akamai sbsd篇
sbsd产品迎来了一波更新,经过一段时间的不懈努力,也算是终于落下了帷幕。至此,akamai全套封控产品都可以说是掌握百分之8 90的程度了(还有百分之10是因为tls指纹依旧是个问题,虽然已成功实现指纹并发且有非常高的成功率,但某些网站检测实在太厉害了)
不过sbsd相对于akamai来说更新比较慢,难度算偏友好(算法已死,别考虑算法,老老实实补环境)
交流学习网站:aHR0cHM6Ly93d3cuZmx5c2Nvb3QuY29tL3po
sbsd的流程:
在首页中会加载一段js:

通过post该请求,若成功会返回开头为2或4的bm_sc cookies参数,若失败则返回3开头的bm_sc参数


其流程基本跟_abck一样 都是通过js里的send body参数post请求

{
"ver": "bKFfggFu14KpAWzRMouN/Q==",
"signals": {
"Lk030": "true",
"Lk031": "0",
"Lk042": "1,1",
"Lk051": "2",
"Lk061": "true",
"Lk065": "Google Inc. (Intel)",
"Lk071": "false",
"Lk074": "Win32",
"Lk077": "true",
"Lk081": "Windows",
"Lk082": "landscape-primary",
"Lk093": "5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",
"Lk101": "1;1;1",
"Lk118": "",
"Lk137": "1;1;1",
"Lk147": "8",
"Lk165": "0,0,0,0",
"Lk166": null,
"Lk167": "1920",
"Lk175": "true",
"Lk178": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",
"Lk185": null,
"Lk193": null,
"Lk204": "false",
"Lk213": "1",
"Lk226": "5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",
"Lk227": "Google Inc. (Intel)",
"Lk242": "videoinput,audiooutput", // MediaDevices
"Lk248": "Sun Jan 04 2026 16:03:53 GMT+0800 (中国标准时间)",
"Lk256": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99.0.0.0\"},{\"brand\":\"Google Chrome\",\"version\":\"127.0.6533.120\"},{\"brand\":\"Chromium\",\"version\":\"127.0.6533.120\"}]",
"Lk264": "google chrome",
"Lk266": "https://www.flyscoot.com/zh",
"Lk269": "false",
"Lk280": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",
"Lk293": "false",
"Lk303": "24",
"Lk327": "true",
"Lk329": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",
"Lk335": "Google Inc. (Intel)",
"Lk343": "fine,fine",
"Lk348": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99.0.0.0\"},{\"brand\":\"Google Chrome\",\"version\":\"127.0.6533.120\"},{\"brand\":\"Chromium\",\"version\":\"127.0.6533.120\"}]",
"Lk352": "0",
"Lk358": "Asia/Shanghai",
"Lk363": "Win32",
"Lk370": "12",
"Lk378": "15.0.0",
"Lk404": "[\"zh-CN\",\"en-US\",\"en\",\"zh\"]",
"Lk405": "[\"zh-CN\",\"en-US\",\"en\",\"zh\"]",
"Lk425": "false",
"Lk438": "true",
"Lk452": "false",
"Lk460": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",
"Lk466": "true",
"Lk481": "true",
"Lk492": "0",
"Lk498": "true",
"Lk535": "Sun Jan 04 2026 16:03:53 GMT+0800 (中国标准时间)",
"Lk544": "1,1,1,1,1,1",
"Lk559": "Windows",
"Lk567": "16",
"Lk578": "zh-CN",
"Lk602": "1",
"Lk608": "x86",
"Lk613": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99\"},{\"brand\":\"Google Chrome\",\"version\":\"127\"},{\"brand\":\"Chromium\",\"version\":\"127\"}]",
"Lk615": "4eccad6d",
"Lk621": "12",
"Lk633": "false,false,false",
"Lk647": "4294705152,159405537,100251149,100",
"Lk655": "c:pr;m:pr;n:de;p:de", // Permission
"Lk663": "true",
"Lk667": "true",
"Lk677": "x86",
"Lk679": "1080",
"Lk706": "127.0.6533.120",
"Lk707": "0,0",
"Lk712": "true",
"Lk720": "true",
"Lk753": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99\"},{\"brand\":\"Google Chrome\",\"version\":\"127\"},{\"brand\":\"Chromium\",\"version\":\"127\"}]",
"Lk761": "80",
"Lk764": "Asia/Shanghai",
"Lk772": "[\"4g\",-1,\"null\"]",
"Lk792": "0;0",
"Lk793": "zh-CN",
"Lk800": "1",
"Lk802": "0",
"Lk804": "34084ec4-81",
"Lk815": "afafafafafafafafafafafafafafafafafafafafafafafafafafafafafafafaf-22-19", // canvas指纹和语音种类数量拼接
"Lk816": "71.48",
"Lk822": "15.0.0",
"Lk823": "[\"4g\",-1,\"null\"]",
"Lk828": "1",
"Lk833": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",
"Lk836": "afafafafafafafafafafafafafafafafafafafafafafafafafafafafafafafaf", //canvas指纹 这里因为解混淆所以看起来会有点奇怪
"Lk861": "0",
"Lk875": "false",
"Lk876": "8",
"Lk883": "true|",
"Lk884": "false",
"Lk888": "fb16a83e", //音频指纹
"Lk893": "1",
"Lk898": "916992|892102|412643|264468|918808",
"Lk917": "bKFfggFu14KpAWzRMouN/Q==",
"Lk929": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",
"Lk941": "127.0.6533.120",
"Lk959": "false",
"Lk969": "00",
"Lk976": "1767513833514",
"Lk977": "Google Inc. (Intel)",
"Lk987": ",0",
"Lk990": "false",
"Lk991": "-615616",
"Lk993": "24",
"Lk997": "true",
"Lk998": "",
"Lk477": "-152261870"
},
"perf": 435,
"s": "f",
"tid": "mjzg3mqm6wlbdfrfgge"
}
以上数组中,最主要的检测点是几个jsvmp,你只要把jsvmp过了就能成功取值 而这些jsvmp主要跟以下环境有关:
document.createElement
document.cookie (Lk477) (Lk991) 这俩个比较重点 跟cookie参数中的bm_s bm_sc bm_so这三个相关
Notification Permission
大概就这些 其他的常规补没啥好介绍的

解混淆之后 可以看到signals初始化数组在这里一直往下追踪,看到这种形式的基本就是vmp

有些key不能直接搜到的原因,是因为key的赋值就在vmp里面完成的,搜不到很正常

找到参数赋值的位置,就在该jsvmp里进行插桩调试就好了
补的大概差不多之后就可以成功出值了,

以上是sbsd产品的流程
更多推荐




所有评论(0)