Frida遍历脚本整理

 1function hook() {
 2    Java.perform(function () {
 3        console.log("start")
 4        Java.enumerateClassLoaders({
 5            onMatch: function (loader) {
 6                try {
 7                    if (loader.findClass("类名")) {
 8                        console.log("Successfully found loader")
 9                        console.log(loader);
10                        Java.classFactory.loader = loader;
11                    }
12                }
13                catch (error) {
14                    console.log("find error:" + error)
15                }
16            },
17            onComplete: function () {
18                console.log("end1")
19            }
20        })
21        Java.use("类名").count.implementation = function (参数) {
22            return this.count(参数);
23
24        }
25    })
26}

 1function traceClass(类名) {
 2    Java.perform(function () {
 3        var hook = Java.use(类名);
 4        var methods = hook.class.getDeclaredMethods();
 5        hook.$dispose;
 6        methods.forEach(function (method) {
 7            console.log(method)
 8        });
 9    })
10}

 1function uniqBy(array, key) {
 2    var seen = {};
 3    return array.filter(function (item) {
 4        var k = key(item);
 5        return seen.hasOwnProperty(k) ? false : (seen[k] = true);
 6    });
 7}
 8
 9function traceMethod(targetClassMethod) {
10    var delim = targetClassMethod.lastIndexOf(".");
11    if (delim === -1) return;
12    var targetClass = targetClassMethod.slice(0, delim)
13    var targetMethod = targetClassMethod.slice(delim + 1, targetClassMethod.length)
14    Java.perform(function () {
15        var hook = Java.use(targetClass);
16        var overloadCount = hook[targetMethod].overloads.length;
17
18        console.log("Tracing " + targetClassMethod + " [" + overloadCount + " overload(s)]");
19
20        for (var i = 0; i < overloadCount; i++) {
21
22            hook[targetMethod].overloads[i].implementation = function () {
23                console.warn("n*** entered " + targetClassMethod);
24
25                for (var j = 0; j < arguments.length; j++) {
26                    console.log("arg[" + j + "]: " + arguments[j]);
27                }
28
29                var bt = Java.use("android.util.Log").getStackTraceString(Java.use("java.lang.Exception").$new());
30                console.log("nBacktrace:n" + bt);
31
32                var retval = this[targetMethod].apply(this, arguments);
33                console.log("nretval: " + retval);
34                console.warn("n*** exiting " + targetClassMethod);
35                return retval;
36            }
37        }
38    });
39
40}
41
42function traceClass(targetClass) {
43    Java.perform(function () {
44        var hook = Java.use(targetClass);
45        var methods = hook.class.getDeclaredMethods();
46        hook.$dispose;
47        var parsedMethods = [];
48        methods.forEach(function (method) {
49            parsedMethods.push(method.toString().replace(targetClass + ".", "TOKEN").match(/sTOKEN(.*)(/)[1]);
50        });
51        var targets = uniqBy(parsedMethods, JSON.stringify);
52        targets.forEach(function (targetMethod) {
53            traceMethod(targetClass + "." + targetMethod);
54        });
55    })
56}