apktool + eclipse 动态调试APK 【Android逆向分析】

用了会AndBug，虽然挺强大的但是作为习惯了OD，EDB作为动态调试工具的人，自然有些不习惯，于是乎寻求新的动态调试解决方案。但大多数都是NetBeans + apktool，想着还得多下一个IDE就各种烦躁，还是去寻求Eclipse的组合吧。
http://code.google.com/p/android-apktool/wiki/SmaliDebugging
找到apktool的官网，看到有可以实现动态调试。可以在反编译和回编的时候通过设置参数给目标APK中的manifest文件中加入android:debuggable="true",,同时为了结合Eclipse，之后也会自动把.smali后缀改为了.java。这样就可以用来调试了。当然，别忘了回编后还需要签名等，于是自己写了个简易的脚本：

''' Created on 2014-5-28@author: Xbalien ''' import os import sys import subprocessclass APKdebugger(object): def unpackaging(self, apk_path): print 'Start Unpackaging...' subprocess.call(['apktool_2.0.0b9.jar','d','-d',apk_path],shell=True)def packaging(self, file_path): print 'Start Packaging...' subprocess.call(['apktool_2.0.0b9.jar','b','-d',file_path],shell=True)def signer(self, unsigned_path): print 'Start Signing...' signer_comm=['jarsigner','-verbose','-keystore','key','-digestalg','SHA1','-sigalg', 'MD5withRSA' ,'-signedjar','signed.apk'] signer_comm += [unsigned_path,'key'] p = subprocess.Popen(signer_comm,stdin=subprocess.PIPE,stdout = subprocess.PIPE, stderr = subprocess.PIPE, shell = True) p.communicate(input='key123456') p.wait()def zipalign(self, outapk_path): subprocess.call(['zipalign','-v','4','signed.apk',outapk_path],shell=True)if __name__ == '__main__': if len(sys.argv) >1: print 'Start Create APKdebugger...' apk_path = sys.argv[1] file_path = apk_path[:-4] unsigned_path = './'+file_path+'/dist/'+apk_path outapk_path = file_path+'//'+apk_path apk_debugger = APKdebugger() apk_debugger.unpackaging(apk_path) apk_debugger.packaging(file_path) apk_debugger.signer(unsigned_path) apk_debugger.zipalign(outapk_path) else: print 'useage:main.py apk_name'

脚本处理好之后，apk也就生成了。之后将其安装到手机上。点击运行。这时候可以通过DDMS查看