yml2213
70621cff8f
- 输入图定案: 库内零硬件文件读, 种子=ANDROID_ID+服务端hydeviceid_config+MID, 属性层无关(X1/X2) - 真机全段解密 dump(phone_dump_hydev_full) + merge_decrypted 合入原文件 → unidbg 可直接加载 - unidbg(JDK21+patch) harness: JNI 桩(SharedPreferences日志化/Settings.Secure/NativeBridge) 金测试: androidId 加密态与 getGUID 全部与真机一致 - 遗留: NativeBridge.b(100) 原生归属库未定(非hydeviceid/udb/device-util), 当前桩替顶 - 修正结论: '单机不可铸造'判断错误, GUID=b(100)=f(androidId密, config, MID) 输入全可控
10 lines
425 B
JSON
10 lines
425 B
JSON
{
|
|
"vals": {
|
|
"getGUID": "0a7dfaa882938a6ab502511452142c57",
|
|
"getMID": "1e8bdf7d4f7a01d3",
|
|
"getCDID": "02df398797432eadefcc12767119ad5e80999389",
|
|
"getSDID": "PQwemAN9NHkZKoMqJ3aYKBIypqMTaQEOrmXr37xQVhQZq7X9uCKpS0FntlUjorM51M7A+n5jTYH2s6G/epsAgD1J4o4TRi5qF2bUohDYFLkdX9Wc8woPhivOJlSPt3TwimDu5zUGYJIf0L9niobPW5v/kO5lLKLH7LecKL1HMgdCGQppmkE=",
|
|
"getHDID": "7c5387e0539c023c31c4ff0e807e7256117385ee"
|
|
},
|
|
"detached": []
|
|
} |