Ida dynamic debugging apk

Dynamic debugging apk Need to put AndroidManifest.xml Medium android:debuggable Property changed to true, However, when the application takes measures such as signature verification or integrity protection, it cannot be modified apk 了 .

Intended to modify the mobile phone directly ro.debuggable by 1, Reference resources ：https://www.cnblogs.com/xiaoweigege/p/15726711.html,https://blog.csdn.net/CSNN2019/article/details/117959083

This scheme fails to restart , You need to perform the following steps every time you restart

Download tool mprop: https://github.com/wpvsyou/mprop

This tool needs to select the corresponding mobile phone cpu Script download of Architecture

Check your phone CPU framework

adb shell getprop ro.product.cpu.abi

push mprop To the system data Under the table of contents

adb push E:\app penetration \ Dynamic debugging \mprop-master\arm64-v8a\mprop /data/local/tmp

modify mprop jurisdiction

adb shell
su
cd /data/local/tmp/
chmod 755 mprop

perform mprop Set up debuggable=1

./mprop ro.debuggable 1 #  modify  ro.debuggable 1  The value of is  1
getprop ro.debuggable #  obtain ro.debuggable  This should be  1
adb kill-server #  restart adb process 

Upload ida Of android_server,

adb push E:\app penetration \ Dynamic debugging \mprop-master\arm64-v8a\android_server data/local/tmp/android_server
adb push E:\app penetration \ Dynamic debugging \mprop-master\arm64-v8a\android_server64 data/local/tmp/android_server64

Raise the right

adb shell 
su
cd data/local/tmp
chmod 777 android_server64 
chmod 777 android_server

start-up

./android_server

Forward port

adb forward tcp:23946 tcp:23946

start-up DDMS,ddms Is in sdk Medium , In general, we have platform-tools and tools Directory added to environment variable
So all you need to do is cmd Input in ddms that will do

Suspend program

adb shell am start -D -n Package name / Class name

adb shell am start -D -n com.ydpt.yzj/com.kdweibo.android.ui.activity.StartActivity

IDA Connect

Check three items

mount

jdb -connect com.sun.jdi.SocketAttach:hostname=127.0.0.1,port= Port number