yml/live-hub-py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(huya): unidbg 金测试打通 - 采集器加密可复现(androidId=PDSuHx..)/GUID=0a7dfa..一致

Browse Source 
- 输入图定案: 库内零硬件文件读, 种子=ANDROID_ID+服务端hydeviceid_config+MID, 属性层无关(X1/X2)
- 真机全段解密 dump(phone_dump_hydev_full) + merge_decrypted 合入原文件 → unidbg 可直接加载
- unidbg(JDK21+patch) harness: JNI 桩(SharedPreferences日志化/Settings.Secure/NativeBridge)
  金测试: androidId 加密态与 getGUID 全部与真机一致
- 遗留: NativeBridge.b(100) 原生归属库未定(非hydeviceid/udb/device-util), 当前桩替顶
- 修正结论: '单机不可铸造'判断错误, GUID=b(100)=f(androidId密, config, MID) 输入全可控
This commit is contained in:
yml2213
2026-08-28 16:06:25 +08:00
parent 6ded82ac8b
commit 70621cff8f
16 changed files with 35749 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
evidence/diag_phone/identity_inputs.json
+33672
View File
File diff suppressed because it is too large Load Diff
evidence/diag_phone/init_inputmap.json
+651
View File
@@ -0,0 +1,651 @@
{
"events": [
{
"type": "sys",
"tid": 16304,
"nr": 178,
"a1": 129,
"a2": 2147483647
},
{
"type": "sys",
"tid": 16304,
"nr": 178,
"a1": 321403496,
"a2": 2
},
{
"type": "sys",
"tid": 16304,
"nr": 178,
"a1": 2,
"a2": 1
},
{
"type": "sys",
"tid": 16304,
"nr": 178,
"a1": 321403496,
"a2": 2
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 1,
"a2": 37
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 1409407382,
"a2": -1483135152
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -144782152,
"a2": 1
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 72
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.version.sdk",
"v": "30"
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 72
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -144783232,
"a2": 72
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 72,
"a2": -1940747090
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 8
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 1332686000,
"a2": 42
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 324922800,
"a2": 17
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -144782224,
"a2": 72
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 72
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -1894573582,
"a2": 1002435262
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.display.id",
"v": "RKQ1.200826.002 test-keys"
},
{
"type": "ioctl",
"tid": 16260,
"fd": 481,
"req": 35090
},
{
"type": "ioctl",
"tid": 16260,
"fd": 481,
"req": 35093
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 72
},
{
"type": "prop",
"tid": 16260,
"k": "ro.hardware",
"v": "qcom"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.bootloader",
"v": "unknown"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.manufacturer",
"v": "Xiaomi"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.host",
"v": "m1-xm-ota-bd197.bj.idc.xiaomi.com"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.user",
"v": "builder"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.board",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.board.platform",
"v": "kona"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.type",
"v": "user"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.flavor",
"v": "qssi-user"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.tags",
"v": "release-keys"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.marketname",
"v": "Mi 10S"
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 325025048,
"a2": 32
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 131072,
"a2": 1
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 0,
"a2": 72
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 324975472,
"a2": 10
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -144783952,
"a2": 65542
},
{
"type": "prop",
"tid": 16260,
"k": "init.svc.qemud",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "init.svc.qemu-props",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "qemu.sf.lcd_density",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "qemu.sf.fake_camera",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "vendor.qemu.sf.fake_camera",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.kernel.android.qemud",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.kernel.qemu",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.kernel.qemu.avd_name",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.boot.qemu",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.hardware",
"v": "qcom"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.boot.hardware",
"v": "qcom"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.hardware.power",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.kernel.androidboot.hardware",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.soc.model",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.board",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.host",
"v": "m1-xm-ota-bd197.bj.idc.xiaomi.com"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.manufacturer",
"v": "Xiaomi"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.hardware.egl",
"v": "adreno"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.setupwizard.mode",
"v": ""
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.device",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.model",
"v": "M2102J2SC"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.name",
"v": "thyme"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.hardware",
"v": "qcom"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.host",
"v": "m1-xm-ota-bd197.bj.idc.xiaomi.com"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.host",
"v": "m1-xm-ota-bd197.bj.idc.xiaomi.com"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.build.host",
"v": "m1-xm-ota-bd197.bj.idc.xiaomi.com"
},
{
"type": "prop",
"tid": 16260,
"k": "ro.product.brand",
"v": "Xiaomi"
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 325034560,
"a2": -144786641
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 131072,
"a2": 1
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 131072,
"a2": 1
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 2059927712,
"a2": -144787079
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -374213066,
"a2": 0
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 1278105872,
"a2": 1332685606
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 609,
"a2": 16
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 324975640,
"a2": 2
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 2041122656,
"a2": 2041122681
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 324975664,
"a2": 3
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 1282687744,
"a2": 0
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": 2041353152,
"a2": 1
},
{
"type": "sys",
"tid": 16260,
"nr": 178,
"a1": -144782712,
"a2": 1298809167
}
],
"values": {
"_print": 100,
"getGUID": "0a7dfaa882938a6ab502511452142c57",
"getCDID": "02df398797432eadefcc12767119ad5e80999389",
"getHDID": "7c5387e0539c023c31c4ff0e807e7256117385ee",
"getMID": "1e8bdf7d4f7a01d3",
"getSDID": "PQwemAN9NHkZKoMqJwc0shIypqMTaQEOrmXr37xQVhQZq7TxuCKpS01ntlUjwbUY9NW1/H46EZ2frrfnb741+kVv5IpWJAlwMl/cgwn8PoldXr69ySUmoCvBNkPZrD3ktH2R+GhHGps21KpuueTcU+z5r79ULaj7zJCSIppRD3RdaEBNhy0=",
"init": "ok"
},
"lib": null,
"detached": []
}
evidence/diag_phone/java_nativeentry.json
+1 -1
View File
@@ -3,7 +3,7 @@
"getGUID": "0a7dfaa882938a6ab502511452142c57",
"getMID": "1e8bdf7d4f7a01d3",
"getCDID": "02df398797432eadefcc12767119ad5e80999389",
"getSDID": "PQwemAN9NHkZKoMqJ1d4FRIypqMTaQEOrmXr37xQVhQZq7L4uCKpS01ntlUkhq1Axdiy9nVNa/2z36z0Vbos+DdHlZJMBBhNP1vehQ3eO5kFXfuv9zZShivBPUqhhwn0zEuX90cIWKYq7Z98gtyiWLHCsORZI73C6IjhfJRFSXZYH0p8ly0=",
"getSDID": "PQwemAN9NHkZKoMqJ3aYKBIypqMTaQEOrmXr37xQVhQZq7X9uCKpS0FntlUjorM51M7A+n5jTYH2s6G/epsAgD1J4o4TRi5qF2bUohDYFLkdX9Wc8woPhivOJlSPt3TwimDu5zUGYJIf0L9niobPW5v/kO5lLKLH7LecKL1HMgdCGQppmkE=",
"getHDID": "7c5387e0539c023c31c4ff0e807e7256117385ee"
},
"detached": []
evidence/diag_phone/libhydeviceid_dump_full.so
BIN
View File
Binary file not shown.
evidence/diag_phone/libudbauthunify_dump_full.so
BIN
View File
Binary file not shown.