Dexplore

右旋

用于在运行时查找混淆的类和方法的DEX分析库。

描述

Dexplore是一个Java库，旨在分析和查找混淆的类和方法。该库可以根据特定查询自动找到混淆的类和方法，使开发人员能够为任何混淆的代码库创建便携式应用程序（例如Xposed模块）。
此外，Dexplore提供了一个命令行工具，可提供执行静态分析和应用DE兼容的功能。该工具还能够提取特定的类文件和资源，从而产生更快且资源较低的过程。

支持类型： APK，DEX，ODEX，OAT，ZIP。
支持的输入：文件路径，字节缓冲区（内存内置DEX）。

用法

请从“发行”页面中查看最新版本的Dexplore。

图书馆

库的依赖性

repositories {
    mavenCentral()
}
dependencies {
    implementation ' io.github.neonorbit:dexplore:1.4.5 '
}

命令行

命令行工具用于静态分析和应用程序DE兼容

java -jar Dexplore.jar --help

XPOSE样本

Xposed模块的样本。
请参阅Wiki页面以获取详细说明。

 public class XposedModule implements IXposedHookLoadPackage {
  @ Override
  public void handleLoadPackage ( XC_LoadPackage . LoadPackageParam lpparam ) {
    if (! lpparam . packageName . equals ( "com.example.app" )) return ;

    // Create a class filter to find your target class
    ClassFilter classFilter = new ClassFilter . Builder ()
            . setReferenceTypes ( ReferenceTypes . STRINGS_ONLY )
            . setReferenceFilter ( pool ->
                    pool . contains ( "a unique string inside the class" )
            ). build ();

    // Create a method filter to find your target method from the class
    MethodFilter methodFilter = new MethodFilter . Builder ()
            . setReferenceTypes ( ReferenceTypes . STRINGS_ONLY )
            . setReferenceFilter ( pool ->
                    pool . contains ( "a unique string inside the method" )
            ). setParamSize ( 2 )   // suppose it has 3 parameters
            . setModifiers ( Modifier . PUBLIC )   // and it's a public method
            . build ();

    // Load the base apk into Dexplore
    Dexplore dexplore = DexFactory . load ( lpparam . appInfo . sourceDir );

    // Perform a dex search
    MethodData result = dexplore . findMethod ( classFilter , methodFilter );

    // Load the actual method
    Method method = result . loadMethod ( lpparam . classLoader );

    // Hook with Xposed
    XposedBridge . hookMethod ( method , XC_MethodReplacement . returnConstant ( true ));

    // ------------------ Extra ------------------
    // Please don't forget to save the result in Preferences.
    preferences . edit ()
            . putString ( "targetMethod" , result . serialize ())  // serialize and save the result
            . putLong ( "appVersion" , pkgInfo . getLongVersionCode ()) // version code (NOT version name)
            . apply ();
    // Use the saved result until the app LongVersionCode changes.
    String saved = preferences . getString ( "targetMethod" , null );
    MethodData retrieved = MethodData . deserialize ( saved );  // Deserialize

    // Please refer to the wiki page for a detailed explanation.
  }
}

使用细节

• 检查Javadocs中的API概述。
• 检查Wikipage以获取详细说明和示例。

支持

寻求帮助：XDA-thread
示例项目可以在XDA线程上找到。

执照

 Copyright (C) 2022 NeonOrbit

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.