某商超小程序加密算法解析

初入道途

抓包分析

工具

charles -网络抓包

下载地址：https://www.charlesproxy.com/

(前提：手机和电脑均安装好charles证书)

证书安装及支持抓包https设置指引请参考： 

postman -接口调试工具

下载地址：https://www.postman.com/

支持导入cURL，便捷高效，导入操作如下图

RE文件管理器 -android文件导出工具(需要root权限)

下载地址：https://m-k73-com.sm-tc.cn/c/m.k73.com/mipw/574951.html

运行环境

华为p9 android 6.0

(android7.0以上版本抓包工具默认抓不到https请求，因为7.0以上只信任系统级别证书，而charles证书是安装到用户级目录的。

解决方式：可将charles证书升级为系统证书，即安装证书到系统证书目录下。

具体操作可参考连接： )

抓包接口分析

抓取通过经纬度获取门店的接口

手机上操作该小程序，找到可以进行重新定位的地方点击来触发请求以获取附近的门店，随后charles捕捉到相关接口请求

选中相关请求右键复制其cURL格式数据 ，导入到postman进行调试分析

cURL数据分析：

观察发现是个post请求， 请求体是URL编码后的，不易阅读，我们进行url解码

（注意这里获取的cURL接口数据和图例所示的不是同一个请求，图例所示的抓包接口被笔者不小心清除了，于是重新抓了一次请求~）

1

curl -H 'Host: yx.feiniu.com' -H 'content-type: application/x-www-form-urlencoded' -H 'User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.7(0x18000731) NetType/WIFI Language/zh_CN' -H 'Referer: https://servicewechat.com/wx08cc6bd15fabfa53/83/page-frame.html' --data-binary "data=%7B%22apiVersion%22%3A%22t141%22%2C%22appVersion%22%3A%221.5.1%22%2C%22areaCode%22%3A%22CS000016%22%2C%22channel%22%3A%22online%22%2C%22clientid%22%3A%22a7ea53059fc868e2e3e2dd7c04027035%22%2C%22device_id%22%3A%22tv179yrhs3kv9RXjJv6uJNmdkN6kTbmaUHQE%22%2C%22time%22%3A1626080760465%2C%22reRule%22%3A%224%22%2C%22token%22%3A%227ae362df162da5ffbfc408ed8e3d4ff3%22%2C%22viewSize%22%3A%22720x1184%22%2C%22networkType%22%3A%22wifi%22%2C%22isSimulator%22%3Afalse%2C%22osType%22%3A%224%22%2C%22scopeType%22%3A1%2C%22businessType%22%3A2%2C%22businessId%22%3A%2217210001%22%2C%22deliveryCircleType%22%3A%221%22%2C%22body%22%3A%7B%22longitude%22%3A%22MTIwLjE1NDc3NQ%3D%3D%22%2C%22latitude%22%3A%22MzAuMzA1ODIy%22%7D%7D&h5=yx_touch&paramsMD5=iOWz8O%2BxL9r9GX4k5Te%2F2U5HGTRk1GQ6YqLnMErWrAI%3D" --compressed '

如下为url解码后的cURL接口数据，这下好看多了~

1

curl -H 'Host: yx.feiniu.com' -H 'content-type: application/x-www-form-urlencoded' -H 'User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.7(0x18000731) NetType/WIFI Language/zh_CN' -H 'Referer: https://servicewechat.com/wx08cc6bd15fabfa53/83/page-frame.html' --data-binary "data={"apiVersion":"t141","appVersion":"1.5.1","areaCode":"CS000016","channel":"online","clientid":"a7ea53059fc868e2e3e2dd7c04027035","device_id":"tv179yrhs3kv9RXjJv6uJNmdkN6kTbmaUHQE","time":1626080760465,"reRule":"4","token":"7ae362df162da5ffbfc408ed8e3d4ff3","viewSize":"720x1184","networkType":"wifi","isSimulator":false,"osType":"4","scopeType":1,"businessType":2,"businessId":"17210001","deliveryCircleType":"1","body":{"longitude":"MTIwLjE1NDc3NQ==","latitude":"MzAuMzA1ODIy"}}&h5=yx_touch&paramsMD5=iOWz8O+xL9r9GX4k5Te/2U5HGTRk1GQ6YqLnMErWrAI=" --compressed '

观察可知有data、h5、paramsMD5三个参数，整理如下：

1 2 3

data: { "apiVersion":"t141","appVersion":"1.5.1","areaCode":"CS000016","channel":"online","clientid":"a7ea53059fc868e2e3e2dd7c04027035","device_id":"tv179yrhs3kv9RXjJv6uJNmdkN6kTbmaUHQE","time":1626080760465,"reRule":"4","token":