search

sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.42k stars 852 forks source link

[bug] The APK generated by patchapk stays on the app startup page. #529

Closed onesecurity closed 2 years ago

onesecurity commented 2 years ago

objection patchapk --source app.apk --gadget-version 15.1.17 -a arm64

Environment (please complete the following information):

03-02 01:38:03.188  3582  3619 I Frida   : Listening on 127.0.0.1 TCP port 27042
03-02 01:38:03.190   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.191   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.197  3582  3608 I SecurityComp115301: a: a c en begin 2
03-02 01:38:03.197  3582  3608 I SecurityComp115301: a: a c en begin 5
03-02 01:38:03.200  3582  3608 E HMSSDK_HMSPackageManager: Failed to find HMS apk
03-02 01:38:03.207   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.208   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.221  3582  3608 I HMSSDK_HMSBIInitializer: Builder->biInitFlag :false
03-02 01:38:03.221  3582  3608 I HMSSDK_HMSBIInitializer: Builder->biSetting :false
03-02 01:38:03.221  3582  3608 I HMSSDK_CountryCodeBean: getCountryCode get country code from SIM_COUNTRY
03-02 01:38:03.223  3582  3608 I HMSSDK_CountryCodeBean: getCountryCode get country code from SIM_COUNTRY
03-02 01:38:03.223   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.224   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.226  3582  3625 I HMSSDK_HMSBIInitializer: Start to query GRS
03-02 01:38:03.230  3582  3625 I NetworkKit_c: 3582-3625|null|com.huawei.hms.framework.network.grs.a.c|a|48|app version changed! old version{} and new version{2244}
03-02 01:38:03.231  3582  3608 I HMSSDK_HiAnalyticsUtils: issueCountry initial
03-02 01:38:03.232  3582  3608 I HMSSDK_CountryCodeBean: getCountryCode get country code from SIM_COUNTRY
03-02 01:38:03.232  3582  3608 I HMSSDK_CountryCodeBean: getCountryCode get country code from SIM_COUNTRY
03-02 01:38:03.232  3582  3608 I HMSSDK_HiAnalyticsUtils: not ChinaROM
03-02 01:38:03.232  3582  3628 W NetworkKit_c: 3582-3628|null|com.huawei.hms.framework.network.grs.c.c|a|71|local config file is not exist.filename is {grs_app_global_route_config.json}
03-02 01:38:03.233  3582  3608 I HMSSDK_HiAnalyticsUtils: Get OOBE failed
03-02 01:38:03.240   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.241   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.247  3582  3608 I HMSSDK_HiAnalyticsUtils: not ChinaROM
03-02 01:38:03.247  3582  3608 I HMSSDK_HiAnalyticsUtils: Get OOBE failed
03-02 01:38:03.248  3582  3624 I HMSSDK_HuaweiApiManager: sendRequest
03-02 01:38:03.248  3582  3624 I HMSSDK_BaseHmsClient: ====== HMSSDK version: 50000301 ======
03-02 01:38:03.248  3582  3624 I HMSSDK_BaseHmsClient: Enter connect, Connection Status: 1
03-02 01:38:03.248  3582  3624 I HMSSDK_BaseHmsClient: connect minVersion:30000000
03-02 01:38:03.249  3582  3624 I HMSSDK_Util: available exist: true
03-02 01:38:03.249  3582  3624 E HMSSDK_Util: In isAvailableLibExist, Failed to read meta data for the availableLoaded.
03-02 01:38:03.249  3582  3624 I HMSSDK_Util: available exist: true
03-02 01:38:03.251  3582  3624 E HMSSDK_HMSPackageManager: Failed to find HMS apk
03-02 01:38:03.251  3582  3624 I HMSSDK_AvailableAdapter: HMS is not installed
03-02 01:38:03.251  3582  3624 I HMSSDK_BaseHmsClient: check available result: 1
03-02 01:38:03.252  3582  3624 I HMSSDK_BaseHmsClient: bindCoreService3.0 fail, start resolution now.
03-02 01:38:03.252  3582  3624 I HMSSDK_BaseHmsClient: enter HmsCore resolution
03-02 01:38:03.252  3582  3624 I HMSSDK_BaseHmsClient: notifyFailed result: 26
03-02 01:38:03.252  3582  3624 I HMSSDK_HuaweiApiManager: onConnectionFailed
