search

luoyesiqiu / dpt-shell

An android Dex protects shell implementation
MIT License
519 stars 190 forks source link

加固后的包在Android 8版本上运行崩溃 #43

Closed wushuangchunjun closed 1 week ago

wushuangchunjun commented 1 month ago

05-23 03:40:08.905 9934 9934 W System : ClassLoader referenced unknown path: /data/user/0/com.ljwifi.ttsl/code_cache/i11111i111.zip 05-23 03:40:08.907 9934 9934 F libc : Fatal signal 4 (SIGILL), code 1, fault addr 0x7169c80000 in tid 9934 (com.ljwifi.ttsl), pid 9934 (com.ljwifi.ttsl) 05-23 03:40:08.977 9960 9960 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone 05-23 03:40:08.983 1213 1213 I /system/bin/tombstoned: received crash request for pid 9934 05-23 03:40:08.984 9960 9960 I crash_dump64: performing dump of process 9934 (target tid = 9934) 05-23 03:40:08.985 9960 9960 F DEBUG : Process name is com.ljwifi.ttsl, not key_process 05-23 03:40:08.985 9960 9960 F DEBUG : 05-23 03:40:08.985 9960 9960 F DEBUG : Build fingerprint: 'OPPO/PBAM00/PBAM00:8.1.0/OPM1.171019.026/1594640100:user/release-keys' 05-23 03:40:08.985 9960 9960 F DEBUG : Revision: '0' 05-23 03:40:08.985 9960 9960 F DEBUG : ABI: 'arm64' 05-23 03:40:08.985 9960 9960 F DEBUG : pid: 9934, tid: 9934, name: com.ljwifi.ttsl >>> com.ljwifi.ttsl <<< 05-23 03:40:08.985 9960 9960 F DEBUG : signal 4 (SIGILL), code 1 (ILL_ILLOPC), fault addr 0x7169c80000 05-23 03:40:08.985 9960 9960 F DEBUG : x0 0000000000000001 x1 0000007169c9b7b4 x2 0000000000016b20 x3 00000000000008d8 05-23 03:40:08.985 9960 9960 F DEBUG : x4 000000720fa42a40 x5 00000000035bce78 x6 00000000035bcea8 x7 00000000001fffff 05-23 03:40:08.985 9960 9960 F DEBUG : x8 0000007169c80000 x9 0000000000000001 x10 0000000000004001 x11 000000720fa42a40 05-23 03:40:08.985 9960 9960 F DEBUG : x12 0000000000000000 x13 0000000000000000 x14 0000000000000237 x15 000000000003e460 05-23 03:40:08.985 9960 9960 F DEBUG : x16 0000000000000071 x17 0000007169c853b8 x18 0000007169c8174c x19 000000720fa42a40 05-23 03:40:08.985 9960 9960 F DEBUG : x20 000000718a6cd1c0 x21 000000720fa42a40 x22 0000007ffaa254dc x23 000000720c7a9073 05-23 03:40:08.985 9960 9960 F DEBUG : x24 0000000000000004 x25 000000720fa42a40 x26 000000718a6c2aa0 x27 0000000000000001 05-23 03:40:08.985 9960 9960 F DEBUG : x28 0000000000000004 x29 0000007ffaa250b0 x30 0000007169c9b810 05-23 03:40:08.985 9960 9960 F DEBUG : sp 0000007ffaa25070 pc 0000007169c80000 pstate 0000000080000000 05-23 03:40:08.987 9960 9960 F DEBUG : 05-23 03:40:08.987 9960 9960 F DEBUG : backtrace: 05-23 03:40:08.987 9960 9960 F DEBUG : #00 pc 0000000000000000 /data/data/com.ljwifi.ttsl/dpt-libs/arm64/libdpt.so 05-23 03:40:08.987 9960 9960 F DEBUG : #01 pc 000000000001b80c /data/data/com.ljwifi.ttsl/dpt-libs/arm64/libdpt.so 05-23 03:40:08.987 9960 9960 F DEBUG : #02 pc 0000000000013a5c /data/data/com.ljwifi.ttsl/dpt-libs/arm64/libdpt.so 05-23 03:40:08.987 9960 9960 F DEBUG : #03 pc 000000000000268c /data/app/com.ljwifi.ttsl-wby1p_bjVWI3C3q625g7oQ==/oat/arm64/base.odex (offset 0x2000) 05-23 03:40:09.027 7466 7497 I ctcap : 7497:ScreenClientHandler: handle cmd :SCREEN_CAPTURE_REQ 05-23 03:40:09.027 7466 7497 I ctcap : 7497:ScreenClientHandler: screenCaptureRequestHandler req: H=960, Q=80, Index = 0 05-23 03:40:09.049 708 708 E FrameEvents: Source mDeltas not empty. 05-23 03:40:09.049 708 708 E FrameEvents: Source mDeltas not empty. 05-23 03:40:09.053 7466 7497 I ctcap : 7497:CpuConsumerCaptureApi, setOnImageAvailableListener ready 05-23 03:40:09.054 7466 7497 I ctcap : 7497:ScreenClientHandler: screenCaptureRequestHandler exit 05-23 03:40:09.062 7466 9893 I ctcap : 9893:CpuConsumerCaptureApi, onImageAvailable 05-23 03:40:09.097 7466 9893 I ctcap : 9893:ScreenClientHandler: onScreenCapture: byteArray 17364, w: 456, h: 960, orientation: 0, seqid: 0, quality: 80 05-23 03:40:09.103 7466 7649 E BufferQueueProducer: [ImageReader-456x960f1m2-7466-1] queueBuffer: BufferQueue has been abandoned 05-23 03:40:09.103 708 708 E Surface : queueBuffer: error queuing buffer to SurfaceTexture, -19 05-23 03:40:09.103 708 708 I Adreno : QueueBuffer: queueBuffer failed

