Арабский питон

تشيكر كامل مع معلومات زينا لايف

طريقه توثيق تيك

المجدي وينه هذه

اقوال الامام علي تفيدكم هيج اقوال

خوارزمية توليد X-Sign لتطبيق Zena Live

import hmac
import hashlib

SECRET_KEY = bytes.fromhex("15df37cb57345317cd4a48d6084fc12d9ff6ccd7edd28fccfff6e598d66d23e9")

def sign(headers, grpc_path):
    did = headers.get('did')
    version = headers.get('version')
    timestamp = headers.get('x-timestamp')
    nonce = headers.get('x-nonce')    
    data = "\n".join(["request-signature/grpc/v1","v1",did,version,grpc_path,timestamp,nonce])    
    signature = hmac.new(SECRET_KEY, data.encode(), hashlib.sha256).hexdigest()    
    return {
        "x-sign": signature,
        "x-timestamp": timestamp,
        "x-nonce": nonce,
        "did": did,
        "version": version
    }
headers = {
    'User-Agent': "grpc-java-okhttp/1.61.0",
    'content-type': "application/grpc",
    'te': "trailers",
    'uid': "13404627",
    'region': "XM",
    'country_code': "EG",
    'x-auth-token': "a9ab70d6662f1dbe1042bfccb750e4ea71df0ae66ff2e7c3467a4247761fe78f",
    'lang': "ar",
    'version': "2004000",
    'vc': "2004000",
    'vn': "2.4.0.0",
    'trace_id': "00181cb9-c2b2-4087-bf14-344330b884b8",
    'os': "android",
    'sys_version': "android-15",
    'model': "TECNO+LJ9",
    'mcc': "418",
    'locale': "ar_EG",
    'net_type': "1",
    'pkg': "com.xparty.androidapp",
    'issue_channel': "1",
    'did': "1bb9ebeefcdc4bd8",
    'timezone': "3",
    'request_time_s': "1788784648587",
    'device_level': "HIGH",
    'fbid': "84dc16b20fb34c80bfb048e57e469cee",
    'idfa': "b49d131e-2aa6-44a9-9ccc-09d108693461",
    'afid': "1788699577983-6945901365454859062",
    'x-sign-version': "v1",
    'x-timestamp': "1788784650",
    'x-nonce': "e59cf8bce6a3eaf19022858f1831f442",
    'x-sign': "239f561a4bcb185fd374b0e1640c73664e505d84f86d38b9038f7cb02c9617ff",
    'grpc-accept-encoding': "gzip",
    'grpc-timeout': "14540563u"
}

grpc_path = "/grpc.purchase.PurchaseService/GetBalance"

result = sign(headers, grpc_path)
print("x-sign:", result["x-sign"])

دزولنه حساب رقم باسورد

انته

بعد شيكضك 😂

تم نكح

هوه جاي احاول اكسره

اذا عندك مكسور نسويه اني وياك

من صوفي الحب @mus_19oi ⚡

😂.

يله نكمل الخير ونسوي الكم يلا شات 🤯

هذه شرح

import httpx
import secrets
import hashlib
import time
import json

def enc_int(value):
    out = bytearray()
    while value > 0x7f:
        out.append((value & 0x7f) | 0x80)
        value >>= 7
    out.append(value)
    return bytes(out)

def decode_varint(data, offset):
    value = 0
    shift = 0
    while True:
        byte = data[offset]
        value |= (byte & 0x7f) << shift
        shift += 7
        offset += 1
        if not (byte & 0x80):
            break
    return value, offset

def decode_response(data):
    if isinstance(data, str):
        data = data.encode('utf-8', errors='ignore')
    offset = 5
    result = {}
    
    while offset < len(data):
        tag = data[offset]
        field_num = tag >> 3
        wire_type = tag & 0x07
        offset += 1
        
        if wire_type == 0:
            value, offset = decode_varint(data, offset)
            result[field_num] = value
        elif wire_type == 2:
            length, offset = decode_varint(data, offset)
            value = data[offset:offset+length]
            offset += length
            try:
                result[field_num] = value.decode('utf-8')
            except:
                result[field_num] = value.hex()
    
    return result

def extract_token(raw_str):
    if raw_str.startswith("0a") and len(raw_str) > 2:
        raw_str = raw_str[2:]
    if raw_str.startswith("40") and len(raw_str) > 2:
        raw_str = raw_str[2:]
    if len(raw_str) > 2:
        length = int(raw_str[:2], 16)
        if length <= len(raw_str[2:]):
            raw_str = raw_str[2 + length:]
    return raw_str[:64] if len(raw_str) >= 64 else raw_str

def build_req(phone, pwd_hash, country):
    phone_b = phone.encode()
    pwd_b = pwd_hash.encode()
    country_b = country.encode()
    nested = b"\x08" + enc_int(418) + b"\x12" + enc_int(2) + b"05" + b"\x1a" + enc_int(2) + b"IQ" + b"\x22" + enc_int(8) + b"Asiacell" + b"\x2a" + enc_int(8) + b"Asiacell"
    proto = b"\x0a" + enc_int(len(phone_b)) + phone_b + b"\x12" + enc_int(len(pwd_b)) + pwd_b + b"\x2a" + enc_int(len(country_b)) + country_b + b"\x32" + enc_int(len(nested)) + nested
    return b"\x00" + len(proto).to_bytes(4, "big") + proto

phone = input("Phone: ").strip()
pwd = input("Password: ").strip()
country = input("Country: ").strip().upper()

pwd_hash = hashlib.md5(pwd.encode()).hexdigest()
payload = build_req(phone, pwd_hash, country)

headers = {
    "User-Agent": "grpc-java-okhttp/1.61.0",
    "content-type": "application/grpc",
    "te": "trailers",
    "lang": "ar",
    "version": "2004000",
    "vc": "2004000",
    "vn": "2.4.0.0",
    "os": "android",
    "sys_version": "android-15",
    "model": "TECNO+LJ9",
    "mcc": "418",
    "locale": "ar_EG",
    "net_type": "4",
    "pkg": "com.xparty.androidapp",
    "issue_channel": "1",
    "did": secrets.token_hex(8),
    "timezone": "3",
    "device_level": "HIGH",
    "x-sign-version": "v1",
    "x-timestamp": str(int(time.time())),
    "grpc-timeout": "14999175u",
}

url = "https://rpc-hw.xenalive.me/grpc.login.LoginService/PhoneLogin"

with httpx.Client(http2=True, timeout=30.0) as client:
    res = client.post(url, content=payload, headers=headers)
    decoded = decode_response(res.content)
    
    message = ""
    for field_num, value in decoded.items():
        if isinstance(value, str) and len(value) > 5 and not all(c in '0123456789abcdef' for c in value.lower()):
            message = value
            break
    
    if message:
        print(json.dumps({
            "error": message,
            "status": 0,
        }, indent=4, ensure_ascii=False))
    else:
        token_field = decoded.get(3, "")
        token = extract_token(token_field) if isinstance(token_field, str) else ""
        
        signed_token_field = decoded.get(4, "")
        signed_token = extract_token(signed_token_field) if isinstance(signed_token_field, str) else ""
        
        print(json.dumps({
            "token": token,
            "expiry_time": decoded.get(2, 0),
            "signed_token": signed_token,
            "status": decoded.get(7, 0),
            "country": decoded.get(8, ""),
            "currency": decoded.get(9, ""),
            "user_id": decoded.get(10, ""),
        }, indent=4, ensure_ascii=False))

لوكن xenalive كامل مكمل ما ناقصه شيء فقط جيب وشد اتصال معلومات مال ذهب 🤯