Good helper for ticket grabbing in Spring Festival Bypass - Shunt ticket grabbing Bypass v1.16.4 (2024-01-14)

Bypass - Author: Cheney. Xiao Feng, based on Microsoft Net developed train ticket grabbing program. Shunt ticket grabbing is a user-friendly ticket grabbing software that focuses on users. Do not advertise, promote, carry viruses, collect private information, and accept technical evaluation from all parties to create a ticket grabbing software for users wholeheartedly

The predecessor is the program developed in January during sophomore year. After several years of continuous optimization, update and iteration, it is still under constant maintenance and never forgets its original intention.

Partitioned began to abandon, wandering away thinking of parting.

Like a flower, like a jade, you are affectionate, and your shadow is like the daytime.

Thousands of leaves fall with the wind, and the color is sparse.

A song hides its head, tells the future clearly, but does not return to the past. It is dedicated only to you, and I wish you all the best.

Those stories

From the blog I wrote when I went to Beijing on November 9, 2013:

• 1. The origin of the software: I was stranded in Hangzhou due to my trip in October 2013, and I didn't like everything to be carried out as planned, so I didn't buy tickets in advance. From then on, I knew what it was like to grab tickets.
• 2. Successful ticket grabbing: A ticket grabbing prompt tone+B booking parameters set in advance (in fact, more than 10 tickets were released at that time, not my quick (- _ - | |)).
• 3. Purpose of software: At that time, other software could not meet their own needs, some software had many functions but did not fully automate, and some other software could only grab a car.
• 4. Progress of the software: build the basic framework>log in for preliminary implementation>book tickets for preliminary modifications>repair and add other functions>release and update (today it is just one month, including many abandoned times).
• 5. Software process: login>enter parameters such as the date of departure and destination>query reservation>set parameters>start to grab tickets (many of them are changeable for everyone to study).
• 6. The release of the software: It was made for our own use at the beginning, because I was often away from the computer, but I haven't used the train ticket (- _ - | |) so far, so I decided to let people around me use it, so you can see that we are very lucky (* ^ _ ^).
• 7. Later tasks: I am tired after working for a whole month, and I will go to Beijing soon. I may not have time to do this, but if there is a problem, I will repair it.

Spring Festival travel in 2013: new version 12306, choose rebirth

• 1. The launch of the new version of 12306 means that everything previously written has become invalid. For a software that adapts to the website, if the website changes as a whole, the software needs to be rewritten.
• 2. Silently released the announcement of stopping the update. After all, too much energy was spent on it, and it can't continue like this.
• 3. Every day, someone wants me to come back. After thinking about it for a few days, it is more unwilling in the heart, or quietly began a few days of sleepless.
• 4. I remember that I didn't have a rest for three days and four nights. I still don't know how to do it until now, but those roommates witnessed all this, and they would not be sleepy if they were serious.

Spring Festival travel in 2014: approaching the era of violence

• 1. 12306 announced a 60 day booking period, but things are not so simple.
• 2. Unfortunately, the official diffluent website has crashed repeatedly, and the server has been transferred to Alibaba Cloud. However, the attack is not the main source, but the explosion of users.
• 3. At this time, Taobao sellers also came to make trouble. They were selling free diversion, but the price was as high as 30 yuan.
• 4. It is common to stay up all night long, but we have to endure all kinds of pressure and anger, which is destined to be an unforgettable memory.

March 2015: change the graphic verification code

• 1. 12306 unexpectedly used the graphic verification code, causing a flurry of media and scholars.
• 2. Collecting question banks has become a new way out. Without computer recognition, cloud recognition is obviously quite difficult and requires higher technology and servers.
• 3. On the 20th, it was the first to find a vulnerability that could bypass the verification code, and released an automatically identified version, as evidenced by Weibo.
• 4. Three days later, other software embezzled from each other, and 12306 learned about it and repaired it within one day. What's the use of qi? Some authors even said that they had known for a long time that it was just not published. I just want to hehe.
• 5. After the quarrel, I sealed the important functions in the server, and the load balancer called the intranet server to ensure the security of the technology. It's not that I don't share the spirit, but I just don't want to repeat the tragedy.

