Hook13.java 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267
  1. package com.example.modifiermodule;
  2. import android.annotation.SuppressLint;
  3. import android.app.Application;
  4. import android.content.BroadcastReceiver;
  5. import android.content.Context;
  6. import android.content.Intent;
  7. import android.content.IntentFilter;
  8. import android.telephony.SubscriptionInfo;
  9. import java.io.File;
  10. import java.util.List;
  11. import java.util.Optional;
  12. import de.robv.android.xposed.XC_MethodHook;
  13. import de.robv.android.xposed.XposedHelpers;
  14. import de.robv.android.xposed.callbacks.XC_LoadPackage;
  15. public class Hook13 extends BaseHook {
  16. public Hook13(ClassLoader classLoader) {
  17. super(classLoader);
  18. }
  19. @SuppressLint("UnspecifiedRegisterReceiverFlag")
  20. public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) {
  21. if (!lpparam.packageName.equals("com.android.phone")) {
  22. return;
  23. }
  24. try {
  25. Class<?> PhoneApp = XposedHelpers.findClass("com.android.phone.PhoneApp", lpparam.classLoader);
  26. XposedHelpers.findAndHookMethod(PhoneApp, "onCreate", new XC_MethodHook() {
  27. @Override
  28. protected void afterHookedMethod(MethodHookParam param) throws Throwable {
  29. log("PhoneApp.onCreate");
  30. Application application = (Application) param.thisObject;
  31. File configFile = new File(application.getFilesDir(), "config.json");
  32. configFile.setReadOnly();
  33. setConfigFile(configFile);
  34. IntentFilter filter = new IntentFilter("com.example.modifier.sms");
  35. application.registerReceiver(new BroadcastReceiver() {
  36. @Override
  37. public void onReceive(Context context, Intent intent) {
  38. String sender = Optional.ofNullable(intent.getStringExtra("sender")).orElse("1234");
  39. String message = Optional.ofNullable(intent.getStringExtra("message")).orElse("test");
  40. Intent i1 = RcsHackTool.createSmsIntent(application, sender, message);
  41. i1.setAction("android.provider.Telephony.SMS_RECEIVED");
  42. application.sendBroadcast(i1);
  43. i1.setAction("android.provider.Telephony.SMS_DELIVER");
  44. application.sendBroadcast(i1);
  45. }
  46. }, filter);
  47. log("register broadcast receiver success");
  48. }
  49. });
  50. } catch (Exception e) {
  51. e.printStackTrace();
  52. }
  53. try {
  54. Class<?> PhoneInterfaceManager = XposedHelpers.findClass("com.android.phone.PhoneInterfaceManager", lpparam.classLoader);
  55. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getLine1NumberForDisplay", int.class, String.class, String.class, new XC_MethodHook() {
  56. @Override
  57. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  58. log("spoof PhoneInterfaceManager.getLine1NumberForDisplay");
  59. param.setResult(getProperty(PROP_NUMBER, ""));
  60. }
  61. });
  62. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getNetworkCountryIsoForPhone", int.class, new XC_MethodHook() {
  63. @Override
  64. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  65. log("spoof PhoneInterfaceManager.getNetworkCountryIsoForPhone");
  66. param.setResult(getProperty(PROP_COUNTRY, ""));
  67. }
  68. });
  69. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getImeiForSlot", int.class, String.class, String.class, new XC_MethodHook() {
  70. @Override
  71. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  72. log("spoof PhoneInterfaceManager.getImeiForSlot");
  73. param.setResult(getProperty(PROP_IMEI, ""));
  74. }
  75. });
  76. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getMeidForSlot", int.class, String.class, String.class, new XC_MethodHook() {
  77. @Override
  78. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  79. log("spoof PhoneInterfaceManager.getMeidForSlot");
  80. String imei = getProperty(PROP_IMEI, "");
  81. String meid = imei;
  82. if (imei.length() > 14) {
  83. meid = imei.substring(0, 14);
  84. }
  85. param.setResult(meid);
  86. }
  87. });
  88. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getSubscriptionSpecificCarrierId", int.class, new XC_MethodHook() {
  89. @Override
  90. protected void beforeHookedMethod(MethodHookParam param) {
