环境
frida 16.0.19
frida-tools 12.1.2
夜神 安卓7(32位)
快手APP 9.2
Postern 3.1.2
Frida代码
import frida, sys
jscode = """
Java.perform(
function () {
var Aegon = Java.use('com.kuaishou.aegon.Aegon');
Aegon.nativeUpdateConfig.implementation = function (a,b) {
a = '{"enable_quic":false,"preconnect_num_streams":2,"quic_idle_timeout_sec":180,"quic_use_bbr":true,"altsvc_broken_time_max":600,"altsvc_broken_time_base":60,"proxy_host_blacklist":[]}';
return this.nativeUpdateConfig(a,b);
}
}
);
"""
def on_message(message, data):
if message['type'] == 'send':
print("[*] {0}".format(message['payload']))
else:
print(message)
process = frida.get_remote_device()
#pid = process.spawn(['com.kuaishou.nebula']) # 极速
pid = process.spawn(['com.smile.gifmaker']) # app
session = process.attach(pid)
script = session.create_script(jscode)
script.on('message',on_message)
script.load()
process.resume(pid)
sys.stdin.read()
Postern
配置代理
配置规则
示例
每条都要转发,速度很慢。