{"id":570,"date":"2026-01-21T15:10:52","date_gmt":"2026-01-21T07:10:52","guid":{"rendered":"https:\/\/noobxiaomeng.top\/?p=570"},"modified":"2026-01-21T15:10:52","modified_gmt":"2026-01-21T07:10:52","slug":"debuggerlog","status":"publish","type":"post","link":"https:\/\/noobxiaomeng.top\/index.php\/2026\/01\/21\/debuggerlog\/","title":{"rendered":"\u52a8\u6001\u8c03\u8bd5\u4e0eLog\u63d2\u6869"},"content":{"rendered":"

\u524d\u8a00<\/h4>\n

\u5728\u6211\u4e4b\u524d\u5237CTF\u9898\u7684\u65f6\u5019\uff0c\u66fe\u9047\u5230\u8fc7\u8c03\u8bd5so\u6587\u4ef6\u7684\u9898\uff0c\u73b0\u5728\u770b\u6765\u5176\u4e2d\u7684\u4e00\u4e9b\u6709\u5173JEB\u52a8\u6001\u8c03\u8bd5\u7684\u77e5\u8bc6\u5728\u8fd9\u8282\u6559\u7a0b\u4e4b\u4e2d\u8fd8\u662f\u7528\u5f97\u5230\u7684\uff0c\u76f8\u5173\u94fe\u63a5\u6307\u8def\uff1a[SWPU 2019]easyapp\u2014\u2014Android\u306e\u521d\u4f53\u9a8c \u2013 Xm's Blog<\/a><\/p>\n

\u672c\u6559\u7a0b\u4f7f\u7528\u7684jeb\u9700\u8981java\u73af\u5883\u7684\uff0c\u60f3\u8d77\u66fe\u7ecf\u5199\u8fc7\u6709\u5173Java\u73af\u5883\u4e0eJEB\u7684\u914d\u7f6e\u7684\u6559\u7a0b\uff0c\u5f85\u4f1a\u76f4\u63a5cv\u5230\u4e0b\u9762<\/p>\n

\u6559\u7a0b\u5730\u5740\uff1a\u300a\u5b89\u5353\u9006\u5411\u8fd9\u6863\u4e8b\u300b\u4e94\u30011000-7=\uff1f&\u52a8\u6001\u8c03\u8bd5&Log\u63d2\u6869 - \u543e\u7231\u7834\u89e3 - 52pojie.cn<\/a><\/p>\n

\u73af\u5883\u914d\u7f6e<\/h4>\n

\u53bb52\u8bba\u575b\u4e0a\u641c\u4e86\u4e2a\u6559\u7a0b\uff0c\u4e0d\u77e5\u9053\u884c\u4e0d\u884c\uff0c\u5148\u8bd5\u8bd5\u770b\u5427<\/p>\n

JEB\u52a8\u6001\u8c03\u8bd5Smali-\u771f\u673a\/\u6a21\u62df\u5668\uff08\u8be6\u7ec6\uff0c\u65b0\u624b\u5fc5\u770b\uff09 - \u300e\u79fb\u52a8\u5b89\u5168\u533a\u300f - \u543e\u7231\u7834\u89e3 - LCG - LSG |\u5b89\u5353\u7834\u89e3|\u75c5\u6bd2\u5206\u6790|www.52pojie.cn<\/a><\/p>\n

\u5728\u8fd9\u4e4b\u524d\u5148\u53bb\u914d\u7f6eJAVA\u73af\u5883java \u73af\u5883\u914d\u7f6e(\u8be6\u7ec6\u6559\u7a0b)_java\u73af\u5883\u914d\u7f6e-CSDN\u535a\u5ba2<\/a><\/p>\n

JAVA\u73af\u5883\u914d\u7f6e<\/h5>\n
\u5b89\u88c5jdk<\/h6>\n

\u5148\u53bb\u5b89\u88c5jdkJava \u4e0b\u8f7d |Oracle \u4e2d\u56fd<\/a><\/p>\n

\u8fd9\u91cc\u6211\u6302\u4e86\u68af\u5b50\uff0c\u4e0d\u77e5\u9053\u8fd9\u4e2a\u4e2d\u56fd\u7ad9\u70b9\u9700\u4e0d\u9700\u8981\u6302<\/p>\n

\"\"<\/div><\/p>\n

\u8fdb\u5165\u5b98\u7f51\u4e0b\u8f7dx64\u5b89\u88c5\u7a0b\u5e8f\uff0c\u4e0b\u8f7d\u597d\u4e4b\u540e\u521b\u5efa\u5e94\u8be5\u6587\u4ef6\u5939\u53cc\u51fb\u8fdb\u884c\u5b89\u88c5<\/p>\n

\"\"<\/div><\/p>\n

\u5b89\u88c5\u5b8c\u6210\u4e4b\u540e\u914d\u7f6e\u73af\u5883\u53d8\u91cf<\/p>\n

\"\"<\/div><\/p>\n

\u65b0\u5efa

\"\"<\/div><\/p>\n

\u53d8\u91cf\u503c\u4e3ajdk\u5b89\u88c5\u7684\u6587\u4ef6\u5939\uff0c\u518d\u53bb\u8bbe\u7f6ePath\u53d8\u91cf<\/p>\n

\"\"<\/div><\/p>\n

\u5c06%Java_Home%\\bin;%Java_Home%\\jre\\bin;<\/code>\u653e\u5230\u53d8\u91cf\u503c\u6700\u524d\u9762\uff0c\u70b9\u51fb\u786e\u8ba4\u4fdd\u5b58<\/p>\n

\"\"<\/div><\/p>\n

\u8fd9\u6837\u5c31\u914d\u7f6e\u597d\u4e86\uff0c\u7ec8\u7aef\u53ef\u4ee5\u770b\u89c1\u7684<\/p>\n

\"\"<\/div><\/p>\n
\u5b89\u88c5JEB<\/h6>\n

\"\"<\/div><\/p>\n

\u5728\u6b64\u94fe\u63a5\u4e0b\u8f7d\uff1a\u767e\u5ea6\u7f51\u76d8 \u8bf7\u8f93\u5165\u63d0\u53d6\u7801 (baidu.com)<\/a><\/p>\n

\u89e3\u538b\u4e4b\u540e\u8ddf\u7740\u6559\u7a0b\u5c06fix\u6587\u4ef6\u5939\u4e0b\u7684jeb.jar\u590d\u5236\u5e76\u66ff\u6362\u5230jeb\\bin\\app<\/code>\u6587\u4ef6\u5939\u4e0b<\/p>\n

\u53cc\u51fbjeb_wincon.bat\u6253\u5f00\u5e76\u6fc0\u6d3b<\/p>\n

\u2026\u2026\u2026\u2026\u2026\u2026<\/p>\n

JEB\u7684\u4f7f\u7528<\/h4>\n

\u5728\u6559\u7a0bdemo\u7684\u7b2c\u56db\u5173\uff0c\u6211\u4eec\u70b9\u51fb\u9a8c\u8bc1\u4f1a\u8fd4\u56de\u4e00\u4e2a\u5bc6\u94a5\u9519\u8bef\u7684\u7ed3\u679c
\n

\"\"<\/div>
\n\u6240\u4ee5\u6211\u4eec\u53ef\u4ee5\u6839\u636e\u8fd4\u56de\u7684\u7ed3\u679c\u53bb\u641c\u7d22\u5b57\u7b26\u4e32\u6240\u5728\u7684\u4ee3\u7801\u884c<\/p>\n

\u6211\u4eec\u4f7f\u7528jeb\u6253\u5f00\u6559\u7a0b\u7a97\u53e3<\/p>\n

\u5728\u6700\u4e0b\u9762\u4e00\u680f\u53ef\u4ee5\u5feb\u901f\u641c\u7d22\u5b57\u7b26\u4e32\u7b49\u5185\u5bb9
\n

