@TakanashiAzusa 我先试试，现在有点事要出去，晚点回复您。谢谢

@TakanashiAzusa 出错了:(
提示如下：

load started
load finished
TypeError: null is not an object (evaluating 'form.elements')

undefined:3
:9
load started
load finished

能麻烦您帮我写一下这段登录的代码吗？我可以给您买杯咖啡

@TakanashiAzusa
https://gist.github.com/anonymous/deb3e022d75ad1711e5a

这是我从别的地方抄来的模拟登录的一段代码，麻烦你看看我空着的地方该怎么写呀，原谅我对 js 一窍不通，谢谢。

谁来帮帮我好吗？

先 passwd root 给 root 用户设一个密码， ubuntu 默认是不开启 root 账户的

@realityone
APK 在这里 http://clientdispatch.10086.cn:8080/downfile/apk/ChinaMobile10086.apk

@leozy2014 我们的系统中有 4000+号码，并且结账日还不相同，因此需要两三天就查一次以防欠费，之前也找过移动公司，但是人家不给开接口....

@gclover
之前抓到的也是一段密文如下，只不过是固定不变的，应该是不包含时间戳，所以只需要把该密文依样发过去就可以了，现在每次的密文是变化的，超时就会失效。

A/yMrYPDyBU2qQKm0XU1koTE9xxN46My1bHU/zOOeQLhkYYTcEuu0OF31r1v5hqhwHn27RZY9piSnaQTPqGZAP4iDUWQy+nnZ0Tz+/Nim1edMhypBYANW3jo5h+Kd22fCabRREGIYL5coE/iKDtDVRAa1xxJC+U/BeP6OC/CfPM=

@gclover 手机的密码是“ 123123 ”，密文就是文中提到的数据。不知道明文中包含多少数据，猜测含有当前时间。

@lution 又抓了几组数据，完全没有共同点，唯一的共同点应该是最后一位都是“=”

2016-01-06 10:52:25
e3RBGq541jmRlHgm5EKbxK2lDFZeda6BmO79GyKNLUN\/ooDzNAt5VEwwO3tJqXLwGI8xkBhGTnX3tTUlxcilmn+bTqdfECv4HV60dNoUNlwcmOrD+6WXBWzwi9k\/HSjC+EbVZ45x4JHrm12dZoXc8MeUJOZUUhO4iZmJZiflX2k=

2016-01-06 10:54:14
YxRmpSG8nPAEn9dBwAgYPsDamytXKBUpy7WxvsBLYE0u2LSZuc3Id7O4ji3IpsHe3WNMDeMRUucgBBoJdNv8rPRKfF70q5L9Dxiz9IbmveOdG\/A4ubetXoUohJ0msKSfNdIGyykZnK7JofX0iKLy1VrBEVPOVkn2ViEQMOkIAJw=

2016-01-06 10:56:18
KWmymOdxDRsq0bDjJpXWb3YdAqPmcDwWkS+aellkRwugid6NA8hUiAEHMO\/NvyRj5k6Jx+Eqc+uc3DOEPGGJtuyVH0MsAqdbrD7lNDw6+tbQulxzO6XR9LztujMyse3CVWREyrKWiUzGzNOX9AF76EHmtgQhnJAOd2UuJ++Q2os=

对 Java 一窍不通，因此逆向 APK 也做不到呀 :(

@lshero 不好意思没看到节点 sorry

xshell 试一试

用 Fiddler 抓到的，查询共分为两次：
第一次：
Request URL: http://xxbs.sh.gov.cn:8080/weixinpage/HandlerOne.ashx?name=933%E8%B7%AF
Request Method: GET
Status Code: 200
Response:{"end_earlytime":"\n\t\t05:30\n\t","end_latetime":"\n\t\t22:30\n\t","end_stop":"\n\t\t 运光新村\n\t","line_id":"\n\t\t093300\n\t","line_name":"\n\t\t933\n\t","start_earlytime":"\n\t\t05:25\n\t","start_latetime":"\n\t\t22:25\n\t","start_stop":"\n\t\t 龙耀路云锦路\n\t"}

