最近无事玩王者，发现某些租号平台可以直接通过自身的APP打开腾讯的游戏进行登录，于是对这一登录过程做了简单的分析

发现不管是IOS还是Android都可以在QQ里面的游戏中心直接打开腾讯相关的游戏，然后通过抓包发现QQ打开游戏的时候会访问的URL请求地址，在JEB里面对这个地址进行搜索找到相关代码

伪造王者荣耀包名，使用QQ打开伪造的王者荣耀APP对参数进行截取，对比代码分析发现，登录所使用的参数atoken ptoken等参数是可以通过官方SDK获取的

对IOS也通过伪造包名发现登录参数的格式是这样的
tencentlaunch1104466820://startapp?atoken=CB6CE0E7C75849189FFD0D692576C67E&openid=24B0EFBBE7FD07941C6BD452CD6E9E32&ptoken=1D044410A43724E932DEB12CB31A5190&platform=qq_m&current_uin=24B0EFBBE7FD07941C6BD452CD6E9E32&launchfrom=sq_gamecenter

使用QQ SDK获取的登录参数，发现打开的王者荣耀 APP账号并没有登录上去，所以怀疑，通过QQ SDK获取的参数有问题，想到腾讯手游里面是可以直接通过QQ网页登录游戏的，于是我就在伪造的包名的APP里面通过调用SDK发现这个登录请求是带了APPID的
ae1K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6M7$3I4Q4x3X3g2H3N6r3I4G2k6$3W2F1x3W2)9J5k6i4q4I4i4K6u0W2j5$3!0E0i4K6u0r3j5$3S2W2j5$3E0Q4x3@1k6H3N6q4)9#2k6Y4c8W2j5g2)9K6c8o6u0Q4x3U0k6S2L8i4m8Q4x3@1u0#2K9h3&6Q4x3@1b7K6z5e0t1@1y4U0V1^5z5o6u0Q4x3U0k6S2L8i4m8Q4x3@1u0S2M7s2m8A6k6q4)9K6c8o6M7I4y4U0l9J5y4K6j5H3z5g2)9J5y4X3q4E0M7q4)9K6b7Y4m8@1L8r3q4F1k6#2)9K6c8o6t1H3y4e0u0Q4x3U0k6S2L8i4m8Q4x3@1u0J5k6h3N6E0j5i4y4@1k6i4u0Q4x3@1c8Q4x3U0k6S2L8i4m8Q4x3@1u0H3N6q4)9#2k6Y4g2A6M7%4c8&6L8r3g2Q4x3@1b7K6y4g2)9J5y4X3q4E0M7q4)9K6b7Y4u0Q4x3@1b7H3i4K6u0W2y4e0t1@1y4U0R3#2x3K6V1@1x3U0t1&6z5o6f1$3x3H3`.`.


