起因

最近网易云广告host可能改了,启动有图片广告了。之前用hosts禁止的。

那就再抓一次包把

用fiddler4,手机代理模式。

fiddler

http://nstool.netease.com/info.js  可以测试本地dns

但是抓包过程中未发现广告

看来广告不走代理啊,高级了。

那就只好用手机端的Packet Capture抓包了。

发现

开屏视频广告haitaoad.nosdn.127.net  。。。

开屏图片广告p1.music.126.net  p2.music.126.net   。。。

然后加入到hosts文件中

重启后
我去

怎么还有??虽然视频广告没了

很高级

发现虽然hosts加入了

127.0.0.1 p1.music.126.net
127.0.0.1 p2.music.126.net

但是抓包显示app能连接p1.music.126.net  p2.music.126.net

那就禁止ip把

好多ip啊😱

在fiddler发现

POST https://music.httpdns.c.163.com/d?session_id=458338C8-94AE-4536-909C-DC8FDC5ECCB0 HTTP/1.1
Host: music.httpdns.c.163.com
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/2.1.0 
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 71

p1.music.126.net,p2.music.126.net,music.httpdns.c.163.com,music.163.com

------------------------返回消息------------------------------------

{"dns":[{"host":"p1.music.126.net","ips":["111.20.255.169","120.192.199.26"],"ttl":300,"http2":0},{"host":"p2.music.126.net","ips":["120.192.199.26","111.20.255.169"],"ttl":300,"http2":0},{"host":"music.httpdns.c.163.com","ips":["223.252.199.67","223.252.199.66","59.111.160.197","59.111.160.195","123.126.94.243","106.38.230.175"],"ttl":3600,"http2":0},{"host":"music.163.com","ips":["223.252.199.67","59.111.160.197","223.252.199.66","59.111.160.195","112.25.27.24","221.130.189.40","103.37.177.101","120.192.205.54","223.112.179.173","112.29.147.137"],"ttl":300,"http2":0}]}

app直接获得真确的ip地址  又不能禁止music.httpdns.c.163.com

好吧

已知广告文件目录netease/cloudmusic/Ad/

加入同名文件?? app很霸道!

只有禁止目录写权限了

提示

/mnt/sdcard等挂截的目录进入是会提示无法修改权限的

只有从真实路径进入/data/media/... 才能修改权限

 

更新于:2017-11-21