-
-
[原创]某手quic转https后抓包
-
发表于:
2021-4-29 12:12
16486
-
这个问题好多人问我怎么解决，就简单粗暴的回答一下。
//android:versionCode="16773" android:versionName="8.1.30.16773"
public static void quic2https(XC_LoadPackage.LoadPackageParam loadPackageParam){
Class cls = XposedHelpers.findClassIfExists("j.e0.e0.f.e", loadPackageParam.classLoader);
if(cls!=null) {
XposedHelpers.findAndHookMethod(cls,"a",String.class, Type.class, Object.class, new XC_MethodHook() {
public void afterHookedMethod(XC_MethodHook.MethodHookParam param) throws Throwable {
Log.e("logQT",Arrays.toString(param.args));
Log.e("logQT",""+param.getResult());
if (Arrays.toString(param.args).contains("cronetConfig")) {
param.setResult("{\"enable_quic\": false, \"cdn_preresolver_ip_blacklist\":[\"0.0.0.0\",\"1.1.1.1\",\"127.0.0.1\"], \"preconnect_num_streams\": 1, \"quic_idle_timeout_sec\": 180, \"quic_use_bbr\": false, \"altsvc_broken_time_max\": 600, \"altsvc_broken_time_base\": 60, \"proxy_host_blacklist\": [\"*\"]}");
}
}
});
}
}然后postern配置代理转发到charles就可以抓包了。
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
