feat: MariBank 风控 bypass、澳洲银行 Hook 与 reverse 逆向工作区
新增 MariBank/SeaBank PH Root 与 SHPSSDK bypass、riskToken 净化及 Up/Suncorp/ubank 消息 Hook;整理 reverse/ 脚本与 Frida 工具链,并补充当日工作说明文档。
This commit is contained in:
19
reverse/scripts/strings_shps_so.py
Normal file
19
reverse/scripts/strings_shps_so.py
Normal file
@@ -0,0 +1,19 @@
|
||||
# -*- coding: utf-8 -*-
|
||||
import re
|
||||
from pathlib import Path
|
||||
|
||||
SO = Path(__file__).resolve().parent.parent / "extracted" / "native" / "libshpssdk_bank.so"
|
||||
data = SO.read_bytes()
|
||||
seen = set()
|
||||
for m in re.finditer(rb"[\x20-\x7e]{3,}", data):
|
||||
s = m.group().decode("latin1")
|
||||
if s in seen or len(s) > 200:
|
||||
continue
|
||||
low = s.lower()
|
||||
if any(k in low for k in [
|
||||
"proc", "root", "hook", "xposed", "magisk", "frida", "emulator",
|
||||
"risk", "token", "su", "debug", "maps", "version", "selinux",
|
||||
"shpssdk", "detect", "jail", "integrity"
|
||||
]):
|
||||
seen.add(s)
|
||||
print(s)
|
||||
Reference in New Issue
Block a user