wushuangchunjun commented 1 month ago

大佬帮忙看一下ndk的库的问题

wushuangchunjun commented 1 month ago

log.txt 佬，我这里上传了完整的log日志，有空能帮忙看一下么，万分感谢

luoyesiqiu commented 1 month ago

应该是触发了crash函数，有用到frida或者脱壳工具吗

wushuangchunjun commented 1 month ago

我自己这边没有用过，我这边几个测试机都是没有闪退的，这个闪退的是我拿加固后的app去应用商店审核，那边审核人员给我发的，还发了几张图片，感觉就是简单的安装，然后打开就闪退了 20240524-160107 20240524-160102

20240524-160058

luoyesiqiu commented 1 month ago

可以把crash函数去掉，再自己构建一个版本打包

wushuangchunjun commented 1 month ago

好的，我试试

xiangyao0906 commented 4 weeks ago

logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 image 之后就出现这个问题了 大佬可以给点思路嘛

luoyesiqiu commented 3 weeks ago

logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 image 之后就出现这个问题了 大佬可以给点思路嘛

看apk里面是不是有classes.dex

xiangyao0906 commented 3 weeks ago

logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 image 之后就出现这个问题了 大佬可以给点思路嘛

看apk里面是不是有classes.dex

有啊 加密完apk classes.dex是有壳ProxyApplicatio的

xiangyao0906 commented 3 weeks ago

logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 image 之后就出现这个问题了 大佬可以给点思路嘛

看apk里面是不是有classes.dex

image 看签名也对的上啊

blackandwhiteforzj commented 3 weeks ago

logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 image 之后就出现这个问题了 大佬可以给点思路嘛

apk发一下

xiangyao0906 commented 3 weeks ago

executable.zip https://drive.google.com/file/d/1EiqWJPFybVFJAYb8nE25N9Y6pXQM2Zc5/view?usp=drive_web

