脱壳视频打包集android逆向手册文件验证.pdf

文件验证 签名 获取签名的标准途径 相关类汇总： android.content.Context 类： Interface to global information about an application environment. This is an abstract class whose implementation is provided by the Android system. It allows access to application-specific resources and classes, as well as up-calls for application-level operations such as launching activities, broadcasting and receiving intents, etc. android.content.pm 类（单独类，没有继承任何父类）： Con ns classes for accessing information about an application package, including information about its activities, permissions, services, signatures, and providers.Most of the information about an application package is defined by its manifest file. android.content.pm.PackageManager 类： Class for retrieving various kinds of information related to the application packages that are currently installed on the device. You can find this class through android.content.Context.getPackageManager(). android.content.pm.PackageInfo 类： verall information about the contents of a package. This corresponds to all of the information collected from AndroidManifest .xml. 获取签名涉及的类和函数： android.content.Context.getPackageManager().getPackageInfo(String packageName, int flags) 的功能为： Retrieve overall information about an application package that is installed on the system. android.content.Context.getPackageManager().getPackageInfo(String packageName, int flags).signatures ：Array of all signatures read from the package file 浅谈 android 完整性检测 日 24 八月 2014 Write By #123 常见 android 完整性检测 [1] 检测签名 [2] 校验 classes.dex [3] 检验整个 apk (这种比较少见) 验证哪方面的检测 先直接对 apk 进行签名，然后安装运行，如果运行出错那么可以推测有签名检测；如果签名没问题，那反编译再回编译安装运 行出问题，那么说明有校验 classes.dex 校验。 找到校验的地方 [1] 针对签名 : 可以搜索 getPackageInfo 、PackageManager、 Signature、signatures、签名 RSA 文件。 [2] 针对 classes.dex, 搜索 classes.dex,解压缩 ZipEntry，资源文件读取也可以注意下.(还有一些，暂时不记得了)。 [3] 算法 md5,hash。 [4] 函数、错误提示等。 搜索