[gtkqq-dev] web login password md5 checksum authentication method

20 views
Skip to first unread message

Xiang Wang

unread,
May 16, 2012, 4:32:24 AM5/16/12
to gtkqq-dev, 黄丛宇, 黄敦荣, Cat Super
Dears,

现在的password是经过md5加密之后再传给 webqq server 的。
我看现有的算法是
md5(pass, out)
md5(out, out);
md5(out, out);
upcase(out);
strcat(out, vc_code);
md5(out, out);
upcase(out)

可是算出来登录结果是登录失败，不合法的用户名或密码。

hcy的算法是这样的嘛？

--

Best Regards~


Xiang Wang

CDC, TrendMicro


Xiang Wang

unread,
May 16, 2012, 4:35:05 AM5/16/12
to gtkqq-dev, 黄丛宇, 黄敦荣, Cat Super
code我check in了。

2012/5/16 Xiang Wang <xiang...@trendmicro.com.cn>

Chunfeng Zhang

unread,
May 16, 2012, 5:09:27 AM5/16/12
to gtkq...@googlegroups.com
我昨天调试的时候也遇到这个问题了。
肯定是腾讯更新加密密码的方法了。

--
Best Regards
Lincoln Zhang

dunrong huang

unread,
May 16, 2012, 5:15:59 AM5/16/12
to gtkq...@googlegroups.com
No, 腾讯现在还可以登录.
--
linuxer and emacser and pythoner living in beijing
blog: http://mathslinux.org
twitter: https://twitter.com/mathslinux
google+: https://plus.google.com/118129852578326338750

Xiang Wang

unread,
May 16, 2012, 5:19:11 AM5/16/12
to gtkq...@googlegroups.com
gtkqq version 1.0是可以登录的。

说明算法并没改变。

2012/5/16 dunrong huang <riega...@gmail.com>

dunrong huang

unread,
May 16, 2012, 5:26:12 AM5/16/12
to gtkq...@googlegroups.com
好像是 md5库没有用对, hcy 用的是 glib的库, 每次用 md5的二进制加密, 和你的使用有点不一样,
我 check 一下

Chunfeng Zhang

unread,
May 16, 2012, 5:28:14 AM5/16/12
to gtkq...@googlegroups.com
我看他的源代码也是这么加密的啊，现在GITHUB上的GTKQQ没办法编译了。

在 2012年5月16日 下午5:19，Xiang Wang <xiang...@trendmicro.com.cn> 写道：

dunrong huang

unread,
May 16, 2012, 5:30:02 AM5/16/12
to gtkq...@googlegroups.com
没办法编译? 不是吧

Chunfeng Zhang

unread,
May 16, 2012, 5:32:58 AM5/16/12
to gtkq...@googlegroups.com
我用的Arch，configure出错， 下面是LOG。

==>
==> Building and installing package
==> Determining latest git revision...
-> Version found: 20120516
==> Making package: gtkqq-git 20120516-1 (Wed May 16 17:26:55 CST 2012)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving Sources...
==> Extracting Sources...
==> Starting build()...
==> Connecting to the GIT server....
Cloning into 'gtkqq'...
remote: Counting objects: 2841, done.
remote: Compressing objects: 100% (957/957), done.
remote: Total 2841 (delta 1994), reused 2707 (delta 1860)
Receiving objects: 100% (2841/2841), 8.48 MiB | 180 KiB/s, done.
Resolving deltas: 100% (1994/1994), done.
==> GIT checkout done
==> Starting configure...
+ aclocal
+ autoconf
+ libtoolize --copy --force --automake
+ autoreconf --install
configure.ac:15: installing 'build-aux/compile'
configure.ac:19: installing 'build-aux/config.guess'
configure.ac:19: installing 'build-aux/config.sub'
configure.ac:8: installing 'build-aux/install-sh'
configure.ac:8: installing 'build-aux/missing'
src/gui/Makefile.am: installing 'build-aux/depcomp'
automake: warnings are treated as errors
/usr/share/automake-1.12/am/ltlibrary.am: warning: 'libwebqq.la':
linking libtool libraries using a non-POSIX
/usr/share/automake-1.12/am/ltlibrary.am: archiver requires
'AM_PROG_AR' in 'configure.ac'
src/libqq/Makefile.am:1: while processing Libtool library 'libwebqq.la'
autoreconf: automake failed with exit status: 1
==> ERROR: A failure occurred in build().
Aborting...
==> ERROR: Makepkg was unable to build gtkqq-git.
==> Restart building gtkqq-git ? [y/N]
==> ----------------------------------
==>
==> WARNING: Following packages have not been installed:
gtkqq-git

