Mars
59970a84a8
新增 MariBank/SeaBank PH Root 与 SHPSSDK bypass、riskToken 净化及 Up/Suncorp/ubank 消息 Hook；整理 reverse/ 脚本与 Frida 工具链，并补充当日工作说明文档。
17 lines
543 B
Python
17 lines
543 B
Python
# -*- coding: utf-8 -*-
|
|
import re
|
|
|
|
data = open(r"C:\Users\Administrator\Desktop\notiMessage\reverse\extracted\classes6.dex", "rb").read()
|
|
# method names in dex are plain utf8 strings
|
|
methods = set(re.findall(rb"[a-zA-Z][a-zA-Z0-9_]{2,60}", data))
|
|
interesting = sorted(
|
|
m.decode("ascii", "ignore")
|
|
for m in methods
|
|
if any(k in m.lower() for k in (
|
|
b"root", b"jail", b"safe", b"xposed", b"frida", b"emulator",
|
|
b"integrity", b"detect", b"hook", b"debug", b"tamper", b"risk"
|
|
))
|
|
)
|
|
for m in interesting:
|
|
print(m)
|