03-02 01:38:03.252  3582  3624 I HMSSDK_Util: available exist: true
03-02 01:38:03.253  3582  3624 I HMSSDK_HiAnalyticsUtils: not ChinaROM
03-02 01:38:03.253  3582  3624 I HMSSDK_HiAnalyticsUtils: Get OOBE failed
03-02 01:38:03.253  3582  3624 E HMSSDK_HmsInstanceIdEx: TokenTask failed, ErrorCode: 907135003
03-02 01:38:03.255  3582  3624 I HMSSDK_HiAnalyticsUtils: not ChinaROM
03-02 01:38:03.255  3582  3624 I HMSSDK_HiAnalyticsUtils: Get OOBE failed
03-02 01:38:03.256  3582  3624 I HMSSDK_BaseHmsClient: Enter disconnect, Connection Status: 5
03-02 01:38:03.257   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.258   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.273   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.275   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.279  3582  3628 I NetworkKit_AbstractLocalManager: 3582-3628|null|com.huawei.hms.framework.network.grs.local.a|a|63|load SDK_CONFIG_FILE sucess.
03-02 01:38:03.279  3582  3628 I NetworkKit_AbstractLocalManager: 3582-3628|null|com.huawei.hms.framework.network.grs.local.a|a|63|load SDK_CONFIG_FILE sucess.
03-02 01:38:03.279  3582  3628 I NetworkKit_AbstractLocalManager: 3582-3628|null|com.huawei.hms.framework.network.grs.local.a|a|63|load SDK_CONFIG_FILE sucess.
03-02 01:38:03.281  3582  3634 I NetworkKit_g: 3582-3634|null|com.huawei.hms.framework.network.grs.b.g|g|4|Post call execute
03-02 01:38:03.287   288  3635 D resolv  : GetAddrInfoHandler::run: {101 101 101 983141 10147 0}
03-02 01:38:03.287   288  3635 D resolv  : resolv_getaddrinfo: explore_fqdn(): ai_family=0 ai_socktype=1 ai_protocol=6
03-02 01:38:03.290   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.291   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.293   288  3637 D resolv  : doQuery: (1, 1)
03-02 01:38:03.293   288  3637 D resolv  : res_nmkquery: (QUERY, IN, A)
03-02 01:38:03.293   288  3637 D resolv  : res_nsend
03-02 01:38:03.293   288  3637 I resolv  : resolv_cache_lookup: lookup
03-02 01:38:03.294   288  3637 I resolv  : resolv_cache_lookup: NOT IN CACHE
03-02 01:38:03.294   288  3637 I resolv  : resolv_populate_res_for_net: netid=101
03-02 01:38:03.295   288  3636 D resolv  : doQuery: (1, 28)
03-02 01:38:03.295   288  3636 D resolv  : res_nmkquery: (QUERY, IN, AAAA)
03-02 01:38:03.295   288  3636 D resolv  : res_nsend
03-02 01:38:03.295   288  3636 I resolv  : resolv_cache_lookup: lookup
03-02 01:38:03.295   288  3636 I resolv  : resolv_cache_lookup: NOT IN CACHE
03-02 01:38:03.295   288  3636 I resolv  : resolv_populate_res_for_net: netid=101
03-02 01:38:03.295   288  3636 I resolv  : res_stats_usable_server: NS stats: S 18 + E 0 + T 0 + I 0 = 18, rtt = 21, min_samples = 8
03-02 01:38:03.296   288  3636 I resolv  : res_stats_usable_server: success rate 100
03-02 01:38:03.296   288  3636 D resolv  : res_nsend: Querying server (# 1) address = 10.0.2.3:53
03-02 01:38:03.296   288  3636 D resolv  : send_dg: new DG socket
03-02 01:38:03.296   288  3637 I resolv  : res_stats_usable_server: NS stats: S 18 + E 0 + T 0 + I 0 = 18, rtt = 21, min_samples = 8
03-02 01:38:03.296   288  3637 I resolv  : res_stats_usable_server: success rate 100
03-02 01:38:03.296   288  3637 D resolv  : res_nsend: Querying server (# 1) address = 10.0.2.3:53
03-02 01:38:03.296   288  3637 D resolv  : send_dg: new DG socket
03-02 01:38:03.296   288  3637 I resolv  : get_timeout: using timeout of 5000 msec
03-02 01:38:03.296   288  3637 I resolv  : retrying_poll: 58 retrying_poll
03-02 01:38:03.296   288  3636 I resolv  : get_timeout: using timeout of 5000 msec
03-02 01:38:03.296   288  3636 I resolv  : retrying_poll: 54 retrying_poll
