Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API requests blocked on AVD #32

Open
brunoaduarte opened this issue Sep 28, 2023 · 3 comments
Open

API requests blocked on AVD #32

brunoaduarte opened this issue Sep 28, 2023 · 3 comments

Comments

@brunoaduarte
Copy link

Hello,

I'm trying to use my TikTok account on Nox emulator. I can watch videos normally, but I can't perform any actions, such as following people, leaving comments, or liking posts.

Looks like the server detects the emulator and is blocking API requests or something... I'm using SSL Pinning bypass to receive requests and responses.

How can I fix this so that the servers can accept the request?

Here is the request sent to the TikTok server when I try to follow a user

GET /aweme/v1/commit/follow/user/?user_id=7060694316394626102&sec_user_id=MS4wLjABAAAA4tzQv5A2q5ju3H8VXgiLGM5S6JjcCNXJZpGyyMNEswa0ai0O_1Ke33PSOtN424t-&type=1&channel_id=3&from=19&from_pre=0&previous_page=homepage_hot&action_time=1695923232730&is_network_available=true&iid=7282074459416144646&device_id=6935582488057378306&ac=wifi&channel=googleplay&aid=1233&app_name=musical_ly&version_code=300102&version_name=30.1.2&device_platform=android&os=android&ab_version=30.1.2&ssmix=a&device_type=SM-G973N&device_brand=samsung&language=en&os_api=28&os_version=9&openudid=2bfa679fbd4b02d8&manifest_version_code=2023001020&resolution=900*1600&dpi=320&update_version_code=2023001020&_rticket=1695923232732&current_region=US&app_type=normal&sys_region=US&mcc_mnc=31016&timezone_name=America%2FMontevideo&carrier_region_v2=310&residence=US&app_language=en&carrier_region=US&ac2=wifi5g&uoo=0&op_region=US&timezone_offset=-10800&build_number=30.1.2&host_abi=arm64-v8a&locale=en&region=US&content_language=en%2Cpt%2C&ts=1695923234&cdid=2be4bd61-3b89-4148-bf17-766564630be9 HTTP/2
Host: api22-normal-c-useast1a.tiktokv.com
Cookie: passport_csrf_token=5c6704298d81f51980d0a07f392265d9; passport_csrf_token_default=5c6704298d81f51980d0a07f392265d9; store-idc=maliva; d_ticket=991b0a2aa646a4d91efd75b0adddf7382f426; multi_sids=7280180529554392070%3A9d137764eeb32aecfe79c99c79f1d3ca; cmpl_token=AgQQAPNkF-RPsLU2izkU_N0_-iGxIVnS_4DZYMyyoQ; uid_tt=b33ba22bb7cd4f0b0fd96c52c7d3029bed28e2a53d66f100ce84a2917b22cbb8; uid_tt_ss=b33ba22bb7cd4f0b0fd96c52c7d3029bed28e2a53d66f100ce84a2917b22cbb8; sid_tt=9d137764eeb32aecfe79c99c79f1c3ca; sessionid=9d137764eeb32aecfe79c99c79f1c3ca; sessionid_ss=9d137764eeb32aecfe79c99c79f1c3ca; store-country-code=br; store-country-code-src=uid; tt-target-idc=useast1a; tt-target-idc-sign=lnjQm9-jE4uJt9mtyhJkj34ahzrwQVUkEK5h0SqmGJvyAKhYci3AmR2QCRhpHRC6w047wLc9LNtKOfa8DL2jl1L6H5CT4xmE8gxn2CcJ0Gn-NMq4sockWABCUQGgK2XYXOvC1Fl-J1ZzeKVX5a2GZqLrafy00fRVcVlPrdw_2SSW2KtPxyRKt9tj1TAMeEjPoUWWMbv1ZeYsGm-Cw7lLFRV2L4PUuzrMRzKPlwQ5qMSwA8ObjNvwPLiW9TUtG7HF1r-96dN3ohP8niX0daQktP2z9bW-MQwmNsiRtAWBJDaIMANTU17uop1lLrLgwTzdUHKeFXABoW0d6j6ZguKHyVwHW5dvRlOS9ltOJid18b7qMe6lg-riFpCSPLJL2P1DphwAKdVB2t0-Mnw1FrjS-q2jVYDI-8RozMhZgaZltueLeXj2IqtjRCrTcP62gZOUSfKlD9lpf157HxXrG3VGyZYCkd2K29NVdL-6o_rPKTjAAsNfgXmDjwchL6pjzF4e; odin_tt=b2f5052713a0e2b8d1aeec55a37cf5078b400aaf76b477ad6f1c4573c1aa61ff57a87bdb9707ec6fea92dc27832c924ce319de1d3e0d50d1b0414eb5c748f0dd55ab363d6672e73e9b7c2946a89cb35c; install_id=7282074449416144646; ttreq=1$0ec702a93b1f23ff9d8f80105969cd3ba5d6fa9f; sid_guard=9d137764eeb32aecfe79c99c79f1c3ca%7C1695922976%7C15552000%7CTue%2C+26-Mar-2024+17%3A42%3A56+GMT; msToken=89YgAecJm65DnfpVRvzAUybjHQ0leFhud5QdR1ZIZ7et47FgKfl6FouaL82k0K2ERzRivTX6akKJx2H2wIau3YNh9peHKgUwRNgj5t-t4yS3YL8tGO5lBtw9mas=
Accept-Encoding: gzip, deflate, br
X-Tt-Multi-Sids: 7280180529554392070%3A9d137764eeb32aecfe79c99c79f1d3ca
Sdk-Version: 2
X-Bd-Kmsv: 0
X-Tt-Token: 039d137764eeb32aecfe79c99c79f1c3ca034013f51e21bb9a5e674189d2b305e906ae95857701b9ed763896c9a9bd0709bbdafeca803bdb18a94e7ec559834218c544e8f3312674e2262b7af4ef45df04a0d9002b959772583f75f8526655862ac28-CkA5ZDNhMWUzMDg0NWQwZTM2NWJhM2Q2NWFjMDg1ODRjM2ZjOTE3ZjE1ZDY3OGFjMmFlMWY2YTljZGY4NTdkMWMz-2.0.0
X-Ss-Req-Ticket: 1695923232740
X-Bd-Client-Key: #NKrz50X7c7IPHrCaeR79Y8WqFJehAT2iL79By8NgxYZmPpEToWe0GPdpbhCWa4gmErsbdynVfT5XnWbm
Multi_login: 1
Passport-Sdk-Version: 19
X-Tt-Dm-Status: login=1;ct=1;rt=1
X-Vc-Bdturing-Sdk-Version: 2.3.1.i18n
X-Tt-Store-Region: br
X-Tt-Store-Region-Src: uid
User-Agent: com.zhiliaoapp.musically/2023001020 (Linux; U; Android 9; en; SM-G973N; Build/LMY48Z;tt-ok/3.12.13.1)
X-Ladon: N7Z2VumpEURwftXNUGcBDbPeNdT9OXPKYcja581R+cPcuC17
X-Khronos: 1695923231
X-Argus: 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
X-Gorgon: 8404e0275001e3b2c6fa66e4b4356fb790581a1dd0e60d8eed32

