yml2213
39c516b71b
- hook_str_magic.js: dfpReport/hyudbwebuif字符串过滤替代魔数(不漏轮次) + 全量请求dump - 采样集: golden+f1..f4+新身份B(0647) — 新身份头12B=旧身份一致(nonce与身份无关) - nonce块: [7cda][版本][69c9f5][计数递增][稳定段] ; 运行时路线终态(Java桥/co-located/回溯全闭) - 触发-捕获-存档 ~40s/轮 全自动; evidence/dfp_live/ 齐全
25 lines
9.8 KiB
JSON
25 lines
9.8 KiB
JSON
{"event": "ssl-hooked", "module": "libjavacrypto.so"}
|
|
{"event": "ssl-hooked", "module": "libssl.so"}
|
|
{"event": "ssl-hooked", "module": "libhyssl.so"}
|
|
{"event": "ssl-hooked", "module": "libmarsstn.so"}
|
|
{"event": "ssl-hooked", "module": "libhyquic.so"}
|
|
{"event": "ssl-hooked", "module": "libngtcp2_crypto_boringssl.so"}
|
|
{"event": "ssl-hooked", "module": "libposix_quic_ngtcp.so"}
|
|
{"event": "ssl-hooked", "module": "libhysignalcore.so"}
|
|
{"event": "ssl-hooked", "module": "libhymediatrans.so"}
|
|
{"event": "ssl-hooked", "module": "libYCloudLive.so"}
|
|
{"event": "ssl-hooked", "module": "libhydt.so"}
|
|
{"event": "ssl-heartbeat", "module": "libssl.so", "writes": 40}
|
|
{"event": "ssl-heartbeat", "module": "libjavacrypto.so", "writes": 80}
|
|
{"event": "ssl-heartbeat", "module": "libhysignalcore.so", "writes": 120}
|
|
{"event": "ssl-heartbeat", "module": "libYCloudLive.so", "writes": 160}
|
|
{"event": "ssl-heartbeat", "module": "libmarsstn.so", "writes": 200}
|
|
{"event": "ssl-heartbeat", "module": "libhymediatrans.so", "writes": 240}
|
|
{"event": "ssl-heartbeat", "module": "libhymediatrans.so", "writes": 280}
|
|
{"event": "ssl-heartbeat", "module": "libhysignalcore.so", "writes": 320}
|
|
{"event": "ssl-heartbeat", "module": "libhyquic.so", "writes": 360}
|
|
{"event": "ssl-heartbeat", "module": "libhymediatrans.so", "writes": 400}
|
|
{"event": "ssl-heartbeat", "module": "libhymediatrans.so", "writes": 440}
|
|
{"event": "str-magic", "module": "libjavacrypto.so", "num": 4175, "full": "504f5354202f20485454502f312e310d0a692d7665723a20310d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6f637465742d73747265616d0d0a436f6e74656e742d4c656e6774683a20333938380d0a486f73743a2077736170692e687579612e636f6d0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570742d456e636f64696e673a20677a69700d0a557365722d4167656e743a206f6b687474702f332e31342e390d0a0d0a00000f9410032c3c4c560c68757961756462776562756966096466705265706f72747d00010f680800010604745265711d00010f5a0a06001607616e64726f69642d00010f44571882cf664bb39401ee7cda0189c8f5089e4c48e3ec071355a75fcdd56d2ec0d581358054ba8c4ddb948b50d3e74780f13ee1b36b6e1c4ce0d82016c4ade4b4188b621f563f98e6a53d8f27e4efa652787d75b66ea240fc98e02e93885d8bb176a39d37c38ed14e37f0fea3d36cea20985203c8d343dc8f043987700646bc9aa6bc81ea741618d04df4d184da4529781e0591486afc1f8857c23d1ce4949071f36a9099a86c59b46e3324eb20857c874e7c5826ef9256c278d3d2fb22bf89f3e85ef50e178480d40b2d8e29267846019e6cca3770ec8688114de9c43f3e1d4e6f609da42e9b3ab13bf3a7828621b735bf7c9b2596ab28606411a7d82c6457a9b5e22688ede807e17c00219077a90af0cf0912adce7caefbc5b647044358cf117b2c1c59d904e0bd0731442b4911cacd8b7a615ccd117fa0d5857b6000807066e89aebdc800d218e79f8eba60733307bf0c314dd65df9449bd46f1c1f3c4d0fea67132cfa583ed03d44cf6fb1b756b0636d0fa44b117191f5aa677a41ad967dd6fee6e93eb3dddcedaf1e8eb5212a4405e904feae9a13c88f7064025d7b9de56b2aee9cdf24bfc78f648eb5c4f3d2c2db0abf5e96553765d15ccd43cbd238160c41950680be4432a68601d5442cb3761bd75c6e2f63b6136e75ee50b92e5a807036388bbd4b2a3ad51946c89c6bb7da171cd1fa3295176d36520015f7a5dfa862f1bdefc58aba0a8d1cabc02b9472d8c3bef79bfa4f1ee214f7e411b96fbc19114dcfb1a50057a6a5f6d2428169b30f40b7ae0838ac5ffd7c2ddf086933c43cc61490c0b0a78534523fd4dcbd93c27148a6698de901563a3f66376e4eb73e69255da91d141056a7dec540ff2fd1edd802f83ad1cb83b6d2628bd29607977117330bf7ac8e146d1369c3c38e2de9307d9168992c94001fcd217032521cf86b91a68e54644414b98c306d476b4d120f6365d98c288f482cdc75e7039e4ea7141695b5fae6740e088f84743247ef755a0db45f963fc5212fd26f30219870712b753894e608887f0bcaafb4fa95b56b0412b8af28b7049058a9a36ffd54e1de3b28b425a1ee092c3233ef62095e4b93fed2bde08c8deb7950b4ecf4d1214d4db87c690fd9a620f3cdf413c1cdd75e6291590519cc628741951ff7145ab585297790bb70c14da7aeeaf085a133383eab494f091303a1d3a253cadcd593635eac1a3f5f9286ed58a2fd9a5f80918f428f6b70d512d8d1b0bd2f9ac5bad08a60d32b13b08013da09f70a63c1eb5242ee36294840ca7fd2f7d00180a4f9a5cb252e4e805127ce6434e2c246c92eb1c39b0ebaf415317b4cdacb40aeaf14714c70251a1671ab2a560d7f0882411aa68d6e013c5aed26e475e3620142e0889593874950b70c2e6a62df6fc518f85a33a52a7f0deb732e94783b582c7833362b37e901a7c1dfe6ee0707762fc7ed9ac96c4e5d2f8ba6ab43445e3c0584fff2eeb9e5f8b0bde7ad2529eb9e1afa12b8e5fc25f158b8f22a2205541b07e9ea8e96ae30fa98b7a9b8cae50449741da4a726c9e9ff1bdae7899ee63bf55d02e4580903d829e496f8d9f7dc9ca05a107124d9e7da847edbd54c26f4a3a26d5e878a6eaca75779b00b732e7fd8f2f26916d53ad145bda0a6db8e5b5fb32816199e3b4d3fea622238d53d12e381f0a3beaa66d155f992b8471028f6dffd50b8383f7bb6679c1eda380cf13c562168b527fe681f68417a998058f2d869628fad76d5b53d9013005d4a8c618f2ce09d8115360482c8ef759a53901fe7ad7d6f0e5daf0c03ef44272567e172d7292542fae3d792d535f4437498f9425e4975a39afee9d13da7f9a0f823289e0e890d963a98e6accb28699f8a4a3839143dcbe308b4d8676ab3239758a20dbe7bd92d4b9c165591af01d1b8d15290b97306b15f7e9bc6da4f4037f554b5bf2854cf6987d39c93de90811c2c00d23e00a91de31b0ad5ce33cfbd851d3c6fee63875bc519debff66886941957e66e06e8e82b56d1e0ac2c8e657d1072171ac857c6912fb1de7fbd172fd2d5cadf934897e4c728e5429a987701414b2f3036f70e4647551cb1adb494f439c5887509f5b7d5e39623d76c25b462739ba074a6227852e3d5fda8a09b2d31e8a82408623174f3e15a761b38921df7f99db63ad4f2e3eb817c3293ad3aa9c139edaaaf7167d0c6e3beac67e63775b2405f78c9756afcc7044388056dbdfb3415795c2c9238f3188f238c2c018588d32886c08caeadf2e63f0eee738186ba6bb37ce9c3fcd75c508828c2a6a9ce5991159f2da749bd801d994ab89bd739ef60dc0d5bdfac2011e74e8ea96dc9239449a7454ccb6ef0d2e62aa5e88258ea8049ad730a9301567b5bf143233830963cd2a15a6b803c3bb5e37f808f9bf8e899d24bef63cb53b0ab9d0f8c5f1a82d5652c766e03487aafa01619bdbf67dcc0ff7e5ef9c83da5c055b25c11d6e489ac868a8072fd6dcb0d52488c60620f216cbce46b96a126ae9c5699dbae188695b00754e0fb9b0c3f4bb4983c3a9c95f8051ba4d4bde76176dc9ccd8d5b41e91f5f901c1966f0d3d9310c20139558fded62ef32cd9d37a6d0d036226a4a6887001a1c6750a8a81176b01af61ee4ce343bdb35e2d1a39cf782b0bd58df448fe4bc6d8e120d9b08c7481ad58cfb4be8de6ce0f3c95b9bc583600f9a8d8dbacfdb612c64bff838e5a32500fd4cd00bacc956bffc39ffe63be6ff00beb5386ad3668fd7d251e5f4598abfa40622cf7b9a1d2cef3a657f4bfb0b90e97cb6bffbb8c8c843dbda5a6016c709fb9062097dcca8896d8266f3651c220f1426c16e4be087bdb6b2e4c74829e559d713431386a34608c774cf9274995f351851568ab7bded6834b00e1d8e0471b438bdfae3bed1cc7327344dff3694374beb97750b15e70b8fa3ec0b024ef7b8e6260677ad12788f472a5f69739952a69490697d15e161d37fef4991cbff9385649cba72571f859b51e7d6dcb045b55d9261fe6c2b65ebe3f454bd2a8756425158a67b28301fcce6e3f5569645273170a21b3f00eea52795c907092cae3d66f96c12e44624b7ffbed023e47fffc073e9689dee9386071d0789f55a6ee047853c50e4f2527470536294469496cbaf76fd2c6ef81343f18bbfb4bb9a3d0271a4b67008b8e3c80556397437ade42bc37f243ccba7306b1f1b0096fa24a3e2f62ecba57b65b429f58b9c801b190bb4f92399e8440f239e695f5b02ebedac6a087539857c95f72632913c336747ad53477f8b795588682fc76bdd54b3a4aece39edda35aeba0c2180574b2b4b5a99a6f5aa1d3aae818ac83d73269e9b5563df3995217412db0c03de31db7847553457ceb4c72a4ff7c8601268dc78f34ec01f10fb2bdcf015cb976cdc26481ae99280b0830afa5825ec83ba1e8151ce4bd838c28f633ab466cca216910812aff13c7611ff3f2bc639a2b1dd6a118fa502ec4ff83e000ab674a126c1231b2f46be3bb62c300fda5dd84ea3edf7db3ff23f2d00be7481418b7e0b795adc355a4c894de7d00a1af2c09155304e5a48b40da4a54d16d8533bcbc1601cb961e2fc8486ec58937bd92cf647bed85bcc43ade400f02b45495b092fad3cf3185115534973d9b6166cc45570f3a963133916668effe98004718996e6cf0613455a6d612262cdca702f82413ccee6e23dc9c3735060f07635143ee024bc82067aa304c5bc36eb200b54708b91ef1f13f05aaf44754de2d0091c36d47f777513ed9d3f12086a9b0c984793c30ec8e5881dafd5af3bd29499fb346d45cb5e28343d802245d2df1328387a308d9f1ed7f5a6af521f72d3c00a89d5c213bea9231cdf900172a4b8207c3703ad29c327c0f179c6696fbdf0b8b057f09