├── ic_launcher-web.png
├── libs
    ├── substrate-api.jar
    └── android-support-v4.jar
├── res
    ├── drawable-hdpi
    │   └── ic_launcher.png
    ├── drawable-mdpi
    │   └── ic_launcher.png
    ├── drawable-xhdpi
    │   └── ic_launcher.png
    ├── drawable-xxhdpi
    │   └── ic_launcher.png
    ├── values-sw600dp
    │   └── dimens.xml
    ├── values
    │   ├── dimens.xml
    │   ├── strings.xml
    │   └── styles.xml
    ├── menu
    │   └── main.xml
    ├── values-sw720dp-land
    │   └── dimens.xml
    ├── values-v11
    │   └── styles.xml
    ├── values-v14
    │   └── styles.xml
    └── layout
    │   └── activity_main.xml
├── bin
    └── jarlist.cache
├── .classpath
├── project.properties
├── proguard-project.txt
├── .project
├── AndroidManifest.xml
├── README.md
└── src
    └── org
        └── phoneos
            └── cydiahook
                ├── Main.java
                └── MainActivity.java


/ic_launcher-web.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/ic_launcher-web.png


--------------------------------------------------------------------------------
/libs/substrate-api.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/libs/substrate-api.jar


--------------------------------------------------------------------------------
/libs/android-support-v4.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/libs/android-support-v4.jar


--------------------------------------------------------------------------------
/res/drawable-hdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/res/drawable-hdpi/ic_launcher.png


--------------------------------------------------------------------------------
/res/drawable-mdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/res/drawable-mdpi/ic_launcher.png


--------------------------------------------------------------------------------
/res/drawable-xhdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/res/drawable-xhdpi/ic_launcher.png


--------------------------------------------------------------------------------
/res/drawable-xxhdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zencodex/cydia-android-hook/HEAD/res/drawable-xxhdpi/ic_launcher.png


--------------------------------------------------------------------------------
/bin/jarlist.cache:
--------------------------------------------------------------------------------
1 | # cache for current jar dependency. DO NOT EDIT.
2 | # format is <lastModified> <length> <SHA-1> <path>
3 | # Encoding is UTF-8
4 | 


--------------------------------------------------------------------------------
/res/values-sw600dp/dimens.xml:
--------------------------------------------------------------------------------
1 | <resources>
2 | 
3 |     <!--
4 |          Customize dimensions originally defined in res/values/dimens.xml (such as
5 |          screen margins) for sw600dp devices (e.g. 7" tablets) here.
6 |     -->
7 | 
8 | </resources>
9 | 


--------------------------------------------------------------------------------
/res/values/dimens.xml:
--------------------------------------------------------------------------------
1 | <resources>
2 | 
3 |     <!-- Default screen margins, per the Android Design guidelines. -->
4 |     <dimen name="activity_horizontal_margin">16dp</dimen>
5 |     <dimen name="activity_vertical_margin">16dp</dimen>
6 | 
7 | </resources>
8 | 


--------------------------------------------------------------------------------
/res/values/strings.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="utf-8"?>
2 | <resources>
3 | 
4 |     <string name="app_name">CydiaHook</string>
5 |     <string name="action_settings">Settings</string>
6 |     <string name="hello_world">Hello world!</string>
7 | 
8 | </resources>
9 | 


--------------------------------------------------------------------------------
/res/menu/main.xml:
--------------------------------------------------------------------------------
 1 | <menu xmlns:android="http://schemas.android.com/apk/res/android" >
 2 | 
 3 |     <item
 4 |         android:id="@+id/action_settings"
 5 |         android:orderInCategory="100"
 6 |         android:showAsAction="never"
 7 |         android:title="@string/action_settings"/>
 8 | 
 9 | </menu>
10 | 


--------------------------------------------------------------------------------
/res/values-sw720dp-land/dimens.xml:
--------------------------------------------------------------------------------
 1 | <resources>
 2 | 
 3 |     <!--
 4 |          Customize dimensions originally defined in res/values/dimens.xml (such as
 5 |          screen margins) for sw720dp devices (e.g. 10" tablets) in landscape here.
 6 |     -->
 7 |     <dimen name="activity_horizontal_margin">128dp</dimen>
 8 | 
 9 | </resources>
10 | 


--------------------------------------------------------------------------------
/res/values-v11/styles.xml:
--------------------------------------------------------------------------------
 1 | <resources>
 2 | 
 3 |     <!--
 4 |         Base application theme for API 11+. This theme completely replaces
 5 |         AppBaseTheme from res/values/styles.xml on API 11+ devices.
 6 |     -->
 7 |     <style name="AppBaseTheme" parent="android:Theme.Holo.Light">
 8 |         <!-- API 11 theme customizations can go here. -->
 9 |     </style>
10 | 
11 | </resources>
12 | 


