hook抓包trace定位实战

title: SO逆向之大众点评cx
date: 2022-02-07 19:27:28
tags:

• SO
• frida
  categories: 安卓逆向
  toc_number: true

抓包10.37.13

打开首页一篇文章，APP默认TCP连接，通过降级采用HTTP连接

jadx反编译代码中

public int g() {Object[] objArr = new Object[0];ChangeQuickRedirect changeQuickRedirect = a;if (PatchProxy.isSupport(objArr, this, changeQuickRedirect, false, "18c862d70fb657f32643dbd9124704f9", RobustBitConfig.DEFAULT_VALUE)) {return ((Integer) PatchProxy.accessDispatch(objArr, this, changeQuickRedirect, false, "18c862d70fb657f32643dbd9124704f9")).intValue();}if ("cip".equals(this.d)) {return 2;}if ("http".equals(this.d)) {return 3;}if ("wns".equals(this.d)) {return 4;}return 2;
}

绕过CIP和WNS代理，直接走HTTP通道

var nvnetwork_