Skip to content

Instantly share code, notes, and snippets.

@username13107
username13107 / 反编译android
Created September 4, 2014 13:12
反编译android
静默安装
manifest file add this android:sharedUserId="android.uid.system"
jar signapk.jar platform.x509.pem platform.pk8 abc.apk abc_signed.apk
Runtime.getRuntime().exec("pm install abc_signed.apk");
反编译后重新打包
apktool b -f test test.apk
sign-sys test.apk -> test_signed.apk
smali tips
@username13107
username13107 / bsign
Created September 14, 2014 13:45
build,sign,install apk
function bsign()
{
apktool b $1 $1.apk
if [ ! $? -eq 0 ];then
return
fi
jarsigner -digestalg SHA1 -sigalg MD5withRSA -keystore /Users/j0y/Desktop/cert.keystore -storepass 12345678 -keypass 12345678 -signedjar $1.signed.apk $1.apk cert.keystore
if [ ! $? -eq 0 ];then
return
fi
droid-ff:
https://github.com/antojoseph/droid-ff
https://conference.hitb.org/hitbsecconf2016ams/materials/D1T3%20LABS%20-%20Anto%20Joseph%20-%20Droid-FF.pdf
https://www.blackhat.com/docs/eu-15/materials/eu-15-Blanda-Fuzzing-Android-A-Recipe-For-Uncovering-Vulnerabilities-Inside-System-Components-In-Android-wp.pdf
perf_fuzzer
http://conference.hitb.org/hitbsecconf2016ams/wp-content/uploads/2015/11/D2T2-Wish-Wu-Perf-From-Profiling-to-Kernel-Exploiting.pdf
https://www.youtube.com/watch?v=37v14rMtALs
#http://bbs.pediy.com/showthread.php?t=214999
__author__ = 'QEver'
DUMP_FILE_PREFIX = r'd:/'
USER_DEX_FILES_OFFSET = 0x330
LOADED_CLASSES_OFFSET = 0xAC
JAR_NAME_OFFSET = 0x24
SIZE_OF_DEY_HEADER = 0x28
DESC_OFFSET_OF_CLASS_OBJECT = 0x18
METHOD_OFFSET_OF_CLASS_OBJECT = 0x60
angler/mda89d/uname.txt:Linux 3.10.73-g9b6596d
angler/mdb08k/uname.txt:Linux 3.10.73-gcf36678
angler/mdb08l/uname.txt:Linux 3.10.73-gcf36678
angler/mdb08m/uname.txt:Linux 3.10.73-gcf36678
angler/mhc19i/uname.txt:Linux 3.10.73-g3b5cc28
angler/mhc19q/uname.txt:Linux 3.10.73-g8c0675f
angler/mmb29m/uname.txt:Linux 3.10.73-g9741316
angler/mmb29n/uname.txt:Linux 3.10.73-g9741316
angler/mmb29p/uname.txt:Linux 3.10.73-g9741316
angler/mmb29q/uname.txt:Linux 3.10.73-gda330d0
@username13107
username13107 / curlicue
Created April 1, 2017 07:09 — forked from zhasm/curlicue
1,准备:将curlicue, curlicue-setup 保存到可识别的 bin 路径下,+x;将 msg 函数放到 ~/.bashrc 里,souce 一下; 2,初始化:执行 curlicue-setup ,按照提示操作; 3,发消息:msg NAME MESSAGE
#!/bin/sh
# Curlicue - an OAuth wrapper for curl
#
# Copyright © 2010 Decklin Foster <[email protected]>
# Please see README for usage information and LICENSE for license.
# Because HTTP responses from the OAuth "dance" will be percent-encoded,
# and we want to round-trip this data, we require that credentials files
# are also percent-encoded. Therefore, no decoding is done here. $1 is