android dexposed框架hook使用实例

package com.taobao.dexposed;import java.io.File;import java.lang.reflect.Field;import java.lang.reflect.Modifier;import com.taobao.android.dexposed.DexposedBridge;import com.taobao.android.dexposed.XC_MethodHook;import com.taobao.patch.PatchMain;import com.taobao.patch.PatchResult;import android.annotation.SuppressLint;import android.app.Activity;import android.app.AlertDialog;import android.app.PendingIntent;import android.content.DialogInterface;import android.os.Build;import android.os.Bundle;import android.telephony.SmsManager;import android.telephony.TelephonyManager;import android.util.Log;import android.view.View;import android.widget.TextView;public class MainActivity extends Activity {private static final String TAG = "MainActivity";static {// load xposed lib for hook.try {if (android.os.Build.VERSION.SDK_INT == 22) {System.loadLibrary("dexposed_l51");} else if (android.os.Build.VERSION.SDK_INT > 19 && android.os.Build.VERSION.SDK_INT <= 21) {System.loadLibrary("dexposed_l");} else if (android.os.Build.VERSION.SDK_INT > 14) {System.loadLibrary("dexposed");}} catch (Throwable e) {e.printStackTrace();}}private boolean isSupport = false;private boolean isLDevice = false;private TextView mLogContent;@Overrideprotected void onCreate(Bundle savedInstanceState) {super.onCreate(savedInstanceState);setContentView(R.layout.activity_main);mLogContent = (TextView) (this.findViewById(R.id.log_content));// check device if support and auto load libsisSupport = true;isLDevice = android.os.Build.VERSION.SDK_INT >= 20;}public void hookjava(View view) {DexposedBridge.findAndHookMethod(System.class, "setProperty", String.class, String.class, new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {// hook 参数String tag = (String) param.args[0];// String msg = (String) param.args[1];if (tag.startsWith("ijm")) {param.args[1] = "you have been hooked";}Log.i(TAG, "beforeHookedMethod");}@Overrideprotected void afterHookedMethod(MethodHookParam arg0) throws Throwable {String tag = (String) arg0.args[0];String msg = (String) arg0.args[1];mLogContent.setText(tag + "," + msg);Log.i(TAG, "afterHookedMethod");}});DexposedBridge.findAndHookMethod(TelephonyManager.class, "getDeviceId", new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {// hook 返回值Log.i(TAG, "beforeHookedMethod param.args.length=" + param.args.length);param.setResult("1024_" + (int) (Math.random() * 1000));}});DexposedBridge.findAndHookMethod(TelephonyManager.class, "getNetworkOperatorName", new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {// hook 返回值param.setResult("networkOperatorName_hook");}});DexposedBridge.findAndHookMethod(TelephonyManager.class, "getSubscriberId", new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {// hook 返回值param.setResult("hook 310260000000000");}});DexposedBridge.findAndHookMethod(SmsManager.class, "sendTextMessage",             String.class, String.class, String.class,            PendingIntent.class, PendingIntent.class,new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {Log.i(TAG, "hook sendTextMessage "+param.args[0].toString());Log.i(TAG, param.args[1].toString());Log.i(TAG, param.args[2].toString());}});DexposedBridge.findAndHookMethod(Log.class, "e", String.class,String.class,new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {Log.i("", "beforeHookedMethod loge");//param.set//hook住不调用该方法,直接返回了，已经有返回值就就不调用系统的log.e方法了param.setResult(-1);//param.setThrowable(new Throwable("hehe"));//param.setThrowable(new  RuntimeException("hehe"));}@Overrideprotected void afterHookedMethod(MethodHookParam param) throws Throwable {//super.afterHookedMethod(param);Log.i("", "afterHookedMethod loge");}});DexposedBridge.findAndHookMethod(MainActivity.class, "showLog", String.class,String.class,new XC_MethodHook() {@Overrideprotected