Monkeylord

Results 53 comments of Monkeylord

Oh, it's not about engine. It's about class define. For example, ECPublicKey does not support K-256 because algorithm is hardcoded. It does not support K-256 even though you use webcrypto-liner....

The design is wonderful, but some implements are hardcoded. For example, in ./src/ECPublicKey.js It does only recognized 3 named curve, and I cannot add my curve without rewrite it. And...

zygote比较复杂,我也没有搞清楚怎么注入 但是开启调试这件事相对简单一些,可以在android.os.Debug,或者dalvik.system.VMDebug上做手脚,手工开启调试 以及,DDMS能够达到的功能,理论上应该都能达到

ActivityThread是这么干的 ~~~java if (data.debugMode != IApplicationThread.DEBUG_OFF) { // XXX should have option to change the port. Debug.changeDebugPort(8100); if (data.debugMode == IApplicationThread.DEBUG_WAIT) { Slog.w(TAG, "Application " + data.info.getPackageName() + " is...

查了一下,做frida-java-bridge的大佬在某个issue表示,zygote fork时所有的线程都会停止。导致被hook的方法会调用一个状态未初始化的线程。 反正没太看懂,大概就是frida处理java hook时依赖的JS引擎会在zygote fork时停止工作。 如果要hook zygote,可能需要结合C层和Java层,做一些hack。

> 诶 frida虽然比Xpoed用起来方便的多,但是那也只是应用级别的Hook,无法Hook Zygote就不能替换Xposed的地位 嗯,这么说也不错。 但是Xposed也有局限,比如IoT设备就不能用,因为Xposed要刷机。

#4 和这个issue问题一样 需要新版本的frida/frida-server ClassFactory是个新接口

试试看这个版本? [XposedFridaBridge.zip](https://github.com/monkeylord/XposedFridaBridge/files/7207534/XposedFridaBridge.zip)