TInjector

劫持Zygote实现App启动前注入so

Features

• Zygote spawn模式
• Android 9 - 13
• Arm64-v8a
• remap 隐藏 so
• 移除elf头 隐藏 so
• soinfo 隐藏 so

TODO

• 支持usap模式
• ...

Build and Usage

Build:

git clone https://github.com/mrack/TInjector.git
cd TInjector
ndk-build (Add ndk-build to your env variables)
adb shell mkdir /data/local/tmp/inject
adb push libtcore.so /data/local/tmp/inject/
adb push tinjector /data/local/tmp/inject/

Usage:

su
cd /data/local/tmp/inject
chmod 777 libtcore.so
chmod +x tinjector
./tinjector -h

Usage: ./tinject --hide --hide1 -f -p <package name>  <so path>
Options:
-p <pkg> <so path>  Inject so to the specified package.
-P <pid> <so path>  Inject so to the specified pid.
--hide              Hide the injected module.
--hide1             Hide the injected module. (soinfo) beta
-h                  Show this help.
-f                  Spwan a new process and inject to it. only for android app.