XCodeGhost 笔记

因为服务已经关掉了，所以要改路由Openwrt

vi /etc/config/dhcp 
vi /etc/dnsmasq/dnsmasq.conf
/etc/init.d/dnsmasq restart

dhcp文件在config dnsmasq节点追加：

list addnhosts ‘/wuxl/dnsmasq/dnsmasq.conf‘

dnsmasq.conf文件追加：

192.168.1.11 icloud-analysis.com
192.168.1.11 init.icloud-analysis.com

nslookup init.icloud-analysis.com
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost

Name:      init.icloud-analysis.com
Address 1: 192.168.1.11 icloud-analysis.com

PC 使用Fiddler抓HTTP包，手机端设置代理PC IP:8888

抓到：

POST http://init.icloud-analysis.com/ HTTP/1.1
Host: init.icloud-analysis.com
Content-Type: application/x-www-form-urlencoded
Connection: keep-alive
Connection: keep-alive
Accept: */*
User-Agent: OpenCourse/4.2.8 CFNetwork/758.0.2 Darwin/15.0.0
Accept-Language: zh-cn
Content-Length: 320
Accept-Encoding: gzip, deflate

内容加密，正在想办法

XCodeGhost 笔记

原文：http://www.cnblogs.com/ShepherdIsland/p/4828413.html