---
name: wechat-android-reverse-engineering
description: "Research notes on WeChat Android reverse engineering, hooking frameworks, and message interception projects"
metadata: 
  node_type: memory
  type: reference
  originSessionId: a0bf5811-73e6-4c69-beeb-9a2867ab56bf
---

**Context**: User is interested in reverse engineering WeChat Android to hook/intercept message send/receive interfaces.

**Core Challenge**: WeChat Android has strong obfuscation (class/method names), signature verification, and version checks. Static decompilation is nearly unreadable; dynamic hooking is the current standard approach.

## Android Projects

| Project | Framework | Target | Status | Link |
|---------|-----------|--------|--------|------|
| **Hook_WeChat_FaaS** | Frida | Android WeChat cloud functions | Active (218⭐) | [GitHub](https://github.com/FourTwooo/Hook_WeChat_FaaS) |
| **frida_wechat_hook** | Frida | `receive_message` interception | Archived (Gitee) | [Gitee](https://gitee.com/zixing/frida_wechat_hook) |
| **XposedHookWeichat** | Xposed | GPS hook demo | Outdated | [GitHub](https://github.com/cansou/XposedHookWeichat) |

## PC Projects (reference architecture)

| Project | Approach | Features | Link |
|---------|----------|----------|------|
| **WeChatFerry** | DLL injection + RPC | Send/receive, groups, SQL, decrypt | [GitHub](https://github.com/forked-repositories/WeChatFerry) |
| **千寻框架** | HTTP API wrapper | Text, @mentions, emoji | [Gitee](https://gitee.com/xxxxsq/mp_-weixin2) |
| **wechat_hook** | Docker + WebSocket | WebSocket listen + HTTP send | [GitHub](https://github.com/wandaijin/wechat_hook) |
| **PyWxDump** | Protocol reverse | Message dump framework | [CSDN](https://blog.csdn.net/sinat_28461591/article/details/148504535) |

## Technical Resources

- [Hooking WeChat using Xposed — Stack Overflow](https://stackoverflow.com/questions/40375695/hooking-wechat-using-xposed-for-incoming-messages)
- [微信 smali 反编译查看撤回消息 — CSDN](https://blog.csdn.net/weixin_30338461/article/details/97364638)
- [微信安卓协议分析笔记 — CSDN](https://blog.csdn.net/qq_21051503/article/details/79746742)
- [LLMs + Frida automated WeChat RE — Wechaty](https://wechaty.js.org/2025/08/12/ai-powered-reverse-engineering-concept/)

## Recommended Approach for Android

1. **Frida dynamic hook** (no root needed for some setups)
   - `frida -U -f com.tencent.mm`
   - Hook message functions via symbol/bytecode signatures
   - Scripts need updating per WeChat version

2. **Xposed/LSPosed** (requires root)
   - More stable hooks but harder to maintain across versions
   - Reference: `findAndHookMethod` pattern

**Warning**: WeChat updates frequently break hooks. Expect high maintenance. All projects are for educational/research purposes only.