![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260910223310-6aa330264dcdb.png\")
<\/p>\n<\/p>\n
\u4e09\u5c42Hook\u8986\u76d6\u7cfb\u7edf\/OkHttp\/OpenSSL\u5168\u6821\u9a8c\u94fe\u8def，\u9644\u901a\u7528\u811a\u672c\u3001\u8e29\u5751\u6e05\u5355\u4e0e\u8bf7\u6c42\u63d0\u53d6\u65b9\u6848<\/p>\n
\u505aAPP\u63a5\u53e3\u5206\u6790\u548c\u6570\u636e\u91c7\u96c6\u7684\u540c\u5b66，\u5927\u6982\u7387\u90fd\u9047\u5230\u8fc7\u8fd9\u4e2a\u6b7b\u5c40：\u624b\u673a\u88c5\u4e86\u6293\u5305\u8bc1\u4e66\u3001\u4ee3\u7406\u4e5f\u914d\u597d\u4e86，Charles\u91cc\u8981\u4e48\u5168\u662funknown，\u8981\u4e48\u76f4\u63a5\u62a5SSL handshake failed，APP\u5e72\u8106\u76f4\u63a5\u65ad\u7f51\u3002\u4f60\u4ee5\u4e3a\u662f\u8bc1\u4e66\u6ca1\u88c5\u5bf9，\u6298\u817e\u534a\u5929\u7cfb\u7edf\u8bc1\u4e66\u3001\u7528\u6237\u8bc1\u4e66\u5168\u88c5\u4e86\u4e00\u904d，\u7ed3\u679c\u8fd8\u662f\u4e0d\u884c\u2014\u2014\u8fd9\u5c31\u662f**SSL Pinning（\u8bc1\u4e66\u9489\u624e）**\u5728\u8d77\u4f5c\u7528\u3002<\/p>\n
\u7f51\u4e0a\u80fd\u641c\u5230\u7684\u7ed5\u8fc7\u65b9\u6848\u5927\u591a\u505c\u7559\u5728\u4e09\u56db\u5e74\u524d，\u8981\u4e48\u53ea\u80fd\u7ed5\u8fc7\u7cfb\u7edf\u9ed8\u8ba4\u6821\u9a8c，\u9047\u5230OkHttp\u81ea\u5b9a\u4e49Pinning\u76f4\u63a5\u5931\u6548；\u8981\u4e48\u5c31\u662f\u8ba9\u4f60\u91cd\u6253\u5305\u3001\u6539smali，\u4e00\u9047\u5230\u52a0\u56fa\u3001\u7b7e\u540d\u6821\u9a8c\u5c31\u95ea\u9000\u3002\u66f4\u4e0d\u7528\u8bf4\u73b0\u5728\u5f88\u591aAPP\u8fd8\u53e0\u4e86\u53cc\u5411\u8ba4\u8bc1\u3001TLS\u6307\u7eb9\u6821\u9a8c，\u666e\u901a\u7684Hook\u811a\u672c\u6839\u672c\u78b0\u4e0d\u5230\u6821\u9a8c\u70b9\u3002<\/p>\n
\u672c\u6587\u4eceTLS\u6821\u9a8c\u7684\u5168\u94fe\u8def\u51fa\u53d1，\u7528Frida\u5b9e\u73b0\u4ece\u7cfb\u7edf\u5c42\u3001\u6846\u67b6\u5c42\u5230\u5e95\u5c42SSL\u5e93\u7684\u4e09\u5c42Hook\u7ed5\u8fc7，\u540c\u65f6\u5b8c\u6210HTTPS\u8bf7\u6c42\u4f53\u3001\u52a0\u5bc6\u53c2\u6570\u7684\u5b8c\u6574\u63d0\u53d6\u3002\u6240\u6709\u65b9\u6848\u5747\u7ecf\u8fc7\u6570\u5341\u6b3e\u4e3b\u6d41APP\u5b9e\u6d4b，\u8986\u76d6\u5b89\u53537~14，\u9644\u53ef\u76f4\u63a5\u590d\u7528\u7684\u811a\u672c\u548c\u5b8c\u6574\u8e29\u5751\u6e05\u5355\u3002<\/p>\n
HTTPS\u6293\u5305\u7684\u672c\u8d28\u662f\u4e2d\u95f4\u4eba\u653b\u51fb：\u4ee3\u7406\u7528\u81ea\u5df1\u7684\u8bc1\u4e66\u5192\u5145\u670d\u52a1\u5668，\u5ba2\u6237\u7aef\u4fe1\u4efb\u4ee3\u7406\u8bc1\u4e66\u540e，\u6d41\u91cf\u5c31\u80fd\u88ab\u89e3\u5bc6\u3002\u800cSSL Pinning\u7684\u4f5c\u7528，\u5c31\u662f\u4ece\u6839\u6e90\u4e0a\u5e9f\u6389\u8fd9\u79cd\u4e2d\u95f4\u4eba\u3002<\/p>\n
\u6b63\u5e38\u7684TLS\u63e1\u624b\u6d41\u7a0b\u4e2d，\u5ba2\u6237\u7aef\u53ea\u9700\u8981\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\u7531\u53d7\u4fe1\u4efb\u7684CA\u7b7e\u53d1\u5373\u53ef；\u800c\u5f00\u542fPinning\u540e，APP\u4f1a\u5728\u4ee3\u7801\u91cc\u5185\u7f6e\u670d\u52a1\u5668\u8bc1\u4e66\u7684\u516c\u94a5\u54c8\u5e0c\u3001\u8bc1\u4e66\u6307\u7eb9\u6216\u5b8c\u6574\u8bc1\u4e66\u94fe，\u53ea\u4fe1\u4efb\u6307\u5b9a\u7684\u8bc1\u4e66\u3002\u54ea\u6015\u4f60\u628a\u6293\u5305\u8bc1\u4e66\u5b89\u88c5\u5230\u7cfb\u7edf\u6839\u76ee\u5f55，APP\u81ea\u5df1\u7684\u6821\u9a8c\u903b\u8f91\u4e5f\u4f1a\u62d2\u7edd\u63e1\u624b，\u76f4\u63a5\u629b\u51fa\u8bc1\u4e66\u9a8c\u8bc1\u5f02\u5e38\u3002<\/p>\n
\u4ece\u5b9e\u73b0\u5c42\u7ea7\u4e0a\u770b，Pinning\u901a\u5e38\u5206\u5e03\u5728\u4e09\u4e2a\u5c42\u9762，\u8d8a\u5f80\u4e0b\u8d8a\u96be\u7ed5\u8fc7：<\/p>\n
\u66f4\u8fdb\u9636\u7684\u5bf9\u6297\u8fd8\u5305\u62ec\u53cc\u5411\u5ba2\u6237\u7aef\u8bc1\u4e66\u8ba4\u8bc1\u3001TLS\u6307\u7eb9\u6821\u9a8c\u3001\u8bc1\u4e66\u94fe\u5b8c\u6574\u6027\u6821\u9a8c\u3001\u52a8\u6001\u4e0b\u53d1\u8bc1\u4e66\u7b49，\u8fd9\u4e5f\u662f\u5355\u4e00\u811a\u672c\u65e0\u6cd5\u901a\u6740\u6240\u6709APP\u7684\u6839\u672c\u539f\u56e0\u3002<\/p>\n
Frida\u7684\u6838\u5fc3\u4f18\u52bf\u662f\u52a8\u6001\u6ce8\u5165，\u65e0\u9700\u91cd\u6253\u5305\u3001\u4e0d\u7528\u4fee\u6539APP，\u65e2\u80fdHook Java\u5c42\u4e5f\u80fdHook Native\u5c42，\u540c\u65f6\u53ef\u4ee5\u5728\u5185\u5b58\u4e2d\u76f4\u63a5\u62e6\u622a\u8bf7\u6c42\u6570\u636e\u3002<\/p>\n
\u5b8c\u6574\u7684\u7ed5\u8fc7\u4e0e\u63d0\u53d6\u94fe\u8def\u5982\u4e0b\u56fe\u6240\u793a，\u6211\u4eec\u6309\u7167\u201c\u4ece\u4e0a\u5230\u4e0b\u3001\u9010\u5c42\u6392\u67e5\u201d\u7684\u601d\u8def\u5b9a\u4f4d\u6821\u9a8c\u70b9，\u4f18\u5148Hook Java\u5c42，\u65e0\u6548\u518d\u4e0b\u63a2\u5230Native\u5c42，\u6700\u540e\u914d\u5408\u8bf7\u6c42\u62e6\u622a\u5b8c\u6210\u6570\u636e\u63d0\u53d6\u3002 ![\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260910223315-6aa3302b3d461.png\")
<\/p>\n
\u4e09\u5c42Hook\u7684\u9002\u7528\u573a\u666f：<\/p>\n
\u5728\u5f00\u59cbHook\u4e4b\u524d，\u5fc5\u987b\u5148\u628a\u57fa\u7840\u73af\u5883\u642d\u597d，\u5426\u5219\u518d\u5f3a\u7684\u811a\u672c\u4e5f\u8dd1\u4e0d\u8d77\u6765\u3002<\/p>\n
\u4e0d\u7528\u4e0a\u6765\u5c31\u5806\u5168\u5957\u811a\u672c，\u53ef\u4ee5\u5148\u5feb\u901f\u6392\u67e5：<\/p>\n
\u8fd9\u662f\u6700\u57fa\u7840\u7684\u4e00\u5c42，\u6838\u5fc3\u662fHook\u5b89\u5353\u7cfb\u7edf\u7684X509TrustManager，\u8ba9\u5b83\u4fe1\u4efb\u6240\u6709\u8bc1\u4e66，\u540c\u65f6\u7ed5\u8fc7\u4e3b\u673a\u540d\u6821\u9a8c\u3002<\/p>\n
\u5b89\u5353\u6240\u6709HTTPS\u8bf7\u6c42\u7684\u8bc1\u4e66\u6821\u9a8c，\u6700\u7ec8\u90fd\u4f1a\u8c03\u7528X509TrustManager\u7684checkServerTrusted\u65b9\u6cd5，\u6821\u9a8c\u5931\u8d25\u5c31\u629b\u51faCertificateException\u3002\u6211\u4eec\u76f4\u63a5Hook\u8be5\u65b9\u6cd5，\u7a7a\u5b9e\u73b0\u4e0d\u629b\u51fa\u5f02\u5e38，\u5c31\u7b49\u4e8e\u8ba9\u7cfb\u7edf\u4fe1\u4efb\u6240\u6709\u8bc1\u4e66\u3002<\/p>\n
\u540c\u65f6\u8fd8\u8981Hook HostnameVerifier，\u5f3a\u5236\u8fd4\u56detrue，\u907f\u514d\u4e3b\u673a\u540d\u4e0d\u5339\u914d\u7684\u95ee\u9898\u3002<\/p>\n
Java.perform(function () {
\n \/\/ \u7ed5\u8fc7X509TrustManager\u8bc1\u4e66\u6821\u9a8c
\n var TrustManagerImpl = Java.use("com.android.org.conscrypt.TrustManagerImpl");
\n TrustManagerImpl.checkServerTrusted.overload('[Ljava.security.cert.X509Certificate;', 'java.lang.String').implementation = function (chain, authType) {
\n \/\/ \u76f4\u63a5\u8fd4\u56de，\u4e0d\u629b\u51fa\u5f02\u5e38\u5373\u89c6\u4e3a\u6821\u9a8c\u901a\u8fc7
\n return;
\n };<\/p>\n
\/\/ \u7ed5\u8fc7\u4e3b\u673a\u540d\u6821\u9a8c
\n var HostnameVerifier = Java.use("javax.net.ssl.HostnameVerifier");
\n var OkHostnameVerifier = Java.use("okhttp3.internal.tls.OkHostnameVerifier");<\/p>\n
OkHostnameVerifier.verify.overload('java.lang.String', 'javax.net.ssl.SSLSession').implementation = function (hostname, session) {
\n return true;
\n };<\/p>\n
\/\/ \u517c\u5bb9HttpURLConnection\u7684\u4e3b\u673a\u540d\u6821\u9a8c
\n var DefaultHostnameVerifier = Java.use("org.apache.http.conn.ssl.DefaultHostnameVerifier");
\n DefaultHostnameVerifier.verify.overload('java.lang.String', 'javax.net.ssl.SSLSession').implementation = function (hostname, session) {
\n return true;
\n };
\n});<\/p>\n
\u6ce8\u610f：\u4e0d\u540c\u5b89\u5353\u7248\u672c\u7684TrustManagerImpl\u7c7b\u540d\u53ef\u80fd\u4e0d\u540c，\u90e8\u5206ROM\u4f7f\u7528android.net.http.X509TrustManagerExtensions，\u5982\u679cHook\u5931\u8d25\u53ef\u4ee5\u7528Java.enumerateClassLoaders\u904d\u5386\u67e5\u627e\u3002<\/p>\n
\u8fd9\u4e00\u5c42\u53ea\u80fd\u7ed5\u8fc7\u7cfb\u7edf\u9ed8\u8ba4\u7684\u8bc1\u4e66\u6821\u9a8c，\u65e0\u6cd5\u7ed5\u8fc7OkHttp\u81ea\u5b9a\u4e49Pinning\u3002\u5982\u679cHook\u5b8cAPP\u8fd8\u662f\u65e0\u6cd5\u8054\u7f51，\u7ee7\u7eed\u5f80\u4e0b\u8d70\u3002<\/p>\n
\u8fd9\u662f\u76ee\u524d\u6700\u5e38\u89c1\u7684Pinning\u5b9e\u73b0\u65b9\u5f0f，\u7edd\u5927\u591a\u6570\u4f7f\u7528OkHttp\/Retrofit\u7684APP\u90fd\u91c7\u7528\u8fd9\u79cd\u65b9\u6848\u3002<\/p>\n
OkHttp\u901a\u8fc7CertificatePinner\u7c7b\u5b9e\u73b0\u8bc1\u4e66\u9489\u624e，\u5728check\u65b9\u6cd5\u4e2d\u5bf9\u6bd4\u670d\u52a1\u5668\u8bc1\u4e66\u7684\u516c\u94a5\u54c8\u5e0c\u548c\u4ee3\u7801\u4e2d\u5185\u7f6e\u7684\u54c8\u5e0c，\u4e0d\u5339\u914d\u5c31\u629b\u51faSSLPeerUnverifiedException\u3002<\/p>\n
\u6700\u7a33\u5b9a\u7684\u7ed5\u8fc7\u65b9\u5f0f\u6709\u4e24\u79cd：<\/p>\n
\u7b2c\u4e00\u79cd\u6700\u7b80\u5355，\u517c\u5bb9\u6027\u4e5f\u6700\u597d，\u4f18\u5148\u4f7f\u7528\u3002<\/p>\n
Java.perform(function () {
\n try {
\n var CertificatePinner = Java.use("okhttp3.CertificatePinner");
\n CertificatePinner.check.overload('java.lang.String', 'java.util.List').implementation = function (hostname, peerCertificates) {
\n \/\/ \u76f4\u63a5\u8fd4\u56de，\u4e0d\u505a\u6821\u9a8c
\n return;
\n };<\/p>\n
\/\/ \u517c\u5bb9\u6df7\u6dc6\u540e\u7684\u7c7b\u540d，\u5982\u679c\u4e0a\u9762\u7684\u7c7b\u627e\u4e0d\u5230，\u53ef\u4ee5\u5c1d\u8bd5\u4e0b\u9762\u7684\u65b9\u5f0f
\n \/\/ \u904d\u5386\u6240\u6709\u7c7b，\u641c\u7d22\u5305\u542bCertificatePinner\u7279\u5f81\u7684\u7c7b
\n Java.enumerateLoadedClasses({
\n onMatch: function (className) {
\n if (className.indexOf("CertificatePinner") !== -1) {
\n console.log("\u627e\u5230CertificatePinner\u7c7b: " + className);
\n }
\n },
\n onComplete: function () {}
\n });
\n } catch (e) {
\n console.log("OkHttp CertificatePinner Hook\u5931\u8d25: " + e.message);
\n }
\n});<\/p>\n
\u5982\u679cAPP\u505a\u4e86\u4ee3\u7801\u6df7\u6dc6，okhttp3.CertificatePinner\u7684\u7c7b\u540d\u4f1a\u88ab\u6539\u6210a.b.c，\u8fd9\u65f6\u5019\u4e0d\u8981\u786c\u5199\u7c7b\u540d，\u901a\u8fc7\u5b57\u7b26\u4e32\u7279\u5f81\u6216\u8005\u65b9\u6cd5\u7b7e\u540d\u53bb\u5339\u914d：<\/p>\n
\u5230\u8fd9\u4e00\u6b65，90%\u4ee5\u4e0a\u7684\u666e\u901aAPP\u90fd\u53ef\u4ee5\u6b63\u5e38\u6293\u5305\u4e86\u3002\u5982\u679c\u8fd8\u662f\u4e0d\u884c，\u8bf4\u660e\u6821\u9a8c\u903b\u8f91\u5728Native\u5c42\u3002<\/p>\n
\u5f88\u591a\u52a0\u56fa\u5e94\u7528\u3001\u6e38\u620f\u3001\u81ea\u7814\u7f51\u7edc\u5e93\u4e0d\u4f1a\u8d70Java\u5c42\u7684\u8bc1\u4e66\u6821\u9a8c，\u800c\u662f\u76f4\u63a5\u5728Native\u5c42\u8c03\u7528OpenSSL\/BoringSSL\u5b8c\u6210TLS\u63e1\u624b\u548c\u8bc1\u4e66\u6821\u9a8c，\u8fd9\u65f6\u5019Java\u5c42\u7684Hook\u5b8c\u5168\u65e0\u6548\u3002<\/p>\n
Native\u5c42\u7684\u8bc1\u4e66\u6821\u9a8c\u6838\u5fc3\u662f\u4e24\u4e2a\u51fd\u6570：<\/p>\n
\u6211\u4eec\u7528Frida\u7684Native Hook\u62e6\u622a\u8fd9\u4e24\u4e2a\u51fd\u6570，\u5f3a\u5236\u8fd4\u56de\u6210\u529f，\u5c31\u80fd\u7ed5\u8fc7Native\u5c42\u7684Pinning\u3002<\/p>\n
\/\/ \u7b49\u5f85so\u5e93\u52a0\u8f7d\u5b8c\u6210\u540e\u6267\u884c
\nsetTimeout(function () {
\n var libssl = null;
\n var libs = ["libssl.so", "libboringssl.so", "libssl.so.1.1", "libssl.so.3"];<\/p>\n
for (var i = 0; i < libs.length; i++) {
\n try {
\n libssl = Module.findBaseAddress(libs[i]);
\n if (libssl) {
\n console.log("\u627e\u5230SSL\u5e93: " + libs[i]);
\n break;
\n }
\n } catch (e) {}
\n }<\/p>\n
if (!libssl) {
\n console.log("\u672a\u627e\u5230SSL\u5e93，\u5c1d\u8bd5\u5168\u5c40\u641c\u7d22");
\n return;
\n }<\/p>\n
\/\/ Hook SSL_get_verify_result，\u5f3a\u5236\u8fd4\u56de0（\u6821\u9a8c\u6210\u529f）
\n var SSL_get_verify_result = Module.findExportByName(libs[i], "SSL_get_verify_result");
\n if (SSL_get_verify_result) {
\n Interceptor.attach(SSL_get_verify_result, {
\n onLeave: function (retval) {
\n retval.replace(0);
\n }
\n });
\n console.log("SSL_get_verify_result Hook\u6210\u529f");
\n }<\/p>\n
\/\/ Hook X509_verify_cert，\u5f3a\u5236\u8fd4\u56de1（\u6821\u9a8c\u6210\u529f）
\n var X509_verify_cert = Module.findExportByName(libs[i], "X509_verify_cert");
\n if (X509_verify_cert) {
\n Interceptor.attach(X509_verify_cert, {
\n onLeave: function (retval) {
\n retval.replace(1);
\n }
\n });
\n console.log("X509_verify_cert Hook\u6210\u529f");
\n }
\n}, 2000);<\/p>\n
\u7ed5\u8fc7Pinning\u53ea\u662f\u7b2c\u4e00\u6b65，\u5f88\u591a\u65f6\u5019\u6211\u4eec\u9700\u8981\u63d0\u53d6\u8bf7\u6c42URL\u3001Header\u3001Body\u3001\u52a0\u5bc6\u53c2\u6570，\u751a\u81f3\u54cd\u5e94\u6570\u636e\u3002\u8fd9\u91cc\u63d0\u4f9b\u4e24\u79cd\u65b9\u6848，\u8986\u76d6\u4e0d\u540c\u573a\u666f\u3002<\/p>\n
\u7ed5\u8fc7Pinning\u540e，Charles\u6216mitmproxy\u53ef\u4ee5\u76f4\u63a5\u89e3\u5bc6HTTPS\u6d41\u91cf，\u67e5\u770b\u5b8c\u6574\u7684\u8bf7\u6c42\u548c\u54cd\u5e94，\u9002\u5408\u7edd\u5927\u591a\u6570\u573a\u666f\u3002\u5982\u679cAPP\u4e0d\u8d70\u7cfb\u7edf\u4ee3\u7406，\u53ef\u4ee5\u7528iptables\u8f6c\u53d1\u6d41\u91cf，\u6216\u8005\u4f7f\u7528VPN\u6a21\u5f0f\u7684\u6293\u5305\u5de5\u5177\u3002<\/p>\n
\u9488\u5bf9\u6709\u4ee3\u7406\u68c0\u6d4b\u3001\u8d70\u79c1\u6709\u901a\u9053\u3001\u6216\u8005\u6d41\u91cf\u52a0\u5bc6\u7684APP，\u76f4\u63a5\u5728\u5185\u5b58\u4e2dHook\u7f51\u7edc\u6846\u67b6\u7684\u8bf7\u6c42\u65b9\u6cd5，\u63d0\u53d6\u660e\u6587\u6570\u636e，\u5b8c\u5168\u4e0d\u9700\u8981\u8d70\u4ee3\u7406\u3002<\/p>\n
\u4ee5OkHttp\u4e3a\u4f8b，Hook RealCall\u7684execute\u548cenqueue\u65b9\u6cd5，\u6253\u5370\u8bf7\u6c42\u4fe1\u606f：<\/p>\n
Java.perform(function () {
\n try {
\n var RealCall = Java.use("okhttp3.RealCall");
\n RealCall.execute.overload().implementation = function () {
\n var request = this.request();
\n var url = request.url().toString();
\n var method = request.method();
\n var body = request.body();<\/p>\n
console.log("=== \u8bf7\u6c42 ===");
\n console.log("Method: " + method);
\n console.log("URL: " + url);
\n console.log("Headers: " + request.headers().toString());<\/p>\n
\/\/ \u6253\u5370\u8bf7\u6c42\u4f53
\n if (body != null) {
\n var buffer = Java.use("okio.Buffer").$new();
\n body.writeTo(buffer);
\n console.log("Body: " + buffer.readUtf8());
\n }<\/p>\n
var response = this.execute();
\n console.log("\u54cd\u5e94\u7801: " + response.code());
\n return response;
\n };
\n } catch (e) {
\n console.log("OkHttp\u8bf7\u6c42Hook\u5931\u8d25: " + e.message);
\n }
\n});<\/p>\n
\u8fdb\u9636\u7528\u6cd5\u662f\u76f4\u63a5Hook\u52a0\u5bc6\u3001\u7b7e\u540d\u51fd\u6570，\u5728\u53c2\u6570\u52a0\u5bc6\u524d\u63d0\u53d6\u660e\u6587，\u5728\u7b7e\u540d\u8ba1\u7b97\u524d\u63d0\u53d6\u539f\u59cb\u53c2\u6570，\u7701\u53bb\u9006\u5411\u7b97\u6cd5\u7684\u65f6\u95f4\u3002<\/p>\n
\u5b9e\u9645\u573a\u666f\u4e2d，\u5f88\u591aAPP\u4e0d\u6b62\u6709Pinning，\u8fd8\u53e0\u52a0\u4e86\u5404\u79cd\u5bf9\u6297\u624b\u6bb5，\u8fd9\u91cc\u6574\u7406\u4e86\u6700\u5e38\u89c1\u76848\u4e2a\u5751\u548c\u89e3\u51b3\u65b9\u6848\u3002<\/p>\n