dunrong huang

unread,
May 16, 2012, 5:40:58 AM5/16/12
to Xiang Wang, gtkqq-dev, 黄丛宇, Cat Super
wang: 好像是第二次开始出错了.

在 2012年5月16日 下午4:32，Xiang Wang <xiang...@trendmicro.com.cn>写道：

Chunfeng Zhang

unread,
May 16, 2012, 6:04:38 AM5/16/12
to gtkq...@googlegroups.com
configure.ac 加上 AM_PROG_AR ,在Arch上可以编译了
patch
=====
diff --git a/configure.ac b/configure.ac
index 35ecc08..69f7d82 100644
--- a/configure.ac
+++ b/configure.ac
@@ -10,6 +10,7 @@ AM_INIT_AUTOMAKE

AC_PROG_CC
AM_PROG_CC_C_O
+AM_PROG_AR
AC_PROG_INSTALL

LT_INIT

--
Best Regards
Lincoln Zhang

Chunfeng Zhang

unread,
May 16, 2012, 6:18:09 AM5/16/12
to gtkq...@googlegroups.com
我用浏览器登录抓包看了，密码加密方法和gtkqq不一样了。
腾讯默认的加密方法改掉了，以前的加密方法还兼容而已。
你们试一下看是不是。

dunrong huang

unread,
May 16, 2012, 6:22:12 AM5/16/12
to gtkq...@googlegroups.com
不是, 我已经找到原因了, 和 tecent 无关

dunrong huang

unread,
May 16, 2012, 6:46:05 AM5/16/12
to gtkq...@googlegroups.com
替换一个 md5 库就 OK 了, 我会把 patch 打上去.

Xiang Wang

unread,
May 16, 2012, 7:39:09 AM5/16/12
to gtkq...@googlegroups.com
我看了下。

前两次拿的是digest.
第三次md5的时候才获得的string.
然后在upcase
再 strcat
在获得md5-string
在upcase

2012/5/16 dunrong huang <riega...@gmail.com>

Xiang Wang

unread,
May 16, 2012, 8:01:32 AM5/16/12
to gtkq...@googlegroups.com
bug fix了。


code checkin

2012/5/16 Xiang Wang <xiang...@trendmicro.com.cn>

Sky Guo

unread,
May 20, 2012, 12:35:33 PM5/20/12
to gtkq...@googlegroups.com
那不是md5库的问题了？

Xiang Wang

unread,
May 20, 2012, 12:36:22 PM5/20/12
to gtkq...@googlegroups.com
显然不是。

2012/5/21 Sky Guo <frees...@gmail.com>

lf wang

unread,
Jul 11, 2012, 12:50:28 PM7/11/12
to gtkq...@googlegroups.com
gtkqq  arch 编译不过  下面是log   这个怎么解决

+ aclocal
+ autoconf
+ libtoolize --copy --force --automake
+ autoreconf --install
configure.ac:13: installing 'build-aux/ar-lib'
configure.ac:12: installing 'build-aux/compile'
configure.ac:16: installing 'build-aux/config.guess'
configure.ac:16: installing 'build-aux/config.sub'
configure.ac:5: installing 'build-aux/install-sh'
configure.ac:5: installing 'build-aux/missing'
src/libwebqq/Makefile.am: installing 'build-aux/depcomp'




在 2012年5月16日星期三UTC+8下午5时32分58秒，Crazy Pandar写道：

lf wang

unread,
Jul 11, 2012, 12:51:37 PM7/11/12
to gtkq...@googlegroups.com


在 2012年7月12日星期四UTC+8上午12时50分28秒，lf wang写道：
Reply all
Reply to author
Forward
0 new messages