如何从Android so中提取URL
16lz
2021-01-23
由于工作需要，研究了一下如何从Android so中提取URL。Android so实际上是一个ELF(Executable and Linking Format)格式的文件，要从中提取URL就需要首先了解ELF文件格式。URL实际上就是一个字符串，要从Android so中提取URL，实际上我们只需知道ELF文件的字符串存储在哪个区段就可以了。以下为ELF文件区块表的介绍：
| .text | where code stands, as said above. objdump -drS .process.o will show you that |
| .data | where global tables, variables, etc. stand. objdump -s -j .data .process.o will hexdump it. |
| .bss | don't look for bits of .bss in your file: there's none. That's where your uninitialized arrays and variable are, and the loader 'knows' they should be filled with zeroes ... there's no point storing more zeroes on your disk than there already are, is it? |
| .rodata | that's where your strings go, usually the things you forgot when linking and that cause your kernel not to work. objdump -s -j .rodata .process.o will hexdump it. Note that depending on the compiler, you may have more sections like this. |
| .comment & .note | just comments put there by the compiler/linker toolchain |
| .stab & .stabstr | debugging symbols & similar information. |
注：要想了解详细的ELF文件格式见http://wiki.osdev.org/ELF。此文只介绍与主题相关的知识。
从表中的粗体字可以知道.rodata区段便是ELF文件字符串的存储位置，使用objdump -s -j .rodata filename命令可以获取所有字符串信息，然后就可以提取URL了。
更多相关文章
- Android布局文件中控件的高度与宽度属性设置
- Android读取assets目录下文件数据内容
- Android工程中R.java文件的重新生成——注意资源文件的错误
- Android内核开发：系统分区与镜像文件的烧写
- 关于Android 动态加载 jar 文件
- Android系统编译―Android.mk文件的简单介绍
- android 工程中重新生成gen文件夹或R.java 文件
- [转载]Android布局文件中命名空间的解析
- Android Layout布局文件里的android:layout_height等属性不起作