微信小程序安全测试.pdfVIP

1.

1.1..

1.1.1

1.1.2

1.

2.

1.2..

MacOS

Windows10

1.2.1

iToolsipa

ADBPC

BurpSuite

Nmap

AWVSWEB

SqlmapSQL

Webshell

wxappUnpacker

1.2.3

APP

APP

(1)

();

App(AppStore);

(2)

;

AppApp

;

(3)

;

App;

(4)

;

App;

(5)

;

App

(6)

HTTPSIP

AppHTTPS

(7)

App

1.3..

1.3.1

3.1.1

JSBridgeJS

WXMLWXSS

CSS

JSBridge

API

IOS

WXMLWXSS

()

APP.js()

APP.json()

APP.wxss()

()

JS

WXML

WXSSWXMLWXML

JSON

APP.jsAPP.jsonJSJSON

3.1.2

6

HTTPS

SSL

KEYVALUEDB

HASH

JSAPITBS

0DAY

APP

ACCESS_TOKENACCESS_TOKEN

APPIDAPPsecretAPPsecret