php微信小措施解包进程实例详解

这个解包只能看个或许

1.找到小措施压缩包

1.1、手机root或安装模仿器(我用的是夜神)

1.2、在模仿器上安装微信(用android5系统的模仿器,低版本小措施容易打不开)

1.3、打开登岸微信后,打开小措施

1.4、打开模仿器自带的文件打点器来到目次:/data/data/com.tencent.mm/MicroMsg/{{一串32位的16进制字符串文件夹}}/appbrand/pkg/

1.5、内里有许多wxapkg文件,找到最新修他日期的文件好比 -357038350_91.wxapkg,前面打勾选中

1.6、文件打点器回到/mnt/shared/Other目次,粘贴即可,打开安卓模仿器上我的电脑 =〉打开电脑文件夹找到粘贴的文件-357038350_91.wxapkg 夜神教程链接:跳转查察

2.对压缩包解包

具体参考:https://codechina.csdn.net/mirrors/leo9960/wechat-app-unpack?utm_source=csdn_github_accelerator

我用的php类:

利用要领:cmd =>cd php文件目次 =〉php wx_unpak.php 357038350_91.wxapkg

我主要是想用个中的一些图片,许多图片都被base64了放到js(app-service.js)和样式(app-wxss.js)文件中了;需要我们匹配组装一下

<?php $str = file_get_contents('_-357038350_97.wxapkg.unpacked/app-service.js'); $preg = '/(data:image.*?)\"/'; $len = strlen('data:image/png;base64,'); if(preg_match_all($preg, $str, $arr)){ foreach($arr[1] as $k => $img){ file_put_contents('./images/'.$k.'.png',base64_decode(substr($img,$len))); //echo substr($img,$len);exit; } } else { echo 'no'; } $str = file_get_contents('_-357038350_97.wxapkg.unpacked/app-wxss.js'); $preg = '/\((data:image.*?)\)/'; $len = strlen('data:image/png;base64,'); if(preg_match_all($preg, $str, $arr)){ foreach($arr[1] as $k => $img){ file_put_contents('./images/a2_'.$k.'.png',base64_decode(substr($img,$len))); //echo substr($img,$len);exit; } } else { echo 'no'; }

wx_unpak.php

<?php /** 源文件目次 /data/data/com.tencent.mm/MicroMsg/{{一串32位的16进制字符串文件夹}}/appbrand/pkg/ /data/data/com.eg.android.AlipayGphone, 在files/nebulaInstallApps/目次下存储了所有加载过的小措施 * [php] /path/to/unpack-wxapkg.php <xxx.wxapkg> * php unpak.php _1123949441_351.wxapkg */ function unpack_wxapkg($file, $targetDir) { if (!is_dir($targetDir)){ mkdir($targetDir); } echo "Reading file.\n"; $file = file_get_contents($file); $ptr = 18; $headerStruct = new StructDef([ 'mask1' => 'ushort', 'info1' => 'ulong', 'indexInfoLength' => 'ulong', 'bodyInfoLength' => 'ushort', 'mask2' => 'ushort', 'fileCount' => 'ulong', ]); echo "Parsing file header...\n"; $header = $headerStruct->unpack($file); // print_r(['header' => $header]); $unpackULong = function () use (&$file, &$ptr) { $ret = unpack_ulong(substr($file, $ptr, 4)); $ptr += 4; return $ret; }; $unpackUShort = function () use (&$file, &$ptr) { $ret = unpack_ushort(substr($file, $ptr, 2)); $ptr += 2; return $ret; }; $unpackStr = function ($len) use (&$file, &$ptr) { $ret = substr($file, $ptr, $len); $ptr += $len; return $ret; }; $fileCount = $header['fileCount']; echo "Got $fileCount files.\n"; $unpackedFiles = []; for ($i = 0; $i < $fileCount; $i++) { $nameLength = $unpackULong(); $f = [ 'nameLength' => $nameLength, 'name' => $unpackStr($nameLength), 'offset' => $unpackULong(), 'size' => $unpackULong(), ]; echo "Unpacking file {$f['name']} ({$f['size']}bytes)...\n"; $f['content'] = substr($file, $f['offset'], $f['size']); $unpackedFiles[] = $f; $destFile = $targetDir . $f['name']; $destDir = dirname($destFile); if (!is_dir($destDir)){ mkdir($destDir, 0777, true); } file_put_contents($targetDir . $f['name'], $f['content']); } // print_r(['unpackedFiles' => $unpackedFiles]); echo "All done.\n"; } function unpack_ulong($str) { $x = unpack('N', $str); return $x[1]; } function unpack_ushort($str) { $x = unpack('n', $str); return $x[1]; } class StructDef { protected $def; protected $unpackFormat; public function __construct($def) { $this->def = $def; $this->unpackFormat = self::convertStructDefToUnpackFormat($def); } public function unpack($data) { return unpack($this->unpackFormat, $data); } protected static function convertStructDefToUnpackFormat($def) { $defTypeToUnpackType = [ 'byte' => 'C', 'uchar' => 'C', 'u8' => 'C', 'ushort' => 'n', 'u16' => 'n', 'ulong' => 'N', 'u32' => 'N', ]; $ret = []; foreach ($def as $key => $type) { $ret[] = $defTypeToUnpackType[$type] . $key; } return implode('https://www.jb51.net/', $ret); } } $packageFile = $argv[1]; //支持目次下文件批量解压 if (is_dir($packageFile)){ $handle = opendir($packageFile); if($handle){ while(($fl = readdir($handle)) !== false){ $temp = $packageFile.DIRECTORY_SEPARATOR.$fl; //假如不加 $fl!='.' && $fl != '..' 则会造成把$dir的父级目次也读取出来 if(is_file($temp)){ if($fl!='.' && $fl != '..'){ $targetDir = $temp . '.unpacked'; unpack_wxapkg($temp, $targetDir); } } } } }else if (is_file($packageFile)){ $targetDir = $packageFile . '.unpacked'; unpack_wxapkg($packageFile, $targetDir); }else{ echo <<<HELP Usage: [php] {$argv[0]} <xxx.wxapkg> - Unpack the `xxx.wxapkg` to `xxx.wxapkg.unpacked` directory. HELP; exit(1); } exit(0);

内容版权声明:除非注明,否则皆为本站原创文章。

转载注明出处:https://www.heiqu.com/wsjxdg.html