Application test method, electronic equipment and storage medium
By building proxy encryption and decryption programs, using function call state variables and remote call function programs, the problem of inability to intuitively view and modify messages in the existing technology is solved, and the efficiency and quality of application testing are improved.
Patent Information
- Application Number
- CN202211654113.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-20
- Publication Date
- 2025-10-03
- Estimated Expiration
- 2042-12-20
AI Technical Summary
In the existing technology, when using the HOOK method to tamper with the message, it is necessary to modify the data in the injection code to take effect, and the plaintext message cannot be intuitively viewed in the proxy packet capture tool, which affects the test efficiency.
Build a proxy encryption program and a proxy decryption program, including function call state variables and remote call function programs. Call these programs through the proxy packet capture tool plug-in to obtain the message text, and perform HOOK processing through Frida to implement filtering or calling of message encryption and decryption functions.
It makes it easy to view and modify the message text in the proxy packet capture tool, improving the efficiency and quality of application testing.
Smart Images

Figure CN115982015B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of application testing technology, and in particular to an application testing method, an electronic device, and a storage medium. Background Art
[0002] In related technologies, when using hooks to tamper with messages, data must be modified in the injected code before it can be saved and taken effect. Viewing messages is also not as convenient as viewing them in a proxy packet capture tool. However, when viewing messages using a proxy packet capture tool, the HTTP requests and responses are all encrypted, making it impossible to clearly view the plain text of the messages, let alone directly modify them. This makes application testing inconvenient and affects test efficiency.
[0003] In view of this, there is an urgent need to provide an application testing method that can easily view and modify messages, which is conducive to improving testing efficiency. Summary of the Invention
[0004] In order to overcome the problems existing in the related art, the present application provides an application testing method, an electronic device and a storage medium. The application testing method can easily view the message text and directly tamper with the message data, thereby improving the testing efficiency of the application.
[0005] The first aspect of the present application provides an application testing method, comprising:
[0006] Building a proxy encryption program and a proxy decryption program based on the message encryption function and the message decryption function in the application; both the proxy encryption program and the proxy decryption program include function call state variables and remote call function programs;
[0007] Call the proxy encryption program and proxy decryption program;
[0008] Determine, according to the start / stop state of the remote call function program, that the function call state variable is a function call indication parameter or a function deactivation indication parameter;
[0009] Determine whether to filter the message encryption function and the message decryption function in the application program according to the function call state variable;
[0010] If not, the message encryption function is called through the remote call function program to perform the message encryption test and the message decryption function is called to perform the message decryption test.
[0011] In one embodiment, determining the function call state variable as a function call indication parameter or a function deactivation indication parameter according to the start / stop state of the remote call function program includes:
[0012] If the remote call function program is in shutdown state, the function call state variable is determined as the function deactivation indication parameter;
[0013] If the remote call function program is in an enabled state, the function call state variable is determined as a function call indication parameter.
[0014] In one embodiment, determining whether to filter a message encryption function and a message decryption function in an application program according to a function call state variable includes:
[0015] If the function call state variable is determined to be a function deactivation indication parameter, the message encryption function and message decryption function in the application are filtered in response to the function deactivation indication parameter to obtain the plain text of the message sent by the application and / or the ciphertext of the message fed back by the program server.
[0016] In one embodiment, calling a message encryption function to perform a message encryption test and calling a message decryption function to perform a message decryption test by remotely calling a function program includes:
[0017] If the function call state variable is determined to be a function call indication parameter, then in response to the function call indication parameter, the message encryption function is called by the remote call function program to perform message encryption processing and the message decryption function is called to perform message decryption processing.
[0018] In one embodiment, filtering the message encryption function and the message decryption function in the application includes:
[0019] Use Frida to hook the message encryption function and message decryption function in the application.
[0020] In one embodiment, a proxy encryption program and a proxy decryption program are constructed based on the message encryption function and the message decryption function in the application program, including:
[0021] Export the message encryption function and message decryption function from the application;
[0022] The message encryption function and the message decryption function are encapsulated respectively to obtain a proxy encryption program and a proxy decryption program.
[0023] In one embodiment, calling the proxy encryption program and the proxy decryption program includes:
[0024] The proxy encryption program and proxy decryption program are called through the preset proxy packet capture tool plug-in.
