今天给手机充值,支付宝付款,结果跳转到...
2020-02-20 本文已影响0人
客三消
今天在联通营业厅App,给手机缴费.点击支付宝付款,然后跳转的居然是 恋爱侦探
...
然后下载了一个他的IPA文件.打开info.plist看了一眼.果然...
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DTCompiler</key>
<string>com.apple.compilers.llvm.appstoremjb</string>
<key>UIRequiredDeviceCapabilities</key>
<dict>
<key>accelerometer</key>
<true/>
<key>arm64</key>
<true/>
<key>opengles-1</key>
<true/>
</dict>
<key>CFBundleInfoDictionaryVersion</key>
<string>6.0</string>
<key>UIRequiresFullScreen</key>
<true/>
<key>DTPlatformVersion</key>
<string>12.4</string>
<key>CFBundleName</key>
<string>恋爱侦探</string>
<key>DTSDKName</key>
<string>iphoneos12.4</string>
<key>CFBundleIcons</key>
<dict>
<key>CFBundlePrimaryIcon</key>
<dict>
<key>CFBundleIconFiles</key>
<array>
<string>AppIcon60x60</string>
</array>
<key>CFBundleIconName</key>
<string>AppIcon</string>
</dict>
</dict>
<key>CFBundleDisplayName</key>
<string>恋爱侦探</string>
<key>LSRequiresIPhoneOS</key>
<true/>
<key>DTSDKBuild</key>
<string>16G73</string>
<key>CFBundleShortVersionString</key>
<string>1.0.3</string>
<key>CFBundleSupportedPlatforms</key>
<array>
<string>iPhoneOS</string>
</array>
<key>UISupportedInterfaceOrientations</key>
<array>
<string>UIInterfaceOrientationPortrait</string>
</array>
<key>BuildMachineOSBuild</key>
<string>18G103</string>
<key>DTPlatformBuild</key>
<string>16G73</string>
<key>CFBundlePackageType</key>
<string>APPL</string>
<key>DTXcodeBuild</key>
<string>10G8</string>
<key>CFBundleDevelopmentRegion</key>
<string>zh_CN</string>
<key>MinimumOSVersion</key>
<string>11.0</string>
<key>CFBundleVersion</key>
<string>1031</string>
<key>UIPrerenderedIcon</key>
<true/>
<key>UIStatusBarHidden</key>
<true/>
<key>UIDeviceFamily</key>
<array>
<integer>1</integer>
</array>
<key>UILaunchStoryboardName</key>
<string>LaunchScreen</string>
<key>CFBundleIdentifier</key>
<string>com.mk.lazt</string>
<key>DTXcode</key>
<string>1030</string>
<key>CFBundleExecutable</key>
<string>恋爱侦探</string>
<key>NSAppTransportSecurity</key>
<dict>
<key>NSAllowsArbitraryLoads</key>
<true/>
</dict>
<key>CFBundleIcons~ipad</key>
<dict>
<key>CFBundlePrimaryIcon</key>
<dict>
<key>CFBundleIconFiles</key>
<array>
<string>AppIcon60x60</string>
<string>AppIcon76x76</string>
</array>
<key>CFBundleIconName</key>
<string>AppIcon</string>
</dict>
</dict>
<key>CFBundleSignature</key>
<string>????</string>
<key>DTPlatformName</key>
<string>iphoneos</string>
<key>CFBundleURLTypes</key>
<array>
<dict>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>CFBundleURLName</key>
<string></string>
<key>CFBundleURLSchemes</key>
<array>
<string>prefs</string>
<string>wechatt</string>
<string>weixinn</string>
<string>sinaweibohd</string>
<string>sinaweibo</string>
<string>sinaweibosso</string>
<string>weibosdk</string>
<string>weibosdk2.5</string>
<string>mqqapi</string>
<string>mqq</string>
<string>mqqOpensdkSSoLogin</string>
<string>mqqconnect</string>
<string>mqqopensdkdataline</string>
<string>mqqopensdkgrouptribeshare</string>
<string>mqqopensdkfriend</string>
<string>mqqopensdkapi</string>
<string>mqqopensdkapiV2</string>
<string>mqqopensdkapiV3</string>
<string>mqzoneopensdk</string>
<string>wtloginmqq</string>
<string>wtloginmqq2</string>
<string>mqqwpa</string>
<string>mqzone</string>
<string>mqzonev2</string>
<string>mqzoneshare</string>
<string>wtloginqzone</string>
<string>mqzonewx</string>
<string>mqzoneopensdkapiV2</string>
<string>mqzoneopensdkapi19</string>
<string>mqzoneopensdkapi</string>
<string>mqzoneopensdk</string>
<string>alipay</string> // I'm here
<string>alipayshare</string>
</array>
</dict>
<dict>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>CFBundleURLName</key>
<string>weixin</string>
<key>CFBundleURLSchemes</key>
<array>
<string>wxc3e75d661cea769b</string>
</array>
</dict>
<dict>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>CFBundleURLName</key>
<string>tencent</string>
<key>CFBundleURLSchemes</key>
<array>
<string>tencent101641910</string>
</array>
</dict>
</array>
<key>DTAppStoreToolsBuild</key>
<string>11C29</string>
</dict>
</plist>
然后我就纳闷了...你写了这么多个scheme干什么?
我也写了个App,用了Alipay的scheme,尝试拦截了一下
拦截到的scheme如下
alipay://alipayclient/?{
"fromAppUrlScheme" %3A "chinaunicom"%2C
"requestType" %3A "SafePay"%2C
"dataString" %3A "_input_charset%3D\"utf-8\"%26body%3D\"为01017交费20.00元\....... }
一般来说,拿到这些东西也没啥用,大概抓了一下跳转之后的恋爱侦探
9AB5AB71-DA06-4596-BB73-236D0771DDE1.png
基本都是些广告SDK的请求.不知道他们拦截了Alipay要干啥...时间有限,懒得去反编译了...
只能假设,他们是想提高自己的日活以及留存...真是厉害
最后,建议有条件的使用Universal Links