From 366d2b239eedf67e1074aad374bea7a86cf50399 Mon Sep 17 00:00:00 2001 From: MemRelay Date: Sat, 26 Sep 2026 23:13:58 +0800 Subject: [PATCH] =?UTF-8?q?create:=20=E9=80=9A=E7=94=A8=E6=8A=93=E5=8C=85?= =?UTF-8?q?=E7=94=A8=E7=8E=B0=E6=88=90=E4=B8=AD=E9=97=B4=E4=BA=BA=E5=B7=A5?= =?UTF-8?q?=E5=85=B7=EF=BC=8C=E4=B8=8D=E4=B8=BA=E5=8D=95=E4=B8=AA=20App=20?= =?UTF-8?q?=E5=86=99=E7=95=8C=E9=9D=A2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit MemRelay-Operation: memory-save:rapt-generic-capture-20260926 MemRelay-Resource: 47d3601f-fc04-48e9-9202-06b6a3a6c8a5 --- ...包用现成中间人工具,不为单个 App 写界面.md | 25 +++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 projects/280dd2a0-d23d-4a71-91e1-dce4353163be/通用抓包用现成中间人工具,不为单个 App 写界面.md diff --git a/projects/280dd2a0-d23d-4a71-91e1-dce4353163be/通用抓包用现成中间人工具,不为单个 App 写界面.md b/projects/280dd2a0-d23d-4a71-91e1-dce4353163be/通用抓包用现成中间人工具,不为单个 App 写界面.md new file mode 100644 index 0000000..339fb68 --- /dev/null +++ b/projects/280dd2a0-d23d-4a71-91e1-dce4353163be/通用抓包用现成中间人工具,不为单个 App 写界面.md @@ -0,0 +1,25 @@ +--- +title: 通用抓包用现成中间人工具,不为单个 App 写界面 +type: decision +permalink: main/projects/280dd2a0-d23d-4a71-91e1-dce4353163be/通用抓包用现成中间人工具不为单个-app-写界面 +stable_id: 47d3601f-fc04-48e9-9202-06b6a3a6c8a5 +scope: project +memory_type: decision +project_id: 280dd2a0-d23d-4a71-91e1-dce4353163be +usage_profile_id: 0c9feb46-d06e-43cd-9ef0-c5813c84a998 +status: active +revision: 1 +request_id: rapt-generic-capture-20260926 +created_at: '2026-09-26T15:13:55.444921+00:00' +updated_at: '2026-09-26T15:13:55.444921+00:00' +tags: +- 抓包 +- charles +- flutter +--- + +通用抓包不要自写界面。日常用现成中间人工具:Charles、Reqable 或 HTTP Toolkit。设备需要 root,把工具的 CA 装进系统证书区,并让流量走该工具的代理。这样能解开使用系统 TLS 的 App,包括 OkHttp、WebView、ExoPlayer。 + +Flutter / 自带 BoringSSL 的 App 不走系统代理,也不读系统证书。这时先确认代理里没有该 API 的 CONNECT,再用通用 Frida 证书校验绕过,而不是反编译。MuMu x86_64 上短 libc 函数不好挂,把连接引进代理经常失败;真机上这个钩子更可行。 + +不要在 Windows 上用 mitmproxy transparent(WinDivert 会弄坏宿主机网络)。Drony 只做 HTTP 代理,挡不住直连 TLS。 \ No newline at end of file