zoukankan      html  css  js  c++  java
  • 使用xposed 来解阿里ctf-2014 第三题

    只能说,有了xposed以后,对于java代码的hook从此非常简单

    直接粘贴代码了,对于xposed 怎么上手,请参考https://github.com/rovo89/XposedBridge/wiki/Development-tutorial

    关键是找到addJavascriptInterface这个函数并hook即可,然后找到到底注入的名字以及object对象。

    public class Tutorial implements IXposedHookLoadPackage {

         public void handleLoadPackage(final LoadPackageParam lpparam) throws Throwable {

         //XposedBridge.log("Loaded app: " + lpparam.packageName);

             if (!lpparam.packageName.equals("com.ali.tg.testapp"))

         return;

        findAndHookMethod("android.webkit.WebView",lpparam.classLoader,"addJavascriptInterface",Object.class,String.class,new XC_MethodHook(){

        @Override

    protected void beforeHookedMethod(MethodHookParam param) throws Throwable {

    // this will be called before the clock was updated by the original method

        XposedBridge.log("before addJavascriptInterface:"+param.args[1].toString());

        XposedBridge.log("methods:");

        Object obj=param.args[0];

        Class<?> cls= obj.getClass();

        Method[] ms=cls.getDeclaredMethods();

        for( int i=0;i<ms.length;i++)

        {

            XposedBridge.log(ms[i].toString());

        }

    }

    @Override

    protected void afterHookedMethod(MethodHookParam param) throws Throwable {

     

    }

    });

          

          

         }

    }

  • 相关阅读:
    Java关键字instanceof
    java中equals和==的区别
    Servlet、Filter、Listener总结
    struts2 拦截器配置
    Struts2技术详解
    构建Java并发模型框架
    基于MINA框架快速开发网络应用程序
    Spring的IOC原理
    Spring AOP原理及拦截器
    JAVA三大框架SSH和MVC
  • 原文地址:https://www.cnblogs.com/baizx/p/4241895.html
Copyright © 2011-2022 走看看