these-android-re/android_of_theseus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wip compare class laoder

Browse source
This commit is contained in:
Jean-Marie Mineau 2025-05-05 17:31:23 +02:00
parent 59d6caabd8
commit 1884ff4ac8
Signed by: histausse
GPG key ID: B66AEEDA9B645AD2
7 changed files with 326 additions and 108 deletions
Download patch file Download diff file Expand all files Collapse all files

12
frida/theseus_frida/__init__.py
View file

@ -59,6 +59,8 @@ def on_message(message, data, data_storage: dict, file_storage: Path):
elif message["type"] == "send" and message["payload"]["type"] == "classloader-done":
global CLASSLOADER_DONE
CLASSLOADER_DONE = True
elif message["type"] == "send" and message["payload"]["type"] == "app_info":
handle_app_info(message["payload"]["data"], data_storage)
else:
print("[-] message:", message)
@ -234,6 +236,14 @@ def handle_load_dex(data, data_storage: dict, file_storage: Path):
)
def handle_app_info(data, data_storage: dict):
data["actualSourceDir"] = data["sourceDir"].removesuffix("/base.apk")
data_storage["app_info"] = data
print("[+] Received app info:")
for k in data.keys():
print(f" {k}: {data[k]}")
def setup_frida(device_name: str, env: dict[str, str], adb: str) -> frida.core.Device:
if device_name != "":
device = frida.get_device(device_name)
@ -424,7 +434,7 @@ def collect_runtime(
cls = {}
for cl in data_storage["classloaders"]:
# This is verry doubious
if cl["cname"] == "dalvik.system.PathClassLoader":
if cl["cname"] == "Ldalvik/system/PathClassLoader;":
zip_files = list(
map(
lambda s: s.removeprefix('zip file "').removesuffix('"'),