星巴克APP逆向

星巴克APP

版本

10.15.0 邦邦加固

接口分析

https://bff.starbucks.com.cn/app-bff-api/login
POST
{"loginType": "BASIC","lang": "zh_CN","x-signature": "version=2,channel=02101500,nonce=1757918216581,sign=bJe9lh4iScKIaWKRxZDYkZqY8OSdmOsaJ+aWwa3fzUdlmj3bncFZqc0K8Ln1acOXRnJPbjmEbisCJwLb4uFozNdKXt4CWBv/uGZniOxtI+SNCXDrIC2xpKHy6kOvSK9OzAjl5Cq8A8mn/qgfVTR1iC5qRxZwdfgWhsnkDc9PZzLnp54Wov9xUfa81PVVa3E88bafaNuGei0xzYX75lPUH2Wje9zTCUtrdgyUj1XDAH8klZe9jhPACKjI8NKPj417ibT+fYEEC4gbCFkdyj8ec6vh4ApKqw5q/X6PL4kLGtLNE9vIp5xnxKCB7pHWJ2AgQ47tKMpktwtQW/Jo0hNTRQ==","X-Tingyun-Id": "4Nl_NnGbjwY;c=2;r=1660230178;","X-Tingyun": "c=A|-cBKeDjce4U;","Host": "bff.starbucks.com.cn","User-Agent": "com.starbucks.cn/10.15.0","x-bs-device-id": "eVqxKjlDn4DgOqpJlYQsz877bifACcEjzVRDKu09gCbWtCNaSb7jbHI71yvaKlpDqxjFX7Pt_rsocmlGJ3jnatIq2ZpT0NdJz7evffEBN2gLOwAa-EL0tq2EzrU0eNRyKfK0Ncb82zPt4FuqU1dXAyeRcvyrB9T5","X-XHPAcPXq-g": "IIusQ20a9dHThJeIhbZ_UQa2jz7QACmzeN3y55BBDCDzEjOG5rcIDUmyBPh_gaoajbfFxnZFTYVhZ5I1dNENW8oV22yupdwQD0TphhHWHvfGtF7Ezeu0FZvkIsi-hV8F_CU9Ha6r8rCxcoXwTsJN0_Bxcx8xFPgjQ9gWoOAflVjVE_fDLIO9slLN1-Xzc8IHdau3Ts7bDu3mSdjXlkTPNGV-FIfqUvMSVKu_UJeNqqFADSmX6q59XsNI9P1mE6nfIDUWXY17egSEWKyy1TzVK-JT1ljFaWWPG45rXWcWMxKBcSC9sC6iiPrNVk1bz7wW9ybWeFZtTSbOd8TqVXaGEvGXuAoRWH_FEk-xV4FFewwjojIJKttu8p06QBTqnPJDoNyFzWg0Ti4MihSi1j0RkUAF5lPGZPaEjC9ZYW5PoAF4vlEjKGwtFZ7pYinUiBEN9LD17LCQRrtW3Y0V81SMiIoxvbSdE2NT1YsXc4vjQyBgyAyyo6LrpjRrv1oHOsvFFLVYO8T7iY4BGiw4WXLIId2cQ2Z6ObEcwAKsjHuF4Uh38834gkQ0Ugu0OX6EwLl9ulWoaNaj74v0jbZqSdEOk8uoYWSLqyLO49IAdOoIgobgAx05ICruLqLwuJjOufZtU-zb5NW_LBh4GqFWSvOk5acYGeSPIiAiIdgB-NXl3TE83ztApErE_vcKqkr-0ZzrjxSZCdCHKGGiMmRutcW8TolQQsN06WD96BhLbT1_xW_oJT7oXiRv8hj3J2L2FDtGv5rnPympGVOa7jlxO-NHjRzHsHaptfwUo3dUmPOGgv0NWWUQ7teLRojaT3xdQrYNZ06a37kUOcKphncUnLqsoCgv0ELkT2Eyejqc2wq_R3rUKLAJRH76auRg41lMTHukoeCIWNzYP5SEpsI7H7yVXq1eZgWNrRVo37bTKTFV9u5U-kwUSjBqYoIN0SOBgG-0cpqyHWhqdYUxJcrFmvPU0E_Bh5SrikSCgLRC16QGtEQsVmEPUC0_950zr4uFXqCMYlToYsJ9dikZnIWv2zB77I5PiPAjgDIgcTmBBonj5BZVotFUWbf5-SMahVJ1nY5bdxk4kxLa0RT9a3fdghiHsQm1gd_3bahwjuCFnV1CCvBRrlgth3VEj7y1fzilTRtLZG06y4Bkf_p_mpZqPfHSCUAOX9-8tPtUwBaAmkAgvGbOcF8jGmgkvXchjMM5K-uixRkesKOZJkBpEEWJYN9_0O9Q-OKwebyGLGEcGeM-4XCfNME7KmS-ckCDdiIVnrg0dc5Bl3kOrMcTLr8OJHDTL3GWRoICA1yVF-OZnoKoOnq-tAsSCZZJMPHye7NVeO-yWXxGKLfd9NDG1m-C9CC02LDZZmdUzxoLWWcVOgPmFOSDp9cQul31uo4WG0i9yj_2UancEuXAOXFiCJ8t8gcguoMb4Bn49QIZ9APpGudLUWiZJFMQPHyBhvGL5VOhzjRZ63IggawzPkqRnlabrPyj52J_2Q6-bIuKFeydYmDTSNJfnBJa7uTmu_ZXUbM6S0sP6lpjRQumnnKNeEYpl6xywtyqDtjffzeo-fIR8kwItrVr855XjwgXddPNwLxFy2qrEqu8_YLuWjKPkP441HPT8TBd-9mHE_11MkEmEI_xR9rDNp5X8SirfvwXD0Ark92Ew9e3VIbiCLc2FRLirTsv4tRPSKVzmslU8p3nCkPcnZEdYfVcORLtGakMHqKtYtj-w1cgz4TmAQxf-dlTKKoQHVvR8vyYjSq9OSIczSUBn1l6uMmXT5oZ_BqsC38UKpW-K_ADRfBXJ9VoJIKpoQ0349hMPJB6JCNYFtUIN00-RqLmmhjk1d-e4-JDbUqG6JV3af9YaRhudJQbnvIcTiFlm2d9kNDVR-RxaUXV_MyxCyFabTXhHZLy8x5gQcYdIgP_ybC9O3VWuMvKvW6NUh0Z5v4enOM9uhfXvq7pu9dnA1P87rq2d0q0awG7RWDSMCtRSofuTgfZwAXalbhBYP0z-LecPqhfCEDMgm4sAAFdAqUL2zr6p4MmBb1hD2twS5mAKfL_FH2gGrednubBmqeZWUcSFEa6AgTaMayovZxuOcO3RipC3a-LD3-gVOGWeOhKOvzn1a5t_JKNo6ziJLWOZ7rdFi2eVtWPislJZ2_MYIe2js7dEUmQ3_L8IS73bM1KHqlCdkFPB4KCuJ43LULgA1WpwzPam0QBOoXJw_kjltnBAPo5PQhbozLd4UGFTtmEBjUvVJkIkZ2haWG7482yM9CXGvSmtN3FmY2VKKq9WUaVuxUWQdB4D5H_tSDIi32-hBk0gHAwQUkPLo1dHs4IHehQCT72MSfcM5K-mRzUjorLAR9D5LWZLhQrKQQZ0Ta1KnYL_nPOE4jQfNopkaOrsvpOrmZr71NCMXEE9HBeyLCbFxCg9i2kBd1TriaL4Iu2JVrxB9SynHPXBiFFj3WYuLg5a89hBrzyBo___FfWjxv-fl8HJiuXgEI7334C_yBcxg0jp30XQLGEdKAnIRmkDm7tpCHyFiK1I0E5GXzJ6CUFlmVKwGgFldnVMEY9uNx4J5InDCd6j7Fx1zvlB3hM0nvYg3N0r_sWl2nacXuQXUFVfd8-EUdBdXNX_a-wS1ZVPsb4VtMq2ODywQz6Sg-RlX7aRIgsLtEzjcS5mcOPdTNokRTibndcH9aKwlDUAow7B9A=;pFmiZCHdbEcgtu73x9Lz3c-5QghsA3t6SPhKsHPXyyg=;g","X-XHPAcPXq-e": "b;Oiiitnv0k-C9Yh9c_6ilCrOzqerdBzA7qLRar6_smdREmRcODW6m8vmN-JK67q9eJiPBKTRM6Cy0TQpOXWMMKjlOaJPMQtHpPu5GPOnyuCLtAesS0846GdDkXULe1gluBSKWN04Atin4zt5tjCqmPGAntfguDF3QbNHUvKp79XC4soJX5RJhdMT4p-q2PO15rHRBHTpOvDq5vPvdbTPffcZnLd7TRQR_In3Fmcc0mgEQJVn_JJwpMKgqo66OMaeOdKjYo5d-mHxjDjya9u9nkm6k1KlZ5bA-MC3B25FEmbf0DnOyZFwQsJim8PWRd1rvoRqTYIkXHhcY4MQbJj4M81WoVLtLL4Hfx886czil-YAFf6IsQjLFXCY2ufbB6kdymQzEUQxsh1ZhLPgqz-nGHA-2LvKO5NA3dqbFmO1uSwYwSgz3sn-oxCgB6CynlOICLM_1zSi0l3HUVoVvbqbrQMj1pzAn-vQM92c5Z8NE88HOwQZiVw27MoUAvYTV3gW2finNGKENS3SyaGoygEzo03DguptoCTvwvIpoWllpAr5i3pTh1oArHIPBuGAOUiK2FQ4QyeCQzdiIrZwcXkRcMeIP3cRQVXj18Fg_9bigvb_l7y2f5RkX-hyZejF6b4c1dyX1O2OOFotfNTI0KsjYVmBDnGzRgpUjFEcSetgf3QN7EE-K3pdEPMxkgOplIIIh6Dunrf1veXd3IR3emk_M588ai5icNyU2KcfenliaSiggjFoyUR2tHANICCaMfH7zQgmhcmB6FOBtOuH8Y0OPWQd6RMvDuiCf85YE4Nm5Pf1tvtlpkRhPm-mdVt3KyDkKJBeJC-QDPrxty-cSXoIceEgeNMbDq_S5udkrIDbNB8YhQy_MRxey0LHq4ofmtFY7OjKTBGN22VyfPIhMmLvm3ZjwenKpAgx3C73nxYjOOcte71M=;12eGpyI9GAkB9SLKfDx8P0lmvNni_6xw3CQlZp4GoCk=","X-XHPAcPXq-f": "A5elFkyZAQAAn6PtQXRtU8tJ9f6JmxQdw_uppvCqDSstgb6HXnR-I4y_NzgwAXDmywAAAAAAAAAAAAAAAAAAAA==","X-XHPAcPXq-c": "ACB6FUyZAQAAcSmBXchyZNYDtSHAk033xzvB6bQnJ7FuVqobdO1gCws-izfo","X-XHPAcPXq-d": "ABbAkACQgrKAgACAA4AQkECACICOwAGAAIBAhAChGIAAgIAU7WALCz6LN-j_____tE_azgG0