July 2015: computer recognition reborn

• 1. In fact, it is not computer recognition, but cloud recognition. It is not a cloud, but it is handled by the server.
• 2. In fact, it was opened in May, but only the login part was opened, considering the maturity and uncertainty of technology.
• 3. It was initially open to all users, but the encryption algorithm was decompiled. After all, every line has its own expertise Net language security can only be guaranteed by enterprise encryption (expensive).
• 4. The same request can not be distinguished whether it is initiated for its own software, but it is used for other software functions such as batch login. Its own server is running for money while helping others.
• 5. Therefore: it is temporarily decided to only allow the sponsor members to use it, and the server will verify it again. When everything becomes stable, encryption will be taken into account.

December 2015: 581 categories+double word verification code

• 1. [Round 1] In order to block the identification of verification codes for machine learning, 12306 has successively added 581 verification code categories
• 2. Divergent cloud recognition completed independent learning in one day, and was the first in the industry to announce its breakthrough.
• 3. [Round 2] However, on the third day, the 12306 order verification code was a double word combination, which directly promoted the result set to the power level.
• 4. Various cloud recognition algorithms were modified overnight to accurately adapt to various changes of 12306, and the recognition rate of double words once rose from 10% to 80%. It was the first in the industry to announce its breaking.
• 5. [The third round] However, 12306 uses changing a batch of verification codes every day to delay learning, and dynamically adds various kinds of small graphs for combination to ensure that each answer has a new verification code that the machine does not know.
• 6. Cloud recognition has entered the dilemma of slightly low recognition rate in the daytime and excellent recognition rate at night. However, it has also achieved the best results.
• 7. [Round 4] A few days later, 12306 added a 4 second limit. The verification code must be submitted after 4 seconds, otherwise it will be considered wrong and will affect those who are quick sighted and quick witted.
• 8. In order for users to submit orders as quickly as possible, the cloud identification login verification code still provides identification, and the identification of the order verification code is temporarily closed.

May 2016: New interface access of cloud recognition

• 1. Years later, when I was working on other projects, I suddenly got some ideas and started a new branch of cloud recognition.
• 2. New deep learning, new neural network algorithm, new processing flow and autonomous learning are gradually introduced.
• 3. After continuous optimization, the identification rate of the verification code gradually improves, and the speed is even tens of milliseconds, even several milliseconds.
• 4. But after all, it's not the Spring Festival travel. I don't know whether 12306 is even more abnormal. However, if you are in Tazai, welcome to Deloitte Alliance.

January 2017: relatively quiet 12306

• 1. In retrospect, 12306's attitude towards third-party software has always been to limit the technology. After several disturbances, 12306 seems to be much quieter.
• 2. However, against scalpers, 12306 never stopped. Tickets are issued irregularly on the whole hour, and even whether it is a scalper behavior. 12306 has been quietly making restrictions.
• 3. As for 60% of tickets without verification code, it can be understood that: all tickets that need to be robbed need verification code, and those that buy a stack of tickets directly do not need verification code. To sum up, there are two kinds of eggs.
• 4. The performance of the new version of cloud recognition is relatively stable. After 12306 has repeatedly upgraded the image library, it can still complete self-study in a few hours, and will continue to optimize in the later period.
• 5. I don't know if 12306 will hold out any big moves in the future. If it is limited only for scalpers, it will undoubtedly be a good way for ordinary users or their own platforms.

