Содержание
Limitations
The tool was created for and tested for a limitted amount of Android applications, tweaking the code may be necessary to make it work under specific enviroment conditions.
The tool does not attempt to bypass integrity checks.
Requirements
- python 2.7
- apktool
- openssl
- frida ( frida-gadget binary)
- zipalign
- keytool
- apksigner
To complete the task, you will also need:
- Android Debug Bridge (part of Android SDK)
- Android emulation (i.e.: Genymotion).
- Proxy (i.e.: Burpsuite).
Usage
./gadget-injector.py -h
-a, --target-apk The target apk file.
-c, --proxy-cert The proxy's CA certificate file in DER format.
-g, --frida-gadget The frida-gadget Android library.
-r, --device-arch The device's architecture (i.e: x86).
./gadget-injector.py -a app.apk -c cacert.der -g frida-gadget-12.2.26-android-x86.so -r x86
[i] Converting DER to PEM...
[i] Decoding with apktool...
[i] Tampering yml file...
[ ] Injecting frida-gadget...
[ ] Injecting smali hook...
[i] Re-building application
[i] Zipaligning re-builded app
[ ] Creating keystore...
[ ] Signing with apksigner...
[ ] TAMPERED APK HERE -> path/to/apk-aligned-signed.apk
After that, you need to:
- Install tampered apk on device.
- Configure device to use proxy (i.e.: Burpsuite)
- Run atmpered application.
- Run
frida -U gadget -l frida-sslpinning.js
- Check proxy for intercepted traffic.
More on
What does it do?
- Reverse engineer application with apktool.
- Inject frida-gadget.
- Inject smali hook.
- Increase application version.
- Re-build application with apktool.
- Align application with zipalign.
- Sign the application with apksigner.
После двух практически лет я решил сделать новый «пост» с обновленным smeghack’ом.
Инструкция
- Перекиньте содержимое архива в любую папку.
- SmegHack.lua Перекинуть по пути …/steamapps/common/GarrysMod/garrysmod/lua
- Перезайти в игру
- Зайти на любой сервер
- Открываем приложение Injector и жмем кнопку «Add». Выбираем там dll файл «SmegGMHack.dll» и жмем кнопку Inject
- Жмем кнопку Insert и играем!
Функции
- ESP
- Aim
- Bhop
- Еще кучу прелестей 🙂
Все, спасибо за прочтение. До скорого!