移动安全相关

r囧r小猫 2021-12-23 07:13 271阅读 0赞

### ———什么事都是从学会开始看，才学会开始做。这一篇是我用来收集我看到的好的android的文章 ###

# 系统类 #

### 系统类和方法讲解类 ###

[android的ActivityThread的main讲解][android_ActivityThread_main]

# 功能类 #

[无需root实现默认安装][root]  
这之前看过一个与抢红包类似的那个默认安装不同  
思路就是利用反射调用android系统里面安装程序的类的方法，

# AccessilityService #

*  [http://www.jianshu.com/p/65afab3d1e2a][http_www.jianshu.com_p_65afab3d1e2a]
 *  [http://blogs.360.cn/360mobile/2016/09/07/research\_of\_accessibility/][http_blogs.360.cn_360mobile_2016_09_07_research_of_accessibility]

# hook类–反沙箱操作 #

## 1.cydia工具 ##

Cydia Substrate是一个代码修改平台。它可以修改任何主进程的代码，不管是用Java还是C/C++（native代码）编写的。而Xposed只支持HOOK app\_process中的java函数，因此Cydia Substrate是一款强大而实用的HOOK工具。

官网地址：[http://www.cydiasubstrate.com/][http_www.cydiasubstrate.com]

Demo地址：[https://github.com/zencodex/cydia-android-hook][https_github.com_zencodex_cydia-android-hook]

官方教程：[http://www.cydiasubstrate.com/id/20cf4700-6379-4a14-9bc2-853fde8cc9d1][http_www.cydiasubstrate.com_id_20cf4700-6379-4a14-9bc2-853fde8cc9d1]

SDK下载地址：[http://asdk.cydiasubstrate.com/zips/cydia\_substrate-r2.zip][http_asdk.cydiasubstrate.com_zips_cydia_substrate-r2.zip]

实例：  
官网API：  
[http://www.cydiasubstrate.com/id/20cf4700-6379-4a14-9bc2-853fde8cc9d1/][http_www.cydiasubstrate.com_id_20cf4700-6379-4a14-9bc2-853fde8cc9d1 1]

[可以在其他应用之上显示广告窗][Link 1]

[http://www.bkjia.com/Androidjc/1001317.html][http_www.bkjia.com_Androidjc_1001317.html]

改变颜色和短信监控：  
[http://www.cnblogs.com/goodhacker/p/4014617.html][http_www.cnblogs.com_goodhacker_p_4014617.html]

## 2.xposed工具 ##

[http://blog.csdn.net/yzzst/article/details/47659479][http_blog.csdn.net_yzzst_article_details_47659479]

[http://www.freebuf.com/articles/terminal/114910.html][http_www.freebuf.com_articles_terminal_114910.html]

## 3.不用工具，代码注入 ##

[代码hook看雪-hook][hook_-hook]  
[尼古拉斯hook–改变返回的mac地址][hook_mac]

# 进程类 #

### 进程保活：[http://dev.qq.com/topic/57ac4a0ea374c75371c08ce8][http_dev.qq.com_topic_57ac4a0ea374c75371c08ce8] ###

# Dalvik虚拟机 #

[http://www.freebuf.com/articles/terminal/114869.html?spm=a313e.7916648.0.0.FsmyeW][http_www.freebuf.com_articles_terminal_114869.html_spm_a313e.7916648.0.0.FsmyeW]

# 资源和资产类 #

从asset读取文件： [http://www.cnblogs.com/greatverve/archive/2012/03/08/android-assets.html][http_www.cnblogs.com_greatverve_archive_2012_03_08_android-assets.html]

# ELF可执行文件格式的分析 #

[http://blog.csdn.net/flydream0/article/details/8719036][http_blog.csdn.net_flydream0_article_details_8719036]

# 测试类 #

## drozer进行渗透测试 ##

[http://bobao.360.cn/learning/detail/158.html][http_bobao.360.cn_learning_detail_158.html]  
[http://download.csdn.net/download/behappy1987/7122875][http_download.csdn.net_download_behappy1987_7122875]

## 渗透测试 ##

[http://bobao.360.cn/learning/detail/3035.html][http_bobao.360.cn_learning_detail_3035.html]

# 反编译工具IDA插件 #

[https://github.com/onethawt/idaplugins-list][https_github.com_onethawt_idaplugins-list]

转载于:https://www.cnblogs.com/Tesi1a/p/7624097.html

[android_ActivityThread_main]: http://mp.weixin.qq.com/s?__biz=MzA5MzI3NjE2MA==&mid=2650236605&idx=1&sn=8bb032c27042358d98cab37bbb26a48f&scene=23&srcid=0801lg07lmU91wy6Wycp3ZrZ#rd
[root]: http://blog.csdn.net/yyh352091626/article/details/50533137
[http_www.jianshu.com_p_65afab3d1e2a]: http://www.jianshu.com/p/65afab3d1e2a
[http_blogs.360.cn_360mobile_2016_09_07_research_of_accessibility]: http://blogs.360.cn/360mobile/2016/09/07/research_of_accessibility/
[http_www.cydiasubstrate.com]: http://www.cydiasubstrate.com/
[https_github.com_zencodex_cydia-android-hook]: https://github.com/zencodex/cydia-android-hook
[http_www.cydiasubstrate.com_id_20cf4700-6379-4a14-9bc2-853fde8cc9d1]: http://www.cydiasubstrate.com/id/20cf4700-6379-4a14-9bc2-853fde8cc9d1
[http_asdk.cydiasubstrate.com_zips_cydia_substrate-r2.zip]: http://asdk.cydiasubstrate.com/zips/cydia_substrate-r2.zip
[http_www.cydiasubstrate.com_id_20cf4700-6379-4a14-9bc2-853fde8cc9d1 1]: http://www.cydiasubstrate.com/id/20cf4700-6379-4a14-9bc2-853fde8cc9d1/
[Link 1]: http://www.csdn.net/article/2015-08-07/2825405
[http_www.bkjia.com_Androidjc_1001317.html]: http://www.bkjia.com/Androidjc/1001317.html
[http_www.cnblogs.com_goodhacker_p_4014617.html]: http://www.cnblogs.com/goodhacker/p/4014617.html
[http_blog.csdn.net_yzzst_article_details_47659479]: http://blog.csdn.net/yzzst/article/details/47659479
[http_www.freebuf.com_articles_terminal_114910.html]: http://www.freebuf.com/articles/terminal/114910.html
[hook_-hook]: http://bbs.pediy.com/showthread.php?t=186054
[hook_mac]: http://blog.csdn.net/jiangwei0910410003/article/details/41941393
[http_dev.qq.com_topic_57ac4a0ea374c75371c08ce8]: http://dev.qq.com/topic/57ac4a0ea374c75371c08ce8
[http_www.freebuf.com_articles_terminal_114869.html_spm_a313e.7916648.0.0.FsmyeW]: http://www.freebuf.com/articles/terminal/114869.html?spm=a313e.7916648.0.0.FsmyeW
[http_www.cnblogs.com_greatverve_archive_2012_03_08_android-assets.html]: http://www.cnblogs.com/greatverve/archive/2012/03/08/android-assets.html
[http_blog.csdn.net_flydream0_article_details_8719036]: http://blog.csdn.net/flydream0/article/details/8719036
[http_bobao.360.cn_learning_detail_158.html]: http://bobao.360.cn/learning/detail/158.html
[http_download.csdn.net_download_behappy1987_7122875]: http://download.csdn.net/download/behappy1987/7122875
[http_bobao.360.cn_learning_detail_3035.html]: http://bobao.360.cn/learning/detail/3035.html
[https_github.com_onethawt_idaplugins-list]: https://github.com/onethawt/idaplugins-list