tableplus deviceID获取

Pojieba 发表于 2024-2-12 22:29:34

### tableplus deviceID盲猜是md5

用frida hook cc\_md5

```
Interceptor.attach(Module.findExportByName(null, 'CC_MD5'), {
onEnter: function (args) {
   console.log("[+] --------------------------------------------------------------");
   try {
         const deviceid_ram = Memory.readUtf8String(args, args.toInt32());
         LOG("[+] args: " + deviceid_ram);
onLeave: function (retval) {
   // retval == args

   var ByteArray = Memory.readByteArray(ArgPtr, 16);
   var uint8Array = new Uint8Array(ByteArray);

   var str = "";
   for (var i = 0; i < uint8Array.length; i++) {
         var hextemp = (uint8Array.toString(16))
         if (hextemp.length == 1) {
            hextemp = "0" + hextemp
         }
         str += hextemp;
   }
   LOG("[+] MD5 Hash: " + str);
}
});
```

从显示看出md5的参数是有一个网卡mac地址+序列号生成的，
类似这样11:11:11:11:11:11abcdefabcdef

* mac地址获取

```
ifconfig en0 | grep -o -E '([[:xdigit:]]{1,2}:){5}[[:xdigit:]]{1,2}'
```

* 序列号获取

```
system_profiler SPHardwareDataType | grep Serial
```

deviceID = md5(mac+Serial)

Gemstone 发表于 2024-3-4 19:41:59

序列号获取

页: [1]

UltraDebug's Archiver

tableplus deviceID获取