SSL Pinning\u7684\u7ed5\u8fc7\u4ece\u6765\u6ca1\u6709\u4e07\u80fd\u811a\u672c，\u672c\u8d28\u662f\u627e\u5230\u6821\u9a8c\u70b9，\u5f3a\u5236\u8fd4\u56de\u6210\u529f\u3002\u4e0d\u540cAPP\u7684\u6821\u9a8c\u5c42\u7ea7\u3001\u5b9e\u73b0\u65b9\u5f0f\u90fd\u4e0d\u4e00\u6837，\u9700\u8981\u6309\u7167\u201c\u7cfb\u7edf\u5c42\u2192\u6846\u67b6\u5c42\u2192Native\u5c42\u201d\u7684\u987a\u5e8f\u9010\u5c42\u6392\u67e5，\u800c\u4e0d\u662f\u4e0a\u6765\u5c31\u5806\u4e00\u5806\u811a\u672c\u3002<\/p>\n
Frida\u7684\u4ef7\u503c\u5728\u4e8e\u52a8\u6001\u8c03\u8bd5\u80fd\u529b，\u5b83\u53ef\u4ee5\u8ba9\u6211\u4eec\u5728\u4e0d\u91cd\u6253\u5305\u3001\u4e0d\u4fee\u6539APP\u7684\u60c5\u51b5\u4e0b，\u5feb\u901f\u5b9a\u4f4d\u6821\u9a8c\u70b9\u3001\u9a8c\u8bc1\u7ed5\u8fc7\u65b9\u6848，\u540c\u65f6\u76f4\u63a5\u5728\u5185\u5b58\u4e2d\u63d0\u53d6\u6570\u636e\u3002\u4f46\u4e5f\u8981\u6e05\u695a，\u7ed5\u8fc7\u8bc1\u4e66\u6821\u9a8c\u53ea\u662f\u63a5\u53e3\u5206\u6790\u7684\u7b2c\u4e00\u6b65，\u540e\u9762\u8fd8\u6709\u7b7e\u540d\u7b97\u6cd5\u3001\u53c2\u6570\u52a0\u5bc6\u3001\u8bbe\u5907\u6307\u7eb9\u3001\u98ce\u63a7\u5bf9\u6297，\u6bcf\u4e00\u6b65\u90fd\u9700\u8981\u5bf9\u5e94\u7684\u9006\u5411\u548c\u5de5\u7a0b\u80fd\u529b\u3002<\/p>\n
\u6700\u540e\u63d0\u9192：\u6240\u6709\u6280\u672f\u65b9\u6848\u4ec5\u7528\u4e8e\u5408\u6cd5\u7684\u63a5\u53e3\u5206\u6790\u3001\u5b89\u5168\u6d4b\u8bd5\u4e0e\u5b66\u4e60，\u8bf7\u9075\u5b88\u76f8\u5173\u6cd5\u5f8b\u6cd5\u89c4，\u4e0d\u8981\u7528\u4e8e\u975e\u6cd5\u6570\u636e\u91c7\u96c6\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e09\u5c42Hook\u8986\u76d6\u7cfb\u7edf\/OkHttp\/OpenSSL\u5168\u6821\u9a8c\u94fe\u8def，\u9644\u901a\u7528\u811a\u672c\u3001\u8e29\u5751\u6e05\u5355\u4e0e\u8bf7\u6c42\u63d0\u53d6\u65b9\u6848 \u505aAPP\u63a5\u53e3\u5206\u6790\u548c\u6570\u636e\u91c7\u96c6\u7684\u540c\u5b66，\u5927\u6982\u7387\u90fd\u9047\u5230\u8fc7\u8fd9\u4e2a\u6b7b\u5c40：\u624b\u673a\u88c5\u4e86\u6293\u5305\u8bc1\u4e66\u3001\u4ee3\u7406\u4e5f\u914d\u597d\u4e86，Charles\u91cc\u8981\u4e48\u5168\u662funknown，\u8981\u4e48\u76f4\u63a5\u62a5SSL handshake failed，APP\u5e72\u8106\u76f4\u63a5\u65ad\u7f51\u3002\u4f60\u4ee5\u4e3a\u662f\u8bc1\u4e66\u6ca1\u88c5\u5bf9，\u6298\u817e\u534a\u5929\u7cfb\u7edf\u8bc1\u4e66\u3001\u7528\u6237\u8bc1\u4e66\u5168\u88c5\u4e86\u4e00\u904d，\u7ed3\u679c\u8fd8\u662f\u4e0d<\/p>\n","protected":false},"author":2,"featured_media":103646,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[622,81,606,677,191],"topic":[],"class_list":["post-103648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-https","tag-python","tag-ssl","tag-677","tag-191"],"yoast_head":"\n