正方教务系统课表查询 API 逆向分析

1
import requests
2
import base64
3
import re
4
import time
5
import urllib3
6
from cryptography.hazmat.primitives.asymmetric import rsa, padding
7
from urllib.parse import quote
8

9
urllib3.disable_warnings()
10

11
BASE = "https://jwxt.gzus.edu.cn"
12
USERNAME = "你的学号"
13
PASSWORD = "你的密码"
14

15
# === 创建会话 ===
16
session = requests.Session()
17
session.verify = False
18
session.headers["User-Agent"] = (
19
    "Mozilla/5.0 (Windows NT 10.0; Win64; x64) "
20
    "AppleWebKit/537.36 (KHTML, like Gecko) "
21
    "Chrome/120.0.0.0 Safari/537.36"
22
)
23

24
# === Step 1: 获取登录页面 + csrftoken ===
25
page = session.get(f"{BASE}/jwglxt/xtgl/login_slogin.html")
26
csrf = re.search(r'id="csrftoken".*?value="([^"]*)"', page.text).group(1)
27

28
# === Step 2: 获取 RSA 公钥 ===
29
key_data = session.get(
30
    f"{BASE}/jwglxt/xtgl/login_getPublicKey.html",
31
    headers={"X-Requested-With": "XMLHttpRequest"}
32
).json()
33

34
# === Step 3: RSA 加密密码 ===
35
mod = int.from_bytes(base64.b64decode(key_data["modulus"]), 'big')
36
exp = int.from_bytes(base64.b64decode(key_data["exponent"]), 'big')
37
pub_key = rsa.RSAPublicNumbers(exp, mod).public_key()
38
enc_pw = base64.b64encode(
39
    pub_key.encrypt(PASSWORD.encode(), padding.PKCS1v15())
40
).decode()
41

42
# === Step 4: 登录 ===
43
body = (
44
    f"csrftoken={csrf}&yhm={USERNAME}"
45
    f"&mm={quote(enc_pw, safe='')}&language=zh_CN"
46
)
47

48
resp = session.post(
49
    f"{BASE}/jwglxt/xtgl/login_slogin.html?time={int(time.time() * 1000)}",
50
    data=body,
51
    headers={
52
        "Content-Type": "application/x-www-form-urlencoded",
53
        "Origin": BASE,
54
        "Referer": f"{BASE}/jwglxt/xtgl/login_slogin.html"
55
    },
56
    allow_redirects=False
57
)
58

59
if resp.status_code in (301, 302):
60
    print("✅ 登录成功！")
61
else:
62
    print("❌ 登录失败，请检查账号密码")
63
    exit(1)
64

65
# === Step 5: 查询课表 ===
66
schedule = session.post(
67
    f"{BASE}/jwglxt/kbcx/xskbcx_cxXsgrkb.html?gnmkdm=N2151",
68
    headers={
69
        "Accept": "*/*",
70
        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
71
        "X-Requested-With": "XMLHttpRequest",
72
        "Referer": (
73
            f"{BASE}/jwglxt/kbcx/xskbcx_cxXskbcxIndex.html"
74
            "?gnmkdm=N2151&layout=default"
75
        ),
76
    },
77
    data="xnm=2025&xqm=12&kzlx=ck&xsdm="
78
)
79

80
result = schedule.json()
81
print(f"\n📅 {result.get('xqmc', '未知学期')}")
82
print(f"👤 {result.get('xsxm', '未知')} | 共 {len(result.get('kbList', []))} 门课\n")
83

84
for course in result.get("kbList", []):
85
    print(
86
        f"📖 {course['kcmc']} | 👨‍🏫 {course['xm']} | "
87
        f"周{course['xq']} 第{course['jcor']}-{course['jcend']}节 "
88
        f"| 📍 {course['cdmc']}"
89
    )