meid写入工具_业务安全之典型安卓改机工具分析

本文主角为一款安卓改机工具， 微?改机 ，这款改机工具去年我们就见过，这一年多的时间已经发展到具有一定的用户规模了。

从最初的QQ群打广告，到现在有三个品牌(VS*师、悟*宝、新微?)，6个商务，1300+帖子的论坛，3000+用户的社交群组，很明显过去这一年多，微?的小日子过得还挺舒服的…建议各家公司早日盯上它…

抓包分析

这款改机工具与传统的改机工具不太一样，需要先刷指定的ROM，再通过改机工具修改指定的参数。通过抓包解密，我们拿到了其改机相关的数据，相关字段有80多个，主要是设备中需要修改的数据。

抓包解密字段：

{
    
    "accountPassword":"",
    "androidId":"",
    "androidVer":"",
    "api":"",
    "appInstallTime":"",
    "appPackages":"",
    "arpMac":"",
    "backupFileName":"",
    "board":"",
    "bootId":"",
    "brand":"",
    "bssId":"",
    "carrier":"=",
    "carrierCode":"",
    "constructDate":"",
    "coreNumber":,
    "countryCode":""
    "cpuInfo":"",
    "cupFile":"",
    "dayNumber":,
    "density":,
    "description":"",
    "device":"",
    "deviceFile":"",
    "deviceFileVersion":"",
    "deviceVersion":"",
    "display":"",
    "dpi":,
    "dummy0MAC":"",
    "fingerprint":"",
    "fromDayNumber":,
    "getIp":,
    "gjIso":"",
    "glRenderer":"",
    "glVendor":"",
    "hardware":"",
    "height":,
    "id":,
    "imei":"",
    "imei1":"",
    "imsi":"",
    "ipv6":"",
    "lat":,
    "log":,
    "lymac":"",
    "manufacture":"",
    "meid":"",
    "model":"",
    "networkInfoType":,
    "networkTor":"",
    "networkType":,
    "newAdd":,
    "p2p0MAC":"",
    "pathMessage":"",
    "phoneNumber":"",
    "phoneType":,
    "product":"",
    "recoveryId0":"",
    "recoveryId1":"",
    "remainDevice":"",
    "scaledDensity":,
    "sdCardCid0":"",
    "sdCardCid1":"",
    "serial":"",
    "simSerial":"",
    "simState":,
    "simopeName":"",
    "survivalVersion":"",
    "taskId":"",
    "taskSubId":"",
    "time":,
    "type":,
    "updateTime":"",
    "used":,
    "versionId":"",
    "whereDay":,
    "width":,
    "wifiMac":"",
    "wifiName":"",