  91. int carrierId = getIntProperty(PROP_CARRIER_ID, -1);
  92. if (carrierId != -1) {
  93. log("spoof PhoneInterfaceManager.getSubscriptionSpecificCarrierId");
  94. param.setResult(carrierId);
  95. }
  96. }
  97. });
  98. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getSubscriptionCarrierId", int.class, new XC_MethodHook() {
  99. @Override
  100. protected void beforeHookedMethod(MethodHookParam param) {
  101. log("spoof PhoneInterfaceManager.getSubscriptionCarrierId");
  102. int carrierId = getIntProperty(PROP_CARRIER_ID, -1);
  103. if (carrierId != -1) {
  104. param.setResult(carrierId);
  105. }
  106. }
  107. });
  108. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getDeviceIdWithFeature", String.class, String.class, new XC_MethodHook() {
  109. @Override
  110. protected void beforeHookedMethod(MethodHookParam param) {
  111. log("spoof PhoneInterfaceManager.getDeviceIdWithFeature");
  112. param.setResult(getProperty(PROP_IMEI, ""));
  113. }
  114. });
  115. XposedHelpers.findAndHookMethod(PhoneInterfaceManager, "getDeviceIdForPhone", String.class, new XC_MethodHook() {
  116. @Override
  117. protected void beforeHookedMethod(MethodHookParam param) {
  118. log("spoof PhoneInterfaceManager.getDeviceId");
  119. param.setResult(getProperty(PROP_IMEI, ""));
  120. }
  121. });
  122. } catch (Exception e) {
  123. e.printStackTrace();
  124. }
  125. Class<?> SystemProperties = XposedHelpers.findClass("android.os.SystemProperties", lpparam.classLoader);
  126. try {
  127. Class<?> SubscriptionController = XposedHelpers.findClass("com.android.internal.telephony.SubscriptionController", lpparam.classLoader);
  128. XposedHelpers.findAndHookMethod(SubscriptionController, "getPhoneNumberFromFirstAvailableSource", int.class, String.class, String.class, new XC_MethodHook() {
  129. @Override
  130. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  131. log("spoof SubscriptionController.getPhoneNumberFromFirstAvailableSource");
  132. param.setResult(getProperty(PROP_NUMBER, ""));
  133. }
  134. });
  135. XposedHelpers.findAndHookMethod(SubscriptionController, "getActiveSubscriptionInfoList", String.class, new XC_MethodHook() {
  136. @Override
  137. protected void afterHookedMethod(MethodHookParam param) throws Throwable {
  138. log("spoof SubscriptionController.getActiveSubscriptionInfoList");
  139. List<SubscriptionInfo> list = (List<SubscriptionInfo>) param.getResult();
  140. for (SubscriptionInfo info : list) {
  141. XposedHelpers.setObjectField(info, "mMcc", getProperty(PROP_MCC, ""));
  142. XposedHelpers.setObjectField(info, "mMnc", getProperty(PROP_MNC, ""));
  143. XposedHelpers.setObjectField(info, "mCountryIso", getProperty(PROP_COUNTRY, ""));
  144. XposedHelpers.setObjectField(info, "mIccId", getProperty(PROP_ICCID, ""));
  145. int carrierId = getIntProperty(PROP_CARRIER_ID, -1);
  146. if (carrierId != -1) {
  147. XposedHelpers.setObjectField(info, "mCarrierId", carrierId);
  148. }
  149. }
  150. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.sim.operator.iso-country", getProperty(PROP_COUNTRY, ""));
  151. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.sim.operator.numeric", getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  152. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.operator.numeric", getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  153. }
  154. });
  155. XposedHelpers.findAndHookMethod(SubscriptionController, "getActiveSubscriptionInfoList", String.class, String.class, new XC_MethodHook() {
  156. @Override
  157. protected void afterHookedMethod(MethodHookParam param) throws Throwable {
  158. log("spoof SubscriptionController.getActiveSubscriptionInfoList");
  159. List<SubscriptionInfo> list = (List<SubscriptionInfo>) param.getResult();
  160. for (SubscriptionInfo info : list) {
  161. XposedHelpers.setObjectField(info, "mMcc", getProperty(PROP_MCC, ""));
  162. XposedHelpers.setObjectField(info, "mMnc", getProperty(PROP_MNC, ""));
  163. XposedHelpers.setObjectField(info, "mCountryIso", getProperty(PROP_COUNTRY, ""));
  164. XposedHelpers.setObjectField(info, "mIccId", getProperty(PROP_ICCID, ""));
