https://souljian.cn/tags/app%E6%8A%93%E5%8C%85/Recent content in APP抓包 on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088222/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088222/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>APP 抓包只在授权测试环境进行。</p> <h2 id="一app-抓包架构">一、APP 抓包架构 </h2><img src="https://souljian.cn/img/app-capture-flow.svg" alt="APP 抓包架构" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">① 安装证书 → ② 配置代理 → ③ SSL Pinning 绕过 → ④ 抓包分析 </span></span></code></pre></td></tr></table> </div> </div><h2 id="二绕过-ssl-pinning">二、绕过 SSL Pinning </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># Frida</span> </span></span><span class="line"><span class="cl">frida -U -f com.target.app -l ssl_pinning.js </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># Objection</span> </span></span><span class="line"><span class="cl">objection -g com.target.app explore </span></span></code></pre></td></tr></table> </div> </div><h2 id="三小结">三、小结 </h2><p>APP 抓包的核心是<strong>证书安装 + SSL Pinning 绕过</strong>。Frida/Objection 是绕过的主流工具。</p>