안드로이드 해킹 실습 (1)

//REQUEST
POST /SR/startgame HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; SHV-E210S Build/JZO54K)
Host: monster-server.netmarble.net
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 224

epp=b866624f640f84434f7c2ff046b91d90cgtSVxlREWx1dy9dBFoGbxQiHRRlX3UIAzViAwRYMRkJBQQ9Wxx%2fAhQ9RWx%2fAxgJclURbykAMFd4SgZObhEwfX8TE1trAUpCeWAFdGxYHRpFD01sf3YqHlI0Q3keYkY8PilSBV5RBAsIDUw3dXEtW1hdA2AbIBZJNwt7WgJhNVIGWDIdXQ%3d%3d

//RESPONSE
HTTP/1.1 200 OK
Date: Sun, 08 Sep 2013 07:59:54 GMT
Server: Jetty(8.1.10.v20130312)
Content-Type: text/html;charset=UTF-8
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 322
Set-Cookie: JSESSIONID=1ihc73ufh0g3m1oxk9stb1fqdk;Path=/SR
Connection: close


ekBSDx5ZHGNuejdIWElTOVcbTB5oA25UUXsjERAfcBUcAAkEAEMsVgAse29uHBAJb0ZHJiMBfQYiHQJJcAE2OX9KUFtvGwhRdmZIYmoOEh4bXAItdTF0RgdnFSxNYB9vYiwTTCMPXxkZURphEywlGUkdDAx+aA0daAspTFtjLUALAnFeUFBWbFsdeB1ScBAnOF1LSitGHnhmTSxJY1lSDT1PDCNzQkEmMFZUUSA/AiVuBx4JF1xZNX4gJB9cNBcuEGILKT1uWAVvBhRQBE0ZY2BiKhhUWlgzUCxGAV4dIhpDbTZSGEEkGRgTR2FTVg==

z@RYcnz7HMIFO-I#W}^Mul2u -GH/A) 0K=x,R3Bkd}#&g�,< aRJ?c1uUgI{Z>N{nTw=UO?`b?RK4P*
K5]~_W`6UIOr    2GW,T) 
{Wk"�1ScpK(
i6Fay#$
b7]OLGI#m`gF
g%f:n0d]0nz*QLS{
(Jra%r
$FHQKkR    a Bn8aV /
;OyFKYfcc8HMbo�>1
b7^LLHM>}"*HrQo[7Io4qXd_HE#n5?d}F2An4nHc
5AoIy)6XX-�K$#:QxKAlq#sBA[i8? %/UIK@Yx*vxK]U~G=xy>oT^BHP  F8tyz_{
!W
^#
#d:h5yYa'Eiv[Nf$
B=>Oy
...

tSH7tr
�nqH9[x^G>l:tW    /b!    {*^X/
"+>S?LTU7Q|;rPef;=tuM<NT={rvWdi{d"vHK:
B;(p|bg[uA^b0'�;MDSQ}G,P
&Vf'D]1M-l0SzF^Fia,)E5UW(f&:[O@[k|+pA3Az`Eon}Re=W_[^6|u{YRgs8|[57QV    ?R

...
    xor_table = new uint[] {
    1, 0x62, 0x36, 0x6a, 0x6a, 0x38, 0x75, 15, 0x4c, 0x40, 0x4c, 0x6a, 0x3d, 0x3f, 0x36, 0x57,
    0x23, 0x44, 0x2f, 0x71, 1, 0x6d, 0x4c, 110, 0x61, 0x57, 1, 0x62, 0x65, 0x6d, 6, 0x7c,
    0x6a, 0x61, 0x65, 0x5b, 0x63, 0x2b, 0x4d, 0x24, 0x67, 0x49, 0x24, 11, 0x1a, 0x3e, 0x2a, 0x39,
    0x43, 100, 0x24, 0x49, 0x4a, 0x6f, 0x5f, 60, 0x11, 0x2f, 0x3b, 0x7b, 0x5c, 0x23, 0x53, 0x4f,
    0x1a, 0x24, 0x24, 4, 10, 0x63, 120, 0x73, 0x4c, 0x56, 100, 0x40, 13, 0x6f, 0x7f, 0x7b,
    0x70, 0x39, 0x7b, 15, 0x4f, 0x13, 0x13, 0x27, 0x6a, 2, 0x27, 0x1f, 0x29, 0x56, 0x27, 11,
    0x5b, 0x1c, 0x31, 0x60
     };
...

private string Encode(string param)
{
    param = param + "&cookie=" + AndroidManager.instance.GetXigncodeCookie();
    StringBuilder builder = new StringBuilder(param.Length);
    char[] chArray = param.ToCharArray();
    for (int i = 0; i < chArray.Length; i++)
    {
    uint num2 = xor_table[i % xor_table.Length];
    char ch = (char) (chArray[i] ^ num2);
    builder.Append(ch);
    }
    return (CommonUtil.MD5Sum(param) + Convert.ToBase64String(Encoding.UTF8.GetBytes(builder.ToString())));
}

...

private string Decode(string param)
{
    byte[] buffer = Convert.FromBase64String(param);
    StringBuilder builder = new StringBuilder(0x100);
    for (int i = 0; i < buffer.Length; i++)
    {
    uint num2 = xor_table[i % xor_table.Length];
    char ch = (char) (buffer[i] ^ num2);
    builder.Append(ch);
    }
    return builder.ToString();
}

{
  "detail": {
    "event_coin": 0,
    "survival_charge_dt": 0,
    "coin": 3292,
    "event_exp": 0,
    "gamekey": "xxxxxxx",
    "mission_list": [],
    "life": 4,
    "now": 1378659594,
    "cash": 1,
    "survival_life": 5,
    "lifecharge": 1378660194,
    "friend": null,
    "friendship_pnt": 70
  },
  "err": 0
}