Android Xposed使用教程

随风无声

已于 2024-06-21 17:22:52 修改

阅读量2k

点赞数 9

CC 4.0 BY-SA版权

文章标签： android

于 2024-06-15 15:10:16 首次发布

本文链接：https://blog.csdn.net/mds0517/article/details/139701543

1.Xposed的jar提取

百度网盘下载链接：https://pan.baidu.com/s/1SoypVvyoLKTr3EOK8FT3BQ
提取码：0jhl

下载完成之后在将jar文件放在libs目录下

添加入依赖库

2.在src/main/assets/目录下创建xposed_init文件

这里填写的是继承IXposedHookLoadPackage的类，不添加进去的话，该类不会生效，添加进去之后当app启动,这些类会自动生效

com.example.lsposedtest.Model
com.example.lsposedtest.HookManager
com.example.lsposedtest.XposedUtil

3.AndroidManifest.xml配置

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android">

    <uses-permission android:name="android.permission.INTERNET"/>
    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
    <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" />
    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
    <uses-permission android:name="android.permission.GET_ACCOUNTS" android:maxSdkVersion="22" />
    <application
        android:allowBackup="true"
        android:icon="@mipmap/ic_launcher"
        android:label="@string/app_name"
        android:roundIcon="@mipmap/ic_launcher_round"
        android:supportsRtl="true"
        android:theme="@style/Theme.Test">
        <activity
            android:name=".MainActivity"
            android:exported="true">
            <intent-filter>
                <action android:name="android.intent.action.MAIN" />
                <category android:name="android.intent.category.LAUNCHER" />
            </intent-filter>
        </activity>

        <!--Xposed配置-->
        <meta-data
            android:name="xposedmodule"
            android:value="true" />
        <meta-data
            android:name="xposeddescription"
            android:value="my name is xiaojianbang" />
        <meta-data
            android:name="xposedminversion"
            android:value="53" />
    </application>



</manifest>

4.创建类继承Xposed实现hook方法，继承后需要实现handleLoadPackage，这个是必须的

public class XposedUtil implements IXposedHookLoadPackage {
    public static String TAG = "Xposed";
    public static ClassLoader classLoader;
    public static String packageName;

    @Override
    public void handleLoadPackage(XC_LoadPackage.LoadPackageParam loadPackageParam) throws Throwable {
        classLoader = loadPackageParam.classLoader;//类加载器
        packageName = loadPackageParam.packageName;//应用名
        try {
            //在这里对应用名进行筛选
            switch (packageName) {
                //贪吃蛇
                case "io.supercent.linkedcubic":
                    doSupercent();
                    break;
                //谷歌商店
                case "com.android.vending":
                    doVending();
                    break;
                default:
                    break;
            }
            //打印包名，如果没看到包名说明Xposed代码没生效，配置有问题，可能是面具没装，Lposed没生效等
            Log.e(TAG, packageName);
        } catch (Exception e) {
            e.printStackTrace();
        }

    }
}

hook 普通方法

  public static void StringBuilder_toString(String re) {
        /**
         java.lang.StringBuilder是类名，"toString"是方法名，如果还有参数的话还需要再方法名后加参数
         
         比如 StringBuilder.toString(String,int)方法要怎么写
         XposedHelpers.findAndHookMethod("java.lang.StringBuilder", classLoader, "toString",String.class,int.calss, new XC_MethodHook() {
         
         参数可以说String.class这种格式，也可以是"java.long.String"这种类名路径，都是可以的
         但是对于app内部的自己的类，还是传类名路径好一点
         */
      
        XposedHelpers.findAndHookMethod("java.lang.StringBuilder", classLoader, "toString", new XC_MethodHook() {
            //这个是方法内部调用之前执行
            @Override
            protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                super.beforeHookedMethod(param);
            }
            //这个是方法内部调用之后执行
            @Override
            protected void afterHookedMethod(MethodHookParam param) throws Throwable {
                //获取方法的返回值
                String result = (String) param.getResult();
                //针对某些特定的参数进行打印
                if (result.contains(re) && result.length() < 80) {
                    Log.e(TAG, "appsflyer_kef:" + result);
                }
            }
        });
    }

hook 构造方法

 public static void HookConstructer(){
        try {
            Class<?> aClass = classLoader.loadClass("java.lang.StringBuilder");
            XposedBridge.hookAllConstructors(aClass, new XC_MethodHook() {
                @Override
                protected void afterHookedMethod(MethodHookParam param) throws Throwable {