September 2017: 12306 online canvas fingerprint

• 1. During the National Day ticket grabbing, 12306 added a JS file to obtain the UA, resolution, color bits, platform type, etc. of the browser, and generated a device ID that can theoretically distinguish each machine
• 2. In fact, 12306 has been tested and adjusted for a long time. When it is officially launched, its complexity can be seen, and the algorithm is dynamically replaced. In order to avoid forgery, it is even replaced many times a day
• 3. 12306 judges that frequent requests for ticket checking without the device ID will be rejected, and frequent requests for the device ID will also be redirected by 302, and even all kinds of strange things will happen
• 4. For diffluence, it is a software for individual ticket grabbing. Facing this canvas fingerprint, it can be achieved through several technical ways. However, it really takes a lot of effort to pursue perfection and not leave a partner behind
• 5. At this time, the new login system of 12306 is not perfect, and you need to find appropriate solutions for any problems that arise. At this time, 12306 is also in the process of constant adjustment, and you need to constantly adapt and follow the adjustment
• 6. Over the past ten days, we have been in the process of intensive development and thinking, and have updated frequently for the sake of perfection. Even if there is a push configuration method, we have to update the main body in many cases, which is often said to be a version brushing maniac
• 7. Personally, canvas fingerprint cannot be used as a major means of identification. With so many machines in the country, the uniqueness cannot be guaranteed. Some users' IE browser will be stuck after opening 12306, and the compatibility is not perfect

January 2018: more and more humanized 12306

• 1. WeChat payment, meal ordering, seat selection, points, new version of APP, certificates, etc., especially the new version of APP, are very smooth, and the framework used is very similar to Ant Finance. Maybe Alibaba team participated in the development
• 2. However, the number of tickets sold in advance is less. It seems that in order to avoid scalpers, it is more and more important to continue to use sectional tickets. Of course, there are interval restrictions, so there are many people who buy the whole journey tickets
• 3. 12306 has been working on the risk control system, and the external publicity has achieved the expected effect. However, it has little impact on the diversion, but it is not recommended to swipe tickets in the company, and the shared IP is easy to be mistakenly sealed
• 4. 12306 has to deal with scalpers. In fact, there is no lack of dial-up environment. If IP is taken as the computing condition, it is easy to block normal users. I believe that future risk control can be truly humanized

January 2019: 12306 pilot alternative ticket purchase

• 1. 12306 IP blocking is becoming more and more serious. Users who rob tickets in the company are inevitably injured by mistake due to an external network environment. Also, users under the same IP address are affected due to the operators.
• 2. Even though it was a hot search, 12306 did not change this strategy, but instead turned to the restrictions on the IDC machine room (ECS) IP, as if it was aimed at the cloud ticket grabbing function of those ticket grabbing apps.
• 3. This year, we piloted the purchase of alternate tickets in the direction of Sichuan and Chongqing. If we get the alternate tickets, the ticket issue rate is high. If we don't get them, we may not even have the chance to grab them. If it is rolled out in the future, ticket grabbing may become standby.
• 4. Personally, 12306 can perform such functions as mobile phone verification and login, ticket refund and other sensitive operations that require mobile phone verification when the account is abnormal. Maybe it can also avoid the situation of scalpers' fake use and random use after registration.

April 2019: Domain name and alias change

• 1. The English alias of diversion ticket grabbing is 12306Bypass. In order to simplify the name and avoid ambiguity, the alias has been changed to Bypass. Both names represent diversion ticket grabbing, and the Chinese name remains unchanged.
• 2. The previous domain name 302 jumps to the new domain name: www.bypass. cn. The streaming software has also released an updated version. The folder name may be the same as before, and the program name has automatically changed to Bypass. exe.

January 2020: comprehensive candidate and Ali slider

• 1. Candidates have been prepared for more than a year. We can believe that their technology is mature and their security is completely closed. But it is this closure, coupled with the sudden hiding of candidate rankings, that inevitably brings many questions.
• 2. For example, what is the ranking of candidates? Is the first time candidate the first to get the ticket? Will full ticket candidates have more advantages than interval candidates? Why did someone grab the ticket when the candidate didn't arrive.
• 3. A few years ago, the map library was expanded on a large scale every year during the Spring Festival travel, so the verification code during the Spring Festival travel was thousands of times more difficult than usual. But in the past two years, it has become more and more simple. With all kinds of signs, it feels like rain is coming and the buildings are full of wind.
• 4. Sure enough, a few days later, the slider verification code appeared. Behind it was Alibaba Cloud's human-computer intelligence, a mature slider product that had been running for several years. Later, the whole ticket grabbing industry and Alibaba's technology were exchanged.
• 5. The process and track of sliding are not important, but mainly for the identification of browser features. Alibaba UA algorithm can clearly analyze whether it is a real user browser, and analyze whether it is artificial based on big data, and constantly train.
• 6. There are many stories in the peak period of more than ten days. It is obvious that Ali is in the ascendant, and the ticket grabbing industry has been affected to varying degrees. No one can challenge Ali in a short time, not to mention the first tier company in China.

January 2021: Affected by the epidemic, the number of travelers will drop sharply

• 1. Due to the repeated epidemic, many regions encourage the local New Year celebration, which has doubled the number of travelers compared with the same year. Because of the reduction in the number of travelers, it is relatively easy to grab tickets compared with previous years.
• 2. However, the problem of section sales restriction of popular trains still exists. Because it is necessary to ensure the maximum utilization of railway transport capacity resources, it is a priority to ensure the purchase of tickets for long-distance passengers (all the way) from the beginning to the end.
• 3. The pre-sale period of railway tickets has also been changed from 30 days to 15 days, which is convenient for epidemic control. The policy of free ticket refund has also been changed from 15 days to 8 days. There is no refund fee for 8 days and above.
• 4. Due to the decrease in the number of travelers, this year was relatively quiet without great changes. The whole travel peak was shrouded in the mood of epidemic, and whether to return home for the Spring Festival became a hot topic of discussion.

September 2021: Change of login verification code

• 1. After years of experience, the graphic verification code was replaced by a more convenient slider verification code. For compatibility and preparation, 12306 also added SMS verification code login, which represents the end of an era.
• 2. The graphic verification code is gradually recognized by machine learning after being launched. In order to resist machine learning, a large number of new pictures are needed. This is also a time-consuming and laborious thing for 12306.
• 3. In the past two years, no new verification code has been added in a large scale, and the difficulty has been gradually reduced, leading to the emergence of some open source identification algorithms, which makes it difficult to make a trade-off between user experience and blocking machines.
• 4. As a new form of verification code, the slider verification code can be continuously optimized in its background for its security and manslaughter. It carries such a number of users, which is also a win-win situation for Alibaba.
• 5. If the slider verification code is competent, more and more websites may access the slider verification code in the future. The era of verification code has changed, and it may be said that 12306 once again leads the trend.
• 6. For users, they can't see the difficulty of the slider and feel the difference, because all changes can be controlled at the back end. This way of adjusting the risk control level at any time only upgrades the difficulty at the peak.

October 2022: Post epidemic era

• 1. On holidays, the epidemic is easy to recur, the prevention and control is more strict, and the travel is reduced. The number of trains and tickets will also be dynamically adjusted according to the epidemic situation, with only some details of other changes.
• 2. The payment time limit has been changed to 10 minutes, 9 passengers can be selected for a single ticket purchase, up to 5 different train number+seat combinations can be supported for a single standby, and batch ticket change is supported for sleeping berths.
• 3. Some users encounter risk control measures such as being blocked from buying tickets by their accounts, and queuing before buying any tickets. If it is only aimed at scalpers, I hope that ordinary users will not be killed by mistake.
• 4. It is more and more common not to release tickets. It is important to get candidates and pay at the first time (ranking by payment time). Many people also get tickets. It is recommended that candidates+tickets be swiped at the same time.

September 2023: Re change of verification code

• 1. For some unknown reason, the slider verification code was removed, leaving only the SMS verification code and the scanning QR code, both of which must take out their mobile phones.
• 2. Some user verification codes have been issued but haven't been received. It may be a problem with the mobile phone or the operator, or it may not be the mobile phone number in hand at all. If it is really impossible, you can use the scanning code to log in.
• 3. Although this will sacrifice the convenience of users, it will lead to 12306APP, and also bring an end to the era of verification code. Theoretically, it will increase account security.
• 4. Why say the theory? It is said that there is a loophole on the mobile phone. I don't know whether it is to continuously explode the SMS verification code or bypass the face. I need to wait for an indefinite time to log in.