android studio国内proxy



apktool重新打包及签名


frida安装


frida hook java层



frida server默认端口 

adb forward tcp:27042 tcp:27042
adb shell /data/local/frida-server-14.2.13-android-x86


frida入门

https://zhuanlan.zhihu.com/p/41662447

frida hook大全



adb+ida动态调试 

# adb shell am start -D -n "com.swinplace.mylie/com.nlkfybqszm.oqewrsg.MainActivity".
# -D指明是debug模式
# -n指明某个特定的intent，https://stackoverflow.com/questions/38870494/what-is-the-use-of-n-while-starting-activity-using-adb-shell-am-start-command
# adb shell am start -D -n $1
adb forward tcp:23946 tcp:23946
echo 'wait for ida'
read -n 1 kbd
adb forward tcp:23947 jdwp:`adb shell ps| grep com.example.plane|awk '{print $2}'`   &&  jdb -connect com.sun.jdi.SocketAttach:port=23947,hostname=127.0.0.1
socat TCP-LISTEN:23946,fork,reuseaddr TCP:127.0.0.1:23946 #adb bug，非localhost需要手动端口转发

frida带参数启动进程



AndroidManifest.xml






sd卡路径 

adb shell echo $EXTERNAL_STORAGE