- 输入图定案: 库内零硬件文件读, 种子=ANDROID_ID+服务端hydeviceid_config+MID, 属性层无关(X1/X2) - 真机全段解密 dump(phone_dump_hydev_full) + merge_decrypted 合入原文件 → unidbg 可直接加载 - unidbg(JDK21+patch) harness: JNI 桩(SharedPreferences日志化/Settings.Secure/NativeBridge) 金测试: androidId 加密态与 getGUID 全部与真机一致 - 遗留: NativeBridge.b(100) 原生归属库未定(非hydeviceid/udb/device-util), 当前桩替顶 - 修正结论: '单机不可铸造'判断错误, GUID=b(100)=f(androidId密, config, MID) 输入全可控
50 lines
826 B
Plaintext
50 lines
826 B
Plaintext
.venv/
|
|
__pycache__/
|
|
*/__pycache__
|
|
*.pyc
|
|
.claude
|
|
.vscode
|
|
|
|
|
|
# 环境变量(含敏感信息,勿提交)
|
|
.env
|
|
|
|
# 运行时数据
|
|
data/
|
|
logs/
|
|
artifacts/
|
|
*.db
|
|
*.log
|
|
|
|
# geetest 临时图片
|
|
bg.jpg
|
|
fullbg.jpg
|
|
slice.jpg
|
|
|
|
# 虎牙登录抓包证据(含有效登录 token / 手机号掩码,勿提交)
|
|
evidence/huya_token.txt
|
|
evidence/wup_response_login.bin
|
|
evidence/wup_response_new_session.bin
|
|
|
|
# Node 依赖
|
|
**/node_modules/
|
|
web/frontend/dist/
|
|
data/web.db
|
|
.DS_Store
|
|
.reasonix/
|
|
.tmp_reverse/
|
|
apks/
|
|
evidence/qr_login_success.json
|
|
evidence/final_capture.json
|
|
evidence/final_wupdata.bin
|
|
evidence/frida_cred_dump.json
|
|
|
|
work/
|
|
|
|
# unidbg vendor + 构建产物 (tools/unidbg/ 是第三方仓库克隆, 保留 hydev 源码)
|
|
tools/unidbg/*
|
|
!tools/unidbg/hydev/
|
|
tools/unidbg/hydev/so/
|
|
tools/unidbg/hydev/out/
|
|
tools/unidbg/hydev/target/
|