// # Source: https://github.com/lksky8/sign-ql/blob/main/invalid/qmm.js // # Raw: https://raw.githubusercontent.com/lksky8/sign-ql/main/invalid/qmm.js // # Repo: lksky8/sign-ql // # Path: invalid/qmm.js // # UploadedAt: 2025-01-11T18:42:58Z // # SHA256: 868f2cd3002df5797fe7ad064612d6e5bc4b97d168092281a6390b7219643743 // # Category: web版/抓包 // # Evidence: web/H5关键词 + cookie/token/header // /* 作者：https://github.com/lksky8/sign-ql/ 日期：2023-2-22 软件：券妈妈 功能：开宝箱 抓包：首页左上角 http://app.quanmama.com/ajax/app/UserActionMonitorAjax.ashx 里面的usertoken 变量：qmm='usertoken@usertoken ' 多个账号用 @ 或者 换行 分割 定时每小时一次,默认不推送信息 */ //cron: 0 */1 * * * const $ = new Env('券妈妈时段奖励'); const notify = $.isNode() ? require('./sendNotify') : ''; const md5 = require('md5'); const {log} = console; const Notify = 0; //0为关闭通知，1为打开通知,默认为1 const debug = 0; //0为关闭调试，1为打开调试,默认为0 ////////////////////// let qmm = process.env.qmm; let qmmArr = []; let data = ''; let msg = ''; !(async () => { if (!(await Envs())) return; else { log(`\n\n============================================= \n脚本执行 - 北京时间(UTC+8)：${new Date( new Date().getTime() + new Date().getTimezoneOffset() * 60 * 1000 + 8 * 60 * 60 * 1000).toLocaleString()} \n=============================================\n`); log(`\n=================== 共找到 ${qmmArr.length} 个账号 ===================`) if (debug) { log(`【debug】 这是你的全部账号数组:\n ${qmmArr}`); } for (let index = 0; index < qmmArr.length; index++) { let num = index + 1 log(`\n========= 开始【第 ${num} 个账号】=========\n`) data = qmmArr[index]; user20 = data.substring(0,20); time2 = getime(); sign = md5('f:android_c:575_i:_u:'+user20+'_a:500_k:$App_1379UserAction_t:'+time2).substring(12, 20); sign2 = md5('f:android_c:575_i:_u:'+user20+'_a:302_k:$App_1379UserAction_t:'+time2).substring(12, 20); msg += `\n第${num}个账号运行结果：` log('开始签到'); await doSign(); await $.wait(2 * 1000); await doSign2() await $.wait(2 * 1000); } await SendMsg(msg); } })() .catch((e) => log(e)) .finally(() => $.done()) /** * 签到 */ function doSign(timeout = 3 * 1000) { return new Promise((resolve) => { let url = { url: `http://app.quanmama.com/ajax/app/UserActionMonitorAjax.ashx`, headers: {"Host":"app.quanmama.com","content-length":535,"accept":"application/json, text/javascript, */*; q=0.01","origin":"https://app.quanmama.com","x-requested-with":"XMLHttpRequest","user-agent":"Mozilla/5.0 (Linux; Android 10; MI 8 Build/QKQ1.190828.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/77.0.3865.120 MQQBrowser/6.2 TBS/045614 Mobile Safari/537.36; APP_USER/quanmama","sec-fetch-mode":"cors","content-type":"application/x-www-form-urlencoded; charset=UTF-8","sec-fetch-site":"same-origin","accept-encoding":"gzip, deflate, br","accept-language":"zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7"}, body: `actiontype=500&sign=${sign}&taskSysNo=0&coins=0&signdate=${time2}&f=android&code=575&imei=&usertoken=${data}&v=5.7.5&platform=XiaoMi&type=4&isFromWeb=1`, } if (debug) { log(`\n【debug】=============== 这是 签到 请求 url ===============`); log(JSON.stringify(url)); } $.post(url, async (error, response, data) => { try { if (debug) { log(`\n\n【debug】===============这是 签到 返回data==============`); log(data) } let result = JSON.parse(data); if (result.error_code == 0) { log(`4小时宝箱开启成功，获得：${result.data.coins}金币`) //msg += `\n签到成功，获得：${result.data.count}` } else if (result['error_msg'] == '您刚开宝箱不久，再等等吧') { log(`您刚开宝箱不久，再等等吧`) } else if (result.error_code == 7005) { log(`4小时宝箱开启失败，需要检查传入数据是否过期`) await notify.sendNotify('券妈妈', '4小时宝箱开启失败，需要检查传入数据是否失效'); } else { log(`4小时宝箱开启失败，原因是：${result['error_msg']}`) await notify.sendNotify('券妈妈', `4小时宝箱开启失败，原因是：${result['error_msg']}`) } } catch (e) { log(e) } finally { resolve(); } }, timeout) }) } function doSign2(timeout = 3 * 1000) { return new Promise((resolve) => { let url = { url: `http://app.quanmama.com/ajax/app/UserActionMonitorAjax.ashx`, headers: {"Host":"app.quanmama.com","content-length":535,"accept":"application/json, text/javascript, */*; q=0.01","origin":"https://app.quanmama.com","x-requested-with":"XMLHttpRequest","user-agent":"Mozilla/5.0 (Linux; Android 10; MI 8 Build/QKQ1.190828.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/77.0.3865.120 MQQBrowser/6.2 TBS/045614 Mobile Safari/537.36; APP_USER/quanmama","sec-fetch-mode":"cors","content-type":"application/x-www-form-urlencoded; charset=UTF-8","sec-fetch-site":"same-origin","accept-encoding":"gzip, deflate, br","accept-language":"zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7"}, body: `actiontype=302&sign=${sign2}&taskSysNo=0&coins=0&signdate=${time2}&f=android&code=575&imei=&usertoken=${data}&v=5.7.5&platform=XiaoMi&type=4&isFromWeb=1`, } if (debug) { log(`\n【debug】=============== 这是 签到 请求 url ===============`); log(JSON.stringify(url)); } $.post(url, async (error, response, data) => { try { if (debug) { log(`\n\n【debug】===============这是 签到 返回data==============`); log(data) } let result = JSON.parse(data); if (result.data.title == '时段奖励') { log(`1小时宝箱开启成功`) //msg += `\n签到成功，获得：${result.data.count}` } else if (result['error_msg'] == '服务异常，请重新尝试！') { log(`1小时宝箱开启失败，需要检查传入数据是否过期`) await notify.sendNotify(`券妈妈`, '1小时宝箱开启失败，需要检查传入数据是否过期'); } else if (result.data.title == '还没到时间哦，再等等吧') { log(`1小时宝箱还没到时间哦，再等等吧`) //msg += `\n1小时宝箱开启失败，还没到时间哦，再等等吧` } else { log(`1小时宝箱开启失败，原因是：${result['error_msg']}`) await notify.sendNotify('券妈妈', `1小时宝箱开启失败，原因是：${result['error_msg']}`) } } catch (e) { log(e) } finally { resolve(); } }, timeout) }) } // ============================================变量检查============================================ \\ async function Envs() { if (qmm) { if (qmm.indexOf("@") != -1) { qmm.split("@").forEach((item) => { qmmArr.push(item); }); } else if (qmm.indexOf("\n") != -1) { qmm.split("\n").forEach((item) => { qmmArr.push(item); }); } else { qmmArr.push(qmm); } } else { log(`\n 【${$.name}】：未填写变量 qmm`) return; } return true; } // ============================================发送消息============================================ \\ async function SendMsg(message) { if (!message) return; if (Notify > 0) { if ($.isNode()) { var notify = require('./sendNotify'); await notify.sendNotify($.name, message); } else { $.msg(message); } } else { log(message); } } /** * 获取时间 */ function getime() { var timeString = new Date().toISOString(); return formattedTime = timeString.replace(/\D/g, '').substring(0,14); } /** * 修改配置文件 */ function modify() { fs.readFile('/ql/data/config/config.sh','utf8',function(err,dataStr){ if(err){ return log('读取文件失败！'+err) } else { var result = dataStr.replace(/regular/g,string); fs.writeFile('/ql/data/config/config.sh', result, 'utf8', function (err) { if (err) {return log(err);} }); } }) } function Env(t, e) { "undefined" != typeof process && JSON.stringify(process.env).indexOf("GITHUB") > -1 && process.exit(0); class s { constructor(t) { this.env = t } send(t, e = "GET") { t = "string" == typeof t ? { url: t } : t; let s = this.get; return "POST" === e && (s = this.post), new Promise((e, i) => { s.call(this, t, (t, s, r) => { t ? i(t) : e(s) }) }) } get(t) { return this.send.call(this.env, t) } post(t) { return this.send.call(this.env, t, "POST") } } return new class { constructor(t, e) { this.name = t, this.http = new s(this), this.data = null, this.dataFile = "box.dat", this.logs = [], this.isMute = !1, this.isNeedRewrite = !1, this.logSeparator = "\n", this.startTime = (new Date).getTime(), Object.assign(this, e), this.log("", `🔔${this.name}, 开始!