zhou sir @.***> 于2024年6月6日周四 14:54写道：

logcat.log https://github.com/user-attachments/files/15535263/logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 [image: image] https://private-user-images.githubusercontent.com/16839786/336112235-6dc1fd68-4416-43d4-b74a-1313eb09910f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTc2NTY5MzEsIm5iZiI6MTcxNzY1NjYzMSwicGF0aCI6Ii8xNjgzOTc4Ni8zMzYxMTIyMzUtNmRjMWZkNjgtNDQxNi00M2Q0LWI3NGEtMTMxM2ViMDk5MTBmLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA2MDYlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwNjA2VDA2NTAzMVomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTNjY2NkMTY0MzNlZGI5YmQ1OTIzODQ1MjY0YTk5ZDBiMzljZTBiNjhlYTMwYzg5NmYwMTI1MTE2Y2U0YmJlNDQmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.IpcKya47j53IJYtmHrjQU7mKy5njb1FyeflbfyeVtME 之后就出现这个问题了 大佬可以给点思路嘛

apk发一下

— Reply to this email directly, view it on GitHub https://github.com/luoyesiqiu/dpt-shell/issues/43#issuecomment-2151538374, or unsubscribe https://github.com/notifications/unsubscribe-auth/AEAPI2XISXCOKB6PR3Y5KGTZGABR3AVCNFSM6AAAAABIHBSKJSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNJRGUZTQMZXGQ . You are receiving this because you commented.Message ID: @.***>

blackandwhiteforzj commented 3 weeks ago

executable.zip https://drive.google.com/file/d/1EiqWJPFybVFJAYb8nE25N9Y6pXQM2Zc5/view?usp=drive_web zhou sir @.> 于2024年6月6日周四 14:54写道： … logcat.log https://github.com/user-attachments/files/15535263/logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 [image: image] https://private-user-images.githubusercontent.com/16839786/336112235-6dc1fd68-4416-43d4-b74a-1313eb09910f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.IpcKya47j53IJYtmHrjQU7mKy5njb1FyeflbfyeVtME 之后就出现这个问题了 大佬可以给点思路嘛 apk发一下 — Reply to this email directly, view it on GitHub <#43 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AEAPI2XISXCOKB6PR3Y5KGTZGABR3AVCNFSM6AAAAABIHBSKJSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNJRGUZTQMZXGQ . You are receiving this because you commented.Message ID: @.>

只需要把加固前的apk发出来就行

xiangyao0906 commented 3 weeks ago

executable.zip https://drive.google.com/file/d/1EiqWJPFybVFJAYb8nE25N9Y6pXQM2Zc5/view?usp=drive_web zhou sir @.**> 于2024年6月6日周四 14:54写道： … logcat.log https://github.com/user-attachments/files/15535263/logcat.log 大佬 加固了之后找不到Application 我修改了不部分代码 主要在qian签名部分 增加签名的参数 [image: image] https://private-user-images.githubusercontent.com/16839786/336112235-6dc1fd68-4416-43d4-b74a-1313eb09910f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTc2NTY5MzEsIm5iZiI6MTcxNzY1NjYzMSwicGF0aCI6Ii8xNjgzOTc4Ni8zMzYxMTIyMzUtNmRjMWZkNjgtNDQxNi00M2Q0LWI3NGEtMTMxM2ViMDk5MTBmLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA2MDYlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwNjA2VDA2NTAzMVomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTNjY2NkMTY0MzNlZGI5YmQ1OTIzODQ1MjY0YTk5ZDBiMzljZTBiNjhlYTMwYzg5NmYwMTI1MTE2Y2U0YmJlNDQmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.IpcKya47j53IJYtmHrjQU7mKy5njb1FyeflbfyeVtME 之后就出现这个问题了 大佬可以给点思路嘛 apk发一下 — Reply to this email directly, view it on GitHub <#43 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AEAPI2XISXCOKB6PR3Y5KGTZGABR3AVCNFSM6AAAAABIHBSKJSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNJRGUZTQMZXGQ . You are receiving this because you commented.Message ID: @.**>

只需要把加固前的apk发出来就行

apk 有点大 我又重新拉取代码 换了种方式 把自己的签名拖到项目里替换项目的签名信息 又可以了。这样看来有可能是我改代码加参数哪里改出来的原因 非常感谢大佬