void beforeHookedMethod(MethodHookParam param) throws Throwable {Log.i("", "beforeHookedMethod showLog");//hook住不调用该方法,直接返回了，已经有返回值就就不调用系统的log.e方法了//param.setResult(-1);}@Overrideprotected void afterHookedMethod(MethodHookParam param) throws Throwable {Log.i("", "afterHookedMethod showLog");}});Log.i(TAG, "hookjava ok");}public void testhookjava(View view) {System.setProperty("ijm_name", "1024_ijm");Log.i(TAG, System.getProperty("ijm_name"));System.setProperty("test", "1024_test");Log.i(TAG, System.getProperty("test"));TelephonyManager telephonyManager = (TelephonyManager) getSystemService(Activity.TELEPHONY_SERVICE);String deviceId = telephonyManager.getDeviceId();Log.i(TAG, "deviceId=" + deviceId);String networkOperatorName = telephonyManager.getNetworkOperatorName();Log.i(TAG, "networkOperatorName=" + networkOperatorName);String subscriberId = telephonyManager.getSubscriberId();Log.i(TAG, "subscriberId=" + subscriberId);Log.e(TAG, "test log e");SmsManager smsManager=SmsManager.getDefault();smsManager.sendTextMessage("110", "120", "test sms", null, null);showLog(TAG, "showLog");try {Field idField = Build.class.getDeclaredField("ID");idField.setAccessible(true);Log.i(TAG, "Build.ID old=" + Build.ID);idField.set(Build.class, "changed");Log.i(TAG, "Build.ID new=" + Build.ID);Log.i(TAG, "SDK_INT=" + Build.VERSION.SDK_INT);Field sdk_int_Field = Build.VERSION.class.getDeclaredField("SDK_INT");sdk_int_Field.setAccessible(true);sdk_int_Field.setInt(Build.VERSION.class, 10);Log.i(TAG, "new SDK_INT=" + Build.VERSION.SDK_INT);} catch (Exception ex) {ex.printStackTrace();}}public void testhookjava2(View view) {Log.i(TAG, "Build.ID=" + Build.ID);}// Hook system log clickpublic void hookSystemLog(View view) {if (isSupport) {DexposedBridge.findAndHookMethod(isLDevice ? this.getClass() : Log.class, isLDevice ? "showLog" : "d",String.class, String.class, new XC_MethodHook() {@Overrideprotected void afterHookedMethod(MethodHookParam arg0) throws Throwable {String tag = (String) arg0.args[0];String msg = (String) arg0.args[1];mLogContent.setText(tag + "," + msg);}});if (isLDevice) {showLog("dexposed", "It doesn't support AOP to system method on ART devices");} else {Log.d("dexposed", "Logs are redirected to display here");}} else {mLogContent.setText("This device doesn't support dexposed!");}}private void showLog(String tag, String msg) {Log.d(tag, msg);}// Hook choreographer clickpublic void hookChoreographer(View view) {Log.d("dexposed", "hookChoreographer button clicked.");if (isSupport && !isLDevice) {ChoreographerHook.instance().start();} else {showLog("dexposed", "This device doesn't support this!");}}// Run patch apk@SuppressLint("NewApi")public void runPatchApk(View view) {Log.d("dexposed", "runPatchApk button clicked.");if (isLDevice) {showLog("dexposed", "It doesn't support this function on L device.");return;}if (!isSupport) {Log.d("dexposed", "This device doesn't support dexposed!");return;}File cacheDir = getExternalCacheDir();if (cacheDir != null) {String fullpath = cacheDir.getAbsolutePath() + File.separator + "patch.apk";Log.d("Hotpatch", "fullpath=" + fullpath);PatchResult result = PatchMain.load(this, fullpath, null);if (result.isSuccess()) {Log.e("Hotpatch", "patch success!");} else {Log.e("Hotpatch", "patch error is " + result.getErrorInfo());}}showDialog();}private void showDialog() {AlertDialog.Builder builder = new AlertDialog.Builder(this);File cacheDir = getExternalCacheDir();String fullpath = cacheDir.getAbsolutePath() + File.separator + "patch.apk";builder.setTitle("Dexposed sample").setMessage("Please clone patchsample project to generate apk, and copy it to " + fullpath).setPositiveButton("ok", new DialogInterface.OnClickListener() {public void onClick(DialogInterface dialog, int whichButton) {}}).create().show();}}
更多相关文章

随机推荐