d032748f6b174d254d7412cf3217284a03090f18125839ccdcd4fa540c7ef554f8a5eb8a61db1a5972659f45a2a49780f2d10b72b53762652305d308493175c3eff6988def1e629b472a2c6db2ab6ef9760cfc92a43c631dd89258e6976ba92b8ab0102ee65cd32736b4619c614d799da36d87dd19e5bc77062dd982aad8196a928127f2073aae08559a01e357c56938a212d684bed22c0ca05c04c96582c5b5499572084cb1298c25624a925938ef6aa8572dfc96f8a86a0ee04f8519cc59bd7b7303b16c69a300ee30dd6d2fe497cecbec05acf703bbcffa7cabd9ac87fd4ec09de825e6ef6f3eefba75332eb980792d089847b67bbeab4fb373f77fd24ee430de8f071886e36e15a8eb60100f40a185bf2c6f5284b0927a20e08784fd95e13a8046af32843665d03b3d943cc6752a75172895bf9562e811931b89f4589cc09da23c6088e700adcd0b14be505c95dc44de96a8e4698f8f838fc00c6e9826e11e09795d9c3f8385158c48ff212e7fbcd5105cd5ae97d94bbb2d316221161a1ea0c7a3452bba68a0325fd8e92d7deb955895f3802685a7e06eff8b354e29857d3db13f2259e22c7b33f69538988a64e722b86bddfdd8584bd50962d89a6a22767ba3588fafb96d7f104de7b3155602e4af7c9d2e08bd59fab727a7d738d75f8057c6063e75c5121f58642e3a551d9963f2dff362202bc7e3be19070f1ca14bdba38d6ec1dd85e32ddcd5eba48c877353dfcaf66fd0e706ed8dba3b7775d7385049f30bd6aadd6c9569f10c723a1193ab0af605305c4d7cf54b27dd5e0d127eba1c76e771203a0f6f7ca542cd3e5950d34a35e3119bffc415fc2351b1bf718b7a1ac67b3fc7378238bc69eac1307e2c261956ee094a76fb769aff0478bb0e89569eac8e6d37ffefb2d85093c61b8d2e04d50f5c9ccaf921f7caa48b4d9a7ae008166d002e693395f3e3a2816358c3b837c2549d1c8b241f9abafe435a646d79db04a1d41ba392af7e3c765401f29952ace4087a7808ad2ef0bf1f71bdb238a2c464b3cb16ddc9e7f867ba86a79dbe29b42f95adb082439c290465b16f8616023fed8727efb6415f1a776962763e9226754276de9b93532f642a0971f58d28d12572ec734d0e627eb0f0b00353f0b1300ff60a0e6d9fc00cdc3a5f9de1bc1115dbe0d91ed505e45653e4336282d9de073a4c97d9c898e76230e81768fb1cb105b9d15735f5cc09aedcbaa7ab3cb585a87082089bf8795d4e13982a88949e16b202f896bd74c7c6f6b12da19eb6d8fe3d36d29aa9b180139d4f3fe8a8b3aff06ae7808fe1c6157c210b31d204a5a1e5c1ac35083073ff9cd132494c8ad0a750b65a359a8315f80e2d728005a194929f070c6ccad426a1447e984fc6f92d0e7f14c63e37c67f4fe417e4503b57b2b305590400334427b2a2d0aa81b58b83718ff5e3a491dcba559ac06b62e13dab010c8644b8784cf87a0bee5045fb9e7fb2f7b00b160be54448b2916564b25d3f9c8c51718e13a3854217a8e02c82f65d59a79fc75c19f295932715df6678d58a944aa2034062fa1595aca64313eaf14c70fe65cccec8aa929f45e33a5e35997dd4f67e1cae69aa7b69b106bb8215a1189ccd6f4196c8d44310673600400c0b8c980ca80c", "bt": "libjavacrypto.so!0x38c48 <- libart.so!0x13ded8 <- libart.so!0x1347ec <- libart.so!0x1a9a98 <- libart.so!0x31b110 <- libart.so!0x3124fc <- libart.so!0x685858 <- libart.so!0x12ec98 <- libart.so!0x67f940 <- libart.so!0x12e818"}
|
|
{"event": "co-done", "n": 0, "regions": 5}
|