duangsuse::Echo
719 subscribers
4.28K photos
130 videos
583 files
6.49K links
import this:
美而不丑、明而不暗、短而不凡、长而不乱,扁平不宽,读而后码,行之天下,勿托地上天国。
异常勿吞,难过勿过,叹一真理。效率是很重要,盲目最是低效。
简明是可靠的先验,不是可靠的祭品。
知其变,守其恒,为天下式;穷其变,知不穷,得地上势。知变守恒却穷变知新,我认真理,我不认真。

技术相干订阅~
另外有 throws 闲杂频道 @dsuset
转载频道 @dsusep
极小可能会有批评zf的消息 如有不适可退出
suse小站(面向运气编程): https://WOJS.org/#/
Download Telegram
如你所愿(((((
我们来试试随便打个断点
>> ct android.widget.Toast
## Setting Hooks
-- Hooked android.widget.Toast
如果 @drakeet 使用 Toast API
显示鄙视文档的话, 中断后就会有奇怪的方法出现在 call stack 中(
This media is not supported in your browser
VIEW IN TELEGRAM
虚拟机 Segfault 了
现在我在纯纯写作初始化时 suspend, 然后在 java.security.MessageDigest 上打断点
>> tt
## Setting Hooks
-- Hooked thread <1> main (running suspended)
-- Hooked thread <33> Okio Watchdog (sleeping suspended)
-- Hooked thread <32> OkHttp ConnectionPool (sleeping suspended)
-- Hooked thread <31> AsyncTask #2 (waiting suspended)
-- Hooked thread <30> AsyncTask #1 (waiting suspended)
-- Hooked thread <29> RxCachedThreadScheduler-9 (waiting suspended)
-- Hooked thread <21> RxCachedThreadScheduler-8 (waiting suspended)
-- Hooked thread <28> RxComputationThreadPool-1 (sleeping suspended)
-- Hooked thread <27> RxCachedThreadScheduler-7 (waiting suspended)
-- Hooked thread <24> RxCachedThreadScheduler-4 (waiting suspended)
-- Hooked thread <23> RxCachedThreadScheduler-3 (waiting suspended)
-- Hooked thread <22> RxCachedThreadScheduler-2 (waiting suspended)
-- Hooked thread <20> pool-5-thread-2 (waiting suspended)
-- Hooked thread <19> pool-5-thread-1 (waiting suspended)
-- Hooked thread <18> RxCachedThreadScheduler-1 (waiting suspended)
-- Hooked thread <17> RxCachedWorkerPoolEvictor-1 (sleeping suspended)
-- Hooked thread <15> RxSchedulerPurge-1 (running suspended)
-- Hooked thread <16> pool-3-thread-1 (waiting suspended)
-- Hooked thread <14> Crashlytics Exception Handler1 (waiting suspended)
-- Hooked thread <13> Answers Events Handler1 (sleeping suspended)
-- Hooked thread <12> Queue (waiting suspended)
-- Hooked thread <11> Queue (waiting suspended)
-- Hooked thread <10> Binder_2 (running suspended)
-- Hooked thread <9> Binder_1 (running suspended)
-- Hooked thread <8> FinalizerWatchdogDaemon (sleeping suspended)
-- Hooked thread <7> FinalizerDaemon (waiting suspended)
-- Hooked thread <6> ReferenceQueueDaemon (waiting suspended)
-- Hooked thread <5> Compiler (waiting suspended)
-- Hooked thread <3> Signal Catcher (waiting suspended)
-- Hooked thread <2> GC (waiting suspended)

Threads
dse@susepc:~/reveng/pw$ andbug shell -d emulator-5554 -p com.drakeet.purewriter -s smali/
## AndBug (C) 2011 Scott W. Dunlop <swdunlop@gmail.com>
» suspend
## Process Suspended
» thread
thread-trace threads
» threads
## thread <1> main (running suspended)
## thread <2> GC (waiting suspended)
## thread <3> Signal Catcher (waiting suspended)
## thread <5> Compiler (waiting suspended)
## thread <6> ReferenceQueueDaemon (waiting suspended)
## thread <7> FinalizerDaemon (waiting suspended)
## thread <8> FinalizerWatchdogDaemon (waiting suspended)
## thread <9> Binder_1 (running suspended)
## thread <10> Binder_2 (running suspended)
>> ct java.security.MessageDigest
## Setting Hooks
-- Hooked java.security.MessageDigest

🌚🔒🗞
duangsuse::Echo
>> ct java.security.MessageDigest ## Setting Hooks -- Hooked java.security.MessageDigest 🌚🔒🗞
动态调试果然赛艇 🌚
我只是打了一个小小的类断点

... 这信息量比较大
由于更新个没完我就中断了调试器
先分析开始的这些
混淆不能太大的干扰动态分析( :-P
由于那些访问 java.security.MessageDigest 的都是些 SDK 或者进行 Web 交互的(比如从 gh 上拖价格)
我重启写作, Hook 上面我提到的那个访问 Native Method 的方法.
rt com.drakeet.purewriter.Ww.ww
这些也是
我会 class-trace Android 应用进行自省的类 android.content.PackageManager
现在部分类还没被虚拟机加载
这个类已经被加载了( 不知道是只在启动时验证还是按时验证
>> ct android.content.pm.PackageManager
## Setting Hooks
-- Hooked android.content.pm.PackageManager
>> ct android.widget.Toast
## Setting Hooks
-- Hooked android.widget.Toast