/TInjector

劫持Zygote在App启动前注入so

Primary LanguageC++GNU General Public License v3.0GPL-3.0

TInjector

劫持Zygote实现App启动前注入so 1

Features

  • Zygote spawn模式
  • Android 9 - 13
  • Arm64-v8a
  • remap 隐藏 so
  • 移除elf头 隐藏 so
  • soinfo 隐藏 so

TODO

  • 支持usap模式
  • ...

Build and Usage

Build:

git clone https://github.com/mrack/TInjector.git
cd TInjector
ndk-build (Add ndk-build to your env variables)
adb shell mkdir /data/local/tmp/inject
adb push libtcore.so /data/local/tmp/inject/
adb push tinjector /data/local/tmp/inject/

Usage:

su
cd /data/local/tmp/inject
chmod 777 libtcore.so
chmod +x tinjector
./tinjector -h

Usage: ./tinject --hide --hide1 -f -p <package name>  <so path>
Options:
-p <pkg> <so path>  Inject so to the specified package.
-P <pid> <so path>  Inject so to the specified pid.
--hide              Hide the injected module.
--hide1             Hide the injected module. (soinfo) beta
-h                  Show this help.
-f                  Spwan a new process and inject to it. only for android app.