滴滴app探究

发现问题：

1. 滴滴app中的sig参数不是签名，可随意修改
   https://common.diditaxi.com.cn/gulfstream/realtimeDriverStat/get_driver_loc_json?_t=1524798767&app_version=5.2.0&appversion=5.2.0&businesstype=2&car_level=100&channel=102&coord_type=2&data_type=ios&datatype=101&device_id=adda5ba8fb8695796a63cbded76cd763&imei=adda5ba8fb8695796a63cbded76cd763&is_carpool=0&lang=zh-CN&lat=39.907391000000&lng=116.352972000000&maptype=soso&model=iPhone&networkType=WIFI&open_id=&order_stat=1&order_tab=1&os=10.3.3&product_id=258&radius=5000&role=1&sig=174ddb5de2d48d21be05bc193e2860c7f27ea363&timestamp=1524798767000&type=150

2. app中有很多内部网路ip地址

   
   image.png