For more reading experience, please go to my blog: https://www.yunlife.xyz
foreword
In advance, the difficulty and complexity of this tutorial is far more than that of the Kuaishou Express Edition, so please be prepared!
say it up front
Considering that most people have no experience in capturing packets, or even heard of the word "root", this tutorial is based on an ordinary unrooted Android phone.
Packet capture tool
1.Httpcanary (packet capture tool, hereinafter referred to as Little Yellow Bird)
2.RE File Manager
3.VMOS (Virtual Machine)
Principle description
To use the little yellow bird to capture the package, you need to install the CA certificate. To install the certificate, you need ROOT permission to move the certificate location. If the mobile phone is not ROOT, use the VMOS virtual machine to virtualize an Android phone with ROOT permission, and install Tencent's self-selected shares in the virtual Android phone. , and then grab the package, over!
Tutorial starts
Install VMOS
Please enter the VMOS official website , or download it through the mobile application store!
Note: VMOS creates a mobile phone with root privileges as a VIP function, which seems to be more than ten yuan a month, and supports genuine! Of course, you can also find another "free version", or contact me!
After installation, create a virtual machine, I chose Android 7.1 with root privileges, and boot it up.
Install Little Yellow Bird
The version number of the little yellow bird demonstrated in this article is HttpCanary_v3.3.6
ps: There are two versions in the QQ group, you can choose any version you can use, the interface is similar, and the functions are the same!
After installation, enter Little Yellow Bird, configure VPN → Install certificate → Move certificate to the CA list in turn. Since the phone is not rooted, an error will be reported in this step of moving the certificate, so just skip it.
PS: The high version of the little yellow bird does not seem to have a step, just ignore it.
The way of installing the certificate on each mobile phone is different, and some will prompt you to enter the settings to install the CA certificate. At this time, you need to go to the Baidu certificate method according to your model .
The main method is to benefit from the same benefits: export the certificate → enter the settings to search for the CA certificate installation → find the CA certificate just exported and click install
There are two certificate formats, select xxx.pem
If you start to capture packets and it prompts that there is no network, it proves that the CA certificate has not been installed successfully!
Configure certificates
Click Settings → HttpCanary Root Certificate → Export Certificate → (.0) Format → Remember File Name and File Location
Enter the VMOS virtual machine and import the certificate you just exported into the virtual machine.
Open the RE file manager you just installed, find the price you just imported, the path is /sdcard/VMOSfiletransferstation
and move it to /etc/security/cacert/ and / etc/security/cacerts/
if only /etc/security/ cacert/ Then just put it here,
OK, the configuration certificate is complete!
start capturing
Public account capture
Set the small yellow bird target application to WeChat , and then start the packet capture
Pay attention to the WeChat public account Tencent's self-selected stocks WeChat version | WeChat Securities → Good Welfare in the lower right corner → Welfare Center
Go back to Little Yellow Bird, find the package linked to wzq.tenpay.com , click in!
Click on the request , record wzq_qlskey=zz&wzq_qluin=aa , get the first step
Capture APP package
Enter VMOS, download the Tencent stock selection app and log in
Set the small yellow bird target application to VMOS , and then start the packet capture
Go back to VMOS, enter Tencent's self-selected stocks , click the avatar in the upper left corner, and enter the welfare center
Then go back to the little yellow bird interface to find the package linked to wzq.tenpay.com and click it!
Click on the request , record openid=xx&fskey=yy, done!
Finally put together
openid=xx&fskey=yy&wzq_qlskey=zz&wzq_qluin=aa
Please indicate the source when reprinting, thank you!