String Comparison API hook

[brunoaduarte]

Shouldn't the args be printed in the args fields instead of only their types?

[API_Monitor]
{
  "category": "String Comparison",
  "class": "java.lang.String",
  "method": "equals",
  "args": "[\"<instance: java.lang.Object, $className: java.lang.String>\"]",
  "returnValue": "true",
  "calledFrom": "\u0007"
}

[brunoaduarte]

Hi @m0bilesecurity , how can I print the string of the mapped keys and values? for Input and Output instead of the type

Class: com.facebook.msys.mci.NetworkUtils
Method: public static android.util.Pair httpHeaderMapToKeysAndValues(java.util.Map)
Called by: com.facebook.msys.mci.UrlResponse.<init>(:290439)
Input: [object Object]
Output: Pair{[Ljava.lang.String;@e41046b [Ljava.lang.String;@6c9abc8}
StackTrace:
        at com.facebook.msys.mci.NetworkUtils.httpHeaderMapToKeysAndValues(Native Method)
        at X.1dq.A00(:328004)
        at com.facebook.redex.RunnableRunnableShape3S0300000_I1.run(:668801)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
        at com.facebook.redex.RunnableRunnableShape10S0200000_I0_8.run(:508286)
        at java.lang.Thread.run(Thread.java:764)

[m0bilesecurity]

Ciao @brunoaduarte, you need to analyse every object one by one.
Do you have some time to improve the API_Monitor script?

RMS-Runtime-Mobile-Security/agent/RMS_core.js

Line 487 in 64faab0

function api_monitor_Android(api_to_monitor)

Thanks