https://github.com/bunnyblue/PMSProtect
对于Hook IBinder其实检测也不难,如果proxy过的话一般就是被注入了,
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
//看不明白你的代码
PMSProtector { (Context context) { Class<?> activityThreadClass = { activityThreadClass = Class.(); Method currentActivityThreadMethod = activityThreadClass.getDeclaredMethod(); Object currentActivityThread = currentActivityThreadMethod.invoke(); Field sPackageManagerField = activityThreadClass.getDeclaredField(); sPackageManagerField.setAccessible(); Object sPackageManager = sPackageManagerField.get(currentActivityThread); (sPackageManager Proxy) { //这个是什么情况 System..println(); } PackageManager pm = context.getPackageManager()(pm.getClass().getClassLoader().getClass().getName().equals()) { } } (ClassNotFoundException e) { e.printStackTrace()} (NoSuchMethodException e) { e.printStackTrace()} (IllegalAccessException e) { e.printStackTrace()} (InvocationTargetException e) { e.printStackTrace()} (NoSuchFieldException e) { e.printStackTrace()} } }
无边 //看不明白你的代码PMSProtector { (Context&n ...
已经更新,原理很简单,ibinder被hook了会会变样的,虽然逻辑好像没变,仔细分析已经变了。