Recently, I saw a lot of people in the group saying that the Sichuan Self study Exam Registration Website had exploded, and it seems that it has reopened today after upgrading. I saw a picture of 99999 people queuing up, and then some people in the group clamoured to sign up for the Self study Exam, charging 5-20 yuan, and also paying for success. So there is definitely something fishy here, so I conducted a simple study, After looking at the web page code and the js code, I found that the login interface was just hidden, so I shared it with you.
Statement: This script is only for learning and should not be used for commercial purposes. I believe that the system will also be upgraded after a wave of analysis. It is very simple, and one line of code does not need to queue up!
Script code:
$$('dv_login_body').style.display='block';
usage method:
Directly open the website for self examination registration https://zk.sceea.cn/ Then, under normal circumstances, ask the user to enter the verification code and queue up. Enter the verification code directly. Then the browser opens the debugging mode, the Chrome browser shortcut key F12, and finds console , paste the core code above, and then press Enter. The login box appears, but the queue shown above is ignored directly, and then enter the account password to log in!
The picture and text tutorial is as follows:
Open debug mode and paste code
Just login directly
If you use other browsers, please turn on the debugging mode by Baidu.
Principle analysis:
The following is the analysis principle. Xiaobai can skip it directly. You can directly view the js code used in the style css file to control whether the form is displayed. By default, queuing is through the result pos field returned in the background, which means that queuing is only controlled by the front page, while the back end only returns a current number of logged in people. For example, the system can only tolerate 1w of concurrency, Then the back end only judges the current login user, and after more than 1w, the front end interface intercepts the user and does not submit the login request, so this code simply changes the hide to display.
The front end uses a timer. Every few seconds, it requests the back end to check the number of people queuing. It's as simple as that.
For more information, please pay attention to this blog. Keep sharing for you. If privacy has been violated, please email i@51it.wang Contact me to delete. thank you
