某APP逆向分析

某APP逆向分析

分析下提交订单

1.首先抓包

使用使用postern+charles抓包能够轻松抓取到包，这块限制不多

2.分析包

首先是/app/addcart/private/quickBuy.do

这个主要是为了获取cart2No

 String data = "{"cartHeadInfo":{"userFlag":"0","directFlag":"1","operationChannel":"50","operationTerminal":"01","operationEquipment":"02","operationUser":"","token":"UDCPn1L5tJDFfgHK6)3b5cbxCAfDleOBoqjeTV7LbHA*","detect":"%s","dfpToken":"%s","operationStoreCode":"","provinceCode":"010","cityCode":"010","districtCode":"01013","townCode":"0101399","logContent":"","appTerminalVersions":"9.5.112","appVersions":"01","destLongitude":"116.288536","destLatitude":"40.203907","productPageType":"","channelType":"02","checkOrdPurFlag":"0","poiId":"2782100118468010","collectionType":""},"historyReceiverInfo":{"addrNum":"1"},"historyPayType":{"payType":"","payPeriods":""},"immediateBuyItems":[{"itemHeadInfo":{"itemNo":"1","activityType":"07","activityId":""},"mainCmmdtyInfo":{"basicInfo":{"itemNo":"1","cmmdtyCode":"000000012354857650","shopCode":"0000000000","b2cShopCode":"","shopAddCode":"0030004459","shopName":"苏宁自营","overSeasFlag":"","cmmdtyQty":"1","serviceStoreCode":"","serviceStoreName":"","commodityType":"","carShopSerWay":"","isOneHour":"","productType":"","platform":"01"},"collect":[{"collectSort":"10","collectType":"13","collectCode":"pgcate=10008;prdtp=00027;tag=四级页;pgtitle=四级页;prdid=000000012354857650;shopid=0030004459;supid=0010212008"}]}}],"supportYB":"1","publishDate":"20230410","exclusiveCouponList":[],"privilegeNumList":[]}";data = String.format(data, detect,dfptoken);

核心参数主要是两个detect和dfptoken

获取到cart2No就是提交订单了app/V2/private/confirmOrder.do

这个包的参数也不复杂，除dfptoken和detect和cart2No外，基本都是固定值。

重点就是dfptoken和detect两个参数的生成了，两种解决方法：

1.直接RPC获取，简单直接

2.分析JAVA层和SO层，将两个参数算法复写，费劲，但是也能够实现。

具体根据具体情况即可。

纯技术交流，请勿用于非法用途,如有权益问题可以发私信联系我删除.