A high-performance runtime parsing library for dex implemented in C++, used for lookup of obfuscated classes, methods, or properties.
DexKit Document contains some examples of API calls, and more APIs can be found in DexKitBridge.
DexKit API KDoc is a KDoc (similar to JavaDoc) generated from source code comments. However, it is recommended to use an IDE such as IDEA to view source code comments during development.
For Xposed modules, we often need to Hook specific methods, but due to obfuscation, we need to use means
to find the methods we need. However, for JVM languages, the information we can obtain at runtime is limited.
In the past, we looked up obfuscated methods by traversing all classes in the ClassLoader, filtering by
package name, the number of methods contained in the class, and method signature. This approach is not only
very inefficient, but also helpless in the case of completely obfuscated package names.
So, do we have other ways? The answer is yes. ProGuard obfuscation rules only obscure class names, method names,
and property names, but they do not modify code logic, and there are usually no major code changes during minor updates.
Therefore, we can reverse search for the information we need by parsing bytecode.
Currently, there are many libraries for parsing Dex files, but most are implemented based on dexlib2.
If the host application has a large number of Dex files, the search time can take several minutes,
which is a poor user experience. That's where DexKit comes in. It is implemented in C++ and uses
multi-threading acceleration to complete searches in a short amount of time. It has extremely high performance,
with search times in the milliseconds range and support for multi-threaded concurrent searches.
Even for large applications with 30+ Dex files, DexKit can complete a single search in about 100 milliseconds.
In addition, it is also optimized for string search scenarios, even if you want to search hundreds of strings,
it only takes no more than twice the time to complete.
- Batch search methods/classes with a specific string
- Find methods/classes using a specific string
- Method call/called search
- Direct subclass search
- Method multi-condition search
- Op sequence search (only supports standard dex instructions)
- Annotation search (currently only supports searching for values that are strings)
Note: This is the early stage of the project, and we cannot guarantee that the API will not change in the future. If you have any suggestions or opinions, please let us know.
- Click here to go to the documentation page to view more detailed tutorials.
The following are projects that have cooperated and stable use of DexKit.
| Repository | Developer |
|---|---|
| XAutoDaily | 韵の祈 |
| QAuxiliary | ACh Sulfate |
| QTool | Hicores |
| PPHelper | lliiooll |
| MIUI QOL | ChsBuffer |
| TwiFucker | Js0n、Nullptr |
| FuckCoolApk R | QQ little ice、lz差不多是条咸鱼了 |
Are you also using DexKit? Welcome to submit PR to add your repository to the list above (private repositories do not need to include web link).
LGPL-3.0 © LuckyPray
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent