Conversation
| - { | ||
| name: cache.adapter.psr6, | ||
| provider: 'rikudou.dynamo_cache.adapter', | ||
| } |
There was a problem hiding this comment.
Can't this be replaced with this to make it more YAML and less JSON?
| - { | |
| name: cache.adapter.psr6, | |
| provider: 'rikudou.dynamo_cache.adapter', | |
| } | |
| - name: cache.adapter.psr6, | |
| provider: rikudou.dynamo_cache.adapter |
There was a problem hiding this comment.
~ $ strings assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | head -n 20
assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc: No such file or directory
~ $ unzip target.apk "assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc" -d .
Archive: target.apk extracting: ./assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc
~ $ head -c 16 assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | xxd 00000000: 87ea 74a7 37eb b381 a4af c1bf f96e 808a ..t.7........n..
~ $ unzip -l target.apk | grep ".so" 27157992 1980-01-01 00:00 lib/arm64-v8a/libcocos2djs.so
18994084 1980-01-01 00:00 lib/armeabi-v7a/libcocos2djs.so ~ $ unzip target.apk "lib/arm64-v8a/libcocos2djs.so" -d .
Archive: target.apk inflating: ./lib/arm64-v8a/libcocos2djs.so
~ $ strings lib/arm64-v8a/libcocos2djs.so | grep -A 5 -B 5 "jsb_set_xxtea_key" _ZN7cocos2d8Director20setAnimationIntervalEf _ZN13ScriptingCore11getInstanceEv _ZN7cocos2d19ScriptEngineManager11getInstanceEv
_ZN7cocos2d19ScriptEngineManager15setScriptEngineEPNS_20ScriptEngineProtocolE _ZN2se12ScriptEngine11getInstanceEv
_Z17jsb_set_xxtea_keyRKSs _ZN7cocos2d9FileUtils11getInstanceEv
_ZN7cocos2d9FileUtils18setAssetEncryptKeyERKSs _ZN7cocos2d9FileUtils27setAssetPathEncryptStrategyEi
_Z32jsb_init_file_operation_delegatev _ZN2se12ScriptEngine20setExceptionCallbackERKSt8functionIFvPKcS3_S3_EE
~ $+1+1+71 နဲ့ sid=။ Sever လမ်း
~ $ python harry_iq.py 🔍 Harry AI is hunting for the specific Server Gateways... ✅ FOUND Ta.in in: ./extracted_apk/classes.dex Context: ...n I t"pTain =n Ta.in Ua,i8#Sa'i1n (�n "... ✅ FOUND Ta.kr in: ./extracted_apk/classes.dex Context: ... ߟC(er 8rz 8eTb.kq !Ta.krs""p "p'"... ✅ FOUND gcm.top in: ./extracted_apk/classes.dex Context: ...e-iidFirebase-Client-Log-TypeFirebase-Client gcm.topiRST_FULLiid-operation mExpecte... ✅ FOUND socket.io in: ./extracted_apk/lib/armeabi-v7a/libcocos2djs.so Context: ...aryack0::413probe5wss://ws:///socket.io/1/websocket//socket.io/1/websocket/?EIO... ✅ FOUND socket.io in: ./extracted_apk/lib/arm64-v8a/libcocos2djs.so Context: ...ck0::41probewss://ws:///socket.io/1/websocket//socket.io/1/websocket/?EIO... ~ $ find ./extracted_apk/assets/resources/ -name ".jsc" ./extracted_apk/assets/resources/3e/3ed904369c054b1d2a38c7e2515102fe.jsc ./extracted_apk/assets/resources/11/11a14136a10e3a26966fad295c36ec17.jsc ./extracted_apk/assets/resources/ed/edcb0165a5f66d53b971d59244b0bcd4.jsc ./extracted_apk/assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc
အပေါ်က Python code ကို nano harry_iq.py နဲ့ ရေးပါ။ ၂။ ပြီးရင် python harry_iq.py လို့ run ပါ။
~ $ nano harry_iq.py ~ $ python harry_iq.py 🔑 Potential Key Found: CxGdPe; 💾 Hex Key: 4378476450653b14
/sdcard/Download $ hexdump -C ~/extracted_apk/lib/armeabi-v7a/libcocos2djs.so | grep -A 10 "wsokg{"
00a6ce90 9e 9e 9e 77 73 6f 6b 67 7b 00 74 4a 7a 44 06 92 |...wsokg{.tJzD..|
00a6cea0 dd f8 38 90 4b 45 00 f2 a5 80 71 48 78 44 0e 2f |..8.KE....qHxD./|
00a6ceb0 00 f2 8d 80 df e8 07 f0 7c 8b 8b 8b 08 70 8b 8b |........|....p..|
00a6cec0 8b 79 76 84 81 7e 73 00 0b 9b 06 9a 02 90 01 92 |.yv..~s.........|
00a6ced0 03 93 00 95 49 46 53 46 20 46 07 9a 4d f6 80 fb |....IFSF F..M...|
00a6cee0 15 9b 0f 9a 43 f8 08 20 a8 f1 04 08 00 2d 7f f4 |....C.. .....-..|
00a6cef0 7a af dd f8 28 b0 e0 6a 00 28 00 f0 97 80 63 6b |z...(..j.(....ck|
00a6cf00 1b 68 01 2b 40 f3 92 80 59 46 14 aa 57 f7 1c fc |.h.+@...YF..W...|
00a6cf10 00 28 00 f0 8b 80 e3 6e 01 33 03 d0 01 46 20 46 |.(.....n.3...F F|
00a6cf20 fe f7 22 fa 33 68 9b b1 b3 68 1a 68 82 b1 23 6d |..".3h...h.h..#m|
00a6cf30 61 6d a5 68 8b 42 12 90 13 92 11 95 00 f0 82 80 |am.h.B..........|
/sdcard/Download $
~ $ nano decrypt_jsc.py
~ $ python decrypt_jsc.py
🔓 Decrypting extracted_apk/assets/resources/3e/3ed904369c054b1d2a38c7e2515102fe.jsc using key: CxGdPe;
✅ File Found! Ready to parse.
[0x000b53f3]> s 0x00743974
[0x00743974]> pdf
┌ 16: sym.jsb_set_xxtea_key_std::string_const_ (int64_t arg1);
│ `- args(x0)
; arg1 ; jsb_set_xxtea_key(std::string const&)
│ 0x00743974 e10300aa mov x1, x0
│ 0x00743978 a0950090 adrp x0, obj._jsb_dragonBones_BoneData_proto ; 0x19f7000
│ 0x0074397c 00e00f91 add x0, x0, 0x3f8
└ ┌─< 0x00743980 f9513114 b fcn.01398164
[0x00743974]> s 0x01398164
[0x01398164]> pdf
; XREFS(227)
┌ 240: fcn.01398164 ();
│ afv: vars(1:sp[0x20..0x20])
│ 0x01398164 fd7bbda9 stp x29, x30, [sp, -0x30]!
│ 0x01398168 fd030091 mov x29, sp
│ 0x0139816c f35301a9 stp x19, x20, [sp, 0x10]
│ 0x01398170 020040f9 ldr x2, [x0]
│ 0x01398174 f40300aa mov x20, x0
│ 0x01398178 330040f9 ldr x19, [x1] ; arg2
│ 0x0139817c 5f0013eb cmp x2, x19
│ ┌─< 0x01398180 a0010054 b.eq 0x13981b4
│ │ 0x01398184 63825fb8 ldur w3, [x19, -8]
│ │ 0x01398188 606200d1 sub x0, x19, 0x18
│ ┌──< 0x0139818c 4303f837 tbnz w3, 0x1f, 0x13981f4
│ ││ 0x01398190 41340090 adrp x1, 0x1a20000
│ ││ 0x01398194 24c01491 add x4, x1, 0x530
│ ││ 0x01398198 1f0004eb cmp x0, x4
│ ┌───< 0x0139819c a1030054 b.ne 0x1398210
│ │││ ; CODE XREFS from fcn.01398164 @ 0x139820c(x), 0x1398234(x), 0x1398240(x)
│ ┌┌┌────> 0x013981a0 406000d1 sub x0, x2, 0x18
│ ╎╎╎│││ 0x013981a4 21c01491 add x1, x1, 0x530
│ ╎╎╎│││ 0x013981a8 1f0001eb cmp x0, x1
│ ┌───────< 0x013981ac c1000054 b.ne 0x13981c4
│ │╎╎╎│││ ; CODE XREF from fcn.01398164 @ 0x13981f0(x)
│ ────────> 0x013981b0 930200f9 str x19, [x20]
│ │╎╎╎││└─> 0x013981b4 e00314aa mov x0, x20
│ │╎╎╎││ 0x013981b8 f35341a9 ldp x19, x20, [sp, 0x10]
│ │╎╎╎││ 0x013981bc fd7bc3a8 ldp x29, x30, [sp], 0x30
│ │╎╎╎││ 0x013981c0 c0035fd6 ret
│ └───────> 0x013981c4 a1310090 adrp x1, reloc.js_box2dclasses_b2MotorJoint_GetMaxForceRegistry_v8::FunctionCallbackInfo_v8::Value__const ; 0x19cc000
│ ╎╎╎││ 0x013981c8 219847f9 ldr x1, [x1, 0xf30]
│ ╎╎╎││┌─< 0x013981cc c10300b4 cbz x1, 0x1398244
│ ╎╎╎│││ 0x013981d0 422000d1 sub x2, x2, 8
│ ┌───────> 0x013981d4 41fc5f88 ldaxr w1, [x2]
│ ╎╎╎╎│││ 0x013981d8 23040051 sub w3, w1, 1
│ ╎╎╎╎│││ 0x013981dc 43fc0488 stlxr w4, w3, [x2]
│ └───────< 0x013981e0 a4ffff35 cbnz w4, 0x13981d4
│ ╎╎╎│││ ; CODE XREF from fcn.01398164 @ 0x1398250(x)
│ ┌───────> 0x013981e4 3f001f6b cmp w1, wzr
│ ────────< 0x013981e8 4cfeff54 b.gt 0x13981b0
│ ╎╎╎╎│││ 0x013981ec 79e2c097 bl rsym.ZdlPv
│ ────────< 0x013981f0 f0ffff17 b 0x13981b0
│ ╎╎╎╎│└──> 0x013981f4 a1a30091 add x1, x29, 0x28
│ ╎╎╎╎│ │ 0x013981f8 020080d2 mov x2, 0
│ ╎╎╎╎│ │ 0x013981fc 2dffff97 bl 0x1397eb0
│ ╎╎╎╎│ │ 0x01398200 f30300aa mov x19, x0
│ ╎╎╎╎│ │ 0x01398204 820240f9 ldr x2, [x20]
│ ╎╎╎╎│ │ 0x01398208 41340090 adrp x1, 0x1a20000
│ ╎└──────< 0x0139820c e5ffff17 b 0x13981a0
│ ╎ ╎╎└───> 0x01398210 a0310090 adrp x0, reloc.js_box2dclasses_b2MotorJoint_GetMaxForceRegistry_v8::FunctionCallbackInfo_v8::Value__const ; 0x19cc000
│ ╎ ╎╎ │ 0x01398214 009847f9 ldr x0, [x0, 0xf30]
│ ╎ ╎╎ ┌──< 0x01398218 000100b4 cbz x0, 0x1398238
│ ╎ ╎╎ ││ 0x0139821c 602200d1 sub x0, x19, 8
│ ╎ ╎╎┌───> 0x01398220 02fc5f88 ldaxr w2, [x0]
│ ╎ ╎╎╎││ 0x01398224 42040011 add w2, w2, 1
│ ╎ ╎╎╎││ 0x01398228 02fc0388 stlxr w3, w2, [x0]
│ ╎ ╎╎└───< 0x0139822c a3ffff35 cbnz w3, 0x1398220
│ ╎ ╎╎ ││ 0x01398230 820240f9 ldr x2, [x20]
│ ╎ └─────< 0x01398234 dbffff17 b 0x13981a0
│ ╎ ╎ └──> 0x01398238 63040011 add w3, w3, 1
│ ╎ ╎ │ 0x0139823c 63821fb8 stur w3, [x19, -8]
│ ╎ └────< 0x01398240 d8ffff17 b 0x13981a0
│ ╎ └─> 0x01398244 41805fb8 ldur w1, [x2, -8]
│ ╎ 0x01398248 23040051 sub w3, w1, 1
│ ╎ 0x0139824c 43801fb8 stur w3, [x2, -8]
└ └───────< 0x01398250 e5ffff17 b 0x13981e4
[0x01398164]>
~ $ strings assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | head -n 20
assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc: No such file or directory
~ $ unzip target.apk "assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc" -d .
