x1ongzhu 1 anno fa
parent
commit
e6efd28ad6
4 ha cambiato i file con 200 aggiunte e 4 eliminazioni
  1. 1 1
      injects/sendsms.js
  2. 99 1
      scripts/_spoof.js
  3. 1 1
      scripts/sendsms.js
  4. 99 1
      scripts/spoof.js

+ 1 - 1
injects/sendsms.js

@@ -4,7 +4,7 @@ const device = await frida.getUsbDevice()
 const phoneProcess = await device.getProcess("com.android.phone")
 const phoneProcess = await device.getProcess("com.android.phone")
 const session = await device.attach(phoneProcess.pid)
 const session = await device.attach(phoneProcess.pid)
 const script = await session.createScript(
 const script = await session.createScript(
-    fs.readFileSync("../scripts/sendsms.js")
+    fs.readFileSync("scripts/sendsms.js")
 )
 )
 script.message.connect(message => {
 script.message.connect(message => {
     console.log("[*] Message:", message)
     console.log("[*] Message:", message)

+ 99 - 1
scripts/_spoof.js

@@ -197,7 +197,105 @@ Java.perform(function () {
     const aays = Java.use("aays")
     const aays = Java.use("aays")
     aays.d.overload("int", "boolean").implementation = function (i, z) {
     aays.d.overload("int", "boolean").implementation = function (i, z) {
         console.log("aays.d", i, z, Object.keys(this.f.value))
         console.log("aays.d", i, z, Object.keys(this.f.value))
-       
+
         return number
         return number
     }
     }
+
+    const aoor = Java.use("aoor")
+    aoor.h.overload("android.content.Context", "int").implementation =
+        function (c, i) {
+            const _i = this.h(c, i)
+            console.log("aoor.h", c, i, _i)
+            return _i
+        }
+
+    const SetAsterismConsentRequest = Java.use(
+        "com.google.android.gms.asterism.SetAsterismConsentRequest"
+    )
+    SetAsterismConsentRequest.$init.overload(
+        //int i, int i2, int i3, int[] iArr, Long l, int i4, Bundle bundle, int i5, String str, String str2, String str3, String str4, String str5, String str6, String str7, String str8
+        "int",
+        "int",
+        "int",
+        "[I",
+        "java.lang.Long",
+        "int",
+        "android.os.Bundle",
+        "int",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String"
+    ).implementation = function (
+        i,
+        i2,
+        i3,
+        iArr,
+        l,
+        i4,
+        bundle,
+        i5,
+        str,
+        str2,
+        str3,
+        str4,
+        str5,
+        str6,
+        str7,
+        str8
+    ) {
+        console.log("SetAsterismConsentRequest.$init")
+
+        console.log(
+            `i: ${i}, i2: ${i2}, i3: ${i3}, iArr: ${iArr}, l: ${l}, i4: ${i4}, i5: ${i5}, str: ${str}, str2: ${str2}, str3: ${str3}, str4: ${str4}, str5: ${str5}, str6: ${str6}, str7: ${str7}, str8: ${str8}`
+        )
+        // print bundle
+        const keySet = bundle.keySet().toArray()
+        for (let i = 0; i < keySet.length; i++) {
+            const key = keySet[i]
+            console.log(`key: ${key}, value: ${bundle.get(key)}`)
+        }
+
+        return this.$init(
+            i,
+            i2,
+            i3,
+            iArr,
+            l,
+            i4,
+            bundle,
+            i5,
+            str,
+            str2,
+            str3,
+            str4,
+            str5,
+            str6,
+            str7,
+            str8
+        )
+    }
+
+    const SetAsterismConsentResponse = Java.use(
+        "com.google.android.gms.asterism.SetAsterismConsentResponse"
+    )
+    SetAsterismConsentResponse.$init.overload(
+        "int",
+        "java.lang.String",
+        "java.lang.String"
+    ).implementation = function (i, str, str2) {
+        console.log(
+            Java.use("android.util.Log").getStackTraceString(
+                Java.use("java.lang.Throwable").$new()
+            )
+        )
+
+        console.log("SetAsterismConsentResponse.$init")
+        console.log(`i: ${i}, str: ${str}, str2: ${str2}`)
+        return this.$init(i, str, str2)
+    }
 })
 })

+ 1 - 1
scripts/sendsms.js

@@ -20,7 +20,7 @@ Java.perform(() => {
             const intent = RcsHackTool.createSmsIntent(
             const intent = RcsHackTool.createSmsIntent(
                 instance.mContext.value,
                 instance.mContext.value,
                 "3456",
                 "3456",
-                "Your Messenger verification code is G-123456",
+                "Your Messenger verification code is G-040263",
             )
             )
             // instance.mContext.value.sendBroadcast(intent)
             // instance.mContext.value.sendBroadcast(intent)
 
 

+ 99 - 1
scripts/spoof.js

@@ -197,7 +197,105 @@ Java.perform(function () {
     const aays = Java.use("aays")
     const aays = Java.use("aays")
     aays.d.overload("int", "boolean").implementation = function (i, z) {
     aays.d.overload("int", "boolean").implementation = function (i, z) {
         console.log("aays.d", i, z, Object.keys(this.f.value))
         console.log("aays.d", i, z, Object.keys(this.f.value))
-       
+
         return number
         return number
     }
     }
+
+    const aoor = Java.use("aoor")
+    aoor.h.overload("android.content.Context", "int").implementation =
+        function (c, i) {
+            const _i = this.h(c, i)
+            console.log("aoor.h", c, i, _i)
+            return _i
+        }
+
+    const SetAsterismConsentRequest = Java.use(
+        "com.google.android.gms.asterism.SetAsterismConsentRequest"
+    )
+    SetAsterismConsentRequest.$init.overload(
+        //int i, int i2, int i3, int[] iArr, Long l, int i4, Bundle bundle, int i5, String str, String str2, String str3, String str4, String str5, String str6, String str7, String str8
+        "int",
+        "int",
+        "int",
+        "[I",
+        "java.lang.Long",
+        "int",
+        "android.os.Bundle",
+        "int",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String",
+        "java.lang.String"
+    ).implementation = function (
+        i,
+        i2,
+        i3,
+        iArr,
+        l,
+        i4,
+        bundle,
+        i5,
+        str,
+        str2,
+        str3,
+        str4,
+        str5,
+        str6,
+        str7,
+        str8
+    ) {
+        console.log("SetAsterismConsentRequest.$init")
+
+        console.log(
+            `i: ${i}, i2: ${i2}, i3: ${i3}, iArr: ${iArr}, l: ${l}, i4: ${i4}, i5: ${i5}, str: ${str}, str2: ${str2}, str3: ${str3}, str4: ${str4}, str5: ${str5}, str6: ${str6}, str7: ${str7}, str8: ${str8}`
+        )
+        // print bundle
+        const keySet = bundle.keySet().toArray()
+        for (let i = 0; i < keySet.length; i++) {
+            const key = keySet[i]
+            console.log(`key: ${key}, value: ${bundle.get(key)}`)
+        }
+
+        return this.$init(
+            i,
+            i2,
+            i3,
+            iArr,
+            l,
+            i4,
+            bundle,
+            i5,
+            str,
+            str2,
+            str3,
+            str4,
+            str5,
+            str6,
+            str7,
+            str8
+        )
+    }
+
+    const SetAsterismConsentResponse = Java.use(
+        "com.google.android.gms.asterism.SetAsterismConsentResponse"
+    )
+    SetAsterismConsentResponse.$init.overload(
+        "int",
+        "java.lang.String",
+        "java.lang.String"
+    ).implementation = function (i, str, str2) {
+        console.log(
+            Java.use("android.util.Log").getStackTraceString(
+                Java.use("java.lang.Throwable").$new()
+            )
+        )
+
+        console.log("SetAsterismConsentResponse.$init")
+        console.log(`i: ${i}, str: ${str}, str2: ${str2}`)
+        return this.$init(i, str, str2)
+    }
 })
 })