声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析

cp = execjs.compile(open('vm.js','r',encoding='utf-8').read())
cp2 = execjs.compile(open('xhs.js', 'r', encoding='utf8', errors='ignore').read())
data = {"cursor_score": "","num": 18,"refresh_type": 1,"note_index": 14,"unread_begin_note_id": "","unread_end_note_id": "","unread_note_count": 0,"category": "homefeed.movie_and_tv_v3","search_key": "","need_num": 8,"image_formats": ["jpg","webp","avif"],"need_filter_image": False
}
result =cp.call('get_comment','',data,a1)
X_Mns = cp.call('getMns','',data)
print('X_Mns==>',X_Mns)
headers['x-mns'] = X_Mns
headers['x-s'] = result['X-s']
print('x-s ==>',result['X-s'])
headers['x-t'] = str(result['X-t'])
print('x-t ==>',result['X-t'])
common = cp2.call('getCommon', headers['x-t'], headers['x-s'],a1)
trace_id = cp2.call('he')
x_xray_traceid = cp2.call('getTraceId')
headers.update({"x-s-common": common})
headers.update({"x-b3-traceid": trace_id})
headers.update({"x-xray-traceid": x_xray_traceid})
url = "/v1/homefeed"
data = json.dumps(data, separators=(',', ':'))
response = requests.post(url, headers=headers, cookies=cookies, data=data)print(response.text)
print(response)

结果

总结

 1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。