动态分析技巧--代码注入法

测试apk下载

一

用apktool对apk进行反编译
apktool d app-release.apk -o out

之后对反汇编代码进行分析

# virtual methods
.method public onClick(Landroid/view/View;)V
    .locals 3

    .line 34
    iget-object p1, p0, Lcom/droider/checksn/MainActivity$1;->this$0:Lcom/droider/checksn/MainActivity;

    invoke-static {
   p1}, Lcom/droider/checksn/MainActivity;->access$000(Lcom/droider/checksn/MainActivity;)Landroid/widget/EditText;

    move-result-object p1    # 用户名文本控件

    invoke-virtual {
   p1}, Landroid/widget/EditText;->getText()Landroid/text/Editable;

    move-result-object p1    # 获取用户名文本框内容

    invoke-virtual {
   p1}, Ljava/lang/Object;->toString()Ljava/lang/String;

    move-result-object p1    # 转为 String

    invoke-virtual {
   p1}, Ljava/lang/String;->trim()Ljava/lang/String;

    move-result-object p1    # 去掉用户名中的空格

    .line 35
    iget-objec