A, goals,

We got the bag. We all know the drill.

Second, the steps

Jadx “cs”

First search “cs”

Holy shit, is it clear? Is there a scam with only two results?

Right click on this f108910CS to see who called it.

Don’t say anything. It must be the big brother.

Hang up your beloved Frida

var SNetworkSDKCls = Java.use('cn.sxxxapp.android.net.SxxxNetworkSDK');
SNetworkSDKCls.g.implementation = function(i,s1,s2){
        var rc = this.g(i,s1,s2);
        console.log("i = " + i);
        console.log("s1 = " + s1);
        console.log("s2 = " + s2);
        console.log("g >>> rc= " + rc);

        return rc ;
}
Copy the code

Run,

[bug Mc-10809] – Attach mode failed, maybe there was a check, spawn mode is OK

The results are in.

. Parameter 1 is the current timestamp. Parameter 2 is the last part of the URL. Parameter 3 is basically a hodge-podge of headers, user-agent + AID + AT + av, etc

Third, summary

In the classical PC Internet era, many programs rely on shell, shell off, immediately flat.

Once the App catches the bag, there will be no difficulty in the future, so you can’t rely too much on one solution. Once the door is opened, the room door should be firm.

Fenfei: boss, I’ve been wandering around for several days, but I haven’t met a girl.

No, I have a girl for an interview today. Mr. Li said, shaking Maserati’s car keys.

Use all available resources and be careful to get bogged down in technology

TIP: The purpose of this article is only one is learning more backward techniques and train of thought, if anyone use this technology to get illegal commercial interests the legal liabilities are their operators, and the author and it doesn’t matter, this paper involves the knowledge of code project can go to my friends to fly star come undone, welcome to join star learn together to explore technology knowledge. Have a problem can add me WX: FENfei331 discussion.

Wechat public account: Fenfei safety, the latest technology dry goods real-time push