cloudfox-coreshift-core 2.13.0

Low-level Linux and Android systems primitives for CoreShift (CloudFox)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

use coreshift_core::android::dex::{find_transaction_code, resolve_uid_observer_codes};

fn main() {
    let jar = std::env::args()
        .nth(1)
        .unwrap_or_else(|| "/system/framework/framework.jar".to_string());
    let am = "Landroid/app/IActivityManager$Stub;";
    let uid_obs = "Landroid/app/IUidObserver$Stub;";

    println!("jar = {jar}");
    for (name, desc, field) in [
        ("registerUidObserver", am, "TRANSACTION_registerUidObserver"),
        (
            "registerUidObserverForUids",
            am,
            "TRANSACTION_registerUidObserverForUids",
        ),
        (
            "unregisterUidObserver",
            am,
            "TRANSACTION_unregisterUidObserver",
        ),
        ("onUidGone", uid_obs, "TRANSACTION_onUidGone"),
        ("onUidActive", uid_obs, "TRANSACTION_onUidActive"),
        ("onUidIdle", uid_obs, "TRANSACTION_onUidIdle"),
        (
            "onUidStateChanged",
            uid_obs,
            "TRANSACTION_onUidStateChanged",
        ),
        (
            "onUidProcAdjChanged",
            uid_obs,
            "TRANSACTION_onUidProcAdjChanged",
        ),
        (
            "onUidCachedChanged",
            uid_obs,
            "TRANSACTION_onUidCachedChanged",
        ),
    ] {
        match find_transaction_code(&jar, desc, field) {
            Some(c) => println!("OK   {name:32} {c}"),
            None => println!("MISS {name:32}"),
        }
    }

    match resolve_uid_observer_codes() {
        Some(codes) => println!(
            "resolver: reg={} unreg={} for_uids={:?} gone={} active={} idle={} cached={} state={} adj={}",
            codes.register_code,
            codes.unregister_code,
            codes.register_for_uids_code,
            codes.on_gone_code,
            codes.on_active_code,
            codes.on_idle_code,
            codes.on_cached_code,
            codes.on_state_code,
            codes.on_adj_code,
        ),
        None => println!("resolver: FAILED (hardcoded /system path — needs device run)"),
    }
}