waterbili/perimeterx_reverse

纯算法重建PerimeterX的_px3 / _px2cookie链——无浏览器，无自动化框架。

中文 ·快速入门 ·工作原理 ·文档 ·AI技能 ·授权

给定一个目标 URL + AppID，本项目将完全重建 PerimeterX 收集 POST 链 纯数学（Node.js）并发出一个有效的_pxN的cookie。每个常数、场位和场类型 是从实时截获提取的，绝不是从记忆或陈旧文档中提取的。仅限于研究/教育。

⚠️ 仅限研究、教育和个人安全审计使用。 非抓取工具——不提供代理 池、调度器、IP 轮换或解决集成问题。使用前请参见免责声明。

它的作用

• 重建静默集电流 — EV1/EV2/EV3传感器有效载荷→集电器POST链→_pxN，无头浏览器。
• 9 可重用加密/编码原语（revers/）——有效载荷XOR/base64/交错，PC（HMAC-MD5），OB解码，SID stego，UUID v1，djb2，内存，防篡改，/ns。
• 模板方法论 — 捕获6个真实批次，锁定静态字段，反向SDK中的动态字段。~90%的代码端口跨站点;仅常量+少数B64键不同。

Given a target URL + AppID, this project rebuilds the PerimeterX collector POST chain entirely in pure math (Node.js) and emits a valid _pxN cookie. Every constant, field position, and field type is extracted from live captures, never from memory or stale docs. Research / education only.

⚠️ Research, education, and personal security-audit use only. Not a scraping tool — ships no proxy pools, schedulers, IP rotation, or solving integrations. See Disclaimer before use.

What it does

• Reconstructs the silent collector flow — EV1/EV2/EV3 sensor payloads → collector POST chain → _pxN, no headless browser.
• 9 reusable crypto/encoding primitives (revers/) — payload XOR/base64/interleave, PC (HMAC-MD5), OB decode, SID stego, UUID v1, djb2, memory, anti-tamper, /ns.
• Template methodology — capture 6 real batches, lock STATIC fields, reverse DYNAMIC fields from the SDK. ~90% of code ports across sites; only constants + a handful of b64 keys differ.
• Three deployment tiers — the same SDK is configured differently per customer; the project documents lenient → strict → strict+ and what each extra server-side check requires.

Validated sites

All constants come straight from real POST-body captures (6 auditable batches per public site).