TInjector

劫持Zygote实现App启动前注入so

Features

• Zygote spawn模式
• Android 9 - 13
• Arm64-v8a
• remap 隐藏 so
• 移除elf头 隐藏 so
• soinfo 隐藏 so

TODO

• 支持usap模式
• ...

Build and Usage

Build:

  git clone https://github.com/mrack/TInjector.git
  cd TInjector
  ndk-build (Add ndk-build to your env variables)
  adb shell mkdir /data/local/tmp/inject
  adb push libtcore.so /data/local/tmp/inject/
  adb push tinjector /data/local/tmp/inject/

Usage:

  su
  cd /data/local/tmp/inject
  chmod 777 libtcore.so
  chmod +x tinjector
  ./tinjector -h

  Usage: ./tinject --hide --hide1 -f -p <package name>  <so path>
  Options:
  -p <pkg> <so path>  Inject so to the specified package.
  -P <pid> <so path>  Inject so to the specified pid.
  --hide              Hide the injected module.
  --hide1             Hide the injected module. (soinfo) beta
  -h                  Show this help.
  -f                  Spwan a new process and inject to it. only for android app.