T05 · Unauthorized Access and Privilege Escalation
Error
- Location
scripts/universal_tts.py:11- Finding
Automatic Collection and Transmission of Local JianYing Identifiers
- Content
View full analysis
Tuple[str, str]: local_app_data = os.getenv("LOCALAPPDATA") if not local_app_data: return "1053764930506284", "2314914062247833" jy_user_data = os.path.join(local_app_data, r"JianyingPro\User Data") cfg = {"device_id": "1053764930506284", "iid": "2314914062247833"} ttnet_path = os.path.join(jy_user_data, r"TTNet\tt_net_config.config") if os.path.exists(ttnet_path): try: with open(ttnet_path, "r", encoding="utf-8", errors="ignore") as f: content = f.read() m = re.search(r"device_id&#\*(\d+)", content) if m: cfg["device_id"] = m.group(1) except Exception: pass log_dir = os.path.join(jy_user_data, "Log") if os.path.exists(log_dir): logs = sorted( [os.path.join(log_dir, x) for x in os.listdir(log_dir) if x.endswith(".log")], key=os.path.getmtime, reverse=True, ) for p in logs[:5]: try: with open(p, "r", encoding="utf-8", errors="ignore") as f: chunk = f.read(1_000_000) m = re.search(r"iid=(\d+)", chunk) if m: cfg["iid"] = m.group(1) break except Exception: continue return cfg["device_id"], cfg["iid"] ``` ```python async def _run_sami_tts(text: str, speaker: str, output_file: str, dev_id: str, iid: str): ws_url = f"wss://sami.bytedance.com/internal/api/v2/ws?device_id={dev_id}&iid={iid}" headers = { "User-Agent": f"JianyingPro/5.9.0.11632 (Windows 10.0.19045; ap ...[truncated 4424 chars]- Remediation
View remediation