实现Android Native端爆破源码

【实现Android Native端爆破源码】智慧并不产生于学历,而是来自对于知识的终生不懈的追求。这篇文章主要讲述实现Android Native端爆破源码相关的知识,希望能为你提供帮助。
尝试在移动端so侧做一些内存修改,使之走向不通的逻辑,一下为将要爆破的APP源码
java侧:

实现Android Native端爆破源码

文章图片
实现Android Native端爆破源码

文章图片
1 package com.example.grady.sectestone; 2 3 import android.os.Handler; 4 import android.os.Message; 5 import android.support.v7.app.AppCompatActivity; 6 import android.os.Bundle; 7 import android.widget.TextView; 8 9 import java.util.Timer; 10 import java.util.TimerTask; 11 12 public class MainActivity extends AppCompatActivity { 13 14// Used to load the ‘native-lib‘ library on application startup. 15static { 16System.loadLibrary("native-lib"); 17} 18 19private TextView tv; 20private Timer timer; 21private int count = 0; 22 23 24private Handler mHandler = new Handler(){ 25@Override 26public void handleMessage(Message msg) { 27super.handleMessage(msg); 28//tv.setText((String)(msg.getData().get("time"))); 29String str = stringFromJNI(); 30tv.setText(str); 31} 32}; 33 34@Override 35protected void onCreate(Bundle savedInstanceState) { 36super.onCreate(savedInstanceState); 37setContentView(R.layout.activity_main); 38 39// Example of a call to a native method 40tv = (TextView) findViewById(R.id.sample_text); 41tv.setText(stringFromJNI()); 42 43timer = new Timer(); 44TimerTask timerTask = new TimerTask() { 45@Override 46public void run() { 47count++; 48Message msg = new Message(); 49msg.getData().putCharSequence("time", String.valueOf(count)); 50mHandler.sendMessage(msg); 51} 52}; 53timer.schedule(timerTask, 1000, 1000); 54} 55 56@Override 57protected void onDestroy() { 58super.onDestroy(); 59timer.cancel(); 60timer = null; 61} 62 63/** 64* A native method that is implemented by the ‘native-lib‘ native library, 65* which is packaged with this application. 66*/ 67public native String stringFromJNI(); 68 }

View CodeNative侧
#include < jni.h> #include < string> #include < sstream> static int count = 0; extern "C"JNIEXPORT jstringJNICALL Java_com_example_grady_sectestone_MainActivity_stringFromJNI( JNIEnv *env, jobject /* this */) { std::string hello; count++; std::stringstream ss; if (count > 30) { hello = "Grady JNI Count > 30 :count = "; } else if (count < 30 & & count > = 0) { hello = "Grady JNI Check it : count = " ; } else { hello = "Grady Boom it !!!!! count < 0 : count = "; }ss < < count; std::string countStr; ss > > countStr; std::string result = hello + countStr; return env-> NewStringUTF(result.c_str()); }

在此是永远走不进彩蛋 count < 0 的逻辑中的;
后面将通过一定手段走入到彩蛋逻辑中

    推荐阅读