Mars
59970a84a8
新增 MariBank/SeaBank PH Root 与 SHPSSDK bypass、riskToken 净化及 Up/Suncorp/ubank 消息 Hook；整理 reverse/ 脚本与 Frida 工具链，并补充当日工作说明文档。
27 lines
1.3 KiB
PowerShell
27 lines
1.3 KiB
PowerShell
# 启动 MariBank Frida attach trace + logcat
|
|
$ErrorActionPreference = "Stop"
|
|
$Root = Split-Path -Parent (Split-Path -Parent $PSScriptRoot)
|
|
$FridaDir = Join-Path $Root "reverse\frida"
|
|
$Adb = "C:\Users\Administrator\AppData\Local\Android\Sdk\platform-tools\adb.exe"
|
|
$Py = "C:\Users\Administrator\AppData\Local\Programs\Python\Python312\python.exe"
|
|
|
|
Write-Host "1. 请先在手机上打开 MariBank (Sign up 页面)" -ForegroundColor Yellow
|
|
Write-Host "2. 建议暂时关闭 LSPosed 对 MariBank 作用域" -ForegroundColor Yellow
|
|
Read-Host "准备好后按 Enter 继续"
|
|
|
|
& $Adb shell "su -c 'pgrep frida-server || /data/local/tmp/frida-server -D &'" 2>$null | Out-Null
|
|
Start-Sleep 1
|
|
|
|
$logcatOut = Join-Path $Root "reverse\logs\frida\logcat_capture.txt"
|
|
New-Item -ItemType Directory -Force -Path (Split-Path $logcatOut) | Out-Null
|
|
Start-Process -FilePath $Adb -ArgumentList @(
|
|
"logcat","-c"
|
|
) -Wait -NoNewWindow
|
|
Start-Process -FilePath $Adb -ArgumentList @(
|
|
"logcat","-s","notiMessageHook/MariBankRoot:V","MB-TRACE:V","CharacterCryptoManager:V","NativeEncrypt:V"
|
|
) -RedirectStandardOutput $logcatOut -WindowStyle Hidden
|
|
|
|
Write-Host "logcat -> $logcatOut" -ForegroundColor Cyan
|
|
Write-Host "Frida attach 启动中..." -ForegroundColor Cyan
|
|
& $Py (Join-Path $FridaDir "run_frida_trace.py") attach
|