Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

这个想法很流弊 #1

Closed
df13954 opened this issue Mar 21, 2018 · 3 comments
Closed

这个想法很流弊 #1

df13954 opened this issue Mar 21, 2018 · 3 comments

Comments

@df13954
Copy link

df13954 commented Mar 21, 2018

Class dex = Class.forName("com.android.dex.Dex");
this.getBytesMethod = dex.getDeclaredMethod("getBytes");
this.getDexMethod = Class.forName("java.lang.Class").getDeclaredMethod("getDex");

private String[] packages = {"com.stub.StubApp", "s.h.e.l.l.S"};

这2个包名是啥,?我成功把360最新的普通壳脱了

@WrBug
Copy link
Owner

WrBug commented Mar 21, 2018

packages . 是一些加固应用的包名。com.stub.StubApp是360的,s.h.e.l.l.S是爱加密。其他会陆续添加进去

@df13954
Copy link
Author

df13954 commented Mar 21, 2018

也就是后面的,各种加固,都逃不过getBytes,这个返回的字节数组,里面就是具体的dex了?希望大神继续开源,膜拜

@WrBug
Copy link
Owner

WrBug commented Mar 21, 2018

android8把dex去掉了。我要看看c++那边的处理,估计xposed无能为力了

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants