Android#

Common information#

console.log(Java.available)

console.log(Java.androidVersion)

List classes#

Java.perform(() => {
  console.log("List classes in package com.example.app");
  Java.enumerateLoadedClasses({
    onMatch: function(className) {
      if (className.startsWith("com.example.app")) {
        console.log(className); 
      }
    },
    onComplete: function() {
      console.log("Done"); 
    }
  });
});

or, this version return a list:

Java.perform(function () {
  const classes = Java.enumerateLoadedClassesSync();
  console.log("Num of classes: ", classes.length);
  // console.log("Loaded classes: ", classes);
  // classes.forEach(function (cls) {
  //   if (cls.includes("com.example.app"))
  //     console.log(cls);
  // });
});

List methods of classes#

Replace __class__ and __method__, with globs permitted.

Java.perform(() => {
  const groups = Java.enumerateMethods('*__class__*!__method__*')
  console.log(JSON.stringify(groups, null, 2));
});

Call method#

Java.perform(() => {
  const targetedClass = Java.use("com.example.app");
  const instance = targetedClass.$new();
  const method = instance.__targetMethod__(var1, var2);
});

Nested call method

Java.perform(() => {
  const Activity = Java.use('android.app.Activity');
  const Exception = Java.use('java.lang.Exception');
  Activity.__targetMethod__.implementation = function () {
    throw Exception.$new('Oh noes!');
  };
});

Overwrite method#

Java.perform(() => {
  const targetedClass = Java.use("com.example.app");
  const instance = targetedClass.$new();
  console.log("Instance: ", instance);
  instance.__firstTargetMethod__.implementation = function () {
    console.log("__firstTargetMethod__() called");
    // Do something here
  }

  instance.__secondTargetMethod__.implementation = function () {
    console.log("__secondTargetMethod__() called");
    // Also do something with this one
  }
});