MMCPMarkets
WP

waterbili/perimeterx_reverse

Developer tools

Эта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал

26 stars Качество 52 Тренд 15NOASSERTION
Repository Install

Given a target URL + AppID, this project rebuilds the PerimeterX collector POST chain entirely in pure math (Node.js) and emits a valid _pxN cookie.

Обзор

Given a target URL + AppID, this project rebuilds the PerimeterX collector POST chain entirely in pure math (Node.js) and emits a valid _pxN cookie. Every constant, field position, and field type is extracted from , never from memory or stale docs. Research / education only. ⚠️ Not a scraping tool — ships no proxy pools, schedulers, IP rotation, or solving integrations. See Disclaimer before use. - — EV1/EV2/EV3 sensor payloads → collector POST chain → _pxN, no headless browser. - (revers/) — payload XOR/base64/interleave, PC (HMAC-MD5), OB decode, SID stego, UUID v1, djb2, memory, anti-tamper, /ns. - — capture 6 real batches, lock STATIC fields, reverse DYNAMIC fields from the SDK. ~90% of code ports across sites; only constants + a handful of b64 keys differ. - — the same SDK is configured differently per customer; the project documents lenient → strict → strict+ and what each extra server-side check requires.

README

Показан фрагмент оригинального README. Открыть оригинал.

Given a target URL + AppID, this project rebuilds the PerimeterX collector POST chain entirely in pure math (Node.js) and emits a valid _pxN cookie. Every constant, field position, and field type is extracted from live captures, never from memory or stale docs. Research / education only.

⚠️ Research, education, and personal security-audit use only. Not a scraping tool — ships no proxy pools, schedulers, IP rotation, or solving integrations. See Disclaimer before use.

What it does

  • Reconstructs the silent collector flow — EV1/EV2/EV3 sensor payloads → collector POST chain → _pxN, no headless browser.
  • 9 reusable crypto/encoding primitives (revers/) — payload XOR/base64/interleave, PC (HMAC-MD5), OB decode, SID stego, UUID v1, djb2, memory, anti-tamper, /ns.
  • Template methodology — capture 6 real batches, lock STATIC fields, reverse DYNAMIC fields from the SDK. ~90% of code ports across sites; only constants + a handful of b64 keys differ.
  • Three deployment tiers — the same SDK is configured differently per customer; the project documents lenient → strict → strict+ and what each extra server-side check requires.

Validated sites

Site Tier Cookie Chain Result
ifood.com.br lenient _px3 (ttl 330) 2-POST 10/10
grubhub.com lenient _px2 (ttl 500) 2-POST 10/10
walmart.com lenient _px3 (ttl 330) 2-POST 10/10 ²
totalwine.com strict _px2 (ttl 330) 3-POST + EV3 10/10
academy.com strict+ _px3 (ttl 330) 3-POST + TLS/IP-bound trust 10/10 ¹

All constants come straight from real POST-body captures (6 auditable batches per public site).

Открыть полный README на GitHub

Рекомендуемые инструменты

Попробуйте другой запрос или уберите фильтр.

Установка

npx skillfish add waterbili/perimeterx_reverse
Новичок в MCP? Начните с руководства на mcpskill.org →