{
  "added_at": "2026-11-09",
  "additional_evidence_urls": [
    "https://github.com/carcabot/tiktok-xgnarly-decoded/blob/95dd1aceaa429b6163d8f3e8c56cbe4cab8df00e/package.json"
  ],
  "category": "reconstruction-cases",
  "class": "website",
  "description_en": "tiktok-xgnarly-decoded reconstructs the X-Gnarly request parameter used by TikTok's web client and implements its 5.1.3-ZTCA form in JavaScript. Its format account covers a 16-field TLV payload, custom base64 alphabet, embedded random key and ChaCha-style cipher. Tests include synthetic round trips and field checks against a captured parameter.",
  "description_zh": "tiktok-xgnarly-decoded 还原 TikTok 网页客户端使用的 X-Gnarly 请求参数，并以 JavaScript 实现 5.1.3-ZTCA 格式。其格式说明涵盖 16 字段 TLV、自定义 base64 字母表、嵌入的随机密钥和 ChaCha 风格密码；测试包括往返编码及抓取参数的字段检查。",
  "entry_url": "https://awesomerea.org/resources/tiktok-xgnarly-decoded-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/tiktok-xgnarly-decoded-case/",
  "evidence_url": "https://github.com/carcabot/tiktok-xgnarly-decoded/blob/95dd1aceaa429b6163d8f3e8c56cbe4cab8df00e/README.md",
  "group": "cases",
  "id": "tiktok-xgnarly-decoded-case",
  "json_url": "https://awesomerea.org/resources/tiktok-xgnarly-decoded-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/tiktok-xgnarly-decoded-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/tiktok-xgnarly-decoded-case/index.md",
  "name": "tiktok-xgnarly-decoded: reconstructing TikTok's X-Gnarly signature format",
  "name_zh": "tiktok-xgnarly-decoded：还原 TikTok 的 X-Gnarly 签名格式",
  "record_type": "resource",
  "relationship": "independent-reconstruction",
  "requirement_facets": [
    "prerequisites",
    "scope",
    "license"
  ],
  "requirements": [
    "Node.js 18 or later.",
    "The reference encoder and decoder target payload version 5.1.3-ZTCA; only X-Gnarly is implemented.",
    "MIT."
  ],
  "requirements_zh": [
    "需要 Node.js 18 或更新版本。",
    "参考编解码器面向 5.1.3-ZTCA 载荷版本，仅实现 X-Gnarly。",
    "许可证为 MIT。"
  ],
  "targets": [
    "website"
  ],
  "url": "https://github.com/carcabot/tiktok-xgnarly-decoded",
  "verification": "source-reviewed",
  "verified_at": "2026-11-07"
}