X5YcjoTbhSes1VDKbe4K","X-XHPAcPXq-a": "rnTT=yTSf1-gfeBxWZS0ccInRL9sqXLAMJbEUvsbUlS2iSFMehr2wh_52=zbB=RA=jM3KYg6PizwH7AmTufH9oQyHDAaxJXo5kHWDVgVkJ9_2mYlEjIM7WCVXt=VKYKuCCqzAhsRsMVR9aToi0Bq4fIprBbnbDVtucttHArY8bCVM464jD7yWyet8Jmjtcvq7FnSx_Hs-LFzzXpuiAbOhKUeL8pbUgPYO_eikbrMXm7ThF8KRiZlu=bYbbHoUxyrLibzsAPoGvMjnJ2VsF4lHmuMMVO0UW_c2qn__gnjp1f8hNE-Zx3hrmlsi3OqRW8Y=4DTaoZJ2qIFvRGzvg-y8cBkMP7v15U3HoSVKBLHzT0utZNfTYBYcrDT-G16yt6sCPL13LrO866NAGv7xx33SasuWf6bQ0b3e-IRjU4UZjiY-k81X1ZGWUcxjFQ=XnmwzuW31QiGf3FL1a9r5-64l9v3xLZ5OWY7NemnCHr5I5hYD8kcvRUbpNv447YZjv9Q=mhhCQc_0E8HkzNlCBZoVmVAKmgiNJ3PT2DkpTiQRwmQBGhIw-Nabe0836T0KEJV=iLOmtFFqFlO=HPb8LS4P2Tmw0FViO_-N83bQp07tR8-rrhsWHIvnMj1awDtoyh8IOWLc6RLo25NW4AZ8b0bwMVxT9QHhlinYLZ8F2sQXJSWzeRXJjix5-h6FzhyNvlRg98wubttRvhPAE=GBOrJSWALGyjKtj_lQbV=g1OmNYOPSQhm8jzO_0zp0HvGaVW67PLRvO_9aPRGbniC1VzA4UFcGXaF67Gj2Wk1y0uj=9CLOLtpo0tgjBCyq=WZHsJXNfKRIl3xH-uRZ5khiosqjlPpBx8jDpOfMV-Bamc_ePhHphBhisssp=m=MX9lgqX_t3-cFcncixwlC=r6j1PPjWPN1BLhZiCDYzUXH_b-YPfZ_lvmvw-2E9PBIzA2JVoxZheZsSjP_mHZL=Yh5cOmx90N46rNZSMc0b=6UK2BoXPHJSfxoFnGFv86D223FnxI9KtN8fyyTxUY=3xtLtuSNrbn_9ghl96UlHOK0eHToLeQBeFBLjWIsoVJ=M6XAzYsi_Q3QHcXlHNGoE=twSRwJn9iX2-a7iztPLl9IHmVUr3J5ZwiLYnIu07pI=i7TuDDX4UiuBxI5x334DrICEeJN07IxkbfaDZi14zcaLw25micLu7m4gS3NE7zm1Z1w2M0MusthTIQKDqhBlVl9U1KMx0hlUJel6tspWVByztJ6vzS4Rkew5i7oRcGaNMlNswiqkCXSYUOn1SNKitZWw9EPJDPkJ5yz5DQY8PBhD6yy293DM0uIco2r8ygbog098Nc1K3D=tKuxiIsxTr7G=0=9G0GPYaAgGlvHRmFythfZfsvZtb7jcJJ92c4YFZGQr4vF1fQvN1MqRS_Nejb8lF9RAhtf3UnH3-Pj0vDKW0ph4zwvg0yOuV_M4HUhbCWmQyWe21gr_JlzJCB4FzPcQ=YpZoiMz_iSO9OotwP1LyrVmeZijQcpyKezDCEFabElOlElT_=W_xSyo4zrRSzzhJ3YfMUETLH-VVvqe-r3-PZRWp28cqe0lsCSKA5V9biDCfQGh3prexZtnxZn_T9pWlm44gccZq13y1SrsoCVEsL=ro96ACxJMaz9=wMkH4I-MVhzrRJNQl=jMcr9Y6KOkTHo6xjY_G7gN9ZipSt20G_2ZQEO5M9xZT9FDhJQPkuuQUlU7mti_Kl7QvuIstIYB4ZIFScaRsQ6zSFqI2-QcBwkFah2-icIfgjmqhylM==3zPWt8piREmuZvf5G=31R4CHZGFu7HAibTcPYp=vg7fVtR9RWfC8jI9ymtmsX59_2OsCU1XI5h4JbRXms17Ycfc5NczTspcebZvza6HyLJYAW=0JYHQy1E6TU3VgMwsUWe3=W7iD6GKS-Uejvcy6-bFuyRg-HfyZ3Mam5JUsIZFYH7oaVbYe3Er5pYgjG3-UlzisyqeohLQDBF0ogr=CyfExPZDke9uEVwmuXOp5WLYicxnY0i_43J=TU5LHAM5VGf8ljbWvqXnB_vu27ODK99T_yP7F8BJ=BxKAi25h8fWsLoTEIrpH7ye820bqOY9aVG4w8OcKTZKjH9V5YPXgTkQJWF4e_QapsbQHxyrgQW9XHoByJgcEMUkXAeBGFh8CZ=-OhU=mqIGPaokeZqHebGuSJAQm=l3FDfsw3=J87UnqGBp2qlwY2pAYc-ZMwoXHKYeKgHvgGy6GcFRgTsFDoJEWnTIpl=sXi3tjB59-UWxVyFjXh7t7oVcQWh90rSx=sOLN4zrcuMaaEMiiWh2ezPHnqLc9H0yPRGAZ34MNqvhYDk1subc1Q0gGCTBlqY9p34ajQxReYHX2DHASJSpfJxg-qpqOmYUmit_3UGVr2qPeKaFSQDcUvlHIr_zcz6-m4rzfsRLMX2DaqHca4fjlkEAXDR7QruUDgrL2W6iqEBjzoFHHL5PCFpoANf__H0xo-wbmQoQ-c1cSAEARHool=n2Ltp7_CfZpTS0TvSMh-9hK0Ir8JNWkSPtaMk1jlPR2QNxbv6=3k1SHBPfVeyrMjR=Fvcl_hfz6qKgR2FFn772J7uH5UeM4qbxFgy6-4=p3OSqIVsK5saqeyclkmQ=JilHYDIq7PWIAxJVFfA4_3nWqu9JJNtewR8UsypmvXMJTNgBeava7F5loRgmgnDlK3q2rQmmBpARlWEWIEf=V9lhcWa6KVR6Kxgja-oaruxTVV=BqMlnJYDJ-VSrY3znEXiNAojFsEuWmsTxmcbL41Auxcywt1yCAg08sabb0FqByvv6kbjUeg=sy=lpiPECQZTAlWPU10mEIowYpgRigKS_mw7Qg40rEg7_94PCeFJabtEz_Rt0CHaC__6pzopStVBLo2ppIZeDGZeDObot6XChSi3fTNK4zFuv1TcktcepfRTyOM5_O8zBcviz-yOEuulNyNKUk=k9Y=zLL2CwhQZOknc3FkwgONeUUrojVHGzfxbp7sV2fBwKf8ZSiWElXBsme5VaGepe8AyB42DiY-z9QgliZPI6htk8Xf_UzxJOI14lNBc=7KWbPeBoiXTajvBlSc5CBJObsZ96Lsjr1QypKA-WvxOTSDh12e3Htrb3cBZtHaTWYwwnFp1vVrE=iAUwIjO-89-rfigXozGTJJ9MhnG7_JrW_yF1mxRN7=PWP5D13GAthi9sKqLa24L_OGR0_kwfnc5gTCUPxJLWQZH9tQh2JJvaYBO3SB-nz_C3QOcX66SEI=RmwwbRhH8_iLCBokKC8=gVCb26PxYvu5OQlUL-hj43bTocLTmyKCGGLHvQ6zW=Ag_8KK7TI5v7vo8fb8tF7ZzokiObTG9r=eHOQ0UlkGI9z1K9OQptlV3vRQmqUPvctBVXZyZxXf-OHVnbclm0MI-D=5M-LWslqAUViYXJlQ3nKVKCxCqkcyFO5-x4JuexvWPR4hoQ9ZjKIBbV6Qn2IRhf9fG=fCQ99nHfVc3xX0ABcC3JMMv_kQ=ahYIuW9TqoKePhy2rVijfOu-wZDtX2=7EhylJ4xTjHiFi0wpYUx3aWjnXZtyOnL0pFQqkWuFF_BJyA0=xZ5gwCrkOPUzC3kGNgkjXfvb4Vr69cc=DgieQK5XqjNQU_bevxqSIrAbkcKNWkVEDALsxsHvt6YyQ3RW=hFyZj1LvEyz407H7nb0fAe=21Lhs0UiAbanUKHp3lh5GB4ELHMON9nrsKsIlVByM91Xe_VQFijZ-kW1uecHqGnb1YtpvSoi4BJGqCBU8C6qCHR_FhRMNJ8EeTQMyz5Xafxo_pcJ_fSLIWZi9U=J3g4J22CDgElXs4G9whU6O6e_MoEQrsbCuIyN76B4Bw3UnqjQQcYWmzez3EogOa0S1bZ=lWWkJ8PCFDvOZFYy-SUvxX592wT9ESU=OGh5Tc2G6i-6RUhKX2IiCBxq2ZROq=PKVRFfATtIyUL0Qfiq5RvW-EgK93AkEgv3UBsH72bVetvLq=P5Lokwg=xh2gG4_TW_IriLukHof_uapmGRKnJz87pxc_ti=REBB9xvrlT7ZMah0eXswsLTD6u41TBhUikwrOsuEIbw0RXPCo8tI_gK5T-n1v9nR9x3kI1sJCwZH3NowDFL8-hXBojoRGkRqkQLav0Kmbpa7RgHY_SapVPAsSoPoqG3PSWrtH3BDaNVERNHolm2tIUtPVzGK8Dgk2mzwZD95FQp3IB98AmTYnvMzuAzHyrey_=QgH9frnaIE_RDpIG2epHzkFp-slHgpBKHqYBU8nqYez-aJm2hAoUYbxNbPro2HZEBeky=asSM9RXTA_==U0wKZeo4OwyRmkSkxtfmGhc=sIPCxOoB9xIju-LW7Dk-J=HD_p6lZVSxjaCSMwww6p_ttpsP3jjv_XN934gjUH0GqTLjnwwEBm4Y7LqBRSwR0Zx9SM18b_yfT=giFIp1WBUGzTn3vc0_Tz_h9PsYoi1z=ggg6IxHxQS6sy","X-XHPAcPXq-b": "l5vpw3","X-XHPAcPXq-z": "q","x-phone-type": "ANDROID","x-app-version": "10.15.0","x-device-id": "fd478b316c854ba090bc61801b0ea452","x-language-type": "zh_CN","Authorization": "Bearer"
}{"body": "+W/GJnXjg12O/dhIOskzTynjjGzOQ8pegHVWTp/qZe/OUl+ZjbNuL7lyfKrSqa8yzJKhW5eiZG/I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\n9K9hf4zgPStVqhSatFGbmKcj09CeOCjvb/ItmjJkLw==\n"
}

