分析
抓包分析
如已安装过某音, 需重置模拟器才可抓到包, 刚打开抖音即可抓到注册设备号的数据包
数据包截图

 

 

选项 | 解释
-------- | -----
请求方式 | POST
请求体 | 加密数据包
返回数据 | 设备号信息 (主要参数 : device_id和install_id)

可分析出除了xg算法, 主要参数加密body体了

# 部分代码(Python版)

1. 先拼接url, 随机cdid, openudid和_rticket(时间戳)等参数, 拼接url

 

 

2. 加密前的body体

```javascript
{"magic_tag": "ss_app_log",
"header": {"display_name": "抖音短视频",
"update_version_code": 11519900,
"manifest_version_code": 110502,
"app_version_minor": "",
"aid": 1128,
"channel": "wandoujia_douyin",
"appkey": "57bfa27c67e58e7d920028d3",
"package": "com.ss.android.ugc.aweme",
"app_version": "11.5.1",
"version_code": 110501,
"sdk_version": "2.14.0-alpha.4",
"sdk_target_version": 29,
"git_hash": "c1aa4085",
"os": "Android",
"os_version": "6.0.1",
"os_api": 23,
"device_model": "Redmi 4",
"device_brand": "Xiaomi",
"device_manufacturer": "Xiaomi",
"cpu_abi": "armeabi-v7a",
"build_serial": "7c2897c6",
"release_build": "cb66ce7_20200618_b794e04c-b102-11ea-bcea-02420a000026",
"density_dpi": 320,
"display_density": "xhdpi",
"resolution": "1280x720",
"language": "zh",
"mc": mc,
"timezone": 8,
"access": "wifi",
"not_request_sender": 0,
"carrier": "中国联通",
"mcc_mnc": "46001",
"rom": "MIUI-8.6.10",
"rom_version": "miui_V9_8.6.10",
"cdid": cdid,
"sig_hash": "aea615ab910015038f73c47e45d21466",
"openudid": openudid,
"clientudid": clientudid,
"serial_number": serial_number,
"sim_serial_number": [],
"region": "CN",
"tz_name": "Asia\/Shanghai",
"tz_offset": 28800,
"sim_region": "cn",
"oaid_may_support": False,
"req_id": "e42e876f-cf9a-496d-a8d4-75f3a6dfa004",
"custom": {"filter_warn": 0},
"apk_first_install_time": _rticket,
"is_system_app": 0,
"sdk_flavor": "china"},
"_gen_time": _rticket}
```

3. 加密后body数据包(红色标记内容)

 

 

4. 将加密后body体放入到data体里, 进行请求数据,

 

 

5. 返回数据包
(因是调用so文件, 所以无法在windows系统运行, 这里是运行在linux服务器上)

 

 

```javascript
{'server_time': 1598290351, 'device_id': 4274507137422669, 'install_id': 2955093183838894, 'device_id_str': '4274507137422669', 'install_id_str': '2955093183838894', 'new_user': 1}
```
6. 提炼device_id 和 install_id 参数, 嵌套到抖音数据接口上即可切换设备号, 切记保存起来,做成设备号池,方便调用

其他字段添加url自行发掘,, 需要可加扣交流: 848434978