Posted Updated Reverse / Android14 minutes read (About 2126 words)

设备指纹小计

记一点常见的指纹项，设备为pixel 6，采集app申请了网络权限

getenv

key val
ANDROID_ART_ROOT /apex/com.android.art
ANDROID_ASSETS /system/app
ANDROID_BOOTLOGO 1
ANDROID_DATA /data
ANDROID_I18N_ROOT /apex/com.android.i18n
ANDROID_ROOT /system
ANDROID_SOCKET_usap_pool_primary 32
ANDROID_SOCKET_zygote 31
ANDROID_STORAGE /storage
ANDROID_TZDATA_ROOT /apex/com.android.tzdata
ASEC_MOUNTPOINT /mnt/asec
BOOTCLASSPATH /apex/com.android.art/javalib/core-oj.jar:/apex/com.android.art/javalib/core-libart.jar:/apex/com.android.art/javalib/okhttp.jar:/apex/com.android.art/javalib/bouncycastle.jar:/apex/com.android.art/javalib/apache-xml.jar:/system/framework/framework.jar:/system/framework/framework-graphics.jar:/system/framework/framework-location.jar:/system/framework/ext.jar:/system/framework/telephony-common.jar:/system/framework/voip-common.jar:/system/framework/ims-common.jar:/system/framework/framework-ondeviceintelligence-platform.jar:/apex/com.android.i18n/javalib/core-icu4j.jar:/apex/com.android.adservices/javalib/framework-adservices.jar:/apex/com.android.adservices/javalib/framework-sdksandbox.jar:/apex/com.android.appsearch/javalib/framework-appsearch.jar:/apex/com.android.bt/javalib/framework-bluetooth.jar:/apex/com.android.configinfrastructure/javalib/framework-configinfrastructure.jar:/apex/com.android.conscrypt/javalib/conscrypt.jar:/apex/com.android.conscrypt/javalib/framework-conscrypt-nsc.jar:/apex/com.android.crashrecovery/javalib/framework-crashrecovery.jar:/apex/com.android.devicelock/javalib/framework-devicelock.jar:/apex/com.android.healthfitness/javalib/framework-healthfitness.jar:/apex/com.android.ipsec/javalib/android.net.ipsec.ike.jar:/apex/com.android.media/javalib/updatable-media.jar:/apex/com.android.mediaprovider/javalib/framework-mediaprovider.jar:/apex/com.android.mediaprovider/javalib/framework-pdf.jar:/apex/com.android.mediaprovider/javalib/framework-pdf-v.jar:/apex/com.android.mediaprovider/javalib/framework-photopicker.jar:/apex/com.android.nfcservices/javalib/framework-nfc.jar:/apex/com.android.npumanager/javalib/framework-npumanager.jar:/apex/com.android.ondevicepersonalization/javalib/framework-ondevicepersonalization.jar:/apex/com.android.os.statsd/javalib/framework-statsd.jar:/apex/com.android.permission/javalib/framework-permission.jar:/apex/com.android.permission/javalib/framework-permission-s.jar:/apex/com.android.profiling/javalib/framework-anomaly-detector.jar:/apex/com.android.profiling/javalib/framework-profiling.jar:/apex/com.android.scheduling/javalib/framework-scheduling.jar:/apex/com.android.sdkext/javalib/framework-sdkextensions.jar:/apex/com.android.telephonycore/javalib/framework-telecom.jar:/apex/com.android.telephonycore/javalib/framework-telephony.jar:/apex/com.android.tethering/javalib/framework-connectivity.jar:/apex/com.android.tethering/javalib/framework-connectivity-b.jar:/apex/com.android.tethering/javalib/framework-connectivity-t.jar:/apex/com.android.tethering/javalib/framework-tethering.jar:/apex/com.android.uprobestats/javalib/framework-uprobestats.jar:/apex/com.android.uwb/javalib/framework-ranging.jar:/apex/com.android.uwb/javalib/framework-uwb.jar:/apex/com.android.virt/javalib/framework-virtualization.jar:/apex/com.android.webapp/javalib/framework-webapp.jar:/apex/com.android.wifi/javalib/framework-wifi.jar
