Hook抖音用户信息id,secUid

最新推荐文章于 2024-12-30 10:41:45 发布

SolarLove

最新推荐文章于 2024-12-30 10:41:45 发布

阅读量6.4k

点赞数

文章标签： android python java django jwt

本文链接：https://blog.csdn.net/SolarLove/article/details/118754907

版权

本文详细介绍了如何使用Xposed框架的hook技术来获取抖音APP中用户登录的userId和sec_uid。通过解析com.bytedance.android.live.base.model.user.User实体类的相关方法，展示了在安卓应用层动态拦截并分析接口数据的过程，揭示了客户端生成用户标识的逻辑。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

抖音版本16.3.0，hook方式xposed

在采集APP数据的时候很多接口都会用到userId和sec_uid，通过抓取接口webcast/user可以看到id都是由客户端生成的

用户信息

实体类com.bytedance.android.live.base.model.user.User

/**
     * 获取当前登录用户ID
     * @param lpparam
     * @return
     */
    public static long getLogInUserId(XC_LoadPackage.LoadPackageParam lpparam){
        Class<?> IUserService = XposedHelpers.findClass("com.bytedance.android.live.user.IUserService", lpparam.classLoader);
        Object oIUserService = XposedHelpers.callStaticMethod(XposedHelpers.findClass("com.bytedance.android.live.j.g", lpparam.classLoader), "a", IUserService);
        Object user = XposedHelpers.callMethod(oIUserService, "user");
        Object userid = XposedHelpers.callMethod(user, "b");
        return (long) userid;
    }

    /**
     * 获取当前登录用户SEC_UID
     * @param lpparam
     * @return
     */
    public static String getLogInSecUserId(XC_LoadPackage.LoadPackageParam lpparam){
        Class<?> IUserService = XposedHelpers.findClass("com.bytedance.android.live.user.IUserService", lpparam.classLoader);
        Object oIUserService = XposedHelpers.callStaticMethod(XposedHelpers.findClass("com.bytedance.android.live.j.g", lpparam.classLoader), "a", IUserService);
        Object user = XposedHelpers.callMethod(oIUserService, "user");
        Object userid = XposedHelpers.callMethod(user, "b");
        Object secUid = XposedHelpers.callMethod(user, "a", userid);
        return secUid.toString();
    }