[0025] In one embodiment, deriving a message encryption function and a message decryption function from an application program includes:
[0026] Search for message encryption and decryption functions in the application through reverse analysis;
[0027] Export message encryption and decryption functions through Frida RPC.
[0028] A second aspect of the present application provides an electronic device, including:
[0029] processor; and
[0030] The memory stores executable codes thereon, and when the executable codes are executed by the processor, the processor is caused to execute the method described above.
[0031] A third aspect of the present application provides a non-transitory machine-readable storage medium having executable code stored thereon. When the executable code is executed by a processor of an electronic device, the processor is caused to execute the method described above.
[0032] The technical solution provided by this application may have the following beneficial effects:
[0033] By constructing proxy encryption and decryption programs based on the message encryption and decryption functions in an application, each program includes a function call state variable and a remote call function program. The proxy encryption and decryption programs are called, and after the call, the function call state variable is determined to be a function call indication parameter or a function deactivation indication parameter based on the start / stop status of the remote call function program in the proxy encryption and decryption programs. The function call state variable can then be used to determine whether to filter the message encryption and decryption functions in the application. This can disable the message encryption and decryption functions in the application, facilitating access to the message text within the application for direct and convenient tampering with the message data, thereby improving application testing efficiency. Furthermore, if filtering is not performed, indicating that encryption and decryption processing is required, the message encryption function is called through the remote call function program to perform a message encryption test, and the message decryption function is called through the remote call function program to perform a message decryption test, ensuring the proper operation of the encryption and decryption functions and improving the testing quality of the application.
[0034] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS
[0035] By reading the detailed description below with reference to the accompanying drawings, the above and other objects, features and advantages of the exemplary embodiments of the present application will become readily understood. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding numbers represent the same or corresponding parts.
[0036] Figure 1This is one of the flow charts of the application testing method shown in the embodiment of the present application;
[0037] Figure 2 This is the second flow chart of the application testing method shown in the embodiment of the present application;
[0038] Figure 3 This is the third flow chart of the application testing method shown in the embodiment of the present application;
[0039] Figure 4 It is a structural diagram of an electronic device shown in an embodiment of the present application. DETAILED DESCRIPTION
[0040] The embodiments will now be described with reference to the accompanying drawings. It should be understood that for simplicity and clarity of explanation, reference numerals may be repeated in the accompanying drawings to indicate corresponding or similar elements, where deemed appropriate. In addition, this application sets forth many specific details in order to provide a thorough understanding of the embodiments described herein. However, one of ordinary skill in the art will understand that the embodiments described herein can be practiced without these specific details. In other cases, well-known methods, processes, and components are not described in detail to avoid obscuring the embodiments described herein. Moreover, this description should not be construed as limiting the scope of the embodiments described herein.
[0041] When using the HOOK method to tamper with messages, the data needs to be modified in the injection code before it can be saved and taken effect. Viewing the message is not as convenient as viewing it in a proxy packet capture tool. However, when using a proxy packet capture tool to view the message, the HTTP request and HTTP response are both ciphertext, making it impossible to clearly view the plain text of the message, let alone directly modify it. This makes application testing inconvenient and affects test efficiency. In view of this, it is urgent to provide an application testing method that can view and modify messages in a proxy packet capture tool to improve test efficiency.
[0042] In response to the above problems, an embodiment of the present application provides an application testing method that can easily view the message text and conveniently and directly tamper with the message data, thereby improving the testing efficiency of the application program.
[0043] The technical solutions of the embodiments of the present application are described in detail below with reference to the accompanying drawings.
[0044] Figure 1 This is one of the flow charts of the application test method shown in the embodiment of this application. Figure 1 The application testing method shown in the embodiment of the present application may include:
[0045] In step 101, a proxy encryption program and a proxy decryption program are constructed based on the message encryption function and the message decryption function in the application program.
[0046] Since it is difficult to view the plaintext of the message in the application, it is necessary to build a proxy program to perform encryption and decryption functions so that the plaintext of the message can be obtained before encryption and after decryption, making it easier to view and tamper with the message. In an embodiment of the present application, the proxy encryption program and the proxy decryption program both include a function call state variable and a remote call function program, wherein the function call state variable is used to indicate whether the proxy encryption program is remotely calling the message encryption function through the remote call function program, and indicates whether the proxy decryption program is remotely calling the message decryption function through the remote call function program; the remote call function program can be RPC (Remote Procedure Call), which is used to remotely call the message encryption function and the message decryption function.
