App逆向百例|05|某视频App参数分析

样本：aHR0cHM6Ly93d3cuYWxpeXVuZHJpdmUuY29tL3MvMzV4a1BzcFRnQkg=

static native SignedQuery s(SortedMap<String, String> sortedMap);

Java.perform(function () {
    var Class = Java.use('com.bilibili.nativelibrary.LibBili');
    var Method = 'signQuery';
    Class[Method].overload('java.util.Map', 'int', 'int').implementation = function (a, b, c) {
        console.log('===args===');
        console.log(a.entrySet().toArray());
        console.log(b);
        console.log(c);
        var result = this[Method](a, b, c);
        console.log('===result===');
        console.log(result);
        console.log('---------------------------------------');
        return result;
    }
})

Java.perform(function () {
    var Class = Java.use('com.bilibili.nativelibrary.LibBili');
    var Method = 'signQuery';
    var TreeMap = Java.use('java.util.TreeMap');
    var map = TreeMap.$new();
    map.put('disable_rcmd', '0');
    map.put('build', '6620300');
    map.put('buvid', 'XY4A57646AAC62990A45476D19D573C81F192');
    map.put('mobi_app', 'android');
    map.put('channel', 'bili');
    map.put('appkey', '783bbb7264451d82');
    map.put('s_locale', 'zh-Hans_CN');
    map.put('c_locale', 'zh-Hans_CN');
    map.put('platform', 'android');
    map.put('statistics', '{"appId":1,"platform":3,"version":"6.62.0","abtest":""}');
    var result = Class[Method](map, 1, 0);
    console.log(result);
})

Java.perform(function () {
    var so_addr = Module.findBaseAddress("libbili.so");
    var method_addr = so_addr.add(0xDE8C);
    Interceptor.attach(method_addr, {
        onEnter: function (args) {
            console.log('==================', method_addr, '========================');
            console.log(hexdump(args[1], {
                length: args[2].toInt32()
            }))
            console.log('Length->', args[2])
        },
        onLeave: function (retval) {
            console.log('==================', 'out', '========================');
        }
    })
});

原文->appkey=783bbb7264451d82&build=6620300&buvid=XY4A57646AAC62990A45476D19D573C81F192&c_locale=zh-Hans_CN&channel=bili&disable_rcmd=0&mobi_app=android&platform=android&s_locale=zh-Hans_CN&statistics=%7B%22appId%22%3A1%2C%22platform%22%3A3%2C%22version%22%3A%226.62.0%22%2C%22abtest%22%3A%22%22%7D&ts=1647181143
盐->2653583c8873dea268ab9386918b1d65
拼接结果->appkey=783bbb7264451d82&build=6620300&buvid=XY4A57646AAC62990A45476D19D573C81F192&c_locale=zh-Hans_CN&channel=bili&disable_rcmd=0&mobi_app=android&platform=android&s_locale=zh-Hans_CN&statistics=%7B%22appId%22%3A1%2C%22platform%22%3A3%2C%22version%22%3A%226.62.0%22%2C%22abtest%22%3A%22%22%7D&ts=16471811432653583c8873dea268ab9386918b1d65