renrenAPP逆向

本文详细解析了renrenAPP登录时的流程,重点探讨了登录按钮执行的RSA加密方法和数据交互过程。通过分析请求返回的数据,揭示了e、n、rkey等参数的含义,并指出s作为密码,api_key为固定值,str4与回文有关,同时提到了sig的生成涉及到secretkey与其他字段的MD5运算。
摘要由CSDN通过智能技术生成
.method public static N6(Ljava/lang/String;Ljava/lang/String;ILjava/lang/String;Ljava/lang/String;Landroid/content/Context;Lcom/renren/mobile/android/loginfree/LoginStatusListener;)V
    .locals 1
    .annotation system Ldalvik/annotation/MethodParameters;
        accessFlags = {
            0x10,
            0x10,
            0x0,
            0x0,
            0x0,
            0x10,
            0x10
        }
        names = {
            "account",
            "passwordMd5",
            "isVerify",
            "verifyCode",
            "rkey",
            "context",
            "loginStatusListener"
        }
    .end annotation

    const/4 p2, 0x0

    .line 1
    invoke-static {p2}, Lcom/renren/mobile/android/service/ServiceProvider;->U6(Z)Lcom/renren/mobile/utils/json/JsonObject;

    move-result-object p2

    if-eqz p4, :cond_0

    const-string p3, "rkey"

    .line 2
    invoke-virtual {p2, p3, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    :cond_0
    const-string p3, "v"

    const-string p4, "1.0"

    .line 3
    invoke-virtual {p2, p3, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-string p3, "format"

    const-string p4, "JSON"

    .line 4
    invoke-virtual {p2, p3, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-string p3, "user"

    .line 5
    invoke-virtual {p2, p3, p0}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-string p3, "password"

    .line 6
    invoke-virtual {p2, p3, p1}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    .line 7
    sget-object p3, Lcom/renren/mobile/android/utils/Variables;->O:Ljava/lang/String;

    const-string p4, "uniq_id"

    invoke-virtual {p2, p4, p3}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-string p3, "session_key"

    .line 8
    invoke-virtual {p2, p3}, Lcom/renren/mobile/utils/json/JsonObject;->f(Ljava/lang/Object;)V

    const-string p3, "gz"

    const-string p4, "compression"

    .line 9
    invoke-virtual {p2, p3, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-wide/16 p3, 0x1

    const-string v0, "tab_sequence"

    .line 10
    invoke-virtual {p2, v0, p3, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;J)V

    .line 11
    new-instance p3, Lcom/renren/mobile/utils/json/JsonObject;

    invoke-direct {p3}, Lcom/renren/mobile/utils/json/JsonObject;-><init>()V

    .line 12
    sget-object p4, Lcom/renren/mobile/android/utils/Variables;->J:Ljava/lang/String;

    const-string v0, "station_id"

    invoke-virtual {p3, v0, p4}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    const-string p4, "ext_info"

    .line 13
    invoke-virtual {p2, p4, p3}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Lcom/renren/mobile/utils/json/JsonValue;)V

    .line 14
    invoke-static {p2}, Lcom/renren/mobile/android/service/ServiceProvider;->Z4(Lcom/renren/mobile/utils/json/JsonObject;)Ljava/lang/String;

    move-result-object p3

    const-string p4, "sig"

    invoke-virtual {p2, p4, p3}, Lcom/renren/mobile/utils/json/JsonObject;->put(Ljava/lang/String;Ljava/lang/String;)V

    .line 15
    new-instance p3, Lcom/renren/mobile/android/service/ServiceProvider$2;

    invoke-direct {p3, p6, p0, p1, p5}
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

m0_53851127

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值