https://github.com/Mrack/TInjector

劫持Zygote在App启动前注入so
https://github.com/Mrack/TInjector

android frida hacker inject injector

Last synced: about 1 year ago
JSON representation

劫持Zygote在App启动前注入so

• Host: GitHub
• URL: https://github.com/Mrack/TInjector
• Owner: Mrack
• License: gpl-3.0
• Created: 2024-05-14T17:12:29.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-06-12T09:16:23.000Z (about 2 years ago)
• Last Synced: 2024-06-12T14:24:15.605Z (about 2 years ago)
• Topics: android, frida, hacker, inject, injector
• Language: C++
• Homepage:
• Size: 335 KB
• Stars: 100
• Watchers: 3
• Forks: 36
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# TInjector

劫持Zygote实现App启动前注入so

![1](https://github.com/Mrack/TInjector/assets/15072171/b6afd749-55c8-4a9b-872a-4001fd3772fa)

## Features

- Zygote spawn模式

- Android 9 - 13

- Arm64-v8a

- remap 隐藏 so

- 移除elf头 隐藏 so

- soinfo 隐藏 so

## TODO

- 支持usap模式

- ...

## Build and Usage

Build:

  ```shell

  git clone https://github.com/mrack/TInjector.git

  cd TInjector

  ndk-build (Add ndk-build to your env variables)

  adb shell mkdir /data/local/tmp/inject

  adb push libtcore.so /data/local/tmp/inject/

  adb push tinjector /data/local/tmp/inject/

  ```

  Usage:

   ```shell

  su

  cd /data/local/tmp/inject

  chmod 777 libtcore.so

  chmod +x tinjector

  ./tinjector -h

  

  Usage: ./tinject --hide --hide1 -f -p   

  Options:

  -p    Inject so to the specified package.

  -P    Inject so to the specified pid.

  --hide              Hide the injected module.

  --hide1             Hide the injected module. (soinfo) beta

  -h                  Show this help.

  -f                  Spwan a new process and inject to it. only for android app.

  ```