当前位置:网站首页>IDA动态调试apk
IDA动态调试apk
2022-07-01 21:43:00 【天问_Herbert555】
动态调试apk需要将AndroidManifest.xml中的android:debuggable属性修改为true,但是当应用做了签名校验或者完整性保护等措施就不能修改apk了。
打算直接修改手机的ro.debuggable为1,参考:https://www.cnblogs.com/xiaoweigege/p/15726711.html,https://blog.csdn.net/CSNN2019/article/details/117959083
此方案重启失效,需要每次重启都要执行下面步骤
下载工具mprop: https://github.com/wpvsyou/mprop
这个工具需要选择对应手机的cpu架构的脚本下载
查看手机CPU架构
adb shell getprop ro.product.cpu.abi
push mprop 到系统data目录下
adb push E:\app渗透\动态调试\mprop-master\arm64-v8a\mprop /data/local/tmp
修改mprop权限
adb shell
su
cd /data/local/tmp/
chmod 755 mprop
执行mprop设置debuggable=1
./mprop ro.debuggable 1 # 修改 ro.debuggable 1 的值为 1
getprop ro.debuggable # 获取ro.debuggable 此处应该是 1
adb kill-server # 重启adb进程
上传ida的android_server,
adb push E:\app渗透\动态调试\mprop-master\arm64-v8a\android_server data/local/tmp/android_server
adb push E:\app渗透\动态调试\mprop-master\arm64-v8a\android_server64 data/local/tmp/android_server64
提权
adb shell
su
cd data/local/tmp
chmod 777 android_server64
chmod 777 android_server
启动
./android_server
转发端口
adb forward tcp:23946 tcp:23946
启动 DDMS,ddms是在sdk中的,一般情况下我们已经将platform-tools和tools目录添加到环境变量
所以只需要在cmd中输入ddms即可
挂起程序
adb shell am start -D -n 包名/类名
adb shell am start -D -n com.ydpt.yzj/com.kdweibo.android.ui.activity.StartActivity
IDA连接
勾选三项
挂载
jdb -connect com.sun.jdi.SocketAttach:hostname=127.0.0.1,port=端口号
边栏推荐
- Flume面试题
- 首席信息官对高绩效IT团队定义的探讨和分析
- 统计字符中每个字符出现的个数
- Design and practice of new generation cloud native database
- 旁路由设置的正确方式
- TOPS,处理器运算能力单位、每秒钟可进行一万亿次
- LIS (longest ascending subsequence) problem that can be understood [easy to understand]
- I received a letter from CTO inviting me to interview machine learning engineer
- Separate the letters and numbers in the string so that the letters come first and the array comes last
- 一次调试去了解redis集群的slot机制
猜你喜欢
手动实现function isInstanceOf(child,Parent)
Aidl basic use
One of the basic learning of function
企业架构与项目管理的关联和区别
js如何获取集合对象中某元素列表
100年仅6款产品获批,疫苗竞争背后的“佐剂”江湖
[live broadcast review] the first 8 live broadcasts of battle code Pioneer have come to a perfect end. Please look forward to the next one!
【MySQL】explain的基本使用以及各列的作用
焱融看 | 混合云时代下,如何制定多云策略
详解JMM
随机推荐
Use of vscode
Medium pen test questions: flip the string, such as ABCD, print out DCBA
月入1W+的自媒体达人都会用到的运营工具
中通笔试题:翻转字符串,例如abcd打印出dcba
K-means based user portrait clustering model
What is the difference between PMP and NPDP?
信标委云原生专题组组长,任重道远!
Airserver mobile phone third-party screen projection computer software
Smart micro mm32 multi-channel adc-dma configuration
Qtreeview+qabstractitemmodel custom model: the third of a series of tutorials [easy to understand]
【juc学习之路第9天】屏障衍生工具
面试题:MySQL的union all和union有什么区别、MySQL有哪几种join方式(阿里面试题)[通俗易懂]
mysql 学习笔记-优化之SQL优化
pytest合集(2)— pytest运行方式
焱融看 | 混合云时代下,如何制定多云策略
业务可视化-让你的流程图'Run'起来
A debugging to understand the slot mechanism of redis cluster
An operation tool used by we media professionals who earn 1w+ a month
linux下清理系统缓存并释放内存
Training on the device with MIT | 256Kb memory