{"id":1903,"date":"2025-04-26T01:05:30","date_gmt":"2025-04-25T17:05:30","guid":{"rendered":"https:\/\/www.xiaosuigu.top\/?p=1903"},"modified":"2025-09-11T16:30:32","modified_gmt":"2025-09-11T08:30:32","slug":"tiktok%e8%ae%be%e5%a4%87%e6%b3%a8%e5%86%8c%e6%bf%80%e6%b4%bb","status":"publish","type":"post","link":"https:\/\/www.xiaosuigu.top\/index.php\/2025\/04\/26\/tiktok%e8%ae%be%e5%a4%87%e6%b3%a8%e5%86%8c%e6%bf%80%e6%b4%bb\/","title":{"rendered":"TT\u8bbe\u5907\u6ce8\u518c\u6fc0\u6d3b"},"content":{"rendered":"\n
\n

\u672c\u6587\u7ae0\u4e2d\u6240\u6709\u5185\u5bb9\u4ec5\u4f9b\u5b66\u4e60\u4ea4\u6d41\u4f7f\u7528\uff0c\u4e0d\u7528\u4e8e\u5176\u4ed6\u4efb\u4f55\u76ee\u7684\uff0c\u4e0d\u63d0\u4f9b\u5b8c\u6574\u4ee3\u7801\u4e25\u7981\u7528\u4e8e\u5546\u4e1a\u7528\u9014\u548c\u975e\u6cd5\u7528\u9014\uff0c\u5426\u5219\u7531\u6b64\u4ea7\u751f\u7684\u4e00\u5207\u540e\u679c\u5747\u4e0e\u4f5c\u8005\u65e0\u5173\uff01<\/mark><\/p>\n\n\n\n

\u672c\u6587\u7ae0\u672a\u7ecf\u8bb8\u53ef\u7981\u6b62\u8f6c\u8f7d\uff0c\u7981\u6b62\u4efb\u4f55\u4fee\u6539\u540e\u4e8c\u6b21\u4f20\u64ad\uff0c\u64c5\u81ea\u4f7f\u7528\u672c\u6587\u8bb2\u89e3\u7684\u6280\u672f\u800c\u5bfc\u81f4\u7684\u4efb\u4f55\u610f\u5916\uff0c\u4f5c\u8005\u5747\u4e0d\u8d1f\u8d23\uff0c\u82e5\u6709\u4fb5\u6743\uff0c\u8bf7\u8054\u7cfb\u4f5c\u8005\u7acb\u5373\u5220\u9664\uff01<\/mark><\/p>\n<\/blockquote>\n\n\n\n

\u6293\u5305<\/h2>\n\n\n\n

TT\u7684\u8bbe\u5907\u9700\u8981\u5148\u6ce8\u518c\uff0c\u6ce8\u518c\u6210\u529f\u540e\u5728\u6fc0\u6d3b\u3002<\/p>\n\n\n\n

\u6ce8\u518c\uff1ahttps:\/\/log-boot.tiktokv.com\/service\/2\/device_register<\/p>\n\n\n\n

\u6fc0\u6d3b\uff1ahttps:\/\/log-boot.tiktokv.com\/service\/2\/app_alert_check<\/p>\n\n\n\n

\u6ce8\u518c<\/h2>\n\n\n\n

\u5148\u770b\u770b\u7f51\u4e0a\u7684\u5927\u4f6c\u4eec\u662f\u600e\u4e48\u89e3\u51b3\u7684\u3002\u67d0\u97f3\u7cfbtiktok\u8bbe\u5907\u6ce8\u518c-\u963f\u91cc\u4e91\u5f00\u53d1\u8005\u793e\u533a<\/a>\u3002\u8fd8\u771f\u627e\u7684\u5230\u3002<\/p>\n\n\n\n

\u6839\u636e\u6587\u7ae0\u77e5\u9053\u4ed6\u662f\u5728java\u5c42\u4f7f\u7528GZIP\u8fdb\u884c\u538b\u7f29\uff0c\u7136\u540e\u8c03\u7528so\u5c42\u7684ttEncrypt\u8fdb\u884c\u52a0\u5bc6\u7684\uff0c\u65b0\u7248\u672c\u4f60\u5f88\u96be\u4f7f\u7528\u6587\u7ae0\u7684\u65b9\u5f0f\u627e\u5230\u52a0\u5bc6\u4f4d\u7f6e\uff0c\u65e2\u7136\u6211\u4eec\u63d0\u524d\u77e5\u9053\u4e86\u4ed6\u662fGZIP\u538b\u7f29\u7684\u90a3\u5c31hook\u4e0bGZIP\u7684wirte\u65b9\u6cd5\uff0c\u540c\u65f6\u6253\u5370\u4e0b\u8c03\u7528\u5806\u6808\u5c31\u884c\u3002<\/p>\n\n\n\n

