MD5 校验值:facd8e3913e14e36e7daf9e69fbd45cb
KillerApplication.java 文件包含反编译后的源代码,请注意,该内容仅供学习和参考使用,不得用于非法用途。
package bin.mt.signature; import android.app.Application; import android.content.pm.PackageInfo; import android.content.pm.PackageManager; import android.content.pm.Signature; import android.os.Build; import android.os.Environment; import android.os.Parcel; import android.os.Parcelable; import android.util.Base64; import java.io.BufferedReader; import java.io.File; import java.io.FileOutputStream; import java.io.FileReader; import java.io.IOException; import java.io.InputStream; import java.lang.reflect.Field; import java.util.Map; import java.util.zip.ZipEntry; import java.util.zip.ZipFile; import org.lsposed.hiddenapibypass.HiddenApiBypass; public class KillerApplication extends Application { public static final String PACKAGE = "it.Ettore.spesaelettrica"; public static final String SIGNATURE = "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"; public static final String URL = "https://github.com/L-JINBIN/ApkSignatureKillerEx"; static { String str = PACKAGE; killPM(str, SIGNATURE); killOpen(str); } private static Field findField(Class<?> cls, String str) throws NoSuchFieldException { try { Field declaredField = cls.getDeclaredField(str); declaredField.setAccessible(true); return declaredField; } catch (NoSuchFieldException e) { while (true) { cls = cls.getSuperclass(); if (cls == null || cls.equals(Object.class)) { break; } try { Field declaredField2 = cls.getDeclaredField(str); declaredField2.setAccessible(true); return declaredField2; } catch (NoSuchFieldException unused) { } } throw e; } } private static String getApkPath(String str) { String str2; try { BufferedReader bufferedReader = new BufferedReader(new FileReader("/proc/self/maps")); do { try { String readLine = bufferedReader.readLine(); if (readLine == null) { bufferedReader.close(); return null; } str2 = readLine.split("\\s+")[r1.length - 1]; } finally { } } while (!isApkPath(str, str2)); bufferedReader.close(); return str2; } catch (Exception e) { throw new RuntimeException(e); } } private static File getDataFile(String str) { String name = Environment.getExternalStorageDirectory().getName(); if (name.matches("\\d+")) { File file = new File("/data/user/" + name + "/" + str); if (file.canWrite()) { return file; } } return new File("/data/data/" + str); } private static native void hookApkPath(String str, String str2); private static boolean isApkPath(String str, String str2) { if (str2.startsWith("/") && str2.endsWith(".apk")) { String[] split = str2.substring(1).split("/", 6); int length = split.length; if (length == 4 || length == 5) { if (split[0].equals("data") && split[1].equals("app") && split[length - 1].equals("base.apk")) { return split[length - 2].startsWith(str); } if (split[0].equals("mnt") && split[1].equals("asec") && split[length - 1].equals("pkg.apk")) { return split[length - 2].startsWith(str); } } else if (length == 3) { if (split[0].equals("data") && split[1].equals("app")) { return split[2].startsWith(str); } } else if (length == 6 && split[0].equals("mnt") && split[1].equals("expand") && split[3].equals("app") && split[5].equals("base.apk")) { return split[4].endsWith(str); } } return false; } private static void killOpen(String str) { try { System.loadLibrary("SignatureKiller"); String apkPath = getApkPath(str); if (apkPath == null) { System.err.println("Get apk path failed"); return; } File file = new File(apkPath); File file2 = new File(getDataFile(str), "origin.apk"); try { ZipFile zipFile = new ZipFile(file); try { ZipEntry entry = zipFile.getEntry("assets/SignatureKiller/origin.apk"); if (entry == null) { System.err.println("Entry not found: assets/SignatureKiller/origin.apk"); zipFile.close(); return; } if (!file2.exists() || file2.length() != entry.getSize()) { InputStream inputStream = zipFile.getInputStream(entry); try { FileOutputStream fileOutputStream = new FileOutputStream(file2); try { byte[] bArr = new byte[102400]; while (true) { int read = inputStream.read(bArr); if (read == -1) { break; } else { fileOutputStream.write(bArr, 0, read); } } fileOutputStream.close(); if (inputStream != null) { inputStream.close(); } } finally { } } finally { } } zipFile.close(); hookApkPath(file.getAbsolutePath(), file2.getAbsolutePath()); } finally { } } catch (IOException e) { throw new RuntimeException(e); } } catch (Throwable unused) { System.err.println("Load SignatureKiller library failed"); } } private static void killPM(final String str, String str2) { final Signature signature = new Signature(Base64.decode(str2, 2)); final Parcelable.Creator creator = PackageInfo.CREATOR; try { findField(PackageInfo.class, "CREATOR").set(null, new Parcelable.Creator<PackageInfo>() { @Override public PackageInfo createFromParcel(Parcel parcel) { Signature[] apkContentsSigners; PackageInfo packageInfo = (PackageInfo) creator.createFromParcel(parcel); if (packageInfo.packageName.equals(str)) { if (packageInfo.signatures != null && packageInfo.signatures.length > 0) { packageInfo.signatures[0] = signature; } if (Build.VERSION.SDK_INT >= 28 && packageInfo.signingInfo != null && (apkContentsSigners = packageInfo.signingInfo.getApkContentsSigners()) != null && apkContentsSigners.length > 0) { apkContentsSigners[0] = signature; } } return packageInfo; } @Override public PackageInfo[] newArray(int i) { return (PackageInfo[]) creator.newArray(i); } }); if (Build.VERSION.SDK_INT >= 28) { HiddenApiBypass.addHiddenApiExemptions("Landroid/os/Parcel;", "Landroid/content/pm", "Landroid/app"); } try { Object obj = findField(PackageManager.class, "sPackageInfoCache").get(null); obj.getClass().getMethod("clear", new Class[0]).invoke(obj, new Object[0]); } catch (Throwable unused) { } try { ((Map) findField(Parcel.class, "mCreators").get(null)).clear(); } catch (Throwable unused2) { } try { ((Map) findField(Parcel.class, "sPairedCreators").get(null)).clear(); } catch (Throwable unused3) { } } catch (Exception e) { throw new RuntimeException(e); } } }