Frida 主动创建List
被hook的函数:
public List checkServerTrusted (X509Certificate[] chain,
String authType,
String host)
现在让checkServerTrusted直接返回arg1对应的List
DymClass.checkServerTrusted.overload('[Ljava.security.cert.X509Certificate;', 'java.lang.String', 'java.lang.String').implementation = function (arg1,arg2,arg3)
{
var bt = Java.use("android.util.Log").getStackTraceString(Java.use("java.lang.Exception").$new());
send('hooked');
console.log("Backtrace:" + bt);
send('orin arg1 : ' + arg1);
send('orin arg2 : ' + arg2);
send('orin arg3 : ' + arg3);
for (let cert of arg1){
clsCertArray.add(cert);
}
return clsCertArray;
}