\u4ee3\u7801<\/summary>\n
function main() {\n    Java.perform(function () {\n        var DeflaterOutputStream = Java.use('java.util.zip.DeflaterOutputStream');\n        var writeMethod = DeflaterOutputStream.write.overload('[B', 'int', 'int');\n        var originalWrite = writeMethod.implementation;\n        var java_str = Java.use('java.lang.String');\n        writeMethod.implementation = function (bArr, offset, length) {\n            console.log(\"\\n[+] GZIPOutputStream.write called\");\n            let data = java_str.$new(bArr)\n            if (data.indexOf(\"ss_app_log\") !== -1) {\n                console.log(\"[+] Data: \" + data);\n                console.log(Java.use(\"android.util.Log\").getStackTraceString(Java.use(\"java.lang.Throwable\").$new()));\n            }\n        };\n        console.log(\"[*] DeflaterOutputStream.write hooked successfully!\");\n    });\n}\n\nsetImmediate(main);<\/code><\/pre>\n<\/details>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
LIZIZ\u5c31\u662f\u8c03\u7528\u7684\u5730\u65b9\u4e86<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
LIZ\u5c31\u662fso\u5c42\u52a0\u5bc6\u65b9\u6cd5\u4e86\uff0c\u548c\u6587\u7ae0\u91cc\u5199\u7684\u4e00\u6837<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u603b\u7ed3\uff1a\u53c2\u6570\u6a21\u62df\u4e0b\uff0c\u641e\u51faX-Khronos\uff0cX-Gorgon\uff0cX-SS-STUB\uff0c\u8bf7\u6c42data\u5c31\u597d<\/p>\n\n\n\n
\u6fc0\u6d3b<\/h2>\n\n\n\n
\u6ce8\u518c\u5b8c\u4e4b\u540e\u5c31\u662f\u6fc0\u6d3b\u4e86\uff0c\u6fc0\u6d3b\u6bd4\u6ce8\u518c\u7b80\u5355\u591a\u4e86\uff0c\u53c2\u6570\u6a21\u62df\u4e0b\u5373\u53ef\u3002<\/p>\n\n\n\n
\u6fc0\u6d3b\u8bf7\u6c42\u91cc\u6709\u4e2att_info\u7684\u53c2\u6570\uff0c\u5728java\u5c42\u641c\u7d22<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
hook\u4e0b\u77e5\u9053\u53c2\u6570<\/summary>\n
function main() {\n    Java.perform(function () {\n        let C136552k4h = Java.use(\"X.k4h\");\n        C136552k4h[\"LIZLLL\"].implementation = function (str) {\n            console.log(`C136552k4h.111111111111 is called: str=${str}`);\n            let result = this[\"LIZLLL\"](str);\n            console.log(`C136552k4h.111111111111 result=${result}`);\n            return result;\n        };\n\n        var java_str = Java.use('java.lang.String');\n        C136552k4h[\"LIZIZ\"].implementation = function (context, bArr) {\n            let data = java_str.$new(bArr)\n            console.log(`C136552k4h.2222222222222 is called: data=${data}`);\n            let result = this[\"LIZIZ\"](context, bArr);\n            console.log(`C136552k4h.2222222222222 result=${result}`);\n            return result;\n        };\n    });\n}\n\nsetImmediate(main);<\/code><\/pre>\n<\/details>\n\n\n\n
\u770b\u5f97\u51fa\u6765\u662f\u5148url\u91cc\u7684\u53c2\u6570\u53d6\u51fa\u540e\u8fdb\u884cGZIP\u538b\u7f29\uff0c\u518d\u8fdb\u884cttEncrypt\u52a0\u5bc6\uff0c\u6700\u540e\u8fdb\u884cbase64\u52a0\u5bc6\u3002<\/p>\n\n\n\n
\u9a8c\u8bc1<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u672c\u6587\u7ae0\u4e2d\u6240\u6709\u5185\u5bb9\u4ec5\u4f9b\u5b66\u4e60\u4ea4\u6d41\u4f7f\u7528\uff0c\u4e0d\u7528\u4e8e\u5176\u4ed6\u4efb\u4f55\u76ee\u7684\uff0c\u4e0d\u63d0\u4f9b\u5b8c\u6574\u4ee3\u7801\u4e25\u7981\u7528\u4e8e\u5546\u4e1a\u7528\u9014\u548c\u975e\u6cd5\u7528\u9014\uff0c\u5426\u5219\u7531\u6b64\u4ea7\u751f\u7684 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1903","post","type-post","status-publish","format-standard","hentry","category-android"],"_links":{"self":[{"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/posts\/1903","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/comments?post=1903"}],"version-history":[{"count":6,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/posts\/1903\/revisions"}],"predecessor-version":[{"id":1981,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/posts\/1903\/revisions\/1981"}],"wp:attachment":[{"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/media?parent=1903"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/categories?post=1903"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xiaosuigu.top\/index.php\/wp-json\/wp\/v2\/tags?post=1903"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}