玩吧APP 主要算法分析

小范q

PS：APP 提供来源
app 下载 地址：
http://sj.qq.com/myapp/detail.htm?apkName=com.wodi.who

app 提供来源：
https://bbs.125.la/forum.php?mod=viewthread&tid=14219509&highlight=APP

第一步 抓登陆抓包：

1. POST /v3/account/register HTTP/1.1
   
2. User-Agent: sswdOnline/Android 80907 (oppo a59m; 5.1.1; 540*960; 3)
   
3. Content-Type: application/x-www-form-urlencoded
   
4. Content-Length: 666
   
5. Host: api.wodidashi.com
   
6. Connection: Keep-Alive
   
7. Accept-Encoding: gzip
   
8. 
   
9. p_=GloQxKW7Gx3kOpVkPQu4gy30FaFUaadmyEe%2BDsxIMWGZZhEuLUCv4TqgOD6QWVcx%2FJU1BLFl0SLzyj0aeDu9VuNs2R84EZR%2F4n4cJRkLu4dzXLMA6idNrAn4yqw9GwC%2F93Vi8u%2B8ATeLI5i0h13qkbfrS4rMcALsKhpU3401ztoVqno2P6OGJweqGtK0LY0o9GBwFCysAUkX1HMsVQCWmsk2yRH5SAK%2BDbSAWxrscqPbmn2VXtAg1tWGakdkGC89bm4ANhpGAfTX3wM2Wi1Ysrx7MIz6M9RV3H9B6cF46hqcUb%2FuIfIU05lBCTNKjBXtNgvS5c3Y5xvQ7xEWfWkjmfp8fFZlMrPDqssu6ICZ1ddDGP%2BXi3esPmDxu0eALxm76Z8lQFj%2BIMrid7b%2F1obgvu23lOPL42OznKZGuElHaiJ2TX4Ht6pV1wWnc3Wt4%2FbVaXtaLFkoW53sVz84w5E3jkSWOFwyPE%2BXjDXTNC0%2BWMhElQ4632vUYqOU6Lt7ruH7DNeV08PXIwEi3N%2BdSymHtX2CySlFd2T2p2omcFOZccepzM%2F6KKAqV0V6g1x%2BmSbekG2FFEpOrc4JFs3%2BoGPz5vYRe3EFib7I8ovJipXEgYw%3D&__z_=2

复制代码

第二步 分析加密主要参数：

1 p_=GloQxKW7Gx3kOpVkPQu4gy30FaFUaadmyEe%2BDsxIMWGZZhEuLUCv4TqgOD6QWVcx%2FJU1BLFl0SLzyj0aeDu9VuNs2R84EZR%2F4n4cJRkLu4dzXLMA6idNrAn4yqw9GwC%2F93Vi8u%2B8ATeLI5i0h13qkbfrS4rMcALsKhpU3401ztoVqno2P6OGJweqGtK0LY0o9GBwFCysAUkX1HMsVQCWmsk2yRH5SAK%2BDbSAWxrscqPbmn2VXtAg1tWGakdkGC89bm4ANhpGAfTX3wM2Wi1Ysrx7MIz6M9RV3H9B6cF46hqcUb%2FuIfIU05lBCTNKjBXtNgvS5c3Y5xvQ7xEWfWkjmfp8fFZlMrPDqssu6ICZ1ddDGP%2BXi3esPmDxu0eALxm76Z8lQFj%2BIMrid7b%2F1obgvu23lOPL42OznKZGuElHaiJ2TX4Ht6pV1wWnc3Wt4%2FbVaXtaLFkoW53sVz84w5E3jkSWOFwyPE%2BXjDXTNC0%2BWMhElQ4632vUYqOU6Lt7ruH7DNeV08PXIwEi3N%2BdSymHtX2CySlFd2T2p2omcFOZccepzM%2F6KKAqV0V6g1x%2BmSbekG2FFEpOrc4JFs3%2BoGPz5vYRe3EFib7I8ovJipXEgYw%3D

第三步 逆向找到其主要算法

1. ------------------------------------------------------------------------------------------------------------------------
   
2. package com.wodi.protocol.network.interceptor;
   
3. public class BasicInterceptor implements Interceptor {
   
4.      public Response intercept(Interceptor$Chain arg6) throws IOException {
   
5.                 Request v0 = arg6.a();
   
6.                 Request$Builder v1 = v0.f();
   
7.                 RequestBody v2 = v0.d();
   
8.                 v1.b("User-Agent", AppRuntimeManager.a().p());
   
9.                 return arg6.a(v1.a(new FormBody$Builder().a("p_", this.a(v0.a().toString(), BasicInterceptor.a(v2))).a("__z_", "2").a()).d());
   
10.     }
    
11. ---------------------------------------------------------------------------------------------------------------------------------------------------------------
    
12. package com.wodi.protocol.network.interceptor;
    
13. public class BasicInterceptor implements Interceptor {
    
14. 
    