--------------------------------------------------------------------------------
/res/values-v14/styles.xml:
--------------------------------------------------------------------------------
 1 | <resources>
 2 | 
 3 |     <!--
 4 |         Base application theme for API 14+. This theme completely replaces
 5 |         AppBaseTheme from BOTH res/values/styles.xml and
 6 |         res/values-v11/styles.xml on API 14+ devices.
 7 |     -->
 8 |     <style name="AppBaseTheme" parent="android:Theme.Holo.Light.DarkActionBar">
 9 |         <!-- API 14 theme customizations can go here. -->
10 |     </style>
11 | 
12 | </resources>
13 | 


--------------------------------------------------------------------------------
/.classpath:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <classpath>
 3 | 	<classpathentry kind="src" path="src"/>
 4 | 	<classpathentry kind="src" path="gen"/>
 5 | 	<classpathentry kind="con" path="com.android.ide.eclipse.adt.ANDROID_FRAMEWORK"/>
 6 | 	<classpathentry exported="true" kind="con" path="com.android.ide.eclipse.adt.LIBRARIES"/>
 7 | 	<classpathentry exported="true" kind="con" path="com.android.ide.eclipse.adt.DEPENDENCIES"/>
 8 | 	<classpathentry kind="lib" path="libs/substrate-api.jar"/>
 9 | 	<classpathentry kind="output" path="bin/classes"/>
10 | </classpath>
11 | 


--------------------------------------------------------------------------------
/project.properties:
--------------------------------------------------------------------------------
 1 | # This file is automatically generated by Android Tools.
 2 | # Do not modify this file -- YOUR CHANGES WILL BE ERASED!
 3 | #
 4 | # This file must be checked in Version Control Systems.
 5 | #
 6 | # To customize properties used by the Ant build system edit
 7 | # "ant.properties", and override values to adapt the script to your
 8 | # project structure.
 9 | #
10 | # To enable ProGuard to shrink and obfuscate your code, uncomment this (available properties: sdk.dir, user.home):
11 | #proguard.config=${sdk.dir}/tools/proguard/proguard-android.txt:proguard-project.txt
12 | 
13 | # Project target.
14 | target=android-18
15 | 


--------------------------------------------------------------------------------
/res/values/styles.xml:
--------------------------------------------------------------------------------
 1 | <resources>
 2 | 
 3 |     <!--
 4 |         Base application theme, dependent on API level. This theme is replaced
 5 |         by AppBaseTheme from res/values-vXX/styles.xml on newer devices.
 6 |     -->
 7 |     <style name="AppBaseTheme" parent="android:Theme.Light">
 8 |         <!--
 9 |             Theme customizations available in newer API levels can go in
10 |             res/values-vXX/styles.xml, while customizations related to
11 |             backward-compatibility can go here.
12 |         -->
13 |     </style>
14 | 
15 |     <!-- Application theme. -->
16 |     <style name="AppTheme" parent="AppBaseTheme">
17 |         <!-- All customizations that are NOT specific to a particular API-level can go here. -->
18 |     </style>
19 | 
20 | </resources>
21 | 


--------------------------------------------------------------------------------
/proguard-project.txt:
--------------------------------------------------------------------------------
 1 | # To enable ProGuard in your project, edit project.properties
 2 | # to define the proguard.config property as described in that file.
 3 | #
 4 | # Add project specific ProGuard rules here.
 5 | # By default, the flags in this file are appended to flags specified
 6 | # in ${sdk.dir}/tools/proguard/proguard-android.txt
 7 | # You can edit the include path and order by changing the ProGuard
 8 | # include property in project.properties.
 9 | #
10 | # For more details, see
11 | #   http://developer.android.com/guide/developing/tools/proguard.html
12 | 
13 | # Add any project specific keep options here:
14 | 
15 | # If your project uses WebView with JS, uncomment the following
16 | # and specify the fully qualified class name to the JavaScript interface
17 | # class:
18 | #-keepclassmembers class fqcn.of.javascript.interface.for.webview {
19 | #   public *;
20 | #}
21 | 


