Search Results for vyos mips

另类方法劫持手机流量

实际上看，CharlesProxy并不能100%地“劫持”到手机的https流量，说“劫持”可能不太合适，因为CharlesProxy根本都不把这个443端口的请求在请求列表里显示出来。这次玩的是GameLoft的Asphalt Xtreme，从google play store下载下来玩后，发现游戏的免费门槛太高了，随便玩玩不消费就进行不下去。之前玩GameLoft的游戏改数据，都是iPhone下备份数据，修改存档，因为那些游戏有存档。但是这次主要用了Android，且没有root。试过iOS的版本，文档里没看到明文数据（txt/bin都没有)。本来想找个游戏修改器试试，后来没继续下去。具体选型上，我是在EdgeRouter Lite上跑了个redsocks。因为是临时方案，所以不考虑使用EdgeOS/VyOS的配置语法，而直接使用了iptables。协议分析和数据劫持，使用了CharlesProxy，因为CharlesProxy支持socks代理，还自带”Rewrite”功能，可以做简单字符串替换和正则替换。环境：路由 EdgeRouter Lite 固件1.9.1，IP 192.168.1.1，基于debian wheezy Redsocks，0.4+dfsg-1，下载地址 https://packages.debian.org/wheezy/redsocks 电脑 MacBook Pro macOS 12 + CharlesProxy 4.x, IP 192.168.1.20，HTTP端口8888，Socks端口8889 手机 Mate 9，IP 192.168.1.40；路由端 ERL是mips/mips64，从debian官网下载mips版的deb，直接 dpkg -i 安装即可。如果路由上没有libevent，还得下载装一下。安装好redsocks后，修改 /etc/default/redsocks，修改START=yes。直接基于 /etc/redsocks.conf 修改

redsocks {
        /* `local_ip' defaults to 127.0.0.1 for security reasons,
         * use 0.0.0.0 if you want to listen on every interface.
         * `local_*' are used as port to redirect to.
         */
        local_ip = 0.0.0.0;
        local_port = 12345;

        // `ip' and `port' are IP and tcp-port of proxy-server
        // You can also use hostname instead of IP, only one (random)
        // address of multihomed host will be used.
        ip = 192.168.1.20;
        port = 8889;


        // known types: socks4, socks5, http-connect, http-relay
        type = socks5;

        // login = "foobar";
        // password = "baz";
}

redsocks {

/* `local_ip' defaults to 127.0.0.1 for security reasons,

* use 0.0.0.0 if you want to listen on every interface.

* `local_*' are used as port to redirect to.

local_ip = 0.0.0.0;

local_port = 12345;

// `ip' and `port' are IP and tcp-port of proxy-server

// You can also use hostname instead of IP, only one (random)

// address of multihomed host will be used.

ip = 192.168.1.20;

port = 8889;

// known types: socks4, socks5, http-connect, http-relay

type = socks5;

// login = "foobar";

// password = "baz";

}

改local_ip的原因是因为我iptables偷懒了。反正用完就关，无所谓。使用 /etc/init.d/redsocks start启动服务。 iptables 只劫持了来自 192.168.1.40 的tcp 443的流量，修改到了12345端口。

iptables -t nat -N REDSOCKS
iptables -t nat -A PREROUTING -i eth0 -s 192.168.1.40 -p tcp --dport 443  -j REDSOCKS
iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345

iptables -t nat -N REDSOCKS

iptables -t nat -A PREROUTING -i eth0 -s 192.168.1.40 -p tcp --dport 443 -j REDSOCKS

iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345

电脑开启CharlesProxy的Socks服务 … Continue reading “另类方法劫持手机流量”