各位大佬charles封包分析
各位大佬,我朋友找到我给到我一个app,让我试试看,我先是尝试使用fiddler,都是http包,5.0版本也是,xp框架也是后改用charles,勉强能显示部分封包,如下
第一个
{
"rid": "ab3ab31b1641924465823812",
"v": "0.1.0",
"s": "client",
"rc": 0,
"app": "102",
"l": [{
"event": "load_config_finish",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 11,
"time": 1641924465,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924465,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 4088,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}]
}
第二个
{
"rid": "ab3ab31b1641924468368524",
"v": "0.1.0",
"s": "client",
"rc": 0,
"app": "102",
"l": [{
"event": "platform_login",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 14,
"time": 1641924468,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924468,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 6732,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}, {
"event": "load_finish",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 13,
"time": 1641924468,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924468,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 6523,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}]
并没有得到有用的数据,于是我开始试着去抓tcp的包,抓不到,我投向手机端的抓包精灵、小黄鸟平行空间,全部断网,抓包精灵返回全是ssl乱码
我想到了自带证书将apk变成zip打开 搜索
cer、crt、p12、pem并没有得到结果
转头投入rsa的搜索 成功搜索得到
但是改成p7b后缀打开后 我判断应该属于apk签名文件
因为与网页版的证书不符合
apk托入jadx证实了我的想法
请问各位大佬们,接下来有什么办法吗
其一、没看出来你的分析目的(是要具体干什么,协议分析登录接口还是分析获取数据接口)?,其二,、apk能上传提供吗? duquancai 发表于 2022-1-13 23:05
其一、没看出来你的分析目的(是要具体干什么,协议分析登录接口还是分析获取数据接口)?,其二,、apk能上 ...
我本来想分析登录接口 达到替换登录的目的 但是后面还是想着获取数据 但是数据包怎么样都无法截取到 apk的话是这个https://cloud.189.cn/web/share?code=jQ7jM32IBney(访问码:f70k)
页:
[1]