mtop加密分析

2021-05-13

分析流程

[Pixel 2 XL::com.wudaokou.hippo]-> from_method:  com.alibaba.wireless.security.open.initialize.b.$init.overload('java.lang.String')
java.lang.Throwable
        at com.alibaba.wireless.security.open.initialize.b.<init>(Native Method)
        at com.alibaba.wireless.security.open.initialize.a.<init>(Unknown Source:5)
        at com.alibaba.wireless.security.open.SecurityGuardManager.getInitializer(Unknown Source:36)
        at com.alibaba.wireless.security.open.SecurityGuardManager.getInstance(Unknown Source:42)
        at com.alibaba.wireless.security.open.SecurityGuardManager.getInstance(Native Method)
        at com.alibaba.wireless.security.open.SecurityGuardManager.getInstance(Unknown Source:24)
        at com.taobao.accs.utl.UtilityImpl.getAppsign(SourceFile:416)
        at com.taobao.accs.data.Message.buildBindApp(SourceFile:655)
        at com.taobao.accs.data.Message.buildBindApp(SourceFile:624)
        at com.taobao.accs.internal.ACCSManagerImpl.bindApp(SourceFile:249)
        at com.taobao.accs.ACCSClient.bindApp(SourceFile:210)
        at com.wudaokou.hippo.push.PushStarter.a(SourceFile:129)
        at com.wudaokou.hippo.push.PushStarter.a(SourceFile:44)
        at com.wudaokou.hippo.push.PushStarter$1.run(SourceFile:77)
        at com.wudaokou.hippo.common.executor.internal.JobWrapper.run(SourceFile:28)
        at com.wudaokou.hippo.common.executor.internal.CancelableJob.run(SourceFile:35)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:462)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
        at java.lang.Thread.run(Thread.java:919)

sendControlMessage(context, buildBindApp, 1, z);

<==

iACCSManager.bindApp(mContext, this.mConfig.getAppKey(), this.mConfig.getAppSecret(), str, iAppReceiver);

<==

buildBindApp(Context context, String str, String str2, String str3, String str4, String str5, String str6)

<==

buildBindApp(context, str2, intent.getStringExtra(“appKey”), intent.getStringExtra(“app_sercet”), stringExtra, intent.getStringExtra(“ttid”), intent.getStringExtra(“appVersion”));

sessionCenter.registerSessionInfo(SessionInfo.create(str, z, true, new Auth(this, str), this.smartHeartbeat, this))

==>

public Auth(BaseConnection baseConnection, String str) {
this.TAG = baseConnection.getTag();
this.authUrl = baseConnection.buildAuthUrl(“https://“ + str + “/accs/“);
this.connectionType = baseConnection.mConnectionType;
this.connection = baseConnection;
}

==>

public static SessionInfo create(String str, boolean z, boolean z2, IAuth iAuth, IHeartbeat iHeartbeat, DataFrameCb dataFrameCb2)

==>

private SessionInfo(String str, boolean z, boolean z2, IAuth iAuth, IHeartbeat iHeartbeat, DataFrameCb dataFrameCb2) {
this.host = str;
this.isAccs = z2;
this.auth = iAuth;
this.isKeepAlive = z;
this.heartbeat = iHeartbeat;
this.dataFrameCb = dataFrameCb2;
}

public String buildAuthUrl(String str) {
      String str2;
      IpChange ipChange = $ipChange;
      if (ipChange == null || !(ipChange instanceof IpChange)) {
          String deviceId = UtilityImpl.getDeviceId(this.mContext);
          try {
              str2 = URLEncoder.encode(deviceId);
          } catch (Throwable th) {
              ALog.e(getTag(), "buildAuthUrl", th, new Object[0]);
              str2 = deviceId;
          }
          String appsign = UtilityImpl.getAppsign(this.mContext, getAppkey(), this.mConfig.getAppSecret(), deviceId, this.mConfigTag);
          StringBuilder sb = new StringBuilder(256);
          // https://msgacs.m.taobao.com/accs/auth?1=YJyVD1H5%2BA0DAMjPxYaw6nxV&2=483c04ed186235e66a5bbc701e5204082da7366b&3=23228014&5=1&6=wifi&7=null&8=1.1.2&9=1620977928956&10=1&11=29&12=com.wudaokou.hippo&13=5.13.1&14=10005060@hmxs_android_5.13.1&15=Pixel+2+XL&16=google&17=221&19=1&20=
          sb.append(str);
          sb.append("auth?1=");
          sb.append(str2);
          sb.append("&2=");
          sb.append(appsign);
          sb.append("&3=");
          sb.append(getAppkey());
          if (this.mConnToken != null) {
              sb.append("&4=");
              sb.append(this.mConnToken);
          }
          sb.append("&5=");
          sb.append(this.mConnectionType);
          sb.append("&6=");
          sb.append(UtilityImpl.getNetworkType(this.mContext));
          sb.append("&7=");
          sb.append(UtilityImpl.getOperator(this.mContext));
          sb.append("&8=");
          sb.append(this.mConnectionType == 1 ? "1.1.2" : Integer.valueOf((int) com.taobao.accs.common.Constants.SDK_VERSION_CODE));
          sb.append("&9=");
          sb.append(System.currentTimeMillis());
          sb.append("&10=");
          sb.append(1);
          sb.append("&11=");
          sb.append(Build.VERSION.SDK_INT);
          sb.append("&12=");
          sb.append(this.mContext.getPackageName());
          sb.append("&13=");
          sb.append(UtilityImpl.getAppVersion(this.mContext));
          sb.append("&14=");
          sb.append(this.mTtid);
          sb.append("&15=");
          sb.append(UtilityImpl.urlEncode(Build.MODEL));
          sb.append("&16=");
          sb.append(UtilityImpl.urlEncode(Build.BRAND));
          sb.append("&17=");
          sb.append(OrangeAdapter.getCurrentVersion(this.mContext));
          sb.append("&19=");
          sb.append(!isSecurityOff());
          sb.append("&20=");
          sb.append(this.mConfig.getStoreId());
          if (OrangeAdapter.isChannelModeEnable()) {
              sb.append("&21=");
              sb.append(state);
          }
          return sb.toString();
      }
      return (String) ipChange.ipc$dispatch("buildAuthUrl.(Ljava/lang/String;)Ljava/lang/String;", new Object[]{this, str});
  }