逆向某m-安卓APP记录

一。获取APK
1.由于手机中已经装了该应用,adb pull 到PC上
2.apktool d 发现报错,去网上下载更高版本的apktool_2.2.0.jar
java -jar apktool_2.2.0.jar d
apktool d结果
成功生成smali文件夹
3.试下直接编译
java -jar apktool_2.2.0.jar b
apktool b结果
报了N多错误,我4 * 500大小的缓冲区都放不下,
图中可看到res文件做了混淆
打开xml\y.xml,发现xmlns:android的值为http://schemas.android.com/apk/res-auto
我自己写的xml文件的xmlns:android为http://schemas.android.com/apk/res/android
修改一下,发现不报y.xml的错了,其他文件还是继续报错,看来要研究下xmlns:android
刚才的方法治标不治本,上网找了一下res-auto一般用在自定义控件的xml,在res/values/attrs.xml 添加
<declare-styleable name="Android">
<attr name="title" format="string"/>
</declare-styleable>

发现title的错不报了
<declare-styleable name="Android">
<attr name="btn_visibility" format="string"/>
<attr name="can_delete" format="boolean"/>
<attr name="defaultValue" format="boolean"/>
<attr name="dependency" format="string"/>
<attr name="empty_wording" format="string"/>
<attr name="key" format="string"/>
<attr name="icon" format="reference"/>
<attr name="layout" format="reference"/>
<attr name="persistent" format="boolean"/>
<attr name="summary" format="string"/>
<attr name="title" format="string"/>
<attr name="widgetLayout" format="reference"/>
</declare-styleable>
<declare-styleable name="mm">
<attr name="entryValues" format="reference"/>
<attr name="entries" format="reference"/>
<attr name="srcType" format="string"/>
</declare-styleable>

加了这些代码后不会报 No resource identifier found 的错了。
奇怪的是, mm明显是自定义的,不过竟然找不到,不知道是不是针对aptkool做的一些措施,隐藏了自定义的mm属性,还是编译的时候根本就没加到APK里面,那程序安装和运行的时候怎么不会报错呢,对res这块不熟,既然能跳过这部分,就等以后再研究了。
4.加了declare-styleable 后
这里写图片描述
这些报错大体意思是找不到style,打开res\values\styles.xml,发现都是混淆过的,然后layout里面的xml用style的时候都是明文显示
上面的疑问又来了,这个包是怎么编译出来的,运行的时候怎么没问题?

Timestamp: 2025-08-22 17:03:43.988714452+0800 Process uptime: 13136s Cmdline: com.tencent.tmgp.pubgmhd pid: 9671, tid: 10758, name: TaskGraphNP 0 >>> com.tencent.tmgp.pubgmhd <<< uid: 10347 tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE) pac_enabled_keys: 000000000000000f (PR_PAC_APIAKEY, PR_PAC_APIBKEY, PR_PAC_APDAKEY, PR_PAC_APDBKEY) signal 11 (SIGSEGV), code -6 (SI_TKILL), fault addr -------- x0 00000013ffffffec x1 0000000000000038 x2 00000075c013fa68 x3 00000075c013fab0 x4 00000075c013ea58 x5 0000000000000006 x6 00000075c013e7d0 x7 00000075c013ea48 x8 00000075c013fa98 x9 00000075c013faa4 x10 00000075c0140e98 x11 00000075c013fab0 x12 00000089c0140e84 x13 000000007f7fffff x14 000000007fc00000 x15 b58637bdb58637bd x16 b58637bdb58637bd x17 358637bd358637bd x18 0000000000000038 x19 00000075c013f1d8 x20 00000075c013e7d0 x21 00000075c013ea58 x22 00000075c013e960 x23 00000075c013ea70 x24 0000000000000006 x25 00000000ffffffff x26 00000075c0140dc8 x27 00000075c0140d78 x28 00000075c013ea48 x29 00000075c013d9f0 lr 0000007477f5e55c sp 00000075c013d9f0 pc 0000007477f5d5ec pst 0000000060001000 21 total frames backtrace: #00 pc 000000000b6fd5ec /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #01 pc 000000000b6fe558 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #02 pc 000000000b700978 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #03 pc 000000000b7373c8 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #04 pc 000000000b741df4 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #05 pc 000000000b738ef8 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #06 pc 000000000b6fd510 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #07 pc 000000000b6ff4ec /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #08 pc 000000000b55d1d4 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #09 pc 000000000b5da034 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #10 pc 000000000b56a288 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #11 pc 000000000b56a6c0 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #12 pc 000000000b483b78 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #13 pc 000000000ad888c8 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #14 pc 0000000008d6515c /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #15 pc 0000000008d64d94 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #16 pc 0000000008d64c14 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #17 pc 0000000008d9b188 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #18 pc 0000000008d63794 /data/app/~~jlJ7lS1M94mV6IAvgTR5rQ==/com.tencent.tmgp.pubgmhd-rvUEG69_LtM9eTMbspW26Q==/lib/arm64/libUE4.so (BuildId: 84575e31bd1d0a0d1841ed662d594f00c42de139) #19 pc 00000000000a3a68 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+196) (BuildId: a3cde331295ff116d9c0d5e2198af1eb) #20 pc 0000000000095ecc /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68) (BuildId: a3cde331295ff116d9c0d5e2198af1eb) 这种堆栈为软件自身报错的还能分析原因吗
09-20
评论
成就一亿技术人!
拼手气红包6.0元
还能输入1000个字符
 
红包 添加红包
表情包 插入表情
 条评论被折叠 查看
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值