360网盾

感谢360
给了我们这么好的机会研究网盾
看看到底做了点啥
------------------------------------------------------------------------------
/*
如果输入url不是UTF8编码的，不关注search部分，我也不在乎它搜索什么，不管它是什么，我都转成UTF8的发给服务
*/
/*360网页保护插件不会上传您的URL到云服务器，只会将其通过HTTP请求发送给本地(localhost)安全卫士的服务，服务对URL做分析和处理后，如果不在白名单内，才会把URL的MD5上传给云服务器，这不会泄露您的隐私。*/
/*360网页保护外挂程式不会上传您的URL到云伺服器，只会将其通过本地(localhost)HTTP请求发送给本地安全卫士的服务，服务对URL做分析和处理后，如果不在白名单内，才会把URL的MD5上传给云伺服器，这不会泄露您的隐私。*/
/*360 Web Shield extension does not upload URLs to cloud server. Instead it just sends URLs to local(localhost) 360 Internet Security daemon via HTTP. URLs are uploaded to cloud server in case URLs are not found in trusted list after analysis, which does not disclose your privacy.*/

这是360官方的话吧

小白一只
解压xpi
去掉install.rdf chrome.manifest browser.xul
只剩下
aes.js
base64.js
main.js
bootstrap.js

bootstrap.js
0字节=A+
aes.js
/*
CryptoJS v3.1.2
code.google.com/p/crypto-js
(c) 2009-2013 by Jeff Mott. All rights reserved.
code.google.com/p/crypto-js/wiki/License
*/
base64.js
/*
Copyright (c) 2008 Fred Palmer fred.palmer_at_gmail.com
Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following
conditions:
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
OTHER DEALINGS IN THE SOFTWARE.
*/
干货就剩main.js了

var utf8_url = WS360Common.url_to_utf8(url);//utf8编码
var content = "a0" + " : " + Base64.encode(utf8_url);//base64编码后在前面加a0
var report_url = WS360Serv.get_query_url();//获取本地服务地址
//http://localhost:" + this.get_port() + "/LocalQueryOnlyNoSendOut?query=urls&from=firefox"端口可能65360-65365
tab_browser.http_request.open("POST", report_url);
var enc_content = WS360Common.encryptString(content);//AES加密内容
tab_browser.http_request.send(enc_content);//发给本地服务

扫二维码下载贴吧客户端

下载贴吧APP
看高清直播、视频！

8回复贴，共1页

<<返回linux吧

分享到:

日	一	二	三	四	五	六