sbsd产品迎来了一波更新,经过一段时间的不懈努力,也算是终于落下了帷幕。至此,akamai全套封控产品都可以说是掌握百分之8 90的程度了(还有百分之10是因为tls指纹依旧是个问题,虽然已成功实现指纹并发且有非常高的成功率,但某些网站检测实在太厉害了)

不过sbsd相对于akamai来说更新比较慢,难度算偏友好(算法已死,别考虑算法,老老实实补环境)

交流学习网站:aHR0cHM6Ly93d3cuZmx5c2Nvb3QuY29tL3po

sbsd的流程:

在首页中会加载一段js:

通过post该请求,若成功会返回开头为2或4的bm_sc cookies参数,若失败则返回3开头的bm_sc参数

其流程基本跟_abck一样 都是通过js里的send body参数post请求

{

"ver": "bKFfggFu14KpAWzRMouN/Q==",

"signals": {

"Lk030": "true",

"Lk031": "0",

"Lk042": "1,1",

"Lk051": "2",

"Lk061": "true",

"Lk065": "Google Inc. (Intel)",

"Lk071": "false",

"Lk074": "Win32",

"Lk077": "true",

"Lk081": "Windows",

"Lk082": "landscape-primary",

"Lk093": "5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",

"Lk101": "1;1;1",

"Lk118": "",

"Lk137": "1;1;1",

"Lk147": "8",

"Lk165": "0,0,0,0",

"Lk166": null,

"Lk167": "1920",

"Lk175": "true",

"Lk178": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",

"Lk185": null,

"Lk193": null,

"Lk204": "false",

"Lk213": "1",

"Lk226": "5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",

"Lk227": "Google Inc. (Intel)",

"Lk242": "videoinput,audiooutput", // MediaDevices

"Lk248": "Sun Jan 04 2026 16:03:53 GMT+0800 (中国标准时间)",

"Lk256": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99.0.0.0\"},{\"brand\":\"Google Chrome\",\"version\":\"127.0.6533.120\"},{\"brand\":\"Chromium\",\"version\":\"127.0.6533.120\"}]",

"Lk264": "google chrome",

"Lk266": "https://www.flyscoot.com/zh",

"Lk269": "false",

"Lk280": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",

"Lk293": "false",

"Lk303": "24",

"Lk327": "true",

"Lk329": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",

"Lk335": "Google Inc. (Intel)",

"Lk343": "fine,fine",

"Lk348": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99.0.0.0\"},{\"brand\":\"Google Chrome\",\"version\":\"127.0.6533.120\"},{\"brand\":\"Chromium\",\"version\":\"127.0.6533.120\"}]",

"Lk352": "0",

"Lk358": "Asia/Shanghai",

"Lk363": "Win32",

"Lk370": "12",

"Lk378": "15.0.0",

"Lk404": "[\"zh-CN\",\"en-US\",\"en\",\"zh\"]",

"Lk405": "[\"zh-CN\",\"en-US\",\"en\",\"zh\"]",

"Lk425": "false",

"Lk438": "true",

"Lk452": "false",

"Lk460": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36",

"Lk466": "true",

"Lk481": "true",

"Lk492": "0",

"Lk498": "true",

"Lk535": "Sun Jan 04 2026 16:03:53 GMT+0800 (中国标准时间)",

"Lk544": "1,1,1,1,1,1",

"Lk559": "Windows",

"Lk567": "16",

"Lk578": "zh-CN",

"Lk602": "1",

"Lk608": "x86",

"Lk613": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99\"},{\"brand\":\"Google Chrome\",\"version\":\"127\"},{\"brand\":\"Chromium\",\"version\":\"127\"}]",

"Lk615": "4eccad6d",

"Lk621": "12",

"Lk633": "false,false,false",

"Lk647": "4294705152,159405537,100251149,100",

"Lk655": "c:pr;m:pr;n:de;p:de", // Permission

"Lk663": "true",

"Lk667": "true",

"Lk677": "x86",

"Lk679": "1080",

"Lk706": "127.0.6533.120",

"Lk707": "0,0",

"Lk712": "true",

"Lk720": "true",

"Lk753": "[{\"brand\":\"Not)A;Brand\",\"version\":\"99\"},{\"brand\":\"Google Chrome\",\"version\":\"127\"},{\"brand\":\"Chromium\",\"version\":\"127\"}]",

"Lk761": "80",

"Lk764": "Asia/Shanghai",

"Lk772": "[\"4g\",-1,\"null\"]",

"Lk792": "0;0",

"Lk793": "zh-CN",

"Lk800": "1",

"Lk802": "0",

"Lk804": "34084ec4-81",

"Lk815": "afafafafafafafafafafafafafafafafafafafafafafafafafafafafafafafaf-22-19", // canvas指纹和语音种类数量拼接

"Lk816": "71.48",

"Lk822": "15.0.0",

"Lk823": "[\"4g\",-1,\"null\"]",

"Lk828": "1",

"Lk833": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",

"Lk836": "afafafafafafafafafafafafafafafafafafafafafafafafafafafafafafafaf", //canvas指纹 这里因为解混淆所以看起来会有点奇怪

"Lk861": "0",

"Lk875": "false",

"Lk876": "8",

"Lk883": "true|",

"Lk884": "false",

"Lk888": "fb16a83e", //音频指纹

"Lk893": "1",

"Lk898": "916992|892102|412643|264468|918808",

"Lk917": "bKFfggFu14KpAWzRMouN/Q==",

"Lk929": "ANGLE (Intel, Intel(R) UHD Graphics 730 (0x00004692) Direct3D11 vs_5_0 ps_5_0, D3D11)",

"Lk941": "127.0.6533.120",

"Lk959": "false",

"Lk969": "00",

"Lk976": "1767513833514",

"Lk977": "Google Inc. (Intel)",

"Lk987": ",0",

"Lk990": "false",

"Lk991": "-615616",

"Lk993": "24",

"Lk997": "true",

"Lk998": "",

"Lk477": "-152261870"

},

"perf": 435,

"s": "f",

"tid": "mjzg3mqm6wlbdfrfgge"

}

以上数组中,最主要的检测点是几个jsvmp,你只要把jsvmp过了就能成功取值 而这些jsvmp主要跟以下环境有关:

document.createElement

document.cookie (Lk477) (Lk991) 这俩个比较重点 跟cookie参数中的bm_s bm_sc bm_so这三个相关

Notification Permission

大概就这些 其他的常规补没啥好介绍的

解混淆之后 可以看到signals初始化数组在这里一直往下追踪,看到这种形式的基本就是vmp

有些key不能直接搜到的原因,是因为key的赋值就在vmp里面完成的,搜不到很正常

找到参数赋值的位置,就在该jsvmp里进行插桩调试就好了

补的大概差不多之后就可以成功出值了,

以上是sbsd产品的流程

Logo

有“AI”的1024 = 2048,欢迎大家加入2048 AI社区

更多推荐