body逆向

java.lang.Exceptionat android.util.Base64.encodeToString(Native Method)at nk.a.e(AES256.kt:4)at q20.b.g(LoginRepositoryImpl.kt:1)at ut.o.w(SignInService.kt:2)at ut.o.F(SignInService.kt:1)at com.starbucks.cn.ui.signIn.SignInViewModel.L0(SignInViewModel.kt:1)at com.starbucks.cn.ui.signIn.SignInViewModel.f0(Unknown Source:0)at yi0.g1.apply(Unknown Source:4)at androidx.lifecycle.p0$b.d(Transformations.java:1)at androidx.lifecycle.d0$a.d(MediatorLiveData.java:3)at androidx.lifecycle.LiveData.c(LiveData.java:6)at androidx.lifecycle.LiveData.d(LiveData.java:8)at androidx.lifecycle.LiveData.n(LiveData.java:4)at androidx.lifecycle.f0.n(MutableLiveData.java:1)at com.starbucks.cn.ui.signIn.SignInWithUserNameFragment.B1(SignInWithUserNameFragment.kt:3)at com.starbucks.cn.ui.signIn.SignInWithUserNameFragment.r1(SignInWithUserNameFragment.kt:3)at com.starbucks.cn.ui.signIn.SignInWithUserNameFragment.w0(Unknown Source:0)at yi0.w1.onClick(Unknown Source:2)at android.view.View.performClick(View.java:7259)at android.view.View.performClickInternal(View.java:7236)at android.view.View.access$3600(View.java:801)at android.view.View$PerformClick.run(View.java:27892)at android.os.Handler.handleCallback(Handler.java:883)at android.os.Handler.dispatchMessage(Handler.java:100)at android.os.Looper.loop(Looper.java:214)at android.app.ActivityThread.main(ActivityThread.java:7356)at java.lang.reflect.Method.invoke(Native Method)at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:492)at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:930)

看堆栈一定是AES 模式不确定，我们跟进看看

    public final String e(String str) {en0.p.i(str, "plainText");if (!(str.length() == 0)) {f().init(1, h(), g());Cipher f11 = f();byte[] bytes = str.getBytes(nn0.c.f36453b);en0.p.h(bytes, "this as java.lang.String).getBytes(charset)");byte[] update = f11.update(bytes);en0.p.h(update, "cipher.update(plainText.…yteArray(Charsets.UTF_8))");byte[] doFinal = f().doFinal();en0.p.h(doFinal, "cipher.doFinal()");String encodeToString = Base64.encodeToString(rm0.k.l(update, doFinal), 0);en0.p.h(encodeToString, "encodeToString(output, Base64.DEFAULT)");return encodeToString;}throw new IllegalArgumentException("Provided 'plaintext' must be a non-empty string");}str={"device":{"app_version":"10.15.0","device_external_code":"VLgIqewFr4HYa0zoP8vAachmqMI5_0QlDAedc8s1oZbPuNwhc81ces8WesV_Le3291CvUUbm2inxEDIfRfbWE5kvvAkFnHZKQIc2_PnkgFFtn2rrR5LkKSG2_jweF-Ard4FTirYfs1RkhVawzqiR41CqdsHb0er_","id":"fd478b316c854ba090bc61801b0ea452","language":"zh","latitude":"36.661696","longitude":"117.072313","manufacturer":"Google","model":"Pixel 3","os_name":"Android","os_version":"10","timezone":"Asia/Shanghai","user_agent":"Android com.starbucks.cn.baselib/10.15.0 (Pixel 3; 10)"},"password":"123456","userName":"17812345678"}
result=+W/GJnXjg12O/dhIOskzTynjjGzOQ8pegHVWTp/qZe/OUl+ZjbNuL7lyfKrSqa8yrBbToRu8AbnH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=

