淘宝闲鱼淘特抓包以及过root检测

前言

众所周知，阿里系的app抓不到包的原因是因为没有走https协议，而是走的spdy，很多人就以为阿里系的所有app都可以通过hook同一方法实现抓包，事实上不同的app是有些许区别的。本文只做技术分享，如有侵权请联系删除。

闲鱼

function hookNetwork(){
    console.log("start hook ......")
    //抓包
    var SwitchConfig = Java.use('mtopsdk.mtop.global.SwitchConfig')
    SwitchConfig.A.implementation = function(){
        console.log("AA")
        return false
    }
    SwitchConfig.z.implementation = function(){
        console.log("zz")
        return false
    }
    // root检测
    var cls2 = Java.use('com.mobile.auth.gatewayauth.utils.security.CheckRoot');
    var mhd_array = cls2.class.getDeclaredMethods();
    cls2.checkRootPathSU.implementation = function(){
        var result = this.checkRootPathSU();
        console.log("checkRootPathSU:"+result)
        return false
    }
    // xposed检测
    var cls3 = Java.use('com.mobile.auth.gatewayauth.utils.security.CheckHook')
    cls3.isHookByStack.implementation = function(){
        var result = this.isHookByStack();
        console.log("isHookByStack:"+result)
        return false
    }
    cls3.isHookByJar.implementation = function(){
        var result = this.isHookByJar();
        console.log("isHookByJar:"+result)
        return false
    }
}

Java.perform(function () {
    hookNetwork();
});

淘宝、淘特

function hookNetwork(){
    var enableSpdy = false;
    var SwitchConfig = Java.use('mtopsdk.mtop.global.SwitchConfig')
    var instance = SwitchConfig.getInstance();

    instance.setGlobalSpdySslSwitchOpen(enableSpdy);
    instance.setGlobalSpdySwitchOpen(enableSpdy);
    
}

Java.perform(function () {
    hookNetwork();
});