某安卓逆向

某app逆向

1.绕过root检测
因为Fride需要root,但是app拒绝root，ai编写bypass.js脚本，绕过root检测
Java.perform(function() {
console.log("[+] 超级绕过脚本加载...");

// 1. 屏蔽 Root 文件检测（优化敏感路径）
var File = Java.use("java.io.File");
File.exists.implementation = function() {
var path = this.getAbsolutePath();
var sensitive = ["/system/bin/su", "/system/xbin/su", "/sbin/su", "/magisk", "/su/bin/su"];
if (sensitive.some(function(p) { return path.indexOf(p) !== -1; })) {
console.log("[Block] File.exists: " + path);
return false;
}
return this.exists();
};

// 2. 屏蔽执行命令检测
var Runtime = Java.use("java.lang.Runtime");
Runtime.exec.overload("java.lang.String").implementation = function(cmd) {
if (cmd.indexOf("su") !== -1 || cmd.indexOf("which") !== -1) {
console.log("[Block] Runtime.exec: " + cmd);
return null;
}
return this.exec(cmd);
};

// 3. 篡改 Build 属性
var Build = Java.use("android.os.Build");
Build.TAGS.value = "release-keys";
Build.FINGERPRINT.value = "google/angler/angler:7.1.1/NPF26F/3668978:user/release-keys";
Build.MANUFACTURER.value = "Google";
Build.MODEL.value = "Pixel XL";
Build.PRODUCT.value = "angler";
console.log("[+] Build 属性篡改完成");

// 4. 拦截 System.getProperty
var System = Java.use("java.lang.System");
System.getProperty.overload("java.lang.String").implementation = function(key) {
if (key === "ro.debuggable") return "0";
if (key === "ro.secure") return "1";
if (key === "ro.build.type") return "user";
return this.getProperty(key);
};

// ===== 新增：屏蔽弹窗 =====
// 拦截 AlertDialog.Builder 的 show() 方法
var AlertDialogBuilder = Java.use("android.app.AlertDialog$Builder");
AlertDialogBuilder.show.implementation = function() {
console.log("[Block] AlertDialog.show() 被拦截，弹窗已屏蔽");
return null; // 不显示弹窗
};

// 拦截 Dialog 的 show() 方法
var Dialog = Java.use("android.app.Dialog");
Dialog.show.implementation = function() {
console.log("[Block] Dialog.show() 被拦截");
return null;
};

// 拦截 Toast 显示（防止 Toast 提示）
var Toast = Java.use("android.widget.Toast");
Toast.show.implementation = function() {
console.log("[Block] Toast.show() 被拦截");
return null;
};

console.log("[+] 弹窗/Toast 拦截已启用");
});

frida -U "PhonePe Business" -l bypass.js

要记录以下，手机连接电脑ip作为代理的时候，手机无法上网，是因为wifi是公用的寝室网，所以防火墙拦截了。