求某安卓APP的登录Sign算法~~

suyan

今天想研究一下这个安卓app的登录签到，但是卡在登录接口了 求大佬帮忙康康是个什么东西。。APK安装包在这里：[color=rgba(0, 0, 0, 0.85)]https://www.123pan.com/s/R7rRVv-YZMQv



下面是用ios抓的接口：
' https://app.nio.com/app/bs/asgard/v2/login?app_id=10002&app_ver=5.11.0&device_id=ba3349eb14644f8cbffc703c5b61a55d&lang=zh-cn&region=cn&timestamp=1671603398&sign=4d3fa33d4b9687d36fa65414554df022


' Cookie: tgw_l7_route=592fe7a34b5168675b24dfe6f3dbe954; 2wmbAx0mNTVAP=BGSEkXojqDbx6vBLRILgE.BY3v4X8v1_SA9rkqeZqE3YZvsBMZ1BztBgQBb59nPCMffkfgXFqXATzO12GVat7EN36iundHbacNuWSkm_OcjMSJh2WOpjf0696j3wOGqMKd.vTWvJXszkkPxkvP4Sabu8SX7XXECIhngUJB4_H04C0qN5bhwQg7JkvMY_F09coYAolcqh2FP5c77zYDb.0I6mRQeNCnHicodVxZxUnqn1CyWhnObOW0uAvp.AT4ftUBDzEAqTI5oElhJeKbkOD_fXJdDrvHuFlwFZFOjlNcKxpLTCf3T8zWDiY7ke_QQRIDYWUQQzPzI6YIVeD_m1HwvMJrAyzfnAQlumvxPwYW.k4wM.DOc8mexCMV1SUmZJ9hDann.f7Qvc6epXruJD2YXFnrm57e1AO7N2_3eNuSWDPAoT1_tOhrKWlTtQQYmTqnbdCZ6RVXB.P2WTB6bdHOZhneZ7fpTX7MKnRHxzDmuwx01jchvRPw9VHKdW3A.uvZD86IAEHib7lTH0swuiQO.0dPl_SZLFWoYDsL1ZQvTpM7l8nkbdUGo4p_.H8c6TfM2jQG2N2BH4UsC5D3872jbmTc7gB8u2y2O5N9KdY4g; sensorsdata2015jssdkcross=%7B%22distinct_id%22%3A%2226867118%22%2C%22first_id%22%3A%221816349140d8ee-049293a1535de6c-744c1151-396328-1816349140e26bf%22%2C%22props%22%3A%7B%22%24latest_traffic_source_type%22%3A%22%E7%9B%B4%E6%8E%A5%E6%B5%81%E9%87%8F%22%2C%22%24latest_search_keyword%22%3A%22%E6%9C%AA%E5%8F%96%E5%88%B0%E5%80%BC_%E7%9B%B4%E6%8E%A5%E6%89%93%E5%BC%80%22%2C%22%24latest_referrer%22%3A%22%22%7D%2C%22identities%22%3A%22eyIkaWRlbnRpdHlfY29va2llX2lkIjoiMTgxNjM0OTE0MGQ4ZWUtMDQ5MjkzYTE1MzVkZTZjLTc0NGMxMTUxLTM5NjMyOC0xODE2MzQ5MTQwZTI2YmYiLCIkaWRlbnRpdHlfbG9naW5faWQiOiIyNjg2NzExOCJ9%22%2C%22history_login_id%22%3A%7B%22name%22%3A%22%24identity_login_id%22%2C%22value%22%3A%2226867118%22%7D%2C%22%24device_id%22%3A%221816349140d8ee-049293a1535de6c-744c1151-396328-1816349140e26bf%22%7D; 2wmbAx0mNTVAO=5zo0pr2eOFuA8lb0QFIRuvrX_qqPlt04Z.L9i4BHU26V9m4gbK4NhLMmKvhvJ5xvAp3MfBTM6wioUJm__gM1AUq; gdTwkU8eXSzmO=5PLTgL7LhyC6_ZVUn65Snme9STuzJA3WX3kvy36oaVUUsweFFqXZUkxqX3yQ_I7_daAbZmx.k2upPHvgXVjVlqa


