https://ranch007.github.io/tags/android/ Recent content in Android on Ranch's Blog Hugo -- gohugo.io zh Ranch's Blog Thu, 01 Oct 2026 17:30:20 +0800 https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/ Tue, 19 Nov 2024 12:32:00 +0800 https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/ <img src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/bp+mumu.png" alt="Featured image of post APP抓包之 Burpsuite+MuMu模拟器12抓包" /><hr> <h2 id="环境准备">环境准备 </h2><p><img alt="win11" class="gallery-image" data-flex-basis="796px" data-flex-grow="331" height="255" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119123929499.png" width="846"></p> <p><img alt="BurpSuite" class="gallery-image" data-flex-basis="477px" data-flex-grow="199" height="404" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119124354117.png" width="804"></p> <p><img alt="mumu模拟器12" class="gallery-image" data-flex-basis="353px" data-flex-grow="147" height="414" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119124219267.png" width="610"></p> <h3 id="调试工具">调试工具 </h3> <blockquote> <p><a class="link" href="https://blog.csdn.net/x2584179909/article/details/108319973" target="_blank" rel="noopener" >ADB 是 Android SDK 中的一个工具，可以直接操作管理 Android 模拟器或者真实的 Android 设备。</a></p> <p><a class="link" href="https://blog.csdn.net/zyhse/article/details/108186278" target="_blank" rel="noopener" >OpenSSL是一个功能丰富且开源的安全工具箱。</a></p> </blockquote> <h4 id="检查-adb">检查 adb </h4><p><img alt="file-20241119120016133" class="gallery-image" data-flex-basis="1524px" data-flex-grow="635" height="133" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119120016133.png" width="845"></p> <h4 id="检查-openssl">检查 OpenSSL </h4><p><img alt="image-20241119125118101" class="gallery-image" data-flex-basis="4227px" data-flex-grow="1761" height="62" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119125118101.png" width="1092"></p> <h2 id="下载证书">下载证书 </h2><p><img alt="根据出网网卡选择需要抓包的IP" class="gallery-image" data-flex-basis="442px" data-flex-grow="184" height="537" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119125447288.png" width="990"></p> <ul> <li>访问你的IP+端口即<code>ip:8088</code>导出CA证书，点击右上角下载</li> </ul> <p><img alt="下载CA证书" class="gallery-image" data-flex-basis="307px" data-flex-grow="128" height="936" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119125703566.png" width="1200"></p> <h2 id="进行调试">进行调试 </h2><h3 id="重命名证书">重命名证书 </h3><p>在保存ca证书的文件夹右键打开终端或者箭头导航栏输入<code>cmd</code>，并输入以下命令：</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-cmd" data-lang="cmd"><span class="line"><span class="cl">　openssl x509 -subject_hash_old -in {证书全名带后缀} </span></span></code></pre></td></tr></table> </div> </div><p><img alt="image-20241119130347588" class="gallery-image" data-flex-basis="473px" data-flex-grow="197" height="608" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119130347588.png" width="1200"></p> <p>生成一串字符串，复制红框保存下来，并把证书名字改为这个，后缀改为0，如下所示：</p> <p><img alt="image-20241119131117734" class="gallery-image" data-flex-basis="3526px" data-flex-grow="1469" height="59" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119131117734.png" width="867"></p> <h3 id="配置mumu模拟器">配置MuMu模拟器 </h3><ul> <li>打开磁盘可写以及Root权限，重启模拟器</li> </ul> <p><img alt="image-20241119131701019" class="gallery-image" data-flex-basis="372px" data-flex-grow="155" height="580" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119131701019.png" width="901"></p> <ul> <li>找到 adb 调试端口</li> </ul> <p><img alt="file-20241119115016803" class="gallery-image" data-flex-basis="337px" data-flex-grow="140" height="504" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119115016803.png" width="708"></p> <h3 