确定是这里，我们要看下是什么模式

Cipher.getInstance("AES/CBC/PKCS5Padding");

key iv呢

a.f36203f.b("lUhIC6cYFVCTCGRdgd************", "DTsVbqw8xd****WO("); key iv

最终成功解开

Encrypted: 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
Decrypted: {"device":{"app_version":"10.15.0","device_external_code":"VLgIqewFr4HYa0zoP8vAachmqMI5_0QlDAedc8s1oZbPuNwhc81ces8WesV_Le3291CvUUbm2inxEDIfRfbWE5kvvAkFnHZKQIc2_PnkgFFtn2rrR5LkKSG2_jweF-Ard4FTirYfs1RkhVawzqiR41CqdsHb0er_","id":"fd478b316c854ba090bc61801b0ea452","language":"zh","latitude":"36.661696","longitude":"117.072313","manufacturer":"Google","model":"Pixel 3","os_name":"Android","os_version":"10","timezone":"Asia/Shanghai","user_agent":"Android com.starbucks.cn.baselib/10.15.0 (Pixel 3; 10)"},"password":"123456","userName":"17812345678"}

x-signature逆向

version=2,        
channel=02101500, # 02+版本号10.15.00
nonce=1757924233429,# 时间戳
sign=KpnW4g+huhWQsO5psZcjrpO8yI8FB+Fip6MAt16OyCYlQGKBrxcphElrJ1jfXhvXhbgLvuZ6zKqcCaXPc3Ii1RfzZ57AEY+zpFSCmyC4Yr2KKTPW94IMCdOHSMQepk0bYkA7jB67CmNFGifRHME557YWVx4LzNE3cdsz7aT9I88xXvNeNZ+wQHy2pOf8zbsKWV03nIeMoPfe8uRaWMjaDkhdy92Y+WegpTcNX6+qUtKqSBmev/oPdHOFx21AKT6tLhdG1YkSgeebKr1o9qEfe4s4P0CMh0Ppn90s0WWSZ+zB4GNoIYeIvMpqEX5xWDvjypQRG7rLBg22mp0G/deelg==

定位

 return nn0.t.C("version=2,channel=" + str3 + ",nonce=" + currentTimeMillis + ",sign=" + rs2, "\n", "", false, 4, null);

最重要的是rs2

String rs2 = com.c.r.f13699a.rs(str4, 1, m());

r.rs is called: str=2#02101500#1757926852347#/app-bff-api/login##body=%2BW%2FGJnXjg12O%2FdhIOskzTynjjGzOQ8pegHVWTp%2FqZe%2FOUl%2BZjbNuL7lyfKrSqa8yrBbToRu8AbnH%0ADd6ltcNPYopbFeoBKHefbRoOkbo90nBORovi37kH5XjKz6hpuJmdVax290FM4M4iERu61g%2B8FGCr%0ASixZjbIhXBm2M4Q14JODVQH6QWwBOlMV1YYXbmAKxSNlN2UVv%2Fp5YWJHlMZaA8CsStW3OpVMazPW%0A7mf63KuaJOW54P8%2BE79rzjjV7wMvnHHAWPMFTiMfV9SHUSi7g49tthPiP6bzmpkSHE%2BKuecuP7JA%0AHHNmjGu939YADouaav7IomRw%2FdLZJmbCrsqvG3MURNBXmTXa6adI%2Bp5Uj%2BUwQbp6cyta6hSk13Nd%0AZPem6Id6rXx2Euxwxc4E%2BXxhAkFVfc5iUnbbuAVgoHtYwRnTsdUnK42aTqXONKIUyFshBxyYztFN%0AvkcX%2FCOV5fUhF3TUlWPNuTaafUb3VDnFoE00c9Tk%2BtTpbTw4EZXB%2FElnt2zpsR%2FARxAv6sdIUHIY%0A%2Fn4NRBJWKKuLVs%2BeBAjjAW4TICwNJGOfofQJXZ3bJFhA152jrS1o47H3d7eJHRdQwYO%2FE4czotzK%0ADHS93vNKNlP1mCKcv%2FrrRFIGC7Od2Cr2tAeoAFOBXhYJ6vcYKHzkQb6hMccxfbO%2B5YG0yF2zHspU%0AChX2dSBhudhDbPddMpN1f8isruOgn%2F%2BvzcwMaMF0KLbuXoJHdkZcwmKUAKsIwXI%3D%0A, i11=1, str2=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
r.rs result=Vf5VISDh7NclRvR+D1kQum0hFG9vWzJU0r59IrHmhsVg8btstgxm19clFrJ5JzauDAyE7qxXxyTAl7+eXD67ICYSqb+bQ/CnbcP5F/Q0fnie9az7pcJn8ZJ4gV3G5+mxNxHPxgJkMX3bKKrfB2vccFq7CMQQ4voxQmK6KpVX0XRy6McVhckyO/+piG1QWgSgT2sFCvsCGq0jx9ykjzQyGS+hxwlR/XO5EFbt6jSaG4Ux0Uol7uBxoifvbRgLwmn+wHaajPsWOuoAXj1ebSd/vPwgPiIu7NKKNB9RbrMTlctOQyGCttl4gyLXgcIzuRrr7MHbjry9insIZ0xx2Yx9WA==

m先固定

MXzlRCICAAAB/udaM33lRrN95ES7GOKq4Aeb+rGjthPw7hcIZ0WqrZd7QJhvhLWzMYkesPlTzvqadYhPcAjNs/bUgulI7iKNQvchg38k/ZDr4AkRjVyN1uXtyZXqmaBEFOrI3AeI3MEW4bVWHwWHSDt78lPYBkcDT7D255FteFPbIE81nU7ooTmo75QuXXtBmhpOaGuq/5rDwLfxtAE*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

