API requests blocked on AVD

brunoaduarte commented 11 months ago

Hello,

I'm trying to use my TikTok account on Nox emulator. I can watch videos normally, but I can't perform any actions, such as following people, leaving comments, or liking posts.

Looks like the server detects the emulator and is blocking API requests or something... I'm using SSL Pinning bypass to receive requests and responses.

How can I fix this so that the servers can accept the request?

Here is the request sent to the TikTok server when I try to follow a user

GET /aweme/v1/commit/follow/user/?user_id=7060694316394626102&sec_user_id=MS4wLjABAAAA4tzQv5A2q5ju3H8VXgiLGM5S6JjcCNXJZpGyyMNEswa0ai0O_1Ke33PSOtN424t-&type=1&channel_id=3&from=19&from_pre=0&previous_page=homepage_hot&action_time=1695923232730&is_network_available=true&iid=7282074459416144646&device_id=6935582488057378306&ac=wifi&channel=googleplay&aid=1233&app_name=musical_ly&version_code=300102&version_name=30.1.2&device_platform=android&os=android&ab_version=30.1.2&ssmix=a&device_type=SM-G973N&device_brand=samsung&language=en&os_api=28&os_version=9&openudid=2bfa679fbd4b02d8&manifest_version_code=2023001020&resolution=900*1600&dpi=320&update_version_code=2023001020&_rticket=1695923232732&current_region=US&app_type=normal&sys_region=US&mcc_mnc=31016&timezone_name=America%2FMontevideo&carrier_region_v2=310&residence=US&app_language=en&carrier_region=US&ac2=wifi5g&uoo=0&op_region=US&timezone_offset=-10800&build_number=30.1.2&host_abi=arm64-v8a&locale=en&region=US&content_language=en%2Cpt%2C&ts=1695923234&cdid=2be4bd61-3b89-4148-bf17-766564630be9 HTTP/2
Host: api22-normal-c-useast1a.tiktokv.com
Cookie: passport_csrf_token=5c6704298d81f51980d0a07f392265d9; passport_csrf_token_default=5c6704298d81f51980d0a07f392265d9; store-idc=maliva; d_ticket=991b0a2aa646a4d91efd75b0adddf7382f426; multi_sids=7280180529554392070%3A9d137764eeb32aecfe79c99c79f1d3ca; cmpl_token=AgQQAPNkF-RPsLU2izkU_N0_-iGxIVnS_4DZYMyyoQ; uid_tt=b33ba22bb7cd4f0b0fd96c52c7d3029bed28e2a53d66f100ce84a2917b22cbb8; uid_tt_ss=b33ba22bb7cd4f0b0fd96c52c7d3029bed28e2a53d66f100ce84a2917b22cbb8; sid_tt=9d137764eeb32aecfe79c99c79f1c3ca; sessionid=9d137764eeb32aecfe79c99c79f1c3ca; sessionid_ss=9d137764eeb32aecfe79c99c79f1c3ca; store-country-code=br; store-country-code-src=uid; tt-target-idc=useast1a; tt-target-idc-sign=lnjQm9-jE4uJt9mtyhJkj34ahzrwQVUkEK5h0SqmGJvyAKhYci3AmR2QCRhpHRC6w047wLc9LNtKOfa8DL2jl1L6H5CT4xmE8gxn2CcJ0Gn-NMq4sockWABCUQGgK2XYXOvC1Fl-J1ZzeKVX5a2GZqLrafy00fRVcVlPrdw_2SSW2KtPxyRKt9tj1TAMeEjPoUWWMbv1ZeYsGm-Cw7lLFRV2L4PUuzrMRzKPlwQ5qMSwA8ObjNvwPLiW9TUtG7HF1r-96dN3ohP8niX0daQktP2z9bW-MQwmNsiRtAWBJDaIMANTU17uop1lLrLgwTzdUHKeFXABoW0d6j6ZguKHyVwHW5dvRlOS9ltOJid18b7qMe6lg-riFpCSPLJL2P1DphwAKdVB2t0-Mnw1FrjS-q2jVYDI-8RozMhZgaZltueLeXj2IqtjRCrTcP62gZOUSfKlD9lpf157HxXrG3VGyZYCkd2K29NVdL-6o_rPKTjAAsNfgXmDjwchL6pjzF4e; odin_tt=b2f5052713a0e2b8d1aeec55a37cf5078b400aaf76b477ad6f1c4573c1aa61ff57a87bdb9707ec6fea92dc27832c924ce319de1d3e0d50d1b0414eb5c748f0dd55ab363d6672e73e9b7c2946a89cb35c; install_id=7282074449416144646; ttreq=1$0ec702a93b1f23ff9d8f80105969cd3ba5d6fa9f; sid_guard=9d137764eeb32aecfe79c99c79f1c3ca%7C1695922976%7C15552000%7CTue%2C+26-Mar-2024+17%3A42%3A56+GMT; msToken=89YgAecJm65DnfpVRvzAUybjHQ0leFhud5QdR1ZIZ7et47FgKfl6FouaL82k0K2ERzRivTX6akKJx2H2wIau3YNh9peHKgUwRNgj5t-t4yS3YL8tGO5lBtw9mas=
Accept-Encoding: gzip, deflate, br
X-Tt-Multi-Sids: 7280180529554392070%3A9d137764eeb32aecfe79c99c79f1d3ca
Sdk-Version: 2
X-Bd-Kmsv: 0
X-Tt-Token: 039d137764eeb32aecfe79c99c79f1c3ca034013f51e21bb9a5e674189d2b305e906ae95857701b9ed763896c9a9bd0709bbdafeca803bdb18a94e7ec559834218c544e8f3312674e2262b7af4ef45df04a0d9002b959772583f75f8526655862ac28-CkA5ZDNhMWUzMDg0NWQwZTM2NWJhM2Q2NWFjMDg1ODRjM2ZjOTE3ZjE1ZDY3OGFjMmFlMWY2YTljZGY4NTdkMWMz-2.0.0
X-Ss-Req-Ticket: 1695923232740
X-Bd-Client-Key: #NKrz50X7c7IPHrCaeR79Y8WqFJehAT2iL79By8NgxYZmPpEToWe0GPdpbhCWa4gmErsbdynVfT5XnWbm
Multi_login: 1
Passport-Sdk-Version: 19
X-Tt-Dm-Status: login=1;ct=1;rt=1
X-Vc-Bdturing-Sdk-Version: 2.3.1.i18n
X-Tt-Store-Region: br
X-Tt-Store-Region-Src: uid
User-Agent: com.zhiliaoapp.musically/2023001020 (Linux; U; Android 9; en; SM-G973N; Build/LMY48Z;tt-ok/3.12.13.1)
X-Ladon: N7Z2VumpEURwftXNUGcBDbPeNdT9OXPKYcja581R+cPcuC17
X-Khronos: 1695923231
X-Argus: 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
X-Gorgon: 8404e0275001e3b2c6fa66e4b4356fb790581a1dd0e60d8eed32