[0047] In step 102, a proxy encryption program and a proxy decryption program are called.
[0048] In an embodiment of the present application, a proxy encryption program and a proxy decryption program can be called through a preset proxy packet capture tool plug-in, and the preset proxy packet capture tool plug-in can already implement the packet capture function for the application. Exemplarily, the preset proxy packet capture tool plug-in can be Burp Proxy, which intercepts all data transmitted between the application and the program server through proxy mode.
[0049] In step 103, the function call state variable is determined to be a function call indication parameter or a function deactivation indication parameter according to the start / stop state of the remote call function program.
[0050] In the embodiment of the present application, after calling the proxy encryption program and the proxy decryption program, the remote call function program in the proxy encryption program and the proxy decryption program may not be started immediately, because the message text may need to be viewed and modified.
[0051] For example, the function call state variable can be a BOOL value variable. In this case, the function call indication parameter can be TRUE, indicating that the remote call function program is calling the function, while the function deactivation indication parameter can be FALSE, indicating that the remote call function program is not calling the function. It is understood that in actual applications, the form of the function call state variable varies depending on the actual application situation and is not limited here.
[0052] In step 104, it is determined whether to perform filtering processing on the message encryption function and the message decryption function in the application program according to the function call state variable.
[0053] In the embodiment of the present application, filtering processing refers to a processing method that makes the message encryption function and the message decryption function in the application program not work, so that if the input message is civilized, the output message is also civilized; if the input message is ciphertext, the output message is also ciphertext, that is, what is input is what is output.
[0054] In step 105, if not, the message encryption function is called by the remote call function program to perform the message encryption test and the message decryption function is called to perform the message decryption test.
[0055] If not, it means that the parameter value of the current function call state variable does not point to the execution of filtering processing, but points to the need to call a function to perform encryption and decryption processing, which means that the remote call function program has been enabled at this time. Then, the message encryption function and message decryption function in the application will not be filtered, but the message encryption function in the application will be called through the remote call function program to perform the message encryption test, and the message decryption function in the application will be called to perform the message decryption test.
[0056] By constructing proxy encryption and decryption programs based on the message encryption and decryption functions in an application, each program includes a function call state variable and a remote call function program. The proxy encryption and decryption programs are called, and after the call, the function call state variable is determined to be a function call indication parameter or a function deactivation indication parameter based on the start / stop status of the remote call function program in the proxy encryption and decryption programs. The function call state variable can then be used to determine whether to filter the message encryption and decryption functions in the application. This can disable the message encryption and decryption functions in the application, facilitating access to the message text within the application for direct and convenient tampering with the message data, thereby improving application testing efficiency. Furthermore, if filtering is not performed, indicating that encryption and decryption processing is required, the message encryption function is called through the remote call function program to perform a message encryption test, and the message decryption function is called through the remote call function program to perform a message decryption test, ensuring the proper operation of the encryption and decryption functions and improving the testing quality of the application.
[0057] In some embodiments, the function call state variable can be used to determine whether to obtain the plain text of the message sent by the application and / or the ciphertext of the message fed back by the program server, or to remotely call the function program to call the message encryption function to perform message encryption processing and call the message decryption function to perform message decryption processing. Figure 2 This is the second flow chart of the application test method shown in the embodiment of the present application, please refer to Figure 2 The application testing method shown in the embodiment of the present application may include:
[0058] In step 201 , if the remote call function program is in a shutdown state, the function call state variable is determined to be a function disable indication parameter.
[0059] In step 202, the plain text of the message sent by the application and / or the cipher text of the message fed back by the application server are obtained.
[0060] If the function call state variable is determined to be a function deactivation indication parameter, the message encryption function and message decryption function in the application are filtered in response to the function deactivation indication parameter to obtain the plain text of the message sent by the application and / or the ciphertext of the message fed back by the program server.
