文章展示了如何使用Xposed框架和Frida工具来hookorg.chromium.CronetClient类的tryCreateCronetEngine方法。在Xposed中，通过XposedHelpers找到并hook该方法，在调用前设置结果为null。而在Frida中，动态地修改了方法的实现，允许在运行时改变其行为。
样本:v24.7.0.
- xposed
XposedHelpers.findAndHookMethod("org.chromium.CronetClient", lpparam.classLoader, "tryCreateCronetEngine", Context.class, boolean.class, boolean.class, boolean.class, boolean.class, String.class, Executor.class, boolean.class, new XC_MethodHook() {
@Override
protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
param.setResult(null);
}
});
- Frida
Java.perform(function() {
var targetClass='org.chromium.CronetClient';
var methodName='tryCreateCronetEngine';
var gclass = Java.use(targetClass);
gclass[methodName].overload('android.content.Context','boolean','boolean','boolean','boolean','java.lang.String','java.util.concurrent.Executor','boolean').implementation = function(arg0,arg1,arg2,arg3,arg4,arg5,arg6,arg7) {
}
})
扫一扫
4095
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
