go into enumerateClassLoaders!
startdealwithclassloader: dalvik.system.PathClassLoader[DexPathList[[directory "."],nativeLibraryDirectories=[/system/lib64, /system/product/lib64, /system/lib64, /system/product/lib64]]]
pathlistobj->DexPathList[[directory "."],nativeLibraryDirectories=[/system/lib64, /system/product/lib64, /system/lib64, /system/product/lib64]]
dexElementsobj->directory "."
elementobj->directory "."
TypeError: cannot read property '$h' of null
this is a BootClassLoader!
startdealwithclassloader: dalvik.system.PathClassLoader[DexPathList[[zip file "/system/framework/tcmclient.jar"],nativeLibraryDirectories=[/system/lib64, /system/product/lib64]]]
pathlistobj->DexPathList[[zip file "/system/framework/tcmclient.jar"],nativeLibraryDirectories=[/system/lib64, /system/product/lib64]]
dexElementsobj->zip file "/system/framework/tcmclient.jar"
elementobj->zip file "/system/framework/tcmclient.jar"
start loadclass->com.qti.tcmclient.DpmTcmClient$TcmReceiver
after loadclass->com.qti.tcmclient.DpmTcmClient$TcmReceiver
Error: missing argument
startdealwithclassloader: dalvik.system.PathClassLoader[DexPathList[[zip file "/system/framework/tcmiface.jar"],nativeLibraryDirectories=[/system/lib64, /system/product/lib64]]]
pathlistobj->DexPathList[[zip file "/system/framework/tcmiface.jar"],nativeLibraryDirectories=[/system/lib64, /system/product/lib64]]
dexElementsobj->zip file "/system/framework/tcmiface.jar"
elementobj->zip file "/system/framework/tcmiface.jar"
start loadclass->com.quicinc.tcmiface.DpmTcmIface
after loadclass->com.quicinc.tcmiface.DpmTcmIface
Error: missing argument
startdealwithclassloader: dalvik.system.PathClassLoader[DexPathList[[zip file "/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk", dex file "InMemoryDexFile[cookie=[0, 511245215488]]"],nativeLibraryDirectories=[/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/lib/arm64, /data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk!/lib/arm64-v8a, /system/lib64, /system/product/lib64]]]
pathlistobj->DexPathList[[zip file "/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk", dex file "InMemoryDexFile[cookie=[0, 511245215488]]"],nativeLibraryDirectories=[/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/lib/arm64, /data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk!/lib/arm64-v8a, /system/lib64, /system/product/lib64]]
dexElementsobj->zip file "/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk",dex file "InMemoryDexFile[cookie=[0, 511245215488]]"
elementobj->zip file "/data/app/com.xiaoji.gamesirnsemulator-uM0dkbNR7L1TolMXdvAAJA==/base.apk"
start loadclass->s.h.e.l.l.A
after loadclass->s.h.e.l.l.A
Error: missing argument
find Classloader instance over
Android逆向 Frida自动脱壳Fart
©著作权归作者所有,转载或内容合作请联系作者
平台声明:文章内容(如有图片或视频亦包括在内)由作者上传并发布,文章内容仅代表作者本人观点,简书系信息发布平台,仅提供信息存储服务。
平台声明:文章内容(如有图片或视频亦包括在内)由作者上传并发布,文章内容仅代表作者本人观点,简书系信息发布平台,仅提供信息存储服务。
推荐阅读更多精彩内容
- 使用frida-ios-dump工具,一键脱壳 一、加壳 我们知道App上传到AppStore后,会被自动加壳,那...
- 这篇文章最后以分析UnCrackable-Level1.apk介绍frida脚本的使用,如果大佬们对前面介绍的ad...
- 说到逆向APP,很多人首先想到的都是反编译,但是单看反编译出来的代码很难得知某个函数在被调用时所传入的参数和它返回...
- 多种特征检测 Frida. 转载自 https://bbs.pediy.com/thread-217482.htm...