支持

支持

666

牛逼了啊～

6666

赞

手机小米5，安卓7，这个io错误是啥原因，能帮忙看看么
gemini:/data/local/tmp # ./inject 22652 /data/local/tmp/libbridge.so
[main] target_pid:22652, libpath:/data/local/tmp/libbridge.so
[init_sdk_ver] ro.build.version.sdk: 24
[init_dlopen_ext_offset]: symtab offset = 5faec, count=1888, index= 23
[init_dlopen_ext_offset] symstr offset = 7836c, index = 24
[init_dlopen_ext_offset] find dlopen_ext_N: 2bd1
[+] Injecting process: 22652
[get_module_path] module_path:/system/lib/libc.so
[+] get_remote_addr: local[0xe7c13000], remote[0x0]
[+] Remote mmap address: 0x20a91
[+] Calling mmap in target process, current pc=-1780947352
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[+] Target process returned from mmap, return value=0, pc=20a90
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] peektext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[+] read data: �������������������������������
[+] local dlopen=0xe7d2cc21, dlsym=0xe7d2ccd9, dlclose=0xe7d2cd11, dlerror=0xe7d2cb71
[get_module_path] module_path:/system/bin/linker
[+] get_remote_addr: local[0xe7d2a000], remote[0xffffffff]
[get_module_path] module_path:/system/bin/linker
[+] get_remote_addr: local[0xe7d2a000], remote[0xffffffff]
[get_module_path] module_path:/system/bin/linker
[+] get_remote_addr: local[0xe7d2a000], remote[0xffffffff]
[get_module_path] module_path:/system/bin/linker
[+] get_remote_addr: local[0xe7d2a000], remote[0xffffffff]
[+] Get imports: dlopen: 0x2c20, dlsym: 0x2cd8, dlclose: 0x2d10, dlerror: 0x2b70
library path = /data/local/tmp/libbridge.so, map_base = 0x0
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] peektext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[+] android 7.0+ system, use dlopen_ext
[+] target_dlopen_ext_addr addr: 0x2bd0
[+] target_caller_addr addr: 0x2000
[+] Calling dlopen_ext in target process, current pc=133776
[+] Target process returned from dlopen_ext, return value=0, pc=2bd0
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] peektext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[+] Calling dlsym in target process, current pc=11216
[+] Target process returned from dlsym, return value=0, pc=2cd8
hook_entry_addr = 0x0
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
[ptrace_writedata] peektext failed: I/O error
[ptrace_writedata] poketext failed: I/O error
Press enter to dlclose and detach
[+] Calling dlclose in target process, current pc=11480
[+] Target process returned from dlclose, return value=0, pc=e7d2cd10

这些一般都无法直接使用的，不同手机，不同路径，很多需要自己修改的，