1.抓包
POST /app3 h2
Host: appmatch.yuanrenxue.com
accept-language: zh-CN,zh;q=0.8
user-agent: Mozilla/5.0 (Linux; U; Android 7.1.2; zh-cn; BKL-AL00 Build/N6F26Q) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30
content-type: application/x-www-form-urlencoded
content-length: 73
accept-encoding: gzip
cache-control: no-cache
m=4f7a518b013af2db730fc4d171320fc0635f3c041ae9ce9811fe8a5b205f1b67&page=3
逆向app分析,定位参数加密函数
public native String crypto(String str, long j);
ida反编译,查看源码
混淆,找不到对应的类
2.ida反编译libmatch03.so对应的搜“crypto”函数没有
3.法一:考虑是有可能So 层动态注册&