DEX2OATBOOTCLASSPATH /apex/com.android.art/javalib/core-oj.jar:/apex/com.android.art/javalib/core-libart.jar:/apex/com.android.art/javalib/okhttp.jar:/apex/com.android.art/javalib/bouncycastle.jar:/apex/com.android.art/javalib/apache-xml.jar:/system/framework/framework.jar:/system/framework/framework-graphics.jar:/system/framework/framework-location.jar:/system/framework/ext.jar:/system/framework/telephony-common.jar:/system/framework/voip-common.jar:/system/framework/ims-common.jar:/system/framework/framework-ondeviceintelligence-platform.jar:/apex/com.android.i18n/javalib/core-icu4j.jar
DOWNLOAD_CACHE /data/cache
EXTERNAL_STORAGE /sdcard
PATH /product/bin:/apex/com.android.runtime/bin:/apex/com.android.art/bin:/apex/com.android.virt/bin:/system_ext/bin:/system/bin:/system/xbin:/odm/bin:/vendor/bin:/vendor/xbin
STANDALONE_SYSTEMSERVER_JARS /apex/com.android.bt/javalib/service-bluetooth.jar:/apex/com.android.devicelock/javalib/service-devicelock.jar:/apex/com.android.os.statsd/javalib/service-statsd.jar:/apex/com.android.profiling/javalib/service-profiling.jar:/apex/com.android.scheduling/javalib/service-scheduling.jar:/apex/com.android.tethering/javalib/service-connectivity.jar:/apex/com.android.uprobestats/javalib/service-uprobestats-bridge.jar:/apex/com.android.uwb/javalib/service-uwb.jar:/apex/com.android.uwb/javalib/service-ranging.jar:/apex/com.android.wifi/javalib/service-wifi.jar
SYSTEMSERVERCLASSPATH /system/framework/com.android.location.provider.jar:/system/framework/services.jar:/apex/com.android.adservices/javalib/service-adservices.jar:/apex/com.android.adservices/javalib/service-sdksandbox.jar:/apex/com.android.appsearch/javalib/service-appsearch.jar:/apex/com.android.art/javalib/service-art.jar:/apex/com.android.compos/javalib/service-compos.jar:/apex/com.android.configinfrastructure/javalib/service-configinfrastructure.jar:/apex/com.android.crashrecovery/javalib/service-crashrecovery.jar:/apex/com.android.healthfitness/javalib/service-healthfitness.jar:/apex/com.android.media/javalib/service-media-s.jar:/apex/com.android.npumanager/javalib/service-npumanager.jar:/apex/com.android.ondevicepersonalization/javalib/service-ondevicepersonalization.jar:/apex/com.android.permission/javalib/service-permission.jar:/apex/com.android.profiling/javalib/service-anomaly-detector.jar:/apex/com.android.rkpd/javalib/service-rkp.jar:/apex/com.android.telephonycore/javalib/service-telecom.jar:/apex/com.android.virt/javalib/service-virtualization.jar
TMPDIR /data/user/0/{packagename}/cache

Java value

key value
android.icu.cldr.version 48.0
android.icu.library.version 78.3
android.icu.unicode.version 17.0
android.openssl.version OpenSSL 1.1.1 (compatible; BoringSSL)
android.zlib.version 1.3.2.1-motley
file.encoding UTF-8
file.separator /
http.agent Dalvik/2.1.0 (Linux; U; Android 17; Pixel 6 Build/CP2A.260705.006)
java.boot.class.path /apex/com.android.art/javalib/core-oj.jar:/apex/com.android.art/javalib/core-libart.jar:/apex/com.android.art/javalib/okhttp.jar:/apex/com.android.art/javalib/bouncycastle.jar:/apex/com.android.art/javalib/apache-xml.jar:/system/framework/framework.jar:/system/framework/framework-graphics.jar:/system/framework/framework-location.jar:/system/framework/ext.jar:/system/framework/telephony-common.jar:/system/framework/voip-common.jar:/system/framework/ims-common.jar:/system/framework/framework-ondeviceintelligence-platform.jar:/apex/com.android.i18n/javalib/core-icu4j.jar:/apex/com.android.adservices/javalib/framework-adservices.jar:/apex/com.android.adservices/javalib/framework-sdksandbox.jar:/apex/com.android.appsearch/javalib/framework-appsearch.jar:/apex/com.android.bt/javalib/framework-bluetooth.jar:/apex/com.android.configinfrastructure/javalib/framework-configinfrastructure.jar:/apex/com.android.conscrypt/javalib/conscrypt.jar:/apex/com.android.conscrypt/javalib/framework-conscrypt-nsc.jar:/apex/com.android.crashrecovery/javalib/framework-crashrecovery.jar:/apex/com.android.devicelock/javalib/framework-devicelock.jar:/apex/com.android.healthfitness/javalib/framework-healthfitness.jar:/apex/com.android.ipsec/javalib/android.net.ipsec.ike.jar:/apex/com.android.media/javalib/updatable-media.jar:/apex/com.android.mediaprovider/javalib/framework-mediaprovider.jar:/apex/com.android.mediaprovider/javalib/framework-pdf.jar:/apex/com.android.mediaprovider/javalib/framework-pdf-v.jar:/apex/com.android.mediaprovider/javalib/framework-photopicker.jar:/apex/com.android.nfcservices/javalib/framework-nfc.jar:/apex/com.android.npumanager/javalib/framework-npumanager.jar:/apex/com.android.ondevicepersonalization/javalib/framework-ondevicepersonalization.jar:/apex/com.android.os.statsd/javalib/framework-statsd.jar:/apex/com.android.permission/javalib/framework-permission.jar:/apex/com.android.permission/javalib/framework-permission-s.jar:/apex/com.android.profiling/javalib/framework-anomaly-detector.jar:/apex/com.android.profiling/javalib/framework-profiling.jar:/apex/com.android.scheduling/javalib/framework-scheduling.jar:/apex/com.android.sdkext/javalib/framework-sdkextensions.jar:/apex/com.android.telephonycore/javalib/framework-telecom.jar:/apex/com.android.telephonycore/javalib/framework-telephony.jar:/apex/com.android.tethering/javalib/framework-connectivity.jar:/apex/com.android.tethering/javalib/framework-connectivity-b.jar:/apex/com.android.tethering/javalib/framework-connectivity-t.jar:/apex/com.android.tethering/javalib/framework-tethering.jar:/apex/com.android.uprobestats/javalib/framework-uprobestats.jar:/apex/com.android.uwb/javalib/framework-ranging.jar:/apex/com.android.uwb/javalib/framework-uwb.jar:/apex/com.android.virt/javalib/framework-virtualization.jar:/apex/com.android.webapp/javalib/framework-webapp.jar:/apex/com.android.wifi/javalib/framework-wifi.jar
java.class.path .
java.class.version 50.0
java.compiler “”(空字符串)
java.ext.dirs “”(空字符串)
java.home /apex/com.android.art
java.io.tmpdir /data/user/0/{packagename}/cache
java.library.path /system/lib64:/system_ext/lib64
java.net.preferIPv6Addresses false
java.runtime.name Android Runtime
java.runtime.version 0.9
java.specification.name Dalvik Core Library
java.specification.vendor The Android Project
java.specification.version 0.9
java.vendor The Android Project
java.vendor.url http://www.android.com/
java.vm.name Dalvik
java.vm.specification.name Dalvik Virtual Machine Specification
java.vm.specification.vendor The Android Project
java.vm.specification.version 0.9
java.vm.vendor The Android Project
java.vm.vendor.url http://www.android.com/
java.vm.version 2.1.0
line.separator “\n”
os.arch aarch64
os.name Linux
os.version 6.1.157-android14-11-gbd23337e42e7-ab14791245
path.separator :
user.dir /
user.language zh
user.locale zh-Hans-CN
user.name root
user.region CN
user.variant “”

dev

key val
cpu_variant:arm cortex-a53
cpu_variant:arm64 cortex-a55

dev下能读的不多，基本是symlink，但是无权访问

proc

主要是一些设备信息

cpuinfo

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
processor	: 0
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x2
CPU part	: 0xd05
CPU revision	: 0

processor	: 1
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x2
CPU part	: 0xd05
CPU revision	: 0

processor	: 2
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x2
CPU part	: 0xd05
CPU revision	: 0

processor	: 3
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x2
CPU part	: 0xd05
CPU revision	: 0

processor	: 4
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x4
CPU part	: 0xd0b
CPU revision	: 0

processor	: 5
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x4
CPU part	: 0xd0b
CPU revision	: 0

processor	: 6
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x1
CPU part	: 0xd44
CPU revision	: 0