' 协议头：


' User-Agent: NextevCar/5.11.0 (iPhone; iOS 16.1.1; Scale/3.00)
' Accept-Language: zh-Hans-CN;q=1, zh-Hant-CN;q=0.9
' kkgx2gpc: BnJxPXCbccMpodmrN0OUVAZ61NZn4nN98VlO_ijMSKaNuPeT0HeMGReY-roPWMpXGJ5SjHfCyaEbaw6XWLYTS-0khgb_2sZGJFtLiDRe4mv1yU4X-O37PRasR29FbnZCnqoFOhEdP_XMAAXIXmxSAQoxGACxHyfxDI6pW6mbcUjOmdNdvrpmR7VrIHyrrPPqYsoPfHn-pnWJweI7.JkGIKmAOy-Cj-9IZNUKKHEZaIeqpWul5olxg-dF5lCPlkhBV2Q2UEOX-tzVC0FmIpqIgqr5_PKF1jgzuQcGnXb_PcrFge1E11eXK1Q0nQYt67B2uZ-VCV7f46S7oNXeFEd32_6q4wikPosqJg8P1hojGj8sbWjoLbqqsEZaDq1qQpLQ0iSWMVcjZrl8mY_8AoAyf9AkNxi00L3YkBP5AhzKaprpPHi4AStw9npAWCF9ODzRlmN96FTgufLK88C9fX5cV2Rq9QdaJWvYgTZLS0MUCGilW8q9QM11Rmg56uWF2TH7K-JMgTSEIvZoO6V27MPzM4gs3MBWVn41C8wfboeRJRL5euq8l8gT_FtTPX6wSTTy-n8Vl5SRQj1lIKQFRhHKprjleUy1060Ur4qJXOpMXJTYOpnUiz1bmpbsp0XjykhQWT1nWjQZkHsDRNbDxKZ1iKqZaEXaTzWqy8w53BZPWP3hL5Nu2nVtcZLM5gcTG6weuMyGLLERqCemVXV71jiyxZCN5om65IfDc7dLWbXLlg01YRR0k1ckd3xzDQAYuY5EJjx1nEVTz4JqKfV5eJBIxSG9nF2-D..N91NS451


' 提交信息：


' anonymous_id=BA3349EB-1464-4F8C-BFFC-703C5B61A55D&client_id=ChAPuZxaVM_PVsLoJSvCkAqVEAEY--ekAiCSTigA&country_code=86&device_id=ba3349eb14644f8cbffc703c5b61a55d&mobile=17710799770&terminal=%7B%22name%22%3A%22iPhone%22%2C%22model%22%3A%22iPhone%22%7D&verification_code=766851


' 返回信息：


' HTTP/1.1 200 OK
' Date: Wed, 21 Dec 2022 06:16:39 GMT
' Content-Type: application/json; charset=utf-8
' Content-Length: 444
' Connection: keep-alive
' Server: Tengine/2.3.3
' X-Request-Id: mk-CoNBZmOipMYBpADOdx4
' kkgx2gpc: Bmc-OcdXke90oTxk598hB17yQ9CudgB070CQTWfaEYhqefLCns-9Sm8ryYqGyb1zD880NK.R425O06Q
' Sre-Nexthop-Status: -, 200
' Sre-Nexthop-IP: , 10.131.188.39:80


' {"request_id":"mk-CoNBZmOipMYBpADOdx4","result_code":"success","server_time":1671603399,"data":{"account_id":"26867118","user_id":"26867118","access_token":"2.0ItAura5nCG4aVRbkLYShbz9GrC4gqm5nfZrZumN4hWs=","refresh_token":"2.0TgBuM6RtEDXjyDbc3D+MYsvahRfGJY5MZqFaeVmhOj0=","token_key":"GudUxWbWEicmy8MYUmUwhKxYJy7OwQYt","token_type":"Bearer","access_expires_at":1674195398,"expires_in":2592000,"type":"login","credit":0,"created_at":1671603398}}

Uarala

Uarala 发表于 2022-12-30 14:29
发送短信
签名类型：MD5
签名数据（文本）：POST/api/2/lifestyle/account/user/send_verification_code?ap ...

签名数据（文本）的内容就是加密的明文，里边的参数很多是hk的参数，最后2e1372f6206a50a96306bda233072e5e这个也是固定的值。应该是后台解密校验用的

Uarala

adb:无法安装E:\Downloads\cn.com.weilaihui3_5.11.0_378.apk:失败[install_PARSE_failed_NO_CERTIFICATES:无法使用apk签名方案v2:SHA-256摘要验证从/data/app/vmdl2072709362.tmp/base.apk收集证书]

补充内容 (2022-12-30 10:41):
用官方发布的apk，别改写过的

734115266

q734115266

hhhql

有 偿 可 以 联 系 哦

suyan

Uarala 发表于 2022-12-30 10:40
adb:无法安装E:\Downloads\cn.com.weilaihui3_5.11.0_378.apk:失败

补充内容 (2022-12-30 10:41):

看了一下 这个确实是官网下载的版本啦 您可以试试手机应用商店找一下"蔚来"APP 应该是一样的

suyan

hhhql 发表于 2022-12-30 12:32
有 偿 可 以 联 系 哦

您好大佬 给个联系方式~

Uarala

发送短信
签名类型：MD5
签名数据（文本）：POST/api/2/lifestyle/account/user/send_verification_code?app_channel=others&app_id=10001&app_ver=5.11.0&captcha_ticket=CN31_Of9iW.h9gOsjs.5T2fp2gNUJku5YMWbeIhiG.yYOC04U9NEpyvuAnQ6yb5aL4DcUEbwVWVNMUddh2lWw9WtMUpnCAu8w1aLK_aFbnGtN0BdoHfYu9c6Ri1P0.jCpeuTfMw5FJwakKkM8OZuFs_XzmGkTQCMxEHyrKhY4QuQjE7J8BnIRSoXcZo_jo7qhsD0vV1VgtjStv1vi9Jz_s0V0MjbJpqmGOgBpH0Xmv9-ZnYwLuipz-Ov8dsrtN1NW6v0H0WEBVkposR4vLDWc6.OesIusUYw1Dd0A2fg0kIVznUuRYbIJVrG4RbEWSIkIbKqu2.5Yh7ztk0S6OW0Kok7lKhy9r17SfeKYZSwBt8dgWZeX6we5inyhivcd4ZQ90scFLA.ix-fktY-GqMgpt1USEW4p7FHimqdvnUkQvBTiPuG87yBL1G-GwQx6Dl9KBGhCW_ofKOgEfOC5R4BYxGLcRZiTRncAlzidvRYMkUJSjbB8Ohk_ENDvikdYlcc3&captcha_type=netease&classifier=login&client_id=ChAIZKpLEvRU1GF0x61C2OyNEAEYqZaeAyCRTigB&country_code=86&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&lang=zh-cn&mobile=18948485858&nonce=8f14e45fceea167a5a36dedd4bea2543&region=cn&terminal={"name":"Pixel","model":"Pixel"}&timestamp=16723810992e1372f6206a50a96306bda233072e5e
签名结果：f8c61f64e63935adf705e442d06bef99

https://app.nio.com/api/2/lifestyle/account/user/send_verification_code?lang=zh-cn&app_ver=5.11.0&app_id=10001&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&region=cn&app_channel=others&timestamp=1672381099&nonce=8f14e45fceea167a5a36dedd4bea2543&sign=f8c61f64e63935adf705e442d06bef99

提交验证码登录
签名类型：MD5
签名数据（文本）：POST/app/bs/asgard/v2/login?anonymous_id=4c81d37f-ce1d-4db0-a662-e18eb25b3364&app_channel=others&app_id=10001&app_ver=5.11.0&captcha_ticket=CN31_TaAv_f7BVqLTAY15Kf01YhQhmp5MJwokwul4acVMo-w8K44nE9cPYpmTgXzsSyJrGpVEpPDgY-RwUUztNTIeQbCtvepc-TF4UPAJc9Ocd09fK6l2N4wjZqX-CKLGMpCQf.qrfeO7ddciZNkotmEKjjTE5XxIj2vbaLCrffeeTA5mVt-kZqJWXJsEqm8rk4UpOBS0GMSRN0IXOOrd1N_thWgj6PmVnVsSx0HertNkyN1r8tCM-8YvYUNPIpFSlE_1Gv6v6Rfv7uZiIPhIjzD-vnGY5zLJHNo_i7jyps7P8VxXYR.0nFx5hwapemzSB9Do5g-IUy6UdvcQ2m-d6P1lffjVuJZZTs1NvXMvkl9oIjdB2bdsGjtfupXbGarWe4hXJHe66P8FT7vFhj.gnhTz8uB.wZESW_IdpneMdObIVG76vpDeqAy2EQZX4IyWDtuKhX_6ewOVEo-7YhWPkge6nxBhPj_eB4ehi7D.bcx-E5KPLs1cqElGg2Ehy.A3&captcha_type=netease&client_id=ChAIZKpLEvRU1GF0x61C2OyNEAEYqZaeAyCRTigB&country_code=86&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&lang=zh-cn&mobile=18948485858&nonce=70efdf2ec9b086079795c442636b55fb&region=cn&terminal={"name":"Pixel","model":"Pixel"}&timestamp=1672381109&verification_code=4525332e1372f6206a50a96306bda233072e5e

签名结果：aa9d82faf3143a8346c4e5e2e4a881b9
https://app.nio.com/app/bs/asgard/v2/login?lang=zh-cn&app_ver=5.11.0&app_id=10001&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&region=cn&app_channel=others&timestamp=1672381109&nonce=70efdf2ec9b086079795c442636b55fb&sign=aa9d82faf3143a8346c4e5e2e4a881b9

Uarala

发送短信
签名类型：MD5
签名数据（文本）：POST/api/2/lifestyle/account/user/send_verification_code?app_channel=others&app_id=10001&app_ver=5.11.0&captcha_ticket=CN31_Of9iW.h9gOsjs.5T2fp2gNUJku5YMWbeIhiG.yYOC04U9NEpyvuAnQ6yb5aL4DcUEbwVWVNMUddh2lWw9WtMUpnCAu8w1aLK_aFbnGtN0BdoHfYu9c6Ri1P0.jCpeuTfMw5FJwakKkM8OZuFs_XzmGkTQCMxEHyrKhY4QuQjE7J8BnIRSoXcZo_jo7qhsD0vV1VgtjStv1vi9Jz_s0V0MjbJpqmGOgBpH0Xmv9-ZnYwLuipz-Ov8dsrtN1NW6v0H0WEBVkposR4vLDWc6.OesIusUYw1Dd0A2fg0kIVznUuRYbIJVrG4RbEWSIkIbKqu2.5Yh7ztk0S6OW0Kok7lKhy9r17SfeKYZSwBt8dgWZeX6we5inyhivcd4ZQ90scFLA.ix-fktY-GqMgpt1USEW4p7FHimqdvnUkQvBTiPuG87yBL1G-GwQx6Dl9KBGhCW_ofKOgEfOC5R4BYxGLcRZiTRncAlzidvRYMkUJSjbB8Ohk_ENDvikdYlcc3&captcha_type=netease&classifier=login&client_id=ChAIZKpLEvRU1GF0x61C2OyNEAEYqZaeAyCRTigB&country_code=86&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&lang=zh-cn&mobile=18948485858&nonce=8f14e45fceea167a5a36dedd4bea2543&region=cn&terminal={"name":"Pixel","model":"Pixel"}&timestamp=16723810992e1372f6206a50a96306bda233072e5e
签名结果：f8c61f64e63935adf705e442d06bef99

https://app.nio.com/api/2/lifestyle/account/user/send_verification_code?lang=zh-cn&app_ver=5.11.0&app_id=10001&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&region=cn&app_channel=others&timestamp=1672381099&nonce=8f14e45fceea167a5a36dedd4bea2543&sign=f8c61f64e63935adf705e442d06bef99

提交验证码登录
签名类型：MD5
签名数据（文本）：POST/app/bs/asgard/v2/login?anonymous_id=4c81d37f-ce1d-4db0-a662-e18eb25b3364&app_channel=others&app_id=10001&app_ver=5.11.0&captcha_ticket=CN31_TaAv_f7BVqLTAY15Kf01YhQhmp5MJwokwul4acVMo-w8K44nE9cPYpmTgXzsSyJrGpVEpPDgY-RwUUztNTIeQbCtvepc-TF4UPAJc9Ocd09fK6l2N4wjZqX-CKLGMpCQf.qrfeO7ddciZNkotmEKjjTE5XxIj2vbaLCrffeeTA5mVt-kZqJWXJsEqm8rk4UpOBS0GMSRN0IXOOrd1N_thWgj6PmVnVsSx0HertNkyN1r8tCM-8YvYUNPIpFSlE_1Gv6v6Rfv7uZiIPhIjzD-vnGY5zLJHNo_i7jyps7P8VxXYR.0nFx5hwapemzSB9Do5g-IUy6UdvcQ2m-d6P1lffjVuJZZTs1NvXMvkl9oIjdB2bdsGjtfupXbGarWe4hXJHe66P8FT7vFhj.gnhTz8uB.wZESW_IdpneMdObIVG76vpDeqAy2EQZX4IyWDtuKhX_6ewOVEo-7YhWPkge6nxBhPj_eB4ehi7D.bcx-E5KPLs1cqElGg2Ehy.A3&captcha_type=netease&client_id=ChAIZKpLEvRU1GF0x61C2OyNEAEYqZaeAyCRTigB&country_code=86&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&lang=zh-cn&mobile=18948485858&nonce=70efdf2ec9b086079795c442636b55fb&region=cn&terminal={"name":"Pixel","model":"Pixel"}&timestamp=1672381109&verification_code=4525332e1372f6206a50a96306bda233072e5e

签名结果：aa9d82faf3143a8346c4e5e2e4a881b9
https://app.nio.com/app/bs/asgard/v2/login?lang=zh-cn&app_ver=5.11.0&app_id=10001&device_id=RXylWYtj8J0fqS6M2z8sfeNGCwhBv52h&region=cn&app_channel=others&timestamp=1672381109&nonce=70efdf2ec9b086079795c442636b55fb&sign=aa9d82faf3143a8346c4e5e2e4a881b9