rk700 / changephoneinfo

A VirtualHook plugin for changing Android device information

ChangePhoneInfo

Introduction

This is a hook plugin used by VirtualHook. It hooks some Java APIs that are used for getting device info, and all the values are hard-codeded as a demo.

Currently the following methods are hooked:

• android.bluetooth.BluetoothAdapter.getAddress()
• android.telephony.gsm.GsmCellLocation.getCid()
• android.telephony.gsm.GsmCellLocation.getLac()
• android.location.Location.getLatitude()
• android.location.Location.getLongitude()
• android.telephony.TelephonyManager.getDeviceId()
• android.telephony.TelephonyManager.getLine1Number()
• android.telephony.TelephonyManager.getSimOperator()
• android.telephony.TelephonyManager.getSimSerialNumber()
• android.telephony.TelephonyManager.getSubscriberId()
• android.net.wifi.WifiInfo.getBSSID()
• android.net.wifi.WifiInfo.getSSID()
• android.net.wifi.WifiInfo.getIpAddress()
• android.net.wifi.WifiInfo.getMacAddress()

And these system property values are changed as well by hooking native function __system_property_get():

• ro.serialno
• ro.product.brand
• ro.product.device
• ro.build.tags
• ro.product.model
• ro.product.manufacturer

Finally, Build.SERIAL is changed by simple Java reflection.

Usage

Build and push the apk to /sdcard/. Then add the hook plugin and start applications in VirtualHook.

changephoneinfo's Issues

hook后还是读到真实数据？

请问品牌,型号信息hook为何不生效？

请问品牌，型号信息hook为何不生效？还是需要在java中重新hook？
static Prop props [] = {
{"ro.serialno", "1234567890"},
{"ro.product.brand", "foo"},
{"ro.product.device", "bar"},
{"ro.build.tags", "release-keys"},
{"ro.product.model", "foo"},
{"ro.product.manufacturer", "bar"}
};

new_property_get no modified value

Tested on Samsung device 6.0.1