Mars
59970a84a8
新增 MariBank/SeaBank PH Root 与 SHPSSDK bypass、riskToken 净化及 Up/Suncorp/ubank 消息 Hook；整理 reverse/ 脚本与 Frida 工具链，并补充当日工作说明文档。
20 lines
611 B
Python
20 lines
611 B
Python
# -*- coding: utf-8 -*-
|
|
import re
|
|
from pathlib import Path
|
|
|
|
SO = Path(__file__).resolve().parent.parent / "extracted" / "native" / "libshpssdk_bank.so"
|
|
data = SO.read_bytes()
|
|
seen = set()
|
|
for m in re.finditer(rb"[\x20-\x7e]{3,}", data):
|
|
s = m.group().decode("latin1")
|
|
if s in seen or len(s) > 200:
|
|
continue
|
|
low = s.lower()
|
|
if any(k in low for k in [
|
|
"proc", "root", "hook", "xposed", "magisk", "frida", "emulator",
|
|
"risk", "token", "su", "debug", "maps", "version", "selinux",
|
|
"shpssdk", "detect", "jail", "integrity"
|
|
]):
|
|
seen.add(s)
|
|
print(s)
|