宜博 / pixelphone

/**
 * scan-msginfo.js — 扫描微信 MsgInfo 类的方法名
 *
 * 用法：
 *   frida -U -n "com.tencent.mm" -l scan-msginfo.js --no-pause
 */

Java.perform(function () {
  const targetClass = 'com.tencent.mm.storage.f9';
  try {
    const cls = Java.use(targetClass);
    console.log('[+] Found class: ' + targetClass);
    console.log('[+] Methods with 1 String param:');

    cls.class.getDeclaredMethods().forEach(function (m) {
      const pts = m.getParameterTypes();
      if (pts.length === 1 && pts[0].getName() === 'java.lang.String') {
        console.log('    ' + m.getName() + '(' + pts[0].getName() + ')');
      }
    });

    console.log('[+] All fields (looking for content/talker):');
    cls.class.getDeclaredFields().forEach(function (f) {
      const name = f.getName();
      if (name.includes('content') || name.includes('talker') || name.includes('type') || name.includes('isSend') || name.includes('msgId')) {
        console.log('    ' + f.getType().getName() + ' ' + name);
      }
    });
  } catch (e) {
    console.log('[-] Error: ' + e.message);
  }
});