yml2213
0c6aff6a6d
核心结论:
- 32hex hdid (WUP 登录帧 field1.tag0) = com.huya.security.hydeviceid.NativeEntry.getGUID()
- 金样本 ed0db8 为金样本设备 GUID; 当前真机 M2102J2SC getGUID()=0a7dfaa882938a6ab502511452142c57(稳定)
- NativeEntry 全字段: getGUID(32hex)/getCDID(40hex)/getHDID(40hex)/getMID(16hex)/getSDID(base64 safedeviceid)
- 单机不可铸造: 改 serialno/ANDROID_ID/删files/hydevice持久化 均不变(硬锚底层硬件)
- libhydeviceid.so 为 OLLVM+datadiv 壳; 用 dlopen->JNI_OnLoad->RegisterNatives(env表索引215) 绕开混淆
脚本: phone_probe_registernatives2(注册表)/phone_java_call_nativeentry(Java读getGUID)/phone_read_hdid(native hook)
phone_dump_hydev(dump解密so)/phone_probe_login_frame(登录帧)/arm64_disasm(反汇编)
证据: hdid_regtable/java_nativeentry/hdid_read/login_frames/hdid_probe* + libhydeviceid_{original,dump}.so
32 lines
695 B
JSON
32 lines
695 B
JSON
{
|
|
"read": null,
|
|
"nativetrap": [],
|
|
"detached": [
|
|
{
|
|
"reason": "process-terminated",
|
|
"detail": "None"
|
|
}
|
|
],
|
|
"getvals": [
|
|
{
|
|
"type": "getval",
|
|
"name": "getCDID",
|
|
"str": "02df398797432eadefcc12767119ad5e80999389"
|
|
},
|
|
{
|
|
"type": "getval",
|
|
"name": "getHDID",
|
|
"str": "7c5387e0539c023c31c4ff0e807e7256117385ee"
|
|
},
|
|
{
|
|
"type": "getval",
|
|
"name": "getSDID",
|
|
"str": "PQwemAN9NHkZKoMqJ1jkwhIypqMTaQEOrmXr37xQVhQZq7D8uCKpS0FntlUjmpcZ4PnIwGtXSr+w2NnEM5QpuwVPuPhSRxBjPEjt1XPta6E6IvWxsSculivOJlC9qSOAjmzk9EFJeJU+0K1drfzcBKL5v8hMLabmzr76aYoVFExaEgA7lzs="
|
|
},
|
|
{
|
|
"type": "getval",
|
|
"name": "getHDID",
|
|
"str": "7c5387e0539c023c31c4ff0e807e7256117385ee"
|
|
}
|
|
]
|
|
} |