\"\"<\/div><\/p>\n

\u76f4\u63a5\u53ef\u4ee5\u5b9a\u4f4d\u5230\u6240\u5728\u7684\u7c7b\u91cc\u9762<\/p>\n

package com.zj.wuaipojie.ui;\n\nimport android.content.Context;\nimport android.os.Bundle;\nimport android.view.View;\nimport android.widget.Button;\nimport android.widget.EditText;\nimport android.widget.Toast;\nimport androidx.appcompat.app.AppCompatActivity;\nimport com.zj.wuaipojie.Encode;\nimport com.zj.wuaipojie.util.Base64Utils;\nimport com.zj.wuaipojie.util.SPUtils;\nimport kotlin.Metadata;\nimport kotlin.jvm.internal.Intrinsics;\nimport kotlin.text.Charsets;\nimport kotlin.text.StringsKt;\n\n@Metadata(d1 = {"\\u0000$\\n\\u0002\\u0018\\u0002\\n\\u0002\\u0018\\u0002\\n\\u0002\\b\\u0002\\n\\u0002\\u0010\\u000B\\n\\u0000\\n\\u0002\\u0010\\u000E\\n\\u0000\\n\\u0002\\u0010\\u0002\\n\\u0000\\n\\u0002\\u0018\\u0002\\n\\u0000\\u0018\\u00002\\u00020\\u0001B\\u0005\u00a2\\u0006\\u0002\\u0010\\u0002J\\u000E\\u0010\\u0003\\u001A\\u00020\\u00042\\u0006\\u0010\\u0005\\u001A\\u00020\\u0006J\\u0012\\u0010\\u0007\\u001A\\u00020\\b2\\b\\u0010\\t\\u001A\\u0004\\u0018\\u00010\\nH\\u0014\u00a8\\u0006\\u000B"}, d2 = {"Lcom\/zj\/wuaipojie\/ui\/ChallengeFourth;", "Landroidx\/appcompat\/app\/AppCompatActivity;", "()V", "check", "", "str", "", "onCreate", "", "savedInstanceState", "Landroid\/os\/Bundle;", "app_release"}, k = 1, mv = {1, 7, 1}, xi = 0x30)\npublic final class ChallengeFourth extends AppCompatActivity {\n    public final boolean check(String s) {\n        int v = 0;\n        Integer integer0 = null;\n        if(!StringsKt.startsWith$default(s, "flag{", false, 2, null)) {\n            return false;\n        }\n\n        if(!StringsKt.endsWith$default(s, "}", false, 2, null)) {\n            return false;\n        }\n\n        String s1 = s.substring(5, s.length() - 1);\n        Intrinsics.checkNotNullExpressionValue(s1, "this as java.lang.String\u2026ing(startIndex, endIndex)");\n        String s2 = SPUtils.INSTANCE.getString(((Context)this), "id", "");\n        if(s2 != null) {\n            integer0 = (int)s2.length();\n        }\n\n        int v1 = 1000;\n        Intrinsics.checkNotNull(integer0);\n        int v2 = (int)integer0;\n        if(v2 >= 0) {\n            while(true) {\n                v1 += -7;\n                if(v == v2) {\n                    break;\n                }\n\n                ++v;\n            }\n        }\n\n        byte[] arr_b = Encode.encode(s2 + v1).getBytes(Charsets.UTF_8);\n        Intrinsics.checkNotNullExpressionValue(arr_b, "this as java.lang.String).getBytes(charset)");\n        return Intrinsics.areEqual(s1, Base64Utils.INSTANCE.encodeToString(arr_b));\n    }\n\n    @Override  \/\/ androidx.fragment.app.FragmentActivity\n    protected void onCreate(Bundle bundle0) {\n        super.onCreate(bundle0);\n        