个人记录 | 随心所意，记录点滴
批量从/sdcard/files目录下载文件到电脑：adb shell ls /sdcard/files/* | tr “\n\r” " " | xargs -n1 adb pull
注意：如果permission denied，则先执行adb root，再执行adb remount,如果你不知道什么是root，那么就不要操作了。
将整个目录下的文件上传到手机：adb push . /sdcard/files
Class serviceManagerClass;
try {
serviceManagerClass = Class.forName("android.os.ServiceManager");
Method getService = serviceManagerClass.getMethod("getService",
String.class);
IBinder retbinder = (IBinder) getService.invoke(
serviceManagerClass, "statusbar");
Class statusBarClass = Class.forName(retbinder
.getInterfaceDescriptor());
Object statusBarObject = statusBarClass.getClasses()[0].getMethod(
"asInterface", IBinder.class).invoke(null,
new Object[]{retbinder});
Method clearAll = statusBarClass.getMethod("toggleRecentApps");
clearAll.setAccessible(true);
clearAll.invoke(statusBarObject);
} catch (Exception e) {
e.printStackTrace();
}
import android.content.ComponentName;
import android.content.Context;
import android.content.Intent;
import android.os.Bundle;
import android.os.Handler;
import android.os.Message;
import android.util.Log;
import java.lang.reflect.Field;
import java.lang.reflect.InvocationHandler;
import java.lang.reflect.Method;
import java.lang.reflect.Proxy;
public class HookUtil {
private Class proxyActivity;
private Context context;
public HookUtil(Context context) {
try {
this.proxyActivity = Class.forName("class");
} catch (ClassNotFoundException e) {
e.printStackTrace();
}
this.context = context;
}
public void hookSystemHandler() {
try {
Class activityThreadClass = Class.forName("android.app.ActivityThread");
Method currentActivityThreadMethod = activityThreadClass.getDeclaredMethod("currentActivityThread");
currentActivityThreadMethod.setAccessible(true);
//获取主线程对象
Object activityThread = currentActivityThreadMethod.invoke(null);
//获取mH字段
Field mH = activityThreadClass.getDeclaredField("mH");
mH.setAccessible(true);
//获取Handler
Handler handler = (Handler) mH.get(activityThread);
//获取原始的mCallBack字段
Field mCallBack = Handler.class.getDeclaredField("mCallback");
mCallBack.setAccessible(true);
//这里设置了我们自己实现了接口的CallBack对象
mCallBack.set(handler, new ActivityThreadHandlerCallback(handler));
} catch (Exception e) {
e.printStackTrace();
}
}
public void hookAms() {
//一路反射，直到拿到IActivityManager的对象
try {
Class ActivityManagerNativeClss = Class.forName("android.app.ActivityManagerNative");
Field defaultFiled = ActivityManagerNativeClss.getDeclaredField("gDefault");
defaultFiled.setAccessible(true);
Object defaultValue = defaultFiled.get(null);
//反射SingleTon
Class SingletonClass = Class.forName("android.util.Singleton");
Field mInstance = SingletonClass.getDeclaredField("mInstance");
mInstance.setAccessible(true);
//到这里已经拿到ActivityManager对象
Object iActivityManagerObject = mInstance.get(defaultValue);
//开始动态代理，用代理对象替换掉真实的ActivityManager，瞒天过海
Class IActivityManagerIntercept = Class.forName("android.app.IActivityManager");
AmsInvocationHandler handler = new AmsInvocationHandler(iActivityManagerObject);
Object proxy = Proxy.newProxyInstance(Thread.currentThread().getContextClassLoader(), new Class[]{IActivityManagerIntercept}, handler);
//现在替换掉这个对象
mInstance.set(defaultValue, proxy);
} catch (Exception e) {
e.printStackTrace();
}
}
private class ActivityThreadHandlerCallback implements Handler.Callback {
private Handler handler;
private ActivityThreadHandlerCallback(Handler handler) {
this.handler = handler;
}
@Override
public boolean handleMessage(Message msg) {
Log.i("HookAmsUtil", "handleMessage");
//替换之前的Intent
if (msg.what == 100) {
Log.i("HookAmsUtil", "lauchActivity");
handleLauchActivity(msg);
}
handler.handleMessage(msg);
return true; }
private void handleLauchActivity(Message msg) {
Object obj = msg.obj;//ActivityClientRecord
try {
Field intentField = obj.getClass().getDeclaredField("intent");
intentField.setAccessible(true);
Intent proxyInent = (Intent) intentField.get(obj);
Intent realIntent = proxyInent.getParcelableExtra("oldIntent");
if (realIntent != null) {
proxyInent.setComponent(realIntent.getComponent());
}
} catch (Exception e) {
Log.i("HookAmsUtil", "lauchActivity falied");
}
}
}
public class AmsInvocationHandler implements InvocationHandler {
private Object iActivityManagerObject;
public AmsInvocationHandler(Object iActivityManagerObject) {
this.iActivityManagerObject = iActivityManagerObject;
}
@Override
public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
Log.i("HookUtil", method.getName());
if ("startActivity".contains(method.getName())) {
Log.e("HookUtil", "Activity已经开始启动");
//换掉
Intent intent = null;
int index = 0;
for (int i = 0; i < args.length; i++) {
Object arg = args[i];
if (arg instanceof Intent) {
//说明找到了startActivity的Intent参数
intent = (Intent) args[i];
//这个意图是不能被启动的，因为Acitivity没有在清单文件中注册
index = i;
if (intent != null) {
Bundle extras = intent.getExtras();
if (extras != null && extras.keySet() != null) {
for (String key : extras.keySet()) {
Log.d("HookUtil", "intent.extras.key=" + key + ",value=" + extras.get(key));
}
}
Log.d("HookUtil", extras + "");
}
}
}
//伪造一个代理的Intent，代理Intent启动的是proxyActivity
if (context != null && proxyActivity != null) {
Intent proxyIntent = new Intent();
ComponentName componentName = new ComponentName(context, proxyActivity);
proxyIntent.setComponent(componentName);
proxyIntent.putExtra("oldIntent", intent);
args[index] = proxyIntent;
}
}
return method.invoke(iActivityManagerObject, args);
}
}
} 在Application中的onCreate函数中插桩
学习RX的原因各有不同，但是目的都一样，就是学会使用RX。想要学会使用RX，最好理解Rx的编程思想。
官方网站：http://reactivex.io/ 官方对RX的解释：ReactiveX is a library for composing asynchronous and event-based programs by using observable sequences.
RxJava文档的中文翻译 https://mcxiaoke.gitbooks.io/rxdocs
比较精华的文章 《给Android开发者的RxJava详解》 by:扔物线 《深入浅出RxJava》 by:大头鬼 《谜之RxJava》 by:Gemini 《RxJava之旅》 by:Chuckiefan 《给初学者的RxJava2.0教程》系列 by:Season_zlc
RX官方解释为响应式编程。而Chuckiefan指出理解响应式编程首先要养成一切皆数据流的编程思维、理解异步编程和观察者模式，并将响应式编程与面向过程编程和面向对象编程并列。可见，如果不理解其编程思想，很难熟练运用RX。
Season_zlc的水管理论通俗易懂，建议认真阅读。
查阅catalina.out日志，发现以下信息，分析为网络爬虫携带的请求头不标准导致解析错误。
Mar 29, 2017 11:58:18 AM org.apache.coyote.http11.AbstractHttp11Processor process
INFO: Error parsing HTTP request header 解决方案： 在server.xml中,将所有的Connector都添加以下参数：
maxHttpHeaderSize="81920" 别忘了重启tomcat哦。
结果： 目前运行良好。