03-02 01:38:03.307   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.308   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.323   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.324   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.327  1111  1111 D BoundBrokerSvc: onUnbind: Intent { act=com.google.android.gms.usagereporting.service.START pkg=com.google.android.gms }
03-02 01:38:03.340   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.341   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.346   288  3636 I resolv  : retrying_poll: 54 retrying_poll returning 1
03-02 01:38:03.346   288  3636 I resolv  : res_nsend: used send_dg 217 terrno: 0
03-02 01:38:03.346   288  3636 I resolv  : res_stats_set_sample: rcode = 0, sec = 50
03-02 01:38:03.346   288  3636 I resolv  : res_cache_add_stats_sample_locked: adding sample to stats, next = 18, count = 18
03-02 01:38:03.346   288  3636 D resolv  : res_nsend: got answer:
03-02 01:38:03.346   288  3636 I resolv  : answer_getTTL: TTL = 37
03-02 01:38:03.346   288  3636 I resolv  : _cache_add_p: entry 19 added (count=16)
03-02 01:38:03.346   288  3636 I resolv  : cache_dump_mru_locked: MRU LIST (16):  xxxxx
03-02 01:38:03.347   288  3636 D resolv  : doQuery: rcode=0, ancount=2
03-02 01:38:03.347   288  3637 I resolv  : retrying_poll: 58 retrying_poll returning 1
03-02 01:38:03.347   288  3637 I resolv  : res_nsend: used send_dg 178 terrno: 0
03-02 01:38:03.347   288  3637 I resolv  : res_stats_set_sample: rcode = 0, sec = 51
03-02 01:38:03.347   288  3637 I resolv  : res_cache_add_stats_sample_locked: adding sample to stats, next = 19, count = 19
03-02 01:38:03.347   288  3637 D resolv  : res_nsend: got answer:
03-02 01:38:03.347   288  3637 I resolv  : answer_getTTL: TTL = 37
03-02 01:38:03.347   288  3637 I resolv  : _cache_add_p: entry 20 added (count=17)
03-02 01:38:03.347   288  3637 I resolv  : cache_dump_mru_locked: MRU LIST (17):  xxxx
03-02 01:38:03.347   288  3637 D resolv  : doQuery: rcode=0, ancount=4
03-02 01:38:03.347   288  3635 I ResolverController: No valid NAT64 prefix (101, <unspecified>/0)
03-02 01:38:03.357   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.358   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.373   303   349 W RanchuHwc: validateDisplay: layer 14 CompositionType 1, fallback
03-02 01:38:03.374   303   349 W RanchuHwc: presentDisplay display has no layers to compose, flushing client target buffer.
03-02 01:38:03.446  1452  1452 I A       : onApplyWindowInsets: systemWindowInsets=Insets{left=0, top=66, right=0, bottom=132}
03-02 01:38:03.446  1452  1452 I A       : onApplyWindowInsets: systemWindowInsets=Insets{left=0, top=66, right=0, bottom=132}
03-02 01:38:03.451   651   889 D EGL_emulation: app_time_stats: avg=1230.27ms min=9.80ms max=10935.22ms count=9
03-02 01:38:03.454   487  1539 W ActivityManager: Unable to start service Intent { act=android.service.smartspace.SmartspaceService cmp=com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiSmartspaceService } U=0: not found
03-02 01:38:03.454   487  1539 W RemoteSmartspaceService: could not bind to Intent { act=android.service.smartspace.SmartspaceService cmp=com.google.android.as/com.google.android.apps.miphone.aiai.app.AiAiSmartspaceService } using flags 67112961
03-02 01:38:03.454   487   487 W ActivityManager: Unbind failed: could not find connection for android.app.LoadedApk$ServiceDispatcher$InnerConnection@ab372f3
03-02 01:38:03.536  3582  3633 I NetworkKit_c: 3582-3633|null|com.huawei.hms.framework.network.grs.b.c|a|70|grs request return body is not null and is OK.
03-02 01:38:03.536  3582  3633 W NetworkKit_HianalyticsHelper: 3582-
leonjza commented 2 years ago

You need to connect objection and it will resume. Alternatively connect the vanilla Frida cli and type %resume to resume the app.