Skip to content

Latest commit

History

20 Commits

Folders and files

NameName
Last commit message
Last commit date

Repository files navigation

AndroidMethodHook

结合阿里Sophix热修复方案(https://yq.aliyun.com/articles/74598?t=t1#)
使用了dexmaker库,主要用来动态生成dex文件。
使用方法:

HookManager.findAndHookMethod(MainActivity.class, "onCreate", Bundle.class, newMethodCallback() {
@OverrideprotectedvoidbeforeHookedMethod(MethodHookParamparam) throwsThrowable {
super.beforeHookedMethod(param);
Log.d("panda", "onCreate:"+param.thisObject.getClass().getName());
}
@OverrideprotectedvoidafterHookedMethod(MethodHookParamparam) throwsThrowable {
super.afterHookedMethod(param);
Log.d("panda", "i'm in method " +param.method.getName()+" afterHookedMethod");
}
});
HookManager.startHooks(base);

通过对Native JmethodId内容替换实现method hook,为了达到类似于xposed的效果,需要动态生成method,使用了dexmaker库用以动态生成mehtod。

每个需要hook的方法都会dexmaker生成一个一摸一样的方法,将this和传入参数封装成Object[] args传给MethodUtil类的invoke函数,然后回调MethodCallback实现类似于xposed mehtod hook。
生成代理method方式如下:

packagecom.panda.hook.andhook;
publicclassMainActivityextendsAppCompatActivity {
@OverrideprotectedvoidonCreate(BundlesavedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_main);
}
publicdoubletest(Objectthiz,inta,intb,charcr){
return (a+0.0)/b;
}
}
publicclasscom_panda_hook_andhook_MainActivity {
publiccom_panda_hook_andhook_MainActivity() {
super();
}
publicdoubletest(Objectarg12, intarg13, intarg14, chararg15) {
returnMethodUtil.invoke("com_panda_hook_andhook_MainActivity_testLIICD", this, newObject[]{
arg12, Integer.valueOf(arg13), Integer.valueOf(arg14), Character.valueOf(arg15)}).doubleValue();
}
}

About

android art hook like Sophix

Topics

Resources

Stars

287 stars

Watchers

14 watching

Forks

Releases

Packages

Used by

Contributors

Languages