如何获取一个APP的所有接口API和参数签名信息?

// 核心函数：Hook libart.so的OpenMemory方法function hook_dex_dump(packageName) {    var libart = Module.findBaseName('libart.so');    var symbols = ['_ZN3art7DexFile10OpenMemoryEPKhjRKNSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEjPNS_6MemMapEPKNS_10OatDexFileEPS9_',                   '_ZN3art13DexFileLoader10OpenCommonEPKhjS2_jPKNS_10OatDexFileEbbPS9_PNS0_12VerifyResultE'];        symbols.forEach(function(symbol) {        var openMemory = Module.findExportByName('libart.so', symbol);        if (openMemory) {            Interceptor.attach(openMemory, {                onEnter: function(args) {                    // 获取DEX起始地址和大小                    var dex_begin = is64bit() ? this.context.x1 : args[1];                    var dex_size = is64bit() ? this.context.x2 : args[2];                                        // 校验magic头                    var magic = Memory.readUtf8String(ptr(dex_begin), 4);                    if (magic.indexOf('dex') === 0) {                        // 生成唯一文件名                        var timestamp = new Date().getTime();                        var savePath = "/sdcard/Download/" + packageName + "_" + timestamp + ".dex";                                                // 内存转储                        var dexData = Memory.readByteArray(ptr(dex_begin), dex_size);                        var file = new File(savePath, "wb");                        file.write(dexData);                        file.close();                                                console.log("[+] Dumped DEX to: " + savePath);                    }                },                onLeave: function(retval) {                    // 可选：处理返回结果                }            });        }    });} // 判断CPU架构function is64bit() {    return Process.arch.indexOf('64') !== -1;} // 启动脱壳Java.perform(function() {    var currentPackage = Java.use("android.app.ActivityThread").currentApplication().getPackageName();    hook_dex_dump(currentPackage);    console.log("[*] Hooking libart.so for package: " + currentPackage);});

Java.perform(function() {    // 获取OkHttp核心类    var OkHttpClient = Java.use('okhttp3.OkHttpClient');    var Request = Java.use('okhttp3.Request');    var Buffer = Java.use('okio.Buffer');    // Hook OkHttpClient的newCall方法     OkHttpClient.newCall.overload('okhttp3.Request').implementation = function(request) {        // 解析请求信息        var url = request.url().toString();        var method = request.method();        var headers = request.headers().toString();        var body = request.body();        var bodyContent = '';        // 读取请求体内容 [[4, 16]]        if (body) {            try {                var buffer = Buffer.$new();                body.writeTo(buffer);                bodyContent = buffer.readUtf8();                buffer.$dispose();            } catch(e) {                bodyContent = '无法解析的请求体类型';            }        }        // 打印请求信息        console.log('\n=== 请求捕获 ===');        console.log(`URL: ${url}`);        console.log(`Method: ${method}`);        console.log(`Headers: ${headers}`);        console.log(`Body: ${bodyContent}`);        console.log('================\n');        // 执行原始调用        return this.newCall(request);    };    // Hook响应处理    var Response = Java.use('okhttp3.Response');    Response.body.implementation = function() {        var body = this.body();        try {            var content = body.string();            console.log('\n=== 响应捕获 ===');            console.log(`Status: ${this.code()} ${this.message()}`);            console.log(`Response Body: ${content}`);            console.log('================\n');            // 重建body对象避免消费问题            return Java.use('okhttp3.ResponseBody')                .create(body.contentType(), content);        } catch(e) {            return body;        }    };});

POST /v2/auth/login HTTP/1.1Content-Type: application/json{  "username": "test_user",  "password": "A3F291B8D45C...",  "timestamp": 1735689200000,  "nonce_str": "7x9a2b4c6d8e0f1",  "signature": "E9D3A1B5F7C8..."}

GET /v3/orders/list?user_id=1001&start_time=1735602800000&end_time=1735689200000&token=eyJhbGci...&sign=8D7A2B4C6E9F0... HTTP/1.1

POST /native/encrypt HTTP/1.1Content-Type: application/octet-stream{  "data": "5tC1oP3x...",  // Base64编码的加密数据  "encrypt_v": "aes_v2",  "request_id": "req_20250417001"}