--------------------------------------------------------------------------------
/.project:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <projectDescription>
 3 | 	<name>CydiaHook</name>
 4 | 	<comment></comment>
 5 | 	<projects>
 6 | 	</projects>
 7 | 	<buildSpec>
 8 | 		<buildCommand>
 9 | 			<name>com.android.ide.eclipse.adt.ResourceManagerBuilder</name>
10 | 			<arguments>
11 | 			</arguments>
12 | 		</buildCommand>
13 | 		<buildCommand>
14 | 			<name>com.android.ide.eclipse.adt.PreCompilerBuilder</name>
15 | 			<arguments>
16 | 			</arguments>
17 | 		</buildCommand>
18 | 		<buildCommand>
19 | 			<name>org.eclipse.jdt.core.javabuilder</name>
20 | 			<arguments>
21 | 			</arguments>
22 | 		</buildCommand>
23 | 		<buildCommand>
24 | 			<name>com.android.ide.eclipse.adt.ApkBuilder</name>
25 | 			<arguments>
26 | 			</arguments>
27 | 		</buildCommand>
28 | 	</buildSpec>
29 | 	<natures>
30 | 		<nature>com.android.ide.eclipse.adt.AndroidNature</nature>
31 | 		<nature>org.eclipse.jdt.core.javanature</nature>
32 | 	</natures>
33 | </projectDescription>
34 | 


--------------------------------------------------------------------------------
/AndroidManifest.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="utf-8"?>
 2 | <manifest xmlns:android="http://schemas.android.com/apk/res/android"
 3 |     package="org.phoneos.cydiahook"
 4 |     android:versionCode="1"
 5 |     android:versionName="1.0" >
 6 | 
 7 |     <uses-sdk
 8 |         android:minSdkVersion="8"
 9 |         android:targetSdkVersion="18" />
10 | 
11 |     <application
12 |         android:allowBackup="true"
13 |         android:icon="@drawable/ic_launcher"
14 |         android:label="@string/app_name"
15 |         android:theme="@style/AppTheme" >
16 |         
17 |         <meta-data android:name="com.saurik.substrate.main" android:value=".Main"/>
18 | 
19 |         <activity
20 |             android:name=".MainActivity"
21 |             android:label="@string/app_name" >
22 |             <intent-filter>
23 |                 <action android:name="android.intent.action.MAIN" />
24 |                 <category android:name="android.intent.category.LAUNCHER" />
25 |             </intent-filter>
26 |         </activity>
27 |     </application>
28 |     
29 |     <uses-permission android:name="cydia.permission.SUBSTRATE"/>
30 |     
31 | </manifest>
32 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | ### CydiaHook
 2 | ==========
 3 | 
 4 | 利用Cydia Substrate SDK 开发，可以HOOK java层或NATIVE层 API接口。
 5 | 
 6 | ### 本代码功能
 7 | 写代码的初衷是因为有个app，需要保存数据到SD卡上，并且app里面有判断SD挂载的状态。没有SD卡，会造成程序逻辑有问题，很多功能无法正常使用，而我的手机没有装SD卡。
 8 | 
 9 | 另外这种HOOK方式也有助于调试程序，不必因为修改ROM底层，而引起手机变砖，简便好用，目前Cydia Substrate在某些手机中可能会有不稳定的情况，我测试的机型是ZTE U969，还找不到相关ROM。
10 | 
11 | - HOOK android.os.Environment.getExternalStorageState()，强制返回，已挂在状态。
12 | - 执行mount bind 挂载可以读写目录到 SD卡的路径，每个终端方案商的挂载点都可能不同，请根据自己的情况，修改成正确的挂载点路径。
13 | - 可以根据自身需要，修改挂载实现函数，可以HOOK framework中的任何API。在Main.java里，比如IMEI，GPS模拟等等。
14 | 
15 | ### 准备工作
16 | 
17 | - ROOT过的手机一部，没有ROOT的，请自行搜索方法。
18 | - Eclipse 上安装 Android Substrate SDK，参考：<br>
19 | http://www.cydiasubstrate.com/id/73e45fe5-4525-4de7-ac14-6016652cc1b8/
20 | - 手机端去Google Play 下载安装 Cydia Substrate
21 | - Eclipse 导入本代码，编译后安装到手机。
22 | - 手机上运行Substrate，界面上点击“Link Substrate Files”，再点击 “Restart System（Soft）”
23 | - 通过CydiaHook，查看挂载路径和状态。
24 | 
25 | 参考官方的入门教程 VioletExample：<br>
26 | http://www.cydiasubstrate.com/id/20cf4700-6379-4a14-9bc2-853fde8cc9d1/
27 | 
28 | =======
29 | cydia-android-hook
30 | ==================
31 | 
32 | Cydia Substrate demo, hook getExternalStorageState, always return MOUNTED status.
33 | 


