Douyin's latest packet capture solution

You can use the hook java layer as shown in the figure below. dy defaults to the quick protocol, but in order to be compatible with more versions of mobile phones, there is a downgrade operation. After all, you are worried that the lower version of cronet will not be well adapted, so you can use the method of hook To force it to downgrade to the Http protocol.

 

frida script:

setImmediate(function() {
Java.perform(function() {
    var targetClass='org.chromium.CronetClient';
    var methodName='tryCreateCronetEngine';
    var gclass = Java.use(targetClass);
    gclass[methodName].overload('android.content.Context','boolean','boolean','boolean','boolean','java.lang.String','java.util.concurrent.Executor','boolean').implementation = function(arg0,arg1,arg2,arg3,arg4,arg5,arg6,arg7) {
    }
})
})

You can capture packets by hooking frida, which solves the problem that some packets cannot be captured by so patch, and should be able to kill all versions of dy.

 Advanced reverse engineering and deobfuscation