Android中使用Frida hook方法

Java.perform(function () {


var Activity = Java.use('android.app.Activity');
var Toast = Java.use('android.widget.Toast');

var Bundle = Java.use('android.os.Bundle');

var PackageInfo = Java.use('android.content.pm.PackageInfo');


//得到context
var currentApplication = Java.use('android.app.ActivityThread').currentApplication();
var context = currentApplication.getApplicationContext();

// hook所有activity的onResume方法
Activity.onResume.implementation = function () {
	console.log('onResume --> '+this);

    console.log('onResume --> context '+context);
	this.onResume();
}

// hook所有activity的onCreate方法，因为onCreate方法有多种参数，所以需要指定参数类型来确定要hook的方法
Activity.onCreate.overload('android.os.Bundle').implementation = function (c) {
	console.log('onCreate --> '+this);
	this.onCreate(c);

//1.调用静态方法，首先使用Java.use，后面makeText方法的参数保持一致
//Toast.makeText(this,"onCreate",Toast.LENGTH_SHORT).show();
Toast.makeText(this,"onCreate ----",Toast.LENGTH_SHORT.value).show();

//2. 读取静态属性
//int code = Activity.RESULT_OK;
var code = Activity.RESULT_OK.value

//3.调用实例方法，并new一个对象
//在intent中添加一个bundle
//Bundle bundle=new Bundle();
//bundle.putString("key1","value1");
// activity.getIntent().putExtra("testBundle",bundle);
var bundle = Bundle.$new();
//调用实例方法需要使用call
Bundle.putString.call(bundle,'key1','value1')
//也可以指定具体的参数类型
//Bundle.putString.overload('java.lang.String','java.lang.String').call(bundle,'key1','value1')
this.getIntent().putExtra('testBundle',bundle)

//activity.getIntent().getBundleExtra("testBundle");
var outB = this.getIntent().getBundleExtra('testBundle')
console.log(outB);

//4.读取实例对象的属性值，对于得到的对象，需要使用Java.cast()方法转换后才可以使用
// PackageInfo packageInfo = getPackageManager().getPackageInfo(getPackageName(),0);
// String pkg = packageInfo.packageName;
var t = this.getPackageManager().getPackageInfo(this.getPackageName(),0);
var packageInfo = Java.cast(t.$handle, PackageInfo);
var pkg = packageInfo.packageName.value
console.log(pkg)

}
});