分析过程#

资源数据主要有三个路径：

• 主要配置：/Users/mac/Library/Application Support/Thunder
• 崩溃日志：/Users/mac/Library/Application Support/com.xunlei.Thunder
• 缓存文件：/Users/mac/Library/Caches/com.xunlei.Thunder

目标为修改下载任务需要修改保存位置，因此在主要配置目录中找到，路径为：/Users/mac/Library/Application Support/Thunder/etm3/etm_map.db，表名为etm_task

CREATE TABLE etm_task (
  taskid interger primary key,
  state interger default 0,
  create_time interger default 0,
  update_time interger default 0,
  finish_time interger default 0,
  type interger default 0,
  create_param text default '',
  sub_task_info text default '',
  in_rubbish interger default 0,
  favour interger default 0,
  group_task interger default 0,
  platform interger default 0,
  bt_task_info text default '',
  origin_bytes interger default 0,
  server_bytes interger default 0,
  p2p_Bytes interger default 0,
  dcdn_Bytes interger default 0
)

关键字段为create_param，样例数据如下

{"download_path":"/Users/mac/Downloads","file_name":"panther-ap4a.241205.013-factory-3fe89b24.zip","url":"https://dl.google.com/dl/android/aosp/panther-ap4a.241205.013-factory-3fe89b24.zip","ref_url":"https://developers.google.com/","cookie":"xxx","user_name":"","password":"","source":"browser/plugin","entryid":"","from_type":1,"file_size":"0"}

风险点#

• cookie字段完全是明文，可能存在泄露风险