duangsuse::Echo
718 subscribers
4.26K photos
130 videos
583 files
6.48K links
import this:
美而不丑、明而不暗、短而不凡、长而不乱,扁平不宽,读而后码,行之天下,勿托地上天国。
异常勿吞,难过勿过,叹一真理。效率是很重要,盲目最是低效。
简明是可靠的先验,不是可靠的祭品。
知其变,守其恒,为天下式;穷其变,知不穷,得地上势。知变守恒却穷变知新,我认真理,我不认真。

技术相干订阅~
另外有 throws 闲杂频道 @dsuset
转载频道 @dsusep
极小可能会有批评zf的消息 如有不适可退出
suse小站(面向运气编程): https://WOJS.org/#/
Download Telegram
重启再看看
>> class-trace com.drakeet.purewriter.Ww
## Setting Hooks
-- Hooked com.drakeet.purewriter.Ww
>> class-trace android.widget.Toast
## Setting Hooks
-- Hooked android.widget.Toast
>> resume
## Process Resumed
>> ## trace thread <1> main (running suspended)
-- com.drakeet.purewriter.Ww.WwWw()V:0
-- com.drakeet.purewriter.AboutActivity.onCreate(Landroid/os/Bundle;)V:9
-- this=Lcom/drakeet/purewriter/AboutActivity; <830058757392>
-- android.app.Activity.performCreate(Landroid/os/Bundle;)V:1
-- this=Lcom/drakeet/purewriter/AboutActivity; <830058757392>
-- icicle=None

就是这个类! 抓住现行一次 🙈
在 AboutActivity 被创建时唤起一次
既然是这样,我就要 Hook PackageManager 这样的类了
第二次抓住现行!
This media is not supported in your browser
VIEW IN TELEGRAM
现在所有的对象都在我手里, 我可以随便看
This media is not supported in your browser
VIEW IN TELEGRAM
   -- com.drakeet.purewriter.ts.Wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww(Landroid/content/Context;Ljava/lang/String;)Landroid/content/pm/Pac
kageInfo;:6
-- this=Lcom/drakeet/purewriter/ts; <830063735840>

就是你这个坏家伙在 Activity 堆操作时调用了自省 API android.content.pm.PackageInfo android.app.ApplicationPackageManager.getPackageInfo(java.lang.String, int)
值得注意的地方是这些都是异步操作
  -- java.util.concurrent.FutureTask.run()V:30
-- this=Ljava/util/concurrent/ScheduledThreadPoolExecutor$ScheduledFutureTask; <830058067072>
-- c=Lcom/drakeet/purewriter/alf; <830058067040>
-- snip --
-- java.lang.Thread.run()V:6
-- this=Lcom/drakeet/purewriter/ald$Wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww; <830055181040>
## trace thread <1> main        (running suspended)
-- com.drakeet.purewriter.Ww.WwWvw()V:0
-- com.drakeet.purewriter.AboutActivity.onDestroy()V:0
-- this=Lcom/drakeet/purewriter/AboutActivity; <830059138752>
-- android.app.Activity.performDestroy()V:13
-- this=Lcom/drakeet/purewriter/AboutActivity; <830059138752>
-- android.app.Instrumentation.callActivityOnDestroy(Landroid/app/Activity;)V:0
-- this=Landroid/app/Instrumentation; <830053404864>
-- activity=Lcom/drakeet/purewriter/AboutActivity; <830059138752>

果然是你 com.drakeet.purewriter.Ww.WwWvw
This media is not supported in your browser
VIEW IN TELEGRAM
 -- android.app.ApplicationPackageManager.getPackageInfo(Ljava/lang/String;I)Landroid/content/pm/PackageInfo;:8
-- this=Landroid/app/ApplicationPackageManager; <830060831888>
-- packageName=com.drakeet.purewriter
-- flags=64
-- com.drakeet.purewriter.ts.Wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww(Landroid/content/Context;Ljava/lang/String;)Landroid/content/pm/Pac
kageInfo;:6

还是这个 com.drakeet.purewriter.ts.Wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww(Landroid/content/Context;Ljava/lang/String;)Landroid/content/pm/PackageInfo;:6
This media is not supported in your browser
VIEW IN TELEGRAM
随便看几个对象然后 resume 好了
如果是单线程应用调试起来还方便一些

看情况真正的验证还没有开始,过会还会中断的
>> navi
## navigating process state at http://localhost:8080
-- Process suspended for navigation.
感觉暂停的不是时候,好像没什么可看的(
不过感觉很好