抓包的时候发现IOS端使用的全部是HTTPS协议而安卓端大部分使用http协议,部分使用https协议。
----------------------这是安卓端抓到的包的http头部------------------------
POST /notice/gather_data/?appid=wx95a3a4d7c627e07d&version=2.14.15a×tamp=1519885751044&sig=43f8c8f2910ea17f52147973586074d7&encode=2&opua=AndroidSDK_26_HWBKL_8.0.0 HTTP/1.1
Host: msdk.qq.com
Content-Type: application/x-www-form-urlencoded
Content-Encrypt: msdktea
Accept-Encrypt: msdktea
Content-Length: 304
Connection: Keep-Alive
User-Agent: Apache-HttpClient/UNAVAILABLE (java 1.4)
----------------------------------------------------------------------------------------
本来以为是服务器通过判断http提交端的user-agent来判断是什么操作系统并返回相应的服务器列表的。
~~~~~~~~~~~~~~~~
这是IOS端的链接地址与协议头~~~~~~~~~~~~~~~~~~·
a9eK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6M7$3I4Q4x3X3g2E0M7$3c8C8i4K6u0W2M7i4q4Q4x3X3g2U0L8$3#2Q4x3V1k6S2N6i4c8Z5i4K6u0r3N6%4S2X3K9i4u0K6N6q4)9#2k6X3I4G2k6$3W2F1i4K6u0r3i4K6y4r3j5i4m8H3K9h3c8Q4x3@1c8%4P5o6V1#2j5e0y4S2y4r3b7%4j5K6j5J5y4$3f1H3y4$3c8Q4x3U0k6S2L8i4m8Q4x3@1u0$3k6i4u0K6K9h3!0F1i4K6y4p5x3W2)9J5k6e0p5$3i4K6u0W2x3e0k6A6i4K6t1$3j5h3#2H3i4K6y4n7N6r3W2E0k6i4y4@1j5h3#2H3i4K6y4p5x3e0f1I4z5e0R3$3y4e0p5@1z5q4)9J5y4X3q4E0M7q4)9K6b7Y4y4A6k6#2)9K6c8r3q4X3x3o6R3&6k6U0u0X3x3e0j5%4k6h3k6W2z5o6l9$3y4e0j5$3j5$3u0U0x3o6k6X3x3h3p5I4y4o6k6T1i4K6t1$3j5h3#2H3i4K6y4n7k6h3&6U0L8$3c8W2i4K6y4p5x3W2)9J5y4X3q4E0M7q4)9K6b7X3q4D9k6$3!0J5K9i4c8Z5L8g2)9K6c8s2j5I4i4K6t1$3j5h3#2H3i4K6y4n7N6i4y4W2M7W2)9J5k6r3q4Y4k6h3&6@1i4K6y4p5K9h3!0K6i4K6g2X3M7$3c8C8
Host: ssl.msdk.qq.com Proxy-Connection: close Content-Encrypt: msdktea Accept-Encrypt: msdktea User-Agent: 王者荣耀 1.33.111 rv:0007 (iPhone; iOS 11.2.6; zh_CN) Content-Length: 600
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
但我将安卓端的包修改成
POST /notice/gather_data/?appid=wx95a3a4d7c627e07d&version=2.16.16i×tamp=1519885857256&sig=821e97c27149c29e4396069c2821bb2b&encode=2&algorithm=v1&user-agent=ios_sdk HTTP/1.1
Host: msdk.qq.com
Content-Type: application/x-www-form-urlencoded
Content-Encrypt: msdktea
Accept-Encrypt: msdktea
Content-Length: 304
Connection: Keep-Alive
User-Agent: 王者荣耀 1.33.111 rv:0007(iphone;iOS11.2.6;zh_CN)
返回的还是安卓的服务器列表。
~~~~~~~~~~~~~~~~~~~~~~~~~~·
PS:可能我猜错了,
msdk.qq.com可能只是登陆的,不和服务器列表相关。
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
最后于 2018-3-1 14:38
被我只会易编辑
,原因: