Created
March 31, 2022 12:52
-
-
Save eyJhb/75c9e3570bdb5ff1e21fead66d0f0604 to your computer and use it in GitHub Desktop.
Android Frida Reverse Engineer Hook for okhttp3 requests/response
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function hook_okhttp3() { | |
Java.perform(function() { | |
var ByteString = Java.use("com.android.okhttp.okio.ByteString"); | |
var Buffer = Java.use('okio.Buffer'); var Interceptor = Java.use("okhttp3.Interceptor"); | |
var MyInterceptor = Java.registerClass({ | |
name: "okhttp3.MyInterceptor", | |
implements: [Interceptor], | |
methods: { | |
intercept: function(chain) { | |
var request = chain.request(); | |
try { | |
console.log("MyInterceptor.intercept onEnter:", request, "\nrequest headers:\n", request.headers()); | |
var requestBody = request.body(); | |
var contentLength = requestBody ? requestBody.contentLength() : 0; | |
if (contentLength > 0) { | |
var BufferObj = buffer.$new(); | |
requestBody.writeTo(BufferObj); | |
try { | |
console.log("\nrequest body String:\n", BufferObj.readString(), "\n"); | |
} catch (error) { | |
try { | |
console.log("\nrequest body ByteString:\n", ByteString.of(BufferObj.readByteArray()).hex(), "\n"); | |
} catch (error) { | |
console.log("error 1:", error); | |
} | |
} | |
} | |
} catch (error) { | |
console.log("error 2:", error); | |
} | |
var response = chain.proceed(request); | |
try { | |
console.log("MyInterceptor.intercept onLeave:", response, "\nresponse headers:\n", response.headers()); | |
var responseBody = response.body(); | |
var contentLength = responseBody ? responseBody.contentLength() : 0; | |
if (contentLength > 0) { | |
console.log("\nresponsecontentLength:", contentLength, "responseBody:", responseBody, "\n"); | |
var ContentType = response.headers().get("Content-Type"); | |
console.log("ContentType:", ContentType); | |
if (ContentType.indexOf("video") == -1) { | |
if (ContentType.indexOf("application") == 0) { | |
var source = responseBody.source(); | |
if (ContentType.indexOf("application/zip") != 0) { | |
try { | |
console.log("\nresponse.body StringClass\n", source.readUtf8(), "\n"); | |
} catch (error) { | |
try { | |
console.log("\nresponse.body ByteString\n", source.readByteString().hex(), "\n"); | |
} catch (error) { | |
console.log("error 4:", error); | |
} | |
} | |
} | |
} | |
} | |
} | |
} catch (error) { | |
console.log("error 3:", error); | |
} | |
return response; | |
} | |
} | |
}); | |
var ArrayList = Java.use("java.util.ArrayList"); | |
var OkHttpClient = Java.use("okhttp3.OkHttpClient"); | |
console.log(OkHttpClient); | |
OkHttpClient.$init.overload('okhttp3.OkHttpClient$Builder').implementation = function(Builder) { | |
console.log("OkHttpClient.$init:", this, Java.cast(Builder.interceptors(), ArrayList)); | |
this.$init(Builder); | |
}; | |
var MyInterceptorObj = MyInterceptor.$new(); | |
var Builder = Java.use("okhttp3.OkHttpClient$Builder"); | |
console.log(Builder); | |
Builder.build.implementation = function() { | |
this.interceptors().clear(); | |
//var MyInterceptorObj = MyInterceptor.$new(); | |
this.interceptors().add(MyInterceptorObj); | |
var result = this.build(); | |
return result; | |
}; | |
Builder.addInterceptor.implementation = function(interceptor) { | |
this.interceptors().clear(); | |
//var MyInterceptorObj = MyInterceptor.$new(); | |
this.interceptors().add(MyInterceptorObj); | |
return this; | |
//return this.addInterceptor(interceptor); | |
}; | |
console.log("hook_okhttp3..."); | |
}); | |
} | |
hook_okhttp3() |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment