4,"streamEnd":0,"name":"【MZ】蜡笔小新。菲菲","streamStart":0},"cbUpdateIP":"10.16.83.124","channelId":-1,"streams":[{"screenSize":"1600:900","steamType":"SMOOTH","chunkSize":10,"formatType":"TS","bid":200,"codeFormat":2,"bitrate":"1280","url":"http:\/\/hlslive.video.iqiyi.com\/tslive\/liveugc\/rqy_nxp2ojex\/rqy_nxp2ojex.m3u8?pv=0.2&atype=qiyi&qd_tvid=2933586523&qd_vipres=0&qd_scc=d741293eb423f8b44482c07a72a6919a&qd_sc=70afa89fc84be8ad9d56b3f73312e9cf&qd_src=01010031010000000000&qd_ip=df59a55f&qd_uid=&qd_tm=1583306184751&qd_vip=1","streamName":"rqy_nxp2ojex","aspectRatio":"16:9"},{"screenSize":"1600:900","steamType":"SMOOTH","chunkSize":10,"formatType":"HLFLV","bid":200,"codeFormat":2,"bitrate":"1280","url":"hcdnlive:\/\/BEAAAADZBRWEQQI7O5KE4Y2BD52NHPEPIEPWLYYOF5AR6635OUOUCH3QCEAQYQI7PDOQQZCBD5Z3M4OAIEPQAAAAAAAAAAQAAAAG7TQNCYXBMZPDBYWS4FQ?hl_nm=6&hl_cid=G3CMV6AP3TZPPAMZVHOML6EXTF66JA42&hl_cp=3&hl_slid=c35_rqy_nxp2ojex_s10&hl_slst=10&hl_dl=0&hl_dls=40&hl_dle=60&hl_p2ps=0&hl_apptp=qlive&hl_stapp=liveugc&hl_stid=rqy_nxp2ojex&hl_sttp=flv&hl_stft=flv&hl_pltp=1&hl_stpr=http&hl_stpt=1935&hl_dp=NB2HI4B2F4XWM3DWNRUXMZJOOZUWIZLPFZUXC2LZNEXGG33NF4&hl_force=0&qd_tvid=2933586523&qd_vipres=0&qd_scc=0ff2655e3dd5480600e25999bfe49aaa&qd_sc=70afa89fc84be8ad9d56b3f73312e9cf&qd_src=01010031010000000000&qd_ip=df59a55f&qd_uid=&qd_tm=1583306184751&qd_vip=1","streamName":"c35_rqy_nxp2ojex_s10","aspectRatio":"16:9"}],"boss":0,"pfInfo":{"platform":"PC_QIYI","delayTime":0},"liveType":4}});}catch(e){};
我们只需要这个数据就行
{"streamName": "rqy_nxp2ojex"}
我们只要找到每个房间的streamName, 就可以获取每个房间的真实的直播源了。
http://flv-bdplay.inter.71edge.com/liveugc/%s.flv
经过多次分析之后得知
https://live.video.iqiyi.com/jp/live? lp=2926787723》》》》》》》》》》》》不一样
&src=01010031010000000000&uid=&rateVers=PC_QIYI_3&k_uid=20zq3hg5wv8xd3vspwm4n99x&qdx=n&qdv=3&dfp=a10de47f9444ff4721a65dce58660d32c76693a7e61db070ff895f36f7449ed6bd&qd_v=1&k_ft2=0
&ve=12427ff1f79c9d951f07bbf93b7171f4》》》》》》》》》》不一样
&k_ft1=1126999418470400&k_ft4=224&v=1&k_err_retries=0&callback=Q0255524d123c650088ffc58cdbdb986a&
tm=1583293841 ** 十位的时间戳 。。。Math.floor((new Date).getTime() / 1e3)**
&vf=3a89bb964591a64fcd586823b762fad7》》》》》》》》》》》不一样
参数：lp、ve、vf不一样。
然后对网页上的js文件进行查找对应的参数
找到js文件 https://static.iqiyi.com/js/qlive/plugin/player/uniplayer/livePlayer.js?v=20200214095107
由于本人的js水平实在太差，就分析了一点，进行不下去了。
在这一行找到了请求api的链接和参数
往上看看，找到了第一个参数lp
_md2["default"])(this._parmas.qpId + (new Date).getTime() + _uuid2["default"].getJsuid())
