yml2213
0c6aff6a6d
docs(huya): 逆向定位 32hex hdid = NativeEntry.getGUID() + 真机注入通道证据
核心结论:
- 32hex hdid (WUP 登录帧 field1.tag0) = com.huya.security.hydeviceid.NativeEntry.getGUID()
- 金样本 ed0db8 为金样本设备 GUID; 当前真机 M2102J2SC getGUID()=0a7dfaa882938a6ab502511452142c57(稳定)
- NativeEntry 全字段: getGUID(32hex)/getCDID(40hex)/getHDID(40hex)/getMID(16hex)/getSDID(base64 safedeviceid)
- 单机不可铸造: 改 serialno/ANDROID_ID/删files/hydevice持久化 均不变(硬锚底层硬件)
- libhydeviceid.so 为 OLLVM+datadiv 壳; 用 dlopen->JNI_OnLoad->RegisterNatives(env表索引215) 绕开混淆
脚本: phone_probe_registernatives2(注册表)/phone_java_call_nativeentry(Java读getGUID)/phone_read_hdid(native hook)
phone_dump_hydev(dump解密so)/phone_probe_login_frame(登录帧)/arm64_disasm(反汇编)
证据: hdid_regtable/java_nativeentry/hdid_read/login_frames/hdid_probe* + libhydeviceid_{original,dump}.so
2026-08-28 12:30:34 +08:00
..
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-28 12:30:34 +08:00
2026-08-26 02:35:42 +08:00
2026-08-26 02:35:42 +08:00
2026-08-25 15:21:11 +08:00
2026-08-25 21:22:19 +08:00
2026-08-25 17:04:36 +08:00
2026-08-25 21:22:19 +08:00
2026-08-25 16:56:06 +08:00
2026-08-25 19:01:46 +08:00
2026-08-26 10:50:04 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 15:51:30 +08:00
2026-08-27 17:57:38 +08:00
2026-08-27 17:57:38 +08:00
2026-08-26 11:19:40 +08:00
2026-08-27 17:57:38 +08:00
2026-08-27 17:57:38 +08:00
2026-08-27 17:57:38 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 15:51:30 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 18:28:33 +08:00
2026-08-26 18:28:33 +08:00
2026-08-26 18:28:33 +08:00
2026-08-26 18:28:33 +08:00
2026-08-26 18:28:33 +08:00
2026-08-26 15:51:30 +08:00
2026-08-26 15:51:30 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-26 14:17:58 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-25 21:22:19 +08:00
2026-08-25 21:22:19 +08:00
2026-08-26 18:28:33 +08:00
2026-08-25 17:16:40 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-25 15:37:42 +08:00
2026-08-25 18:50:05 +08:00
2026-08-26 18:28:33 +08:00
2026-08-25 19:12:35 +08:00
2026-08-25 17:16:40 +08:00
2026-08-25 19:12:35 +08:00
2026-08-25 18:35:56 +08:00
2026-08-25 18:35:56 +08:00
2026-08-25 18:44:38 +08:00
2026-08-25 18:41:37 +08:00
2026-08-25 19:12:35 +08:00
2026-08-25 18:23:34 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-26 00:49:01 +08:00
2026-08-26 00:49:01 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-26 02:35:42 +08:00
2026-08-26 02:35:42 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-27 17:58:32 +08:00
2026-08-25 18:12:43 +08:00
2026-08-26 14:17:58 +08:00
2026-08-25 19:12:35 +08:00
2026-08-26 02:35:42 +08:00
2026-08-26 02:35:42 +08:00
2026-08-26 02:35:42 +08:00
2026-08-25 02:59:20 +08:00
2026-08-25 02:59:20 +08:00
2026-08-25 02:59:20 +08:00
2026-08-25 18:12:43 +08:00