15.     private String a(String arg7, String arg8) {
    
16.         String v0;
    
17.         Map v1 = this.a(arg8);
    
18.         v1.put("__v_", "1.0");
    
19.         v1.put("__appid_", "10002");
    
20.         v1.put("__callid_", String.valueOf(System.currentTimeMillis()) + String.valueOf(new Random().nextInt(BasicInterceptor.a) % (BasicInterceptor.a - BasicInterceptor.b + 1) + BasicInterceptor.b));
    
21.         v1.put("__appVersion_", AppRuntimeManager.a().q());
    
22.         v1.put("__appVersionName_", "8.9.7");
    
23.         v1.put("__deviceId_", AppRuntimeManager.a().d());
    
24.         v1.put("__channelId_", ChannelUtils.f());
    
25.         v1.put("__deviceInfo_", AppRuntimeManager.a().g());
    
26.         v1.put("__imei_", App.getIMEI());
    
27.         if(this.b(arg7)) {
    
28.             if(arg7.contains("checkOnline")) {
    
29.                 v1.put("__t_", UserInfoSPManager.a().J());
    
30.             }
    
31. 
    
32.             v0 = Tool.a(v1, Tool.d(), "", false);
    
33.         }
    
34.         else {
    
35.             v1.put("__t_", UserInfoSPManager.a().J());
    
36.             v0 = Tool.a(v1, Tool.c(), App.timestamp, true);
    
37.         }
    
38. 
    
39.         v1.put("__sig_", v0);
    
40.         v0 = this.c.toJson(v1);
    
41.         return this.b(arg7) ? Tool.a(v0, Tool.e()) : Tool.a(v0, Tool.b());
    
42.     }
    
43. -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
    
44. package com.huacai;
    
45. public class Tool {
    
46. public static String a(String arg4, String arg5) {
    
47.         try {
    
48.             SecretKeySpec v0_6 = new SecretKeySpec(arg5.getBytes("utf-8"), "AES");
    
49.             Cipher v1 = Cipher.getInstance("AES/ECB/PKCS5Padding");
    
50.             byte[] v2 = arg4.getBytes("utf-8");
    
51.             v1.init(1, ((Key)v0_6));
    
52.             String v0_7 = Base64.a(v1.doFinal(v2));
    
53.             return v0_7;
    
54.         }
    
55.         catch(BadPaddingException v0) {
    
56.             v0.printStackTrace();
    
57.         }
    
58.         catch(IllegalBlockSizeException v0_1) {
    
59.             v0_1.printStackTrace();
    
60.         }
    
61.         catch(UnsupportedEncodingException v0_2) {
    
62.             v0_2.printStackTrace();
    
63.         }
    
64.         catch(InvalidKeyException v0_3) {
    
65.             v0_3.printStackTrace();
    
66.         }
    
67.         catch(NoSuchPaddingException v0_4) {
    
68.             v0_4.printStackTrace();
    
69.         }
    
70.         catch(NoSuchAlgorithmException v0_5) {
    
71.             v0_5.printStackTrace();
    
72.         }
    
73. 
    
74.         return null;
    
75.     }
    

复制代码

第四步 总结
p_= AES/ECB/PKCS5Padding("{"__imei_":"358640473966373","__callid_":"15347738611578366","phoneNumber":"+8613888888888","__deviceId_":"4f1b22e8-d3b5-46b8-a40b-2e0d62cebc95","__appid_":"10002","__v_":"1.0","spds":"201807242353235148fcec88d81155d295e68028072f7b01b837179a0802f4","smsCode":"147258","__sig_":"69370c6ec810a1e80f23af4b3603c5fe","__appVersionName_":"8.9.7","__appVersion_":"80907","__deviceInfo_":"oppo a59m(540*960)","bundleName":"com.wodi.who","__channelId_":"3","type":"celln"}")；


其中 key = ,;*q12NV>PO)/'](

tangai17

666666666666666666666

love355024

努力加油学YI 发表于 2018-10-15 20:38
fiddler可以

兄弟，多谢了

努力加油学YI

he630041228 发表于 2018-9-9 02:01
想问问是怎么抓APP安装在手机里的包

fiddler可以

代码洁癖症

#在这里快速回其中 key = ,;*q12NV>PO)/'](复#

love355024

想问问是怎么抓APP安装在手机里的包

abc827892147

别吵别吵别吵别吵别吵别吵别吵别吵别吵