我们看com.c.r.f13699a.rs

public final native String rs(String str, int i11, String str2);

这是一个native方法，在上面代码看出是一个sha256withRSA，涉及私钥，我们先说native里做了啥，m你看样子是个pem，但实际上不是，其实是盐，对m做异或处理，最后base64解码，得到 cUs51RmUnpMcFgyp8Jaque45zdTl3dbi3TssK8Wfi3eKo=拼接到后面,sha256withRSA计算得到结果

2#02101500#1757926852347#/app-bff-api/login##body=%2BW%2FGJnXjg12O%2FdhIOskzTynjjGzOQ8pegHVWTp%2FqZe%2FOUl%2BZjbNuL7lyfKrSqa8yrBbToRu8AbnH%0ADd6ltcNPYopbFeoBKHefbRoOkbo90nBORovi37kH5XjKz6hpuJmdVax290FM4M4iERu61g%2B8FGCr%0ASixZjbIhXBm2M4Q14JODVQH6QWwBOlMV1YYXbmAKxSNlN2UVv%2Fp5YWJHlMZaA8CsStW3OpVMazPW%0A7mf63KuaJOW54P8%2BE79rzjjV7wMvnHHAWPMFTiMfV9SHUSi7g49tthPiP6bzmpkSHE%2BKuecuP7JA%0AHHNmjGu939YADouaav7IomRw%2FdLZJmbCrsqvG3MURNBXmTXa6adI%2Bp5Uj%2BUwQbp6cyta6hSk13Nd%0AZPem6Id6rXx2Euxwxc4E%2BXxhAkFVfc5iUnbbuAVgoHtYwRnTsdUnK42aTqXONKIUyFshBxyYztFN%0AvkcX%2FCOV5fUhF3TUlWPNuTaafUb3VDnFoE00c9Tk%2BtTpbTw4EZXB%2FElnt2zpsR%2FARxAv6sdIUHIY%0A%2Fn4NRBJWKKuLVs%2BeBAjjAW4TICwNJGOfofQJXZ3bJFhA152jrS1o47H3d7eJHRdQwYO%2FE4czotzK%0ADHS93vNKNlP1mCKcv%2FrrRFIGC7Od2Cr2tAeoAFOBXhYJ6vcYKHzkQb6hMccxfbO%2B5YG0yF2zHspU%0AChX2dSBhudhDbPddMpN1f8isruOgn%2F%2BvzcwMaMF0KLbuXoJHdkZcwmKUAKsIwXI%3D%0AcUs5c1RmUnpMcFgyp8Jraque45zdTl3dbi3TssK8Wfi3eKo=

我们仔细分解下

2#
02101500#
1757926852347#
/app-bff-api/login#（这里应该是query，这个链接没有query）#body=%2BW%2FGJnXjg12O%2FdhIOskzTynjjGzOQ8pegHVWTp%2FqZe%2FOUl%2BZjbNuL7lyfKrSqa8yrBbToRu8AbnH%0ADd6ltcNPYopbFeoBKHefbRoOkbo90nBORovi37kH5XjKz6hpuJmdVax290FM4M4iERu61g%2B8FGCr%0ASixZjbIhXBm2M4Q14JODVQH6QWwBOlMV1YYXbmAKxSNlN2UVv%2Fp5YWJHlMZaA8CsStW3OpVMazPW%0A7mf63KuaJOW54P8%2BE79rzjjV7wMvnHHAWPMFTiMfV9SHUSi7g49tthPiP6bzmpkSHE%2BKuecuP7JA%0AHHNmjGu939YADouaav7IomRw%2FdLZJmbCrsqvG3MURNBXmTXa6adI%2Bp5Uj%2BUwQbp6cyta6hSk13Nd%0AZPem6Id6rXx2Euxwxc4E%2BXxhAkFVfc5iUnbbuAVgoHtYwRnTsdUnK42aTqXONKIUyFshBxyYztFN%0AvkcX%2FCOV5fUhF3TUlWPNuTaafUb3VDnFoE00c9Tk%2BtTpbTw4EZXB%2FElnt2zpsR%2FARxAv6sdIUHIY%0A%2Fn4NRBJWKKuLVs%2BeBAjjAW4TICwNJGOfofQJXZ3bJFhA152jrS1o47H3d7eJHRdQwYO%2FE4czotzK%0ADHS93vNKNlP1mCKcv%2FrrRFIGC7Od2Cr2tAeoAFOBXhYJ6vcYKHzkQb6hMccxfbO%2B5YG0yF2zHspU%0AChX2dSBhudhDbPddMpN1f8isruOgn%2F%2BvzcwMaMF0KLbuXoJHdkZcwmKUAKsIwXI%3D%0AcUs5c1RmUnpMcFgyp8Jraque45zdTl3dbi3TssK8Wfi3eKo=

