korniltsev

apk=app.apk count=0 ; for dex in $(unzip -Z1 $apk classes*.dex); do count=$(($count + $(unzip -p $apk $dex | head -c 92 | tail -c 4 | hexdump -e '1/4 "%d\n"'))) ; done ; echo $count

korniltsev

task prepareCrashlyticsNdkDirs(type: PrepareCrashlyticsNdkDirs) {
    libs = ["imgp","jpeg-turbo1500","lum","native_tools","usb100","uvc","UVCCamera"]
    archs = ["x86", "armeabi-v7a"]
    flavorPath = ["prod", "obfuscate"]
    libsDir = new File(projectDir, 'libs')
    objDir = new File(projectDir, 'obj')
}

class PrepareCrashlyticsNdkDirs extends DefaultTask {
    @Input List<String> libs

korniltsev

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 6eb87b0..3dee761 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -45,6 +45,8 @@
             </intent-filter>
         </activity>

+        <activity android:name="ru.ok.android.sdk.OkAuthActivity"/>
+

korniltsev

.class final Lcom/whatsapp/App$1;
.super Ljava/lang/Object;
.source ""

# interfaces
.implements Ljava/lang/Thread$UncaughtExceptionHandler;


# annotations
.annotation system Ldalvik/annotation/EnclosingClass;

korniltsev

import requests
import json
import urllib
import gzip
import cStringIO

urllib.quote_plus = urllib.quote


class Request:

korniltsev

Setting up Qemu with a tap interface

There are two parts to networking within QEMU:

• The virtual network device that is provided to the guest (e.g. a PCI network card).
• The network backend that interacts with the emulated NIC (e.g. puts packets onto the host's network).

Example: User mode network

korniltsev

#!/usr/bin/python2

"""
    Use scapy to modify packets going through your machine.
    Based on nfqueue to block packets in the kernel and pass them to scapy for validation
"""

import nfqueue
from scapy.all import *
import os

korniltsev

from elftools.elf.constants import P_FLAGS
from elftools.elf.elffile import ELFFile
from unicorn import Uc, UC_ARCH_ARM, UC_MODE_LITTLE_ENDIAN, UC_HOOK_CODE, UC_PROT_READ, UC_PROT_WRITE, UC_PROT_EXEC
from unicorn.arm_const import *
from capstone import Cs, CS_ARCH_ARM, CS_MODE_THUMB, CsInsn
from keystone import Ks, KS_MODE_THUMB, KS_ARCH_ARM

# 找到.text节

filename = "./libcms.so"

korniltsev

#!/bin/bash

for id in $(idevice_id -l); do
	ideviceinfo_data=$(ideviceinfo -u $id)

	product_type=$(echo "$ideviceinfo_data" | grep ProductType | sed 's/ProductType: //g')

	# strip 'iPhone' or 'iPad' and the comma from the product type 
	short_product_type=$(echo "$product_type" | sed 's/iPhone//g; s/iPad//g; s/,//g' )

korniltsev

Usage

In IDAPython,

execfile('<path>/cxxparser.py')
parse_file('<path>/a.cpp',[r'-I<path>\LuaJIT-2.0.5\src', '-D__NT__', '-D__X64__', '-D__EA64__'])
parse_file('<path>/malloc.c',['-target=x86_64-linux-gnu'])