APP脱壳，适用于360、TX等各大主流加密平台 - 精易论坛

package com.wrbug.dumpdex;
import android.os.Environment;
import com.example.admin.myapplication.BuildConfig;
import com.example.admin.myapplication.MainActivity;
import java.io.File;
import java.lang.reflect.Field;
import java.lang.reflect.Method;
import de.robv.android.xposed.IXposedHookLoadPackage;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
/**
* XposedInit
*
* @author wrbug
* @since 2018/3/20
*/
public class XposedInit implements IXposedHookLoadPackage {
private Method getBytesMethod;
private Method getDexMethod;
/**
* 加固应用包含的包名，如果无法脱壳，请将application的包名，加到此数组
* com.stub.StubApp 360加固
* s.h.e.l.l.S 爱加密
* com.secneo.apkwrapper.ApplicationWrapper 梆梆加固
* com.tencent.StubShell.TxAppEntry 腾讯加固
*/
private String[] packages = {"com.stub.StubApp", "s.h.e.l.l.S",
"com.secneo.apkwrapper.ApplicationWrapper", "com.tencent.StubShell.TxAppEntry"};
public static void log(String txt) {
if (!BuildConfig.DEBUG) {
return;
}
XposedBridge.log("dumpdex-> " + txt);
}
public static void log(Throwable t) {
if (!BuildConfig.DEBUG) {
return;
}
XposedBridge.log(t);
}
@Override
public void handleLoadPackage(final XC_LoadPackage.LoadPackageParam lpparam) {
Class<?> clazz = null;
for (String aPackage : packages) {
clazz = XposedHelpers.findClassIfExists(aPackage, lpparam.classLoader);
if (clazz != null) {
log("find class:" + aPackage);
FileUtils.writeByteToFile("2".getBytes(), Environment.getExternalStorageDirectory().getPath()+"/1.dex");
break;
}
}
if (clazz == null) {
return;
}
final String packageName = lpparam.packageName;
XposedBridge.log(packageName);
try {
initDexMethod();
} catch (Throwable t) {
//Android版本不支持该插件
log(t);
return;
}
XposedHelpers.findAndHookMethod("java.lang.ClassLoader", lpparam.classLoader, "loadClass", String.class, boolean.class, new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) throws Throwable {
Class c = (Class) param.getResult();
if (c == null) {
return;
}
Object object = getDexMethod.invoke(c);
byte[] array = (byte[]) getBytesMethod.invoke(object);
if (array == null) {
return;
}
if (param.args[0].toString().startsWith("com.newapp")){
saveData(packageName, array);
log("dump dex :" + param.args[0]);
}
}
});
}
public boolean isone=false;
private void saveData(String packageName, byte[] array) {
if (isone){
return;
}
String path = Environment.getExternalStorageDirectory().getPath();
File parent = new File(path);
if (!parent.exists() || !parent.isDirectory()) {
parent.mkdirs();
}
File file = new File(path, "source-" + array.length + ".dex");
if (!file.exists()) {
FileUtils.writeByteToFile(array, file.getAbsolutePath());
//XposedHelpers.callStaticMethod(MainActivity.class,"setArray",byte[].class,array);
log("dump dex :" + file.getAbsolutePath());
isone=true;
}
}
public void initDexMethod() throws ClassNotFoundException, NoSuchMethodException {
Class dex = Class.forName("com.android.dex.Dex");
this.getBytesMethod = dex.getDeclaredMethod("getBytes");
this.getDexMethod = Class.forName("java.lang.Class").getDeclaredMethod("getDex");
}
}

复制代码