# 抖音 app

# 抓包

​ 抖音 app 采取了 quic 的协议,常规的方法无法抓到包,本质上是使用了开源的 boringssl,走了一个叫 quic 的协议,直接 hook 掉 so 里面的内容,即可。

# 接口分析

​ 这里抓取的是搜索接口

url = "https://search100-search-quic-lf.amemv.com/aweme/v1/general/search/stream/"
params = {
    "iid": "1368207845240094",   // 设备相关?
    "device_id": "893218821787319",  // 设备id 这个应该是唯一的
    "ac": "wifi",
    "channel": "sem_shenma_dy_ls088",
    "aid": "1128",
    "app_name": "aweme",
    "version_code": "190800",
    "version_name": "19.8.0",
    "device_platform": "android",
    "os": "android",
    "ssmix": "a",
    "device_type": "Pixel 2 XL",
    "device_brand": "google",
    "language": "zh",
    "os_api": "29",
    "os_version": "10",
    "openudid": "1de8bb03f51c66e1",   // 设备相关?
    "manifest_version_code": "190801",
    "resolution": "1440*2712",
    "dpi": "560",
    "update_version_code": "19809900",
    "_rticket": "1661693429375",
    "package": "com.ss.android.ugc.aweme",
    "cpu_support64": "true",
    "host_abi": "armeabi-v7a",
    "is_guest_mode": "0",
    "app_type": "normal",
    "minor_status": "0",
    "appTheme": "light",
    "need_personal_recommend": "1",
    "is_android_pad": "0",
    "ts": "1661693459", 
    "cdid": "d92a35dd-1a8d-4a23-bb33-2b4cbce670c9"  // 设备相关?
}

其中看到了貌似跟设备相关的信息,暂时还啥都不知道

# 设备注册

​ 抓包拿到设备注册的接口

image-20220829110628014

Edited on

Give me a cup of [coffee]~( ̄▽ ̄)~*

Mr2 WeChat Pay

WeChat Pay