NIMClient.js

/**
适用对象：通用
作用：通过hook NIMClient获取App中的appkey
参考：
*/

var targetClass = "com.netease.nimlib.sdk.NIMClient";

function hook() {
  Java.perform(function () {

    var dexclassLoader = Java.use("dalvik.system.DexClassLoader");
    dexclassLoader.loadClass.overload('java.lang.String').implementation = function (name) {
      var result = this.loadClass(name);
      console.log(name);

      // APP自己的Application时，想要hook的类一定是加载了的，否则时机过早会出现类找不到的情况。
      if (name.indexOf("Application") != -1 && name != "android.app.Application") {
        var application = Java.use(name);
        console.log("application:" + application);
        application.onCreate.implementation = function () {
          //hookTargetClass(); //二选一均可
          var ret = this.onCreate();
          return ret;
        }
      }

      // 这里一般找不到
      if (name === targetClass) {
        console.log("got targetClass: ", targetClass);
      }
      return result;
    }


    var application = Java.use('android.app.Application');
    console.log("application:" + application);

    application.attach.overload('android.content.Context').implementation = function (context) {
      console.log("application attach called");
      var result = this.attach(context);

      hookTargetClass();

      return result;
    }

    application.onCreate.implementation = function () {
      console.log("application onCreate called");

      hookTargetClass(); //二选一均可

      var result = this.onCreate();
      return result;
    }

  });
}

function hookTargetClass() {
  var cls = Java.use(targetClass);
  if (cls) {
    console.log(cls);
    cls.init.implementation = function (context, loginInfo, sDKOptions) {
      console.log(targetClass + ".init() \n\tSDKOptions: ", sDKOptions.appKey.value, sDKOptions.sdkStorageRootPath.value);
      printStack();
      return this.init(context, loginInfo, sDKOptions);
    }
  }
}

// 打印堆栈
function printStack() {
  console.log(Java.use("android.util.Log").getStackTraceString(Java.use("java.lang.Exception").$new()));
}

setImmediate(hook());