`) } isNode() { return "undefined" != typeof module && !!module.exports } isQuanX() { return "undefined" != typeof $task } isSurge() { return "undefined" != typeof $httpClient && "undefined" == typeof $loon } isLoon() { return "undefined" != typeof $loon } toObj(t, e = null) { try { return JSON.parse(t) } catch { return e } } toStr(t, e = null) { try { return JSON.stringify(t) } catch { return e } } getjson(t, e) { let s = e; const i = this.getdata(t); if (i) try { s = JSON.parse(this.getdata(t)) } catch { } return s } setjson(t, e) { try { return this.setdata(JSON.stringify(t), e) } catch { return !1 } } getScript(t) { return new Promise(e => { this.get({ url: t }, (t, s, i) => e(i)) }) } runScript(t, e) { return new Promise(s => { let i = this.getdata("@chavy_boxjs_userCfgs.httpapi"); i = i ? i.replace(/\n/g, "").trim() : i; let r = this.getdata("@chavy_boxjs_userCfgs.httpapi_timeout"); r = r ? 1 * r : 20, r = e && e.timeout ? e.timeout : r; const [o, h] = i.split("@"), n = { url: `http://${h}/v1/scripting/evaluate`, body: { script_text: t, mock_type: "cron", timeout: r }, headers: { "X-Key": o, Accept: "*/*" } }; this.post(n, (t, e, i) => s(i)) }).catch(t => this.logErr(t)) } loaddata() { if (!this.isNode()) return {}; { this.fs = this.fs ? this.fs : require("fs"), this.path = this.path ? this.path : require("path"); const t = this.path.resolve(this.dataFile), e = this.path.resolve(process.cwd(), this.dataFile), s = this.fs.existsSync(t), i = !s && this.fs.existsSync(e); if (!s && !i) return {}; { const i = s ? t : e; try { return JSON.parse(this.fs.readFileSync(i)) } catch (t) { return {} } } } } writedata() { if (this.isNode()) { this.fs = this.fs ? this.fs : require("fs"), this.path = this.path ? this.path : require("path"); const t = this.path.resolve(this.dataFile), e = this.path.resolve(process.cwd(), this.dataFile), s = this.fs.existsSync(t), i = !s && this.fs.existsSync(e), r = JSON.stringify(this.data); s ? this.fs.writeFileSync(t, r) : i ? this.fs.writeFileSync(e, r) : this.fs.writeFileSync(t, r) } } lodash_get(t, e, s) { const i = e.replace(/\[(\d+)\]/g, ".$1").split("."); let r = t; for (const t of i) if (r = Object(r)[t], void 0 === r) return s; return r } lodash_set(t, e, s) { return Object(t) !== t ? t : (Array.isArray(e) || (e = e.toString().match(/[^.[\]]+/g) || []), e.slice(0, -1).reduce((t, s, i) => Object(t[s]) === t[s] ? t[s] : t[s] = Math.abs(e[i + 1]) >> 0 == +e[i + 1] ? [] : {}, t)[e[e.length - 1]] = s, t) } getdata(t) { let e = this.getval(t); if (/^@/.test(t)) { const [, s, i] = /^@(.*?)\.(.*?)$/.exec(t), r = s ? this.getval(s) : ""; if (r) try { const t = JSON.parse(r); e = t ? this.lodash_get(t, i, "") : e } catch (t) { e = "" } } return e } setdata(t, e) { let s = !1; if (/^@/.test(e)) { const [, i, r] = /^@(.*?)\.(.*?)$/.exec(e), o = this.getval(i), h = i ? "null" === o ? null : o || "{}" : "{}"; try { const e = JSON.parse(h); this.lodash_set(e, r, t), s = this.setval(JSON.stringify(e), i) } catch (e) { const o = {}; this.lodash_set(o, r, t), s = this.setval(JSON.stringify(o), i) } } else s = this.setval(t, e); return s } getval(t) { return this.isSurge() || this.isLoon() ? $persistentStore.read(t) : this.isQuanX() ? $prefs.valueForKey(t) : this.isNode() ? (this.data = this.loaddata(), this.data[t]) : this.data && this.data[t] || null } setval(t, e) { return this.isSurge() || this.isLoon() ? $persistentStore.write(t, e) : this.isQuanX() ? $prefs.setValueForKey(t, e) : this.isNode() ? (this.data = this.loaddata(), this.data[e] = t, this.writedata(), !0) : this.data && this.data[e] || null } initGotEnv(t) { this.got = this.got ? this.got : require("got"), this.cktough = this.cktough ? this.cktough : require("tough-cookie"), this.ckjar = this.ckjar ? this.ckjar : new this.cktough.CookieJar, t && (t.headers = t.headers ? t.headers : {}, void 0 === t.headers.Cookie && void 0 === t.cookieJar && (t.cookieJar = this.ckjar)) } get(t, e = (() => { })) { t.headers && (delete t.headers["Content-Type"], delete t.headers["Content-Length"]), this.isSurge() || this.isLoon() ? (this.isSurge() && this.isNeedRewrite && (t.headers = t.headers || {}, Object.assign(t.headers, { "X-Surge-Skip-Scripting": !1 })), $httpClient.get(t, (t, s, i) => { !t && s && (s.body = i, s.statusCode = s.status), e(t, s, i) })) : this.isQuanX() ? (this.isNeedRewrite && (t.opts = t.opts || {}, Object.assign(t.opts, { hints: !1 })), $task.fetch(t).then(t => { const { statusCode: s, statusCode: i, headers: r, body: o } = t; e(null, { status: s, statusCode: i, headers: r, body: o }, o) }, t => e(t))) : this.isNode() && (this.initGotEnv(t), this.got(t).on("redirect", (t, e) => { try { if (t.headers["set-cookie"]) { const s = t.headers["set-cookie"].map(this.cktough.Cookie.parse).toString(); s && this.ckjar.setCookieSync(s, null), e.cookieJar = this.ckjar } } catch (t) { this.logErr(t) } }).then(t => { const { statusCode: s, statusCode: i, headers: r, body: o } = t; e(null, { status: s, statusCode: i, headers: r, body: o }, o) }, t => { const { message: s, response: i } = t; e(s, i, i && i.body) })) } post(t, e = (() => { })) { if (t.body && t.headers && !t.headers["Content-Type"] && (t.headers["Content-Type"] = "application/x-www-form-urlencoded"), t.headers && delete t.headers["Content-Length"], this.isSurge() || this.isLoon()) this.isSurge() && this.isNeedRewrite && (t.headers = t.headers || {}, Object.assign(t.headers, { "X-Surge-Skip-Scripting": !1 })), $httpClient.post(t, (t, s, i) => { !t && s && (s.body = i, s.statusCode = s.status), e(t, s, i) }); else if (this.isQuanX()) t.method = "POST", this.isNeedRewrite && (t.opts = t.opts || {}, Object.assign(t.opts, { hints: !1 })), $task.fetch(t).then(t => { const { statusCode: s, statusCode: i, headers: r, body: o } = t; e(null, { status: s, statusCode: i, headers: r, body: o }, o) }, t => e(t)); else if (this.isNode()) { this.initGotEnv(t); const { url: s, ...i } = t; this.got.post(s, i).then(t => { const { statusCode: s, statusCode: i, headers: r, body: o } = t; e(null, { status: s, statusCode: i, headers: r, body: o }, o) }, t => { const { message: s, response: i } = t; e(s, i, i && i.body) }) } } time(t, e = null) { const s = e ? new Date(e) : new Date; let i = { "M+": s.getMonth() + 1, "d+": s.getDate(), "H+": s.getHours(), "m+": s.getMinutes(), "s+": s.getSeconds(), "q+": Math.floor((s.getMonth() + 3) / 3), S: s.getMilliseconds() }; /(y+)/.test(t) && (t = t.replace(RegExp.$1, (s.getFullYear() + "").substr(4 - RegExp.$1.length))); for (let e in i) new RegExp("(" + e + ")").test(t) && (t = t.replace(RegExp.$1, 1 == RegExp.$1.length ? i[e] : ("00" + i[e]).substr(("" + i[e]).length))); return t } msg(e = t, s = "", i = "", r) { const o = t => { if (!t) return t; if ("string" == typeof t) return this.isLoon() ? t : this.isQuanX() ? { "open-url": t } : this.isSurge() ? { url: t } : void 0; if ("object" == typeof t) { if (this.isLoon()) { let e = t.openUrl || t.url || t["open-url"], s = t.mediaUrl || t["media-url"]; return { openUrl: e, mediaUrl: s } } if (this.isQuanX()) { let e = t["open-url"] || t.url || t.openUrl, s = t["media-url"] || t.mediaUrl; return { "open-url": e, "media-url": s } } if (this.isSurge()) { let e = t.url || t.openUrl || t["open-url"]; return { url: e } } } }; if (this.isMute || (this.isSurge() || this.isLoon() ? $notification.post(e, s, i, o(r)) : this.isQuanX() && $notify(e, s, i, o(r))), !this.isMuteLog) { let t = ["", "==============📣系统通知📣=============="]; t.push(e), s && t.push(s), i && t.push(i), console.log(t.join("\n")), this.logs = this.logs.concat(t) } } log(...t) { t.length > 0 && (this.logs = [...this.logs, ...t]), console.log(t.join(this.logSeparator)) } logErr(t, e) { const s = !this.isSurge() && !this.isQuanX() && !this.isLoon(); s ? this.log("", `❗️${this.name}, 错误!`, t.stack) : this.log("", `❗️${this.name}, 错误!`, t) } wait(t) { return new Promise(e => setTimeout(e, t)) } done(t = {}) { const e = (new Date).getTime(), s = (e - this.startTime) / 1e3; this.log("", `🔔${this.name}, 结束! 🕛 ${s} 秒`), this.log(), (this.isSurge() || this.isQuanX() || this.isLoon()) && $done(t) } }(t, e) }