更新 hookssl.js

main.py

@@ -30,7 +30,7 @@ def main(package_name,script_path,is_spawn):
     js_code = modules.files_utils.read_javascript(script_path)
     # print(js_code)
     modules.command.start_frida()
-    modules.command.clearCache(package_name)
+    # modules.command.clearCache(package_name)
     # 连接到USB设备
     device = frida.get_usb_device()
     print(device)
@@ -39,10 +39,10 @@ def main(package_name,script_path,is_spawn):
         print(f"进程pid: {pid}")
         process = device.attach(pid)
         script = process.create_script(js_code)
-        script.on("message", on_message)
+        # script.on("message", on_message)
         script.load()
-        data_to_send = {'data': 'Hello from Python!'}
-        script.post({'type': 'input_data', 'payload': data_to_send})
+        # data_to_send = {'data': 'Hello from Python!'}
+        # script.post({'type': 'input_data', 'payload': data_to_send})
         device.resume(pid)  # 加载完脚本后, 恢复进程运行
         sys.stdin.read()
     else:
@@ -67,11 +67,10 @@ if __name__ == '__main__':
     # 是否以spawn模式运行
     is_spawn = True
     # 目标进程名
-    attach_process_name = "Navi"
+    attach_process_name = "百度网盘"
     # 目标包名
-    package_name = "com.msf.angelmobile"
+    package_name = "com.baidu.netdisk"
     # 注入的脚本路径
-    script_path = "./hook_conversions.js"
-    # script_path = "./r0capture/script.js"
-    # script_path = "url_request.js"
+    # script_path = "scripts/hook_conversions.js"
+    script_path = "scripts/baidunetdisk.js"
     main(package_name,script_path, is_spawn)

scripts/baidunetdisk.js

@@ -0,0 +1,21 @@
+console.log("Script loaded successfully");
+
+Java.perform(function () {
+    var Request = Java.use("okhttp3.Request");
+
+    // Hook Request的toString方法
+    Request.toString.implementation = function () {
+        // 调用原始的toString方法并保存结果
+        var result = this.toString();
+
+        // 打印结果
+        console.log("Request.toString result: " + result);
+
+        // 返回原始方法调用的结果
+        return result;
+    };
+});
+
+
+
+

scripts/hook_qqmusic.js

@@ -0,0 +1,40 @@
+log_info("Script loaded successfully");
+if (Java.available) {
+    hook_json()
+    Java.perform(function () {
+        log_info("start hook java.net.URL");
+        var URL = Java.use('java.net.URL');
+        URL.$init.overload('java.lang.String').implementation = function (spec) {
+            log_info("URL request: " + spec)
+            return this.$init(spec);
+        };
+    });
+}
+
+function log_info(messages) {
+    const now = new Date();
+    const year = now.getFullYear();
+    const month = String(now.getMonth() + 1).padStart(2, '0'); // Months are 0-based
+    const day = String(now.getDate()).padStart(2, '0');
+    const hours = String(now.getHours()).padStart(2, '0');
+    const minutes = String(now.getMinutes()).padStart(2, '0');
+    const seconds = String(now.getSeconds()).padStart(2, '0');
+    const milliseconds = String(now.getMilliseconds()).padStart(3, '0');
+
+    const timestamp = `${year}-${month}-${day} ${hours}:${minutes}:${seconds}:${milliseconds}`;
+
+    console.log(`${timestamp} - ${messages}`);
+    send(`${timestamp} - ${messages}`);
+}
+
+function hook_json() {
+    Java.perform(function () {
+        var JSONObject = Java.use('org.json.JSONObject');
+        JSONObject.toString.overload().implementation = function () {
+            var result = this.toString.call(this);
+            // get_conversions(result)
+            log_info("Serialized JSONObject: " + result)
+            return result;
+        };
+    });
+}

scripts/hookssl.js

@@ -1,3 +1,4 @@
+console.log("Script loaded successfully");
 Java.perform(function() {
 
 /*
@@ -67,11 +68,6 @@ hook list:
 	} catch (e) {
 		quiet_send("registerClass from X509TrustManager >>>>>>>> " + e.message);
 	}
-
-
-
-
-
 	// Prepare the TrustManagers array to pass to SSLContext.init()
 	var TrustManagers = [TrustManager.$new()];
 

scripts/monitor_request.js

@@ -0,0 +1,32 @@
+log_info("Script loaded successfully");
+Java.perform(function () {
+  var OkHttpClient = Java.use('okhttp3.OkHttpClient');
+  var Request = Java.use('okhttp3.Request');
+
+  OkHttpClient.newCall.implementation = function (request) {
+    var url = request.url().toString();
+    var method = request.method();
+    var body = request.body();
+    var size = body != null ? body.contentLength() / 1024 : 0;
+    console.log("Method: " + method + "\nURL: " + url + "\nSize: " + size + " kb");
+
+    return this.newCall(request);
+  };
+});
+
+
+function log_info(messages) {
+    const now = new Date();
+    const year = now.getFullYear();
+    const month = String(now.getMonth() + 1).padStart(2, '0'); // Months are 0-based
+    const day = String(now.getDate()).padStart(2, '0');
+    const hours = String(now.getHours()).padStart(2, '0');
+    const minutes = String(now.getMinutes()).padStart(2, '0');
+    const seconds = String(now.getSeconds()).padStart(2, '0');
+    const milliseconds = String(now.getMilliseconds()).padStart(3, '0');
+
+    const timestamp = `${year}-${month}-${day} ${hours}:${minutes}:${seconds}:${milliseconds}`;
+
+    console.log(`${timestamp} - ${messages}`);
+    send(`${timestamp} - ${messages}`);
+}

test.py

@@ -1,7 +1,7 @@
 import frida,sys
 import modules.files_utils
 
-js_code = modules.files_utils.read_javascript("./hook_conversions.js")
+js_code = modules.files_utils.read_javascript("scripts/hook_conversions.js")
 device = frida.get_usb_device()
 pid = device.spawn(["com.naviapp"])    # 以挂起方式创建进程
 process = device.attach(pid)