and this is the response to the request

HTTP/2 200 OK
Server: TLB
Date: Thu, 28 Sep 2023 17:47:14 GMT
Content-Type: application/json; charset=utf-8
X-Tt-Logid: 2023092817471308C8E0F6C2BD0D1DC89A
Tt_stable: 1
Bd-Tt-Error-Code: 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;includeSubDomains
Tt-Idc-Switch: 10000@20230927141551
Access-Control-Expose-Headers: tt-idc-switch
Server-Timing: inner; dur=294, inner; dur=290
X-Tt-Trace-Host: 016507ffb564b5df3a26a721ef8404227da551578db0f4f8d91de3ef81472ccecb2546c815b1aa9a79a2c1fbd6dce749e7b0529c6ccfa271f3779036acab27cfe0597ad359e0181d8efe3a1b8ef9916fbbb49c30c91a4f6cb6a13a90bf7de3a38a
X-Tt-Trace-Tag: id=22;cdn-cache=miss
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

{"extra":{"fatal_item_ids":[],"logid":"2023092817471308C8E0F6C2BD0D1DC89A","now":1695923234000},"follow_status":1,"log_pb":{"impr_id":"2023092817471308C8E0F6C2BD0D1DC89A"},"status_code":0,"watch_status":0}

dev2937646 commented 11 months ago

not just the emulator!

PATAPOsha commented 7 months ago

@brunoaduarte did you find a solution? I think it because of bad account, but not emulator.

brunoaduarte commented 7 months ago

@brunoaduarte did you find a solution? I think it because of bad account, but not emulator.

Can be both... but even if you use a good account, the actions will be blocked on the emulator.

Eltion / Tiktok-SSL-Pinning-Bypass

API requests blocked on AVD #32