Professional Documents
Culture Documents
度小满雷春-仿冒互金APP诈骗之对抗
度小满雷春-仿冒互金APP诈骗之对抗
度小满雷春-仿冒互金APP诈骗之对抗
1
Made By Lcamry
APP
9 10 11 12 1 2
APP APP
360
APP
APP
APP –
APP –
Black production-as-a-Service BAAS
APP –
• HTML5 APP
• wap2app
+ IOS
• APP
•
APP –
•
( 100 )
( appstore)
•
( )
( )
( )
• Test Flight
( )
( TestFlight)
•
( )
( )
APP –
•
UA
+ IOS
•
APP
• H5
APP –
URL QQ/
URL /soul
H5 URL /
URL -
APP –
https://www.cnblogs.com/lcamry https://url.cn/5R9MkQW http://134.175.83.120/oKvGRV/3yotkn
<!-- QQ -->
<script>
if(navigator.userAgent.indexOf("QQ/" || "TIM/")>0){
window.location.href= 'http://c.pc.qq.com/middle.html?pfurl=https://www.cnblogs.com/lcamry';
}else if(navigator.userAgent.indexOf("MicroMessenger")>0){
window.location.href= 'http://c.pc.qq.com/middle.html?pfurl=https://www.cnblogs.com/lcamry';
}
</script>
<script type="text/javascript">
window.location.href='https://www.cnblogs.com/lcamry';
</script>
APP –
304
IP
IP IP
APP –
1 1 url
2 2
3 3
APP –
APP –
---
---
APP –
APP –
URL
• •
ROI
ROI
• URL
• ROI
URL ROI
•
•
URL ROI
ROI
•
• ROI
OCR
ROI • URL
ROI
• URL
ROI
URL
• •
1 web
3 IP
4
----
• WEB XSS WEB
• cve UAC
rootkit
• ip+
•
----
web
----
linux
1
2 WAF
----
2 ssh
3 apache\nginx
4
ip
6
----
Web
2 webshell
3 xss payload
5 UA PC
6 IP URL
7 CDN
APP
URL
APP
• app • •
• • •
• • •
PPT