this.setContentView(0x7F0B001E);  \/\/ layout:activity_challenge_fourth\n        ((Button)this.findViewById(0x7F08006B)).setOnClickListener((View view0) -> {\n            if(this.check(((EditText)this.findViewById(0x7F0800AC)).getText().toString())) {  \/\/ id:edit_check\n                Context context0 = (Context)this;\n                Toast.makeText(context0, "\u606d\u559c\u4f60\uff0c\u5bc6\u94a5\u6b63\u786e!", 1).show();\n                SPUtils.INSTANCE.saveInt(context0, "level", 3);\n                return;\n            }\n\n            Toast.makeText(((Context)this), "\u5bc6\u94a5\u9519\u8bef\u54e6\uff0c\u518d\u60f3\u60f3\uff01", 1).show();\n        });\n    }\n\n    \/\/ Detected as a lambda impl.\n    private static final void onCreate$lambda-0(ChallengeFourth challengeFourth0, EditText editText0, View view0) {\n        if(challengeFourth0.check(editText0.getText().toString())) {\n            Context context0 = (Context)challengeFourth0;\n            Toast.makeText(context0, "\u606d\u559c\u4f60\uff0c\u5bc6\u94a5\u6b63\u786e!", 1).show();\n            SPUtils.INSTANCE.saveInt(context0, "level", 3);\n            return;\n        }\n\n        Toast.makeText(((Context)challengeFourth0), "\u5bc6\u94a5\u9519\u8bef\u54e6\uff0c\u518d\u60f3\u60f3\uff01", 1).show();\n    }\n}\n<\/code><\/pre>\n
\u5206\u6790\u4ee3\u7801\u4e4b\u540e\u6211\u4eec\u76f4\u63a5\u5728\u52a0\u5bc6\u503c\u8fd4\u56de\u7684\u5730\u65b9\u4e0b\u4e00\u4e2a\u65ad\u70b9
\n
\"\"<\/div><\/p>\n
\u63a5\u4e0b\u6765\u5c31\u662fdebug\u4e86\uff0c\u6211\u4eec\u5728cmd\u91cc\u9762\u8f93\u5165\u4e0b\u9762\u8fd9\u4e00\u4e32\u5c31\u53ef\u4ee5\u4e86
\nadb shell am start -D -n com.zj.wuaipojie\/.ui.MainActivity<\/code>
\ndb shell am start -D -n
\nadb shell am start -D -n \u5305\u540d\/\u7c7b\u540d
\nam start -n \u8868\u793a\u542f\u52a8\u4e00\u4e2aactivity
\nam start -D \u8868\u793a\u5c06\u5e94\u7528\u8bbe\u7f6e\u4e3a\u53ef\u8c03\u8bd5\u6a21\u5f0f<\/p>\n
\u5f00\u59cb\u8c03\u8bd5
\n
\"\"<\/div><\/p>\n
\u70b9\u51fb\u4e0b\u9762\u7684\u9644\u4e0a\u4e4b\u540e\u5c31\u5f00\u59cb\u8c03\u8bd5\u4e86<\/p>\n
\u7136\u540e\u56de\u5230\u6a21\u62df\u5668or\u771f\u673a\u4e2d\uff0c\u80fd\u770b\u89c1\u8f6f\u4ef6\u5df2\u7ecf\u5f00\u59cb\u8fd0\u884c\uff0c\u6211\u4eec\u8fdb\u5165\u7b2c\u56db\u5173\uff0c\u7136\u540e\u968f\u4fbf\u8f93\u70b9\u4ec0\u4e48\uff0c\u70b9\u51fb\u9a8c\u8bc1\uff0c\u5c31\u80fd\u770b\u89c1\u7a0b\u5e8f\u5728\u6211\u4eec\u7684\u65ad\u70b9\u5904\u65ad\u4e0b\u6765\u4e86
\n
\"\"<\/div>
\n\u6211\u4eec\u65ad\u70b9\u65ad\u5728
\n000000E0  invoke-virtual      Base64Utils->encodeToString([B)String, v1, v0<\/code>
\n\u8fd9\u4e00\u884c<\/p>\n
F6\u8fdb\u5165\u65b9\u6cd5
\nF7\u8df3\u8fc7\u65b9\u6cd5
\nF8\u4ece\u65b9\u6cd5\u4e2d\u8df3\u51fa\u6765
\nR\u8fd0\u884c\u5230\u5149\u6807\u5904<\/p>\n
\u56e0\u6b64\u53ef\u4ee5F6\u6b65\u8fdbencodeToString
