新浪新闻urlSign算法分析

Richard92 · 发表于 2019-1-18 13:32:22

获取新闻的时候有个urlsign算法

定位到这里

arg5是在so调用函数返回的一个key 但是测试了几次好像是固定的

是个md5加密

动态调试出md5加密前的参数

http://newsapi.sina.cn/?resource=feed&mpName=%E6%8E%A8%E8%8D%90&lDid=9e83f102-50aa-456c-a7dc-ae83965c46a6&appVersion=7.9.1&oldChwm=&upTimes=0&city=CHXX0008&loginType=0&authToken=a93acca64ffc9efcccb2059fdf39dd3b&channel=news_toutiao&link=&authGuid=6491889862580744566&ua=vivo-vivo+y51__sinanews__7.9.1__android__5.1.1&deviceId=f4a8d75467a8fef0&connectionType=2&resolution=720x1280&mac=00%3A81%3Af9%3Aad%3A8d%3Ac2&weiboUid=&replacedFlag=1&osVersion=5.1.1&chwm=12010_0002&pullTimes=4&weiboSuid=&andId=7e5dbcb79713a02f&from=6000095012&sn=00535665&behavior=manual&aId=01Akh9og06gpnIMA4m3xbXnTBxDx6i4VjCcPrRzzuNvbRmwU0.&localSign=a_28492582-6aec-468b-9ab6-1e02551e1019&deviceIdV1=f4a8d75467a8fef0&todayReqTime=0&osSdk=22&abver=1547609592700090001&listCount=14&accessToken=&downTimes=3&lastTimestamp=1547787541&pullDirection=down&seId=c645379e8e&imei=865166020991801&deviceModel=vivo__vivo__vivo+y51&location=39.916396922065864%2C116.41025233081213&authUid=0&loadingAdTimestamp=0_113_d6D10c083A

和提交的链接对比了下

http://newsapi.sina.cn/?resource=feed&mpName=%E6%8E%A8%E8%8D%90&lDid=9e83f102-50aa-456c-a7dc-ae83965c46a6&appVersion=7.9.1&oldChwm=&upTimes=0&city=CHXX0008&loginType=0&authToken=a93acca64ffc9efcccb2059fdf39dd3b&channel=news_toutiao&link=&authGuid=6491889862580744566&ua=vivo-vivo+y51__sinanews__7.9.1__android__5.1.1&deviceId=f4a8d75467a8fef0&connectionType=2&resolution=720x1280&mac=00%3A81%3Af9%3Aad%3A8d%3Ac2&weiboUid=&replacedFlag=1&osVersion=5.1.1&chwm=12010_0002&pullTimes=4&weiboSuid=&andId=7e5dbcb79713a02f&from=6000095012&sn=00535665&behavior=manual&aId=01Akh9og06gpnIMA4m3xbXnTBxDx6i4VjCcPrRzzuNvbRmwU0.&localSign=a_28492582-6aec-468b-9ab6-1e02551e1019&deviceIdV1=f4a8d75467a8fef0&todayReqTime=0&osSdk=22&abver=1547609592700090001&listCount=14&accessToken=&downTimes=3&lastTimestamp=1547787541&pullDirection=down&seId=c645379e8e&imei=865166020991801&deviceModel=vivo__vivo__vivo+y51&location=39.916396922065864%2C116.41025233081213&authUid=0&loadingAdTimestamp=0&urlSign=0d573b083d&rand=113

发现加密参数就是loadingAdTimestamp=0 后面的不要加上_rand(最后一个参数是随机数)在加上_d6D10c083A(so返回的keyi)
结果进行md5加密

md5加密完调用了HttpSignUtils.a

看下HttpSignUtils.a的代码

就是取md5的后5位+md5前5位就是加密的结果了