--------------------------------------------------------------------------------
/res/layout/activity_main.xml:
--------------------------------------------------------------------------------
 1 | <RelativeLayout xmlns:android="http://schemas.android.com/apk/res/android"
 2 |     xmlns:tools="http://schemas.android.com/tools"
 3 |     android:layout_width="match_parent"
 4 |     android:layout_height="match_parent"
 5 |     android:paddingBottom="@dimen/activity_vertical_margin"
 6 |     android:paddingLeft="@dimen/activity_horizontal_margin"
 7 |     android:paddingRight="@dimen/activity_horizontal_margin"
 8 |     android:paddingTop="@dimen/activity_vertical_margin"
 9 |     tools:context=".MainActivity" >
10 | 
11 |     <TextView
12 |         android:id="@+id/textView1"
13 |         android:layout_width="wrap_content"
14 |         android:layout_height="wrap_content"
15 |         android:text="" />
16 | 
17 |     <TextView
18 |         android:id="@+id/textView2"
19 |         android:layout_width="wrap_content"
20 |         android:layout_height="wrap_content"
21 |         android:layout_alignLeft="@+id/textView1"
22 |         android:layout_alignParentTop="true"
23 |         android:layout_marginTop="80dp"
24 |         android:text="TextView" />
25 | 
26 |     <Button
27 |         android:id="@+id/button1"
28 |         android:layout_width="wrap_content"
29 |         android:layout_height="wrap_content"
30 |         android:layout_alignParentTop="true"
31 |         android:layout_centerHorizontal="true"
32 |         android:layout_marginTop="160dp"
33 |         android:text="Mount SD card" />
34 | 
35 | </RelativeLayout>


--------------------------------------------------------------------------------
/src/org/phoneos/cydiahook/Main.java:
--------------------------------------------------------------------------------
 1 | package org.phoneos.cydiahook;
 2 | 
 3 | import java.lang.reflect.Method;
 4 | 
 5 | import android.os.Environment;
 6 | import com.saurik.substrate.MS;
 7 | 
 8 | public class Main {
 9 | 
10 | 	static void initialize() {
11 | 
12 | 		// getExternalStorageState hook to return true, will cause boot issue
13 | 		// so hook it after boot
14 | 		//if (!MainActivity.isManualTrigger) return;
15 | 
16 | //	      MS.hookClassLoad("android.content.res.Resources",
17 | //	            new MS.ClassLoadHook() {
18 | //	               public void classLoaded(Class<?> resources) {
19 | //	 
20 | //	                  Method getColor;
21 | //	                  try {
22 | //	                     getColor = resources.getMethod("getColor",
23 | //	                        Integer.TYPE);
24 | //	                  } catch (NoSuchMethodException e) {
25 | //	                     getColor = null;
26 | //	                  }
27 | //	 
28 | //	                  if (getColor != null) {
29 | //	                	  MS.hookMethod(resources, getColor, new MS.MethodAlteration<Resources, Integer>() {
30 | //	                		    public Integer invoked(Resources resources, Object... args)
31 | //	                		        throws Throwable
32 | //	                		    {
33 | //	                		        return invoke(resources, args) & ~0x0000ff00 | 0x00ff0000;
34 | //	                		    }
35 | //	                		});
36 | //	                    }
37 | //	               }
38 | //	            });
39 | 
40 | 		   MS.hookClassLoad("android.os.Environment",
41 | 				   new MS.ClassLoadHook() {
42 | 
43 | 					@Override
44 | 					public void classLoaded(Class<?> arg0) {
45 | 						Method getExternalStorageState; 
46 | 						try {
47 | 							getExternalStorageState = arg0.getMethod("getExternalStorageState", new Class<?>[0]);
48 | 						} catch (NoSuchMethodException e) {
49 | 		                     getExternalStorageState = null;
50 | 		                }
51 | 
52 | 						if (getExternalStorageState != null) {
53 | 					        final MS.MethodPointer old = new MS.MethodPointer();
54 | 
55 | 					        MS.hookMethod(arg0, getExternalStorageState, new MS.MethodHook() {
56 | 					            @Override
57 | 								public Object invoked(Object obj, Object... args)
58 | 					                throws Throwable
59 | 					            {
60 | 					                return Environment.MEDIA_MOUNTED;
61 | 					            }
62 | 					        }, old);
63 | 						}
64 | 					}
65 | 				});
66 | 	   }
67 | }


--------------------------------------------------------------------------------
/src/org/phoneos/cydiahook/MainActivity.java:
--------------------------------------------------------------------------------
  1 | package org.phoneos.cydiahook;
  2 | 
  3 | import java.io.DataOutputStream;
  4 | import java.io.InputStream;
  5 | import org.phoneos.cydiahook.R;
  6 | import android.os.Bundle;
  7 | import android.os.Environment;
  8 | import android.app.Activity;
  9 | import android.util.Log;
 10 | import android.view.Menu;
 11 | import android.view.View;
 12 | import android.view.View.OnClickListener;
 13 | import android.widget.Button;
 14 | import android.widget.TextView;
 15 | import android.widget.Toast;
 16 | 
 17 | public class MainActivity extends Activity {
 18 | 	private static final String TAG = "cydiahook.MainActivity";
 19 | 	public static boolean isManualTrigger = false;
 20 | 	
 21 | 	@Override
 22 | 	protected void onCreate(Bundle savedInstanceState) {
 23 | 		super.onCreate(savedInstanceState);
 24 | 		setContentView(R.layout.activity_main);
 25 | 
 26 | 		updateSDMountedStatus();
 27 | 		
 28 | 		Button btnMountSd = (Button)this.findViewById(R.id.button1);
 29 | 		btnMountSd.setOnClickListener(new OnClickListener() {
 30 | 
 31 | 			@Override
 32 | 			public void onClick(View arg0) {
 33 | 				isManualTrigger = true;
 34 | 
 35 | 				if (!isMounted()) {
 36 | 					mountAFakeSD();
 37 | 				}
 38 | 				else {
 39 | 					Toast toast = Toast.makeText(MainActivity.this, "SD card has been mounted", Toast.LENGTH_SHORT);
 40 | 					toast.show();
 41 | 				}
 42 | 
 43 | 				updateSDMountedStatus();
 44 | 			}
 45 | 		});
 46 | 	}
 47 | 
 48 | 	private void updateSDMountedStatus()
 49 | 	{
 50 | 		String sdpath = Environment.getExternalStorageDirectory().getAbsolutePath();
 51 | 		Log.v(TAG, sdpath);
 52 | 
 53 | 		TextView v = (TextView) this.findViewById(R.id.textView1);
 54 | 		v.setText(sdpath);
 55 | 
 56 | 		String mountState = "unmounted";
 57 | 		if (Environment.MEDIA_MOUNTED.equals(Environment.getExternalStorageState())) {
 58 | 			mountState = "SD card has been mounted";
 59 | 		}
 60 | 
 61 | 		v = (TextView) this.findViewById(R.id.textView2);
 62 | 		v.setText(mountState);
 63 | 		
 64 | 		Log.v(TAG, mountState);
 65 | 	}
 66 | 
 67 |     private boolean isMounted()
 68 |     {
 69 |     	boolean result = false;
 70 |     	try {
 71 |             // parse the uid given a package name (which should be visible in ps)
 72 |             Process p = Runtime.getRuntime().exec("mount");
 73 |             InputStream reader = p.getInputStream();
 74 |             Thread.sleep(200);
 75 |             byte[] buff = new byte[10000];
 76 |             
 77 |             reader.read(buff, 0, buff.length);
 78 |             String str = new String(buff);
 79 |             if (str.indexOf("/dev/block/vold/179:8 /storage/sdcard0 vfat rw") > 0) {
 80 |             	result = true;
 81 |             }
 82 |     	}
 83 |     	catch (Exception e) {}
 84 | 
 85 |         return result;
 86 |     }
 87 |     
 88 | 	private void mountAFakeSD()
 89 | 	{
 90 | 	   //mount bind sd card
 91 | 	   try
 92 | 	   {
 93 |            Process process = Runtime.getRuntime().exec("su");
 94 |            DataOutputStream os = new DataOutputStream(process.getOutputStream());
 95 |            os.writeBytes("mount -o bind /storage/sdcard1/extsd /storage/sdcard0\n");
 96 |            os.writeBytes("exit\n");
 97 |            os.flush();
 98 | 	   }
 99 | 	   catch (Exception e)
100 | 	   {
101 | 	           Log.e(TAG, e.getMessage());
102 | 	   }
103 | 	}
104 | 
105 | 	@Override
106 | 	public boolean onCreateOptionsMenu(Menu menu) {
107 | 		// Inflate the menu; this adds items to the action bar if it is present.
108 | 		getMenuInflater().inflate(R.menu.main, menu);
109 | 		return true;
110 | 	}
111 | 
112 | }
113 | 


--------------------------------------------------------------------------------