Skip to content

Instantly share code, notes, and snippets.

@taozhiyu
Created July 22, 2022 02:12
Show Gist options
  • Save taozhiyu/6a90909c22db9b7d019e46d4c931662a to your computer and use it in GitHub Desktop.
Save taozhiyu/6a90909c22db9b7d019e46d4c931662a to your computer and use it in GitHub Desktop.
launch wechat debugger page
// frida -U 微信 -l wechat_debugger.js --no-pause
// 上面的【微信】使用frida-ps -U命令查看系统显示的是包名还是应用名
// 附上微信的包名:com.tencent.mm
if(Java.available) {
Java.perform(function(){
const Ordinary_Class = Java.use("com.tencent.mm.plugin.biz.b.c");
if(Ordinary_Class != undefined) {
Ordinary_Class.cXc.implementation = ()=>!0
const context = Java.use("android.app.ActivityThread").currentApplication().getApplicationContext();
Java.scheduleOnMainThread(function() {
const intent = Java.use("android.content.Intent").$new(context, Java.use("com.tencent.mm.plugin.brandservice.ui.timeline.BizTestUI").$new().getClass());
intent.setFlags(0x10000000);
context.startActivity(intent);
})
} else {
console.log("Ordinary_Class: undefined");
}
});
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment