声明
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！

逆向过程

session = requests.session()
det = ddddocr.DdddOcr(det=False, ocr=False, show_ad=False)
cookies = {
}
url = "api/captcha/get"
params = {
    "aid": "CHANPASSPORT",
    "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Edg/128.0.0.0",
    "refer": ""
}
response = session.get(url, headers=headers, cookies=cookies, params=params)

data = response.json()['data']
print(data)
backgroud = data['backgroud']
card = data['card']
sessid = data['sessid']
with open('backgroud.jpg', 'wb') as f:
    bg = requests.get(backgroud).content
    f.write(bg)
with open('card.jpg', 'wb') as f:
    fg = requests.get(card).content
    f.write(fg)
cp = execjs.compile(open('滑块.js', 'r', encoding='utf-8').read())
    result = cp.call('getCollect', x, trace, sessid)
    print(result)
    url = "/captcha/verify"

    response = session.post(url, headers=headers, cookies=cookies, json=result)
    data = response.json()
    return jsonify({"code": 200, "msg": "ok", "data": data})
except Exception as e:
    return jsonify({"code": 500, "msg": str(e)})

结果

总结

 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。