当前位置:首页 > iOS > 正文内容

APPStore协议之下载接口

8年前 (2017-08-29)iOS

两次下载抓包发现所提交参数只有两个地方不一样,一个自然是软件的id,另外一个则是kbsync。

接口地址:

https://buy.itunes.apple.com/WebObjects/MZBuy.woa/wa/buyProduct

cookie:


mz_mt0-11379330482ApP12//wyqkdN0H67hE9ho45tz8TxVfCrbC2/7psJG78BrFWL0V+AN7AZobYdVrOofQRZl+fytBzYwNkMed/fkUcpIrMh425NZRNaun3mAPLeWqT4ADYINGiT+h20uhvcjncrhnkX5NrlLSBNKFi/3Jk8pEIN4M08zrquaDqXIhRcAjv2tGztsLCyEFWvDt27GGNBYo=
ns-mzf-inst36-98-443-109-98-8297-142527-14-st11
session-store-id3741F8DA14D9A87BFF01317FA8408C2D
hsaccnt1
mzf_in142527
wosid-liteq3alZ8ULE3mkcvGTqri6W0
pldfltcida49df753299c44dca8e7cfabdd51c8fc014
mz_at_ssl-11379330482AwUAAAECAAGu3AAAAABZpP3ldwspSXq1qBRfctK+BBaQSn+3APQ=
mz_at0-11379330482AwQAAAECAAGu3AAAAABZpP3lp2KD7tkhp4zIGjkHE869AASRrlw=
X-Dsid11379330482
itspod14

POST内容

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0"> 

<dict> 

<key>buyAndSkipHarvesting</key> 

<string>true</string> 

<key>buyWithoutAuthorization</key> 

<string>true</string> 

<key>creditDisplay</key> 

<string /> 

<key>guid</key> 

<string>************</string> 

<key>hasAskedToFulfillPreorder</key> 

<string>true</string> 

<key>hasDoneAgeCheck</key> 

<string>true</string> 

<key>kbsync</key> 

<data> AAQAAyEjTs7hB0bwNszFiZIlpWv9lDQxSm9+OWDLFwguRmRotHDrQMMpOvs9N5thaJ0e

cOjOt4C/7js3RjGvxqUracTIaD9fbj5nlZV5htvelM0yzuhA3LTg1KQ++t68zfbECEb4 Pz9I6txik4aLG1LfGa/OV2xq63zgRCsKVI8KCMhrYir3cowAmkHEFDwRBtTBrft65s+s

untmsbu2/IKJi2cr5+zJOOnciJwk0hZ+gVBqwg77mGiQZ/JWSNVB39vTDA== </data> 

<key>machineName</key> 

<string>Alan'NB6</string> 

<key>needDiv</key> 

<string>0</string> 

<key>origPage</key> 

<string>Software-CN</string> 

<key>origPage2</key> 

<string>Genre-CN-Mobile Software Applications</string> 

<key>origPageCh</key> 

<string>Software Page</string> 

<key>origPageCh2</key> 

<string>Mobile Software Applications-main</string> 

<key>origPageLocation</key> 

<string>Buy</string> 

<key>origPageLocation2</key> 

<string>Tab_iphone|Swoosh_1|Lockup_6</string> 

<key>price</key> 

<string>0</string> 

<key>pricingParameters</key> 

<string>STDQ</string> 

<key>productType</key> 

<string>C</string> 

<key>salableAdamId</key> 

<string>1177989193</string> 

<key>wasWarnedAboutFirstTimeBuy</key> 

<string>true</string> 

</dict> 

</plist>

HEAD


POST /WebObjects/MZBuy.woa/wa/buyProduct HTTP/1.1
Hostbuy.itunes.apple.com
Accept*/*
X-Apple-Store-Front143465-19,17
X-TokenAwIAAAECAAGu3AAAAABZpP3ltQGZ3zI9p+fzb9Efn4NacrwPVKA=
Accept-Languagezh-cn, zh;q=0.75, en-us;q=0.50, en;q=0.25
Accept-Encodinggzip
User-AgentiTunes/11.3 (Windows; Microsoft Windows 7 x64 Ultimate Edition Service Pack 1 (Build 7601)) AppleWebKit/537.60.17
Connectionkeep-alive
X-Dsid11379330482
Cookiemz_mt0-11379330482=ApP12//wyqkdN0H67hE9ho45tz8TxVfCrbC2/7psJG78BrFWL0V+AN7AZobYdVrOofQRZl+fytBzYwNkMed/fkUcpIrMh425NZRNaun3mAPLeWqT4ADYINGiT+h20uhvcjncrhnkX5NrlLSBNKFi/3Jk8pEIN4M08zrquaDqXIhRcAjv2tGztsLCyEFWvDt27GGNBYo=; ns-mzf-inst=36-98-443-109-98-8297-142527-14-st11; session-store-id=3741F8DA14D9A87BFF01317FA8408C2D; hsaccnt=1; mzf_in=142527; wosid-lite=q3alZ8ULE3mkcvGTqri6W0; pldfltcid=a49df753299c44dca8e7cfabdd51c8fc014; mz_at_ssl-11379330482=AwUAAAECAAGu3AAAAABZpP3ldwspSXq1qBRfctK+BBaQSn+3APQ=; mz_at0-11379330482=AwQAAAECAAGu3AAAAABZpP3lp2KD7tkhp4zIGjkHE869AASRrlw=; X-Dsid=11379330482; itspod=14
X-Apple-Tz28800
Content-Length2327
Content-Typeapplication/x-www-form-urlencoded


扫描二维码推送至手机访问。

版权声明:本文由小祥子的博客发布,如需转载请注明出处。

本文地址:http://www.xiaoxiangzi.com/post/57.html

相关文章

Swift 文件夹和文件操作

首先获取app文件夹:(以下例子都在doucment文件夹下操作)let manager = FileManager.default let urls:&nb...

两次登录POST参数对比

接口地址https://p19-buy.itunes.apple.com/WebObjects/MZFinance.woa/wa/authenticate同一个账号进行两次登录对比X-Apple-AM...

APPStore协议之登录接口

以前还能用各种软件抓APPStore的HTTPS通讯过程,现在不行了。不过还是抓到了。登录地址:https://buy.itunes.apple.com/WebObjects/MZFinance.wo...

iOS统计代码行数

cd到工程目录find . "(" -name "*.swift" -or -name "*.xib" ")"...

AppStore检测账号是否正常接口

我之前逆向找登录接口都是随便输入一个账号然后点击登录查看是否能登。不过经过测试发现,苹果会先调用一个接口查案这个账号是否是正常状态(如果被多次尝试登录或者有其他异常行为会被锁定),如果这个账号不存在也...

cycript快速定位ViewController

打印当前视图层次UIApp.keyWindow.recursiveDescription().toString()获取上级响应者[#id nextResponder]通过这两个代码可以定位当...