好友
阅读权限10
听众
最后登录1970-1-1
|
街头丶徘徊
发表于 2022-1-12 02:23
各位大佬,我朋友找到我给到我一个app,让我试试看,我先是尝试使用fiddler,都是http包,5.0版本也是,xp框架也是
后改用charles,勉强能显示部分封包,如下
第一个
{
"rid": "ab3ab31b1641924465823812",
"v": "0.1.0",
"s": "client",
"rc": 0,
"app": "102",
"l": [{
"event": "load_config_finish",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 11,
"time": 1641924465,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924465,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 4088,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}]
}
第二个
{
"rid": "ab3ab31b1641924468368524",
"v": "0.1.0",
"s": "client",
"rc": 0,
"app": "102",
"l": [{
"event": "platform_login",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 14,
"time": 1641924468,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924468,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 6732,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}, {
"event": "load_finish",
"temp_id": "ab3ab31b-2dfc-4e46-8ba7-5099c963e7df",
"platform": "webgame",
"qn": 13,
"time": 1641924468,
"network_type": 1,
"debug": 0,
"sid": -1,
"app_version": "1.243.0",
"eventinfo": {
"server_time": 1641924468,
"pf_version": "1.243.0",
"enVer": "2.4.6",
"oltime": 6523,
"country": "CN",
"channel": "webgame",
"old_temp_id": "aa6fb5cf-182c-456e-a714-77d6f4cfa4d1029d0cb1-4f26-4948-9cd3-ca55f71c9044",
"first_launch": 0
}
}]
并没有得到有用的数据,于是我开始试着去抓tcp的包,抓不到,我投向手机端的抓包精灵、小黄鸟平行空间,全部断网,抓包精灵返回全是ssl乱码
我想到了自带证书将apk变成zip打开 搜索
cer、crt、p12、pem并没有得到结果
转头投入rsa的搜索 成功搜索得到
但是改成p7b后缀打开后 我判断应该属于apk签名文件
因为与网页版的证书不符合
apk托入jadx证实了我的想法
请问各位大佬们,接下来有什么办法吗
|
|