import codecs

import frida

from flask import Flask, request

from asgiref.wsgi import WsgiToAsgi

from time import sleep

import json

import uvicorn

def onMessage(message, data):

    #print(message)

    if message["type"] == 'send':

        print(u"[*] {0}".format(message['payload']))

    else:

        print(message)

app = Flask(import_name=__name__)

asgi_app = WsgiToAsgi(app)

device = frida.get_device_manager().add_remote_device("127.0.0.1:1234")

pkg = "com.test.activ"  #包名

pid = device.spawn([pkg])

session = device.attach(pid)

with codecs.open('./str_dec.js', 'r', encoding='utf-8') as f:

    source = f.read()

script = session.create_script(source)

script.on('message', onMessage)

script.load()#注入脚本

device.resume(pid)

sleep(1)#这里得 sleep 1 秒，来让脚本加载完成

rpc = script.exports_sync

# 通过 methods 设置 GET 请求

@app.route('/strdec', methods=["GET"])

def json_request():

    # 接收处理 json 数据请求

    data = eval(request.args.get("body"))

    print(f'[*] receive {data}')

    print(type(data))

    method = data["method"]

    result = None

    if method == "bc":#处理函数名为 bc 的字符串加密函数

        argv1 = data['argv1']

        argv2 = data['argv2']

        argv3 = data['argv3']

        argv4 = data['argv4']

        result = rpc.stringDecrypt(argv1,argv2,argv3,argv4)

    return result

uvicorn.run(asgi_app,host='127.0.0.1', port=8080)

# coding=utf-8

from com.pnfsoftware.jeb.client.api import IScript, IconType, ButtonGroupType

from com.pnfsoftware.jeb.core import RuntimeProjectUtil

from com.pnfsoftware.jeb.core.units.code.java import IJavaSourceUnit

from com.pnfsoftware.jeb.core.units.code import ICodeUnit, ICodeItem

from com.pnfsoftware.jeb.core.output.text import ITextDocument

from com.pnfsoftware.jeb.core.units.code.java import IJavaAssignment, IJavaSourceUnit, IJavaStaticField, IJavaNewArray, IJavaConstant, IJavaCall, IJavaField, IJavaMethod, IJavaClass

from com.pnfsoftware.jeb.core.events import JebEvent, J

from com.pnfsoftware.jeb.core.util import DecompilerHelper

from com.pnfsoftware.jeb.util.net import Net

import json

# 解密字符串函数的类名以及方法名

methodName = ['Lcom/test/Activity;', 'bc']

class dec_str_test(IScript):

    def run(self, ctx):

        print('start deal with strings')

        self.ctx = ctx

        engctx = ctx.getEnginesContext()

        if not engctx:

            print('Back-end engines not initialized')

            return

        projects = engctx.getProjects()

        if not projects:

            print('There is no opened project')

            return

        units = RuntimeProjectUtil.findUnitsByType(projects[0], IJavaSourceUnit, False)

        for unit in units:

            javaClass = unit.getClassElement()

            print('[+] decrypt:' + javaClass.getName())

            self.cstbuilder = unit.getFactories().getConstantFactory()

            #self.elebuilder = unit.getFactories().getElementFactory()

            self.processClass(javaClass)

            unit.notifyListeners(JebEvent(J.UnitChange))

        print('Done.')

    def processClass(self, javaClass):

        # if javaClass.getName() == methodName[0]:

        #     return

        for method in javaClass.getMethods():

            block = method.getBody()

            i = 0

            while i < block.size():

                stm = block.get(i)

                self.checkElement(block, stm)

                i += 1

    def checkElement(self, parent, e):

        try:

            if isinstance(e, IJavaCall):

                mmethod = e.getMethod()

                mname = mmethod.getName()

                msig = mmethod.getSignature()

                if mname == methodName[1] and methodName[0] in msig:

                    v = []

                    args = e.getArguments();

                    decstr = self.bc_decryptstring(args[0],args[1],args[2],args[3])

                    if decstr:

                        print(e)

                        print("decrypt bc->",decstr)

                        parent.replaceSubElement(e, self.cstbuilder.createString(decstr))

            for subelt in e.getSubElements():

                if isinstance(subelt, IJavaClass) or isinstance(subelt, IJavaField) or isinstance(subelt, IJavaMethod):

                    continue

                self.checkElement(e, subelt)

        except Exception,e:

            print(e)

    def read_array(self,arr):

        if arr.getType()==None:

            return None

        res = []

        arr = arr.getInitialValues()

        for i in range(len(arr)):

            res.append(arr[i].getByte())

        return res

    def bc_decryptstring(self, args1,args2,args3,args4):

        argv1= self.read_array(args1)

        argv2 = self.read_array(args2)

        argv3 = args3.getInt()

        argv4 = self.read_array(args4)

        body = {

            'method':'bc',

            'argv1':argv1,

            'argv2':argv2,

            'argv3':argv3,

            'argv4':argv4

        }

        r = Net().query("http://127.0.0.1:8080/strdec", {"body":str(body)})

        return r