Make it work for other process about xhook HOT 3 CLOSED

Hi，

Thank you for your interest in this project. We have no plans to let it work for other process. The team I serve only develops some common Android Apps.

You can search for "android elf inject" on google or github. Also, as far as I know, doing so definitely requires root privileges or exploits system vulnerabilities.

from xhook.

Thank you for your reply. I went through your source code and my understanding of it as as follows: the idea is to replace the relocation offsets (readelf -r) referring the target functions on the runtime. That is, find the offsets in the shared libraries, add it with the memory start location of the shared library and replace the value of the locations with the memory address of new function. Please, correct me if I am wrong.

Currently, I am planing to write a kernel module for Android that will do the same for the other processes (as it is only possible to see the real memory locations from kernel space). I would be very glad if you give your opinion on this?

from xhook.

Your understanding is correct.

If you have root permission, I think the robust way is to replace the Android linker. Try to execute the hooking operation before executing DT_INIT and DT_INIT_ARRAY.

from xhook.