processor	: 7
BogoMIPS	: 49.15
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x1
CPU part	: 0xd44
CPU revision	: 0

meminfo

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
MemTotal:        7787844 kB
MemFree:          327868 kB
MemAvailable:    4084624 kB
Buffers:            9604 kB
Cached:          4031608 kB
SwapCached:         5184 kB
Active:          2686168 kB
Inactive:        2513500 kB
Active(anon):    1186888 kB
Inactive(anon):   316024 kB
Active(file):    1499280 kB
Inactive(file):  2197476 kB
Unevictable:      307248 kB
Mlocked:          307248 kB
SwapTotal:       3145724 kB
SwapFree:        1289660 kB
Dirty:               192 kB
Writeback:             0 kB
AnonPages:       1460268 kB
Mapped:          1759524 kB
Shmem:             50600 kB
KReclaimable:     294792 kB
Slab:             671508 kB
SReclaimable:     209352 kB
SUnreclaim:       462156 kB
KernelStack:      115808 kB
ShadowCallStack:   29004 kB
PageTables:       234192 kB
SecPageTables:         0 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:     7039644 kB
Committed_AS:   509442956 kB
VmallocTotal:   259653632 kB
VmallocUsed:      247348 kB
VmallocChunk:          0 kB
Percpu:            22336 kB
AnonHugePages:         0 kB
ShmemHugePages:        0 kB
ShmemPmdMapped:        0 kB
FileHugePages:         0 kB
FilePmdMapped:         0 kB
CmaTotal:         667648 kB
CmaFree:               0 kB
Gpu:              137356 kB
Zram:             299908 kB
ION_heap_pool:     85440 kB
ION_heap:         159468 kB
Misc:              95504 kB

data/app & product/app

预装app列表

product

etc

build_flags.json

系统构建配置

felica

NFC配置

fonts

支持字体列表

tts

声音合成支持列表

vendor

odm_dlkm/etc/build.prop

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
####################################
# from generate-common-build-props
# These properties identify this partition image.
####################################
ro.product.odm_dlkm.brand=google
ro.product.odm_dlkm.device=oriole
ro.product.odm_dlkm.manufacturer=Google
ro.product.odm_dlkm.model=Pixel 6
ro.product.odm_dlkm.name=oriole
ro.odm_dlkm.build.date=Sun Jun 14 21:55:03 PDT 2026
ro.odm_dlkm.build.date.utc=1781499303
ro.odm_dlkm.build.fingerprint=google/oriole/oriole:17/CP2A.260705.006/15641320:user/release-keys
ro.odm_dlkm.build.id=CP2A.260705.006
ro.odm_dlkm.build.uuid=uhNgujg2fmsyRn6Ty8Mb9Iz0aJsgWsT4cDQxLMFqctQ
ro.odm_dlkm.build.tags=release-keys
ro.odm_dlkm.build.type=user
ro.odm_dlkm.build.version.incremental=15641320
ro.odm_dlkm.build.version.release=17
ro.odm_dlkm.build.version.release_or_codename=17
ro.odm_dlkm.build.version.sdk=37
ro.odm_dlkm.build.version.sdk_full=37.0
# end of file

系统构建参数

vendor_dlkm

etc/build.prop

同上

init.insmod.oriole.cfg

机型特定的模块配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
##########################################################
#           init.insmod.oriole.cfg                       #
# This file contains oriole specific kernel modules to   #
# load at init time by init.insmod.sh script             #
##########################################################

# Load device specific kernel modules
# Modules here will be loaded *after* all common modules
modprobe|bcmdhd4389.ko
modprobe|ftm5.ko
modprobe|sec_touch.ko
modprobe|st33spi.ko

# All device specific modules loaded
setprop|vendor.device.modules.ready
setprop|vendor.all.modules.ready
setprop|vendor.all.devices.ready

设备指纹小计

https://sgsgsama.github.io/ctf/Android/设备指纹小记/

Author

SGSG

Posted on

2026-11-03

Updated on

2026-11-05

Licensed under

#
Follow

Tags

Android13
BinaryNinja1
Makefile1
Python1
Reverse31
XCTF2
ai2
codeforces1
ebpf5
frida4
go4
js2
python2
qbdi1
selenium1
train1
web-re1
web指纹1
加密&编码9
泣系1
纸上魔法使1

Recents

×