第二次：
Request URL: http://xxbs.sh.gov.cn:8080/weixinpage/HandlerTwo.ashx?name=933%E8%B7%AF&lineid=%0A%09%09093300%0A%09
Request Method: GET
Status Code: 200
Response:{"lineResults0":{"direction":"true","stops":[{"zdmc":"龙耀路云锦路","id":"1"},{"zdmc":"云锦路丰谷路","id":"2"},{"zdmc":"丰谷路云锦路","id":"3"},{"zdmc":"龙华","id":"4"},{"zdmc":"龙华路华容路","id":"5"},{"zdmc":"宛平南路龙华中路","id":"6"},{"zdmc":"中山南二路东安路","id":"7"},{"zdmc":"中山南二路船厂路","id":"8"},{"zdmc":"中山南二路大木桥路","id":"9"},{"zdmc":"中山南一路打浦路","id":"10"},{"zdmc":"鲁班路瞿溪路","id":"11"},{"zdmc":"鲁班路斜土路","id":"12"},{"zdmc":"重庆南路建国中路","id":"13"},{"zdmc":"重庆南路复兴中路","id":"14"},{"zdmc":"成都北路延安东路","id":"15"},{"zdmc":"成都北路南京西路","id":"16"},{"zdmc":"成都北路新闸路","id":"17"},{"zdmc":"共和新路中华新路","id":"18"},{"zdmc":"中山北路西宝兴路","id":"19"},{"zdmc":"中山北一路花园路","id":"20"},{"zdmc":"中山北一路广中路","id":"21"},{"zdmc":"玉田路中山北一路","id":"22"},{"zdmc":"玉田路曲阳路","id":"23"},{"zdmc":"中山北二路伊敏河路","id":"24"},{"zdmc":"运光新村","id":"25"}]},"lineResults1":{"direction":"false","stops":[{"zdmc":"运光新村","id":"1"},{"zdmc":"运光路松花江路","id":"2"},{"zdmc":"伊敏河路巴林路","id":"3"},{"zdmc":"东体育会路中山北二路","id":"4"},{"zdmc":"赤峰路中山北一路","id":"5"},{"zdmc":"中山北一路广中路","id":"6"},{"zdmc":"中山北一路花园路","id":"7"},{"zdmc":"中山北路西宝兴路","id":"8"},{"zdmc":"中山北路共和新路","id":"9"},{"zdmc":"共和新路中兴路","id":"10"},{"zdmc":"成都北路新闸路","id":"11"},{"zdmc":"成都北路北京西路","id":"12"},{"zdmc":"成都北路威海路","id":"13"},{"zdmc":"重庆南路淮海中路","id":"14"},{"zdmc":"重庆南路复兴中路","id":"15"},{"zdmc":"重庆南路建国中路","id":"16"},{"zdmc":"鲁班路斜土路","id":"17"},{"zdmc":"鲁班路瞿溪路","id":"18"},{"zdmc":"中山南一路打浦路","id":"19"},{"zdmc":"中山南二路大木桥路","id":"20"},{"zdmc":"中山南二路东安路","id":"21"},{"zdmc":"龙华路宛平南路","id":"22"},{"zdmc":"龙华路华容路","id":"23"},{"zdmc":"龙华","id":"24"},{"zdmc":"丰谷路云锦路","id":"25"},{"zdmc":"云锦路丰谷路","id":"26"},{"zdmc":"龙耀路云锦路","id":"27"}]}}

有一种东西叫：易碎标

碟中谍 5 班吉同款
http://www.amazon.com/Tissot-T091-420-46-051-01-T-Touch-Expert-Leather/dp/B00PHRYCGY

UBNT Rocket m5 * 2 + ANT5158D19A-120DP * 2
或者
UBNT NanoStation M5 * 2
一台接摄像头，一台放你房顶

@Daddy 嗯，好的。我再等等看看吧 :)