n1tr00-10/tiktok-web-signature

选用指南

AI 根据 README 整理 · 2026/10/11 12:06:05

使用方式

通过Python导入函数生成签名，可结合requests发送请求。

查看 README 依据

├── x_bogus.py # X-Bogus placeholder (legacy) └── README.md Usage X-Dynosaur python from x_dynosaur import get_x_dynosaur query = "aid=1988&app_name=tiktok_web&device_platform=web_pc" user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" body = "" token = get_x_dynosaur(query, user_agent, body) print(token) X-Gnarly python from x_gnarly import get_x_gnarly query = "aid=1988&app_name=tiktok_web&device_platform=web_pc"

user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" body = "" token = get_x_gnarly(query, user_agent=user_agent, body=body) print(token) Full request with signatures python import requests from x_dynosaur import get_x_dynosaur from x_gnarly import get_x_gnarly query = "aid=1988&app_name=tiktok_web&device_platform=web_pc" ua = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" body = "" dynosaur = get_x_dynosaur(query, ua, body)

部署要求

仅需Python标准库，无外部依赖。

查看 README 依据

No external API calls — everything computed offline Deterministic with fixed inputs Produces valid signatures that TikTok accepts Installation bash git clone https://github.com/n1tr00-10/tiktok-web-signature.git cd tiktok-web-signature No dependencies beyond the Python standard library. Versions Component Version SDK 5.3.2 SCM Version 1.0.0.417 SCM Sub Version 1.0.0.2858 Release Build 1.0.0.417 Slardar SDK 1.16.6 Files text tiktok-web-signature/ ├── x_dynosaur.py # X-Dynosaur generator ├── x_gnarly.py # X-Gnarly generator

已知限制

签名会过期，需为每个请求生成新签名；仅支持SDK 5.3.2。

查看 README 依据

This confirms the reverse-engineered algorithm is correct and the signatures are accepted by TikTok's servers. Token length Token length is not fixed. It varies between 230–420 characters depending on: Payload content Field values (timestamp, canvas, envcode, etc.) PRNG randomness Base64 padding This is normal and expected. FAQ Do I need a session ID? No. Signatures are generated locally and do not require authentication. Do these signatures expire? Yes. TikTok validates the timestamp embedded in the signature. Generate fresh signatures for each request.

Why is my token a different length than someone else's? The payload contains variable-length fields (hashes, timestamps, version strings). Different inputs produce different output lengths. Which version does this support? SDK 5.3.2, build 1.0.0.417. Are the signatures actually valid? Yes. The algorithm has been fully reverse-engineered and verified against live TikTok API responses. TikTok accepts these signatures and returns success. Can I use this for automation? Yes, but always respect TikTok's Terms of Service and rate limits. Changelog v1.0.0 — SDK 5.3.2