1
import requests
2
from base64 import b64decode
3

4
host = "pdfxx.cn"
5
id = "xxxxxx"
6
url_api = f"https://{host}/api/pdf/uurl?id={id}"
7

8
headers = {
9
    "Host": host,
10
    "Sec-Ch-Ua": '"Chromium";v="133", "Not(A:Brand";v="99"',
11
    "Sec-Ch-Ua-Mobile": "?0",
12
    "Sec-Ch-Ua-Platform": '"Windows"',
13
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36",
14
    "Accept": "*/*",
15
    "Origin": f"https://{host}",
16
    "Sec-Fetch-Site": "same-site",
17
    "Sec-Fetch-Mode": "cors",
18
    "Sec-Fetch-Dest": "empty",
19
    "Referer": f"https://{host}/",
20
    "Accept-Encoding": "gzip, deflate, br",
21
    "Accept-Language": "zh-CN,zh;q=0.9",
22
    "Priority": "u=1, i",
23
    "Connection": "keep-alive"
24
}
25

26
api_cdn = requests.get(url_api, headers=headers, timeout=10)
27
url_cdn = b64decode(api_cdn.json.get("data").encode())
28

29
response = requests.get(url_cdn, headers=headers, timeout=100)
30
response.raise_for_status()
31

32
with open(f"{url_cdn.split('/')[-1]}", "wb") as f:
33
    f.write(response.content)

1
// ==UserScript==
2
// @name         PDFXX Unlocker
3
// @namespace    http://noahbox.github.io
4
// @version      0.1
5
// @description  解除PDFXX的控制台检测/右键限制/遮罩层
6
// @author       NoahTie
7
// @match        *://pdfxx.cn/*
8
// @run-at       document-start
9
// @grant        unsafeWindow
10
// @grant        GM_addStyle
11
// @license      MIT
12
// ==/UserScript==
13

14
(function() {
15
    'use strict';
16

17
    // 禁用ConsoleBan
18
    // ========================================
19
    unsafeWindow.ConsoleBan = class {
20
        constructor() {
21
            console.log("[Bypass] ConsoleBan constructor neutralized");
22
        }
23
        init() {}
24
        ban() {}
25
        fire() {
26
            console.warn("[Bypass] Blocked redirect attempt");
27
            return false;
28
        }
29
    };
30
    Object.defineProperty(unsafeWindow, 'ConsoleBan', {
31
        configurable: false,
32
        writable: false
33
    });
34

35
    // 事件系统劫持
36
    // ========================================
37
    const nativeAddEventListener = EventTarget.prototype.addEventListener;
38
    EventTarget.prototype.addEventListener = function(type, listener, options) {
39
        const blockedEvents = [
40
            'contextmenu', 'selectstart',       // 右键/选择限制
41
            'visibilitychange', 'blur',         // 标签页切换检测
42
            'mouseleave', 'mouseout'            // 鼠标离开检测
43
        ];
44
        if (blockedEvents.includes(type)) {
45
            console.log(`[Bypass] Blocked ${type} event binding`);
46
            return;
47
        }
48
        nativeAddEventListener.call(this, type, listener, options);
49
    };
50

51
    // 动态遮罩层清除
52
    // ========================================
53
    GM_addStyle(`
54
        #mask-layer, .anti-shade, [class*="mask"] {
55
            display: none !important;
56
            opacity: 0 !important;
57
            pointer-events: none !important;
58
        }
59
        body > div:not(#viewerContainer) {
60
            filter: none !important;
61
        }
62
    `);
63

64
    const observer = new MutationObserver(mutations => {
65
        mutations.forEach(mutation => {
66
            mutation.addedNodes.forEach(node => {
67
                if (node.nodeType === 1 && (
68
                    node.id.includes('mask') ||
69
                    node.className.match(/shade|modal|overlay/)
70
                )) {
71
                    node.remove();
72
                    console.log("[Bypass] Removed dynamic mask layer");
73
                }
74
            });
75
        });
76
    });
77
    observer.observe(document.body, {
78
        childList: true,
79
        subtree: true
80
    });
81

82
    // 定时器清理
83
    // ========================================
84
    const timerStore = new Set();
85
    const hijackedSetInterval = window.setInterval;
86
    window.setInterval = (fn, delay) => {
87
        const id = hijackedSetInterval(() => {
88
            try {
89
                if(!fn.toString().includes('debugger')) fn();
90
            } catch(e) { console.error(e); }
91
        }, delay);
92
        timerStore.add(id);
93
        return id;
94
    };
95

96
    setInterval(() => {
97
        timerStore.forEach(id => {
98
            clearInterval(id);
99
            clearTimeout(id);
100
        });
101
        timerStore.clear();
102
    }, 1000);
103

104
    // 网络请求拦截
105
    // ========================================
106
    const nativeFetch = window.fetch;
107
    window.fetch = (url, options) => {
108
        if (/consoleBan|lunxun/.test(url)) {
109
            console.log(`[Bypass] Blocked request to ${url}`);
110
            return Promise.reject(new Error('Blocked by script'));
111
        }
112
        return nativeFetch(url, options);
113
    };
114

115
    XMLHttpRequest.prototype.open = function(method, url) {
116
        if (/consoleBan|lunxun/.test(url)) {
117
            this._blocked = true;
118
            console.log(`[Bypass] Blocked XHR to ${url}`);
119
        }
120
        nativeOpen.apply(this, arguments);
121
    };
122
    XMLHttpRequest.prototype.send = function(data) {
123
        if (this._blocked) return;
124
        nativeSend.call(this, data);
125
    };
126

127
    // 右键恢复
128
    // ========================================
129
    document.addEventListener('DOMContentLoaded', () => {
130
        document.body.oncontextmenu = null;
131
        document.querySelectorAll('*').forEach(el => {
132
            el.oncontextmenu = null;
133
            el.style.pointerEvents = 'auto';
134
        });
135
    });
136

137
    // 反反调试
138
    // ========================================
139
    Object.defineProperty(unsafeWindow, 'console', {
140
        value: console,
141
        writable: false,
142
        configurable: false
143
    });
144
    Object.defineProperty(unsafeWindow.console, 'log', {
145
        value: console.log,
146
        writable: false
147
    });
148
})();