rovo89 / XposedBridge

The Java part of the Xposed framework.
3.86k stars 1.1k forks source link

PoC for disable Xposed hooks in apps #247

Closed liudongmiao closed 5 years ago

liudongmiao commented 6 years ago

Xposed can be used to hook system server or apps.

PoC for disable Xposed hooks in apps:

--- o.txt   2018-04-28 22:53:09.000000000 +0800
+++ n.txt   2018-04-28 22:53:15.000000000 +0800
@@ -1,4 +1,4 @@
 android.app.ApplicationPackageManager.getApplicationInfo(ApplicationPackageManager.java:333)
 de.robv.android.xposed.XposedBridge.invokeOriginalMethodNative(Native Method)
-de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:360)
+me.piebridge.LogReader.invoke(Native Method)
 android.app.ApplicationPackageManager.getApplicationInfo(<Xposed>)

Just replace de.robv.android.xposed.XposedBridge.handleHookedMethod with a custom method. However, it's hard to implement.