hook得到pem

测试这个pem

-----BEGIN PRIVATE KEY-----
MIIEowIBAAKCAQEAimQH7tF7fr6A31NXwZLyTFY5T+mmB6XcXvhQ9wD1+/TILyu+qwltC0F0KPfHqGeteZLHyXOLxMdOWBjU2pzsVbwgaJLUkSzR2+VFACWWLZg29DmFJ51QEi55YgwKBxcX6XqiR37ME6OgEZ0X6lyqcawyDeUI1ArQHyGeBatmqyxa1hre8rxStYV98ukBUVmGv5XPKRJCFudg3RYUuMfxZR3mNtxgMSojta8c7N9dHvFl3lhzKWRWANni3Ubo4aqWqNGcn8D1PH25N76FEeo7AF6ihuzkUEQy1NAUHe/oVshByBl2NBybPv5MxeN5WH5/CGHyXnYculxu3He7wyBsKQIDAQABAoIBAEpgVHsfjrWhgPWFf0aDyUEJnie6tQarN3K7FhiKJanR9ryTUBfwKvC/rsRN1rpFblBGeKVmOhn527sxLUSIzeOOBgTt1NxpMCh0Yc8gZEQA6Jf9SfjubRg4bf*p7EG/QZSz2f9*wANWDzMoMLA+OUR6fTRGgaYkYZI5qQn3Ami/0HvMBcy8GesQ4Qc5mM3YE*WZol2SXu8VBjekchCRK2skaXIimOBrwcu1ziljn5cZWYwZCEH9uNwqIHWc/nVkN2FVTgk/aOe/uHek7RJGKLtL3AFKdIIsCJB0iiFIRyY0MpqWeB7SlJctnujkdQJQrC4jw72BEWn5+epCTI6ooQECgYEA6zrvhdUtFi/rkqRaJRnsReW04iJOh14mPK6OxMmNuhrCuUVKO+bLkkfeKKwtLPTDKwNMQP3bV6zoLwh8VhciSX6NvuaBp8vYysAlAwYW9UUxHe+gyHpS1aFex4VTVCvi45Pr26DqKnowGsZBcHyzh1zsTZHp44r4vy0x68YOE5kCgYEAlpwrLTXK2GbDiT5nUjKfmb5P++ckg*QzwEwp1Ls8g0jJl*yg0O56/DAcu67arenk2Ho+6Sk1nwc+O17GRSZLrd1Czz3LPjZGtIejPf4jOsoLUaWvWZif3ioAHWIgWQtt8iJ+flm6y8Dv7v8oaNYraaS+gDsXSUE3Jcp7tRbddxECgYEA15YML/xQdiU1IhC/DYHUqbr9LMOEdUw0fyj8cB7JZedgz6xRfNTpfgef9GbYgHtS4/kByg7fGFu/8Fs2mTBanEEAaBWafs60wh2Xzk2mfOQNQAJ+uT5i7KgY1YO7+0i9iRXo9EFmW8fgjqllEFM5trXTXMR+N60GjTA+sHe0LwECgYAf6LRpHrV8RcF1yWfgjWMtEpoll6Iviz2fp0NRk93NPtWfCUFFItGhrpvX08L3B8/5YWUExztaFxHDSGAfdG6*RneKKuBtrNgsFXSrhLV4FihxwvW0uNZeHm3py8lotDg2DcLZCC/ATX9IFn08QOvvtPy7dEmJtqx1cEHnaxG+0QKBgCA2kt/L1sdMXSV6iLHY3zcBxgn+uSu/oE68QMlsRwEfryegDwNAXvq4tOoMFWAJSbO/WFUJWDba4l46osI5/SSJd8V0EoEX8ElAOZmuVs8f70FRje/xLYhNtRaJVCGKaakmG9eIoYhwKgM/w3+VMjP/QIksB0ndnYiJ/Wysb5xc
-----END PRIVATE KEY-----

最终hex 一致

55 fe 55 21 20 e1 ec d7 25 46 f4 7e 0f 59 10 ba 6d 21 14 6f 6f 5b 32 54 d2 be 7d 22 b1 e6 86 c5 60 f1 bb 6c b6 0c 66 d7 d7 25 16 b2 79 27 36 ae 0c 0c 84 ee ac 57 c7 24 c0 97 bf 9e 5c 3e bb 20 26 12 a9 bf 9b 43 f0 a7 6d c3 f9 17 f4 34 7e 78 9e f5 ac fb a5 c2 67 f1 92 78 81 5d c6 e7 e9 b1 37 11 cf c6 02 64 31 7d db 28 aa df 07 6b dc 70 5a bb 08 c4 10 e2 fa 31 42 62 ba 2a 95 57 d1 74 72 e8 c7 15 85 c9 32 3b ff a9 88 6d 50 5a 04 a0 4f 6b 05 0a fb 02 1a ad 23 c7 dc a4 8f 34 32 19 2f a1 c7 09 51 fd 73 b9 10 56 ed ea 34 9a 1b 85 31 d1 4a 25 ee e0 71 a2 27 ef 6d 18 0b c2 69 fe c0 76 9a 8c fb 16 3a ea 00 5e 3d 5e 6d 27 7f bc fc 20 3e 22 2e ec d2 8a 34 1f 51 6e b3 13 95 cb 4e 43 21 82 b6 d9 78 83 22 d7 81 c2 33 b9 1a eb ec c1 db 8e bc bd 8a 7b 08 67 4c 71 d9 8c 7d 58

python还原一致

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

剩下的参数有难啊，看了几天了，没看出头绪来，有明白的研究的兄弟探讨下，私信我谢谢

x-bs-device-id
X-XHPAcPXq-a
X-XHPAcPXq-b
X-XHPAcPXq-c
X-XHPAcPXq-d
X-XHPAcPXq-e
X-XHPAcPXq-f
X-XHPAcPXq-g

待续。。。。。。。。。。。。。。。。。。。。。。