[0061] In an embodiment of the present application, Frida can be used to hook the message encryption and decryption functions in an application to implement filtering. Hooking is a programming mechanism, also known as a hook or hooking, that refers to various techniques for modifying or extending the behavior of an operating system, application, or other software component by intercepting function calls, message passing, or event transmission between program modules. The code that handles the intercepted function calls, events, and messages is the hook. In an embodiment of the present application, the message encryption and decryption functions in the application need to be hooked, rendering them inactive. This ensures that when the message encryption and decryption functions are not being remotely called, the plain text of the message input by the application is not encrypted by the message encryption function, and the plain text of the message output is also the plain text. This allows the application to capture the plain text of the message input, facilitating the viewing and modification of the message data. The ciphertext of the message returned by the program server is also not decrypted by the message decryption function of the application, and the ciphertext of the message output is also the ciphertext of the message.
[0062] In step 203, if the remote call function program is in an enabled state, the function call state variable is determined as a function call indication parameter.
[0063] In step 204, the message encryption function is called by the remote function call program to perform message encryption processing and the message decryption function is called to perform message decryption processing.
[0064] If the function call state variable is determined to be a function call indication parameter, then in response to the function call indication parameter, the message encryption function is called through the remote call function program to perform message encryption processing and the message decryption function is called to perform message decryption processing. This can avoid the message encryption function and the message decryption function being affected by the above-mentioned filtering processing when encryption and decryption are called through the remote call function program, so that during the execution of the proxy encryption program and the proxy decryption program, the input is what the output is, ensuring that the encryption and decryption functions in the application test can operate normally.
[0065] It can be understood that there is no strict execution order between step 201 and step 202, and step 203 and step 204. They need to be determined based on the start and stop status of the remote call function program. That is, if the remote call function program is in the shutdown state, step 201 and step 202 are executed; if the remote call function program is in the enabled state, step 203 and step 204 are executed, which depends on the actual application situation.
[0066] In some embodiments, the process of building a proxy encryption program and a proxy decryption program is further designed. Figure 3 This is the third flow chart of the application test method shown in the embodiment of this application, please refer to Figure 3 The application testing method shown in the embodiment of the present application may include:
[0067] In step 301, a message encryption function and a message decryption function are derived from an application program.
[0068] In the embodiments of the present application, reverse analysis can first be used to search for message encryption and decryption functions within an application. Reverse analysis is generally performed using a combination of static and dynamic analysis. Static analysis involves scanning a program without executing the code, using various techniques such as lexical analysis and syntax analysis to generate a disassembled version of the program. The program's functionality is then understood by reading the generated disassembled version. Dynamic analysis, on the other hand, involves running the current application to obtain information such as its output or internal state, thereby understanding the application's nature and functionality. A message encryption function refers to the function within an application that encrypts messages. Correspondingly, a message decryption function refers to the function within an application that decrypts messages. Once the application's functionality and nature are understood through reverse analysis, these functions can be searched for. It is understood that there are various methods for searching for message encryption and decryption functions. In practice, these methods vary depending on the specific application and are not intended to be exclusive.
[0069] Then, the message encryption and decryption functions can be exported through Frida RPC. Frida RPC refers to Frida's RPC functionality. Frida is a hook and debugging framework based on Python and JavaScript. Using Frida, you can obtain application information such as module lists, thread lists, and library export functions. You can also intercept and call specified functions, and inject code. Frida's main function is to inject scripts into new target processes, and changes can be observed in real time during execution. RPC stands for remote procedure call, and Frida's RPC functionality refers to the remote call functionality within Frida. Exporting the message encryption and decryption functions means that they can accept remote calls. It does not mean that the message encryption and decryption functions are duplicated. The message encryption and decryption functions actually still exist in the application.
[0070] In step 302, the message encryption function and the message decryption function are encapsulated to obtain a proxy encryption program and a proxy decryption program.
[0071] In the embodiments of the present application, the message encryption function and the message decryption function can be encapsulated separately using FastAPI. FastAPI refers to a web framework for building APIs using Python 3.6+ based on standard Python type hints. It is understood that there are various ways to encapsulate the message encryption function and the message decryption function. In actual applications, the method depends on the actual application situation and is not limited here.
[0072] Corresponding to the aforementioned application function implementation method embodiment, the present application also provides an electronic device for executing the application testing method and corresponding embodiments.
