{"action":"created","issue":{"url":"https://api.github.com/repos/frida/frida/issues/150","repository_url":"https://api.github.com/repos/frida/frida","labels_url":"https://api.github.com/repos/frida/frida/issues/150/labels{/name}","comments_url":"https://api.github.com/repos/frida/frida/issues/150/comments","events_url":"https://api.github.com/repos/frida/frida/issues/150/events","html_url":"https://github.com/frida/frida/issues/150","id":159361067,"node_id":"MDU6SXNzdWUxNTkzNjEwNjc=","number":150,"title":"Cannot hook classes after dynamic code loading","user":{"login":"enovella","id":14809754,"node_id":"MDQ6VXNlcjE0ODA5NzU0","avatar_url":"https://avatars3.githubusercontent.com/u/14809754?v=4","gravatar_id":"","url":"https://api.github.com/users/enovella","html_url":"https://github.com/enovella","followers_url":"https://api.github.com/users/enovella/followers","following_url":"https://api.github.com/users/enovella/following{/other_user}","gists_url":"https://api.github.com/users/enovella/gists{/gist_id}","starred_url":"https://api.github.com/users/enovella/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/enovella/subscriptions","organizations_url":"https://api.github.com/users/enovella/orgs","repos_url":"https://api.github.com/users/enovella/repos","events_url":"https://api.github.com/users/enovella/events{/privacy}","received_events_url":"https://api.github.com/users/enovella/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-06-09T09:11:40Z","updated_at":"2018-07-20T02:44:16Z","closed_at":"2017-01-19T00:22:50Z","author_association":"NONE","body":"Hi, I am struggling with an Android packer that makes use of dynamic code loading (class encryption). Resulting in  deobfuscated classes in an (o)DEX file in the filesystem when loading them. I have dumped this specific file that seems to have plaintext strings and reflection undone. What I want is to tell Frida that load these deobfuscated classes instead the obfuscated ones in the static APK which are obfuscated and use reflection. These classes are located in the following path and the line code for loading it is:\n\n```\nJava.openClassFile(\"/data/app/deobf.odex\").load();\nJava.openClassFile(\"/data/app/deobf.zip\").load();\n```\n\nApparently, Frida does not complain about loading but does not intercept any call. I am confident that these calls are made and Frida could intercept them. I have also tried to locate the DEX/ZIP within the default paths used by Frida.\n\n Any suggestion?\n\nFrida version: 7.1.4 & 7.2.0 tested\nPlatform : Debian8   x64\nDalvik Executable at /data/app with permissions and ZIP (classes.dex) and odex format \n"},"comment":{"url":"https://api.github.com/repos/frida/frida/issues/comments/406472632","html_url":"https://github.com/frida/frida/issues/150#issuecomment-406472632","issue_url":"https://api.github.com/repos/frida/frida/issues/150","id":406472632,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNjQ3MjYzMg==","user":{"login":"pharazone","id":11215634,"node_id":"MDQ6VXNlcjExMjE1NjM0","avatar_url":"https://avatars1.githubusercontent.com/u/11215634?v=4","gravatar_id":"","url":"https://api.github.com/users/pharazone","html_url":"https://github.com/pharazone","followers_url":"https://api.github.com/users/pharazone/followers","following_url":"https://api.github.com/users/pharazone/following{/other_user}","gists_url":"https://api.github.com/users/pharazone/gists{/gist_id}","starred_url":"https://api.github.com/users/pharazone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pharazone/subscriptions","organizations_url":"https://api.github.com/users/pharazone/orgs","repos_url":"https://api.github.com/users/pharazone/repos","events_url":"https://api.github.com/users/pharazone/events{/privacy}","received_events_url":"https://api.github.com/users/pharazone/received_events","type":"User","site_admin":false},"created_at":"2018-07-20T02:44:16Z","updated_at":"2018-07-20T02:44:16Z","author_association":"NONE","body":"The same problem……how to reload the classes and the methods that dymanic loaded by the Packer."}}
{"actor":{"display_login":"pharazone"}}