2021-07-23

今天带大家一步步分析调用手机淘宝的接口
首先第一步就是要抓包，用模拟器代理到Fiddler后，发现抓不到，反编译了一下代码，应该是手淘的网络框架开启了直连不使用代理，这时候就得用另外的工具了 【packet-capture】这个工具的原理就是在手机上开启一个VPN服务来抓包GET /gw/mtop.taobao.detail.getdetail/6.0/?data=%7B%22detail_v%22%3A%223.3.2%22%2C%22exParams%22%3A%22%7B%5C%22action%5C%22%3A%5C%22ipv%5C%22%2C%5C%22ad_type%5C%22%3A%5C%221.0%5C%22%2C%5C%22appReqFrom%5C%22%3A%5C%22detail%5C%22%2C%5C%22clientCachedTemplateKeys%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22container_type%5C%22%3A%5C%22xdetail%5C%22%2C%5C%22countryCode%5C%22%3A%5C%22CN%5C%22%2C%5C%22cpuCore%5C%22%3A%5C%221%5C%22%2C%5C%22cpuMaxHz%5C%22%3A%5C%22N%2FA%5C%22%2C%5C%22detailAlgoParam%5C%22%3A%5C%22%25E6%2596%25B0%25E6%25AC%25BE%25E5%25A6%2588%25E5%25A6%2588%25E7%25BE%25BD%25E7%25BB%2592%25E6%259C%258D%5C%22%2C%5C%22dinamic_v3%5C%22%3A%5C%22true%5C%22%2C%5C%22from%5C%22%3A%5C%22search%5C%22%2C%5C%22id%5C%22%3A%5C%22629752153983%5C%22%2C%5C%22item_id%5C%22%3A%5C%22629752153983%5C%22%2C%5C%22latitude%5C%22%3A%5C%2223.366706%5C%22%2C%5C%22list_type%5C%22%3A%5C%22search%5C%22%2C%5C%22longitude%5C%22%3A%5C%22116.722103%5C%22%2C%5C%22nick%5C%22%3A%5C%22chenxiaohongtaobao%5C%22%2C%5C%22osVersion%这里以抓到的手淘详情接口为例子，上面有几个主要的参数x-sign,x-mini-wua,x-umt,x-sgext 这几个就是签名的参数，那我主要的就是要反编译找到这几个参数生成的地方
接下来就是用jadx 搜索大法上场了

``

找到拼接参数生成签名的地方
顺藤摸瓜找到签名的方法
安卓模拟器Hook接口开放接口出来调用就可以了，需要外网访问，可以接上内网穿透