## Java-JDK 安装文档：https://www.cxywy.com/?p=18 ## Android Studio - 安卓开发 详情查看：https://www.cxywy.com/?p=22 ## adb 安卓调试桥 Android Studio 里带上了 adb 工具包 或者点击链接下载 https://developer.android.google.cn/studio/releases/platform-tools Ubuntu 单独安装adb: https://www.cxywy.com/?p=67 ## Apktool- 将apk反编译出dex 官网安装步骤：https://ibotpeaches.github.io/Apktool/install/ jar包下载链接：https://bitbucket.org/iBotPeaches/apktool/downloads/ 下载之后，重命名为：`apktool.jar` ### Windows安装步骤 将下面代码保存为一个 `apktool.bat` 文件，如果官网那个右键链接可以用，尽量用那个！ 将 `apktool.bat` 和 `apktool.jar` 一起放到path环境目录下 ```bash @echo off setlocal set BASENAME=apktool_ chcp 65001 2>nul >nul set java_exe=java.exe if defined JAVA_HOME ( set java_exe="%JAVA_HOME%\bin\java.exe" ) rem Find the highest version .jar available in the same directory as the script setlocal EnableDelayedExpansion pushd "%~dp0" if exist apktool.jar ( set BASENAME=apktool goto skipversioned ) set max=0 for /f "tokens=1* delims=-_.0" %%A in ('dir /b /a-d %BASENAME%*.jar') do if %%~B gtr !max! set max=%%~nB :skipversioned popd setlocal DisableDelayedExpansion rem Find out if the commandline is a parameterless .jar or directory, for fast unpack/repack if "%~1"=="" goto load if not "%~2"=="" goto load set ATTR=%~a1 if "%ATTR:~0,1%"=="d" ( rem Directory, rebuild set fastCommand=b ) if "%ATTR:~0,1%"=="-" if "%~x1"==".apk" ( rem APK file, unpack set fastCommand=d ) :load %java_exe% -jar -Duser.language=en -Dfile.encoding=UTF8 "%~dp0%BASENAME%%max%.jar" %fastCommand% %* rem Pause when ran non interactively for /f "tokens=2" %%# in ("%cmdcmdline%") do if /i "%%#" equ "/c" pause ``` ### Ubuntu安装步骤 将下面代码保存为一个 `apktool` 文件，和 `apktool.jar` 一起放到 `/usr/local/bin`，并给权限 `chmod +x` ```bash #!/bin/bash # # Copyright (C) 2007 The Android Open Source Project # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # This script is a wrapper for smali.jar, so you can simply call "smali", # instead of java -jar smali.jar. It is heavily based on the "dx" script # from the Android SDK # Set up prog to be the path of this script, including following symlinks, # and set up progdir to be the fully-qualified pathname of its directory. prog="$0" while [ -h "${prog}" ]; do newProg=`/bin/ls -ld "${prog}"` newProg=`expr "${newProg}" : ".* -> \(.*\)$"` if expr "x${newProg}" : 'x/' >/dev/null; then prog="${newProg}" else progdir=`dirname "${prog}"` prog="${progdir}/${newProg}" fi done oldwd=`pwd` progdir=`dirname "${prog}"` cd "${progdir}" progdir=`pwd` prog="${progdir}"/`basename "${prog}"` cd "${oldwd}" jarfile=apktool.jar libdir="$progdir" if [ ! -r "$libdir/$jarfile" ] then echo `basename "$prog"`": can't find $jarfile" exit 1 fi javaOpts="" # If you want DX to have more memory when executing, uncomment the following # line and adjust the value accordingly. Use "java -X" for a list of options # you can pass here. # javaOpts="-Xmx512M -Dfile.encoding=utf-8" # Alternatively, this will extract any parameter "-Jxxx" from the command line # and pass them to Java (instead of to dx). This makes it possible for you to # add a command-line parameter such as "-JXmx256M" in your ant scripts, for # example. while expr "x$1" : 'x-J' >/dev/null; do opt=`expr "$1" : '-J\(.*\)'` javaOpts="${javaOpts} -${opt}" shift done if [ "$OSTYPE" = "cygwin" ] ; then jarpath=`cygpath -w "$libdir/$jarfile"` else jarpath="$libdir/$jarfile" fi # add current location to path for aapt PATH=$PATH:`pwd`; export PATH; exec java $javaOpts -jar "$jarpath" "$@" ``` ### MacOS安装步骤 ```bash brew install apktool ``` ## JADX-读取dex文件展示java dex文件转化为java代码 https://www.softpedia.com/get/Programming/Other-Programming-Files/Jadx.shtml ## IDA Pro 交互式反汇编器 在我的云盘上 ## JustTrustMe - SSL Pining 源地址下载：https://github.com/Fuzion24/JustTrustMe ## Fdex2-脱壳工具 FDex2 --- 1.1 ## 神器-Frida-Hook 建议先安装python环境的包，再根据包的版本去下载手机端的。 由三部分组成： - frida-server 运行在设备上 - frida Python模块 - frida-tools 提供cli工具命令 跟Frida-server交互 安装firda： ```bash pip3 install frida ``` 安装 frida-tools: ```bash pip3 install frida-tools ``` 手机服务端下载地址：https://github.com/frida/frida/releases 要选对cpu的版本，不知道版本的，在命令行输入 ```bash adb shell getprop ro.product.cpu.abi ``` 按照我朋友的说法，不管什么系统，直接丢x86就完事了~ 下载完解压，将解压后的文件推送到 `/data/local/tmp/` 目录 ```bash adb push frida-server-12.11.12-android-arm64 /data/local/tmp/ ``` ## JPype - 在python中调用jar 在 https://www.lfd.uci.edu/~gohlke/pythonlibs/ 找到包，下载到本地，执行pip安装即可 ```bash pip3 install JPype1-1.0.2-cp37-cp37m-win_amd64.whl ``` ## Appium的环境配置 服务端下载地址：https://github.com/appium/appium-desktop/releases 客户端： ```bash pip3 install Appium-Python-Client ```