# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 1
# self = https://watcher.sour.is/conv/ozdzdaq
JS 加密秒殺方案——遠程方法調用 JSRPC-超詳細-**
在滲透測試或安全評估中,我們對前端 js 代碼的關注度是很高的,因爲 JS 代碼中會經常包含一些接口、前端路由、敏感信息和請求參數的加解密邏輯。爲防止攻擊者篡改數據包,開發者常在前端對請求數據進行加密 (比如登錄密碼、接口的參數 sign、signature、一些 cookie 等) 或者 對返回包信息解密,這使得我們的請求或者返回包的修改和查看變得困難,JS 逆向本就是一件費時間的事情,這時候小 ⌘ Read more