[0073] Figure 4 FIG. 8 is a block diagram showing the hardware configuration of an electronic device 800 that can implement the application test method of an embodiment of the present application. Figure 4 As shown, the electronic device 800 may include a processor 810 and a memory 820. Figure 4 In the electronic device 800, only the components related to this embodiment are shown. Therefore, it is obvious to those skilled in the art that the electronic device 800 may also include components related to the embodiment. Figure 4 The components shown in the figure are different from the common components. For example: fixed-point arithmetic units.
[0074] The electronic device 800 may correspond to a computing device having various processing functions, such as functions for generating a neural network, training or learning a neural network, quantizing a floating-point neural network to a fixed-point neural network, or retraining a neural network. For example, the electronic device 800 may be implemented as various types of devices, such as a personal computer (PC), a server device, a mobile device, etc.
[0075] The processor 810 controls all functions of the electronic device 800. For example, the processor 810 controls all functions of the electronic device 800 by executing a program stored in the memory 820 on the electronic device 800. The processor 810 can be implemented by a central processing unit (CPU), a graphics processing unit (GPU), an application processor (AP), an artificial intelligence processor chip (IPU), etc. provided in the electronic device 800. However, the present application is not limited thereto.
[0076] In some embodiments, the processor 810 may include an input / output (I / O) unit 811 and a computing unit 812. The I / O unit 811 may be configured to receive various data, such as message encryption and decryption functions in an application. For example, the computing unit 812 may be configured to utilize the message encryption and decryption functions in the application received via the I / O unit 811 to construct a proxy encryption program and a proxy decryption program, and then call the proxy encryption and decryption programs. The computing unit 812 may determine whether to filter the message encryption and decryption functions in the application based on the start / stop status of the remotely called function program. The computing unit 812 may determine whether to filter the message encryption and decryption functions in the application based on the function call state variable. If not, the computing unit 812 may call the message encryption and decryption functions via the remotely called function program to perform a message encryption test and to call the message decryption and decryption functions to perform a message decryption test. The test results may be output, for example, by the I / O unit 811. The output data may be provided to the memory 820 for reading and use by other devices (not shown), or may be directly provided to other devices for use.
[0077] Memory 820 is hardware used to store various data processed by electronic device 800. For example, memory 820 can store processed data and data to be processed by electronic device 800. Memory 820 can also store data involved in the application testing method that has been processed or is to be processed by processor 810. Furthermore, memory 820 can store applications, driver programs, and the like to be driven by electronic device 800. For example, memory 820 can store various programs related to the application testing method to be executed by processor 810. Memory 820 can be DRAM, but the present application is not limited thereto. Memory 820 can include at least one of volatile memory and non-volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, phase change RAM (PRAM), magnetic RAM (MRAM), resistive RAM (RRAM), ferroelectric RAM (FRAM), and the like. Volatile memory can include dynamic RAM (DRAM), static RAM (SRAM), synchronous DRAM (SDRAM), PRAM, MRAM, RRAM, ferroelectric RAM (FeRAM), and the like. In an embodiment, the memory 820 may include at least one of a hard disk drive (HDD), a solid state drive (SSD), a high-density flash memory (CF), a secure digital (SD) card, a micro secure digital (Micro-SD) card, a mini secure digital (Mini-SD) card, an extreme digital (xD) card, caches, or a memory stick.
[0078] In summary, the specific functions implemented by the memory 820 and processor 810 of the electronic device 800 provided in the embodiments of this specification can be interpreted in comparison with the aforementioned embodiments in this specification, and can achieve the technical effects of the aforementioned embodiments, so they will not be repeated here.
[0079] In this embodiment, the processor 810 can be implemented in any suitable manner. For example, the processor 810 can take the form of a microprocessor or a processor and a computer-readable medium storing computer-readable program code (such as software or firmware) executable by the (micro)processor, logic gates, switches, an application-specific integrated circuit (ASIC), a programmable logic controller, an embedded microcontroller, etc.
[0080] It should be understood that the terms "first" or "second" and the like in the claims, specifications, and drawings disclosed in this application are used to distinguish different objects, rather than to describe a specific order. The terms "include" and "comprising" used in the specifications and claims disclosed in this application indicate the presence of the described features, integers, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or combinations thereof.
[0081] It should also be understood that the terms used in this disclosure are for descriptive purposes only.