id="使用-adb-连接模拟器">使用 adb 连接模拟器 </h3><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">adb devices：查看当前连接的设备，已连接的设备会显示出来 </span></span><span class="line"><span class="cl">adb connect：连接adb调试端口 </span></span><span class="line"><span class="cl">adb push &lt;本地路径\文件或文件夹&gt; &lt;手机端路径&gt;：把本地(pc机)的文件或文件夹复制到设备(手机) </span></span><span class="line"><span class="cl">adb shell：登录设备 shell，该命令将登录设备的shell（内核），登录shell后，可以使用 cd，ls，rm 等Linux命令 </span></span><span class="line"><span class="cl">su：提升为root权限（linux命令） </span></span></code></pre></td></tr></table> </div> </div><p><img alt="file-20241119120735030" class="gallery-image" data-flex-basis="612px" data-flex-grow="255" height="470" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119120735030.png" width="1200"></p> <ul> <li>使用<code>cd /sdcard/;ls</code>命令，查看刚刚上传的</li> </ul> <p><img alt="file-20241119121221236" class="gallery-image" data-flex-basis="3348px" data-flex-grow="1395" height="86" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119121221236.png" width="1200"></p> <ul> <li>将该文件移动到<code>/system/etc/security/cacerts/</code>目录下</li> </ul> <p><img alt="file-20241119121446224" class="gallery-image" data-flex-basis="3880px" data-flex-grow="1616" height="53" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119121446224.png" width="857"></p> <ul> <li>进入<code>/system/etc/security/cacerts/</code>目录，查看文件是否移动成功；并进行赋权和更改用户组。</li> </ul> <p><img alt="file-20241119122214557" class="gallery-image" data-flex-basis="1103px" data-flex-grow="459" height="194" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119122214557.png" width="892"></p> <ul> <li>重新启动MuMu模拟器，配置网络代理，访问浏览器</li> </ul> <p><img alt="image-20241119133649018" class="gallery-image" data-flex-basis="397px" data-flex-grow="165" height="573" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/image-20241119133649018.png" width="950"></p> <h2 id="尝试抓包">尝试抓包 </h2><p>证书安装完成，此时抓包不再显示证书无效</p> <p><img alt="file-20241119122619976" class="gallery-image" data-flex-basis="432px" data-flex-grow="180" height="878" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://ranch007.github.io/p/app%E6%8A%93%E5%8C%85%E4%B9%8B-burpsuite-mumu%E6%A8%A1%E6%8B%9F%E5%99%A812%E6%8A%93%E5%8C%85/assets/file-20241119122619976.png" width="1584"></p> <h2 id="附录">附录 </h2><h3 id="参考文献">参考文献 </h3><ul> <li>《<a class="link" href="https://blog.csdn.net/weixin_73399382/article/details/140844698" target="_blank" rel="noopener" >APP抓包之 Burpsuite+MuMu模拟器12抓包_mumu模拟器安装burp证书-CSDN博客</a>》</li> <li>《<a class="link" href="https://blog.csdn.net/x2584179909/article/details/108319973" target="_blank" rel="noopener" >windows下载安装adb（极其简单）_adb工具下载windows-CSDN博客</a>》</li> <li>《<a class="link" href="https://blog.csdn.net/zyhse/article/details/108186278" target="_blank" rel="noopener" >环境篇-Windows下安装OpenSSL_opensslwin64下哪个-CSDN博客</a>》</li> <li>《<a class="link" href="https://blog.csdn.net/ZL_1618/article/details/132356781?ops_request_misc=%7B%22request%5Fid%22%3A%228766e0ec2d01b6e83232eb11d4a10602%22%2C%22scm%22%3A%2220140713.130102334..%22%7D&amp;request_id=8766e0ec2d01b6e83232eb11d4a10602&amp;biz_id=0&amp;utm_medium=distribute.pc_search_result.none-task-blog-2~all~top_positive~default-1-132356781-null-null.142%5ev100%5epc_search_result_base3&amp;utm_term=adb&amp;spm=1018.2226.3001.4187" target="_blank" rel="noopener" >ADB安装及使用详解（非常详细）从零基础入门到精通，看完这一篇就够了__adb工具-CSDN博客</a>》</li> </ul> <h3 id="版权信息">版权信息 </h3><p>本文原载于 <a class="link" href="https://ranch007.github.io" target="_blank" rel="noopener" >Ranch&rsquo;s Blog</a>，遵循 CC BY-NC-SA 4.0 协议，复制请保留原文出处。</p>