然后使用返回的参数测试登录王者荣耀APP成功

5a9K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6^5N6h3W2Q4x3X3g2H3N6r3I4G2k6$3W2F1x3W2)9J5k6i4q4I4i4K6u0W2j5$3!0E0i4K6u0r3j5$3N6A6i4K6u0V1j5X3W2F1i4K6u0r3P5r3I4G2k6$3W2F1i4K6y4r3j5i4m8H3K9h3c8Q4x3@1b7%4x3e0j5H3x3U0M7$3x3o6W2Q4x3U0k6S2L8i4m8Q4x3@1u0H3N6q4)9#2k6U0y4J5k6q4)9#2k6X3q4A6k6q4)9K6c8o6p5I4x3o6b7@1y4U0j5^5x3U0m8Q4x3U0k6S2L8i4m8Q4x3@1u0V1j5h3W2V1i4K6y4p5x3K6R3I4i4K6t1$3j5h3#2H3i4K6y4n7M7s2c8Q4y4h3k6K6K9$3g2&6i4K6g2X3N6X3q4D9K9h3c8Q4x3@1b7H3i4K6t1$3j5h3#2H3i4K6y4n7M7%4c8&6L8r3g2Q4x3@1b7K6y4g2)9J5y4X3q4E0M7q4)9K6b7Y4y4Q4y4h3k6#2M7X3I4Q4x3@1c8Z5N6s2c8H3i4K6t1#2x3@1q4Q4x3U0f1J5c8W2)9J5y4e0u0r3j5$3!0F1L8X3g2U0N6q4)9J5k6i4q4I4i4K6u0W2j5$3!0E0i4K6t1$3j5h3#2H3i4K6y4n7M7X3g2X3k6i4u0Q4y4h3k6U0k6$3W2Q4x3@1c8E0i4K6g2X3j5i4g2@1K9r3!0J5K9i4A6W2i4K6t1$3j5h3#2H3i4K6y4n7N6h3y4Z5k6h3y4C8i4K6y4p5x3g2)9J5y4X3q4E0M7q4)9K6b7X3k6S2L8r3I4Q4y4h3k6@1L8#2)9#2k6Y4N6$3i4K6y4p5x3g2)9J5y4X3q4E0M7q4)9K6b7Y4y4@1j5i4c8#2M7#2)9#2k6X3!0K6i4K6y4p5x3e0y4Q4x3X3f1K6i4K6u0W2x3g2)9J5y4X3q4E0M7q4)9K6b7Y4u0W2k6r3W2J5k6h3y4@1i4K6g2X3N6i4u0A6i4K6y4p5j5i4g2@1K9q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8Y4N6%4N6#2)9J5k6i4q4I4i4K6u0W2j5$3!0E0i4K6t1$3j5h3#2H3i4K6y4n7j5$3I4A6k6h3&6@1i4K6g2X3K9h3c8Q4x3@1b7I4x3e0l9@1y4o6j5$3z5o6t1H3i4K6t1$3j5h3#2H3i4K6y4n7M7X3g2K6M7r3!0F1M7$3g2Q4y4h3k6@1P5i4m8W2i4K6y4p5N6r3!0C8k6h3&6Q4x3U0k6S2L8i4m8Q4x3@1u0K6j5$3!0H3k6g2)9K6c8r3N6W2N6q4)9#2k6Y4g2K6k6i4u0Q4y4h3k6A6L8X3k6G2i4K6t1#2x3V1y4Y4k6i4c8Q4y4h3k6K6K9h3#2H3L8r3g2Q4y4h3k6#2M7$3g2J5K9h3&6X3L8#2)9J5y4e0u0o6j5h3c8V1i4K6g2X3N6q4)9J5y4X3q4E0M7q4)9K6b7Y4y4V1K9%4m8Q4x3@1c8A6i4K6t1$3j5h3#2H3i4K6y4n7M7$3c8C8N6W2)9K6c8o6y4Q4x3X3f1K6i4K6u0W2z5q4)9#2k6X3I4A6N6r3g2Q4x3U0k6S2L8i4m8Q4x3@1u0K6N6r3q4@1k6g2)9K6c8s2c8W2M7%4c8Q4x3U0k6S2L8i4m8Q4x3@1u0K6N6r3q4@1N6i4y4Q4y4h3k6E0j5h3y4Z5K9h3&6W2i4K6y4p5K9g2m8Z5L8$3&6W2z5g2)9J5y4e0u0o6x3g2)9J5y4X3q4E0M7q4)9K6b7Y4y4%4K9i4c8U0K9q4)9K6c8o6q4Q4x3U0k6S2L8i4m8Q4x3@1u0@1M7X3q4U0k6h3W2V1i4K6y4p5e0X3A6y4x3f1!0p5f1e0u0d9K9W2g2@1e0f1g2g2N6@1#2o6x3o6m8d9K9X3N6&6e0q4c8C8P5p5&6f1K9%4c8c8K9W2f1#2e0@1g2v1c8W2q4f1f1i4N6c8P5V1p5H3i4K6g2X3x3e0f1^5y4K6b7$3y4K6V1&6y4H3`.`.

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课