【FUT】检测逆向
关注楼主，日更好玩代码哦[玫瑰]http://cdn.u1.huluxia.com/g3/M03/67/D0/wKgBOV1Z3rmAS9Y-AAEtD51xrBE692.jpg
【代码】cls("de.robv.android.xposed.XposedBridge",klazz)
f(klazz != null) {
tw("存在 Xposed 环境")
java(null,null,"java.lang.System.exit","int",1)
}
cls("de.robv.android.xposed.XposedBridge",klazz)
f(klazz != null) {
tw("存在 Xposed 环境")
java(null,null,"java.lang.System.exit","int",1)
javass(disable,null,klazz,"disableHooks",true)
f(disable) {
tw("禁用 Xposed 成功")
} else {
tw("禁用 Xposed 失败")
}
}
java(thread,null,"java.lang.Thread.currentThread")
java(stackTrace,thread,"java.lang.Thread.getStackTrace")
s hasHook = false
for(st;stackTrace) {
java(sts,st,"java.lang.Object.toString")
f(sts ? "de.robv.android.xposed." || sts ? "me.weishu.epic." || sts ? "me.weishu.exposed.") {
s hasHook = true
break
}
}
f(hasHook) {
tw("存在Hook框架")
java(null,null,"java.lang.System.exit","int",1)
}
fr("/proc/self/maps",maps)
f(maps ? "XposedBridge.jar" || maps ? "libepic.so" || maps ? "libdexposed.so" || maps ? "libsubstrate.so") {
tw("存在Hook框架")
java(null,null,"java.lang.System.exit","int",1)
}
java(isVxp,null,"java.lang.System.getProperty","String","vxp","String","0")
f(isVxp == "1") {
tw("vxp环境")
java(null,null,"java.lang.System.exit","int",1)
}
java(filesDir,activity,"android.content.Context.getFilesDir")
f(filesDir ? "io.va.exposed") {
tw("处于vxp环境")
java(null,null,"java.lang.System.exit","int",1)
}
else
{
end()
// 这里是没有发现逆向软件需要执行的代码
end()
}
.作者:null
页:
[1]