为自己编写的LSPosed模块添加混淆

首先LSP不是lsp的意思,模块混淆一般就是类名方法名还有字符串的混淆,但是LSposed模块必须保留模块不被混淆,所以我们做如下处理,为方便后面食用这里记录一下

1.实例

假设要Hook的实例如下

package com.yotagit.xfucker;
​
import android.util.Log;
​
import java.util.Objects;
​
import de.robv.android.xposed.IXposedHookLoadPackage;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
​
public class FInject implements IXposedHookLoadPackage {
    private static final String TAG = "XFucker";
    private static final String lowPackage = "com.network.xf100";
​
​
​
    @Override
    public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpParam) throws Throwable {
        String currentPackageName = lpParam.packageName;
        if (Objects.equals(currentPackageName, lowPackage)){
            ClassLoader classLoader= lpParam.classLoader;
            Log.e(TAG,currentPackageName);
            hookLow(classLoader);
        }
    }
    private static void hookLow(ClassLoader classLoader){
​
        XposedHelpers.findAndHookMethod("com.my.wechat.YotaGit", classLoader, "getMyWechat", String.class, new XC_MethodHook() {
            @Override
            protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                param.setResult("FakeYotaGit");
            }
            @Override
            protected void afterHookedMethod(MethodHookParam param) throws Throwable {
            }
        });
​
    }
}

拖入jadx后看到的也是这样

2.混淆类名和方法名

我们当然不希望别人看到自己Hook的是哪个类和哪个方法

于是在proguard中我们常常会加入这个

-keep class com.yotagit.xfucker.FInject-repackageclasses "oo00o0O0"-allowaccessmodification-obfuscationdictionary xfucker.txt-classobfuscationdictionary xfucker.txt-packageobfuscationdictionary xfucker.txt-optimizations !code/simplification/arithmetic,!field/*,!class/merging/*,!code/allocation/variable

xfucker.txt的内容像下面这样子

再来看一下效果

类名和方法名在一定程度上是可以混淆,但是呢,我们设置的字符串依旧清晰可见

3.字符串混淆

我们引入这个插件

然后再次看一下效果

效果还是可以的

经验分享 程序员 微信小程序 职场和发展