Xposed hook(android）

原创

土匪猿 2018-07-07 08:53:11 博主文章分类：Hook ©著作权

文章标签 hook Xposed hook 文章分类 C/C++ 后端开发

©著作权归作者所有：来自51CTO博客作者土匪猿的原创作品，请联系作者获取转载授权，否则将追究法律责任

先写一个测试程序获取 id

public class MainActivity extends AppCompatActivity {

    @Override
    protected void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.activity_main);
        //控件
        TextView test = findViewById(R.id.test);
        Context context = getApplicationContext();
        //权限
        //<uses-permission android:name="android.permission.READ_PHONE_STATE" />
        if (context.getPackageManager().checkPermission(Manifest.permission.READ_PHONE_STATE,
                context.getPackageName()) == PackageManager.PERMISSION_GRANTED)
        {
            String  Imei = ((TelephonyManager) getSystemService(TELEPHONY_SERVICE)).getDeviceId();
            Log.e("soho",Imei);
            test.setText(Imei);
        }
        else
        {
            Log.e("soho","no permission");
        }


    }
}

开始 hook 新建一个项目在application中增加模块说明

 <meta-data android:name="xposedmodule" android:value="true"></meta-data>
        <meta-data android:name="xposeddescription" android:value="Xposed插件"></meta-data>
        <meta-data android:name="xposedminversion" android:value="54"></meta-data>
/////////////////////////////////////////////////////////////
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
    package="com.example.liuhailong.hook">

    <application
        android:allowBackup="true"
        android:icon="@mipmap/ic_launcher"
        android:label="@string/app_name"
        android:roundIcon="@mipmap/ic_launcher_round"
        android:supportsRtl="true"
        android:theme="@style/AppTheme">
        <activity android:name=".MainActivity">
            <intent-filter>
                <action android:name="android.intent.action.MAIN" />

                <category android:name="android.intent.category.LAUNCHER" />
            </intent-filter>
        </activity>
        <meta-data android:name="xposedmodule" android:value="true"></meta-data>
        <meta-data android:name="xposeddescription" android:value="Xposed插件"></meta-data>
        <meta-data android:name="xposedminversion" android:value="54"></meta-data>
    </application>

</manifest>

导入 xposed jar 先在 app 中新建一个文件夹同时必须名为 lib(在 project 视图) 复制模块进去打开模块依赖再添加修改 scope 为加载下或者运行一下不行重启 as 会出现 3 个目录说明加载成功创建一个类名称必须为Main实现IXposedHookLoadPackage接口实现方法声明主入口类路径在 main文件夹内建立 assets文件夹必须名为assets 在assets文件夹内新建一个 xposed_init的文件名称也要一样在文件中声明入口类名称使用 findAndHookMethod ``` package com.example.liuhailong.hook;

import android.telephony.TelephonyManager;

import de.robv.android.xposed.IXposedHookLoadPackage; import de.robv.android.xposed.XC_MethodReplacement; import de.robv.android.xposed.XposedBridge; import de.robv.android.xposed.XposedHelpers; import de.robv.android.xposed.callbacks.XC_LoadPackage;

public class Main implements IXposedHookLoadPackage { @Override public void handleLoadPackage(XC_LoadPackage.LoadPackageParam loadPackageParam) throws Throwable { //先判断要 hook的包也就是那个 app if(!loadPackageParam.packageName.equals("com.example.liuhailong")){ //打印日志这个打印在 apk上 XposedBridge.log(loadPackageParam.packageName); return; }
//打到对应的方法进行替换 replaceHookedMethod替换方法 //参数1：名称参数2：方法名参数3：实现监听重写方法 XposedHelpers.findAndHookMethod( TelephonyManager.class, "getDeviceId", new XC_MethodReplacement() { @Override protected Object replaceHookedMethod(MethodHookParam argMethodHookParam) throws Throwable { return "我才是序列号！"; } } ); } }

```

安装 hook 框架 de.robv.android.xposed.installer_v32_de4f0d.apk 提示要你安装 hook 点击框架点击安装它就会要你重启重启完后启动 hook

点击模块重启就可以了只要启动 hooktest 就会被 hook（hook不要启动一般是写没有见面的我是为了调试) Main.java 完整代码

package com.bluelesson.xposed24;

import android.telephony.TelephonyManager;

import de.robv.android.xposed.IXposedHookLoadPackage;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;

public class Main implements IXposedHookLoadPackage {
    @Override
    public void handleLoadPackage(XC_LoadPackage.LoadPackageParam argLoadPackageParam) throws Throwable {

        // 判断是不是要Hook的包，不是直接返回
        if(!argLoadPackageParam.packageName.equals("com.bluelesson.testphoneinfo")){
            return;
        }

//        XposedHelpers.findAndHookMethod(
//                TelephonyManager.class,
//                "getDeviceId",
//                new XC_MethodReplacement() {
//                    @Override
//                    protected Object replaceHookedMethod(MethodHookParam argMethodHookParam) throws Throwable {
//                        return "我才是序列号！";
//                    }
//                }
//        );

        XposedHelpers.findAndHookMethod(
                TelephonyManager.class,
                "getDeviceId",
                new XC_MethodHook() {
                    @Override
                    protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                        super.beforeHookedMethod(param);

                        XposedBridge.log("beforeHookedMethod");
                    }

                    @Override
                    protected void afterHookedMethod(MethodHookParam param) throws Throwable {
                        super.afterHookedMethod(param);

                        XposedBridge.log("afterHookedMethod");

                        param.setResult("我是序列号");
                    }
                }
        );


    }
}