APP抓包求助，用Charles+Postern抓包都直接断网

yxsrsq

app抓包求助！我用Charles+Postern抓包，Charles抓手机常规网页都能抓到，但是APP一开就没网，用了Postern转发后直接手机访问不到网络了（手机是root后开了面具的，小白不清楚会不会有影响），而且Charles直接就根本抓不到任何数据了，按照网上的教程一步一步来的，技术不到位，实在是没法解决了。。。哪位大神帮忙看看这个用什么可以抓到数据，我想要登录界面的账号密码登录的包，希望大神能帮帮忙，感激不尽~
跪拜大神！跪拜大神！
https://www.123684.com/s/FmzAjv-PJ4UA[color=rgba(0, 0, 0, 0.85)]这是APP的链接地址，小弟在这里拜谢了！

80554326

POST https://int.qiyuan.changan.com.cn/api/password/passwordLogin HTTP/1.1 Accept-Encoding: gzip Connection: Keep-Alive Content-Length: 180 Content-Type: application/json;charset=utf-8 Host: int.qiyuan.changan.com.cn User-Agent: android-OStyle brand: OnePlus channel: alibaba deviceSDK: 30 manuFacture: OnePlus model: HD1910 networkState: WIFI operatorName: yd os: Android timeStamp: 1734600528916 uuid: ffffffff-8b8c-e4e7-8b8c-e4e700000000 version: 2.8.7 zh-sign: 3A0E0CDE71BF228A7066ACEF6A09E531  {"password":"00000000","graphicsKey":"graphicsKey922178632991506432","phone":"O/WfvIcfdg4t9+BXQHyQjw==","dynamicPassword":"","imgCode":"2222","isApp":1,"rid":"170976fa8bb403f2232"}

那小子很坏

1.手机root  2.lsposed  3.算法助手  4.隐藏列表  5.Reqable  PC和安卓端   6.面具    7.许愿   8.定制区

yxsrsq

那小子很坏 发表于 2024-12-19 16:03
1.手机root  2.lsposed  3.算法助手  4.隐藏列表  5.Reqable  PC和安卓端   6.面具    7.许愿   8.定制区 ...

现在就是许愿阶段面具和前面的全都试过了，死活不行

右手胜过左手

app有检测而已，代理、sslpinning、双向证书等....

80554326

这不直接抓吗

80554326

POST https://int.qiyuan.changan.com.cn/api/password/passwordLogin HTTP/1.1 Accept-Encoding: gzip Connection: Keep-Alive Content-Length: 180 Content-Type: application/json;charset=utf-8 Host: int.qiyuan.changan.com.cn User-Agent: android-OStyle brand: OnePlus channel: alibaba deviceSDK: 30 manuFacture: OnePlus model: HD1910 networkState: WIFI operatorName: yd os: Android timeStamp: 1734600528916 uuid: ffffffff-8b8c-e4e7-8b8c-e4e700000000 version: 2.8.7 zh-sign: 3A0E0CDE71BF228A7066ACEF6A09E531  {"password":"00000000","graphicsKey":"graphicsKey922178632991506432","phone":"O/WfvIcfdg4t9+BXQHyQjw==","dynamicPassword":"","imgCode":"2222","isApp":1,"rid":"170976fa8bb403f2232"}

yxsrsq

80554326 发表于 2024-12-19 17:29
这不直接抓吗

直接抓没网的

yxsrsq

右手胜过左手 发表于 2024-12-19 16:36
app有检测而已，代理、sslpinning、双向证书等....

对。。我都试过了，用sslpinning我这边抓不到包，不知道是什么情况

山头扛把子

那么大的APP........