[0082] As used in the specification and claims of this application, a single word is used unless the context clearly indicates otherwise.
[0083] The plural forms "a", "an" and "the" are intended to include plural forms. It should also be further understood that the term "and / or" used in the disclosure and claims of this application refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations.
[0084] Although the implementation methods of this application are as described above, the above contents are only examples used to facilitate understanding of this application and are not intended to limit the scope and application scenarios of this application.
[0085] Those skilled in the art may make any modifications and changes in the form and details of implementation without departing from the spirit and scope disclosed in this application, but the scope of patent protection of this application shall still be based on the scope defined by the attached claims.
[0086] It should also be understood that any module, unit, component, server, computer, terminal, or device that executes instructions as exemplified herein may include or otherwise access a computer-readable medium, such as a storage medium.
[0087] Storage media, computer storage media, or data storage devices (removable and / or non-removable) such as magnetic disks, optical disks, or tapes. Computer storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules, or other data.
Claims
1. An application testing method, characterized in that: include: Constructing a proxy encryption program and a proxy decryption program based on the message encryption function and the message decryption function in the application; the proxy encryption program and the proxy decryption program both contain function call state variables and remote call function programs; Calling the proxy encryption program and the proxy decryption program; Determining, according to the start / stop state of the remote call function program, that the function call state variable is a function call indication parameter or a function deactivation indication parameter; determining whether to perform filtering processing on the message encryption function and the message decryption function in the application according to the function call state variable; If not, the message encryption function is called through the remote call function program to perform a message encryption test and the message decryption function is called to perform a message decryption test.
2. The application testing method according to claim 1, characterized in that: The step of determining, according to the start / stop state of the remotely called function program, that the function call state variable is a function call indication parameter or a function deactivation indication parameter comprises: If the remote call function program is in a shutdown state, the function call state variable is determined to be the function deactivation indication parameter; If the remote call function program is in an enabled state, the function call state variable is determined as the function call indication parameter.
3. The application testing method according to claim 2, characterized in that: The determining, according to the function call state variable, whether to perform filtering processing on the message encryption function and the message decryption function in the application program includes: If the function call state variable is determined to be the function deactivation indication parameter, the message encryption function and the message decryption function in the application are filtered in response to the function deactivation indication parameter to obtain the plain text of the message sent by the application and / or the ciphertext of the message fed back by the program server.
4. The application testing method according to claim 2, characterized in that: The step of calling the message encryption function to perform a message encryption test and calling the message decryption function to perform a message decryption test through the remote call function program includes: If the function call state variable is determined to be the function call indication parameter, then in response to the function call indication parameter, the message encryption function is called through the remote call function program to perform message encryption processing and the message decryption function is called to perform message decryption processing.
5. The application testing method according to claim 3, characterized in that: The filtering process of the message encryption function and the message decryption function in the application program includes: The message encryption function and the message decryption function in the application are HOOKed by Frida.
6. The application testing method according to claim 1, characterized in that: The construction of the proxy encryption program and the proxy decryption program based on the message encryption function and the message decryption function in the application program includes: deriving the message encryption function and the message decryption function from the application program; The message encryption function and the message decryption function are respectively encapsulated to obtain the proxy encryption program and the proxy decryption program.
7. The application testing method according to claim 1, characterized in that: The calling of the proxy encryption program and the proxy decryption program includes: The proxy encryption program and the proxy decryption program are called through a preset proxy packet capture tool plug-in.
8. The application testing method according to claim 6, characterized in that: The deriving the message encryption function and the message decryption function from the application comprises: Searching for the message encryption function and the message decryption function in the application program through reverse analysis; The message encryption function and the message decryption function are exported through Frida RPC.
9. An electronic device, characterized in that: include: processor; as well as A memory having executable codes stored thereon, which, when executed by the processor, causes the processor to perform the method according to any one of claims 1 to 8.
10. A non-transitory machine-readable storage medium having executable code stored thereon, which, when executed by a processor of an electronic device, causes the processor to perform the method according to any one of claims 1 to 8.
Citation Information
Patent Citations
Testing method of application program, computer readable storage medium and terminal
CN109446053A
Encryption and decryption method based on micro-service, API gateway system and equipment
CN112019332A