# encrypt-labs
项目地址：https://github.com/SwagXz/encrypt-labs
[](https://github.com/SwagXz/encrypt-labs#encrypt-labs)

> 说明：之前自己在学习前端加解密经常遇到加密解不了的情况；之后慢慢看师傅们的文章，也学到了很多绕过技术，于是写了个简单的靶场，为之后的师傅们铺路学习,加密方式列出了我经常见的8种方式包含非对称加密、对称加密、加签以及禁止重放的测试场景，比如AES、DES、RSA，用于渗透测试加解密练习。希望可以帮助到最近在学习这块知识的师傅，靶场函数.很简单，和实战相比还是差的有点多，不过应该够入门了

js代码做了混淆，感觉较难分析的可以使用easy.php进行练习

## 食用方式:

[](https://github.com/SwagXz/encrypt-labs#%E9%A3%9F%E7%94%A8%E6%96%B9%E5%BC%8F)

Nginx+mysql+php8放在网站路径+导入数据库即可食用

Ta0ing师傅提供了docker版本的

```
git clone https://github.com/Ta0ing/encrypt-labs-docker.git
docker-compose up -d --build
```

[![image](/media/202605/99603861e79b44648b334062c4848b109162.png)](https://private-user-images.githubusercontent.com/28479252/387108936-c19d3edb-ad2c-4a51-9f52-c0bd384ffb67.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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._aFmhZVmkx5icXzvm7Mlb1dtw6PlllWj_RLLRFFFf6c) [![image](/media/202605/10b71984776d40d3ac9a08a20dbad06f2105.png)](https://private-user-images.githubusercontent.com/28479252/387109493-b73967bd-9106-486c-b2df-4614147806dc.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.zPn2BOJ_Yke56Z-HmOFKti88D-9kQYMTUy1IiHm4HV0)

如果对你有帮助的话，来点🌟🌟🌟，食用起来会更香！

配合其他的github项目和文章进行练习

**工具脚本**

[burp自动加解密插件autoDeceder](https://github.com/f0ng/autoDecoder)

[前端JS加密绕过脚本JS-Forward](https://github.com/G-Security-Team/JS-Forward)

[JsRpc脚本](https://github.com/jxhczhl/JsRpc)

**文章**

自己写的通关记录：

[加密对抗靶场enctypt-labs通关](https://www.freebuf.com/articles/web/415434.html)

其他师傅写的文章：

[enctypt-labs靶场通关](https://mp.weixin.qq.com/s/ZgD7qAQAsNlZgLtdZVCoFw)

[渗透测试高级技巧：分析验签与前端加密（一）](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247511526&idx=1&sn=c3a661b71ad9e9108b822cec461d34e6&chksm=c2d1d142f5a65854cd0ac07ec38d46c514f472734923fad4ce8bb85579b5a056447abcb545da&scene=21#wechat_redirect)

[渗透测试高级技巧（二）：对抗前端动态密钥与非对称加密防护](https://mp.weixin.qq.com/s/gMbbEV62XR5_QCACQwZnOw)

[保姆级教程--前端加密的对抗（附带靶场）](https://mp.weixin.qq.com/s/_WdQlH6AKma8zYq73Ub7ag)

[![image](/media/202605/6cce70fbbcf4452e8428af23128701385382.png)](https://private-user-images.githubusercontent.com/52726669/385165453-c7c20268-9eb3-4431-b7c1-712710b4ac60.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.Bed2qU76kx08hX5dy0IsLXh1dMwuKWnPx2I4FQpAD1U)

## 主要分为对称加密、非对称加密和加签的方式

[](https://github.com/SwagXz/encrypt-labs#%E4%B8%BB%E8%A6%81%E5%88%86%E4%B8%BA%E5%AF%B9%E7%A7%B0%E5%8A%A0%E5%AF%86%E9%9D%9E%E5%AF%B9%E7%A7%B0%E5%8A%A0%E5%AF%86%E5%92%8C%E5%8A%A0%E7%AD%BE%E7%9A%84%E6%96%B9%E5%BC%8F)

[![image](/media/202605/e500241e34674ec98e41592d55788c7a9173.png)](https://private-user-images.githubusercontent.com/52726669/386836651-cab7b27b-793c-47cc-b7ae-9f318a40492f.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.IUwZHi066-hI0xJHYGZjl7aCzQUowfG5kqysBJM-_lk)

## 列举几个数据包中的图

[](https://github.com/SwagXz/encrypt-labs#%E5%88%97%E4%B8%BE%E5%87%A0%E4%B8%AA%E6%95%B0%E6%8D%AE%E5%8C%85%E4%B8%AD%E7%9A%84%E5%9B%BE)

### AES

[](https://github.com/SwagXz/encrypt-labs#aes)

[![image](/media/202605/3dc6874fa1ed4984adea82b3ddabf23e2773.png)](https://private-user-images.githubusercontent.com/52726669/385167204-7b97cb86-163c-48ac-b777-bdb7bb7c8ce5.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.Reclz4Gkp-825jftrndDKGvGuaCltZ2M7yJTRB7C5wg)

### 非对称加密

[](https://github.com/SwagXz/encrypt-labs#%E9%9D%9E%E5%AF%B9%E7%A7%B0%E5%8A%A0%E5%AF%86)

[![image](/media/202605/57d1826cc20a460d82643bd4a7cc57f43756.png)](https://private-user-images.githubusercontent.com/52726669/385167340-6e812dc0-9f5a-4cd9-b201-c57ff5240a7c.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.3OuviLRhXe2Qch_eiSJxS07xJ6zrC1Ij8XFUFH56Mko)

### AES与RSA

[](https://github.com/SwagXz/encrypt-labs#aes%E4%B8%8Ersa)

[![image](/media/202605/81bbe65c6b74488da3eb647b99fe6bd16082.png)](https://private-user-images.githubusercontent.com/52726669/385167440-95396225-11d6-4971-8641-70a65275127a.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.5FSxS0IGCrsgF_ktCXdY28VnDqX4QhGgOYqoJuxK1zo)

### 签名的方式

[](https://github.com/SwagXz/encrypt-labs#%E7%AD%BE%E5%90%8D%E7%9A%84%E6%96%B9%E5%BC%8F)

[![image](/media/202605/1c87f83697774cb6ab233e5e692c930a6951.png)](https://private-user-images.githubusercontent.com/52726669/385167564-c88b41f4-075b-4eae-8a1c-4b57a27c6370.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.-MlRgV9p3SfD302j_FqepHl8ee25SQd9ooHD2cV4_go)

### 禁止重放

[](https://github.com/SwagXz/encrypt-labs#%E7%A6%81%E6%AD%A2%E9%87%8D%E6%94%BE)

[![image](/media/202605/959cd4ba034c45069cdd1146578f5a842885.png)](https://private-user-images.githubusercontent.com/52726669/386836685-0a75135e-a197-47f3-bd34-858d27a5c19d.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.Vt02NS93Y0rs2EWwSonOQDtgdnO4fqIaYIh4_yropuE)

JS前端加密练习靶场