Archive: target.apk extracting: ./assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc
~ $ head -c 16 assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | xxd 00000000: 87ea 74a7 37eb b381 a4af c1bf f96e 808a ..t.7........n..
~ $ unzip -l target.apk | grep ".so" 27157992 1980-01-01 00:00 lib/arm64-v8a/libcocos2djs.so
18994084 1980-01-01 00:00 lib/armeabi-v7a/libcocos2djs.so ~ $ unzip target.apk "lib/arm64-v8a/libcocos2djs.so" -d .
Archive: target.apk inflating: ./lib/arm64-v8a/libcocos2djs.so
~ $ strings lib/arm64-v8a/libcocos2djs.so | grep -A 5 -B 5 "jsb_set_xxtea_key" _ZN7cocos2d8Director20setAnimationIntervalEf _ZN13ScriptingCore11getInstanceEv _ZN7cocos2d19ScriptEngineManager11getInstanceEv
_ZN7cocos2d19ScriptEngineManager15setScriptEngineEPNS_20ScriptEngineProtocolE _ZN2se12ScriptEngine11getInstanceEv
_Z17jsb_set_xxtea_keyRKSs _ZN7cocos2d9FileUtils11getInstanceEv
_ZN7cocos2d9FileUtils18setAssetEncryptKeyERKSs _ZN7cocos2d9FileUtils27setAssetPathEncryptStrategyEi
_Z32jsb_init_file_operation_delegatev _ZN2se12ScriptEngine20setExceptionCallbackERKSt8functionIFvPKcS3_S3_EE
~ $ Sever kye ??
|
~ $ strings assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | head -n 20 ~ $ python harry_iq.py 🔍 Harry AI is hunting for the specific Server Gateways... ✅ FOUND Ta.in in: ./extracted_apk/classes.dex Context: ...n I t"pTain =n Ta.in Ua,i8#Sa'i1n (�n "... ✅ FOUND Ta.kr in: ./extracted_apk/classes.dex Context: ... ߟC(er 8rz 8eTb.kq !Ta.krs""p "p'"... ✅ FOUND gcm.top in: ./extracted_apk/classes.dex Context: ...e-iidFirebase-Client-Log-TypeFirebase-Client gcm.topiRST_FULLiid-operation mExpecte... ✅ FOUND socket.io in: ./extracted_apk/lib/armeabi-v7a/libcocos2djs.so Context: ...aryack0::413probe5wss://ws:///socket.io/1/websocket//socket.io/1/websocket/?EIO... ✅ FOUND socket.io in: ./extracted_apk/lib/arm64-v8a/libcocos2djs.so Context: ...ck0::41probewss://ws:///socket.io/1/websocket//socket.io/1/websocket/?EIO... ~ $ find ./extracted_apk/assets/resources/ -name ".jsc" ./extracted_apk/assets/resources/3e/3ed904369c054b1d2a38c7e2515102fe.jsc ./extracted_apk/assets/resources/11/11a14136a10e3a26966fad295c36ec17.jsc ./extracted_apk/assets/resources/ed/edcb0165a5f66d53b971d59244b0bcd4.jsc ./extracted_apk/assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc အပေါ်က Python code ကို nano harry_iq.py နဲ့ ရေးပါ။ ၂။ ပြီးရင် python harry_iq.py လို့ run ပါ။ ~ $ nano harry_iq.py ~ $ python harry_iq.py 🔑 Potential Key Found: CxGdPe; 💾 Hex Key: 4378476450653b14 /sdcard/Download $ hexdump -C ~/extracted_apk/lib/armeabi-v7a/libcocos2djs.so | grep -A 10 "wsokg{" ~ $ nano decrypt_jsc.py [0x000b53f3]> s 0x00743974 ~ $ strings assets/resources/6c/6cdc64a3ff4a27dff99fe6638392bbd5.jsc | head -n 20 |
3 participants
No description provided.