android - Frida "invoke-virtual" 方法重载失败并显示 "Error: expected a pointer"
问题描述
我想重载通过反编译Android应用程序找到的以下方法apktool
:
invoke-virtual {v0, v4, v3}, Lokhttp3/aa$a;->b(Ljava/lang/String;Ljava/lang/String;)Lokhttp3/aa$a;
这是我的弗里达脚本:
Java.perform(function() {
var targetClass = Java.use("okhttp3.aa$a");
targetClass.b.overload("java.lang.String", "java.lang.String").implementation = function(a, b) {
console.log("str1:" + a);
console.log("str2:" + b);
return this.b(a, b);
}
});
挂钩失败:
[ERROR] Error: expected a pointer
at value (frida/runtime/core.js:170)
at At (frida/node_modules/frida-java-bridge/lib/android.js:879)
at activate (frida/node_modules/frida-java-bridge/lib/android.js:960)
at <anonymous> (frida/node_modules/frida-java-bridge/lib/android.js:740)
at forEach (native)
at St (frida/node_modules/frida-java-bridge/lib/android.js:741)
at kt (frida/node_modules/frida-java-bridge/lib/android.js:732)
at vt (frida/node_modules/frida-java-bridge/lib/android.js:696)
at replace (frida/node_modules/frida-java-bridge/lib/android.js:1011)
at set (frida/node_modules/frida-java-bridge/lib/class-factory.js:1010)
at <anonymous> (/script2.js:3)
at <anonymous> (frida/node_modules/frida-java-bridge/lib/vm.js:16)
at _performPendingVmOps (frida/node_modules/frida-java-bridge/index.js:238)
at <anonymous> (frida/node_modules/frida-java-bridge/index.js:213)
at <anonymous> (frida/node_modules/frida-java-bridge/lib/vm.js:16)
at _performPendingVmOpsWhenReady (frida/node_modules/frida-java-bridge/index.js:232)
at perform (frida/node_modules/frida-java-bridge/index.js:192)
at <eval> (/script2.js:8)
如何正确重载该方法?
更新
我发现这个错误是因为我试图一次加载多个脚本。可能吗?
import frida
import sys
package_name = "com.test.com"
def hook_okhttp_url():
hook_code = open('hook_okhttp_url.js').read()
return hook_code
def hook_cronet_header():
hook_code = open('hook_cronet_header.js').read()
return hook_code
def on_message(message, data):
if message['type'] == 'error':
print("[ERROR] " + message['stack'])
elif message['type'] == 'send':
print("[INFO] " + message['payload'])
else:
print(message)
device = frida.get_usb_device()
process = device.attach(package_name)
okhttp_script = process.create_script(hook_okhttp_url())
cronet_script = process.create_script(hook_cronet_header())
okhttp_script.on('message', on_message)
cronet_script.on('message', on_message)
print('[*] Running Hook Test ...')
okhttp_script.load()
cronet_script.load()
sys.stdin.read()
我发现这个错误是因为我试图一次加载多个脚本。可能吗?
解决方案
当涉及重载方法时,我更喜欢以这种方式挂钩和调用方法(因为它减少了问题):
Java.perform(function() {
const targetClass = Java.use("okhttp3.aa$a");
const targetMethod = targetClass.b.overload("java.lang.String", "java.lang.String");
targetMethod.implementation = function(a, b) {
console.log("str1:" + a);
console.log("str2:" + b);
return targetMethod.call(this, a, b);
}
});
推荐阅读
- shell - 使用两种模式从文本文件中查找特定行,然后替换该行上的变量字符串
- excel - 如何在值旁边打印行和列的索引号?
- google-apps-script - 如何使用谷歌应用脚本获取草稿消息的线程 ID
- c# - 如何修复发送到前端时未正确创建后端 csv 下载
- android - android.view.InflateException: Binary XML file line #37: Error inflating class Button
- php - VK 通过 php 在墙上自动发布
- apache-nifi - 自定义处理器的依赖属性
- java - 如何识别文件夹的表名(来自 Alfresco 中的文件夹视图)以加入 cmis:document
- python - 使用来自单独文件的整数对熊猫数据框中的列进行分组
- python - 如何在 python matplotlib 折线图中用它们的值注释数据点?