and this is the response to the request

HTTP/2 200 OK
Server: TLB
Date: Thu, 28 Sep 2023 17:47:14 GMT
Content-Type: application/json; charset=utf-8
X-Tt-Logid: 2023092817471308C8E0F6C2BD0D1DC89A
Tt_stable: 1
Bd-Tt-Error-Code: 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;includeSubDomains
Tt-Idc-Switch: 10000@20230927141551
Access-Control-Expose-Headers: tt-idc-switch
Server-Timing: inner; dur=294, inner; dur=290
X-Tt-Trace-Host: 016507ffb564b5df3a26a721ef8404227da551578db0f4f8d91de3ef81472ccecb2546c815b1aa9a79a2c1fbd6dce749e7b0529c6ccfa271f3779036acab27cfe0597ad359e0181d8efe3a1b8ef9916fbbb49c30c91a4f6cb6a13a90bf7de3a38a
X-Tt-Trace-Tag: id=22;cdn-cache=miss
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

{"extra":{"fatal_item_ids":[],"logid":"2023092817471308C8E0F6C2BD0D1DC89A","now":1695923234000},"follow_status":1,"log_pb":{"impr_id":"2023092817471308C8E0F6C2BD0D1DC89A"},"status_code":0,"watch_status":0}
@dev2937646
Copy link

not just the emulator!

@PATAPOsha
Copy link

PATAPOsha commented Jan 18, 2024

@brunoaduarte did you find a solution? I think it because of bad account, but not emulator.

@brunoaduarte
Copy link
Author

@brunoaduarte did you find a solution? I think it because of bad account, but not emulator.

Can be both... but even if you use a good account, the actions will be blocked on the emulator.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants