Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

【问题反馈】在安卓15的设备无法搜索内存中dex #35

Closed
lovejiuwu opened this issue Dec 18, 2024 · 1 comment
Closed

【问题反馈】在安卓15的设备无法搜索内存中dex #35

lovejiuwu opened this issue Dec 18, 2024 · 1 comment

Comments

@lovejiuwu
Copy link

所遇到的问题

测试应用

应用名称:图叨叨
应用包名:com.lcw.daodaopic
应用加固:360加固
下载地址:https://www.coolapk.com/apk/com.lcw.daodaopic

大致描述

  • 这个app使用了360加固 所以选择使用 DexKitBridge.create(context.classLoader, true) 方式创建DexKitBridge实例
  • 通过DexKitBridge查找内存dex需要用到的类/方法
  • 在安卓14的设备中 可以正常查找内存dex中的所有信息
  • 在安卓15的设备中 疑似会 自动回退使用 apkPath 加载 dex 文件

详细代码

XMethod.clz("com.lcw.daodaopic.MApplication").name("onCreate").hookAfter { application ->
            val app = application.thisObject as Application
            System.loadLibrary("dexkit")
            DexKitBridge.create(app.classLoader, true).use {
                it.exportDexFile(HostCore.getAppInfo().dataDir + "/NewHookVip/")
                it.findClass {

                }.apply {
                    XLog.d("classSearch result for a${Build.VERSION.RELEASE}", this)
                    XLog.d("classSearch result.size for a${Build.VERSION.RELEASE}", size)
                }
            }
        }

安卓14设备

日志

top.hookvip.pro: [图叨叨 -> LoadInfo]LoadInfo{loadPkg='com.lcw.daodaopic', modulePath='/data/app/~~uFLCo8LFHOiU8I48KCUM1A==/top.hookvip.pro-va8F8yk-oDnjX438lSEpzA==/base.apk', Inject=protected final void com.stub.StubApp.attachBaseContext(android.content.Context), moduleVersionName='4.0.4', moduleVersionCode=20241218, hostVersionName='6.8.1', hostVersionCode=681, crackHookInfo=[top.hookvip.pro.hook.main.Daodaopic@6b98ef], pluginAppInfos=[], pluginHookInfos=[], loadTime=1734488798035}
top.hookvip.pro: [图叨叨 -> classSearch result for a14][内容太长就不展示了]
top.hookvip.pro: [图叨叨 -> classSearch result.size for a14]12018

导出的Dex

photo_2024-12-18_10-13-01

安卓15设备

日志

top.hookvip.pro: [图叨叨 -> LoadInfo]LoadInfo{loadPkg='com.lcw.daodaopic', modulePath='/data/app/~~HchF3i8X6tCAK0yKLVNfsA==/top.hookvip.pro-_2KJh2pspV-a5KeLC7PZ6Q==/base.apk', Inject=protected final void com.stub.StubApp.attachBaseContext(android.content.Context), moduleVersionName='4.0.4', moduleVersionCode=20241218, hostVersionName='6.9.5', hostVersionCode=695, crackHookInfo=[top.hookvip.pro.hook.main.Daodaopic@e11448a], pluginAppInfos=[], pluginHookInfos=[], loadTime=1734490126490}
top.hookvip.pro: [图叨叨 -> classSearch result for a15][public final class com.stub.StubApp extends android.app.Application, public final class com.stub.StubApp extends android.app.Application, public class com.tianyu.util.Configuration extends java.lang.Object, public class com.tianyu.util.Configuration extends java.lang.Object, public class com.tianyu.util.DtcLoader extends java.lang.Object, public class com.tianyu.util.DtcLoader extends java.lang.Object, public final class com.tianyu.util.a extends java.lang.Object, public final class com.tianyu.util.a extends java.lang.Object]
top.hookvip.pro: [图叨叨 -> classSearch result.size for a15]8

导出的Dex

image

@teble
Copy link
Contributor

teble commented Dec 19, 2024

@teble teble closed this as completed Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants