<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Druke的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Druke</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Druke]]></copyright><item><title><![CDATA[Linux Shell 分割字符串]]></title><link>https://blog.youkuaiyun.com/Druke/article/details/112550222</link><guid>https://blog.youkuaiyun.com/Druke/article/details/112550222</guid><author>Druke</author><pubDate>Tue, 12 Jan 2021 23:41:18 +0800</pubDate><description><![CDATA[Linux分割字符串

获取空格分隔的变量(以pid为例)
set `ps|grep bash`;ehco $1

任意字符分隔(以_为例)
text="aa_bb_cc"
echo ${text%_*}  #aa_bb
echo ${text%%_*} #aa
echo ${text#*_}  #bb_cc
echo ${text##*_} #cc


]]></description><category></category></item><item><title><![CDATA[ISC2016训练赛——phrackCTF CrazyAndroid Writeup]]></title><link>https://blog.youkuaiyun.com/Druke/article/details/80562202</link><guid>https://blog.youkuaiyun.com/Druke/article/details/80562202</guid><author>Druke</author><pubDate>Mon, 04 Jun 2018 01:17:37 +0800</pubDate><description><![CDATA[0x00  脱壳

jadx直接分析apk，发现是360的老壳。


 
脱壳工具推荐(drizzledump)[https://github.com/DrizzleRisk/drizzleDumper],(教程)[http://www.freebuf.com/sectool/105147.html]

脱壳后获得dex 
 
看到这里其实都是老套路了，解密的逻辑都写在native层，不会写在ja...]]></description><category></category></item><item><title><![CDATA[逆向修改MIUI（X64）内核，反制TracerPID反调试踩坑指南]]></title><link>https://blog.youkuaiyun.com/Druke/article/details/80502571</link><guid>https://blog.youkuaiyun.com/Druke/article/details/80502571</guid><author>Druke</author><pubDate>Tue, 29 May 2018 21:38:09 +0800</pubDate><description><![CDATA[0x00、前言

​   刷CTF时经常能遇到TracerPID反调试，手动nop掉当然是一种好方法，但是每次都得重新打包难免会觉得烦躁。正好在逛吾爱时发现一篇patch内核绕过反调试的文章，果断尝试一番，于是有了这篇X64版本的patch内核踩坑指南。

​   本次踩坑环境Redmi Note2 ，MIUI 9 8.4.19 |开发版 ，Android 5.0.2 。

0x01、boot.i...]]></description><category></category></item></channel></rss>