Multipoint Hook reversing method for Android reinforcing application

Abstract

The invention discloses a multipoint Hook reversing method for an Android reinforcing application, and belongs to the field of information security. The method comprises the following specific steps that firstly, a certain tested Android application is loaded to an internal storage; a plurality of different function entry points are selected for Hook operation at the same time in the loading process, and corresponding Hook points are loaded for all functions respectively; when a virtual machine executes different functions, the class structures ClassLoader called by the functions are called through the Hook points; then, the deviation positions of the functions and the classes of the functions in the internal storage are acquired through the class structures ClassLoader, dex source codes of the functions of a program are acquired, a dex file is formed, and restoration and perfection are carried out in the internal storage; finally, the dex file obtained after restoration and perfection is dumped from the internal storage. The method has the advantages that the function entry points are hooked dynamically in the operating process of the application to be analyzed, the defect that dex of a program cannot be completely and accurately acquired through a traditional technology can be avoided, and the complex dex codes hard for a traditional analysis method to obtain are obtained.

Description

technical field [0001] The invention belongs to the field of information security, relates to reverse engineering and mobile terminal security, in particular to a multi-point Hook reverse method for Android reinforcement applications. Background technique [0002] In the past three years, the mobile Internet has developed rapidly in an explosive form, and the sales of smart terminals of various brands have also increased exponentially. According to the statistics of "Strategy Analytics 2015Q1", in 2014, the global smart phone shipments increased by an average of 30% annually, reaching 1.3 billion units. [0003] Against the backdrop of the rise of the mobile Internet, the Android platform dominates the entire mobile Internet market in terms of market share. According to the latest third-quarter report of research firm Strategy Analytics, Android ranks first in the mobile operating system market with a market share of 81.2%. The shipment volume was 268 million, compared wit...

AI Technical Summary

Problems solved by technology

[0008] Aiming at the traditional Android application analysis method, the Android application APK obtained by reverse analysis cannot be installed in the face of dynamic reinforcement technology, and the function code in the running dex file is incorrect or empty, etc., and proposes a method for Android Multi-point hook reverse method for hardening applications

Images