, u = ["lp=" + this._parmas.qpId, "src=" + t, "uid=" + this.getUserInfo().uid, "rateVers=" + e, "k_uid=" + _uuid2["default"].getJsuid(), "qdx=n", "qdv=3", "dfp=" + _dfp2["default"].get(), "qd_v=" + i, "k_ft2=0", "ve=" + c];
_ProgramType2["default"].isPGC() ? (u.push("k_ft1=1126999418470400"),
u.push("k_ft4=224")) : _ProgramType2["default"].isPPC() && (u.push("k_ft1=141287244169216"),
u.push("k_ft4=1")),
0 < parseInt(this._parmas.channelId) && u.push("lc=" + this._parmas.channelId),
_LiveSettings2["default"].isBoss() && u.push("vv=821d3c731e374feaa629dcdaab7c394b");
看到lp是 this._parmas.qpId
经过调试
找到了
return VrsRequest.prototype.getQPId = function() {
var n = this
, o = this
, r = function r(e) {
var t = o._player.getConfig().getEnvConfig("api").secKey
, i = e;
return i.sort(),
(0,
_md2["default"])(i.join("|") + "|" + t)
}
, e = {
liveId: this._parmas.roomId,
tl: "player",
deviceId: _uuid2["default"].getFluid(),
platform: "1_10_101_1021",
liveType: 1
}
, t = [];
for (var i in e)
e.hasOwnProperty(i) && t.push(i + "=" + e[i]);
e.sn = r(t);
var a = "//apis-live.iqiyi.com/v1/live/initial";
_apiStat.apiStat.getStat(_apiStat.apiType.initial).reqStart(a),
_http2["default"].ajax({
"url": a,
"method": "POST",
"dataType": "json",
"withCredentials": !1,
"params": e,
"success": function(e) {
_apiStat.apiStat.getStat(_apiStat.apiType.initial).reqSucc(e),
e && "A00000" == e.code && e.data && e.data.programInfo ? (_apiStat.apiStat.getStat(_apiStat.apiType.initial).pingbackQos(),
n._parmas.qpId = e.data.programInfo.qipuId,
window.QYP.qpId = n._parmas.qpId,
window.QYP.showPopups = e.data.chatInfo.showPopups,
n.request()) : (_apiStat.apiStat.getStat(_apiStat.apiType.initial).parseFail(e && e.code || "invalid code"),
_apiStat.apiStat.getStat(_apiStat.apiType.initial).pingbackQos(),
n._complete({
error: !0,
code: _ErrorCode2["default"].ASK_QPID_DEFAULT_ERROR,
realCode: "askQpIds." + (e && e.code || ""),
message: "request for qipu id fail " + (e ? e.code : "no data")
}))
},
"failure": function(e, t, i) {
_apiStat.apiStat.getStat(_apiStat.apiType.initial).reqFail(i, e),
_apiStat.apiStat.getStat(_apiStat.apiType.initial).pingbackQos(),
n._complete({
error: !0,
code: _ErrorCode2["default"].ASK_QPID_DEFAULT_ERROR,
message: "request for qipu id fail " + n._parmas.roomId
})
}
})
}
又是一个请求，，有好几个参数
e = {
liveId: this._parmas.roomId,
tl: "player",
deviceId: _uuid2["default"].getFluid(),
platform: "1_10_101_1021",
liveType: 1
}
, t = [];
for (var i in e)
e.hasOwnProperty(i) && t.push(i + "=" + e[i]);
e.sn = r(t);
参数：deviceId、sn
需要找到这两个参数
getFluid: function h() {
var e = n.get("QC005");
return e || (a = !0,
e = u(),
f("QC005", e)),
e
},
实在搞不懂。deviceId我就跳过了。
对于sn
r = function r(e) {
var t = o._player.getConfig().getEnvConfig("api").secKey
, i = e;
return i.sort(),
(0,
_md2["default"])(i.join("|") + "|" + t)
}
我更是一脸懵逼。
爱奇艺轮播台
http://puma-api.iqiyi.com/tiger/fetch
(Request-Line):POST /tiger/fetch HTTP/1.1
Host:puma-api.iqiyi.com
Accept:/
Accept-Encoding:gzip, deflate
qyid:ktq22ueuf6ixje23hnouljeuxyiw4q6n
User-Agent:QYPlayer/Windows/4.5.1801;BT/mcto;NetType/unknown;Hv/;QTP/1.0.38.5
Content-Type:application/x-www-form-urlencoded
Content-Length:357
获取时间戳：https://time.iqiyi.com
https://time.video.iqiyi.com/t
http://live.video.iqiyi.com/live?lp=3122754123&lc=380188722&src=01012001020000000000&prioVers=1&rateVers=PUMA_2&k_ft1=4195328&k_ft2=0&k_ft4=262144&t=1592545742000&k_uid=ktq22ueuf6ixje23hnouljeuxyiw4q6n&v=0&ut=0&k_ver=7.6.114.1948&ve=95e75fdbf925a141263bd93a8ca41b2b&k_err_retries=0&qd_v=1&vf=7528d8e681b2a7535e923fd15a4320e3
http://live.video.iqiyi.com/live?lp=3122741923&lc=380189322&src=01012001020000000000&prioVers=1&rateVers=PUMA_2&k_ft1=4195328&k_ft2=0&k_ft4=262144&t=1592547026000&k_uid=ktq22ueuf6ixje23hnouljeuxyiw4q6n&v=0&ut=0&k_ver=7.6.114.1948&ve=36b4f4860205c2ebe66577f7c1ee30e2&k_err_retries=0&qd_v=1&vf=80b1472922dab91212fd7a4d04fc7671
http://live.video.iqiyi.com/live?lp=3122754423&lc=380189522&src=01012001020000000000&prioVers=1&rateVers=PUMA_2&k_ft1=4195328&k_ft2=0&k_ft4=262144&t=1592547385000&k_uid=ktq22ueuf6ixje23hnouljeuxyiw4q6n&v=0&ut=0&k_ver=7.6.114.1948&ve=48b4d376b0dd2dc3d4b0315fe0701365&k_err_retries=0&qd_v=1&vf=699ae307c5b727c32f4239dd40ca98df
纪录片：http://live.video.iqiyi.com/live?lp=3122183923&lc=380662622&src=01012001020000000000&prioVers=1&rateVers=PUMA_2&k_ft1=4195328&k_ft2=0&k_ft4=262144&t=1592547536000&k_uid=ktq22ueuf6ixje23hnouljeuxyiw4q6n&v=0&ut=0&k_ver=7.6.114.1948&ve=5d54985c9525d11adece82def343f1b7&k_err_retries=0&qd_v=1&vf=d8d3a2c2154c6dd83c4aae08f067b623
纪录片：http://live.video.iqiyi.com/live?lp=3122183923&lc=380662622&src=01012001020000000000&prioVers=1&rateVers=PUMA_2&k_ft1=4195328&k_ft2=0&k_ft4=262144&t=1592547636000&k_uid=ktq22ueuf6ixje23hnouljeuxyiw4q6n&v=0&ut=0&k_ver=7.6.114.1948&ve=b0de1490e5c4914aadbf6f5c8f7ab720&k_err_retries=0&qd_v=1&vf=0445be2959f98b127e17fa365af18c46
同一个房间：参数ve、vf、时间戳t 匹配算法。
不同房间：lp、lc、时间戳t、ve、vf