android vx reverse

发表于 2023-08-23 更新于 2023-09-05 分类于 security 阅读次数： Waline：本文字数： 291 阅读时长 ≈ 1 分钟

s偷

参考https://juejin.cn/post/6844904098328739853

官方提供hook 模板https://frida.re/docs/examples/android/

hook输入框https://www.jianshu.com/p/82d2bfeb4fbf

获取输入框

import frida, sys

def on_message(message, data):
    if message['type'] == 'send':
        print("[*] {0}".format(message['payload']))
    else:
        print(message)

jscode = """
Java.perform(() => {
    let MMFlexEditText = Java.use("com.tencent.mm.ui.widget.cedit.api.MMFlexEditText");
    var CharSequence = Java.use("java.lang.CharSequence");
    MMFlexEditText["getText"].implementation = function () {
        console.log(`MMFlexEditText.getText is called`);
        let result = this["getText"]();
        var resultStr = Java.cast(result, CharSequence);
        console.log(`MMFlexEditText.getText result=${resultStr}`);
        return result;
};
});
"""

process = frida.get_usb_device().attach('微信')
script = process.create_script(jscode)
script.on('message', on_message)
print('[*] Running CTF')
script.load()
sys.stdin.read()