/** * scan-msginfo.js — 扫描微信 MsgInfo 类的方法名 * * 用法: * frida -U -n "com.tencent.mm" -l scan-msginfo.js --no-pause */ Java.perform(function () { const targetClass = 'com.tencent.mm.storage.f9'; try { const cls = Java.use(targetClass); console.log('[+] Found class: ' + targetClass); console.log('[+] Methods with 1 String param:'); cls.class.getDeclaredMethods().forEach(function (m) { const pts = m.getParameterTypes(); if (pts.length === 1 && pts[0].getName() === 'java.lang.String') { console.log(' ' + m.getName() + '(' + pts[0].getName() + ')'); } }); console.log('[+] All fields (looking for content/talker):'); cls.class.getDeclaredFields().forEach(function (f) { const name = f.getName(); if (name.includes('content') || name.includes('talker') || name.includes('type') || name.includes('isSend') || name.includes('msgId')) { console.log(' ' + f.getType().getName() + ' ' + name); } }); } catch (e) { console.log('[-] Error: ' + e.message); } });