\n
\"\"<\/div><\/p>\n
\u8fd9\u6837\u6211\u4eec\u5c31\u80fd\u770b\u89c1encodeToString\u65b9\u6cd5\u4e86<\/p>\n
\u8fd9\u65f6\u6211\u4eec\u8d70\u5230\u8be5\u65b9\u6cd5\u8fd4\u56de\u503c\u7684\u5730\u65b9
\n
\"\"<\/div><\/p>\n
\u80fd\u770b\u89c1\u5de6\u4fa7\u7684\u53d8\u91cf\u503c\u7a97\u53e3\u5df2\u7ecf\u663e\u793a\u51fa\u4f60\u6240\u5f97\u5230\u7684\u5bc6\u94a5\u4e86<\/p>\n
\"\"<\/div><\/p>\n
\u56de\u5230\u7a0b\u5e8f\u4e2d\u8f93\u5165\u4e4b\u540e\u4fbf\u53ef\u5f97\u5230\u5bc6\u94a5\u6b63\u786e\u7684\u8fd4\u56de\u7ed3\u679c<\/p>\n
Log\u63d2\u6869<\/h4>\n
\u6559\u7a0b\u4e2d\u7ed9\u4e86\u5927\u4f6c\u5199\u7684dex\u6587\u4ef6\uff0c\u6211\u4eec\u53ef\u4ee5\u5c06\u6587\u4ef6\u6253\u5305\u8fdbapk\u5f53\u4e2d\u8fdb\u884c\u5b89\u88c5<\/p>\n
\"\"<\/div><\/p>\n
\u5c06\u5176\u547d\u540d\u4e3aclasses2.dex\u6dfb\u52a0\u8fdb\u53bb<\/p>\n
\u7136\u540e\u8fdb\u5165classes.dex\u91cc\u9762\u5b9a\u4f4d\u5230\u4e4b\u524d\u627e\u5230\u7684encodeString
\n
\"\"<\/div><\/p>\n
\u8fd9\u91cc\u80fd\u770b\u89c1\u8fd4\u56de\u503c\u662f\u7ed9\u5230v0\u7684<\/p>\n
\u6240\u4ee5\u6211\u4eec\u5c06\u4e0b\u9762\u8fd9\u4e00\u884c\u63d2\u5230move-result-object v0<\/code>\u884c\u7684\u540e\u9762
\ninvoke-static {v0}, Lcom\/mtools\/LogUtils;->v(Ljava\/lang\/Object;)V<\/code><\/p>\n
\u518d\u53bb\u7b97\u6cd5\u52a9\u624b\u91cc\u9762\u628aLog\u6355\u83b7\u6253\u5f00
\n
\"\"<\/div><\/p>\n
\u540e\u9762\u6211\u4eec\u67e5\u770b\u65e5\u5fd7\u5c31\u80fd\u770b\u89c1\u8fd4\u56de\u7684\u7ed3\u679c\u5566<\/p>\n","protected":false},"excerpt":{"rendered":"
\u524d\u8a00 \u5728\u6211\u4e4b\u524d\u5237CTF\u9898\u7684\u65f6\u5019\uff0c\u66fe\u9047\u5230\u8fc7\u8c03\u8bd5so\u6587\u4ef6\u7684\u9898\uff0c\u73b0\u5728\u770b\u6765\u5176\u4e2d\u7684\u4e00\u4e9b\u6709\u5173JEB\u52a8\u6001\u8c03\u8bd5\u7684\u77e5\u8bc6\u5728\u8fd9\u8282\u6559\u7a0b […]<\/p>\n","protected":false},"author":1,"featured_media":519,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-570","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android"],"_links":{"self":[{"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/posts\/570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/comments?post=570"}],"version-history":[{"count":1,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/posts\/570\/revisions"}],"predecessor-version":[{"id":590,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/posts\/570\/revisions\/590"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/media\/519"}],"wp:attachment":[{"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/media?parent=570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/categories?post=570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/noobxiaomeng.top\/index.php\/wp-json\/wp\/v2\/tags?post=570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}