  165. int carrierId = getIntProperty(PROP_CARRIER_ID, -1);
  166. if (carrierId != -1) {
  167. XposedHelpers.setObjectField(info, "mCarrierId", carrierId);
  168. }
  169. }
  170. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.sim.operator.iso-country", getProperty(PROP_COUNTRY, ""));
  171. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.sim.operator.numeric", getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  172. XposedHelpers.callStaticMethod(SystemProperties, "set", "gsm.operator.numeric", getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  173. }
  174. });
  175. XposedHelpers.findAndHookMethod(SubscriptionController, "getSimStateForSlotIndex", int.class, new XC_MethodHook() {
  176. @Override
  177. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  178. log("spoof SubscriptionController.getSimStateForSlotIndex");
  179. param.setResult(5);
  180. }
  181. });
  182. } catch (Exception e) {
  183. e.printStackTrace();
  184. }
  185. try {
  186. Class<?> PhoneSubInfoController = XposedHelpers.findClass("com.android.internal.telephony.PhoneSubInfoController", lpparam.classLoader);
  187. log("PhoneSubInfoController: " + lpparam.packageName);
  188. XposedHelpers.findAndHookMethod(PhoneSubInfoController, "getIccSerialNumberForSubscriber", int.class, String.class, String.class, new XC_MethodHook() {
  189. @Override
  190. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  191. log("spoof PhoneSubInfoController.getIccSerialNumberForSubscriber");
  192. param.setResult(getProperty(PROP_ICCID, ""));
  193. }
  194. });
  195. XposedHelpers.findAndHookMethod(PhoneSubInfoController, "getSubscriberIdForSubscriber", int.class, String.class, String.class, new XC_MethodHook() {
  196. @Override
  197. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  198. log("spoof PhoneSubInfoController.getSubscriberIdForSubscriber");
  199. param.setResult(getProperty(PROP_IMSI, ""));
  200. }
  201. });
  202. XposedHelpers.findAndHookMethod(PhoneSubInfoController, "getDeviceId", String.class, new XC_MethodHook() {
  203. @Override
  204. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  205. log("spoof PhoneSubInfoController.getDeviceIdForPhone");
  206. param.setResult(getProperty(PROP_IMEI, ""));
  207. }
  208. });
  209. XposedHelpers.findAndHookMethod(PhoneSubInfoController, "getDeviceIdForPhone", int.class, String.class, String.class, new XC_MethodHook() {
  210. @Override
  211. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  212. log("spoof PhoneSubInfoController.getDeviceIdForPhone");
  213. param.setResult(getProperty(PROP_IMEI, ""));
  214. }
  215. });
  216. } catch (Exception e) {
  217. e.printStackTrace();
  218. }
  219. XposedHelpers.findAndHookMethod(SystemProperties, "get", String.class, new XC_MethodHook() {
  220. @Override
  221. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  222. String key = (String) param.args[0];
  223. if ("gsm.sim.operator.iso-country".equals(key)) {
  224. log("spoof SystemProperties.get(" + key + ")");
  225. param.setResult(getProperty(PROP_COUNTRY, ""));
  226. } else if ("gsm.sim.operator.numeric".equals(key)) {
  227. log("spoof SystemProperties.get(" + key + ")");
  228. param.setResult(getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  229. } else if ("gsm.operator.numeric".equals(key)) {
  230. log("spoof SystemProperties.get(" + key + ")");
  231. param.setResult(getProperty(PROP_MCC, "") + getProperty(PROP_MNC, ""));
  232. }
  233. }
  234. });
  235. try {
  236. Class<?> CarrierResolver = XposedHelpers.findClass("com.android.internal.telephony.CarrierResolver", lpparam.classLoader);
  237. XposedHelpers.findAndHookMethod(CarrierResolver, "getCarrierIdFromSimMccMnc", new XC_MethodHook() {
  238. @Override
  239. protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
  240. log("spoof CarrierResolver.getCarrierIdFromSimMccMnc");
  241. int carrierId = getIntProperty(PROP_CARRIER_ID, -1);
  242. if (carrierId != -1) {
  243. param.setResult(carrierId);
  244. }
  245. }
  246. });
  247. } catch (Exception e) {
  248. e.printStackTrace();
  249. }
  250. }
  251. }