Using IDAPython to Make Your Life Easier: Part 1 - Setup Environment

Background

As a reverse engineer, I often use IDA Pro in my daily work. This is not surprising, as IDA Pro is the industry standard (although alternatives such as radare2 and Hopper are becoming increasingly popular). One of the most powerful features of IDA that I recommended all reverse engineers is the Python extension, aptly named 'IDAPython', which exposes a large number of IDA …

More
Markdown 在 Pelican上的的支持情况

Pelican is a static site generator, written in Python. Highlights include: - Write your content directly with your editor of choice in reStructuredText or Markdown formats - Includes a simple CLI tool to (re)generate your site - Easy to interface with distributed version control systems and web hooks - Completely static output is easy to host anywhere

Pelican’s feature highlights include: - Articles (e.g., blog posts …

More
Android Logcat Usage

zsh:no matches found

因为zsh缺省情况下始终自己解释这个firefox*，而不会传递给adb logcat来解释。 在~/.zshrc中加入: setopt no_nomatch, 然后进行source .zshrc命令

More
[Android]追书神器：章节内容解密分析

章节内容解密

package com.ushaqi.zhuishushenqi.reader.txtreader.activity;
public class ReaderNewActivity{
    private void a(FineBookConfigBean bean){

    }
}

示例数据

// 章节解密密码
auth.zhuishushenqi.com
productLine=1&
startSeqId=2669&
cp=567b60b6ea95f6ea479a177e&token=tyU2QCjdYHCNyeF8e6476ef1f13b652d13d25d2310eeca5f69e15570325cbac7fd0286494441df9829eb2de8a8b333a98f328b4ba39c4b5475118db133d1742945d11d88087f117c8a4227dce946dd92f13f914076840c97&
bookId=516531015a29ee6a5e0000e1&
chapterNum=1

More
Frida : 在Android上简单使用

环境搭建

frida-server : 12.8.19

下载frida-server并解压

xz -d frida-server-12.8.19-android-arm64.xz
adb push frida-server-12.8.19-android-arm64 /data/local/tmp/frida-server-arm64

修改权限并启动frida-server

adb shell
cd /data/local/tmp
chown root:root frida-server-arm64
chmod a+x frida-server-arm64
./frida-server-arm64

遇到的问题

Unable to preload: Unable to access process with pid 402 …

More
Kotlin : 使用 VSCode 运行代码

安装扩展

  • Kotlin Language
  • Code Runner

设置kotlinc路径

$ANDROID_STUDIO/plugins/Kotlin/kotlinc/bin
kotlinc -version

安装JDK

JDK安装完成后，设置路径，使其可以在命令行找到

java -version

More
Linux Command : grep & sed

如何利用grep和sed实现搜索和替换

grep -Erl "M\\('local" .|xargs sed -Ei "" "s/M\\('local/M\\('remote/g"

grep -Erl "http://loca" .|xargs sed -Ei "" "s/http:\/\/local/http:\/\/remote/g"

grep

  • -E 将样式为延伸的普通表示法来使用
  • -r 此参数的效果和指定“-d recurse”参数相同 …

More
Linux常用命令工具使用笔记

find

在当前目录下查找某个文件：

find -name "lib*.a"

rsync

Linux 下合并两个目录，软连接也一起同步。

rsync -K -a 源目录  被覆盖目录

比如：

rsync -K -a dir1/ dir2/

统计文件个数

Linux: ls -1 data/devices|wc …

More