方法1:
需要frida
app: fenghuangxinwen
github(码云)搜索 frida_dump, frida脱壳工具挺多的, 这个用着还可以, FRIDA-DEXDump脱不掉的它也能搞定:
![](https://img.haomeiwen.com/i15354286/a7cf9d010298da95.png)
看readme, 手机开启frida服务, 终端输入命令
![](https://img.haomeiwen.com/i15354286/68847845b63bc719.png)
等一会就出现了脱壳的dex文件, 路径也显示了, 用re文件管理器打开:
![](https://img.haomeiwen.com/i15354286/f7ab3663145f9487.png)
![](https://img.haomeiwen.com/i15354286/17a9d7144f1703b8.png)
返回上一层, 压缩这个文件夹:
![](https://img.haomeiwen.com/i15354286/7689539c4745db89.png)
会弹出完成的状态, 点击查看, 然后剪切到/data/local/tmp
![](https://img.haomeiwen.com/i15354286/a15121ac12c3c200.png)
![](https://img.haomeiwen.com/i15354286/ef325a263a0a183d.png)
![](https://img.haomeiwen.com/i15354286/68345db4c992bb40.png)
pull到电脑,解压, 然后拖到jadx , 就OK了
![](https://img.haomeiwen.com/i15354286/b38516bfeb79fa6f.png)
![](https://img.haomeiwen.com/i15354286/7cef5bf9215419b5.png)
![](https://img.haomeiwen.com/i15354286/1c99021eb2ecaf9a.png)
方法2:
无需frida, 也不用打开App, 适用于这种既加固又root检测的, 无法打开, 方法1 就无能了,
![](https://img.haomeiwen.com/i15354286/81ea060ab4101be4.png)
![](https://img.haomeiwen.com/i15354286/cd25be67826cbe1e.png)
安装地址: https://github.com/CodingGay/BlackDex
![](https://img.haomeiwen.com/i15354286/dc3c5905e9facc96.png)
直接打开blackDex, 选中加固app(第一次我遇到没有这个App的图标, 原来是我安装的64, 换成32的就有了)
![](https://img.haomeiwen.com/i15354286/3276b1fe762c7682.png)
![](https://img.haomeiwen.com/i15354286/e98673a823060571.png)
![](https://img.haomeiwen.com/i15354286/061faee919517bef.png)
稍等片刻, OK了, pull到电脑上, jadx打开看看:
(不用看了, 我没找到关键字🤣...)
网友评论